@moda-ai/cli 1.31.1 → 1.32.0

package/dist/cli-j3rr0nh7.js

@@ -1,2972 +0,0 @@
-import {
-  HARNESS_REPORT_APPROVAL_PATH,
-  HARNESS_REPORT_APPROVAL_SCHEMA_VERSION,
-  HARNESS_REPORT_PATH,
-  callControlAPI,
-  callDataAPI,
-  hashHarnessReport,
-  readHarnessReport,
-  readHarnessSyncState,
-  renderDoctorHuman,
-  renderStatusHuman,
-  scanHarness,
-  validateHarnessReport
-} from "./cli-p3271yp2.js";
-import {
-  isAuthSessionValid,
-  loadAuthSession
-} from "./cli-9xw5bq1j.js";
-import {
-  CliInputError,
-  createCommandContext,
-  ensureSecretFilePermissions,
-  getActiveProfile,
-  getModaPaths,
-  isLoopbackBaseUrl,
-  loadProfileConfig,
-  resolveApiKey,
-  resolveIngestUrl,
-  resolveModaBaseUrl,
-  resolveSecretReference,
-  resolveTenantId,
-  secretFilePathFromRef,
-  validateConfig
-} from "./cli-59yacef3.js";
-
-// src/prompts.ts
-import { execFileSync } from "node:child_process";
-import { createHash } from "node:crypto";
-import {
-  existsSync as existsSync2,
-  lstatSync,
-  mkdirSync,
-  readFileSync,
-  readdirSync,
-  writeFileSync as writeFileSync2
-} from "node:fs";
-import { dirname, isAbsolute as isAbsolute3, join, relative, resolve as resolve3 } from "node:path";
-
-// src/prompts-ab.ts
-import { existsSync } from "node:fs";
-import { isAbsolute, resolve } from "node:path";
-var DEFAULT_SEEDS_PER_CASE = 3;
-var DEFAULT_POLL_INTERVAL_MS = 15000;
-var DEFAULT_WAIT_TIMEOUT_MS = 2 * 60 * 60 * 1000;
-var TERMINAL_RUN_STATUSES = new Set(["completed", "skipped", "error"]);
-async function runPromptAb(flags, profileOptions, context) {
-  validateConfig();
-  const tenantId = flags["tenant-id"] || resolveTenantId(profileOptions);
-  if (!tenantId) {
-    throw new Error("Missing tenant id. Run `moda init` or pass --tenant-id=<id>.");
-  }
-  const baselineSource = flags.baseline || flags["baseline-file"] || flags["baseline-key"];
-  const candidateSource = flags.candidate || flags["candidate-file"] || flags["candidate-key"];
-  if (!baselineSource || !candidateSource) {
-    throw new Error("Usage: moda prompts ab --baseline=<file|key> --candidate=<file|key> [--auto-generate|--set-id=ID|--traces=id1,id2] (legacy alias: --conversations=)");
-  }
-  if (flags.sync === "true") {
-    await runPromptSync({ ...flags, watch: "false" }, profileOptions);
-  }
-  const promptArms = {
-    prod: resolvePromptArmSpec(baselineSource, "baseline"),
-    proposed: resolvePromptArmSpec(candidateSource, "candidate")
-  };
-  const replaySetId = await ensureReplaySet(flags, tenantId, profileOptions);
-  const seedsPerCase = parsePositiveInt(flags.seeds ?? flags["seeds-per-case"], DEFAULT_SEEDS_PER_CASE, 10);
-  const assistantModel = (flags.model ?? flags["assistant-model"] ?? "").trim();
-  const enqueue = await callControlAPI(`/tenants/${encodeURIComponent(tenantId)}/replay-sets/${encodeURIComponent(replaySetId)}/run`, {
-    method: "POST",
-    body: JSON.stringify({
-      promptArms,
-      seedsPerCase,
-      assistantModel: assistantModel || undefined,
-      promotePrimary: flags["no-promote"] !== "true"
-    })
-  }, profileOptions, { timeoutMs: 120000, retries: 1 });
-  const noWait = flags.wait === "false" || flags["no-wait"] === "true";
-  if (noWait) {
-    context.output.writeData({
-      replaySetId,
-      runId: enqueue.runId,
-      status: enqueue.status,
-      message: enqueue.message ?? "Replay comparison queued"
-    });
-    return;
-  }
-  const timeoutMs = parsePositiveInt(flags.timeout, DEFAULT_WAIT_TIMEOUT_MS, 24 * 60 * 60 * 1000);
-  const pollIntervalMs = parsePositiveInt(flags["poll-interval"], DEFAULT_POLL_INTERVAL_MS, 120000);
-  const deadline = Date.now() + timeoutMs;
-  let latest = null;
-  while (Date.now() < deadline) {
-    latest = await fetchLatestRun(tenantId, replaySetId, enqueue.runId, profileOptions);
-    const status = latest.run?.status ?? "";
-    const runId = latest.run?.runId ?? "";
-    if (TERMINAL_RUN_STATUSES.has(status) && runId === enqueue.runId) {
-      break;
-    }
-    if (context.outputMode === "human") {
-      process.stderr.write(`Waiting for replay run (${status || "pending"})...
-`);
-    }
-    await sleep(pollIntervalMs);
-  }
-  if (!latest?.run || latest.run.runId !== enqueue.runId || !TERMINAL_RUN_STATUSES.has(latest.run.status)) {
-    throw new Error(`Timed out after ${timeoutMs}ms waiting for replay run ${enqueue.runId} to finish`);
-  }
-  const result = {
-    replaySetId,
-    runId: latest.run.runId,
-    status: latest.run.status,
-    verdict: formatVerdict(latest),
-    run: { ...latest.run },
-    cases: latest.cases.map((row) => ({ ...row }))
-  };
-  if (context.outputMode === "human") {
-    printHumanVerdict(result);
-  }
-  context.output.writeData(result);
-}
-function resolvePromptArmSpec(source, label, opts = {}) {
-  const trimmed = source.trim();
-  if (!trimmed) {
-    throw new Error(`Empty prompt source for ${label}`);
-  }
-  const fromDiscovery = () => {
-    const discovered = discoverPrompts();
-    const match = discovered.find((prompt) => prompt.key === trimmed) ?? discovered.find((prompt) => prompt.sourcePath === trimmed);
-    return match ? { key: match.key, content: match.content } : null;
-  };
-  const absPath = isAbsolute(trimmed) ? trimmed : resolve(process.cwd(), trimmed);
-  let key;
-  let content;
-  const preferred = opts.preferKey ? fromDiscovery() : null;
-  if (preferred) {
-    key = preferred.key;
-    content = preferred.content;
-  } else if (opts.preferKey) {
-    throw new Error(`Could not resolve prompt key '${trimmed}' — no discovered prompt matched this key`);
-  } else if (existsSync(absPath)) {
-    const parsed = parsePromptFileForAb(absPath);
-    key = parsed.key;
-    content = parsed.content;
-  } else {
-    const match = fromDiscovery();
-    if (!match) {
-      throw new Error(`Could not resolve prompt '${trimmed}' — pass a .prompt.md path or a discovered prompt key`);
-    }
-    key = match.key;
-    content = match.content;
-  }
-  const locked = readPromptLock()?.prompts[key];
-  return {
-    content,
-    prompt_version_id: locked?.versionId ?? "",
-    prompt_id: locked?.promptId ?? "",
-    prompt_label: label
-  };
-}
-async function ensureReplaySet(flags, tenantId, profileOptions) {
-  const existingSetId = (flags["set-id"] || flags["replay-set-id"] || "").trim();
-  if (existingSetId) {
-    return existingSetId;
-  }
-  const conversations = parseCsv(flags.traces ?? flags.conversations ?? flags["conversation-ids"]);
-  if (conversations.length) {
-    return createSetFromConversations(conversations, flags, tenantId, profileOptions);
-  }
-  if (flags["auto-generate"] === "false" && !existingSetId) {
-    throw new Error("Provide --set-id=, --traces= (legacy alias: --conversations=), or allow --auto-generate (default)");
-  }
-  const caseCount = parsePositiveInt(flags.cases ?? flags["case-count"], 5, 500);
-  const lookbackDays = parsePositiveInt(flags["lookback-days"], 30, 365);
-  const name = (flags.name ?? flags["set-name"] ?? `Prompt A/B ${new Date().toISOString().slice(0, 10)}`).trim();
-  const generated = await callControlAPI(`/tenants/${encodeURIComponent(tenantId)}/replay-sets/auto-generate`, {
-    method: "POST",
-    body: JSON.stringify({ name, caseCount, lookbackDays })
-  }, profileOptions, { timeoutMs: 300000, retries: 0 });
-  if (!generated?.id) {
-    throw new Error("Auto-generate did not return a replay set id");
-  }
-  return generated.id;
-}
-async function createSetFromConversations(conversationIds, flags, tenantId, profileOptions) {
-  const name = (flags.name ?? flags["set-name"] ?? `Prompt A/B ${conversationIds.length} trace(s)`).trim();
-  const created = await callControlAPI(`/tenants/${encodeURIComponent(tenantId)}/replay-sets`, {
-    method: "POST",
-    body: JSON.stringify({ name, description: "Created by moda prompts ab" })
-  }, profileOptions);
-  let position = 0;
-  for (const conversationId of conversationIds) {
-    const scenario = await loadScenarioFromConversation(conversationId);
-    await callControlAPI(`/tenants/${encodeURIComponent(tenantId)}/replay-sets/${encodeURIComponent(created.id)}/cases`, {
-      method: "POST",
-      body: JSON.stringify({
-        title: conversationId,
-        scenario,
-        sourceConversationId: conversationId,
-        successCriteria: [
-          "The agent understands the user request",
-          "The agent uses tools appropriately when needed",
-          "The agent provides a helpful final answer"
-        ],
-        position: position++
-      })
-    }, profileOptions);
-  }
-  return created.id;
-}
-async function loadScenarioFromConversation(conversationId) {
-  try {
-    const data = await callDataAPI(`/conversations/${encodeURIComponent(conversationId)}/context?msg_index=0&window=0`);
-    const firstUser = (data.messages ?? []).find((message) => message.role === "user" && String(message.content ?? "").trim());
-    const opening = String(firstUser?.content ?? "").trim();
-    if (opening) {
-      return `The user says: "${opening}"
-
-Replay the conversation faithfully and help them accomplish their goal.`;
-    }
-  } catch {}
-  return `Replay conversation ${conversationId}: help the user accomplish their original goal using the available tools.`;
-}
-async function fetchLatestRun(tenantId, replaySetId, runId, profileOptions) {
-  return callControlAPI(`/tenants/${encodeURIComponent(tenantId)}/replay-sets/${encodeURIComponent(replaySetId)}/runs/latest?runId=${encodeURIComponent(runId)}`, { method: "GET" }, profileOptions, { timeoutMs: 60000, retries: 2 });
-}
-function candidateOutcome(payload) {
-  const run = payload.run;
-  if (!run || run.status !== "completed")
-    return "no-run";
-  const delta = run.proposedPassCount - run.prodPassCount;
-  if (delta > 0)
-    return "candidate";
-  if (delta < 0)
-    return "baseline";
-  return "tie";
-}
-function formatVerdict(payload) {
-  const run = payload.run;
-  if (!run)
-    return "no run";
-  if (run.status === "skipped")
-    return `skipped: ${run.notes || "no reason"}`;
-  if (run.status === "error")
-    return `error: ${run.notes || "unknown error"}`;
-  if (run.status !== "completed")
-    return `status=${run.status}`;
-  const delta = run.proposedPassCount - run.prodPassCount;
-  const winner = delta > 0 ? "candidate wins" : delta < 0 ? "baseline wins" : "tie on case passes";
-  const rates = `baseline ${run.prodPassCount}/${run.caseCount} (${pct(run.prodPassRate)}), candidate ${run.proposedPassCount}/${run.caseCount} (${pct(run.proposedPassRate)})`;
-  const notes = run.notes?.trim();
-  return `${winner}; ${rates}${notes ? `; ${notes}` : ""}`;
-}
-function printHumanVerdict(result) {
-  process.stderr.write(`
-Prompt A/B replay verdict
-`);
-  process.stderr.write(`-------------------------
-`);
-  process.stderr.write(`Replay set: ${result.replaySetId}
-`);
-  process.stderr.write(`Run id:     ${result.runId}
-`);
-  process.stderr.write(`Status:     ${result.status}
-`);
-  process.stderr.write(`Verdict:    ${result.verdict}
-`);
-  if (result.cases.length) {
-    process.stderr.write(`
-Per-case:
-`);
-    for (const row of result.cases) {
-      const caseId = String(row.caseId ?? "");
-      const prod = formatPass(row.prodPass);
-      const proposed = formatPass(row.proposedPass);
-      process.stderr.write(`  ${caseId}: baseline=${prod} candidate=${proposed}
-`);
-    }
-  }
-  process.stderr.write(`
-`);
-}
-function formatPass(value) {
-  if (value === null || value === undefined)
-    return "abstained";
-  return value ? "pass" : "fail";
-}
-function pct(rate) {
-  return `${Math.round(Math.max(0, Math.min(1, rate)) * 100)}%`;
-}
-async function enqueueAndPollComparison(args, profileOptions) {
-  const enqueue = await callControlAPI(`/tenants/${encodeURIComponent(args.tenantId)}/replay-sets/${encodeURIComponent(args.replaySetId)}/run`, {
-    method: "POST",
-    body: JSON.stringify({
-      promptArms: args.promptArms,
-      seedsPerCase: args.seedsPerCase ?? DEFAULT_SEEDS_PER_CASE,
-      assistantModel: args.assistantModel || undefined,
-      promotePrimary: args.promotePrimary ?? false
-    })
-  }, profileOptions, { timeoutMs: 120000, retries: 1 });
-  const timeoutMs = args.timeoutMs ?? DEFAULT_WAIT_TIMEOUT_MS;
-  const pollIntervalMs = args.pollIntervalMs ?? DEFAULT_POLL_INTERVAL_MS;
-  const deadline = Date.now() + timeoutMs;
-  let latest = null;
-  while (Date.now() < deadline) {
-    latest = await fetchLatestRun(args.tenantId, args.replaySetId, enqueue.runId, profileOptions);
-    const status = latest.run?.status ?? "";
-    const runId = latest.run?.runId ?? "";
-    if (TERMINAL_RUN_STATUSES.has(status) && runId === enqueue.runId) {
-      return latest;
-    }
-    args.onWaiting?.(status || "pending");
-    await sleep(pollIntervalMs);
-  }
-  if (!latest?.run || latest.run.runId !== enqueue.runId || !TERMINAL_RUN_STATUSES.has(latest.run.status)) {
-    throw new Error(`Timed out after ${timeoutMs}ms waiting for replay run ${enqueue.runId} to finish`);
-  }
-  return latest;
-}
-function parsePositiveInt(raw, fallback, max) {
-  if (!raw)
-    return fallback;
-  const parsed = Number.parseInt(raw, 10);
-  if (!Number.isFinite(parsed) || parsed < 1)
-    return fallback;
-  return Math.min(parsed, max);
-}
-function parseCsv(raw) {
-  if (!raw?.trim())
-    return [];
-  return raw.split(",").map((part) => part.trim()).filter(Boolean);
-}
-function sleep(ms) {
-  return new Promise((resolveSleep) => setTimeout(resolveSleep, ms));
-}
-
-// src/prompts-propose.ts
-import { writeFileSync } from "node:fs";
-import { isAbsolute as isAbsolute2, resolve as resolve2 } from "node:path";
-var PROPOSE_TIMEOUT_MS = 300000;
-async function runPromptPropose(positionals, flags, profileOptions, context) {
-  validateConfig();
-  const promptKey = flags["prompt-key"] || positionals[1];
-  const fromRunId = flags["from-run"] || flags["from-run-id"] || flags["run-id"];
-  const replaySetId = flags["set-id"] || flags["replay-set-id"];
-  if (!promptKey || !fromRunId || !replaySetId) {
-    throw new Error("Usage: moda prompts propose --prompt-key=<key> --from-run=<run_id> --set-id=<replay_set_id> [--max-dossiers=8] [--model=<slug>] [--out=path.prompt.md] [--gate] [--promote-on-win]");
-  }
-  const maxDossiers = parsePositiveInt2(flags["max-dossiers"], 8, 16);
-  const model = (flags.model ?? flags["revise-model"] ?? "").trim();
-  const result = await callControlAPI(`/prompts/${encodeURIComponent(promptKey)}/propose`, {
-    method: "POST",
-    body: JSON.stringify({ fromRunId, replaySetId, maxDossiers, model: model || undefined })
-  }, profileOptions, { timeoutMs: PROPOSE_TIMEOUT_MS, retries: 0 });
-  let outPath;
-  if (result.status === "proposed" && result.content && flags.out) {
-    outPath = isAbsolute2(flags.out) ? flags.out : resolve2(process.cwd(), flags.out);
-    writeFileSync(outPath, result.content, "utf8");
-  }
-  const wantGate = flags.gate === "true";
-  const promoteOnWin = flags["promote-on-win"] === "true";
-  let gate;
-  if (wantGate) {
-    if (result.status !== "proposed" || !result.content) {
-      gate = {
-        ran: false,
-        scope: "full-set",
-        scopeNote: `no candidate to gate (${result.status})`,
-        verdict: "skipped",
-        outcome: "no-run",
-        runId: null,
-        promoted: false
-      };
-    } else {
-      gate = await runGate({
-        result,
-        promptKey,
-        replaySetId,
-        flags,
-        promoteOnWin,
-        profileOptions,
-        context
-      });
-    }
-  }
-  if (context.outputMode === "human") {
-    printHuman(result, outPath, gate);
-  }
-  context.output.writeData({
-    ...result,
-    ...outPath ? { outPath } : {},
-    ...gate ? { gate } : {}
-  });
-}
-async function runGate(args) {
-  const { result, promptKey, replaySetId, flags, promoteOnWin, profileOptions, context } = args;
-  const tenantId = flags["tenant-id"] || resolveTenantId(profileOptions);
-  if (!tenantId) {
-    throw new Error("Missing tenant id for --gate. Run `moda init` or pass --tenant-id=<id>.");
-  }
-  const prodArm = resolvePromptArmSpec(promptKey, "baseline", { preferKey: true });
-  const proposedArm = {
-    content: result.content ?? "",
-    prompt_version_id: result.versionId ?? "",
-    prompt_id: "",
-    prompt_label: "candidate"
-  };
-  const seedsPerCase = parsePositiveInt2(flags.seeds ?? flags["seeds-per-case"], 3, 10);
-  const assistantModel = (flags["assistant-model"] ?? "").trim();
-  const timeoutMs = parsePositiveInt2(flags["gate-timeout"] ?? flags.timeout, 2 * 60 * 60 * 1000, 24 * 60 * 60 * 1000);
-  const pollIntervalMs = parsePositiveInt2(flags["poll-interval"], 15000, 120000);
-  const scopeNote = result.holdoutCaseIds.length ? `gated over the FULL replay set (${result.holdoutCaseIds.length} holdout case(s) could not be isolated — the run endpoint scores every case)` : "gated over the FULL replay set";
-  if (context.outputMode === "human") {
-    process.stderr.write(`
-Gating candidate for '${promptKey}' — ${scopeNote}...
-`);
-  }
-  const payload = await enqueueAndPollComparison({
-    tenantId,
-    replaySetId,
-    promptArms: { prod: prodArm, proposed: proposedArm },
-    seedsPerCase,
-    assistantModel: assistantModel || undefined,
-    promotePrimary: false,
-    timeoutMs,
-    pollIntervalMs,
-    onWaiting: context.outputMode === "human" ? (status) => process.stderr.write(`Waiting for gate run (${status})...
-`) : undefined
-  }, profileOptions);
-  const outcome = candidateOutcome(payload);
-  const gate = {
-    ran: true,
-    scope: "full-set",
-    scopeNote,
-    verdict: formatVerdict(payload),
-    outcome,
-    runId: payload.run?.runId ?? null,
-    promoted: false
-  };
-  if (promoteOnWin) {
-    if (outcome === "candidate" && result.versionId) {
-      await callControlAPI(`/prompts/${encodeURIComponent(promptKey)}/labels`, { method: "POST", body: JSON.stringify({ label: "prod", versionId: result.versionId }) }, profileOptions);
-      gate.promoted = true;
-    } else {
-      gate.promoteSkippedReason = outcome === "candidate" ? "no candidate versionId to promote" : `candidate did not strictly win (${outcome})`;
-    }
-  }
-  return gate;
-}
-function printHuman(result, outPath, gate) {
-  const w = (s) => process.stderr.write(s + `
-`);
-  if (result.status !== "proposed") {
-    w(`No candidate produced (${result.status}): ${result.note}`);
-    return;
-  }
-  w(`Proposed candidate for '${result.promptKey}'`);
-  w(`  new version:  ${result.versionId}  (unlabeled — not promoted)`);
-  w(`  base version: ${result.baseVersionId ?? "(none)"}`);
-  w(`  from run:     built from ${result.dossierCount} failure dossier(s)`);
-  if (result.changelog)
-    w(`  changelog:    ${result.changelog}`);
-  if (result.risks.length)
-    w(`  risks:        ${result.risks.map((r) => `- ${r}`).join(`
-                `)}`);
-  if (outPath)
-    w(`  written to:   ${outPath}`);
-  if (result.lowN) {
-    w("");
-    w(`  ⚠ low sample: ${result.lowN}`);
-  }
-  w("");
-  if (gate?.ran) {
-    w("Gate (automatic A/B of candidate vs baseline):");
-    w(`  scope:    ${gate.scopeNote}`);
-    w(`  verdict:  ${gate.verdict}`);
-    if (gate.runId)
-      w(`  run id:   ${gate.runId}`);
-    if (gate.promoted) {
-      w(`  promoted: candidate won — promoted version ${result.versionId} to label 'prod'`);
-    } else if (gate.promoteSkippedReason) {
-      w(`  promote:  skipped (${gate.promoteSkippedReason})`);
-    }
-    w("");
-    if (!gate.promoted) {
-      w(`  moda prompts promote ${result.promptKey} --label=prod --version=${result.versionId}`);
-    }
-    return;
-  }
-  if (gate && !gate.ran) {
-    w(`Gate not run: ${gate.scopeNote}`);
-    w("");
-  }
-  w("Next — gate on holdout cases the revision never saw, then promote if it wins:");
-  if (result.holdoutCaseIds.length) {
-    w(`  holdout cases (${result.holdoutCaseIds.length}): ${result.holdoutCaseIds.join(", ")}`);
-  } else {
-    w("  (too few failures to reserve a holdout — gate on a fresh --auto-generate set)");
-  }
-  if (outPath) {
-    w(`  moda prompts ab --baseline-key=${result.promptKey} --candidate=${outPath} --auto-generate`);
-  } else {
-    w(`  # re-run with --out=<path.prompt.md> to materialize the candidate, then:`);
-    w(`  moda prompts ab --baseline-key=${result.promptKey} --candidate=<path.prompt.md> --auto-generate`);
-  }
-  w(`  # or: moda prompts propose ... --gate --promote-on-win  (auto-A/B, promote on a strict win)`);
-  w(`  moda prompts promote ${result.promptKey} --label=prod --version=${result.versionId}`);
-}
-function parsePositiveInt2(raw, fallback, max) {
-  const n = Number.parseInt(raw ?? "", 10);
-  if (!Number.isFinite(n) || n <= 0)
-    return fallback;
-  return Math.min(n, max);
-}
-
-// src/prompts.ts
-var MODA_DIR = ".moda";
-var MANIFEST_PATH = join(MODA_DIR, "prompts.yml");
-var LOCK_PATH = join(MODA_DIR, "prompts.lock.json");
-var DEFAULT_PROMPT_PATHS = [
-  "prompts/**/*.prompt.md",
-  "prompts/**/*.prompt.json",
-  "prompts/**/*.prompt.yaml",
-  "prompts/**/*.prompt.yml"
-];
-async function runPromptsCommand(input, legacyFlags, legacyProfileOptions) {
-  const context = Array.isArray(input) ? createCommandContext({
-    command: "prompts",
-    positional: input[0],
-    positionals: input,
-    flags: legacyFlags ?? {}
-  }, {
-    commandFlags: legacyFlags ?? {},
-    outputMode: legacyFlags?.agent === "true" ? "agent" : legacyFlags?.json === "true" ? "json" : "human",
-    env: legacyProfileOptions?.env
-  }) : input;
-  const positionals = context.positionals;
-  const flags = context.flags;
-  const profileOptions = legacyProfileOptions ?? { profile: context.profile, env: context.env };
-  const subcommand = positionals[0] || "status";
-  switch (subcommand) {
-    case "init": {
-      const init = await initPrompts({ silent: true });
-      context.output.writeData({
-        manifest: MANIFEST_PATH,
-        manifestPath: init.manifestPath,
-        lockfile: LOCK_PATH,
-        lockPath: init.lockPath,
-        cwd: init.cwd,
-        created: init.created,
-        promptPaths: init.promptPaths
-      }, {
-        artifacts: [{
-          kind: "prompt_manifest",
-          path: init.manifestPath,
-          description: init.created ? "Prompt discovery manifest created by this run." : "Prompt discovery manifest already existed; left unchanged."
-        }]
-      });
-      break;
-    }
-    case "status":
-      context.output.writeData(await getPromptStatus());
-      break;
-    case "diff":
-      context.output.writeData(await getPromptStatus());
-      break;
-    case "sync":
-      await syncPrompts(flags, profileOptions, context);
-      break;
-    case "promote":
-      await promotePrompt(positionals, flags, profileOptions, context);
-      break;
-    case "ab":
-      await runPromptAb(flags, profileOptions, context);
-      break;
-    case "propose":
-      await runPromptPropose(positionals, flags, profileOptions, context);
-      break;
-    default:
-      throw new Error(`Unknown prompts command '${subcommand}'. Use init, status, diff, sync, promote, ab, or propose.`);
-  }
-}
-async function initPrompts(options = {}) {
-  const cwd = process.cwd();
-  const manifestPath = resolve3(cwd, MANIFEST_PATH);
-  const lockPath = resolve3(cwd, LOCK_PATH);
-  mkdirSync(MODA_DIR, { recursive: true });
-  const existed = existsSync2(MANIFEST_PATH);
-  if (!existed) {
-    writeFileSync2(MANIFEST_PATH, [
-      "version: 1",
-      "prompt_paths:",
-      ...DEFAULT_PROMPT_PATHS.map((path) => `  - "${path}"`),
-      ""
-    ].join(`
-`));
-  }
-  if (!existsSync2(manifestPath)) {
-    throw new Error(`Could not write ${manifestPath}: the file is missing after init. Check directory permissions and available disk space.`);
-  }
-  const result = {
-    manifestPath,
-    lockPath,
-    cwd,
-    created: !existed,
-    promptPaths: readManifest().promptPaths
-  };
-  if (!options.silent) {
-    printJson({
-      manifest: MANIFEST_PATH,
-      manifestPath,
-      lockfile: LOCK_PATH,
-      lockPath,
-      cwd,
-      created: result.created,
-      promptPaths: result.promptPaths
-    });
-  }
-  return result;
-}
-async function syncPrompts(flags, profileOptions, context) {
-  if (flags.watch === "true") {
-    await watchPromptSync(flags, profileOptions);
-    return;
-  }
-  await syncPromptsOnce(flags, profileOptions, context);
-}
-async function runPromptSync(flags, profileOptions) {
-  await initPrompts({ silent: true });
-  const prompts = discoverPrompts();
-  const sourceCommit = getGitCommit();
-  const manifestHash = hashFile(MANIFEST_PATH);
-  const dryRun = flags["dry-run"] === "true";
-  const response = await callControlAPI("/prompts/sync", {
-    method: "POST",
-    body: JSON.stringify({
-      prompts: prompts.map((prompt) => ({
-        ...prompt,
-        sourceCommit,
-        manifestHash
-      })),
-      sourceCommit,
-      manifestHash,
-      dryRun
-    })
-  }, profileOptions);
-  if (!dryRun) {
-    writeLock(prompts, response.synced ?? []);
-  }
-  return { synced: response.synced ?? [], dryRun };
-}
-async function syncPromptsOnce(flags, profileOptions, context) {
-  const result = await runPromptSync(flags, profileOptions);
-  const payload = {
-    synced: result.synced,
-    lockfile: result.dryRun ? undefined : LOCK_PATH
-  };
-  if (context)
-    context.output.writeData(payload);
-  else
-    printJson(payload);
-}
-async function watchPromptSync(flags, profileOptions) {
-  console.error("Watching prompt files. Press Ctrl+C to stop.");
-  let lastSignature = "";
-  const intervalMs = Math.max(1000, Number(flags.interval ?? 2500));
-  while (true) {
-    const status = await getPromptStatus();
-    const signature = stableJson(status.prompts);
-    if (signature !== lastSignature) {
-      lastSignature = signature;
-      if (status.changed > 0 || status.new > 0 || status.deleted > 0) {
-        await syncPromptsOnce({ ...flags, watch: "false" }, profileOptions);
-      }
-    }
-    await new Promise((resolve4) => setTimeout(resolve4, intervalMs));
-  }
-}
-async function promotePrompt(positionals, flags, profileOptions, context) {
-  const key = positionals[1];
-  const label = flags.label;
-  const versionId = flags.version || flags["version-id"];
-  if (!key)
-    throw new Error("Usage: moda prompts promote <prompt_key> --label=prod --version=<version_id>");
-  if (!label)
-    throw new Error("Missing required flag: --label=dev|staging|prod");
-  if (!versionId)
-    throw new Error("Missing required flag: --version=<version_id>");
-  const response = await callControlAPI(`/prompts/${encodeURIComponent(key)}/labels`, {
-    method: "POST",
-    body: JSON.stringify({ label, versionId })
-  }, profileOptions);
-  context.output.writeData(response);
-}
-async function getPromptStatus() {
-  await initPrompts({ silent: true });
-  const prompts = discoverPrompts();
-  const lock = readLock();
-  const rows = prompts.map((prompt) => {
-    const locked = lock?.prompts[prompt.key];
-    const state = !locked ? "new" : locked.contentHash === prompt.contentHash ? "unchanged" : "changed";
-    return {
-      key: prompt.key,
-      sourcePath: prompt.sourcePath,
-      contentHash: prompt.contentHash,
-      lockedHash: locked?.contentHash ?? null,
-      versionId: locked?.versionId ?? null,
-      state
-    };
-  });
-  const discoveredKeys = new Set(prompts.map((prompt) => prompt.key));
-  for (const [key, locked] of Object.entries(lock?.prompts ?? {})) {
-    if (!discoveredKeys.has(key)) {
-      rows.push({
-        key,
-        sourcePath: locked.sourcePath,
-        contentHash: null,
-        lockedHash: locked.contentHash,
-        versionId: locked.versionId ?? null,
-        state: "deleted"
-      });
-    }
-  }
-  return {
-    manifest: MANIFEST_PATH,
-    lockfile: LOCK_PATH,
-    total: rows.length,
-    changed: rows.filter((row) => row.state === "changed").length,
-    new: rows.filter((row) => row.state === "new").length,
-    deleted: rows.filter((row) => row.state === "deleted").length,
-    prompts: rows
-  };
-}
-function discoverPrompts() {
-  const manifest = readManifest();
-  const rules = manifest.promptPaths.map((pattern) => {
-    const suffixMatch = pattern.match(/\.prompt\.(md|json|ya?ml)$/i);
-    if (!suffixMatch)
-      return null;
-    const suffix = `.prompt.${suffixMatch[1]}`;
-    const globIndex = pattern.search(/[*?[]/);
-    const baseRaw = globIndex === -1 ? dirname(pattern) : pattern.slice(0, globIndex);
-    const base = baseRaw.replace(/[\\/]+$/, "") || ".";
-    const baseAbs = isAbsolute3(base) ? base : resolve3(process.cwd(), base);
-    return { baseAbs, suffix };
-  }).filter((rule) => Boolean(rule));
-  const effectiveRules = rules.length ? rules : [
-    { baseAbs: process.cwd(), suffix: ".prompt.md" },
-    { baseAbs: process.cwd(), suffix: ".prompt.json" }
-  ];
-  const discovered = new Set;
-  for (const { baseAbs, suffix } of effectiveRules) {
-    if (!existsSync2(baseAbs))
-      continue;
-    for (const file of walk(baseAbs)) {
-      if (file.endsWith(suffix))
-        discovered.add(file);
-    }
-  }
-  return [...discovered].sort().map(parsePromptFile);
-}
-function parsePromptFile(absPath) {
-  const sourcePath = relative(process.cwd(), absPath);
-  const raw = readFileSync(absPath, "utf8");
-  if (absPath.endsWith(".json")) {
-    const parsed = JSON.parse(raw);
-    const key2 = parsed.key || keyFromPath(sourcePath);
-    const hasContent = typeof parsed.content === "string" && parsed.content.trim().length > 0;
-    const hasSystemPrompt = typeof parsed.systemPrompt === "string" && parsed.systemPrompt.trim().length > 0;
-    const hasTemplate = typeof parsed.template === "string" && parsed.template.trim().length > 0;
-    const hasMessages = Array.isArray(parsed.messages) && parsed.messages.some((message) => {
-      if (!message || typeof message !== "object" || !("role" in message) || !["system", "developer", "user", "assistant", "tool"].includes(String(message.role)) || !("content" in message))
-        return false;
-      const content2 = message.content;
-      return typeof content2 === "string" ? content2.trim().length > 0 : Array.isArray(content2) && content2.some((part) => part && typeof part === "object" && part.type === "text" && typeof part.text === "string" && part.text.trim().length > 0);
-    });
-    if (!hasContent && !hasSystemPrompt && !hasMessages && !hasTemplate) {
-      throw new Error(`${sourcePath}: prompt JSON requires non-empty content, systemPrompt, messages, or a text template.`);
-    }
-    const content = hasContent ? parsed.content : hasSystemPrompt ? parsed.systemPrompt : hasMessages ? JSON.stringify(parsed.messages, null, 2) : parsed.template;
-    return normalizePrompt({ ...parsed, key: key2, name: parsed.name || key2, sourcePath, content });
-  }
-  const { frontmatter, body } = parseFrontmatter(raw);
-  const key = frontmatter.key || keyFromPath(sourcePath);
-  return normalizePrompt({
-    key,
-    name: frontmatter.name || key,
-    description: frontmatter.description,
-    category: frontmatter.category,
-    systemPrompt: frontmatter.system_prompt || frontmatter.systemPrompt,
-    modelConfig: frontmatter.model ? { model: frontmatter.model } : undefined,
-    sourcePath,
-    content: body.trim()
-  });
-}
-function normalizePrompt(prompt) {
-  const normalized = stableJson({
-    key: prompt.key,
-    content: prompt.content,
-    systemPrompt: prompt.systemPrompt ?? null,
-    messages: prompt.messages ?? [],
-    variables: prompt.variables ?? [],
-    variablesSchema: prompt.variablesSchema ?? {},
-    modelConfig: prompt.modelConfig ?? {},
-    toolRefs: prompt.toolRefs ?? [],
-    responseSchema: prompt.responseSchema ?? null
-  });
-  return {
-    key: prompt.key,
-    name: prompt.name || prompt.key,
-    description: prompt.description,
-    sourcePath: prompt.sourcePath,
-    content: prompt.content,
-    systemPrompt: prompt.systemPrompt,
-    messages: prompt.messages,
-    variables: prompt.variables,
-    variablesSchema: prompt.variablesSchema,
-    modelConfig: prompt.modelConfig,
-    toolRefs: prompt.toolRefs,
-    responseSchema: prompt.responseSchema,
-    contentHash: sha256(normalized)
-  };
-}
-function readManifest() {
-  if (!existsSync2(MANIFEST_PATH)) {
-    return { promptPaths: DEFAULT_PROMPT_PATHS };
-  }
-  const text = readFileSync(MANIFEST_PATH, "utf8");
-  const promptPaths = [...text.matchAll(/^\s*-\s*["']?([^"'\n]+)["']?\s*$/gm)].map((match) => match[1]).filter((path) => path.includes(".prompt."));
-  return { promptPaths: promptPaths.length ? promptPaths : DEFAULT_PROMPT_PATHS };
-}
-function readPromptLock() {
-  return readLock();
-}
-function parsePromptFileForAb(absPath) {
-  const parsed = parsePromptFile(absPath);
-  return { key: parsed.key, content: parsed.content };
-}
-function readLock() {
-  if (!existsSync2(LOCK_PATH))
-    return null;
-  return JSON.parse(readFileSync(LOCK_PATH, "utf8"));
-}
-function writeLock(prompts, synced) {
-  const syncedByKey = new Map(synced.map((item) => [item.key, item]));
-  const lock = {
-    version: 1,
-    generatedAt: new Date().toISOString(),
-    prompts: Object.fromEntries(prompts.map((prompt) => {
-      const result = syncedByKey.get(prompt.key);
-      return [prompt.key, {
-        key: prompt.key,
-        sourcePath: prompt.sourcePath,
-        contentHash: prompt.contentHash,
-        promptId: result?.promptId,
-        versionId: result?.versionId
-      }];
-    }))
-  };
-  mkdirSync(dirname(LOCK_PATH), { recursive: true });
-  writeFileSync2(LOCK_PATH, `${JSON.stringify(lock, null, 2)}
-`);
-}
-function walk(dir) {
-  let entries;
-  try {
-    entries = readdirSync(dir);
-  } catch {
-    return [];
-  }
-  const files = [];
-  for (const entry of entries) {
-    if (entry === "node_modules" || entry === ".git" || entry === "dist" || entry === "build")
-      continue;
-    const fullPath = join(dir, entry);
-    let stat;
-    try {
-      stat = lstatSync(fullPath);
-    } catch {
-      continue;
-    }
-    if (stat.isSymbolicLink())
-      continue;
-    if (stat.isDirectory())
-      files.push(...walk(fullPath));
-    else if (stat.isFile())
-      files.push(fullPath);
-  }
-  return files;
-}
-function parseFrontmatter(raw) {
-  if (!raw.startsWith("---"))
-    return { frontmatter: {}, body: raw };
-  const end = raw.indexOf(`
----`, 3);
-  if (end === -1)
-    return { frontmatter: {}, body: raw };
-  const frontmatterText = raw.slice(3, end).trim();
-  const frontmatter = Object.fromEntries(frontmatterText.split(`
-`).map((line) => line.match(/^([A-Za-z0-9_-]+):\s*(.*)$/)).filter((match) => Boolean(match)).map((match) => [match[1], match[2].replace(/^["']|["']$/g, "")]));
-  return { frontmatter, body: raw.slice(end + 4) };
-}
-function keyFromPath(path) {
-  return path.replace(/^prompts\//, "").replace(/\.prompt\.(md|json|ya?ml)$/i, "").replace(/[\\/]/g, ".");
-}
-function hashFile(path) {
-  return existsSync2(path) ? sha256(readFileSync(path, "utf8")) : "";
-}
-function getGitCommit() {
-  try {
-    return execFileSync("git", ["rev-parse", "HEAD"], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim();
-  } catch {
-    return;
-  }
-}
-function stableJson(value) {
-  return JSON.stringify(sortJson(value));
-}
-function sortJson(value) {
-  if (Array.isArray(value))
-    return value.map(sortJson);
-  if (value && typeof value === "object") {
-    return Object.fromEntries(Object.entries(value).sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => [key, sortJson(item)]));
-  }
-  return value;
-}
-function sha256(input) {
-  return createHash("sha256").update(input).digest("hex");
-}
-function printJson(value) {
-  console.log(JSON.stringify(value, null, 2));
-}
-
-// src/init/rules.ts
-import { existsSync as existsSync3, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync3 } from "node:fs";
-import { join as join3 } from "node:path";
-import { confirm } from "@inquirer/prompts";
-
-// src/package-assets.ts
-import { dirname as dirname2, join as join2 } from "node:path";
-import { fileURLToPath } from "node:url";
-function packageAssetPath(...parts) {
-  return join2(dirname2(fileURLToPath(import.meta.url)), "..", ...parts);
-}
-
-// src/init/rules.ts
-var SKILLS_SOURCE_DIR = packageAssetPath("skills");
-var SKILLS = [
-  {
-    id: "moda-cli",
-    label: "moda-cli — let coding agents query Moda analytics via the CLI"
-  }
-];
-var ADAPTERS = {
-  "Claude Code": {
-    name: "Claude Code",
-    targetFor: (skillId) => ({
-      dir: join3(".claude", "skills", skillId),
-      filename: "SKILL.md"
-    }),
-    transform: (content) => content
-  },
-  Cursor: {
-    name: "Cursor",
-    targetFor: (skillId) => ({
-      dir: join3(".cursor", "rules"),
-      filename: `${skillId}.mdc`
-    }),
-    transform: claudeSkillToCursorRule
-  }
-};
-var FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/;
-var DESCRIPTION_RE = /^description:\s*(.+?)\s*$/m;
-function claudeSkillToCursorRule(skillContent) {
-  const match = FRONTMATTER_RE.exec(skillContent);
-  if (!match) {
-    return skillContent;
-  }
-  const [, frontmatter, body] = match;
-  const descMatch = DESCRIPTION_RE.exec(frontmatter);
-  const description = descMatch?.[1].trim() ?? "";
-  const cursorFrontmatter = `---
-` + `description: ${JSON.stringify(description)}
-` + `alwaysApply: false
-` + `---
-`;
-  return `${cursorFrontmatter}
-${body.replace(/^\s+/, "")}`;
-}
-function loadSkillSource(skillId) {
-  const path = join3(SKILLS_SOURCE_DIR, skillId, "SKILL.md");
-  if (!existsSync3(path)) {
-    throw new Error(`Skill source missing: ${path}`);
-  }
-  return readFileSync2(path, "utf8");
-}
-function installSkillForAgent(skill, adapter, content) {
-  const { dir, filename } = adapter.targetFor(skill.id);
-  const dirPath = join3(process.cwd(), dir);
-  const filePath = join3(dirPath, filename);
-  const relativePath = join3(dir, filename);
-  try {
-    mkdirSync2(dirPath, { recursive: true });
-    if (existsSync3(filePath)) {
-      return { agent: adapter.name, relativePath, status: "exists" };
-    }
-    writeFileSync3(filePath, adapter.transform(content));
-    return { agent: adapter.name, relativePath, status: "wrote" };
-  } catch (err) {
-    return {
-      agent: adapter.name,
-      relativePath,
-      status: "failed",
-      error: err instanceof Error ? err.message : String(err)
-    };
-  }
-}
-async function installRules(detectedAgents, options = {}) {
-  const adapters = detectedAgents.map((a) => ADAPTERS[a]).filter((a) => a !== undefined);
-  if (adapters.length === 0) {
-    if (!options.silent)
-      console.log("  No supported coding agents detected");
-    return;
-  }
-  const agentList = adapters.map((a) => a.name).join(", ");
-  const skillList = SKILLS.map((s) => `
-    • ${s.label}`).join("");
-  const shouldInstall = options.yes ? true : await confirm({
-    message: `Install Moda skills for ${agentList}?${skillList}
-  Continue?`,
-    default: true
-  });
-  if (!shouldInstall) {
-    if (!options.silent)
-      console.log("  Skipped");
-    return;
-  }
-  let wrote = 0;
-  let skipped = 0;
-  let failed = 0;
-  for (const skill of SKILLS) {
-    let content;
-    try {
-      content = loadSkillSource(skill.id);
-    } catch (err) {
-      const message = err instanceof Error ? err.message : String(err);
-      console.error(`  Warning: ${message}`);
-      failed += adapters.length;
-      continue;
-    }
-    for (const adapter of adapters) {
-      const outcome = installSkillForAgent(skill, adapter, content);
-      switch (outcome.status) {
-        case "wrote":
-          if (!options.silent)
-            console.log(`  ${outcome.agent}: wrote ${outcome.relativePath}`);
-          wrote++;
-          break;
-        case "exists":
-          if (!options.silent) {
-            console.log(`  ${outcome.agent}: ${outcome.relativePath} already exists — skipping`);
-          }
-          skipped++;
-          break;
-        case "failed":
-          if (!options.silent) {
-            console.error(`  ${outcome.agent}: failed to write ${outcome.relativePath} — ${outcome.error}`);
-          }
-          failed++;
-          break;
-      }
-    }
-  }
-  const summary = [
-    wrote && `${wrote} written`,
-    skipped && `${skipped} already present`,
-    failed && `${failed} failed`
-  ].filter(Boolean).join(", ");
-  if (summary) {
-    if (!options.silent)
-      console.log(`  Done — ${summary}`);
-  }
-}
-
-// src/init/mcp.ts
-import { existsSync as existsSync4 } from "node:fs";
-import { join as join4 } from "node:path";
-import { execSync } from "node:child_process";
-function isOnPath(cmd) {
-  try {
-    execSync(`which ${cmd}`, { stdio: "pipe" });
-    return true;
-  } catch {
-    return false;
-  }
-}
-function detectAgents() {
-  const cwd = process.cwd();
-  const agents = [];
-  if (existsSync4(join4(cwd, ".claude")) || isOnPath("claude")) {
-    agents.push("Claude Code");
-  }
-  if (existsSync4(join4(cwd, ".cursor"))) {
-    agents.push("Cursor");
-  }
-  return agents;
-}
-
-// src/skills.ts
-import { execFileSync as execFileSync2 } from "node:child_process";
-import { createHash as createHash2 } from "node:crypto";
-import {
-  existsSync as existsSync7,
-  lstatSync as lstatSync2,
-  mkdirSync as mkdirSync5,
-  readdirSync as readdirSync3,
-  readFileSync as readFileSync5,
-  writeFileSync as writeFileSync6
-} from "node:fs";
-import { basename, dirname as dirname5, join as join7, relative as relative3 } from "node:path";
-
-// src/skills-manifest.ts
-import {
-  existsSync as existsSync5,
-  mkdirSync as mkdirSync3,
-  readdirSync as readdirSync2,
-  readFileSync as readFileSync3,
-  rmdirSync,
-  unlinkSync,
-  writeFileSync as writeFileSync4
-} from "node:fs";
-import { dirname as dirname3, isAbsolute as isAbsolute4, join as join5, normalize, relative as relative2, resolve as resolve4 } from "node:path";
-var SKILLS_MANIFEST_PATH = join5(".moda", "skills.yml");
-var SKILL_SOURCE_HARNESS = "moda";
-var SKILL_SOURCE_INTEGRATION_BUNDLED = "integration-bundled";
-function readSkillsManifest(cwd) {
-  const manifestPath = join5(cwd, SKILLS_MANIFEST_PATH);
-  if (!existsSync5(manifestPath))
-    return null;
-  let text = "";
-  try {
-    text = readFileSync3(manifestPath, "utf8");
-  } catch {
-    return null;
-  }
-  return {
-    tenantId: readYamlScalar(text, "tenant_id"),
-    generationRunId: readYamlScalar(text, "generation_run_id"),
-    generationVersion: Number(readYamlScalar(text, "generation_version") || 0),
-    releaseKey: readYamlScalar(text, "release_key"),
-    statusFilter: readYamlScalar(text, "status_filter"),
-    releasedAt: readYamlScalar(text, "released_at"),
-    managedPaths: readManagedPaths(text),
-    records: readSkillRecords(text)
-  };
-}
-function manifestHeaderFrom(manifest) {
-  return {
-    tenantId: manifest?.tenantId ?? "",
-    releaseKey: manifest?.releaseKey ?? "",
-    statusFilter: manifest?.statusFilter ?? "",
-    generationRunId: manifest?.generationRunId ?? "",
-    generationVersion: manifest?.generationVersion ?? 0,
-    releasedAt: manifest?.releasedAt ?? ""
-  };
-}
-function writeSkillsManifest(cwd, header, records) {
-  const manifestPath = join5(cwd, SKILLS_MANIFEST_PATH);
-  const managedPaths = [...new Set(records.flatMap((record) => record.paths))].sort();
-  const lines = [
-    "version: 1",
-    "source: moda",
-    `tenant_id: ${yamlQuote(header.tenantId)}`,
-    `release_key: ${yamlQuote(header.releaseKey)}`,
-    `status_filter: ${yamlQuote(header.statusFilter)}`,
-    `generation_run_id: ${yamlQuote(header.generationRunId)}`,
-    `generation_version: ${header.generationVersion}`,
-    `released_at: ${yamlQuote(header.releasedAt)}`,
-    `installed_at: ${yamlQuote(new Date().toISOString())}`,
-    "managed_paths:",
-    ...managedPaths.map((path) => `  - ${yamlQuote(path)}`),
-    "skills:",
-    ...records.flatMap((record) => [
-      `  - skill_id: ${yamlQuote(record.skillId)}`,
-      `    content_hash: ${yamlQuote(record.contentHash)}`,
-      `    source: ${yamlQuote(record.source)}`,
-      "    paths:",
-      ...record.paths.map((path) => `      - ${yamlQuote(path)}`)
-    ]),
-    ""
-  ];
-  mkdirSync3(dirname3(manifestPath), { recursive: true });
-  writeFileSync4(manifestPath, lines.join(`
-`));
-}
-function upsertSkillManifestRecord(cwd, record) {
-  const manifest = readSkillsManifest(cwd);
-  const records = (manifest?.records ?? []).filter((existing) => !(existing.skillId === record.skillId && existing.source === record.source));
-  records.push(record);
-  writeSkillsManifest(cwd, manifestHeaderFrom(manifest), records);
-}
-function pruneManagedSkillPaths(cwd, managedPaths, log) {
-  let pruned = 0;
-  for (const rawPath of [...new Set(managedPaths)]) {
-    const safePath = safeManagedRelativePath(rawPath);
-    if (!safePath)
-      continue;
-    const absolutePath = absoluteManagedPath(cwd, safePath);
-    if (!absolutePath || !existsSync5(absolutePath))
-      continue;
-    try {
-      unlinkSync(absolutePath);
-      pruned++;
-      log(`  pruned ${safePath}`);
-      pruneEmptyClaudeSkillDir(cwd, safePath);
-    } catch {}
-  }
-  return pruned;
-}
-function pruneEmptyClaudeSkillDir(cwd, relativePath) {
-  if (!relativePath.startsWith(".claude/skills/") || !relativePath.endsWith("/SKILL.md"))
-    return;
-  const dir = dirname3(join5(cwd, relativePath));
-  try {
-    if (existsSync5(dir) && readdirSync2(dir).length === 0) {
-      rmdirSync(dir);
-    }
-  } catch {}
-}
-function absoluteManagedPath(cwd, relativePath) {
-  const abs = resolve4(cwd, relativePath);
-  const root = resolve4(cwd);
-  const rel = relative2(root, abs);
-  if (rel.startsWith("..") || isAbsolute4(rel))
-    return null;
-  return abs;
-}
-function safeManagedRelativePath(rawPath) {
-  if (!rawPath || rawPath.includes("\x00") || isAbsolute4(rawPath))
-    return null;
-  const normalized = normalize(rawPath).replace(/\\/g, "/");
-  if (normalized.startsWith("../") || normalized === ".." || normalized.includes("/../"))
-    return null;
-  const isClaudeSkill = normalized.startsWith(".claude/skills/") && normalized.endsWith("/SKILL.md");
-  const isCursorRule = normalized.startsWith(".cursor/rules/") && normalized.endsWith(".mdc");
-  return isClaudeSkill || isCursorRule ? normalized : null;
-}
-function readYamlScalar(text, key) {
-  const match = text.match(new RegExp(`^${key}:\\s*(.*?)\\s*$`, "m"));
-  return match ? parseYamlScalar(match[1]) : "";
-}
-function readSkillRecords(text) {
-  const records = [];
-  let inSkills = false;
-  let current = null;
-  let inPaths = false;
-  for (const line of text.split(/\r?\n/)) {
-    if (line.trim() === "skills:") {
-      inSkills = true;
-      continue;
-    }
-    if (!inSkills)
-      continue;
-    if (line.length > 0 && !line.startsWith(" "))
-      break;
-    const skillIdMatch = line.match(/^ {2}- skill_id:\s*(.*?)\s*$/);
-    if (skillIdMatch) {
-      if (current)
-        records.push(current);
-      current = {
-        skillId: parseYamlScalar(skillIdMatch[1]),
-        contentHash: "",
-        source: SKILL_SOURCE_HARNESS,
-        paths: []
-      };
-      inPaths = false;
-      continue;
-    }
-    if (!current)
-      continue;
-    const hashMatch = line.match(/^ {4}content_hash:\s*(.*?)\s*$/);
-    if (hashMatch) {
-      current.contentHash = parseYamlScalar(hashMatch[1]);
-      continue;
-    }
-    const sourceMatch = line.match(/^ {4}source:\s*(.*?)\s*$/);
-    if (sourceMatch) {
-      current.source = parseYamlScalar(sourceMatch[1]) || SKILL_SOURCE_HARNESS;
-      continue;
-    }
-    if (/^ {4}paths:\s*$/.test(line)) {
-      inPaths = true;
-      continue;
-    }
-    const pathMatch = inPaths ? line.match(/^ {6}-\s*(.*?)\s*$/) : null;
-    if (pathMatch) {
-      const value = parseYamlScalar(pathMatch[1]);
-      if (value)
-        current.paths.push(value);
-    }
-  }
-  if (current)
-    records.push(current);
-  return records;
-}
-function readManagedPaths(text) {
-  const paths = [];
-  let inManagedPaths = false;
-  for (const line of text.split(/\r?\n/)) {
-    if (line.trim() === "managed_paths:") {
-      inManagedPaths = true;
-      continue;
-    }
-    if (inManagedPaths && line.length > 0 && !line.startsWith(" "))
-      break;
-    if (!inManagedPaths)
-      continue;
-    const match = line.match(/^\s*-\s*(.*?)\s*$/);
-    if (match)
-      paths.push(parseYamlScalar(match[1]));
-  }
-  return paths.filter(Boolean);
-}
-function parseYamlScalar(raw) {
-  const value = raw.trim();
-  if (!value)
-    return "";
-  if (value.startsWith('"')) {
-    try {
-      return String(JSON.parse(value));
-    } catch {
-      return value.replace(/^"|"$/g, "");
-    }
-  }
-  return value.replace(/^'|'$/g, "");
-}
-function yamlQuote(value) {
-  return JSON.stringify(value);
-}
-
-// src/agents-md.ts
-import { existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync5 } from "node:fs";
-import { dirname as dirname4, join as join6 } from "node:path";
-var AGENTS_MD_FILENAME = "AGENTS.md";
-var FIXES_BLOCK_BEGIN = "<!-- moda:fixes:begin -->";
-var FIXES_BLOCK_END = "<!-- moda:fixes:end -->";
-function renderFixesBlock() {
-  return [
-    FIXES_BLOCK_BEGIN,
-    "## Moda Fixes (managed block — edits inside are overwritten by moda-cli)",
-    "",
-    "- Before editing prompt or skill files, run `moda fixes` to see the ranked",
-    '  queue of Moda Fixes ("a fix with proof") already drafted for this repo,',
-    "  and `moda fix <fix_id> --packet` for the evidence packet.",
-    "- Gate any prompt/skill change against production evidence with",
-    "  `moda fix verify <fix_id> [--prompt-file=<path>]`. Exit codes: 0 = holdout",
-    "  win vs baseline (pass), 1 = failing (per-case findings in the envelope),",
-    "  3 = degraded/inconclusive — never treat exit 3 as a pass.",
-    "- Fix PRs must carry the magic word `Fixes MODA-FIX-<SHORTREF>` in the PR",
-    "  body so the merge confirms the fix and starts production monitoring.",
-    FIXES_BLOCK_END
-  ].join(`
-`);
-}
-function upsertManagedBlock(existing, block) {
-  if (existing === null) {
-    return `${block}
-`;
-  }
-  const beginIdx = existing.indexOf(FIXES_BLOCK_BEGIN);
-  const endIdx = existing.indexOf(FIXES_BLOCK_END);
-  if (beginIdx !== -1 && endIdx !== -1 && endIdx >= beginIdx) {
-    const before = existing.slice(0, beginIdx);
-    const after = existing.slice(endIdx + FIXES_BLOCK_END.length);
-    return `${before}${block}${after}`;
-  }
-  const separator = existing === "" || existing.endsWith(`
-
-`) ? "" : existing.endsWith(`
-`) ? `
-` : `
-
-`;
-  return `${existing}${separator}${block}
-`;
-}
-function writeFileIfChanged(filePath, content) {
-  try {
-    mkdirSync4(dirname4(filePath), { recursive: true });
-    if (existsSync6(filePath)) {
-      const current = readFileSync4(filePath, "utf8");
-      if (current === content)
-        return "unchanged";
-      writeFileSync5(filePath, content);
-      return "updated";
-    }
-    writeFileSync5(filePath, content);
-    return "wrote";
-  } catch {
-    return "failed";
-  }
-}
-function upsertFixesAgentsBlock(cwd) {
-  const filePath = join6(cwd, AGENTS_MD_FILENAME);
-  let existing = null;
-  if (existsSync6(filePath)) {
-    try {
-      existing = readFileSync4(filePath, "utf8");
-    } catch {
-      return { path: AGENTS_MD_FILENAME, status: "failed" };
-    }
-  }
-  const next = upsertManagedBlock(existing, renderFixesBlock());
-  return { path: AGENTS_MD_FILENAME, status: writeFileIfChanged(filePath, next) };
-}
-
-// src/skills.ts
-var SKILLS_REQUEST_TIMEOUT_MS = 15000;
-var VALID_STATUSES = new Set(["approved", "proposed", "all"]);
-var SKILL_PROPOSALS_MANIFEST_PATH = join7(".moda", "skill-proposals.yml");
-async function fetchSkills(status) {
-  const apiKey = resolveApiKey();
-  if (!apiKey) {
-    throw new CliInputError("No Moda API key found. Run `moda init` first (or set MODA_API_KEY).");
-  }
-  const ingestUrl = resolveIngestUrl().replace(/\/$/, "");
-  const url = `${ingestUrl}/v1/skills?status=${encodeURIComponent(status)}`;
-  const controller = new AbortController;
-  const timeout = setTimeout(() => controller.abort(), SKILLS_REQUEST_TIMEOUT_MS);
-  let response;
-  try {
-    response = await fetch(url, {
-      headers: { Authorization: `Bearer ${apiKey}` },
-      signal: controller.signal
-    });
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    throw new Error(`Network error: failed to reach ${ingestUrl} (${message})`);
-  } finally {
-    clearTimeout(timeout);
-  }
-  if (!response.ok) {
-    const body = await response.text().catch(() => "");
-    throw new Error(`Failed to fetch skills (HTTP ${response.status}): ${body.slice(0, 200)}`);
-  }
-  const data = await response.json();
-  if (!data.success) {
-    throw new Error(data.message || "Failed to fetch skills");
-  }
-  const skills = Array.isArray(data.skills) ? data.skills : [];
-  const release = data.release && typeof data.release === "object" ? data.release : null;
-  return {
-    skills,
-    tenantId: data.tenant_id || resolveTenantId() || "",
-    release,
-    releaseKey: releaseKeyFor(release, skills, status),
-    status
-  };
-}
-async function skillRunsRequest(url) {
-  const apiKey = resolveApiKey();
-  if (!apiKey) {
-    throw new CliInputError("No Moda API key found. Run `moda init` first (or set MODA_API_KEY).");
-  }
-  const controller = new AbortController;
-  const timeout = setTimeout(() => controller.abort(), SKILLS_REQUEST_TIMEOUT_MS);
-  let response;
-  try {
-    response = await fetch(url, {
-      headers: { Authorization: `Bearer ${apiKey}` },
-      signal: controller.signal
-    });
-  } catch (err) {
-    const message = err instanceof Error ? err.message : String(err);
-    throw new Error(`Network error: failed to reach ${url} (${message})`);
-  } finally {
-    clearTimeout(timeout);
-  }
-  const text = await response.text().catch(() => "");
-  if (!response.ok && response.status !== 404) {
-    throw new Error(`Failed to fetch run status (HTTP ${response.status}): ${text.slice(0, 200)}`);
-  }
-  let body = {};
-  try {
-    body = text ? JSON.parse(text) : {};
-  } catch {
-    body = {};
-  }
-  return { status: response.status, body };
-}
-async function fetchSkillRunStatus(runId) {
-  const ingestUrl = resolveIngestUrl().replace(/\/$/, "");
-  let resolvedRunId = runId;
-  if (!resolvedRunId) {
-    const list = await skillRunsRequest(`${ingestUrl}/v1/skills/runs?limit=1`);
-    const listBody = list.body;
-    const latest = Array.isArray(listBody.runs) ? listBody.runs[0] : undefined;
-    if (!latest)
-      return { run: null, events: [] };
-    resolvedRunId = latest.generation_run_id;
-    if (!resolvedRunId)
-      return { run: latest, events: [] };
-  }
-  const detail = await skillRunsRequest(`${ingestUrl}/v1/skills/runs/${encodeURIComponent(resolvedRunId)}`);
-  if (detail.status === 404) {
-    if (runId) {
-      throw new CliInputError(`No skill generation run found with id '${runId}'`);
-    }
-    return { run: null, events: [] };
-  }
-  const detailBody = detail.body;
-  return {
-    run: detailBody.run ?? null,
-    events: Array.isArray(detailBody.events) ? detailBody.events : []
-  };
-}
-var STATUS_HUMAN_EVENT_LIMIT = 10;
-function formatRunStatusHuman(run, events) {
-  const counters = run.counters ?? {};
-  const lines = [
-    run.generation_run_id && `run: ${run.generation_run_id}`,
-    `status: ${run.status || "unknown"}`,
-    run.current_stage && `stage: ${run.current_stage}`,
-    run.outcome && `outcome: ${run.outcome}`,
-    `processed: ${Number(counters.sessions_processed ?? 0)}`,
-    `failed: ${Number(counters.sessions_failed ?? 0)}`,
-    Number(counters.distilled_skills_generated ?? 0) > 0 && `distilled: ${Number(counters.distilled_skills_generated ?? 0)}`,
-    Number(counters.skills_indexed ?? 0) > 0 && `indexed: ${Number(counters.skills_indexed ?? 0)}`,
-    (run.generated_skill_ids?.length ?? 0) > 0 && `skills: ${(run.generated_skill_ids ?? []).join(", ")}`,
-    run.error && `error: ${run.error}`,
-    run.started_at && `started: ${run.started_at}`,
-    run.updated_at && `updated: ${run.updated_at}`
-  ].filter(Boolean);
-  if (events.length > 0) {
-    lines.push("recent events (newest first):");
-    for (const event of events.slice(0, STATUS_HUMAN_EVENT_LIMIT)) {
-      lines.push(`  ${[event.created_at, event.level, event.stage, event.message].filter(Boolean).join("  ")}`);
-    }
-  }
-  return lines.join(`
-`);
-}
-function writeIfChanged(filePath, content) {
-  try {
-    mkdirSync5(dirname5(filePath), { recursive: true });
-    if (existsSync7(filePath)) {
-      const current = readFileSync5(filePath, "utf8");
-      if (current === content)
-        return "unchanged";
-      writeFileSync6(filePath, content);
-      return "updated";
-    }
-    writeFileSync6(filePath, content);
-    return "wrote";
-  } catch {
-    return "failed";
-  }
-}
-async function pullSkills(options = {}) {
-  const status = options.status ?? "approved";
-  const cwd = options.cwd ?? process.cwd();
-  const log = (msg) => {
-    if (!options.silent)
-      console.log(msg);
-  };
-  const fetched = await fetchSkills(status);
-  const { skills } = fetched;
-  const summary = {
-    total: skills.length,
-    pruned: 0,
-    wrote: 0,
-    updated: 0,
-    unchanged: 0,
-    failed: 0
-  };
-  if (skills.length === 0) {
-    log("  No skills to pull yet.");
-    return summary;
-  }
-  const previousManifest = readSkillsManifest(cwd);
-  const preservedIntegrationRecords = (previousManifest?.records ?? []).filter((record) => record.source === SKILL_SOURCE_INTEGRATION_BUNDLED);
-  if (previousManifest && previousManifest.managedPaths.length > 0 && previousManifest.releaseKey !== fetched.releaseKey) {
-    const integrationPaths = new Set(preservedIntegrationRecords.flatMap((record) => record.paths));
-    const harnessPaths = previousManifest.managedPaths.filter((path) => !integrationPaths.has(path));
-    if (harnessPaths.length > 0) {
-      summary.pruned = pruneManagedSkillPaths(cwd, harnessPaths, log);
-    }
-  }
-  const agents = detectAgents();
-  const writeCursor = agents.includes("Cursor") || existsSync7(join7(cwd, ".cursor"));
-  const records = [];
-  for (const skill of skills) {
-    if (!skill.skill_id || !skill.skill_md) {
-      summary.failed++;
-      continue;
-    }
-    const safeId = basename(skill.skill_id);
-    if (!safeId || !/^[A-Za-z0-9_-]+$/.test(safeId)) {
-      summary.failed++;
-      log(`  skipped invalid skill_id: ${JSON.stringify(skill.skill_id).slice(0, 80)}`);
-      continue;
-    }
-    const claudePath = join7(cwd, ".claude", "skills", safeId, "SKILL.md");
-    const claudeStatus = writeIfChanged(claudePath, skill.skill_md);
-    const claudeRelativePath = `.claude/skills/${safeId}/SKILL.md`;
-    recordOutcome(summary, claudeStatus, log, claudeRelativePath);
-    const paths = [];
-    if (claudeStatus !== "failed")
-      paths.push(claudeRelativePath);
-    if (writeCursor) {
-      const cursorPath = join7(cwd, ".cursor", "rules", `${safeId}.mdc`);
-      const cursorStatus = writeIfChanged(cursorPath, claudeSkillToCursorRule(skill.skill_md));
-      const cursorRelativePath = `.cursor/rules/${safeId}.mdc`;
-      recordOutcome(summary, cursorStatus, log, cursorRelativePath);
-      if (cursorStatus !== "failed")
-        paths.push(cursorRelativePath);
-    }
-    if (paths.length > 0) {
-      records.push({
-        skillId: safeId,
-        contentHash: sha2562(skill.skill_md),
-        source: SKILL_SOURCE_HARNESS,
-        paths
-      });
-    }
-  }
-  writeSkillsManifest(cwd, manifestHeaderFor(fetched), [...records, ...preservedIntegrationRecords]);
-  return summary;
-}
-function recordOutcome(summary, status, log, relativePath) {
-  switch (status) {
-    case "wrote":
-      summary.wrote++;
-      log(`  wrote ${relativePath}`);
-      break;
-    case "updated":
-      summary.updated++;
-      log(`  updated ${relativePath}`);
-      break;
-    case "unchanged":
-      summary.unchanged++;
-      break;
-    case "failed":
-      summary.failed++;
-      log(`  failed ${relativePath}`);
-      break;
-  }
-}
-var SKILLS_DIR = join7(".claude", "skills");
-var SKILL_FILE = "SKILL.md";
-var MAX_SKILL_WALK_DEPTH = 4;
-async function runSkillSync(flags = {}, profileOptions = {}, options = {}) {
-  const cwd = options.cwd ?? process.cwd();
-  const dryRun = flags["dry-run"] === "true";
-  const agentsMd = dryRun ? undefined : upsertFixesAgentsBlock(cwd);
-  const skills = discoverLocalSkills(cwd);
-  if (skills.length === 0) {
-    return { synced: [], dryRun, ...agentsMd ? { agentsMd } : {} };
-  }
-  const sourceCommit = getGitCommit2(cwd);
-  const response = await callControlAPI("/skills/sync", {
-    method: "POST",
-    body: JSON.stringify({
-      skills: skills.map((skill) => ({
-        key: skill.key,
-        name: skill.name,
-        description: skill.description,
-        skillMd: skill.skillMd,
-        sourcePath: skill.sourcePath,
-        contentHash: skill.contentHash,
-        sourceCommit
-      })),
-      sourceCommit,
-      dryRun
-    })
-  }, profileOptions);
-  return { synced: response.synced ?? [], dryRun, ...agentsMd ? { agentsMd } : {} };
-}
-function discoverLocalSkills(cwd) {
-  const skillsRoot = join7(cwd, SKILLS_DIR);
-  if (!existsSync7(skillsRoot))
-    return [];
-  const managed = new Set(managedSkillPaths(cwd));
-  const skills = [];
-  for (const absPath of walkSkillFiles(skillsRoot, 0)) {
-    const sourcePath = relative3(cwd, absPath).replace(/\\/g, "/");
-    if (managed.has(sourcePath))
-      continue;
-    const key = basename(dirname5(absPath));
-    if (key === "moda-cli" || !/^[A-Za-z0-9_-]+$/.test(key))
-      continue;
-    let content;
-    try {
-      content = readFileSync5(absPath, "utf8");
-    } catch {
-      continue;
-    }
-    if (!content.trim())
-      continue;
-    const { name, description } = parseSkillFrontmatter(content, key);
-    skills.push({
-      key,
-      name,
-      description,
-      skillMd: content,
-      sourcePath,
-      contentHash: sha2562(content)
-    });
-  }
-  return skills.sort((a, b) => a.key.localeCompare(b.key));
-}
-function managedSkillPaths(cwd) {
-  const manifest = readSkillsManifest(cwd);
-  if (!manifest)
-    return [];
-  return manifest.managedPaths.filter((path) => path.startsWith(".claude/skills/") && path.endsWith("/SKILL.md"));
-}
-function walkSkillFiles(dir, depth) {
-  if (depth > MAX_SKILL_WALK_DEPTH)
-    return [];
-  let entries;
-  try {
-    entries = readdirSync3(dir);
-  } catch {
-    return [];
-  }
-  const files = [];
-  for (const entry of entries) {
-    const fullPath = join7(dir, entry);
-    let stat;
-    try {
-      stat = lstatSync2(fullPath);
-    } catch {
-      continue;
-    }
-    if (stat.isSymbolicLink())
-      continue;
-    if (stat.isDirectory()) {
-      files.push(...walkSkillFiles(fullPath, depth + 1));
-    } else if (stat.isFile() && entry === SKILL_FILE) {
-      files.push(fullPath);
-    }
-  }
-  return files;
-}
-function parseSkillFrontmatter(raw, fallbackKey) {
-  let name = fallbackKey;
-  let description;
-  if (raw.startsWith("---")) {
-    const end = raw.indexOf(`
----`, 3);
-    if (end !== -1) {
-      const frontmatter = raw.slice(3, end);
-      const nameMatch = frontmatter.match(/^name:\s*(.+)$/m);
-      const descMatch = frontmatter.match(/^description:\s*(.+)$/m);
-      if (nameMatch)
-        name = stripQuotes(nameMatch[1].trim()) || fallbackKey;
-      if (descMatch)
-        description = stripQuotes(descMatch[1].trim()) || undefined;
-    }
-  }
-  return { name, description };
-}
-function stripQuotes(value) {
-  return value.replace(/^["']|["']$/g, "");
-}
-function getGitCommit2(cwd) {
-  try {
-    return execFileSync2("git", ["rev-parse", "HEAD"], {
-      cwd,
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim();
-  } catch {
-    return;
-  }
-}
-async function fetchSkillProposals(flags, profileOptions = {}) {
-  const params = new URLSearchParams;
-  if (flags["generation-run-id"])
-    params.set("generationRunId", flags["generation-run-id"]);
-  const status = flags.status ?? "ready_for_pr";
-  if (status !== "all")
-    params.set("status", status);
-  if (flags["tenant-id"])
-    params.set("tenantId", flags["tenant-id"]);
-  const suffix = params.toString() ? `?${params.toString()}` : "";
-  const response = await callControlAPI(`/skills/proposals${suffix}`, { method: "GET" }, profileOptions);
-  return Array.isArray(response.proposals) ? response.proposals : [];
-}
-async function applySkillProposal(proposalId, flags, profileOptions = {}, options = {}) {
-  const cwd = options.cwd ?? process.cwd();
-  const params = new URLSearchParams;
-  if (flags["tenant-id"])
-    params.set("tenantId", flags["tenant-id"]);
-  const suffix = params.toString() ? `?${params.toString()}` : "";
-  const proposal = await callControlAPI(`/skills/proposals/${encodeURIComponent(proposalId)}${suffix}`, { method: "GET" }, profileOptions);
-  if (!proposal.skillMd?.trim()) {
-    throw new CliInputError(`Proposal ${proposalId} does not include SKILL.md content`);
-  }
-  const safeId = safeSkillId(proposal.skillId);
-  const relativePath = `.claude/skills/${safeId}/SKILL.md`;
-  const writeStatus = writeIfChanged(join7(cwd, relativePath), proposal.skillMd);
-  if (writeStatus === "failed") {
-    throw new Error(`Failed to write ${relativePath}`);
-  }
-  writeSkillProposalManifest(cwd, proposal, relativePath);
-  let acknowledged = true;
-  let ackError;
-  try {
-    await callControlAPI(`/skills/proposals/${encodeURIComponent(proposalId)}/mark-applied${suffix}`, {
-      method: "POST",
-      body: JSON.stringify({ appliedBy: "moda-cli" })
-    }, profileOptions);
-  } catch (err) {
-    acknowledged = false;
-    ackError = err instanceof Error ? err.message : String(err);
-  }
-  return {
-    proposalId,
-    skillId: proposal.skillId,
-    path: relativePath,
-    status: writeStatus,
-    acknowledged,
-    ackError
-  };
-}
-function safeSkillId(skillId) {
-  const safeId = basename(skillId || "");
-  if (!safeId || !/^[A-Za-z0-9_-]+$/.test(safeId)) {
-    throw new CliInputError(`Invalid skill_id in proposal: ${JSON.stringify(skillId).slice(0, 80)}`);
-  }
-  return safeId;
-}
-function writeSkillProposalManifest(cwd, proposal, relativePath) {
-  const manifestPath = join7(cwd, SKILL_PROPOSALS_MANIFEST_PATH);
-  mkdirSync5(dirname5(manifestPath), { recursive: true });
-  const existing = existsSync7(manifestPath) ? readFileSync5(manifestPath, "utf8") : `applied_proposals:
-`;
-  const entry = [
-    `  - proposal_id: "${escapeYamlString(proposal.proposalId)}"`,
-    `    skill_id: "${escapeYamlString(proposal.skillId)}"`,
-    `    skill_family_id: "${escapeYamlString(proposal.skillFamilyId)}"`,
-    `    skill_version: ${Number(proposal.skillVersion || 0)}`,
-    `    generation_run_id: "${escapeYamlString(proposal.generationRunId)}"`,
-    `    clustering_run_id: "${escapeYamlString(proposal.clusteringRunId)}"`,
-    `    topic_id: "${escapeYamlString(proposal.topicId)}"`,
-    `    replay_set_id: "${escapeYamlString(proposal.replaySetId)}"`,
-    `    delta_pass_rate: ${Number(proposal.deltaPassRate || 0)}`,
-    `    path: "${escapeYamlString(relativePath)}"`,
-    `    applied_at: "${new Date().toISOString()}"`
-  ].join(`
-`);
-  const prefix = existing.endsWith(`
-`) ? existing : `${existing}
-`;
-  writeFileSync6(manifestPath, `${prefix}${entry}
-`);
-}
-function escapeYamlString(value) {
-  return String(value ?? "").replace(/\\/g, "\\\\").replace(/"/g, "\\\"");
-}
-function formatProposalRate(value) {
-  return `${(Number(value || 0) * 100).toFixed(1)}%`;
-}
-async function runSkillsCommand(input) {
-  const context = "output" in input ? input : createCommandContext({
-    command: input.command,
-    positional: input.positional,
-    positionals: input.positionals,
-    flags: input.flags
-  }, {
-    outputMode: input.flags.agent === "true" ? "agent" : input.flags.json === "true" ? "json" : "human"
-  });
-  const sub = context.positional;
-  const positionals = context.positionals ?? (sub ? [sub] : []);
-  const flags = context.flags;
-  if (sub === "gen") {
-    const result = await generateSkills(flags);
-    if (context.outputMode !== "human") {
-      context.output.writeData(result, {
-        status: Number(result.sessions_failed ?? 0) > 0 ? "error" : "success"
-      });
-    } else if (result.accepted) {
-      console.log([
-        "accepted: true",
-        result.generation_run_id && `generation_run_id: ${result.generation_run_id}`,
-        result.message && `message: ${result.message}`,
-        result.generation_run_id && `follow progress: moda skills status ${result.generation_run_id}`
-      ].filter(Boolean).join(`
-`));
-    } else {
-      console.log([
-        `processed: ${result.sessions_processed ?? 0}`,
-        `failed: ${result.sessions_failed ?? 0}`,
-        `pending: ${result.sessions_pending ?? 0}`,
-        `pending_found: ${result.pending_sessions_found ?? 0}`,
-        `distilled: ${Number(result.cluster_result?.distilled_skills_generated ?? 0)}`,
-        `indexed: ${Number(result.cluster_result?.skills_indexed ?? 0)}`,
-        result.distillation_skipped && `distillation skipped: ${result.distillation_skip_reason || "unknown"}`
-      ].filter(Boolean).join(`
-`));
-    }
-    return Number(result.sessions_failed ?? 0) > 0 ? 1 : 0;
-  }
-  if (sub === "status") {
-    const runId = positionals[1] || flags["run-id"] || undefined;
-    const { run, events } = await fetchSkillRunStatus(runId);
-    if (context.outputMode !== "human") {
-      context.output.writeData({ run, events }, { status: run?.status === "failed" ? "error" : "success" });
-    } else if (!run) {
-      console.log("No skill generation runs found yet. Start one with `moda skills gen`.");
-    } else {
-      console.log(formatRunStatusHuman(run, events));
-    }
-    return run?.status === "failed" ? 1 : 0;
-  }
-  if (sub === "proposals" && positionals[1] === "list") {
-    const proposals = await fetchSkillProposals(flags, { profile: context.profile });
-    if (flags.json === "true") {
-      console.log(JSON.stringify({ proposals }));
-    } else if (proposals.length === 0) {
-      console.log("No skill proposals found.");
-    } else {
-      for (const proposal of proposals) {
-        console.log([
-          proposal.proposalId,
-          proposal.proposalStatus,
-          `${proposal.skillId}@v${proposal.skillVersion}`,
-          `delta=${formatProposalRate(proposal.deltaPassRate)}`,
-          `baseline=${formatProposalRate(proposal.baselinePassRate)}`,
-          `candidate=${formatProposalRate(proposal.candidatePassRate)}`,
-          proposal.name
-        ].filter(Boolean).join("\t"));
-      }
-    }
-    return 0;
-  }
-  if (sub === "proposal" && positionals[1] === "apply") {
-    const proposalId = positionals[2] || flags["proposal-id"];
-    if (!proposalId) {
-      throw new CliInputError("A proposal id is required", "Usage: moda skills proposal apply <proposal-id>");
-    }
-    const result = await applySkillProposal(proposalId, flags, { profile: context.profile });
-    if (flags.json === "true") {
-      console.log(JSON.stringify(result));
-    } else {
-      console.log([
-        `${result.status} ${result.path}`,
-        result.acknowledged ? "acknowledged: true" : "acknowledged: false"
-      ].join(`
-`));
-    }
-    if (!result.acknowledged) {
-      console.error(`Warning: wrote ${result.path} but failed to acknowledge proposal ${proposalId} on the server` + (result.ackError ? ` (${result.ackError})` : "") + ". The proposal is still listed as ready — re-run `moda skills proposal apply` to acknowledge it.");
-      return 1;
-    }
-    return 0;
-  }
-  if (sub === "sync") {
-    const result = await runSkillSync(flags, { profile: context.profile, env: context.env });
-    context.output.writeData({
-      synced: result.synced,
-      dryRun: result.dryRun,
-      ...result.agentsMd ? { agentsMd: result.agentsMd } : {}
-    });
-    return 0;
-  }
-  if (sub !== "pull") {
-    throw new CliInputError(sub ? `Unknown skills subcommand '${sub}'` : "A skills subcommand is required", "Usage: moda skills gen [--source=all|sdk] [--max-sessions=N] [--start-at=ISO] [--end-at=ISO] [--replay] [--replay-set-id=ID] [--reprocess-segments] [--force-reprocess] [--wait] | moda skills status [run-id] | moda skills proposals list [--status=ready_for_pr] | moda skills proposal apply <proposal-id> | moda skills pull [--status=approved|proposed|all] | moda skills sync [--dry-run]");
-  }
-  const status = (flags.status ?? "approved").toLowerCase();
-  if (!VALID_STATUSES.has(status)) {
-    throw new CliInputError(`Invalid --status '${status}'`, `Must be one of: ${[...VALID_STATUSES].join(", ")}`);
-  }
-  const summary = await pullSkills({ status, silent: context.outputMode !== "human" });
-  const parts = [
-    summary.pruned && `${summary.pruned} pruned`,
-    summary.wrote && `${summary.wrote} written`,
-    summary.updated && `${summary.updated} updated`,
-    summary.unchanged && `${summary.unchanged} unchanged`,
-    summary.failed && `${summary.failed} failed`
-  ].filter(Boolean);
-  if (context.outputMode === "human" && summary.total > 0) {
-    console.log(`  Done — ${parts.join(", ") || "no changes"}`);
-  }
-  if (context.outputMode !== "human") {
-    context.output.writeData({ status, summary });
-  }
-  return summary.failed > 0 ? 1 : 0;
-}
-async function generateSkills(flags) {
-  const apiKey = resolveApiKey();
-  if (!apiKey) {
-    throw new CliInputError("No Moda API key found. Run `moda init` first (or set MODA_API_KEY).");
-  }
-  const tenantId = flags["tenant-id"] || resolveTenantId();
-  const directHarnessUrl = flags["harness-url"] || process.env.MODA_SKILL_HARNESS_URL;
-  if (directHarnessUrl && !tenantId) {
-    throw new CliInputError("No Moda tenant id found. Run `moda init` first (or set MODA_TENANT_ID / --tenant-id).");
-  }
-  const endpoint = directHarnessUrl ? `${directHarnessUrl.replace(/\/+$/, "")}/skills/generate` : `${resolveIngestUrl().replace(/\/+$/, "")}/v1/skills/generate`;
-  const waitForCompletion = flags.wait === "true" || flags["wait-for-completion"] === "true";
-  const forceReprocess = flags["force-reprocess"] === "true";
-  const source = normalizeSkillSource(flags.source);
-  if (source === "coding_agent") {
-    console.error("Note: --source=coding-agent is deprecated for skills gen (SDK-only). The run will find no coding-agent sessions; use --source=all or --source=sdk.");
-  }
-  const body = compactObject({
-    tenant_id: tenantId || undefined,
-    max_sessions: parsePositiveInt3(flags["max-sessions"], 0),
-    lookback_hours: parsePositiveInt3(flags["lookback-hours"], 0),
-    start_at: flags["start-at"] || undefined,
-    end_at: flags["end-at"] || undefined,
-    clustering_run_id: flags["clustering-run-id"] || undefined,
-    replay_set_id: flags["replay-set-id"] || flags["eval-set-id"] || undefined,
-    run_clustering: flags["no-clustering"] !== "true",
-    source,
-    clustering_timeout_seconds: parsePositiveInt3(flags["clustering-timeout-seconds"], 7200),
-    clustering_poll_seconds: parsePositiveInt3(flags["clustering-poll-seconds"], 15),
-    max_cluster_pct: parseOptionalFloat(flags["max-cluster-pct"]),
-    reprocess_segments: flags["reprocess-segments"] === "true" || forceReprocess,
-    run_replay: flags.replay === "true" && flags["no-replay"] !== "true",
-    max_traces: parsePositiveInt3(flags["max-traces"], 0),
-    improve_candidates: flags["improve-candidates"] === "true",
-    improvement_rounds: parsePositiveInt3(flags["improvement-rounds"], 2),
-    force_reprocess: forceReprocess,
-    wait_for_completion: waitForCompletion
-  });
-  const headers = {
-    Authorization: `Bearer ${apiKey}`,
-    "Content-Type": "application/json"
-  };
-  if (tenantId)
-    headers["X-Moda-Tenant-Id"] = tenantId;
-  const response = await fetch(endpoint, {
-    method: "POST",
-    headers,
-    body: JSON.stringify(body)
-  });
-  if (!response.ok) {
-    const text = await response.text().catch(() => "");
-    throw new Error(`Failed to generate skills (HTTP ${response.status}): ${text.slice(0, 200)}`);
-  }
-  return await response.json();
-}
-function parsePositiveInt3(value, fallback) {
-  if (!value)
-    return fallback;
-  const parsed = Number.parseInt(value, 10);
-  return Number.isFinite(parsed) && parsed >= 0 ? parsed : fallback;
-}
-function parseOptionalFloat(value) {
-  if (!value)
-    return;
-  const parsed = Number.parseFloat(value);
-  return Number.isFinite(parsed) ? parsed : undefined;
-}
-function compactObject(input) {
-  return Object.fromEntries(Object.entries(input).filter(([, value]) => value !== undefined));
-}
-function normalizeSkillSource(value) {
-  const normalized = (value || "all").toLowerCase().replace(/-/g, "_");
-  if (["all", "sdk", "coding_agent"].includes(normalized))
-    return normalized;
-  return "all";
-}
-function releaseKeyFor(release, skills, status) {
-  if (release?.generation_run_id)
-    return `${status}:run:${release.generation_run_id}`;
-  if (Number(release?.generation_version || 0) > 0) {
-    return `${status}:version:${Number(release?.generation_version)}`;
-  }
-  return `${status}:legacy:${sha2562(JSON.stringify(skills.map((skill) => ({
-    skill_id: skill.skill_id,
-    hash: sha2562(skill.skill_md || "")
-  })).sort((a, b) => a.skill_id.localeCompare(b.skill_id))))}`;
-}
-function manifestHeaderFor(fetched) {
-  const release = fetched.release;
-  return {
-    tenantId: fetched.tenantId,
-    releaseKey: fetched.releaseKey,
-    statusFilter: fetched.status,
-    generationRunId: release?.generation_run_id || "",
-    generationVersion: Number(release?.generation_version || 0),
-    releasedAt: release?.released_at || ""
-  };
-}
-function sha2562(input) {
-  return createHash2("sha256").update(input).digest("hex");
-}
-
-// src/doctor.ts
-import { createHash as createHash3 } from "node:crypto";
-import { existsSync as existsSync8, readFileSync as readFileSync6, statSync } from "node:fs";
-import { join as join8 } from "node:path";
-async function runDoctorCommand(context) {
-  const report = await buildDoctorReport(context, {
-    offline: context.flags.offline === "true"
-  });
-  if (context.outputMode === "human") {
-    if (!context.quiet)
-      console.log(renderDoctorHuman(report));
-    return { exitCode: 0 };
-  }
-  context.output.writeData(report, {
-    status: report.summary.fail > 0 ? "error" : "success",
-    ...doctorAgentWriteOptions(report, "doctor")
-  });
-  return { exitCode: 0 };
-}
-async function runStatusCommand(context) {
-  const report = await buildDoctorReport(context, {
-    offline: context.flags.offline === "true" || context.flags.online !== "true"
-  });
-  const topBroken = firstBrokenCheck(report.checks);
-  const statusPayload = {
-    schemaVersion: "status.v0.1",
-    generatedAt: report.generatedAt,
-    status: report.summary.status,
-    activeProfile: report.profile.active,
-    auth: {
-      apiKey: resolveApiKey() ? "configured" : "missing"
-    },
-    workspace: {
-      tenantId: resolveTenantId() ?? null,
-      baseUrl: resolveModaBaseUrl(),
-      ingestUrl: resolveIngestUrl()
-    },
-    dataFlow: checkStatus(report.checks, "cloud_data_flow"),
-    harness: checkStatus(report.checks, "harness_manifest_current"),
-    harnessSync: checkStatus(report.checks, "harness_sync_state_present"),
-    harnessReport: checkStatus(report.checks, "harness_report_approved_synced"),
-    shadowSpark: checkStatus(report.checks, "shadow_spark_workspace_health"),
-    prompts: checkStatus(report.checks, "prompts_discovered"),
-    skills: checkStatus(report.checks, "skills_discovered"),
-    topBrokenCheck: topBroken ? {
-      id: topBroken.id,
-      status: topBroken.status,
-      severity: topBroken.severity,
-      nextCommand: topBroken.nextCommand
-    } : null,
-    nextCommands: report.nextCommands.slice(0, 3)
-  };
-  if (context.outputMode === "human") {
-    if (!context.quiet)
-      console.log(renderStatusHuman(statusPayload));
-    return { exitCode: 0 };
-  }
-  context.output.writeData(statusPayload, {
-    status: report.summary.fail > 0 ? "error" : "success",
-    ...doctorAgentWriteOptions(report, "status")
-  });
-  return { exitCode: 0 };
-}
-async function buildDoctorReport(context, options) {
-  const checks = [];
-  const profileConfig = loadProfileConfig({ env: context.env });
-  const activeProfile = getActiveProfile({ profile: context.profile, env: context.env });
-  const paths = getModaPaths({ env: context.env });
-  const profileOptions = { profile: context.profile, env: context.env };
-  const apiKey = resolveApiKey(profileOptions);
-  const tenantId = resolveTenantId(profileOptions);
-  const baseUrl = resolveModaBaseUrl(profileOptions);
-  const ingestUrl = resolveIngestUrl(profileOptions);
-  checks.push({
-    id: "active_profile_resolves",
-    group: "config",
-    title: "Active profile resolves",
-    status: activeProfile ? "pass" : "fail",
-    severity: activeProfile ? "info" : "critical",
-    evidence: [
-      { label: "active_profile", value: profileConfig.active_profile },
-      { label: "environment", value: activeProfile.environment }
-    ],
-    remediation: activeProfile ? undefined : "Create or select a Moda profile.",
-    nextCommand: activeProfile ? undefined : "moda profiles list"
-  });
-  checks.push({
-    id: "api_key_resolves",
-    group: "config",
-    title: "API key resolves",
-    status: apiKey ? "pass" : "fail",
-    severity: apiKey ? "info" : "critical",
-    evidence: [{ label: "source", value: apiKey ? "environment/profile/config" : "none" }],
-    remediation: apiKey ? undefined : "Authenticate and create a tenant API key.",
-    nextCommand: apiKey ? undefined : "moda init"
-  });
-  checks.push({
-    id: "tenant_resolves",
-    group: "config",
-    title: "Tenant/workspace resolves",
-    status: tenantId ? "pass" : "warning",
-    severity: tenantId ? "info" : "warning",
-    evidence: [{ label: "tenant_id", value: tenantId ? "configured" : "missing" }],
-    remediation: tenantId ? undefined : "Select a tenant during init or set MODA_TENANT_ID.",
-    nextCommand: tenantId ? undefined : "moda init"
-  });
-  checks.push(authTokenCheck(context, Boolean(apiKey)));
-  checks.push(configPermissionCheck(paths.legacyConfigPath));
-  if (activeProfile.api_key_ref) {
-    const secretPath = secretFilePathFromRef(activeProfile.api_key_ref);
-    if (secretPath)
-      checks.push(secretPermissionCheck(secretPath));
-    checks.push({
-      id: "profile_api_key_ref_resolves",
-      group: "config",
-      title: "Profile API key reference resolves",
-      status: resolveSecretReference(activeProfile.api_key_ref) ? "pass" : "warning",
-      severity: "warning",
-      evidence: [{ label: "api_key_ref", value: activeProfile.api_key_ref }],
-      remediation: "Create or update the profile API key reference.",
-      nextCommand: "moda profiles create"
-    });
-  }
-  checks.push(urlCheck("base_url_valid", "config", "Base URL is valid", baseUrl));
-  checks.push(urlCheck("ingest_url_valid", "config", "Ingest URL is valid", ingestUrl));
-  checks.push(localBaseUrlCheck(activeProfile.environment, baseUrl));
-  const manifestPath = join8(context.cwd, ".moda", "harness.json");
-  const manifestExists = existsSync8(manifestPath);
-  checks.push({
-    id: "harness_manifest_exists",
-    group: "harness",
-    title: "Harness manifest exists",
-    status: manifestExists ? "pass" : "warning",
-    severity: manifestExists ? "info" : "warning",
-    evidence: [{ label: "path", value: ".moda/harness.json" }],
-    remediation: manifestExists ? undefined : "Run `moda harness scan --summary` to scan the project and write a harness manifest.",
-    nextCommand: manifestExists ? undefined : "moda harness scan --summary"
-  });
-  checks.push(harnessCurrentCheck(context.cwd, manifestPath, manifestExists, tenantId));
-  checks.push(harnessSyncStateCheck(context.cwd));
-  checks.push(harnessReportStateCheck(context.cwd));
-  checks.push(discoveryCheck("prompts_discovered", "harness", "Prompts are discovered", context.cwd, [
-    "prompts",
-    ".moda/prompts.yml"
-  ], "moda prompts init"));
-  checks.push(discoveryCheck("skills_discovered", "harness", "Skills are discovered", context.cwd, [
-    "skills",
-    ".claude/skills",
-    ".cursor/rules"
-  ], "moda skills pull"));
-  checks.push(discoveryCheck("evals_discovered", "harness", "Evals/tests are discovered", context.cwd, [
-    "evals",
-    "tests",
-    "__tests__"
-  ]));
-  checks.push(sdkInitializationCheck(context.cwd));
-  checks.push(validationEventPathCheck(ingestUrl));
-  if (options.offline || !apiKey) {
-    checks.push(...offlineCloudChecks(options.offline));
-  } else {
-    checks.push(...await cloudDataFlowChecks(ingestUrl, apiKey));
-  }
-  const nextCommands = nextCommandsForChecks(checks);
-  const summary = summarizeChecks(checks);
-  return {
-    schemaVersion: "doctor.v0.1",
-    generatedAt: new Date().toISOString(),
-    profile: {
-      active: activeProfile.name,
-      requested: context.profile
-    },
-    summary,
-    checks,
-    nextCommands,
-    fixPlan: checks.filter((check) => check.status === "fail" || check.status === "warning").map((check) => ({
-      checkId: check.id,
-      command: check.nextCommand,
-      action: check.remediation ?? "Review this diagnostic."
-    }))
-  };
-}
-function authTokenCheck(context, hasApiKey) {
-  const session = loadAuthSession({
-    profile: context.profile,
-    env: context.env,
-    includeExpired: true
-  });
-  const valid = isAuthSessionValid(session);
-  if (!valid && hasApiKey) {
-    return {
-      id: "auth_token_valid",
-      group: "config",
-      title: "Browser auth token is valid",
-      status: "skipped",
-      severity: "info",
-      evidence: [{ label: "reason", value: "api key configured" }]
-    };
-  }
-  return {
-    id: "auth_token_valid",
-    group: "config",
-    title: "Browser auth token is valid",
-    status: valid ? "pass" : "warning",
-    severity: valid ? "info" : "warning",
-    evidence: [
-      { label: "token", value: session ? "present" : "missing" },
-      ...session ? [{ label: "expires_at", value: new Date(session.expires_at * 1000).toISOString() }] : []
-    ],
-    remediation: valid ? undefined : "Refresh browser authentication.",
-    nextCommand: valid ? undefined : "moda init"
-  };
-}
-function configPermissionCheck(path) {
-  if (!existsSync8(path)) {
-    return {
-      id: "config_file_permissions",
-      group: "config",
-      title: "Config file permissions",
-      status: "skipped",
-      severity: "info",
-      evidence: [{ label: "path", value: path }]
-    };
-  }
-  const permission = ensureSecretFilePermissions(path);
-  return {
-    id: "config_file_permissions",
-    group: "config",
-    title: "Config file permissions",
-    status: permission.secure ? "pass" : "fail",
-    severity: permission.secure ? "info" : "critical",
-    evidence: [
-      { label: "path", value: path },
-      { label: "mode", value: permission.mode ?? "unknown" }
-    ],
-    remediation: permission.secure ? undefined : "Restrict config file permissions to the current user."
-  };
-}
-function secretPermissionCheck(path) {
-  const permission = ensureSecretFilePermissions(path);
-  return {
-    id: "secret_file_permissions",
-    group: "config",
-    title: "Secret file permissions",
-    status: permission.secure ? "pass" : "fail",
-    severity: permission.secure ? "info" : "critical",
-    evidence: [
-      { label: "path", value: path },
-      { label: "mode", value: permission.mode ?? "unknown" }
-    ],
-    remediation: permission.secure ? undefined : "Restrict secret file permissions to the current user."
-  };
-}
-function urlCheck(id, group, title, value) {
-  let valid = false;
-  try {
-    const parsed = new URL(value);
-    valid = parsed.protocol === "http:" || parsed.protocol === "https:";
-  } catch {
-    valid = false;
-  }
-  return {
-    id,
-    group,
-    title,
-    status: valid ? "pass" : "fail",
-    severity: valid ? "info" : "critical",
-    evidence: [{ label: "url", value }],
-    remediation: valid ? undefined : "Configure a valid http(s) URL.",
-    nextCommand: valid ? undefined : "moda profiles create"
-  };
-}
-function localBaseUrlCheck(environment, baseUrl) {
-  if (environment !== "local") {
-    return {
-      id: "local_base_url_frontend",
-      group: "config",
-      title: "Local base URL targets the frontend",
-      status: "skipped",
-      severity: "info",
-      evidence: [{ label: "environment", value: environment }]
-    };
-  }
-  let port = null;
-  let loopback = false;
-  try {
-    const parsed = new URL(baseUrl);
-    loopback = isLoopbackBaseUrl(baseUrl);
-    port = parsed.port || (parsed.protocol === "https:" ? "443" : "80");
-  } catch {
-    return {
-      id: "local_base_url_frontend",
-      group: "config",
-      title: "Local base URL targets the frontend",
-      status: "fail",
-      severity: "critical",
-      evidence: [{ label: "base_url", value: baseUrl }],
-      remediation: "Set the local profile base URL to the frontend origin (http://localhost:3000).",
-      nextCommand: "moda profiles create local --environment local --base-url http://localhost:3000"
-    };
-  }
-  const looksLikeBackend = loopback && (port === "3001" || port === "3002");
-  if (looksLikeBackend) {
-    return {
-      id: "local_base_url_frontend",
-      group: "config",
-      title: "Local base URL targets the frontend",
-      status: "warning",
-      severity: "warning",
-      evidence: [
-        { label: "base_url", value: baseUrl },
-        { label: "port", value: port ?? "unknown" }
-      ],
-      remediation: "Local CLI auth and control APIs are served by the frontend. " + "Use http://localhost:3000 (or your worktree frontend port), not the backend :3001.",
-      nextCommand: "moda profiles create local --environment local --base-url http://localhost:3000 --use"
-    };
-  }
-  if (!loopback) {
-    return {
-      id: "local_base_url_frontend",
-      group: "config",
-      title: "Local base URL targets the frontend",
-      status: "warning",
-      severity: "warning",
-      evidence: [{ label: "base_url", value: baseUrl }],
-      remediation: "Local profile should use a loopback frontend URL (http://localhost:3000). " + "Activate with `moda profiles use local` or set MODA_PROFILE=local.",
-      nextCommand: "moda profiles use local"
-    };
-  }
-  return {
-    id: "local_base_url_frontend",
-    group: "config",
-    title: "Local base URL targets the frontend",
-    status: "pass",
-    severity: "info",
-    evidence: [{ label: "base_url", value: baseUrl }]
-  };
-}
-function harnessCurrentCheck(cwd, manifestPath, manifestExists, tenantId) {
-  if (!manifestExists) {
-    return {
-      id: "harness_manifest_current",
-      group: "harness",
-      title: "Harness manifest matches scanner output",
-      status: "skipped",
-      severity: "info",
-      evidence: [{ label: "reason", value: "manifest missing" }],
-      nextCommand: "moda harness scan --summary"
-    };
-  }
-  try {
-    const current = scanHarness({
-      rootDir: cwd,
-      scannerVersion: "doctor",
-      tenantId,
-      tenantSource: tenantId ? "env_or_config" : undefined
-    });
-    const saved = JSON.parse(readFileSync6(manifestPath, "utf8"));
-    const savedHash = stableGraphHash(saved);
-    const currentHash = stableGraphHash(current);
-    const matches = savedHash === currentHash;
-    return {
-      id: "harness_manifest_current",
-      group: "harness",
-      title: "Harness manifest matches scanner output",
-      status: matches ? "pass" : "warning",
-      severity: matches ? "info" : "warning",
-      evidence: [
-        { label: "saved_hash", value: savedHash.slice(0, 12) },
-        { label: "current_hash", value: currentHash.slice(0, 12) },
-        ...matches ? [] : [{ label: "diff", value: "Manifest hash differs from fresh scanner output." }]
-      ],
-      remediation: matches ? undefined : "Refresh the local harness manifest.",
-      nextCommand: matches ? undefined : "moda harness scan --summary"
-    };
-  } catch (err) {
-    return {
-      id: "harness_manifest_current",
-      group: "harness",
-      title: "Harness manifest matches scanner output",
-      status: "fail",
-      severity: "critical",
-      evidence: [{ label: "error", value: err instanceof Error ? err.message : String(err) }],
-      remediation: "Regenerate the harness manifest.",
-      nextCommand: "moda harness scan --summary"
-    };
-  }
-}
-function harnessSyncStateCheck(cwd) {
-  const state = readHarnessSyncState(cwd);
-  if (!state) {
-    return {
-      id: "harness_sync_state_present",
-      group: "harness",
-      title: "Harness sync state exists",
-      status: "warning",
-      severity: "warning",
-      evidence: [{ label: "path", value: ".moda/sync-state.json" }],
-      remediation: "Sync the harness graph so Moda can correlate local state with cloud state.",
-      nextCommand: "moda harness sync --dry-run"
-    };
-  }
-  return {
-    id: "harness_sync_state_present",
-    group: "harness",
-    title: "Harness sync state exists",
-    status: "pass",
-    severity: "info",
-    evidence: [
-      { label: "updated_at", value: state.updatedAt },
-      { label: "profile", value: state.profile },
-      { label: "harness_id", value: state.harnessId },
-      { label: "remote_version_id", value: state.remote.versionId || "none" }
-    ]
-  };
-}
-function harnessReportStateCheck(cwd) {
-  const reportPath = join8(cwd, HARNESS_REPORT_PATH);
-  if (!existsSync8(reportPath)) {
-    return {
-      id: "harness_report_approved_synced",
-      group: "harness",
-      title: "Harness analyst report is approved and synced",
-      status: "warning",
-      severity: "warning",
-      evidence: [{ label: "path", value: HARNESS_REPORT_PATH }],
-      remediation: "Run a Moda Analyst pass so the harness graph has cited evidence before cloud sync.",
-      nextCommand: "moda harness analyze --experimental --summary"
-    };
-  }
-  try {
-    const report = readHarnessReport(reportPath);
-    const validation = validateHarnessReport(report, cwd);
-    const reportHash = hashHarnessReport(report);
-    const evidence = [
-      { label: "path", value: HARNESS_REPORT_PATH },
-      { label: "report_hash", value: reportHash.slice(0, 12) },
-      { label: "validation", value: validation.status }
-    ];
-    if (validation.status !== "pass") {
-      return {
-        id: "harness_report_approved_synced",
-        group: "harness",
-        title: "Harness analyst report is approved and synced",
-        status: "fail",
-        severity: "critical",
-        evidence: [
-          ...evidence,
-          { label: "errors", value: validation.errors.slice(0, 3).join(" | ") || "validation failed" }
-        ],
-        remediation: "Regenerate or fix the harness report before approving or syncing.",
-        nextCommand: "moda harness analyze --experimental --summary"
-      };
-    }
-    const approval = readHarnessReportApproval(cwd);
-    const approved = approval?.schemaVersion === HARNESS_REPORT_APPROVAL_SCHEMA_VERSION && approval.reportId === report.reportId && approval.reportHash === reportHash && approval.approved === true;
-    evidence.push({ label: "approval", value: approved ? "approved" : approval ? "stale_or_invalid" : "missing" });
-    if (approval && !approved) {
-      return {
-        id: "harness_report_approved_synced",
-        group: "harness",
-        title: "Harness analyst report is approved and synced",
-        status: "fail",
-        severity: "critical",
-        evidence,
-        remediation: "Approval no longer matches the current report. Review and approve the report again.",
-        nextCommand: "moda harness approve --yes"
-      };
-    }
-    if (!approved) {
-      return {
-        id: "harness_report_approved_synced",
-        group: "harness",
-        title: "Harness analyst report is approved and synced",
-        status: "warning",
-        severity: "warning",
-        evidence,
-        remediation: "Review and approve the validated harness report before syncing.",
-        nextCommand: "moda harness approve --yes"
-      };
-    }
-    const state = readHarnessSyncState(cwd);
-    const synced = state?.source === "approved_report" && state.report?.reportHash === reportHash;
-    evidence.push({ label: "sync", value: synced ? "synced" : "not_synced_to_this_report" }, ...state?.report?.reportHash ? [{ label: "sync_report_hash", value: state.report.reportHash.slice(0, 12) }] : []);
-    return {
-      id: "harness_report_approved_synced",
-      group: "harness",
-      title: "Harness analyst report is approved and synced",
-      status: synced ? "pass" : "warning",
-      severity: synced ? "info" : "warning",
-      evidence,
-      remediation: synced ? undefined : "Sync the approved harness report so Moda cloud has the same harness graph.",
-      nextCommand: synced ? undefined : "moda harness sync --from-report .moda/harness-report.json"
-    };
-  } catch (err) {
-    return {
-      id: "harness_report_approved_synced",
-      group: "harness",
-      title: "Harness analyst report is approved and synced",
-      status: "fail",
-      severity: "critical",
-      evidence: [
-        { label: "path", value: HARNESS_REPORT_PATH },
-        { label: "error", value: err instanceof Error ? err.message : String(err) }
-      ],
-      remediation: "Regenerate the harness report.",
-      nextCommand: "moda harness analyze --experimental --summary"
-    };
-  }
-}
-function readHarnessReportApproval(cwd) {
-  const approvalPath = join8(cwd, HARNESS_REPORT_APPROVAL_PATH);
-  if (!existsSync8(approvalPath))
-    return null;
-  try {
-    return JSON.parse(readFileSync6(approvalPath, "utf8"));
-  } catch {
-    return {
-      schemaVersion: HARNESS_REPORT_APPROVAL_SCHEMA_VERSION,
-      reportId: "unreadable",
-      reportHash: "unreadable",
-      approved: true,
-      approvedAt: "",
-      approvedBy: "local-human",
-      reportPath: HARNESS_REPORT_PATH
-    };
-  }
-}
-function discoveryCheck(id, group, title, cwd, relativePaths, nextCommand) {
-  const found = relativePaths.filter((path) => existsSync8(join8(cwd, path)));
-  return {
-    id,
-    group,
-    title,
-    status: found.length > 0 ? "pass" : "warning",
-    severity: found.length > 0 ? "info" : "warning",
-    evidence: [{ label: "paths", value: found.length > 0 ? found.join(", ") : "none" }],
-    remediation: found.length > 0 ? undefined : `Expected one of: ${relativePaths.join(", ")}.`,
-    nextCommand: found.length > 0 ? undefined : nextCommand
-  };
-}
-function sdkInitializationCheck(cwd) {
-  const candidates = ["src", "app", "agent_harness"];
-  let detected = false;
-  for (const candidate of candidates) {
-    const path = join8(cwd, candidate);
-    if (!existsSync8(path))
-      continue;
-    try {
-      const stat = statSync(path);
-      detected ||= stat.isDirectory() || stat.isFile();
-    } catch {}
-  }
-  return {
-    id: "sdk_initialization_detected",
-    group: "harness",
-    title: "SDK initialization is detectable",
-    status: detected ? "warning" : "skipped",
-    severity: "warning",
-    evidence: [{ label: "status", value: detected ? "code present, instrumentation not verified" : "no source candidates" }],
-    remediation: "Use the generated integration guide to add Moda SDK instrumentation.",
-    nextCommand: "moda init"
-  };
-}
-function validationEventPathCheck(ingestUrl) {
-  return {
-    id: "validation_event_path_defined",
-    group: "cloud",
-    title: "Validation event path is defined",
-    status: "pass",
-    severity: "info",
-    evidence: [{ label: "path", value: `${ingestUrl.replace(/\/+$/, "")}/v1/otel/validation` }]
-  };
-}
-function offlineCloudChecks(isOffline) {
-  const status = isOffline ? "skipped" : "warning";
-  const evidence = [{ label: "mode", value: isOffline ? "offline" : "missing api key" }];
-  const remediation = isOffline ? "Rerun without --offline to check Moda Cloud." : "Configure an API key before checking cloud data flow.";
-  const nextCommand = isOffline ? "moda doctor --online" : "moda init";
-  return [
-    {
-      id: "cloud_api_reachable",
-      group: "cloud",
-      title: "Moda Cloud API is reachable",
-      status,
-      severity: "warning",
-      evidence,
-      remediation,
-      nextCommand
-    },
-    {
-      id: "ingest_endpoint_reachable",
-      group: "cloud",
-      title: "Moda ingest endpoint is reachable",
-      status,
-      severity: "warning",
-      evidence,
-      remediation,
-      nextCommand
-    },
-    {
-      id: "recent_data_flow",
-      group: "cloud",
-      title: "Recent traces/logs/runs exist",
-      status,
-      severity: "warning",
-      evidence,
-      remediation,
-      nextCommand
-    },
-    {
-      id: "cloud_data_flow",
-      group: "cloud",
-      title: "Moda Cloud data flow",
-      status,
-      severity: "warning",
-      evidence,
-      remediation,
-      nextCommand
-    }
-  ];
-}
-async function cloudDataFlowChecks(ingestUrl, apiKey) {
-  let overview;
-  let cloudApiCheck;
-  try {
-    overview = await callDataAPI("/overview?days_back=1");
-    cloudApiCheck = {
-      id: "cloud_api_reachable",
-      group: "cloud",
-      title: "Moda Cloud API is reachable",
-      status: "pass",
-      severity: "info",
-      evidence: [{ label: "overview", value: "reachable" }]
-    };
-  } catch (err) {
-    const error = err instanceof Error ? err.message : String(err);
-    return [
-      {
-        id: "cloud_api_reachable",
-        group: "cloud",
-        title: "Moda Cloud API is reachable",
-        status: "warning",
-        severity: "warning",
-        evidence: [{ label: "error", value: error }],
-        remediation: "Check API key and base URL.",
-        nextCommand: "moda doctor --offline"
-      },
-      {
-        id: "ingest_endpoint_reachable",
-        group: "cloud",
-        title: "Moda ingest endpoint is reachable",
-        status: "skipped",
-        severity: "warning",
-        evidence: [{ label: "reason", value: "cloud API unreachable" }]
-      },
-      {
-        id: "recent_data_flow",
-        group: "cloud",
-        title: "Recent traces/logs/runs exist",
-        status: "skipped",
-        severity: "warning",
-        evidence: [{ label: "reason", value: "overview unavailable" }]
-      },
-      {
-        id: "cloud_data_flow",
-        group: "cloud",
-        title: "Moda Cloud data flow",
-        status: "warning",
-        severity: "warning",
-        evidence: [{ label: "error", value: error }],
-        remediation: "Check API key, base URL, and whether data has reached Moda.",
-        nextCommand: "moda doctor --offline"
-      }
-    ];
-  }
-  const ingestCheck = await ingestReachabilityCheck(ingestUrl, apiKey);
-  const recentCheck = recentDataFlowCheck(overview);
-  const cloudStatus = cloudApiCheck.status === "pass" && ingestCheck.status === "pass" && recentCheck.status === "pass" ? "pass" : "warning";
-  return [
-    cloudApiCheck,
-    ingestCheck,
-    recentCheck,
-    {
-      id: "cloud_data_flow",
-      group: "cloud",
-      title: "Moda Cloud data flow",
-      status: cloudStatus,
-      severity: cloudStatus === "pass" ? "info" : "warning",
-      evidence: [
-        { label: "cloud_api", value: cloudApiCheck.status },
-        { label: "ingest", value: ingestCheck.status },
-        { label: "recent_data", value: recentCheck.status }
-      ],
-      remediation: cloudStatus === "pass" ? undefined : "Check API key, ingest URL, and whether data has reached Moda.",
-      nextCommand: cloudStatus === "pass" ? undefined : "moda doctor --offline"
-    }
-  ];
-}
-async function ingestReachabilityCheck(ingestUrl, apiKey) {
-  const url = `${ingestUrl.replace(/\/+$/, "")}/`;
-  try {
-    const response = await fetch(url, {
-      method: "GET",
-      headers: { Authorization: `Bearer ${apiKey}` },
-      signal: AbortSignal.timeout(1e4)
-    });
-    return {
-      id: "ingest_endpoint_reachable",
-      group: "cloud",
-      title: "Moda ingest endpoint is reachable",
-      status: "pass",
-      severity: "info",
-      evidence: [
-        { label: "url", value: url },
-        { label: "http_status", value: String(response.status) }
-      ]
-    };
-  } catch (err) {
-    return {
-      id: "ingest_endpoint_reachable",
-      group: "cloud",
-      title: "Moda ingest endpoint is reachable",
-      status: "warning",
-      severity: "warning",
-      evidence: [{ label: "error", value: err instanceof Error ? err.message : String(err) }],
-      remediation: "Check the configured ingest URL and network reachability.",
-      nextCommand: "moda profiles create"
-    };
-  }
-}
-function recentDataFlowCheck(overview) {
-  const data = isRecord(overview) ? overview : {};
-  const conversations = numberAt(data, ["conversations", "total"]);
-  const toolFailures = numberAt(data, ["tool_failures", "total"]);
-  const recentActivity = Array.isArray(data.recent_activity) ? data.recent_activity : [];
-  const lastEventAt = lastActivityTimestamp(recentActivity);
-  const hasData = conversations > 0 || toolFailures > 0 || Boolean(lastEventAt);
-  return {
-    id: "recent_data_flow",
-    group: "cloud",
-    title: "Recent traces/logs/runs exist",
-    status: hasData ? "pass" : "warning",
-    severity: hasData ? "info" : "warning",
-    evidence: [
-      { label: "conversations", value: String(conversations) },
-      { label: "tool_failures", value: String(toolFailures) },
-      { label: "last_event_at", value: lastEventAt ?? "none" }
-    ],
-    remediation: hasData ? undefined : "No recent Moda data was visible in the overview window.",
-    nextCommand: hasData ? undefined : "moda hooks install --agent=all"
-  };
-}
-function numberAt(value, path) {
-  let cursor = value;
-  for (const key of path) {
-    if (!isRecord(cursor))
-      return 0;
-    cursor = cursor[key];
-  }
-  return typeof cursor === "number" && Number.isFinite(cursor) ? cursor : 0;
-}
-function lastActivityTimestamp(items) {
-  const timestamps = items.map((item) => isRecord(item) && typeof item.timestamp === "string" ? item.timestamp : undefined).filter((item) => Boolean(item)).sort();
-  return timestamps.at(-1);
-}
-function summarizeChecks(checks) {
-  const fail = checks.filter((check) => check.status === "fail").length;
-  const warning = checks.filter((check) => check.status === "warning").length;
-  const skipped = checks.filter((check) => check.status === "skipped").length;
-  const pass = checks.filter((check) => check.status === "pass").length;
-  return {
-    status: fail > 0 ? "fail" : warning > 0 ? "warning" : "pass",
-    pass,
-    warning,
-    fail,
-    skipped
-  };
-}
-function nextCommandsForChecks(checks) {
-  return [...new Set(checks.filter((check) => check.status === "fail" || check.status === "warning").map((check) => check.nextCommand).filter((command) => Boolean(command)))];
-}
-function firstBrokenCheck(checks) {
-  return checks.find((check) => check.status === "fail") ?? checks.find((check) => check.status === "warning");
-}
-function checkStatus(checks, id) {
-  return checks.find((check) => check.id === id)?.status ?? "skipped";
-}
-function doctorAgentWriteOptions(report, command) {
-  const broken = report.checks.filter((check) => check.status === "fail" || check.status === "warning");
-  return {
-    summary: `${command} completed with status ${report.summary.status}: ${report.summary.fail} failing checks and ${report.summary.warning} warnings.`,
-    findings: broken.slice(0, 16).map((check) => ({
-      id: check.id,
-      title: check.title,
-      status: check.status,
-      severity: check.severity,
-      description: check.remediation ?? `Doctor check ${check.id} is ${check.status}.`,
-      evidence_ref_ids: [`doctor:${check.id}`]
-    })),
-    evidenceRefs: report.checks.map((check) => ({
-      id: `doctor:${check.id}`,
-      kind: "doctor_check",
-      label: check.title,
-      status: check.status
-    })),
-    recommendedActions: report.fixPlan.slice(0, 16).map((item, index) => ({
-      id: `doctor_action_${index + 1}_${item.checkId}`,
-      title: item.action,
-      command: item.command,
-      rationale: `Doctor check ${item.checkId} is not passing.`,
-      mutability: item.command ? agentMutabilityForCommand(item.command) : "unknown",
-      requires_approval: item.command ? agentCommandRequiresApproval(item.command) : true
-    })),
-    nextCommands: report.nextCommands.slice(0, 16).map((nextCommand) => ({
-      command: nextCommand,
-      purpose: agentPurposeForCommand(nextCommand),
-      mutability: agentMutabilityForCommand(nextCommand),
-      requires_approval: agentCommandRequiresApproval(nextCommand)
-    })),
-    warnings: broken.filter((check) => check.status === "warning").slice(0, 16).map((check) => `${check.title}: ${check.remediation ?? check.status}`)
-  };
-}
-function agentMutabilityForCommand(command) {
-  if (/\bsync\b/.test(command))
-    return "sync";
-  if (/\b(init|install|approve|pull|gen|promote|remove)\b/.test(command))
-    return "write";
-  return "read";
-}
-function agentCommandRequiresApproval(command) {
-  return agentMutabilityForCommand(command) !== "read" && !command.includes("--dry-run");
-}
-function agentPurposeForCommand(command) {
-  if (command.includes("doctor"))
-    return "Re-run Moda diagnostics.";
-  if (command.includes("harness approve"))
-    return "Approve the validated harness report after review.";
-  if (command.includes("harness sync"))
-    return "Sync harness state to Moda Cloud.";
-  if (command.includes("harness scan"))
-    return "Refresh the local harness manifest.";
-  if (command.includes("init"))
-    return "Run Moda onboarding.";
-  return "Inspect or repair Moda setup.";
-}
-function stableGraphHash(graph) {
-  return createHash3("sha256").update(JSON.stringify(sortJson2({
-    ...graph,
-    scan: {
-      ...graph.scan,
-      createdAt: undefined,
-      scannerVersion: undefined,
-      skipped: undefined
-    }
-  }))).digest("hex");
-}
-function sortJson2(value) {
-  if (Array.isArray(value))
-    return value.map((item) => sortJson2(item));
-  if (value && typeof value === "object") {
-    return Object.fromEntries(Object.entries(value).filter(([, item]) => item !== undefined).sort(([a], [b]) => a.localeCompare(b)).map(([key, item]) => [key, sortJson2(item)]));
-  }
-  return value;
-}
-function isRecord(value) {
-  return Boolean(value) && typeof value === "object" && !Array.isArray(value);
-}
-
-export { DEFAULT_POLL_INTERVAL_MS, DEFAULT_WAIT_TIMEOUT_MS, fetchLatestRun, runPromptsCommand, initPrompts, runPromptSync, packageAssetPath, claudeSkillToCursorRule, installRules, detectAgents, SKILL_SOURCE_INTEGRATION_BUNDLED, readSkillsManifest, upsertSkillManifestRecord, runSkillSync, runSkillsCommand, runDoctorCommand, runStatusCommand, buildDoctorReport };