@moda-ai/cli 1.55.26 → 1.55.27

package/dist/{cli-sqsjd08w.js → cli-r5pp7qny.js}

@@ -449,6 +449,14 @@ function resolveBaseUrl(options = {}) {
     return PROD_BASE_URL;
   }
 }
+function resolveBaseUrlStrict(options = {}) {
+  try {
+    getActiveProfile(options);
+  } catch {
+    return;
+  }
+  return resolveBaseUrl(options);
+}
 function resolveIngestUrl(options = {}) {
   const environment = activeProfileEnvironment(options);
   const envIngest = optionalString(getEnv(options).MODA_INGEST_URL);
@@ -668,6 +676,9 @@ var MODA_INGEST_URL = process.env.MODA_INGEST_URL || DEFAULT_INGEST_URL;
 function resolveModaBaseUrl(options = {}) {
   return resolveBaseUrl(options) || PROD_BASE_URL;
 }
+function resolveModaBaseUrlStrict(options = {}) {
+  return resolveBaseUrlStrict(options);
+}
 function validateConfig() {
   if (!resolveApiKey()) {
     throw new CliAuthError('No Moda API key found. Set MODA_API_KEY=moda_sk_... in the environment, save one with "moda auth login --api-key", or run "moda init" for interactive setup.', {
@@ -1029,425 +1040,13 @@ function packSnapshot(inputs, opts) {
     skips
   };
 }
-// src/batch-reads.ts
-import { readFile } from "node:fs/promises";
-var BATCH_MAX_TARGETS = 25;
-var BATCH_CONCURRENCY = 4;
-var ANCHOR_SUFFIX = /^(.+)@(\d+)$/;
-function parseBatchTarget(text, anchors, usage) {
-  const raw = text.trim();
-  if (raw.startsWith("{")) {
-    let parsed;
-    try {
-      parsed = JSON.parse(raw);
-    } catch {
-      throw new CliInputError(`Could not parse the JSON target ${JSON.stringify(raw)}.`, usage, "bad_batch_target");
-    }
-    const record = parsed;
-    const id = record?.id ?? record?.conversation_id ?? record?.trace_id;
-    if (typeof id !== "string" || id.trim() === "") {
-      throw new CliInputError(`JSON target ${JSON.stringify(raw)} has no "id" string.`, usage, "bad_batch_target");
-    }
-    const index = record.msg_index ?? record.message_index;
-    if (index !== undefined && index !== null) {
-      if (!anchors) {
-        throw new CliInputError(`JSON target ${JSON.stringify(raw)} has a msg_index, which this command does not take.`, usage, "bad_batch_target");
-      }
-      if (typeof index !== "number" || !Number.isSafeInteger(index) || index < 0) {
-        throw new CliInputError(`JSON target ${JSON.stringify(raw)} has an invalid msg_index (want an integer >= 0).`, usage, "bad_batch_target");
-      }
-      return { raw, id, msgIndex: index };
-    }
-    return { raw, id };
-  }
-  if (anchors) {
-    const match = ANCHOR_SUFFIX.exec(raw);
-    if (match) {
-      const msgIndex = Number(match[2]);
-      if (!Number.isSafeInteger(msgIndex)) {
-        throw new CliInputError(`Target ${JSON.stringify(raw)} has an @msg_index past ${Number.MAX_SAFE_INTEGER}. ` + 'If the id itself ends in @<digits>, pass it as {"id": "..."}.', usage, "bad_batch_target");
-      }
-      return { raw, id: match[1], msgIndex };
-    }
-  }
-  return { raw, id: raw };
-}
-function parseTargetLines(text, anchors, usage) {
-  return text.split(/\r?\n/).map((line) => line.trim()).filter((line) => line !== "").map((line) => parseBatchTarget(line, anchors, usage));
-}
-async function readStdinText() {
-  if (process.stdin.isTTY) {
-    throw new CliInputError("--ids-from=- reads targets from stdin, but stdin is a terminal. Pipe ids in (one per line) or pass a file path.", undefined, "ids_from_tty");
-  }
-  const chunks = [];
-  for await (const chunk of process.stdin)
-    chunks.push(typeof chunk === "string" ? Buffer.from(chunk) : chunk);
-  return Buffer.concat(chunks).toString("utf8");
-}
-async function readIdsFrom(source, usage) {
-  if (source === "" || source === "true") {
-    throw new CliInputError("--ids-from needs a value: - (stdin) or a file path.", usage, "missing_flag_value");
-  }
-  if (source === "-")
-    return readStdinText();
-  try {
-    return await readFile(source, "utf8");
-  } catch (error) {
-    const code = error.code;
-    throw new CliInputError(`Could not read --ids-from file ${JSON.stringify(source)}${typeof code === "string" ? ` (${code})` : ""}.`, usage, "ids_from_unreadable");
-  }
-}
-async function collectBatchTargets(positionals, idsFrom, options) {
-  const targets = positionals.map((value) => parseBatchTarget(value, options.anchors, options.usage));
-  if (idsFrom !== undefined) {
-    targets.push(...parseTargetLines(await readIdsFrom(idsFrom, options.usage), options.anchors, options.usage));
-  }
-  const seen = new Set;
-  const unique = targets.filter((target) => {
-    const key = `${target.id}\x00${target.msgIndex ?? ""}`;
-    if (seen.has(key))
-      return false;
-    seen.add(key);
-    return true;
-  });
-  if (unique.length === 0) {
-    throw new CliInputError(`No targets: --ids-from gave no ids (one per line).`, options.usage, "missing_positional");
-  }
-  if (unique.length > BATCH_MAX_TARGETS) {
-    throw new CliInputError(`Got ${unique.length} targets; 'moda ${options.command}' reads at most ${BATCH_MAX_TARGETS} per call, so nothing was read. ` + `Split the ids into calls of ${BATCH_MAX_TARGETS} or fewer.`, options.usage, "batch_too_large");
-  }
-  return unique;
-}
-async function mapWithConcurrency(items, limit, fn, options = {}) {
-  const results = new Array(items.length);
-  let next = 0;
-  let failure;
-  const worker = async () => {
-    while (!failure && next < items.length && (options.shouldStart?.(next) ?? true)) {
-      const index = next++;
-      try {
-        results[index] = await fn(items[index], index);
-      } catch (error) {
-        failure ??= { error };
-      }
-    }
-  };
-  await Promise.all(Array.from({ length: Math.max(1, Math.min(limit, items.length)) }, worker));
-  if (failure)
-    throw failure.error;
-  return next < items.length ? results.slice(0, next) : results;
-}
-function idNeedsJsonTarget(id) {
-  return ANCHOR_SUFFIX.test(id);
-}
-function contextTarget(id) {
-  const verbatim = id === id.trim() && !id.startsWith("{") && !idNeedsJsonTarget(id);
-  return verbatim ? id : JSON.stringify({ id });
-}
-
-// src/transforms.ts
-function asRecord(value) {
-  if (value && typeof value === "object" && !Array.isArray(value)) {
+// src/shell-quote.ts
+function shellArg(value) {
+  if (/^[A-Za-z0-9_.,:@%+/=-]+$/.test(value))
     return value;
-  }
-  return null;
-}
-function asString(value) {
-  return typeof value === "string" ? value : null;
-}
-function asNumber(value) {
-  return typeof value === "number" && Number.isFinite(value) ? value : null;
-}
-function frustrationAnchorIndex(row) {
-  if (!row)
-    return null;
-  const userQuotes = Array.isArray(row.user_quotes) ? row.user_quotes : [];
-  const firstQuote = asRecord(userQuotes[0]);
-  const resolved = asNumber(firstQuote?.msg_index) ?? asNumber(row.anchor_msg_index);
-  if (resolved !== null)
-    return resolved;
-  const keyTurns = Array.isArray(row.key_turns) ? row.key_turns : [];
-  const firstTurn = keyTurns.find((t) => typeof t === "number");
-  if (firstTurn !== undefined)
-    return firstTurn;
-  return asNumber(firstQuote?.turn);
-}
-function buildFrustrationAnchor(row) {
-  const conversation_id = asString(row.conversation_id) ?? "";
-  const userQuotes = Array.isArray(row.user_quotes) ? row.user_quotes : [];
-  const firstQuote = asRecord(userQuotes[0]);
-  const keyTurnsRaw = Array.isArray(row.key_turns) ? row.key_turns : [];
-  const all_turns = keyTurnsRaw.filter((t) => typeof t === "number");
-  const msg_index = frustrationAnchorIndex(row);
-  let signal = null;
-  let quote_preview = null;
-  if (firstQuote) {
-    signal = asString(firstQuote.signal);
-    const quote = asString(firstQuote.quote);
-    if (quote !== null) {
-      let end = 0;
-      let points = 0;
-      for (const ch of quote) {
-        if (points++ === 200)
-          break;
-        end += ch.length;
-      }
-      quote_preview = quote.slice(0, end);
-    }
-  }
-  return {
-    kind: "frustration",
-    conversation_id,
-    msg_index,
-    signal,
-    quote_preview,
-    all_turns,
-    no_anchor: msg_index === null
-  };
-}
-function buildToolFailureAnchor(row, toolName) {
-  const conversation_id = asString(row.conversation_id) ?? "";
-  const msg_index = asNumber(row.msg_index);
-  const tool_use_id = asString(row.tool_use_id);
-  const error_subtype = asString(row.error_subtype);
-  return {
-    kind: "tool_failure",
-    conversation_id,
-    msg_index,
-    tool_name: toolName,
-    tool_use_id,
-    error_subtype,
-    no_anchor: msg_index === null
-  };
-}
-function frustrationsFromEmotions(response) {
-  if (!Array.isArray(response.detections) || Array.isArray(response.frustrations))
-    return response;
-  const summary = asRecord(response.summary) ?? {};
-  const pagination = asRecord(response.pagination) ?? {};
-  const byFamily = asRecord(summary.by_family) ?? {};
-  const totalAnalyzed = asNumber(summary.conversations_analyzed) ?? 0;
-  const byFamilyConversations = asRecord(summary.conversations_by_family);
-  const frustrated = asNumber(byFamilyConversations?.frustration) ?? asNumber(byFamily.frustration) ?? 0;
-  const frustrations = response.detections.map((item) => asRecord(item)).filter((row) => row !== null && (row.family === undefined || row.family === "frustration")).map(({ conversation_context, score, is_detected, ...row }) => ({
-    ...row,
-    is_frustrated: is_detected === true,
-    frustration_score: score,
-    target: row.elicitor === "bot" || row.elicitor === "external" ? row.elicitor : "ambiguous",
-    conversation: conversation_context ?? null
-  }));
-  const atRisk = asNumber(pagination.at_risk) ?? Math.max(0, (asNumber(pagination.total) ?? 0) - frustrated);
-  const signalBreakdown = {};
-  for (const item of Array.isArray(response.signal_breakdown) ? response.signal_breakdown : []) {
-    const row = asRecord(item);
-    if (row?.family === "frustration" && typeof row.signal === "string") {
-      signalBreakdown[row.signal] = asNumber(row.count) ?? 0;
-    }
-  }
-  const { detections: _detections, ...rest } = response;
-  return {
-    ...rest,
-    summary: {
-      total_analyzed: totalAnalyzed,
-      frustrated_count: frustrated,
-      at_risk_count: atRisk,
-      frustration_rate_pct: totalAnalyzed > 0 ? Math.round(frustrated / totalAnalyzed * 1000) / 10 : 0
-    },
-    signal_breakdown: signalBreakdown,
-    frustrations,
-    source: "emotion_detections"
-  };
-}
-function withFrustrationAnchors(response) {
-  if (!Array.isArray(response.frustrations))
-    return response;
-  const frustrations = response.frustrations.map((item) => {
-    const row = asRecord(item);
-    if (!row)
-      return item;
-    const anchor = buildFrustrationAnchor(row);
-    return { ...row, anchor };
-  });
-  return { ...response, frustrations };
-}
-var TOOL_FAILURE_CONTEXT_RADIUS = 2;
-function shellWord(value) {
-  return /^[\w@%+=:,./-]+$/.test(value) ? value : `'${value.replace(/'/g, `'\\''`)}'`;
-}
-function trimFailureWindow(value, radius, fallbackCenter) {
-  const conv = asRecord(value);
-  if (!conv)
-    return value ?? null;
-  const { coverage: _coverage, context, ...convRest } = conv;
-  const ctx = asRecord(context);
-  if (!ctx)
-    return convRest;
-  const center = asNumber(ctx.center_index) ?? fallbackCenter;
-  const messages = (Array.isArray(ctx.messages) ? ctx.messages : []).map((message) => asRecord(message)).filter((message) => {
-    const index = asNumber(message?.index);
-    return message !== null && (center === null || index === null || Math.abs(index - center) <= radius);
-  }).map(({ content_blocks, ...message }) => {
-    const covered = typeof message.content === "string" && message.content.length > 0 || Array.isArray(message.tool_calls) && message.tool_calls.length > 0 || Array.isArray(message.tool_results) && message.tool_results.length > 0;
-    return covered || content_blocks === undefined ? message : { ...message, content_blocks };
-  });
-  const indexes = messages.map((message) => asNumber(message.index)).filter((index) => index !== null);
-  return {
-    ...convRest,
-    context: {
-      ...ctx,
-      ...indexes.length > 0 ? { from_index: Math.min(...indexes), to_index: Math.max(...indexes) } : {},
-      messages
-    }
-  };
-}
-function trimToolFailureConversations(response, opts) {
-  if (!Array.isArray(response.examples))
-    return response;
-  const examples = response.examples.map((item) => {
-    const row = asRecord(item);
-    if (!row)
-      return item;
-    const { conversation, window, ...rest } = row;
-    const conversationId = asString(row.conversation_id);
-    const msgIndex = asNumber(asRecord(row.anchor)?.msg_index) ?? asNumber(row.msg_index);
-    return {
-      ...rest,
-      ...conversationId && msgIndex !== null ? { context_command: `moda traces get ${shellWord(contextTarget(conversationId))} --msg-index=${msgIndex} --window=${TOOL_FAILURE_CONTEXT_RADIUS}` } : {},
-      ...opts.drop ? {} : { conversation: trimFailureWindow(conversation, TOOL_FAILURE_CONTEXT_RADIUS, msgIndex) },
-      ..."window" in row ? { window: trimFailureWindow(window, opts.windowRadius ?? TOOL_FAILURE_CONTEXT_RADIUS, msgIndex) } : {}
-    };
-  });
-  return { ...response, examples };
-}
-function withToolFailureAnchors(response) {
-  if (!Array.isArray(response.examples))
-    return response;
-  const toolName = asString(response.tool_name) ?? "";
-  const examples = response.examples.map((item) => {
-    const row = asRecord(item);
-    if (!row)
-      return item;
-    const anchor = buildToolFailureAnchor(row, toolName);
-    return { ...row, anchor };
-  });
-  return { ...response, examples };
-}
-function embeddedWindowSize(conversation) {
-  if (!conversation)
-    return null;
-  const ctx = asRecord(conversation.context);
-  if (!ctx)
-    return null;
-  const center = asNumber(ctx.center_index);
-  const from = asNumber(ctx.from_index);
-  const to = asNumber(ctx.to_index);
-  if (center === null || from === null || to === null)
-    return null;
-  return Math.min(center - from, to - center);
-}
-var DETECTION_CONTEXT_RADIUS = 2;
-function withoutDetectionWindows(response, listKey, windowKey) {
-  const list = response[listKey];
-  if (!Array.isArray(list))
-    return response;
-  const rows = list.map((item) => {
-    const row = asRecord(item);
-    if (!row)
-      return item;
-    const { [windowKey]: _window, ...rest } = row;
-    const conversationId = asString(row.conversation_id);
-    const msgIndex = asNumber(asRecord(row.anchor)?.msg_index) ?? frustrationAnchorIndex(row);
-    return {
-      ...rest,
-      ...conversationId && msgIndex !== null ? { context_command: `moda traces get ${shellWord(contextTarget(conversationId))} --msg-index=${msgIndex} --window=${DETECTION_CONTEXT_RADIUS}` } : {}
-    };
-  });
-  return { ...response, [listKey]: rows };
-}
-var PROBLEM_COMPACT_EVIDENCE = 5;
-var PROBLEM_COMPACT_OMITTED_BLOCKS = [
-  "rubric",
-  "trend",
-  "sub_problems",
-  "affected_conversations",
-  "remainder",
-  "confidence",
-  "change_history",
-  "stories"
-];
-function readCommand(command, purpose) {
-  return { command, purpose, mutability: "read", requires_approval: false };
-}
-function evidenceMsgIndex(row) {
-  return asNumber(row.anchor_msg_index) ?? asNumber(asRecord(asRecord(row.snippet_parsed)?.anchor)?.msg_index);
-}
-function compactProblemDossier(response, problemId) {
-  const id = shellWord(asString(response.problem_id) ?? problemId);
-  const evidence = (Array.isArray(response.evidence) ? response.evidence : []).map((item) => asRecord(item)).filter((row) => row !== null);
-  const topEvidence = evidence.slice(0, PROBLEM_COMPACT_EVIDENCE).map((row) => {
-    const conversationId = asString(row.conversation_id);
-    const msgIndex = evidenceMsgIndex(row);
-    return {
-      attribution_id: row.attribution_id ?? null,
-      conversation_id: conversationId,
-      msg_index: msgIndex,
-      signal_family: row.signal_family ?? null,
-      signal_type: row.signal_type ?? null,
-      confidence: row.confidence ?? null,
-      causal_rationale: row.causal_rationale ?? null,
-      door: row.door ?? null,
-      replay_verified: row.replay_verified ?? null,
-      ...conversationId && msgIndex !== null ? { context_command: `moda traces get ${shellWord(contextTarget(conversationId))} --msg-index=${msgIndex}` } : {}
-    };
-  });
-  const reportsBlock = asRecord(response.investigation_reports);
-  const reports = (Array.isArray(reportsBlock?.items) ? reportsBlock.items : []).map((item) => asRecord(item)).filter((row) => row !== null).map((row) => ({
-    report_id: row.report_id ?? null,
-    conversation_id: row.conversation_id ?? null,
-    mechanism: row.mechanism ?? null,
-    suspected_surface: row.suspected_surface ?? null,
-    severity: row.severity ?? null,
-    problem_found: row.problem_found ?? null
-  }));
-  const verification = asRecord(response.verification);
-  const { samples: _samples, ...verificationCounts } = verification ?? {};
-  const dossier = asRecord(response.dossier);
-  const { representative_story_keys: _storyKeys, ...dossierSummary } = dossier ?? {};
-  const trend = Array.isArray(response.trend) ? response.trend : [];
-  const data = {
-    found: response.found ?? true,
-    problem_id: response.problem_id ?? problemId,
-    requested_problem_id: response.requested_problem_id ?? problemId,
-    alias_resolved: response.alias_resolved ?? false,
-    view: "compact",
-    header: response.header ?? null,
-    dossier: dossier ? dossierSummary : null,
-    verification: verification ? verificationCounts : null,
-    ...response.impact_identity !== undefined ? { impact_identity: response.impact_identity } : {},
-    ...response.hierarchy !== undefined ? { hierarchy: response.hierarchy } : {},
-    ...trend.length > 0 ? { trend_latest: trend[trend.length - 1], trend_points: trend.length } : {},
-    top_evidence: topEvidence,
-    evidence_in_dossier: evidence.length,
-    reports,
-    omitted: {
-      evidence_rows: Math.max(0, evidence.length - topEvidence.length),
-      report_narratives: reports.length,
-      reports_has_more: reportsBlock?.has_more === true,
-      blocks: PROBLEM_COMPACT_OMITTED_BLOCKS.filter((key) => (key in response))
-    },
-    full_command: `moda problems get ${id} --full`
-  };
-  const nextCommands = [
-    readCommand(`moda problems get ${id} --evidence --limit=20`, "Page every evidence row with its anchor (follow next_cursor)."),
-    readCommand(`moda problems get ${id} --reports`, "Page investigation reports with narratives and citations."),
-    readCommand(`moda problems get ${id} --traces`, "Page affected traces with their latest anchor."),
-    readCommand(`moda problems get ${id} --full`, "The complete dossier, every block (large).")
-  ];
-  const first = topEvidence.find((row) => typeof row.context_command === "string");
-  if (first?.context_command) {
-    nextCommands.push(readCommand(first.context_command, "Read the trace around the top evidence anchor."));
-  }
-  return { data, nextCommands };
+  if (!/["$`\\!]/.test(value))
+    return `"${value}"`;
+  return `'${value.replace(/'/g, `'\\''`)}'`;
 }
 
 // src/legacy-names.ts
@@ -1618,8 +1217,8 @@ function canonicalCommandText(text) {
 
 // src/output.ts
 import { randomUUID } from "node:crypto";
-import { lstatSync, mkdirSync as mkdirSync2, readdirSync, unlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
-import { tmpdir } from "node:os";
+import { chmodSync as chmodSync2, lstatSync, mkdirSync as mkdirSync2, readdirSync, unlinkSync, writeFileSync as writeFileSync2 } from "node:fs";
+import { tmpdir, userInfo } from "node:os";
 import { join as join2 } from "node:path";
 var SUGGESTION_KEY = /(_commands?|^hints?|^suggestions?)$/i;
 function canonicalDeep(value, rewriteStrings) {
@@ -1713,7 +1312,7 @@ var CUSTOMER_CONTENT_KEYS = new Set([
   "response"
 ]);
 function withProfileOnCommands(value, profile) {
-  const flag = `--profile=${shellWord(profile)}`;
+  const flag = `--profile=${shellArg(profile)}`;
   const visit = (node, key, inCommandList) => {
     const isCommandKey = key !== undefined && (GENERATED_COMMAND_KEY.test(key) || inCommandList && key === "command");
     if (typeof node === "string")
@@ -1722,7 +1321,7 @@ function withProfileOnCommands(value, profile) {
       const list = key !== undefined && GENERATED_COMMAND_LIST_KEY.test(key);
       return node.map((item) => typeof item === "string" ? visit(item, isCommandKey ? key : undefined, false) : visit(item, undefined, list));
     }
-    const record = asRecord2(node);
+    const record = asRecord(node);
     if (!record)
       return node;
     return Object.fromEntries(Object.entries(record).map(([entryKey, entry]) => [
@@ -2493,11 +2092,11 @@ function normalizeSummary(summary, command, status, data) {
   return inferSummary(command, status, data);
 }
 function inferSummary(command, status, data) {
-  const record = asRecord2(data);
+  const record = asRecord(data);
   if (status === "error") {
     return { text: `${command} failed.`, confidence: "high" };
   }
-  const summary = asRecord2(record?.summary);
+  const summary = asRecord(record?.summary);
   if (summary) {
     const statusValue = typeof summary.status === "string" ? summary.status : undefined;
     const fail = typeof summary.fail === "number" ? summary.fail : undefined;
@@ -2549,11 +2148,11 @@ function inferMutability(command) {
   return "read";
 }
 function inferWarnings(data) {
-  const record = asRecord2(data);
+  const record = asRecord(data);
   const direct = record?.warnings;
   if (Array.isArray(direct))
     return direct.filter((item) => typeof item === "string");
-  const validation = asRecord2(record?.validation);
+  const validation = asRecord(record?.validation);
   if (Array.isArray(validation?.warnings)) {
     return validation.warnings.filter((item) => typeof item === "string");
   }
@@ -2591,10 +2190,37 @@ function pruneAgentFullOutputs(dir, keep, now = Date.now()) {
     } catch {}
   }
 }
+function currentUserTag() {
+  if (typeof process.getuid === "function")
+    return String(process.getuid());
+  try {
+    return userInfo().username.replace(/[^A-Za-z0-9_.-]+/g, "_") || "user";
+  } catch {
+    return "user";
+  }
+}
+function defaultAgentOutputDir() {
+  return join2(tmpdir(), `moda-agent-output-${currentUserTag()}`);
+}
+function ensurePrivateDir(dir) {
+  mkdirSync2(dir, { recursive: true, mode: 448 });
+  const stat = lstatSync(dir);
+  if (!stat.isDirectory())
+    throw new Error(`${dir} is not a directory.`);
+  if (typeof process.getuid === "function" && stat.uid !== process.getuid()) {
+    throw new Error(`${dir} is owned by another user.`);
+  }
+  if (process.platform !== "win32" && (stat.mode & 63) !== 0)
+    chmodSync2(dir, 448);
+}
 function writeAgentFullOutput(command, data) {
   try {
-    const dir = process.env.MODA_AGENT_OUTPUT_DIR || join2(tmpdir(), "moda-agent-output");
-    mkdirSync2(dir, { recursive: true, mode: 448 });
+    const configured = process.env.MODA_AGENT_OUTPUT_DIR;
+    const dir = configured || defaultAgentOutputDir();
+    if (configured)
+      mkdirSync2(dir, { recursive: true, mode: 448 });
+    else
+      ensurePrivateDir(dir);
     const slug = command.replace(/[^a-zA-Z0-9_-]+/g, "-").replace(/^-+|-+$/g, "") || "output";
     const stamp = new Date().toISOString().replace(/[:.]/g, "-");
     const path = join2(dir, `${slug}-${stamp}-${randomUUID().slice(0, 8)}.json`);
@@ -2615,7 +2241,7 @@ function contentBlocksRedundant(message) {
   const hasToolResults = Array.isArray(message.tool_results) && message.tool_results.length > 0;
   const texts = [];
   for (const item of blocks) {
-    const block = asRecord2(item);
+    const block = asRecord(item);
     if (!block)
       return false;
     if (block.type === "text") {
@@ -2647,7 +2273,7 @@ function shedRedundantContentBlocks(value) {
           visit(item);
       return;
     }
-    const record = asRecord2(node);
+    const record = asRecord(node);
     if (!record)
       return;
     if ("content_blocks" in record && contentBlocksRedundant(record)) {
@@ -2669,17 +2295,17 @@ function continuationCommand(invocation, overrides) {
   const dashAt = invocation.positionals.findIndex((value) => value.startsWith("-"));
   const leading = dashAt === -1 ? invocation.positionals : invocation.positionals.slice(0, dashAt);
   const trailing = dashAt === -1 ? [] : invocation.positionals.slice(dashAt);
-  const parts = ["moda", invocation.command, ...leading.map((value) => shellWord(value))];
+  const parts = ["moda", invocation.command, ...leading.map((value) => shellArg(value))];
   for (const [key, value] of Object.entries(invocation.flags)) {
     const flag = normalize2(key);
     if (overridden.has(flag) || CONTINUATION_SECRET_FLAGS.has(flag))
       continue;
-    parts.push(bare.has(flag) && value === "true" ? `--${flag}` : `--${flag}=${shellWord(String(value))}`);
+    parts.push(bare.has(flag) && value === "true" ? `--${flag}` : `--${flag}=${shellArg(String(value))}`);
   }
   for (const [key, value] of Object.entries(overrides))
-    parts.push(`--${normalize2(key)}=${shellWord(String(value))}`);
+    parts.push(`--${normalize2(key)}=${shellArg(String(value))}`);
   if (trailing.length > 0)
-    parts.push("--", ...trailing.map((value) => shellWord(value)));
+    parts.push("--", ...trailing.map((value) => shellArg(value)));
   return canonicalCommandText(parts.join(" "));
 }
 var PAGED_LIST_BY_COMMAND = {
@@ -2700,7 +2326,7 @@ function rewritePagination(list, isTopLevel, invocation) {
   const { parent, array, originalLength } = list;
   if (!parent)
     return;
-  const nested = asRecord2(parent.pagination);
+  const nested = asRecord(parent.pagination);
   const inline = !nested && !isTopLevel && (("has_more" in parent) || ("next_cursor" in parent)) ? parent : undefined;
   const pagination = nested ?? inline;
   if (!pagination)
@@ -2840,7 +2466,7 @@ function boundForAgent(data, maxBytes = agentMaxOutputBytes(), options = {}) {
       fullOutputPath
     };
   }
-  const root = asRecord2(bounded);
+  const root = asRecord(bounded);
   const notes = [];
   const nextCommands = [];
   for (const list of droppedLists.values()) {
@@ -2878,7 +2504,7 @@ function boundForAgent(data, maxBytes = agentMaxOutputBytes(), options = {}) {
     ...nextCommands.length > 0 ? { nextCommands } : {}
   };
 }
-function asRecord2(value) {
+function asRecord(value) {
   return value && typeof value === "object" && !Array.isArray(value) ? value : undefined;
 }
 function extractSuggestedCommands(text) {
@@ -2911,4 +2537,4 @@ function apiKeyHeaders(key, options = {}, url) {
   return headers;
 }
 
-export { PROD_BASE_URL, DEFAULT_INGEST_URL, getModaPaths, getModaDir, isLoopbackBaseUrl, describeBaseUrlSource, loadProfileConfig, saveProfileConfig, getActiveProfile, setActiveProfile, upsertProfile, clearStoredApiKeyCredentials, secretFilePathFromRef, resolveSecretReference, resolveApiKeyFromActiveProfile, resolveTenantIdFromActiveProfile, ensureSecretFilePermissions, writeSecretJsonFile, CliInputError, attachInputDetails, inputDetailsOf, CliAccessError, CliInputRequiredError, CliAuthError, CliNotFoundError, CliCancellationError, isNetworkLikeError, isApiLikeError, apiErrorStatus, VERSION, MODA_BASE_URL, loadCliConfig, saveCliConfig, resolveApiKey, embeddedTenantIdFromApiKey, resolveIngestUrl2 as resolveIngestUrl, resolveTenantId, resolveApiTenantId, resolveModaBaseUrl, validateConfig, isPlatformApiKey, setPlatformTenantOverride, apiKeyHeaders, recordApiRequest, getApiRequestCount, resetApiRequestCount, MAX_SCANNED_FILE_BYTES, DEFAULT_MAX_INVENTORY_FILES, DEFAULT_MAX_INVENTORY_TEXT_BYTES, MAX_RECORDED_SKIPS, SKIPPED_DIRS, isSkippedDir, isSkippedPathPrefix, isEvalLikePath, shouldInventoryFile, isTextFile, isSecretishPath, SECRET_KEYS, redactDeep, redactString, packSnapshot, BATCH_MAX_TARGETS, BATCH_CONCURRENCY, parseBatchTarget, collectBatchTargets, mapWithConcurrency, contextTarget, asRecord, asString, asNumber, frustrationAnchorIndex, frustrationsFromEmotions, withFrustrationAnchors, shellWord, trimToolFailureConversations, withToolFailureAnchors, embeddedWindowSize, withoutDetectionWindows, compactProblemDossier, LEGACY_NAMES, canonicalCommandText, setAgentUpdateNotice, EXIT_OK, EXIT_ERROR, EXIT_DEGRADED, EXIT_AUTH_REQUIRED, EXIT_INPUT_REQUIRED, EXIT_CANCELLED, AGENT_ERROR_CODES, wasOutputCancelled, safeWriteStdout, safeWriteStderr, explicitOutputMode, outputModeFromFlags, resolveOutputMode, createCliOutput, agentEnvelopeFits, errorToAgentError, agentMaxOutputBytes, continuationCommand };
+export { PROD_BASE_URL, DEFAULT_INGEST_URL, getModaPaths, getModaDir, isLoopbackBaseUrl, describeBaseUrlSource, loadProfileConfig, saveProfileConfig, getActiveProfile, setActiveProfile, upsertProfile, clearStoredApiKeyCredentials, secretFilePathFromRef, resolveSecretReference, resolveApiKeyFromActiveProfile, resolveTenantIdFromActiveProfile, ensureSecretFilePermissions, writeSecretJsonFile, CliInputError, attachInputDetails, inputDetailsOf, CliAccessError, CliInputRequiredError, CliAuthError, CliNotFoundError, CliCancellationError, isNetworkLikeError, isApiLikeError, apiErrorStatus, VERSION, MODA_BASE_URL, loadCliConfig, saveCliConfig, resolveApiKey, embeddedTenantIdFromApiKey, resolveIngestUrl2 as resolveIngestUrl, resolveTenantId, resolveApiTenantId, resolveModaBaseUrl, resolveModaBaseUrlStrict, validateConfig, isPlatformApiKey, setPlatformTenantOverride, apiKeyHeaders, recordApiRequest, getApiRequestCount, resetApiRequestCount, MAX_SCANNED_FILE_BYTES, DEFAULT_MAX_INVENTORY_FILES, DEFAULT_MAX_INVENTORY_TEXT_BYTES, MAX_RECORDED_SKIPS, SKIPPED_DIRS, isSkippedDir, isSkippedPathPrefix, isEvalLikePath, shouldInventoryFile, isTextFile, isSecretishPath, SECRET_KEYS, redactDeep, redactString, packSnapshot, shellArg, LEGACY_NAMES, canonicalCommandText, setAgentUpdateNotice, EXIT_OK, EXIT_ERROR, EXIT_DEGRADED, EXIT_AUTH_REQUIRED, EXIT_INPUT_REQUIRED, EXIT_CANCELLED, AGENT_ERROR_CODES, wasOutputCancelled, safeWriteStdout, safeWriteStderr, explicitOutputMode, outputModeFromFlags, resolveOutputMode, createCliOutput, agentEnvelopeFits, errorToAgentError, agentMaxOutputBytes, continuationCommand };

package/dist/{cli-cdrvjva5.js → cli-v8q7sd7g.js}

@@ -1,12 +1,9 @@
 import {
   createCliOutput,
   outputModeFromFlags
-} from "./cli-sqsjd08w.js";
+} from "./cli-r5pp7qny.js";
 
-// src/command-context.ts
-function flagEnabled(flags, key) {
-  return flags[key] === "true";
-}
+// src/boolean-words.ts
 var BOOLEAN_TRUE_WORDS = new Set(["true", "yes", "1", "on"]);
 var BOOLEAN_FALSE_WORDS = new Set(["false", "no", "0", "off"]);
 function parseBooleanFlagValue(value) {
@@ -23,6 +20,31 @@ function parseBooleanFlagValue(value) {
     return false;
   return;
 }
+function flagValue(flags, name) {
+  return flags[name] ?? flags[name.replace(/-/g, "_")];
+}
+function withoutFlag(flags, name) {
+  const snake = name.replace(/-/g, "_");
+  return Object.fromEntries(Object.entries(flags).filter(([key]) => key !== name && key !== snake));
+}
+function optOutFlagSet(flags, name, strict = true) {
+  const raw = flagValue(flags, name);
+  if (raw === undefined)
+    return false;
+  const value = parseBooleanFlagValue(raw);
+  return strict ? value === true : value !== false;
+}
+function envSwitchedOff(value) {
+  return parseBooleanFlagValue(value) === false;
+}
+function envOptOutSet(value) {
+  return value !== undefined && value.trim() !== "" && parseBooleanFlagValue(value) !== false;
+}
+
+// src/command-context.ts
+function flagEnabled(flags, key) {
+  return flags[key] === "true";
+}
 function stringOption(value) {
   if (value === undefined || value === null)
     return;
@@ -77,4 +99,4 @@ function createCommandContext(input, options = {}) {
   };
 }
 
-export { parseBooleanFlagValue, stringOption, createCommandContext };
+export { parseBooleanFlagValue, withoutFlag, optOutFlagSet, envSwitchedOff, envOptOutSet, stringOption, createCommandContext };