@moda-ai/cli 1.26.0 → 1.27.0

package/dist/{cli-xf5nx5hc.js → cli-cjqzrp9k.js}

@@ -1071,14 +1071,14 @@ function detectAgents() {
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { createHash as createHash2 } from "node:crypto";
 import {
-  existsSync as existsSync6,
+  existsSync as existsSync7,
   lstatSync as lstatSync2,
-  mkdirSync as mkdirSync4,
+  mkdirSync as mkdirSync5,
   readdirSync as readdirSync3,
-  readFileSync as readFileSync4,
-  writeFileSync as writeFileSync5
+  readFileSync as readFileSync5,
+  writeFileSync as writeFileSync6
 } from "node:fs";
-import { basename, dirname as dirname4, join as join5, relative as relative3 } from "node:path";
+import { basename, dirname as dirname5, join as join6, relative as relative3 } from "node:path";
 
 // src/skills-manifest.ts
 import {
@@ -1299,10 +1299,86 @@ function yamlQuote(value) {
   return JSON.stringify(value);
 }
 
+// src/agents-md.ts
+import { existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync5 } from "node:fs";
+import { dirname as dirname4, join as join5 } from "node:path";
+var AGENTS_MD_FILENAME = "AGENTS.md";
+var FIXES_BLOCK_BEGIN = "<!-- moda:fixes:begin -->";
+var FIXES_BLOCK_END = "<!-- moda:fixes:end -->";
+function renderFixesBlock() {
+  return [
+    FIXES_BLOCK_BEGIN,
+    "## Moda Fixes (managed block — edits inside are overwritten by moda-cli)",
+    "",
+    "- Before editing prompt or skill files, run `moda fixes` to see the ranked",
+    '  queue of Moda Fixes ("a fix with proof") already drafted for this repo,',
+    "  and `moda fix <fix_id> --packet` for the evidence packet.",
+    "- Gate any prompt/skill change against production evidence with",
+    "  `moda fix verify <fix_id> [--prompt-file=<path>]`. Exit codes: 0 = holdout",
+    "  win vs baseline (pass), 1 = failing (per-case findings in the envelope),",
+    "  3 = degraded/inconclusive — never treat exit 3 as a pass.",
+    "- Fix PRs must carry the magic word `Fixes MODA-FIX-<SHORTREF>` in the PR",
+    "  body so the merge confirms the fix and starts production monitoring.",
+    FIXES_BLOCK_END
+  ].join(`
+`);
+}
+function upsertManagedBlock(existing, block) {
+  if (existing === null) {
+    return `${block}
+`;
+  }
+  const beginIdx = existing.indexOf(FIXES_BLOCK_BEGIN);
+  const endIdx = existing.indexOf(FIXES_BLOCK_END);
+  if (beginIdx !== -1 && endIdx !== -1 && endIdx >= beginIdx) {
+    const before = existing.slice(0, beginIdx);
+    const after = existing.slice(endIdx + FIXES_BLOCK_END.length);
+    return `${before}${block}${after}`;
+  }
+  const separator = existing === "" || existing.endsWith(`
+
+`) ? "" : existing.endsWith(`
+`) ? `
+` : `
+
+`;
+  return `${existing}${separator}${block}
+`;
+}
+function writeFileIfChanged(filePath, content) {
+  try {
+    mkdirSync4(dirname4(filePath), { recursive: true });
+    if (existsSync6(filePath)) {
+      const current = readFileSync4(filePath, "utf8");
+      if (current === content)
+        return "unchanged";
+      writeFileSync5(filePath, content);
+      return "updated";
+    }
+    writeFileSync5(filePath, content);
+    return "wrote";
+  } catch {
+    return "failed";
+  }
+}
+function upsertFixesAgentsBlock(cwd) {
+  const filePath = join5(cwd, AGENTS_MD_FILENAME);
+  let existing = null;
+  if (existsSync6(filePath)) {
+    try {
+      existing = readFileSync4(filePath, "utf8");
+    } catch {
+      return { path: AGENTS_MD_FILENAME, status: "failed" };
+    }
+  }
+  const next = upsertManagedBlock(existing, renderFixesBlock());
+  return { path: AGENTS_MD_FILENAME, status: writeFileIfChanged(filePath, next) };
+}
+
 // src/skills.ts
 var SKILLS_REQUEST_TIMEOUT_MS = 15000;
 var VALID_STATUSES = new Set(["approved", "proposed", "all"]);
-var SKILL_PROPOSALS_MANIFEST_PATH = join5(".moda", "skill-proposals.yml");
+var SKILL_PROPOSALS_MANIFEST_PATH = join6(".moda", "skill-proposals.yml");
 async function fetchSkills(status) {
   const apiKey = resolveApiKey();
   if (!apiKey) {
@@ -1427,15 +1503,15 @@ function formatRunStatusHuman(run, events) {
 }
 function writeIfChanged(filePath, content) {
   try {
-    mkdirSync4(dirname4(filePath), { recursive: true });
-    if (existsSync6(filePath)) {
-      const current = readFileSync4(filePath, "utf8");
+    mkdirSync5(dirname5(filePath), { recursive: true });
+    if (existsSync7(filePath)) {
+      const current = readFileSync5(filePath, "utf8");
       if (current === content)
         return "unchanged";
-      writeFileSync5(filePath, content);
+      writeFileSync6(filePath, content);
       return "updated";
     }
-    writeFileSync5(filePath, content);
+    writeFileSync6(filePath, content);
     return "wrote";
   } catch {
     return "failed";
@@ -1472,7 +1548,7 @@ async function pullSkills(options = {}) {
     }
   }
   const agents = detectAgents();
-  const writeCursor = agents.includes("Cursor") || existsSync6(join5(cwd, ".cursor"));
+  const writeCursor = agents.includes("Cursor") || existsSync7(join6(cwd, ".cursor"));
   const records = [];
   for (const skill of skills) {
     if (!skill.skill_id || !skill.skill_md) {
@@ -1485,7 +1561,7 @@ async function pullSkills(options = {}) {
       log(`  skipped invalid skill_id: ${JSON.stringify(skill.skill_id).slice(0, 80)}`);
       continue;
     }
-    const claudePath = join5(cwd, ".claude", "skills", safeId, "SKILL.md");
+    const claudePath = join6(cwd, ".claude", "skills", safeId, "SKILL.md");
     const claudeStatus = writeIfChanged(claudePath, skill.skill_md);
     const claudeRelativePath = `.claude/skills/${safeId}/SKILL.md`;
     recordOutcome(summary, claudeStatus, log, claudeRelativePath);
@@ -1493,7 +1569,7 @@ async function pullSkills(options = {}) {
     if (claudeStatus !== "failed")
       paths.push(claudeRelativePath);
     if (writeCursor) {
-      const cursorPath = join5(cwd, ".cursor", "rules", `${safeId}.mdc`);
+      const cursorPath = join6(cwd, ".cursor", "rules", `${safeId}.mdc`);
       const cursorStatus = writeIfChanged(cursorPath, claudeSkillToCursorRule(skill.skill_md));
       const cursorRelativePath = `.cursor/rules/${safeId}.mdc`;
       recordOutcome(summary, cursorStatus, log, cursorRelativePath);
@@ -1531,15 +1607,16 @@ function recordOutcome(summary, status, log, relativePath) {
       break;
   }
 }
-var SKILLS_DIR = join5(".claude", "skills");
+var SKILLS_DIR = join6(".claude", "skills");
 var SKILL_FILE = "SKILL.md";
 var MAX_SKILL_WALK_DEPTH = 4;
 async function runSkillSync(flags = {}, profileOptions = {}, options = {}) {
   const cwd = options.cwd ?? process.cwd();
   const dryRun = flags["dry-run"] === "true";
+  const agentsMd = dryRun ? undefined : upsertFixesAgentsBlock(cwd);
   const skills = discoverLocalSkills(cwd);
   if (skills.length === 0) {
-    return { synced: [], dryRun };
+    return { synced: [], dryRun, ...agentsMd ? { agentsMd } : {} };
   }
   const sourceCommit = getGitCommit2(cwd);
   const response = await callControlAPI("/skills/sync", {
@@ -1558,11 +1635,11 @@ async function runSkillSync(flags = {}, profileOptions = {}, options = {}) {
       dryRun
     })
   }, profileOptions);
-  return { synced: response.synced ?? [], dryRun };
+  return { synced: response.synced ?? [], dryRun, ...agentsMd ? { agentsMd } : {} };
 }
 function discoverLocalSkills(cwd) {
-  const skillsRoot = join5(cwd, SKILLS_DIR);
-  if (!existsSync6(skillsRoot))
+  const skillsRoot = join6(cwd, SKILLS_DIR);
+  if (!existsSync7(skillsRoot))
     return [];
   const managed = new Set(managedSkillPaths(cwd));
   const skills = [];
@@ -1570,12 +1647,12 @@ function discoverLocalSkills(cwd) {
     const sourcePath = relative3(cwd, absPath).replace(/\\/g, "/");
     if (managed.has(sourcePath))
       continue;
-    const key = basename(dirname4(absPath));
+    const key = basename(dirname5(absPath));
     if (key === "moda-cli" || !/^[A-Za-z0-9_-]+$/.test(key))
       continue;
     let content;
     try {
-      content = readFileSync4(absPath, "utf8");
+      content = readFileSync5(absPath, "utf8");
     } catch {
       continue;
     }
@@ -1610,7 +1687,7 @@ function walkSkillFiles(dir, depth) {
   }
   const files = [];
   for (const entry of entries) {
-    const fullPath = join5(dir, entry);
+    const fullPath = join6(dir, entry);
     let stat;
     try {
       stat = lstatSync2(fullPath);
@@ -1684,7 +1761,7 @@ async function applySkillProposal(proposalId, flags, profileOptions = {}, option
   }
   const safeId = safeSkillId(proposal.skillId);
   const relativePath = `.claude/skills/${safeId}/SKILL.md`;
-  const writeStatus = writeIfChanged(join5(cwd, relativePath), proposal.skillMd);
+  const writeStatus = writeIfChanged(join6(cwd, relativePath), proposal.skillMd);
   if (writeStatus === "failed") {
     throw new Error(`Failed to write ${relativePath}`);
   }
@@ -1717,9 +1794,9 @@ function safeSkillId(skillId) {
   return safeId;
 }
 function writeSkillProposalManifest(cwd, proposal, relativePath) {
-  const manifestPath = join5(cwd, SKILL_PROPOSALS_MANIFEST_PATH);
-  mkdirSync4(dirname4(manifestPath), { recursive: true });
-  const existing = existsSync6(manifestPath) ? readFileSync4(manifestPath, "utf8") : `applied_proposals:
+  const manifestPath = join6(cwd, SKILL_PROPOSALS_MANIFEST_PATH);
+  mkdirSync5(dirname5(manifestPath), { recursive: true });
+  const existing = existsSync7(manifestPath) ? readFileSync5(manifestPath, "utf8") : `applied_proposals:
 `;
   const entry = [
     `  - proposal_id: "${escapeYamlString(proposal.proposalId)}"`,
@@ -1738,7 +1815,7 @@ function writeSkillProposalManifest(cwd, proposal, relativePath) {
   const prefix = existing.endsWith(`
 `) ? existing : `${existing}
 `;
-  writeFileSync5(manifestPath, `${prefix}${entry}
+  writeFileSync6(manifestPath, `${prefix}${entry}
 `);
 }
 function escapeYamlString(value) {
@@ -1843,7 +1920,11 @@ async function runSkillsCommand(input) {
   }
   if (sub === "sync") {
     const result = await runSkillSync(flags, { profile: context.profile, env: context.env });
-    context.output.writeData({ synced: result.synced, dryRun: result.dryRun });
+    context.output.writeData({
+      synced: result.synced,
+      dryRun: result.dryRun,
+      ...result.agentsMd ? { agentsMd: result.agentsMd } : {}
+    });
     return 0;
   }
   if (sub !== "pull") {
@@ -1973,8 +2054,8 @@ function sha2562(input) {
 
 // src/doctor.ts
 import { createHash as createHash3 } from "node:crypto";
-import { existsSync as existsSync7, readFileSync as readFileSync5, statSync } from "node:fs";
-import { join as join6 } from "node:path";
+import { existsSync as existsSync8, readFileSync as readFileSync6, statSync } from "node:fs";
+import { join as join7 } from "node:path";
 async function runDoctorCommand(context) {
   const report = await buildDoctorReport(context, {
     offline: context.flags.offline === "true"
@@ -2097,8 +2178,8 @@ async function buildDoctorReport(context, options) {
   checks.push(urlCheck("base_url_valid", "config", "Base URL is valid", baseUrl));
   checks.push(urlCheck("ingest_url_valid", "config", "Ingest URL is valid", ingestUrl));
   checks.push(localBaseUrlCheck(activeProfile.environment, baseUrl));
-  const manifestPath = join6(context.cwd, ".moda", "harness.json");
-  const manifestExists = existsSync7(manifestPath);
+  const manifestPath = join7(context.cwd, ".moda", "harness.json");
+  const manifestExists = existsSync8(manifestPath);
   checks.push({
     id: "harness_manifest_exists",
     group: "harness",
@@ -2184,7 +2265,7 @@ function authTokenCheck(context, hasApiKey) {
   };
 }
 function configPermissionCheck(path) {
-  if (!existsSync7(path)) {
+  if (!existsSync8(path)) {
     return {
       id: "config_file_permissions",
       group: "config",
@@ -2327,7 +2408,7 @@ function harnessCurrentCheck(cwd, manifestPath, manifestExists, tenantId) {
       tenantId,
       tenantSource: tenantId ? "env_or_config" : undefined
     });
-    const saved = JSON.parse(readFileSync5(manifestPath, "utf8"));
+    const saved = JSON.parse(readFileSync6(manifestPath, "utf8"));
     const savedHash = stableGraphHash(saved);
     const currentHash = stableGraphHash(current);
     const matches = savedHash === currentHash;
@@ -2387,8 +2468,8 @@ function harnessSyncStateCheck(cwd) {
   };
 }
 function harnessReportStateCheck(cwd) {
-  const reportPath = join6(cwd, HARNESS_REPORT_PATH);
-  if (!existsSync7(reportPath)) {
+  const reportPath = join7(cwd, HARNESS_REPORT_PATH);
+  if (!existsSync8(reportPath)) {
     return {
       id: "harness_report_approved_synced",
       group: "harness",
@@ -2481,11 +2562,11 @@ function harnessReportStateCheck(cwd) {
   }
 }
 function readHarnessReportApproval(cwd) {
-  const approvalPath = join6(cwd, HARNESS_REPORT_APPROVAL_PATH);
-  if (!existsSync7(approvalPath))
+  const approvalPath = join7(cwd, HARNESS_REPORT_APPROVAL_PATH);
+  if (!existsSync8(approvalPath))
     return null;
   try {
-    return JSON.parse(readFileSync5(approvalPath, "utf8"));
+    return JSON.parse(readFileSync6(approvalPath, "utf8"));
   } catch {
     return {
       schemaVersion: HARNESS_REPORT_APPROVAL_SCHEMA_VERSION,
@@ -2499,7 +2580,7 @@ function readHarnessReportApproval(cwd) {
   }
 }
 function discoveryCheck(id, group, title, cwd, relativePaths, nextCommand) {
-  const found = relativePaths.filter((path) => existsSync7(join6(cwd, path)));
+  const found = relativePaths.filter((path) => existsSync8(join7(cwd, path)));
   return {
     id,
     group,
@@ -2515,8 +2596,8 @@ function sdkInitializationCheck(cwd) {
   const candidates = ["src", "app", "agent_harness"];
   let detected = false;
   for (const candidate of candidates) {
-    const path = join6(cwd, candidate);
-    if (!existsSync7(path))
+    const path = join7(cwd, candidate);
+    if (!existsSync8(path))
       continue;
     try {
       const stat = statSync(path);
@@ -2839,4 +2920,4 @@ function isRecord(value) {
   return Boolean(value) && typeof value === "object" && !Array.isArray(value);
 }
 
-export { runPromptsCommand, initPrompts, runPromptSync, claudeSkillToCursorRule, installRules, detectAgents, SKILL_SOURCE_INTEGRATION_BUNDLED, readSkillsManifest, upsertSkillManifestRecord, runSkillSync, runSkillsCommand, runDoctorCommand, runStatusCommand, buildDoctorReport };
+export { DEFAULT_POLL_INTERVAL_MS, DEFAULT_WAIT_TIMEOUT_MS, fetchLatestRun, runPromptsCommand, initPrompts, runPromptSync, claudeSkillToCursorRule, installRules, detectAgents, SKILL_SOURCE_INTEGRATION_BUNDLED, readSkillsManifest, upsertSkillManifestRecord, runSkillSync, runSkillsCommand, runDoctorCommand, runStatusCommand, buildDoctorReport };