@moda-ai/cli 1.55.18 → 1.55.20

package/dist/{cli-5q1gyvxn.js → cli-pc5cw7mx.js}

@@ -1,19 +1,19 @@
 import {
   isAuthSessionValid,
   loadAuthSession
-} from "./cli-qmjnh4z9.js";
+} from "./cli-9x9adrtj.js";
 import {
   inspectPromptManifest
-} from "./cli-0e8bfvn7.js";
+} from "./cli-wf7gfa1e.js";
 import {
   readHarnessSyncState,
   renderDoctorHuman,
   renderStatusHuman,
   scanHarness
-} from "./cli-a1mv0ypm.js";
+} from "./cli-a5c9te95.js";
 import {
   callDataAPI
-} from "./cli-c8p69n55.js";
+} from "./cli-rqk6f6n6.js";
 import {
   ensureSecretFilePermissions,
   getActiveProfile,
@@ -27,7 +27,7 @@ import {
   resolveSecretReference,
   resolveTenantId,
   secretFilePathFromRef
-} from "./cli-3ezzeqcy.js";
+} from "./cli-5ke3xe6y.js";
 
 // src/doctor.ts
 import { createHash } from "node:crypto";

package/dist/{cli-c8p69n55.js → cli-rqk6f6n6.js}

@@ -1,11 +1,11 @@
 import {
   apiKeyHeaders
-} from "./cli-eazeanvt.js";
+} from "./cli-7ea02wca.js";
 import {
   recordApiRequest,
   resolveApiKey,
   resolveModaBaseUrl
-} from "./cli-3ezzeqcy.js";
+} from "./cli-5ke3xe6y.js";
 
 // src/api-client.ts
 var REQUEST_TIMEOUT_MS = 30000;

package/dist/{cli-ssfq84k5.js → cli-sf0g0fjg.js}

@@ -6,8 +6,9 @@ function packageAssetPath(...parts) {
 }
 
 // src/init/rules.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { join as join2 } from "node:path";
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname as dirname2, join as join2 } from "node:path";
 import { confirm } from "@inquirer/prompts";
 var SKILLS_SOURCE_DIR = packageAssetPath("skills");
 var SKILLS = [
@@ -23,6 +24,7 @@ var ADAPTERS = {
       dir: join2(".claude", "skills", skillId),
       filename: "SKILL.md"
     }),
+    referencesDirFor: (skillId) => join2(".claude", "skills", skillId, "references"),
     transform: (content) => content
   },
   Cursor: {
@@ -31,7 +33,8 @@ var ADAPTERS = {
       dir: join2(".cursor", "rules"),
       filename: `${skillId}.mdc`
     }),
-    transform: claudeSkillToCursorRule
+    referencesDirFor: (skillId) => join2(".cursor", "rules", `${skillId}-references`),
+    transform: (content, referencesDir) => claudeSkillToCursorRule(content).replace(/`references\//g, `\`${referencesDir}/`)
   }
 };
 var FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/;
@@ -53,24 +56,108 @@ function claudeSkillToCursorRule(skillContent) {
 ${body.replace(/^\s+/, "")}`;
 }
 function loadSkillSource(skillId) {
-  const path = join2(SKILLS_SOURCE_DIR, skillId, "SKILL.md");
+  const dir = join2(SKILLS_SOURCE_DIR, skillId);
+  const path = join2(dir, "SKILL.md");
   if (!existsSync(path)) {
     throw new Error(`Skill source missing: ${path}`);
   }
-  return readFileSync(path, "utf8");
+  const references = new Map;
+  const referencesDir = join2(dir, "references");
+  if (existsSync(referencesDir)) {
+    for (const name of readdirSync(referencesDir).sort()) {
+      if (name.endsWith(".md"))
+        references.set(name, readFileSync(join2(referencesDir, name), "utf8"));
+    }
+  }
+  return { content: readFileSync(path, "utf8"), references };
+}
+var INSTALL_RECORD_PATH = join2(".moda", "agent-skills.json");
+function sha256(text) {
+  return createHash("sha256").update(text).digest("hex");
+}
+function readInstallRecord() {
+  try {
+    const parsed = JSON.parse(readFileSync(join2(process.cwd(), INSTALL_RECORD_PATH), "utf8"));
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+function writeInstallRecord(record) {
+  const path = join2(process.cwd(), INSTALL_RECORD_PATH);
+  mkdirSync(dirname2(path), { recursive: true });
+  writeFileSync(path, `${JSON.stringify(record, null, 2)}
+`);
 }
-function installSkillForAgent(skill, adapter, content) {
+function skillVersion(skillContent) {
+  const frontmatter = FRONTMATTER_RE.exec(skillContent)?.[1] ?? "";
+  return /^version:\s*(\S+)\s*$/m.exec(frontmatter)?.[1] ?? "unknown";
+}
+function looksLikeShippedSkill(existing, skill) {
+  return existing.startsWith(`---
+name: ${skill.id}
+`) || /^# Moda CLI$/m.test(existing);
+}
+function unusedBackupPath(relativePath) {
+  let candidate = `${relativePath}.bak`;
+  for (let n = 1;existsSync(join2(process.cwd(), candidate)); n++) {
+    candidate = `${relativePath}.bak.${n}`;
+  }
+  return candidate;
+}
+function installSkillForAgent(skill, adapter, source, record) {
   const { dir, filename } = adapter.targetFor(skill.id);
   const dirPath = join2(process.cwd(), dir);
   const filePath = join2(dirPath, filename);
   const relativePath = join2(dir, filename);
+  const referencesDir = adapter.referencesDirFor(skill.id);
+  const content = adapter.transform(source.content, referencesDir);
   try {
     mkdirSync(dirPath, { recursive: true });
+    let status = "wrote";
+    let backupPath;
     if (existsSync(filePath)) {
-      return { agent: adapter.name, relativePath, status: "exists" };
+      const existing = readFileSync(filePath, "utf8");
+      const recorded = record[relativePath];
+      if (existing === content) {
+        status = "current";
+      } else if (recorded ? recorded.sha256 === sha256(existing) : looksLikeShippedSkill(existing, skill)) {
+        if (!recorded) {
+          backupPath = unusedBackupPath(relativePath);
+          writeFileSync(join2(process.cwd(), backupPath), existing);
+        }
+        status = "updated";
+      } else {
+        return { agent: adapter.name, relativePath, status: "exists" };
+      }
+    }
+    if (status !== "current")
+      writeFileSync(filePath, content);
+    const version = skillVersion(source.content);
+    record[relativePath] = { version, sha256: sha256(content) };
+    const referencesPath = join2(process.cwd(), referencesDir);
+    mkdirSync(referencesPath, { recursive: true });
+    const keptReferences = [];
+    for (const [name, text] of source.references) {
+      const referencePath = join2(referencesPath, name);
+      const referenceKey = join2(referencesDir, name);
+      const existing = existsSync(referencePath) ? readFileSync(referencePath, "utf8") : undefined;
+      if (existing !== text) {
+        if (existing !== undefined && record[referenceKey]?.sha256 !== sha256(existing)) {
+          keptReferences.push(referenceKey);
+          continue;
+        }
+        writeFileSync(referencePath, text);
+      }
+      record[referenceKey] = { version, sha256: sha256(text) };
     }
-    writeFileSync(filePath, adapter.transform(content));
-    return { agent: adapter.name, relativePath, status: "wrote" };
+    return {
+      agent: adapter.name,
+      relativePath,
+      status,
+      ...backupPath ? { backupPath } : {},
+      ...keptReferences.length > 0 ? { keptReferences } : {}
+    };
   } catch (err) {
     return {
       agent: adapter.name,
@@ -103,10 +190,13 @@ async function installRules(detectedAgents, options = {}) {
   let wrote = 0;
   let skipped = 0;
   let failed = 0;
+  let updated = 0;
+  const record = readInstallRecord();
+  const recordBefore = JSON.stringify(record);
   for (const skill of SKILLS) {
-    let content;
+    let source;
     try {
-      content = loadSkillSource(skill.id);
+      source = loadSkillSource(skill.id);
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       console.error(`  Warning: ${message}`);
@@ -114,16 +204,31 @@ async function installRules(detectedAgents, options = {}) {
       continue;
     }
     for (const adapter of adapters) {
-      const outcome = installSkillForAgent(skill, adapter, content);
+      const outcome = installSkillForAgent(skill, adapter, source, record);
+      if (!options.silent) {
+        for (const kept of outcome.keptReferences ?? []) {
+          console.log(`  ${outcome.agent}: ${kept} was edited locally — skipping (delete it to reinstall)`);
+        }
+      }
       switch (outcome.status) {
         case "wrote":
           if (!options.silent)
             console.log(`  ${outcome.agent}: wrote ${outcome.relativePath}`);
           wrote++;
           break;
+        case "updated":
+          if (!options.silent) {
+            const backup = outcome.backupPath ? ` (previous copy saved to ${outcome.backupPath})` : "";
+            console.log(`  ${outcome.agent}: updated ${outcome.relativePath} to the current skill${backup}`);
+          }
+          updated++;
+          break;
+        case "current":
+          skipped++;
+          break;
         case "exists":
           if (!options.silent) {
-            console.log(`  ${outcome.agent}: ${outcome.relativePath} already exists — skipping`);
+            console.log(`  ${outcome.agent}: ${outcome.relativePath} was edited locally — skipping (delete it to reinstall)`);
           }
           skipped++;
           break;
@@ -136,8 +241,18 @@ async function installRules(detectedAgents, options = {}) {
       }
     }
   }
+  if (JSON.stringify(record) !== recordBefore) {
+    try {
+      writeInstallRecord(record);
+    } catch (err) {
+      if (!options.silent) {
+        console.error(`  Could not save ${INSTALL_RECORD_PATH} — ${err instanceof Error ? err.message : String(err)}. ` + "A later moda init may overwrite local edits to these skill files.");
+      }
+    }
+  }
   const summary = [
     wrote && `${wrote} written`,
+    updated && `${updated} updated`,
     skipped && `${skipped} already present`,
     failed && `${failed} failed`
   ].filter(Boolean).join(", ");
@@ -175,13 +290,13 @@ function detectAgents() {
 import {
   existsSync as existsSync3,
   mkdirSync as mkdirSync2,
-  readdirSync,
+  readdirSync as readdirSync2,
   readFileSync as readFileSync2,
   rmdirSync,
   unlinkSync,
   writeFileSync as writeFileSync2
 } from "node:fs";
-import { dirname as dirname2, isAbsolute, join as join4, normalize, relative, resolve } from "node:path";
+import { dirname as dirname3, isAbsolute, join as join4, normalize, relative, resolve } from "node:path";
 var SKILLS_MANIFEST_PATH = join4(".moda", "skills.yml");
 var SKILL_SOURCE_HARNESS = "moda";
 var SKILL_SOURCE_INTEGRATION_BUNDLED = "integration-bundled";
@@ -241,7 +356,7 @@ function writeSkillsManifest(cwd, header, records) {
     ]),
     ""
   ];
-  mkdirSync2(dirname2(manifestPath), { recursive: true });
+  mkdirSync2(dirname3(manifestPath), { recursive: true });
   writeFileSync2(manifestPath, lines.join(`
 `));
 }
@@ -272,9 +387,9 @@ function pruneManagedSkillPaths(cwd, managedPaths, log) {
 function pruneEmptyClaudeSkillDir(cwd, relativePath) {
   if (!relativePath.startsWith(".claude/skills/") || !relativePath.endsWith("/SKILL.md"))
     return;
-  const dir = dirname2(join4(cwd, relativePath));
+  const dir = dirname3(join4(cwd, relativePath));
   try {
-    if (existsSync3(dir) && readdirSync(dir).length === 0) {
+    if (existsSync3(dir) && readdirSync2(dir).length === 0) {
       rmdirSync(dir);
     }
   } catch {}

package/dist/{cli-0e8bfvn7.js → cli-wf7gfa1e.js}

@@ -12,28 +12,28 @@ import {
   require_typescript,
   resolvePromptSource,
   safePromptEvidencePath
-} from "./cli-a1mv0ypm.js";
+} from "./cli-a5c9te95.js";
 import {
   createCommandContext
-} from "./cli-5hq827jt.js";
+} from "./cli-569hj0bj.js";
 import {
   assertFlags,
   assertPositionals
-} from "./cli-kg0kz05e.js";
+} from "./cli-cehskjde.js";
 import {
   callControlAPI,
   callDataAPI
-} from "./cli-c8p69n55.js";
+} from "./cli-rqk6f6n6.js";
 import {
   setPlatformTenantOverride
-} from "./cli-eazeanvt.js";
+} from "./cli-7ea02wca.js";
 import {
   CliInputError,
   EXIT_ERROR,
   EXIT_OK,
   resolveApiTenantId,
   validateConfig
-} from "./cli-3ezzeqcy.js";
+} from "./cli-5ke3xe6y.js";
 import {
   __commonJS,
   __require,
@@ -6731,7 +6731,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const analyzedDefinitions = new Map;
   if (flags["no-analyze"] !== "true") {
     options.onProgress?.("Analyzing prompt sources before sync.");
-    const { analyzeHarnessPrompts } = await import("./harness-v9s0k9s7.js");
+    const { analyzeHarnessPrompts } = await import("./harness-xvg6ws6x.js");
     const result = await analyzeHarnessPrompts({
       rootDir: process.cwd(),
       existing: established.flatMap((prompt) => prompt.sourceDefinition ? [prompt.sourceDefinition.source] : []),
@@ -7061,7 +7061,7 @@ async function migratePromptManifest(options = {}) {
   let addedSources = [];
   let pendingSources = [];
   if (options.discover) {
-    const { analyzeHarnessPrompts } = await import("./harness-v9s0k9s7.js");
+    const { analyzeHarnessPrompts } = await import("./harness-xvg6ws6x.js");
     const result = await analyzeHarnessPrompts({
       rootDir: root,
       existing: manifest.sources,