@moda-ai/cli 1.55.26 → 1.55.28

package/dist/cli.js

@@ -1,11 +1,31 @@
 #!/usr/bin/env node
 import {
-  MODA_INTELLIGENCE_V1_JSON_SCHEMA
-} from "./cli-bb7133m7.js";
+  BATCH_CONCURRENCY,
+  BATCH_MAX_TARGETS,
+  MODA_INTELLIGENCE_V1_JSON_SCHEMA,
+  asNumber,
+  asRecord,
+  asString,
+  collectBatchTargets,
+  compactProblemDossier,
+  contextTarget,
+  embeddedWindowSize,
+  frustrationsFromEmotions,
+  mapWithConcurrency,
+  parseBatchTarget,
+  trimToolFailureConversations,
+  withFrustrationAnchors,
+  withToolFailureAnchors,
+  withoutDetectionWindows
+} from "./cli-fwpqghgc.js";
 import {
   createCommandContext,
-  parseBooleanFlagValue
-} from "./cli-cdrvjva5.js";
+  envOptOutSet,
+  envSwitchedOff,
+  optOutFlagSet,
+  parseBooleanFlagValue,
+  withoutFlag
+} from "./cli-dr6x0zv7.js";
 import {
   AuditSchema,
   COMMAND_FLAG_SPECS,
@@ -47,22 +67,14 @@ import {
   unknownSignalsSubcommandError,
   usageLine,
   writeDryRun
-} from "./cli-jgfm7w1r.js";
+} from "./cli-n2hng3gv.js";
 import {
   ApiError,
   callControlAPI,
   callDataAPI
-} from "./cli-jtyvbd8d.js";
+} from "./cli-e23g9ywa.js";
 import {
   AGENT_ERROR_CODES,
-  BATCH_CONCURRENCY,
-  BATCH_MAX_TARGETS,
-  CliAccessError,
-  CliAuthError,
-  CliCancellationError,
-  CliInputError,
-  CliInputRequiredError,
-  CliNotFoundError,
   EXIT_AUTH_REQUIRED,
   EXIT_CANCELLED,
   EXIT_DEGRADED,
@@ -74,46 +86,43 @@ import {
   VERSION,
   agentEnvelopeFits,
   agentMaxOutputBytes,
-  apiErrorStatus,
   apiKeyHeaders,
-  asNumber,
-  asRecord,
-  asString,
-  attachInputDetails,
   canonicalCommandText,
-  collectBatchTargets,
-  compactProblemDossier,
-  contextTarget,
   createCliOutput,
   embeddedTenantIdFromApiKey,
-  embeddedWindowSize,
   errorToAgentError,
-  frustrationsFromEmotions,
   getApiRequestCount,
   getModaDir,
-  inputDetailsOf,
-  isApiLikeError,
-  isNetworkLikeError,
   isPlatformApiKey,
   loadProfileConfig,
-  mapWithConcurrency,
-  parseBatchTarget,
   resetApiRequestCount,
   resolveApiKey,
   resolveApiTenantId,
   resolveModaBaseUrl,
+  resolveModaBaseUrlStrict,
   resolveOutputMode,
   safeWriteStderr,
   safeWriteStdout,
   setAgentUpdateNotice,
   setPlatformTenantOverride,
-  trimToolFailureConversations,
+  shellArg,
   validateConfig,
-  wasOutputCancelled,
-  withFrustrationAnchors,
-  withToolFailureAnchors,
-  withoutDetectionWindows
-} from "./cli-sqsjd08w.js";
+  wasOutputCancelled
+} from "./cli-99p2jh28.js";
+import {
+  CliAccessError,
+  CliAuthError,
+  CliCancellationError,
+  CliInputError,
+  CliInputRequiredError,
+  CliNotFoundError,
+  apiErrorStatus,
+  attachInputDetails,
+  inputDetailsOf,
+  isApiLikeError,
+  isNetworkLikeError
+} from "./cli-k4tqwah4.js";
+import"./cli-ns5fcnkz.js";
 import {
   __require
 } from "./cli-0v6na3yp.js";
@@ -302,16 +311,91 @@ async function runReplaysCommand(context) {
 }
 
 // src/telemetry.ts
+import { spawn as spawn2 } from "node:child_process";
+
+// src/detached.ts
 import { spawn } from "node:child_process";
+var INSPECTOR_VALUE_OPTIONS = new Set(["--inspect-port", "--debug-port", "--inspect-publish-uid"]);
+function nodeOptionTokens(nodeOptions) {
+  const tokens = [];
+  let start = -1;
+  let quoted = false;
+  for (let i = 0;i < nodeOptions.length; i += 1) {
+    const ch = nodeOptions[i];
+    if (start === -1) {
+      if (/\s/.test(ch))
+        continue;
+      start = i;
+    }
+    if (quoted && ch === "\\") {
+      i += 1;
+    } else if (ch === '"') {
+      quoted = !quoted;
+    } else if (!quoted && /\s/.test(ch)) {
+      tokens.push(nodeOptions.slice(start, i));
+      start = -1;
+    }
+  }
+  if (start !== -1)
+    tokens.push(nodeOptions.slice(start));
+  return tokens;
+}
+function withoutInspectorOptions(nodeOptions) {
+  const tokens = nodeOptionTokens(nodeOptions);
+  const kept = [];
+  for (let i = 0;i < tokens.length; i += 1) {
+    const name = tokens[i].split("=")[0];
+    if (!name.startsWith("--inspect") && name !== "--debug-port") {
+      kept.push(tokens[i]);
+      continue;
+    }
+    if (INSPECTOR_VALUE_OPTIONS.has(tokens[i]) && tokens[i + 1] && !tokens[i + 1].startsWith("-"))
+      i += 1;
+  }
+  return kept.join(" ");
+}
+function spawnDetachedNode(script, options = {}, spawnImpl = spawn) {
+  try {
+    const env = { ...process.env, ...options.env };
+    for (const key of options.dropEnv ?? [])
+      delete env[key];
+    if (env.NODE_OPTIONS?.includes("--inspect")) {
+      const kept = withoutInspectorOptions(env.NODE_OPTIONS);
+      if (kept)
+        env.NODE_OPTIONS = kept;
+      else
+        delete env.NODE_OPTIONS;
+    }
+    const child = spawnImpl(process.execPath, ["-e", script], {
+      detached: true,
+      stdio: [options.stdin === undefined ? "ignore" : "pipe", "ignore", "ignore"],
+      windowsHide: true,
+      env
+    });
+    child.on("error", () => {});
+    if (child.pid === undefined)
+      return false;
+    if (options.stdin !== undefined && child.stdin) {
+      child.stdin.on("error", () => {});
+      child.stdin.end(options.stdin);
+    }
+    child.unref();
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// src/telemetry.ts
 import { randomUUID } from "node:crypto";
 var INLINE_TELEMETRY_TIMEOUT_MS = 500;
 var DETACHED_TELEMETRY_TIMEOUT_MS = 5000;
 var INVOCATION_ID = randomUUID();
 var TELEMETRY_FLAG = "no-telemetry";
-var TELEMETRY_REQUEST_ENV = "MODA_CLI_TELEMETRY_REQUEST";
 var TELEMETRY_TRANSPORT_ENV = "MODA_CLI_TELEMETRY_TRANSPORT";
 var MAX_TELEMETRY_DURATION_MS = 86400000;
 var MAX_TELEMETRY_API_REQUEST_COUNT = 1e6;
+var MAX_UNKNOWN_FLAG_COUNT = 1000;
 var SEARCH_SURFACE_BY_COMMAND = {
   search: "message",
   conversations: "conversation",
@@ -413,11 +497,10 @@ function serializeAdoption(adoption) {
   return out;
 }
 function stripTelemetryFlag(flags) {
-  const { [TELEMETRY_FLAG]: _drop, ...rest } = flags;
-  return rest;
+  return withoutFlag(flags, TELEMETRY_FLAG);
 }
-function isTelemetryDisabled(flags) {
-  return flags[TELEMETRY_FLAG] === "true" || process.env.MODA_CLI_TELEMETRY === "0" || process.env.DO_NOT_TRACK === "1";
+function isTelemetryDisabled(flags, env = process.env) {
+  return optOutFlagSet(flags, TELEMETRY_FLAG) || envSwitchedOff(env.MODA_CLI_TELEMETRY) || envOptOutSet(env.DO_NOT_TRACK);
 }
 var VALIDATION_REASON_MAX = 128;
 var DEGRADE_REASON_MAX = 64;
@@ -428,88 +511,78 @@ function sanitizeReasonCode(reason, max) {
 function sanitizeValidationReason(reason) {
   return sanitizeReasonCode(reason, VALIDATION_REASON_MAX);
 }
-function sanitizedFlagNames(flags) {
-  return Object.keys(stripTelemetryFlag(flags)).sort();
+var MAX_FLAG_NAMES = 50;
+var FLAG_NAME_RE = /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;
+var SECRET_PATTERNS = [
+  /moda_sk_/i,
+  /(?:^|[^A-Za-z0-9])sk-[A-Za-z0-9_-]{8,}/,
+  /(?:^|[^A-Za-z0-9])(?:sk|pk|rk)_(?:live|test)_/i,
+  /gh[pousr]_[A-Za-z0-9]{16,}/,
+  /github_pat_/i,
+  /xox[abprs]-/i,
+  /AKIA[0-9A-Z]{16}/,
+  /eyJ[A-Za-z0-9_-]{8,}\.[A-Za-z0-9_-]{8,}/,
+  /-----BEGIN [A-Z ]*PRIVATE KEY/,
+  /[^\s@]+@[^\s@]+\.[A-Za-z]{2,}/,
+  /[A-Za-z0-9+/=]{32,}/
+];
+function looksSecret(value) {
+  return SECRET_PATTERNS.some((pattern) => pattern.test(value));
+}
+function reportedFlagNames(flags, acceptedFlags = new Set) {
+  const names = new Set;
+  let unknownCount = 0;
+  for (const key of Object.keys(stripTelemetryFlag(flags))) {
+    if (acceptedFlags.has(key.replace(/_/g, "-")) && FLAG_NAME_RE.test(key) && !looksSecret(key))
+      names.add(key);
+    else
+      unknownCount += 1;
+  }
+  const sorted = [...names].sort();
+  return { names: sorted.slice(0, MAX_FLAG_NAMES), unknownCount: unknownCount + Math.max(0, sorted.length - MAX_FLAG_NAMES) };
+}
+function reportedValidationReason(reason, knownFlags = new Set) {
+  let code = reason;
+  const unknownFlag = code ? /^unknown_flag:(.*)$/s.exec(code) : null;
+  if (unknownFlag) {
+    const name = unknownFlag[1].replace(/_/g, "-");
+    code = knownFlags.has(name) && FLAG_NAME_RE.test(name) ? `unknown_flag:${name}` : "unknown_flag";
+  }
+  const cleaned = sanitizeValidationReason(code);
+  if (!cleaned || !looksSecret(cleaned))
+    return cleaned;
+  const head = cleaned.split(":")[0];
+  return head && !looksSecret(head) ? head : undefined;
+}
+function safeCode(value) {
+  return value && !looksSecret(value) ? value : undefined;
 }
 var TELEMETRY_SENDER_SCRIPT = [
   "try {",
-  `  const raw = process.env.${TELEMETRY_REQUEST_ENV};`,
-  `  delete process.env.${TELEMETRY_REQUEST_ENV};`,
-  "  const r = raw ? JSON.parse(raw) : null;",
-  "  if (r && typeof r.url === 'string' && typeof fetch === 'function') {",
-  "    const c = new AbortController();",
-  `    const t = setTimeout(() => c.abort(), ${DETACHED_TELEMETRY_TIMEOUT_MS});`,
-  "    fetch(r.url, { method: 'POST', headers: r.headers, body: r.body, signal: c.signal })",
-  "      .then((res) => (res.body && res.body.cancel ? res.body.cancel() : undefined))",
-  "      .catch(() => {})",
-  "      .finally(() => clearTimeout(t));",
-  "  }",
+  "  let raw = '';",
+  `  const quit = setTimeout(() => process.exit(0), ${DETACHED_TELEMETRY_TIMEOUT_MS + 1000});`,
+  "  const done = () => clearTimeout(quit);",
+  "  process.stdin.setEncoding('utf8');",
+  "  process.stdin.on('error', () => {});",
+  "  process.stdin.on('data', (chunk) => { raw += chunk; });",
+  "  process.stdin.on('end', () => {",
+  "    try {",
+  "      const r = raw ? JSON.parse(raw) : null;",
+  "      raw = '';",
+  "      if (!r || typeof r.url !== 'string' || typeof fetch !== 'function') return done();",
+  "      const c = new AbortController();",
+  `      const t = setTimeout(() => c.abort(), ${DETACHED_TELEMETRY_TIMEOUT_MS});`,
+  "      fetch(r.url, { method: 'POST', headers: r.headers, body: r.body, signal: c.signal })",
+  "        .then((res) => (res.body && res.body.cancel ? res.body.cancel() : undefined))",
+  "        .catch(() => {})",
+  "        .finally(() => { clearTimeout(t); done(); });",
+  "    } catch { done(); }",
+  "  });",
   "} catch {}"
 ].join(`
 `);
-var INSPECTOR_VALUE_OPTIONS = new Set(["--inspect-port", "--debug-port", "--inspect-publish-uid"]);
-function nodeOptionTokens(nodeOptions) {
-  const tokens = [];
-  let start = -1;
-  let quoted = false;
-  for (let i = 0;i < nodeOptions.length; i += 1) {
-    const ch = nodeOptions[i];
-    if (start === -1) {
-      if (/\s/.test(ch))
-        continue;
-      start = i;
-    }
-    if (quoted && ch === "\\") {
-      i += 1;
-    } else if (ch === '"') {
-      quoted = !quoted;
-    } else if (!quoted && /\s/.test(ch)) {
-      tokens.push(nodeOptions.slice(start, i));
-      start = -1;
-    }
-  }
-  if (start !== -1)
-    tokens.push(nodeOptions.slice(start));
-  return tokens;
-}
-function withoutInspectorOptions(nodeOptions) {
-  const tokens = nodeOptionTokens(nodeOptions);
-  const kept = [];
-  for (let i = 0;i < tokens.length; i += 1) {
-    const name = tokens[i].split("=")[0];
-    if (!name.startsWith("--inspect") && name !== "--debug-port") {
-      kept.push(tokens[i]);
-      continue;
-    }
-    if (INSPECTOR_VALUE_OPTIONS.has(tokens[i]) && tokens[i + 1] && !tokens[i + 1].startsWith("-"))
-      i += 1;
-  }
-  return kept.join(" ");
-}
-function spawnDetachedTelemetrySender(request, spawnImpl = spawn) {
-  try {
-    const env = { ...process.env, [TELEMETRY_REQUEST_ENV]: JSON.stringify(request) };
-    if (env.NODE_OPTIONS?.includes("--inspect")) {
-      const kept = withoutInspectorOptions(env.NODE_OPTIONS);
-      if (kept)
-        env.NODE_OPTIONS = kept;
-      else
-        delete env.NODE_OPTIONS;
-    }
-    const child = spawnImpl(process.execPath, ["-e", TELEMETRY_SENDER_SCRIPT], {
-      detached: true,
-      stdio: "ignore",
-      windowsHide: true,
-      env
-    });
-    child.on("error", () => {});
-    if (child.pid === undefined)
-      return false;
-    child.unref();
-    return true;
-  } catch {
-    return false;
-  }
+function spawnDetachedTelemetrySender(request, spawnImpl = spawn2) {
+  return spawnDetachedNode(TELEMETRY_SENDER_SCRIPT, { stdin: JSON.stringify(request), dropEnv: ["MODA_API_KEY"] }, spawnImpl);
 }
 async function sendInline(request) {
   const controller = new AbortController;
@@ -529,16 +602,25 @@ async function sendInline(request) {
   }
 }
 function buildCliUsageRequest(input) {
-  const validationReason = sanitizeValidationReason(input.validationReason);
+  const baseUrl = resolveModaBaseUrlStrict(input.profile ? { profile: input.profile } : {});
+  if (!baseUrl)
+    return;
+  const validationReason = reportedValidationReason(input.validationReason, input.knownFlags);
+  const flagNames = reportedFlagNames(input.flags, input.acceptedFlags);
+  const adoption = serializeAdoption(input.adoption);
+  for (const key of ["subcommand", "degrade_reason", "skill_version"]) {
+    if (typeof adoption[key] === "string" && looksSecret(adoption[key]))
+      delete adoption[key];
+  }
   return {
-    url: `${resolveModaBaseUrl({ profile: input.profile })}/api/v1/data/cli-usage`,
+    url: `${baseUrl}/api/v1/data/cli-usage`,
     headers: {
       ...apiKeyHeaders(input.apiKey),
       "Content-Type": "application/json"
     },
     body: JSON.stringify({
       invocation_id: INVOCATION_ID,
-      command: input.command.slice(0, 64),
+      command: safeCode(input.command.slice(0, 64)) ?? "unknown",
       status: input.status,
       error_type: input.errorType,
       ...validationReason ? { validation_reason: validationReason } : {},
@@ -550,10 +632,11 @@ function buildCliUsageRequest(input) {
       platform: process.platform,
       arch: process.arch,
       flags_json: {
-        names: sanitizedFlagNames(input.flags),
-        ...((alias) => alias ? { legacy_alias: alias } : {})(sanitizeReasonCode(input.legacyAlias?.replace(/ /g, ":"), 64))
+        names: flagNames.names,
+        ...flagNames.unknownCount > 0 ? { unknown_count: Math.min(flagNames.unknownCount, MAX_UNKNOWN_FLAG_COUNT) } : {},
+        ...((alias) => alias ? { legacy_alias: alias } : {})(safeCode(sanitizeReasonCode(input.legacyAlias?.replace(/ /g, ":"), 64)))
       },
-      ...serializeAdoption(input.adoption)
+      ...adoption
     })
   };
 }
@@ -563,6 +646,8 @@ async function sendCliUsageTelemetry(input) {
       return;
     }
     const request = buildCliUsageRequest({ ...input, apiKey: input.apiKey });
+    if (!request)
+      return;
     if (process.env[TELEMETRY_TRANSPORT_ENV] !== "inline" && spawnDetachedTelemetrySender(request)) {
       return;
     }
@@ -579,11 +664,10 @@ var REGISTRY_TIMEOUT_MS = 1500;
 var REGISTRY_LATEST_URL = "https://registry.npmjs.org/@moda-ai/cli/latest";
 var SEMVER_RE = /^\d+\.\d+\.\d+(?:[-+][0-9A-Za-z.-]+)?$/;
 function stripUpdateCheckFlag(flags) {
-  const { [UPDATE_CHECK_FLAG]: _drop, ...rest } = flags;
-  return rest;
+  return withoutFlag(flags, UPDATE_CHECK_FLAG);
 }
 function isUpdateCheckDisabled(flags, env = process.env) {
-  return flags[UPDATE_CHECK_FLAG] === "true" || env.MODA_CLI_UPDATE_CHECK === "0" || env.DO_NOT_TRACK === "1" || env.CI !== undefined && env.CI !== "" && env.CI !== "false" && env.CI !== "0";
+  return optOutFlagSet(flags, UPDATE_CHECK_FLAG) || envSwitchedOff(env.MODA_CLI_UPDATE_CHECK) || envOptOutSet(env.DO_NOT_TRACK) || envOptOutSet(env.CI);
 }
 function cachePath(options = {}) {
   return join(getModaDir(options), "update-check.json");
@@ -616,9 +700,39 @@ function isNewerVersion(candidate, current) {
   }
   return false;
 }
-async function startUpdateCheck(options = {}, now = Date.now()) {
+var UPDATE_CHECK_URL_ENV = "MODA_CLI_UPDATE_CHECK_URL";
+var UPDATE_CHECK_CACHE_ENV = "MODA_CLI_UPDATE_CHECK_CACHE";
+var DETACHED_REGISTRY_TIMEOUT_MS = 1e4;
+var UPDATE_CHECK_SCRIPT = [
+  "try {",
+  `  const url = process.env.${UPDATE_CHECK_URL_ENV};`,
+  `  const path = process.env.${UPDATE_CHECK_CACHE_ENV};`,
+  `  const semver = new RegExp(${JSON.stringify(SEMVER_RE.source)});`,
+  "  if (url && path && typeof fetch === 'function') {",
+  "    const c = new AbortController();",
+  `    const t = setTimeout(() => c.abort(), ${DETACHED_REGISTRY_TIMEOUT_MS});`,
+  "    fetch(url, { headers: { Accept: 'application/json' }, signal: c.signal })",
+  "      .then((res) => (res.ok ? res.json() : null))",
+  "      .then((body) => {",
+  "        if (body && typeof body.version === 'string' && semver.test(body.version)) {",
+  "          require('fs').writeFileSync(path, JSON.stringify({ checked_at: Date.now(), latest: body.version }, null, 2) + '\\n', 'utf8');",
+  "        }",
+  "      })",
+  "      .catch(() => {})",
+  "      .finally(() => clearTimeout(t));",
+  "  }",
+  "} catch {}"
+].join(`
+`);
+async function startUpdateCheck(options = {}, now = Date.now(), mode = {}) {
   const cache = readCache(options);
-  if (cache && now - cache.checked_at < CHECK_INTERVAL_MS) {
+  if (cache && cache.checked_at <= now && now - cache.checked_at < CHECK_INTERVAL_MS) {
+    return;
+  }
+  const known = cache && SEMVER_RE.test(cache.latest) ? cache.latest : "";
+  writeCache({ checked_at: now, latest: known }, options);
+  if (mode.detached) {
+    spawnDetachedNode(UPDATE_CHECK_SCRIPT, { env: { [UPDATE_CHECK_URL_ENV]: REGISTRY_LATEST_URL, [UPDATE_CHECK_CACHE_ENV]: cachePath(options) }, dropEnv: ["MODA_API_KEY"] }, mode.spawnImpl);
     return;
   }
   const controller = new AbortController;
@@ -643,16 +757,16 @@ async function startUpdateCheck(options = {}, now = Date.now()) {
 }
 function getAvailableUpdate(options = {}) {
   const cache = readCache(options);
-  return cache && isNewerVersion(cache.latest, VERSION) ? cache.latest : undefined;
+  return cache && SEMVER_RE.test(cache.latest) && isNewerVersion(cache.latest, VERSION) ? cache.latest : undefined;
 }
 function getUpdateNotice(options = {}) {
-  const cache = readCache(options);
-  if (!cache || !isNewerVersion(cache.latest, VERSION)) {
+  const latest = getAvailableUpdate(options);
+  if (!latest) {
     return;
   }
   return [
     "",
-    `Update available: moda-cli ${VERSION} → ${cache.latest}`,
+    `Update available: moda-cli ${VERSION} → ${latest}`,
     "Run `npm install -g @moda-ai/cli@latest` to update."
   ].join(`
 `);
@@ -2528,46 +2642,46 @@ function leafManifestFields(leaf, commands) {
 import { fileURLToPath } from "url";
 import { realpathSync } from "fs";
 async function runPromptsCommand(...args) {
-  return (await import("./prompts-92aqqb2k.js")).runPromptsCommand(...args);
+  return (await import("./prompts-6y9wfq5z.js")).runPromptsCommand(...args);
 }
 async function runSkillsCommand(...args) {
-  return (await import("./skills-2mbsj9bt.js")).runSkillsCommand(...args);
+  return (await import("./skills-j8865009.js")).runSkillsCommand(...args);
 }
 async function runFixCommand(...args) {
-  return (await import("./fix-crkwdkt4.js")).runFixCommand(...args);
+  return (await import("./fix-w5z02wt4.js")).runFixCommand(...args);
 }
 async function runFixesCommand(...args) {
-  return (await import("./fix-crkwdkt4.js")).runFixesCommand(...args);
+  return (await import("./fix-w5z02wt4.js")).runFixesCommand(...args);
 }
 async function runHarnessCommand(...args) {
-  return (await import("./harness-x3e7d68b.js")).runHarnessCommand(...args);
+  return (await import("./harness-7azmzytc.js")).runHarnessCommand(...args);
 }
 async function runSyncCommand(...args) {
-  return (await import("./sync-kghmmmk5.js")).runSyncCommand(...args);
+  return (await import("./sync-ew7yvy0e.js")).runSyncCommand(...args);
 }
 async function runRegistryCommand(...args) {
-  return (await import("./registry-ex162j5y.js")).runRegistryCommand(...args);
+  return (await import("./registry-96aze5wp.js")).runRegistryCommand(...args);
 }
 async function runDoctorCommand(...args) {
-  return (await import("./doctor-w913fj4g.js")).runDoctorCommand(...args);
+  return (await import("./doctor-k3ta6h2y.js")).runDoctorCommand(...args);
 }
 async function runStatusCommand(...args) {
-  return (await import("./doctor-w913fj4g.js")).runStatusCommand(...args);
+  return (await import("./doctor-k3ta6h2y.js")).runStatusCommand(...args);
 }
 async function runAuthCommand(...args) {
-  return (await import("./profile-commands-ct2t0bfr.js")).runAuthCommand(...args);
+  return (await import("./profile-commands-h8evz9x0.js")).runAuthCommand(...args);
 }
 async function runConfigCommand(...args) {
-  return (await import("./profile-commands-ct2t0bfr.js")).runConfigCommand(...args);
+  return (await import("./profile-commands-h8evz9x0.js")).runConfigCommand(...args);
 }
 async function runProfilesCommand(...args) {
-  return (await import("./profile-commands-ct2t0bfr.js")).runProfilesCommand(...args);
+  return (await import("./profile-commands-h8evz9x0.js")).runProfilesCommand(...args);
 }
 async function runAgentCommand(...args) {
-  return (await import("./agent-nqmha8ck.js")).runAgentCommand(...args);
+  return (await import("./agent-0w9rtdsw.js")).runAgentCommand(...args);
 }
 async function runProductionCommand(...args) {
-  return (await import("./production-intelligence-7n83c701.js")).runProductionCommand(...args);
+  return (await import("./production-intelligence-wvsgjxth.js")).runProductionCommand(...args);
 }
 function parseArgs(argv) {
   const args = argv.slice(2);
@@ -3265,23 +3379,21 @@ function noWorldStateWarnings(conversationId, isMissing) {
 }
 var AUDIT_DEFAULT_LIMIT = 200;
 var AUDIT_MAX_LIMIT = 1000;
-function auditCapStatus(data, limit) {
+function auditCapStatus(data) {
   const record = asRecord(data);
   if (!record)
     return null;
   const summary = asRecord(record.summary) ?? {};
   const rows = (asNumber(summary.ingest_rows) ?? (Array.isArray(record.ingest) ? record.ingest.length : 0)) + (asNumber(record.parse_errors) ?? 0);
   const spans = asNumber(summary.total_spans) ?? (Array.isArray(record.spans) ? record.spans.length : 0);
-  const hasMore = record.has_more === true || summary.has_more === true;
+  const rowsCapped = record.has_more === true || summary.has_more === true;
   const spansCapped = summary.truncated === true || record.truncated === true;
-  const serverSaid = typeof record.has_more === "boolean" || typeof summary.has_more === "boolean";
-  const rowsCapped = hasMore || !serverSaid && rows >= limit;
   if (!rowsCapped && !spansCapped)
     return null;
   const reason = typeof summary.truncated_reason === "string" ? summary.truncated_reason : null;
   const cursorValue = summary.next_cursor ?? record.next_cursor;
   const nextCursor = typeof cursorValue === "string" && cursorValue ? cursorValue : null;
-  return { rowsCapped, spansCapped, hasMoreKnown: hasMore, rows, spans, reason, nextCursor };
+  return { rowsCapped, spansCapped, rows, spans, reason, nextCursor };
 }
 var AUDIT_AGENT_RESERVE_BYTES = 16384;
 function auditMaxBytes(budgetBytes) {
@@ -3326,7 +3438,7 @@ function auditOutput(command, params, data, keep) {
   if (partial && record) {
     const continueWith = auditFlags([
       params.limit ? `--limit=${params.limit}` : "",
-      params.cursor ? `--cursor=${params.cursor}` : "",
+      params.cursor ? `--cursor=${shellArg(params.cursor)}` : "",
       params.page_bytes ? `--page-bytes=${params.page_bytes}` : "",
       `--span-offset=${end}`
     ]);
@@ -3352,7 +3464,7 @@ function auditOutput(command, params, data, keep) {
       }
     };
   }
-  const capped = auditCapStatus(data, limit);
+  const capped = auditCapStatus(data);
   if (!capped || !record) {
     return {
       data: record ? { ...record, truncated: false, has_more: false, next_cursor: null } : data,
@@ -3365,7 +3477,7 @@ function auditOutput(command, params, data, keep) {
   const nextCommands = [];
   if (capped.nextCursor) {
     nextCommands.push({
-      command: auditFlags([params.limit ? `--limit=${params.limit}` : "", `--cursor=${capped.nextCursor}`]),
+      command: auditFlags([params.limit ? `--limit=${params.limit}` : "", `--cursor=${shellArg(capped.nextCursor)}`]),
       purpose: "Read the next page of ingest rows of this trace.",
       mutability: "read",
       requires_approval: false
@@ -3377,7 +3489,7 @@ function auditOutput(command, params, data, keep) {
     warnings.push(`Spans were capped: the page reached the server's per-page span cap after ${capped.rows} ingest row(s), so this trace has more spans than the ${shownText}. Continue with the next_cursor page. Orphan/duplicate analysis covers this page only.`);
   } else if (capped.rowsCapped) {
     const bigger = Math.min(AUDIT_MAX_LIMIT, limit * 5);
-    warnings.push(`Spans were capped: read ${capped.rows} ingest row(s), the --limit=${limit} maximum, so this trace ${capped.hasMoreKnown ? "has" : "may have"} more spans than the ${shownText}. ` + (capped.nextCursor ? "Page on with the next_cursor command, or " : "") + (limit < AUDIT_MAX_LIMIT ? `${capped.nextCursor ? "rerun" : "Rerun"} with --limit=${bigger} (max ${AUDIT_MAX_LIMIT}), or ${perTrace}.` : capped.nextCursor ? `${perTrace}.` : `${perTrace[0].toUpperCase()}${perTrace.slice(1)}.`));
+    warnings.push(`Spans were capped: read ${capped.rows} ingest row(s), the --limit=${limit} maximum, so this trace has more spans than the ${shownText}. ` + (capped.nextCursor ? "Page on with the next_cursor command, or " : "") + (limit < AUDIT_MAX_LIMIT ? `${capped.nextCursor ? "rerun" : "Rerun"} with --limit=${bigger} (max ${AUDIT_MAX_LIMIT}), or ${perTrace}.` : capped.nextCursor ? `${perTrace}.` : `${perTrace[0].toUpperCase()}${perTrace.slice(1)}.`));
     if (limit < AUDIT_MAX_LIMIT && !params.cursor && !sliced) {
       nextCommands.push({ command: auditFlags([`--limit=${bigger}`]), purpose: "Read more ingest rows of this trace.", mutability: "read", requires_approval: false });
     }
@@ -3767,13 +3879,6 @@ function specParseOptions(spec) {
     ...spec.flagAliases ? { flagAliases: spec.flagAliases } : {}
   };
 }
-function shellArg(value) {
-  if (/^[A-Za-z0-9_.,:@%+\/=-]+$/.test(value))
-    return value;
-  if (!/["$`\\!]/.test(value))
-    return `"${value}"`;
-  return `'${value.replace(/'/g, `'\\''`)}'`;
-}
 function semanticIndexCoverage(coverage) {
   const ratio = asRecord(asRecord(coverage)?.semantic_index)?.coverage_ratio;
   if (typeof ratio !== "number" || !Number.isFinite(ratio) || ratio < 0 || ratio > 1)
@@ -4153,8 +4258,18 @@ var CONTEXT_BUDGET_BYTES_PER_FIRST_PAGE_MESSAGE = 480;
 function jsonByteLength(value) {
   return Buffer.byteLength(JSON.stringify(value) ?? "", "utf8");
 }
-var LEGACY_WINDOW_MAX_MESSAGES = 100;
-var CONTEXT_MESSAGE_TRUNCATE_CHARS = 500;
+function largestFittingCount(max, fits) {
+  let low = 1;
+  let high = Math.max(1, max);
+  while (low < high) {
+    const mid = Math.ceil((low + high) / 2);
+    if (fits(mid))
+      low = mid;
+    else
+      high = mid - 1;
+  }
+  return low;
+}
 var LONE_SURROGATE = /[\ud800-\udbff](?![\udc00-\udfff])|(?<![\ud800-\udbff])[\udc00-\udfff]/g;
 function stripLoneSurrogates(value) {
   if (typeof value === "string")
@@ -4166,13 +4281,6 @@ function stripLoneSurrogates(value) {
   }
   return value;
 }
-function isUnknownRangeParamsError(error) {
-  const e = error;
-  if (e?.statusCode !== 400)
-    return false;
-  const text = `${typeof e.responseBody === "string" ? e.responseBody : ""} ${typeof e.message === "string" ? e.message : ""}`;
-  return /property (from|count) should not exist/i.test(text);
-}
 function pageMessages(page) {
   const messages = asRecord(page.context)?.messages ?? page.messages;
   return (Array.isArray(messages) ? messages : []).map((m) => asRecord(m) ?? {});
@@ -4182,13 +4290,11 @@ async function readFullTranscript(conversationId, opts = {}) {
   const start = opts.from ?? 0;
   const requested = opts.maxMessages ?? FULL_TRANSCRIPT_DEFAULT_MAX_MESSAGES;
   const path = `/conversations/${encodeURIComponent(conversationId)}/context`;
-  const warnings = [];
   const messages = [];
   let total = 0;
   let summary = null;
   let ordering;
   let nextFrom = null;
-  let legacy = false;
   let cursor = start;
   let readBytes = 0;
   const byteBudget = opts.fits ? opts.maxBytes : undefined;
@@ -4199,22 +4305,13 @@ async function readFullTranscript(conversationId, opts = {}) {
       const estimate = average > 0 ? Math.ceil(Math.max(0, byteBudget - readBytes) / average) + 1 : Math.max(1, Math.floor(byteBudget / CONTEXT_BUDGET_BYTES_PER_FIRST_PAGE_MESSAGE));
       count = Math.max(1, Math.min(count, estimate));
     }
-    let page;
-    try {
-      page = asRecord(await callDataAPI(`${path}?from=${cursor}&count=${count}`)) ?? {};
-    } catch (error) {
-      if (cursor === start && isUnknownRangeParamsError(error)) {
-        legacy = true;
-        break;
-      }
-      throw error;
-    }
+    const page = asRecord(await callDataAPI(`${path}?from=${cursor}&count=${count}`)) ?? {};
     if (cursor === start) {
       total = asNumber(page.total_messages) ?? 0;
-      summary = page.summary ?? null;
-      ordering = asRecord(page.ordering) ?? undefined;
+      summary = stripLoneSurrogates(page.summary ?? null);
+      ordering = stripLoneSurrogates(asRecord(page.ordering) ?? undefined);
     }
-    const batch = pageMessages(page);
+    const batch = stripLoneSurrogates(pageMessages(page));
     messages.push(...batch);
     if (byteBudget !== undefined)
       readBytes += batch.reduce((sum, message) => sum + jsonByteLength(message) + 1, 0);
@@ -4226,46 +4323,13 @@ async function readFullTranscript(conversationId, opts = {}) {
       break;
     cursor = nextFrom;
   }
-  if (legacy) {
-    const limit = Math.min(requested, LEGACY_WINDOW_MAX_MESSAGES);
-    const window = 5;
-    const span = window * 2 + 1;
-    const byIndex = new Map;
-    for (let center = start + window;; center += span) {
-      const page = asRecord(await callDataAPI(`${path}?msg_index=${center}&window=${window}`)) ?? {};
-      if (center === start + window) {
-        total = asNumber(page.total_messages) ?? 0;
-        summary = page.summary ?? null;
-      }
-      for (const message of pageMessages(page)) {
-        const index = asNumber(message.index);
-        if (index !== null && index !== undefined && index >= start && index < start + limit)
-          byIndex.set(index, message);
-      }
-      if (center + window + 1 >= Math.min(total, start + limit))
-        break;
-    }
-    messages.push(...[...byIndex.entries()].sort(([a], [b]) => a - b).map(([, message]) => message));
-    const end = start + messages.length;
-    nextFrom = end < total && messages.length > 0 ? end : null;
-    warnings.push(`This Moda server has no range reads for context (older backend), so --all fell back to windowed paging and stopped at ${LEGACY_WINDOW_MAX_MESSAGES} messages to keep it cheap.`);
-  }
   throwIfNotFound("trace", conversationId, total === 0);
-  const pageSize = legacy ? LEGACY_WINDOW_MAX_MESSAGES : requested;
+  const pageSize = requested;
   const tied = asNumber(ordering?.tied_timestamp_messages) ?? 0;
   const synthetic = asNumber(ordering?.synthetic_timestamp_messages) ?? 0;
-  const atCap = (value) => {
-    const text = typeof value === "string" ? value : value === undefined || value === null ? "" : JSON.stringify(value);
-    return text.length >= CONTEXT_MESSAGE_TRUNCATE_CHARS;
-  };
-  const isTruncated = (record) => {
-    const toolCalls = Array.isArray(record.tool_calls) ? record.tool_calls : [];
-    const toolResults = Array.isArray(record.tool_results) ? record.tool_results : [];
-    return atCap(record.content) || toolCalls.some((call) => atCap(asRecord(call)?.input)) || toolResults.some((result) => atCap(asRecord(result)?.content));
-  };
   const build = (kept) => {
     const returned = messages.slice(0, kept);
-    const out = [...warnings];
+    const out = [];
     if (total > 0 && start >= total) {
       out.push(`--from=${start} is past the end of this trace (${total} messages, indexes 0-${total - 1}).`);
     }
@@ -4287,12 +4351,9 @@ async function readFullTranscript(conversationId, opts = {}) {
     if (tied > 0 || synthetic > 0) {
       out.push(`Message order may not be chronological: ${tied} of ${total} messages share a timestamp with another message (ordered by id, not time)${synthetic > 0 ? ` and ${synthetic} carry a synthetic pre-2022 timestamp` : ""}.`);
     }
-    if (legacy && returned.some(isTruncated)) {
-      out.push(`This Moda server is older and truncates message text, tool-call inputs and tool results longer than ${CONTEXT_MESSAGE_TRUNCATE_CHARS} characters. For full content (prompts, tool arguments/results) use \`moda traces spans <conversation_id> --include-bodies\` (or \`--include-raw\` for the verbatim events).`);
-    }
     return {
-      data: stripLoneSurrogates({
-        conversation_id: conversationId,
+      data: {
+        conversation_id: stripLoneSurrogates(conversationId),
         total_messages: total,
         from: start,
         returned: returned.length,
@@ -4301,7 +4362,7 @@ async function readFullTranscript(conversationId, opts = {}) {
         summary,
         ...ordering ? { ordering } : {},
         messages: returned
-      }),
+      },
       warnings: out,
       nextCommands
     };
@@ -4309,18 +4370,10 @@ async function readFullTranscript(conversationId, opts = {}) {
   const full = build(messages.length);
   if (!opts.fits || messages.length <= 1 || opts.fits(full))
     return full;
-  let low = 1;
-  let high = messages.length - 1;
-  while (low < high) {
-    const mid = Math.ceil((low + high) / 2);
-    if (opts.fits(build(mid)))
-      low = mid;
-    else
-      high = mid - 1;
-  }
-  return build(low);
+  const fits = opts.fits;
+  return build(largestFittingCount(messages.length - 1, (kept) => fits(build(kept))));
 }
-async function readContextItem(command, params, inputWarnings, budget) {
+async function readContextItem(params, inputWarnings, budget) {
   const fits = budget?.fits;
   if (params.all === true) {
     const full = await readFullTranscript(params.conversation_id, {
@@ -4429,17 +4482,10 @@ function trimContextWindow(conversationId, record, requestedAnchor, fits) {
     };
     return { data, warnings, nextCommands };
   };
-  let low = 1;
-  let high = order.length;
-  while (low < high) {
-    const mid = Math.ceil((low + high) / 2);
-    const page = build(mid);
-    if (fits(page.data, page.warnings, page.nextCommands))
-      low = mid;
-    else
-      high = mid - 1;
-  }
-  return build(low);
+  return build(largestFittingCount(order.length, (kept) => {
+    const page = build(kept);
+    return fits(page.data, page.warnings, page.nextCommands);
+  }));
 }
 var AUDIT_USAGE = "Usage: moda traces spans <conversation_id|trace_id> [--kind=auto|trace|conversation] [--include-raw] [--include-bodies] [--limit=N] [--cursor=<next_cursor>]";
 var AUDIT_BATCH_USAGE = `Usage: moda traces spans <id> <id> ... | --ids-from=-|<file> [--kind=auto|trace|conversation] [--include-raw] [--include-bodies] [--limit=N] (max ${BATCH_MAX_TARGETS} targets)`;
@@ -4465,16 +4511,10 @@ async function readAuditItem(command, params, budget) {
   const available = (Array.isArray(spans) ? spans.length : 0) - (params.span_offset ?? 0);
   if (available <= 0)
     return whole;
-  let low = 1;
-  let high = available;
-  while (low < high) {
-    const mid = Math.ceil((low + high) / 2);
-    const page2 = auditOutput(command, params, raw, mid);
-    if (budget.fits(page2.data, page2.options))
-      low = mid;
-    else
-      high = mid - 1;
-  }
+  const low = largestFittingCount(available, (keep) => {
+    const page2 = auditOutput(command, params, raw, keep);
+    return budget.fits(page2.data, page2.options);
+  });
   const page = auditOutput(command, params, raw, low);
   if (low === 1 && !budget.fits(page.data, page.options)) {
     page.options.warnings = [
@@ -4557,7 +4597,7 @@ async function readBatchTargets(targets, agentMode, read) {
   });
 }
 function fitsShare(share) {
-  return (data, options) => Buffer.byteLength(JSON.stringify({ data, ...options }) ?? "", "utf8") <= share;
+  return (data, options) => jsonByteLength({ data, ...options }) <= share;
 }
 function isBatchFatal(error) {
   const type = classifyCliError(error);
@@ -4672,7 +4712,7 @@ async function runContextBatch(command, positionals, flags, context) {
       conversation_id: target.id,
       ...target.msgIndex !== undefined ? { msg_index: target.msgIndex } : {}
     };
-    return withAnchorHint(target, () => readContextItem(command, params, [], budget));
+    return withAnchorHint(target, () => readContextItem(params, [], budget));
   });
   return writeBatchResult(command, context, targets, results, inputWarnings, rest);
 }
@@ -4879,16 +4919,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
             return agentEnvelopeFits(command, page2.data, page2.options);
           };
           if (agentMode && kept > 1 && !fitsAgent(kept)) {
-            let low = 1;
-            let high = kept - 1;
-            while (low < high) {
-              const mid = Math.ceil((low + high) / 2);
-              if (fitsAgent(mid))
-                low = mid;
-              else
-                high = mid - 1;
-            }
-            kept = low;
+            kept = largestFittingCount(kept - 1, fitsAgent);
           }
           const page = write(kept);
           recordSearchTelemetry(context, page.data);
@@ -4950,7 +4981,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
         return runContextBatch(command, positionals, flags, context);
       const { params, warnings: inputWarnings } = parseContextRequest(...singleContextTarget(positional, flags));
       const agentMode = context.output.mode === "agent" || context.output.mode === "agent-stream";
-      const read = () => readContextItem(command, params, inputWarnings, agentMode ? { fits: (data, options) => agentEnvelopeFits(command, data, options), maxBytes: agentMaxOutputBytes() } : undefined);
+      const read = () => readContextItem(params, inputWarnings, agentMode ? { fits: (data, options) => agentEnvelopeFits(command, data, options), maxBytes: agentMaxOutputBytes() } : undefined);
       const item = positional === undefined ? await read() : await withAnchorHint(parseBatchTarget(positional, true, CONTEXT_USAGE), read);
       context.output.writeData(item.data, item.options);
       break;
@@ -5239,10 +5270,10 @@ async function runCommand(command, positional, flags, positionals = positional ?
       });
       const link = asRecord(data)?.link;
       const summary = describeLinearLink(link);
-      const nextCommands = link ? [] : [`moda problems link ${positional}`];
+      const nextCommands = link ? [] : [`moda problems link ${shellArg(positional)}`];
       if (context.outputMode === "human" && !context.quiet) {
         safeWriteStderr(link ? `${summary}
-` : `${summary} File one with: moda problems link ${positional}
+` : `${summary} File one with: moda problems link ${shellArg(positional)}
 `);
       }
       context.output.writeData(data, { summary, nextCommands });
@@ -5663,7 +5694,6 @@ async function runCommand(command, positional, flags, positionals = positional ?
 function telemetryCommandName(definition) {
   return definition.telemetryCommand ?? definition.name;
 }
-var TELEMETRY_EXEMPT_COMMANDS = {};
 function telemetrySubcommandNames(definition) {
   return [
     ...definition.subcommands?.map((subcommand) => subcommand.name) ?? [],
@@ -5796,7 +5826,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result-and-error",
     handler: async (context) => {
-      const { runInit } = await import("./index-2kf3fnnb.js");
+      const { runInit } = await import("./index-d1z50dsq.js");
       if (context.outputMode === "agent-stream") {
         context.output.writeEvent({
           event: "started",
@@ -5846,7 +5876,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result-and-error",
     handler: async (context) => {
-      const { runProvision } = await import("./provision-gn8raqpt.js");
+      const { runProvision } = await import("./provision-y5bdbh4y.js");
       return runProvision(context, {
         resumeCommand: buildResumeCommand("provision", context.rawFlags)
       });
@@ -6923,6 +6953,46 @@ function printAgentCliError(command, error, mode = "agent") {
   });
   output.writeError(error);
 }
+function flagNamesInLabel(label) {
+  return [...label.matchAll(/--([A-Za-z0-9][A-Za-z0-9-]*)/g)].map((match) => match[1]);
+}
+function specFlagNamesDeep(spec) {
+  if (!spec)
+    return [];
+  return [...specFlagNames(spec), ...Object.values(spec.subcommands ?? {}).flatMap((sub) => specFlagNames(sub))];
+}
+function telemetryAcceptedFlags(definition, route) {
+  const names = new Set([...GLOBAL_FLAG_NAMES, ...GLOBAL_BOOLEAN_FLAGS]);
+  const add = (list) => {
+    for (const name of list)
+      names.add(name);
+  };
+  if (definition) {
+    add(specFlagNamesDeep(flagSpecFor(definition.name)));
+    for (const flag of definition.documentedFlags ?? [])
+      add(flagNamesInLabel(flag.name));
+    for (const sub of definition.subcommands ?? [])
+      for (const flag of sub.flags ?? [])
+        add(flagNamesInLabel(flag.name));
+  }
+  if (route) {
+    add(route.allowedFlags ?? []);
+    add(Object.keys(route.flagAliases ?? {}));
+    add(specFlagNamesDeep(leafFlagSpec(route.leaf)));
+  }
+  return names;
+}
+var knownFlagNames;
+function telemetryKnownFlags() {
+  if (!knownFlagNames) {
+    knownFlagNames = new Set(RAW_BOOLEAN_FLAGS);
+    for (const definition of commandRegistry.all()) {
+      for (const name of telemetryAcceptedFlags(definition, undefined))
+        knownFlagNames.add(name);
+    }
+  }
+  return knownFlagNames;
+}
 function existingFlagProfile(flags) {
   const name = flags.profile;
   if (!name || name === "true")
@@ -7095,6 +7165,8 @@ async function dispatchParsedCommandInner(typedParsed, startedAt) {
     if (!handlerTelemetry)
       return;
     const telemetryProfile = existingFlagProfile(typedFlags);
+    if (typedFlags.profile !== undefined && telemetryProfile === undefined)
+      return;
     const adoption = buildSearchAdoptionTelemetry({
       command: handlerTelemetry,
       positional: parsed.positional,
@@ -7122,12 +7194,14 @@ async function dispatchParsedCommandInner(typedParsed, startedAt) {
       durationMs: Date.now() - startedAt,
       apiRequestCount: input.apiRequestCount,
       adoption,
-      ...identity2?.legacyAlias ? { legacyAlias: identity2.legacyAlias } : {}
+      ...identity2?.legacyAlias ? { legacyAlias: identity2.legacyAlias } : {},
+      acceptedFlags: telemetryAcceptedFlags(definition2, route),
+      knownFlags: telemetryKnownFlags()
     });
   };
   const failEarly = (error, commandDefinition, identity2) => {
     const mode = outputModeFor();
-    const telemetryOptOut = telemetryDisabled || flags["no-telemetry"] !== undefined && flags["no-telemetry"] !== "false";
+    const telemetryOptOut = telemetryDisabled || optOutFlagSet(flags, "no-telemetry", false);
     const reports = commandDefinition ? commandDefinition.telemetry === "result-and-error" : identity2 !== undefined;
     if (reports && !telemetryOptOut) {
       reportUsage({
@@ -7179,7 +7253,7 @@ async function dispatchParsedCommandInner(typedParsed, startedAt) {
     const known = Object.keys(loadProfileConfig({ env: process.env }).profiles);
     if (!known.includes(requestedProfile)) {
       const source = commandFlags.profile ? `--profile=${requestedProfile}` : `MODA_PROFILE=${requestedProfile}`;
-      return failEarly(new CliInputError(`Moda profile '${requestedProfile}' does not exist (from ${source}), so nothing was run.`, `Known profiles: ${known.join(", ")}. Create it with 'moda profiles create ${requestedProfile}' or fix the name.`, "unknown_profile"), definition, identity);
+      return failEarly(new CliInputError(`Moda profile '${requestedProfile}' does not exist (from ${source}), so nothing was run.`, `Known profiles: ${known.join(", ")}. Create it with 'moda profiles create ${shellArg(requestedProfile)}' or fix the name.`, "unknown_profile"), definition, identity);
     }
     if (commandFlags.profile)
       process.env.MODA_PROFILE = commandFlags.profile;
@@ -7188,7 +7262,7 @@ async function dispatchParsedCommandInner(typedParsed, startedAt) {
     commandFlags.agent = "true";
   }
   if (!updateCheckDisabled) {
-    startUpdateCheck();
+    startUpdateCheck({}, Date.now(), { detached: outputModeFor() !== "human" });
     setAgentUpdateNotice(() => {
       const latest = getAvailableUpdate();
       return latest ? `moda-cli ${VERSION} is out of date (latest ${latest}); commands and flags may differ from the docs. Update: npm install -g @moda-ai/cli@latest` : undefined;
@@ -7331,7 +7405,6 @@ export {
   trimContextWindow,
   telemetrySubcommandNames,
   telemetryCommandName,
-  stripLoneSurrogates,
   searchOutcomeWarnings,
   searchDegradeWarning,
   searchCoverageWarnings,
@@ -7342,6 +7415,7 @@ export {
   parseCommandFlags,
   parseArgs,
   normalizeBooleanFlags,
+  largestFittingCount,
   initFlagsForContext,
   globalFlagHelpLines,
   flagsToArgs,
@@ -7358,10 +7432,8 @@ export {
   canonicalFlagKey,
   buildResumeCommand,
   auditCapStatus,
-  TELEMETRY_EXEMPT_COMMANDS,
   TAIL_LIMITS,
   RAW_BOOLEAN_FLAGS,
-  LEGACY_WINDOW_MAX_MESSAGES,
   FULL_TRANSCRIPT_DEFAULT_MAX_MESSAGES,
   CliInputError,
   CONTEXT_MAX_WINDOW,