@moda-ai/cli 1.49.0 → 1.52.0

package/dist/{cli-bqhs6sk7.js → cli-ac3p2byq.js}

@@ -534,9 +534,11 @@ function writeSecretJsonFile(path, value) {
 // src/errors.ts
 class CliInputError extends Error {
   usage;
-  constructor(message, usage) {
+  reason;
+  constructor(message, usage, reason) {
     super(message);
     this.usage = usage;
+    this.reason = reason;
     this.name = "CliInputError";
   }
 }
@@ -986,6 +988,9 @@ function packSnapshot(inputs, opts) {
 }
 // src/output.ts
 import { randomUUID } from "node:crypto";
+import { lstatSync, mkdirSync as mkdirSync2, readdirSync, unlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { tmpdir } from "node:os";
+import { join as join2 } from "node:path";
 var AGENT_SCHEMA_VERSION = "moda.agent.v1";
 var AGENT_EVENT_SCHEMA_VERSION = "moda.agent_event.v1";
 var FEEDBACK_TIP = 'Help us improve! If a result in this response looks wrong or is missing data, flag it: moda feedback "<describe what looked wrong>" [--category=...] [--conversation-id=... | --cluster-id=... | --tool-name=...]. Only submit genuine observations.';
@@ -1005,7 +1010,8 @@ var AGENT_ERROR_CODES = [
   "command_error",
   "access_denied",
   "unknown_error",
-  "cloud_unavailable"
+  "cloud_unavailable",
+  "output_error"
 ];
 var FALLBACK_RUN_ID = randomUUID();
 var fallbackSeq = 0;
@@ -1116,6 +1122,7 @@ function createCliOutput(options) {
     seq: 0,
     started: false,
     terminal: false,
+    outputError: false,
     startedAt: Date.now(),
     lastEventAt: Date.now()
   };
@@ -1177,6 +1184,8 @@ function createCliOutput(options) {
         if (state.terminal)
           return;
         const envelope = writeEnvelope(data, writeOptions);
+        if (envelope.errors.some((error) => error.code === "output_error"))
+          state.outputError = true;
         if (options.mode === "agent-stream") {
           ensureStarted();
           emitEvent({
@@ -1272,6 +1281,9 @@ function createCliOutput(options) {
     hasTerminalOutput() {
       return state.terminal;
     },
+    hasOutputError() {
+      return state.outputError;
+    },
     close() {
       clearHeartbeat(state);
     }
@@ -1281,41 +1293,198 @@ function createCliOutput(options) {
 function createAgentEnvelope(options) {
   const safeData = redactDeep(options.data);
   const maxBytes = agentMaxOutputBytes();
+  let fullOutput;
+  let saveFailed = false;
+  let envelopeTextSaveFailed = false;
+  const writeFullOutput = options.persistFullOutput === false ? undefined : () => {
+    fullOutput ??= { path: writeAgentFullOutput(options.command, safeData) };
+    if (!fullOutput.path)
+      saveFailed = true;
+    return fullOutput.path;
+  };
+  let text = redactDeep({
+    summary: normalizeSummary(options.summary, options.command, options.status, safeData),
+    findings: options.findings ?? [],
+    evidence_refs: options.evidenceRefs ?? [],
+    recommended_actions: options.recommendedActions ?? [],
+    next_commands: normalizeNextCommands(options.nextCommands ?? []),
+    warnings: options.warnings ?? inferWarnings(safeData)
+  });
+  let moved;
   const build = (bounded) => ({
     schema_version: AGENT_SCHEMA_VERSION,
     command: options.command,
     status: options.status,
     generated_at: new Date().toISOString(),
     ...options.profile ? { profile: options.profile } : {},
-    summary: normalizeSummary(options.summary, options.command, options.status, safeData),
-    findings: options.findings ?? [],
-    evidence_refs: options.evidenceRefs ?? [],
-    recommended_actions: options.recommendedActions ?? [],
-    next_commands: normalizeNextCommands(options.nextCommands ?? []),
-    artifacts: options.artifacts ?? [],
+    summary: text.summary,
+    findings: text.findings,
+    evidence_refs: text.evidence_refs,
+    recommended_actions: text.recommended_actions,
+    next_commands: text.next_commands,
+    artifacts: [
+      ...options.artifacts ?? [],
+      ...bounded.fullOutputPath ? [{ kind: "full_output", path: bounded.fullOutputPath, description: "Complete command output (the same JSON --json prints); data in this envelope was bounded." }] : [],
+      ...moved?.path ? [{ kind: "full_envelope_text", path: moved.path, description: "Whole envelope text (summary, findings, evidence_refs, actions, next_commands, warnings) before oversized fields were moved out of this envelope." }] : []
+    ],
     warnings: [
-      ...options.warnings ?? inferWarnings(safeData),
-      ...bounded.warning ? [bounded.warning] : []
+      ...text.warnings,
+      ...bounded.warning ? [bounded.warning] : [],
+      ...moved ? [movedTextWarning(moved)] : []
     ],
     errors: options.errors ?? [],
     data: bounded.data,
     ...options.meta ? { meta: options.meta } : {},
-    ...bounded.truncation ? { truncation: bounded.truncation } : {}
+    ...bounded.truncation || moved ? { truncation: {
+      ...bounded.truncation ?? {},
+      ...moved ? { envelope_text: {
+        reason: "agent_output_byte_limit",
+        moved_fields: moved.fields,
+        complete: false,
+        ...moved.whole ? { whole_text_moved: true } : {},
+        ...moved.path ? { full_envelope_path: moved.path } : {}
+      } } : {}
+    } } : {}
   });
-  let envelope = build(boundForAgent(safeData, maxBytes));
-  const envelopeBytes = Buffer.byteLength(JSON.stringify(envelope), "utf8");
-  if (envelopeBytes > maxBytes) {
-    const overhead = envelopeBytes - Buffer.byteLength(JSON.stringify(envelope.data) ?? "", "utf8");
-    envelope = build(boundForAgent(safeData, Math.max(1024, maxBytes - overhead - 1024)));
+  const sizeOf = (value) => Buffer.byteLength(JSON.stringify(value) ?? "", "utf8");
+  const rebound = (current) => {
+    const overhead = sizeOf(current) - sizeOf(current.data);
+    return build(boundForAgent(safeData, Math.max(1024, maxBytes - overhead - 1024), { writeFullOutput }));
+  };
+  let envelope = build(boundForAgent(safeData, maxBytes, { writeFullOutput }));
+  if (sizeOf(envelope) > maxBytes)
+    envelope = rebound(envelope);
+  if (sizeOf(envelope) > maxBytes && !saveFailed) {
+    const original = text;
+    const savedPath = options.persistFullOutput === false ? undefined : writeAgentFullOutput(`${options.command}-envelope`, original);
+    if (options.persistFullOutput !== false && !savedPath) {
+      saveFailed = true;
+      envelopeTextSaveFailed = true;
+    } else {
+      const slots = envelopeTextSlots(original).sort((left, right) => right.bytes - left.bytes);
+      text = structuredClone(original);
+      moved = { path: savedPath, fields: [] };
+      for (const slot of slots) {
+        if (sizeOf(envelope) <= maxBytes)
+          break;
+        const pointer = movedTextPointer(slot.field, slot.text, savedPath);
+        const added = Buffer.byteLength(JSON.stringify(pointer), "utf8") + 2 * movedFieldNameBytes(slot.field);
+        if (added >= slot.bytes)
+          continue;
+        slot.set(text, pointer);
+        moved.fields.push(slot.field);
+        envelope = rebound(envelope);
+      }
+      if (moved.fields.length === 0)
+        moved = undefined;
+      envelope = rebound(envelope);
+      if (sizeOf(envelope) > maxBytes) {
+        text = {
+          summary: { text: movedWholeTextPointer(savedPath), confidence: original.summary.confidence },
+          findings: [],
+          evidence_refs: [],
+          recommended_actions: [],
+          next_commands: [],
+          warnings: []
+        };
+        moved = { path: savedPath, fields: ["*"], whole: true };
+        envelope = rebound(envelope);
+      }
+    }
+  }
+  if (saveFailed) {
+    envelope = {
+      ...envelope,
+      status: "error",
+      errors: [...envelope.errors, saveFailedError(maxBytes, envelopeTextSaveFailed, fullOutput?.path)]
+    };
   }
   return redactDeep(envelope);
 }
+function saveFailedError(maxBytes, envelopeTextSaveFailed, dataPath) {
+  const where = "(MODA_AGENT_OUTPUT_DIR is unwritable or the disk is full)";
+  const remedy = "Point MODA_AGENT_OUTPUT_DIR at a writable directory, rerun with --json (no byte limit), or narrow the query.";
+  if (!envelopeTextSaveFailed) {
+    return {
+      code: "output_error",
+      cause: "full_output_save_failed",
+      message: `Output is over the ${maxBytes}-byte agent limit and the complete output could not be saved to a file ${where}, ` + `so nothing was moved out: this envelope holds the whole result, over the limit. ${remedy}`,
+      blocking: false
+    };
+  }
+  const dataState = dataPath ? `data is NOT the whole result: it was bounded to fit, and the complete data was saved to ${dataPath} ` + "(truncation.data.full_output_path); read it in line ranges or with jq. " : "data is the whole result. ";
+  return {
+    code: "output_error",
+    cause: "envelope_text_save_failed",
+    message: `Output is over the ${maxBytes}-byte agent limit and the oversized envelope text (summary, findings, evidence_refs, ` + `recommended_actions, next_commands, warnings) could not be saved to a file ${where}, so that text was kept whole ` + `in this envelope, over the limit. ${dataState}${remedy}`,
+    blocking: false
+  };
+}
+function envelopeTextSlots(text) {
+  const slots = [
+    { field: "summary.text", text: text.summary.text, set: (target, value) => {
+      target.summary.text = value;
+    } }
+  ];
+  text.findings.forEach((finding, index) => {
+    slots.push({ field: `findings[${index}].title`, text: finding.title, set: (target, value) => {
+      target.findings[index].title = value;
+    } });
+    if (finding.description) {
+      slots.push({ field: `findings[${index}].description`, text: finding.description, set: (target, value) => {
+        target.findings[index].description = value;
+      } });
+    }
+  });
+  text.evidence_refs.forEach((ref, index) => {
+    slots.push({ field: `evidence_refs[${index}].label`, text: ref.label, set: (target, value) => {
+      target.evidence_refs[index].label = value;
+    } });
+  });
+  text.recommended_actions.forEach((action, index) => {
+    slots.push({ field: `recommended_actions[${index}].title`, text: action.title, set: (target, value) => {
+      target.recommended_actions[index].title = value;
+    } });
+    if (action.rationale) {
+      slots.push({ field: `recommended_actions[${index}].rationale`, text: action.rationale, set: (target, value) => {
+        target.recommended_actions[index].rationale = value;
+      } });
+    }
+  });
+  text.next_commands.forEach((command, index) => {
+    slots.push({ field: `next_commands[${index}].purpose`, text: command.purpose, set: (target, value) => {
+      target.next_commands[index].purpose = value;
+    } });
+  });
+  text.warnings.forEach((warning, index) => {
+    slots.push({ field: `warnings[${index}]`, text: warning, set: (target, value) => {
+      target.warnings[index] = value;
+    } });
+  });
+  return slots.map((slot) => ({ ...slot, bytes: Buffer.byteLength(JSON.stringify(slot.text), "utf8") }));
+}
+function movedTextPointer(field, value, path) {
+  const chars = Array.from(value).length;
+  return path ? `[${chars} characters moved whole to ${path} at ${field}]` : `[${chars} characters over the agent byte limit; not saved. Rerun with --json or raise MODA_AGENT_MAX_OUTPUT_BYTES]`;
+}
+function movedFieldNameBytes(field) {
+  return Buffer.byteLength(JSON.stringify(field), "utf8") + 2;
+}
+function movedWholeTextPointer(path) {
+  return path ? `[Envelope text (summary, findings, evidence_refs, recommended_actions, next_commands, warnings) was over the agent byte limit and moved whole to ${path}]` : "[Envelope text was over the agent byte limit; not saved. Rerun with --json or raise MODA_AGENT_MAX_OUTPUT_BYTES]";
+}
+function movedTextWarning(moved) {
+  if (moved.whole) {
+    return "Envelope text outside data was over the agent byte limit even after moving its largest fields: all of it was moved whole " + (moved.path ? `to ${moved.path} (read it with jq)` : "(the file could not be saved; rerun with --json or raise MODA_AGENT_MAX_OUTPUT_BYTES)") + ".";
+  }
+  return `Envelope text outside data was over the agent byte limit: ${moved.fields.length} field(s) were moved whole ` + (moved.path ? `to ${moved.path} (same field paths; read it with jq)` : "(the file could not be saved; rerun with --json or raise MODA_AGENT_MAX_OUTPUT_BYTES)") + ` and replaced by pointers: ${moved.fields.join(", ")}.`;
+}
 var AGENT_ENVELOPE_RESERVE_BYTES = 2048;
 function agentEnvelopeFits(command, data, options = {}) {
   const maxBytes = agentMaxOutputBytes() - AGENT_ENVELOPE_RESERVE_BYTES;
   if (Buffer.byteLength(JSON.stringify(data) ?? "", "utf8") > maxBytes)
     return false;
-  const envelope = createAgentEnvelope({ command, status: "ok", data, ...options });
+  const envelope = createAgentEnvelope({ command, status: "ok", data, ...options, persistFullOutput: false });
   return !envelope.truncation && Buffer.byteLength(JSON.stringify(envelope), "utf8") <= maxBytes;
 }
 function errorWarnings(error) {
@@ -1559,41 +1728,61 @@ function inferWarnings(data) {
   }
   return [];
 }
-var AGENT_MAX_STRING_CHARS = 2000;
-var PROTECTED_STRING_KEY = /(cursor|token|_id$|^id$|url$|href$|^key$|hash$)/i;
 function agentMaxOutputBytes() {
   return Number(process.env.MODA_AGENT_MAX_OUTPUT_BYTES ?? 200000);
 }
-function boundForAgent(data, maxBytes = agentMaxOutputBytes()) {
+var AGENT_FULL_OUTPUT_FILE = /-\d{4}-\d{2}-\d{2}T\d{2}-\d{2}-\d{2}-\d{3}Z-[0-9a-f]{8}\.json$/;
+function agentOutputRetentionMs() {
+  const hours = Number(process.env.MODA_AGENT_OUTPUT_RETENTION_HOURS ?? 24);
+  return (Number.isFinite(hours) && hours > 0 ? hours : 24) * 3600000;
+}
+function pruneAgentFullOutputs(dir, keep, now = Date.now()) {
+  const cutoff = now - agentOutputRetentionMs();
+  let names;
+  try {
+    names = readdirSync(dir);
+  } catch {
+    return;
+  }
+  for (const name of names) {
+    if (!AGENT_FULL_OUTPUT_FILE.test(name))
+      continue;
+    const path = join2(dir, name);
+    if (path === keep)
+      continue;
+    try {
+      const stat = lstatSync(path);
+      if (stat.isFile() && stat.mtimeMs < cutoff)
+        unlinkSync(path);
+    } catch {}
+  }
+}
+function writeAgentFullOutput(command, data) {
+  try {
+    const dir = process.env.MODA_AGENT_OUTPUT_DIR || join2(tmpdir(), "moda-agent-output");
+    mkdirSync2(dir, { recursive: true, mode: 448 });
+    const slug = command.replace(/[^a-zA-Z0-9_-]+/g, "-").replace(/^-+|-+$/g, "") || "output";
+    const stamp = new Date().toISOString().replace(/[:.]/g, "-");
+    const path = join2(dir, `${slug}-${stamp}-${randomUUID().slice(0, 8)}.json`);
+    writeFileSync2(path, `${JSON.stringify(data, null, 2)}
+`, { encoding: "utf8", mode: 384 });
+    pruneAgentFullOutputs(dir, path);
+    return path;
+  } catch {
+    return;
+  }
+}
+function boundForAgent(data, maxBytes = agentMaxOutputBytes(), options = {}) {
   const sizeOf = (value) => Buffer.byteLength(JSON.stringify(value) ?? "", "utf8");
   const serialized = JSON.stringify(data) ?? "";
   const originalBytes = Buffer.byteLength(serialized, "utf8");
   if (originalBytes <= maxBytes)
     return { data };
-  let shortenedStrings = 0;
-  const shorten = (value, limit, key) => {
-    if (typeof value === "string") {
-      if (value.length <= limit || key !== undefined && PROTECTED_STRING_KEY.test(key))
-        return value;
-      shortenedStrings += 1;
-      return `${value.slice(0, limit)}… [truncated ${value.length - limit} chars]`;
-    }
-    if (Array.isArray(value))
-      return value.map((item) => shorten(item, limit));
-    if (value && typeof value === "object") {
-      return Object.fromEntries(Object.entries(value).map(([entryKey, item]) => [entryKey, shorten(item, limit, entryKey)]));
-    }
-    return value;
-  };
-  let bounded = data;
+  const fullOutputPath = options.writeFullOutput?.();
+  if (options.writeFullOutput && !fullOutputPath)
+    return { data, saveFailed: true };
+  const bounded = JSON.parse(serialized);
   let boundedBytes = originalBytes;
-  for (const limit of [AGENT_MAX_STRING_CHARS, 500, 200]) {
-    shortenedStrings = 0;
-    bounded = shorten(data, limit);
-    boundedBytes = sizeOf(bounded);
-    if (boundedBytes <= maxBytes)
-      break;
-  }
   const droppedItems = {};
   const collectArrays = (value, path, out) => {
     if (Array.isArray(value)) {
@@ -1630,39 +1819,35 @@ function boundForAgent(data, maxBytes = agentMaxOutputBytes()) {
     boundedBytes = sizeOf(bounded);
   }
   const dropped = Object.entries(droppedItems);
-  const parts = [
-    shortenedStrings > 0 ? `shortened ${shortenedStrings} long text field(s)` : "",
-    ...dropped.map(([path, count]) => `dropped the last ${count} item(s) of data.${path}`)
-  ].filter(Boolean);
-  const howToGetMore = "For complete results narrow the query (a smaller --limit, with --offset or --cursor paging where the command supports it), " + "rerun with --json (no byte limit), or raise MODA_AGENT_MAX_OUTPUT_BYTES.";
+  const whereIsTheRest = fullOutputPath ? `The complete output (every item, no text shortened) is in ${fullOutputPath}; read it in line ranges or query it with jq. ` : "The complete output could not be saved to a file. ";
+  const howToGetMore = whereIsTheRest + "Alternatively narrow the query (a smaller --limit, with --offset or --cursor paging where the command supports it), " + "rerun with --json (no byte limit), or raise MODA_AGENT_MAX_OUTPUT_BYTES.";
+  const pathField = fullOutputPath ? { full_output_path: fullOutputPath } : {};
   if (boundedBytes > maxBytes) {
-    const stub = { truncated: true, original_bytes: originalBytes, max_bytes: maxBytes, preview: serialized.slice(0, Math.max(0, maxBytes - 256)) };
-    for (let stubBytes = sizeOf(stub);stubBytes > maxBytes && stub.preview.length > 0; stubBytes = sizeOf(stub)) {
-      stub.preview = stub.preview.slice(0, Math.max(0, stub.preview.length - (stubBytes - maxBytes) - 16));
-    }
     return {
-      data: stub,
-      warning: `Output was ${originalBytes} bytes, over the ${maxBytes}-byte agent limit, and could not be reduced while keeping its structure; data is a string preview. ${howToGetMore}`,
+      data: { truncated: true, original_bytes: originalBytes, max_bytes: maxBytes, ...pathField },
+      warning: `Output was ${originalBytes} bytes, over the ${maxBytes}-byte agent limit, and could not be reduced while keeping its structure; data is a pointer stub. ${howToGetMore}`,
       truncation: {
-        data: { original_bytes: originalBytes, max_bytes: maxBytes, reason: "agent_output_byte_limit", structure_preserved: false, complete: false }
-      }
+        data: { original_bytes: originalBytes, max_bytes: maxBytes, reason: "agent_output_byte_limit", structure_preserved: false, complete: false, ...pathField }
+      },
+      fullOutputPath
     };
   }
   return {
     data: bounded,
-    warning: `Output was ${originalBytes} bytes, over the ${maxBytes}-byte agent limit: ${parts.join("; ")}. ${howToGetMore}`,
+    warning: `Output was ${originalBytes} bytes, over the ${maxBytes}-byte agent limit: ${dropped.map(([path, count]) => `dropped the last ${count} item(s) of data.${path}`).join("; ")}. ${howToGetMore}`,
     truncation: {
       data: {
         original_bytes: originalBytes,
         bounded_bytes: boundedBytes,
         max_bytes: maxBytes,
         reason: "agent_output_byte_limit",
-        shortened_strings: shortenedStrings,
         dropped_items: droppedItems,
         structure_preserved: true,
-        complete: false
+        complete: false,
+        ...pathField
       }
-    }
+    },
+    fullOutputPath
   };
 }
 function asRecord(value) {

package/dist/{cli-6xndg2h4.js → cli-ha40mgy1.js}

@@ -13,7 +13,7 @@ import {
   resolvePromptSource,
   safePromptEvidencePath,
   scanHarness
-} from "./cli-m3bg9yyh.js";
+} from "./cli-he2wb4hd.js";
 import {
   SKILL_SOURCE_HARNESS,
   SKILL_SOURCE_INTEGRATION_BUNDLED,
@@ -26,7 +26,7 @@ import {
 import {
   isAuthSessionValid,
   loadAuthSession
-} from "./cli-c64d2jrw.js";
+} from "./cli-kxwm7y62.js";
 import {
   CliInputError,
   EXIT_ERROR,
@@ -45,7 +45,7 @@ import {
   resolveTenantId,
   secretFilePathFromRef,
   validateConfig
-} from "./cli-bqhs6sk7.js";
+} from "./cli-ac3p2byq.js";
 import {
   __commonJS,
   __require,
@@ -6711,7 +6711,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const analyzedDefinitions = new Map;
   if (flags["no-analyze"] !== "true") {
     options.onProgress?.("Analyzing prompt sources before sync.");
-    const { analyzeHarnessPrompts } = await import("./harness-4ypeg9dh.js");
+    const { analyzeHarnessPrompts } = await import("./harness-s13wvdxt.js");
     const result = await analyzeHarnessPrompts({
       rootDir: process.cwd(),
       existing: established.flatMap((prompt) => prompt.sourceDefinition ? [prompt.sourceDefinition.source] : []),

package/dist/{cli-m3bg9yyh.js → cli-he2wb4hd.js}

@@ -25,7 +25,7 @@ import {
   resolveTenantId,
   shouldInventoryFile,
   stringOption
-} from "./cli-bqhs6sk7.js";
+} from "./cli-ac3p2byq.js";
 import {
   __commonJS,
   __require,
@@ -180210,7 +180210,7 @@ function citationExcerpt(rootDir, path, line) {
     const selected = line ? lines[line - 1] : lines.find((candidate) => candidate.trim().length > 0);
     if (!selected)
       return {};
-    return { excerpt: selected.trim().slice(0, 240) };
+    return { excerpt: selected.trim() };
   } catch {
     return {};
   }
@@ -181065,7 +181065,6 @@ function enrichScanCaptureMetadata(graph) {
 // src/harness-candidates.ts
 import { mkdirSync as mkdirSync3, writeFileSync as writeFileSync3 } from "node:fs";
 import { basename as basename3, dirname as dirname3, extname, resolve as resolve4 } from "node:path";
-var EXCERPT_MAX_CHARS = 240;
 var MAX_CANDIDATES_PER_FILE_PER_SIGNAL = 20;
 var MIN_PROMPT_LITERAL_CHARS = 160;
 var CONFIDENCE_WEIGHT = {
@@ -181311,8 +181310,7 @@ function instructionScore(text) {
   return score;
 }
 function normalizeExcerpt(text) {
-  const collapsed = text.replace(/\s+/g, " ").trim();
-  return collapsed.length > EXCERPT_MAX_CHARS ? `${collapsed.slice(0, EXCERPT_MAX_CHARS - 1)}…` : collapsed;
+  return text.replace(/\s+/g, " ").trim();
 }
 function buildLineIndex(text) {
   const offsets = [0];
@@ -181423,7 +181421,7 @@ function detectPromptModule(file, out) {
 `).length),
     confidence: "medium",
     signal: "prompt_module.name_hint",
-    excerpt: normalizeExcerpt(file.text.slice(0, EXCERPT_MAX_CHARS * 2))
+    excerpt: normalizeExcerpt(file.text)
   });
 }
 function detectPromptLiterals(file, out) {
@@ -181506,7 +181504,7 @@ function detectPromptFile(file, out) {
 `).length),
     confidence,
     signal,
-    excerpt: normalizeExcerpt(file.text.slice(0, EXCERPT_MAX_CHARS * 2))
+    excerpt: normalizeExcerpt(file.text)
   });
 }
 function detectPromptLoaderReferences(file, filesByPath, out) {
@@ -184859,7 +184857,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-dvq7spqh.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-gbty3k66.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);
@@ -186605,6 +186603,7 @@ var CONCERN_CANDIDATE_KINDS = {
   evals: ["model_config"]
 };
 var MAX_SEED_CANDIDATES_PER_KIND = 40;
+var MAX_INLINE_CANDIDATE_EXCERPT_CHARS = 500;
 var MAX_SEED_READ_PLAN_FILES = 25;
 var SEED_CANDIDATE_KIND_LABELS = {
   llm_call_site: "LLM call sites",
@@ -186644,7 +186643,7 @@ function renderAnalystCandidateLines(report, concern) {
     const shown = bucket.slice(0, MAX_SEED_CANDIDATES_PER_KIND);
     lines.push(`${label} (${bucket.length}${bucket.length > shown.length ? `, showing ${shown.length}` : ""}):`);
     for (const candidate of shown) {
-      lines.push(`- ${candidate.path}:${candidate.startLine} [${candidate.signal}] ${candidate.excerpt}`);
+      lines.push(candidate.endLine > candidate.startLine ? `- ${candidate.path}:${candidate.startLine}-${candidate.endLine} [${candidate.signal}] (multi-line span; read lines ${candidate.startLine}-${candidate.endLine} of the file)` : candidate.excerpt.length > MAX_INLINE_CANDIDATE_EXCERPT_CHARS ? `- ${candidate.path}:${candidate.startLine} [${candidate.signal}] (${candidate.excerpt.length}-character match; read line ${candidate.startLine} of the file)` : `- ${candidate.path}:${candidate.startLine} [${candidate.signal}] ${candidate.excerpt}`);
     }
   }
   const readPlan = report.files.slice(0, MAX_SEED_READ_PLAN_FILES);

package/dist/{cli-c64d2jrw.js → cli-kxwm7y62.js}

@@ -7,7 +7,7 @@ import {
   saveProfileConfig,
   secretFilePathFromRef,
   writeSecretJsonFile
-} from "./cli-bqhs6sk7.js";
+} from "./cli-ac3p2byq.js";
 import {
   __require
 } from "./cli-0v6na3yp.js";

package/dist/{cli-taf854xx.js → cli-sq6g0tk5.js}

@@ -1,7 +1,7 @@
 import {
   authFetch,
   getCachedLoginContext
-} from "./cli-c64d2jrw.js";
+} from "./cli-kxwm7y62.js";
 import {
   CliAccessError,
   CliInputError,
@@ -15,7 +15,7 @@ import {
   resolveTenantIdFromActiveProfile,
   saveCliConfig,
   writeSecretJsonFile
-} from "./cli-bqhs6sk7.js";
+} from "./cli-ac3p2byq.js";
 
 // src/init/tenant.ts
 import { randomUUID } from "node:crypto";