@moda-ai/cli 1.55.19 → 1.55.20

package/dist/{cli-c5c6f0yw.js → cli-38p87ykc.js}

@@ -5,7 +5,7 @@ import {
   packageAssetPath,
   readSkillsManifest,
   upsertSkillManifestRecord
-} from "./cli-ssfq84k5.js";
+} from "./cli-sf0g0fjg.js";
 
 // src/skills-bundled.ts
 import { createHash } from "node:crypto";

package/dist/{cli-5km7j04z.js → cli-4j8nffsm.js}

@@ -23,7 +23,7 @@ import {
   pruneManagedSkillPaths,
   readSkillsManifest,
   writeSkillsManifest
-} from "./cli-ssfq84k5.js";
+} from "./cli-sf0g0fjg.js";
 import {
   __require
 } from "./cli-0v6na3yp.js";
@@ -53,7 +53,11 @@ function renderFixesBlock() {
     "## Fixing production issues with Moda (managed block — edits inside are overwritten by moda-cli)",
     "",
     "Moda supplies the production evidence; you propose and make the fix yourself.",
+    "The `moda` CLI needs `MODA_API_KEY` (or `npx -y -p @moda-ai/cli moda ...` when",
+    "not installed); `moda <command> --help` lists its flags.",
     "",
+    '- Find where something happened in production: `moda search "<words>"`, then',
+    "  `moda context <conversation_id> --msg-index=<message_index>` to read the turn.",
     "- Find what to fix: `moda investigate` ranks tool failures, user frustrations,",
     "  and top Problems with evidence; `moda problems` ranks cross-signal Problems",
     "  by root cause; `moda failures` lists tool failures only.",
@@ -862,7 +866,7 @@ function sha256(input) {
   return createHash("sha256").update(input).digest("hex");
 }
 async function runSkillsInstall(context, ids) {
-  const { installIntegrationSkill, readBundledIndex, readBundledSkillMd } = await import("./skills-bundled-mdmhzfsr.js");
+  const { installIntegrationSkill, readBundledIndex, readBundledSkillMd } = await import("./skills-bundled-r9a2vs07.js");
   const index = readBundledIndex();
   if (context.flags.list === "true" || ids.length === 0) {
     if (!index) {

package/dist/{cli-ssfq84k5.js → cli-sf0g0fjg.js}

@@ -6,8 +6,9 @@ function packageAssetPath(...parts) {
 }
 
 // src/init/rules.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { join as join2 } from "node:path";
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
+import { dirname as dirname2, join as join2 } from "node:path";
 import { confirm } from "@inquirer/prompts";
 var SKILLS_SOURCE_DIR = packageAssetPath("skills");
 var SKILLS = [
@@ -23,6 +24,7 @@ var ADAPTERS = {
       dir: join2(".claude", "skills", skillId),
       filename: "SKILL.md"
     }),
+    referencesDirFor: (skillId) => join2(".claude", "skills", skillId, "references"),
     transform: (content) => content
   },
   Cursor: {
@@ -31,7 +33,8 @@ var ADAPTERS = {
       dir: join2(".cursor", "rules"),
       filename: `${skillId}.mdc`
     }),
-    transform: claudeSkillToCursorRule
+    referencesDirFor: (skillId) => join2(".cursor", "rules", `${skillId}-references`),
+    transform: (content, referencesDir) => claudeSkillToCursorRule(content).replace(/`references\//g, `\`${referencesDir}/`)
   }
 };
 var FRONTMATTER_RE = /^---\r?\n([\s\S]*?)\r?\n---\r?\n([\s\S]*)$/;
@@ -53,24 +56,108 @@ function claudeSkillToCursorRule(skillContent) {
 ${body.replace(/^\s+/, "")}`;
 }
 function loadSkillSource(skillId) {
-  const path = join2(SKILLS_SOURCE_DIR, skillId, "SKILL.md");
+  const dir = join2(SKILLS_SOURCE_DIR, skillId);
+  const path = join2(dir, "SKILL.md");
   if (!existsSync(path)) {
     throw new Error(`Skill source missing: ${path}`);
   }
-  return readFileSync(path, "utf8");
+  const references = new Map;
+  const referencesDir = join2(dir, "references");
+  if (existsSync(referencesDir)) {
+    for (const name of readdirSync(referencesDir).sort()) {
+      if (name.endsWith(".md"))
+        references.set(name, readFileSync(join2(referencesDir, name), "utf8"));
+    }
+  }
+  return { content: readFileSync(path, "utf8"), references };
+}
+var INSTALL_RECORD_PATH = join2(".moda", "agent-skills.json");
+function sha256(text) {
+  return createHash("sha256").update(text).digest("hex");
+}
+function readInstallRecord() {
+  try {
+    const parsed = JSON.parse(readFileSync(join2(process.cwd(), INSTALL_RECORD_PATH), "utf8"));
+    return parsed && typeof parsed === "object" && !Array.isArray(parsed) ? parsed : {};
+  } catch {
+    return {};
+  }
+}
+function writeInstallRecord(record) {
+  const path = join2(process.cwd(), INSTALL_RECORD_PATH);
+  mkdirSync(dirname2(path), { recursive: true });
+  writeFileSync(path, `${JSON.stringify(record, null, 2)}
+`);
 }
-function installSkillForAgent(skill, adapter, content) {
+function skillVersion(skillContent) {
+  const frontmatter = FRONTMATTER_RE.exec(skillContent)?.[1] ?? "";
+  return /^version:\s*(\S+)\s*$/m.exec(frontmatter)?.[1] ?? "unknown";
+}
+function looksLikeShippedSkill(existing, skill) {
+  return existing.startsWith(`---
+name: ${skill.id}
+`) || /^# Moda CLI$/m.test(existing);
+}
+function unusedBackupPath(relativePath) {
+  let candidate = `${relativePath}.bak`;
+  for (let n = 1;existsSync(join2(process.cwd(), candidate)); n++) {
+    candidate = `${relativePath}.bak.${n}`;
+  }
+  return candidate;
+}
+function installSkillForAgent(skill, adapter, source, record) {
   const { dir, filename } = adapter.targetFor(skill.id);
   const dirPath = join2(process.cwd(), dir);
   const filePath = join2(dirPath, filename);
   const relativePath = join2(dir, filename);
+  const referencesDir = adapter.referencesDirFor(skill.id);
+  const content = adapter.transform(source.content, referencesDir);
   try {
     mkdirSync(dirPath, { recursive: true });
+    let status = "wrote";
+    let backupPath;
     if (existsSync(filePath)) {
-      return { agent: adapter.name, relativePath, status: "exists" };
+      const existing = readFileSync(filePath, "utf8");
+      const recorded = record[relativePath];
+      if (existing === content) {
+        status = "current";
+      } else if (recorded ? recorded.sha256 === sha256(existing) : looksLikeShippedSkill(existing, skill)) {
+        if (!recorded) {
+          backupPath = unusedBackupPath(relativePath);
+          writeFileSync(join2(process.cwd(), backupPath), existing);
+        }
+        status = "updated";
+      } else {
+        return { agent: adapter.name, relativePath, status: "exists" };
+      }
+    }
+    if (status !== "current")
+      writeFileSync(filePath, content);
+    const version = skillVersion(source.content);
+    record[relativePath] = { version, sha256: sha256(content) };
+    const referencesPath = join2(process.cwd(), referencesDir);
+    mkdirSync(referencesPath, { recursive: true });
+    const keptReferences = [];
+    for (const [name, text] of source.references) {
+      const referencePath = join2(referencesPath, name);
+      const referenceKey = join2(referencesDir, name);
+      const existing = existsSync(referencePath) ? readFileSync(referencePath, "utf8") : undefined;
+      if (existing !== text) {
+        if (existing !== undefined && record[referenceKey]?.sha256 !== sha256(existing)) {
+          keptReferences.push(referenceKey);
+          continue;
+        }
+        writeFileSync(referencePath, text);
+      }
+      record[referenceKey] = { version, sha256: sha256(text) };
     }
-    writeFileSync(filePath, adapter.transform(content));
-    return { agent: adapter.name, relativePath, status: "wrote" };
+    return {
+      agent: adapter.name,
+      relativePath,
+      status,
+      ...backupPath ? { backupPath } : {},
+      ...keptReferences.length > 0 ? { keptReferences } : {}
+    };
   } catch (err) {
     return {
       agent: adapter.name,
@@ -103,10 +190,13 @@ async function installRules(detectedAgents, options = {}) {
   let wrote = 0;
   let skipped = 0;
   let failed = 0;
+  let updated = 0;
+  const record = readInstallRecord();
+  const recordBefore = JSON.stringify(record);
   for (const skill of SKILLS) {
-    let content;
+    let source;
     try {
-      content = loadSkillSource(skill.id);
+      source = loadSkillSource(skill.id);
     } catch (err) {
       const message = err instanceof Error ? err.message : String(err);
       console.error(`  Warning: ${message}`);
@@ -114,16 +204,31 @@ async function installRules(detectedAgents, options = {}) {
       continue;
     }
     for (const adapter of adapters) {
-      const outcome = installSkillForAgent(skill, adapter, content);
+      const outcome = installSkillForAgent(skill, adapter, source, record);
+      if (!options.silent) {
+        for (const kept of outcome.keptReferences ?? []) {
+          console.log(`  ${outcome.agent}: ${kept} was edited locally — skipping (delete it to reinstall)`);
+        }
+      }
       switch (outcome.status) {
         case "wrote":
           if (!options.silent)
             console.log(`  ${outcome.agent}: wrote ${outcome.relativePath}`);
           wrote++;
           break;
+        case "updated":
+          if (!options.silent) {
+            const backup = outcome.backupPath ? ` (previous copy saved to ${outcome.backupPath})` : "";
+            console.log(`  ${outcome.agent}: updated ${outcome.relativePath} to the current skill${backup}`);
+          }
+          updated++;
+          break;
+        case "current":
+          skipped++;
+          break;
         case "exists":
           if (!options.silent) {
-            console.log(`  ${outcome.agent}: ${outcome.relativePath} already exists — skipping`);
+            console.log(`  ${outcome.agent}: ${outcome.relativePath} was edited locally — skipping (delete it to reinstall)`);
           }
           skipped++;
           break;
@@ -136,8 +241,18 @@ async function installRules(detectedAgents, options = {}) {
       }
     }
   }
+  if (JSON.stringify(record) !== recordBefore) {
+    try {
+      writeInstallRecord(record);
+    } catch (err) {
+      if (!options.silent) {
+        console.error(`  Could not save ${INSTALL_RECORD_PATH} — ${err instanceof Error ? err.message : String(err)}. ` + "A later moda init may overwrite local edits to these skill files.");
+      }
+    }
+  }
   const summary = [
     wrote && `${wrote} written`,
+    updated && `${updated} updated`,
     skipped && `${skipped} already present`,
     failed && `${failed} failed`
   ].filter(Boolean).join(", ");
@@ -175,13 +290,13 @@ function detectAgents() {
 import {
   existsSync as existsSync3,
   mkdirSync as mkdirSync2,
-  readdirSync,
+  readdirSync as readdirSync2,
   readFileSync as readFileSync2,
   rmdirSync,
   unlinkSync,
   writeFileSync as writeFileSync2
 } from "node:fs";
-import { dirname as dirname2, isAbsolute, join as join4, normalize, relative, resolve } from "node:path";
+import { dirname as dirname3, isAbsolute, join as join4, normalize, relative, resolve } from "node:path";
 var SKILLS_MANIFEST_PATH = join4(".moda", "skills.yml");
 var SKILL_SOURCE_HARNESS = "moda";
 var SKILL_SOURCE_INTEGRATION_BUNDLED = "integration-bundled";
@@ -241,7 +356,7 @@ function writeSkillsManifest(cwd, header, records) {
     ]),
     ""
   ];
-  mkdirSync2(dirname2(manifestPath), { recursive: true });
+  mkdirSync2(dirname3(manifestPath), { recursive: true });
   writeFileSync2(manifestPath, lines.join(`
 `));
 }
@@ -272,9 +387,9 @@ function pruneManagedSkillPaths(cwd, managedPaths, log) {
 function pruneEmptyClaudeSkillDir(cwd, relativePath) {
   if (!relativePath.startsWith(".claude/skills/") || !relativePath.endsWith("/SKILL.md"))
     return;
-  const dir = dirname2(join4(cwd, relativePath));
+  const dir = dirname3(join4(cwd, relativePath));
   try {
-    if (existsSync3(dir) && readdirSync(dir).length === 0) {
+    if (existsSync3(dir) && readdirSync2(dir).length === 0) {
       rmdirSync(dir);
     }
   } catch {}

package/dist/cli.js

@@ -1853,7 +1853,7 @@ async function runPromptsCommand(...args) {
   return (await import("./prompts-1tkhrxkq.js")).runPromptsCommand(...args);
 }
 async function runSkillsCommand(...args) {
-  return (await import("./skills-d35nnm66.js")).runSkillsCommand(...args);
+  return (await import("./skills-br82cpt7.js")).runSkillsCommand(...args);
 }
 async function runFixCommand(...args) {
   return (await import("./fix-9fmy6p2x.js")).runFixCommand(...args);
@@ -1865,7 +1865,7 @@ async function runHarnessCommand(...args) {
   return (await import("./harness-xvg6ws6x.js")).runHarnessCommand(...args);
 }
 async function runSyncCommand(...args) {
-  return (await import("./sync-n2psdffz.js")).runSyncCommand(...args);
+  return (await import("./sync-25vn78je.js")).runSyncCommand(...args);
 }
 async function runRegistryCommand(...args) {
   return (await import("./registry-atqyb5fa.js")).runRegistryCommand(...args);
@@ -3245,8 +3245,8 @@ async function readFullTranscript(conversationId, opts = {}) {
     if (tied > 0 || synthetic > 0) {
       out.push(`Message order may not be chronological: ${tied} of ${total} messages share a timestamp with another message (ordered by id, not time)${synthetic > 0 ? ` and ${synthetic} carry a synthetic pre-2022 timestamp` : ""}.`);
     }
-    if (returned.some(isTruncated)) {
-      out.push(`Message text, tool-call inputs and tool results longer than ${CONTEXT_MESSAGE_TRUNCATE_CHARS} characters are truncated by the context endpoint. For full content (prompts, tool arguments/results) use \`moda audit <conversation_id> --include-bodies\` (or \`--include-raw\` for the verbatim events).`);
+    if (legacy && returned.some(isTruncated)) {
+      out.push(`This Moda server is older and truncates message text, tool-call inputs and tool results longer than ${CONTEXT_MESSAGE_TRUNCATE_CHARS} characters. For full content (prompts, tool arguments/results) use \`moda audit <conversation_id> --include-bodies\` (or \`--include-raw\` for the verbatim events).`);
     }
     return {
       data: stripLoneSurrogates({
@@ -4533,7 +4533,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result-and-error",
     handler: async (context) => {
-      const { runInit } = await import("./index-6qqmjqb2.js");
+      const { runInit } = await import("./index-ewqbpnwz.js");
       if (context.outputMode === "agent-stream") {
         context.output.writeEvent({
           event: "started",

package/dist/{index-6qqmjqb2.js → index-ewqbpnwz.js}

@@ -42,10 +42,10 @@ import {
   bundledSkillsDir,
   installIntegrationSkill,
   readBundledIndex
-} from "./cli-c5c6f0yw.js";
+} from "./cli-38p87ykc.js";
 import {
   runSkillSync
-} from "./cli-5km7j04z.js";
+} from "./cli-4j8nffsm.js";
 import {
   createCommandContext
 } from "./cli-569hj0bj.js";
@@ -63,7 +63,7 @@ import {
 import {
   detectAgents,
   installRules
-} from "./cli-ssfq84k5.js";
+} from "./cli-sf0g0fjg.js";
 import"./cli-0v6na3yp.js";
 
 // src/init/index.ts

package/dist/{skills-d35nnm66.js → skills-br82cpt7.js}

@@ -3,13 +3,13 @@ import {
   pullSkills,
   runSkillSync,
   runSkillsCommand
-} from "./cli-5km7j04z.js";
+} from "./cli-4j8nffsm.js";
 import"./cli-569hj0bj.js";
 import"./cli-cehskjde.js";
 import"./cli-rqk6f6n6.js";
 import"./cli-7ea02wca.js";
 import"./cli-5ke3xe6y.js";
-import"./cli-ssfq84k5.js";
+import"./cli-sf0g0fjg.js";
 import"./cli-0v6na3yp.js";
 export {
   runSkillsCommand,

package/dist/{skills-bundled-mdmhzfsr.js → skills-bundled-r9a2vs07.js}

@@ -3,8 +3,8 @@ import {
   installIntegrationSkill,
   readBundledIndex,
   readBundledSkillMd
-} from "./cli-c5c6f0yw.js";
-import"./cli-ssfq84k5.js";
+} from "./cli-38p87ykc.js";
+import"./cli-sf0g0fjg.js";
 import"./cli-0v6na3yp.js";
 export {
   readBundledSkillMd,

package/dist/{sync-n2psdffz.js → sync-25vn78je.js}

@@ -8,7 +8,7 @@ import {
 import"./cli-97fnztpy.js";
 import {
   runSkillsCommand
-} from "./cli-5km7j04z.js";
+} from "./cli-4j8nffsm.js";
 import"./cli-569hj0bj.js";
 import"./cli-cehskjde.js";
 import"./cli-rqk6f6n6.js";
@@ -16,7 +16,7 @@ import"./cli-7ea02wca.js";
 import {
   CliInputError
 } from "./cli-5ke3xe6y.js";
-import"./cli-ssfq84k5.js";
+import"./cli-sf0g0fjg.js";
 import"./cli-0v6na3yp.js";
 
 // src/sync.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moda-ai/cli",
-  "version": "1.55.19",
+  "version": "1.55.20",
   "description": "CLI for Moda: production monitoring and evals for AI agents.",
   "type": "module",
   "bin": {

package/skills/integration/index.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "moda.skill_index.v1",
-  "bundled_at": "2026-10-15T10:14:25.379Z",
-  "cli_version": "1.55.19",
+  "bundled_at": "2026-10-15T10:28:15.672Z",
+  "cli_version": "1.55.20",
   "skills": [
     {
       "id": "integration-cloudflare-think",