@moda-ai/cli 1.55.40 → 1.55.42

package/dist/{production-intelligence-hs2sm8t5.js → production-intelligence-e5vsc6cw.js}

@@ -452,6 +452,7 @@ async function runProductionCommand(context) {
   if (context.command === "investigate") {
     const investigation = await investigateProduction({
       daysBack,
+      daysBackGiven: context.flags["days-back"] !== undefined,
       cwd: context.cwd,
       conversationId: context.flags.trace ?? context.flags.conversation,
       toolName: context.flags.tool
@@ -553,14 +554,16 @@ async function investigateProduction(options) {
   const overviewEndpoint = `/overview?days_back=${options.daysBack}`;
   const toolEndpoint = options.toolName ? `/tool-failures/${encodeURIComponent(options.toolName)}?days_back=${options.daysBack}&limit=5` : `/tool-failures?days_back=${options.daysBack}`;
   const frustrationsEndpoint = `${investigateFrustrationsEndpoint(options.daysBack)}${options.conversationId ? `&conversation_id=${encodeURIComponent(options.conversationId)}` : ""}`;
-  const problemsEndpoint = `/problems?days_back=${options.daysBack}&limit=${INVESTIGATION_PROBLEM_LIMIT}`;
   const skipped = { data: null, status: "ok" };
-  const [overview, tools, frustrations, problems] = await Promise.all([
+  const noProblems = { result: skipped, view: null, endpoint: "", warnings: [] };
+  const [overview, tools, frustrations, problemsRead] = await Promise.all([
     safeData(overviewEndpoint),
     safeData(toolEndpoint),
     options.failureOnly ? Promise.resolve(skipped) : safeData(frustrationsEndpoint),
-    options.failureOnly ? Promise.resolve(skipped) : safeData(problemsEndpoint)
+    options.failureOnly ? Promise.resolve(noProblems) : loadInvestigationProblems(options.daysBack, options.daysBackGiven === true)
   ]);
+  const problems = problemsRead.result;
+  warnings.push(...problemsRead.warnings);
   const sources = options.failureOnly ? { overview, tools } : { overview, tools, frustrations, problems };
   for (const [key, result] of Object.entries(sources)) {
     sourceStatus[key] = result.status;
@@ -586,14 +589,14 @@ async function investigateProduction(options) {
   findings.push(...toolFailureFindings(tools.data, options.daysBack, hints, evidenceRefs, options.toolName));
   if (!options.failureOnly) {
     findings.push(...frustrationFindings(frustrations.data, options.daysBack, evidenceRefs));
-    findings.push(...problemFindings(problems.data, options.daysBack, evidenceRefs));
+    findings.push(...problemFindings(problems.data, problemsRead, options.daysBack, evidenceRefs));
   }
   if (findings.length === 0) {
     findings.push(failedSources.length > 0 ? incompleteDataFinding(failedSources, Object.keys(sources).length) : insufficientDataFinding(overview.data, evidenceRefs));
   }
-  findings.sort(compareFindings);
+  sortFindingsKeepingProblemOrder(findings);
   const boundedFindings = capFindings(findings, 8, INVESTIGATION_PROBLEM_SLOTS);
-  const nextCommands = nextCommandsForFindings(boundedFindings, options.daysBack, !options.failureOnly);
+  const nextCommands = nextCommandsForFindings(boundedFindings, options.daysBack, problemsRead.view?.command);
   const summary = summarizeInvestigation(boundedFindings);
   if (failedSources.length > 0) {
     summary.text = `Incomplete: could not load ${failedSources.join(", ")}, so findings cover only ${Object.keys(sources).filter((key) => !failedSources.includes(key)).join(", ")}. ${summary.text}`;
@@ -618,6 +621,7 @@ async function investigateProduction(options) {
     nextCommands,
     warnings,
     sourceStatus,
+    ...problemsRead.view ? { problemsView: problemsRead.view } : {},
     degraded: failedSources.length > 0,
     failedSources
   };
@@ -648,6 +652,7 @@ async function askModa(options) {
   }
   const investigation = await investigateProduction({
     daysBack: options.daysBack,
+    daysBackGiven: options.daysBackGiven,
     cwd: options.cwd,
     question: options.question
   });
@@ -727,6 +732,7 @@ async function askModaForContext(context, question, daysBack) {
   return askModa({
     question,
     daysBack,
+    daysBackGiven: context.flags["days-back"] !== undefined,
     cwd: context.cwd,
     profile: context.profile,
     onNetworkRetry: context.verbose ? () => safeWriteStderr(`[moda] network hiccup reaching Moda Cloud; retrying the buffered ask once…
@@ -975,8 +981,67 @@ function frustrationEvidenceIds(row, anchorIndex) {
     ids.msg_index = anchorIndex;
   return ids;
 }
-function problemRows(data) {
+function windowLength(hours) {
+  return hours >= 48 && hours % 24 === 0 ? `${hours / 24} days` : `${hours} hours`;
+}
+async function loadInvestigationProblems(daysBack, daysBackGiven) {
+  const dreamEndpoint = `/problems/dream?${daysBackGiven ? `days_back=${daysBack}&` : ""}limit=${INVESTIGATION_PROBLEM_LIMIT}`;
+  const dream = await safeData(dreamEndpoint);
+  const dreamData = asRecord(dream.data);
+  if (dream.status === "ok" && dreamData?.available === true) {
+    const windowHours2 = asNumber(asRecord(dreamData.run)?.window_hours);
+    return {
+      result: dream,
+      endpoint: dreamEndpoint,
+      warnings: [],
+      view: {
+        view: "dream",
+        window: daysBackGiven ? `the last ${daysBack} day(s)` : windowHours2 !== null ? `the dream run's window (${windowLength(windowHours2)}), the dashboard's default range` : "the dream run's window, the dashboard's default range",
+        command: `moda problems list --view=dream${daysBackGiven ? ` --days-back=${daysBack}` : ""}`
+      }
+    };
+  }
+  if (dream.status === "unavailable" && isAuthFailure(dream.error)) {
+    return { result: dream, endpoint: dreamEndpoint, view: null, warnings: [] };
+  }
+  const bookEndpoint = `/problems?days_back=${daysBack}&limit=${INVESTIGATION_PROBLEM_LIMIT}`;
+  const book = await safeData(bookEndpoint);
+  const windowHours = asNumber(asRecord(asRecord(book.data)?.summary)?.window_hours);
+  return {
+    result: book,
+    endpoint: bookEndpoint,
+    warnings: dream.status === "unavailable" ? [`Could not check whether this tenant's dashboard shows the dream grouping (${dream.warning ?? dreamEndpoint}); the Problems below are the Book's ranked list, which may differ from the dashboard's.`] : [],
+    view: {
+      view: "book",
+      window: windowHours !== null && windowHours < daysBack * 24 ? `the last ${windowLength(windowHours)} (the Book's serving window within the last ${daysBack} day(s))` : `the last ${daysBack} day(s)`,
+      command: `moda problems list --view=book --days-back=${daysBack}`
+    }
+  };
+}
+function problemRows(data, view) {
   const record = asRecord(data);
+  if (view === "dream") {
+    const items = Array.isArray(record?.problems) ? record.problems : [];
+    return items.flatMap((item) => {
+      const row = asRecord(item);
+      const id = asString(row?.problem_id);
+      if (!row || !id)
+        return [];
+      const incidents = numberValue(row.incidents);
+      const tier = asString(asRecord(row.severity)?.tier);
+      return [{
+        id,
+        name: asString(row.name) || id,
+        cause: asString(row.cause_statement) || undefined,
+        lifecycle: asString(row.lifecycle) ?? "open",
+        trust: "dream",
+        affectedConversations: incidents,
+        ...tier ? { severityTier: tier } : {},
+        users: numberValue(row.users),
+        incidents
+      }];
+    }).slice(0, INVESTIGATION_PROBLEM_LIMIT);
+  }
   const rows = [];
   const push = (items, trust) => {
     if (!Array.isArray(items))
@@ -996,8 +1061,7 @@ function problemRows(data) {
         lifecycle,
         trust,
         verification: asString(row.verification_status) ?? undefined,
-        affectedConversations: numberValue(row.affected_conversations) || numberValue(asRecord(row.evidence_support)?.attribution_count),
-        raw: row
+        affectedConversations: numberValue(row.affected_conversations) || numberValue(asRecord(row.evidence_support)?.attribution_count)
       });
     }
   };
@@ -1006,38 +1070,74 @@ function problemRows(data) {
   push(record?.emerging, "emerging");
   return rows.slice(0, INVESTIGATION_PROBLEM_LIMIT);
 }
-function problemFindings(data, daysBack, evidenceRefs) {
-  return problemRows(data).map((problem, index) => {
+function dreamSeverity(tier) {
+  if (tier === "P0" || tier === "P1")
+    return "critical";
+  if (tier === "P3")
+    return "medium";
+  return "high";
+}
+function problemFindings(data, read, daysBack, evidenceRefs) {
+  if (!read.view)
+    return [];
+  const view = read.view;
+  return problemRows(data, view.view).map((problem, index) => {
     const evidenceId = `problem:${problem.id}`;
-    const trusted = problem.trust === "trusted";
-    const trustNote = trusted ? "verified" : problem.trust === "emerging" ? "emerging, not yet ranked" : `untrusted (${problem.verification ?? "unverified"})`;
+    const dream = problem.trust === "dream";
+    const trusted = problem.trust === "trusted" || dream;
+    const trustNote = dream ? `dream grouping${problem.severityTier ? `, ${problem.severityTier}` : ""}` : problem.trust === "trusted" ? "verified" : problem.trust === "emerging" ? "emerging, not yet ranked" : `untrusted (${problem.verification ?? "unverified"})`;
     evidenceRefs.push({
       id: evidenceId,
       kind: "problem",
       label: `Problem "${problem.name}" (${trustNote})`,
-      endpoint: `/problems?days_back=${daysBack}&limit=${INVESTIGATION_PROBLEM_LIMIT}`,
-      value: { problem_id: problem.id, lifecycle: problem.lifecycle, trust: problem.trust, affected_conversations: problem.affectedConversations }
+      endpoint: read.endpoint,
+      value: dream ? {
+        problem_id: problem.id,
+        view: "dream",
+        rank: index + 1,
+        lifecycle: problem.lifecycle,
+        severity_tier: problem.severityTier ?? null,
+        users: problem.users ?? 0,
+        incidents: problem.incidents ?? 0
+      } : {
+        problem_id: problem.id,
+        view: "book",
+        rank: index + 1,
+        lifecycle: problem.lifecycle,
+        trust: problem.trust,
+        affected_conversations: problem.affectedConversations
+      }
     });
     const affected = problem.affectedConversations;
+    const id = shellArg(problem.id);
+    const dossier = {
+      id: `action_problem_${slug(problem.id)}`,
+      title: `Open the Problem dossier for ${problem.name}.`,
+      rationale: "The dossier has the cause, evidence, affected traces and verification state.",
+      command: `moda problems get ${id}`,
+      mutability: "read",
+      requiresApproval: false
+    };
+    const days = view.command.includes("--days-back=") ? ` --days-back=${daysBack}` : "";
     return {
       id: `finding_problem_${slug(problem.id)}`,
       kind: "problem",
       title: `Problem: ${problem.name}`,
-      severity: trusted ? affected >= 10 ? "critical" : "high" : "medium",
+      severity: dream ? dreamSeverity(problem.severityTier) : trusted ? affected >= 10 ? "critical" : "high" : "medium",
       confidence: trusted ? "high" : "low",
-      impactScore: (trusted ? 100 : 60) + Math.min(affected, 25) - index,
-      rankReason: trusted ? `Rank #${index + 1} verified Problem in \`moda problems\`${affected > 0 ? `, affecting ${affected} trace(s)` : ""}.` : `Listed by \`moda problems\` as ${trustNote}; treat the cause as a hypothesis.`,
-      summary: problem.cause ? `${problem.cause}${problem.lifecycle !== "open" ? ` (${problem.lifecycle})` : ""}` : `Problem ${problem.id} is ${problem.lifecycle} in the last ${daysBack} day(s).`,
+      impactScore: (trusted ? 100 : 60) + Math.min(dream ? problem.users ?? 0 : affected, 25) - index,
+      rankReason: dream ? `Rank #${index + 1} in the dream grouping the dashboard shows (\`${view.command}\`)${problem.severityTier ? `, severity ${problem.severityTier}` : ""}: ${problem.users ?? 0} user(s), ${problem.incidents ?? 0} incident(s) in ${view.window}.` : trusted ? `Rank #${index + 1} verified Problem in the Book (\`${view.command}\`)${affected > 0 ? `, affecting ${affected} trace(s)` : ""}.` : `Listed in the Book (\`${view.command}\`) as ${trustNote}; treat the cause as a hypothesis.`,
+      summary: problem.cause ? `${problem.cause}${problem.lifecycle !== "open" ? ` (${problem.lifecycle})` : ""}` : `Problem ${problem.id} is ${problem.lifecycle} in ${view.window}.`,
       evidenceRefIds: [evidenceId],
       likelyLocations: [],
-      recommendedActions: [{
-        id: `action_problem_${slug(problem.id)}`,
-        title: `Open the Problem dossier for ${problem.name}.`,
-        rationale: "The dossier has the cause, evidence, affected traces and verification state.",
-        command: `moda problems get ${shellArg(problem.id)}`,
+      recommendedActions: dream ? [dossier, {
+        id: `action_problem_dream_${slug(problem.id)}`,
+        title: `Open ${problem.name} as the dashboard shows it.`,
+        rationale: "The dream page has its definition, severity and most serious incidents (dream ids are Book ids).",
+        command: `moda problems get ${id} --view=dream${days}`,
         mutability: "read",
         requiresApproval: false
-      }]
+      }] : [dossier]
     };
   });
 }
@@ -1477,6 +1577,10 @@ function renderInvestigationHuman(investigation) {
   const lines = [];
   lines.push("Moda investigation");
   lines.push(`Window: last ${investigation.daysBack} day(s)`);
+  if (investigation.problemsView) {
+    const { view, window, command } = investigation.problemsView;
+    lines.push(`Problems: ${view === "dream" ? "the dream grouping the dashboard shows" : "the Book's ranked list"}, counts over ${window} (${command})`);
+  }
   lines.push("");
   lines.push(investigation.summary.text);
   for (const finding of investigation.findings) {
@@ -1734,11 +1838,11 @@ function summarizeInvestigation(findings) {
     confidence: top.confidence
   };
 }
-function nextCommandsForFindings(findings, daysBack, includeProblems = false) {
+function nextCommandsForFindings(findings, daysBack, problemsCommand) {
   const limit = 8;
   const primary = [...new Set(findings.map((finding) => finding.recommendedActions[0]?.command).filter(Boolean))];
   const generic = [
-    ...includeProblems ? [`moda problems --days-back=${daysBack}`] : [],
+    ...problemsCommand ? [problemsCommand] : [],
     `moda overview --days-back=${daysBack}`,
     "moda doctor --online"
   ];
@@ -1764,6 +1868,15 @@ function capFindings(sorted, limit, problemSlots) {
   const kept = new Set([...reserved, ...others]);
   return sorted.filter((finding) => kept.has(finding));
 }
+function sortFindingsKeepingProblemOrder(findings) {
+  const listOrder = findings.filter((finding) => finding.kind === "problem");
+  findings.sort(compareFindings);
+  let next = 0;
+  for (let i = 0;i < findings.length; i += 1) {
+    if (findings[i].kind === "problem")
+      findings[i] = listOrder[next++];
+  }
+}
 function compareFindings(a, b) {
   const severityDelta = severityWeight(b.severity) - severityWeight(a.severity);
   if (severityDelta !== 0)

package/dist/{prompt-attribution-3987hhqz.js → prompt-attribution-pbns1ya3.js}

@@ -1,7 +1,7 @@
 import {
   inventoryFiles,
   safePromptEvidencePath
-} from "./cli-azage7s0.js";
+} from "./cli-vwpbspr5.js";
 import"./cli-xq45etg1.js";
 import"./cli-97fnztpy.js";
 import"./cli-cesds766.js";
@@ -9,7 +9,7 @@ import {
   require_typescript
 } from "./cli-qpq84eee.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import"./cli-k4tqwah4.js";

package/dist/prompt-source-mcp.js

@@ -3,7 +3,7 @@ import {
   checkPromptMapping,
   discoverHarnessPromptSources,
   safePromptEvidencePath
-} from "./cli-azage7s0.js";
+} from "./cli-vwpbspr5.js";
 import"./cli-xq45etg1.js";
 import"./cli-97fnztpy.js";
 import"./cli-cesds766.js";
@@ -12,7 +12,7 @@ import {
   inspectPythonSelectors
 } from "./cli-qpq84eee.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import"./cli-k4tqwah4.js";

package/dist/{prompts-ab-gmd10n5d.js → prompts-ab-f5qrvpkt.js}

@@ -23,12 +23,12 @@ import {
   runPromptAb,
   selectProblemCases,
   waitLabel
-} from "./cli-ypqwcf9n.js";
-import"./cli-4tg0hkbz.js";
+} from "./cli-hjm9151g.js";
+import"./cli-he8csgsr.js";
 import"./cli-daqkdnm1.js";
 import"./cli-mm48br00.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import"./cli-k4tqwah4.js";

package/dist/{prompts-propose-q626zmm4.js → prompts-propose-jg2j41wx.js}

@@ -7,12 +7,12 @@ import {
   formatVerdict,
   rerunWithYes,
   resolvePromptArmSpec
-} from "./cli-ypqwcf9n.js";
-import"./cli-4tg0hkbz.js";
+} from "./cli-hjm9151g.js";
+import"./cli-he8csgsr.js";
 import"./cli-daqkdnm1.js";
 import"./cli-mm48br00.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import {
   callControlAPI
 } from "./cli-0xc5htv7.js";

package/dist/{prompts-ysm9ra72.js → prompts-qppk0mhp.js}

@@ -11,12 +11,12 @@ import {
   runPromptSync,
   runPromptsCommand,
   writePromptSyncProgress
-} from "./cli-4tg0hkbz.js";
+} from "./cli-he8csgsr.js";
 import {
   promptSourceHashPayload
 } from "./cli-mm48br00.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import"./cli-k4tqwah4.js";

package/dist/{registry-7xz09ry0.js → registry-8a1940sr.js}

@@ -1,6 +1,6 @@
 import {
   assertFlags
-} from "./cli-f1jfrqgf.js";
+} from "./cli-4sy4tytm.js";
 import {
   callControlAPI
 } from "./cli-0xc5htv7.js";

package/dist/{skills-x6yszxxn.js → skills-sh93b156.js}

@@ -3,12 +3,12 @@ import {
   pullSkills,
   runSkillSync,
   runSkillsCommand
-} from "./cli-7bn406mt.js";
+} from "./cli-mxfyq5nq.js";
 import"./cli-qm5b1vck.js";
 import"./cli-rjav0vj1.js";
 import"./cli-hcwdz9sd.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import"./cli-k4tqwah4.js";

package/dist/{sync-trjzvam9.js → sync-0pp1c8hs.js}

@@ -1,22 +1,22 @@
 import {
   runSkillsCommand
-} from "./cli-7bn406mt.js";
+} from "./cli-mxfyq5nq.js";
 import"./cli-qm5b1vck.js";
 import"./cli-rjav0vj1.js";
 import"./cli-hcwdz9sd.js";
 import {
   runPromptsCommand
-} from "./cli-4tg0hkbz.js";
+} from "./cli-he8csgsr.js";
 import"./cli-mm48br00.js";
 import {
   runHarnessCommand
-} from "./cli-azage7s0.js";
+} from "./cli-vwpbspr5.js";
 import"./cli-xq45etg1.js";
 import"./cli-97fnztpy.js";
 import"./cli-cesds766.js";
 import"./cli-qpq84eee.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moda-ai/cli",
-  "version": "1.55.40",
+  "version": "1.55.42",
   "description": "CLI for Moda: production monitoring and evals for AI agents.",
   "type": "module",
   "bin": {

package/skills/integration/index.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "moda.skill_index.v1",
-  "bundled_at": "2026-10-18T01:43:16.412Z",
-  "cli_version": "1.55.40",
+  "bundled_at": "2026-10-18T02:37:16.940Z",
+  "cli_version": "1.55.42",
   "skills": [
     {
       "id": "integration-cloudflare-think",

package/skills/moda-cli/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: moda-cli
-version: 3.0.6
+version: 3.0.8
 description: Investigate a production AI agent with the Moda CLI (`moda`) - find where something happened in real traces (traces search, then traces get), check agent health, rank what to fix (investigate, problems), and dig into tool failures, user frustration, and hallucinations. Also prompt registry sync/promote, replays, custom signals, and false-positive marking. Use when the user mentions Moda, production traces or conversations of their agent, agent failures, or asks what to fix.
 ---
 
@@ -60,7 +60,7 @@ Details: `references/output-protocol.md`.
 | Where did X happen / traces about Y | `moda traces search "<words>"` (`--mode=keyword` for ids, error codes, exact strings; `--include-tool-io` for tool inputs/outputs) | `moda traces get <conversation_id> --msg-index=<message_index> --window=3` |
 | Search returned nothing | Read `.warnings` (degraded mode, reason). Try a shorter phrase, `--mode=keyword`, a wider `--time-range` | `moda traces --search="<words>"` |
 | Is the agent healthy? | `moda overview --days-back=7` | `moda investigate` |
-| What to fix first? | `moda investigate` or `moda problems list` (free; the same list the dashboard shows) | `moda problems get <problem_id>` (`--view=dream` on a dream-grouped tenant), then `--evidence` / `--traces` |
+| What to fix first? | `moda investigate` or `moda problems list` (free; both rank the same list the dashboard shows, `data.problemsView` names it) | `moda problems get <problem_id>` (`--view=dream` on a dream-grouped tenant), then `--evidence` / `--traces` |
 | Why is tool T failing? | `moda detections tools` | `moda detections tools <T>` (use each row's `anchor`) |
 | How often is tool T called / what is its schema? | `moda tools list` (every tool: calls, failed calls, success rate; `--sort=failure_rate`) | `moda tools get <T>` (registered schema, observed payload fields, usage over time, top failure categories) |
 | What frustrates users? | `moda detections list --family=frustration --limit=10` | `moda traces get <anchor.conversation_id> --msg-index=<anchor.msg_index>` |
@@ -72,6 +72,7 @@ Details: `references/output-protocol.md`.
 | Read one whole trace | `moda traces get <id> --all` (pages of up to 500 messages) | `moda traces spans <id>` for raw spans |
 | Read several traces or turns | `moda traces get <id1>@<msg_index> <id2>@<msg_index> ...` (up to 25; or one per line via `--ids-from=-`) | Same for `moda traces spans <id1> <id2> ...` |
 | One user's experience | `moda users`, `moda user <user_id>` | `moda traces search "<words>" --user-id=<id>` |
+| Is this only hurting <segment> (enterprise, new users, ...)? | `moda cohorts list` (the ref of a built-in or saved cohort), then `moda problems list --sort=users --cohort=<ref>` and the same command without `--cohort` | `moda detections list --family=frustration --cohort=<ref>` vs no `--cohort` (totals count traces); `moda cohorts compare <ref> builtin:power_users` for size, health and failure mix |
 | Topic mix | `moda clusters` | `moda cluster-traces <node_id>` |
 | What the agent believed at a turn | `moda traces state <id> --snapshot --msg-index=<n>` | |
 | A synthesized answer | `moda ask "<question>"` only when the user asks: each call is a paid agent run (up to about 200k tokens) | Exit 3 means degraded |
@@ -89,7 +90,7 @@ names the closest values. `moda <noun> <verb> --help` shows which.
 
 ## Fixing a Problem
 
-1. `moda investigate` or `moda problems` to pick one; note its `problem_id`.
+1. `moda investigate` or `moda problems list` to pick one (both show the dashboard's Problems in its order); note its `problem_id`.
 2. `moda problems get <problem_id> --evidence` and open two or three anchors with
    `moda traces get <id> --msg-index=<n>` before deciding on a cause.
 3. Make the change in code; cite the problem id and trace ids in the commit or PR.

package/skills/moda-cli/references/commands.md

@@ -54,7 +54,10 @@ Loaded on demand from the moda-cli skill. This table can lag the CLI: `moda <com
 | `moda prompts sync` | Upload changed prompt versions and update lockfile |
 | `moda prompts promote <key>` | Move a remote prompt label |
 | `moda registry template\|validate\|push\|status\|coverage\|log\|show\|prompt` | Register prompts, skills, tools, and agent wiring from one agent-written manifest (`--file`, `--dry-run`, `--live`, `--message`, `--days`); every push is a commit in the Registry history; no repo scan |
-| `moda users` / `moda user <id>` | End users with health/activity (`--page-size=N`, alias `--limit=N`; `--page=N`); one user's profile |
+| `moda users` / `moda user <id>` | End users with health/activity (`--page-size=N`, alias `--limit=N`; `--page=N`; `--cohort=builtin:<key>\|<saved id>`); one user's profile |
+| `moda cohorts list\|get\|fields\|preview\|compare` | User cohorts (built-in and saved): refs and definitions, the definition fields, a member count and sample for an unsaved definition (`--file`/`--definition`), two cohorts side by side (`--days=7\|30\|90`) |
+| `moda cohorts create\|update` | Write: save a cohort (`--name`, `--file`/`--definition`, `--description`, `--pinned`, `--color`) or edit a saved one (`<cohort_id>`, same flags plus `--note`); both take `--dry-run` |
+| `--cohort=<ref>` | Scope `problems list`, `traces list`, `detections list` (emotion/frustration/hallucination per trace, laziness, custom_signal hits), `detections tools` and `clusters` to one cohort (`builtin:<key>` or a saved id from `moda cohorts list`). The summary names the cohort; a warning means the server did not confirm the scope |
 | `moda problems reopen <pid>` | Reopen a Problem marked fixed |
 | `moda signals <create\|update\|activate\|pause\|delete\|examples\|refine\|revise\|proposals\|accept\|reject\|search\|preview>` | Manage custom signals (writes take `--dry-run`; LLM-backed ones are rate-limited per key) |
 | `moda prompts list\|show\|proposals\|usage\|replay-runs\|decide` | Read the prompt registry; merge/reject proposals |

package/skills/moda-cli/references/dashboard-parity.md

@@ -5,7 +5,7 @@ Loaded on demand from the moda-cli skill.
 ### 10. Everything the dashboard does, from the CLI
 
 Every command below needs only an API key, and the tenant comes from the key.
-Writes listed here accept `--dry-run`: it validates the call, prints the exact request (method, endpoint, body) and sends nothing, and its `next_commands` entry is the command that sends it for real (`mutability: write`, `requires_approval: true`). That covers `problems feedback|reopen|link`, `review`, `feedback` and the `signals` writes. `prompts promote|ab|propose` refuse `--dry-run` before sending anything, so run them only when you mean it.
+Writes listed here accept `--dry-run`: it validates the call, prints the exact request (method, endpoint, body) and sends nothing, and its `next_commands` entry is the command that sends it for real (`mutability: write`, `requires_approval: true`). That covers `problems feedback|reopen|link`, `review`, `feedback`, `cohorts create|update` and the `signals` writes. `prompts promote|ab|propose` refuse `--dry-run` before sending anything, so run them only when you mean it.
 
 | Dashboard | CLI |
 |---|---|
@@ -14,7 +14,9 @@ Writes listed here accept `--dry-run`: it validates the call, prints the exact r
 | Traces list: Processed, Use case confidence, Indexed columns | `moda traces` rows: `processing_status`, `error_message`, `membership_score`, `indexed_at`; `moda traces get <id>`: `trace_state` |
 | Signals tabs: per-trace list, filters, sort | `moda detections list --family=<f> --group-by=trace` plus `--trajectory --elicitor --signal --status --search --sort --order` (emotion), `--rule --source` (hallucination) |
 | Settings: which detectors run | `moda overview` → `detectors` (read-only; switching one is dashboard-only) |
-| Users page / user profile | `moda users [--window --cohort --sort --order --health-status]`, `moda user <id>` |
+| Users page / user profile | `moda users [--window --cohort --sort --order --health-status]`, `moda user <id>` (`--cohort` takes `builtin:<key>`, a saved cohort id, or a bare built-in key) |
+| Cohort selector on Problems, Traces, Signals tabs, custom signals, Topics | `--cohort=builtin:<key>\|<saved id>` on `problems list`, `traces list`, `detections list` (emotion, frustration and hallucination read the per-trace list; laziness; custom_signal `--signal-id`), `detections tools`, `clusters` (`--time-range=all\|3d\|7d\|30d`, also with `--search`). Output says which cohort scoped it (summary line and `cohort` in the data). `traces search` has no cohort scope |
+| Cohort builder: list, fields, preview, compare, save, edit | `moda cohorts list [--include-archived]`, `get <ref>`, `fields`, `preview --file=<definition.json>`, `compare <a> <b> [--days=7\|30\|90]`, `create --name --file [--dry-run]`, `update <cohort_id> [--name --file --note] [--dry-run]` (archiving is dashboard-only) |
 | Tool catalog: every tool, its schema and usage | `moda tools list [--sort=calls\|failure_rate\|failures\|traces\|last_seen --search --direction --offset]`, `moda tools get <tool_name>` |
 | Problems list (dream grouping or Book, as the page decides): sort, cohort, page | `moda problems list [--sort=users --cohort=builtin:<key> --offset=N --list-version=V]`; `--view=book\|dream` forces one |
 | Problem page (dream view): severity, incidents with verdicts | `moda problems get <problem_id> --view=dream [--offset=N]` |

package/skills/moda-cli/references/production-intelligence.md

@@ -55,7 +55,11 @@ Data API fallback. Abbreviated envelope:
 narrows the tool-failure evidence to one tool, and `--trace` (legacy alias
 `--conversation`) scopes only the frustration evidence (overview, tool
 failures and Problems stay tenant-wide). Its findings include the top 1–3
-Problems from `moda problems`, with `moda problems get <id>` as the next command.
+Problems of the list `moda problems list` shows (the dream grouping when the
+dashboard shows one, otherwise the Book), in the same order, with
+`moda problems get <id>` as the next command. `data.problemsView` names the
+view, the window its counts cover, and the `moda problems list` command that
+lists the same Problems.
 `moda failures` is the tool-failures-only view.
 
 After reporting the top behavioral failure and the harness layer it routes to