@moda-ai/cli 1.55.51 → 1.55.52

package/dist/{agent-jyst7r0g.js → agent-nxn5df1w.js}

@@ -1,8 +1,8 @@
 import {
   buildDoctorReport
-} from "./cli-3pn6w6m3.js";
+} from "./cli-zgmxsmbt.js";
 import"./cli-rdh9jjr2.js";
-import"./cli-s3bcce69.js";
+import"./cli-arze1hgb.js";
 import"./cli-mm48br00.js";
 import {
   readHarnessSyncState
@@ -95,7 +95,7 @@ async function buildAgentContext(context) {
   const graph = readHarnessGraphIfPresent(context.cwd);
   const reportState = readHarnessReportState(context.cwd);
   const syncState = readHarnessSyncState(context.cwd);
-  const harness = graph ? await import("./harness-0pzqswvr.js") : undefined;
+  const harness = graph ? await import("./harness-t2xjak6g.js") : undefined;
   const topFindings = doctor.checks.filter((check) => check.status === "fail" || check.status === "warning").slice(0, 12).map(checkToFinding);
   const evidenceRefs = [
     ...doctor.checks.map(checkToEvidenceRef),

package/dist/{cli-s3bcce69.js → cli-arze1hgb.js}

@@ -5768,7 +5768,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const analyzedDefinitions = new Map;
   if (flags["no-analyze"] !== "true") {
     options.onProgress?.("Analyzing prompt sources before sync.");
-    const { analyzeHarnessPrompts } = await import("./harness-0pzqswvr.js");
+    const { analyzeHarnessPrompts } = await import("./harness-t2xjak6g.js");
     const result = await analyzeHarnessPrompts({
       rootDir: process.cwd(),
       existing: established.flatMap((prompt) => prompt.sourceDefinition ? [prompt.sourceDefinition.source] : []),
@@ -5796,7 +5796,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const mergedSources = mergePromptSources(manifest.sources, extraSources);
   const manifestUpdate = stableJson(mergedSources) === stableJson(mergePromptSources(manifest.sources, [])) ? undefined : $stringify({ version: 2, prompt_paths: manifest.promptPaths, sources: mergedSources });
   const prompts = await discoverPrompts(extraSources);
-  const { checkPromptAttribution } = await import("./prompt-attribution-dfj7etks.js");
+  const { checkPromptAttribution } = await import("./prompt-attribution-ey193cg9.js");
   const attribution = checkPromptAttribution(process.cwd(), prompts.map((prompt) => prompt.key));
   const brokenAttribution = attribution.references.filter((reference) => reference.status === "missing");
   if (brokenAttribution.length) {
@@ -6102,7 +6102,7 @@ async function migratePromptManifest(options = {}) {
   let addedSources = [];
   let pendingSources = [];
   if (options.discover) {
-    const { analyzeHarnessPrompts } = await import("./harness-0pzqswvr.js");
+    const { analyzeHarnessPrompts } = await import("./harness-t2xjak6g.js");
     const result = await analyzeHarnessPrompts({
       rootDir: root,
       existing: manifest.sources,

package/dist/{cli-k6kydtkv.js → cli-xx73daeb.js}

@@ -12333,6 +12333,7 @@ var NON_PROMPT_DOC_BASENAMES = new Set([
   "requirements.txt"
 ]);
 var PROMPT_NAME_HINT = /(prompt|system[-_]?message|instruction|persona|sop)/i;
+var PROMPTS_DIR = /(^|\/)(?:system[-_]?)?prompts?(\/|$)/i;
 var AGENTIC_DIR_HINT = /(^|\/)(agents?|prompts?|llm|ai|assistants?|chains?|crew|graph)s?(\/|$)/i;
 var INSTRUCTION_MARKERS = [
   /\byou are\b/i,
@@ -12532,6 +12533,9 @@ function detectPromptFile(file, out) {
   if (nameHint) {
     confidence2 = "high";
     signal = "prompt_file.name_hint";
+  } else if (PROMPTS_DIR.test(dir)) {
+    confidence2 = "high";
+    signal = "prompt_file.prompts_dir";
   } else if (dirHint && score >= 3) {
     confidence2 = "medium";
     signal = "prompt_file.agent_dir_instruction_text";
@@ -14465,6 +14469,8 @@ function promoteHarnessCandidates(report, rootDir) {
         artifact = promoteToolCandidate(candidate, rootDir, confidence2, fileCache);
         break;
       case "prompt_file":
+        if (candidate.signal === "prompt_module.name_hint")
+          break;
         artifact = promotePromptFileCandidate(candidate, confidence2);
         break;
       case "prompt_literal":
@@ -14535,6 +14541,7 @@ var HARNESS_FAMILY_FLAGS = [
   "offset",
   "out",
   "path",
+  "promote",
   "remote",
   "report",
   "run",
@@ -14821,7 +14828,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-nzcpftjn.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-p3g8cjf2.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);
@@ -14956,6 +14963,28 @@ async function runHarnessCommand(context) {
         message: "Scan this project for static harness candidates?"
       });
       writeHumanProgress(context, "Harness candidates: static pre-pass (no LLM, no network)...");
+      if (context.flags.promote !== undefined) {
+        const promote = context.flags.promote === "true" ? "all" : context.flags.promote.trim().toLowerCase();
+        if (promote !== "all" && !HARNESS_ANALYZE_CONCERNS.includes(promote)) {
+          throw new CliInputError(`Unknown --promote value "${context.flags.promote}".`, `Use --promote=all or one of: ${HARNESS_ANALYZE_CONCERNS.join(", ")}.`);
+        }
+        const promoteOut = context.flags.out;
+        if (promoteOut === "true") {
+          throw new CliInputError("Missing output path for --out.", "Usage: moda harness candidates --promote=<concern|all> --out=<file>");
+        }
+        const artifacts = deterministicArtifacts(rootDir, promote === "all" ? undefined : promote);
+        const promoted = { concern: promote, artifacts };
+        const promoteWritten = [];
+        if (promoteOut && !context.dryRun) {
+          const target = resolve10(context.cwd, promoteOut);
+          mkdirSync5(dirname7(target), { recursive: true });
+          writeFileSync5(target, `${JSON.stringify(promoted, null, 2)}
+`, "utf8");
+          promoteWritten.push(target);
+        }
+        context.output.writeData({ scanPlan, ...promoted, written: promoteWritten, dryRun: context.dryRun });
+        return { exitCode: 0 };
+      }
       const report = detectHarnessCandidates(rootDir);
       const written = [];
       const outFlag = context.flags.out;
@@ -15474,6 +15503,17 @@ function applyResolvedPromptSource(artifact, source) {
   artifact.sourcePath = source.sourcePath;
   artifact.contentHash = source.sourceDefinition.sourceHash;
 }
+function isToolGroupPlaceholder(name) {
+  const trimmed = (name ?? "").trim();
+  if (!trimmed)
+    return false;
+  if (trimmed.includes("*"))
+    return true;
+  return /\s(?:tools|toolkits?|toolsets?)$/i.test(trimmed);
+}
+function isDetectedToolDefinitionReason(reason) {
+  return typeof reason === "string" && (reason.startsWith("deterministic detector ") || reason.startsWith("Tool definition detected"));
+}
 function removeArtifacts(report, ids) {
   const graph = report.graph;
   const keep = (id) => typeof id !== "string" || !ids.has(id);
@@ -15523,6 +15563,33 @@ function repairExternalAnalystReport(report, rootDir, options = {}) {
       normalized.graph.unknowns.push({ id: `unresolved_${artifact.id}`, question: error instanceof Error ? error.message : String(error), candidateIds: [artifact.id], evidence: artifact.evidence });
     }
   }
+  for (const artifact of normalized.graph.artifacts) {
+    if (artifact.type !== "tool" || unverified.has(artifact.id) || !isToolGroupPlaceholder(artifact.name))
+      continue;
+    if (artifact.evidence.some((entry) => isDetectedToolDefinitionReason(entry.reason)))
+      continue;
+    unverified.add(artifact.id);
+    normalized.graph.unknowns.push({
+      id: `unresolved_${artifact.id}`,
+      question: `"${artifact.name}" is a dynamic tool source (a group of tools resolved at runtime), not a single tool definition, so its tools are not enumerated in the harness.`,
+      candidateIds: [artifact.id],
+      evidence: artifact.evidence
+    });
+  }
+  for (const artifact of normalized.graph.artifacts) {
+    if (artifact.type !== "model_config" || unverified.has(artifact.id))
+      continue;
+    const paths = artifact.evidence.map((entry) => entry.path).filter((path) => typeof path === "string" && path.length > 0);
+    if (paths.length === 0 || !paths.every((path) => TEST_PATH2.test(path)))
+      continue;
+    unverified.add(artifact.id);
+    normalized.graph.unknowns.push({
+      id: `unresolved_${artifact.id}`,
+      question: `Model ${artifact.name ?? artifact.id} is cited only from test or fixture files, so it is a test input rather than the harness's model configuration.`,
+      candidateIds: [artifact.id],
+      evidence: artifact.evidence
+    });
+  }
   for (const artifact of normalized.graph.artifacts) {
     if (unverified.has(artifact.id) || !requiresArtifactBody(artifact.type))
       continue;
@@ -15606,6 +15673,12 @@ var CONCERN_PROMOTED_ARTIFACT_TYPES = {
   prompts: new Set(["prompt"]),
   evals: new Set(["model_config"])
 };
+function deterministicArtifacts(rootDir, concern) {
+  const graph = { artifacts: [], unknowns: [] };
+  mergeDeterministicArtifacts(graph, rootDir, { concern });
+  hydratePromptAndToolBodies(graph, rootDir);
+  return graph.artifacts;
+}
 function mergeDeterministicArtifacts(graph, rootDir, options = {}) {
   if (process.env.MODA_HARNESS_DETERMINISTIC_MERGE === "0")
     return { added: 0 };
@@ -16590,6 +16663,9 @@ function renderExternalHarnessAnalystPrompt(options) {
     "- unknowns: report-level open questions with id, question, and citationIds",
     "",
     'Use exact field names and numeric confidence values from 0 to 1. Do not write string confidence values like "high". Do not use confidence >= 0.90 unless the claim is direct evidence from the cited line(s).',
+    `Name each runtime agent after the class or exported symbol that defines it, adding the role in parentheses when helpful, e.g. "AutonomousPlanWorkflow (weekly planner)"; a Cloudflare Workflow or Durable Object class keeps its class name. Never emit an agent whose class is not defined or exported in this source tree: a binding to another worker's class (e.g. a wrangler script_name binding) is a deployment detail, not an agent of this repo.`,
+    'A `tool` artifact is one tool definition. Never emit a group of tools ("MCP server tools", "composio_*", "worker tools") as a tool; record a dynamic tool source (MCP servers, Composio, webhooks) as a graph unknown that cites where the tools are loaded.',
+    "Ignore any checked-in .moda/ directory: it is the output of an earlier Moda run and is often stale. Never cite it or reuse its entities.",
     'Every graph item with confidence below 0.85 must also carry confidenceReason: one sentence naming what held confidence down, e.g. "Inferred from AGENTS.md:231-232 only; no source file defines this agent." or "Entrypoint read, but the tool registry was outside the snapshot."',
     "Each graph item with evidence must use evidence: [{ path, reason }], not citationIds/citations.",
     ...spec ? spec.contractLines : [
@@ -18994,4 +19070,4 @@ function hashText(text) {
   return createHash5("sha256").update(text).digest("hex");
 }
 
-export { startRemoteAnalyze, pollRemoteAnalyzeUntilDone, isRecoverableRemoteRun, checkPromptMapping, safePromptEvidencePath, discoverHarnessPromptSources, runHarnessCommand, writeHarnessAnalyzeResult, emitWrittenArtifacts, analyzeHarnessPrompts, repairExternalAnalystReport, deriveRelationshipsFromGraph, mergeDeterministicArtifacts, analystRefutations, describeCodingAgentEvent, analystEventProgress, isRetryableExternalAnalystFailure, sleep, summarizeInvalidAnalystReport, isDeterministicLocalAnalyst, resolveHarnessAnalyzeConcern, detectAvailableCodingAgents, codingAgentDisplayName, runCodingAgent, resolveAnalystModel, renderExternalHarnessAnalystPrompt, CONCERN_CANDIDATE_KINDS, SEED_CANDIDATE_KIND_LABELS, renderAnalystCandidateLines, renderAnalystSeedLines, truncateText, scanHarness, summarizeHarness, buildSourceSnapshot, writeHumanProgress, describeSyncIdentity, describeSyncTenantLabel, findFresherHarnessReports, writeHarnessArtifacts, assertHarnessGraphSyncQuality, graphForSync, inventoryFiles, numericEnv, numericEnvAllowZero, computeDeterministicFloor, stableId, titleFromId, promptNameFromPath };
+export { startRemoteAnalyze, pollRemoteAnalyzeUntilDone, isRecoverableRemoteRun, checkPromptMapping, safePromptEvidencePath, discoverHarnessPromptSources, runHarnessCommand, writeHarnessAnalyzeResult, emitWrittenArtifacts, analyzeHarnessPrompts, isToolGroupPlaceholder, repairExternalAnalystReport, deriveRelationshipsFromGraph, deterministicArtifacts, mergeDeterministicArtifacts, analystRefutations, describeCodingAgentEvent, analystEventProgress, isRetryableExternalAnalystFailure, sleep, summarizeInvalidAnalystReport, isDeterministicLocalAnalyst, resolveHarnessAnalyzeConcern, detectAvailableCodingAgents, codingAgentDisplayName, runCodingAgent, resolveAnalystModel, renderExternalHarnessAnalystPrompt, CONCERN_CANDIDATE_KINDS, SEED_CANDIDATE_KIND_LABELS, renderAnalystCandidateLines, renderAnalystSeedLines, truncateText, scanHarness, summarizeHarness, buildSourceSnapshot, writeHumanProgress, describeSyncIdentity, describeSyncTenantLabel, findFresherHarnessReports, writeHarnessArtifacts, assertHarnessGraphSyncQuality, graphForSync, inventoryFiles, numericEnv, numericEnvAllowZero, computeDeterministicFloor, stableId, titleFromId, promptNameFromPath };

package/dist/{cli-3pn6w6m3.js → cli-zgmxsmbt.js}

@@ -4,7 +4,7 @@ import {
 } from "./cli-rdh9jjr2.js";
 import {
   inspectPromptManifest
-} from "./cli-s3bcce69.js";
+} from "./cli-arze1hgb.js";
 import {
   readHarnessSyncState,
   renderDoctorHuman,
@@ -395,7 +395,7 @@ async function harnessCurrentCheck(cwd, manifestPath, manifestExists, tenantId)
     };
   }
   try {
-    const { scanHarness } = await import("./harness-0pzqswvr.js");
+    const { scanHarness } = await import("./harness-t2xjak6g.js");
     const current = scanHarness({
       rootDir: cwd,
       scannerVersion: "doctor",

package/dist/cli.js

@@ -2145,9 +2145,10 @@ var HARNESS_SUBCOMMAND_HELP = [
   {
     name: "candidates",
     description: "Static pre-pass listing likely agents, prompts, and tools (local; no LLM, no network)",
-    usage: "moda harness candidates [--path=<dir>] [--out=<file>] [--dry-run] [--yes]",
+    usage: "moda harness candidates [--path=<dir>] [--out=<file>] [--promote=<concern|all>] [--dry-run] [--yes]",
     flags: [
       HARNESS_PATH_FLAG,
+      { name: "--promote=<concern|all>", description: "Print the deterministic artifacts (tools, prompts, model configs) for one concern (topology, tools, prompts, evals) or all, with bodies, instead of the raw candidates." },
       { name: "--out=<file>", description: "Also write the candidates report to a file." },
       { name: "--dry-run", description: "Do not write --out." },
       { name: "--yes", description: "Approve a broad scan without the prompt." }
@@ -2967,25 +2968,25 @@ function leafManifestFields(leaf, commands) {
 import { fileURLToPath } from "url";
 import { realpathSync } from "fs";
 async function runPromptsCommand(...args) {
-  return (await import("./prompts-r7kzdnca.js")).runPromptsCommand(...args);
+  return (await import("./prompts-z2v4k4q7.js")).runPromptsCommand(...args);
 }
 async function runSkillsCommand(...args) {
   return (await import("./skills-mwftqzyk.js")).runSkillsCommand(...args);
 }
 async function runHarnessCommand(...args) {
-  return (await import("./harness-0pzqswvr.js")).runHarnessCommand(...args);
+  return (await import("./harness-t2xjak6g.js")).runHarnessCommand(...args);
 }
 async function runSyncCommand(...args) {
-  return (await import("./sync-xcjye7em.js")).runSyncCommand(...args);
+  return (await import("./sync-tzvrgzqs.js")).runSyncCommand(...args);
 }
 async function runRegistryCommand(...args) {
   return (await import("./registry-tv8fktxc.js")).runRegistryCommand(...args);
 }
 async function runDoctorCommand(...args) {
-  return (await import("./doctor-0z5k6z9a.js")).runDoctorCommand(...args);
+  return (await import("./doctor-66qe8hq9.js")).runDoctorCommand(...args);
 }
 async function runStatusCommand(...args) {
-  return (await import("./doctor-0z5k6z9a.js")).runStatusCommand(...args);
+  return (await import("./doctor-66qe8hq9.js")).runStatusCommand(...args);
 }
 async function runAuthCommand(...args) {
   return (await import("./profile-commands-nbaec4y9.js")).runAuthCommand(...args);
@@ -2997,7 +2998,7 @@ async function runProfilesCommand(...args) {
   return (await import("./profile-commands-nbaec4y9.js")).runProfilesCommand(...args);
 }
 async function runAgentCommand(...args) {
-  return (await import("./agent-jyst7r0g.js")).runAgentCommand(...args);
+  return (await import("./agent-nxn5df1w.js")).runAgentCommand(...args);
 }
 async function runProductionCommand(...args) {
   return (await import("./production-intelligence-zek0rkzj.js")).runProductionCommand(...args);
@@ -6761,7 +6762,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result-and-error",
     handler: async (context) => {
-      const { runInit } = await import("./index-2p6x0xg2.js");
+      const { runInit } = await import("./index-tt5rmqyq.js");
       if (context.outputMode === "agent-stream") {
         context.output.writeEvent({
           event: "started",

package/dist/{doctor-0z5k6z9a.js → doctor-66qe8hq9.js}

@@ -3,9 +3,9 @@ import {
   promptsDiscoveredCheck,
   runDoctorCommand,
   runStatusCommand
-} from "./cli-3pn6w6m3.js";
+} from "./cli-zgmxsmbt.js";
 import"./cli-rdh9jjr2.js";
-import"./cli-s3bcce69.js";
+import"./cli-arze1hgb.js";
 import"./cli-mm48br00.js";
 import"./cli-xq45etg1.js";
 import"./cli-gtke9wrw.js";

package/dist/{harness-github-actions-nzcpftjn.js → harness-github-actions-p3g8cjf2.js}

@@ -1,6 +1,6 @@
 import {
   buildSourceSnapshot
-} from "./cli-k6kydtkv.js";
+} from "./cli-xx73daeb.js";
 import"./cli-97fnztpy.js";
 import"./cli-xq45etg1.js";
 import"./cli-gtke9wrw.js";

package/dist/{harness-0pzqswvr.js → harness-t2xjak6g.js}

@@ -13,12 +13,14 @@ import {
   describeSyncIdentity,
   describeSyncTenantLabel,
   detectAvailableCodingAgents,
+  deterministicArtifacts,
   emitWrittenArtifacts,
   findFresherHarnessReports,
   graphForSync,
   inventoryFiles,
   isDeterministicLocalAnalyst,
   isRetryableExternalAnalystFailure,
+  isToolGroupPlaceholder,
   mergeDeterministicArtifacts,
   numericEnv,
   numericEnvAllowZero,
@@ -41,7 +43,7 @@ import {
   writeHarnessAnalyzeResult,
   writeHarnessArtifacts,
   writeHumanProgress
-} from "./cli-k6kydtkv.js";
+} from "./cli-xx73daeb.js";
 import"./cli-97fnztpy.js";
 import"./cli-xq45etg1.js";
 import"./cli-gtke9wrw.js";
@@ -80,12 +82,14 @@ export {
   numericEnvAllowZero,
   numericEnv,
   mergeDeterministicArtifacts,
+  isToolGroupPlaceholder,
   isRetryableExternalAnalystFailure,
   isDeterministicLocalAnalyst,
   inventoryFiles,
   graphForSync,
   findFresherHarnessReports,
   emitWrittenArtifacts,
+  deterministicArtifacts,
   detectAvailableCodingAgents,
   describeSyncTenantLabel,
   describeSyncIdentity,

package/dist/{index-2p6x0xg2.js → index-tt5rmqyq.js}

@@ -21,7 +21,7 @@ import {
 } from "./cli-hcwdz9sd.js";
 import {
   buildDoctorReport
-} from "./cli-3pn6w6m3.js";
+} from "./cli-zgmxsmbt.js";
 import {
   ConnectCodeError,
   connectWithCode,
@@ -32,7 +32,7 @@ import {
 import {
   initPrompts,
   runPromptSync
-} from "./cli-s3bcce69.js";
+} from "./cli-arze1hgb.js";
 import"./cli-mm48br00.js";
 import {
   codingAgentDisplayName,
@@ -46,7 +46,7 @@ import {
   runCodingAgent,
   runHarnessCommand,
   startRemoteAnalyze
-} from "./cli-k6kydtkv.js";
+} from "./cli-xx73daeb.js";
 import {
   stripAnsi
 } from "./cli-97fnztpy.js";

package/dist/{prompt-attribution-dfj7etks.js → prompt-attribution-ey193cg9.js}

@@ -1,7 +1,7 @@
 import {
   inventoryFiles,
   safePromptEvidencePath
-} from "./cli-k6kydtkv.js";
+} from "./cli-xx73daeb.js";
 import"./cli-97fnztpy.js";
 import"./cli-xq45etg1.js";
 import"./cli-gtke9wrw.js";

package/dist/prompt-source-mcp.js

@@ -3,7 +3,7 @@ import {
   checkPromptMapping,
   discoverHarnessPromptSources,
   safePromptEvidencePath
-} from "./cli-k6kydtkv.js";
+} from "./cli-xx73daeb.js";
 import"./cli-97fnztpy.js";
 import"./cli-xq45etg1.js";
 import"./cli-gtke9wrw.js";

package/dist/{prompts-r7kzdnca.js → prompts-z2v4k4q7.js}

@@ -9,7 +9,7 @@ import {
   runPromptSync,
   runPromptsCommand,
   writePromptSyncProgress
-} from "./cli-s3bcce69.js";
+} from "./cli-arze1hgb.js";
 import {
   promptSourceHashPayload
 } from "./cli-mm48br00.js";

package/dist/{sync-xcjye7em.js → sync-tzvrgzqs.js}

@@ -6,11 +6,11 @@ import"./cli-rjav0vj1.js";
 import"./cli-hcwdz9sd.js";
 import {
   runPromptsCommand
-} from "./cli-s3bcce69.js";
+} from "./cli-arze1hgb.js";
 import"./cli-mm48br00.js";
 import {
   runHarnessCommand
-} from "./cli-k6kydtkv.js";
+} from "./cli-xx73daeb.js";
 import"./cli-97fnztpy.js";
 import"./cli-xq45etg1.js";
 import"./cli-gtke9wrw.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moda-ai/cli",
-  "version": "1.55.51",
+  "version": "1.55.52",
   "description": "CLI for Moda: production monitoring and evals for AI agents.",
   "type": "module",
   "bin": {

package/skills/integration/index.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "moda.skill_index.v1",
-  "bundled_at": "2026-10-20T22:22:44.875Z",
-  "cli_version": "1.55.51",
+  "bundled_at": "2026-10-20T23:50:34.577Z",
+  "cli_version": "1.55.52",
   "skills": [
     {
       "id": "integration-cloudflare-think",