@moda-ai/cli 1.34.0 → 1.35.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -183,8 +183,13 @@ Independent review can classify a source as an authored definition, builder,
183
183
  prompt transport, runtime context, non-prompt, or uncertain even when the
184
184
  resolver stored it as text, messages, template, or builder. Usage is tracked
185
185
  separately as active, conditional, display-only, or unknown, with an endpoint
186
- verification flag; unknown usage does not reject an otherwise verified authored
187
- definition or builder. Helpers that forward prompt configuration or carry
186
+ verification flag. Automatic code/configuration registration requires an authored
187
+ definition or builder with independently reviewed active or conditional model use
188
+ and a local consumer citation. Custom framework hooks can qualify without a
189
+ recognized SDK binding. Consumer relationships are semantic reviewer judgments,
190
+ not deterministic dataflow proofs; locally valid citations alone do not establish
191
+ model use. The separate `endpointVerified` flag reports SDK provenance. Display-only sources stay visible as related; sources
192
+ with unknown use remain pending. Helpers that forward prompt configuration or carry
188
193
  runtime context are retained as related discovery candidates and diagnostics,
189
194
  but are not synced as prompt sources. Builder provenance remains the source
190
195
  mapping and dependency evidence, so discovery does not claim complete
@@ -195,6 +200,18 @@ surrounding relationships. Its definition citations, source hash, and source
195
200
  stability are checked locally. Malformed review JSON gets one format-only repair
196
201
  attempt; a repair that changes an already stated role or decision stays pending.
197
202
 
203
+ Before uploading, sync checks statically resolvable JavaScript/TypeScript lookups
204
+ into the repository's `.moda/prompts.lock.json`. A missing key stops the upload
205
+ and reports its source location. Preserve a stable runtime key by assigning it
206
+ to the intended source mapping, or update the lookup to the selected mapping key.
207
+ Dynamic lookups and other languages are not exhaustively checked; attribution
208
+ coverage remains partial. A real sync with candidates but no eligible sources
209
+ exits nonzero after printing discovery diagnostics; dry runs remain previews.
210
+
211
+ Configured mappings remain authoritative. To clean up sources previously
212
+ registered in error, remove their entries from `.moda/prompts.yml` and sync with
213
+ `--allow-untrack`. This removes local tracking, not historical registry versions.
214
+
198
215
  You can also configure `.moda/prompts.yml` directly:
199
216
 
200
217
  ```yaml