@moda-ai/cli 1.55.26 → 1.55.27

package/dist/{doctor-w913fj4g.js → doctor-wmre3mr7.js}

@@ -3,16 +3,16 @@ import {
   promptsDiscoveredCheck,
   runDoctorCommand,
   runStatusCommand
-} from "./cli-5g1tv80h.js";
-import"./cli-q6f6vrrr.js";
-import"./cli-b4740tnv.js";
+} from "./cli-4h0ave0f.js";
+import"./cli-hmjdgxrn.js";
+import"./cli-q9nsvqqg.js";
 import"./cli-mm48br00.js";
-import"./cli-d577kq6h.js";
+import"./cli-qwgct6x7.js";
 import"./cli-97fnztpy.js";
-import"./cli-cdrvjva5.js";
-import"./cli-jgfm7w1r.js";
-import"./cli-jtyvbd8d.js";
-import"./cli-sqsjd08w.js";
+import"./cli-v8q7sd7g.js";
+import"./cli-wzds257x.js";
+import"./cli-pg5qfmqc.js";
+import"./cli-r5pp7qny.js";
 import"./cli-0v6na3yp.js";
 export {
   runStatusCommand,

package/dist/{fix-crkwdkt4.js → fix-75s9s0d6.js}

@@ -2,17 +2,17 @@ import {
   DEFAULT_POLL_INTERVAL_MS,
   DEFAULT_WAIT_TIMEOUT_MS,
   fetchLatestRun
-} from "./cli-b4740tnv.js";
+} from "./cli-q9nsvqqg.js";
 import"./cli-mm48br00.js";
-import"./cli-d577kq6h.js";
+import"./cli-qwgct6x7.js";
 import"./cli-97fnztpy.js";
-import"./cli-cdrvjva5.js";
+import"./cli-v8q7sd7g.js";
 import {
   assertFlags
-} from "./cli-jgfm7w1r.js";
+} from "./cli-wzds257x.js";
 import {
   callControlAPI
-} from "./cli-jtyvbd8d.js";
+} from "./cli-pg5qfmqc.js";
 import {
   CliInputError,
   EXIT_DEGRADED,
@@ -20,8 +20,9 @@ import {
   EXIT_OK,
   getModaPaths,
   resolveApiTenantId,
+  shellArg,
   validateConfig
-} from "./cli-sqsjd08w.js";
+} from "./cli-r5pp7qny.js";
 import"./cli-0v6na3yp.js";
 
 // src/fix.ts
@@ -154,7 +155,7 @@ async function runFixesCommand(context) {
       confidence: "high"
     },
     nextCommands: fixes.slice(0, 1).map((fix) => ({
-      command: `moda fix ${fix.id}`,
+      command: `moda fix ${shellArg(fix.id)}`,
       purpose: "Open the top-ranked fix (status, gate result, next actions).",
       mutability: "read",
       requires_approval: false
@@ -528,13 +529,13 @@ async function runFixStart(context, profileOptions, tenantId) {
       },
       nextCommands: [
         {
-          command: `moda fix start ${problemId} --wait`,
+          command: `moda fix start ${shellArg(problemId)} --wait`,
           purpose: "Drive the pipeline (scope → propose → gate) to a resting status.",
           mutability: "write",
           requires_approval: false
         },
         {
-          command: `moda fix ${created.id}`,
+          command: `moda fix ${shellArg(created.id)}`,
           purpose: "Inspect the fix status and gate result.",
           mutability: "read",
           requires_approval: false
@@ -598,12 +599,12 @@ async function runFixVerify(context, profileOptions, tenantId) {
   if (noWait) {
     context.output.writeData({ fixId, gateRunId: enqueue.gateRunId, status: "GATING" }, {
       summary: {
-        text: `Gate + control runs enqueued (gate run ${enqueue.gateRunId}). Resume with \`moda fix ${fixId} --wait\`.`,
+        text: `Gate + control runs enqueued (gate run ${enqueue.gateRunId}). Resume with \`moda fix ${shellArg(fixId)} --wait\`.`,
         confidence: "high"
       },
       nextCommands: [
         {
-          command: `moda fix ${fixId} --wait`,
+          command: `moda fix ${shellArg(fixId)} --wait`,
           purpose: "Drive the advance-on-poll gate to a verdict.",
           mutability: "write",
           requires_approval: false
@@ -700,14 +701,14 @@ async function runFixCheckout(context, profileOptions, tenantId) {
   }
   const fix = await getFix(tenantId, fixId, profileOptions);
   if (isArtifactFix(fix)) {
-    throw new CliInputError(`Fix MODA-FIX-${fix.shortRef} is a ${fix.fixType} fix — its candidate is applied in your own stack, not checked out. Run \`moda fix ${fixId} --packet\` for the candidate (written as local artifacts), apply it, then confirm with \`moda fix mark-applied ${fixId}\`.`);
+    throw new CliInputError(`Fix MODA-FIX-${fix.shortRef} is a ${fix.fixType} fix — its candidate is applied in your own stack, not checked out. Run \`moda fix ${shellArg(fixId)} --packet\` for the candidate (written as local artifacts), apply it, then confirm with \`moda fix mark-applied ${shellArg(fixId)}\`.`);
   }
   if (!fix.targetSourcePath) {
-    throw new CliInputError(`Fix MODA-FIX-${fix.shortRef} has no target source path — ${fix.fixType} fixes are packet-only. Run \`moda fix ${fixId} --packet\` for the diagnosis packet.`);
+    throw new CliInputError(`Fix MODA-FIX-${fix.shortRef} has no target source path — ${fix.fixType} fixes are packet-only. Run \`moda fix ${shellArg(fixId)} --packet\` for the diagnosis packet.`);
   }
   const candidateVersionId = fix.candidateRef?.promptVersionId ?? "";
   if (!candidateVersionId) {
-    throw new CliInputError(`Fix MODA-FIX-${fix.shortRef} has no registered candidate version yet (status ${fix.status}). Run \`moda fix start ${fix.problemId} --wait\` to propose one, or edit the target locally and gate it with \`moda fix verify ${fixId} --prompt-file=<path>\`.`);
+    throw new CliInputError(`Fix MODA-FIX-${fix.shortRef} has no registered candidate version yet (status ${fix.status}). Run \`moda fix start ${shellArg(fix.problemId)} --wait\` to propose one, or edit the target locally and gate it with \`moda fix verify ${shellArg(fixId)} --prompt-file=<path>\`.`);
   }
   if (!fix.promptId) {
     throw new CliInputError(`Fix MODA-FIX-${fix.shortRef} has no routed prompt — the candidate content cannot be resolved.`);
@@ -729,8 +730,8 @@ async function runFixCheckout(context, profileOptions, tenantId) {
       "",
       "Next steps (the CLI never runs git — branching and committing are yours):",
       `  1. git checkout -b ${branch}`,
-      `  2. Review the diff. Re-gate any edits: moda fix verify ${fix.id} --prompt-file=${relPath}`,
-      `  3. Hand back: moda fix submit ${fix.id} --pr   (or --local-ref=${branch})`,
+      `  2. Review the diff. Re-gate any edits: moda fix verify ${shellArg(fix.id)} --prompt-file=${shellArg(relPath)}`,
+      `  3. Hand back: moda fix submit ${shellArg(fix.id)} --pr   (or --local-ref=${shellArg(branch)})`,
       `     A hand-authored PR body must end with the magic word: ${magicWord}`,
       ""
     ].join(`
@@ -758,13 +759,13 @@ async function runFixCheckout(context, profileOptions, tenantId) {
     ],
     nextCommands: [
       {
-        command: `moda fix verify ${fix.id} --prompt-file=${relPath}`,
+        command: `moda fix verify ${shellArg(fix.id)} --prompt-file=${shellArg(relPath)}`,
         purpose: "Re-gate the (possibly edited) local candidate on the frozen holdout.",
         mutability: "write",
         requires_approval: false
       },
       {
-        command: `moda fix submit ${fix.id} --pr`,
+        command: `moda fix submit ${shellArg(fix.id)} --pr`,
         purpose: `Open the draft fix PR (branch ${branch}, magic word "${magicWord}").`,
         mutability: "write",
         requires_approval: true
@@ -800,7 +801,7 @@ async function runFixSubmit(context, profileOptions, tenantId) {
     },
     nextCommands: [
       {
-        command: `moda fix ${fixId}`,
+        command: `moda fix ${shellArg(fixId)}`,
         purpose: "Track delivery and confirmation status.",
         mutability: "read",
         requires_approval: false
@@ -832,7 +833,7 @@ async function runFixMarkApplied(context, profileOptions, tenantId) {
     },
     nextCommands: [
       {
-        command: `moda fix ${fix.id}`,
+        command: `moda fix ${shellArg(fix.id)}`,
         purpose: "Track confirmation monitoring (HELD after 14 clean days; REGRESSED on reopen).",
         mutability: "read",
         requires_approval: false
@@ -967,15 +968,12 @@ async function assertRegateCooldown(tenantId, fixId, context, profileOptions, ca
   if (ageMs >= VERIFY_COOLDOWN_MS)
     return;
   const waitMin = Math.ceil((VERIFY_COOLDOWN_MS - ageMs) / 60000);
-  const rerun = ["moda", "fix", "verify", fixId, ...Object.entries(context.flags).filter(([key]) => key !== "yes" && key !== "fix-id").map(([key, value]) => value === "true" ? `--${key}` : `--${key}=${shellQuote(value)}`), "--yes"].join(" ");
+  const rerun = ["moda", "fix", "verify", shellArg(fixId), ...Object.entries(context.flags).filter(([key]) => key !== "yes" && key !== "fix-id").map(([key, value]) => value === "true" ? `--${key}` : `--${key}=${shellArg(value)}`), "--yes"].join(" ");
   throw new CliInputError(`MODA-FIX-${current.shortRef} was gated ${Math.max(0, Math.floor(ageMs / 60000))} min ago (verdict ${gate.verdict}); re-gating within 10 minutes re-runs the replay. Nothing was sent.`, `Wait ~${waitMin} min, or re-run with --yes to gate now: ${rerun}`);
 }
 function sha256(content) {
   return createHash("sha256").update(content, "utf8").digest("hex");
 }
-function shellQuote(value) {
-  return /^[A-Za-z0-9_@%+=:,./-]+$/.test(value) ? value : `'${value.replace(/'/g, `'\\''`)}'`;
-}
 async function getFix(tenantId, fixId, profileOptions) {
   return await callControlAPI(`${fixesBase(tenantId)}/${encodeURIComponent(fixId)}`, { method: "GET" }, profileOptions);
 }
@@ -1053,7 +1051,7 @@ function materializePacketCandidates(packet, fixId, human) {
     const paramNotes = (Array.isArray(tool.param_notes) ? tool.param_notes : []).filter((note) => typeof note === "string" && note !== "");
     const rationale = typeof tool.rationale === "string" ? tool.rationale : "";
     const currentPath = writeCandidateFile("tool-description.current.md", typeof tool.current_description === "string" ? tool.current_description : "", "fix_tool_description_current", `Current description of tool '${toolName}'${source ? ` (from ${source})` : ""} — the diff base.`);
-    const proposedPath = writeCandidateFile("tool-description.proposed.md", tool.proposed_description ?? "", "fix_tool_description_proposed", `Proposed description for tool '${toolName}' — apply it to your tool definition, then \`moda fix mark-applied ${fixId}\`.`);
+    const proposedPath = writeCandidateFile("tool-description.proposed.md", tool.proposed_description ?? "", "fix_tool_description_proposed", `Proposed description for tool '${toolName}' — apply it to your tool definition, then \`moda fix mark-applied ${shellArg(fixId)}\`.`);
     findings.push({
       id: "fix:candidate_tool",
       title: `tool '${toolName}' description candidate${source ? ` (current from ${source})` : ""}`,
@@ -1076,19 +1074,19 @@ function materializePacketCandidates(packet, fixId, human) {
       if (rationale)
         block("rationale", rationale);
       if (currentPath && proposedPath) {
-        w(`  diff: diff ${currentPath} ${proposedPath}`);
+        w(`  diff: diff ${shellArg(currentPath)} ${shellArg(proposedPath)}`);
       }
     }
   }
   if (hasSkill && skill) {
     const skillName = typeof skill.skill_name === "string" && skill.skill_name ? skill.skill_name : "moda-fix-skill";
-    const skillPath = writeCandidateFile("SKILL.md", skill.skill_md ?? "", "fix_candidate_skill", `Drafted SKILL.md for '${skillName}' — install it (for example .claude/skills/${skillName}/SKILL.md), then \`moda fix mark-applied ${fixId}\`.`);
+    const skillPath = writeCandidateFile("SKILL.md", skill.skill_md ?? "", "fix_candidate_skill", `Drafted SKILL.md for '${skillName}' — install it (for example .claude/skills/${skillName}/SKILL.md), then \`moda fix mark-applied ${shellArg(fixId)}\`.`);
     findings.push({
       id: "fix:candidate_skill",
       title: `skill '${skillName}' drafted (SKILL.md, ${(skill.skill_md ?? "").length} chars)`,
       status: "proposed",
       severity: "info",
-      description: `Install the skill in your agent, then confirm with \`moda fix mark-applied ${fixId}\`. Gating on the replay holdout stays pending until the skill is registered with the skill harness.`
+      description: `Install the skill in your agent, then confirm with \`moda fix mark-applied ${shellArg(fixId)}\`. Gating on the replay holdout stays pending until the skill is registered with the skill harness.`
     });
     summaryParts.push(`Includes a drafted SKILL.md candidate ('${skillName}').`);
     if (human) {
@@ -1097,20 +1095,20 @@ function materializePacketCandidates(packet, fixId, human) {
       if (skillPath)
         w(`  SKILL.md written to ${skillPath}`);
       w(`  install it (for example .claude/skills/${skillName}/SKILL.md), then confirm:`);
-      w(`  moda fix mark-applied ${fixId} --note="installed skill ${skillName}"`);
+      w(`  moda fix mark-applied ${shellArg(fixId)} --note=${shellArg(`installed skill ${skillName}`)}`);
     }
   }
   if (hasSkillEdit && skillEdit) {
     const skillKey = typeof skillEdit.skill_key === "string" && skillEdit.skill_key ? skillEdit.skill_key : typeof skillEdit.skill_name === "string" && skillEdit.skill_name ? skillEdit.skill_name : "moda-skill";
     const changeSummary = typeof skillEdit.change_summary === "string" ? skillEdit.change_summary : "";
     const currentPath = writeCandidateFile("SKILL.current.md", typeof skillEdit.current_skill_md === "string" ? skillEdit.current_skill_md : "", "fix_skill_edit_current", `Current SKILL.md of your synced skill '${skillKey}' — the diff base.`);
-    const proposedPath = writeCandidateFile("SKILL.proposed.md", skillEdit.proposed_skill_md ?? "", "fix_skill_edit_proposed", `Proposed SKILL.md for '${skillKey}' (minimal edit) — apply it to the existing skill in your repo, then \`moda fix mark-applied ${fixId}\`.`);
+    const proposedPath = writeCandidateFile("SKILL.proposed.md", skillEdit.proposed_skill_md ?? "", "fix_skill_edit_proposed", `Proposed SKILL.md for '${skillKey}' (minimal edit) — apply it to the existing skill in your repo, then \`moda fix mark-applied ${shellArg(fixId)}\`.`);
     findings.push({
       id: "fix:candidate_skill_edit",
       title: `skill '${skillKey}' edit proposed${changeSummary ? `: ${changeSummary}` : " (minimal delta to the existing skill)"}`,
       status: "proposed",
       severity: "info",
-      description: `This amends the EXISTING synced skill '${skillKey}' — a minimal delta, not a new skill. Apply the proposed SKILL.md in your repo, then confirm with \`moda fix mark-applied ${fixId}\`.`
+      description: `This amends the EXISTING synced skill '${skillKey}' — a minimal delta, not a new skill. Apply the proposed SKILL.md in your repo, then confirm with \`moda fix mark-applied ${shellArg(fixId)}\`.`
     });
     summaryParts.push(`Includes a skill-edit candidate amending existing skill '${skillKey}'.`);
     if (human) {
@@ -1123,13 +1121,13 @@ function materializePacketCandidates(packet, fixId, human) {
       if (proposedPath)
         w(`  proposed SKILL.md written to ${proposedPath}`);
       if (currentPath && proposedPath)
-        w(`  diff: diff ${currentPath} ${proposedPath}`);
+        w(`  diff: diff ${shellArg(currentPath)} ${shellArg(proposedPath)}`);
       w(`  apply the edit to the existing skill in your repo, then confirm:`);
-      w(`  moda fix mark-applied ${fixId} --note="amended skill ${skillKey}"`);
+      w(`  moda fix mark-applied ${shellArg(fixId)} --note=${shellArg(`amended skill ${skillKey}`)}`);
     }
   }
   nextCommands.push({
-    command: `moda fix mark-applied ${fixId} --note="where/how you applied it"`,
+    command: `moda fix mark-applied ${shellArg(fixId)} --note="where/how you applied it"`,
     purpose: "Confirm you applied the candidate in your own stack (no PR) — flips the fix to SHIPPED and starts recurrence monitoring.",
     mutability: "write",
     requires_approval: true
@@ -1232,13 +1230,13 @@ function passLabel(value) {
 }
 function nextCommandsFor(fix) {
   const packetCommand = {
-    command: `moda fix ${fix.id} --packet`,
+    command: `moda fix ${shellArg(fix.id)} --packet`,
     purpose: "Read the packet — the tool/skill candidate is written as local artifacts to apply in your own stack.",
     mutability: "write",
     requires_approval: false
   };
   const markAppliedCommand = {
-    command: `moda fix mark-applied ${fix.id} --note="where/how you applied it"`,
+    command: `moda fix mark-applied ${shellArg(fix.id)} --note="where/how you applied it"`,
     purpose: "Confirm you applied the candidate in your own stack (no PR) — flips the fix to SHIPPED and starts recurrence monitoring.",
     mutability: "write",
     requires_approval: true
@@ -1251,13 +1249,13 @@ function nextCommandsFor(fix) {
       }
       return [
         {
-          command: `moda fix submit ${fix.id} --pr`,
+          command: `moda fix submit ${shellArg(fix.id)} --pr`,
           purpose: "Open the draft fix PR (merge with the magic word to confirm).",
           mutability: "write",
           requires_approval: true
         },
         {
-          command: `moda fix checkout ${fix.id}`,
+          command: `moda fix checkout ${shellArg(fix.id)}`,
           purpose: "Write the verified candidate locally instead of opening a PR.",
           mutability: "write",
           requires_approval: false
@@ -1269,7 +1267,7 @@ function nextCommandsFor(fix) {
       }
       return [
         {
-          command: `moda fix verify ${fix.id}`,
+          command: `moda fix verify ${shellArg(fix.id)}`,
           purpose: "Gate the proposed candidate on the frozen holdout.",
           mutability: "write",
           requires_approval: false
@@ -1279,7 +1277,7 @@ function nextCommandsFor(fix) {
       if (isArtifactFix(fix)) {
         return [
           {
-            command: `moda fix verify ${fix.id}`,
+            command: `moda fix verify ${shellArg(fix.id)}`,
             purpose: "Re-gate the stored candidate on the frozen holdout.",
             mutability: "write",
             requires_approval: false
@@ -1289,13 +1287,13 @@ function nextCommandsFor(fix) {
       }
       return [
         {
-          command: `moda fix checkout ${fix.id}`,
+          command: `moda fix checkout ${shellArg(fix.id)}`,
           purpose: "Check out the candidate, edit it, and re-gate (fail-to-pass loop).",
           mutability: "write",
           requires_approval: false
         },
         {
-          command: `moda fix verify ${fix.id} --prompt-file=<path>`,
+          command: `moda fix verify ${shellArg(fix.id)} --prompt-file=<path>`,
           purpose: "Re-gate an edited local candidate on the frozen holdout.",
           mutability: "write",
           requires_approval: false
@@ -1304,7 +1302,7 @@ function nextCommandsFor(fix) {
     case "GATE_INCONCLUSIVE":
       return [
         {
-          command: `moda fix verify ${fix.id}`,
+          command: `moda fix verify ${shellArg(fix.id)}`,
           purpose: "Re-run the gate — the last run was inconclusive (never a pass).",
           mutability: "write",
           requires_approval: false
@@ -1313,7 +1311,7 @@ function nextCommandsFor(fix) {
     case "UNROUTED":
       return [
         {
-          command: `moda fix ${fix.id} --packet`,
+          command: `moda fix ${shellArg(fix.id)} --packet`,
           purpose: "Read the investigation packet — this fix is deliverable as diagnosis.",
           mutability: "read",
           requires_approval: false
@@ -1330,7 +1328,7 @@ function nextCommandsFor(fix) {
     case "NO_HEADROOM":
       return [
         {
-          command: `moda fix ${fix.id} --packet`,
+          command: `moda fix ${shellArg(fix.id)} --packet`,
           purpose: "Read the investigation packet — this fix is deliverable as diagnosis.",
           mutability: "read",
           requires_approval: false
@@ -1342,7 +1340,7 @@ function nextCommandsFor(fix) {
     case "GATING":
       return [
         {
-          command: `moda fix ${fix.id} --wait`,
+          command: `moda fix ${shellArg(fix.id)} --wait`,
           purpose: "Drive the advance-on-poll pipeline to its next resting status.",
           mutability: "write",
           requires_approval: false
@@ -1351,7 +1349,7 @@ function nextCommandsFor(fix) {
     default:
       return [
         {
-          command: `moda fix ${fix.id}`,
+          command: `moda fix ${shellArg(fix.id)}`,
           purpose: "Track the fix status.",
           mutability: "read",
           requires_approval: false

package/dist/{harness-x3e7d68b.js → harness-a7tb9a23.js}

@@ -42,12 +42,12 @@ import {
   writeHarnessAnalyzeResult,
   writeHarnessArtifacts,
   writeHumanProgress
-} from "./cli-d577kq6h.js";
+} from "./cli-qwgct6x7.js";
 import"./cli-97fnztpy.js";
-import"./cli-cdrvjva5.js";
-import"./cli-jgfm7w1r.js";
-import"./cli-jtyvbd8d.js";
-import"./cli-sqsjd08w.js";
+import"./cli-v8q7sd7g.js";
+import"./cli-wzds257x.js";
+import"./cli-pg5qfmqc.js";
+import"./cli-r5pp7qny.js";
 import"./cli-0v6na3yp.js";
 export {
   writeHumanProgress,

package/dist/{harness-github-actions-fjhvhgpj.js → harness-github-actions-6v4wydb8.js}

@@ -1,13 +1,13 @@
 import {
   buildSourceSnapshot
-} from "./cli-d577kq6h.js";
+} from "./cli-qwgct6x7.js";
 import"./cli-97fnztpy.js";
-import"./cli-cdrvjva5.js";
-import"./cli-jgfm7w1r.js";
-import"./cli-jtyvbd8d.js";
+import"./cli-v8q7sd7g.js";
+import"./cli-wzds257x.js";
+import"./cli-pg5qfmqc.js";
 import {
   recordApiRequest
-} from "./cli-sqsjd08w.js";
+} from "./cli-r5pp7qny.js";
 import"./cli-0v6na3yp.js";
 
 // src/harness-github-actions.ts

package/dist/{index-2kf3fnnb.js → index-91bpc8g8.js}

@@ -1,21 +1,21 @@
 import {
   selectTenantAndCreateKey
-} from "./cli-k6q8dbpk.js";
-import"./cli-1mbb0ct0.js";
+} from "./cli-0pkc8jhg.js";
+import"./cli-ccjfwzqx.js";
 import {
   buildDoctorReport
-} from "./cli-5g1tv80h.js";
+} from "./cli-4h0ave0f.js";
 import {
   ConnectCodeError,
   connectWithCode,
   loadAuthSession,
   loadToken,
   login
-} from "./cli-q6f6vrrr.js";
+} from "./cli-hmjdgxrn.js";
 import {
   initPrompts,
   runPromptSync
-} from "./cli-b4740tnv.js";
+} from "./cli-q9nsvqqg.js";
 import"./cli-mm48br00.js";
 import {
   canonicalText,
@@ -35,7 +35,7 @@ import {
   runCodingAgent,
   runHarnessCommand,
   startRemoteAnalyze
-} from "./cli-d577kq6h.js";
+} from "./cli-qwgct6x7.js";
 import {
   stripAnsi
 } from "./cli-97fnztpy.js";
@@ -47,20 +47,21 @@ import {
 import {
   agentsMdProblem,
   runSkillSync
-} from "./cli-8tfk8qeb.js";
+} from "./cli-6et4z504.js";
 import {
   createCommandContext
-} from "./cli-cdrvjva5.js";
-import"./cli-jgfm7w1r.js";
-import"./cli-jtyvbd8d.js";
+} from "./cli-v8q7sd7g.js";
+import"./cli-wzds257x.js";
+import"./cli-pg5qfmqc.js";
 import {
   CliAuthError,
   CliInputError,
   VERSION,
   recordApiRequest,
   resolveIngestUrl,
-  resolveModaBaseUrl
-} from "./cli-sqsjd08w.js";
+  resolveModaBaseUrl,
+  shellArg
+} from "./cli-r5pp7qny.js";
 import {
   detectAgents,
   installRules,
@@ -2359,7 +2360,7 @@ function applySdkIntegrationOutcome(setupPlan, outcome, deps) {
       break;
     }
     case "telemetry_not_observed":
-      laneBoard?.warn("sdk", `integration applied but the verification trace was not observed; check MODA_API_KEY at runtime, then moda traces spans ${verificationId}`);
+      laneBoard?.warn("sdk", `integration applied but the verification trace was not observed; check MODA_API_KEY at runtime, then moda traces spans ${shellArg(verificationId)}`);
       markManual(setupPlan, "sdk", outcome.detail ?? "Verification trace was not observed.");
       break;
     case "needs_human_input": {
@@ -2376,7 +2377,7 @@ function applySdkIntegrationOutcome(setupPlan, outcome, deps) {
         sdkAction.reason = outcome.detail ?? "Existing Moda integration verified.";
         break;
       }
-      const reason = outcome.verification ? "agent reports Moda is already integrated but the verification trace was not observed; " + `check MODA_API_KEY at runtime, then \`moda traces spans ${verificationId}\`` : "agent reports Moda is already integrated — not independently verified; " + "send a real request through your app with a trace ID (`conversation_id`) you choose, then run `moda traces spans` with that id";
+      const reason = outcome.verification ? "agent reports Moda is already integrated but the verification trace was not observed; " + `check MODA_API_KEY at runtime, then \`moda traces spans ${shellArg(verificationId)}\`` : "agent reports Moda is already integrated — not independently verified; " + "send a real request through your app with a trace ID (`conversation_id`) you choose, then run `moda traces spans` with that id";
       laneBoard?.warn("sdk", reason);
       markManual(setupPlan, "sdk", reason);
       break;

package/dist/{production-intelligence-7n83c701.js → production-intelligence-7nqddd4f.js}

@@ -1,6 +1,12 @@
 import {
-  INTELLIGENCE_SCHEMA_VERSION
-} from "./cli-bb7133m7.js";
+  INTELLIGENCE_SCHEMA_VERSION,
+  asNumber,
+  asRecord,
+  asString,
+  contextTarget,
+  frustrationAnchorIndex,
+  frustrationsFromEmotions
+} from "./cli-vdkwkkp5.js";
 import {
   renderMarkdownForTerminal,
   shouldColorTerminalOutput,
@@ -10,7 +16,7 @@ import {
 import {
   callControlAPI,
   callDataAPI
-} from "./cli-jtyvbd8d.js";
+} from "./cli-pg5qfmqc.js";
 import {
   CliAuthError,
   CliInputError,
@@ -18,18 +24,12 @@ import {
   EXIT_OK,
   apiErrorStatus,
   apiKeyHeaders,
-  asNumber,
-  asRecord,
-  asString,
-  contextTarget,
-  frustrationAnchorIndex,
-  frustrationsFromEmotions,
   recordApiRequest,
   resolveApiKey,
   resolveModaBaseUrl,
   safeWriteStderr,
-  shellWord
-} from "./cli-sqsjd08w.js";
+  shellArg
+} from "./cli-r5pp7qny.js";
 import"./cli-0v6na3yp.js";
 
 // src/production-intelligence.ts
@@ -538,7 +538,7 @@ async function investigateProduction(options) {
     warnings.push(`No failures found for tool "${options.toolName}" in the last ${options.daysBack} day(s) — the tool may have no failures in this window, or the name may not exist in this tenant. ` + "Run `moda detections tools` to list tools with recorded failures, or widen --days-back.");
   }
   if (options.conversationId) {
-    warnings.push(`Scoped to trace ${options.conversationId} for frustration evidence only; overview and tool failures are tenant-wide. ` + `Open the trace itself with \`moda traces spans ${options.conversationId}\`.`);
+    warnings.push(`Scoped to trace ${options.conversationId} for frustration evidence only; overview and tool failures are tenant-wide. ` + `Open the trace itself with \`moda traces spans ${shellArg(options.conversationId)}\`.`);
   }
   const evidenceRefs = [];
   const findings = [];
@@ -872,7 +872,7 @@ function toolFailureFindings(data, daysBack, hints, evidenceRefs, scopedTool) {
         id: `action_tool_detail_${slug(name)}`,
         title: `Inspect ${name} failure examples.`,
         rationale: "Examples include trace anchors and error subtypes.",
-        command: `moda detections tools ${name} --days-back=${daysBack} --include-window`,
+        command: `moda detections tools ${shellArg(name)} --days-back=${daysBack} --include-window`,
         mutability: "read",
         requiresApproval: false
       }]
@@ -918,7 +918,7 @@ function frustrationFindings(data, daysBack, evidenceRefs) {
       id: "action_frustration_window",
       title: "Read the frustration window.",
       rationale: "The user quote and nearby turns reveal what confused or blocked the user.",
-      command: conversationId ? `moda traces get ${shellWord(contextTarget(conversationId))}${anchorIndex !== null ? ` --msg-index=${anchorIndex}` : ""} --window=3` : `moda detections list --family=frustration --days-back=${daysBack} --include-window`,
+      command: conversationId ? `moda traces get ${shellArg(contextTarget(conversationId))}${anchorIndex !== null ? ` --msg-index=${anchorIndex}` : ""} --window=3` : `moda detections list --family=frustration --days-back=${daysBack} --include-window`,
       mutability: "read",
       requiresApproval: false
     }]
@@ -994,7 +994,7 @@ function problemFindings(data, daysBack, evidenceRefs) {
         id: `action_problem_${slug(problem.id)}`,
         title: `Open the Problem dossier for ${problem.name}.`,
         rationale: "The dossier has the cause, evidence, affected traces and verification state.",
-        command: `moda problems get ${problem.id}`,
+        command: `moda problems get ${shellArg(problem.id)}`,
         mutability: "read",
         requiresApproval: false
       }]

package/dist/{profile-commands-ct2t0bfr.js → profile-commands-49yn02yg.js}

@@ -2,7 +2,7 @@ import {
   probeApiKey,
   redactApiKey,
   resolveApiKeyCredential
-} from "./cli-1mbb0ct0.js";
+} from "./cli-ccjfwzqx.js";
 import {
   authFetch,
   clearAuthSession,
@@ -10,7 +10,7 @@ import {
   loadAuthSession,
   login,
   revokeCliSessionToken
-} from "./cli-q6f6vrrr.js";
+} from "./cli-hmjdgxrn.js";
 import {
   CliInputError,
   DEFAULT_INGEST_URL,
@@ -34,8 +34,9 @@ import {
   saveCliConfig,
   secretFilePathFromRef,
   setActiveProfile,
+  shellArg,
   upsertProfile
-} from "./cli-sqsjd08w.js";
+} from "./cli-r5pp7qny.js";
 import"./cli-0v6na3yp.js";
 
 // src/profile-commands.ts
@@ -326,7 +327,7 @@ async function runProfilesCommand(context) {
         default_profile: config.active_profile,
         profiles: Object.values(config.profiles).map((profile) => serializeProfile(profile, effective)),
         migrations: config.migrations
-      }, missing ? { warnings: [`The active profile '${effective}' (from ${source}) does not exist. Create it with \`moda profiles create ${effective}\` or select an existing profile.`] } : undefined);
+      }, missing ? { warnings: [`The active profile '${effective}' (from ${source}) does not exist. Create it with \`moda profiles create ${shellArg(effective)}\` or select an existing profile.`] } : undefined);
       return { exitCode: 0 };
     }
     case "use": {

package/dist/prompt-source-mcp.js

@@ -5,12 +5,12 @@ import {
   inspectCodeSelectors,
   inspectPythonSelectors,
   safePromptEvidencePath
-} from "./cli-d577kq6h.js";
+} from "./cli-qwgct6x7.js";
 import"./cli-97fnztpy.js";
-import"./cli-cdrvjva5.js";
-import"./cli-jgfm7w1r.js";
-import"./cli-jtyvbd8d.js";
-import"./cli-sqsjd08w.js";
+import"./cli-v8q7sd7g.js";
+import"./cli-wzds257x.js";
+import"./cli-pg5qfmqc.js";
+import"./cli-r5pp7qny.js";
 import {
   __commonJS,
   __toESM

package/dist/{prompts-92aqqb2k.js → prompts-17wyrst6.js}

@@ -11,16 +11,16 @@ import {
   runPromptSync,
   runPromptsCommand,
   writePromptSyncProgress
-} from "./cli-b4740tnv.js";
+} from "./cli-q9nsvqqg.js";
 import {
   promptSourceHashPayload
 } from "./cli-mm48br00.js";
-import"./cli-d577kq6h.js";
+import"./cli-qwgct6x7.js";
 import"./cli-97fnztpy.js";
-import"./cli-cdrvjva5.js";
-import"./cli-jgfm7w1r.js";
-import"./cli-jtyvbd8d.js";
-import"./cli-sqsjd08w.js";
+import"./cli-v8q7sd7g.js";
+import"./cli-wzds257x.js";
+import"./cli-pg5qfmqc.js";
+import"./cli-r5pp7qny.js";
 import"./cli-0v6na3yp.js";
 export {
   writePromptSyncProgress,