@moda-ai/cli 1.55.4 → 1.55.6

package/README.md

@@ -127,6 +127,13 @@ Legacy aliases (same behavior, kept for existing scripts): `moda conversations`
 `moda cluster-conversations` = `moda cluster-traces`, `--conversations` = `--traces`
 (`moda problem`, `moda prompts ab`), `--signal=conversations` = `--signal=traces`.
 
+Flag aliases: `moda context --message-index=N` = `--msg-index=N`, and
+`moda users --limit=N` = `--page-size=N`. Each command rejects a flag it does
+not take, and time windows differ by command: `--days-back=N` (a whole number,
+1-90) on the overview, Problem and detection commands, `--time-range` on
+`traces`, `search` and `clusters`. Boolean flags accept `true`/`false`, `1`/`0`,
+`yes`/`no` and `on`/`off`.
+
 Prompt management:
 
 ```bash

package/dist/{cli-9kyw5qx0.js → cli-fhfdnvh4.js}

@@ -1,7 +1,7 @@
 import {
   authFetch,
   getCachedLoginContext
-} from "./cli-t5v7mhvj.js";
+} from "./cli-tw8jj190.js";
 import {
   CliAccessError,
   CliInputError,
@@ -9,13 +9,14 @@ import {
   embeddedTenantIdFromApiKey,
   getModaDir,
   loadCliConfig,
+  recordApiRequest,
   resolveApiKeyFromActiveProfile,
   resolveIngestUrl,
   resolveModaBaseUrl,
   resolveTenantIdFromActiveProfile,
   saveCliConfig,
   writeSecretJsonFile
-} from "./cli-zp7a97sp.js";
+} from "./cli-mx9r1689.js";
 
 // src/init/tenant.ts
 import { randomUUID } from "node:crypto";
@@ -114,6 +115,7 @@ function bootstrapLabel(custom) {
 var embeddedTenantId = embeddedTenantIdFromApiKey;
 async function isStoredKeyLive(key, options = {}) {
   try {
+    recordApiRequest();
     const response = await fetch(`${resolveModaBaseUrl(options)}/api/v1/data/overview`, {
       method: "GET",
       headers: { "x-api-key": key },

package/dist/{cli-73v8mqh1.js → cli-grn40kvh.js}

@@ -21,7 +21,7 @@ import {
   safePromptEvidencePath,
   scanHarness,
   setPlatformTenantOverride
-} from "./cli-9v0c1xe1.js";
+} from "./cli-gxmq4wmn.js";
 import {
   SKILL_SOURCE_HARNESS,
   SKILL_SOURCE_INTEGRATION_BUNDLED,
@@ -34,7 +34,7 @@ import {
 import {
   isAuthSessionValid,
   loadAuthSession
-} from "./cli-t5v7mhvj.js";
+} from "./cli-tw8jj190.js";
 import {
   CliInputError,
   EXIT_ERROR,
@@ -45,6 +45,7 @@ import {
   getModaPaths,
   isLoopbackBaseUrl,
   loadProfileConfig,
+  recordApiRequest,
   resolveApiKey,
   resolveApiTenantId,
   resolveIngestUrl,
@@ -53,7 +54,7 @@ import {
   resolveTenantId,
   secretFilePathFromRef,
   validateConfig
-} from "./cli-zp7a97sp.js";
+} from "./cli-mx9r1689.js";
 import {
   __commonJS,
   __require,
@@ -6659,7 +6660,7 @@ async function runPromptsCommand(input, legacyFlags, legacyProfileOptions) {
       await runPromptRegistryRead(subcommand, positionals, flags, profileOptions, context);
       break;
     default:
-      throw new Error(`Unknown prompts command '${subcommand}'. Use init, status, diff, migrate, sync, promote, ab, propose, list, show, proposals, usage, replay-runs, or decide.`);
+      throw new CliInputError(`Unknown prompts command '${subcommand}'. Use init, status, diff, migrate, sync, promote, ab, propose, list, show, proposals, usage, replay-runs, or decide.`, undefined, "unknown_subcommand");
   }
   return 0;
 }
@@ -6668,7 +6669,7 @@ async function initPrompts(options = {}) {
   const manifestPath = resolve4(cwd, MANIFEST_PATH);
   const lockPath = resolve4(cwd, LOCK_PATH);
   if (existsSync2(MODA_DIR) && lstatSync(MODA_DIR).isSymbolicLink())
-    throw new Error(".moda must not be a symlink.");
+    throw new CliInputError(".moda must not be a symlink.");
   mkdirSync(MODA_DIR, { recursive: true });
   let created = false;
   if (!existsSync2(MANIFEST_PATH)) {
@@ -6751,7 +6752,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const analyzedDefinitions = new Map;
   if (flags["no-analyze"] !== "true") {
     options.onProgress?.("Analyzing prompt sources before sync.");
-    const { analyzeHarnessPrompts } = await import("./harness-x6kaz47j.js");
+    const { analyzeHarnessPrompts } = await import("./harness-7eabmv0v.js");
     const result = await analyzeHarnessPrompts({
       rootDir: process.cwd(),
       existing: established.flatMap((prompt) => prompt.sourceDefinition ? [prompt.sourceDefinition.source] : []),
@@ -6782,7 +6783,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const attribution = checkPromptAttribution(process.cwd(), prompts.map((prompt) => prompt.key));
   const brokenAttribution = attribution.references.filter((reference) => reference.status === "missing");
   if (brokenAttribution.length) {
-    throw new Error(`Prompt attribution keys are absent from this sync: ${brokenAttribution.map((reference) => `'${reference.key}' at ${reference.path}:${reference.line}`).join(", ")}. Map the referenced key to its verified source in .moda/prompts.yml, or update the runtime lookup to the intended mapped key. No prompt versions were uploaded.`);
+    throw new CliInputError(`Prompt attribution keys are absent from this sync: ${brokenAttribution.map((reference) => `'${reference.key}' at ${reference.path}:${reference.line}`).join(", ")}. Map the referenced key to its verified source in .moda/prompts.yml, or update the runtime lookup to the intended mapped key. No prompt versions were uploaded.`);
   }
   for (const prompt of prompts) {
     const analyzed = analyzedDefinitions.get(prompt.key);
@@ -6793,7 +6794,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const previousLockHash = hashFile(LOCK_PATH);
   const missing = Object.keys(previous?.prompts ?? {}).filter((key) => !prompts.some((prompt) => prompt.key === key));
   if (missing.length && flags["allow-untrack"] !== "true") {
-    throw new Error(`Previously synced prompts are absent: ${missing.join(", ")}. Restore their sources, or use --allow-untrack to explicitly remove local tracking.`);
+    throw new CliInputError(`Previously synced prompts are absent: ${missing.join(", ")}. Restore their sources, or use --allow-untrack to explicitly remove local tracking.`);
   }
   const sourceCommit = getGitCommit();
   const manifestHash = manifestUpdate === undefined ? originalManifestHash : sha256(manifestUpdate);
@@ -6888,11 +6889,11 @@ async function promotePrompt(positionals, flags, profileOptions, context) {
   const label = flags.label;
   const versionId = flags.version || flags["version-id"];
   if (!key)
-    throw new Error("Usage: moda prompts promote <prompt_key> --label=prod --version=<version_id>");
+    throw new CliInputError("Usage: moda prompts promote <prompt_key> --label=prod --version=<version_id>", undefined, "missing_positional");
   if (!label)
-    throw new Error("Missing required flag: --label=dev|staging|prod");
+    throw new CliInputError("Missing required flag: --label=dev|staging|prod");
   if (!versionId)
-    throw new Error("Missing required flag: --version=<version_id>");
+    throw new CliInputError("Missing required flag: --version=<version_id>");
   const response = await callControlAPI(`/prompts/${encodeURIComponent(key)}/labels`, {
     method: "POST",
     body: JSON.stringify({ label, versionId })
@@ -6951,9 +6952,9 @@ function discoverManifestPrompts(manifest, extraSources = []) {
   for (const pattern of manifest.promptPaths) {
     const positive = pattern.startsWith("!") ? pattern.slice(1) : pattern;
     if (isAbsolute3(positive) || positive.split(/[\\/]/).includes(".."))
-      throw new Error(`Prompt pattern must stay inside the repository: ${pattern}`);
+      throw new CliInputError(`Prompt pattern must stay inside the repository: ${pattern}`);
     if (!pattern.startsWith("!") && !import_fast_glob.default.isDynamicPattern(pattern) && !existsSync2(resolve4(root, pattern))) {
-      throw new Error(`Configured prompt file is missing: ${pattern}`);
+      throw new CliInputError(`Configured prompt file is missing: ${pattern}`);
     }
   }
   const paths = import_fast_glob.default.sync(manifest.promptPaths, {
@@ -6979,7 +6980,7 @@ function discoverManifestPrompts(manifest, extraSources = []) {
   const seen = new Set;
   for (const prompt of prompts) {
     if (seen.has(prompt.key))
-      throw new Error(`Duplicate prompt key '${prompt.key}'. Give each source a unique stable key.`);
+      throw new CliInputError(`Duplicate prompt key '${prompt.key}'. Give each source a unique stable key.`);
     seen.add(prompt.key);
   }
   return prompts.sort((a, b) => a.key.localeCompare(b.key));
@@ -7081,7 +7082,7 @@ async function migratePromptManifest(options = {}) {
   let addedSources = [];
   let pendingSources = [];
   if (options.discover) {
-    const { analyzeHarnessPrompts } = await import("./harness-x6kaz47j.js");
+    const { analyzeHarnessPrompts } = await import("./harness-7eabmv0v.js");
     const result = await analyzeHarnessPrompts({
       rootDir: root,
       existing: manifest.sources,
@@ -7167,14 +7168,14 @@ function assertContainedSource(root, path) {
   const abs = resolve4(root, path);
   const rel = relative(realpathSync(root), realpathSync(abs));
   if (rel === ".." || rel.startsWith(`..${process.platform === "win32" ? "\\" : "/"}`) || isAbsolute3(rel))
-    throw new Error(`Prompt source escapes repository: ${path}`);
+    throw new CliInputError(`Prompt source escapes repository: ${path}`);
   let cursor = abs;
   while (cursor !== resolve4(root)) {
     if (lstatSync(cursor).isSymbolicLink())
-      throw new Error(`Prompt source uses a symlink: ${path}`);
+      throw new CliInputError(`Prompt source uses a symlink: ${path}`);
     const next = dirname2(cursor);
     if (next === cursor)
-      throw new Error(`Prompt source escapes repository: ${path}`);
+      throw new CliInputError(`Prompt source escapes repository: ${path}`);
     cursor = next;
   }
 }
@@ -7184,8 +7185,13 @@ function parsePromptFile(absPath) {
   if (absPath.endsWith(".json")) {
     const document = $parseDocument(raw, { uniqueKeys: true });
     if (document.errors.length)
-      throw new Error(`${sourcePath}: ${document.errors[0].message}`);
-    const parsed = JSON.parse(raw);
+      throw new CliInputError(`${sourcePath}: ${document.errors[0].message}`);
+    let parsed;
+    try {
+      parsed = JSON.parse(raw);
+    } catch (err) {
+      throw new CliInputError(`${sourcePath}: ${err instanceof Error ? err.message : String(err)}`);
+    }
     const key2 = parsed.key || keyFromPath(sourcePath);
     const hasContent = typeof parsed.content === "string" && parsed.content.trim().length > 0;
     const hasSystemPrompt = typeof parsed.systemPrompt === "string" && parsed.systemPrompt.trim().length > 0;
@@ -7197,7 +7203,7 @@ function parsePromptFile(absPath) {
       return typeof content2 === "string" ? content2.trim().length > 0 : Array.isArray(content2) && content2.some((part) => part && typeof part === "object" && part.type === "text" && typeof part.text === "string" && part.text.trim().length > 0);
     });
     if (!hasContent && !hasSystemPrompt && !hasMessages && !hasTemplate) {
-      throw new Error(`${sourcePath}: prompt JSON requires non-empty content, systemPrompt, messages, or a text template.`);
+      throw new CliInputError(`${sourcePath}: prompt JSON requires non-empty content, systemPrompt, messages, or a text template.`);
     }
     const content = hasContent ? parsed.content : hasSystemPrompt ? parsed.systemPrompt : hasMessages ? JSON.stringify(parsed.messages, null, 2) : parsed.template;
     return normalizePrompt({ ...parsed, key: key2, name: parsed.name || key2, sourcePath, content });
@@ -7239,23 +7245,23 @@ function readManifest(root = process.cwd()) {
   assertContainedSource(root, MANIFEST_PATH);
   const doc = $parseDocument(readFileSync(resolve4(root, MANIFEST_PATH), "utf8"), { uniqueKeys: true });
   if (doc.errors.length)
-    throw new Error(`Invalid ${MANIFEST_PATH}: ${doc.errors[0].message}`);
+    throw new CliInputError(`Invalid ${MANIFEST_PATH}: ${doc.errors[0].message}`);
   const parsed = doc.toJS({ maxAliasCount: 20 });
   if (!parsed || typeof parsed !== "object" || Array.isArray(parsed) || ![1, 2].includes(parsed.version))
-    throw new Error(`${MANIFEST_PATH} requires version: 1 or 2.`);
+    throw new CliInputError(`${MANIFEST_PATH} requires version: 1 or 2.`);
   if (Object.keys(parsed).some((key) => !["version", "prompt_paths", "sources"].includes(key)))
-    throw new Error("Unknown prompt manifest field. Use version, prompt_paths, and sources.");
+    throw new CliInputError("Unknown prompt manifest field. Use version, prompt_paths, and sources.");
   if (parsed.prompt_paths !== undefined && (!Array.isArray(parsed.prompt_paths) || parsed.prompt_paths.some((p) => typeof p !== "string" || !p.trim())))
-    throw new Error("prompt_paths must be an array of nonempty patterns.");
+    throw new CliInputError("prompt_paths must be an array of nonempty patterns.");
   if (parsed.sources !== undefined && !Array.isArray(parsed.sources))
-    throw new Error("sources must be an array of prompt source descriptors.");
+    throw new CliInputError("sources must be an array of prompt source descriptors.");
   const sources = parsed.sources ?? [];
   const seen = new Set;
   for (const source of sources) {
     if (!source || typeof source.key !== "string" || !source.key.trim() || typeof source.path !== "string" || !source.path.trim())
-      throw new Error("Every prompt source requires a stable key and path.");
+      throw new CliInputError("Every prompt source requires a stable key and path.");
     if (seen.has(source.key))
-      throw new Error(`Duplicate prompt source key '${source.key}'.`);
+      throw new CliInputError(`Duplicate prompt source key '${source.key}'.`);
     seen.add(source.key);
   }
   return { version: parsed.version, promptPaths: parsed.prompt_paths ?? (parsed.version === 1 ? DEFAULT_PROMPT_PATHS : []), sources };
@@ -7354,7 +7360,7 @@ function mergePromptSources(existingSources, sources) {
   for (const source of sources) {
     const existing = merged.get(source.key);
     if (existing && stableJson(existing) !== stableJson(source)) {
-      throw new Error(`Harness source '${source.key}' conflicts with an existing mapping. Edit ${MANIFEST_PATH} explicitly to change its source; no mappings were imported.`);
+      throw new CliInputError(`Harness source '${source.key}' conflicts with an existing mapping. Edit ${MANIFEST_PATH} explicitly to change its source; no mappings were imported.`);
     }
     merged.set(source.key, source);
   }
@@ -7364,7 +7370,7 @@ function atomicWrite(path, content) {
   mkdirSync(dirname2(path), { recursive: true });
   assertContainedSource(process.cwd(), dirname2(path));
   if (existsSync2(path) && lstatSync(path).isSymbolicLink())
-    throw new Error(`Refusing to overwrite symlink: ${path}`);
+    throw new CliInputError(`Refusing to overwrite symlink: ${path}`);
   const temp = `${path}.${process.pid}.tmp`;
   try {
     writeFileSync2(temp, content, { flag: "wx" });
@@ -7409,7 +7415,7 @@ function writeLock(prompts, synced) {
 }
 function assertReplayablePrompt(prompt) {
   if (prompt.sourceDefinition && ["builder", "template"].includes(prompt.sourceDefinition.kind)) {
-    throw new Error(`Prompt '${prompt.key}' is a ${prompt.sourceDefinition.kind}. Run its renderer with controlled inputs; source code cannot be replayed as final instructions.`);
+    throw new CliInputError(`Prompt '${prompt.key}' is a ${prompt.sourceDefinition.kind}. Run its renderer with controlled inputs; source code cannot be replayed as final instructions.`);
   }
 }
 function parseFrontmatter(raw) {
@@ -7636,6 +7642,7 @@ async function fetchSkills(status) {
   const timeout = setTimeout(() => controller.abort(), SKILLS_REQUEST_TIMEOUT_MS);
   let response;
   try {
+    recordApiRequest();
     response = await fetch(url, {
       headers: { Authorization: `Bearer ${apiKey}` },
       signal: controller.signal
@@ -7673,6 +7680,7 @@ async function skillRunsRequest(url) {
   const timeout = setTimeout(() => controller.abort(), SKILLS_REQUEST_TIMEOUT_MS);
   let response;
   try {
+    recordApiRequest();
     response = await fetch(url, {
       headers: { Authorization: `Bearer ${apiKey}` },
       signal: controller.signal
@@ -8281,6 +8289,7 @@ async function generateSkills(flags) {
   };
   if (tenantId)
     headers["X-Moda-Tenant-Id"] = tenantId;
+  recordApiRequest();
   const response = await fetch(endpoint, {
     method: "POST",
     headers,
@@ -9044,6 +9053,7 @@ async function cloudDataFlowChecks(ingestUrl, apiKey) {
 async function ingestReachabilityCheck(ingestUrl, apiKey) {
   const url = `${ingestUrl.replace(/\/+$/, "")}/`;
   try {
+    recordApiRequest();
     const response = await fetch(url, {
       method: "GET",
       headers: { Authorization: `Bearer ${apiKey}` },

package/dist/{cli-9v0c1xe1.js → cli-gxmq4wmn.js}

@@ -1,4 +1,5 @@
 import {
+  CliAccessError,
   CliInputError,
   CliInputRequiredError,
   DEFAULT_MAX_INVENTORY_FILES,
@@ -16,6 +17,7 @@ import {
   isSkippedPathPrefix,
   isTextFile,
   packSnapshot,
+  recordApiRequest,
   redactDeep,
   redactString,
   resolveApiKey,
@@ -25,7 +27,7 @@ import {
   resolveTenantId,
   shouldInventoryFile,
   stringOption
-} from "./cli-zp7a97sp.js";
+} from "./cli-mx9r1689.js";
 import {
   __commonJS,
   __require,
@@ -177929,7 +177931,6 @@ var REQUEST_TIMEOUT_MS = 30000;
 var MAX_RETRIES = 3;
 var INITIAL_BACKOFF_MS = 500;
 var NETWORK_RETRY_DELAY_MS = 1000;
-var apiRequestCount = 0;
 
 class ApiError extends Error {
   statusCode;
@@ -178004,7 +178005,6 @@ function isRetryable(status) {
   return status === 429 || status >= 500;
 }
 async function callDataAPI(endpoint, init = { method: "GET" }, requestOptions = {}) {
-  apiRequestCount++;
   const url = `${resolveModaBaseUrl()}/api/v1/data${endpoint}`;
   return callModaAPI(url, init, {}, requestOptions);
 }
@@ -178028,6 +178028,7 @@ async function callModaAPI(url, options, profileOptions = {}, requestOptions = {
     const controller = new AbortController;
     const timeout = setTimeout(() => controller.abort(), timeoutMs);
     try {
+      recordApiRequest();
       const response = await fetch(url, {
         ...options,
         headers: {
@@ -178073,12 +178074,6 @@ async function callModaAPI(url, options, profileOptions = {}, requestOptions = {
   }
   throw new NetworkError(`Request retries exhausted: ${url}`);
 }
-function getApiRequestCount() {
-  return apiRequestCount;
-}
-function resetApiRequestCount() {
-  apiRequestCount = 0;
-}
 
 // src/parity-commands.ts
 var UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
@@ -178200,6 +178195,7 @@ async function runUsersCommand(context) {
     "window",
     "page",
     "page-size",
+    "limit",
     "search",
     "cohort",
     "sort",
@@ -178214,12 +178210,15 @@ async function runUsersCommand(context) {
   if (context.positionals.length > 0) {
     throw new CliInputError(`'moda users' takes no arguments. For one user use 'moda user <user_id>'.`);
   }
+  if (flags.limit !== undefined && flags["page-size"] !== undefined && flags.limit !== flags["page-size"]) {
+    throw new CliInputError(`Got --limit=${flags.limit} and --page-size=${flags["page-size"]}; they are the same flag for 'moda users', so nothing was sent.`, "Pass only one of --limit / --page-size.", "flag_conflict");
+  }
   requireKey(context);
   const tenantId = requireTenant(context);
   const query = new URLSearchParams(compact({
     window: oneOf("window", flags.window, WINDOWS),
     page: flags.page,
-    pageSize: flags["page-size"],
+    pageSize: flags["page-size"] ?? flags.limit,
     search: flags.search,
     cohort: oneOf("cohort", flags.cohort, USER_COHORTS),
     sortBy: oneOf("sort", flags.sort, USER_SORTS),
@@ -178495,19 +178494,36 @@ async function runSignalsManagementCommand(sub, context) {
       if (!body.detector)
         throw new CliInputError('--file must contain {"detector": {...}} (optionally scope).');
       start();
-      await send(context, "control", "POST", `${base()}/detector-preview`, {
-        ...body,
-        ...compact({
-          conversationIds: csv(flags["conversation-ids"]),
-          maxExamples: flags["max-examples"] !== undefined ? Number(flags["max-examples"]) : undefined
-        })
-      });
+      try {
+        await send(context, "control", "POST", `${base()}/detector-preview`, {
+          ...body,
+          ...compact({
+            conversationIds: csv(flags["conversation-ids"]),
+            maxExamples: flags["max-examples"] !== undefined ? Number(flags["max-examples"]) : undefined
+          })
+        });
+      } catch (error) {
+        if (isTenantFeatureNotFound(error)) {
+          throw new CliAccessError("The signal builder is not enabled for this tenant, so `moda signals preview` is unavailable (the API answered 404).", { guidance: "Ask Moda to enable the signal-builder feature for this tenant. Other `moda signals` subcommands still work." });
+        }
+        throw error;
+      }
       return { exitCode: 0 };
     }
     default:
       throw unknownSignalsSubcommandError(sub, args);
   }
 }
+function isTenantFeatureNotFound(error) {
+  if (!(error instanceof ApiError) || error.statusCode !== 404)
+    return false;
+  try {
+    const body = JSON.parse(error.responseBody);
+    return body.message === "Not Found" && body.error === undefined;
+  } catch {
+    return false;
+  }
+}
 var SIGNALS_MANAGEMENT_SUBCOMMANDS = new Set([
   "draft",
   "create",
@@ -180841,6 +180857,7 @@ async function remoteAnalyzeFetch(url, apiKey, init, timeoutMs) {
   const timeout = setTimeout(() => controller.abort(), timeoutMs);
   let response;
   try {
+    recordApiRequest();
     response = await fetch(url, {
       ...init,
       headers: { Authorization: `Bearer ${apiKey}`, ...init.headers ?? {} },
@@ -184897,7 +184914,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-5syjp1sz.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-s10y3kpz.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);
@@ -188942,4 +188959,4 @@ function hashText(text) {
   return createHash4("sha256").update(text).digest("hex");
 }
 
-export { isPlatformApiKey, setPlatformTenantOverride, apiKeyHeaders, ApiError, callDataAPI, callControlAPI, getApiRequestCount, resetApiRequestCount, $isSeq, $parseDocument, $stringify, require_typescript, inspectCodeSelectors, inspectPythonSelectors, resolvePromptSource, backfillPromptSource, HARNESS_REPORT_PATH, HARNESS_REPORT_APPROVAL_PATH, HARNESS_ANALYZE_CONCERNS, validateHarnessReport, readHarnessReport, normalizeHarnessReport, hashHarnessReport, hashStableJson, assertFlags, assertPositionals, runUsersCommand, runUserCommand, runProblemReopenCommand, runSignalsManagementCommand, SIGNALS_MANAGEMENT_SUBCOMMANDS, unknownSignalsSubcommandError, shouldColorTerminalOutput, terminalStyles, stripAnsi2 as stripAnsi, renderMarkdownForTerminal, startRemoteAnalyze, pollRemoteAnalyzeUntilDone, isRecoverableRemoteRun, checkPromptMapping, safePromptEvidencePath, discoverHarnessPromptSources, renderDoctorHuman, renderStatusHuman, renderInitBanner, renderInitStep, renderInitNote, renderInitSetupPlan, renderInitComplete, runHarnessCommand, writeHarnessAnalyzeResult, emitWrittenArtifacts, analyzeHarnessPrompts, repairExternalAnalystReport, deriveRelationshipsFromGraph, mergeDeterministicArtifacts, describeCodingAgentEvent, analystEventProgress, isRetryableExternalAnalystFailure, sleep, summarizeInvalidAnalystReport, isDeterministicLocalAnalyst, resolveHarnessAnalyzeConcern, detectAvailableCodingAgents, codingAgentDisplayName, runCodingAgent, resolveAnalystModel, renderExternalHarnessAnalystPrompt, CONCERN_CANDIDATE_KINDS, SEED_CANDIDATE_KIND_LABELS, renderAnalystCandidateLines, renderAnalystSeedLines, truncateText, scanHarness, summarizeHarness, buildSourceSnapshot, writeHumanProgress, readHarnessSyncState, describeSyncIdentity, describeSyncTenantLabel, findFresherHarnessReports, writeHarnessArtifacts, assertHarnessGraphSyncQuality, graphForSync, inventoryFiles, numericEnv, numericEnvAllowZero, computeDeterministicFloor, stableId2 as stableId, titleFromId2 as titleFromId, promptNameFromPath };
+export { isPlatformApiKey, setPlatformTenantOverride, apiKeyHeaders, ApiError, callDataAPI, callControlAPI, $isSeq, $parseDocument, $stringify, require_typescript, inspectCodeSelectors, inspectPythonSelectors, resolvePromptSource, backfillPromptSource, HARNESS_REPORT_PATH, HARNESS_REPORT_APPROVAL_PATH, HARNESS_ANALYZE_CONCERNS, validateHarnessReport, readHarnessReport, normalizeHarnessReport, hashHarnessReport, hashStableJson, assertFlags, assertPositionals, runUsersCommand, runUserCommand, runProblemReopenCommand, runSignalsManagementCommand, SIGNALS_MANAGEMENT_SUBCOMMANDS, unknownSignalsSubcommandError, shouldColorTerminalOutput, terminalStyles, stripAnsi2 as stripAnsi, renderMarkdownForTerminal, startRemoteAnalyze, pollRemoteAnalyzeUntilDone, isRecoverableRemoteRun, checkPromptMapping, safePromptEvidencePath, discoverHarnessPromptSources, renderDoctorHuman, renderStatusHuman, renderInitBanner, renderInitStep, renderInitNote, renderInitSetupPlan, renderInitComplete, runHarnessCommand, writeHarnessAnalyzeResult, emitWrittenArtifacts, analyzeHarnessPrompts, repairExternalAnalystReport, deriveRelationshipsFromGraph, mergeDeterministicArtifacts, describeCodingAgentEvent, analystEventProgress, isRetryableExternalAnalystFailure, sleep, summarizeInvalidAnalystReport, isDeterministicLocalAnalyst, resolveHarnessAnalyzeConcern, detectAvailableCodingAgents, codingAgentDisplayName, runCodingAgent, resolveAnalystModel, renderExternalHarnessAnalystPrompt, CONCERN_CANDIDATE_KINDS, SEED_CANDIDATE_KIND_LABELS, renderAnalystCandidateLines, renderAnalystSeedLines, truncateText, scanHarness, summarizeHarness, buildSourceSnapshot, writeHumanProgress, readHarnessSyncState, describeSyncIdentity, describeSyncTenantLabel, findFresherHarnessReports, writeHarnessArtifacts, assertHarnessGraphSyncQuality, graphForSync, inventoryFiles, numericEnv, numericEnvAllowZero, computeDeterministicFloor, stableId2 as stableId, titleFromId2 as titleFromId, promptNameFromPath };

package/dist/{cli-zp7a97sp.js → cli-mx9r1689.js}

@@ -647,6 +647,18 @@ function validateConfig() {
   }
 }
 
+// src/api-request-count.ts
+var apiRequestCount = 0;
+function recordApiRequest() {
+  apiRequestCount++;
+}
+function getApiRequestCount() {
+  return apiRequestCount;
+}
+function resetApiRequestCount() {
+  apiRequestCount = 0;
+}
+
 // ../../packages/harness-snapshot/src/policy.ts
 var MAX_SCANNED_FILE_BYTES = 512 * 1024;
 var DEFAULT_MAX_INVENTORY_FILES = 12000;
@@ -1535,7 +1547,7 @@ function formatValidationMessage(error) {
     const message = typeof record.message === "string" ? record.message : "is invalid";
     return `${path}: ${message}`;
   });
-  return `Validation error — ${parts.join("; ")}`;
+  return `Validation error — ${[...new Set(parts)].join("; ")}`;
 }
 function errorToAgentError(error) {
   if (error instanceof CliInputRequiredError) {
@@ -1863,6 +1875,22 @@ function extractSuggestedCommands(text) {
 function flagEnabled(flags, key) {
   return flags[key] === "true";
 }
+var BOOLEAN_TRUE_WORDS = new Set(["true", "yes", "1", "on"]);
+var BOOLEAN_FALSE_WORDS = new Set(["false", "no", "0", "off"]);
+function parseBooleanFlagValue(value) {
+  if (typeof value === "boolean")
+    return value;
+  if (typeof value === "number")
+    return value === 1 ? true : value === 0 ? false : undefined;
+  if (typeof value !== "string")
+    return;
+  const text = value.trim().toLowerCase();
+  if (BOOLEAN_TRUE_WORDS.has(text))
+    return true;
+  if (BOOLEAN_FALSE_WORDS.has(text))
+    return false;
+  return;
+}
 function stringOption(value) {
   if (value === undefined || value === null)
     return;
@@ -1907,4 +1935,4 @@ function createCommandContext(input, options = {}) {
   };
 }
 
-export { PROD_BASE_URL, DEFAULT_INGEST_URL, getModaPaths, getModaDir, isLoopbackBaseUrl, assertValidProfileName, describeBaseUrlSource, loadProfileConfig, saveProfileConfig, getActiveProfile, setActiveProfile, upsertProfile, clearStoredApiKeyCredentials, secretFilePathFromRef, resolveSecretReference, resolveApiKeyFromActiveProfile, resolveTenantIdFromActiveProfile, ensureSecretFilePermissions, writeSecretJsonFile, CliInputError, CliAccessError, CliInputRequiredError, CliAuthError, CliCancellationError, isNetworkLikeError, isApiLikeError, VERSION, MODA_BASE_URL, loadCliConfig, saveCliConfig, resolveApiKey, embeddedTenantIdFromApiKey, resolveIngestUrl2 as resolveIngestUrl, resolveTenantId, resolveApiTenantId, resolveModaBaseUrl, validateConfig, MAX_SCANNED_FILE_BYTES, DEFAULT_MAX_INVENTORY_FILES, DEFAULT_MAX_INVENTORY_TEXT_BYTES, MAX_RECORDED_SKIPS, SKIPPED_DIRS, isSkippedDir, isSkippedPathPrefix, isEvalLikePath, shouldInventoryFile, isTextFile, isSecretishPath, SECRET_KEYS, redactDeep, redactString, packSnapshot, EXIT_OK, EXIT_ERROR, EXIT_DEGRADED, EXIT_AUTH_REQUIRED, EXIT_INPUT_REQUIRED, EXIT_CANCELLED, AGENT_ERROR_CODES, wasOutputCancelled, safeWriteStdout, safeWriteStderr, explicitOutputMode, resolveOutputMode, createCliOutput, agentEnvelopeFits, agentMaxOutputBytes, stringOption, createCommandContext };
+export { PROD_BASE_URL, DEFAULT_INGEST_URL, getModaPaths, getModaDir, isLoopbackBaseUrl, assertValidProfileName, describeBaseUrlSource, loadProfileConfig, saveProfileConfig, getActiveProfile, setActiveProfile, upsertProfile, clearStoredApiKeyCredentials, secretFilePathFromRef, resolveSecretReference, resolveApiKeyFromActiveProfile, resolveTenantIdFromActiveProfile, ensureSecretFilePermissions, writeSecretJsonFile, CliInputError, CliAccessError, CliInputRequiredError, CliAuthError, CliCancellationError, isNetworkLikeError, isApiLikeError, VERSION, MODA_BASE_URL, loadCliConfig, saveCliConfig, resolveApiKey, embeddedTenantIdFromApiKey, resolveIngestUrl2 as resolveIngestUrl, resolveTenantId, resolveApiTenantId, resolveModaBaseUrl, validateConfig, recordApiRequest, getApiRequestCount, resetApiRequestCount, MAX_SCANNED_FILE_BYTES, DEFAULT_MAX_INVENTORY_FILES, DEFAULT_MAX_INVENTORY_TEXT_BYTES, MAX_RECORDED_SKIPS, SKIPPED_DIRS, isSkippedDir, isSkippedPathPrefix, isEvalLikePath, shouldInventoryFile, isTextFile, isSecretishPath, SECRET_KEYS, redactDeep, redactString, packSnapshot, EXIT_OK, EXIT_ERROR, EXIT_DEGRADED, EXIT_AUTH_REQUIRED, EXIT_INPUT_REQUIRED, EXIT_CANCELLED, AGENT_ERROR_CODES, wasOutputCancelled, safeWriteStdout, safeWriteStderr, explicitOutputMode, resolveOutputMode, createCliOutput, agentEnvelopeFits, agentMaxOutputBytes, parseBooleanFlagValue, stringOption, createCommandContext };

package/dist/{cli-t5v7mhvj.js → cli-tw8jj190.js}

@@ -3,11 +3,12 @@ import {
   CliInputError,
   getModaPaths,
   loadProfileConfig,
+  recordApiRequest,
   resolveModaBaseUrl,
   saveProfileConfig,
   secretFilePathFromRef,
   writeSecretJsonFile
-} from "./cli-zp7a97sp.js";
+} from "./cli-mx9r1689.js";
 import {
   __require
 } from "./cli-0v6na3yp.js";
@@ -179,6 +180,7 @@ function postCliSessionEndpoint(path, token, timeoutMs, opts = {}) {
       return;
     }
     const requestFn = url.protocol === "https:" ? httpsRequest : httpRequest;
+    recordApiRequest();
     const req = requestFn(url, {
       method: "POST",
       headers: { Authorization: `Bearer ${token}` },
@@ -345,6 +347,7 @@ async function connectWithCode(code, options = {}) {
   }
   let response;
   try {
+    recordApiRequest();
     response = await fetch(`${resolveModaBaseUrl(options)}/api/cli/auth/connect`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
@@ -594,6 +597,7 @@ async function login(screen = "login", options = {}) {
     async function exchangeCodeForSession(code) {
       let response;
       try {
+        recordApiRequest();
         response = await fetch(`${resolveModaBaseUrl(storageOptions)}/api/cli/auth/exchange`, {
           method: "POST",
           headers: { "Content-Type": "application/json" },
@@ -798,6 +802,7 @@ async function authFetch(path, options = {}, authOptions = {}) {
   let url = `${baseUrl}${path}`;
   const MAX_REDIRECTS = 5;
   for (let hop = 0;; hop++) {
+    recordApiRequest();
     const response = await fetch(url, { ...options, headers, redirect: "manual" });
     if (response.status < 300 || response.status >= 400) {
       if (response.status === 401 && isModaCtSession(session)) {