@moda-ai/cli 1.55.42 → 1.55.44

package/README.md

@@ -416,7 +416,7 @@ Both commands accept two flags to inline a message window per row:
 | Variable | Required | Default | Description |
 |----------|----------|---------|-------------|
 | `MODA_API_KEY` | Yes | -- | Your Moda API key (`moda_sk_...`) |
-| `MODA_BASE_URL` | No | `https://moda.dev` | Base URL for the Data API |
+| `MODA_BASE_URL` | No | `https://moda.dev` | Base URL for the Data API. A loopback URL needs a non-prod profile (`MODA_PROFILE=local`); on a prod profile commands exit 5 before sending anything |
 
 ## Documentation
 

package/dist/{agent-86hghww1.js → agent-5ax7fqhe.js}

@@ -1,8 +1,8 @@
 import {
   buildDoctorReport
-} from "./cli-srwzar82.js";
-import"./cli-pmzh2qjy.js";
-import"./cli-he8csgsr.js";
+} from "./cli-t4xfvrry.js";
+import"./cli-sejqvvhv.js";
+import"./cli-wwbr5caw.js";
 import"./cli-mm48br00.js";
 import {
   readHarnessSyncState
@@ -15,15 +15,16 @@ import {
   readHarnessReport,
   validateHarnessReport
 } from "./cli-cesds766.js";
-import"./cli-xddtv3yn.js";
-import"./cli-4sy4tytm.js";
-import"./cli-0xc5htv7.js";
+import"./cli-8pcq2et6.js";
+import"./cli-e0kbye4s.js";
+import"./cli-tztzrh6b.js";
+import"./cli-dmm9jm9m.js";
 import {
   resolveApiKey,
   resolveIngestUrl,
   resolveModaBaseUrl,
   resolveTenantId
-} from "./cli-t0pb7qbs.js";
+} from "./cli-e24fjyrb.js";
 import {
   CliInputError
 } from "./cli-k4tqwah4.js";
@@ -94,7 +95,7 @@ async function buildAgentContext(context) {
   const graph = readHarnessGraphIfPresent(context.cwd);
   const reportState = readHarnessReportState(context.cwd);
   const syncState = readHarnessSyncState(context.cwd);
-  const harness = graph ? await import("./harness-vabp33ak.js") : undefined;
+  const harness = graph ? await import("./harness-avynbq4f.js") : undefined;
   const topFindings = doctor.checks.filter((check) => check.status === "fail" || check.status === "warning").slice(0, 12).map(checkToFinding);
   const evidenceRefs = [
     ...doctor.checks.map(checkToEvidenceRef),

package/dist/{cli-daqkdnm1.js → cli-4pc0a18x.js}

@@ -1,6 +1,6 @@
 import {
   callControlAPI
-} from "./cli-0xc5htv7.js";
+} from "./cli-dmm9jm9m.js";
 
 // src/replay-runs.ts
 var DEFAULT_POLL_INTERVAL_MS = 15000;

package/dist/{cli-1z1sx8dg.js → cli-5aa48ry5.js}

@@ -1,10 +1,10 @@
 import {
   fetchApiKeyProbe
-} from "./cli-77ekrx7d.js";
+} from "./cli-xcpwp0gb.js";
 import {
   authFetch,
   getCachedLoginContext
-} from "./cli-pmzh2qjy.js";
+} from "./cli-sejqvvhv.js";
 import {
   embeddedTenantIdFromApiKey,
   getModaDir,
@@ -15,7 +15,7 @@ import {
   resolveTenantIdFromActiveProfile,
   saveCliConfig,
   writeSecretJsonFile
-} from "./cli-t0pb7qbs.js";
+} from "./cli-e24fjyrb.js";
 import {
   CliAccessError,
   CliInputError,
@@ -118,8 +118,9 @@ function bootstrapLabel(custom) {
 }
 var embeddedTenantId = embeddedTenantIdFromApiKey;
 async function isStoredKeyLive(key, options = {}) {
+  const baseUrl = resolveModaBaseUrl(options);
   try {
-    const response = await fetchApiKeyProbe(resolveModaBaseUrl(options), { "x-api-key": key }, VALIDATE_TIMEOUT_MS);
+    const response = await fetchApiKeyProbe(baseUrl, { "x-api-key": key }, VALIDATE_TIMEOUT_MS);
     if (response.status !== 200)
       return false;
     await response.json();

package/dist/{cli-xddtv3yn.js → cli-8pcq2et6.js}

@@ -1,45 +1,7 @@
 import {
   createCliOutput,
   outputModeFromFlags
-} from "./cli-t0pb7qbs.js";
-
-// src/boolean-words.ts
-var BOOLEAN_TRUE_WORDS = new Set(["true", "yes", "1", "on"]);
-var BOOLEAN_FALSE_WORDS = new Set(["false", "no", "0", "off"]);
-function parseBooleanFlagValue(value) {
-  if (typeof value === "boolean")
-    return value;
-  if (typeof value === "number")
-    return value === 1 ? true : value === 0 ? false : undefined;
-  if (typeof value !== "string")
-    return;
-  const text = value.trim().toLowerCase();
-  if (BOOLEAN_TRUE_WORDS.has(text))
-    return true;
-  if (BOOLEAN_FALSE_WORDS.has(text))
-    return false;
-  return;
-}
-function flagValue(flags, name) {
-  return flags[name] ?? flags[name.replace(/-/g, "_")];
-}
-function withoutFlag(flags, name) {
-  const snake = name.replace(/-/g, "_");
-  return Object.fromEntries(Object.entries(flags).filter(([key]) => key !== name && key !== snake));
-}
-function optOutFlagSet(flags, name, strict = true) {
-  const raw = flagValue(flags, name);
-  if (raw === undefined)
-    return false;
-  const value = parseBooleanFlagValue(raw);
-  return strict ? value === true : value !== false;
-}
-function envSwitchedOff(value) {
-  return parseBooleanFlagValue(value) === false;
-}
-function envOptOutSet(value) {
-  return value !== undefined && value.trim() !== "" && parseBooleanFlagValue(value) !== false;
-}
+} from "./cli-e24fjyrb.js";
 
 // src/command-context.ts
 function flagEnabled(flags, key) {
@@ -99,4 +61,4 @@ function createCommandContext(input, options = {}) {
   };
 }
 
-export { parseBooleanFlagValue, withoutFlag, optOutFlagSet, envSwitchedOff, envOptOutSet, stringOption, createCommandContext };
+export { stringOption, createCommandContext };

package/dist/{cli-hjm9151g.js → cli-8pksf2x7.js}

@@ -4,19 +4,19 @@ import {
   parsePromptFileForAb,
   readPromptLock,
   runPromptSync
-} from "./cli-he8csgsr.js";
+} from "./cli-wwbr5caw.js";
 import {
   DEFAULT_POLL_INTERVAL_MS,
   DEFAULT_WAIT_TIMEOUT_MS,
   fetchLatestRun
-} from "./cli-daqkdnm1.js";
+} from "./cli-4pc0a18x.js";
 import {
   UUID_RE
-} from "./cli-4sy4tytm.js";
+} from "./cli-tztzrh6b.js";
 import {
   callControlAPI,
   callDataAPI
-} from "./cli-0xc5htv7.js";
+} from "./cli-dmm9jm9m.js";
 import {
   EXIT_ERROR,
   EXIT_OK,
@@ -24,7 +24,7 @@ import {
   setPlatformTenantOverride,
   shellArg,
   validateConfig
-} from "./cli-t0pb7qbs.js";
+} from "./cli-e24fjyrb.js";
 import {
   CliInputError
 } from "./cli-k4tqwah4.js";

package/dist/{cli-vwpbspr5.js → cli-d4cdczhe.js}

@@ -44,16 +44,16 @@ import {
 import {
   createCommandContext,
   stringOption
-} from "./cli-xddtv3yn.js";
+} from "./cli-8pcq2et6.js";
 import {
   assertFlags,
   assertPositionals,
   requireTenant
-} from "./cli-4sy4tytm.js";
+} from "./cli-tztzrh6b.js";
 import {
   ApiError,
   callControlAPI
-} from "./cli-0xc5htv7.js";
+} from "./cli-dmm9jm9m.js";
 import {
   embeddedTenantIdFromApiKey,
   getActiveProfile,
@@ -63,7 +63,7 @@ import {
   resolveModaBaseUrl,
   resolveTenantId,
   shellArg
-} from "./cli-t0pb7qbs.js";
+} from "./cli-e24fjyrb.js";
 import {
   CliInputError,
   CliInputRequiredError
@@ -14048,7 +14048,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-112503xs.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-gd6vyxb0.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);

package/dist/{cli-0xc5htv7.js → cli-dmm9jm9m.js}

@@ -3,7 +3,7 @@ import {
   recordApiRequest,
   resolveApiKey,
   resolveModaBaseUrl
-} from "./cli-t0pb7qbs.js";
+} from "./cli-e24fjyrb.js";
 
 // src/api-client.ts
 var REQUEST_TIMEOUT_MS = 30000;

package/dist/cli-e0kbye4s.js

@@ -0,0 +1,39 @@
+// src/boolean-words.ts
+var BOOLEAN_TRUE_WORDS = new Set(["true", "yes", "1", "on"]);
+var BOOLEAN_FALSE_WORDS = new Set(["false", "no", "0", "off"]);
+function parseBooleanFlagValue(value) {
+  if (typeof value === "boolean")
+    return value;
+  if (typeof value === "number")
+    return value === 1 ? true : value === 0 ? false : undefined;
+  if (typeof value !== "string")
+    return;
+  const text = value.trim().toLowerCase();
+  if (BOOLEAN_TRUE_WORDS.has(text))
+    return true;
+  if (BOOLEAN_FALSE_WORDS.has(text))
+    return false;
+  return;
+}
+function flagValue(flags, name) {
+  return flags[name] ?? flags[name.replace(/-/g, "_")];
+}
+function withoutFlag(flags, name) {
+  const snake = name.replace(/-/g, "_");
+  return Object.fromEntries(Object.entries(flags).filter(([key]) => key !== name && key !== snake));
+}
+function optOutFlagSet(flags, name, strict = true) {
+  const raw = flagValue(flags, name);
+  if (raw === undefined)
+    return false;
+  const value = parseBooleanFlagValue(raw);
+  return strict ? value === true : value !== false;
+}
+function envSwitchedOff(value) {
+  return parseBooleanFlagValue(value) === false;
+}
+function envOptOutSet(value) {
+  return value !== undefined && value.trim() !== "" && parseBooleanFlagValue(value) !== false;
+}
+
+export { parseBooleanFlagValue, withoutFlag, optOutFlagSet, envSwitchedOff, envOptOutSet };

package/dist/{cli-t0pb7qbs.js → cli-e24fjyrb.js}

@@ -111,8 +111,14 @@ function createDefaultProfiles(options = {}) {
   };
 }
 function isLoopbackHostname(hostname) {
-  const host = hostname.toLowerCase();
-  return host === "localhost" || host === "127.0.0.1" || host === "::1" || host === "[::1]";
+  const host = hostname.toLowerCase().replace(/^\[|\]$/g, "").replace(/\.$/, "");
+  if (host === "localhost" || host.endsWith(".localhost"))
+    return true;
+  if (/^127\.\d{1,3}\.\d{1,3}\.\d{1,3}$/.test(host) || host === "0.0.0.0")
+    return true;
+  if (host === "::1" || host === "::")
+    return true;
+  return /^::ffff:(7f[0-9a-f]{2}:[0-9a-f]{1,4}|127\.\d{1,3}\.\d{1,3}\.\d{1,3})$/.test(host);
 }
 function isLoopbackBaseUrl(url) {
   try {
@@ -287,16 +293,33 @@ function profileBaseUrlOrigin(name, options = {}) {
   return sanitizeProfileBaseUrl(url, environment) === normalizeModaBaseUrl(url) ? "profile" : "default";
 }
 function describeBaseUrlSource(options) {
-  const envBase = optionalString(getEnv(options).MODA_BASE_URL);
-  if (envBase) {
-    const environment = activeProfileEnvironment(options);
-    if (!environmentAllowsLoopback(environment) && isLoopbackBaseUrl(normalizeModaBaseUrl(envBase))) {
-      return `default (env:MODA_BASE_URL loopback ignored for ${environment} profile)`;
-    }
-    return "env:MODA_BASE_URL";
+  const refused = refusedLoopbackBaseUrl(options);
+  if (refused) {
+    return `refused (env:MODA_BASE_URL is loopback and the active profile '${refused.profile}' is ${refused.environment})`;
   }
+  if (optionalString(getEnv(options).MODA_BASE_URL))
+    return "env:MODA_BASE_URL";
   return profileBaseUrlOrigin(options.profile, options);
 }
+function refusedLoopbackBaseUrl(options = {}) {
+  const envBase = optionalString(getEnv(options).MODA_BASE_URL);
+  if (!envBase)
+    return;
+  const url = normalizeModaBaseUrl(envBase);
+  if (!isLoopbackBaseUrl(url))
+    return;
+  let profile;
+  let environment;
+  try {
+    const active = getActiveProfile(options);
+    profile = active.name;
+    environment = active.environment;
+  } catch {
+    profile = optionalString(options.profile) ?? optionalString(getEnv(options).MODA_PROFILE) ?? DEFAULT_PROFILE_NAME;
+    environment = "prod";
+  }
+  return environmentAllowsLoopback(environment) ? undefined : { url, profile, environment };
+}
 function loadProfileConfig(options = {}) {
   const path = getModaPaths(options).profileConfigPath;
   const parsed = safeReadRecord(path);
@@ -471,6 +494,8 @@ function resolveBaseUrlStrict(options = {}) {
   } catch {
     return;
   }
+  if (refusedLoopbackBaseUrl(options))
+    return;
   return resolveBaseUrl(options);
 }
 function resolveIngestUrl(options = {}) {
@@ -600,8 +625,29 @@ function resolveApiTenantId(options = {}) {
   return (apiKey ? embeddedTenantIdFromApiKey(apiKey) : undefined) || resolveTenantId(options);
 }
 function resolveModaBaseUrl(options = {}) {
+  const refused = refusedLoopbackBaseUrl(options);
+  if (refused)
+    throw refusedBaseUrlError(refused);
   return resolveBaseUrl(options) || PROD_BASE_URL;
 }
+function describeModaBaseUrl(options = {}) {
+  const refused = refusedLoopbackBaseUrl(options);
+  return refused ? { url: refused.url, refused } : { url: resolveBaseUrl(options) || PROD_BASE_URL };
+}
+function refusedBaseUrlMessage(refused) {
+  return `MODA_BASE_URL=${refused.url} is a loopback URL, and the active profile '${refused.profile}' is a ${refused.environment} profile. ` + "The CLI does not send a prod profile's credentials to a loopback server, and does not send requests meant for it to production instead.";
+}
+function refusedBaseUrlError(refused) {
+  return new CliInputRequiredError(`${refusedBaseUrlMessage(refused)} Nothing was sent.`, {
+    id: "moda_base_url_refused",
+    question: `Target the local stack at ${refused.url} with the local profile, or production with MODA_BASE_URL unset?`,
+    kind: "select",
+    choices: [
+      { value: "local", label: `Use the local profile for ${refused.url}`, resume_flags: ["--profile=local"] },
+      { value: "production", label: "Use production: unset MODA_BASE_URL and re-run unchanged", resume_flags: [] }
+    ]
+  }, "Re-run with --profile=local (or MODA_PROFILE=local) to use the local stack, or unset MODA_BASE_URL to use production.");
+}
 function resolveModaBaseUrlStrict(options = {}) {
   return resolveBaseUrlStrict(options);
 }
@@ -660,6 +706,64 @@ function shellArg(value) {
   return `'${value.replace(/'/g, `'\\''`)}'`;
 }
 
+// src/api-access-errors.ts
+var MESSAGE_PATTERNS = [
+  [/unknown or deleted tenant|does not exist or is not accessible/i, "tenant_not_found"],
+  [/pinned to another tenant|cannot select another/i, "tenant_not_accessible"],
+  [/does not match the tenant in the url/i, "tenant_mismatch"],
+  [/api key is read-only/i, "read_only_key"]
+];
+var REASONS = new Set(MESSAGE_PATTERNS.map(([, reason]) => reason));
+function apiForbiddenReason(code, message) {
+  if (code && REASONS.has(code))
+    return code;
+  if (!message)
+    return;
+  return MESSAGE_PATTERNS.find(([pattern]) => pattern.test(message))?.[1];
+}
+function errorBodyFields(body) {
+  if (typeof body !== "string" || !body.trimStart().startsWith("{"))
+    return {};
+  try {
+    const parsed = JSON.parse(body);
+    return {
+      ...typeof parsed.code === "string" ? { code: parsed.code } : {},
+      ...typeof parsed.message === "string" ? { message: parsed.message } : {}
+    };
+  } catch {
+    return {};
+  }
+}
+function apiForbiddenError(reason, serverMessage) {
+  const server = serverMessage?.trim().replace(/\.$/, "");
+  switch (reason) {
+    case "tenant_not_found":
+      return {
+        code: "not_found",
+        message: server && /does not exist/i.test(server) ? `${server} (HTTP 403).` : "The tenant this request names does not exist or is not accessible to this API key (HTTP 403).",
+        cause: "The tenant id comes from MODA_TENANT_ID (or --tenant-id). No tenant has that id, or it was deleted. " + "Set it to a tenant id from the dashboard URL or from `moda auth whoami` with a browser session, then retry."
+      };
+    case "tenant_not_accessible":
+      return {
+        code: "access_denied",
+        message: `The Moda API refused this request (HTTP 403): ${server ?? "this API key cannot act on the tenant requested"}.`,
+        cause: "This key acts on one tenant only. Unset MODA_TENANT_ID (and drop --tenant-id) so it acts on its own tenant, " + "or use a key for the tenant you want. With MODA_TENANT_ID unset, `moda auth whoami` shows the key's tenant."
+      };
+    case "tenant_mismatch":
+      return {
+        code: "access_denied",
+        message: `The Moda API refused this request (HTTP 403): ${server ?? "the tenant header does not match the tenant in the URL"}.`,
+        cause: "MODA_TENANT_ID names a different tenant than this command. Make them the same tenant, or unset MODA_TENANT_ID."
+      };
+    case "read_only_key":
+      return {
+        code: "access_denied",
+        message: `The Moda API refused this request (HTTP 403): ${server ?? "this API key is read-only"}.`,
+        cause: "This key is read-only: it can run reads but not writes. Run this command with a full-access key."
+      };
+  }
+}
+
 // src/legacy-names.ts
 var LEGACY_NAMES = [
   { legacy: "conversations", use: "moda traces list", canonical: { command: "traces", subcommand: "list" }, silent: true },
@@ -1613,6 +1717,10 @@ function errorToAgentError(error) {
       };
     }
     if (apiErrorStatus(error) === 403) {
+      const body = errorBodyFields(error.responseBody);
+      const reason = apiForbiddenReason(body.code, body.message);
+      if (reason)
+        return { ...apiForbiddenError(reason, body.message), blocking: true };
       return {
         code: "access_denied",
         message: `The Moda API refused this request (HTTP 403): ${serverErrorMessage(error) ?? "the API key does not allow it"}.`,
@@ -2187,4 +2295,4 @@ function extractSuggestedCommands(text) {
   return commands.length > 0 ? commands : undefined;
 }
 
-export { PROD_BASE_URL, DEFAULT_INGEST_URL, getModaPaths, getModaDir, isLoopbackBaseUrl, describeBaseUrlSource, loadProfileConfig, saveProfileConfig, getActiveProfile, setActiveProfile, upsertProfile, clearStoredApiKeyCredentials, secretFilePathFromRef, resolveSecretReference, resolveApiKeyFromActiveProfile, resolveTenantIdFromActiveProfile, ensureSecretFilePermissions, writeSecretJsonFile, VERSION, MODA_BASE_URL, loadCliConfig, saveCliConfig, resolveApiKey, embeddedTenantIdFromApiKey, resolveIngestUrl2 as resolveIngestUrl, resolveTenantId, resolveApiTenantId, resolveModaBaseUrl, resolveModaBaseUrlStrict, validateConfig, isPlatformApiKey, setPlatformTenantOverride, apiKeyHeaders, recordApiRequest, getApiRequestCount, resetApiRequestCount, shellArg, LEGACY_NAMES, canonicalCommandText, setAgentUpdateNotice, EXIT_OK, EXIT_ERROR, EXIT_DEGRADED, EXIT_AUTH_REQUIRED, EXIT_INPUT_REQUIRED, EXIT_CANCELLED, AGENT_ERROR_CODES, wasOutputCancelled, safeWriteStdout, safeWriteStderr, explicitOutputMode, outputModeFromFlags, resolveOutputMode, createCliOutput, agentEnvelopeFits, errorToAgentError, agentMaxOutputBytes, continuationCommand };
+export { PROD_BASE_URL, DEFAULT_INGEST_URL, getModaPaths, getModaDir, isLoopbackBaseUrl, describeBaseUrlSource, loadProfileConfig, saveProfileConfig, getActiveProfile, setActiveProfile, upsertProfile, clearStoredApiKeyCredentials, secretFilePathFromRef, resolveSecretReference, resolveApiKeyFromActiveProfile, resolveTenantIdFromActiveProfile, ensureSecretFilePermissions, writeSecretJsonFile, VERSION, MODA_BASE_URL, loadCliConfig, saveCliConfig, resolveApiKey, embeddedTenantIdFromApiKey, resolveIngestUrl2 as resolveIngestUrl, resolveTenantId, resolveApiTenantId, resolveModaBaseUrl, describeModaBaseUrl, refusedBaseUrlMessage, resolveModaBaseUrlStrict, validateConfig, isPlatformApiKey, setPlatformTenantOverride, apiKeyHeaders, recordApiRequest, getApiRequestCount, resetApiRequestCount, shellArg, apiForbiddenReason, errorBodyFields, apiForbiddenError, LEGACY_NAMES, canonicalCommandText, setAgentUpdateNotice, EXIT_OK, EXIT_ERROR, EXIT_DEGRADED, EXIT_AUTH_REQUIRED, EXIT_INPUT_REQUIRED, EXIT_CANCELLED, AGENT_ERROR_CODES, wasOutputCancelled, safeWriteStdout, safeWriteStderr, explicitOutputMode, outputModeFromFlags, resolveOutputMode, createCliOutput, agentEnvelopeFits, errorToAgentError, agentMaxOutputBytes, continuationCommand };

package/dist/{cli-gt3yq1y5.js → cli-k2ka2kjb.js}

@@ -1,6 +1,12 @@
+import {
+  parseBooleanFlagValue
+} from "./cli-e0kbye4s.js";
+import {
+  callDataAPI
+} from "./cli-dmm9jm9m.js";
 import {
   shellArg
-} from "./cli-t0pb7qbs.js";
+} from "./cli-e24fjyrb.js";
 import {
   CliInputError
 } from "./cli-k4tqwah4.js";
@@ -533,6 +539,182 @@ function shapeToolCatalogDetail(response, opts) {
   };
 }
 
+// src/trends.ts
+var OVERVIEW_TREND_FLAGS = ["compare", "series", "since", "until", "agent-name", "unit"];
+function flagOn(value) {
+  return value !== undefined && parseBooleanFlagValue(value) !== false;
+}
+function overviewTrendsQuery(flags, daysBack) {
+  const wanted = OVERVIEW_TREND_FLAGS.some((name) => name === "compare" || name === "series" ? flagOn(flags[name]) : flags[name] !== undefined);
+  if (!wanted)
+    return null;
+  if (flags.raw !== undefined && flagOn(flags.raw)) {
+    throw new CliInputError("--raw prints the /overview payload only; it cannot be combined with --compare, --series, --since, --until, --agent-name or --unit.", "Drop --raw to get the briefing with its trends block. Nothing was sent.", "flag_conflict");
+  }
+  const query = new URLSearchParams;
+  if (flags.since !== undefined) {
+    if (flags["days-back"] !== undefined) {
+      throw new CliInputError("Pass --days-back or --since/--until, not both: --since sets the trends window and the previous window is the same span before it.", "Example: moda overview --compare --since=2026-10-17T14:00:00Z (after the deploy against the same span before it). Nothing was sent.", "flag_conflict");
+    }
+    query.set("since", flags.since);
+    if (flags.until !== undefined)
+      query.set("until", flags.until);
+  } else if (flags.until !== undefined) {
+    throw new CliInputError("--until needs --since: the trends window runs from --since to --until (default now).", "Example: moda overview --compare --since=2026-10-10 --until=2026-10-12. Nothing was sent.", "missing_value:since");
+  } else {
+    query.set("days_back", String(daysBack));
+  }
+  if (flags["agent-name"] !== undefined)
+    query.set("agent", flags["agent-name"]);
+  if (flags.unit !== undefined)
+    query.set("unit", flags.unit);
+  if (flagOn(flags.series))
+    query.set("series", "1");
+  return query;
+}
+var TRENDS_TIMEOUT_MS = 90000;
+async function loadTrends(query) {
+  const data = await callDataAPI(`/trends?${query.toString()}`, { method: "GET" }, { timeoutMs: TRENDS_TIMEOUT_MS, retries: 0 });
+  return asRecord(data) ?? {};
+}
+var HANDLER_FAMILY = {
+  emotions: "emotion",
+  frustrations: "frustration",
+  laziness: "laziness",
+  hallucinations: "hallucination",
+  "tool-failures": "tool_failure"
+};
+function assertCompareScope(handler, params) {
+  const family = HANDLER_FAMILY[handler];
+  if (!family)
+    throw new CliInputError(`--compare is not available for '${handler}'.`);
+  const scoped = ["user_id", "conversation_id", "conversation_ids", "ids_from", "cohort"].filter((key) => params[key] !== undefined);
+  if (scoped.length > 0) {
+    const names = scoped.map((key) => `--${key.replace(/_/g, "-")}`).join(", ");
+    throw new CliInputError(`--compare covers the whole workspace for this family, so it cannot be combined with ${names}.`, `Drop ${names} to compare the family, or drop --compare to keep the scoped read. Nothing was sent.`, "flag_conflict");
+  }
+  return family;
+}
+async function loadFamilyCompare(handler, params) {
+  const family = assertCompareScope(handler, params);
+  const query = new URLSearchParams({
+    days_back: String(params.days_back ?? 7),
+    include: "detectors,rates",
+    family: params.family && (family === "emotion" || family === "laziness") ? `${family}:${params.family}` : family
+  });
+  const trends = await loadTrends(query);
+  const window = asRecord(trends.window) ?? {};
+  const detectors = asRecord(trends.detectors) ?? {};
+  const rates = asRecord(trends.rates) ?? {};
+  const rateKey = Object.keys(rates).find((key) => key.endsWith("_pct"));
+  return {
+    window: { from: window.from, to: window.to, previous_from: window.previous_from, previous_to: window.previous_to },
+    kpis: detectors[family] ?? detectors[Object.keys(detectors)[0] ?? ""] ?? null,
+    ...rateKey ? { rate: { unit: rates.unit, ...asRecord(rates[rateKey]) } } : {},
+    note: "Dashboard KPI tiles for the family in this window against the previous window of equal length " + "(delta = current - previous; delta_pct = relative change). List filters other than the family do not apply here.",
+    ...Array.isArray(trends.notes) && trends.notes.length > 0 ? { notes: trends.notes } : {}
+  };
+}
+function withSummaryCompare(data, compare) {
+  if (!compare)
+    return data;
+  const record = asRecord(data);
+  if (!record)
+    return data;
+  return { ...record, summary: { ...asRecord(record.summary) ?? {}, compare } };
+}
+function signed(value, suffix = "") {
+  if (value === null)
+    return "n/a";
+  return `${value > 0 ? "+" : ""}${value}${suffix}`;
+}
+function compareText(value, isRate) {
+  const c = asRecord(value);
+  if (!c)
+    return "n/a";
+  const current = asNumber(c.current);
+  const previous = asNumber(c.previous);
+  const unit = isRate ? "%" : "";
+  const delta = signed(asNumber(c.delta), isRate ? " pts" : "");
+  const pct = asNumber(c.delta_pct);
+  return `${current === null ? "n/a" : `${current}${unit}`} (was ${previous === null ? "n/a" : `${previous}${unit}`}; ${delta}${pct === null ? "" : `, ${signed(pct, "%")}`})${c.spike === true ? " SPIKE" : ""}`;
+}
+function renderTrendsHuman(trends) {
+  const lines = [];
+  const window = asRecord(trends.window) ?? {};
+  lines.push(`Trends      ${asString(window.from) ?? "?"} to ${asString(window.to) ?? "?"} against ${asString(window.previous_from) ?? "?"} to ${asString(window.previous_to) ?? "?"}`);
+  const agent = asRecord(trends.agent);
+  if (agent && agent.selected !== "__all__")
+    lines.push(`  Agent             ${String(agent.label ?? agent.selected)}`);
+  const sections = [
+    ["Overview", asRecord(trends.overview)],
+    ["Problems", asRecord(trends.problems)],
+    [`Rates per ${asString(asRecord(trends.rates)?.unit) ?? "unit"}`, asRecord(trends.rates)]
+  ];
+  for (const [title, section] of sections) {
+    if (!section)
+      continue;
+    lines.push(`  ${title}`);
+    for (const [key, value] of Object.entries(section)) {
+      if (!asRecord(value) || !("current" in value))
+        continue;
+      lines.push(`    ${key.padEnd(26)} ${compareText(value, key.endsWith("_pct"))}`);
+    }
+  }
+  const detectors = asRecord(trends.detectors);
+  for (const [family, block] of Object.entries(detectors ?? {})) {
+    lines.push(`  Detector ${family}`);
+    for (const [key, value] of Object.entries(asRecord(block) ?? {})) {
+      if (!asRecord(value) || !("current" in value))
+        continue;
+      lines.push(`    ${key.padEnd(26)} ${compareText(value, key.endsWith("_pct"))}`);
+    }
+  }
+  const series = asRecord(trends.series);
+  if (series) {
+    const names = Object.keys(series).filter((key) => key !== "bucket");
+    lines.push(`  Series per ${asString(series.bucket) ?? "bucket"}: ${names.join(", ")} (use --json for the points)`);
+  }
+  for (const note of Array.isArray(trends.notes) ? trends.notes : [])
+    lines.push(`  Note: ${String(note)}`);
+  return lines;
+}
+function trendsSummaryText(trends) {
+  const overview = asRecord(trends.overview);
+  if (!overview)
+    return null;
+  const parts = [];
+  const label = {
+    conversations: "traces",
+    negative_emotion_rate_pct: "negative emotion",
+    tool_failure_rate_pct: "failed tool calls",
+    ungrounded_rate_pct: "ungrounded claims"
+  };
+  for (const [key, name] of Object.entries(label)) {
+    const c = asRecord(overview[key]);
+    if (!c)
+      continue;
+    const isRate = key.endsWith("_pct");
+    const current = asNumber(c.current);
+    if (current === null)
+      continue;
+    const pct = asNumber(c.delta_pct);
+    parts.push(`${name} ${current}${isRate ? "%" : ""} (${isRate ? signed(asNumber(c.delta), " pts") : signed(pct, "%")})`);
+  }
+  return parts.length > 0 ? `Against the previous window of equal length: ${parts.join(", ")}.` : null;
+}
+function problemTrendSummary(data) {
+  const record = asRecord(data) ?? {};
+  const days = asNumber(record.days_back) ?? 30;
+  const incidents = asRecord(asRecord(record.compare)?.incidents);
+  const lastSeen = asString(record.last_seen);
+  const seen = lastSeen ? ` Last incident on ${lastSeen}.` : " No incident on record.";
+  if (!incidents) {
+    return `Incidents per day for the last ${days} day(s); no previous window to compare (the history keeps 90 days).${seen}`;
+  }
+  return `Incidents in the last ${days} day(s): ${compareText(incidents, false)} against the ${days} day(s) before.${seen}`;
+}
+
 // src/intelligence-schema.ts
 var INTELLIGENCE_SCHEMA_VERSION = "moda.intelligence.v1";
 var provenanceSchema = { type: "string", enum: ["measured", "inferred"] };
@@ -676,4 +858,4 @@ var MODA_INTELLIGENCE_V1_JSON_SCHEMA = {
   }
 };
 
-export { BATCH_MAX_TARGETS, BATCH_CONCURRENCY, parseBatchTarget, parseTargetLines, readIdsFrom, collectBatchTargets, mapWithConcurrency, contextTarget, asRecord, asString, asNumber, frustrationAnchorIndex, frustrationsFromEmotions, withFrustrationAnchors, trimToolFailureConversations, withToolFailureAnchors, embeddedWindowSize, withoutDetectionWindows, compactProblemDossier, toolFailureExamplesCommand, toolCatalogGetCommand, shapeToolCatalogDetail, INTELLIGENCE_SCHEMA_VERSION, MODA_INTELLIGENCE_V1_JSON_SCHEMA };
+export { BATCH_MAX_TARGETS, BATCH_CONCURRENCY, parseBatchTarget, parseTargetLines, readIdsFrom, collectBatchTargets, mapWithConcurrency, contextTarget, asRecord, asString, asNumber, frustrationAnchorIndex, frustrationsFromEmotions, withFrustrationAnchors, trimToolFailureConversations, withToolFailureAnchors, embeddedWindowSize, withoutDetectionWindows, compactProblemDossier, toolFailureExamplesCommand, toolCatalogGetCommand, shapeToolCatalogDetail, overviewTrendsQuery, loadTrends, assertCompareScope, loadFamilyCompare, withSummaryCompare, renderTrendsHuman, trendsSummaryText, problemTrendSummary, INTELLIGENCE_SCHEMA_VERSION, MODA_INTELLIGENCE_V1_JSON_SCHEMA };