@moda-ai/cli 1.55.10 → 1.55.11

package/dist/{cli-v27q5dvh.js → cli-m857n028.js}

@@ -1,5 +1,20 @@
 import {
-  CliAccessError,
+  stripAnsi
+} from "./cli-97fnztpy.js";
+import {
+  createCommandContext,
+  stringOption
+} from "./cli-k5qqj2bp.js";
+import {
+  assertFlags,
+  assertPositionals,
+  requireTenant
+} from "./cli-g7ferymy.js";
+import {
+  ApiError,
+  callControlAPI
+} from "./cli-tmqd1f0m.js";
+import {
   CliInputError,
   CliInputRequiredError,
   DEFAULT_MAX_INVENTORY_FILES,
@@ -8,7 +23,6 @@ import {
   MAX_SCANNED_FILE_BYTES,
   SECRET_KEYS,
   SKIPPED_DIRS,
-  createCommandContext,
   embeddedTenantIdFromApiKey,
   getActiveProfile,
   isEvalLikePath,
@@ -21,13 +35,11 @@ import {
   redactDeep,
   redactString,
   resolveApiKey,
-  resolveApiTenantId,
   resolveIngestUrl,
   resolveModaBaseUrl,
   resolveTenantId,
-  shouldInventoryFile,
-  stringOption
-} from "./cli-0qnghzg4.js";
+  shouldInventoryFile
+} from "./cli-429zt7g4.js";
 import {
   __commonJS,
   __require,
@@ -9456,7 +9468,7 @@ var require_typescript = __commonJS((exports, module) => {
       commandLineOptionOfCustomType: () => commandLineOptionOfCustomType,
       commentPragmas: () => commentPragmas,
       commonOptionsWithBuild: () => commonOptionsWithBuild,
-      compact: () => compact2,
+      compact: () => compact,
       compareBooleans: () => compareBooleans,
       compareDataObjects: () => compareDataObjects,
       compareDiagnostics: () => compareDiagnostics,
@@ -11976,7 +11988,7 @@ var require_typescript = __commonJS((exports, module) => {
       }
       return true;
     }
-    function compact2(array) {
+    function compact(array) {
       let result;
       if (array !== undefined) {
         for (let i = 0;i < array.length; i++) {
@@ -97633,7 +97645,7 @@ ${lanes.join(`
           const savedPendingExpressions = pendingExpressions;
           pendingExpressions = undefined;
           node = factory2.updateBinaryExpression(node, visitNode(node.left, assignmentTargetVisitor, isExpression), node.operatorToken, visitNode(node.right, visitor, isExpression));
-          const expr = some(pendingExpressions) ? factory2.inlineExpressions(compact2([...pendingExpressions, node])) : node;
+          const expr = some(pendingExpressions) ? factory2.inlineExpressions(compact([...pendingExpressions, node])) : node;
           pendingExpressions = savedPendingExpressions;
           return expr;
         }
@@ -107437,14 +107449,14 @@ ${lanes.join(`
         }
       }
       function createImportCallExpressionAMD(arg, containsLexicalThis) {
-        const resolve8 = factory2.createUniqueName("resolve");
+        const resolve7 = factory2.createUniqueName("resolve");
         const reject = factory2.createUniqueName("reject");
         const parameters = [
-          factory2.createParameterDeclaration(undefined, undefined, resolve8),
+          factory2.createParameterDeclaration(undefined, undefined, resolve7),
           factory2.createParameterDeclaration(undefined, undefined, reject)
         ];
         const body = factory2.createBlock([
-          factory2.createExpressionStatement(factory2.createCallExpression(factory2.createIdentifier("require"), undefined, [factory2.createArrayLiteralExpression([arg || factory2.createOmittedExpression()]), resolve8, reject]))
+          factory2.createExpressionStatement(factory2.createCallExpression(factory2.createIdentifier("require"), undefined, [factory2.createArrayLiteralExpression([arg || factory2.createOmittedExpression()]), resolve7, reject]))
         ]);
         let func;
         if (languageVersion >= 2) {
@@ -110425,7 +110437,7 @@ ${lanes.join(`
             let parameterProperties;
             if (ctor) {
               const oldDiag2 = getSymbolAccessibilityDiagnostic;
-              parameterProperties = compact2(flatMap(ctor.parameters, (param) => {
+              parameterProperties = compact(flatMap(ctor.parameters, (param) => {
                 if (!hasSyntacticModifier(param, 31) || shouldStripInternal(param))
                   return;
                 getSymbolAccessibilityDiagnostic = createGetSymbolAccessibilityDiagnosticForNode(param);
@@ -141758,7 +141770,7 @@ ${newComment.split(`
         }
         const checker = context.program.getTypeChecker();
         const trackChanges = (cb) => ts_textChanges_exports.ChangeTracker.with(context, cb);
-        return compact2([
+        return compact([
           getDeclarationSiteFix(context, expression, errorCode, checker, trackChanges),
           getUseSiteFix(context, expression, errorCode, checker, trackChanges)
         ]);
@@ -160752,7 +160764,7 @@ ${content}
       const lastToken = last(children);
       const separateLastToken = separateTrailingSemicolon && lastToken.kind === 27;
       const rightChildren = children.slice(splitTokenIndex + 1, separateLastToken ? children.length - 1 : undefined);
-      const result = compact2([
+      const result = compact([
         leftChildren.length ? createSyntaxList2(leftChildren) : undefined,
         splitToken,
         rightChildren.length ? createSyntaxList2(rightChildren) : undefined
@@ -165456,7 +165468,7 @@ ${options.prefix}` : `
       commandLineOptionOfCustomType: () => commandLineOptionOfCustomType,
       commentPragmas: () => commentPragmas,
       commonOptionsWithBuild: () => commonOptionsWithBuild,
-      compact: () => compact2,
+      compact: () => compact,
       compareBooleans: () => compareBooleans,
       compareDataObjects: () => compareDataObjects,
       compareDiagnostics: () => compareDiagnostics,
@@ -177619,8 +177631,8 @@ Additional information: BADCLIENT: Bad error code, ${badCode} not found in range
       installPackage(options) {
         this.packageInstallId++;
         const request = { kind: "installPackage", ...options, id: this.packageInstallId };
-        const promise = new Promise((resolve8, reject) => {
-          (this.packageInstalledPromise ?? (this.packageInstalledPromise = /* @__PURE__ */ new Map)).set(this.packageInstallId, { resolve: resolve8, reject });
+        const promise = new Promise((resolve7, reject) => {
+          (this.packageInstalledPromise ?? (this.packageInstalledPromise = /* @__PURE__ */ new Map)).set(this.packageInstallId, { resolve: resolve7, reject });
         });
         this.installer.send(request);
         return promise;
@@ -177889,668 +177901,14 @@ import {
   lstatSync as lstatSync10,
   mkdtempSync as mkdtempSync2,
   mkdirSync as mkdirSync6,
-  readFileSync as readFileSync18,
+  readFileSync as readFileSync17,
   readdirSync as readdirSync4,
   writeFileSync as writeFileSync6,
   rmSync as rmSync4
 } from "node:fs";
-import { basename as basename7, delimiter, dirname as dirname9, join as join10, relative as relative8, resolve as resolve14, sep as sep5 } from "node:path";
+import { basename as basename7, delimiter, dirname as dirname9, join as join10, relative as relative8, resolve as resolve13, sep as sep5 } from "node:path";
 import { confirm as confirm2, select } from "@inquirer/prompts";
 
-// src/parity-commands.ts
-import { readFileSync } from "node:fs";
-import { resolve } from "node:path";
-
-// src/api-key-headers.ts
-var PLATFORM_API_KEY_PREFIX = "moda_pk_";
-var TENANT_HEADER = "x-moda-tenant-id";
-function isPlatformApiKey(key) {
-  return Boolean(key?.startsWith(PLATFORM_API_KEY_PREFIX));
-}
-var platformTenantOverride;
-function setPlatformTenantOverride(tenantId) {
-  platformTenantOverride = tenantId;
-}
-var TENANT_PATH = /\/tenants\/([^/?#]+)/;
-function tenantFromUrl(url) {
-  const match = url ? TENANT_PATH.exec(url) : null;
-  return match ? decodeURIComponent(match[1]) : undefined;
-}
-function apiKeyHeaders(key, options = {}, url) {
-  const headers = { "x-api-key": key };
-  if (isPlatformApiKey(key)) {
-    const tenantId = tenantFromUrl(url) || platformTenantOverride || resolveTenantId(options);
-    if (tenantId)
-      headers[TENANT_HEADER] = tenantId;
-  }
-  return headers;
-}
-
-// src/api-client.ts
-var REQUEST_TIMEOUT_MS = 30000;
-var MAX_RETRIES = 3;
-var INITIAL_BACKOFF_MS = 500;
-var NETWORK_RETRY_DELAY_MS = 1000;
-
-class ApiError extends Error {
-  statusCode;
-  responseBody;
-  code;
-  suggestions;
-  readable;
-  constructor(message, statusCode, responseBody) {
-    const typed = parseTypedErrorBody(responseBody);
-    const platform = platformFailure(responseBody);
-    const readable = typed?.code === "audit_too_large" || platform !== null;
-    super(readable ? `API error (${statusCode}): ${typed?.message ?? platform?.message}` : message);
-    this.statusCode = statusCode;
-    this.responseBody = responseBody;
-    this.name = "ApiError";
-    this.code = typed?.code ?? platform?.code;
-    this.suggestions = typed?.suggestions;
-    this.readable = readable;
-  }
-}
-function parseTypedErrorBody(body) {
-  if (!body.trimStart().startsWith("{"))
-    return null;
-  try {
-    const parsed = JSON.parse(body);
-    if (typeof parsed.code !== "string")
-      return null;
-    const suggestions = Array.isArray(parsed.suggestions) ? parsed.suggestions.filter((s) => typeof s === "string") : undefined;
-    return {
-      code: parsed.code,
-      message: typeof parsed.message === "string" ? parsed.message : undefined,
-      suggestions
-    };
-  } catch {
-    return null;
-  }
-}
-var DETERMINISTIC_PLATFORM_FAILURES = [
-  "FUNCTION_INVOCATION_FAILED",
-  "FUNCTION_RESPONSE_PAYLOAD_TOO_LARGE"
-];
-function platformFailure(body) {
-  const code = DETERMINISTIC_PLATFORM_FAILURES.find((c) => body.includes(c));
-  if (!code)
-    return null;
-  const requestId = /\b([a-z]{3}\d::[A-Za-z0-9:-]+)/.exec(body)?.[1];
-  const cause = code === "FUNCTION_RESPONSE_PAYLOAD_TOO_LARGE" ? "the response was larger than the hosting platform allows" : "the server function crashed (typically out of memory or an oversized response)";
-  return {
-    code,
-    message: `The Moda API could not complete this request: ${cause} [${code}` + `${requestId ? `, request ${requestId}` : ""}]. Retrying the same request will fail the same way; ` + "narrow it (a smaller --limit, a single trace, or fewer results) and report it with `moda feedback` if it persists."
-  };
-}
-function isRetryableResponse(status, body) {
-  if (!isRetryable(status))
-    return false;
-  return platformFailure(body) === null;
-}
-
-class NetworkError extends Error {
-  constructor(message) {
-    super(message);
-    this.name = "NetworkError";
-  }
-}
-function networkErrorMessage(error, url) {
-  const message = error instanceof Error ? error.message : String(error);
-  const cause = error instanceof Error ? error.cause : undefined;
-  const code = typeof cause?.code === "string" ? `: ${cause.code}` : "";
-  return `Network error: ${message} (could not reach ${url.split("?")[0]}${code})`;
-}
-function isRetryable(status) {
-  return status === 429 || status >= 500;
-}
-async function callDataAPI(endpoint, init = { method: "GET" }, requestOptions = {}) {
-  const url = `${resolveModaBaseUrl()}/api/v1/data${endpoint}`;
-  return callModaAPI(url, init, {}, requestOptions);
-}
-async function callControlAPI(endpoint, options = {}, profileOptions = {}, requestOptions = {}) {
-  const url = `${resolveModaBaseUrl(profileOptions)}/api${endpoint}`;
-  return callModaAPI(url, options, profileOptions, requestOptions);
-}
-async function callModaAPI(url, options, profileOptions = {}, requestOptions = {}) {
-  const timeoutMs = requestOptions.timeoutMs ?? REQUEST_TIMEOUT_MS;
-  const method = (options.method ?? "GET").toUpperCase();
-  const maxRetries = requestOptions.retries ?? (method === "GET" || method === "HEAD" ? MAX_RETRIES : 0);
-  const initialNetworkRetryBudget = requestOptions.retryOnceOnNetworkError ? 1 : 0;
-  let networkRetryBudget = initialNetworkRetryBudget;
-  let connectionClose = false;
-  const maxAttempts = maxRetries + initialNetworkRetryBudget + 1;
-  for (let attempt = 0;attempt < maxAttempts; attempt++) {
-    if (attempt > 0) {
-      const backoff = connectionClose ? requestOptions.networkRetryDelayMs ?? NETWORK_RETRY_DELAY_MS : INITIAL_BACKOFF_MS * Math.pow(2, attempt - 1);
-      await new Promise((resolve) => setTimeout(resolve, backoff));
-    }
-    const controller = new AbortController;
-    const timeout = setTimeout(() => controller.abort(), timeoutMs);
-    try {
-      recordApiRequest();
-      const response = await fetch(url, {
-        ...options,
-        headers: {
-          ...apiKeyHeaders(resolveApiKey(profileOptions) ?? "", profileOptions, url),
-          "Content-Type": "application/json",
-          ...options.headers ?? {},
-          ...connectionClose ? { Connection: "close" } : {}
-        },
-        signal: controller.signal
-      });
-      if (!response.ok) {
-        const errorText = await response.text();
-        const error = new ApiError(`API error (${response.status}): ${errorText}`, response.status, errorText);
-        if (isRetryableResponse(response.status, errorText) && attempt < maxRetries) {
-          continue;
-        }
-        throw error;
-      }
-      if (response.status === 204)
-        return null;
-      if (typeof response.text !== "function")
-        return response.json();
-      const text = await response.text();
-      return text.trim() === "" ? null : JSON.parse(text);
-    } catch (error) {
-      if (error instanceof ApiError)
-        throw error;
-      const isAbort = error instanceof DOMException && error.name === "AbortError";
-      const wrapped = isAbort ? new Error(`Request timed out after ${timeoutMs}ms: ${url}`) : new NetworkError(networkErrorMessage(error, url));
-      if (attempt < maxRetries) {
-        continue;
-      }
-      if (!isAbort && networkRetryBudget > 0) {
-        networkRetryBudget -= 1;
-        connectionClose = true;
-        requestOptions.onNetworkRetry?.();
-        continue;
-      }
-      throw wrapped;
-    } finally {
-      clearTimeout(timeout);
-    }
-  }
-  throw new NetworkError(`Request retries exhausted: ${url}`);
-}
-
-// src/parity-commands.ts
-var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
-var WINDOWS = ["24h", "7d", "30d", "90d"];
-function profileOptions(context) {
-  return { profile: context.profile, env: context.env };
-}
-function requireKey(context) {
-  if (!resolveApiKey(profileOptions(context))) {
-    throw new CliInputError(`No Moda API key found for moda ${context.command}.`, "Set MODA_API_KEY, run `moda auth login --api-key`, or select a profile with an API key.");
-  }
-}
-function requireTenant(context) {
-  const key = resolveApiKey(profileOptions(context));
-  const keyTenant = key ? embeddedTenantIdFromApiKey(key) : undefined;
-  const flagTenant = context.flags["tenant-id"];
-  if (flagTenant && keyTenant && flagTenant !== keyTenant) {
-    throw new CliInputError(`--tenant-id=${flagTenant} does not match this API key's tenant (${keyTenant}), so nothing was sent.`, "Drop --tenant-id (the key names its tenant) or use a key for that tenant.");
-  }
-  const tenantId = flagTenant || resolveApiTenantId(profileOptions(context));
-  if (!tenantId) {
-    throw new CliInputError("Could not determine the tenant.", "Use a signed API key (it names its tenant), set MODA_TENANT_ID, or pass --tenant-id=<id>.");
-  }
-  if (isPlatformApiKey(key))
-    setPlatformTenantOverride(tenantId);
-  return tenantId;
-}
-function assertFlags(command, flags, allowed) {
-  if (command.startsWith("signals "))
-    allowed = [...allowed, "tenant-id"];
-  const globals = [
-    "agent",
-    "json",
-    "human",
-    "prose",
-    "quiet",
-    "verbose",
-    "yes",
-    "profile",
-    "progress",
-    "format",
-    "no-telemetry",
-    "no-update-check",
-    "help",
-    "version",
-    "json-schemas",
-    "stream",
-    "no-stream",
-    "tui",
-    "no-tui"
-  ];
-  const known = new Set([...allowed, ...globals]);
-  const unknown = Object.keys(flags).filter((flag) => !known.has(flag));
-  if (unknown.includes("dry-run")) {
-    throw new CliInputError(`'moda ${command}' has no dry-run mode, so nothing was sent.`, "Remove --dry-run to run it for real.");
-  }
-  if (unknown.length > 0) {
-    throw new CliInputError(`Unknown flag${unknown.length > 1 ? "s" : ""} ${unknown.map((flag) => `--${flag}`).join(", ")} for 'moda ${command}'.`, `Valid flags: ${allowed.map((flag) => `--${flag}`).join(", ") || "(none)"}.`);
-  }
-}
-function assertPositionals(command, positionals, max, usage) {
-  if (positionals.length > max) {
-    throw new CliInputError(`Unexpected argument${positionals.length - max > 1 ? "s" : ""} '${positionals.slice(max).join(" ")}' for 'moda ${command}', so nothing was sent.`, `Usage: ${usage}`);
-  }
-}
-function oneOf(name, value, allowed) {
-  if (value === undefined)
-    return;
-  if (!allowed.includes(value)) {
-    throw new CliInputError(`--${name} must be one of ${allowed.join(", ")} (got '${value}').`);
-  }
-  return value;
-}
-function csv(value) {
-  if (value === undefined)
-    return;
-  const items = value.split(",").map((item) => item.trim()).filter(Boolean);
-  return items.length > 0 ? items : undefined;
-}
-function readBodyFile(flags, cwd) {
-  if (!flags.file)
-    return {};
-  if (flags.file === "true")
-    throw new CliInputError("Missing path for --file.");
-  let parsed;
-  try {
-    parsed = JSON.parse(readFileSync(resolve(cwd, flags.file), "utf8"));
-  } catch (error) {
-    throw new CliInputError(`Could not read --file ${flags.file}: ${error instanceof Error ? error.message : String(error)}`);
-  }
-  if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-    throw new CliInputError("--file must contain a JSON object (the request body).");
-  }
-  return parsed;
-}
-function compact(value) {
-  return Object.fromEntries(Object.entries(value).filter(([, item]) => item !== undefined));
-}
-var LLM_WRITE_TIMEOUT_MS = 180000;
-async function send(context, plane, method, endpoint, body, options = {}) {
-  const init = { method, ...body !== undefined ? { body: JSON.stringify(body) } : {} };
-  if (method !== "GET" && context.dryRun) {
-    context.output.writeData({
-      dryRun: true,
-      planned: { method, endpoint: plane === "data" ? `/api/v1/data${endpoint}` : `/api${endpoint}`, ...body !== undefined ? { body } : {} }
-    }, { summary: { text: `Dry run: would ${method} ${endpoint}. Nothing was sent.`, confidence: "high" } });
-    return;
-  }
-  const requestOptions = method === "GET" ? {} : { retries: 0, ...options.slow ? { timeoutMs: LLM_WRITE_TIMEOUT_MS } : {} };
-  const data = plane === "data" ? await callDataAPI(endpoint, init, requestOptions) : await callControlAPI(endpoint, init, profileOptions(context), requestOptions);
-  context.output.writeData(data ?? { ok: true });
-}
-var USER_COHORTS = ["all", "power_users", "heavy_tool_users", "frustrated", "at_risk", "new_this_week", "silent_sufferers"];
-var USER_SORTS = ["last_seen", "health_score", "conversation_count", "frustration_max"];
-var HEALTH = ["healthy", "at_risk", "frustrated"];
-async function runUsersCommand(context) {
-  const flags = context.flags;
-  assertFlags("users", flags, [
-    "window",
-    "page",
-    "page-size",
-    "limit",
-    "search",
-    "cohort",
-    "sort",
-    "order",
-    "health-status",
-    "min-health",
-    "max-health",
-    "min-conversations",
-    "min-tool-failures",
-    "tenant-id"
-  ]);
-  if (context.positionals.length > 0) {
-    throw new CliInputError(`'moda users' takes no arguments. For one user use 'moda user <user_id>'.`);
-  }
-  if (flags.limit !== undefined && flags["page-size"] !== undefined && flags.limit !== flags["page-size"]) {
-    throw new CliInputError(`Got --limit=${flags.limit} and --page-size=${flags["page-size"]}; they are the same flag for 'moda users', so nothing was sent.`, "Pass only one of --limit / --page-size.", "flag_conflict");
-  }
-  requireKey(context);
-  const tenantId = requireTenant(context);
-  const query = new URLSearchParams(compact({
-    window: oneOf("window", flags.window, WINDOWS),
-    page: flags.page,
-    pageSize: flags["page-size"] ?? flags.limit,
-    search: flags.search,
-    cohort: oneOf("cohort", flags.cohort, USER_COHORTS),
-    sortBy: oneOf("sort", flags.sort, USER_SORTS),
-    sortOrder: oneOf("order", flags.order, ["asc", "desc"]),
-    healthStatus: csv(flags["health-status"])?.map((value) => oneOf("health-status", value, HEALTH)).join(","),
-    minHealthScore: flags["min-health"],
-    maxHealthScore: flags["max-health"],
-    minConversations: flags["min-conversations"],
-    minToolFailures: flags["min-tool-failures"]
-  }));
-  const suffix = query.toString() ? `?${query.toString()}` : "";
-  await send(context, "control", "GET", `/tenants/${encodeURIComponent(tenantId)}/users${suffix}`);
-  return { exitCode: 0 };
-}
-async function runUserCommand(context) {
-  const flags = context.flags;
-  assertFlags("user", flags, ["window", "activity-cursor", "tenant-id"]);
-  assertPositionals("user", context.positionals, 1, "moda user <user_id> [--window=24h|7d|30d|90d]");
-  const userId = context.positionals[0];
-  if (!userId)
-    throw new CliInputError("<user_id> is required.", "Usage: moda user <user_id> [--window=24h|7d|30d|90d]");
-  requireKey(context);
-  const tenantId = requireTenant(context);
-  const query = new URLSearchParams(compact({
-    window: oneOf("window", flags.window, WINDOWS),
-    activityCursor: flags["activity-cursor"]
-  }));
-  const suffix = query.toString() ? `?${query.toString()}` : "";
-  await send(context, "control", "GET", `/tenants/${encodeURIComponent(tenantId)}/users/${encodeURIComponent(userId)}${suffix}`);
-  return { exitCode: 0 };
-}
-async function runProblemReopenCommand(context) {
-  assertFlags("problem-reopen", context.flags, ["reason", "dry-run"]);
-  assertPositionals("problem-reopen", context.positionals, 1, "moda problem-reopen <problem_id> [--reason=TEXT]");
-  const problemId = context.positionals[0];
-  const usage = "Usage: moda problem-reopen <problem_id> [--reason=TEXT]";
-  if (!problemId || !UUID_RE.test(problemId))
-    throw new CliInputError("<problem_id> (UUID) is required.", usage);
-  const reason = context.flags.reason;
-  if (reason !== undefined && reason.length > 500)
-    throw new CliInputError("--reason must be 500 characters or fewer.");
-  requireKey(context);
-  await send(context, "data", "POST", `/problems/${problemId}/reopen`, compact({ reason }));
-  return { exitCode: 0 };
-}
-var SIGNAL_FIELD_FLAGS = [
-  "name",
-  "description",
-  "pass-criteria",
-  "fail-criteria",
-  "polarity",
-  "locus",
-  "tool-names",
-  "keyword-hints",
-  "use-case-id",
-  "message-types",
-  "note",
-  "file"
-];
-function signalBody(flags, cwd) {
-  const fromFile = readBodyFile(flags, cwd);
-  const scope = compact({
-    toolNames: csv(flags["tool-names"]),
-    keywordHints: csv(flags["keyword-hints"]),
-    useCaseId: flags["use-case-id"],
-    messageTypes: csv(flags["message-types"])
-  });
-  return {
-    ...fromFile,
-    ...compact({
-      name: flags.name,
-      description: flags.description,
-      passCriteria: flags["pass-criteria"],
-      failCriteria: flags["fail-criteria"],
-      polarity: oneOf("polarity", flags.polarity, ["violation", "expectation"]),
-      locus: oneOf("locus", flags.locus, ["agent", "tool_output", "user_input"]),
-      note: flags.note
-    }),
-    ...Object.keys(scope).length > 0 ? { scope: { ...fromFile.scope ?? {}, ...scope } } : {}
-  };
-}
-var SIGNAL_USAGE = [
-  "moda signals                                   list custom signals",
-  'moda signals draft --note="…"                  AI-draft criteria from a description',
-  "moda signals create --name --description --pass-criteria --fail-criteria [--polarity --locus --tool-names=a,b] [--file=body.json]",
-  "moda signals update <id> [same flags]           edit a signal",
-  "moda signals activate|pause|delete <id>          (delete: drafts only; archive is dashboard-only)",
-  "moda signals examples <id> add|update|remove --conversation-id=ID [--label=fits|does_not_fit --note --msg-index]",
-  'moda signals refine <id> --request="…"          propose a criteria edit',
-  "moda signals revise <id> --conversation-ids=a,b re-derive criteria from labelled traces",
-  "moda signals proposals <id> | accept <id> <proposal_id> | reject <id> <proposal_id>",
-  "moda signals search <id> [--mode=wizard|full] | search-status <id> <search_id> | search-stop <id> <search_id>",
-  "moda signals preview --file=detector.json [--conversation-ids=a,b --max-examples=N]",
-  "All write subcommands accept --dry-run (prints the request, sends nothing)."
-].join(`
-  `);
-async function runSignalsManagementCommand(sub, context) {
-  const flags = context.flags;
-  const args = context.positionals.slice(1);
-  const arity = {
-    draft: 0,
-    create: 0,
-    preview: 0,
-    update: 1,
-    activate: 1,
-    pause: 1,
-    delete: 1,
-    examples: 2,
-    refine: 1,
-    revise: 1,
-    proposals: 1,
-    accept: 2,
-    reject: 2,
-    search: 1,
-    "search-status": 2,
-    "search-stop": 2
-  };
-  if (sub in arity)
-    assertPositionals(`signals ${sub}`, args, arity[sub], SIGNAL_USAGE.split(`
-`)[0]);
-  const base = () => `/tenants/${encodeURIComponent(requireTenant(context))}/custom-signals`;
-  const id = (index = 0, what = "a signal id") => {
-    const value = args[index];
-    if (!value)
-      throw new CliInputError(`moda signals ${sub} needs ${what}.`, `Usage:
-  ${SIGNAL_USAGE}`);
-    return encodeURIComponent(value);
-  };
-  const start = () => requireKey(context);
-  switch (sub) {
-    case "draft": {
-      assertFlags("signals draft", flags, ["note", "file", "dry-run"]);
-      const body = { ...readBodyFile(flags, context.cwd), ...compact({ note: flags.note }) };
-      if (!body.note)
-        throw new CliInputError("--note is required (describe what the signal should catch).");
-      start();
-      await send(context, "control", "POST", `${base()}/draft`, body, { slow: true });
-      return { exitCode: 0 };
-    }
-    case "create": {
-      assertFlags("signals create", flags, [...SIGNAL_FIELD_FLAGS, "dry-run"]);
-      const body = signalBody(flags, context.cwd);
-      const missing = ["name", "description", "passCriteria", "failCriteria"].filter((field) => !body[field]);
-      if (missing.length > 0) {
-        throw new CliInputError(`Missing ${missing.join(", ")} for signals create.`, 'Pass --name --description --pass-criteria --fail-criteria, or a --file with those fields. Tip: `moda signals draft --note="…"` drafts them.');
-      }
-      start();
-      await send(context, "control", "POST", base(), body);
-      return { exitCode: 0 };
-    }
-    case "update": {
-      assertFlags("signals update", flags, [...SIGNAL_FIELD_FLAGS, "dry-run"]);
-      const signalId = id();
-      const body = signalBody(flags, context.cwd);
-      if (Object.keys(body).length === 0)
-        throw new CliInputError("Nothing to update: pass at least one field flag or --file.");
-      start();
-      await send(context, "control", "PATCH", `${base()}/${signalId}`, body);
-      return { exitCode: 0 };
-    }
-    case "activate":
-    case "pause": {
-      assertFlags(`signals ${sub}`, flags, ["dry-run"]);
-      const signalId = id();
-      start();
-      await send(context, "control", "POST", `${base()}/${signalId}/${sub}`);
-      return { exitCode: 0 };
-    }
-    case "delete": {
-      assertFlags("signals delete", flags, ["dry-run"]);
-      const signalId = id();
-      start();
-      await send(context, "control", "DELETE", `${base()}/${signalId}`);
-      return { exitCode: 0 };
-    }
-    case "examples": {
-      const signalId = id();
-      const action = args[1];
-      const conversationId = flags["conversation-id"];
-      if (!action || !["add", "update", "remove"].includes(action)) {
-        throw new CliInputError("Usage: moda signals examples <id> add|update|remove --conversation-id=ID …");
-      }
-      if (!conversationId)
-        throw new CliInputError("--conversation-id is required.");
-      if (action === "add") {
-        assertFlags("signals examples add", flags, ["conversation-id", "label", "note", "msg-index", "msg-dedup-token", "criteria", "verdict", "dry-run"]);
-        const label = oneOf("label", flags.label, ["fits", "does_not_fit"]);
-        if (!label)
-          throw new CliInputError("--label=fits|does_not_fit is required.");
-        start();
-        await send(context, "control", "POST", `${base()}/${signalId}/examples`, compact({
-          conversationId,
-          label,
-          source: "api",
-          note: flags.note,
-          msgIndex: flags["msg-index"] !== undefined ? Number(flags["msg-index"]) : undefined,
-          msgDedupToken: flags["msg-dedup-token"],
-          criteria: oneOf("criteria", flags.criteria, ["pass", "fail"]),
-          verdict: oneOf("verdict", flags.verdict, ["accept", "reject"])
-        }));
-      } else if (action === "update") {
-        assertFlags("signals examples update", flags, ["conversation-id", "label", "note", "blurb", "dry-run"]);
-        const body = compact({ label: oneOf("label", flags.label, ["fits", "does_not_fit"]), note: flags.note, blurb: flags.blurb });
-        if (Object.keys(body).length === 0)
-          throw new CliInputError("Nothing to update: pass --label, --note, or --blurb.");
-        start();
-        await send(context, "control", "PATCH", `${base()}/${signalId}/examples/${encodeURIComponent(conversationId)}`, body);
-      } else {
-        assertFlags("signals examples remove", flags, ["conversation-id", "dry-run"]);
-        start();
-        await send(context, "control", "DELETE", `${base()}/${signalId}/examples/${encodeURIComponent(conversationId)}`);
-      }
-      return { exitCode: 0 };
-    }
-    case "refine": {
-      assertFlags("signals refine", flags, ["request", "dry-run"]);
-      const signalId = id();
-      const request = flags.request;
-      if (!request || request.length > 2000)
-        throw new CliInputError("--request (1–2000 characters) is required.");
-      start();
-      await send(context, "control", "POST", `${base()}/${signalId}/refine`, { request }, { slow: true });
-      return { exitCode: 0 };
-    }
-    case "revise": {
-      assertFlags("signals revise", flags, ["conversation-ids", "dry-run"]);
-      const signalId = id();
-      const conversationIds = csv(flags["conversation-ids"]);
-      if (!conversationIds)
-        throw new CliInputError("--conversation-ids=a,b is required.");
-      start();
-      await send(context, "control", "POST", `${base()}/${signalId}/revise`, { conversationIds }, { slow: true });
-      return { exitCode: 0 };
-    }
-    case "proposals": {
-      assertFlags("signals proposals", flags, []);
-      const signalId = id();
-      start();
-      await send(context, "control", "GET", `${base()}/${signalId}/proposals`);
-      return { exitCode: 0 };
-    }
-    case "accept":
-    case "reject": {
-      assertFlags(`signals ${sub}`, flags, ["dry-run"]);
-      const signalId = id();
-      const proposalId = id(1, "a proposal id (see `moda signals proposals <id>`)");
-      start();
-      await send(context, "control", "POST", `${base()}/${signalId}/proposals/${proposalId}/${sub}`);
-      return { exitCode: 0 };
-    }
-    case "search": {
-      assertFlags("signals search", flags, ["mode", "exclude-conversation-ids", "dry-run"]);
-      const signalId = id();
-      start();
-      await send(context, "control", "POST", `${base()}/${signalId}/search`, compact({
-        mode: oneOf("mode", flags.mode, ["wizard", "full"]),
-        excludeConversationIds: csv(flags["exclude-conversation-ids"])
-      }), { slow: true });
-      return { exitCode: 0 };
-    }
-    case "search-status":
-    case "search-stop": {
-      assertFlags(`signals ${sub}`, flags, sub === "search-stop" ? ["dry-run"] : []);
-      const signalId = id();
-      const searchId = id(1, "a search id (returned by `moda signals search <id>`)");
-      start();
-      await send(context, "control", sub === "search-stop" ? "POST" : "GET", `${base()}/${signalId}/searches/${searchId}${sub === "search-stop" ? "/stop" : ""}`);
-      return { exitCode: 0 };
-    }
-    case "preview": {
-      assertFlags("signals preview", flags, ["file", "conversation-ids", "max-examples"]);
-      const body = readBodyFile(flags, context.cwd);
-      if (!body.detector)
-        throw new CliInputError('--file must contain {"detector": {...}} (optionally scope).');
-      start();
-      try {
-        await send(context, "control", "POST", `${base()}/detector-preview`, {
-          ...body,
-          ...compact({
-            conversationIds: csv(flags["conversation-ids"]),
-            maxExamples: flags["max-examples"] !== undefined ? Number(flags["max-examples"]) : undefined
-          })
-        });
-      } catch (error) {
-        if (isTenantFeatureNotFound(error)) {
-          throw new CliAccessError("The signal builder is not enabled for this tenant, so `moda signals preview` is unavailable (the API answered 404).", { guidance: "Ask Moda to enable the signal-builder feature for this tenant. Other `moda signals` subcommands still work." });
-        }
-        throw error;
-      }
-      return { exitCode: 0 };
-    }
-    default:
-      throw unknownSignalsSubcommandError(sub, args);
-  }
-}
-function isTenantFeatureNotFound(error) {
-  if (!(error instanceof ApiError) || error.statusCode !== 404)
-    return false;
-  try {
-    const body = JSON.parse(error.responseBody);
-    return body.message === "Not Found" && body.error === undefined;
-  } catch {
-    return false;
-  }
-}
-var SIGNALS_MANAGEMENT_SUBCOMMANDS = new Set([
-  "draft",
-  "create",
-  "update",
-  "activate",
-  "pause",
-  "delete",
-  "examples",
-  "refine",
-  "revise",
-  "proposals",
-  "accept",
-  "reject",
-  "search",
-  "search-status",
-  "search-stop",
-  "preview"
-]);
-function unknownSignalsSubcommandError(sub, args = []) {
-  if (sub === "archive") {
-    const id = args[0] ?? "<signal_id>";
-    return new CliInputError(`Unknown signals subcommand 'archive': archiving a signal is dashboard-only, so nothing was sent.`, `To stop a signal from running, pause it: moda signals pause ${id}. Drafts can be deleted with moda signals delete ${id}.`);
-  }
-  return new CliInputError(`Unknown signals subcommand '${sub}', so nothing was sent. Valid subcommands: ${[...SIGNALS_MANAGEMENT_SUBCOMMANDS].join(", ")}.`, `Bare 'moda signals' lists custom signals; 'moda signal <signal_id>' opens one. Usage:
-  ${SIGNAL_USAGE}`);
-}
-
 // src/analyst-tui.ts
 class AnalystTui {
   state;
@@ -178655,16 +178013,16 @@ class AnalystTui {
     this.active = false;
   }
   pushTimeline(label, message) {
-    const compact2 = compactWhitespace(message);
-    if (!compact2)
+    const compact = compactWhitespace(message);
+    if (!compact)
       return;
     const last = this.state.timeline.at(-1);
-    if (last?.label === label && last.message === compact2)
+    if (last?.label === label && last.message === compact)
       return;
     this.state.timeline.push({
       time: timeOfDay(new Date),
       label,
-      message: compact2
+      message: compact
     });
     if (this.state.timeline.length > 80)
       this.state.timeline.splice(0, this.state.timeline.length - 80);
@@ -178804,7 +178162,7 @@ function fitToScreen(lines, rows, width) {
 function trimVisible(value, width) {
   if (visibleLength(value) <= width)
     return value;
-  const stripped = stripAnsi(value);
+  const stripped = stripAnsi2(value);
   return stripped.length > width ? `${stripped.slice(0, Math.max(0, width - 3))}...` : stripped;
 }
 function rule(width) {
@@ -178833,165 +178191,26 @@ function compactWhitespace(value) {
   return value.replace(/\s+/g, " ").trim();
 }
 function visibleLength(value) {
-  return stripAnsi(value).length;
+  return stripAnsi2(value).length;
 }
-function stripAnsi(value) {
+function stripAnsi2(value) {
   return value.replace(/\u001b\[[0-9;?]*[A-Za-z]/g, "");
 }
 
 // src/harness-remote.ts
-import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync3, writeFileSync as writeFileSync2 } from "node:fs";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync as writeFileSync2 } from "node:fs";
 import { join as join2 } from "node:path";
 
-// src/markdown-terminal.ts
-function shouldColorTerminalOutput(opts = {}) {
-  const env = opts.env ?? process.env;
-  const isTTY = opts.isTTY ?? process.stdout.isTTY === true;
-  if (!isTTY)
-    return false;
-  if (env.NO_COLOR !== undefined)
-    return false;
-  if (env.TERM === "dumb")
-    return false;
-  return true;
-}
-function terminalStyles(color) {
-  const paint = (open, close) => (text) => color ? `\x1B[${open}m${text}\x1B[${close}m` : text;
-  return {
-    bold: paint("1", "22"),
-    italic: paint("3", "23"),
-    dim: paint("2", "22"),
-    code: paint("36", "39"),
-    heading: paint("1;4", "22;24")
-  };
-}
-var FENCE_RE = /^\s*(`{3,}|~{3,})/;
-var FENCE_CLOSE_RE = /^\s*(`{3,}|~{3,})\s*$/;
-var TABLE_ROW_RE = /^\s*\|.*\S/;
-var ANSI_RE = /\u001b(?:\[[0-9;?]*[ -/]*[@-~]|\][^\u0007\u001b]*(?:\u0007|\u001b\\)|[@-Z\\-_])/g;
-function stripAnsi2(text) {
-  return text.replace(ANSI_RE, "");
-}
-function parseFenceOpen(line) {
-  const match = FENCE_RE.exec(line);
-  if (!match)
-    return null;
-  return { char: match[1][0], len: match[1].length };
-}
-function isFenceClose(line, fence) {
-  const match = FENCE_CLOSE_RE.exec(line);
-  return match !== null && match[1][0] === fence.char && match[1].length >= fence.len;
-}
-var HEADER_RE = /^(#{1,6})\s+(.*?)\s*#*\s*$/;
-var BULLET_RE = /^(\s*)([-*+])\s+(.*)$/;
-var ORDERED_RE = /^(\s*)(\d+)[.)]\s+(.*)$/;
-function renderMarkdownForTerminal(markdown, opts) {
-  const style = terminalStyles(opts.color);
-  const out = [];
-  const listStack = [];
-  let fence = null;
-  for (const raw of markdown.replace(/\r\n/g, `
-`).split(`
-`)) {
-    if (fence) {
-      out.push(stripAnsi2(raw));
-      if (isFenceClose(raw, fence))
-        fence = null;
-      continue;
-    }
-    const opened = parseFenceOpen(raw);
-    if (opened) {
-      fence = opened;
-      listStack.length = 0;
-      out.push(stripAnsi2(raw));
-      continue;
-    }
-    if (TABLE_ROW_RE.test(raw)) {
-      out.push(stripAnsi2(raw));
-      continue;
-    }
-    const line = raw.replace(/\s+$/, "");
-    if (line === "") {
-      out.push("");
-      continue;
-    }
-    const header = HEADER_RE.exec(line);
-    if (header) {
-      listStack.length = 0;
-      const text = renderInline(header[2], terminalStyles(false));
-      if (out.length > 0 && out[out.length - 1] !== "")
-        out.push("");
-      out.push(header[1].length <= 2 ? style.heading(text) : style.bold(text));
-      continue;
-    }
-    const bullet = BULLET_RE.exec(line);
-    const ordered = bullet ? null : ORDERED_RE.exec(line);
-    if (bullet || ordered) {
-      const match = bullet ?? ordered;
-      const level = resolveListLevel(match[1].length, listStack);
-      const indent = "  ".repeat(level);
-      const text = renderInline(match[3], style);
-      if (bullet) {
-        out.push(`${indent}${level === 0 ? "•" : "-"} ${text}`);
-      } else {
-        out.push(`${indent}${match[2]}. ${text}`);
-      }
-      continue;
-    }
-    if (!/^\s{2,}/.test(line))
-      listStack.length = 0;
-    out.push(renderInline(line, style));
-  }
-  return collapseBlankRuns(out).join(`
-`);
-}
-function resolveListLevel(indent, stack) {
-  while (stack.length > 0 && indent < stack[stack.length - 1] - 1)
-    stack.pop();
-  if (stack.length === 0 || indent > stack[stack.length - 1] + 1)
-    stack.push(indent);
-  return stack.length - 1;
-}
-function renderInline(text, style) {
-  const codeSpans = [];
-  let result = stripAnsi2(text).replace(/`([^`]+)`/g, (_, code) => {
-    codeSpans.push(code);
-    return `\x00${codeSpans.length - 1}\x00`;
-  });
-  result = result.replace(/\*\*([^\s*](?:[^*]*[^\s*])?)\*\*/g, (_, inner) => style.bold(inner));
-  result = result.replace(/__([^\s_](?:[^_]*[^\s_])?)__/g, (_, inner) => style.bold(inner));
-  result = result.replace(/(?<![\w*])\*([^\s*](?:[^*\n]*[^\s*])?)\*(?![\w*])/g, (_, inner) => style.italic(inner));
-  result = result.replace(/(?<![\w_])_([^\s_](?:[^_\n]*[^\s_])?)_(?![\w_])/g, (_, inner) => style.italic(inner));
-  return result.replace(/\u0000(\d+)\u0000/g, (_, index) => style.code(codeSpans[Number(index)]));
-}
-function collapseBlankRuns(lines) {
-  const collapsed = [];
-  let blanks = 0;
-  for (const line of lines) {
-    if (line === "") {
-      blanks += 1;
-      continue;
-    }
-    if (blanks > 0)
-      collapsed.push("", ...blanks === 2 ? [""] : []);
-    blanks = 0;
-    collapsed.push(line);
-  }
-  if (blanks > 0)
-    collapsed.push("", ...blanks === 2 ? [""] : []);
-  return collapsed;
-}
-
 // src/harness-report.ts
 import { createHash } from "node:crypto";
 import {
   existsSync,
   lstatSync,
   mkdirSync,
-  readFileSync as readFileSync2,
+  readFileSync,
   writeFileSync
 } from "node:fs";
-import { basename, dirname, join, relative, resolve as resolve2 } from "node:path";
+import { basename, dirname, join, relative, resolve } from "node:path";
 import { confirm } from "@inquirer/prompts";
 var HARNESS_REPORT_SCHEMA_VERSION = "harness_report.v0.1";
 var HARNESS_REPORT_VALIDATION_SCHEMA_VERSION = "harness_report_validation.v0.1";
@@ -179509,12 +178728,12 @@ function loadHarnessReportForSync(rootDir, reportPath, options) {
 `));
   }
   const approvalPath = join(rootDir, HARNESS_REPORT_APPROVAL_PATH);
-  const approval = existsSync(approvalPath) ? JSON.parse(readFileSync2(approvalPath, "utf8")) : null;
+  const approval = existsSync(approvalPath) ? JSON.parse(readFileSync(approvalPath, "utf8")) : null;
   const approved = approval?.schemaVersion === HARNESS_REPORT_APPROVAL_SCHEMA_VERSION && approval.reportId === report.reportId && approval.reportHash === hashHarnessReport(report) && approval.approved === true;
   return { report, validation, approval, approved };
 }
 function readHarnessReport(reportPath) {
-  return normalizeHarnessReport(JSON.parse(readFileSync2(reportPath, "utf8")));
+  return normalizeHarnessReport(JSON.parse(readFileSync(reportPath, "utf8")));
 }
 function normalizeHarnessReport(value) {
   const report = cloneJson(value);
@@ -180105,7 +179324,7 @@ function limitReportEvidence(claims, citations) {
   };
 }
 function resolveHarnessReportPath(rootDir, value) {
-  return resolve2(rootDir, value && value !== "true" ? value : HARNESS_REPORT_PATH);
+  return resolve(rootDir, value && value !== "true" ? value : HARNESS_REPORT_PATH);
 }
 function writeHarnessReportArtifacts(options) {
   const written = [];
@@ -180242,14 +179461,14 @@ function upsertCitation(citations, citationIndex, evidence, rootDir) {
 function citationExcerpt(rootDir, path, line) {
   if (isUnsafeCitationPath(path))
     return {};
-  const absPath = resolve2(rootDir, path);
+  const absPath = resolve(rootDir, path);
   if (!isInside(rootDir, absPath) || !existsSync(absPath))
     return {};
   try {
     const stat = lstatSync(absPath);
     if (!stat.isFile() || stat.isSymbolicLink() || stat.size > 128 * 1024)
       return {};
-    const lines = readFileSync2(absPath, "utf8").split(/\r?\n/);
+    const lines = readFileSync(absPath, "utf8").split(/\r?\n/);
     const selected = line ? lines[line - 1] : lines.find((candidate) => candidate.trim().length > 0);
     if (!selected)
       return {};
@@ -180387,7 +179606,7 @@ function validateCitation(citation, rootDir, errors, warnings, options) {
     errors.push(`Citation ${citation.id} points to an unsafe path.`);
     return;
   }
-  const absPath = resolve2(rootDir, citation.path);
+  const absPath = resolve(rootDir, citation.path);
   if (!isInside(rootDir, absPath)) {
     errors.push(`Citation ${citation.id} points outside the harness root.`);
     return;
@@ -180406,7 +179625,7 @@ function validateCitation(citation, rootDir, errors, warnings, options) {
     }
     if (!stat.isFile())
       errors.push(`Citation ${citation.id} does not point to a file.`);
-    const lines = readFileSync2(absPath, "utf8").split(/\r?\n/);
+    const lines = readFileSync(absPath, "utf8").split(/\r?\n/);
     if (citation.line !== undefined) {
       const lineCount = lines.length;
       if (citation.line < 1 || citation.line > lineCount) {
@@ -180457,7 +179676,7 @@ function isSecretishPath2(path) {
   return name === ".env" || name.startsWith(".env.") || name.includes("secret") || name.includes("private-key") || name.endsWith(".pem");
 }
 function isInside(rootDir, absPath) {
-  const rel = relative(resolve2(rootDir), resolve2(absPath));
+  const rel = relative(resolve(rootDir), resolve(absPath));
   return rel === "" || !rel.startsWith("..") && !rel.startsWith("/");
 }
 function writeJson(path, value) {
@@ -180517,7 +179736,7 @@ function readRemoteRunState(rootDir) {
   if (!existsSync2(path))
     return;
   try {
-    const parsed = JSON.parse(readFileSync3(path, "utf8"));
+    const parsed = JSON.parse(readFileSync2(path, "utf8"));
     if (!parsed || typeof parsed.run_id !== "string" || parsed.run_id.length === 0)
       return;
     return {
@@ -180813,7 +180032,7 @@ function serverFailedReportValidation(final) {
   return typeof validation === "object" && validation !== null && !Array.isArray(validation) && validation.status === "fail";
 }
 function sanitizeProgressText(text) {
-  return stripAnsi2(text).replace(/[\u0000-\u001f\u007f]+/g, " ").replace(/\s+/g, " ").trim();
+  return stripAnsi(text).replace(/[\u0000-\u001f\u007f]+/g, " ").replace(/\s+/g, " ").trim();
 }
 function normalizeRemoteProgress(value) {
   if (typeof value !== "object" || value === null || Array.isArray(value))
@@ -180878,22 +180097,22 @@ async function remoteAnalyzeFetch(url, apiKey, init, timeoutMs) {
 
 // src/harness-register/register.ts
 import * as fs from "node:fs";
-import { mkdtempSync, readFileSync as readFileSync8, rmSync as rmSync3 } from "node:fs";
+import { mkdtempSync, readFileSync as readFileSync7, rmSync as rmSync3 } from "node:fs";
 import { Readable as Readable2 } from "node:stream";
 import { tmpdir } from "node:os";
-import { basename as basename4, join as join8, resolve as resolve5 } from "node:path";
+import { basename as basename4, join as join8, resolve as resolve4 } from "node:path";
 
 // src/harness-register/collect-adapter.ts
 import { createHash as createHash4 } from "node:crypto";
 import { execFileSync } from "node:child_process";
-import { copyFileSync, createReadStream, existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync7, realpathSync as realpathSync4, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync4 } from "node:fs";
+import { copyFileSync, createReadStream, existsSync as existsSync6, mkdirSync as mkdirSync4, readFileSync as readFileSync6, realpathSync as realpathSync4, rmSync as rmSync2, statSync as statSync2, writeFileSync as writeFileSync4 } from "node:fs";
 import { dirname as dirname5, join as join7 } from "node:path";
 
 // ../../packages/harness-bundle/src/contract.ts
 var HARNESS_BUNDLE_SCHEMA = "moda_harness_bundle.v1";
 var DEPENDENCY_MAP_SCHEMA = "moda_dependency_map.v1";
 // ../../packages/harness-bundle/src/detect/files.ts
-import { existsSync as existsSync3, lstatSync as lstatSync2, readdirSync, readFileSync as readFileSync4, realpathSync } from "node:fs";
+import { existsSync as existsSync3, lstatSync as lstatSync2, readdirSync, readFileSync as readFileSync3, realpathSync } from "node:fs";
 import { join as join3, sep } from "node:path";
 
 // ../../packages/harness-bundle/src/detect/text.ts
@@ -181244,7 +180463,7 @@ function readManifest(dir) {
   if (!existsSync3(path))
     return;
   try {
-    const parsed = JSON.parse(readFileSync4(path, "utf8"));
+    const parsed = JSON.parse(readFileSync3(path, "utf8"));
     if (isRecord2(parsed) && parsed.schema === HARNESS_BUNDLE_SCHEMA && Array.isArray(parsed.files)) {
       return parsed;
     }
@@ -181263,7 +180482,7 @@ function readText(abs, maxBytes) {
     const st = lstatSync2(abs);
     if (!st.isFile() || st.size > maxBytes)
       return;
-    const buf = readFileSync4(abs);
+    const buf = readFileSync3(abs);
     if (buf.subarray(0, 8000).includes(0))
       return;
     return buf.toString("utf8");
@@ -186085,8 +185304,8 @@ function detectDependencies(input) {
 }
 // ../../packages/harness-bundle/src/collect/collect.ts
 import { createHash as createHash2 } from "node:crypto";
-import { closeSync, existsSync as existsSync4, lstatSync as lstatSync3, openSync, readdirSync as readdirSync2, readFileSync as readFileSync5, readlinkSync, readSync, realpathSync as realpathSync2 } from "node:fs";
-import { basename as basename3, dirname as dirname3, isAbsolute, join as join5, relative as relative2, resolve as resolve3, sep as sep2 } from "node:path";
+import { closeSync, existsSync as existsSync4, lstatSync as lstatSync3, openSync, readdirSync as readdirSync2, readFileSync as readFileSync4, readlinkSync, readSync, realpathSync as realpathSync2 } from "node:fs";
+import { basename as basename3, dirname as dirname3, isAbsolute, join as join5, relative as relative2, resolve as resolve2, sep as sep2 } from "node:path";
 
 // ../../packages/harness-bundle/src/collect/rules.ts
 var VCS_DIRS = new Set([".git", ".hg", ".svn", ".bzr", "_darcs", ".jj", ".sl"]);
@@ -188519,7 +187738,7 @@ class Collector {
   listedArtifacts = new Map;
   constructor(repoRoot, opts) {
     this.opts = opts;
-    this.start = realpathSync2(resolve3(repoRoot));
+    this.start = realpathSync2(resolve2(repoRoot));
     this.root = this.start;
     this.budget = { ...DEFAULT_BUDGET, ...stripUndefined(opts.budget ?? {}) };
   }
@@ -188531,13 +187750,13 @@ class Collector {
         this.gitMode = true;
       }
     }
-    const harnessAbs = realpathSync2(resolve3(this.start, this.opts.harnessRoot ?? "."));
+    const harnessAbs = realpathSync2(resolve2(this.start, this.opts.harnessRoot ?? "."));
     const harnessRel = toPosix(relative2(this.root, harnessAbs));
     if (isOutside(harnessRel)) {
       throw new Error(`Harness root ${harnessAbs} is outside the bundle root ${this.root}`);
     }
     for (const skip of this.opts.skipPaths ?? []) {
-      const rel2 = toPosix(relative2(this.root, resolve3(skip)));
+      const rel2 = toPosix(relative2(this.root, resolve2(skip)));
       if (rel2 !== "" && !isOutside(rel2))
         this.skipRel.add(rel2);
     }
@@ -188715,7 +187934,7 @@ class Collector {
       try {
         const manifestPath = join5(this.root, outDir, MANIFEST_FILE);
         if (lstatSync3(manifestPath).size <= MAX_PREVIOUS_MANIFEST_BYTES) {
-          const previous = JSON.parse(readFileSync5(manifestPath, "utf8"));
+          const previous = JSON.parse(readFileSync4(manifestPath, "utf8"));
           for (const a of previous.deployArtifacts ?? [])
             if (typeof a.path === "string")
               listed.add(a.path);
@@ -188878,7 +188097,7 @@ class Collector {
     }
     let buf;
     try {
-      buf = readFileSync5(abs);
+      buf = readFileSync4(abs);
     } catch {
       this.excludeFile(path, "unreadable", "read_failed", st.size);
       return;
@@ -188917,7 +188136,7 @@ class Collector {
       this.excludeFile(path, "unreadable", "readlink_failed");
       return;
     }
-    const lexical = resolve3(dirname3(abs), target);
+    const lexical = resolve2(dirname3(abs), target);
     let real = lexical;
     try {
       real = realpathSync2(abs);
@@ -189049,7 +188268,7 @@ class Collector {
       return skip(`${st.size} bytes exceeds ${limit}`);
     let buf;
     try {
-      buf = readFileSync5(abs);
+      buf = readFileSync4(abs);
     } catch {
       return skip("unreadable");
     }
@@ -189254,8 +188473,8 @@ function stripUndefined(value) {
 }
 // ../../packages/harness-bundle/src/collect/write.ts
 import { createHash as createHash3, randomUUID } from "node:crypto";
-import { createWriteStream, existsSync as existsSync5, lstatSync as lstatSync4, mkdirSync as mkdirSync3, readdirSync as readdirSync3, readFileSync as readFileSync6, readlinkSync as readlinkSync2, realpathSync as realpathSync3, renameSync, rmSync, statSync, writeFileSync as writeFileSync3 } from "node:fs";
-import { dirname as dirname4, isAbsolute as isAbsolute2, join as join6, relative as relative3, resolve as resolve4, sep as sep3 } from "node:path";
+import { createWriteStream, existsSync as existsSync5, lstatSync as lstatSync4, mkdirSync as mkdirSync3, readdirSync as readdirSync3, readFileSync as readFileSync5, readlinkSync as readlinkSync2, realpathSync as realpathSync3, renameSync, rmSync, statSync, writeFileSync as writeFileSync3 } from "node:fs";
+import { dirname as dirname4, isAbsolute as isAbsolute2, join as join6, relative as relative3, resolve as resolve3, sep as sep3 } from "node:path";
 import { Readable, Transform } from "node:stream";
 import { pipeline } from "node:stream/promises";
 import { createGzip } from "node:zlib";
@@ -189431,7 +188650,7 @@ function* tarChunks(files) {
         throw new Error(`${file.path} changed after collection; re-run the collector`);
       entry = { path: file.path, type: "symlink", mode: 511, linkTarget: file.symlinkTarget };
     } else {
-      const body = readFileSync6(file.absolutePath);
+      const body = readFileSync5(file.absolutePath);
       const executableNow = (statSync(file.absolutePath).mode & 73) !== 0;
       if (sha256(body) !== file.sha256 || executableNow !== file.executable) {
         throw new Error(`${file.path} changed after collection; re-run the collector`);
@@ -189502,7 +188721,7 @@ function redactEnvExamples(result, dir) {
     if (!file.categories.includes("env_example") || file.symlinkTarget !== undefined)
       continue;
     redacted = true;
-    const body = Buffer.from(envNamesOnly(readFileSync7(file.absolutePath, "utf8")));
+    const body = Buffer.from(envNamesOnly(readFileSync6(file.absolutePath, "utf8")));
     const target = join7(dir, file.path);
     mkdirSync4(dirname5(target), { recursive: true });
     writeFileSync4(target, body, { mode: file.executable ? 493 : 420 });
@@ -189518,7 +188737,7 @@ function redactEnvExamples(result, dir) {
     for (const file of result.files) {
       if (file.encoding !== "text" || file.symlinkTarget !== undefined || file.bytes > MAX_ENV_RESCAN_BYTES)
         continue;
-      env.scanFile(file.path, readFileSync7(file.absolutePath, "utf8"), file.categories);
+      env.scanFile(file.path, readFileSync6(file.absolutePath, "utf8"), file.categories);
     }
     result.manifest.env = env.finalize(new Set(result.files.map((file) => file.path)));
   }
@@ -189563,8 +188782,8 @@ function insideCheckout(dir) {
 }
 async function digestFile(path) {
   const hash = createHash4("sha256");
-  await new Promise((resolve5, reject) => {
-    createReadStream(path).on("data", (chunk) => hash.update(chunk)).on("error", reject).on("end", () => resolve5());
+  await new Promise((resolve4, reject) => {
+    createReadStream(path).on("data", (chunk) => hash.update(chunk)).on("error", reject).on("end", () => resolve4());
   });
   return { path, sha256: hash.digest("hex"), bytes: statSync2(path).size };
 }
@@ -189588,8 +188807,8 @@ var EXCLUSION_REASONS = {
 };
 async function runHarnessRegister(context, argv = process.argv) {
   const options = parseRegisterOptions(context, argv);
-  const profileOptions2 = { profile: context.profile, env: context.env };
-  if (!context.dryRun && !resolveApiKey(profileOptions2)) {
+  const profileOptions = { profile: context.profile, env: context.env };
+  if (!context.dryRun && !resolveApiKey(profileOptions)) {
     throw new CliInputError("No Moda API key found for harness register.", "Run `moda harness register --dry-run` to review the bundle without one, or set MODA_API_KEY / run `moda auth login --api-key=<key>`.");
   }
   const outDir = mkdtempSync(join8(tmpdir(), "moda-harness-register-"));
@@ -189603,7 +188822,7 @@ async function runHarnessRegister(context, argv = process.argv) {
   }
 }
 async function registerCollected(context, options, collected) {
-  const profileOptions2 = { profile: context.profile, env: context.env };
+  const profileOptions = { profile: context.profile, env: context.env };
   const report = buildRegisterReport(collected);
   if (context.dryRun) {
     emit(context, { ...report, dryRun: true }, renderRegisterReport(report, null));
@@ -189625,7 +188844,7 @@ async function registerCollected(context, options, collected) {
       ...gitFields(collected.manifest),
       ...options.imageRef ? { imageRef: options.imageRef } : {}
     })
-  }, profileOptions2));
+  }, profileOptions));
   const files = {
     bundle: collected.bundle.path,
     manifest: collected.manifestFile.path,
@@ -189635,29 +188854,29 @@ async function registerCollected(context, options, collected) {
     const path = files[target.name];
     if (!path)
       throw new Error(`Moda asked for ${target.name}, which was not collected.`);
-    await putObject(target, path, resolveModaBaseUrl(profileOptions2));
+    await putObject(target, path, resolveModaBaseUrl(profileOptions));
   }
-  const completed = await callControlAPI(`/harness-registrations/${encodeURIComponent(created.registration.id)}/complete`, { method: "POST" }, profileOptions2, { timeoutMs: 300000 });
-  await withFullChecklist(completed, profileOptions2);
-  const dashboardUrl = `${resolveModaBaseUrl(profileOptions2)}${completed.dashboardPath}`;
+  const completed = await callControlAPI(`/harness-registrations/${encodeURIComponent(created.registration.id)}/complete`, { method: "POST" }, profileOptions, { timeoutMs: 300000 });
+  await withFullChecklist(completed, profileOptions);
+  const dashboardUrl = `${resolveModaBaseUrl(profileOptions)}${completed.dashboardPath}`;
   emit(context, { ...report, dryRun: false, registration: { ...completed, dashboardUrl } }, renderRegisterReport(report, { ...completed, dashboardUrl }), completed.status === "failed" ? "error" : undefined);
   return { exitCode: completed.status === "failed" ? 1 : 0 };
 }
 async function runHarnessRegistration(context) {
   const action = context.positionals[1] ?? "list";
-  const profileOptions2 = { profile: context.profile, env: context.env };
-  if (!resolveApiKey(profileOptions2)) {
+  const profileOptions = { profile: context.profile, env: context.env };
+  if (!resolveApiKey(profileOptions)) {
     throw new CliInputError(`No Moda API key found for harness registration ${action}.`, "Set MODA_API_KEY, run `moda auth login --api-key=<key>`, or select a profile with an API key.");
   }
   if (context.flags["tenant-id"])
     requireTenant(context);
-  const baseUrl = resolveModaBaseUrl(profileOptions2);
+  const baseUrl = resolveModaBaseUrl(profileOptions);
   if (action === "status") {
     const id = context.positionals[2];
     if (!id)
       throw new CliInputError("Missing registration id.", "Usage: moda harness registration status <id> (ids from `moda harness registration list`)");
-    const registration = await callControlAPI(`/harness-registrations/${encodeURIComponent(id)}`, {}, profileOptions2);
-    await withFullChecklist(registration, profileOptions2);
+    const registration = await callControlAPI(`/harness-registrations/${encodeURIComponent(id)}`, {}, profileOptions);
+    await withFullChecklist(registration, profileOptions);
     const dashboardUrl = `${baseUrl}${registration.dashboardPath}`;
     emit(context, { ...registration, dashboardUrl }, renderRegistrationStatus({ ...registration, dashboardUrl }));
     return { exitCode: 0 };
@@ -189674,26 +188893,26 @@ async function runHarnessRegistration(context) {
     if (context.flags["include-retired"] === "true")
       query.set("includeRetired", "true");
     const suffix = query.toString() ? `?${query}` : "";
-    const response = await whenEnabled(() => callControlAPI(`/harness-registrations${suffix}`, {}, profileOptions2));
+    const response = await whenEnabled(() => callControlAPI(`/harness-registrations${suffix}`, {}, profileOptions));
     emit(context, response, renderRegistrationList(response.registrations, baseUrl));
     return { exitCode: 0 };
   }
   throw new CliInputError(`Unknown harness registration command '${action}'.`, "Usage: moda harness registration list|status <id>");
 }
-async function withFullChecklist(registration, profileOptions2) {
+async function withFullChecklist(registration, profileOptions) {
   try {
-    await loadFullChecklist(registration, profileOptions2);
+    await loadFullChecklist(registration, profileOptions);
   } catch {
     registration.checklistIncomplete = true;
   }
 }
-async function loadFullChecklist(registration, profileOptions2) {
+async function loadFullChecklist(registration, profileOptions) {
   const total = registration.checklistCounts?.total ?? 0;
   if (!registration.checklist || registration.checklist.items.length >= total)
     return;
   const items = [];
   for (let page = 0;items.length < total && page < 100; page++) {
-    const response = await callControlAPI(`/harness-registrations/${encodeURIComponent(registration.id)}/checklist?offset=${items.length}&limit=500`, {}, profileOptions2);
+    const response = await callControlAPI(`/harness-registrations/${encodeURIComponent(registration.id)}/checklist?offset=${items.length}&limit=500`, {}, profileOptions);
     if (response.items.length === 0)
       break;
     items.push(...response.items);
@@ -189753,7 +188972,7 @@ function parseRegisterOptions(context, argv) {
     if (!ENV_NAME.test(name))
       throw new CliInputError(`'${name}' is not an env var name.`, "Pass the variable name, never its value, e.g. --model-base-url-env=OPENAI_BASE_URL.");
   }
-  const harnessRoot = resolve5(context.cwd, flags.root ?? ".");
+  const harnessRoot = resolve4(context.cwd, flags.root ?? ".");
   const harnessName = positionals[1] ?? defaultHarnessName(harnessRoot);
   if (!HARNESS_NAME.test(harnessName)) {
     throw new CliInputError(`Harness name '${harnessName}' is not valid.`, 'Use 1-128 letters, digits, ".", "_" or "-", e.g. `moda harness register support-agent`.');
@@ -189764,7 +188983,7 @@ function parseRegisterOptions(context, argv) {
 }
 function defaultHarnessName(root) {
   try {
-    const name = JSON.parse(readFileSync8(join8(root, "package.json"), "utf8")).name;
+    const name = JSON.parse(readFileSync7(join8(root, "package.json"), "utf8")).name;
     if (typeof name === "string" && name)
       return sanitizeName(name.replace(/^@[^/]+\//, ""));
   } catch {}
@@ -190020,8 +189239,8 @@ function formatBytes(bytes) {
 }
 
 // src/harness-artifact-bodies.ts
-import { existsSync as existsSync7, lstatSync as lstatSync5, readFileSync as readFileSync9, realpathSync as realpathSync5 } from "node:fs";
-import { basename as basename5, dirname as dirname6, isAbsolute as isAbsolute3, relative as relative4, resolve as resolve6 } from "node:path";
+import { existsSync as existsSync7, lstatSync as lstatSync5, readFileSync as readFileSync8, realpathSync as realpathSync5 } from "node:fs";
+import { basename as basename5, dirname as dirname6, isAbsolute as isAbsolute3, relative as relative4, resolve as resolve5 } from "node:path";
 var MAX_SCANNED_FILE_BYTES2 = 512 * 1024;
 var SNAPSHOT_BUDGET_SKIP_REASONS = new Set([
   "file too large for harness scan",
@@ -190084,13 +189303,13 @@ function readBoundedRepoText(absPath, rootDir) {
     return;
   }
   try {
-    return readFileSync9(absPath, "utf8");
+    return readFileSync8(absPath, "utf8");
   } catch {
     return;
   }
 }
 function readRepoRelativeText(rootDir, relPath) {
-  return readBoundedRepoText(resolve6(rootDir, relPath), rootDir);
+  return readBoundedRepoText(resolve5(rootDir, relPath), rootDir);
 }
 function isDedicatedToolFilePath(path) {
   return /(^|\/)tools?\//i.test(path) && /\.(ts|tsx|js|mjs|py)$/i.test(path);
@@ -190117,8 +189336,8 @@ function extractToolBodyFromText(text, toolName) {
   const normalizedName = toolName.replace(/\s+/g, "").toLowerCase();
   for (let index = 0;index < lines.length; index += 1) {
     const line = lines[index];
-    const compact2 = line.replace(/\s+/g, "").toLowerCase();
-    const mentionsTool = compact2.includes(normalizedName) || compact2.includes(`def${normalizedName}`);
+    const compact = line.replace(/\s+/g, "").toLowerCase();
+    const mentionsTool = compact.includes(normalizedName) || compact.includes(`def${normalizedName}`);
     if (!mentionsTool)
       continue;
     if (line.includes("function_tool") || line.includes("tool(") || line.includes("createTool") || line.includes("functionTool") || line.includes("dynamicTool") || line.includes("new Tool") || line.includes("def ")) {
@@ -190131,14 +189350,14 @@ function annotatedSourceCandidates(sourcePath, annotation) {
   const explicitSourcePath = normalizePath2(sourcePath) !== normalizePath2(annotation.evidence.path);
   if (!explicitSourcePath) {
     return [
-      resolve6(annotation.rootDir, sourcePath),
-      resolve6(dirname6(annotation.sourceAbsPath), sourcePath),
+      resolve5(annotation.rootDir, sourcePath),
+      resolve5(dirname6(annotation.sourceAbsPath), sourcePath),
       annotation.sourceAbsPath
     ];
   }
-  const rootAbs = resolve6(annotation.rootDir);
-  const candidates = walkAncestorDirs(dirname6(annotation.sourceAbsPath), rootAbs).map((dir) => resolve6(dir, sourcePath));
-  candidates.push(resolve6(annotation.rootDir, sourcePath));
+  const rootAbs = resolve5(annotation.rootDir);
+  const candidates = walkAncestorDirs(dirname6(annotation.sourceAbsPath), rootAbs).map((dir) => resolve5(dir, sourcePath));
+  candidates.push(resolve5(annotation.rootDir, sourcePath));
   return candidates;
 }
 function readAnnotatedSourceText(sourcePath, annotation) {
@@ -190219,9 +189438,9 @@ function readSourcePathRelativeToEvidence(artifact, rootDir) {
   const evidencePath = firstEvidencePath(artifact);
   if (!evidencePath)
     return;
-  const rootAbs = resolve6(rootDir);
-  for (const dir of walkAncestorDirs(dirname6(resolve6(rootDir, evidencePath)), rootAbs)) {
-    const text = readBoundedRepoText(resolve6(dir, artifact.sourcePath), rootDir);
+  const rootAbs = resolve5(rootDir);
+  for (const dir of walkAncestorDirs(dirname6(resolve5(rootDir, evidencePath)), rootAbs)) {
+    const text = readBoundedRepoText(resolve5(dir, artifact.sourcePath), rootDir);
     if (text !== undefined)
       return text;
   }
@@ -190251,7 +189470,7 @@ function enrichScanCaptureMetadata(graph) {
 
 // src/harness-candidates.ts
 import { mkdirSync as mkdirSync5, writeFileSync as writeFileSync5 } from "node:fs";
-import { basename as basename6, dirname as dirname7, extname, resolve as resolve7 } from "node:path";
+import { basename as basename6, dirname as dirname7, extname, resolve as resolve6 } from "node:path";
 var MAX_CANDIDATES_PER_FILE_PER_SIGNAL = 20;
 var MIN_PROMPT_LITERAL_CHARS = 160;
 var CONFIDENCE_WEIGHT = {
@@ -190777,7 +189996,7 @@ function detectHarnessCandidatesInFiles(files) {
 function detectHarnessCandidates(rootDir) {
   const startedAt = Date.now();
   const skipped = [];
-  const root = resolve7(rootDir);
+  const root = resolve6(rootDir);
   const inventory = inventoryFiles(root, skipped, {
     includeFile: (path) => PROMPT_DOC_EXTENSIONS.has(extname(path).toLowerCase()) || [".json", ".yaml", ".yml"].includes(extname(path).toLowerCase()) || extname(path).toLowerCase() === ".rs" && RUST_PROMPT_PATH_HINT.test(path)
   });
@@ -190803,7 +190022,7 @@ function detectHarnessCandidates(rootDir) {
   return redactDeep(report);
 }
 function writeHarnessCandidatesReport(report, outPath) {
-  const target = resolve7(outPath);
+  const target = resolve6(outPath);
   mkdirSync5(dirname7(target), { recursive: true });
   writeFileSync5(target, `${JSON.stringify(report, null, 2)}
 `, "utf8");
@@ -190817,8 +190036,8 @@ import { extname as extname8 } from "node:path";
 // src/prompt-sources.ts
 var import_typescript2 = __toESM(require_typescript(), 1);
 import { createHash as createHash5 } from "node:crypto";
-import { lstatSync as lstatSync7, readFileSync as readFileSync12, realpathSync as realpathSync8 } from "node:fs";
-import { extname as extname3, isAbsolute as isAbsolute4, relative as relative5, resolve as resolve10 } from "node:path";
+import { lstatSync as lstatSync7, readFileSync as readFileSync11, realpathSync as realpathSync8 } from "node:fs";
+import { extname as extname3, isAbsolute as isAbsolute4, relative as relative5, resolve as resolve9 } from "node:path";
 
 // src/prompt-frameworks.ts
 var PYTHON_AGENT_MODULES = [
@@ -190839,15 +190058,15 @@ var TYPESCRIPT_AGENT_MODULES = [
 
 // src/prompt-source-code.ts
 var import_typescript = __toESM(require_typescript(), 1);
-import { existsSync as existsSync8, lstatSync as lstatSync6, readFileSync as readFileSync10, realpathSync as realpathSync6 } from "node:fs";
-import { dirname as dirname8, extname as extname2, join as join9, resolve as resolve8 } from "node:path";
+import { existsSync as existsSync8, lstatSync as lstatSync6, readFileSync as readFileSync9, realpathSync as realpathSync6 } from "node:fs";
+import { dirname as dirname8, extname as extname2, join as join9, resolve as resolve7 } from "node:path";
 var EXTENSIONS = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"];
 var MAX_BYTES = 2 * 1024 * 1024;
 var MAX_DEPTH = 32;
 var MAX_FILES = 256;
 var MAX_GRAPH_BYTES = 16 * 1024 * 1024;
 function extractCodeSource(rootDir, sourcePath, symbol, forceDependencyGraph = false) {
-  const state = { root: resolve8(rootDir), files: [], unresolved: [], visiting: new Set, importsVisited: new Set, parsed: new Map, assignments: new Map, bytesRead: 0 };
+  const state = { root: resolve7(rootDir), files: [], unresolved: [], visiting: new Set, importsVisited: new Set, parsed: new Map, assignments: new Map, bytesRead: 0 };
   const file = safeFile(state.root, state.root, sourcePath);
   const parsed = parseFile(file, state);
   const target = symbol ? findSymbol(parsed, symbol) : findInstructionCandidate(parsed);
@@ -190880,7 +190099,7 @@ function parseFile(filePath, state) {
   const cached = state.parsed.get(path);
   if (cached)
     return cached;
-  const text = readFileSync10(path, "utf8");
+  const text = readFileSync9(path, "utf8");
   state.bytesRead += Buffer.byteLength(text);
   state.files.push(path);
   const scriptKind = extname2(path) === ".json" ? import_typescript.default.ScriptKind.JSON : /\.tsx?$/.test(extname2(path)) ? import_typescript.default.ScriptKind.TSX : import_typescript.default.ScriptKind.JSX;
@@ -190895,7 +190114,7 @@ function parseFile(filePath, state) {
 function safeFile(root, base, requested) {
   if (requested.includes("\x00"))
     throw new Error(`Prompt source path contains NUL: ${requested}`);
-  const candidate = resolve8(base, requested);
+  const candidate = resolve7(base, requested);
   let cursor = candidate;
   while (cursor !== root) {
     let stat2;
@@ -190911,7 +190130,7 @@ function safeFile(root, base, requested) {
       break;
     cursor = next;
   }
-  const rootReal = resolve8(root);
+  const rootReal = resolve7(root);
   let real;
   try {
     real = requireRealpath(candidate);
@@ -191248,7 +190467,7 @@ function isBindingMutated(file, name) {
 function moduleSpecifier(from, specifier) {
   if (!specifier.startsWith("."))
     return;
-  const base = resolve8(dirname8(from), specifier);
+  const base = resolve7(dirname8(from), specifier);
   const stripped = /\.(?:js|jsx|mjs|cjs)$/.test(base) ? base.slice(0, base.lastIndexOf(".")) : base;
   for (const candidate of [base, stripped, ...EXTENSIONS.map((ext) => `${base}${ext}`), ...EXTENSIONS.map((ext) => `${stripped}${ext}`), ...EXTENSIONS.map((ext) => join9(base, `index${ext}`)), ...EXTENSIONS.map((ext) => join9(stripped, `index${ext}`))])
     if (existsSync8(candidate) && lstatSync6(candidate).isFile())
@@ -191268,7 +190487,7 @@ function nodeRange(file, node) {
   };
 }
 function inspectCodeSelectors(rootDir, sourcePath, symbol) {
-  const state = { root: resolve8(rootDir), files: [], unresolved: [], visiting: new Set, importsVisited: new Set, parsed: new Map, assignments: new Map, bytesRead: 0 };
+  const state = { root: resolve7(rootDir), files: [], unresolved: [], visiting: new Set, importsVisited: new Set, parsed: new Map, assignments: new Map, bytesRead: 0 };
   const parsed = parseFile(safeFile(state.root, state.root, sourcePath), state);
   if (symbol) {
     const node = findSymbol(parsed, symbol);
@@ -191318,8 +190537,8 @@ function referenceNames(node) {
 
 // src/prompt-source-python.ts
 import { spawnSync as spawnSync2 } from "node:child_process";
-import { readFileSync as readFileSync11, realpathSync as realpathSync7 } from "node:fs";
-import { resolve as resolve9 } from "node:path";
+import { readFileSync as readFileSync10, realpathSync as realpathSync7 } from "node:fs";
+import { resolve as resolve8 } from "node:path";
 var PYTHON_AGENT_MODULES_LITERAL = JSON.stringify(PYTHON_AGENT_MODULES);
 var SELECTOR_HELPER = String.raw`import ast,json,os,sys
 request=json.loads(sys.stdin.read()); root=os.path.realpath(request['root']); path=os.path.abspath(request['path']); wanted=request.get('symbol')
@@ -191380,7 +190599,7 @@ else:
   print(json.dumps({'candidates':found},ensure_ascii=False))`;
 function inspectPythonSelectors(rootDir, sourcePath, symbol) {
   const root = realpathSync7(rootDir);
-  const absolute = resolve9(root, sourcePath);
+  const absolute = resolve8(root, sourcePath);
   const result = spawnSync2("python3", ["-I", "-c", SELECTOR_HELPER], {
     input: JSON.stringify({ root, path: absolute, ...symbol ? { symbol } : {} }),
     encoding: "utf8",
@@ -191525,7 +190744,7 @@ except SystemExit: pass
 except Exception as error: print(json.dumps({'candidates':[],'error':str(error)}))`;
 function discoverPythonPromptSources(rootDir, sourcePath) {
   const result = spawnSync2("python3", ["-I", "-c", DISCOVERY_HELPER], {
-    input: JSON.stringify({ root: rootDir, path: resolve9(rootDir, sourcePath) }),
+    input: JSON.stringify({ root: rootDir, path: resolve8(rootDir, sourcePath) }),
     encoding: "utf8",
     maxBuffer: 4 * 1024 * 1024,
     timeout: 1e4
@@ -191785,7 +191004,7 @@ except Exception as e:
 function extractPythonSource(rootDir, sourcePath, symbol, _forceDependencyGraph = false) {
   let raw = "";
   try {
-    raw = readFileSync11(sourcePath, "utf8");
+    raw = readFileSync10(sourcePath, "utf8");
   } catch {}
   const result = spawnSync2("python3", ["-I", "-c", HELPER], {
     input: JSON.stringify({ root: rootDir, path: sourcePath, symbol, force: _forceDependencyGraph }),
@@ -191879,7 +191098,7 @@ function resolvePromptSource(rootDir, source) {
   } else if (source.selector?.symbol) {
     throw new Error(`${sourcePath}: symbol selectors require a JavaScript, TypeScript, or Python source file`);
   } else if (ext === ".json" || ext === ".yaml" || ext === ".yml" || hasPointer || source.kind === "messages") {
-    const parsed = parseStructured(readFileSync12(sourceAbs, "utf8"), sourcePath, ext);
+    const parsed = parseStructured(readFileSync11(sourceAbs, "utf8"), sourcePath, ext);
     const selected = hasPointer ? jsonPointer(parsed, source.selector.pointer, sourcePath) : parsed;
     const selectedField = source.selector?.pointer?.split("/").at(-1)?.replaceAll("~1", "/").replaceAll("~0", "~");
     const inferredKind = !source.kind && selectedField && /^(?:template|system_template|instance_template)$/.test(selectedField) ? "template" : source.kind;
@@ -191889,7 +191108,7 @@ function resolvePromptSource(rootDir, source) {
     messages = structured.messages;
     kind = structured.kind;
   } else {
-    const raw = readFileSync12(sourceAbs, "utf8");
+    const raw = readFileSync11(sourceAbs, "utf8");
     if (ext === ".md" && /\.prompt\.md$/i.test(sourcePath)) {
       const legacy = parseLegacyMarkdown(raw);
       content = legacy.content;
@@ -191912,7 +191131,7 @@ function resolvePromptSource(rootDir, source) {
       const depAbs = safePath(root, dependency.path);
       files.add(depAbs);
       if (typeof dependency.selector?.pointer === "string") {
-        const parsed = parseStructured(readFileSync12(depAbs, "utf8"), dependency.path, extname3(depAbs).toLowerCase());
+        const parsed = parseStructured(readFileSync11(depAbs, "utf8"), dependency.path, extname3(depAbs).toLowerCase());
         jsonPointer(parsed, dependency.selector.pointer, dependency.path);
       } else if (dependency.selector?.symbol && CODE_EXTENSIONS2.has(extname3(depAbs).toLowerCase())) {
         const dep = extname3(depAbs).toLowerCase() === ".py" ? extractPythonSource(root, depAbs, dependency.selector.symbol) : extractCodeSource(root, depAbs, dependency.selector.symbol);
@@ -191935,7 +191154,7 @@ function resolvePromptSource(rootDir, source) {
     assertSafeMaterializedContent(content, sourcePath);
   else
     assertSafeMaterializedContent(materialized, sourcePath);
-  const dependencies = [...files].sort().map((path) => ({ path: relative5(root, path).replaceAll("\\", "/"), contentHash: sha2562(readFileSync12(path)) }));
+  const dependencies = [...files].sort().map((path) => ({ path: relative5(root, path).replaceAll("\\", "/"), contentHash: sha2562(readFileSync11(path)) }));
   const sourceHash = sha2562(JSON.stringify({ kind, content, systemPrompt: systemPrompt ?? null, messages: messages ?? null }));
   const sourceDefinition = {
     schemaVersion: 1,
@@ -192005,7 +191224,7 @@ function discoverStructuredPromptSources(rootDir, sourcePath) {
   const ext = extname3(file).toLowerCase();
   if (![".json", ".yaml", ".yml"].includes(ext))
     return [];
-  const value = parseStructured(readFileSync12(file, "utf8"), sourcePath, ext);
+  const value = parseStructured(readFileSync11(file, "utf8"), sourcePath, ext);
   const sources = [];
   const base = sourcePath.replace(/\.[^.]+$/, "").replace(/[^A-Za-z0-9_.-]+/g, ".");
   const dedicatedPath = /(^|\/)prompts?(?:\/|\.[^/]+$)|\.prompt\.[^.]+$/i.test(sourcePath);
@@ -192081,14 +191300,14 @@ function discoverCodePromptCandidates(rootDir, sourcePath) {
       addName(candidate.symbol, candidate.knownBuilder === true);
       modelInputs.add(candidate.symbol);
     }
-    for (const match of readFileSync12(file, "utf8").matchAll(/^(?:(?:async\s+)?def\s+([A-Za-z_]\w*)|([A-Za-z_]\w*)\s*=\s*([^\n#]+))/gm)) {
+    for (const match of readFileSync11(file, "utf8").matchAll(/^(?:(?:async\s+)?def\s+([A-Za-z_]\w*)|([A-Za-z_]\w*)\s*=\s*([^\n#]+))/gm)) {
       const name = match[1] ?? match[2];
       const rhs = match[3] ?? "";
       if (name && isPromptName2(name) && (match[1] || /['"`\[({+]/.test(rhs) || /^[A-Za-z_]\w*\s*$/.test(rhs)))
         addName(name, Boolean(match[1]));
     }
   } else {
-    const sf = import_typescript2.default.createSourceFile(file, readFileSync12(file, "utf8"), import_typescript2.default.ScriptTarget.Latest, true, import_typescript2.default.ScriptKind.TSX);
+    const sf = import_typescript2.default.createSourceFile(file, readFileSync11(file, "utf8"), import_typescript2.default.ScriptTarget.Latest, true, import_typescript2.default.ScriptKind.TSX);
     const agentConstructors = new Set;
     for (const statement of sf.statements) {
       if (!import_typescript2.default.isImportDeclaration(statement) || !import_typescript2.default.isStringLiteral(statement.moduleSpecifier) || !TYPESCRIPT_AGENT_MODULES.includes(statement.moduleSpecifier.text))
@@ -192270,13 +191489,13 @@ function jsonPointer(value, pointer, path) {
   return current;
 }
 function safeRoot(dir) {
-  const root = realpathSync8(resolve10(dir));
+  const root = realpathSync8(resolve9(dir));
   if (!lstatSync7(root).isDirectory())
     throw new Error(`Prompt source root is not a directory: ${dir}`);
   return root;
 }
 function safePath(root, requested) {
-  const candidate = resolve10(root, requested);
+  const candidate = resolve9(root, requested);
   rejectSymlinkPath(root, candidate, requested);
   const real = realpathSync8(candidate);
   if (!(real === root || real.startsWith(`${root}/`)))
@@ -192322,12 +191541,12 @@ function sha2562(input) {
 }
 
 // src/prompt-source-verification/index.ts
-import { readFileSync as readFileSync16 } from "node:fs";
+import { readFileSync as readFileSync15 } from "node:fs";
 import { z } from "zod";
 
 // src/prompt-source-validation.ts
 import { existsSync as existsSync9, lstatSync as lstatSync8 } from "node:fs";
-import { extname as extname4, relative as relative6, resolve as resolve11 } from "node:path";
+import { extname as extname4, relative as relative6, resolve as resolve10 } from "node:path";
 function checkPromptMapping(rootDir, unknownMapping) {
   const repairs = [];
   const unresolved = [];
@@ -192343,10 +191562,10 @@ function checkPromptMapping(rootDir, unknownMapping) {
     if (JSON.stringify(normalized) !== JSON.stringify(sourceValue))
       repairs.push("Omitted empty selector/dependency containers");
     const source = validatePromptSource(normalized);
-    const absolute = resolve11(rootDir, source.path);
+    const absolute = resolve10(rootDir, source.path);
     if (!existsSync9(absolute) || !lstatSync8(absolute).isFile())
       throw new Error(`${source.path}: source path is unavailable`);
-    const rel2 = relative6(resolve11(rootDir), absolute).replaceAll("\\", "/");
+    const rel2 = relative6(resolve10(rootDir), absolute).replaceAll("\\", "/");
     if (rel2 !== source.path)
       repairs.push(`normalized path to ${rel2}`);
     let selected = { ...source, path: rel2 };
@@ -192411,23 +191630,23 @@ function isPromptDefinitionPath(path) {
 }
 
 // src/prompt-source-verification/evidence.ts
-import { readFileSync as readFileSync15 } from "node:fs";
+import { readFileSync as readFileSync14 } from "node:fs";
 import { extname as extname7 } from "node:path";
 
 // src/prompt-source-verification/paths.ts
 import { lstatSync as lstatSync9, realpathSync as realpathSync9 } from "node:fs";
-import { isAbsolute as isAbsolute5, relative as relative7, resolve as resolve12, sep as sep4 } from "node:path";
+import { isAbsolute as isAbsolute5, relative as relative7, resolve as resolve11, sep as sep4 } from "node:path";
 function safePromptEvidencePath(rootDir, path) {
   const root = realpathSync9(rootDir);
   if (!path || isAbsolute5(path))
     throw new Error("Evidence path must be repository-relative");
-  const absolute = resolve12(root, path);
+  const absolute = resolve11(root, path);
   const rel2 = relative7(root, absolute);
   if (!rel2 || rel2 === ".." || rel2.startsWith(`..${sep4}`) || isAbsolute5(rel2))
     throw new Error("Evidence escapes repository");
   let current = root;
   for (const part of rel2.split(sep4)) {
-    current = resolve12(current, part);
+    current = resolve11(current, part);
     if (lstatSync9(current).isSymbolicLink())
       throw new Error("Evidence path is symlinked");
   }
@@ -192441,14 +191660,14 @@ function safePromptEvidencePath(rootDir, path) {
 var import_typescript3 = __toESM(require_typescript(), 1);
 import { execFileSync as execFileSync2 } from "node:child_process";
 import { extname as extname5 } from "node:path";
-import { readFileSync as readFileSync13 } from "node:fs";
+import { readFileSync as readFileSync12 } from "node:fs";
 function proveSink(root, sink) {
   const file = safePromptEvidencePath(root, sink.path);
   const cache = new Map;
   if (!cache.has(file)) {
     if (extname5(file) === ".py") {
       try {
-        const rows = JSON.parse(execFileSync2("python3", ["-I", "-c", PYTHON_PROOF], { input: readFileSync13(file, "utf8"), encoding: "utf8", timeout: 1e4, maxBuffer: 2 * 1024 * 1024 }));
+        const rows = JSON.parse(execFileSync2("python3", ["-I", "-c", PYTHON_PROOF], { input: readFileSync12(file, "utf8"), encoding: "utf8", timeout: 1e4, maxBuffer: 2 * 1024 * 1024 }));
         cache.set(file, new Map(Object.entries(rows).map(([line, proof]) => [Number(line), proof])));
       } catch {
         cache.set(file, new Map);
@@ -192615,7 +191834,7 @@ print(json.dumps(rows))
 `;
 
 // src/prompt-source-location.ts
-import { readFileSync as readFileSync14 } from "node:fs";
+import { readFileSync as readFileSync13 } from "node:fs";
 import { extname as extname6 } from "node:path";
 function structuredExcerpt(text, source) {
   if (source.selector?.pointer === undefined)
@@ -192669,7 +191888,7 @@ function promptDefinitionExcerpt(rootDir, source) {
       return;
     return { ...extraction.range, text: extraction.sourceText, ...extraction.declarationKind ? { declarationKind: extraction.declarationKind } : {} };
   }
-  const text = readFileSync14(file, "utf8");
+  const text = readFileSync13(file, "utf8");
   return structuredExcerpt(text, source);
 }
 function promptDefinitionRange(rootDir, source) {
@@ -192696,7 +191915,7 @@ function reviewEvidence(rootDir, source, evidence) {
     for (const item of evidence) {
       let text;
       try {
-        text = readFileSync15(safePromptEvidencePath(rootDir, item.path), "utf8");
+        text = readFileSync14(safePromptEvidencePath(rootDir, item.path), "utf8");
       } catch (error) {
         if (item.kind === "model_endpoint")
           return { valid: false, endpointVerified: false, reason: error instanceof Error ? error.message : String(error) };
@@ -192811,7 +192030,7 @@ async function independentlyVerifyPromptSource(rootDir, source, verifier) {
   let priorJudgment;
   try {
     const before = JSON.stringify(checked.resolved.sourceDefinition);
-    const sourceBytes = readFileSync16(safePromptEvidencePath(rootDir, source.path), "utf8");
+    const sourceBytes = readFileSync15(safePromptEvidencePath(rootDir, source.path), "utf8");
     const instruction = promptVerificationInstruction(checked.source, checked.sourceHash, promptDefinitionExcerpt(rootDir, checked.source));
     for (let attempt = 0;attempt < 2; attempt++) {
       const repair = attempt ? `
@@ -192842,7 +192061,7 @@ ${output}` : "";
     }
     if (reviewed.truncated || reviewed.sourceHash !== checked.sourceHash)
       return pending("Verifier output is truncated or cites a different source hash", reviewed.evidence, reviewed.role, normalizeUsage(undefined, false));
-    if (before !== snapshot() || readFileSync16(safePromptEvidencePath(rootDir, source.path), "utf8") !== sourceBytes)
+    if (before !== snapshot() || readFileSync15(safePromptEvidencePath(rootDir, source.path), "utf8") !== sourceBytes)
       return pending("Source changed during verification", reviewed.evidence, reviewed.role, normalizeUsage(undefined, false));
     if (reviewed.role === "non_prompt")
       return { status: "rejected", reason: reviewed.reason, evidence: reviewed.evidence, sourceHash: checked.sourceHash, role: reviewed.role, usage: normalizeUsage(undefined, false) };
@@ -193202,8 +192421,8 @@ function applyPromptDiscovery(graph, discovery) {
 }
 
 // src/harness-candidate-promotion.ts
-import { readFileSync as readFileSync17 } from "node:fs";
-import { resolve as resolve13 } from "node:path";
+import { readFileSync as readFileSync16 } from "node:fs";
+import { resolve as resolve12 } from "node:path";
 var PROMOTED_CONFIDENCE = {
   high: 0.85,
   medium: 0.6
@@ -193233,7 +192452,7 @@ function readFileLines(rootDir, path, cache) {
     return cached;
   let lines;
   try {
-    lines = readFileSync17(resolve13(rootDir, path), "utf8").split(/\r?\n/);
+    lines = readFileSync16(resolve12(rootDir, path), "utf8").split(/\r?\n/);
   } catch {
     lines = null;
   }
@@ -194516,7 +193735,7 @@ async function runHarnessCommand(context) {
     return runHarnessRegister(context);
   if (subcommand === "registration")
     return runHarnessRegistration(context);
-  const rootDir = resolve14(context.cwd, context.flags.path ?? ".");
+  const rootDir = resolve13(context.cwd, context.flags.path ?? ".");
   const selectedAgentId = selectedRuntimeAgentId(context.flags);
   const tenant = resolveHarnessTenant(context.flags, context);
   const scanPlan = buildCommandScanPlan(context, rootDir);
@@ -194712,11 +193931,11 @@ async function runHarnessCommand(context) {
       if (!idOrKey) {
         throw new CliInputError("Missing harness id or key to delete.", "Usage: moda harness delete <harness-id-or-key> [--yes]");
       }
-      const profileOptions2 = { profile: context.profile, env: context.env };
-      if (!resolveApiKey(profileOptions2) && !context.dryRun) {
+      const profileOptions = { profile: context.profile, env: context.env };
+      if (!resolveApiKey(profileOptions) && !context.dryRun) {
         throw new CliInputError("No Moda API key found for harness delete.", "Run `moda init` first, set MODA_API_KEY, or select a profile with an API key.");
       }
-      const identity3 = describeSyncIdentity(profileOptions2);
+      const identity3 = describeSyncIdentity(profileOptions);
       if (identity3) {
         const label = identity3.tenantSource === "api-key" ? describeSyncTenantLabel(identity3) : describeSyncTenantLabel({
           tenantId: tenant?.tenantId ?? identity3.tenantId,
@@ -194734,7 +193953,7 @@ async function runHarnessCommand(context) {
         return { exitCode: 0 };
       }
       await confirmHarnessDelete(context, idOrKey);
-      const response = await callControlAPI(`/harnesses/${encodeURIComponent(idOrKey)}`, { method: "DELETE" }, profileOptions2);
+      const response = await callControlAPI(`/harnesses/${encodeURIComponent(idOrKey)}`, { method: "DELETE" }, profileOptions);
       writeHumanProgress(context, `Deleted harness ${response.harnessKey ?? idOrKey} from tenant ${response.tenantId ?? "unknown"} ` + `(${response.deleted?.versions ?? 0} versions, ${response.deleted?.agents ?? 0} agents, ` + `${response.deleted?.artifacts ?? 0} artifacts, ${response.deleted?.relationships ?? 0} relationships).`);
       context.output.writeData({ ...response, dryRun: false });
       return { exitCode: 0 };
@@ -194777,7 +193996,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-wpkr7jjr.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-mtksqp3c.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);
@@ -194919,7 +194138,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Missing output path for --out.", "Usage: moda harness candidates --out=<file>");
       }
       if (outFlag && !context.dryRun) {
-        written.push(writeHarnessCandidatesReport(report, resolve14(context.cwd, outFlag)));
+        written.push(writeHarnessCandidatesReport(report, resolve13(context.cwd, outFlag)));
       }
       writeHumanProgress(context, `Harness candidates: ${report.stats.candidateCount} candidates across ${report.stats.filesWithCandidates} files (${report.stats.filesScanned} scanned, ${report.stats.filesPerSecond.toLocaleString()} files/sec).`);
       context.output.writeData({ scanPlan, ...report, written, dryRun: context.dryRun });
@@ -195018,8 +194237,8 @@ async function runHarnessCommand(context) {
         if (context.flags[flag] === "true")
           throw new CliInputError(`--${flag} needs a value.`);
       }
-      const profileOptions2 = { profile: context.profile, env: context.env };
-      if (!resolveApiKey(profileOptions2)) {
+      const profileOptions = { profile: context.profile, env: context.env };
+      if (!resolveApiKey(profileOptions)) {
         throw new CliInputError(`No Moda API key found for harness ${subcommand}.`, "Set MODA_API_KEY, run `moda auth login --api-key`, or select a profile with an API key.");
       }
       const query = new URLSearchParams;
@@ -195039,7 +194258,7 @@ async function runHarnessCommand(context) {
         query.set("to", context.flags.to);
       const suffix = query.toString() ? `?${query.toString()}` : "";
       const path = subcommand === "list" ? `/harnesses${suffix}` : `/harnesses/${encodeURIComponent(idOrKey)}${subcommand === "show" ? "" : `/${subcommand}`}${suffix}`;
-      context.output.writeData(await callControlAPI(path, {}, profileOptions2));
+      context.output.writeData(await callControlAPI(path, {}, profileOptions));
       return { exitCode: 0 };
     }
     default:
@@ -195111,7 +194330,7 @@ async function runPromptConcernAnalysis(context, rootDir, scanPlan, tenant) {
   const manifest = join10(rootDir, ".moda/prompts.yml");
   let existing = [];
   if (existsSync10(manifest)) {
-    const document = $parseDocument(readFileSync18(manifest, "utf8"));
+    const document = $parseDocument(readFileSync17(manifest, "utf8"));
     if (document.errors.length)
       throw new CliInputError("Invalid prompt manifest.", document.errors[0].message);
     existing = document.toJS({ maxAliasCount: 20 })?.sources ?? [];
@@ -195340,7 +194559,7 @@ function buildExternalAnalystEnv(env) {
   return next;
 }
 function readExternalAnalystReport(rootDir, result, adapter, concern) {
-  const reportPath = resolve14(rootDir, HARNESS_REPORT_PATH);
+  const reportPath = resolve13(rootDir, HARNESS_REPORT_PATH);
   if (existsSync10(reportPath))
     return repairExternalAnalystReport(readHarnessReport(reportPath), rootDir, { concern });
   const output = [
@@ -195355,7 +194574,7 @@ function readExternalAnalystReport(rootDir, result, adapter, concern) {
     return parsed;
   let debugHint = "";
   try {
-    const debugPath = resolve14(rootDir, MODA_DIR, "analyst-debug.log");
+    const debugPath = resolve13(rootDir, MODA_DIR, "analyst-debug.log");
     mkdirSync6(dirname9(debugPath), { recursive: true });
     writeFileSync6(debugPath, [
       `# analyst=${adapter} status=${result.status} signal=${result.signal} timedOut=${result.timedOut} maxBufferExceeded=${result.maxBufferExceeded}`,
@@ -195577,12 +194796,12 @@ function repairCitationLines(report, rootDir) {
     if (citation.type !== "file" && citation.type !== "generated_doc" || !citation.path || !citation.excerpt)
       continue;
     const excerpt2 = citation.excerpt;
-    const candidatePath = resolve14(rootDir, citation.path);
+    const candidatePath = resolve13(rootDir, citation.path);
     if (!existsSync10(candidatePath))
       continue;
     let text;
     try {
-      text = readFileSync18(candidatePath, "utf8");
+      text = readFileSync17(candidatePath, "utf8");
     } catch {
       continue;
     }
@@ -196182,8 +195401,8 @@ function resolveExternalHarnessAnalystInvocation(options) {
 }
 function createPromptAnalystIsolation(adapter, rootDir) {
   const moduleDir = dirname9(fileURLToPath(import.meta.url));
-  const bundled = resolve14(moduleDir, "prompt-source-mcp.js");
-  const source = resolve14(moduleDir, "prompt-source-mcp.ts");
+  const bundled = resolve13(moduleDir, "prompt-source-mcp.js");
+  const source = resolve13(moduleDir, "prompt-source-mcp.ts");
   const bundledServer = existsSync10(bundled);
   const serverPath = bundledServer ? bundled : source;
   const command = bundledServer ? process.execPath : resolveBunRuntime();
@@ -196693,11 +195912,11 @@ function splitCommandLine(commandLine) {
   return commandLine.trim().split(/\s+/).filter(Boolean);
 }
 function truncateText(value, maxLength) {
-  const compact2 = value.replace(/\s+/g, " ").trim();
-  return compact2.length > maxLength ? `${compact2.slice(0, maxLength - 1)}...` : compact2;
+  const compact = value.replace(/\s+/g, " ").trim();
+  return compact.length > maxLength ? `${compact.slice(0, maxLength - 1)}...` : compact;
 }
 function scanHarness(options = {}) {
-  const rootDir = resolve14(options.rootDir ?? process.cwd());
+  const rootDir = resolve13(options.rootDir ?? process.cwd());
   const skipped = [];
   const files = inventoryFiles(rootDir, skipped);
   const annotations = files.flatMap((file) => parseAnnotations(file));
@@ -196799,7 +196018,7 @@ function collectSnapshotInputs(rootDir, maxFiles, maxTextBytes) {
     let text = "";
     if (isTextFile(path)) {
       try {
-        text = readFileSync18(current, "utf8");
+        text = readFileSync17(current, "utf8");
         inventoryTextBytes += Buffer.byteLength(text, "utf8");
       } catch {
         return;
@@ -196812,7 +196031,7 @@ function collectSnapshotInputs(rootDir, maxFiles, maxTextBytes) {
   return inputs;
 }
 function buildSourceSnapshot(rootDir) {
-  const root2 = resolve14(rootDir);
+  const root2 = resolve13(rootDir);
   const maxFiles = numericEnv("MODA_HARNESS_MAX_FILES", DEFAULT_MAX_INVENTORY_FILES);
   const maxTextBytes = numericEnv("MODA_HARNESS_MAX_TEXT_BYTES", DEFAULT_MAX_INVENTORY_TEXT_BYTES);
   const inputs = collectSnapshotInputs(root2, maxFiles, maxTextBytes);
@@ -197022,8 +196241,8 @@ function plannedDryRunRemote(plan) {
 }
 async function syncHarnessWithRemote(context, body) {
   assertHarnessGraphSyncSize(body.graph);
-  const profileOptions2 = { profile: context.profile, env: context.env };
-  const hasApiKey = Boolean(resolveApiKey(profileOptions2));
+  const profileOptions = { profile: context.profile, env: context.env };
+  const hasApiKey = Boolean(resolveApiKey(profileOptions));
   if (context.dryRun && !hasApiKey)
     return;
   return await callControlAPI("/harnesses/sync", {
@@ -197032,14 +196251,14 @@ async function syncHarnessWithRemote(context, body) {
       ...body,
       dryRun: context.dryRun
     })
-  }, profileOptions2);
+  }, profileOptions);
 }
 function readHarnessSyncState(rootDir) {
   const path = join10(rootDir, SYNC_STATE_PATH);
   if (!existsSync10(path))
     return;
   try {
-    const parsed = JSON.parse(readFileSync18(path, "utf8"));
+    const parsed = JSON.parse(readFileSync17(path, "utf8"));
     if (!isRecord4(parsed) || parsed.schemaVersion !== "sync_state.v0.1") {
       return;
     }
@@ -197156,7 +196375,7 @@ function findFresherHarnessReports(rootDir) {
   return fresher.sort((a, b) => b.mtimeMs - a.mtimeMs);
 }
 function warnFresherSubdirHarnessReports(context, rootDir, explicitReport) {
-  const explicitReportPath = explicitReport && explicitReport !== "true" ? normalizePath3(relative8(rootDir, resolve14(rootDir, explicitReport))) : undefined;
+  const explicitReportPath = explicitReport && explicitReport !== "true" ? normalizePath3(relative8(rootDir, resolve13(rootDir, explicitReport))) : undefined;
   if (explicitReportPath && explicitReportPath !== normalizePath3(HARNESS_REPORT_PATH))
     return;
   let fresher;
@@ -197173,7 +196392,7 @@ function warnFresherSubdirHarnessReports(context, rootDir, explicitReport) {
   writeHarnessNotice(context, `A fresher harness report exists at ${newest.path} (this directory has ${rootState}). If you meant that report, re-run with --path=${subdir}.`);
 }
 function readHarnessGraph(manifestPath) {
-  return JSON.parse(readFileSync18(manifestPath, "utf8"));
+  return JSON.parse(readFileSync17(manifestPath, "utf8"));
 }
 function writeHarnessArtifacts(graph, rootDir, options = {}) {
   const modaDir = join10(rootDir, MODA_DIR);
@@ -197358,7 +196577,7 @@ function explainAgent(graph, agent) {
 }
 function inventoryFiles(rootDir, skipped, options = {}) {
   const files = [];
-  const rootReal = resolve14(rootDir);
+  const rootReal = resolve13(rootDir);
   const maxFiles = numericEnv("MODA_HARNESS_MAX_FILES", DEFAULT_MAX_INVENTORY_FILES);
   const maxTextBytes = numericEnv("MODA_HARNESS_MAX_TEXT_BYTES", DEFAULT_MAX_INVENTORY_TEXT_BYTES);
   let textBytes = 0;
@@ -197412,7 +196631,7 @@ function inventoryFiles(rootDir, skipped, options = {}) {
         recordSkipped(skipped, { path: rel2, reason: "scan text budget exceeded" });
       } else {
         try {
-          item.text = readFileSync18(current, "utf8");
+          item.text = readFileSync17(current, "utf8");
           textBytes += Buffer.byteLength(item.text, "utf8");
         } catch {
           recordSkipped(skipped, { path: rel2, reason: "text read failed" });
@@ -197719,7 +196938,7 @@ function maybeAddPromptArtifact(graph, file) {
   if (!isPrompt)
     return;
   const id = stableId2("prompt", file.path);
-  const text = file.text ?? readFileSync18(file.absPath, "utf8");
+  const text = file.text ?? readFileSync17(file.absPath, "utf8");
   upsertArtifact(graph, {
     id,
     type: "prompt",
@@ -198300,7 +197519,7 @@ function detectProviderPackagesInManifests(rootDir) {
   const packageJsonPath = join10(rootDir, "package.json");
   if (existsSync10(packageJsonPath)) {
     try {
-      const deps = packageDependencyNames(readFileSync18(packageJsonPath, "utf8"));
+      const deps = packageDependencyNames(readFileSync17(packageJsonPath, "utf8"));
       for (const provider of PROVIDER_CATALOG) {
         for (const name of provider.packageNames) {
           if (deps.has(name))
@@ -198312,7 +197531,7 @@ function detectProviderPackagesInManifests(rootDir) {
   const pyprojectPath = join10(rootDir, "pyproject.toml");
   if (existsSync10(pyprojectPath)) {
     try {
-      const deps = pyprojectDependencyNames(readFileSync18(pyprojectPath, "utf8"));
+      const deps = pyprojectDependencyNames(readFileSync17(pyprojectPath, "utf8"));
       for (const provider of PROVIDER_CATALOG) {
         for (const name of provider.packageNames) {
           if (deps.has(name.toLowerCase()))
@@ -198695,7 +197914,7 @@ function upsertDeployment(graph, next) {
 }
 function contentHashForAnnotatedSource(sourcePath, annotation) {
   const bodyAnnotation = annotation;
-  const rootCandidate = resolve14(annotation.rootDir, sourcePath);
+  const rootCandidate = resolve13(annotation.rootDir, sourcePath);
   const candidates = [
     rootCandidate,
     ...annotatedSourceCandidates(sourcePath, bodyAnnotation).filter((c) => c !== rootCandidate)
@@ -198729,7 +197948,7 @@ function readSmallTextFileForHash(absPath, rootDir) {
   if (!isTextFile(rel2))
     return;
   try {
-    return readFileSync18(absPath, "utf8");
+    return readFileSync17(absPath, "utf8");
   } catch {
     return;
   }
@@ -198822,4 +198041,4 @@ function hashText(text) {
   return createHash7("sha256").update(text).digest("hex");
 }
 
-export { isPlatformApiKey, setPlatformTenantOverride, apiKeyHeaders, ApiError, callDataAPI, callControlAPI, $isSeq, $parseDocument, $stringify, require_typescript, inspectCodeSelectors, inspectPythonSelectors, resolvePromptSource, backfillPromptSource, HARNESS_REPORT_PATH, HARNESS_REPORT_APPROVAL_PATH, HARNESS_ANALYZE_CONCERNS, validateHarnessReport, readHarnessReport, normalizeHarnessReport, hashHarnessReport, hashStableJson, assertFlags, assertPositionals, runUsersCommand, runUserCommand, runProblemReopenCommand, runSignalsManagementCommand, SIGNALS_MANAGEMENT_SUBCOMMANDS, unknownSignalsSubcommandError, shouldColorTerminalOutput, terminalStyles, stripAnsi2 as stripAnsi, renderMarkdownForTerminal, startRemoteAnalyze, pollRemoteAnalyzeUntilDone, isRecoverableRemoteRun, checkPromptMapping, safePromptEvidencePath, discoverHarnessPromptSources, canonicalText, renderDoctorHuman, renderStatusHuman, renderInitBanner, renderInitStep, renderInitNote, renderInitSetupPlan, renderInitComplete, runHarnessCommand, writeHarnessAnalyzeResult, emitWrittenArtifacts, analyzeHarnessPrompts, repairExternalAnalystReport, deriveRelationshipsFromGraph, mergeDeterministicArtifacts, describeCodingAgentEvent, analystEventProgress, isRetryableExternalAnalystFailure, sleep, summarizeInvalidAnalystReport, isDeterministicLocalAnalyst, resolveHarnessAnalyzeConcern, detectAvailableCodingAgents, codingAgentDisplayName, runCodingAgent, resolveAnalystModel, renderExternalHarnessAnalystPrompt, CONCERN_CANDIDATE_KINDS, SEED_CANDIDATE_KIND_LABELS, renderAnalystCandidateLines, renderAnalystSeedLines, truncateText, scanHarness, summarizeHarness, buildSourceSnapshot, writeHumanProgress, readHarnessSyncState, describeSyncIdentity, describeSyncTenantLabel, findFresherHarnessReports, writeHarnessArtifacts, assertHarnessGraphSyncQuality, graphForSync, inventoryFiles, numericEnv, numericEnvAllowZero, computeDeterministicFloor, stableId2 as stableId, titleFromId2 as titleFromId, promptNameFromPath };
+export { $isSeq, $parseDocument, $stringify, require_typescript, inspectCodeSelectors, inspectPythonSelectors, resolvePromptSource, backfillPromptSource, HARNESS_REPORT_PATH, HARNESS_REPORT_APPROVAL_PATH, HARNESS_ANALYZE_CONCERNS, validateHarnessReport, readHarnessReport, normalizeHarnessReport, hashHarnessReport, hashStableJson, startRemoteAnalyze, pollRemoteAnalyzeUntilDone, isRecoverableRemoteRun, checkPromptMapping, safePromptEvidencePath, discoverHarnessPromptSources, canonicalText, renderDoctorHuman, renderStatusHuman, renderInitBanner, renderInitStep, renderInitNote, renderInitSetupPlan, renderInitComplete, runHarnessCommand, writeHarnessAnalyzeResult, emitWrittenArtifacts, analyzeHarnessPrompts, repairExternalAnalystReport, deriveRelationshipsFromGraph, mergeDeterministicArtifacts, describeCodingAgentEvent, analystEventProgress, isRetryableExternalAnalystFailure, sleep, summarizeInvalidAnalystReport, isDeterministicLocalAnalyst, resolveHarnessAnalyzeConcern, detectAvailableCodingAgents, codingAgentDisplayName, runCodingAgent, resolveAnalystModel, renderExternalHarnessAnalystPrompt, CONCERN_CANDIDATE_KINDS, SEED_CANDIDATE_KIND_LABELS, renderAnalystCandidateLines, renderAnalystSeedLines, truncateText, scanHarness, summarizeHarness, buildSourceSnapshot, writeHumanProgress, readHarnessSyncState, describeSyncIdentity, describeSyncTenantLabel, findFresherHarnessReports, writeHarnessArtifacts, assertHarnessGraphSyncQuality, graphForSync, inventoryFiles, numericEnv, numericEnvAllowZero, computeDeterministicFloor, stableId2 as stableId, titleFromId2 as titleFromId, promptNameFromPath };