@moda-ai/cli 1.31.1 → 1.32.0

package/dist/{cli-9xw5bq1j.js → cli-yz99t7n8.js}

@@ -8,7 +8,7 @@ import {
   saveProfileConfig,
   secretFilePathFromRef,
   writeSecretJsonFile
-} from "./cli-59yacef3.js";
+} from "./cli-drabjmaj.js";
 
 // src/auth-storage.ts
 import { existsSync, readFileSync, rmSync } from "node:fs";

package/dist/cli.js

@@ -8,7 +8,7 @@ import {
   runPromptsCommand,
   runSkillsCommand,
   runStatusCommand
-} from "./cli-j3rr0nh7.js";
+} from "./cli-w22qhyk4.js";
 import {
   ApiError,
   HARNESS_REPORT_APPROVAL_PATH,
@@ -29,7 +29,7 @@ import {
   summarizeHarness,
   terminalStyles,
   validateHarnessReport
-} from "./cli-p3271yp2.js";
+} from "./cli-bh8gxmm8.js";
 import {
   authFetch,
   clearAuthSession,
@@ -37,7 +37,7 @@ import {
   loadAuthSession,
   login,
   revokeCliSessionToken
-} from "./cli-9xw5bq1j.js";
+} from "./cli-yz99t7n8.js";
 import {
   AGENT_ERROR_CODES,
   CliAccessError,
@@ -84,7 +84,7 @@ import {
   validateConfig,
   wasOutputCancelled,
   writeSecretJsonFile
-} from "./cli-59yacef3.js";
+} from "./cli-drabjmaj.js";
 
 // src/cli.ts
 import { z as z2 } from "zod";
@@ -5394,7 +5394,7 @@ Commands:
   prompts init                     Create .moda/prompts.yml
   prompts status                   Show local prompt changes
   prompts diff                     Show local prompt changes
-  prompts sync                     Upload changed prompt versions
+  prompts sync                     Analyze prompt sources and upload versions
   prompts sync --watch             Upload again when prompt files change
   prompts promote <key>            Move a dev/staging/prod label
   prompts ab                       Run a judged prompt A/B replay experiment
@@ -5538,6 +5538,7 @@ Init flags:
   --analyst-model=MODEL            Model for the claude analyst (default: sonnet;
                                    "default" = the claude CLI's own default;
                                    env: MODA_HARNESS_ANALYST_MODEL)
+  --assist=none                    Disable agent fallback for prompt discovery
   --concern=topology|tools|prompts|evals
                                    Harness analyze: restrict the pass to one
                                    concern (whole repo, one report scope); an
@@ -5597,7 +5598,7 @@ Examples:
   moda --agent doctor
   moda agent context
   moda agent next-action
-  moda agent evidence doctor:harness_report_approved_synced
+  moda agent evidence doctor:api_key_resolves
   moda investigate
   moda failures
   moda ask "what should I fix first?"
@@ -6579,7 +6580,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result",
     handler: async (context) => {
-      const { runInit } = await import("./index-4enh6fq6.js");
+      const { runInit } = await import("./index-tbrrfhhf.js");
       if (context.outputMode === "agent-stream") {
         context.output.writeEvent({
           event: "started",
@@ -6620,7 +6621,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result-and-error",
     handler: async (context) => {
-      const { runProvision } = await import("./provision-r0cq3g2v.js");
+      const { runProvision } = await import("./provision-d242y9qd.js");
       return runProvision(context, {
         resumeCommand: buildResumeCommand("provision", context.rawFlags)
       });
@@ -6822,7 +6823,7 @@ var commandRegistry = createCommandRegistry([
       "moda agent context",
       "moda agent investigate",
       "moda agent next-action",
-      "moda agent evidence doctor:harness_report_approved_synced"
+      "moda agent evidence doctor:api_key_resolves"
     ],
     auth: "none",
     outputModes: ["agent", "agent-stream", "json"],
@@ -7054,8 +7055,8 @@ var commandRegistry = createCommandRegistry([
       {
         name: "init",
         description: "Create .moda/prompts.yml in the current directory (never overwrites)",
-        usage: "moda prompts init",
-        flags: [],
+        usage: "moda prompts init [--from-harness=<report>]",
+        flags: [{ name: "--from-harness=<report>", description: "Register verified source mappings from a harness report; source files stay in place." }],
         examples: ["moda prompts init", "cd /path/to/project && moda prompts init"]
       },
       {
@@ -7072,10 +7073,15 @@ var commandRegistry = createCommandRegistry([
       },
       {
         name: "sync",
-        description: "Upload changed prompt versions to Moda Cloud",
-        usage: "moda prompts sync [--watch] [--dry-run]",
+        description: "Analyze prompt sources and upload verified versions to Moda Cloud",
+        usage: "moda prompts sync [--analyst=local-scan|claude|codex|cursor|auto] [--no-analyze] [--from-harness=<report>] [--watch] [--dry-run]",
         flags: [
-          { name: "--watch", description: "Re-upload whenever a prompt file changes." },
+          { name: "--analyst=local-scan|claude|codex|cursor|auto", description: "Prompt discovery analyst; defaults to deterministic local-scan. Other values enable bounded agent fallback." },
+          { name: "--assist=none", description: "Disable agent fallback, including with an explicit analyst." },
+          { name: "--no-analyze", description: "Skip discovery and sync only configured sources." },
+          { name: "--from-harness=<report>", description: "Read and register harness prompt source mappings before sync." },
+          { name: "--allow-untrack", description: "Explicitly remove missing keys from local tracking; registry history remains." },
+          { name: "--watch", description: "Analyze before syncing; re-upload when mapped prompt files change." },
           { name: "--dry-run", description: "Show what would be uploaded without writing." }
         ],
         examples: ["moda prompts sync", "moda prompts sync --dry-run"]

package/dist/harness-4s8pybt1.js

@@ -0,0 +1,91 @@
+import {
+  CONCERN_CANDIDATE_KINDS,
+  HARNESS_ANALYZE_CONCERNS,
+  SEED_CANDIDATE_KIND_LABELS,
+  analystEventProgress,
+  analyzeHarnessPrompts,
+  assertHarnessGraphSyncQuality,
+  buildSourceSnapshot,
+  codingAgentDisplayName,
+  computeDeterministicFloor,
+  deriveRelationshipsFromGraph,
+  describeCodingAgentEvent,
+  describeSyncIdentity,
+  describeSyncTenantLabel,
+  detectAvailableCodingAgents,
+  emitWrittenArtifacts,
+  findFresherHarnessReports,
+  graphForSync,
+  inventoryFiles,
+  isDeterministicLocalAnalyst,
+  isRetryableExternalAnalystFailure,
+  mergeDeterministicArtifacts,
+  numericEnv,
+  numericEnvAllowZero,
+  promptNameFromPath,
+  readHarnessSyncState,
+  renderAnalystCandidateLines,
+  renderAnalystSeedLines,
+  renderExternalHarnessAnalystPrompt,
+  repairExternalAnalystReport,
+  resolveAnalystModel,
+  resolveHarnessAnalyzeConcern,
+  runCodingAgent,
+  runHarnessCommand,
+  scanHarness,
+  sleep,
+  stableId,
+  summarizeHarness,
+  summarizeInvalidAnalystReport,
+  titleFromId,
+  truncateText,
+  writeHarnessAnalyzeResult,
+  writeHarnessArtifacts,
+  writeHumanProgress
+} from "./cli-bh8gxmm8.js";
+import"./cli-drabjmaj.js";
+export {
+  writeHumanProgress,
+  writeHarnessArtifacts,
+  writeHarnessAnalyzeResult,
+  truncateText,
+  titleFromId,
+  summarizeInvalidAnalystReport,
+  summarizeHarness,
+  stableId,
+  sleep,
+  scanHarness,
+  runHarnessCommand,
+  runCodingAgent,
+  resolveHarnessAnalyzeConcern,
+  resolveAnalystModel,
+  repairExternalAnalystReport,
+  renderExternalHarnessAnalystPrompt,
+  renderAnalystSeedLines,
+  renderAnalystCandidateLines,
+  readHarnessSyncState,
+  promptNameFromPath,
+  numericEnvAllowZero,
+  numericEnv,
+  mergeDeterministicArtifacts,
+  isRetryableExternalAnalystFailure,
+  isDeterministicLocalAnalyst,
+  inventoryFiles,
+  graphForSync,
+  findFresherHarnessReports,
+  emitWrittenArtifacts,
+  detectAvailableCodingAgents,
+  describeSyncTenantLabel,
+  describeSyncIdentity,
+  describeCodingAgentEvent,
+  deriveRelationshipsFromGraph,
+  computeDeterministicFloor,
+  codingAgentDisplayName,
+  buildSourceSnapshot,
+  assertHarnessGraphSyncQuality,
+  analyzeHarnessPrompts,
+  analystEventProgress,
+  SEED_CANDIDATE_KIND_LABELS,
+  HARNESS_ANALYZE_CONCERNS,
+  CONCERN_CANDIDATE_KINDS
+};

package/dist/{harness-github-actions-kbw4z7q4.js → harness-github-actions-53mhczg2.js}

@@ -1,7 +1,7 @@
 import {
   buildSourceSnapshot
-} from "./cli-p3271yp2.js";
-import"./cli-59yacef3.js";
+} from "./cli-bh8gxmm8.js";
+import"./cli-drabjmaj.js";
 
 // src/harness-github-actions.ts
 var DEFAULT_MODA_GITHUB_URL = "https://moda-github.modas.workers.dev";

package/dist/{index-4enh6fq6.js → index-tbrrfhhf.js}

@@ -10,7 +10,7 @@ import {
   runPromptSync,
   runSkillSync,
   upsertSkillManifestRecord
-} from "./cli-j3rr0nh7.js";
+} from "./cli-w22qhyk4.js";
 import {
   codingAgentDisplayName,
   describeCodingAgentEvent,
@@ -28,14 +28,14 @@ import {
   runHarnessCommand,
   startRemoteAnalyze,
   stripAnsi
-} from "./cli-p3271yp2.js";
+} from "./cli-bh8gxmm8.js";
 import {
   selectTenantAndCreateKey
-} from "./cli-pq6rte0w.js";
+} from "./cli-scjxgaba.js";
 import {
   loadToken,
   login
-} from "./cli-9xw5bq1j.js";
+} from "./cli-yz99t7n8.js";
 import {
   CliAuthError,
   CliInputError,
@@ -43,7 +43,7 @@ import {
   createCommandContext,
   resolveIngestUrl,
   resolveModaBaseUrl
-} from "./cli-59yacef3.js";
+} from "./cli-drabjmaj.js";
 
 // src/init/index.ts
 import { existsSync as existsSync6, mkdirSync as mkdirSync5, readdirSync as readdirSync4, readFileSync as readFileSync5, writeFileSync as writeFileSync4 } from "node:fs";
@@ -2025,7 +2025,15 @@ Harness analysis keeps running on Moda. Resume anytime with \`${HARNESS_PULL_REC
   await initPrompts({ silent: true });
   laneBoard?.startLane("prompts", "Prompts", { detail: "Created or verified .moda/prompts.yml" });
   try {
-    const promptSync = await runPromptSync({}, { profile });
+    const reportPath = join6(process.cwd(), ".moda/harness-report.json");
+    let sourceReport;
+    if (existsSync6(reportPath)) {
+      const report = JSON.parse(readFileSync5(reportPath, "utf8"));
+      const prompts = report?.graph?.artifacts?.filter((item) => item.type === "prompt") ?? [];
+      if (prompts.length)
+        sourceReport = reportPath;
+    }
+    const promptSync = await runPromptSync(sourceReport ? { "from-harness": sourceReport } : {}, { profile });
     laneBoard?.complete("prompts", promptSync.synced.length > 0 ? `${promptSync.synced.length} prompt(s) synced` : "manifest ready (no prompt files to sync yet)");
   } catch (err) {
     const message = err instanceof Error ? err.message : String(err);

package/dist/{provision-r0cq3g2v.js → provision-d242y9qd.js}

@@ -1,15 +1,15 @@
 import {
   selectTenantAndCreateKey
-} from "./cli-pq6rte0w.js";
+} from "./cli-scjxgaba.js";
 import {
   loadAuthSession
-} from "./cli-9xw5bq1j.js";
+} from "./cli-yz99t7n8.js";
 import {
   CliAuthError,
   resolveIngestUrl,
   resolveModaBaseUrl,
   stringOption
-} from "./cli-59yacef3.js";
+} from "./cli-drabjmaj.js";
 
 // src/provision.ts
 async function runProvision(context, options = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moda-ai/cli",
-  "version": "1.31.1",
+  "version": "1.32.0",
   "description": "CLI for Moda - AI agent analytics and observability",
   "type": "module",
   "bin": {
@@ -48,7 +48,9 @@
   },
   "dependencies": {
     "@inquirer/prompts": "^8.4.1",
+    "fast-glob": "^3.3.3",
     "open": "^11.0.0",
+    "yaml": "^2.9.1",
     "zod": "^3.24.1"
   },
   "devDependencies": {

package/skills/integration/index.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "moda.skill_index.v1",
-  "bundled_at": "2026-09-15T20:51:36.329Z",
-  "cli_version": "1.31.1",
+  "bundled_at": "2026-09-18T05:32:32.364Z",
+  "cli_version": "1.32.0",
   "skills": [
     {
       "id": "integration-cloudflare-think",

package/skills/integration/integration-cloudflare-think/SKILL.md

@@ -63,30 +63,33 @@ runtime termination does not have durable archival guarantees.
 
 ## 4. Ingest reusable prompts when requested
 
-Find the source prompt (`getSystemPrompt` or context configuration). Inline
-TypeScript is not discovered by `moda prompts`. Extract the reusable
-definition into a supported `.prompt.json` file and have the original hook
-read it. Run `moda prompts init` then `moda prompts sync`; require the
-expected definition to be present. Import `.moda/prompts.lock.json` at
-build time and pass its `{ key, promptId, versionId }` entry as `prompt`.
-Re-sync changed definitions before building.
-
-Use the CLI's actual JSON fields, for example:
-
-```json
-{
-  "key": "task-agent.system",
-  "name": "Task agent system prompt",
-  "systemPrompt": "The exact existing getSystemPrompt text goes here."
-}
+Find the source prompt (`getSystemPrompt` or context configuration), preserving
+its current location and assembly logic. With a CLI supporting source selectors:
+
+```bash
+moda harness analyze --experimental --concern=prompts --analyst=local-scan
+moda prompts init --from-harness=.moda/harness-report.json
+moda prompts sync --dry-run
 ```
 
-Existing JSON definitions with a plain-text `template` are also accepted;
-the CLI maps that text to registered content without rewriting the file.
-Keep the application's existing prompt field and have `getSystemPrompt` read
-that same definition so runtime and registry cannot drift.
-Check the sync payload includes the actual text; a lock entry or
-version ID alone does not prove that a nonempty definition was registered.
+Inspect each mapping and dry-run definition. Resolve missing sources with explicit
+`.moda/prompts.yml` `sources` entries (stable `key`, repository-relative `path`,
+`selector.symbol` or JSON/YAML `selector.pointer`). For unresolved code, an
+installed coding agent can investigate via `--analyst=claude|codex|cursor`;
+source resolution must still verify its mappings. Never substitute agent-written
+prompt text or relocate inline code merely to satisfy discovery.
+
+Static definitions can register as text/messages; runtime joins, conditions, and
+functions register as builders with source/dependency fingerprints. Preserve
+incomplete dependency coverage in the result. Do not replay builder source as
+instructions. If the installed CLI lacks source selectors, report the release
+prerequisite instead of rewriting the application's prompt construction.
+
+Run `moda prompts sync` only after the expected definitions are present. Import
+`.moda/prompts.lock.json` at build time and pass the matching
+`{ key, promptId, versionId }` entry as `prompt`. Re-sync changed definitions before
+building. Verify registered content/kind; a version ID alone does not prove that
+the correct definition was registered.
 
 Keep memory and variable substitutions separate from reusable template
 versions. Think adds instructions/tools: verify actual system instructions