@moda-ai/cli 1.55.41 → 1.55.42

package/dist/{agent-ck6y31n2.js → agent-86hghww1.js}

@@ -1,8 +1,8 @@
 import {
   buildDoctorReport
-} from "./cli-a8nxbtpk.js";
+} from "./cli-srwzar82.js";
 import"./cli-pmzh2qjy.js";
-import"./cli-4tg0hkbz.js";
+import"./cli-he8csgsr.js";
 import"./cli-mm48br00.js";
 import {
   readHarnessSyncState
@@ -16,7 +16,7 @@ import {
   validateHarnessReport
 } from "./cli-cesds766.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import {
   resolveApiKey,
@@ -94,7 +94,7 @@ async function buildAgentContext(context) {
   const graph = readHarnessGraphIfPresent(context.cwd);
   const reportState = readHarnessReportState(context.cwd);
   const syncState = readHarnessSyncState(context.cwd);
-  const harness = graph ? await import("./harness-72ejenza.js") : undefined;
+  const harness = graph ? await import("./harness-vabp33ak.js") : undefined;
   const topFindings = doctor.checks.filter((check) => check.status === "fail" || check.status === "warning").slice(0, 12).map(checkToFinding);
   const evidenceRefs = [
     ...doctor.checks.map(checkToEvidenceRef),

package/dist/{cli-f1jfrqgf.js → cli-4sy4tytm.js}

@@ -36,6 +36,10 @@ var daysBackFlag = (fallback) => {
 var ISO_BOUND_MESSAGE = "must be an ISO 8601 date (2026-10-07) or datetime (2026-10-07T14:30:00Z)";
 var ISO_BOUND = /^\d{4}-\d{2}-\d{2}(?:[Tt ]\d{2}:\d{2}(?::\d{2}(?:\.\d{1,9})?)?(?:[Zz]|[+-]\d{2}:?\d{2})?)?$/;
 var isoBoundFlag = () => z.string().trim().regex(ISO_BOUND, ISO_BOUND_MESSAGE).optional();
+var COHORT_REF = /^(all|builtin:[a-z_]{1,64}|[a-z_]{1,64}|[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$/;
+var COHORT_REF_MESSAGE = "must be builtin:<key> or a saved cohort id (see moda cohorts list)";
+var cohortFlag = (description) => z.string().regex(COHORT_REF, COHORT_REF_MESSAGE).optional().describe(description);
+var CLUSTER_COHORT_TIME_RANGES = ["all", "3d", "7d", "30d"];
 var OverviewSchema = z.object({
   days_back: daysBackFlag(7)
 });
@@ -45,7 +49,8 @@ var ClustersSchema = z.object({
   search: z.string().min(2).max(200).optional().describe("Find clusters by name or meaning"),
   node_id: z.string().min(1).max(512).optional().describe("Resolve one cluster node by id (deep link)"),
   mode: z.enum(["fuzzy", "semantic", "hybrid"]).optional().describe("Cluster search mode (server default hybrid)"),
-  limit: z.number().int().min(1).max(50).optional().describe("Maximum clusters to return (with --search/--node-id)")
+  limit: z.number().int().min(1).max(50).optional().describe("Maximum clusters to return (with --search/--node-id)"),
+  cohort: cohortFlag("Only the clusters this cohort's users reach, with its segment counts (builtin:<key> or a saved cohort id); --time-range all|3d|7d|30d")
 });
 var ClusterConversationsSchema = z.object({
   node_id: z.string().describe("Cluster node id (from moda clusters)"),
@@ -64,6 +69,7 @@ var ConversationsSchema = z.object({
   outcome: z.enum(["any", "positive", "negative"]).default("any").optional().describe("Filter by trace outcome (trajectory + frustration)"),
   include_world_state: boolFlag().describe("Attach each result's world-state summary"),
   sort: z.enum(["recent", "longest", "slowest"]).optional().describe("recent = newest activity, longest = most messages, slowest = longest span"),
+  cohort: cohortFlag("Only traces of this cohort's current members (builtin:<key> or a saved cohort id)"),
   limit: z.number().int().min(1).max(100).default(20).optional().describe("Maximum traces to return"),
   offset: z.number().int().min(0).default(0).optional().describe("Number of traces to skip")
 });
@@ -124,12 +130,13 @@ var emotionTraceFilters = {
   trajectory: z.enum(EMOTION_TRAJECTORIES).optional().describe("How the emotion moved over the trace; needs --group-by=trace"),
   signal: emotionSignalsFlag(),
   sort: z.enum(EMOTION_TRACE_SORTS).optional().describe("Trace order (default score); needs --group-by=trace"),
-  order: z.enum(SORT_ORDERS).optional().describe("Sort direction (default desc); needs --group-by=trace")
+  order: z.enum(SORT_ORDERS).optional().describe("Sort direction (default desc); needs --group-by=trace"),
+  cohort: cohortFlag("Only traces of this cohort's members, summary included (builtin:<key> or a saved cohort id); implies --group-by=trace")
 };
 var TRACE_GRAIN_FLAGS = {
-  emotions: ["search", "status", "elicitor", "trajectory", "signal", "sort", "order"],
-  frustrations: ["search", "status", "elicitor", "trajectory", "signal", "sort", "order"],
-  hallucinations: ["search", "status", "rule", "source", "sort", "order"]
+  emotions: ["search", "status", "elicitor", "trajectory", "signal", "sort", "order", "cohort"],
+  frustrations: ["search", "status", "elicitor", "trajectory", "signal", "sort", "order", "cohort"],
+  hallucinations: ["search", "status", "rule", "source", "sort", "order", "cohort"]
 };
 var MAX_CONVERSATION_IDS_FILTER = 50;
 var conversationIdsFlag = () => z.string().min(1).max(MAX_CONVERSATION_IDS_FILTER * 257).optional().describe(`Scope everything to several trace IDs, comma-separated (up to ${MAX_CONVERSATION_IDS_FILTER}; or --ids-from)`);
@@ -147,14 +154,14 @@ var FrustrationsSchema = z.object({
   ids_from: idsFromFilterFlag()
 });
 var ToolFailuresSchema = z.object({
-  days_back: daysBackFlag(7)
+  days_back: daysBackFlag(7),
+  cohort: cohortFlag("The dashboard Tool Failures leaderboard for this cohort's traces (builtin:<key> or a saved cohort id)")
 });
 var PROBLEM_LIST_VIEWS = ["auto", "book", "dream"];
 var BOOK_PROBLEM_SORTS = ["rank", "users", "signals", "problems"];
 var DREAM_PROBLEM_SORTS = ["severity", "users", "silent"];
 var PROBLEMS_MAX_LIMIT = 200;
 var PROBLEMS_DEFAULT_LIMIT = 10;
-var COHORT_REF = /^(all|builtin:[a-z_]{1,64}|[a-z_]{1,64}|[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$/;
 var ProblemsSchema = z.object({
   view: z.enum(PROBLEM_LIST_VIEWS).default("auto").optional().describe("auto: what the dashboard shows (the dream grouping when published, else the Book); book or dream to force one"),
   days_back: daysBackFlag().describe("Whole days to look back (Book default 30; the dream view defaults to its run window)"),
@@ -163,7 +170,7 @@ var ProblemsSchema = z.object({
   list_version: z.string().regex(/^[0-9a-f]{1,64}$/, "must be the list_version of a previous page").optional().describe("list_version of the first page, passed with every later --offset"),
   sort: z.string().regex(/^(rank|severity|users|signals|problems|silent|signal:[a-z_]{1,64})$/, "must be rank, severity, users, silent (dream), signals, problems or signal:<family> (Book)").optional().describe("Order: rank (default), users; dream: severity, silent; Book: signals, problems, signal:<family>"),
   dir: z.enum(["desc", "asc"]).optional().describe("Sort direction (default desc)"),
-  cohort: z.string().regex(COHORT_REF, "must be builtin:<key> or a saved cohort id").optional().describe("Only the Problems this cohort hit (builtin:<key> or a saved cohort id), with its counts")
+  cohort: cohortFlag("Only the Problems this cohort hit (builtin:<key> or a saved cohort id), with its counts")
 });
 var REMAINDER_FAMILIES = [
   "tool_failure",
@@ -248,7 +255,8 @@ var SignalSchema = z.object({
   detections: boolFlag().describe("List recent hits instead of the summary"),
   days_back: daysBackFlag(),
   limit: z.number().int().min(1).max(20).optional().describe("Hits page size (server default 10)"),
-  offset: z.number().int().min(0).max(1e4).optional().describe("Number of hits to skip")
+  offset: z.number().int().min(0).max(1e4).optional().describe("Number of hits to skip"),
+  cohort: cohortFlag("Only hits on traces of this cohort's members (builtin:<key> or a saved cohort id); with --detections")
 });
 var SIGNAL_LABELS = ["fits", "does_not_fit"];
 var SignalLabelSchema = z.object({
@@ -342,7 +350,8 @@ var HallucinationsSchema = z.object({
   rule: z.string().trim().min(1).max(200).optional().describe("One rule_id from summary.rule_breakdown; scopes the summary too; needs --group-by=trace"),
   source: z.enum(HALLUCINATION_SOURCES).optional().describe("Only detections from this source; needs --group-by=trace"),
   sort: z.enum(HALLUCINATION_TRACE_SORTS).optional().describe("Trace order (default contradicted_count); needs --group-by=trace"),
-  order: z.enum(SORT_ORDERS).optional().describe("Sort direction (default desc); needs --group-by=trace")
+  order: z.enum(SORT_ORDERS).optional().describe("Sort direction (default desc); needs --group-by=trace"),
+  cohort: cohortFlag("Only traces of this cohort's members, summary included (builtin:<key> or a saved cohort id); implies --group-by=trace")
 });
 var LAZINESS_FAMILIES = [
   "omission_comment",
@@ -377,7 +386,8 @@ var LazinessSchema = z.object({
   search: z.string().trim().min(1).max(200).optional().describe("Trace ID substring"),
   status: z.enum(["all", "strong"]).optional().describe("all (default), or strong: traces with a high-confidence detection"),
   sort: z.enum(LAZINESS_TRACE_SORTS).optional().describe("Trace order (default detections_count)"),
-  order: z.enum(SORT_ORDERS).optional().describe("Sort direction (default desc)")
+  order: z.enum(SORT_ORDERS).optional().describe("Sort direction (default desc)"),
+  cohort: cohortFlag("Only traces of this cohort's members (builtin:<key> or a saved cohort id); not with --conversation-id")
 });
 var StepScoresSchema = z.object({
   conversation_id: z.string().min(1).describe("Trace ID")
@@ -489,7 +499,7 @@ var UsersSchema = z.object({
   page_size: z.number().int().min(1).optional().describe("Users per page"),
   limit: z.number().int().min(1).optional().describe("Alias of --page-size"),
   search: z.string().optional().describe("Match user id or name"),
-  cohort: z.enum(USER_COHORTS).optional().describe("Only users in this cohort"),
+  cohort: cohortFlag(`Only users in this cohort: builtin:<key>, a saved cohort id, or a built-in key (${USER_COHORTS.filter((key) => key !== "all").join(", ")})`),
   sort: z.enum(USER_SORTS).optional().describe("Sort field"),
   order: z.enum(["asc", "desc"]).optional().describe("Sort order"),
   health_status: z.string().optional().describe(`Comma-separated health states (${USER_HEALTH.join(", ")})`),
@@ -510,6 +520,52 @@ var ProblemReopenSchema = z.object({
   reason: z.string().max(500).optional().describe("Why it is being reopened"),
   dry_run: boolFlag().describe("Print the request and send nothing")
 });
+var COHORT_COLORS = ["neutral", "blue", "green", "amber", "red", "violet"];
+var COHORT_COMPARE_DAYS = ["7", "30", "90"];
+var cohortTenant = () => z.string().optional().describe("Tenant to read; must match the API key's tenant");
+var cohortRef = (description) => z.string().regex(COHORT_REF, COHORT_REF_MESSAGE).describe(description);
+var cohortDefinitionFlags = {
+  definition: z.string().optional().describe("Cohort definition (DSL v1) as inline JSON; see moda cohorts fields"),
+  file: z.string().optional().describe("JSON file with the definition, or a body with a definition key")
+};
+var CohortsListSchema = z.object({
+  include_archived: boolFlag().describe("Also list archived saved cohorts"),
+  tenant_id: cohortTenant()
+});
+var CohortGetSchema = z.object({
+  ref: cohortRef("builtin:<key> or a saved cohort id"),
+  tenant_id: cohortTenant()
+});
+var CohortFieldsSchema = z.object({
+  tenant_id: cohortTenant()
+});
+var CohortPreviewSchema = z.object({
+  ...cohortDefinitionFlags,
+  tenant_id: cohortTenant()
+});
+var CohortCompareSchema = z.object({
+  a: cohortRef("First cohort: builtin:<key> or a saved cohort id"),
+  b: cohortRef("Second cohort: builtin:<key> or a saved cohort id"),
+  days: z.enum(COHORT_COMPARE_DAYS).optional().describe("Window for top topics and failure mix (server default 30)"),
+  tenant_id: cohortTenant()
+});
+var cohortFieldFlags = {
+  name: z.string().max(120).optional().describe("Cohort name"),
+  description: z.string().max(2000).optional().describe("Cohort description"),
+  ...cohortDefinitionFlags,
+  pinned: boolFlag().describe("Pin the cohort on the Users page"),
+  color: z.enum(COHORT_COLORS).optional().describe("Pill color")
+};
+var CohortCreateSchema = z.object({
+  ...cohortFieldFlags,
+  tenant_id: cohortTenant()
+});
+var CohortUpdateSchema = z.object({
+  id: z.string().regex(UUID_RE, "must be a saved cohort id (UUID); built-in cohorts cannot be edited").describe("Saved cohort id"),
+  ...cohortFieldFlags,
+  note: z.string().max(500).optional().describe("Why it changed (kept with the revision)"),
+  tenant_id: cohortTenant()
+});
 
 // ../../packages/database/src/agent-feedback.ts
 var FEEDBACK_CATEGORIES = [
@@ -716,7 +772,18 @@ var COMMAND_FLAG_SPECS = {
     positionals: [{ name: "note", key: "note", required: true, variadic: true, alsoFlag: true }]
   },
   users: { schema: UsersSchema, handParsed: true },
-  user: { schema: UserSchema, handParsed: true, positionals: [{ name: "user_id", key: "user_id", required: true }] }
+  user: { schema: UserSchema, handParsed: true, positionals: [{ name: "user_id", key: "user_id", required: true }] },
+  "cohort-list": { schema: CohortsListSchema, handParsed: true },
+  "cohort-get": { schema: CohortGetSchema, handParsed: true, positionals: [{ name: "ref", key: "ref", required: true }] },
+  "cohort-fields": { schema: CohortFieldsSchema, handParsed: true },
+  "cohort-preview": { schema: CohortPreviewSchema, handParsed: true },
+  "cohort-compare": {
+    schema: CohortCompareSchema,
+    handParsed: true,
+    positionals: [{ name: "cohort_a", key: "a", required: true }, { name: "cohort_b", key: "b", required: true }]
+  },
+  "cohort-create": { schema: CohortCreateSchema, extra: DRY_RUN, handParsed: true },
+  "cohort-update": { schema: CohortUpdateSchema, extra: DRY_RUN, handParsed: true, positionals: [{ name: "cohort_id", key: "id", required: true }] }
 };
 function flagSpecFor(command) {
   return Object.hasOwn(COMMAND_FLAG_SPECS, command) ? COMMAND_FLAG_SPECS[command] : undefined;
@@ -1063,6 +1130,14 @@ function oneOf(name, value, allowed) {
   }
   return value;
 }
+function cohortRefFlag(value) {
+  if (value === undefined)
+    return;
+  if (!COHORT_REF.test(value)) {
+    throw new CliInputError(`--cohort must be builtin:<key> or a saved cohort id (got '${value}').`, "List the refs with `moda cohorts list`.");
+  }
+  return value;
+}
 function csv(value) {
   if (value === undefined)
     return;
@@ -1116,7 +1191,7 @@ async function runUsersCommand(context) {
     page: flags.page,
     pageSize: flags["page-size"] ?? flags.limit,
     search: flags.search,
-    cohort: oneOf("cohort", flags.cohort, USER_COHORTS),
+    cohort: cohortRefFlag(flags.cohort),
     sortBy: oneOf("sort", flags.sort, USER_SORTS),
     sortOrder: oneOf("order", flags.order, ["asc", "desc"]),
     healthStatus: csv(flags["health-status"])?.map((value) => oneOf("health-status", value, HEALTH)).join(","),
@@ -1146,6 +1221,134 @@ async function runUserCommand(context) {
   await send(context, "control", "GET", `/tenants/${encodeURIComponent(tenantId)}/users/${encodeURIComponent(userId)}${suffix}`);
   return { exitCode: 0 };
 }
+var COHORT_DEFINITION_HINT = 'A definition is {"version":1,"window":"24h|7d|30d|90d","where":{...}}; `moda cohorts fields` lists the fields and operators.';
+function cohortsBase(context) {
+  return `/tenants/${encodeURIComponent(requireTenant(context))}/cohorts`;
+}
+function cohortRefArg(value, what, usage) {
+  if (!value)
+    throw new CliInputError(`${what} is required.`, `Usage: ${usage}`);
+  if (!COHORT_REF.test(value)) {
+    throw new CliInputError(`${what} must be builtin:<key> or a saved cohort id (got '${value}').`, "List the refs with `moda cohorts list`.");
+  }
+  return value;
+}
+function cohortBodyInput(flags, cwd) {
+  const fromFile = readBodyFile(flags, cwd);
+  const body = Object.keys(fromFile).length === 0 ? {} : ("definition" in fromFile) ? fromFile : { definition: fromFile };
+  if (flags.definition !== undefined) {
+    let parsed;
+    try {
+      parsed = JSON.parse(flags.definition);
+    } catch (error) {
+      throw new CliInputError(`--definition is not valid JSON: ${error instanceof Error ? error.message : String(error)}`, COHORT_DEFINITION_HINT);
+    }
+    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed))
+      throw new CliInputError("--definition must be a JSON object.", COHORT_DEFINITION_HINT);
+    body.definition = parsed;
+  }
+  if (body.definition !== undefined && (!body.definition || typeof body.definition !== "object" || Array.isArray(body.definition))) {
+    throw new CliInputError("The cohort definition must be a JSON object.", COHORT_DEFINITION_HINT);
+  }
+  return body;
+}
+function cohortFieldBody(flags, cwd) {
+  const pinned = flags.pinned === undefined ? undefined : oneOf("pinned", flags.pinned, ["true", "false", "1", "0", "yes", "no"]);
+  return {
+    ...cohortBodyInput(flags, cwd),
+    ...compact({
+      name: flags.name,
+      description: flags.description,
+      pinned: pinned === undefined ? undefined : ["true", "1", "yes"].includes(pinned),
+      color: oneOf("color", flags.color, COHORT_COLORS)
+    })
+  };
+}
+var COHORT_COMMANDS = {
+  "cohort-list": { path: "cohorts list", usage: "moda cohorts list [--include-archived]" },
+  "cohort-get": { path: "cohorts get", usage: "moda cohorts get <ref>" },
+  "cohort-fields": { path: "cohorts fields", usage: "moda cohorts fields" },
+  "cohort-preview": { path: "cohorts preview", usage: "moda cohorts preview --file=<path> | --definition=<json>" },
+  "cohort-compare": { path: "cohorts compare", usage: "moda cohorts compare <cohort_a> <cohort_b> [--days=7|30|90]" },
+  "cohort-create": { path: "cohorts create", usage: "moda cohorts create --name=NAME --file=<path>|--definition=<json> [--description --pinned --color] [--dry-run]" },
+  "cohort-update": { path: "cohorts update", usage: "moda cohorts update <cohort_id> [--name --description --file|--definition --pinned --color --note] [--dry-run]" }
+};
+async function runCohortCommand(context) {
+  const flags = context.flags;
+  const command = COHORT_COMMANDS[context.command];
+  if (!command)
+    throw new CliInputError(`Unknown cohorts command '${context.command}'.`, "Run 'moda cohorts --help'.");
+  const spec = flagSpecFor(context.command);
+  assertFlags(command.path, flags, spec ? specFlagNames(spec) : []);
+  assertPositionals(command.path, context.positionals, spec?.positionals?.length ?? 0, command.usage);
+  const [first, second] = context.positionals;
+  switch (context.command) {
+    case "cohort-list": {
+      requireKey(context);
+      const archived = flags["include-archived"];
+      const query = archived !== undefined && archived !== "false" && archived !== "0" ? "?includeArchived=1" : "";
+      await send(context, "control", "GET", `${cohortsBase(context)}${query}`);
+      return { exitCode: 0 };
+    }
+    case "cohort-get": {
+      const ref = cohortRefArg(first, "<ref>", "moda cohorts get <ref>");
+      requireKey(context);
+      await send(context, "control", "GET", `${cohortsBase(context)}/${encodeURIComponent(ref)}`);
+      return { exitCode: 0 };
+    }
+    case "cohort-fields": {
+      requireKey(context);
+      await send(context, "control", "GET", `${cohortsBase(context)}/fields`);
+      return { exitCode: 0 };
+    }
+    case "cohort-preview": {
+      const { definition } = cohortBodyInput(flags, context.cwd);
+      if (definition === undefined)
+        throw new CliInputError("Pass the definition with --file=<path> or --definition=<json>.", COHORT_DEFINITION_HINT);
+      requireKey(context);
+      const data = await callControlAPI(`${cohortsBase(context)}/preview`, { method: "POST", body: JSON.stringify({ definition }) }, profileOptions(context));
+      context.output.writeData(data ?? {});
+      return { exitCode: 0 };
+    }
+    case "cohort-compare": {
+      const usage = "moda cohorts compare <cohort_a> <cohort_b> [--days=7|30|90]";
+      const a = cohortRefArg(first, "<cohort_a>", usage);
+      const b = cohortRefArg(second, "<cohort_b>", usage);
+      const days = oneOf("days", flags.days, COHORT_COMPARE_DAYS);
+      requireKey(context);
+      const query = new URLSearchParams(compact({ a, b, days }));
+      await send(context, "control", "GET", `${cohortsBase(context)}/compare?${query.toString()}`);
+      return { exitCode: 0 };
+    }
+    case "cohort-create": {
+      const body = cohortFieldBody(flags, context.cwd);
+      const missing = ["name", "definition"].filter((field) => body[field] === undefined);
+      if (missing.length > 0) {
+        throw new CliInputError(`Missing ${missing.join(" and ")} for cohorts create, so nothing was sent.`, `Pass --name and --file=<definition.json> (or --definition=<json>). ${COHORT_DEFINITION_HINT} Check the members first with \`moda cohorts preview\`.`);
+      }
+      requireKey(context);
+      await send(context, "control", "POST", cohortsBase(context), body);
+      return { exitCode: 0 };
+    }
+    case "cohort-update": {
+      const usage = "moda cohorts update <cohort_id> [--name --description --file|--definition --pinned --color --note] [--dry-run]";
+      if (!first)
+        throw new CliInputError("<cohort_id> is required.", `Usage: ${usage}`);
+      if (!UUID_RE2.test(first)) {
+        throw new CliInputError(`<cohort_id> must be a saved cohort id (UUID), got '${first}'. Built-in cohorts cannot be edited.`, "List saved cohorts with `moda cohorts list`.");
+      }
+      const body = { ...cohortFieldBody(flags, context.cwd), ...compact({ note: flags.note }) };
+      if (Object.keys(body).filter((key) => key !== "note").length === 0) {
+        throw new CliInputError("Nothing to update, so nothing was sent: pass at least one of --name, --description, --file/--definition, --pinned or --color.", `Usage: ${usage}`);
+      }
+      requireKey(context);
+      await send(context, "control", "PATCH", `${cohortsBase(context)}/${encodeURIComponent(first)}`, body);
+      return { exitCode: 0 };
+    }
+    default:
+      throw new CliInputError(`Unknown cohorts command '${context.command}'.`, "Run 'moda cohorts --help'.");
+  }
+}
 async function runProblemReopenCommand(context) {
   assertFlags("problem-reopen", context.flags, specFlagNames(COMMAND_FLAG_SPECS["problem-reopen"]));
   assertPositionals("problem-reopen", context.positionals, 1, "moda problems reopen <problem_id> [--reason=TEXT]");
@@ -1447,4 +1650,4 @@ function unknownSignalsSubcommandError(sub, args = []) {
   ${SIGNAL_USAGE}`);
 }
 
-export { TRACE_GRAIN_FLAGS, MAX_CONVERSATION_IDS_FILTER, BOOK_PROBLEM_SORTS, DREAM_PROBLEM_SORTS, PROBLEMS_MAX_LIMIT, PROBLEMS_DEFAULT_LIMIT, ProblemsRemainderSchema, UUID_RE, ProblemImpactSchema, PROBLEM_FEEDBACK_ACTIONS, ProblemFeedbackSchema, ProblemLinearFileSchema, SignalLabelSchema, DETECTION_VERDICTS, DetectionReviewSchema, FALSE_POSITIVE_KINDS, FalsePositiveSchema, EMOTION_FAMILIES, LAZINESS_FAMILIES, StepScoresSchema, AuditSchema, TraceFindingsSchema, FEEDBACK_USAGE, isFeedbackRefFlag, buildFeedbackRequest, writeDryRun, COMMAND_FLAG_SPECS, flagSpecFor, kebabFlag, schemaShape, describeField, specFlagKeys, specFlagNames, describeSpecFlags, closestMatches, usageLine, renderFlagHelp, subcommandHelpFlags, manifestFlagFields, requireTenant, assertFlags, assertPositionals, runUsersCommand, runUserCommand, runProblemReopenCommand, runSignalsManagementCommand, SIGNALS_MANAGEMENT_SUBCOMMANDS, unknownSignalsSubcommandError };
+export { CLUSTER_COHORT_TIME_RANGES, TRACE_GRAIN_FLAGS, MAX_CONVERSATION_IDS_FILTER, BOOK_PROBLEM_SORTS, DREAM_PROBLEM_SORTS, PROBLEMS_MAX_LIMIT, PROBLEMS_DEFAULT_LIMIT, ProblemsRemainderSchema, UUID_RE, ProblemImpactSchema, PROBLEM_FEEDBACK_ACTIONS, ProblemFeedbackSchema, ProblemLinearFileSchema, SignalLabelSchema, DETECTION_VERDICTS, DetectionReviewSchema, FALSE_POSITIVE_KINDS, FalsePositiveSchema, EMOTION_FAMILIES, LAZINESS_FAMILIES, StepScoresSchema, AuditSchema, TraceFindingsSchema, FEEDBACK_USAGE, isFeedbackRefFlag, buildFeedbackRequest, writeDryRun, COMMAND_FLAG_SPECS, flagSpecFor, kebabFlag, schemaShape, describeField, specFlagKeys, specFlagNames, describeSpecFlags, closestMatches, usageLine, renderFlagHelp, subcommandHelpFlags, manifestFlagFields, requireTenant, assertFlags, assertPositionals, runUsersCommand, runUserCommand, runCohortCommand, runProblemReopenCommand, runSignalsManagementCommand, SIGNALS_MANAGEMENT_SUBCOMMANDS, unknownSignalsSubcommandError };

package/dist/{cli-4tg0hkbz.js → cli-he8csgsr.js}

@@ -8,7 +8,7 @@ import {
 import {
   assertFlags,
   assertPositionals
-} from "./cli-f1jfrqgf.js";
+} from "./cli-4sy4tytm.js";
 import {
   callControlAPI
 } from "./cli-0xc5htv7.js";
@@ -5725,9 +5725,9 @@ async function runPromptsCommand(input, legacyFlags, legacyProfileOptions) {
       await promotePrompt(positionals, flags, profileOptions, context);
       break;
     case "ab":
-      return (await import("./prompts-ab-gmd10n5d.js")).runPromptAb(flags, profileOptions, context);
+      return (await import("./prompts-ab-f5qrvpkt.js")).runPromptAb(flags, profileOptions, context);
     case "propose":
-      await (await import("./prompts-propose-q626zmm4.js")).runPromptPropose(positionals, flags, profileOptions, context);
+      await (await import("./prompts-propose-jg2j41wx.js")).runPromptPropose(positionals, flags, profileOptions, context);
       break;
     case "list":
     case "show":
@@ -5830,7 +5830,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const analyzedDefinitions = new Map;
   if (flags["no-analyze"] !== "true") {
     options.onProgress?.("Analyzing prompt sources before sync.");
-    const { analyzeHarnessPrompts } = await import("./harness-72ejenza.js");
+    const { analyzeHarnessPrompts } = await import("./harness-vabp33ak.js");
     const result = await analyzeHarnessPrompts({
       rootDir: process.cwd(),
       existing: established.flatMap((prompt) => prompt.sourceDefinition ? [prompt.sourceDefinition.source] : []),
@@ -5858,7 +5858,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const mergedSources = mergePromptSources(manifest.sources, extraSources);
   const manifestUpdate = stableJson(mergedSources) === stableJson(mergePromptSources(manifest.sources, [])) ? undefined : $stringify({ version: 2, prompt_paths: manifest.promptPaths, sources: mergedSources });
   const prompts = await discoverPrompts(extraSources);
-  const { checkPromptAttribution } = await import("./prompt-attribution-3987hhqz.js");
+  const { checkPromptAttribution } = await import("./prompt-attribution-pbns1ya3.js");
   const attribution = checkPromptAttribution(process.cwd(), prompts.map((prompt) => prompt.key));
   const brokenAttribution = attribution.references.filter((reference) => reference.status === "missing");
   if (brokenAttribution.length) {
@@ -6164,7 +6164,7 @@ async function migratePromptManifest(options = {}) {
   let addedSources = [];
   let pendingSources = [];
   if (options.discover) {
-    const { analyzeHarnessPrompts } = await import("./harness-72ejenza.js");
+    const { analyzeHarnessPrompts } = await import("./harness-vabp33ak.js");
     const result = await analyzeHarnessPrompts({
       rootDir: root,
       existing: manifest.sources,

package/dist/{cli-ypqwcf9n.js → cli-hjm9151g.js}

@@ -4,7 +4,7 @@ import {
   parsePromptFileForAb,
   readPromptLock,
   runPromptSync
-} from "./cli-4tg0hkbz.js";
+} from "./cli-he8csgsr.js";
 import {
   DEFAULT_POLL_INTERVAL_MS,
   DEFAULT_WAIT_TIMEOUT_MS,
@@ -12,7 +12,7 @@ import {
 } from "./cli-daqkdnm1.js";
 import {
   UUID_RE
-} from "./cli-f1jfrqgf.js";
+} from "./cli-4sy4tytm.js";
 import {
   callControlAPI,
   callDataAPI

package/dist/{cli-7bn406mt.js → cli-mxfyq5nq.js}

@@ -18,7 +18,7 @@ import {
   assertFlags,
   assertPositionals,
   writeDryRun
-} from "./cli-f1jfrqgf.js";
+} from "./cli-4sy4tytm.js";
 import {
   callControlAPI
 } from "./cli-0xc5htv7.js";

package/dist/{cli-a8nxbtpk.js → cli-srwzar82.js}

@@ -4,7 +4,7 @@ import {
 } from "./cli-pmzh2qjy.js";
 import {
   inspectPromptManifest
-} from "./cli-4tg0hkbz.js";
+} from "./cli-he8csgsr.js";
 import {
   readHarnessSyncState,
   renderDoctorHuman,
@@ -376,7 +376,7 @@ async function harnessCurrentCheck(cwd, manifestPath, manifestExists, tenantId)
     };
   }
   try {
-    const { scanHarness } = await import("./harness-72ejenza.js");
+    const { scanHarness } = await import("./harness-vabp33ak.js");
     const current = scanHarness({
       rootDir: cwd,
       scannerVersion: "doctor",

package/dist/{cli-azage7s0.js → cli-vwpbspr5.js}

@@ -49,7 +49,7 @@ import {
   assertFlags,
   assertPositionals,
   requireTenant
-} from "./cli-f1jfrqgf.js";
+} from "./cli-4sy4tytm.js";
 import {
   ApiError,
   callControlAPI
@@ -14048,7 +14048,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-2qc4gg2w.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-112503xs.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);

package/dist/cli.js

@@ -34,6 +34,7 @@ import {
 import {
   AuditSchema,
   BOOK_PROBLEM_SORTS,
+  CLUSTER_COHORT_TIME_RANGES,
   COMMAND_FLAG_SPECS,
   DETECTION_VERDICTS,
   DREAM_PROBLEM_SORTS,
@@ -68,6 +69,7 @@ import {
   kebabFlag,
   manifestFlagFields,
   renderFlagHelp,
+  runCohortCommand,
   runProblemReopenCommand,
   runSignalsManagementCommand,
   runUserCommand,
@@ -79,7 +81,7 @@ import {
   unknownSignalsSubcommandError,
   usageLine,
   writeDryRun
-} from "./cli-f1jfrqgf.js";
+} from "./cli-4sy4tytm.js";
 import {
   ApiError,
   callControlAPI,
@@ -1453,6 +1455,69 @@ var CANONICAL_LEAVES = [
     summary: "One tool: calls, recorded schema and payload fields, usage over time, top failure categories",
     examples: ["moda tools get <tool_name>", "moda tools get <tool_name> --days-back=30 --full"]
   },
+  {
+    noun: "cohorts",
+    verb: "list",
+    path: "cohorts list",
+    args: "",
+    handler: "cohort-list",
+    summary: "Built-in and saved user cohorts with their refs and definitions (the dashboard Users page)",
+    examples: ["moda cohorts list", "moda cohorts list --include-archived"]
+  },
+  {
+    noun: "cohorts",
+    verb: "get",
+    path: "cohorts get",
+    args: "<ref>",
+    handler: "cohort-get",
+    summary: "One cohort: name, definition and revision (ref: builtin:<key> or a saved cohort id)",
+    examples: ["moda cohorts get builtin:power_users", "moda cohorts get <cohort_id>"]
+  },
+  {
+    noun: "cohorts",
+    verb: "fields",
+    path: "cohorts fields",
+    args: "",
+    handler: "cohort-fields",
+    summary: "The fields and operators a cohort definition can use",
+    examples: ["moda cohorts fields"]
+  },
+  {
+    noun: "cohorts",
+    verb: "preview",
+    path: "cohorts preview",
+    args: "",
+    handler: "cohort-preview",
+    summary: "Member count and a sample of users for an unsaved definition",
+    examples: ["moda cohorts preview --file=cohort.json", `moda cohorts preview --definition='{"version":1,"window":"30d","where":{"field":"tool_failure_count","op":"gte","value":3}}'`]
+  },
+  {
+    noun: "cohorts",
+    verb: "compare",
+    path: "cohorts compare",
+    args: "<cohort_a> <cohort_b>",
+    handler: "cohort-compare",
+    summary: "Two cohorts side by side: size, health, top topics and failure mix",
+    examples: ["moda cohorts compare builtin:new_this_week builtin:power_users --days=30"]
+  },
+  {
+    noun: "cohorts",
+    verb: "create",
+    path: "cohorts create",
+    args: "",
+    handler: "cohort-create",
+    summary: "Save a cohort from a definition (write; --dry-run prints the request)",
+    examples: ['moda cohorts create --name="Enterprise" --file=cohort.json --dry-run']
+  },
+  {
+    noun: "cohorts",
+    verb: "update",
+    path: "cohorts update",
+    args: "<cohort_id>",
+    handler: "cohort-update",
+    summary: "Edit a saved cohort: name, definition, description, pin, color (write; --dry-run)",
+    examples: ['moda cohorts update <cohort_id> --file=cohort.json --note="exclude trials" --dry-run']
+  },
   {
     noun: "review",
     verb: "",
@@ -1486,12 +1551,13 @@ var CANONICAL_LEAVES = [
     examples: ["moda skills push --dry-run", "moda skills push"]
   }
 ];
-var CANONICAL_NOUNS = ["traces", "problems", "detections", "tools", "review", "reviews", "skills"];
+var CANONICAL_NOUNS = ["traces", "problems", "detections", "tools", "cohorts", "review", "reviews", "skills"];
 var NOUN_SUMMARIES = {
   traces: "Traces (agent runs): list, search, read, findings, world state, raw spans",
   problems: "Problems ranked by root cause, their evidence, impact and lifecycle",
   detections: "Detections of every family, and the tool failure leaderboard",
   tools: "The Tool catalog: every tool with calls and success rate, and one tool's schema, usage and failure categories",
+  cohorts: "User cohorts: list, read, preview and compare them, and save or edit one; scope lists with --cohort",
   review: "Mark a detection a false positive, correct, or clear the mark",
   reviews: "List false-positive marks and detection reviews",
   skills: "Generate, pull, push, and install agent skills"
@@ -3175,31 +3241,31 @@ function leafManifestFields(leaf, commands) {
 import { fileURLToPath } from "url";
 import { realpathSync } from "fs";
 async function runPromptsCommand(...args) {
-  return (await import("./prompts-ysm9ra72.js")).runPromptsCommand(...args);
+  return (await import("./prompts-qppk0mhp.js")).runPromptsCommand(...args);
 }
 async function runSkillsCommand(...args) {
-  return (await import("./skills-x6yszxxn.js")).runSkillsCommand(...args);
+  return (await import("./skills-sh93b156.js")).runSkillsCommand(...args);
 }
 async function runFixCommand(...args) {
-  return (await import("./fix-0r974yge.js")).runFixCommand(...args);
+  return (await import("./fix-aghp304m.js")).runFixCommand(...args);
 }
 async function runFixesCommand(...args) {
-  return (await import("./fix-0r974yge.js")).runFixesCommand(...args);
+  return (await import("./fix-aghp304m.js")).runFixesCommand(...args);
 }
 async function runHarnessCommand(...args) {
-  return (await import("./harness-72ejenza.js")).runHarnessCommand(...args);
+  return (await import("./harness-vabp33ak.js")).runHarnessCommand(...args);
 }
 async function runSyncCommand(...args) {
-  return (await import("./sync-trjzvam9.js")).runSyncCommand(...args);
+  return (await import("./sync-0pp1c8hs.js")).runSyncCommand(...args);
 }
 async function runRegistryCommand(...args) {
-  return (await import("./registry-7xz09ry0.js")).runRegistryCommand(...args);
+  return (await import("./registry-8a1940sr.js")).runRegistryCommand(...args);
 }
 async function runDoctorCommand(...args) {
-  return (await import("./doctor-p8sp6cbk.js")).runDoctorCommand(...args);
+  return (await import("./doctor-c05njdv8.js")).runDoctorCommand(...args);
 }
 async function runStatusCommand(...args) {
-  return (await import("./doctor-p8sp6cbk.js")).runStatusCommand(...args);
+  return (await import("./doctor-c05njdv8.js")).runStatusCommand(...args);
 }
 async function runAuthCommand(...args) {
   return (await import("./profile-commands-se9947c1.js")).runAuthCommand(...args);
@@ -3211,7 +3277,7 @@ async function runProfilesCommand(...args) {
   return (await import("./profile-commands-se9947c1.js")).runProfilesCommand(...args);
 }
 async function runAgentCommand(...args) {
-  return (await import("./agent-ck6y31n2.js")).runAgentCommand(...args);
+  return (await import("./agent-86hghww1.js")).runAgentCommand(...args);
 }
 async function runProductionCommand(...args) {
   return (await import("./production-intelligence-e5vsc6cw.js")).runProductionCommand(...args);
@@ -3515,6 +3581,7 @@ Production data:
   clusters                         Browse or search topic clusters
   cluster-traces <node_id>         List traces in a cluster
   users / user <user_id>           End users with health and activity (the dashboard Users page)
+  cohorts list|get|compare         User cohorts; --cohort=<ref> scopes problems, traces, detections, clusters
   tail                             Live-tail new traces/detections as NDJSON (one line per item)
 
 Traces, Problems, detections, tools and review (moda <noun> --help lists the verbs):
@@ -4858,10 +4925,7 @@ async function runProblemsList(flags, context, command) {
     ...listVersionWarning(params, listVersion),
     ...truncated ? [`--limit=${limit} also capped ${Object.entries(truncated).map(([block, count]) => `${block} (${count} more)`).join(", ")}; raise --limit (max ${PROBLEMS_MAX_LIMIT}) or open dashboard_url for the rest.`] : []
   ];
-  context.output.writeData(withLink, {
-    ...warnings.length > 0 ? { warnings } : {},
-    ...nextCommands.length > 0 ? { nextCommands } : {}
-  });
+  context.output.writeData(withLink, withCohortScope(params.cohort, payload, { warnings, nextCommands }));
 }
 function writeDreamProblemsList(context, params, dream, page) {
   const problems = Array.isArray(dream.problems) ? dream.problems : [];
@@ -4903,7 +4967,7 @@ function writeDreamProblemsList(context, params, dream, page) {
     ...!page.daysGiven && windowHours !== undefined ? [`Counts cover the dream run's window (${windowHours} hours), the dashboard's default range; pass --days-back to choose another.`] : [],
     ...listVersionWarning(params, listVersion)
   ];
-  context.output.writeData(data, { warnings, ...nextCommands.length > 0 ? { nextCommands } : {} });
+  context.output.writeData(data, { warnings, ...withCohortScope(params.cohort, dream, { warnings, nextCommands }) });
 }
 var DREAM_INCIDENTS_DEFAULT_LIMIT = 3;
 async function runDreamProblem(params, context, command) {
@@ -5008,6 +5072,27 @@ function setTraceFilters(query2, params, keys) {
       query2.set(key, String(value));
   }
 }
+function cohortScope(cohort, data) {
+  if (!cohort || cohort === "all")
+    return { warnings: [] };
+  if (asString(asRecord(data)?.cohort) !== cohort) {
+    return {
+      warnings: [`--cohort=${cohort} was sent, but the response does not confirm the cohort scope, so these results may cover every user.`]
+    };
+  }
+  return { line: `Scoped to cohort ${cohort}: only its members' traces count (moda cohorts get ${shellArg(cohort)} shows who is in it).`, warnings: [] };
+}
+function withCohortScope(cohort, data, options = {}) {
+  const scope = cohortScope(cohort, data);
+  const summary = [options.summary, scope.line].filter(Boolean).join(" ");
+  const warnings = [...options.warnings ?? [], ...scope.warnings];
+  const merged = {
+    ...summary ? { summary } : {},
+    ...warnings.length > 0 ? { warnings } : {},
+    ...options.nextCommands && options.nextCommands.length > 0 ? { nextCommands: options.nextCommands } : {}
+  };
+  return Object.keys(merged).length > 0 ? merged : undefined;
+}
 function countingSummary(data) {
   const record = asRecord(data);
   const counting = asString(record?.counting);
@@ -5702,8 +5787,11 @@ async function runCommand(command, positional, flags, positionals = positional ?
     case "clusters": {
       const args = flagsToArgs(flags);
       const params = parseSpecFlags("clusters", args, command);
+      if (params.cohort && params.cohort !== "all" && params.time_range && !CLUSTER_COHORT_TIME_RANGES.includes(params.time_range)) {
+        throw new CliInputError(`--cohort reads the Topics tree windows, so --time-range must be ${CLUSTER_COHORT_TIME_RANGES.join(", ")} (got ${params.time_range}). Nothing was sent.`);
+      }
       if (params.search !== undefined || params.node_id !== undefined) {
-        rejectInapplicableFlags(command, params, ["parent_id", "time_range"], "to a cluster search (--search/--node-id); they page the cluster hierarchy");
+        rejectInapplicableFlags(command, params, params.cohort ? ["parent_id"] : ["parent_id", "time_range"], "to a cluster search (--search/--node-id); they page the cluster hierarchy");
         const query3 = new URLSearchParams;
         if (params.search !== undefined)
           query3.set("q", params.search);
@@ -5713,11 +5801,15 @@ async function runCommand(command, positional, flags, positionals = positional ?
           query3.set("mode", params.mode);
         if (params.limit)
           query3.set("limit", params.limit.toString());
+        if (params.cohort)
+          query3.set("cohort", params.cohort);
+        if (params.cohort && params.time_range)
+          query3.set("time_range", params.time_range);
         const data2 = await callDataAPI(`/task-clusters/search?${query3.toString()}`);
         const record = asRecord(data2) ?? {};
         const matches = Array.isArray(record.matches) ? record.matches : [];
-        const warnings = params.node_id !== undefined && matches.length === 0 ? [`No cluster matched node id "${params.node_id}" for this search. ${NOT_FOUND_HINTS.cluster}`] : [];
-        context.output.writeData(data2, warnings.length > 0 ? { warnings } : undefined);
+        const warnings = params.node_id !== undefined && matches.length === 0 ? [`No cluster matched node id "${params.node_id}" for this search${params.cohort ? " within the cohort" : ""}. ${NOT_FOUND_HINTS.cluster}`] : [];
+        context.output.writeData(data2, withCohortScope(params.cohort, data2, { warnings }));
         break;
       }
       rejectInapplicableFlags(command, params, ["mode", "limit"], "without --search or --node-id; they shape a cluster search");
@@ -5726,9 +5818,11 @@ async function runCommand(command, positional, flags, positionals = positional ?
         query2.set("parent_id", params.parent_id);
       if (params.time_range)
         query2.set("time_range", params.time_range);
+      if (params.cohort)
+        query2.set("cohort", params.cohort);
       const queryString = query2.toString() ? `?${query2.toString()}` : "";
       const data = await callDataAPI(`/clusters${queryString}`);
-      context.output.writeData(data);
+      context.output.writeData(data, withCohortScope(params.cohort, data));
       break;
     }
     case "cluster-traces":
@@ -5775,6 +5869,8 @@ async function runCommand(command, positional, flags, positionals = positional ?
         query2.set("outcome", params.outcome);
       if (params.sort)
         query2.set("sort_by", params.sort);
+      if (params.cohort)
+        query2.set("cohort", params.cohort);
       if (params.limit)
         query2.set("limit", params.limit.toString());
       if (params.offset !== undefined)
@@ -5800,7 +5896,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
         }
       }
       searchWarnings.push(...traceStateWarnings(data));
-      const writeOptions = searchWarnings.length > 0 ? { warnings: searchWarnings } : undefined;
+      const writeOptions = withCohortScope(params.cohort, raw, { warnings: searchWarnings });
       if (params.include_world_state === true) {
         const enriched = asRecord(data) ?? {};
         const list = Array.isArray(enriched.conversations) ? enriched.conversations : [];
@@ -5974,8 +6070,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
         setTraceFilters(query2, params, TRACE_GRAIN_FLAGS.frustrations);
         const data2 = await callDataAPI(`/emotions?${query2.toString()}`);
         const warnings = processingDisabledWarning(data2, "frustration");
-        const summary = countingSummary(data2);
-        context.output.writeData(data2, { ...summary ? { summary } : {}, ...warnings.length > 0 ? { warnings } : {} });
+        context.output.writeData(data2, withCohortScope(params.cohort, data2, { summary: countingSummary(data2), warnings }));
         break;
       }
       if (params.user_id)
@@ -5998,7 +6093,12 @@ async function runCommand(command, positional, flags, positionals = positional ?
     case "tool-failures": {
       const args = flagsToArgs(flags);
       const params = parseSpecFlags("tool-failures", args, command);
-      const queryString = params.days_back ? `?days_back=${params.days_back}` : "";
+      const tfQuery = new URLSearchParams;
+      if (params.days_back)
+        tfQuery.set("days_back", String(params.days_back));
+      if (params.cohort)
+        tfQuery.set("cohort", params.cohort);
+      const queryString = tfQuery.toString() ? `?${tfQuery.toString()}` : "";
       const data = await callDataAPI(`/tool-failures${queryString}`);
       const daysBack = params.days_back ?? 7;
       const failing = (Array.isArray(asRecord(data)?.tools) ? asRecord(data).tools : []).map((row) => asString(asRecord(row)?.tool_name)).filter((name) => Boolean(name)).slice(0, TOOL_FAILURE_CATALOG_LINKS);
@@ -6006,7 +6106,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
         ...index === 0 ? [{ command: toolFailureExamplesCommand(name, daysBack), purpose: `Read failure examples of ${name}, the tool with the most failures.`, mutability: "read", requires_approval: false }] : [],
         { command: toolCatalogGetCommand(name, daysBack), purpose: `Calls, recorded schema, usage over time and failure categories of ${name}.`, mutability: "read", requires_approval: false }
       ]);
-      context.output.writeData(data, nextCommands.length > 0 ? { nextCommands } : undefined);
+      context.output.writeData(data, withCohortScope(params.cohort, data, { nextCommands }));
       break;
     }
     case "tool-catalog": {
@@ -6403,7 +6503,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
       const params = parseSpecFlags("signal", args, command);
       const id = encodeURIComponent(params.id);
       if (params.detections !== true) {
-        rejectInapplicableFlags(command, params, ["days_back", "limit", "offset"], "to the signal summary; they page its hits (--detections)");
+        rejectInapplicableFlags(command, params, ["days_back", "limit", "offset", "cohort"], "to the signal summary; they page its hits (--detections)");
         const data2 = await callDataAPI(`/custom-signals/${id}`);
         context.output.writeData(data2);
         break;
@@ -6415,10 +6515,12 @@ async function runCommand(command, positional, flags, positionals = positional ?
         query2.set("limit", params.limit.toString());
       if (params.offset !== undefined)
         query2.set("offset", params.offset.toString());
+      if (params.cohort)
+        query2.set("cohort", params.cohort);
       const queryString = query2.toString() ? `?${query2.toString()}` : "";
       const data = await callDataAPI(`/custom-signals/${id}/detections${queryString}`);
       const warnings = customSignalProcessingWarning(data, "detections");
-      context.output.writeData(data, warnings.length > 0 ? { warnings } : undefined);
+      context.output.writeData(data, withCohortScope(params.cohort, data, { warnings }));
       break;
     }
     case "trace-signals": {
@@ -6649,8 +6751,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
         setTraceFilters(query2, params, TRACE_GRAIN_FLAGS.emotions);
         const data2 = await callDataAPI(`/emotions?${query2.toString()}`);
         const warnings = processingDisabledWarning(data2, "emotion");
-        const summary2 = countingSummary(data2);
-        context.output.writeData(data2, { ...summary2 ? { summary: summary2 } : {}, ...warnings.length > 0 ? { warnings } : {} });
+        context.output.writeData(data2, withCohortScope(params.cohort, data2, { summary: countingSummary(data2), warnings }));
         break;
       }
       if (params.user_id)
@@ -6690,8 +6791,10 @@ async function runCommand(command, positional, flags, positionals = positional ?
       if (params.family)
         query2.set("family", params.family);
       if (params.conversation_id) {
-        rejectInapplicableFlags(command, params, ["search", "status", "sort", "order"], "to one trace's detections (--conversation-id); they filter and order the trace list");
+        rejectInapplicableFlags(command, params, ["search", "status", "sort", "order", "cohort"], "to one trace's detections (--conversation-id); they filter and order the trace list");
       }
+      if (params.cohort)
+        query2.set("cohort", params.cohort);
       if (params.search)
         query2.set("search", params.search);
       if (params.status)
@@ -6702,8 +6805,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
         query2.set("order", params.order);
       const queryString = query2.toString() ? `?${query2.toString()}` : "";
       const data = await callDataAPI(`/laziness${queryString}`);
-      const summary = countingSummary(data);
-      context.output.writeData(data, summary ? { summary } : undefined);
+      context.output.writeData(data, withCohortScope(params.cohort, data, { summary: countingSummary(data) }));
       break;
     }
     case "hallucinations": {
@@ -6729,8 +6831,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
       }
       const queryString = query2.toString() ? `?${query2.toString()}` : "";
       const data = await callDataAPI(`/hallucinations${queryString}`);
-      const summary = countingSummary(data);
-      context.output.writeData(data, summary ? { summary } : undefined);
+      context.output.writeData(data, withCohortScope(params.cohort, data, { summary: countingSummary(data) }));
       break;
     }
     case "step-scores": {
@@ -6919,7 +7020,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result-and-error",
     handler: async (context) => {
-      const { runInit } = await import("./index-w7v472w4.js");
+      const { runInit } = await import("./index-dtxvvcq2.js");
       if (context.outputMode === "agent-stream") {
         context.output.writeEvent({
           event: "started",
@@ -7233,6 +7334,40 @@ var commandRegistry = createCommandRegistry([
     telemetry: "result-and-error",
     handler: runUserCommand
   },
+  {
+    name: "cohorts",
+    description: NOUN_SUMMARIES.cohorts,
+    examples: [...leavesOf("cohorts").flatMap((leaf) => leaf.examples.slice(0, 1))],
+    subcommands: treeSubcommandHelp("cohorts"),
+    auth: "api-key",
+    outputModes: ["human", "json", "agent"],
+    mutability: "write",
+    validateConfigBeforeRun: false,
+    resetApiRequestCountBeforeRun: false,
+    telemetry: "result-and-error",
+    handler: canonicalNounHandler
+  },
+  ...[
+    ["cohort-list", "Built-in and saved user cohorts", "read"],
+    ["cohort-get", "One cohort: name, definition and revision", "read"],
+    ["cohort-fields", "The fields and operators a cohort definition can use", "read"],
+    ["cohort-preview", "Member count and sample users for an unsaved definition", "read"],
+    ["cohort-compare", "Two cohorts side by side: size, health, top topics, failure mix", "read"],
+    ["cohort-create", "Save a cohort from a definition", "write"],
+    ["cohort-update", "Edit a saved cohort", "write"]
+  ].map(([name, description, mutability]) => ({
+    name,
+    description,
+    examples: [...CANONICAL_LEAVES.find((leaf) => leaf.handler === name)?.examples ?? []],
+    hidden: true,
+    auth: "api-key",
+    outputModes: ["human", "json", "agent"],
+    mutability,
+    validateConfigBeforeRun: false,
+    resetApiRequestCountBeforeRun: false,
+    telemetry: "result-and-error",
+    handler: runCohortCommand
+  })),
   {
     name: "replays",
     description: "Read replay results: sets, run history, per-seed verdicts, and playout transcripts",

package/dist/{doctor-p8sp6cbk.js → doctor-c05njdv8.js}

@@ -3,13 +3,13 @@ import {
   promptsDiscoveredCheck,
   runDoctorCommand,
   runStatusCommand
-} from "./cli-a8nxbtpk.js";
+} from "./cli-srwzar82.js";
 import"./cli-pmzh2qjy.js";
-import"./cli-4tg0hkbz.js";
+import"./cli-he8csgsr.js";
 import"./cli-mm48br00.js";
 import"./cli-xq45etg1.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import"./cli-k4tqwah4.js";

package/dist/{fix-0r974yge.js → fix-aghp304m.js}

@@ -5,7 +5,7 @@ import {
 } from "./cli-daqkdnm1.js";
 import {
   assertFlags
-} from "./cli-f1jfrqgf.js";
+} from "./cli-4sy4tytm.js";
 import {
   callControlAPI
 } from "./cli-0xc5htv7.js";

package/dist/{harness-github-actions-2qc4gg2w.js → harness-github-actions-112503xs.js}

@@ -1,12 +1,12 @@
 import {
   buildSourceSnapshot
-} from "./cli-azage7s0.js";
+} from "./cli-vwpbspr5.js";
 import"./cli-xq45etg1.js";
 import"./cli-97fnztpy.js";
 import"./cli-cesds766.js";
 import"./cli-qpq84eee.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import {
   recordApiRequest

package/dist/{harness-72ejenza.js → harness-vabp33ak.js}

@@ -40,7 +40,7 @@ import {
   writeHarnessAnalyzeResult,
   writeHarnessArtifacts,
   writeHumanProgress
-} from "./cli-azage7s0.js";
+} from "./cli-vwpbspr5.js";
 import"./cli-xq45etg1.js";
 import"./cli-97fnztpy.js";
 import {
@@ -48,7 +48,7 @@ import {
 } from "./cli-cesds766.js";
 import"./cli-qpq84eee.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import"./cli-k4tqwah4.js";

package/dist/{index-w7v472w4.js → index-dtxvvcq2.js}

@@ -1,6 +1,6 @@
 import {
   buildDoctorReport
-} from "./cli-a8nxbtpk.js";
+} from "./cli-srwzar82.js";
 import {
   selectTenantAndCreateKey
 } from "./cli-1z1sx8dg.js";
@@ -20,7 +20,7 @@ import {
 import {
   agentsMdProblem,
   runSkillSync
-} from "./cli-7bn406mt.js";
+} from "./cli-mxfyq5nq.js";
 import"./cli-qm5b1vck.js";
 import {
   detectAgents
@@ -32,7 +32,7 @@ import {
 import {
   initPrompts,
   runPromptSync
-} from "./cli-4tg0hkbz.js";
+} from "./cli-he8csgsr.js";
 import"./cli-mm48br00.js";
 import {
   codingAgentDisplayName,
@@ -46,7 +46,7 @@ import {
   runCodingAgent,
   runHarnessCommand,
   startRemoteAnalyze
-} from "./cli-azage7s0.js";
+} from "./cli-vwpbspr5.js";
 import {
   canonicalText,
   renderInitBanner,
@@ -63,7 +63,7 @@ import"./cli-qpq84eee.js";
 import {
   createCommandContext
 } from "./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import {
   VERSION,

package/dist/{prompt-attribution-3987hhqz.js → prompt-attribution-pbns1ya3.js}

@@ -1,7 +1,7 @@
 import {
   inventoryFiles,
   safePromptEvidencePath
-} from "./cli-azage7s0.js";
+} from "./cli-vwpbspr5.js";
 import"./cli-xq45etg1.js";
 import"./cli-97fnztpy.js";
 import"./cli-cesds766.js";
@@ -9,7 +9,7 @@ import {
   require_typescript
 } from "./cli-qpq84eee.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import"./cli-k4tqwah4.js";

package/dist/prompt-source-mcp.js

@@ -3,7 +3,7 @@ import {
   checkPromptMapping,
   discoverHarnessPromptSources,
   safePromptEvidencePath
-} from "./cli-azage7s0.js";
+} from "./cli-vwpbspr5.js";
 import"./cli-xq45etg1.js";
 import"./cli-97fnztpy.js";
 import"./cli-cesds766.js";
@@ -12,7 +12,7 @@ import {
   inspectPythonSelectors
 } from "./cli-qpq84eee.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import"./cli-k4tqwah4.js";

package/dist/{prompts-ab-gmd10n5d.js → prompts-ab-f5qrvpkt.js}

@@ -23,12 +23,12 @@ import {
   runPromptAb,
   selectProblemCases,
   waitLabel
-} from "./cli-ypqwcf9n.js";
-import"./cli-4tg0hkbz.js";
+} from "./cli-hjm9151g.js";
+import"./cli-he8csgsr.js";
 import"./cli-daqkdnm1.js";
 import"./cli-mm48br00.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import"./cli-k4tqwah4.js";

package/dist/{prompts-propose-q626zmm4.js → prompts-propose-jg2j41wx.js}

@@ -7,12 +7,12 @@ import {
   formatVerdict,
   rerunWithYes,
   resolvePromptArmSpec
-} from "./cli-ypqwcf9n.js";
-import"./cli-4tg0hkbz.js";
+} from "./cli-hjm9151g.js";
+import"./cli-he8csgsr.js";
 import"./cli-daqkdnm1.js";
 import"./cli-mm48br00.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import {
   callControlAPI
 } from "./cli-0xc5htv7.js";

package/dist/{prompts-ysm9ra72.js → prompts-qppk0mhp.js}

@@ -11,12 +11,12 @@ import {
   runPromptSync,
   runPromptsCommand,
   writePromptSyncProgress
-} from "./cli-4tg0hkbz.js";
+} from "./cli-he8csgsr.js";
 import {
   promptSourceHashPayload
 } from "./cli-mm48br00.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import"./cli-k4tqwah4.js";

package/dist/{registry-7xz09ry0.js → registry-8a1940sr.js}

@@ -1,6 +1,6 @@
 import {
   assertFlags
-} from "./cli-f1jfrqgf.js";
+} from "./cli-4sy4tytm.js";
 import {
   callControlAPI
 } from "./cli-0xc5htv7.js";

package/dist/{skills-x6yszxxn.js → skills-sh93b156.js}

@@ -3,12 +3,12 @@ import {
   pullSkills,
   runSkillSync,
   runSkillsCommand
-} from "./cli-7bn406mt.js";
+} from "./cli-mxfyq5nq.js";
 import"./cli-qm5b1vck.js";
 import"./cli-rjav0vj1.js";
 import"./cli-hcwdz9sd.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import"./cli-k4tqwah4.js";

package/dist/{sync-trjzvam9.js → sync-0pp1c8hs.js}

@@ -1,22 +1,22 @@
 import {
   runSkillsCommand
-} from "./cli-7bn406mt.js";
+} from "./cli-mxfyq5nq.js";
 import"./cli-qm5b1vck.js";
 import"./cli-rjav0vj1.js";
 import"./cli-hcwdz9sd.js";
 import {
   runPromptsCommand
-} from "./cli-4tg0hkbz.js";
+} from "./cli-he8csgsr.js";
 import"./cli-mm48br00.js";
 import {
   runHarnessCommand
-} from "./cli-azage7s0.js";
+} from "./cli-vwpbspr5.js";
 import"./cli-xq45etg1.js";
 import"./cli-97fnztpy.js";
 import"./cli-cesds766.js";
 import"./cli-qpq84eee.js";
 import"./cli-xddtv3yn.js";
-import"./cli-f1jfrqgf.js";
+import"./cli-4sy4tytm.js";
 import"./cli-0xc5htv7.js";
 import"./cli-t0pb7qbs.js";
 import {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moda-ai/cli",
-  "version": "1.55.41",
+  "version": "1.55.42",
   "description": "CLI for Moda: production monitoring and evals for AI agents.",
   "type": "module",
   "bin": {

package/skills/integration/index.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "moda.skill_index.v1",
-  "bundled_at": "2026-10-18T02:11:16.441Z",
-  "cli_version": "1.55.41",
+  "bundled_at": "2026-10-18T02:37:16.940Z",
+  "cli_version": "1.55.42",
   "skills": [
     {
       "id": "integration-cloudflare-think",

package/skills/moda-cli/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: moda-cli
-version: 3.0.7
+version: 3.0.8
 description: Investigate a production AI agent with the Moda CLI (`moda`) - find where something happened in real traces (traces search, then traces get), check agent health, rank what to fix (investigate, problems), and dig into tool failures, user frustration, and hallucinations. Also prompt registry sync/promote, replays, custom signals, and false-positive marking. Use when the user mentions Moda, production traces or conversations of their agent, agent failures, or asks what to fix.
 ---
 
@@ -72,6 +72,7 @@ Details: `references/output-protocol.md`.
 | Read one whole trace | `moda traces get <id> --all` (pages of up to 500 messages) | `moda traces spans <id>` for raw spans |
 | Read several traces or turns | `moda traces get <id1>@<msg_index> <id2>@<msg_index> ...` (up to 25; or one per line via `--ids-from=-`) | Same for `moda traces spans <id1> <id2> ...` |
 | One user's experience | `moda users`, `moda user <user_id>` | `moda traces search "<words>" --user-id=<id>` |
+| Is this only hurting <segment> (enterprise, new users, ...)? | `moda cohorts list` (the ref of a built-in or saved cohort), then `moda problems list --sort=users --cohort=<ref>` and the same command without `--cohort` | `moda detections list --family=frustration --cohort=<ref>` vs no `--cohort` (totals count traces); `moda cohorts compare <ref> builtin:power_users` for size, health and failure mix |
 | Topic mix | `moda clusters` | `moda cluster-traces <node_id>` |
 | What the agent believed at a turn | `moda traces state <id> --snapshot --msg-index=<n>` | |
 | A synthesized answer | `moda ask "<question>"` only when the user asks: each call is a paid agent run (up to about 200k tokens) | Exit 3 means degraded |

package/skills/moda-cli/references/commands.md

@@ -54,7 +54,10 @@ Loaded on demand from the moda-cli skill. This table can lag the CLI: `moda <com
 | `moda prompts sync` | Upload changed prompt versions and update lockfile |
 | `moda prompts promote <key>` | Move a remote prompt label |
 | `moda registry template\|validate\|push\|status\|coverage\|log\|show\|prompt` | Register prompts, skills, tools, and agent wiring from one agent-written manifest (`--file`, `--dry-run`, `--live`, `--message`, `--days`); every push is a commit in the Registry history; no repo scan |
-| `moda users` / `moda user <id>` | End users with health/activity (`--page-size=N`, alias `--limit=N`; `--page=N`); one user's profile |
+| `moda users` / `moda user <id>` | End users with health/activity (`--page-size=N`, alias `--limit=N`; `--page=N`; `--cohort=builtin:<key>\|<saved id>`); one user's profile |
+| `moda cohorts list\|get\|fields\|preview\|compare` | User cohorts (built-in and saved): refs and definitions, the definition fields, a member count and sample for an unsaved definition (`--file`/`--definition`), two cohorts side by side (`--days=7\|30\|90`) |
+| `moda cohorts create\|update` | Write: save a cohort (`--name`, `--file`/`--definition`, `--description`, `--pinned`, `--color`) or edit a saved one (`<cohort_id>`, same flags plus `--note`); both take `--dry-run` |
+| `--cohort=<ref>` | Scope `problems list`, `traces list`, `detections list` (emotion/frustration/hallucination per trace, laziness, custom_signal hits), `detections tools` and `clusters` to one cohort (`builtin:<key>` or a saved id from `moda cohorts list`). The summary names the cohort; a warning means the server did not confirm the scope |
 | `moda problems reopen <pid>` | Reopen a Problem marked fixed |
 | `moda signals <create\|update\|activate\|pause\|delete\|examples\|refine\|revise\|proposals\|accept\|reject\|search\|preview>` | Manage custom signals (writes take `--dry-run`; LLM-backed ones are rate-limited per key) |
 | `moda prompts list\|show\|proposals\|usage\|replay-runs\|decide` | Read the prompt registry; merge/reject proposals |

package/skills/moda-cli/references/dashboard-parity.md

@@ -5,7 +5,7 @@ Loaded on demand from the moda-cli skill.
 ### 10. Everything the dashboard does, from the CLI
 
 Every command below needs only an API key, and the tenant comes from the key.
-Writes listed here accept `--dry-run`: it validates the call, prints the exact request (method, endpoint, body) and sends nothing, and its `next_commands` entry is the command that sends it for real (`mutability: write`, `requires_approval: true`). That covers `problems feedback|reopen|link`, `review`, `feedback` and the `signals` writes. `prompts promote|ab|propose` refuse `--dry-run` before sending anything, so run them only when you mean it.
+Writes listed here accept `--dry-run`: it validates the call, prints the exact request (method, endpoint, body) and sends nothing, and its `next_commands` entry is the command that sends it for real (`mutability: write`, `requires_approval: true`). That covers `problems feedback|reopen|link`, `review`, `feedback`, `cohorts create|update` and the `signals` writes. `prompts promote|ab|propose` refuse `--dry-run` before sending anything, so run them only when you mean it.
 
 | Dashboard | CLI |
 |---|---|
@@ -14,7 +14,9 @@ Writes listed here accept `--dry-run`: it validates the call, prints the exact r
 | Traces list: Processed, Use case confidence, Indexed columns | `moda traces` rows: `processing_status`, `error_message`, `membership_score`, `indexed_at`; `moda traces get <id>`: `trace_state` |
 | Signals tabs: per-trace list, filters, sort | `moda detections list --family=<f> --group-by=trace` plus `--trajectory --elicitor --signal --status --search --sort --order` (emotion), `--rule --source` (hallucination) |
 | Settings: which detectors run | `moda overview` → `detectors` (read-only; switching one is dashboard-only) |
-| Users page / user profile | `moda users [--window --cohort --sort --order --health-status]`, `moda user <id>` |
+| Users page / user profile | `moda users [--window --cohort --sort --order --health-status]`, `moda user <id>` (`--cohort` takes `builtin:<key>`, a saved cohort id, or a bare built-in key) |
+| Cohort selector on Problems, Traces, Signals tabs, custom signals, Topics | `--cohort=builtin:<key>\|<saved id>` on `problems list`, `traces list`, `detections list` (emotion, frustration and hallucination read the per-trace list; laziness; custom_signal `--signal-id`), `detections tools`, `clusters` (`--time-range=all\|3d\|7d\|30d`, also with `--search`). Output says which cohort scoped it (summary line and `cohort` in the data). `traces search` has no cohort scope |
+| Cohort builder: list, fields, preview, compare, save, edit | `moda cohorts list [--include-archived]`, `get <ref>`, `fields`, `preview --file=<definition.json>`, `compare <a> <b> [--days=7\|30\|90]`, `create --name --file [--dry-run]`, `update <cohort_id> [--name --file --note] [--dry-run]` (archiving is dashboard-only) |
 | Tool catalog: every tool, its schema and usage | `moda tools list [--sort=calls\|failure_rate\|failures\|traces\|last_seen --search --direction --offset]`, `moda tools get <tool_name>` |
 | Problems list (dream grouping or Book, as the page decides): sort, cohort, page | `moda problems list [--sort=users --cohort=builtin:<key> --offset=N --list-version=V]`; `--view=book\|dream` forces one |
 | Problem page (dream view): severity, incidents with verdicts | `moda problems get <problem_id> --view=dream [--offset=N]` |