@moda-ai/cli 1.55.42 → 1.55.44

package/dist/{cli-pmzh2qjy.js → cli-sejqvvhv.js}

@@ -6,7 +6,7 @@ import {
   saveProfileConfig,
   secretFilePathFromRef,
   writeSecretJsonFile
-} from "./cli-t0pb7qbs.js";
+} from "./cli-e24fjyrb.js";
 import {
   CliAuthError,
   CliInputError
@@ -345,10 +345,11 @@ async function connectWithCode(code, options = {}) {
   if (!CONNECT_CODE_RE.test(code)) {
     throw new ConnectCodeError("That is not a Moda sign-in code. Copy the command from the Moda onboarding page again.", "rejected");
   }
+  const baseUrl = resolveModaBaseUrl(options);
   let response;
   try {
     recordApiRequest();
-    response = await fetch(`${resolveModaBaseUrl(options)}/api/cli/auth/connect`, {
+    response = await fetch(`${baseUrl}/api/cli/auth/connect`, {
       method: "POST",
       headers: { "Content-Type": "application/json" },
       body: JSON.stringify({ code, label: hostname(), ...options.tenantId ? { tenant_id: options.tenantId } : {} }),
@@ -452,6 +453,13 @@ async function login(screen = "login", options = {}) {
       reject(new CliInputError(`Moda profile '${targetProfile}' does not exist.`, 'Create it with "moda profiles create <name>" or check "moda profiles list".'));
       return;
     }
+    let baseUrl;
+    try {
+      baseUrl = resolveModaBaseUrl(storageOptions);
+    } catch (err) {
+      reject(err);
+      return;
+    }
     const server = createServer(async (req, res) => {
       if (settled) {
         res.writeHead(410, { Connection: "close" });
@@ -480,7 +488,7 @@ async function login(screen = "login", options = {}) {
             try {
               const cliToken = await exchangeCodeForSession(code);
               res.writeHead(302, {
-                Location: `${resolveModaBaseUrl(storageOptions)}/auth/cli/done?status=success`,
+                Location: `${baseUrl}/auth/cli/done?status=success`,
                 Connection: "close"
               });
               res.end(() => {
@@ -490,7 +498,7 @@ async function login(screen = "login", options = {}) {
               exchangeInFlight = false;
               const error2 = err instanceof Error ? err : new Error(String(err));
               res.writeHead(302, {
-                Location: `${resolveModaBaseUrl(storageOptions)}/auth/cli/done?status=error&reason=${exchangeFailureReason(err)}`,
+                Location: `${baseUrl}/auth/cli/done?status=error&reason=${exchangeFailureReason(err)}`,
                 Connection: "close"
               });
               res.end(() => {
@@ -598,7 +606,7 @@ async function login(screen = "login", options = {}) {
       let response;
       try {
         recordApiRequest();
-        response = await fetch(`${resolveModaBaseUrl(storageOptions)}/api/cli/auth/exchange`, {
+        response = await fetch(`${baseUrl}/api/cli/auth/exchange`, {
           method: "POST",
           headers: { "Content-Type": "application/json" },
           body: JSON.stringify({
@@ -762,7 +770,7 @@ async function login(screen = "login", options = {}) {
       if (address && typeof address === "object") {
         localPort = address.port;
       }
-      const authUrl = `${resolveModaBaseUrl(storageOptions)}/auth/cli?port=${localPort}&screen=${screen}&state=${state}&code_challenge=${codeChallenge}&challenge_method=S256`;
+      const authUrl = `${baseUrl}/auth/cli?port=${localPort}&screen=${screen}&state=${state}&code_challenge=${codeChallenge}&challenge_method=S256`;
       attachPromptInput();
       try {
         await (options.openUrl ?? openAuthUrl)(authUrl);

package/dist/{cli-srwzar82.js → cli-t4xfvrry.js}

@@ -1,10 +1,10 @@
 import {
   isAuthSessionValid,
   loadAuthSession
-} from "./cli-pmzh2qjy.js";
+} from "./cli-sejqvvhv.js";
 import {
   inspectPromptManifest
-} from "./cli-he8csgsr.js";
+} from "./cli-wwbr5caw.js";
 import {
   readHarnessSyncState,
   renderDoctorHuman,
@@ -12,21 +12,22 @@ import {
 } from "./cli-xq45etg1.js";
 import {
   callDataAPI
-} from "./cli-0xc5htv7.js";
+} from "./cli-dmm9jm9m.js";
 import {
+  describeModaBaseUrl,
   ensureSecretFilePermissions,
   getActiveProfile,
   getModaPaths,
   isLoopbackBaseUrl,
   loadProfileConfig,
   recordApiRequest,
+  refusedBaseUrlMessage,
   resolveApiKey,
   resolveIngestUrl,
-  resolveModaBaseUrl,
   resolveSecretReference,
   resolveTenantId,
   secretFilePathFromRef
-} from "./cli-t0pb7qbs.js";
+} from "./cli-e24fjyrb.js";
 import {
   __require
 } from "./cli-0v6na3yp.js";
@@ -65,7 +66,7 @@ async function runStatusCommand(context) {
     },
     workspace: {
       tenantId: resolveTenantId() ?? null,
-      baseUrl: resolveModaBaseUrl(),
+      baseUrl: describeModaBaseUrl().url,
       ingestUrl: resolveIngestUrl()
     },
     dataFlow: checkStatus(report.checks, "cloud_data_flow"),
@@ -102,7 +103,8 @@ async function buildDoctorReport(context, options) {
   const profileOptions = { profile: context.profile, env: context.env };
   const apiKey = resolveApiKey(profileOptions);
   const tenantId = resolveTenantId(profileOptions);
-  const baseUrl = resolveModaBaseUrl(profileOptions);
+  const base = describeModaBaseUrl(profileOptions);
+  const baseUrl = base.url;
   const ingestUrl = resolveIngestUrl(profileOptions);
   checks.push({
     id: "active_profile_resolves",
@@ -157,6 +159,8 @@ async function buildDoctorReport(context, options) {
   checks.push(urlCheck("base_url_valid", "config", "Base URL is valid", baseUrl));
   checks.push(urlCheck("ingest_url_valid", "config", "Ingest URL is valid", ingestUrl));
   checks.push(localBaseUrlCheck(activeProfile.environment, baseUrl));
+  if (base.refused)
+    checks.push(refusedBaseUrlCheck(base.refused));
   const manifestPath = join(context.cwd, ".moda", "harness.json");
   const manifestExists = existsSync(manifestPath);
   checks.push({
@@ -183,8 +187,8 @@ async function buildDoctorReport(context, options) {
     "__tests__"
   ]));
   checks.push(validationEventPathCheck(ingestUrl));
-  if (options.offline || !apiKey) {
-    checks.push(...offlineCloudChecks(options.offline));
+  if (options.offline || !apiKey || base.refused) {
+    checks.push(...offlineCloudChecks(options.offline, Boolean(base.refused)));
   } else {
     checks.push(...await cloudDataFlowChecks(ingestUrl, apiKey));
   }
@@ -278,6 +282,21 @@ function secretPermissionCheck(path) {
     remediation: permission.secure ? undefined : "Restrict secret file permissions to the current user."
   };
 }
+function refusedBaseUrlCheck(refused) {
+  return {
+    id: "base_url_not_refused",
+    group: "config",
+    title: "Base URL is usable with the active profile",
+    status: "fail",
+    severity: "critical",
+    evidence: [
+      { label: "MODA_BASE_URL", value: refused.url },
+      { label: "profile", value: `${refused.profile} (${refused.environment})` }
+    ],
+    remediation: `${refusedBaseUrlMessage(refused)} Re-run with --profile=local (or MODA_PROFILE=local) for the local stack, or unset MODA_BASE_URL for production.`,
+    nextCommand: "moda status --profile=local"
+  };
+}
 function urlCheck(id, group, title, value) {
   let valid = false;
   try {
@@ -376,7 +395,7 @@ async function harnessCurrentCheck(cwd, manifestPath, manifestExists, tenantId)
     };
   }
   try {
-    const { scanHarness } = await import("./harness-vabp33ak.js");
+    const { scanHarness } = await import("./harness-avynbq4f.js");
     const current = scanHarness({
       rootDir: cwd,
       scannerVersion: "doctor",
@@ -515,11 +534,11 @@ function validationEventPathCheck(ingestUrl) {
     evidence: [{ label: "path", value: `${ingestUrl.replace(/\/+$/, "")}/v1/otel/validation` }]
   };
 }
-function offlineCloudChecks(isOffline) {
-  const status = isOffline ? "skipped" : "warning";
-  const evidence = [{ label: "mode", value: isOffline ? "offline" : "missing api key" }];
-  const remediation = isOffline ? "Rerun without --offline to check Moda Cloud." : "Configure an API key before checking cloud data flow.";
-  const nextCommand = isOffline ? "moda doctor --online" : "moda init";
+function offlineCloudChecks(isOffline, refused = false) {
+  const status = isOffline || refused ? "skipped" : "warning";
+  const evidence = [{ label: "mode", value: refused ? "base url refused" : isOffline ? "offline" : "missing api key" }];
+  const remediation = refused ? "Fix the refused MODA_BASE_URL (see base_url_not_refused) before checking Moda Cloud." : isOffline ? "Rerun without --offline to check Moda Cloud." : "Configure an API key before checking cloud data flow.";
+  const nextCommand = refused ? "moda doctor --online --profile=local" : isOffline ? "moda doctor --online" : "moda init";
   return [
     {
       id: "cloud_api_reachable",

package/dist/{cli-4sy4tytm.js → cli-tztzrh6b.js}

@@ -2,7 +2,7 @@ import {
   ApiError,
   callControlAPI,
   callDataAPI
-} from "./cli-0xc5htv7.js";
+} from "./cli-dmm9jm9m.js";
 import {
   continuationCommand,
   embeddedTenantIdFromApiKey,
@@ -11,7 +11,7 @@ import {
   resolveApiTenantId,
   setPlatformTenantOverride,
   shellArg
-} from "./cli-t0pb7qbs.js";
+} from "./cli-e24fjyrb.js";
 import {
   CliAccessError,
   CliInputError
@@ -40,8 +40,16 @@ var COHORT_REF = /^(all|builtin:[a-z_]{1,64}|[a-z_]{1,64}|[0-9a-fA-F]{8}-[0-9a-f
 var COHORT_REF_MESSAGE = "must be builtin:<key> or a saved cohort id (see moda cohorts list)";
 var cohortFlag = (description) => z.string().regex(COHORT_REF, COHORT_REF_MESSAGE).optional().describe(description);
 var CLUSTER_COHORT_TIME_RANGES = ["all", "3d", "7d", "30d"];
+var TREND_UNITS = ["conversation", "segment", "turn"];
+var compareFlag = () => boolFlag().describe("Add summary.compare: the dashboard KPI tiles and rate for this window against the previous window of equal length");
 var OverviewSchema = z.object({
-  days_back: daysBackFlag(7)
+  days_back: daysBackFlag(7),
+  compare: boolFlag().describe("Add trends: overview KPIs, per-unit rates and each detector family, against the previous window of equal length"),
+  series: boolFlag().describe("Add trends.series: [bucket, value] per hour (windows up to 2 days) or per day"),
+  since: isoBoundFlag().describe("Trends window start (ISO date or datetime, UTC unless an offset is given); the previous window is the same span before it"),
+  until: isoBoundFlag().describe("Trends window end, inclusive (default now); needs --since"),
+  agent_name: z.string().trim().min(1).max(200).optional().describe("Scope the trends overview KPIs to one sub-agent (the Analytics agent selector; names are in trends.agent.options)"),
+  unit: z.enum(TREND_UNITS).optional().describe("Denominator of trends.rates (default conversation)")
 });
 var ClustersSchema = z.object({
   parent_id: z.string().optional().describe("List the children of this cluster node"),
@@ -143,6 +151,7 @@ var conversationIdsFlag = () => z.string().min(1).max(MAX_CONVERSATION_IDS_FILTE
 var idsFromFilterFlag = () => z.string().min(1).optional().describe(`Read the trace IDs to scope to from a file, or - for stdin, one per line (up to ${MAX_CONVERSATION_IDS_FILTER})`);
 var FrustrationsSchema = z.object({
   days_back: daysBackFlag(7),
+  compare: compareFlag(),
   limit: z.number().int().min(1).max(20).default(10).optional().describe("Maximum detections to return"),
   offset: z.number().int().min(0).default(0).optional().describe("Number of detections to skip"),
   include_window: boolFlag().describe("Attach the surrounding messages to each detection (agent output omits them by default)"),
@@ -155,7 +164,8 @@ var FrustrationsSchema = z.object({
 });
 var ToolFailuresSchema = z.object({
   days_back: daysBackFlag(7),
-  cohort: cohortFlag("The dashboard Tool Failures leaderboard for this cohort's traces (builtin:<key> or a saved cohort id)")
+  cohort: cohortFlag("The dashboard Tool Failures leaderboard for this cohort's traces (builtin:<key> or a saved cohort id)"),
+  compare: compareFlag()
 });
 var PROBLEM_LIST_VIEWS = ["auto", "book", "dream"];
 var BOOK_PROBLEM_SORTS = ["rank", "users", "signals", "problems"];
@@ -227,7 +237,8 @@ var ProblemSchema = z.object({
   door: z.enum(PROBLEM_DOORS).optional().describe("With --traces: only this attribution door"),
   view: z.enum(["book", "dream"]).optional().describe("dream: the dream view of the problem (definition, severity, incidents with verdicts); default the dossier"),
   offset: z.number().int().min(0).max(1e4).optional().describe("With --view=dream: first incident to return"),
-  days_back: daysBackFlag().describe("With --view=dream: whole days to count (default the dream run window)")
+  days_back: daysBackFlag().describe("With --view=dream: whole days to count (default the dream run window). With --trend: days of history (default 30)"),
+  trend: boolFlag().describe("Incidents and users per day, and the window against the previous window of equal length")
 });
 var PROBLEM_FEEDBACK_ACTIONS = [
   "mark_fixed",
@@ -326,6 +337,7 @@ var EMOTION_FAMILIES = [
 ];
 var EmotionsSchema = z.object({
   days_back: daysBackFlag(7),
+  compare: compareFlag(),
   limit: z.number().int().min(1).max(20).default(10).optional().describe("Maximum detections to return"),
   offset: z.number().int().min(0).max(1e4).optional().describe("Number of detections to skip"),
   family: z.enum(EMOTION_FAMILIES).optional().describe("Only this family in the detections list (summary covers all)"),
@@ -338,6 +350,7 @@ var EmotionsSchema = z.object({
 });
 var HallucinationsSchema = z.object({
   days_back: daysBackFlag(7),
+  compare: compareFlag(),
   limit: z.number().int().min(1).max(20).default(10).optional().describe("Maximum detections to return"),
   offset: z.number().int().min(0).max(1e4).optional().describe("Number of detections to skip"),
   conversation_id: z.string().max(200).optional().describe("Scope summary and list to one trace ID"),
@@ -376,6 +389,7 @@ var LAZINESS_FAMILIES = [
 ];
 var LazinessSchema = z.object({
   days_back: daysBackFlag(7),
+  compare: compareFlag(),
   limit: z.number().int().min(1).max(50).default(10).optional().describe("Maximum detections to return"),
   offset: z.number().int().min(0).max(1e4).optional().describe("Number of detections to skip"),
   conversation_id: z.string().max(200).optional().describe("One trace's detections"),

package/dist/{cli-he8csgsr.js → cli-wwbr5caw.js}

@@ -4,14 +4,14 @@ import {
 } from "./cli-mm48br00.js";
 import {
   createCommandContext
-} from "./cli-xddtv3yn.js";
+} from "./cli-8pcq2et6.js";
 import {
   assertFlags,
   assertPositionals
-} from "./cli-4sy4tytm.js";
+} from "./cli-tztzrh6b.js";
 import {
   callControlAPI
-} from "./cli-0xc5htv7.js";
+} from "./cli-dmm9jm9m.js";
 import {
   CliInputError
 } from "./cli-k4tqwah4.js";
@@ -5725,9 +5725,9 @@ async function runPromptsCommand(input, legacyFlags, legacyProfileOptions) {
       await promotePrompt(positionals, flags, profileOptions, context);
       break;
     case "ab":
-      return (await import("./prompts-ab-f5qrvpkt.js")).runPromptAb(flags, profileOptions, context);
+      return (await import("./prompts-ab-y7egdzg4.js")).runPromptAb(flags, profileOptions, context);
     case "propose":
-      await (await import("./prompts-propose-jg2j41wx.js")).runPromptPropose(positionals, flags, profileOptions, context);
+      await (await import("./prompts-propose-5nw25v9a.js")).runPromptPropose(positionals, flags, profileOptions, context);
       break;
     case "list":
     case "show":
@@ -5830,7 +5830,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const analyzedDefinitions = new Map;
   if (flags["no-analyze"] !== "true") {
     options.onProgress?.("Analyzing prompt sources before sync.");
-    const { analyzeHarnessPrompts } = await import("./harness-vabp33ak.js");
+    const { analyzeHarnessPrompts } = await import("./harness-avynbq4f.js");
     const result = await analyzeHarnessPrompts({
       rootDir: process.cwd(),
       existing: established.flatMap((prompt) => prompt.sourceDefinition ? [prompt.sourceDefinition.source] : []),
@@ -5858,7 +5858,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const mergedSources = mergePromptSources(manifest.sources, extraSources);
   const manifestUpdate = stableJson(mergedSources) === stableJson(mergePromptSources(manifest.sources, [])) ? undefined : $stringify({ version: 2, prompt_paths: manifest.promptPaths, sources: mergedSources });
   const prompts = await discoverPrompts(extraSources);
-  const { checkPromptAttribution } = await import("./prompt-attribution-pbns1ya3.js");
+  const { checkPromptAttribution } = await import("./prompt-attribution-wvvnzw4m.js");
   const attribution = checkPromptAttribution(process.cwd(), prompts.map((prompt) => prompt.key));
   const brokenAttribution = attribution.references.filter((reference) => reference.status === "missing");
   if (brokenAttribution.length) {
@@ -6164,7 +6164,7 @@ async function migratePromptManifest(options = {}) {
   let addedSources = [];
   let pendingSources = [];
   if (options.discover) {
-    const { analyzeHarnessPrompts } = await import("./harness-vabp33ak.js");
+    const { analyzeHarnessPrompts } = await import("./harness-avynbq4f.js");
     const result = await analyzeHarnessPrompts({
       rootDir: root,
       existing: manifest.sources,

package/dist/{cli-77ekrx7d.js → cli-xcpwp0gb.js}

@@ -5,7 +5,7 @@ import {
   resolveApiKey,
   resolveApiKeyFromActiveProfile,
   resolveModaBaseUrl
-} from "./cli-t0pb7qbs.js";
+} from "./cli-e24fjyrb.js";
 
 // src/api-key-auth.ts
 var PROBE_TIMEOUT_MS = 1e4;
@@ -37,25 +37,32 @@ async function fetchApiKeyProbe(baseUrl, headers, timeoutMs) {
   return probe("overview");
 }
 async function probeApiKey(key, options = {}) {
+  const baseUrl = resolveModaBaseUrl(options);
   let response;
   try {
-    response = await fetchApiKeyProbe(resolveModaBaseUrl(options), apiKeyHeaders(key, options), PROBE_TIMEOUT_MS);
+    response = await fetchApiKeyProbe(baseUrl, apiKeyHeaders(key, options), PROBE_TIMEOUT_MS);
   } catch (error) {
     const reason = error instanceof Error ? error.message : String(error);
     return { outcome: "unreachable", reason };
   }
   if (response.status === 401 || response.status === 403) {
-    return { outcome: "rejected", status: response.status };
+    const body2 = await response.text().catch(() => {
+      return;
+    });
+    return { outcome: "rejected", status: response.status, ...body2 ? { body: body2 } : {} };
   }
   if (response.status !== 200) {
-    return { outcome: "unreachable", reason: `HTTP ${response.status}` };
+    return { outcome: "unreachable", reason: `HTTP ${response.status}`, status: response.status };
   }
+  let body;
   try {
-    await response.json();
+    body = await response.json();
   } catch {
-    return { outcome: "unreachable", reason: "non-JSON response from the Data API" };
+    return { outcome: "unreachable", reason: "non-JSON response from the Data API", status: response.status };
   }
-  return { outcome: "live" };
+  const record = body !== null && typeof body === "object" && !Array.isArray(body) ? body : undefined;
+  const identity = record && typeof record.tenant_id === "string" && typeof record.key_kind === "string" ? record : undefined;
+  return identity ? { outcome: "live", identity } : { outcome: "live" };
 }
 
 export { resolveApiKeyCredential, redactApiKey, fetchApiKeyProbe, probeApiKey };

package/dist/{cli-mxfyq5nq.js → cli-xx0pjzkh.js}

@@ -13,22 +13,22 @@ import {
 } from "./cli-hcwdz9sd.js";
 import {
   createCommandContext
-} from "./cli-xddtv3yn.js";
+} from "./cli-8pcq2et6.js";
 import {
   assertFlags,
   assertPositionals,
   writeDryRun
-} from "./cli-4sy4tytm.js";
+} from "./cli-tztzrh6b.js";
 import {
   callControlAPI
-} from "./cli-0xc5htv7.js";
+} from "./cli-dmm9jm9m.js";
 import {
   recordApiRequest,
   resolveApiKey,
   resolveIngestUrl,
   resolveTenantId,
   shellArg
-} from "./cli-t0pb7qbs.js";
+} from "./cli-e24fjyrb.js";
 import {
   CliInputError
 } from "./cli-k4tqwah4.js";