@moda-ai/cli 1.55.11 → 1.55.12

package/dist/{agent-n0ch2j90.js → agent-rd9deae9.js}

@@ -1,8 +1,8 @@
 import {
   buildDoctorReport
-} from "./cli-11fevr8y.js";
-import"./cli-t4jjhn3g.js";
-import"./cli-fq7kk77e.js";
+} from "./cli-34zdvcpg.js";
+import"./cli-ssqb8bfw.js";
+import"./cli-90hb4ng0.js";
 import"./cli-mm48br00.js";
 import {
   HARNESS_REPORT_APPROVAL_PATH,
@@ -14,19 +14,19 @@ import {
   readHarnessSyncState,
   summarizeHarness,
   validateHarnessReport
-} from "./cli-m857n028.js";
+} from "./cli-m0fa54ny.js";
 import"./cli-97fnztpy.js";
-import"./cli-k5qqj2bp.js";
-import"./cli-g7ferymy.js";
-import"./cli-tmqd1f0m.js";
-import"./cli-m16taf4z.js";
+import"./cli-4x9w6ey7.js";
+import"./cli-k7vwt56h.js";
+import"./cli-ryd7nzke.js";
+import"./cli-09rr5smg.js";
 import {
   CliInputError,
   resolveApiKey,
   resolveIngestUrl,
   resolveModaBaseUrl,
   resolveTenantId
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import"./cli-0v6na3yp.js";
 
 // src/agent.ts

package/dist/{cli-m16taf4z.js → cli-09rr5smg.js}

@@ -1,6 +1,6 @@
 import {
   resolveTenantId
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 
 // src/api-key-headers.ts
 var PLATFORM_API_KEY_PREFIX = "moda_pk_";

package/dist/{cli-11fevr8y.js → cli-34zdvcpg.js}

@@ -1,19 +1,19 @@
 import {
   isAuthSessionValid,
   loadAuthSession
-} from "./cli-t4jjhn3g.js";
+} from "./cli-ssqb8bfw.js";
 import {
   inspectPromptManifest
-} from "./cli-fq7kk77e.js";
+} from "./cli-90hb4ng0.js";
 import {
   readHarnessSyncState,
   renderDoctorHuman,
   renderStatusHuman,
   scanHarness
-} from "./cli-m857n028.js";
+} from "./cli-m0fa54ny.js";
 import {
   callDataAPI
-} from "./cli-tmqd1f0m.js";
+} from "./cli-ryd7nzke.js";
 import {
   ensureSecretFilePermissions,
   getActiveProfile,
@@ -27,7 +27,7 @@ import {
   resolveSecretReference,
   resolveTenantId,
   secretFilePathFromRef
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 
 // src/doctor.ts
 import { createHash } from "node:crypto";

package/dist/{cli-k5qqj2bp.js → cli-4x9w6ey7.js}

@@ -1,7 +1,7 @@
 import {
   createCliOutput,
   outputModeFromFlags
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 
 // src/command-context.ts
 function flagEnabled(flags, key) {

package/dist/{cli-fq7kk77e.js → cli-90hb4ng0.js}

@@ -12,28 +12,28 @@ import {
   require_typescript,
   resolvePromptSource,
   safePromptEvidencePath
-} from "./cli-m857n028.js";
+} from "./cli-m0fa54ny.js";
 import {
   createCommandContext
-} from "./cli-k5qqj2bp.js";
+} from "./cli-4x9w6ey7.js";
 import {
   assertFlags,
   assertPositionals
-} from "./cli-g7ferymy.js";
+} from "./cli-k7vwt56h.js";
 import {
   callControlAPI,
   callDataAPI
-} from "./cli-tmqd1f0m.js";
+} from "./cli-ryd7nzke.js";
 import {
   setPlatformTenantOverride
-} from "./cli-m16taf4z.js";
+} from "./cli-09rr5smg.js";
 import {
   CliInputError,
   EXIT_ERROR,
   EXIT_OK,
   resolveApiTenantId,
   validateConfig
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import {
   __commonJS,
   __require,
@@ -6731,7 +6731,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const analyzedDefinitions = new Map;
   if (flags["no-analyze"] !== "true") {
     options.onProgress?.("Analyzing prompt sources before sync.");
-    const { analyzeHarnessPrompts } = await import("./harness-jbqpbp6n.js");
+    const { analyzeHarnessPrompts } = await import("./harness-9psndqtm.js");
     const result = await analyzeHarnessPrompts({
       rootDir: process.cwd(),
       existing: established.flatMap((prompt) => prompt.sourceDefinition ? [prompt.sourceDefinition.source] : []),
@@ -7061,7 +7061,7 @@ async function migratePromptManifest(options = {}) {
   let addedSources = [];
   let pendingSources = [];
   if (options.discover) {
-    const { analyzeHarnessPrompts } = await import("./harness-jbqpbp6n.js");
+    const { analyzeHarnessPrompts } = await import("./harness-9psndqtm.js");
     const result = await analyzeHarnessPrompts({
       rootDir: root,
       existing: manifest.sources,

package/dist/{cli-n9gexgma.js → cli-bfmn3bsk.js}

@@ -1,7 +1,7 @@
 import {
   authFetch,
   getCachedLoginContext
-} from "./cli-t4jjhn3g.js";
+} from "./cli-ssqb8bfw.js";
 import {
   CliAccessError,
   CliInputError,
@@ -16,7 +16,7 @@ import {
   resolveTenantIdFromActiveProfile,
   saveCliConfig,
   writeSecretJsonFile
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 
 // src/init/tenant.ts
 import { randomUUID } from "node:crypto";

package/dist/{cli-g7ferymy.js → cli-k7vwt56h.js}

@@ -2,18 +2,18 @@ import {
   ApiError,
   callControlAPI,
   callDataAPI
-} from "./cli-tmqd1f0m.js";
+} from "./cli-ryd7nzke.js";
 import {
   isPlatformApiKey,
   setPlatformTenantOverride
-} from "./cli-m16taf4z.js";
+} from "./cli-09rr5smg.js";
 import {
   CliAccessError,
   CliInputError,
   embeddedTenantIdFromApiKey,
   resolveApiKey,
   resolveApiTenantId
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 
 // src/parity-commands.ts
 import { readFileSync } from "node:fs";

package/dist/{cli-429zt7g4.js → cli-kwz900s4.js}

@@ -576,6 +576,19 @@ class CliAuthError extends Error {
   usage;
 }
 
+class CliNotFoundError extends Error {
+  entity;
+  id;
+  usage;
+  constructor(entity, id, message, usage) {
+    super(message ?? `No ${entity} found for id "${id}" in this tenant.`);
+    this.entity = entity;
+    this.id = id;
+    this.usage = usage;
+    this.name = "CliNotFoundError";
+  }
+}
+
 class CliCancellationError extends Error {
   constructor(message) {
     super(message);
@@ -588,6 +601,12 @@ function isNetworkLikeError(error) {
 function isApiLikeError(error) {
   return error instanceof Error && (error.name === "ApiError" || ("statusCode" in error) && typeof error.statusCode === "number");
 }
+function apiErrorStatus(error) {
+  if (!isApiLikeError(error))
+    return;
+  const status = error.statusCode;
+  return typeof status === "number" ? status : undefined;
+}
 
 // src/config.ts
 import { readFileSync as readFileSync2 } from "node:fs";
@@ -640,9 +659,9 @@ function resolveModaBaseUrl(options = {}) {
 }
 function validateConfig() {
   if (!resolveApiKey()) {
-    throw new CliAuthError('No Moda API key found. Set MODA_API_KEY or run "moda init".', {
+    throw new CliAuthError('No Moda API key found. Set MODA_API_KEY=moda_sk_... in the environment, save one with "moda auth login --api-key", or run "moda init" for interactive setup.', {
       reason: "no_stored_credentials",
-      login_command: ["moda", "init"]
+      login_command: ["moda", "auth", "login", "--api-key"]
     }, "Get your API key from https://moda.dev/settings");
   }
 }
@@ -1004,9 +1023,16 @@ import { randomUUID } from "node:crypto";
 import { lstatSync, mkdirSync as mkdirSync2, readdirSync, unlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
 import { tmpdir } from "node:os";
 import { join as join2 } from "node:path";
+var agentUpdateNotice;
+function setAgentUpdateNotice(notice) {
+  agentUpdateNotice = notice;
+}
+function resolveAgentUpdateNotice() {
+  return typeof agentUpdateNotice === "function" ? agentUpdateNotice() : agentUpdateNotice;
+}
 var AGENT_SCHEMA_VERSION = "moda.agent.v1";
 var AGENT_EVENT_SCHEMA_VERSION = "moda.agent_event.v1";
-var FEEDBACK_TIP = 'Help us improve! If a result in this response looks wrong or is missing data, flag it: moda feedback "<describe what looked wrong>" [--category=...] [--conversation-id=... | --cluster-id=... | --tool-name=...]. Only submit genuine observations.';
+var FEEDBACK_TIP = 'If a result looks wrong or is missing data: moda feedback "<what looked wrong>"';
 var EXIT_OK = 0;
 var EXIT_ERROR = 1;
 var EXIT_DEGRADED = 3;
@@ -1024,7 +1050,8 @@ var AGENT_ERROR_CODES = [
   "access_denied",
   "unknown_error",
   "cloud_unavailable",
-  "output_error"
+  "output_error",
+  "not_found"
 ];
 var FALLBACK_RUN_ID = randomUUID();
 var fallbackSeq = 0;
@@ -1139,8 +1166,10 @@ function createCliOutput(options) {
     startedAt: Date.now(),
     lastEventAt: Date.now()
   };
-  const emitEvent = (event) => {
-    if (options.quiet || options.mode !== "agent-stream")
+  const emitEvent = (event, { bypassQuiet = false } = {}) => {
+    if (options.mode !== "agent-stream")
+      return;
+    if (options.quiet && !bypassQuiet)
       return;
     if (state.terminal)
       return;
@@ -1156,16 +1185,19 @@ function createCliOutput(options) {
     safeWriteStdout(`${JSON.stringify(createAgentEvent(options.command, event, state))}
 `);
   };
-  const ensureStarted = () => {
-    if (options.mode !== "agent-stream" || state.started || options.quiet)
+  const ensureStarted = ({ bypassQuiet = false } = {}) => {
+    if (options.mode !== "agent-stream" || state.started)
+      return;
+    if (options.quiet && !bypassQuiet)
       return;
-    startHeartbeat(options.command, state);
+    if (!options.quiet)
+      startHeartbeat(options.command, state);
     emitEvent({
       event: "started",
       phase: options.command,
       message: `Starting ${options.command}.`,
       elapsed_ms: 0
-    });
+    }, { bypassQuiet });
   };
   const writeEnvelope = (data, writeOptions = {}) => {
     return createAgentEnvelope({
@@ -1175,7 +1207,8 @@ function createCliOutput(options) {
       meta: {
         ...writeOptions.meta ?? {},
         run_id: state.runId,
-        ...options.command === "feedback" ? {} : { tip: FEEDBACK_TIP }
+        ...options.command === "feedback" ? {} : { tip: FEEDBACK_TIP },
+        ...((update) => update ? { update } : {})(resolveAgentUpdateNotice())
       },
       summary: writeOptions.summary,
       findings: writeOptions.findings,
@@ -1235,12 +1268,12 @@ function createCliOutput(options) {
       emitEvent(event);
     },
     writeError(error) {
-      if (options.quiet || state.terminal)
+      if (state.terminal)
         return;
       const agentError = errorToAgentError(error);
       const envelope = createAgentErrorEnvelope(options.command || "unknown", agentError, state.runId, errorWarnings(error));
       if (options.mode === "agent-stream") {
-        ensureStarted();
+        ensureStarted({ bypassQuiet: true });
         if (error instanceof CliInputRequiredError) {
           emitEvent({
             event: "needs_input",
@@ -1249,18 +1282,18 @@ function createCliOutput(options) {
             error: agentError,
             input_request: error.input_request,
             result: envelope
-          });
+          }, { bypassQuiet: true });
           return;
         }
-        if (error instanceof CliAuthError) {
+        if (error instanceof CliAuthError || agentError.code === "auth_required") {
           emitEvent({
             event: "auth_required",
             status: "error",
-            message: error.message,
+            message: agentError.message,
             error: agentError,
-            auth: error.auth,
+            auth: error instanceof CliAuthError ? error.auth : agentError.auth,
             result: envelope
-          });
+          }, { bypassQuiet: true });
           return;
         }
         if (error instanceof CliCancellationError) {
@@ -1270,7 +1303,7 @@ function createCliOutput(options) {
             message: error.message,
             error: agentError,
             result: envelope
-          });
+          }, { bypassQuiet: true });
           return;
         }
         emitEvent({
@@ -1279,7 +1312,7 @@ function createCliOutput(options) {
           message: agentError.message,
           error: agentError,
           result: envelope
-        });
+        }, { bypassQuiet: true });
         return;
       }
       if (options.mode === "agent" || options.mode === "json") {
@@ -1549,6 +1582,20 @@ function formatValidationMessage(error) {
   });
   return `Validation error — ${[...new Set(parts)].join("; ")}`;
 }
+var API_KEY_RECOVERY = "Set MODA_API_KEY=moda_sk_... in the environment, or save one with `moda auth login --api-key` (reads MODA_API_KEY or --api-key-stdin). Keys: https://moda.dev/settings";
+function serverErrorMessage(error) {
+  const body = error.responseBody;
+  if (typeof body !== "string" || !body.trimStart().startsWith("{"))
+    return;
+  try {
+    const message = JSON.parse(body).message;
+    if (typeof message === "string" && message.trim())
+      return message.trim().replace(/\.$/, "");
+    if (Array.isArray(message))
+      return message.filter((m) => typeof m === "string").join("; ") || undefined;
+  } catch {}
+  return;
+}
 function errorToAgentError(error) {
   if (error instanceof CliInputRequiredError) {
     return {
@@ -1580,6 +1627,15 @@ function errorToAgentError(error) {
       blocking: true
     };
   }
+  if (error instanceof CliNotFoundError) {
+    return {
+      code: "not_found",
+      message: error.message,
+      cause: error.usage,
+      suggested_commands: error.usage ? extractSuggestedCommands(error.usage) : undefined,
+      blocking: true
+    };
+  }
   if (error instanceof CliAccessError) {
     return {
       code: "access_denied",
@@ -1598,6 +1654,24 @@ function errorToAgentError(error) {
         blocking: true
       };
     }
+    if (apiErrorStatus(error) === 401) {
+      return {
+        code: "auth_required",
+        message: "The Moda API rejected the API key (HTTP 401): it is invalid, revoked, or for another environment.",
+        cause: API_KEY_RECOVERY,
+        suggested_commands: ["moda auth login --api-key", "moda auth status --online"],
+        auth: { reason: "api_key_rejected", login_command: ["moda", "auth", "login", "--api-key"] },
+        blocking: true
+      };
+    }
+    if (apiErrorStatus(error) === 403) {
+      return {
+        code: "access_denied",
+        message: `The Moda API refused this request (HTTP 403): ${serverErrorMessage(error) ?? "the API key does not allow it"}.`,
+        cause: "Read-only keys cannot run writes, and organization keys cannot select another tenant. Use a key with the needed access.",
+        blocking: true
+      };
+    }
     if (isApiLikeError(error)) {
       const statusCode = "statusCode" in error ? error.statusCode : undefined;
       const typedCode = "code" in error && typeof error.code === "string" ? error.code : undefined;
@@ -1871,4 +1945,4 @@ function extractSuggestedCommands(text) {
   return commands.length > 0 ? commands : undefined;
 }
 
-export { PROD_BASE_URL, DEFAULT_INGEST_URL, getModaPaths, getModaDir, isLoopbackBaseUrl, describeBaseUrlSource, loadProfileConfig, saveProfileConfig, getActiveProfile, setActiveProfile, upsertProfile, clearStoredApiKeyCredentials, secretFilePathFromRef, resolveSecretReference, resolveApiKeyFromActiveProfile, resolveTenantIdFromActiveProfile, ensureSecretFilePermissions, writeSecretJsonFile, CliInputError, CliAccessError, CliInputRequiredError, CliAuthError, CliCancellationError, isNetworkLikeError, isApiLikeError, VERSION, MODA_BASE_URL, loadCliConfig, saveCliConfig, resolveApiKey, embeddedTenantIdFromApiKey, resolveIngestUrl2 as resolveIngestUrl, resolveTenantId, resolveApiTenantId, resolveModaBaseUrl, validateConfig, recordApiRequest, getApiRequestCount, resetApiRequestCount, MAX_SCANNED_FILE_BYTES, DEFAULT_MAX_INVENTORY_FILES, DEFAULT_MAX_INVENTORY_TEXT_BYTES, MAX_RECORDED_SKIPS, SKIPPED_DIRS, isSkippedDir, isSkippedPathPrefix, isEvalLikePath, shouldInventoryFile, isTextFile, isSecretishPath, SECRET_KEYS, redactDeep, redactString, packSnapshot, EXIT_OK, EXIT_ERROR, EXIT_DEGRADED, EXIT_AUTH_REQUIRED, EXIT_INPUT_REQUIRED, EXIT_CANCELLED, AGENT_ERROR_CODES, wasOutputCancelled, safeWriteStdout, safeWriteStderr, explicitOutputMode, outputModeFromFlags, resolveOutputMode, createCliOutput, agentEnvelopeFits, agentMaxOutputBytes };
+export { PROD_BASE_URL, DEFAULT_INGEST_URL, getModaPaths, getModaDir, isLoopbackBaseUrl, describeBaseUrlSource, loadProfileConfig, saveProfileConfig, getActiveProfile, setActiveProfile, upsertProfile, clearStoredApiKeyCredentials, secretFilePathFromRef, resolveSecretReference, resolveApiKeyFromActiveProfile, resolveTenantIdFromActiveProfile, ensureSecretFilePermissions, writeSecretJsonFile, CliInputError, CliAccessError, CliInputRequiredError, CliAuthError, CliNotFoundError, CliCancellationError, isNetworkLikeError, isApiLikeError, apiErrorStatus, VERSION, MODA_BASE_URL, loadCliConfig, saveCliConfig, resolveApiKey, embeddedTenantIdFromApiKey, resolveIngestUrl2 as resolveIngestUrl, resolveTenantId, resolveApiTenantId, resolveModaBaseUrl, validateConfig, recordApiRequest, getApiRequestCount, resetApiRequestCount, MAX_SCANNED_FILE_BYTES, DEFAULT_MAX_INVENTORY_FILES, DEFAULT_MAX_INVENTORY_TEXT_BYTES, MAX_RECORDED_SKIPS, SKIPPED_DIRS, isSkippedDir, isSkippedPathPrefix, isEvalLikePath, shouldInventoryFile, isTextFile, isSecretishPath, SECRET_KEYS, redactDeep, redactString, packSnapshot, setAgentUpdateNotice, EXIT_OK, EXIT_ERROR, EXIT_DEGRADED, EXIT_AUTH_REQUIRED, EXIT_INPUT_REQUIRED, EXIT_CANCELLED, AGENT_ERROR_CODES, wasOutputCancelled, safeWriteStdout, safeWriteStderr, explicitOutputMode, outputModeFromFlags, resolveOutputMode, createCliOutput, agentEnvelopeFits, agentMaxOutputBytes };

package/dist/{cli-m857n028.js → cli-m0fa54ny.js}

@@ -4,16 +4,16 @@ import {
 import {
   createCommandContext,
   stringOption
-} from "./cli-k5qqj2bp.js";
+} from "./cli-4x9w6ey7.js";
 import {
   assertFlags,
   assertPositionals,
   requireTenant
-} from "./cli-g7ferymy.js";
+} from "./cli-k7vwt56h.js";
 import {
   ApiError,
   callControlAPI
-} from "./cli-tmqd1f0m.js";
+} from "./cli-ryd7nzke.js";
 import {
   CliInputError,
   CliInputRequiredError,
@@ -39,7 +39,7 @@ import {
   resolveModaBaseUrl,
   resolveTenantId,
   shouldInventoryFile
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import {
   __commonJS,
   __require,
@@ -193996,7 +193996,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-mtksqp3c.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-nph5t2s7.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);

package/dist/{cli-tmqd1f0m.js → cli-ryd7nzke.js}

@@ -1,11 +1,11 @@
 import {
   apiKeyHeaders
-} from "./cli-m16taf4z.js";
+} from "./cli-09rr5smg.js";
 import {
   recordApiRequest,
   resolveApiKey,
   resolveModaBaseUrl
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 
 // src/api-client.ts
 var REQUEST_TIMEOUT_MS = 30000;

package/dist/{cli-t4jjhn3g.js → cli-ssqb8bfw.js}

@@ -8,7 +8,7 @@ import {
   saveProfileConfig,
   secretFilePathFromRef,
   writeSecretJsonFile
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import {
   __require
 } from "./cli-0v6na3yp.js";

package/dist/{cli-fwec3m42.js → cli-y8gbbe9k.js}

@@ -1,20 +1,20 @@
 import {
   createCommandContext
-} from "./cli-k5qqj2bp.js";
+} from "./cli-4x9w6ey7.js";
 import {
   assertFlags,
   assertPositionals
-} from "./cli-g7ferymy.js";
+} from "./cli-k7vwt56h.js";
 import {
   callControlAPI
-} from "./cli-tmqd1f0m.js";
+} from "./cli-ryd7nzke.js";
 import {
   CliInputError,
   recordApiRequest,
   resolveApiKey,
   resolveIngestUrl,
   resolveTenantId
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import {
   SKILL_SOURCE_HARNESS,
   SKILL_SOURCE_INTEGRATION_BUNDLED,

package/dist/cli.js

@@ -13,7 +13,7 @@ import {
 import {
   createCommandContext,
   parseBooleanFlagValue
-} from "./cli-k5qqj2bp.js";
+} from "./cli-4x9w6ey7.js";
 import {
   SIGNALS_MANAGEMENT_SUBCOMMANDS,
   assertFlags,
@@ -23,17 +23,17 @@ import {
   runUserCommand,
   runUsersCommand,
   unknownSignalsSubcommandError
-} from "./cli-g7ferymy.js";
+} from "./cli-k7vwt56h.js";
 import {
   ApiError,
   callControlAPI,
   callDataAPI
-} from "./cli-tmqd1f0m.js";
+} from "./cli-ryd7nzke.js";
 import {
   apiKeyHeaders,
   isPlatformApiKey,
   setPlatformTenantOverride
-} from "./cli-m16taf4z.js";
+} from "./cli-09rr5smg.js";
 import {
   AGENT_ERROR_CODES,
   CliAccessError,
@@ -41,6 +41,7 @@ import {
   CliCancellationError,
   CliInputError,
   CliInputRequiredError,
+  CliNotFoundError,
   EXIT_AUTH_REQUIRED,
   EXIT_CANCELLED,
   EXIT_DEGRADED,
@@ -51,6 +52,7 @@ import {
   VERSION,
   agentEnvelopeFits,
   agentMaxOutputBytes,
+  apiErrorStatus,
   createCliOutput,
   embeddedTenantIdFromApiKey,
   getApiRequestCount,
@@ -65,9 +67,10 @@ import {
   resolveOutputMode,
   safeWriteStderr,
   safeWriteStdout,
+  setAgentUpdateNotice,
   validateConfig,
   wasOutputCancelled
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import {
   __require
 } from "./cli-0v6na3yp.js";
@@ -897,6 +900,10 @@ async function startUpdateCheck(options = {}, now = Date.now()) {
     clearTimeout(timeout);
   }
 }
+function getAvailableUpdate(options = {}) {
+  const cache = readCache(options);
+  return cache && isNewerVersion(cache.latest, VERSION) ? cache.latest : undefined;
+}
 function getUpdateNotice(options = {}) {
   const cache = readCache(options);
   if (!cache || !isNewerVersion(cache.latest, VERSION)) {
@@ -1660,7 +1667,7 @@ var agentAuthSchema = {
   properties: {
     reason: {
       type: "string",
-      enum: ["no_stored_credentials", "token_expired", "token_revoked", "renew_failed"]
+      enum: ["no_stored_credentials", "token_expired", "token_revoked", "renew_failed", "api_key_rejected"]
     },
     login_command: { type: "array", items: { type: "string" } },
     resume_command: { type: "array", items: { type: "string" } }
@@ -1934,6 +1941,8 @@ async function finishRun(context, outcome) {
 function exitCodeForError(error) {
   if (error instanceof CliAuthError)
     return EXIT_AUTH_REQUIRED;
+  if (apiErrorStatus(error) === 401)
+    return EXIT_AUTH_REQUIRED;
   if (error instanceof CliInputRequiredError)
     return EXIT_INPUT_REQUIRED;
   if (error instanceof CliCancellationError)
@@ -2072,46 +2081,46 @@ function exitCodesForCommand(command) {
 import { fileURLToPath } from "url";
 import { realpathSync } from "fs";
 async function runPromptsCommand(...args) {
-  return (await import("./prompts-y3xd9heh.js")).runPromptsCommand(...args);
+  return (await import("./prompts-mzazn8ce.js")).runPromptsCommand(...args);
 }
 async function runSkillsCommand(...args) {
-  return (await import("./skills-1k0hbkaf.js")).runSkillsCommand(...args);
+  return (await import("./skills-sagxq9sc.js")).runSkillsCommand(...args);
 }
 async function runFixCommand(...args) {
-  return (await import("./fix-ax6bbg37.js")).runFixCommand(...args);
+  return (await import("./fix-bt5zn07e.js")).runFixCommand(...args);
 }
 async function runFixesCommand(...args) {
-  return (await import("./fix-ax6bbg37.js")).runFixesCommand(...args);
+  return (await import("./fix-bt5zn07e.js")).runFixesCommand(...args);
 }
 async function runHarnessCommand(...args) {
-  return (await import("./harness-jbqpbp6n.js")).runHarnessCommand(...args);
+  return (await import("./harness-9psndqtm.js")).runHarnessCommand(...args);
 }
 async function runSyncCommand(...args) {
-  return (await import("./sync-by81xqk4.js")).runSyncCommand(...args);
+  return (await import("./sync-gkwexz68.js")).runSyncCommand(...args);
 }
 async function runRegistryCommand(...args) {
-  return (await import("./registry-1dvxsekd.js")).runRegistryCommand(...args);
+  return (await import("./registry-mbz65bjy.js")).runRegistryCommand(...args);
 }
 async function runDoctorCommand(...args) {
-  return (await import("./doctor-spvy2zb3.js")).runDoctorCommand(...args);
+  return (await import("./doctor-8yb6r66e.js")).runDoctorCommand(...args);
 }
 async function runStatusCommand(...args) {
-  return (await import("./doctor-spvy2zb3.js")).runStatusCommand(...args);
+  return (await import("./doctor-8yb6r66e.js")).runStatusCommand(...args);
 }
 async function runAuthCommand(...args) {
-  return (await import("./profile-commands-f6599bcx.js")).runAuthCommand(...args);
+  return (await import("./profile-commands-2g5bjzj2.js")).runAuthCommand(...args);
 }
 async function runConfigCommand(...args) {
-  return (await import("./profile-commands-f6599bcx.js")).runConfigCommand(...args);
+  return (await import("./profile-commands-2g5bjzj2.js")).runConfigCommand(...args);
 }
 async function runProfilesCommand(...args) {
-  return (await import("./profile-commands-f6599bcx.js")).runProfilesCommand(...args);
+  return (await import("./profile-commands-2g5bjzj2.js")).runProfilesCommand(...args);
 }
 async function runAgentCommand(...args) {
-  return (await import("./agent-n0ch2j90.js")).runAgentCommand(...args);
+  return (await import("./agent-rd9deae9.js")).runAgentCommand(...args);
 }
 async function runProductionCommand(...args) {
-  return (await import("./production-intelligence-1tf98n79.js")).runProductionCommand(...args);
+  return (await import("./production-intelligence-mg3qp2dg.js")).runProductionCommand(...args);
 }
 function parseArgs(argv) {
   const args = argv.slice(2);
@@ -2455,7 +2464,8 @@ Output auto-detection (no flags needed):
   Piped/redirected stdout, CI, or an agent env (CLAUDECODE/CURSOR/MODA_AGENT)
   => schema-versioned agent JSON. An interactive terminal => human prose.
   Override with the flags above or MODA_FORMAT=human|json|agent|agent-stream.
-  Exit codes: 0 ok, 3 degraded (local fallback), 1 error.
+  Exit codes: 0 ok, 1 error (errors[0].code says which, e.g. not_found), 3 degraded (local fallback),
+  4 auth required (no key or key rejected), 5 input required, 130 cancelled.
   --dry-run                        Show the planned mutation when supported
   --yes                            Accept explicit automation defaults
   --tui                            Force the human analyst dashboard when supported
@@ -2800,12 +2810,24 @@ async function printWithOptionalWindows(enriched, listKey, includeWindow, window
     data = finalize(data, allWarnings);
   output.writeData(data, allWarnings.length > 0 ? { warnings: allWarnings } : undefined);
 }
-function notFoundWarning(entity, id, isMissing) {
+var NOT_FOUND_HINTS = {
+  trace: 'Find trace ids with: moda search "<text>" or moda traces --search=<text>',
+  cluster: "List cluster node ids with: moda clusters",
+  problem: "List problem ids with: moda problems"
+};
+function throwIfNotFound(entity, id, isMissing, message) {
   if (!isMissing)
-    return [];
-  return [
-    `No ${entity} found for id "${id}" — it may not exist in this tenant (the Data API returns an empty result rather than an error for unknown ids).`
-  ];
+    return;
+  throw new CliNotFoundError(entity, id, message, NOT_FOUND_HINTS[entity]);
+}
+function noWorldStateWarnings(conversationId, isMissing) {
+  if (!isMissing)
+    return;
+  return {
+    warnings: [
+      `No world state for trace "${conversationId}": the trace may not exist in this tenant, or its world state has not been generated yet. Check the trace exists with: moda context ${conversationId} --metadata-only`
+    ]
+  };
 }
 var AUDIT_DEFAULT_LIMIT = 200;
 var AUDIT_MAX_LIMIT = 1000;
@@ -3657,6 +3679,7 @@ async function readFullTranscript(conversationId, opts = {}) {
     nextFrom = end < total && messages.length > 0 ? end : null;
     warnings.push(`This Moda server has no range reads for context (older backend), so --all fell back to windowed paging and stopped at ${LEGACY_WINDOW_MAX_MESSAGES} messages to keep it cheap.`);
   }
+  throwIfNotFound("trace", conversationId, total === 0);
   const pageSize = legacy ? LEGACY_WINDOW_MAX_MESSAGES : requested;
   const tied = asNumber(ordering?.tied_timestamp_messages) ?? 0;
   const synthetic = asNumber(ordering?.synthetic_timestamp_messages) ?? 0;
@@ -3671,7 +3694,7 @@ async function readFullTranscript(conversationId, opts = {}) {
   };
   const build = (kept) => {
     const returned = messages.slice(0, kept);
-    const out = [...notFoundWarning("trace", conversationId, total === 0), ...warnings];
+    const out = [...warnings];
     if (total > 0 && start >= total) {
       out.push(`--from=${start} is past the end of this trace (${total} messages, indexes 0-${total - 1}).`);
     }
@@ -3758,7 +3781,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
         const data2 = await callDataAPI(`/task-clusters/search?${query3.toString()}`);
         const record = asRecord(data2) ?? {};
         const matches = Array.isArray(record.matches) ? record.matches : [];
-        const warnings = params.node_id !== undefined && matches.length === 0 ? notFoundWarning("cluster", params.node_id, true) : [];
+        const warnings = params.node_id !== undefined && matches.length === 0 ? [`No cluster matched node id "${params.node_id}" for this search. ${NOT_FOUND_HINTS.cluster}`] : [];
         context.output.writeData(data2, warnings.length > 0 ? { warnings } : undefined);
         break;
       }
@@ -3785,10 +3808,10 @@ async function runCommand(command, positional, flags, positionals = positional ?
       if (params.offset !== undefined)
         query2.set("offset", params.offset.toString());
       const queryString = query2.toString() ? `?${query2.toString()}` : "";
-      const data = await callDataAPI(`/clusters/${params.node_id}/conversations${queryString}`);
+      const data = await callDataAPI(`/clusters/${encodeURIComponent(params.node_id)}/conversations${queryString}`);
       const clusterRecord = asRecord(data) ?? {};
-      const warnings = notFoundWarning("cluster", params.node_id, clusterRecord.cluster === null || clusterRecord.cluster === undefined);
-      context.output.writeData(data, warnings.length > 0 ? { warnings } : undefined);
+      throwIfNotFound("cluster", params.node_id, clusterRecord.cluster === null || clusterRecord.cluster === undefined);
+      context.output.writeData(data);
       break;
     }
     case "traces":
@@ -3922,10 +3945,9 @@ async function runCommand(command, positional, flags, positionals = positional ?
           query3.set("block_index", params.block_index.toString());
         if (params.segment_index !== undefined)
           query3.set("segment_index", params.segment_index.toString());
-        const data2 = await callDataAPI(`/conversations/${params.conversation_id}/world-state/snapshot?${query3.toString()}`);
+        const data2 = await callDataAPI(`/conversations/${encodeURIComponent(params.conversation_id)}/world-state/snapshot?${query3.toString()}`);
         const snapshotRecord = asRecord(data2) ?? {};
-        const warnings2 = notFoundWarning("world state", params.conversation_id, snapshotRecord.found === false);
-        context.output.writeData(data2, warnings2.length > 0 ? { warnings: warnings2 } : undefined);
+        context.output.writeData(data2, noWorldStateWarnings(params.conversation_id, snapshotRecord.found === false));
         break;
       }
       if (params.replay === true) {
@@ -3937,10 +3959,9 @@ async function runCommand(command, positional, flags, positionals = positional ?
         query3.set("format", format === "fold-inputs" ? "fold_inputs" : "frames");
         if (params.message_count !== undefined)
           query3.set("message_count", params.message_count.toString());
-        const data2 = await callDataAPI(`/conversations/${params.conversation_id}/world-state/replay?${query3.toString()}`);
+        const data2 = await callDataAPI(`/conversations/${encodeURIComponent(params.conversation_id)}/world-state/replay?${query3.toString()}`);
         const replayRecord = asRecord(data2) ?? {};
-        const warnings2 = notFoundWarning("world state", params.conversation_id, replayRecord.hasData === false);
-        context.output.writeData(data2, warnings2.length > 0 ? { warnings: warnings2 } : undefined);
+        context.output.writeData(data2, noWorldStateWarnings(params.conversation_id, replayRecord.hasData === false));
         break;
       }
       const query2 = new URLSearchParams;
@@ -3949,10 +3970,9 @@ async function runCommand(command, positional, flags, positionals = positional ?
       if (params.event_limit)
         query2.set("event_limit", params.event_limit.toString());
       const queryString = query2.toString() ? `?${query2.toString()}` : "";
-      const data = await callDataAPI(`/conversations/${params.conversation_id}/world-state${queryString}`);
+      const data = await callDataAPI(`/conversations/${encodeURIComponent(params.conversation_id)}/world-state${queryString}`);
       const wsRecord = asRecord(data) ?? {};
-      const warnings = notFoundWarning("world state", params.conversation_id, wsRecord.hasData === false);
-      context.output.writeData(data, warnings.length > 0 ? { warnings } : undefined);
+      context.output.writeData(data, noWorldStateWarnings(params.conversation_id, wsRecord.hasData === false));
       break;
     }
     case "context": {
@@ -3983,10 +4003,8 @@ async function runCommand(command, positional, flags, positionals = positional ?
       const contextPath = `/conversations/${encodeURIComponent(params.conversation_id)}/context`;
       const data = params.metadata_only === true ? await readContextMetadataOnly(contextPath, query2) : await callDataAPI(`${contextPath}${queryString}`);
       const ctxRecord = asRecord(data) ?? {};
-      const warnings = [
-        ...inputWarnings,
-        ...notFoundWarning("trace", params.conversation_id, asNumber(ctxRecord.total_messages) === 0)
-      ];
+      throwIfNotFound("trace", params.conversation_id, asNumber(ctxRecord.total_messages) === 0);
+      const warnings = [...inputWarnings];
       const nextCommands = [];
       if (params.window !== undefined && params.window > CONTEXT_MAX_WINDOW) {
         const center = asNumber(asRecord(ctxRecord.context)?.center_index) ?? params.msg_index ?? 0;
@@ -4089,7 +4107,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
       if (params.offset !== undefined)
         query2.set("offset", params.offset.toString());
       const queryString = query2.toString() ? `?${query2.toString()}` : "";
-      const data = await callDataAPI(`/tool-failures/${params.tool_name}${queryString}`);
+      const data = await callDataAPI(`/tool-failures/${encodeURIComponent(params.tool_name)}${queryString}`);
       const tfRecord = asRecord(data) ?? {};
       const subtypeCount = Array.isArray(tfRecord.subtypes) ? tfRecord.subtypes.length : 0;
       const exampleCount = Array.isArray(tfRecord.examples) ? tfRecord.examples.length : 0;
@@ -4193,10 +4211,8 @@ async function runCommand(command, positional, flags, positionals = positional ?
       if (view === undefined) {
         const data2 = await callDataAPI(`/problems/${encodeURIComponent(params.id)}`);
         const record = asRecord(data2) ?? {};
-        const warnings = record.found === false ? [
-          `No problem found for id "${params.id}" — it may not exist in this tenant, or may have been merged away (the API returns found:false rather than an error).`
-        ] : [];
-        context.output.writeData(data2, warnings.length > 0 ? { warnings } : undefined);
+        throwIfNotFound("problem", params.id, record.found === false, `No problem found for id "${params.id}" in this tenant; it may have been merged into another problem.`);
+        context.output.writeData(data2);
         break;
       }
       if (!UUID_RE.test(params.id)) {
@@ -4215,7 +4231,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
           query2.set("door", params.door);
       }
       const queryString = query2.toString() ? `?${query2.toString()}` : "";
-      const data = await callDataAPI(`/problems/${params.id}/${view}${queryString}`);
+      const data = await callDataAPI(`/problems/${encodeURIComponent(params.id)}/${view}${queryString}`);
       context.output.writeData(data);
       break;
     }
@@ -4270,7 +4286,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
       if (!UUID_RE.test(positional)) {
         throw new CliInputError(`Problem id must be a canonical UUID; got "${positional}". Run \`moda problems\` to list problems with their canonical ids.`);
       }
-      const data = await callDataAPI(`/problems/${positional}/linear`).catch((error) => {
+      const data = await callDataAPI(`/problems/${encodeURIComponent(positional)}/linear`).catch((error) => {
         throw linearApiError(error);
       });
       const link = asRecord(data)?.link;
@@ -4745,7 +4761,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result",
     handler: async (context) => {
-      const { runInit } = await import("./index-2d0q94sv.js");
+      const { runInit } = await import("./index-qjaprhrv.js");
       if (context.outputMode === "agent-stream") {
         context.output.writeEvent({
           event: "started",
@@ -4786,7 +4802,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result-and-error",
     handler: async (context) => {
-      const { runProvision } = await import("./provision-cjpsswa9.js");
+      const { runProvision } = await import("./provision-rm0yc08f.js");
       return runProvision(context, {
         resumeCommand: buildResumeCommand("provision", context.rawFlags)
       });
@@ -5674,6 +5690,8 @@ function classifyCliError(error) {
     return "auth_error";
   if (error instanceof CliAccessError)
     return "access_error";
+  if (error instanceof CliNotFoundError)
+    return "api_not_found";
   if (error instanceof ApiError && error.statusCode === 401)
     return "auth_error";
   if (error instanceof ApiError && error.statusCode === 403)
@@ -5878,6 +5896,10 @@ async function dispatchParsedCommandInner(parsed, startedAt) {
   }
   if (!updateCheckDisabled) {
     startUpdateCheck();
+    setAgentUpdateNotice(() => {
+      const latest = getAvailableUpdate();
+      return latest ? `moda-cli ${VERSION} is out of date (latest ${latest}); commands and flags may differ from the docs. Update: npm install -g @moda-ai/cli@latest` : undefined;
+    });
   }
   const context = createCommandContext(parsed, {
     commandName: definition.name,

package/dist/{doctor-spvy2zb3.js → doctor-8yb6r66e.js}

@@ -3,17 +3,17 @@ import {
   promptsDiscoveredCheck,
   runDoctorCommand,
   runStatusCommand
-} from "./cli-11fevr8y.js";
-import"./cli-t4jjhn3g.js";
-import"./cli-fq7kk77e.js";
+} from "./cli-34zdvcpg.js";
+import"./cli-ssqb8bfw.js";
+import"./cli-90hb4ng0.js";
 import"./cli-mm48br00.js";
-import"./cli-m857n028.js";
+import"./cli-m0fa54ny.js";
 import"./cli-97fnztpy.js";
-import"./cli-k5qqj2bp.js";
-import"./cli-g7ferymy.js";
-import"./cli-tmqd1f0m.js";
-import"./cli-m16taf4z.js";
-import"./cli-429zt7g4.js";
+import"./cli-4x9w6ey7.js";
+import"./cli-k7vwt56h.js";
+import"./cli-ryd7nzke.js";
+import"./cli-09rr5smg.js";
+import"./cli-kwz900s4.js";
 import"./cli-0v6na3yp.js";
 export {
   runStatusCommand,

package/dist/{fix-ax6bbg37.js → fix-bt5zn07e.js}

@@ -2,18 +2,18 @@ import {
   DEFAULT_POLL_INTERVAL_MS,
   DEFAULT_WAIT_TIMEOUT_MS,
   fetchLatestRun
-} from "./cli-fq7kk77e.js";
+} from "./cli-90hb4ng0.js";
 import"./cli-mm48br00.js";
-import"./cli-m857n028.js";
+import"./cli-m0fa54ny.js";
 import"./cli-97fnztpy.js";
-import"./cli-k5qqj2bp.js";
+import"./cli-4x9w6ey7.js";
 import {
   assertFlags
-} from "./cli-g7ferymy.js";
+} from "./cli-k7vwt56h.js";
 import {
   callControlAPI
-} from "./cli-tmqd1f0m.js";
-import"./cli-m16taf4z.js";
+} from "./cli-ryd7nzke.js";
+import"./cli-09rr5smg.js";
 import {
   CliInputError,
   EXIT_DEGRADED,
@@ -22,7 +22,7 @@ import {
   getModaPaths,
   resolveApiTenantId,
   validateConfig
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import"./cli-0v6na3yp.js";
 
 // src/fix.ts

package/dist/{harness-jbqpbp6n.js → harness-9psndqtm.js}

@@ -42,13 +42,13 @@ import {
   writeHarnessAnalyzeResult,
   writeHarnessArtifacts,
   writeHumanProgress
-} from "./cli-m857n028.js";
+} from "./cli-m0fa54ny.js";
 import"./cli-97fnztpy.js";
-import"./cli-k5qqj2bp.js";
-import"./cli-g7ferymy.js";
-import"./cli-tmqd1f0m.js";
-import"./cli-m16taf4z.js";
-import"./cli-429zt7g4.js";
+import"./cli-4x9w6ey7.js";
+import"./cli-k7vwt56h.js";
+import"./cli-ryd7nzke.js";
+import"./cli-09rr5smg.js";
+import"./cli-kwz900s4.js";
 import"./cli-0v6na3yp.js";
 export {
   writeHumanProgress,

package/dist/{harness-github-actions-mtksqp3c.js → harness-github-actions-nph5t2s7.js}

@@ -1,14 +1,14 @@
 import {
   buildSourceSnapshot
-} from "./cli-m857n028.js";
+} from "./cli-m0fa54ny.js";
 import"./cli-97fnztpy.js";
-import"./cli-k5qqj2bp.js";
-import"./cli-g7ferymy.js";
-import"./cli-tmqd1f0m.js";
-import"./cli-m16taf4z.js";
+import"./cli-4x9w6ey7.js";
+import"./cli-k7vwt56h.js";
+import"./cli-ryd7nzke.js";
+import"./cli-09rr5smg.js";
 import {
   recordApiRequest
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import"./cli-0v6na3yp.js";
 
 // src/harness-github-actions.ts

package/dist/{index-2d0q94sv.js → index-qjaprhrv.js}

@@ -1,20 +1,20 @@
 import {
   selectTenantAndCreateKey
-} from "./cli-n9gexgma.js";
+} from "./cli-bfmn3bsk.js";
 import {
   buildDoctorReport
-} from "./cli-11fevr8y.js";
+} from "./cli-34zdvcpg.js";
 import {
   ConnectCodeError,
   connectWithCode,
   loadAuthSession,
   loadToken,
   login
-} from "./cli-t4jjhn3g.js";
+} from "./cli-ssqb8bfw.js";
 import {
   initPrompts,
   runPromptSync
-} from "./cli-fq7kk77e.js";
+} from "./cli-90hb4ng0.js";
 import"./cli-mm48br00.js";
 import {
   canonicalText,
@@ -34,7 +34,7 @@ import {
   runCodingAgent,
   runHarnessCommand,
   startRemoteAnalyze
-} from "./cli-m857n028.js";
+} from "./cli-m0fa54ny.js";
 import {
   stripAnsi
 } from "./cli-97fnztpy.js";
@@ -45,13 +45,13 @@ import {
 } from "./cli-c5c6f0yw.js";
 import {
   runSkillSync
-} from "./cli-fwec3m42.js";
+} from "./cli-y8gbbe9k.js";
 import {
   createCommandContext
-} from "./cli-k5qqj2bp.js";
-import"./cli-g7ferymy.js";
-import"./cli-tmqd1f0m.js";
-import"./cli-m16taf4z.js";
+} from "./cli-4x9w6ey7.js";
+import"./cli-k7vwt56h.js";
+import"./cli-ryd7nzke.js";
+import"./cli-09rr5smg.js";
 import {
   CliAuthError,
   CliInputError,
@@ -59,7 +59,7 @@ import {
   recordApiRequest,
   resolveIngestUrl,
   resolveModaBaseUrl
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import {
   detectAgents,
   installRules

package/dist/{production-intelligence-1tf98n79.js → production-intelligence-mg3qp2dg.js}

@@ -16,10 +16,10 @@ import {
 import {
   callControlAPI,
   callDataAPI
-} from "./cli-tmqd1f0m.js";
+} from "./cli-ryd7nzke.js";
 import {
   apiKeyHeaders
-} from "./cli-m16taf4z.js";
+} from "./cli-09rr5smg.js";
 import {
   CliAuthError,
   CliInputError,
@@ -29,7 +29,7 @@ import {
   resolveApiKey,
   resolveModaBaseUrl,
   safeWriteStderr
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import"./cli-0v6na3yp.js";
 
 // src/production-intelligence.ts

package/dist/{profile-commands-f6599bcx.js → profile-commands-2g5bjzj2.js}

@@ -5,10 +5,10 @@ import {
   loadAuthSession,
   login,
   revokeCliSessionToken
-} from "./cli-t4jjhn3g.js";
+} from "./cli-ssqb8bfw.js";
 import {
   apiKeyHeaders
-} from "./cli-m16taf4z.js";
+} from "./cli-09rr5smg.js";
 import {
   CliInputError,
   DEFAULT_INGEST_URL,
@@ -34,7 +34,7 @@ import {
   secretFilePathFromRef,
   setActiveProfile,
   upsertProfile
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import"./cli-0v6na3yp.js";
 
 // src/api-key-auth.ts

package/dist/prompt-source-mcp.js

@@ -5,13 +5,13 @@ import {
   inspectCodeSelectors,
   inspectPythonSelectors,
   safePromptEvidencePath
-} from "./cli-m857n028.js";
+} from "./cli-m0fa54ny.js";
 import"./cli-97fnztpy.js";
-import"./cli-k5qqj2bp.js";
-import"./cli-g7ferymy.js";
-import"./cli-tmqd1f0m.js";
-import"./cli-m16taf4z.js";
-import"./cli-429zt7g4.js";
+import"./cli-4x9w6ey7.js";
+import"./cli-k7vwt56h.js";
+import"./cli-ryd7nzke.js";
+import"./cli-09rr5smg.js";
+import"./cli-kwz900s4.js";
 import {
   __commonJS,
   __toESM

package/dist/{prompts-y3xd9heh.js → prompts-mzazn8ce.js}

@@ -11,17 +11,17 @@ import {
   runPromptSync,
   runPromptsCommand,
   writePromptSyncProgress
-} from "./cli-fq7kk77e.js";
+} from "./cli-90hb4ng0.js";
 import {
   promptSourceHashPayload
 } from "./cli-mm48br00.js";
-import"./cli-m857n028.js";
+import"./cli-m0fa54ny.js";
 import"./cli-97fnztpy.js";
-import"./cli-k5qqj2bp.js";
-import"./cli-g7ferymy.js";
-import"./cli-tmqd1f0m.js";
-import"./cli-m16taf4z.js";
-import"./cli-429zt7g4.js";
+import"./cli-4x9w6ey7.js";
+import"./cli-k7vwt56h.js";
+import"./cli-ryd7nzke.js";
+import"./cli-09rr5smg.js";
+import"./cli-kwz900s4.js";
 import"./cli-0v6na3yp.js";
 export {
   writePromptSyncProgress,

package/dist/{provision-cjpsswa9.js → provision-rm0yc08f.js}

@@ -1,17 +1,17 @@
 import {
   selectTenantAndCreateKey
-} from "./cli-n9gexgma.js";
+} from "./cli-bfmn3bsk.js";
 import {
   loadAuthSession
-} from "./cli-t4jjhn3g.js";
+} from "./cli-ssqb8bfw.js";
 import {
   stringOption
-} from "./cli-k5qqj2bp.js";
+} from "./cli-4x9w6ey7.js";
 import {
   CliAuthError,
   resolveIngestUrl,
   resolveModaBaseUrl
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import"./cli-0v6na3yp.js";
 
 // src/provision.ts

package/dist/{registry-1dvxsekd.js → registry-mbz65bjy.js}

@@ -1,15 +1,15 @@
 import {
   assertFlags
-} from "./cli-g7ferymy.js";
+} from "./cli-k7vwt56h.js";
 import {
   callControlAPI
-} from "./cli-tmqd1f0m.js";
-import"./cli-m16taf4z.js";
+} from "./cli-ryd7nzke.js";
+import"./cli-09rr5smg.js";
 import {
   CliInputError,
   explicitOutputMode,
   resolveApiKey
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import"./cli-0v6na3yp.js";
 
 // src/registry.ts

package/dist/{skills-1k0hbkaf.js → skills-sagxq9sc.js}

@@ -3,12 +3,12 @@ import {
   pullSkills,
   runSkillSync,
   runSkillsCommand
-} from "./cli-fwec3m42.js";
-import"./cli-k5qqj2bp.js";
-import"./cli-g7ferymy.js";
-import"./cli-tmqd1f0m.js";
-import"./cli-m16taf4z.js";
-import"./cli-429zt7g4.js";
+} from "./cli-y8gbbe9k.js";
+import"./cli-4x9w6ey7.js";
+import"./cli-k7vwt56h.js";
+import"./cli-ryd7nzke.js";
+import"./cli-09rr5smg.js";
+import"./cli-kwz900s4.js";
 import"./cli-ssfq84k5.js";
 import"./cli-0v6na3yp.js";
 export {

package/dist/{sync-by81xqk4.js → sync-gkwexz68.js}

@@ -1,21 +1,21 @@
 import {
   runPromptsCommand
-} from "./cli-fq7kk77e.js";
+} from "./cli-90hb4ng0.js";
 import"./cli-mm48br00.js";
 import {
   runHarnessCommand
-} from "./cli-m857n028.js";
+} from "./cli-m0fa54ny.js";
 import"./cli-97fnztpy.js";
 import {
   runSkillsCommand
-} from "./cli-fwec3m42.js";
-import"./cli-k5qqj2bp.js";
-import"./cli-g7ferymy.js";
-import"./cli-tmqd1f0m.js";
-import"./cli-m16taf4z.js";
+} from "./cli-y8gbbe9k.js";
+import"./cli-4x9w6ey7.js";
+import"./cli-k7vwt56h.js";
+import"./cli-ryd7nzke.js";
+import"./cli-09rr5smg.js";
 import {
   CliInputError
-} from "./cli-429zt7g4.js";
+} from "./cli-kwz900s4.js";
 import"./cli-ssfq84k5.js";
 import"./cli-0v6na3yp.js";
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moda-ai/cli",
-  "version": "1.55.11",
+  "version": "1.55.12",
   "description": "CLI for Moda: production monitoring and evals for AI agents.",
   "type": "module",
   "bin": {

package/skills/integration/index.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "moda.skill_index.v1",
-  "bundled_at": "2026-10-15T04:55:11.718Z",
-  "cli_version": "1.55.11",
+  "bundled_at": "2026-10-15T05:06:16.495Z",
+  "cli_version": "1.55.12",
   "skills": [
     {
       "id": "integration-cloudflare-think",

package/skills/moda-cli/SKILL.md

@@ -276,9 +276,9 @@ Branch on the exit code; it is stable and cheaper than parsing the payload:
 | Exit | Meaning | How to treat it |
 |---|---|---|
 | `0` | ok — answer is grounded in Moda Cloud intelligence | Trust it. |
-| `1` | error — bad input, API/network failure, or unexpected failure | Read `errors[]`; retry only when the code is retryable. |
+| `1` | error — bad input, unknown id (`not_found`), access denied, API/network failure | Read `errors[0].code`; retry only `network_error` / 5xx `api_error`. For `not_found`, find a valid id first (the `cause` names the command). |
 | `3` | degraded — Moda Cloud was unavailable; answer synthesized from local Data API evidence | Answer is present but lower-trust; verify before acting. |
-| `4` | auth required — credentials are missing or expired | Run the `login_command` from the `auth` payload (`moda auth login`), then re-run `resume_command`. |
+| `4` | auth required — no API key, or the API rejected it (HTTP 401) | Set `MODA_API_KEY` or run the `login_command` from the `auth` payload (`moda auth login --api-key`), then re-run. |
 | `5` | input required — a choice is needed that the non-interactive run could not answer | Pick a choice from the `input_request` payload and re-invoke the same command with that choice's `resume_flags` appended. |
 | `130` | cancelled | Treat as interrupted or closed pipe; do not retry blindly. |
 
@@ -1302,8 +1302,14 @@ moda feedback "trace is a refund request, not this problem" \
   from local evidence — not a failure (`investigate`/`failures` always exit
   `0` on success). Treat exit `1` as the only hard error (see
   [Agent protocol](#agent-protocol)).
-- Errors print to stderr with non-zero exit. Check stderr before claiming
-  success.
+- Errors exit non-zero. In agent/JSON mode the error envelope is printed to
+  stdout (`status: "error"`, `errors[0].code`), even with `--quiet`; human
+  mode prints prose to stderr. Check the exit code before claiming success.
+- An unknown trace, problem, or cluster id exits 1 with
+  `errors[0].code: "not_found"`; it is not an empty success.
+- `moda world-state` returns success with a warning when state is missing.
+  This can mean an unknown trace or a real trace without generated state.
+  Use `moda context <id> --metadata-only` to check whether the trace exists.
 - If the JSON has `"conversations": []` or `"frustrations": []`, the call
   worked but the time window is empty — widen `--days-back` before
   concluding "no data".