@moda-ai/cli 1.55.25 → 1.55.27

package/dist/{cli-dve50x7p.js → cli-r5pp7qny.js}

@@ -449,6 +449,14 @@ function resolveBaseUrl(options = {}) {
     return PROD_BASE_URL;
   }
 }
+function resolveBaseUrlStrict(options = {}) {
+  try {
+    getActiveProfile(options);
+  } catch {
+    return;
+  }
+  return resolveBaseUrl(options);
+}
 function resolveIngestUrl(options = {}) {
   const environment = activeProfileEnvironment(options);
   const envIngest = optionalString(getEnv(options).MODA_INGEST_URL);
@@ -668,6 +676,9 @@ var MODA_INGEST_URL = process.env.MODA_INGEST_URL || DEFAULT_INGEST_URL;
 function resolveModaBaseUrl(options = {}) {
   return resolveBaseUrl(options) || PROD_BASE_URL;
 }
+function resolveModaBaseUrlStrict(options = {}) {
+  return resolveBaseUrlStrict(options);
+}
 function validateConfig() {
   if (!resolveApiKey()) {
     throw new CliAuthError('No Moda API key found. Set MODA_API_KEY=moda_sk_... in the environment, save one with "moda auth login --api-key", or run "moda init" for interactive setup.', {
@@ -689,427 +700,6 @@ function resetApiRequestCount() {
   apiRequestCount = 0;
 }
 
-// src/batch-reads.ts
-import { readFile } from "node:fs/promises";
-var BATCH_MAX_TARGETS = 25;
-var BATCH_CONCURRENCY = 4;
-var ANCHOR_SUFFIX = /^(.+)@(\d+)$/;
-function parseBatchTarget(text, anchors, usage) {
-  const raw = text.trim();
-  if (raw.startsWith("{")) {
-    let parsed;
-    try {
-      parsed = JSON.parse(raw);
-    } catch {
-      throw new CliInputError(`Could not parse the JSON target ${JSON.stringify(raw)}.`, usage, "bad_batch_target");
-    }
-    const record = parsed;
-    const id = record?.id ?? record?.conversation_id ?? record?.trace_id;
-    if (typeof id !== "string" || id.trim() === "") {
-      throw new CliInputError(`JSON target ${JSON.stringify(raw)} has no "id" string.`, usage, "bad_batch_target");
-    }
-    const index = record.msg_index ?? record.message_index;
-    if (index !== undefined && index !== null) {
-      if (!anchors) {
-        throw new CliInputError(`JSON target ${JSON.stringify(raw)} has a msg_index, which this command does not take.`, usage, "bad_batch_target");
-      }
-      if (typeof index !== "number" || !Number.isSafeInteger(index) || index < 0) {
-        throw new CliInputError(`JSON target ${JSON.stringify(raw)} has an invalid msg_index (want an integer >= 0).`, usage, "bad_batch_target");
-      }
-      return { raw, id, msgIndex: index };
-    }
-    return { raw, id };
-  }
-  if (anchors) {
-    const match = ANCHOR_SUFFIX.exec(raw);
-    if (match) {
-      const msgIndex = Number(match[2]);
-      if (!Number.isSafeInteger(msgIndex)) {
-        throw new CliInputError(`Target ${JSON.stringify(raw)} has an @msg_index past ${Number.MAX_SAFE_INTEGER}. ` + 'If the id itself ends in @<digits>, pass it as {"id": "..."}.', usage, "bad_batch_target");
-      }
-      return { raw, id: match[1], msgIndex };
-    }
-  }
-  return { raw, id: raw };
-}
-function parseTargetLines(text, anchors, usage) {
-  return text.split(/\r?\n/).map((line) => line.trim()).filter((line) => line !== "").map((line) => parseBatchTarget(line, anchors, usage));
-}
-async function readStdinText() {
-  if (process.stdin.isTTY) {
-    throw new CliInputError("--ids-from=- reads targets from stdin, but stdin is a terminal. Pipe ids in (one per line) or pass a file path.", undefined, "ids_from_tty");
-  }
-  const chunks = [];
-  for await (const chunk of process.stdin)
-    chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
-  return Buffer.concat(chunks).toString("utf8");
-}
-async function readIdsFrom(source, usage) {
-  if (source === "" || source === "true") {
-    throw new CliInputError("--ids-from needs a value: - (stdin) or a file path.", usage, "missing_flag_value");
-  }
-  if (source === "-")
-    return readStdinText();
-  try {
-    return await readFile(source, "utf8");
-  } catch (error) {
-    const code = error.code;
-    throw new CliInputError(`Could not read --ids-from file ${JSON.stringify(source)}${typeof code === "string" ? ` (${code})` : ""}.`, usage, "ids_from_unreadable");
-  }
-}
-async function collectBatchTargets(positionals, idsFrom, options) {
-  const targets = positionals.map((value) => parseBatchTarget(value, options.anchors, options.usage));
-  if (idsFrom !== undefined) {
-    targets.push(...parseTargetLines(await readIdsFrom(idsFrom, options.usage), options.anchors, options.usage));
-  }
-  const seen = new Set;
-  const unique = targets.filter((target) => {
-    const key = `${target.id}\x00${target.msgIndex ?? ""}`;
-    if (seen.has(key))
-      return false;
-    seen.add(key);
-    return true;
-  });
-  if (unique.length === 0) {
-    throw new CliInputError(`No targets: --ids-from gave no ids (one per line).`, options.usage, "missing_positional");
-  }
-  if (unique.length > BATCH_MAX_TARGETS) {
-    throw new CliInputError(`Got ${unique.length} targets; 'moda ${options.command}' reads at most ${BATCH_MAX_TARGETS} per call, so nothing was read. ` + `Split the ids into calls of ${BATCH_MAX_TARGETS} or fewer.`, options.usage, "batch_too_large");
-  }
-  return unique;
-}
-async function mapWithConcurrency(items, limit, fn) {
-  const results = new Array(items.length);
-  let next = 0;
-  let failure;
-  const worker = async () => {
-    while (!failure && next < items.length) {
-      const index = next++;
-      try {
-        results[index] = await fn(items[index], index);
-      } catch (error) {
-        failure ??= { error };
-      }
-    }
-  };
-  await Promise.all(Array.from({ length: Math.max(1, Math.min(limit, items.length)) }, worker));
-  if (failure)
-    throw failure.error;
-  return results;
-}
-function idNeedsJsonTarget(id) {
-  return ANCHOR_SUFFIX.test(id);
-}
-function contextTarget(id) {
-  const verbatim = id === id.trim() && !id.startsWith("{") && !idNeedsJsonTarget(id);
-  return verbatim ? id : JSON.stringify({ id });
-}
-
-// src/transforms.ts
-function asRecord(value) {
-  if (value && typeof value === "object" && !Array.isArray(value)) {
-    return value;
-  }
-  return null;
-}
-function asString(value) {
-  return typeof value === "string" ? value : null;
-}
-function asNumber(value) {
-  return typeof value === "number" && Number.isFinite(value) ? value : null;
-}
-function frustrationAnchorIndex(row) {
-  if (!row)
-    return null;
-  const userQuotes = Array.isArray(row.user_quotes) ? row.user_quotes : [];
-  const firstQuote = asRecord(userQuotes[0]);
-  const resolved = asNumber(firstQuote?.msg_index) ?? asNumber(row.anchor_msg_index);
-  if (resolved !== null)
-    return resolved;
-  const keyTurns = Array.isArray(row.key_turns) ? row.key_turns : [];
-  const firstTurn = keyTurns.find((t) => typeof t === "number");
-  if (firstTurn !== undefined)
-    return firstTurn;
-  return asNumber(firstQuote?.turn);
-}
-function buildFrustrationAnchor(row) {
-  const conversation_id = asString(row.conversation_id) ?? "";
-  const userQuotes = Array.isArray(row.user_quotes) ? row.user_quotes : [];
-  const firstQuote = asRecord(userQuotes[0]);
-  const keyTurnsRaw = Array.isArray(row.key_turns) ? row.key_turns : [];
-  const all_turns = keyTurnsRaw.filter((t) => typeof t === "number");
-  const msg_index = frustrationAnchorIndex(row);
-  let signal = null;
-  let quote_preview = null;
-  if (firstQuote) {
-    signal = asString(firstQuote.signal);
-    const quote = asString(firstQuote.quote);
-    if (quote !== null) {
-      let end = 0;
-      let points = 0;
-      for (const ch of quote) {
-        if (points++ === 200)
-          break;
-        end += ch.length;
-      }
-      quote_preview = quote.slice(0, end);
-    }
-  }
-  return {
-    kind: "frustration",
-    conversation_id,
-    msg_index,
-    signal,
-    quote_preview,
-    all_turns,
-    no_anchor: msg_index === null
-  };
-}
-function buildToolFailureAnchor(row, toolName) {
-  const conversation_id = asString(row.conversation_id) ?? "";
-  const msg_index = asNumber(row.msg_index);
-  const tool_use_id = asString(row.tool_use_id);
-  const error_subtype = asString(row.error_subtype);
-  return {
-    kind: "tool_failure",
-    conversation_id,
-    msg_index,
-    tool_name: toolName,
-    tool_use_id,
-    error_subtype,
-    no_anchor: msg_index === null
-  };
-}
-function frustrationsFromEmotions(response) {
-  if (!Array.isArray(response.detections) || Array.isArray(response.frustrations))
-    return response;
-  const summary = asRecord(response.summary) ?? {};
-  const pagination = asRecord(response.pagination) ?? {};
-  const byFamily = asRecord(summary.by_family) ?? {};
-  const totalAnalyzed = asNumber(summary.conversations_analyzed) ?? 0;
-  const byFamilyConversations = asRecord(summary.conversations_by_family);
-  const frustrated = asNumber(byFamilyConversations?.frustration) ?? asNumber(byFamily.frustration) ?? 0;
-  const frustrations = response.detections.map((item) => asRecord(item)).filter((row) => row !== null && (row.family === undefined || row.family === "frustration")).map(({ conversation_context, score, is_detected, ...row }) => ({
-    ...row,
-    is_frustrated: is_detected === true,
-    frustration_score: score,
-    target: row.elicitor === "bot" || row.elicitor === "external" ? row.elicitor : "ambiguous",
-    conversation: conversation_context ?? null
-  }));
-  const atRisk = asNumber(pagination.at_risk) ?? Math.max(0, (asNumber(pagination.total) ?? 0) - frustrated);
-  const signalBreakdown = {};
-  for (const item of Array.isArray(response.signal_breakdown) ? response.signal_breakdown : []) {
-    const row = asRecord(item);
-    if (row?.family === "frustration" && typeof row.signal === "string") {
-      signalBreakdown[row.signal] = asNumber(row.count) ?? 0;
-    }
-  }
-  const { detections: _detections, ...rest } = response;
-  return {
-    ...rest,
-    summary: {
-      total_analyzed: totalAnalyzed,
-      frustrated_count: frustrated,
-      at_risk_count: atRisk,
-      frustration_rate_pct: totalAnalyzed > 0 ? Math.round(frustrated / totalAnalyzed * 1000) / 10 : 0
-    },
-    signal_breakdown: signalBreakdown,
-    frustrations,
-    source: "emotion_detections"
-  };
-}
-function withFrustrationAnchors(response) {
-  if (!Array.isArray(response.frustrations))
-    return response;
-  const frustrations = response.frustrations.map((item) => {
-    const row = asRecord(item);
-    if (!row)
-      return item;
-    const anchor = buildFrustrationAnchor(row);
-    return { ...row, anchor };
-  });
-  return { ...response, frustrations };
-}
-var TOOL_FAILURE_CONTEXT_RADIUS = 2;
-function shellWord(value) {
-  return /^[\w@%+=:,./-]+$/.test(value) ? value : `'${value.replace(/'/g, `'\\''`)}'`;
-}
-function trimFailureWindow(value, radius, fallbackCenter) {
-  const conv = asRecord(value);
-  if (!conv)
-    return value ?? null;
-  const { coverage: _coverage, context, ...convRest } = conv;
-  const ctx = asRecord(context);
-  if (!ctx)
-    return convRest;
-  const center = asNumber(ctx.center_index) ?? fallbackCenter;
-  const messages = (Array.isArray(ctx.messages) ? ctx.messages : []).map((message) => asRecord(message)).filter((message) => {
-    const index = asNumber(message?.index);
-    return message !== null && (center === null || index === null || Math.abs(index - center) <= radius);
-  }).map(({ content_blocks, ...message }) => {
-    const covered = typeof message.content === "string" && message.content.length > 0 || Array.isArray(message.tool_calls) && message.tool_calls.length > 0 || Array.isArray(message.tool_results) && message.tool_results.length > 0;
-    return covered || content_blocks === undefined ? message : { ...message, content_blocks };
-  });
-  const indexes = messages.map((message) => asNumber(message.index)).filter((index) => index !== null);
-  return {
-    ...convRest,
-    context: {
-      ...ctx,
-      ...indexes.length > 0 ? { from_index: Math.min(...indexes), to_index: Math.max(...indexes) } : {},
-      messages
-    }
-  };
-}
-function trimToolFailureConversations(response, opts) {
-  if (!Array.isArray(response.examples))
-    return response;
-  const examples = response.examples.map((item) => {
-    const row = asRecord(item);
-    if (!row)
-      return item;
-    const { conversation, window, ...rest } = row;
-    const conversationId = asString(row.conversation_id);
-    const msgIndex = asNumber(asRecord(row.anchor)?.msg_index) ?? asNumber(row.msg_index);
-    return {
-      ...rest,
-      ...conversationId && msgIndex !== null ? { context_command: `moda traces get ${shellWord(contextTarget(conversationId))} --msg-index=${msgIndex} --window=${TOOL_FAILURE_CONTEXT_RADIUS}` } : {},
-      ...opts.drop ? {} : { conversation: trimFailureWindow(conversation, TOOL_FAILURE_CONTEXT_RADIUS, msgIndex) },
-      ..."window" in row ? { window: trimFailureWindow(window, opts.windowRadius ?? TOOL_FAILURE_CONTEXT_RADIUS, msgIndex) } : {}
-    };
-  });
-  return { ...response, examples };
-}
-function withToolFailureAnchors(response) {
-  if (!Array.isArray(response.examples))
-    return response;
-  const toolName = asString(response.tool_name) ?? "";
-  const examples = response.examples.map((item) => {
-    const row = asRecord(item);
-    if (!row)
-      return item;
-    const anchor = buildToolFailureAnchor(row, toolName);
-    return { ...row, anchor };
-  });
-  return { ...response, examples };
-}
-function embeddedWindowSize(conversation) {
-  if (!conversation)
-    return null;
-  const ctx = asRecord(conversation.context);
-  if (!ctx)
-    return null;
-  const center = asNumber(ctx.center_index);
-  const from = asNumber(ctx.from_index);
-  const to = asNumber(ctx.to_index);
-  if (center === null || from === null || to === null)
-    return null;
-  return Math.min(center - from, to - center);
-}
-var DETECTION_CONTEXT_RADIUS = 2;
-function withoutDetectionWindows(response, listKey, windowKey) {
-  const list = response[listKey];
-  if (!Array.isArray(list))
-    return response;
-  const rows = list.map((item) => {
-    const row = asRecord(item);
-    if (!row)
-      return item;
-    const { [windowKey]: _window, ...rest } = row;
-    const conversationId = asString(row.conversation_id);
-    const msgIndex = asNumber(asRecord(row.anchor)?.msg_index) ?? frustrationAnchorIndex(row);
-    return {
-      ...rest,
-      ...conversationId && msgIndex !== null ? { context_command: `moda traces get ${shellWord(contextTarget(conversationId))} --msg-index=${msgIndex} --window=${DETECTION_CONTEXT_RADIUS}` } : {}
-    };
-  });
-  return { ...response, [listKey]: rows };
-}
-var PROBLEM_COMPACT_EVIDENCE = 5;
-var PROBLEM_COMPACT_OMITTED_BLOCKS = [
-  "rubric",
-  "trend",
-  "sub_problems",
-  "affected_conversations",
-  "remainder",
-  "confidence",
-  "change_history",
-  "stories"
-];
-function readCommand(command, purpose) {
-  return { command, purpose, mutability: "read", requires_approval: false };
-}
-function evidenceMsgIndex(row) {
-  return asNumber(row.anchor_msg_index) ?? asNumber(asRecord(asRecord(row.snippet_parsed)?.anchor)?.msg_index);
-}
-function compactProblemDossier(response, problemId) {
-  const id = shellWord(asString(response.problem_id) ?? problemId);
-  const evidence = (Array.isArray(response.evidence) ? response.evidence : []).map((item) => asRecord(item)).filter((row) => row !== null);
-  const topEvidence = evidence.slice(0, PROBLEM_COMPACT_EVIDENCE).map((row) => {
-    const conversationId = asString(row.conversation_id);
-    const msgIndex = evidenceMsgIndex(row);
-    return {
-      attribution_id: row.attribution_id ?? null,
-      conversation_id: conversationId,
-      msg_index: msgIndex,
-      signal_family: row.signal_family ?? null,
-      signal_type: row.signal_type ?? null,
-      confidence: row.confidence ?? null,
-      causal_rationale: row.causal_rationale ?? null,
-      door: row.door ?? null,
-      replay_verified: row.replay_verified ?? null,
-      ...conversationId && msgIndex !== null ? { context_command: `moda traces get ${shellWord(contextTarget(conversationId))} --msg-index=${msgIndex}` } : {}
-    };
-  });
-  const reportsBlock = asRecord(response.investigation_reports);
-  const reports = (Array.isArray(reportsBlock?.items) ? reportsBlock.items : []).map((item) => asRecord(item)).filter((row) => row !== null).map((row) => ({
-    report_id: row.report_id ?? null,
-    conversation_id: row.conversation_id ?? null,
-    mechanism: row.mechanism ?? null,
-    suspected_surface: row.suspected_surface ?? null,
-    severity: row.severity ?? null,
-    problem_found: row.problem_found ?? null
-  }));
-  const verification = asRecord(response.verification);
-  const { samples: _samples, ...verificationCounts } = verification ?? {};
-  const dossier = asRecord(response.dossier);
-  const { representative_story_keys: _storyKeys, ...dossierSummary } = dossier ?? {};
-  const trend = Array.isArray(response.trend) ? response.trend : [];
-  const data = {
-    found: response.found ?? true,
-    problem_id: response.problem_id ?? problemId,
-    requested_problem_id: response.requested_problem_id ?? problemId,
-    alias_resolved: response.alias_resolved ?? false,
-    view: "compact",
-    header: response.header ?? null,
-    dossier: dossier ? dossierSummary : null,
-    verification: verification ? verificationCounts : null,
-    ...response.impact_identity !== undefined ? { impact_identity: response.impact_identity } : {},
-    ...response.hierarchy !== undefined ? { hierarchy: response.hierarchy } : {},
-    ...trend.length > 0 ? { trend_latest: trend[trend.length - 1], trend_points: trend.length } : {},
-    top_evidence: topEvidence,
-    evidence_in_dossier: evidence.length,
-    reports,
-    omitted: {
-      evidence_rows: Math.max(0, evidence.length - topEvidence.length),
-      report_narratives: reports.length,
-      reports_has_more: reportsBlock?.has_more === true,
-      blocks: PROBLEM_COMPACT_OMITTED_BLOCKS.filter((key) => (key in response))
-    },
-    full_command: `moda problems get ${id} --full`
-  };
-  const nextCommands = [
-    readCommand(`moda problems get ${id} --evidence --limit=20`, "Page every evidence row with its anchor (follow next_cursor)."),
-    readCommand(`moda problems get ${id} --reports`, "Page investigation reports with narratives and citations."),
-    readCommand(`moda problems get ${id} --traces`, "Page affected traces with their latest anchor."),
-    readCommand(`moda problems get ${id} --full`, "The complete dossier, every block (large).")
-  ];
-  const first = topEvidence.find((row) => typeof row.context_command === "string");
-  if (first?.context_command) {
-    nextCommands.push(readCommand(first.context_command, "Read the trace around the top evidence anchor."));
-  }
-  return { data, nextCommands };
-}
-
 // ../../packages/harness-snapshot/src/policy.ts
 var MAX_SCANNED_FILE_BYTES = 512 * 1024;
 var DEFAULT_MAX_INVENTORY_FILES = 12000;
@@ -1450,6 +1040,15 @@ function packSnapshot(inputs, opts) {
     skips
   };
 }
+// src/shell-quote.ts
+function shellArg(value) {
+  if (/^[A-Za-z0-9_.,:@%+/=-]+$/.test(value))
+    return value;
+  if (!/["$`\\!]/.test(value))
+    return `"${value}"`;
+  return `'${value.replace(/'/g, `'\\''`)}'`;
+}
+
 // src/legacy-names.ts
 var LEGACY_NAMES = [
   { legacy: "conversations", use: "moda traces list", canonical: { command: "traces", subcommand: "list" }, silent: true },
@@ -1542,7 +1141,9 @@ function quotedArgumentSpans(text) {
   return spans;
 }
 function canonicalInvocation(entry, rest) {
-  let words = [...rest];
+  const separator = rest.indexOf("--");
+  const afterSeparator = separator === -1 ? [] : rest.slice(separator);
+  let words = separator === -1 ? [...rest] : rest.slice(0, separator);
   const takeFlag = (pattern) => {
     const index = words.findIndex((word2) => pattern.test(word2));
     if (index === -1)
@@ -1563,7 +1164,7 @@ function canonicalInvocation(entry, rest) {
       takeFlag(/^--detections(=true)?$/);
       break;
     case "false-positive":
-      words = words.map((word) => /^--undo(=true)?$/.test(word) ? "--verdict=clear" : word);
+      words = words.filter((word) => !/^--undo=(false|0)$/i.test(word)).map((word) => /^--undo(=true|=1)?$/i.test(word) ? "--verdict=clear" : word);
       break;
     case "signal-label":
       words = words.map((word) => word.replace(/^--label=fits$/, "--verdict=correct").replace(/^--label=does_not_fit$/, "--verdict=false_positive").replace(/^--label=.*$/, "--verdict=correct|false_positive"));
@@ -1585,7 +1186,7 @@ function canonicalInvocation(entry, rest) {
       out.push(token.startsWith("--family=") ? `${token}${familySuffix}` : token);
     }
   }
-  return [...out, ...positionals, ...words].join(" ");
+  return [...out, ...positionals, ...words, ...afterSeparator].join(" ");
 }
 function canonicalCommandText(text) {
   if (!text.includes("moda "))
@@ -1616,8 +1217,8 @@ function canonicalCommandText(text) {
 
 // src/output.ts
 import { randomUUID } from "node:crypto";
-import { lstatSync, mkdirSync as mkdirSync2, readdirSync, unlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { tmpdir } from "node:os";
+import { chmodSync as chmodSync2, lstatSync, mkdirSync as mkdirSync2, readdirSync, unlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { tmpdir, userInfo } from "node:os";
 import { join as join2 } from "node:path";
 var SUGGESTION_KEY = /(_commands?|^hints?|^suggestions?)$/i;
 function canonicalDeep(value, rewriteStrings) {
@@ -1684,20 +1285,51 @@ var MODA_COMMAND = /^(?:moda |.*\| moda )/;
 function withProfileFlag(command, flag) {
   return MODA_COMMAND.test(command) && !/(?:^|\s)--profile(?:[=\s]|$)/.test(command) ? `${command} ${flag}` : command;
 }
+var GENERATED_COMMAND_KEY = /_commands?$/;
+var GENERATED_COMMAND_LIST_KEY = /(?:_commands|^recommended_actions|^recommendedActions|^setupPlan)$/;
+var CUSTOMER_CONTENT_KEYS = new Set([
+  "messages",
+  "context",
+  "conversation",
+  "conversation_context",
+  "window",
+  "tool_calls",
+  "tool_results",
+  "content",
+  "content_blocks",
+  "input",
+  "output",
+  "tool_input",
+  "tool_output",
+  "spans",
+  "ingest",
+  "raw_event",
+  "attributes",
+  "payload",
+  "snippet_parsed",
+  "evidence_snippet",
+  "request",
+  "response"
+]);
 function withProfileOnCommands(value, profile) {
-  const flag = `--profile=${shellWord(profile)}`;
-  const visit = (node, key) => {
-    const isCommandKey = key !== undefined && /commands?$/.test(key);
+  const flag = `--profile=${shellArg(profile)}`;
+  const visit = (node, key, inCommandList) => {
+    const isCommandKey = key !== undefined && (GENERATED_COMMAND_KEY.test(key) || inCommandList && key === "command");
     if (typeof node === "string")
       return isCommandKey ? withProfileFlag(node, flag) : node;
-    if (Array.isArray(node))
-      return node.map((item) => visit(item, isCommandKey ? key : undefined));
-    const record = asRecord2(node);
+    if (Array.isArray(node)) {
+      const list = key !== undefined && GENERATED_COMMAND_LIST_KEY.test(key);
+      return node.map((item) => typeof item === "string" ? visit(item, isCommandKey ? key : undefined, false) : visit(item, undefined, list));
+    }
+    const record = asRecord(node);
     if (!record)
       return node;
-    return Object.fromEntries(Object.entries(record).map(([entryKey, entry]) => [entryKey, visit(entry, entryKey)]));
+    return Object.fromEntries(Object.entries(record).map(([entryKey, entry]) => [
+      entryKey,
+      CUSTOMER_CONTENT_KEYS.has(entryKey) ? entry : visit(entry, entryKey, inCommandList)
+    ]));
   };
-  return visit(value, undefined);
+  return visit(value, undefined, false);
 }
 var FALLBACK_RUN_ID = randomUUID();
 var fallbackSeq = 0;
@@ -1879,12 +1511,16 @@ function createCliOutput(options) {
       if (options.quiet && !bypassQuiet)
         return;
       const profile = options.invocation?.flags.profile;
+      const agentOutput = options.mode === "agent" || options.mode === "agent-stream";
       if (profile) {
-        data = withProfileOnCommands(data, profile);
+        if (agentOutput)
+          data = withProfileOnCommands(data, profile);
         if (writeOptions.nextCommands)
-          writeOptions = { ...writeOptions, nextCommands: withProfileOnCommands(writeOptions.nextCommands, profile) };
+          writeOptions = { ...writeOptions, nextCommands: withProfileOnCommands({ next_commands: writeOptions.nextCommands }, profile).next_commands };
+        if (writeOptions.recommendedActions)
+          writeOptions = { ...writeOptions, recommendedActions: withProfileOnCommands({ recommended_actions: writeOptions.recommendedActions }, profile).recommended_actions };
       }
-      if (options.mode === "agent" || options.mode === "agent-stream") {
+      if (agentOutput) {
         if (state.terminal)
           return;
         const envelope = writeEnvelope(data, writeOptions);
@@ -1905,7 +1541,8 @@ function createCliOutput(options) {
         }
         return;
       }
-      safeWriteStdout(`${JSON.stringify(canonicalSuggestionFields(redactDeep(data)), null, 2)}
+      const indent = options.mode === "human" || (options.pretty ?? Boolean(process.stdout.isTTY)) ? 2 : undefined;
+      safeWriteStdout(`${JSON.stringify(canonicalSuggestionFields(redactDeep(data)), null, indent)}
 `);
       for (const warning of writeOptions.warnings ?? []) {
         safeWriteStderr(`Warning: ${canonicalCommandText(warning)}
@@ -2368,6 +2005,16 @@ function errorToAgentError(error) {
         blocking: true
       };
     }
+    if (apiErrorStatus(error) === 404 && !error.readable) {
+      const suggestions = "suggestions" in error && Array.isArray(error.suggestions) ? error.suggestions.filter((s) => typeof s === "string") : [];
+      return {
+        code: "not_found",
+        message: `Not found (HTTP 404): ${serverErrorMessage(error) ?? "the Moda API has no such resource"}.`,
+        cause: "The id may be mistyped, from another tenant or profile, or deleted.",
+        ...suggestions.length > 0 ? { suggested_commands: suggestions } : {},
+        blocking: true
+      };
+    }
     if (isApiLikeError(error)) {
       const statusCode = "statusCode" in error ? error.statusCode : undefined;
       const typedCode = "code" in error && typeof error.code === "string" ? error.code : undefined;
@@ -2445,11 +2092,11 @@ function normalizeSummary(summary, command, status, data) {
   return inferSummary(command, status, data);
 }
 function inferSummary(command, status, data) {
-  const record = asRecord2(data);
+  const record = asRecord(data);
   if (status === "error") {
     return { text: `${command} failed.`, confidence: "high" };
   }
-  const summary = asRecord2(record?.summary);
+  const summary = asRecord(record?.summary);
   if (summary) {
     const statusValue = typeof summary.status === "string" ? summary.status : undefined;
     const fail = typeof summary.fail === "number" ? summary.fail : undefined;
@@ -2501,11 +2148,11 @@ function inferMutability(command) {
   return "read";
 }
 function inferWarnings(data) {
-  const record = asRecord2(data);
+  const record = asRecord(data);
   const direct = record?.warnings;
   if (Array.isArray(direct))
     return direct.filter((item) => typeof item === "string");
-  const validation = asRecord2(record?.validation);
+  const validation = asRecord(record?.validation);
   if (Array.isArray(validation?.warnings)) {
     return validation.warnings.filter((item) => typeof item === "string");
   }
@@ -2543,10 +2190,37 @@ function pruneAgentFullOutputs(dir, keep, now = Date.now()) {
     } catch {}
   }
 }
+function currentUserTag() {
+  if (typeof process.getuid === "function")
+    return String(process.getuid());
+  try {
+    return userInfo().username.replace(/[^A-Za-z0-9_.-]+/g, "_") || "user";
+  } catch {
+    return "user";
+  }
+}
+function defaultAgentOutputDir() {
+  return join2(tmpdir(), `moda-agent-output-${currentUserTag()}`);
+}
+function ensurePrivateDir(dir) {
+  mkdirSync2(dir, { recursive: true, mode: 448 });
+  const stat = lstatSync(dir);
+  if (!stat.isDirectory())
+    throw new Error(`${dir} is not a directory.`);
+  if (typeof process.getuid === "function" && stat.uid !== process.getuid()) {
+    throw new Error(`${dir} is owned by another user.`);
+  }
+  if (process.platform !== "win32" && (stat.mode & 63) !== 0)
+    chmodSync2(dir, 448);
+}
 function writeAgentFullOutput(command, data) {
   try {
-    const dir = process.env.MODA_AGENT_OUTPUT_DIR || join2(tmpdir(), "moda-agent-output");
-    mkdirSync2(dir, { recursive: true, mode: 448 });
+    const configured = process.env.MODA_AGENT_OUTPUT_DIR;
+    const dir = configured || defaultAgentOutputDir();
+    if (configured)
+      mkdirSync2(dir, { recursive: true, mode: 448 });
+    else
+      ensurePrivateDir(dir);
     const slug = command.replace(/[^a-zA-Z0-9_-]+/g, "-").replace(/^-+|-+$/g, "") || "output";
     const stamp = new Date().toISOString().replace(/[:.]/g, "-");
     const path = join2(dir, `${slug}-${stamp}-${randomUUID().slice(0, 8)}.json`);
@@ -2567,7 +2241,7 @@ function contentBlocksRedundant(message) {
   const hasToolResults = Array.isArray(message.tool_results) && message.tool_results.length > 0;
   const texts = [];
   for (const item of blocks) {
-    const block = asRecord2(item);
+    const block = asRecord(item);
     if (!block)
       return false;
     if (block.type === "text") {
@@ -2599,7 +2273,7 @@ function shedRedundantContentBlocks(value) {
           visit(item);
       return;
     }
-    const record = asRecord2(node);
+    const record = asRecord(node);
     if (!record)
       return;
     if ("content_blocks" in record && contentBlocksRedundant(record)) {
@@ -2618,22 +2292,29 @@ function continuationCommand(invocation, overrides) {
   const normalize2 = (key) => key.replace(/_/g, "-");
   const overridden = new Set(Object.keys(overrides).map(normalize2));
   const bare = new Set((invocation.bareFlags ?? []).map(normalize2));
-  const parts = ["moda", invocation.command, ...invocation.positionals.map((value) => shellWord(value))];
+  const dashAt = invocation.positionals.findIndex((value) => value.startsWith("-"));
+  const leading = dashAt === -1 ? invocation.positionals : invocation.positionals.slice(0, dashAt);
+  const trailing = dashAt === -1 ? [] : invocation.positionals.slice(dashAt);
+  const parts = ["moda", invocation.command, ...leading.map((value) => shellArg(value))];
   for (const [key, value] of Object.entries(invocation.flags)) {
     const flag = normalize2(key);
     if (overridden.has(flag) || CONTINUATION_SECRET_FLAGS.has(flag))
       continue;
-    parts.push(bare.has(flag) && value === "true" ? `--${flag}` : `--${flag}=${shellWord(String(value))}`);
+    parts.push(bare.has(flag) && value === "true" ? `--${flag}` : `--${flag}=${shellArg(String(value))}`);
   }
   for (const [key, value] of Object.entries(overrides))
-    parts.push(`--${normalize2(key)}=${shellWord(String(value))}`);
+    parts.push(`--${normalize2(key)}=${shellArg(String(value))}`);
+  if (trailing.length > 0)
+    parts.push("--", ...trailing.map((value) => shellArg(value)));
   return canonicalCommandText(parts.join(" "));
 }
 var PAGED_LIST_BY_COMMAND = {
   "tool-failure-detail": "examples",
   emotions: "detections",
   frustrations: "frustrations",
-  "problems remainder": "groups"
+  laziness: "conversations",
+  "problems remainder": "groups",
+  "problem remainder": "groups"
 };
 function pagedListFor(invocation) {
   const { command, positionals } = invocation.routedAs ?? invocation;
@@ -2645,7 +2326,7 @@ function rewritePagination(list, isTopLevel, invocation) {
   const { parent, array, originalLength } = list;
   if (!parent)
     return;
-  const nested = asRecord2(parent.pagination);
+  const nested = asRecord(parent.pagination);
   const inline = !nested && !isTopLevel && (("has_more" in parent) || ("next_cursor" in parent)) ? parent : undefined;
   const pagination = nested ?? inline;
   if (!pagination)
@@ -2663,7 +2344,7 @@ function rewritePagination(list, isTopLevel, invocation) {
   const kept = array.length;
   const omitted = originalLength - kept;
   const offset = typeof pagination.offset === "number" && Number.isFinite(pagination.offset) ? pagination.offset : undefined;
-  const hadCursor = typeof pagination.next_cursor === "string" && pagination.next_cursor.length > 0;
+  const hadCursor = typeof pagination.next_cursor === "string" && pagination.next_cursor.length > 0 || typeof pagination.nextCursor === "string" && pagination.nextCursor.length > 0;
   if (typeof pagination.limit === "number") {
     pagination.requested_limit = pagination.limit;
     pagination.limit = kept;
@@ -2671,6 +2352,10 @@ function rewritePagination(list, isTopLevel, invocation) {
   pagination.returned = kept;
   pagination.omitted_for_byte_limit = omitted;
   pagination.has_more = true;
+  if ("hasMore" in pagination)
+    pagination.hasMore = true;
+  if ("nextCursor" in pagination && typeof pagination.nextCursor === "string" && pagination.nextCursor)
+    pagination.nextCursor = null;
   const pastOffsetCap = offset !== undefined && offset + kept > MAX_PAGE_OFFSET;
   if (offset !== undefined && !pastOffsetCap)
     pagination.next_offset = offset + kept;
@@ -2781,7 +2466,7 @@ function boundForAgent(data, maxBytes = agentMaxOutputBytes(), options = {}) {
       fullOutputPath
     };
   }
-  const root = asRecord2(bounded);
+  const root = asRecord(bounded);
   const notes = [];
   const nextCommands = [];
   for (const list of droppedLists.values()) {
@@ -2819,7 +2504,7 @@ function boundForAgent(data, maxBytes = agentMaxOutputBytes(), options = {}) {
     ...nextCommands.length > 0 ? { nextCommands } : {}
   };
 }
-function asRecord2(value) {
+function asRecord(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : undefined;
 }
 function extractSuggestedCommands(text) {
@@ -2852,4 +2537,4 @@ function apiKeyHeaders(key, options = {}, url) {
   return headers;
 }
 
-export { PROD_BASE_URL, DEFAULT_INGEST_URL, getModaPaths, getModaDir, isLoopbackBaseUrl, describeBaseUrlSource, loadProfileConfig, saveProfileConfig, getActiveProfile, setActiveProfile, upsertProfile, clearStoredApiKeyCredentials, secretFilePathFromRef, resolveSecretReference, resolveApiKeyFromActiveProfile, resolveTenantIdFromActiveProfile, ensureSecretFilePermissions, writeSecretJsonFile, CliInputError, attachInputDetails, inputDetailsOf, CliAccessError, CliInputRequiredError, CliAuthError, CliNotFoundError, CliCancellationError, isNetworkLikeError, isApiLikeError, apiErrorStatus, VERSION, MODA_BASE_URL, loadCliConfig, saveCliConfig, resolveApiKey, embeddedTenantIdFromApiKey, resolveIngestUrl2 as resolveIngestUrl, resolveTenantId, resolveApiTenantId, resolveModaBaseUrl, validateConfig, isPlatformApiKey, setPlatformTenantOverride, apiKeyHeaders, recordApiRequest, getApiRequestCount, resetApiRequestCount, BATCH_MAX_TARGETS, BATCH_CONCURRENCY, parseBatchTarget, collectBatchTargets, mapWithConcurrency, contextTarget, asRecord, asString, asNumber, frustrationAnchorIndex, frustrationsFromEmotions, withFrustrationAnchors, shellWord, trimToolFailureConversations, withToolFailureAnchors, embeddedWindowSize, withoutDetectionWindows, compactProblemDossier, MAX_SCANNED_FILE_BYTES, DEFAULT_MAX_INVENTORY_FILES, DEFAULT_MAX_INVENTORY_TEXT_BYTES, MAX_RECORDED_SKIPS, SKIPPED_DIRS, isSkippedDir, isSkippedPathPrefix, isEvalLikePath, shouldInventoryFile, isTextFile, isSecretishPath, SECRET_KEYS, redactDeep, redactString, packSnapshot, LEGACY_NAMES, canonicalCommandText, setAgentUpdateNotice, EXIT_OK, EXIT_ERROR, EXIT_DEGRADED, EXIT_AUTH_REQUIRED, EXIT_INPUT_REQUIRED, EXIT_CANCELLED, AGENT_ERROR_CODES, wasOutputCancelled, safeWriteStdout, safeWriteStderr, explicitOutputMode, outputModeFromFlags, resolveOutputMode, createCliOutput, agentEnvelopeFits, errorToAgentError, agentMaxOutputBytes };
+export { PROD_BASE_URL, DEFAULT_INGEST_URL, getModaPaths, getModaDir, isLoopbackBaseUrl, describeBaseUrlSource, loadProfileConfig, saveProfileConfig, getActiveProfile, setActiveProfile, upsertProfile, clearStoredApiKeyCredentials, secretFilePathFromRef, resolveSecretReference, resolveApiKeyFromActiveProfile, resolveTenantIdFromActiveProfile, ensureSecretFilePermissions, writeSecretJsonFile, CliInputError, attachInputDetails, inputDetailsOf, CliAccessError, CliInputRequiredError, CliAuthError, CliNotFoundError, CliCancellationError, isNetworkLikeError, isApiLikeError, apiErrorStatus, VERSION, MODA_BASE_URL, loadCliConfig, saveCliConfig, resolveApiKey, embeddedTenantIdFromApiKey, resolveIngestUrl2 as resolveIngestUrl, resolveTenantId, resolveApiTenantId, resolveModaBaseUrl, resolveModaBaseUrlStrict, validateConfig, isPlatformApiKey, setPlatformTenantOverride, apiKeyHeaders, recordApiRequest, getApiRequestCount, resetApiRequestCount, MAX_SCANNED_FILE_BYTES, DEFAULT_MAX_INVENTORY_FILES, DEFAULT_MAX_INVENTORY_TEXT_BYTES, MAX_RECORDED_SKIPS, SKIPPED_DIRS, isSkippedDir, isSkippedPathPrefix, isEvalLikePath, shouldInventoryFile, isTextFile, isSecretishPath, SECRET_KEYS, redactDeep, redactString, packSnapshot, shellArg, LEGACY_NAMES, canonicalCommandText, setAgentUpdateNotice, EXIT_OK, EXIT_ERROR, EXIT_DEGRADED, EXIT_AUTH_REQUIRED, EXIT_INPUT_REQUIRED, EXIT_CANCELLED, AGENT_ERROR_CODES, wasOutputCancelled, safeWriteStdout, safeWriteStderr, explicitOutputMode, outputModeFromFlags, resolveOutputMode, createCliOutput, agentEnvelopeFits, errorToAgentError, agentMaxOutputBytes, continuationCommand };