@moda-ai/cli 1.55.108 → 1.55.110

package/README.md

@@ -382,9 +382,9 @@ moda registry status                                # registered harness and ver
 moda registry coverage --days=7                     # recent traces vs the registry
 ```
 
-Prompts go to the prompt registry, skills to the skill library (pass `--live`
-or set `"live": true` to serve them), and tools to the tool registry as OpenAI
-function schemas. The v2 sections describe how the harness runs:
+Prompts go to the prompt registry, skills to the skill registry, and tools to
+the tool registry as OpenAI function schemas. The v2 sections describe how the
+harness runs:
 
 - `agents`: each agent's prompt, model and params, tools, skills, handoffs,
   and trace names.

package/dist/{agent-vvefg4bm.js → agent-5kfdbx36.js}

@@ -1,8 +1,8 @@
 import {
   buildDoctorReport
-} from "./cli-eq09n00v.js";
-import"./cli-qwnkv4jy.js";
-import"./cli-xxpaq3n8.js";
+} from "./cli-ew4pkn5b.js";
+import"./cli-bgbtrmtr.js";
+import"./cli-3r578f36.js";
 import"./cli-mm48br00.js";
 import"./cli-764m5azg.js";
 import {
@@ -16,16 +16,16 @@ import {
   readHarnessReport,
   validateHarnessReport
 } from "./cli-krm4w2v9.js";
-import"./cli-13zdcv4w.js";
-import"./cli-2bhhk2nn.js";
+import"./cli-3thzh1mq.js";
+import"./cli-mh94f7gp.js";
 import"./cli-e0kbye4s.js";
-import"./cli-n9ng8mym.js";
+import"./cli-cp8gv24j.js";
 import {
   resolveApiKey,
   resolveIngestUrl,
   resolveModaBaseUrl,
   resolveTenantId
-} from "./cli-1nd4339b.js";
+} from "./cli-tca7sztv.js";
 import {
   CliInputError
 } from "./cli-k4tqwah4.js";
@@ -96,7 +96,7 @@ async function buildAgentContext(context) {
   const graph = readHarnessGraphIfPresent(context.cwd);
   const reportState = readHarnessReportState(context.cwd);
   const syncState = readHarnessSyncState(context.cwd);
-  const harness = graph ? await import("./harness-7s0w2wc9.js") : undefined;
+  const harness = graph ? await import("./harness-phdj0eqr.js") : undefined;
   const topFindings = doctor.checks.filter((check) => check.status === "fail" || check.status === "warning").slice(0, 12).map(checkToFinding);
   const evidenceRefs = [
     ...doctor.checks.map(checkToEvidenceRef),

package/dist/{change-impact-5h3k9kg6.js → change-impact-v2vbcphy.js}

@@ -11,17 +11,17 @@ import {
   resolvedSymbol,
   returnExpressions,
   valueDeclaration
-} from "./cli-r2dxdhg8.js";
+} from "./cli-84jkd2x7.js";
 import"./cli-rpyepjwb.js";
 import"./cli-97fnztpy.js";
 import {
   detectBoundRuntimeClasses
 } from "./cli-krm4w2v9.js";
-import"./cli-13zdcv4w.js";
-import"./cli-2bhhk2nn.js";
+import"./cli-3thzh1mq.js";
+import"./cli-mh94f7gp.js";
 import"./cli-e0kbye4s.js";
-import"./cli-n9ng8mym.js";
-import"./cli-1nd4339b.js";
+import"./cli-cp8gv24j.js";
+import"./cli-tca7sztv.js";
 import"./cli-k4tqwah4.js";
 import {
   require_typescript

package/dist/cli-2fv0q9tx.js

@@ -0,0 +1,141 @@
+// src/skills-manifest.ts
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname, join } from "node:path";
+var SKILLS_MANIFEST_PATH = join(".moda", "skills.yml");
+var SKILL_SOURCE_INTEGRATION_BUNDLED = "integration-bundled";
+var LEGACY_SKILL_SOURCE = "moda";
+function readSkillsManifest(cwd) {
+  const manifestPath = join(cwd, SKILLS_MANIFEST_PATH);
+  if (!existsSync(manifestPath))
+    return null;
+  let text = "";
+  try {
+    text = readFileSync(manifestPath, "utf8");
+  } catch {
+    return null;
+  }
+  return {
+    managedPaths: readManagedPaths(text),
+    records: readSkillRecords(text)
+  };
+}
+function writeSkillsManifest(cwd, records, extraManagedPaths = []) {
+  const manifestPath = join(cwd, SKILLS_MANIFEST_PATH);
+  const managedPaths = [...new Set([...records.flatMap((record) => record.paths), ...extraManagedPaths])].sort();
+  const lines = [
+    "version: 1",
+    `installed_at: ${yamlQuote(new Date().toISOString())}`,
+    "managed_paths:",
+    ...managedPaths.map((path) => `  - ${yamlQuote(path)}`),
+    "skills:",
+    ...records.flatMap((record) => [
+      `  - skill_id: ${yamlQuote(record.skillId)}`,
+      `    content_hash: ${yamlQuote(record.contentHash)}`,
+      `    source: ${yamlQuote(record.source)}`,
+      "    paths:",
+      ...record.paths.map((path) => `      - ${yamlQuote(path)}`)
+    ]),
+    ""
+  ];
+  mkdirSync(dirname(manifestPath), { recursive: true });
+  writeFileSync(manifestPath, lines.join(`
+`));
+}
+function upsertSkillManifestRecord(cwd, record) {
+  const manifest = readSkillsManifest(cwd);
+  const records = (manifest?.records ?? []).filter((existing) => !(existing.skillId === record.skillId && existing.source === record.source));
+  const recordedPaths = new Set((manifest?.records ?? []).flatMap((existing) => existing.paths));
+  const unrecordedPaths = (manifest?.managedPaths ?? []).filter((path) => !recordedPaths.has(path));
+  records.push(record);
+  writeSkillsManifest(cwd, records, unrecordedPaths);
+}
+function readSkillRecords(text) {
+  const records = [];
+  let inSkills = false;
+  let current = null;
+  let inPaths = false;
+  for (const line of text.split(/\r?\n/)) {
+    if (line.trim() === "skills:") {
+      inSkills = true;
+      continue;
+    }
+    if (!inSkills)
+      continue;
+    if (line.length > 0 && !line.startsWith(" "))
+      break;
+    const skillIdMatch = line.match(/^ {2}- skill_id:\s*(.*?)\s*$/);
+    if (skillIdMatch) {
+      if (current)
+        records.push(current);
+      current = {
+        skillId: parseYamlScalar(skillIdMatch[1]),
+        contentHash: "",
+        source: LEGACY_SKILL_SOURCE,
+        paths: []
+      };
+      inPaths = false;
+      continue;
+    }
+    if (!current)
+      continue;
+    const hashMatch = line.match(/^ {4}content_hash:\s*(.*?)\s*$/);
+    if (hashMatch) {
+      current.contentHash = parseYamlScalar(hashMatch[1]);
+      continue;
+    }
+    const sourceMatch = line.match(/^ {4}source:\s*(.*?)\s*$/);
+    if (sourceMatch) {
+      current.source = parseYamlScalar(sourceMatch[1]) || LEGACY_SKILL_SOURCE;
+      continue;
+    }
+    if (/^ {4}paths:\s*$/.test(line)) {
+      inPaths = true;
+      continue;
+    }
+    const pathMatch = inPaths ? line.match(/^ {6}-\s*(.*?)\s*$/) : null;
+    if (pathMatch) {
+      const value = parseYamlScalar(pathMatch[1]);
+      if (value)
+        current.paths.push(value);
+    }
+  }
+  if (current)
+    records.push(current);
+  return records;
+}
+function readManagedPaths(text) {
+  const paths = [];
+  let inManagedPaths = false;
+  for (const line of text.split(/\r?\n/)) {
+    if (line.trim() === "managed_paths:") {
+      inManagedPaths = true;
+      continue;
+    }
+    if (inManagedPaths && line.length > 0 && !line.startsWith(" "))
+      break;
+    if (!inManagedPaths)
+      continue;
+    const match = line.match(/^\s*-\s*(.*?)\s*$/);
+    if (match)
+      paths.push(parseYamlScalar(match[1]));
+  }
+  return paths.filter(Boolean);
+}
+function parseYamlScalar(raw) {
+  const value = raw.trim();
+  if (!value)
+    return "";
+  if (value.startsWith('"')) {
+    try {
+      return String(JSON.parse(value));
+    } catch {
+      return value.replace(/^"|"$/g, "");
+    }
+  }
+  return value.replace(/^'|'$/g, "");
+}
+function yamlQuote(value) {
+  return JSON.stringify(value);
+}
+
+export { SKILL_SOURCE_INTEGRATION_BUNDLED, readSkillsManifest, upsertSkillManifestRecord };

package/dist/{cli-xxpaq3n8.js → cli-3r578f36.js}

@@ -7,14 +7,14 @@ import {
 } from "./cli-764m5azg.js";
 import {
   createCommandContext
-} from "./cli-13zdcv4w.js";
+} from "./cli-3thzh1mq.js";
 import {
   assertFlags,
   assertPositionals
-} from "./cli-2bhhk2nn.js";
+} from "./cli-mh94f7gp.js";
 import {
   callControlAPI
-} from "./cli-n9ng8mym.js";
+} from "./cli-cp8gv24j.js";
 import {
   CliInputError
 } from "./cli-k4tqwah4.js";
@@ -270,7 +270,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const analyzedDefinitions = new Map;
   if (flags["no-analyze"] !== "true") {
     options.onProgress?.("Analyzing prompt sources before sync.");
-    const { analyzeHarnessPrompts } = await import("./harness-7s0w2wc9.js");
+    const { analyzeHarnessPrompts } = await import("./harness-phdj0eqr.js");
     const result = await analyzeHarnessPrompts({
       rootDir: process.cwd(),
       existing: established.flatMap((prompt) => prompt.sourceDefinition ? [prompt.sourceDefinition.source] : []),
@@ -298,7 +298,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const mergedSources = mergePromptSources(manifest.sources, extraSources);
   const manifestUpdate = stableJson(mergedSources) === stableJson(mergePromptSources(manifest.sources, [])) ? undefined : $stringify({ version: 2, prompt_paths: manifest.promptPaths, sources: mergedSources });
   const prompts = await discoverPrompts(extraSources);
-  const { checkPromptAttribution } = await import("./prompt-attribution-c1a5pysf.js");
+  const { checkPromptAttribution } = await import("./prompt-attribution-8ak38a3q.js");
   const attribution = checkPromptAttribution(process.cwd(), prompts.map((prompt) => prompt.key));
   const brokenAttribution = attribution.references.filter((reference) => reference.status === "missing");
   if (brokenAttribution.length) {
@@ -604,7 +604,7 @@ async function migratePromptManifest(options = {}) {
   let addedSources = [];
   let pendingSources = [];
   if (options.discover) {
-    const { analyzeHarnessPrompts } = await import("./harness-7s0w2wc9.js");
+    const { analyzeHarnessPrompts } = await import("./harness-phdj0eqr.js");
     const result = await analyzeHarnessPrompts({
       rootDir: root,
       existing: manifest.sources,

package/dist/{cli-13zdcv4w.js → cli-3thzh1mq.js}

@@ -1,7 +1,7 @@
 import {
   createCliOutput,
   outputModeFromFlags
-} from "./cli-1nd4339b.js";
+} from "./cli-tca7sztv.js";
 
 // src/command-context.ts
 function flagEnabled(flags, key) {

package/dist/{cli-998n4kz9.js → cli-6df723jn.js}

@@ -5,7 +5,7 @@ import {
   resolveApiKey,
   resolveApiKeyFromActiveProfile,
   resolveModaBaseUrl
-} from "./cli-1nd4339b.js";
+} from "./cli-tca7sztv.js";
 
 // src/api-key-auth.ts
 var PROBE_TIMEOUT_MS = 1e4;

package/dist/{cli-5z2f1w5m.js → cli-6zmc6asf.js}

@@ -1,7 +1,7 @@
 import {
   enumerateToolCatalog,
   enumerateWorkflows
-} from "./cli-ekartfps.js";
+} from "./cli-hv4bztsm.js";
 import {
   require_out
 } from "./cli-764m5azg.js";
@@ -34,21 +34,21 @@ import {
   unwrap,
   valueDeclaration,
   visit
-} from "./cli-r2dxdhg8.js";
+} from "./cli-84jkd2x7.js";
 import"./cli-rpyepjwb.js";
 import"./cli-97fnztpy.js";
 import {
   detectBoundRuntimeClasses,
   isTestWorkerConfig
 } from "./cli-krm4w2v9.js";
-import"./cli-13zdcv4w.js";
-import"./cli-2bhhk2nn.js";
+import"./cli-3thzh1mq.js";
+import"./cli-mh94f7gp.js";
 import"./cli-e0kbye4s.js";
-import"./cli-n9ng8mym.js";
+import"./cli-cp8gv24j.js";
 import {
   EXIT_DEGRADED,
   VERSION
-} from "./cli-1nd4339b.js";
+} from "./cli-tca7sztv.js";
 import {
   CliInputError
 } from "./cli-k4tqwah4.js";

package/dist/{cli-ap7wfbnk.js → cli-7gnw6smk.js}

@@ -3,10 +3,10 @@ import {
 } from "./cli-e0kbye4s.js";
 import {
   callDataAPI
-} from "./cli-n9ng8mym.js";
+} from "./cli-cp8gv24j.js";
 import {
   shellArg
-} from "./cli-1nd4339b.js";
+} from "./cli-tca7sztv.js";
 import {
   CliInputError
 } from "./cli-k4tqwah4.js";

package/dist/{cli-r2dxdhg8.js → cli-84jkd2x7.js}

@@ -39,16 +39,16 @@ import {
 import {
   createCommandContext,
   stringOption
-} from "./cli-13zdcv4w.js";
+} from "./cli-3thzh1mq.js";
 import {
   assertFlags,
   assertPositionals,
   requireTenant
-} from "./cli-2bhhk2nn.js";
+} from "./cli-mh94f7gp.js";
 import {
   ApiError,
   callControlAPI
-} from "./cli-n9ng8mym.js";
+} from "./cli-cp8gv24j.js";
 import {
   EXIT_DEGRADED,
   embeddedTenantIdFromApiKey,
@@ -59,7 +59,7 @@ import {
   resolveModaBaseUrl,
   resolveTenantId,
   shellArg
-} from "./cli-1nd4339b.js";
+} from "./cli-tca7sztv.js";
 import {
   CliInputError,
   CliInputRequiredError
@@ -21010,7 +21010,7 @@ async function runHarnessCommand(context) {
     throw new CliInputError(`'moda harness ${subcommand}' has no dry-run mode, so nothing was sent.`, `Remove --dry-run to run it for real. Harness commands with a real dry-run: ${[...HARNESS_DRY_RUN_SUBCOMMANDS].join(", ")}.`);
   }
   if (subcommand === "skeleton" || subcommand === "skeleton-diff") {
-    const { runSkeletonCommand } = await import("./cli-5z2f1w5m.js");
+    const { runSkeletonCommand } = await import("./cli-6zmc6asf.js");
     return runSkeletonCommand(context);
   }
   if (subcommand === "register")
@@ -21022,7 +21022,7 @@ async function runHarnessCommand(context) {
     assertPositionals("harness impact", context.positionals, 1, "moda harness impact --from=<commit> --to=<commit>");
     if (!context.flags.from)
       throw new CliInputError("harness impact requires --from=<old-commit>.");
-    const { localChangeImpact, readRecordedImpactCalls } = await import("./change-impact-5h3k9kg6.js");
+    const { localChangeImpact, readRecordedImpactCalls } = await import("./change-impact-v2vbcphy.js");
     const result = localChangeImpact({
       checkout: resolve10(context.cwd, context.flags.path ?? "."),
       from: context.flags.from,
@@ -21294,7 +21294,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-1hq2ed0v.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-e4zrcrym.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);
@@ -21445,8 +21445,8 @@ async function runHarnessCommand(context) {
         }
         const { artifacts, unknowns, canonicalAgentIdentities } = deterministicGraphItems(rootDir, promote === "all" ? undefined : promote);
         tagComponentStatus({ runtimeAgents: [], artifacts }, rootDir);
-        const { extractHarnessWithContext: extractHarnessWithContext2 } = await import("./index-9adksf01.js");
-        const { enumerateHarnessComponents, mergeEnumeratedComponents } = await import("./index-n1jx9hta.js");
+        const { extractHarnessWithContext: extractHarnessWithContext2 } = await import("./index-65grk0mp.js");
+        const { enumerateHarnessComponents, mergeEnumeratedComponents } = await import("./index-86wb6vbh.js");
         let components = { runtimeAgents: [], artifacts: [], warnings: [] };
         if (promote === "all" || promote === "topology" || promote === "tools") {
           const { result, ctx } = extractHarnessWithContext2(rootDir);
@@ -21518,8 +21518,8 @@ async function runHarnessCommand(context) {
     }
     case "extract": {
       writeHumanProgress(context, "Harness extract: tracing model call sites (no LLM, no network)...");
-      const { extractHarnessWithContext: extractHarnessWithContext2, serializeExtractResult } = await import("./index-9adksf01.js");
-      const { enumerateHarnessComponents, mergeEnumeratedComponents } = await import("./index-n1jx9hta.js");
+      const { extractHarnessWithContext: extractHarnessWithContext2, serializeExtractResult } = await import("./index-65grk0mp.js");
+      const { enumerateHarnessComponents, mergeEnumeratedComponents } = await import("./index-86wb6vbh.js");
       const { result, ctx } = extractHarnessWithContext2(rootDir, { fresh: true });
       const items = deterministicGraphItems(rootDir);
       const artifacts = items.artifacts;
@@ -22426,8 +22426,8 @@ var CONCERN_PROMOTED_ARTIFACT_TYPES = {
   evals: new Set(["model_config", "eval"])
 };
 async function deterministicFloorGraph(rootDir, options = {}) {
-  const { extractHarnessWithContext: extractHarnessWithContext2 } = await import("./index-9adksf01.js");
-  const { enumerateHarnessComponents, mergeEnumeratedComponents } = await import("./index-n1jx9hta.js");
+  const { extractHarnessWithContext: extractHarnessWithContext2 } = await import("./index-65grk0mp.js");
+  const { enumerateHarnessComponents, mergeEnumeratedComponents } = await import("./index-86wb6vbh.js");
   const { result, ctx } = extractHarnessWithContext2(rootDir);
   const items = deterministicGraphItems(rootDir);
   const components = mergeEnumeratedComponents(items.artifacts, enumerateHarnessComponents(result, ctx));

package/dist/{cli-mc3z77bv.js → cli-8qtxp95w.js}

@@ -2,7 +2,7 @@ import {
   SKILL_SOURCE_INTEGRATION_BUNDLED,
   readSkillsManifest,
   upsertSkillManifestRecord
-} from "./cli-qm5b1vck.js";
+} from "./cli-2fv0q9tx.js";
 import {
   detectAgents
 } from "./cli-rjav0vj1.js";