@moda-ai/cli 1.25.0 → 1.27.0

package/dist/cli.js

@@ -1,11 +1,14 @@
 #!/usr/bin/env node
 import {
+  DEFAULT_POLL_INTERVAL_MS,
+  DEFAULT_WAIT_TIMEOUT_MS,
   buildDoctorReport,
+  fetchLatestRun,
   runDoctorCommand,
   runPromptsCommand,
   runSkillsCommand,
   runStatusCommand
-} from "./cli-kqvjt12y.js";
+} from "./cli-cjqzrp9k.js";
 import {
   ApiError,
   HARNESS_REPORT_APPROVAL_PATH,
@@ -26,7 +29,7 @@ import {
   summarizeHarness,
   terminalStyles,
   validateHarnessReport
-} from "./cli-jntzpem2.js";
+} from "./cli-g931ntph.js";
 import {
   authFetch,
   clearAuthSession,
@@ -34,7 +37,7 @@ import {
   loadAuthSession,
   login,
   revokeCliSessionToken
-} from "./cli-8s69sg7f.js";
+} from "./cli-9xw5bq1j.js";
 import {
   AGENT_ERROR_CODES,
   CliAccessError,
@@ -79,7 +82,7 @@ import {
   validateConfig,
   wasOutputCancelled,
   writeSecretJsonFile
-} from "./cli-vc7zddj1.js";
+} from "./cli-59yacef3.js";
 
 // src/cli.ts
 import { z as z2 } from "zod";
@@ -92,7 +95,11 @@ var OverviewSchema = z.object({
 });
 var ClustersSchema = z.object({
   parent_id: z.string().optional(),
-  time_range: z.enum(["all", "1h", "3d", "7d", "24h", "30d", "90d"]).default("all").optional()
+  time_range: z.enum(["all", "1h", "3d", "7d", "24h", "30d", "90d"]).default("all").optional(),
+  search: z.string().min(2).max(200).optional(),
+  node_id: z.string().min(1).max(512).optional(),
+  mode: z.enum(["fuzzy", "semantic", "hybrid"]).optional(),
+  limit: z.number().min(1).max(50).optional()
 });
 var ClusterConversationsSchema = z.object({
   node_id: z.string(),
@@ -114,7 +121,14 @@ var ConversationsSchema = z.object({
 var WorldStateSchema = z.object({
   conversation_id: z.string(),
   summary_only: boolFlag(),
-  event_limit: z.number().min(1).max(5000).default(2000).optional()
+  event_limit: z.number().min(1).max(5000).default(2000).optional(),
+  snapshot: boolFlag(),
+  msg_index: z.number().min(0).max(1e5).optional(),
+  block_index: z.number().min(0).max(1e5).optional(),
+  segment_index: z.number().min(0).max(65535).optional(),
+  replay: boolFlag(),
+  format: z.enum(["frames", "fold-inputs"]).optional(),
+  message_count: z.number().min(1).max(1e6).optional()
 });
 var ContextSchema = z.object({
   conversation_id: z.string(),
@@ -135,6 +149,73 @@ var ProblemsSchema = z.object({
   days_back: z.number().min(1).max(90).default(30).optional(),
   limit: z.number().min(1).max(25).default(25).optional()
 });
+var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
+var PROBLEM_FAMILIES = [
+  "tool_failure",
+  "emotion",
+  "laziness",
+  "hallucination",
+  "prm_dip"
+];
+var PROBLEM_DOORS = ["rubric_match", "local_causal_chain"];
+var ProblemSchema = z.object({
+  id: z.string().min(1),
+  evidence: boolFlag(),
+  reports: boolFlag(),
+  conversations: boolFlag(),
+  feedback: boolFlag(),
+  limit: z.number().min(1).max(50).optional(),
+  cursor: z.string().optional(),
+  family: z.enum(PROBLEM_FAMILIES).optional(),
+  door: z.enum(PROBLEM_DOORS).optional()
+});
+var PROBLEM_FEEDBACK_ACTIONS = [
+  "mark_fixed",
+  "dismiss",
+  "flag_attribution",
+  "rename"
+];
+var ProblemFeedbackSchema = z.object({
+  id: z.string().min(1),
+  action: z.enum(PROBLEM_FEEDBACK_ACTIONS),
+  reason: z.string().max(2000).optional(),
+  attribution_id: z.string().max(64).optional(),
+  new_name: z.string().max(255).optional(),
+  actor: z.string().max(255).optional()
+});
+var EMOTION_FAMILIES = [
+  "frustration",
+  "sadness",
+  "confusion",
+  "anxiety",
+  "trust",
+  "positive"
+];
+var EmotionsSchema = z.object({
+  days_back: z.number().min(1).max(90).default(7).optional(),
+  limit: z.number().min(1).max(20).default(10).optional(),
+  offset: z.number().min(0).max(1e4).optional(),
+  family: z.enum(EMOTION_FAMILIES).optional()
+});
+var HallucinationsSchema = z.object({
+  days_back: z.number().min(1).max(90).default(7).optional(),
+  limit: z.number().min(1).max(20).default(10).optional(),
+  offset: z.number().min(0).max(1e4).optional(),
+  conversation_id: z.string().max(200).optional(),
+  kind: z.enum(["contradicted", "verified"]).optional()
+});
+var StepScoresSchema = z.object({
+  conversation_id: z.string().min(1)
+});
+var TAIL_SIGNALS = ["conversations", "emotions", "all"];
+var TailSchema = z.object({
+  interval: z.number().min(5).max(3600).default(15).optional(),
+  signal: z.enum(TAIL_SIGNALS).default("conversations").optional(),
+  once: boolFlag(),
+  limit: z.number().min(1).max(50).default(20).optional(),
+  max_events: z.number().min(1).max(1e5).optional(),
+  full_scan: boolFlag()
+});
 var ToolFailureDetailSchema = z.object({
   tool_name: z.string(),
   subtype: z.string().optional(),
@@ -158,7 +239,7 @@ var SearchSchema = z.object({
   user_id: z.string().optional(),
   time_range: z.enum(TIME_RANGES).default("all").optional(),
   limit: z.number().min(1).max(100).default(20).optional(),
-  include_tool_io: z.boolean().default(false).optional()
+  include_tool_io: boolFlag()
 });
 var FEEDBACK_CATEGORIES = [
   "bad_cluster_label",
@@ -281,6 +362,724 @@ function embeddedWindowSize(conversation) {
   return Math.min(center - from, to - center);
 }
 
+// src/fix.ts
+import {
+  closeSync,
+  constants as fsConstants,
+  existsSync,
+  fstatSync,
+  ftruncateSync,
+  lstatSync,
+  mkdirSync,
+  openSync,
+  readFileSync,
+  realpathSync,
+  writeSync
+} from "node:fs";
+import { dirname, isAbsolute, join, resolve, sep } from "node:path";
+var O_NOFOLLOW = fsConstants.O_NOFOLLOW ?? 0;
+var ADVANCE_TIMEOUT_MS = 300000;
+var STEP_DELAY_MS = 2000;
+var MAX_WAIT_TIMEOUT_MS = 24 * 60 * 60 * 1000;
+var MAX_POLL_INTERVAL_MS = 120000;
+var PER_CASE_FINDINGS_CAP = 50;
+var ADVANCING_STATUSES = new Set(["DRAFT", "SCOPING", "PROPOSING", "PROPOSED", "GATING"]);
+var FIX_USAGE = [
+  "Usage: moda fixes [--status=S] [--limit=N] [--cursor=TOKEN]",
+  "       moda fix <fix_id> [--packet] [--wait]",
+  "       moda fix start <problem_id> [--type=auto|prompt] [--wait] [--timeout=ms]",
+  "       moda fix verify <fix_id> [--prompt-file=PATH] [--no-wait] [--timeout=ms]",
+  "       moda fix checkout <fix_id>",
+  "       moda fix submit <fix_id> --pr | --local-ref=<branch>",
+  "       moda fix dismiss <fix_id> --reason=TEXT"
+].join(`
+`);
+async function runFixesCommand(context) {
+  validateConfig();
+  const profileOptions = profileOptionsFor(context);
+  const tenantId = requireTenantId(context.flags, profileOptions);
+  const query = new URLSearchParams;
+  if (context.flags.status)
+    query.set("status", context.flags.status);
+  if (context.flags.limit) {
+    const limit = Number(context.flags.limit);
+    if (!Number.isInteger(limit) || limit < 1 || limit > 100) {
+      throw new CliInputError(`--limit must be an integer between 1 and 100 (got ${context.flags.limit})`, FIX_USAGE);
+    }
+    query.set("limit", String(limit));
+  }
+  if (context.flags.cursor)
+    query.set("cursor", context.flags.cursor);
+  const suffix = query.toString() ? `?${query.toString()}` : "";
+  const data = await callControlAPI(`${fixesBase(tenantId)}${suffix}`, { method: "GET" }, profileOptions);
+  const fixes = data.fixes ?? [];
+  if (context.outputMode === "human") {
+    if (fixes.length === 0) {
+      process.stderr.write("No fixes in the queue. Draft one with `moda fix start <problem_id> --wait`.\n");
+    } else {
+      for (const fix of fixes) {
+        process.stderr.write(`MODA-FIX-${fix.shortRef}	${fix.status}	${fix.fixType}	${fix.id}	${fix.statusReason ?? ""}
+`);
+      }
+    }
+  }
+  context.output.writeData(data, {
+    summary: {
+      text: `${fixes.length} fix(es)${context.flags.status ? ` with status ${context.flags.status}` : ""} in the ranked queue.`,
+      confidence: "high"
+    },
+    nextCommands: fixes.slice(0, 1).map((fix) => ({
+      command: `moda fix ${fix.id}`,
+      purpose: "Open the top-ranked fix (status, gate result, next actions).",
+      mutability: "read",
+      requires_approval: false
+    }))
+  });
+  return EXIT_OK;
+}
+async function runFixCommand(context) {
+  validateConfig();
+  const profileOptions = profileOptionsFor(context);
+  const tenantId = requireTenantId(context.flags, profileOptions);
+  const sub = context.positional;
+  if (!sub) {
+    throw new CliInputError("A fix id or subcommand is required", FIX_USAGE);
+  }
+  switch (sub) {
+    case "start":
+      return runFixStart(context, profileOptions, tenantId);
+    case "verify":
+      return runFixVerify(context, profileOptions, tenantId);
+    case "checkout":
+      return runFixCheckout(context, profileOptions, tenantId);
+    case "submit":
+      return runFixSubmit(context, profileOptions, tenantId);
+    case "dismiss":
+      return runFixDismiss(context, profileOptions, tenantId);
+    default:
+      return runFixDetail(context, profileOptions, tenantId, sub);
+  }
+}
+async function runFixStart(context, profileOptions, tenantId) {
+  const problemId = (context.positionals[1] || context.flags["problem-id"] || "").trim();
+  if (!problemId) {
+    throw new CliInputError("<problem_id> is required", "Usage: moda fix start <problem_id> [--type=auto|prompt] [--wait] [--timeout=ms] [--poll-interval=ms]");
+  }
+  const fixType = context.flags.type;
+  if (fixType !== undefined && fixType !== "auto" && fixType !== "prompt") {
+    throw new CliInputError(`--type must be 'auto' or 'prompt'; got '${fixType}'`);
+  }
+  const created = await callControlAPI(`/tenants/${encodeURIComponent(tenantId)}/problems/${encodeURIComponent(problemId)}/fixes`, { method: "POST", body: JSON.stringify(fixType ? { fixType } : {}) }, profileOptions, { timeoutMs: 120000, retries: 0 });
+  if (context.flags.wait !== "true") {
+    if (context.outputMode === "human") {
+      process.stderr.write(`Fix MODA-FIX-${created.shortRef} (${created.id}) drafted for problem ${created.problemId} — status ${created.status}.
+`);
+    }
+    context.output.writeData(created, {
+      summary: {
+        text: `Fix MODA-FIX-${created.shortRef} drafted (status ${created.status}). Re-run with --wait to drive the pipeline.`,
+        confidence: "high"
+      },
+      nextCommands: [
+        {
+          command: `moda fix start ${problemId} --wait`,
+          purpose: "Drive the pipeline (scope → propose → gate) to a resting status.",
+          mutability: "write",
+          requires_approval: false
+        },
+        {
+          command: `moda fix ${created.id}`,
+          purpose: "Inspect the fix status and gate result.",
+          mutability: "read",
+          requires_approval: false
+        }
+      ]
+    });
+    return EXIT_OK;
+  }
+  const timeoutMs = parsePositiveInt(context.flags.timeout, DEFAULT_WAIT_TIMEOUT_MS, MAX_WAIT_TIMEOUT_MS);
+  const pollIntervalMs = parsePositiveInt(context.flags["poll-interval"], DEFAULT_POLL_INTERVAL_MS, MAX_POLL_INTERVAL_MS);
+  const fix = await driveAdvance({
+    tenantId,
+    fixId: created.id,
+    initial: created,
+    timeoutMs,
+    pollIntervalMs,
+    profileOptions,
+    context
+  });
+  const packet = await fetchPacketFailSoft(tenantId, created.id, profileOptions);
+  if (context.outputMode === "human") {
+    process.stderr.write(`
+Fix MODA-FIX-${fix.shortRef} rested at ${fix.status}${fix.statusReason ? ` — ${fix.statusReason}` : ""}
+`);
+  }
+  context.output.writeData({ fix, ...packet ? { packet } : {} }, {
+    summary: {
+      text: `Fix MODA-FIX-${fix.shortRef} reached ${fix.status}${fix.statusReason ? ` (${fix.statusReason})` : ""}.`,
+      confidence: "high"
+    },
+    findings: gateFindings(fix),
+    nextCommands: nextCommandsFor(fix)
+  });
+  return EXIT_OK;
+}
+async function runFixVerify(context, profileOptions, tenantId) {
+  const usage = "Usage: moda fix verify <fix_id> [--prompt-file=PATH] [--no-wait] [--timeout=ms] [--poll-interval=ms]";
+  const fixId = (context.positionals[1] || context.flags["fix-id"] || "").trim();
+  if (!fixId) {
+    throw new CliInputError("<fix_id> is required", usage);
+  }
+  let candidateContent;
+  const promptFile = context.flags["prompt-file"];
+  if (promptFile) {
+    const absPath = isAbsolute(promptFile) ? promptFile : resolve(process.cwd(), promptFile);
+    if (!existsSync(absPath)) {
+      throw new CliInputError(`--prompt-file not found: ${promptFile}`, usage);
+    }
+    candidateContent = readFileSync(absPath, "utf8");
+    if (candidateContent.trim().length < 40) {
+      throw new CliInputError("--prompt-file content is shorter than 40 characters — refusing to gate a truncated candidate");
+    }
+  }
+  const enqueue = await callControlAPI(`${fixesBase(tenantId)}/${encodeURIComponent(fixId)}/verify`, { method: "POST", body: JSON.stringify(candidateContent ? { candidateContent } : {}) }, profileOptions, { timeoutMs: 120000, retries: 0 });
+  const noWait = context.flags.wait === "false" || context.flags["no-wait"] === "true";
+  if (noWait) {
+    context.output.writeData({ fixId, gateRunId: enqueue.gateRunId, status: "GATING" }, {
+      summary: {
+        text: `Gate + control runs enqueued (gate run ${enqueue.gateRunId}). Resume with \`moda fix ${fixId} --wait\`.`,
+        confidence: "high"
+      },
+      nextCommands: [
+        {
+          command: `moda fix ${fixId} --wait`,
+          purpose: "Drive the advance-on-poll gate to a verdict.",
+          mutability: "write",
+          requires_approval: false
+        }
+      ]
+    });
+    return EXIT_OK;
+  }
+  const timeoutMs = parsePositiveInt(context.flags.timeout, DEFAULT_WAIT_TIMEOUT_MS, MAX_WAIT_TIMEOUT_MS);
+  const pollIntervalMs = parsePositiveInt(context.flags["poll-interval"], DEFAULT_POLL_INTERVAL_MS, MAX_POLL_INTERVAL_MS);
+  const deadline = Date.now() + timeoutMs;
+  let fix = await advanceFix(tenantId, fixId, profileOptions);
+  while (fix.status === "GATING") {
+    if (Date.now() >= deadline) {
+      throw new Error(`Timed out after ${timeoutMs}ms waiting for gate run ${enqueue.gateRunId} to finish`);
+    }
+    if (context.outputMode === "human") {
+      process.stderr.write(`Waiting for gate run (${fix.statusReason || "running"})...
+`);
+    }
+    await sleep(pollIntervalMs);
+    fix = await advanceFix(tenantId, fixId, profileOptions);
+  }
+  const warnings = [];
+  if (fix.gateRunId && fix.gateRunId !== enqueue.gateRunId) {
+    warnings.push(`The reported verdict is for gate run ${fix.gateRunId}, not the one this command enqueued (${enqueue.gateRunId}) — a concurrent verify superseded it.`);
+  }
+  const gateResult = fix.gateResult ?? null;
+  const verdict = gateResult?.verdict ?? "";
+  let exitCode;
+  let envelopeStatus;
+  if (fix.status === "VERIFIED" && verdict === "pass") {
+    exitCode = EXIT_OK;
+    envelopeStatus = "success";
+  } else if (fix.status === "GATE_FAILED" || verdict === "fail") {
+    exitCode = EXIT_ERROR;
+    envelopeStatus = "error";
+  } else {
+    exitCode = EXIT_DEGRADED;
+    envelopeStatus = "degraded";
+  }
+  let cases = [];
+  if (exitCode === EXIT_ERROR && fix.replaySetId) {
+    try {
+      const payload = await fetchLatestRun(tenantId, String(fix.replaySetId), enqueue.gateRunId, profileOptions);
+      if (payload.run?.runId === enqueue.gateRunId) {
+        cases = payload.cases;
+      }
+    } catch {
+      warnings.push("Could not load per-case gate results — see the replay run in the dashboard.");
+    }
+  }
+  if (context.outputMode === "human") {
+    printHumanGateVerdict(fix, enqueue.gateRunId, gateResult, cases);
+  }
+  const findings = gateFindings(fix);
+  for (const row of cases.slice(0, PER_CASE_FINDINGS_CAP)) {
+    const baseline = passLabel(row.prodPass);
+    const candidate = passLabel(row.proposedPass);
+    findings.push({
+      id: `case:${row.caseId}`,
+      title: `${row.caseId}: baseline=${baseline} candidate=${candidate}`,
+      status: candidate,
+      severity: baseline === "pass" && candidate === "fail" ? "error" : candidate === "fail" ? "warning" : "info"
+    });
+  }
+  context.output.writeData({
+    fixId: fix.id,
+    shortRef: fix.shortRef,
+    status: fix.status,
+    gateRunId: enqueue.gateRunId,
+    verdict: verdict || null,
+    gateResult,
+    ...cases.length > 0 ? { cases } : {}
+  }, {
+    status: envelopeStatus,
+    summary: {
+      text: verdict === "pass" ? `Gate passed on the frozen holdout: ${gateResult?.reason ?? ""}`.trim() : verdict === "fail" ? `Gate failed: ${gateResult?.reason ?? fix.statusReason ?? "candidate did not beat baseline"}` : `Gate degraded (${fix.status}): ${gateResult?.reason ?? fix.statusReason ?? "no verdict"}`,
+      confidence: "high"
+    },
+    findings,
+    warnings,
+    nextCommands: nextCommandsFor(fix)
+  });
+  return exitCode;
+}
+async function runFixCheckout(context, profileOptions, tenantId) {
+  const fixId = (context.positionals[1] || context.flags["fix-id"] || "").trim();
+  if (!fixId) {
+    throw new CliInputError("<fix_id> is required", "Usage: moda fix checkout <fix_id>");
+  }
+  const fix = await getFix(tenantId, fixId, profileOptions);
+  if (!fix.targetSourcePath) {
+    throw new CliInputError(`Fix MODA-FIX-${fix.shortRef} has no target source path — ${fix.fixType} fixes are packet-only. Run \`moda fix ${fixId} --packet\` for the diagnosis packet.`);
+  }
+  const candidateVersionId = fix.candidateRef?.promptVersionId ?? "";
+  if (!candidateVersionId) {
+    throw new CliInputError(`Fix MODA-FIX-${fix.shortRef} has no registered candidate version yet (status ${fix.status}). Run \`moda fix start ${fix.problemId} --wait\` to propose one, or edit the target locally and gate it with \`moda fix verify ${fixId} --prompt-file=<path>\`.`);
+  }
+  if (!fix.promptId) {
+    throw new CliInputError(`Fix MODA-FIX-${fix.shortRef} has no routed prompt — the candidate content cannot be resolved.`);
+  }
+  const prompt = await callControlAPI(`/prompts/${encodeURIComponent(String(fix.promptId))}`, { method: "GET" }, profileOptions);
+  const version = (prompt.versions ?? []).find((row) => row.id === candidateVersionId);
+  if (!version || typeof version.content !== "string" || !version.content) {
+    throw new Error(`Candidate prompt version ${candidateVersionId} not found in the registry`);
+  }
+  const relPath = safeTargetSourcePath(String(fix.targetSourcePath));
+  const absPath = join(process.cwd(), relPath);
+  assertRealpathContained(absPath, relPath);
+  const writeStatus = writeContainedFile(absPath, relPath, version.content);
+  const branch = `moda/fix/${String(fix.shortRef).toLowerCase()}`;
+  const magicWord = `Fixes MODA-FIX-${fix.shortRef}`;
+  if (context.outputMode === "human") {
+    process.stderr.write([
+      `${writeStatus} ${relPath} (candidate ${candidateVersionId})`,
+      "",
+      "Next steps (the CLI never runs git — branching and committing are yours):",
+      `  1. git checkout -b ${branch}`,
+      `  2. Review the diff. Re-gate any edits: moda fix verify ${fix.id} --prompt-file=${relPath}`,
+      `  3. Hand back: moda fix submit ${fix.id} --pr   (or --local-ref=${branch})`,
+      `     A hand-authored PR body must end with the magic word: ${magicWord}`,
+      ""
+    ].join(`
+`));
+  }
+  context.output.writeData({
+    fixId: fix.id,
+    shortRef: fix.shortRef,
+    path: relPath,
+    writeStatus,
+    branch,
+    magicWord,
+    candidateVersionId
+  }, {
+    summary: {
+      text: `Candidate for MODA-FIX-${fix.shortRef} ${writeStatus === "unchanged" ? "already matches" : "written to"} ${relPath}. Create branch ${branch} yourself — the CLI never runs git.`,
+      confidence: "high"
+    },
+    artifacts: [
+      {
+        kind: "fix_candidate",
+        path: relPath,
+        description: `Candidate content for fix MODA-FIX-${fix.shortRef} (prompt version ${candidateVersionId}).`
+      }
+    ],
+    nextCommands: [
+      {
+        command: `moda fix verify ${fix.id} --prompt-file=${relPath}`,
+        purpose: "Re-gate the (possibly edited) local candidate on the frozen holdout.",
+        mutability: "write",
+        requires_approval: false
+      },
+      {
+        command: `moda fix submit ${fix.id} --pr`,
+        purpose: `Open the draft fix PR (branch ${branch}, magic word "${magicWord}").`,
+        mutability: "write",
+        requires_approval: true
+      }
+    ]
+  });
+  return EXIT_OK;
+}
+async function runFixSubmit(context, profileOptions, tenantId) {
+  const usage = "Usage: moda fix submit <fix_id> --pr | --local-ref=<branch>";
+  const fixId = (context.positionals[1] || context.flags["fix-id"] || "").trim();
+  if (!fixId) {
+    throw new CliInputError("<fix_id> is required", usage);
+  }
+  const wantPr = context.flags.pr === "true";
+  const localRef = (context.flags["local-ref"] ?? "").trim();
+  if (wantPr === (localRef !== "")) {
+    throw new CliInputError("Pass exactly one of --pr or --local-ref=<branch>", usage);
+  }
+  const result = await callControlAPI(`${fixesBase(tenantId)}/${encodeURIComponent(fixId)}/submit`, {
+    method: "POST",
+    body: JSON.stringify(wantPr ? { channel: "pr" } : { channel: "local_ref", localRef })
+  }, profileOptions, { timeoutMs: 120000, retries: 0 });
+  if (context.outputMode === "human") {
+    process.stderr.write(result.prUrl ? `Draft PR open: ${result.prUrl} (${result.prBranch ?? ""}) — merging it confirms the fix.
+` : `Fix recorded as ${result.status}${result.prBranch ? ` on ${result.prBranch}` : ""}.
+`);
+  }
+  context.output.writeData({ fixId, ...result }, {
+    summary: {
+      text: result.prUrl ? `Draft fix PR open at ${result.prUrl}. Merging with the magic word confirms the fix and starts monitoring.` : `Fix ${fixId} recorded as ${result.status}${result.prBranch ? ` on branch ${result.prBranch}` : ""}. Land the branch with the magic word in the PR body to confirm the fix.`,
+      confidence: "high"
+    },
+    nextCommands: [
+      {
+        command: `moda fix ${fixId}`,
+        purpose: "Track delivery and confirmation status.",
+        mutability: "read",
+        requires_approval: false
+      }
+    ]
+  });
+  return EXIT_OK;
+}
+async function runFixDismiss(context, profileOptions, tenantId) {
+  const usage = "Usage: moda fix dismiss <fix_id> --reason=TEXT";
+  const fixId = (context.positionals[1] || context.flags["fix-id"] || "").trim();
+  if (!fixId) {
+    throw new CliInputError("<fix_id> is required", usage);
+  }
+  const reason = context.flags.reason;
+  if (!reason || !reason.trim()) {
+    throw new CliInputError("--reason=TEXT is required (it feeds problem feedback)", usage);
+  }
+  const fix = await callControlAPI(`${fixesBase(tenantId)}/${encodeURIComponent(fixId)}/dismiss`, { method: "POST", body: JSON.stringify({ reason }) }, profileOptions, { timeoutMs: 60000, retries: 0 });
+  if (context.outputMode === "human") {
+    process.stderr.write(`Fix MODA-FIX-${fix.shortRef} dismissed (${fix.status}).
+`);
+  }
+  context.output.writeData(fix, {
+    summary: {
+      text: `Fix MODA-FIX-${fix.shortRef} dismissed — the reason was recorded as problem feedback.`,
+      confidence: "high"
+    }
+  });
+  return EXIT_OK;
+}
+async function runFixDetail(context, profileOptions, tenantId, fixId) {
+  if (context.flags.packet === "true") {
+    const packet = await callControlAPI(`${fixesBase(tenantId)}/${encodeURIComponent(fixId)}/packet`, { method: "GET" }, profileOptions);
+    context.output.writeData(packet, {
+      summary: { text: `moda.fix_packet.v1 for fix ${fixId}.`, confidence: "high" }
+    });
+    return EXIT_OK;
+  }
+  let fix = await getFix(tenantId, fixId, profileOptions);
+  if (context.flags.wait === "true" && ADVANCING_STATUSES.has(fix.status)) {
+    const timeoutMs = parsePositiveInt(context.flags.timeout, DEFAULT_WAIT_TIMEOUT_MS, MAX_WAIT_TIMEOUT_MS);
+    const pollIntervalMs = parsePositiveInt(context.flags["poll-interval"], DEFAULT_POLL_INTERVAL_MS, MAX_POLL_INTERVAL_MS);
+    fix = await driveAdvance({
+      tenantId,
+      fixId,
+      initial: fix,
+      timeoutMs,
+      pollIntervalMs,
+      profileOptions,
+      context
+    });
+  }
+  if (context.outputMode === "human") {
+    process.stderr.write(`MODA-FIX-${fix.shortRef}  ${fix.status}  ${fix.fixType}${fix.statusReason ? `  — ${fix.statusReason}` : ""}
+`);
+  }
+  context.output.writeData(fix, {
+    summary: {
+      text: `Fix MODA-FIX-${fix.shortRef} is ${fix.status}${fix.statusReason ? ` (${fix.statusReason})` : ""}.`,
+      confidence: "high"
+    },
+    findings: gateFindings(fix),
+    nextCommands: nextCommandsFor(fix)
+  });
+  return EXIT_OK;
+}
+async function driveAdvance(args) {
+  const deadline = Date.now() + args.timeoutMs;
+  let fix = args.initial;
+  let lastStatus = "";
+  const announce = (row) => {
+    if (row.status === lastStatus)
+      return;
+    lastStatus = row.status;
+    const line = `fix MODA-FIX-${row.shortRef}: ${row.status}${row.statusReason ? ` — ${row.statusReason}` : ""}`;
+    if (args.context.outputMode === "human") {
+      process.stderr.write(`${line}
+`);
+    } else if (args.context.outputMode === "agent-stream") {
+      args.context.output.writeEvent({
+        event: "progress",
+        phase: "fix",
+        message: line,
+        elapsed_ms: Date.now() - args.context.startedAt
+      });
+    }
+  };
+  announce(fix);
+  while (ADVANCING_STATUSES.has(fix.status)) {
+    if (Date.now() >= deadline) {
+      throw new Error(`Timed out after ${args.timeoutMs}ms waiting for fix ${args.fixId} (status ${fix.status})`);
+    }
+    fix = await advanceFix(args.tenantId, args.fixId, args.profileOptions);
+    announce(fix);
+    if (!ADVANCING_STATUSES.has(fix.status))
+      break;
+    await sleep(fix.status === "GATING" ? args.pollIntervalMs : Math.min(STEP_DELAY_MS, args.pollIntervalMs));
+  }
+  return fix;
+}
+function profileOptionsFor(context) {
+  return { profile: context.profile, env: context.env };
+}
+function requireTenantId(flags, profileOptions) {
+  const tenantId = flags["tenant-id"] || resolveTenantId(profileOptions);
+  if (!tenantId) {
+    throw new CliInputError("Missing tenant id. Run `moda init` or pass --tenant-id=<id>.");
+  }
+  return tenantId;
+}
+function fixesBase(tenantId) {
+  return `/tenants/${encodeURIComponent(tenantId)}/fixes`;
+}
+async function getFix(tenantId, fixId, profileOptions) {
+  return await callControlAPI(`${fixesBase(tenantId)}/${encodeURIComponent(fixId)}`, { method: "GET" }, profileOptions);
+}
+async function advanceFix(tenantId, fixId, profileOptions) {
+  return await callControlAPI(`${fixesBase(tenantId)}/${encodeURIComponent(fixId)}/advance`, { method: "POST" }, profileOptions, { timeoutMs: ADVANCE_TIMEOUT_MS, retries: 0 });
+}
+async function fetchPacketFailSoft(tenantId, fixId, profileOptions) {
+  try {
+    return await callControlAPI(`${fixesBase(tenantId)}/${encodeURIComponent(fixId)}/packet`, { method: "GET" }, profileOptions);
+  } catch {
+    return null;
+  }
+}
+function gateFindings(fix) {
+  const gateResult = fix.gateResult ?? null;
+  if (!gateResult)
+    return [];
+  const verdict = gateResult.verdict ?? fix.status;
+  return [
+    {
+      id: "fix:gate",
+      title: `gate ${verdict}: ${gateResult.reason ?? fix.statusReason ?? ""}`.trim(),
+      status: verdict,
+      severity: verdict === "pass" ? "info" : verdict === "fail" ? "error" : "warning",
+      description: formatGateScoreboard(gateResult)
+    }
+  ];
+}
+function formatGateScoreboard(gate) {
+  const holdout = gate.holdout ?? {};
+  const repair = gate.repair ?? {};
+  return `holdout: candidate ${holdout.candidate ?? 0}/${holdout.n ?? 0} vs baseline ${holdout.baseline ?? 0}/${holdout.n ?? 0} ` + `(wins ${holdout.wins ?? 0}, losses ${holdout.losses ?? 0}); ` + `training cases (repair): candidate ${repair.candidate ?? 0}/${repair.n ?? 0} vs baseline ${repair.baseline ?? 0}/${repair.n ?? 0}; ` + `noise floor ${gate.noiseFloor ?? 0}; abstained ${gate.abstained ?? 0}`;
+}
+function printHumanGateVerdict(fix, gateRunId, gateResult, cases) {
+  const w = (line) => process.stderr.write(`${line}
+`);
+  w("");
+  w("Fix gate verdict");
+  w("----------------");
+  w(`Fix:      MODA-FIX-${fix.shortRef} (${fix.status})`);
+  w(`Gate run: ${gateRunId}`);
+  w(`Verdict:  ${gateResult?.verdict ?? "none"}${gateResult?.reason ? ` — ${gateResult.reason}` : ""}`);
+  if (gateResult) {
+    w(`Score:    ${formatGateScoreboard(gateResult)}`);
+  }
+  if (cases.length > 0) {
+    w("");
+    w("Per-case (holdout is the verdict; repair rows are training cases):");
+    for (const row of cases) {
+      w(`  ${row.caseId}: baseline=${passLabel(row.prodPass)} candidate=${passLabel(row.proposedPass)}`);
+    }
+  }
+  w("");
+}
+function passLabel(value) {
+  if (value === null || value === undefined)
+    return "abstained";
+  return value ? "pass" : "fail";
+}
+function nextCommandsFor(fix) {
+  switch (fix.status) {
+    case "VERIFIED":
+      return [
+        {
+          command: `moda fix submit ${fix.id} --pr`,
+          purpose: "Open the draft fix PR (merge with the magic word to confirm).",
+          mutability: "write",
+          requires_approval: true
+        },
+        {
+          command: `moda fix checkout ${fix.id}`,
+          purpose: "Write the verified candidate locally instead of opening a PR.",
+          mutability: "write",
+          requires_approval: false
+        }
+      ];
+    case "PROPOSED":
+      return [
+        {
+          command: `moda fix verify ${fix.id}`,
+          purpose: "Gate the proposed candidate on the frozen holdout.",
+          mutability: "write",
+          requires_approval: false
+        }
+      ];
+    case "GATE_FAILED":
+      return [
+        {
+          command: `moda fix checkout ${fix.id}`,
+          purpose: "Check out the candidate, edit it, and re-gate (fail-to-pass loop).",
+          mutability: "write",
+          requires_approval: false
+        },
+        {
+          command: `moda fix verify ${fix.id} --prompt-file=<path>`,
+          purpose: "Re-gate an edited local candidate on the frozen holdout.",
+          mutability: "write",
+          requires_approval: false
+        }
+      ];
+    case "GATE_INCONCLUSIVE":
+      return [
+        {
+          command: `moda fix verify ${fix.id}`,
+          purpose: "Re-run the gate — the last run was inconclusive (never a pass).",
+          mutability: "write",
+          requires_approval: false
+        }
+      ];
+    case "UNROUTED":
+    case "NO_EVIDENCE":
+    case "BLOCKED_COVERAGE":
+    case "NO_HEADROOM":
+      return [
+        {
+          command: `moda fix ${fix.id} --packet`,
+          purpose: "Read the investigation packet — this fix is deliverable as diagnosis.",
+          mutability: "read",
+          requires_approval: false
+        }
+      ];
+    case "DRAFT":
+    case "SCOPING":
+    case "PROPOSING":
+    case "GATING":
+      return [
+        {
+          command: `moda fix ${fix.id} --wait`,
+          purpose: "Drive the advance-on-poll pipeline to its next resting status.",
+          mutability: "write",
+          requires_approval: false
+        }
+      ];
+    default:
+      return [
+        {
+          command: `moda fix ${fix.id}`,
+          purpose: "Track the fix status.",
+          mutability: "read",
+          requires_approval: false
+        }
+      ];
+  }
+}
+function assertRealpathContained(absPath, relPath) {
+  const root = realpathSync(process.cwd());
+  const within = (p) => p === root || p.startsWith(root + sep);
+  const segments = absPath.slice(root.length).split(sep).filter(Boolean);
+  let probe = root;
+  for (const segment of segments) {
+    probe = join(probe, segment);
+    let stat;
+    try {
+      stat = lstatSync(probe);
+    } catch {
+      break;
+    }
+    if (stat.isSymbolicLink()) {
+      throw new CliInputError(`Refusing to write through a symlink: ${relPath}`);
+    }
+    if (stat.isFile() && stat.nlink > 1) {
+      throw new CliInputError(`Refusing to write through a hard link (${stat.nlink} names share this file): ${relPath} — replace it with an independent copy (cp then rm the link) and re-run.`);
+    }
+    if (!within(realpathSync(probe))) {
+      throw new CliInputError(`Refusing to write outside the repo: ${relPath} resolves past the working tree`);
+    }
+  }
+}
+function writeContainedFile(absPath, relPath, content) {
+  mkdirSync(dirname(absPath), { recursive: true });
+  const existedBefore = existsSync(absPath);
+  let fd;
+  try {
+    fd = openSync(absPath, fsConstants.O_RDWR | fsConstants.O_CREAT | O_NOFOLLOW, 420);
+  } catch (error) {
+    if (error.code === "ELOOP") {
+      throw new CliInputError(`Refusing to write through a symlink: ${relPath}`);
+    }
+    throw error;
+  }
+  try {
+    const stat = fstatSync(fd);
+    if (!stat.isFile()) {
+      throw new CliInputError(`Refusing to write ${relPath}: not a regular file`);
+    }
+    if (stat.nlink > 1) {
+      throw new CliInputError(`Refusing to write through a hard link (${stat.nlink} names share this file): ${relPath} — replace it with an independent copy (cp then rm the link) and re-run.`);
+    }
+    if (readFileSync(fd, "utf8") === content) {
+      return "unchanged";
+    }
+    ftruncateSync(fd, 0);
+    writeSync(fd, content, 0, "utf8");
+    return existedBefore ? "updated" : "wrote";
+  } finally {
+    closeSync(fd);
+  }
+}
+function safeTargetSourcePath(raw) {
+  const trimmed = raw.trim();
+  if (!trimmed || trimmed.includes("\x00")) {
+    throw new CliInputError(`Refusing to write an invalid target source path: ${JSON.stringify(raw).slice(0, 120)}`);
+  }
+  if (isAbsolute(trimmed) || /^[A-Za-z]:[\\/]/.test(trimmed)) {
+    throw new CliInputError(`Refusing to write outside the repo: target source path is absolute (${trimmed})`);
+  }
+  const segments = trimmed.split(/[\\/]+/).filter(Boolean);
+  if (segments.length === 0 || segments.some((segment) => segment === "..")) {
+    throw new CliInputError(`Refusing to write outside the repo: target source path contains '..' (${trimmed})`);
+  }
+  return segments.join("/");
+}
+function parsePositiveInt(raw, fallback, max) {
+  const parsed = Number.parseInt(raw ?? "", 10);
+  if (!Number.isFinite(parsed) || parsed <= 0)
+    return fallback;
+  return Math.min(parsed, max);
+}
+function sleep(ms) {
+  return new Promise((resolveSleep) => setTimeout(resolveSleep, ms));
+}
+
 // src/sync.ts
 async function runSyncCommand(context) {
   const resource = context.positionals[0] ?? "harness";
@@ -456,8 +1255,8 @@ async function sendCliUsageTelemetry(input) {
 }
 
 // src/update-check.ts
-import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { join } from "node:path";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync } from "node:fs";
+import { join as join2 } from "node:path";
 var UPDATE_CHECK_FLAG = "no-update-check";
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
 var REGISTRY_TIMEOUT_MS = 1500;
@@ -471,11 +1270,11 @@ function isUpdateCheckDisabled(flags, env = process.env) {
   return flags[UPDATE_CHECK_FLAG] === "true" || env.MODA_CLI_UPDATE_CHECK === "0" || env.DO_NOT_TRACK === "1" || env.CI !== undefined && env.CI !== "" && env.CI !== "false" && env.CI !== "0";
 }
 function cachePath(options = {}) {
-  return join(getModaDir(options), "update-check.json");
+  return join2(getModaDir(options), "update-check.json");
 }
 function readCache(options = {}) {
   try {
-    const parsed = JSON.parse(readFileSync(cachePath(options), "utf8"));
+    const parsed = JSON.parse(readFileSync2(cachePath(options), "utf8"));
     if (parsed && typeof parsed === "object" && typeof parsed.checked_at === "number" && typeof parsed.latest === "string") {
       return parsed;
     }
@@ -484,7 +1283,7 @@ function readCache(options = {}) {
 }
 function writeCache(cache, options = {}) {
   try {
-    mkdirSync(getModaDir(options), { recursive: true });
+    mkdirSync2(getModaDir(options), { recursive: true });
     writeFileSync(cachePath(options), `${JSON.stringify(cache, null, 2)}
 `, "utf8");
   } catch {}
@@ -1046,8 +1845,8 @@ function renderJsonSchemas() {
 
 // src/keys.ts
 import { createHash } from "node:crypto";
-import { existsSync, readFileSync as readFileSync2 } from "node:fs";
-import { join as join2 } from "node:path";
+import { existsSync as existsSync2, readFileSync as readFileSync3 } from "node:fs";
+import { join as join3 } from "node:path";
 var KEY_LIFECYCLE_ENDPOINT_REQUIREMENTS = {
   list: "GET /api/cli/keys?profile=<profile>",
   create: "POST /api/cli/keys",
@@ -1114,14 +1913,14 @@ function writeLocalApiKeySecret(descriptor, apiKey, options = {}) {
   return path;
 }
 function keyDescriptorStorePath(options = {}) {
-  return join2(getModaPaths(options).dir, "keys.json");
+  return join3(getModaPaths(options).dir, "keys.json");
 }
 function loadLocalKeyDescriptors(options = {}) {
   const path = keyDescriptorStorePath(options);
   try {
-    if (!existsSync(path))
+    if (!existsSync2(path))
       return [];
-    const parsed = JSON.parse(readFileSync2(path, "utf8"));
+    const parsed = JSON.parse(readFileSync3(path, "utf8"));
     if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
       return [];
     }
@@ -1173,6 +1972,10 @@ var ONLINE_PROBE_TIMEOUT_MS = 5000;
 function subcommand(context) {
   return context.positionals[0];
 }
+function unknownSubcommandError(parent, attempted, valid) {
+  const message = attempted ? `Unknown ${parent} subcommand '${attempted}'. Valid subcommands: ${valid.join(", ")}.` : `A ${parent} subcommand is required. Valid subcommands: ${valid.join(", ")}.`;
+  return new CliInputError(message, `Usage: moda ${parent} <${valid.join("|")}>`);
+}
 function requirePositional(context, index, usage) {
   const value = context.positionals[index];
   if (!value)
@@ -1318,7 +2121,7 @@ async function runAuthCommand(context) {
       return { exitCode: EXIT_OK };
     }
     default:
-      throw new CliInputError("Unknown auth command.", "Usage: moda auth <login|logout|status|token|whoami>");
+      throw unknownSubcommandError("auth", subcommand(context), ["login", "logout", "status", "token", "whoami"]);
   }
 }
 async function runProfilesCommand(context) {
@@ -1396,12 +2199,12 @@ async function runProfilesCommand(context) {
       return { exitCode: 0 };
     }
     default:
-      throw new CliInputError("Unknown profiles command.", "Usage: moda profiles <list|use|create|doctor>");
+      throw unknownSubcommandError("profiles", subcommand(context), ["list", "use", "create", "doctor"]);
   }
 }
 async function runConfigCommand(context) {
   if (subcommand(context) !== "show") {
-    throw new CliInputError("Unknown config command.", "Usage: moda config show");
+    throw unknownSubcommandError("config", subcommand(context), ["show"]);
   }
   const config = loadProfileConfig({ env: context.env });
   const profile = getActiveProfile({ profile: context.profile, env: context.env });
@@ -1460,17 +2263,17 @@ async function runKeysCommand(context) {
       throw new CliInputError(`moda keys ${action} is waiting on Moda Cloud key lifecycle support for ${keyId}.`, `Required endpoint: ${KEY_LIFECYCLE_ENDPOINT_REQUIREMENTS[action]}`);
     }
     default:
-      throw new CliInputError("Unknown keys command.", "Usage: moda keys <list|create|rotate|revoke>");
+      throw unknownSubcommandError("keys", subcommand(context), ["list", "create", "rotate", "revoke"]);
   }
 }
 
 // src/agent.ts
-import { existsSync as existsSync2, readFileSync as readFileSync3, statSync } from "node:fs";
-import { join as join3, relative, resolve } from "node:path";
+import { existsSync as existsSync3, readFileSync as readFileSync4, statSync } from "node:fs";
+import { join as join4, relative, resolve as resolve2 } from "node:path";
 var MODA_DIR = ".moda";
-var HARNESS_PATH = join3(MODA_DIR, "harness.json");
-var HARNESS_REPORT_MARKDOWN_PATH = join3(MODA_DIR, "HARNESS_REPORT.md");
-var HARNESS_SUMMARY_PATH = join3(MODA_DIR, "HARNESS.md");
+var HARNESS_PATH = join4(MODA_DIR, "harness.json");
+var HARNESS_REPORT_MARKDOWN_PATH = join4(MODA_DIR, "HARNESS_REPORT.md");
+var HARNESS_SUMMARY_PATH = join4(MODA_DIR, "HARNESS.md");
 var MAX_AGENT_EVIDENCE_BYTES = 24000;
 async function runAgentCommand(context) {
   const subcommand2 = context.positionals[0] ?? "context";
@@ -1592,7 +2395,7 @@ async function buildAgentContext(context) {
       },
       report: reportState.state,
       sync: syncState ? {
-        path: join3(MODA_DIR, "sync-state.json"),
+        path: join4(MODA_DIR, "sync-state.json"),
         exists: true,
         source: syncState.source,
         updatedAt: syncState.updatedAt,
@@ -1600,7 +2403,7 @@ async function buildAgentContext(context) {
         remoteHarnessId: syncState.remote.harnessId,
         remoteVersionId: syncState.remote.versionId
       } : {
-        path: join3(MODA_DIR, "sync-state.json"),
+        path: join4(MODA_DIR, "sync-state.json"),
         exists: false
       }
     },
@@ -1650,18 +2453,18 @@ function summarizeAgentContext(payload, noun) {
   return `Local Moda ${noun} is healthy with ${agents} runtime agent(s).`;
 }
 function readHarnessGraphIfPresent(cwd) {
-  const path = join3(cwd, HARNESS_PATH);
-  if (!existsSync2(path))
+  const path = join4(cwd, HARNESS_PATH);
+  if (!existsSync3(path))
     return;
   try {
-    return JSON.parse(readFileSync3(path, "utf8"));
+    return JSON.parse(readFileSync4(path, "utf8"));
   } catch {
     return;
   }
 }
 function readHarnessReportState(cwd) {
-  const path = join3(cwd, HARNESS_REPORT_PATH);
-  if (!existsSync2(path)) {
+  const path = join4(cwd, HARNESS_REPORT_PATH);
+  if (!existsSync3(path)) {
     return {
       state: {
         path: HARNESS_REPORT_PATH,
@@ -1705,11 +2508,11 @@ function readHarnessReportState(cwd) {
   }
 }
 function readApproval(cwd) {
-  const path = join3(cwd, HARNESS_REPORT_APPROVAL_PATH);
-  if (!existsSync2(path))
+  const path = join4(cwd, HARNESS_REPORT_APPROVAL_PATH);
+  if (!existsSync3(path))
     return;
   try {
-    return JSON.parse(readFileSync3(path, "utf8"));
+    return JSON.parse(readFileSync4(path, "utf8"));
   } catch {
     return;
   }
@@ -1785,9 +2588,9 @@ function existingArtifacts(cwd) {
     [HARNESS_REPORT_PATH, "harness_report", "Cited harness analyst report."],
     [HARNESS_REPORT_MARKDOWN_PATH, "harness_report_markdown", "Human-readable harness analyst report."],
     [HARNESS_SUMMARY_PATH, "harness_summary", "Human-readable harness graph summary."],
-    [join3(MODA_DIR, "sync-state.json"), "sync_state", "Last local harness sync state."],
-    [join3(MODA_DIR, "prompts.yml"), "prompt_manifest", "Local prompt discovery manifest."]
-  ].flatMap(([path, kind, description]) => existsSync2(join3(cwd, path)) ? [{ path, kind, description }] : []);
+    [join4(MODA_DIR, "sync-state.json"), "sync_state", "Last local harness sync state."],
+    [join4(MODA_DIR, "prompts.yml"), "prompt_manifest", "Local prompt discovery manifest."]
+  ].flatMap(([path, kind, description]) => existsSync3(join4(cwd, path)) ? [{ path, kind, description }] : []);
 }
 function expandEvidenceRef(ref, loaded, cwd) {
   if (ref.startsWith("doctor:")) {
@@ -1868,9 +2671,9 @@ function readCitationExcerpt(cwd, citation) {
   if (!citation.path || citation.type !== "file" && citation.type !== "generated_doc")
     return citation.excerpt;
   const absolute = safeResolve(cwd, citation.path);
-  if (!absolute || !existsSync2(absolute))
+  if (!absolute || !existsSync3(absolute))
     return citation.excerpt;
-  const text = readFileSync3(absolute, "utf8");
+  const text = readFileSync4(absolute, "utf8");
   if (citation.line && citation.line > 0) {
     return text.split(/\r?\n/)[citation.line - 1]?.slice(0, 1000) ?? citation.excerpt;
   }
@@ -1881,10 +2684,10 @@ function readBoundedModaArtifact(cwd, artifactPath) {
     throw new CliInputError(`Artifact '${artifactPath}' is outside .moda and cannot be expanded directly.`, "Use a citation evidence ref for source-file evidence.");
   }
   const absolute = safeResolve(cwd, artifactPath);
-  if (!absolute || !existsSync2(absolute))
+  if (!absolute || !existsSync3(absolute))
     throw missingEvidence(`artifact:${artifactPath}`);
   const size = statSync(absolute).size;
-  const text = readFileSync3(absolute, "utf8");
+  const text = readFileSync4(absolute, "utf8");
   return {
     path: artifactPath,
     bytes: size,
@@ -1893,7 +2696,7 @@ function readBoundedModaArtifact(cwd, artifactPath) {
   };
 }
 function safeResolve(cwd, path) {
-  const absolute = resolve(cwd, path);
+  const absolute = resolve2(cwd, path);
   const rel = relative(cwd, absolute);
   if (rel.startsWith("..") || rel === ".." || rel.startsWith("/"))
     return;
@@ -1927,8 +2730,8 @@ function purposeForCommand(command) {
 }
 
 // src/production-intelligence.ts
-import { existsSync as existsSync3, readFileSync as readFileSync4 } from "node:fs";
-import { join as join4 } from "node:path";
+import { existsSync as existsSync4, readFileSync as readFileSync5 } from "node:fs";
+import { join as join5 } from "node:path";
 
 // src/ask-stream.ts
 class AskStreamError extends Error {
@@ -3348,12 +4151,12 @@ function loadHarnessHints(cwd) {
     skillPaths: new Map,
     entrypointPaths: []
   };
-  const harnessPath = join4(cwd, ".moda", "harness.json");
-  if (!existsSync3(harnessPath))
+  const harnessPath = join5(cwd, ".moda", "harness.json");
+  if (!existsSync4(harnessPath))
     return hints;
   hints.reportPath = ".moda/harness.json";
   try {
-    const parsed = JSON.parse(readFileSync4(harnessPath, "utf8"));
+    const parsed = JSON.parse(readFileSync5(harnessPath, "utf8"));
     const graph = asRecord(parsed);
     const artifacts = Array.isArray(graph?.artifacts) ? graph.artifacts : [];
     for (const item of artifacts) {
@@ -3381,11 +4184,11 @@ function loadHarnessHints(cwd) {
   return hints;
 }
 function localHarnessSummary(cwd) {
-  const path = join4(cwd, ".moda", "harness.json");
-  if (!existsSync3(path))
+  const path = join5(cwd, ".moda", "harness.json");
+  if (!existsSync4(path))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync4(path, "utf8"));
+    const parsed = JSON.parse(readFileSync5(path, "utf8"));
     return {
       harnessId: parsed.harnessId,
       graphHash: parsed.graphHash,
@@ -3396,16 +4199,16 @@ function localHarnessSummary(cwd) {
   }
 }
 function localSyncBrief(cwd, relativePath, label) {
-  const path = join4(cwd, relativePath);
-  if (!existsSync3(path)) {
+  const path = join5(cwd, relativePath);
+  if (!existsSync4(path)) {
     return { status: "missing", summary: `${label} state not found`, path: relativePath };
   }
   return { status: "present", summary: `${label} state exists locally`, path: relativePath };
 }
 function localSkillBrief(cwd) {
-  const claudeSkill = join4(cwd, ".claude", "skills");
-  const cursorRules = join4(cwd, ".cursor", "rules");
-  if (existsSync3(claudeSkill) || existsSync3(cursorRules)) {
+  const claudeSkill = join5(cwd, ".claude", "skills");
+  const cursorRules = join5(cwd, ".cursor", "rules");
+  if (existsSync4(claudeSkill) || existsSync4(cursorRules)) {
     return { status: "present", summary: "Local agent skill/rule directory exists" };
   }
   return { status: "missing", summary: "No local agent skill/rule directory found" };
@@ -3646,7 +4449,7 @@ function buildManifest(commands) {
     exit_codes: [
       { code: 0, name: "ok", meaning: "Command completed successfully." },
       { code: 1, name: "error", meaning: "Command, input, API, network, or unexpected failure." },
-      { code: 3, name: "degraded", meaning: "Reserved for `moda ask` local fallback." },
+      { code: 3, name: "degraded", meaning: "Degraded result: `moda ask` local fallback, or `moda fix verify` gate inconclusive/blocked-coverage (never treat as a pass)." },
       { code: 4, name: "auth_required", meaning: "Run login_command, then resume." },
       { code: 5, name: "input_required", meaning: "Choose from input_request choices, then resume." },
       { code: 130, name: "cancelled", meaning: "Interrupted or output consumer closed." }
@@ -3717,6 +4520,8 @@ function event(name, when, terminal, deprecated = false) {
 function exitCodesForCommand(command) {
   if (command === "ask")
     return [0, 1, 3, 4, 5, 130];
+  if (command === "fix")
+    return [0, 1, 3, 4, 130];
   if (command === "init" || command === "harness")
     return [0, 1, 4, 5, 130];
   return [0, 1, 4, 130];
@@ -3724,7 +4529,7 @@ function exitCodesForCommand(command) {
 
 // src/cli.ts
 import { fileURLToPath } from "url";
-import { realpathSync } from "fs";
+import { realpathSync as realpathSync2 } from "fs";
 function parseArgs(argv) {
   const args = argv.slice(2);
   let command = "";
@@ -3855,10 +4660,16 @@ Commands:
   world-state <conversation_id>    Get a conversation's world state (slots/threads/events)
   context <conversation_id>        Get windowed conversation context
   audit <conversation_id|trace_id> Raw span/trace audit (spans, hierarchy, orphans, duplicates)
-  frustrations                     Get user frustration detections
+  frustrations                     Get user frustration detections (legacy single-family; see emotions)
+  emotions                         Multi-family emotion detections (frustration, sadness, confusion, anxiety, trust, positive)
+  hallucinations                   Grounding detections: contradicted/verified outputs with rule breakdown
   tool-failures                    Get tool failure overview
   tool-failure-detail <tool_name>  Get per-tool failure detail
   problems                         Rank cross-signal Problems by root cause (what to fix first)
+  problem <problem_id>             Open one Problem: dossier, or --evidence/--reports/--conversations/--feedback
+  problem-feedback <problem_id>    Mark a Problem fixed, dismiss, rename, or flag a bad attribution
+  step-scores <conversation_id>    Graph-PRM step scores (per-segment curves, first bad step, rollup)
+  tail                             Live-tail new conversations/detections as NDJSON (one line per item)
   feedback "<note>"                Flag wrong/missing data or CLI quirks to the Moda team
 
   Prompt management:
@@ -3879,6 +4690,18 @@ Commands:
   skills sync                      Push local .claude/skills/**/SKILL.md up to Moda
   skills sync --dry-run            Show what would be pushed without writing
 
+  Fixes (a fix with proof):
+  fixes                            Ranked Fix queue (--status=S --limit=N --cursor=TOKEN)
+  fix <fix_id>                     One Fix: status + gate result; --packet prints moda.fix_packet.v1;
+                                   --wait drives a still-running pipeline to rest
+  fix start <problem_id>           Draft a Fix from a Problem (--type=auto|prompt); --wait drives
+                                   scope -> propose -> gate and prints the packet
+  fix verify <fix_id>              Re-gate on the frozen holdout; --prompt-file=P gates local content
+                                   (exit 0 pass / 1 fail with per-case findings / 3 degraded-inconclusive)
+  fix checkout <fix_id>            Write the candidate at its target source path (never runs git)
+  fix submit <fix_id>              Deliver: --pr opens a draft PR | --local-ref=<branch> records your branch
+  fix dismiss <fix_id>             Reject with --reason=TEXT (feeds problem feedback)
+
 Options:
   --help                           Show this help message
   --version                        Show version number
@@ -3924,6 +4747,52 @@ Search flags:
 World-state flags:
   --summary-only                   Return segment summaries only (omit the event stream)
   --event-limit=N                  Max world-state events to return (1-5000, default 2000)
+  --snapshot                       Folded slots at an exact tick (what the agent believed at that turn)
+  --msg-index=N --block-index=M    Snapshot tick (defaults 0; --segment-index=K scopes to a segment)
+  --replay                         State-over-time replay; frames mode REQUIRES --message-count=N
+  --format=frames|fold-inputs      Replay format (default frames)
+  --message-count=N                Number of frames to fold (frames mode)
+
+Emotions flags:
+  --family=F                       frustration|sadness|confusion|anxiety|trust|positive
+  --days-back=N --limit=N          Window 1-90 (default 7); page size 1-20 (default 10)
+  --offset=N                       Skip N detections (0-10000)
+
+Hallucinations flags:
+  --kind=contradicted|verified     Narrow the detections list
+  --conversation-id=ID             Scope summary + list to one conversation
+  --days-back=N --limit=N          Window 1-90 (default 7); page size 1-20 (default 10)
+
+Problem flags (moda problem <id>):
+  --evidence|--reports|--conversations|--feedback
+                                   Open one sub-resource page (at most one)
+  --limit=N --cursor=TOKEN         Keyset paging (1-50; pass next_cursor back verbatim)
+  --family=F --door=D              Filter --conversations (families: tool_failure|emotion|laziness|hallucination|prm_dip)
+
+Problem-feedback flags:
+  --action=A                       mark_fixed|dismiss|flag_attribution|rename (required)
+  --reason=TEXT                    Required for dismiss and flag_attribution
+  --attribution-id=UUID            Required for flag_attribution (ids come from problem --evidence)
+  --new-name=NAME                  Required for rename
+
+Tail flags:
+  --signal=S                       conversations|emotions|all (default conversations)
+  --interval=N                     Poll every N seconds (5-3600, default 15)
+  --once                           One poll, then exit (baseline page)
+  --limit=N --max-events=N         Page size per poll; stop after N stdout records
+                                   (metadata included; a slot is reserved for the
+                                   emotions coverage record, which falls back to
+                                   stderr if the bound leaves no room)
+  --full-scan                      Emotions: scan the whole window instead of the
+                                   top-scoring prefix (many more requests). /emotions
+                                   is score-ranked with no cursor, so the default
+                                   follows the highest-scoring detections and emits a
+                                   tail_coverage line stating exactly what it saw.
+
+Clusters search flags:
+  --search="query"                 Find clusters by name/meaning (task-cluster search)
+  --node-id=ID                     Deterministically resolve one cluster node (deep link)
+  --mode=fuzzy|semantic|hybrid     Cluster search mode (default hybrid)
 
 Feedback flags:
   --category=CAT                   bad_cluster_label|mismatched_frustration|missing_data|noisy_data|
@@ -4009,6 +4878,16 @@ Examples:
   moda search "billing error" --mode=hybrid
   moda search "refund flow" --mode=semantic --time-range=7d --limit=10
   moda world-state <conversation_id> --summary-only
+  moda world-state <conversation_id> --snapshot --msg-index=42
+  moda world-state <conversation_id> --replay --message-count=50
+  moda clusters --search="billing disputes"
+  moda emotions --family=confusion --days-back=14
+  moda hallucinations --kind=contradicted
+  moda problems --days-back=7
+  moda problem <problem_id> --evidence --limit=10
+  moda problem-feedback <problem_id> --action=mark_fixed
+  moda step-scores <conversation_id>
+  moda tail --signal=all --interval=30
   moda frustrations --days-back=14 --limit=20
   moda feedback "cluster label looks wrong" --category=bad_cluster_label --cluster-id=<node_id>
   moda context <conversation_id> --window=3
@@ -4018,7 +4897,29 @@ Examples:
   moda prompts sync
   moda prompts promote support.triage --label=prod --version=pver_abc123
   moda prompts ab --baseline=prompts/agent.prompt.md --candidate=prompts/agent-v2.prompt.md --conversations=conv_1,conv_2
-  moda skills pull`);
+  moda skills pull
+  moda fixes
+  moda fix start <problem_id> --wait
+  moda fix verify <fix_id> --prompt-file=prompts/agent.prompt.md`);
+}
+function printCommandHelp(definition) {
+  const lines = [];
+  lines.push(`moda ${definition.name} — ${definition.description}`);
+  if (definition.aliases && definition.aliases.length > 0) {
+    lines.push(`Aliases: ${definition.aliases.join(", ")}`);
+  }
+  if (definition.mutability === "write") {
+    lines.push("This command can mutate state.");
+  }
+  if (definition.examples.length > 0) {
+    lines.push("", "Examples:");
+    for (const example of definition.examples) {
+      lines.push(`  ${example}`);
+    }
+  }
+  lines.push("", "Run 'moda --help' for the full command list and common flags", "(--json, --agent, --profile, --days-back, --limit, --time-range, ...).");
+  console.error(lines.join(`
+`));
 }
 async function attachWindows(rows, windowSize) {
   return Promise.all(rows.map(async (row) => {
@@ -4051,14 +4952,201 @@ async function attachWindows(rows, windowSize) {
     }
   }));
 }
-async function printWithOptionalWindows(enriched, listKey, includeWindow, windowSize, output) {
+async function printWithOptionalWindows(enriched, listKey, includeWindow, windowSize, output, warnings) {
+  const writeOptions = warnings && warnings.length > 0 ? { warnings } : undefined;
   if (!includeWindow) {
-    output.writeData(enriched);
+    output.writeData(enriched, writeOptions);
     return;
   }
   const list = Array.isArray(enriched[listKey]) ? enriched[listKey] : [];
   const withWindows = await attachWindows(list, windowSize);
-  output.writeData({ ...enriched, [listKey]: withWindows });
+  output.writeData({ ...enriched, [listKey]: withWindows }, writeOptions);
+}
+function notFoundWarning(entity, id, isMissing) {
+  if (!isMissing)
+    return [];
+  return [
+    `No ${entity} found for id "${id}" — it may not exist in this tenant (the Data API returns an empty result rather than an error for unknown ids).`
+  ];
+}
+var TAIL_SEEN_MAX = 5000;
+var EMOTIONS_TAIL_PAGE_SIZE = 20;
+var EMOTIONS_TAIL_MAX_PAGES = 25;
+var EMOTIONS_OFFSET_CEILING = 1e4;
+var EMOTIONS_FULL_SCAN_MAX_PAGES = Math.floor(EMOTIONS_OFFSET_CEILING / EMOTIONS_TAIL_PAGE_SIZE) + 1;
+var EMOTIONS_SEEN_MAX = EMOTIONS_FULL_SCAN_MAX_PAGES * EMOTIONS_TAIL_PAGE_SIZE + 2000;
+var CONVERSATIONS_SEEN_MAX = TAIL_SEEN_MAX;
+var TAIL_LIMITS = {
+  emotionsPageSize: EMOTIONS_TAIL_PAGE_SIZE,
+  emotionsFullScanMaxPages: EMOTIONS_FULL_SCAN_MAX_PAGES,
+  emotionsSeenMax: EMOTIONS_SEEN_MAX,
+  conversationsSeenMax: CONVERSATIONS_SEEN_MAX,
+  independentKeyspaces: true
+};
+async function runTailCommand(params, context) {
+  const intervalMs = (params.interval ?? 15) * 1000;
+  const signal = params.signal ?? "conversations";
+  const limit = params.limit ?? 20;
+  const seenConversations = new Set;
+  const seenEmotions = new Set;
+  let emitted = 0;
+  let evictionReported = false;
+  const rememberIn = (seen, capacity, key) => {
+    if (seen.has(key))
+      return false;
+    if (seen.size >= capacity) {
+      const iterator = seen.values();
+      for (let i = 0;i < Math.max(1, Math.floor(capacity / 10)); i++) {
+        const next = iterator.next();
+        if (next.done)
+          break;
+        seen.delete(next.value);
+      }
+      if (!evictionReported) {
+        evictionReported = true;
+        emitMeta({
+          type: "tail_dedupe_evicted",
+          capacity,
+          detail: "Dedupe memory reached capacity and oldest ids were dropped; items seen long ago may re-appear once. Restart the tail, or narrow --signal, if exact-once matters."
+        });
+      }
+    }
+    seen.add(key);
+    return true;
+  };
+  const rememberConversation = (key) => rememberIn(seenConversations, CONVERSATIONS_SEEN_MAX, key);
+  const rememberEmotion = (key) => rememberIn(seenEmotions, EMOTIONS_SEEN_MAX, key);
+  const emitsCoverage = signal === "emotions" || signal === "all";
+  const metaReserve = params.max_events !== undefined && emitsCoverage && params.max_events >= 2 ? 1 : 0;
+  const dataBudget = params.max_events === undefined ? undefined : Math.max(0, params.max_events - metaReserve);
+  const capReached = () => dataBudget !== undefined && emitted >= dataBudget;
+  const emitLine = (item) => {
+    if (capReached())
+      return;
+    console.log(JSON.stringify(item));
+    emitted++;
+  };
+  const emitMeta = (item) => {
+    if (params.max_events !== undefined && emitted >= params.max_events) {
+      safeWriteStderr(`${JSON.stringify(item)}
+`);
+      return;
+    }
+    console.log(JSON.stringify(item));
+    emitted++;
+  };
+  const pollConversations = async () => {
+    const data = await callDataAPI(`/conversations?time_range=1h&limit=${limit}`);
+    const record = asRecord(data) ?? {};
+    const rows = Array.isArray(record.conversations) ? record.conversations : [];
+    for (const row of [...rows].reverse()) {
+      const conversation = asRecord(row);
+      if (!conversation)
+        continue;
+      const id = asString(conversation.conversation_id) ?? asString(conversation.id);
+      if (!id)
+        continue;
+      const timestamp = asString(conversation.last_timestamp) ?? asString(conversation.timestamp) ?? asString(conversation.last_activity) ?? "";
+      const messageCount = asNumber(conversation.message_count);
+      if (capReached())
+        return;
+      if (!rememberConversation(`c:${id}:${timestamp}:${messageCount ?? ""}`))
+        continue;
+      emitLine({
+        type: "conversation",
+        conversation_id: id,
+        timestamp: timestamp || null,
+        message_count: messageCount,
+        environment: conversation.environment ?? null,
+        cluster_name: conversation.cluster_name ?? null,
+        summary: conversation.summary ?? null
+      });
+    }
+  };
+  const pollEmotions = async () => {
+    const maxPages = params.full_scan === true ? EMOTIONS_FULL_SCAN_MAX_PAGES : EMOTIONS_TAIL_MAX_PAGES;
+    const collected = [];
+    let offset = 0;
+    let pages = 0;
+    let truncated = false;
+    let total = null;
+    for (;; ) {
+      const data = await callDataAPI(`/emotions?days_back=1&limit=${EMOTIONS_TAIL_PAGE_SIZE}&offset=${offset}`);
+      const record = asRecord(data) ?? {};
+      const rows = Array.isArray(record.detections) ? record.detections : [];
+      collected.push(...rows.map((row) => asRecord(row)).filter((row) => row !== null));
+      pages++;
+      const pagination = asRecord(record.pagination) ?? {};
+      total = asNumber(pagination.total) ?? total;
+      const hasMore = pagination.has_more === true;
+      if (!hasMore || rows.length === 0)
+        break;
+      if (pages >= maxPages) {
+        truncated = true;
+        break;
+      }
+      if (offset + EMOTIONS_TAIL_PAGE_SIZE > EMOTIONS_OFFSET_CEILING) {
+        truncated = true;
+        break;
+      }
+      offset += EMOTIONS_TAIL_PAGE_SIZE;
+    }
+    collected.sort((a, b) => (asString(a.detected_at) ?? "").localeCompare(asString(b.detected_at) ?? ""));
+    for (const detection of collected) {
+      if (capReached())
+        break;
+      const detectionId = asString(detection.detection_id);
+      if (!detectionId || !rememberEmotion(`e:${detectionId}`))
+        continue;
+      emitLine({
+        type: "emotion",
+        detection_id: detectionId,
+        conversation_id: detection.conversation_id ?? null,
+        family: detection.family ?? null,
+        primary_cause: detection.primary_cause ?? null,
+        detected_at: detection.detected_at ?? null
+      });
+    }
+    if (truncated || total !== null && collected.length < total) {
+      const scanned = collected.length;
+      const coveragePct = total && total > 0 ? Math.round(scanned / total * 1000) / 10 : null;
+      emitMeta({
+        type: "tail_coverage",
+        signal: "emotions",
+        complete: false,
+        scanned,
+        total,
+        coverage_pct: coveragePct,
+        pages_scanned: pages,
+        detail: `Scanned ${scanned}${total !== null ? ` of ${total}` : ""} detection(s) in the last day` + `${coveragePct !== null ? ` (${coveragePct}%)` : ""}. /emotions is ranked by score with no ` + "time ordering or cursor, so this follows the highest-scoring detections and " + "lower-scoring ones may not appear. Use --full-scan for completeness (many more " + "requests, up to the API offset ceiling of 10000), or `moda emotions --offset=N` to page manually."
+      });
+    } else if (total !== null) {
+      emitMeta({
+        type: "tail_coverage",
+        signal: "emotions",
+        complete: true,
+        scanned: collected.length,
+        total,
+        coverage_pct: 100,
+        pages_scanned: pages,
+        detail: "Scanned the full window for this poll."
+      });
+    }
+  };
+  if (params.once !== true && context.output.mode === "human") {
+    console.error(`Tailing ${signal} every ${intervalMs / 1000}s (Ctrl-C to stop). One JSON line per new item.`);
+  }
+  for (;; ) {
+    if (signal === "conversations" || signal === "all")
+      await pollConversations();
+    if (signal === "emotions" || signal === "all")
+      await pollEmotions();
+    if (params.once === true)
+      break;
+    if (params.max_events !== undefined && emitted >= params.max_events)
+      break;
+    await new Promise((resolve3) => setTimeout(resolve3, intervalMs));
+  }
 }
 async function attachWorldState(rows) {
   return Promise.all(rows.map(async (row) => {
@@ -4130,6 +5218,23 @@ async function runCommand(command, positional, flags, positionals = positional ?
     case "clusters": {
       const args = flagsToArgs(flags);
       const params = ClustersSchema.parse(args);
+      if (params.search !== undefined || params.node_id !== undefined) {
+        const query2 = new URLSearchParams;
+        if (params.search !== undefined)
+          query2.set("q", params.search);
+        if (params.node_id !== undefined)
+          query2.set("node_id", params.node_id);
+        if (params.mode)
+          query2.set("mode", params.mode);
+        if (params.limit)
+          query2.set("limit", params.limit.toString());
+        const data2 = await callDataAPI(`/task-clusters/search?${query2.toString()}`);
+        const record = asRecord(data2) ?? {};
+        const matches = Array.isArray(record.matches) ? record.matches : [];
+        const warnings = params.node_id !== undefined && matches.length === 0 ? notFoundWarning("cluster", params.node_id, true) : [];
+        context.output.writeData(data2, warnings.length > 0 ? { warnings } : undefined);
+        break;
+      }
       const query = new URLSearchParams;
       if (params.parent_id)
         query.set("parent_id", params.parent_id);
@@ -4153,7 +5258,9 @@ async function runCommand(command, positional, flags, positionals = positional ?
         query.set("offset", params.offset.toString());
       const queryString = query.toString() ? `?${query.toString()}` : "";
       const data = await callDataAPI(`/clusters/${params.node_id}/conversations${queryString}`);
-      context.output.writeData(data);
+      const clusterRecord = asRecord(data) ?? {};
+      const warnings = notFoundWarning("cluster", params.node_id, clusterRecord.cluster === null || clusterRecord.cluster === undefined);
+      context.output.writeData(data, warnings.length > 0 ? { warnings } : undefined);
       break;
     }
     case "conversations": {
@@ -4211,7 +5318,16 @@ async function runCommand(command, positional, flags, positionals = positional ?
         query.set("include_tool_io", "true");
       const data = await callDataAPI(`/search?${query.toString()}`);
       recordSearchTelemetry(context, data);
-      context.output.writeData(data);
+      const searchRecord = asRecord(data) ?? {};
+      const degradeReason = asString(searchRecord.degrade_reason);
+      const actualMode = asString(searchRecord.search_mode);
+      const warnings = [];
+      if (degradeReason && degradeReason !== "none") {
+        warnings.push(`Search degraded to keyword mode (${degradeReason}): the requested ${params.mode ?? "hybrid"} ranking did not run, and keyword scores are not comparable to semantic scores. Retry, or use --mode=keyword with exact identifiers.`);
+      } else if (params.mode && actualMode && actualMode !== params.mode && params.mode !== "hybrid") {
+        warnings.push(`Search ran in ${actualMode} mode instead of the requested ${params.mode} mode.`);
+      }
+      context.output.writeData(data, warnings.length > 0 ? { warnings } : undefined);
       break;
     }
     case "world-state": {
@@ -4220,6 +5336,37 @@ async function runCommand(command, positional, flags, positionals = positional ?
       }
       const args = flagsToArgs(flags, "conversation_id", positional);
       const params = WorldStateSchema.parse(args);
+      if (params.snapshot === true && params.replay === true) {
+        throw new CliInputError("Choose either --snapshot or --replay, not both.", "Usage: moda world-state <conversation_id> [--snapshot --msg-index=N [--block-index=M] [--segment-index=K]] | [--replay --message-count=N [--format=frames|fold-inputs]]");
+      }
+      if (params.snapshot === true) {
+        const query2 = new URLSearchParams;
+        query2.set("msg_index", (params.msg_index ?? 0).toString());
+        if (params.block_index !== undefined)
+          query2.set("block_index", params.block_index.toString());
+        if (params.segment_index !== undefined)
+          query2.set("segment_index", params.segment_index.toString());
+        const data2 = await callDataAPI(`/conversations/${params.conversation_id}/world-state/snapshot?${query2.toString()}`);
+        const snapshotRecord = asRecord(data2) ?? {};
+        const warnings2 = notFoundWarning("world state", params.conversation_id, snapshotRecord.found === false);
+        context.output.writeData(data2, warnings2.length > 0 ? { warnings: warnings2 } : undefined);
+        break;
+      }
+      if (params.replay === true) {
+        const format = params.format ?? "frames";
+        if (format === "frames" && params.message_count === undefined) {
+          throw new CliInputError("--message-count=N is required with --replay in frames mode (the API returns no frames without it). Use --format=fold-inputs for the raw keyframes/events without a count.");
+        }
+        const query2 = new URLSearchParams;
+        query2.set("format", format === "fold-inputs" ? "fold_inputs" : "frames");
+        if (params.message_count !== undefined)
+          query2.set("message_count", params.message_count.toString());
+        const data2 = await callDataAPI(`/conversations/${params.conversation_id}/world-state/replay?${query2.toString()}`);
+        const replayRecord = asRecord(data2) ?? {};
+        const warnings2 = notFoundWarning("world state", params.conversation_id, replayRecord.hasData === false);
+        context.output.writeData(data2, warnings2.length > 0 ? { warnings: warnings2 } : undefined);
+        break;
+      }
       const query = new URLSearchParams;
       if (params.summary_only === true)
         query.set("summary_only", "1");
@@ -4227,7 +5374,9 @@ async function runCommand(command, positional, flags, positionals = positional ?
         query.set("event_limit", params.event_limit.toString());
       const queryString = query.toString() ? `?${query.toString()}` : "";
       const data = await callDataAPI(`/conversations/${params.conversation_id}/world-state${queryString}`);
-      context.output.writeData(data);
+      const wsRecord = asRecord(data) ?? {};
+      const warnings = notFoundWarning("world state", params.conversation_id, wsRecord.hasData === false);
+      context.output.writeData(data, warnings.length > 0 ? { warnings } : undefined);
       break;
     }
     case "context": {
@@ -4243,7 +5392,9 @@ async function runCommand(command, positional, flags, positionals = positional ?
         query.set("window", params.window.toString());
       const queryString = query.toString() ? `?${query.toString()}` : "";
       const data = await callDataAPI(`/conversations/${params.conversation_id}/context${queryString}`);
-      context.output.writeData(data);
+      const ctxRecord = asRecord(data) ?? {};
+      const warnings = notFoundWarning("conversation", params.conversation_id, asNumber(ctxRecord.total_messages) === 0);
+      context.output.writeData(data, warnings.length > 0 ? { warnings } : undefined);
       break;
     }
     case "audit":
@@ -4305,7 +5456,13 @@ async function runCommand(command, positional, flags, positionals = positional ?
         query.set("offset", params.offset.toString());
       const queryString = query.toString() ? `?${query.toString()}` : "";
       const data = await callDataAPI(`/tool-failures/${params.tool_name}${queryString}`);
-      await printWithOptionalWindows(withToolFailureAnchors(data), "examples", params.include_window === true, params.window ?? 1, context.output);
+      const tfRecord = asRecord(data) ?? {};
+      const subtypeCount = Array.isArray(tfRecord.subtypes) ? tfRecord.subtypes.length : 0;
+      const exampleCount = Array.isArray(tfRecord.examples) ? tfRecord.examples.length : 0;
+      const warnings = subtypeCount === 0 && exampleCount === 0 ? [
+        `No failures found for tool "${params.tool_name}" in the last ${params.days_back ?? 7} day(s) — the tool may have no failures in this window, or the name may not exist in this tenant. Run \`moda tool-failures\` to list tools with recorded failures, or widen --days-back.`
+      ] : [];
+      await printWithOptionalWindows(withToolFailureAnchors(data), "examples", params.include_window === true, params.window ?? 1, context.output, warnings);
       break;
     }
     case "problems": {
@@ -4325,6 +5482,149 @@ async function runCommand(command, positional, flags, positionals = positional ?
       context.output.writeData(withLink);
       break;
     }
+    case "problem": {
+      if (!positional) {
+        throw new CliInputError("<problem_id> is required", "Usage: moda problem <problem_id> [--evidence|--reports|--conversations|--feedback] [--limit=N] [--cursor=TOKEN] [--family=F] [--door=D]");
+      }
+      const args = flagsToArgs(flags, "id", positional);
+      const params = ProblemSchema.parse(args);
+      const views = ["evidence", "reports", "conversations", "feedback"].filter((view2) => params[view2] === true);
+      if (views.length > 1) {
+        throw new CliInputError(`Choose at most one of --evidence, --reports, --conversations, --feedback (got ${views.map((v) => `--${v}`).join(" ")}).`, "Usage: moda problem <problem_id> [--evidence|--reports|--conversations|--feedback]");
+      }
+      const view = views[0];
+      if (view === undefined) {
+        const data2 = await callDataAPI(`/problems/${encodeURIComponent(params.id)}`);
+        const record = asRecord(data2) ?? {};
+        const warnings = record.found === false ? [
+          `No problem found for id "${params.id}" — it may not exist in this tenant, or may have been merged away (the API returns found:false rather than an error).`
+        ] : [];
+        context.output.writeData(data2, warnings.length > 0 ? { warnings } : undefined);
+        break;
+      }
+      if (!UUID_RE.test(params.id)) {
+        throw new CliInputError(`--${view} requires a canonical problem UUID; got "${params.id}". Run \`moda problems\` or \`moda problem <id>\` first to resolve the id.`);
+      }
+      const query = new URLSearchParams;
+      if (params.limit)
+        query.set("limit", params.limit.toString());
+      if (params.cursor)
+        query.set("cursor", params.cursor);
+      if (view === "conversations") {
+        if (params.family)
+          query.set("family", params.family);
+        if (params.door)
+          query.set("door", params.door);
+      }
+      const queryString = query.toString() ? `?${query.toString()}` : "";
+      const data = await callDataAPI(`/problems/${params.id}/${view}${queryString}`);
+      context.output.writeData(data);
+      break;
+    }
+    case "problem-feedback": {
+      if (!positional) {
+        throw new CliInputError("<problem_id> is required", `Usage: moda problem-feedback <problem_id> --action=${PROBLEM_FEEDBACK_ACTIONS.join("|")} [--reason=TEXT] [--attribution-id=UUID] [--new-name=NAME]`);
+      }
+      const params = ProblemFeedbackSchema.parse({
+        id: positional,
+        ...flags.action !== undefined ? { action: flags.action } : {},
+        ...flags.reason !== undefined ? { reason: flags.reason } : {},
+        ...flags["attribution-id"] !== undefined ? { attribution_id: flags["attribution-id"] } : {},
+        ...flags["new-name"] !== undefined ? { new_name: flags["new-name"] } : {},
+        ...flags.actor !== undefined ? { actor: flags.actor } : {}
+      });
+      if (!UUID_RE.test(params.id)) {
+        throw new CliInputError(`Problem id must be a canonical UUID; got "${params.id}".`);
+      }
+      const reason = params.reason?.trim() ?? "";
+      if ((params.action === "dismiss" || params.action === "flag_attribution") && reason === "") {
+        throw new CliInputError(`--reason is required for --action=${params.action}.`);
+      }
+      if (params.action === "rename" && (params.new_name?.trim() ?? "") === "") {
+        throw new CliInputError("--new-name is required for --action=rename.");
+      }
+      if (params.action === "flag_attribution") {
+        if (params.attribution_id === undefined || params.attribution_id.trim() === "") {
+          throw new CliInputError("--attribution-id=<uuid> is required for --action=flag_attribution. Run `moda problem <problem_id> --evidence` to list attribution ids.");
+        }
+        if (!UUID_RE.test(params.attribution_id)) {
+          throw new CliInputError("--attribution-id must be a UUID.");
+        }
+      }
+      const data = await callDataAPI(`/problems/${params.id}/feedback`, {
+        method: "POST",
+        body: JSON.stringify({
+          action: params.action,
+          ...reason !== "" ? { reason } : {},
+          ...params.attribution_id ? { attribution_id: params.attribution_id } : {},
+          ...params.new_name ? { new_display_name: params.new_name } : {},
+          actor: params.actor ?? "moda-cli"
+        }),
+        headers: { "Content-Type": "application/json" }
+      }, { retries: 0 });
+      context.output.writeData(data);
+      break;
+    }
+    case "emotions": {
+      const args = flagsToArgs(flags);
+      const params = EmotionsSchema.parse(args);
+      const query = new URLSearchParams;
+      if (params.days_back)
+        query.set("days_back", params.days_back.toString());
+      if (params.limit)
+        query.set("limit", params.limit.toString());
+      if (params.offset !== undefined)
+        query.set("offset", params.offset.toString());
+      if (params.family)
+        query.set("family", params.family);
+      const queryString = query.toString() ? `?${query.toString()}` : "";
+      const data = await callDataAPI(`/emotions${queryString}`);
+      context.output.writeData(data);
+      break;
+    }
+    case "hallucinations": {
+      const args = flagsToArgs(flags);
+      if (flags["conversation-id"] !== undefined) {
+        args.conversation_id = flags["conversation-id"];
+      }
+      const params = HallucinationsSchema.parse(args);
+      const query = new URLSearchParams;
+      if (params.days_back)
+        query.set("days_back", params.days_back.toString());
+      if (params.limit)
+        query.set("limit", params.limit.toString());
+      if (params.offset !== undefined)
+        query.set("offset", params.offset.toString());
+      if (params.conversation_id)
+        query.set("conversation_id", params.conversation_id);
+      if (params.kind)
+        query.set("kind", params.kind);
+      const queryString = query.toString() ? `?${query.toString()}` : "";
+      const data = await callDataAPI(`/hallucinations${queryString}`);
+      context.output.writeData(data);
+      break;
+    }
+    case "step-scores": {
+      if (!positional) {
+        throw new CliInputError("<conversation_id> is required", "Usage: moda step-scores <conversation_id>");
+      }
+      const params = StepScoresSchema.parse({ conversation_id: positional });
+      const data = await callDataAPI(`/conversations/${encodeURIComponent(params.conversation_id)}/step-scores`);
+      const record = asRecord(data) ?? {};
+      const steps = Array.isArray(record.steps) ? record.steps : [];
+      const segments = Array.isArray(record.segments) ? record.segments : [];
+      const warnings = steps.length === 0 && segments.length === 0 ? [
+        `No step scores found for conversation "${params.conversation_id}" — it may not exist in this tenant, or has not been scored yet.`
+      ] : [];
+      context.output.writeData(data, warnings.length > 0 ? { warnings } : undefined);
+      break;
+    }
+    case "tail": {
+      const args = flagsToArgs(flags);
+      const params = TailSchema.parse(args);
+      await runTailCommand(params, context);
+      break;
+    }
     case "feedback": {
       const note = positionals.join(" ").trim();
       if (note === "") {
@@ -4463,7 +5763,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result",
     handler: async (context) => {
-      const { runInit } = await import("./index-fm9ey3ks.js");
+      const { runInit } = await import("./index-fwxpt51s.js");
       if (context.outputMode === "agent-stream") {
         context.output.writeEvent({
           event: "started",
@@ -4504,7 +5804,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result-and-error",
     handler: async (context) => {
-      const { runProvision } = await import("./provision-dphktm75.js");
+      const { runProvision } = await import("./provision-r0cq3g2v.js");
       return runProvision(context, {
         resumeCommand: buildResumeCommand("provision", context.rawFlags)
       });
@@ -4775,6 +6075,65 @@ var commandRegistry = createCommandRegistry([
     examples: ["moda problems", "moda problems --days-back=7 --limit=10"],
     ...dataApiDefaults
   }),
+  legacyCommand({
+    name: "problem",
+    description: "Open one Problem: dossier, or --evidence/--reports/--conversations/--feedback pages",
+    examples: [
+      "moda problem <problem_id>",
+      "moda problem <problem_id> --evidence --limit=10",
+      "moda problem <problem_id> --reports",
+      "moda problem <problem_id> --conversations --family=tool_failure",
+      "moda problem <problem_id> --feedback"
+    ],
+    ...dataApiDefaults
+  }),
+  legacyCommand({
+    name: "problem-feedback",
+    description: "Submit Problem feedback: mark fixed, dismiss, rename, or flag a bad attribution",
+    examples: [
+      "moda problem-feedback <problem_id> --action=mark_fixed",
+      'moda problem-feedback <problem_id> --action=dismiss --reason="not actionable"',
+      'moda problem-feedback <problem_id> --action=rename --new-name="Better title"',
+      'moda problem-feedback <problem_id> --action=flag_attribution --attribution-id=<uuid> --reason="wrong conversation"'
+    ],
+    ...dataApiDefaults,
+    mutability: "write"
+  }),
+  legacyCommand({
+    name: "emotions",
+    description: "Multi-family emotion detections (frustration, sadness, confusion, anxiety, trust, positive)",
+    examples: [
+      "moda emotions --days-back=7",
+      "moda emotions --family=confusion --limit=20"
+    ],
+    ...dataApiDefaults
+  }),
+  legacyCommand({
+    name: "hallucinations",
+    description: "Grounding detections: contradicted/verified outputs with rule breakdown",
+    examples: [
+      "moda hallucinations --days-back=30",
+      "moda hallucinations --kind=contradicted --limit=20",
+      "moda hallucinations --conversation-id=<id>"
+    ],
+    ...dataApiDefaults
+  }),
+  legacyCommand({
+    name: "step-scores",
+    description: "Graph-PRM step scores for a conversation (per-segment curves, first bad step, rollup)",
+    examples: ["moda step-scores <conversation_id>"],
+    ...dataApiDefaults
+  }),
+  legacyCommand({
+    name: "tail",
+    description: "Live-tail new conversations and detections as NDJSON (one JSON line per item)",
+    examples: [
+      "moda tail",
+      "moda tail --signal=emotions --interval=30",
+      "moda tail --once"
+    ],
+    ...dataApiDefaults
+  }),
   legacyCommand({
     name: "feedback",
     description: "Flag wrong/missing data or CLI quirks to the Moda team",
@@ -4809,6 +6168,41 @@ var commandRegistry = createCommandRegistry([
     handler: async (context) => ({
       exitCode: await runSkillsCommand(context)
     })
+  },
+  {
+    name: "fixes",
+    description: 'List the ranked queue of Fixes ("a fix with proof") for this tenant',
+    examples: ["moda fixes", "moda fixes --status=VERIFIED", "moda fixes --limit=10"],
+    auth: "none",
+    outputModes: ["human", "json", "agent"],
+    mutability: "read",
+    validateConfigBeforeRun: false,
+    resetApiRequestCountBeforeRun: false,
+    telemetry: "result",
+    handler: async (context) => ({
+      exitCode: await runFixesCommand(context)
+    })
+  },
+  {
+    name: "fix",
+    description: 'Draft, verify, check out, submit, and dismiss Fixes ("a fix with proof")',
+    examples: [
+      "moda fix start <problem_id> --wait",
+      "moda fix <fix_id> --packet",
+      "moda fix verify <fix_id> --prompt-file=prompts/agent.prompt.md",
+      "moda fix checkout <fix_id>",
+      "moda fix submit <fix_id> --pr",
+      'moda fix dismiss <fix_id> --reason="not actionable"'
+    ],
+    auth: "none",
+    outputModes: ["human", "json", "agent"],
+    mutability: "write",
+    validateConfigBeforeRun: false,
+    resetApiRequestCountBeforeRun: false,
+    telemetry: "result",
+    handler: async (context) => ({
+      exitCode: await runFixCommand(context)
+    })
   }
 ]);
 function classifyCliError(error) {
@@ -4888,7 +6282,12 @@ async function dispatchParsedCommand(parsed, startedAt = Date.now()) {
     return 0;
   }
   if (command === "--help" || command === "-h" || flags.help === "true") {
-    printHelp();
+    const helpTarget = command && command !== "--help" && command !== "-h" ? commandRegistry.find(command) : undefined;
+    if (helpTarget) {
+      printCommandHelp(helpTarget);
+    } else {
+      printHelp();
+    }
     return 0;
   }
   if (command === "--json-schemas" || flags["json-schemas"] === "true") {
@@ -5051,7 +6450,7 @@ function installSignalHandlers() {
 async function main() {
   process.exitCode = await dispatchParsedCommand(parseArgs(process.argv));
 }
-var isMain = process.argv[1] && fileURLToPath(import.meta.url) === realpathSync(process.argv[1]);
+var isMain = process.argv[1] && fileURLToPath(import.meta.url) === realpathSync2(process.argv[1]);
 if (isMain) {
   installSignalHandlers();
   main().catch((error) => {
@@ -5069,5 +6468,6 @@ export {
   commandRegistry,
   classifyCliError,
   buildResumeCommand,
+  TAIL_LIMITS,
   CliInputError
 };