@moda-ai/cli 1.55.25 → 1.55.27

package/dist/{agent-t7dxmpdq.js → agent-vp9prdma.js}

@@ -1,8 +1,8 @@
 import {
   buildDoctorReport
-} from "./cli-mebf5vtr.js";
-import"./cli-0wr3483h.js";
-import"./cli-m805msp6.js";
+} from "./cli-4h0ave0f.js";
+import"./cli-hmjdgxrn.js";
+import"./cli-q9nsvqqg.js";
 import"./cli-mm48br00.js";
 import {
   HARNESS_REPORT_APPROVAL_PATH,
@@ -14,18 +14,18 @@ import {
   readHarnessSyncState,
   summarizeHarness,
   validateHarnessReport
-} from "./cli-7xc585hc.js";
+} from "./cli-qwgct6x7.js";
 import"./cli-97fnztpy.js";
-import"./cli-qvg26twp.js";
-import"./cli-dn91fb56.js";
-import"./cli-9btx12wp.js";
+import"./cli-v8q7sd7g.js";
+import"./cli-wzds257x.js";
+import"./cli-pg5qfmqc.js";
 import {
   CliInputError,
   resolveApiKey,
   resolveIngestUrl,
   resolveModaBaseUrl,
   resolveTenantId
-} from "./cli-dve50x7p.js";
+} from "./cli-r5pp7qny.js";
 import"./cli-0v6na3yp.js";
 
 // src/agent.ts

package/dist/{cli-qycsmxev.js → cli-0pkc8jhg.js}

@@ -1,10 +1,10 @@
 import {
   fetchApiKeyProbe
-} from "./cli-9hc5bg2r.js";
+} from "./cli-ccjfwzqx.js";
 import {
   authFetch,
   getCachedLoginContext
-} from "./cli-0wr3483h.js";
+} from "./cli-hmjdgxrn.js";
 import {
   CliAccessError,
   CliInputError,
@@ -18,7 +18,7 @@ import {
   resolveTenantIdFromActiveProfile,
   saveCliConfig,
   writeSecretJsonFile
-} from "./cli-dve50x7p.js";
+} from "./cli-r5pp7qny.js";
 
 // src/init/tenant.ts
 import { randomUUID } from "node:crypto";

package/dist/{cli-mebf5vtr.js → cli-4h0ave0f.js}

@@ -1,19 +1,19 @@
 import {
   isAuthSessionValid,
   loadAuthSession
-} from "./cli-0wr3483h.js";
+} from "./cli-hmjdgxrn.js";
 import {
   inspectPromptManifest
-} from "./cli-m805msp6.js";
+} from "./cli-q9nsvqqg.js";
 import {
   readHarnessSyncState,
   renderDoctorHuman,
   renderStatusHuman,
   scanHarness
-} from "./cli-7xc585hc.js";
+} from "./cli-qwgct6x7.js";
 import {
   callDataAPI
-} from "./cli-9btx12wp.js";
+} from "./cli-pg5qfmqc.js";
 import {
   ensureSecretFilePermissions,
   getActiveProfile,
@@ -27,7 +27,7 @@ import {
   resolveSecretReference,
   resolveTenantId,
   secretFilePathFromRef
-} from "./cli-dve50x7p.js";
+} from "./cli-r5pp7qny.js";
 
 // src/doctor.ts
 import { createHash } from "node:crypto";

package/dist/{cli-m0045npe.js → cli-6et4z504.js}

@@ -1,20 +1,22 @@
 import {
   createCommandContext
-} from "./cli-qvg26twp.js";
+} from "./cli-v8q7sd7g.js";
 import {
   assertFlags,
-  assertPositionals
-} from "./cli-dn91fb56.js";
+  assertPositionals,
+  writeDryRun
+} from "./cli-wzds257x.js";
 import {
   callControlAPI
-} from "./cli-9btx12wp.js";
+} from "./cli-pg5qfmqc.js";
 import {
   CliInputError,
   recordApiRequest,
   resolveApiKey,
   resolveIngestUrl,
-  resolveTenantId
-} from "./cli-dve50x7p.js";
+  resolveTenantId,
+  shellArg
+} from "./cli-r5pp7qny.js";
 import {
   SKILL_SOURCE_HARNESS,
   SKILL_SOURCE_INTEGRATION_BUNDLED,
@@ -671,7 +673,7 @@ async function runSkillsCommand(input) {
         "accepted: true",
         result.generation_run_id && `generation_run_id: ${result.generation_run_id}`,
         result.message && `message: ${result.message}`,
-        result.generation_run_id && `follow progress: moda skills status ${result.generation_run_id}`
+        result.generation_run_id && `follow progress: moda skills status ${shellArg(result.generation_run_id)}`
       ].filter(Boolean).join(`
 `));
     } else {
@@ -972,7 +974,7 @@ async function runSkillRegistryCommand(sub, positionals, flags, context) {
   }
   const surfacePolicy = live ? "include" : "local_only";
   if (context.dryRun) {
-    context.output.writeData({ dryRun: true, planned: { method: "PATCH", endpoint: `/api/skills/${encodeURIComponent(idOrKey)}/surface-policy`, body: { surfacePolicy } } });
+    writeDryRun(context, { plane: "control", method: "PATCH", path: `/skills/${encodeURIComponent(idOrKey)}/surface-policy`, body: { surfacePolicy } });
     return 0;
   }
   context.output.writeData(await callControlAPI(`/skills/${encodeURIComponent(idOrKey)}/surface-policy`, { method: "PATCH", body: JSON.stringify({ surfacePolicy }) }, profileOptions, { retries: 0 }));

package/dist/{cli-9hc5bg2r.js → cli-ccjfwzqx.js}

@@ -5,7 +5,7 @@ import {
   resolveApiKey,
   resolveApiKeyFromActiveProfile,
   resolveModaBaseUrl
-} from "./cli-dve50x7p.js";
+} from "./cli-r5pp7qny.js";
 
 // src/api-key-auth.ts
 var PROBE_TIMEOUT_MS = 1e4;

package/dist/{cli-0wr3483h.js → cli-hmjdgxrn.js}

@@ -8,7 +8,7 @@ import {
   saveProfileConfig,
   secretFilePathFromRef,
   writeSecretJsonFile
-} from "./cli-dve50x7p.js";
+} from "./cli-r5pp7qny.js";
 import {
   __require
 } from "./cli-0v6na3yp.js";

package/dist/{cli-9btx12wp.js → cli-pg5qfmqc.js}

@@ -3,7 +3,7 @@ import {
   recordApiRequest,
   resolveApiKey,
   resolveModaBaseUrl
-} from "./cli-dve50x7p.js";
+} from "./cli-r5pp7qny.js";
 
 // src/api-client.ts
 var REQUEST_TIMEOUT_MS = 30000;

package/dist/{cli-m805msp6.js → cli-q9nsvqqg.js}

@@ -12,27 +12,28 @@ import {
   require_typescript,
   resolvePromptSource,
   safePromptEvidencePath
-} from "./cli-7xc585hc.js";
+} from "./cli-qwgct6x7.js";
 import {
   createCommandContext
-} from "./cli-qvg26twp.js";
+} from "./cli-v8q7sd7g.js";
 import {
   UUID_RE,
   assertFlags,
   assertPositionals
-} from "./cli-dn91fb56.js";
+} from "./cli-wzds257x.js";
 import {
   callControlAPI,
   callDataAPI
-} from "./cli-9btx12wp.js";
+} from "./cli-pg5qfmqc.js";
 import {
   CliInputError,
   EXIT_ERROR,
   EXIT_OK,
   resolveApiTenantId,
   setPlatformTenantOverride,
+  shellArg,
   validateConfig
-} from "./cli-dve50x7p.js";
+} from "./cli-r5pp7qny.js";
 import {
   __commonJS,
   __require,
@@ -6020,12 +6021,11 @@ function assertAllowedModel(raw, flags, flagName) {
   throw new CliInputError(`${flagName}=${model} is not in the replay model allowlist, so nothing was sent.`, `Allowed: ${REPLAY_MODEL_ALLOWLIST.join(", ")}. Pass --allow-any-model to use another OpenRouter slug.`);
 }
 function rerunWithYes(command, positionals, flags) {
-  const quote = (v) => /^[\w@%+=:,./-]+$/.test(v) ? v : `'${v.replace(/'/g, `'\\''`)}'`;
-  const parts = ["moda", ...command.split(" "), ...positionals.map(quote)];
+  const parts = ["moda", ...command.split(" "), ...positionals.map(shellArg)];
   for (const [key, value] of Object.entries(flags)) {
     if (key === "yes")
       continue;
-    parts.push(value === "true" ? `--${key}` : `--${key}=${quote(value)}`);
+    parts.push(value === "true" ? `--${key}` : `--${key}=${shellArg(value)}`);
   }
   parts.push("--yes");
   return parts.join(" ");
@@ -6469,7 +6469,7 @@ function printHuman(result, outPath, gate) {
     }
     w("");
     if (!gate.promoted) {
-      w(`  moda prompts promote ${result.promptKey} --label=prod --version=${result.versionId}`);
+      w(`  moda prompts promote ${shellArg(result.promptKey)} --label=prod --version=${result.versionId ? shellArg(result.versionId) : "<version_id>"}`);
     }
     return;
   }
@@ -6484,13 +6484,13 @@ function printHuman(result, outPath, gate) {
     w("  (too few failures to reserve a holdout — gate on a fresh --auto-generate set)");
   }
   if (outPath) {
-    w(`  moda prompts ab --baseline-key=${result.promptKey} --candidate=${outPath} --auto-generate`);
+    w(`  moda prompts ab --baseline-key=${shellArg(result.promptKey)} --candidate=${shellArg(outPath)} --auto-generate`);
   } else {
     w(`  # re-run with --out=<path.prompt.md> to materialize the candidate, then:`);
-    w(`  moda prompts ab --baseline-key=${result.promptKey} --candidate=<path.prompt.md> --auto-generate`);
+    w(`  moda prompts ab --baseline-key=${shellArg(result.promptKey)} --candidate=<path.prompt.md> --auto-generate`);
   }
   w(`  # or: moda prompts propose ... --gate --promote-on-win  (auto-A/B, promote on a strict win)`);
-  w(`  moda prompts promote ${result.promptKey} --label=prod --version=${result.versionId}`);
+  w(`  moda prompts promote ${shellArg(result.promptKey)} --label=prod --version=${result.versionId ? shellArg(result.versionId) : "<version_id>"}`);
 }
 function parsePositiveInt2(raw, fallback, max, flagName) {
   if (raw === undefined)
@@ -6916,7 +6916,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const analyzedDefinitions = new Map;
   if (flags["no-analyze"] !== "true") {
     options.onProgress?.("Analyzing prompt sources before sync.");
-    const { analyzeHarnessPrompts } = await import("./harness-vzy7n7ea.js");
+    const { analyzeHarnessPrompts } = await import("./harness-a7tb9a23.js");
     const result = await analyzeHarnessPrompts({
       rootDir: process.cwd(),
       existing: established.flatMap((prompt) => prompt.sourceDefinition ? [prompt.sourceDefinition.source] : []),
@@ -7246,7 +7246,7 @@ async function migratePromptManifest(options = {}) {
   let addedSources = [];
   let pendingSources = [];
   if (options.discover) {
-    const { analyzeHarnessPrompts } = await import("./harness-vzy7n7ea.js");
+    const { analyzeHarnessPrompts } = await import("./harness-a7tb9a23.js");
     const result = await analyzeHarnessPrompts({
       rootDir: root,
       existing: manifest.sources,

package/dist/{cli-7xc585hc.js → cli-qwgct6x7.js}

@@ -4,16 +4,16 @@ import {
 import {
   createCommandContext,
   stringOption
-} from "./cli-qvg26twp.js";
+} from "./cli-v8q7sd7g.js";
 import {
   assertFlags,
   assertPositionals,
   requireTenant
-} from "./cli-dn91fb56.js";
+} from "./cli-wzds257x.js";
 import {
   ApiError,
   callControlAPI
-} from "./cli-9btx12wp.js";
+} from "./cli-pg5qfmqc.js";
 import {
   CliInputError,
   CliInputRequiredError,
@@ -38,8 +38,9 @@ import {
   resolveIngestUrl,
   resolveModaBaseUrl,
   resolveTenantId,
+  shellArg,
   shouldInventoryFile
-} from "./cli-dve50x7p.js";
+} from "./cli-r5pp7qny.js";
 import {
   __commonJS,
   __require,
@@ -191084,7 +191085,7 @@ function renderRegistrationStatus(registration) {
   if (optional > 0)
     lines.push(`    (${registration.checklistIncomplete ? "at least " : ""}${optional} optional confirmation(s))`);
   if (registration.checklistIncomplete) {
-    lines.push(`    Some checklist items could not be loaded; run \`moda harness registration status ${registration.id}\` again.`);
+    lines.push(`    Some checklist items could not be loaded; run \`moda harness registration status ${shellArg(registration.id)}\` again.`);
   }
   lines.push(`  Dashboard ${registration.dashboardUrl}`);
   return lines.join(`
@@ -195871,7 +195872,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-atc5bbkj.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-6v4wydb8.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);