@moda-ai/cli 1.55.53 → 1.55.55

package/dist/{cli-7nghchj8.js → cli-px4dmcy0.js}

@@ -13,16 +13,16 @@ import {
 import {
   createCommandContext,
   stringOption
-} from "./cli-gtke9wrw.js";
+} from "./cli-v2h21cgf.js";
 import {
   assertFlags,
   assertPositionals,
   requireTenant
-} from "./cli-1ehmy9rh.js";
+} from "./cli-31ybq5f2.js";
 import {
   ApiError,
   callControlAPI
-} from "./cli-wry78bg8.js";
+} from "./cli-hawwf30b.js";
 import {
   embeddedTenantIdFromApiKey,
   getActiveProfile,
@@ -32,7 +32,7 @@ import {
   resolveModaBaseUrl,
   resolveTenantId,
   shellArg
-} from "./cli-40fqk078.js";
+} from "./cli-pnarsb96.js";
 import {
   PYTHON_AGENT_MODULES,
   TYPESCRIPT_AGENT_MODULES,
@@ -44,7 +44,7 @@ import {
   require_typescript,
   resolvePromptSource,
   validatePromptSource
-} from "./cli-vswckv9g.js";
+} from "./cli-y5d33a1y.js";
 import {
   $isMap,
   $isNode,
@@ -70,7 +70,7 @@ import {
   packSnapshot,
   redactDeep,
   shouldInventoryFile
-} from "./cli-c1k20j6e.js";
+} from "./cli-9a4b1wxz.js";
 import {
   HARNESS_ANALYZE_CONCERNS,
   HARNESS_REPORT_PATH,
@@ -83,14 +83,16 @@ import {
   hashHarnessReport,
   hashStableJson,
   loadHarnessReportForSync,
+  mergeBoundRuntimeClasses,
   normalizeHarnessReport,
   readHarnessReport,
   requiresArtifactBody,
   resolveHarnessReportPath,
   stampRemoteSnapshotTruncation,
+  tagComponentStatus,
   validateHarnessReport,
   writeHarnessReportArtifacts
-} from "./cli-6hdqp65a.js";
+} from "./cli-rtkjjf0a.js";
 import {
   CliInputError,
   CliInputRequiredError
@@ -107,15 +109,15 @@ import { homedir, tmpdir as tmpdir2 } from "node:os";
 import { fileURLToPath } from "node:url";
 import {
   existsSync as existsSync8,
-  lstatSync as lstatSync8,
+  lstatSync as lstatSync7,
   mkdtempSync as mkdtempSync2,
   mkdirSync as mkdirSync5,
-  readFileSync as readFileSync13,
-  readdirSync as readdirSync5,
+  readFileSync as readFileSync12,
+  readdirSync as readdirSync4,
   writeFileSync as writeFileSync5,
   rmSync as rmSync4
 } from "node:fs";
-import { basename as basename6, delimiter, dirname as dirname7, join as join10, relative as relative7, resolve as resolve10, sep as sep5 } from "node:path";
+import { basename as basename6, delimiter, dirname as dirname7, join as join9, relative as relative6, resolve as resolve10, sep as sep5 } from "node:path";
 import { confirm, select } from "@inquirer/prompts";
 
 // src/analyst-tui.ts
@@ -12320,6 +12322,7 @@ var LINE_PATTERNS = [
 ];
 var CODE_EXTENSIONS = new Set([...JS, ...PY]);
 var PROMPT_DOC_EXTENSIONS = new Set([".md", ".mdc", ".txt", ".prompt", ".jinja", ".jinja2", ".j2", ".hbs", ".tpl"]);
+var UPPERCASE_DOC_NAME = /^[A-Z0-9][A-Z0-9_-]*\.(?:md|mdc|txt)$/;
 var NON_PROMPT_DOC_BASENAMES = new Set([
   "readme.md",
   "agents.md",
@@ -12536,7 +12539,7 @@ function detectPromptFile(file, out) {
   } else if (PROMPTS_DIR.test(dir)) {
     confidence2 = "high";
     signal = "prompt_file.prompts_dir";
-  } else if (dirHint && score >= 3) {
+  } else if (dirHint && score >= 3 && !UPPERCASE_DOC_NAME.test(basename5(file.path))) {
     confidence2 = "medium";
     signal = "prompt_file.agent_dir_instruction_text";
   } else if (score >= 5) {
@@ -13632,6 +13635,36 @@ function promoteToolCandidate(candidate, rootDir, confidence2, fileCache) {
     body: extractToolBody({ path: candidate.path, rootDir }, { name, reason: candidate.signal })
   };
 }
+var UTILITY_EXPORT = /^(?:classify|measure|log|count|parse|validate|detect|is|has|should|estimate|truncate|strip|normalize|hash)(?:[A-Z_]|$)/;
+var BUILDER_VERB = /^(?:build|render|compose|assemble|generate)(?:[A-Z_]|$)/;
+var PROMPT_NOUN_LAST = /(?:prompt|instructions?|section|block|template|system)(?:_?for[_A-Z]\w*)?$/i;
+function exportedNames(path, lines) {
+  const python = path.endsWith(".py");
+  return lines.flatMap((line) => {
+    if (python) {
+      const match = /^(?:async\s+)?(?:def|class)\s+([A-Za-z]\w*)|^([A-Za-z]\w*)\s*(?::[^=]+)?=(?!=)/.exec(line);
+      return match ? [match[1] ?? match[2]] : [];
+    }
+    const declared = /^\s*export\s+(?:default\s+)?(?:async\s+)?(?:function\*?|const|let|var|class)\s+([A-Za-z_$][\w$]*)/.exec(line);
+    if (declared)
+      return [declared[1]];
+    const commonJs = /^\s*(?:module\.)?exports\.([A-Za-z_$][\w$]*)\s*=/.exec(line);
+    if (commonJs)
+      return [commonJs[1]];
+    const list = /^\s*(?:export|module\.exports\s*=)\s*\{([^}]*)\}/.exec(line);
+    if (!list)
+      return [];
+    return list[1].split(",").flatMap((entry) => {
+      const name = entry.trim().replace(/^type\s+/, "").split(/\s+as\s+|\s*:\s*/).pop()?.trim();
+      return name && /^[A-Za-z_$][\w$]*$/.test(name) ? [name] : [];
+    });
+  });
+}
+function buildsPrompts(path, lines) {
+  if (!lines)
+    return false;
+  return exportedNames(path, lines).some((name) => !UTILITY_EXPORT.test(name) && (BUILDER_VERB.test(name) || PROMPT_NOUN_LAST.test(name)));
+}
 function promotePromptFileCandidate(candidate, confidence2) {
   return {
     id: stableId("prompt", candidate.path),
@@ -14469,7 +14502,7 @@ function promoteHarnessCandidates(report, rootDir) {
         artifact = promoteToolCandidate(candidate, rootDir, confidence2, fileCache);
         break;
       case "prompt_file":
-        if (candidate.signal === "prompt_module.name_hint")
+        if (candidate.signal === "prompt_module.name_hint" && (TEST_PATH2.test(candidate.path) || !buildsPrompts(candidate.path, readFileLines(rootDir, candidate.path, fileCache))))
           break;
         artifact = promotePromptFileCandidate(candidate, confidence2);
         break;
@@ -14497,245 +14530,6 @@ function promoteHarnessCandidates(report, rootDir) {
   return [...byId.values()];
 }
 
-// src/harness-wrangler-bindings.ts
-import { lstatSync as lstatSync7, readdirSync as readdirSync4, readFileSync as readFileSync12 } from "node:fs";
-import { join as join9, relative as relative6 } from "node:path";
-var WRANGLER_FILE = /^wrangler\.jsonc?$/;
-var SKIPPED_DIRS2 = new Set(["node_modules", ".git", ".wrangler", "dist", "build", ".next", ".turbo", "vendor"]);
-var MAX_DEPTH = 4;
-var AGENT_CLASS = /Agent(?:V\d+)?$/;
-function stripJsonc2(text) {
-  let out = "";
-  let inString = false;
-  for (let i = 0;i < text.length; i += 1) {
-    const ch = text[i];
-    if (inString) {
-      out += ch;
-      if (ch === "\\") {
-        out += text[i + 1] ?? "";
-        i += 1;
-      } else if (ch === '"') {
-        inString = false;
-      }
-      continue;
-    }
-    if (ch === '"') {
-      inString = true;
-      out += ch;
-    } else if (ch === "/" && text[i + 1] === "/") {
-      while (i < text.length && text[i] !== `
-`)
-        i += 1;
-      out += `
-`;
-    } else if (ch === "/" && text[i + 1] === "*") {
-      i += 2;
-      while (i < text.length && !(text[i] === "*" && text[i + 1] === "/")) {
-        if (text[i] === `
-`)
-          out += `
-`;
-        i += 1;
-      }
-      i += 1;
-    } else {
-      out += ch;
-    }
-  }
-  return out.replace(/,(\s*[}\]])/g, "$1");
-}
-function findWranglerFiles(rootDir) {
-  const found = [];
-  const walk = (dir, depth) => {
-    let entries;
-    try {
-      entries = readdirSync4(dir);
-    } catch {
-      return;
-    }
-    for (const name of entries) {
-      const abs = join9(dir, name);
-      let stat;
-      try {
-        stat = lstatSync7(abs);
-      } catch {
-        continue;
-      }
-      if (stat.isDirectory()) {
-        if (depth < MAX_DEPTH && !SKIPPED_DIRS2.has(name) && !name.startsWith("."))
-          walk(abs, depth + 1);
-      } else if (stat.isFile() && WRANGLER_FILE.test(name)) {
-        found.push(abs);
-      }
-    }
-  };
-  walk(rootDir, 0);
-  return found.sort();
-}
-function lineOf(text, className) {
-  const index = text.search(new RegExp(`"class_name"\\s*:\\s*"${className.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}"`));
-  return index < 0 ? undefined : text.slice(0, index).split(`
-`).length;
-}
-function workerDir(path) {
-  const slash = path.lastIndexOf("/");
-  return slash < 0 ? "" : path.slice(0, slash);
-}
-function detectBoundRuntimeClasses(rootDir) {
-  const byClass = new Map;
-  for (const abs of findWranglerFiles(rootDir)) {
-    let text;
-    let config2;
-    try {
-      text = readFileSync12(abs, "utf8");
-      config2 = JSON.parse(stripJsonc2(text));
-    } catch {
-      continue;
-    }
-    if (!config2 || typeof config2 !== "object")
-      continue;
-    const path = relative6(rootDir, abs).split("\\").join("/");
-    const root = config2;
-    const sections2 = [root, ...Object.values(root.env ?? {})];
-    for (const section of sections2) {
-      if (!section || typeof section !== "object")
-        continue;
-      const s = section;
-      const durable = s.durable_objects?.bindings;
-      const entries = [
-        ...Array.isArray(durable) ? durable.map((b) => ["durable_object", b]) : [],
-        ...Array.isArray(s.workflows) ? s.workflows.map((w) => ["workflow", w]) : []
-      ];
-      for (const [kind, raw] of entries) {
-        if (!raw || typeof raw !== "object")
-          continue;
-        const entry = raw;
-        const className = typeof entry.class_name === "string" ? entry.class_name : "";
-        const scriptName = typeof entry.script_name === "string" && entry.script_name ? entry.script_name : undefined;
-        const key = `${className}|${scriptName ? "external" : `config:${path}`}`;
-        if (!className || byClass.has(key))
-          continue;
-        const binding = typeof (kind === "workflow" ? entry.binding : entry.name) === "string" ? String(kind === "workflow" ? entry.binding : entry.name) : className;
-        byClass.set(key, {
-          className,
-          kind,
-          binding,
-          ...scriptName ? { scriptName } : {},
-          path,
-          line: lineOf(text, className)
-        });
-      }
-    }
-  }
-  return [...byClass.values()];
-}
-function norm(value) {
-  return typeof value === "string" ? value.toLowerCase().replace(/[^a-z0-9]/g, "") : "";
-}
-function itemPaths(item) {
-  const paths = [];
-  for (const value of [item.root, item.sourcePath]) {
-    if (typeof value === "string" && value && value !== ".")
-      paths.push(value.replace(/^\.\//, ""));
-  }
-  for (const entry of Array.isArray(item.evidence) ? item.evidence : []) {
-    const path = entry && typeof entry === "object" ? entry.path : undefined;
-    if (typeof path === "string" && path)
-      paths.push(path.replace(/^\.\//, ""));
-  }
-  return paths;
-}
-function withinWorker(path, dir, otherDirs) {
-  const inside = (d) => d === "" || path === d || path.startsWith(`${d}/`);
-  return inside(dir) && !otherDirs.some((other) => other.length > dir.length && inside(other));
-}
-function graphNamesClass(graph, bound, all) {
-  const target = norm(bound.className);
-  const named = (name) => {
-    if (typeof name !== "string")
-      return false;
-    const bare = name.replace(/\s*\([^)]*\)\s*$/, "");
-    return norm(bare) === target || bare.split(/[^A-Za-z0-9_]+/).some((word) => norm(word) === target);
-  };
-  const sameName = bound.scriptName ? [bound] : all.filter((other) => other.className === bound.className && !other.scriptName);
-  const dir = workerDir(bound.path);
-  const otherDirs = sameName.map((other) => workerDir(other.path)).filter((other) => other !== dir);
-  const covers = (item) => {
-    if (!named(item.name))
-      return false;
-    if (sameName.length < 2)
-      return true;
-    return itemPaths(item).some((path) => withinWorker(path, dir, otherDirs));
-  };
-  return graph.runtimeAgents.some(covers) || graph.artifacts.some(covers);
-}
-function bindingReason(bound) {
-  const what = bound.kind === "workflow" ? "Workflow" : "Durable Object";
-  const where = bound.scriptName ? ` served by the external Worker "${bound.scriptName}"` : "";
-  return `${what} binding ${bound.binding} -> class ${bound.className}${where}`;
-}
-function uniqueId(base, taken) {
-  let id = base;
-  for (let n = 2;taken.has(id); n += 1)
-    id = `${base}-${n}`;
-  taken.add(id);
-  return id;
-}
-function mergeBoundRuntimeClasses(graph, rootDir) {
-  if (process.env.MODA_HARNESS_DETERMINISTIC_MERGE === "0")
-    return { added: 0 };
-  let bound;
-  try {
-    bound = detectBoundRuntimeClasses(rootDir);
-  } catch {
-    return { added: 0 };
-  }
-  const taken = new Set([
-    ...graph.runtimeAgents.map((agent) => agent.id),
-    ...graph.artifacts.map((artifact) => artifact.id)
-  ]);
-  let added = 0;
-  for (const entry of bound) {
-    if (graphNamesClass(graph, entry, bound))
-      continue;
-    const evidence = [{ path: entry.path, ...entry.line ? { line: entry.line } : {}, reason: bindingReason(entry) }];
-    const slug = entry.className.replace(/[^A-Za-z0-9]+/g, "-").toLowerCase();
-    if (entry.kind === "durable_object" && AGENT_CLASS.test(entry.className) && !entry.scriptName) {
-      const agent = {
-        id: uniqueId(`agent.bound.${slug}`, taken),
-        name: entry.className,
-        kind: "runtime_agent",
-        purpose: "Agent class bound as a Durable Object.",
-        root: ".",
-        entrypointIds: [],
-        channelAdapterIds: [],
-        artifactIds: [],
-        identityNamespaceIds: [],
-        deploymentIds: [],
-        frameworkIds: [],
-        modelProviderIds: [],
-        confidence: 0.6,
-        evidence
-      };
-      graph.runtimeAgents.push(agent);
-    } else {
-      const artifact = {
-        id: uniqueId(`entrypoint.bound.${slug}`, taken),
-        type: "entrypoint",
-        name: entry.className,
-        scope: "shared",
-        sourcePath: entry.path,
-        usedByAgentIds: [],
-        confidence: 0.6,
-        evidence
-      };
-      graph.artifacts.push(artifact);
-    }
-    added += 1;
-  }
-  return { added };
-}
-
 // src/harness-sync-limits.ts
 var MAX_HARNESS_SYNC_GRAPH_BYTES = 2000000;
 function assertHarnessGraphSyncSize(graph) {
@@ -14754,8 +14548,8 @@ function assertHarnessGraphSyncSize(graph) {
 }
 // src/harness.ts
 var MODA_DIR = ".moda";
-var HARNESS_PATH = join10(MODA_DIR, "harness.json");
-var HARNESS_SUMMARY_PATH = join10(MODA_DIR, "HARNESS.md");
+var HARNESS_PATH = join9(MODA_DIR, "harness.json");
+var HARNESS_SUMMARY_PATH = join9(MODA_DIR, "HARNESS.md");
 var SCHEMA_VERSION = "harness.v0.1";
 var REPORT_JSON_BEGIN = "MODA_HARNESS_REPORT_JSON_BEGIN";
 var REPORT_JSON_END = "MODA_HARNESS_REPORT_JSON_END";
@@ -14921,7 +14715,7 @@ async function runHarnessCommand(context) {
           report: {
             reportId: report.reportId,
             reportHash,
-            path: normalizePath2(relative7(rootDir, reportPath)) || ".moda/harness-report.json"
+            path: normalizePath2(relative6(rootDir, reportPath)) || ".moda/harness-report.json"
           },
           validation,
           approval: {
@@ -15067,7 +14861,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-1031t1kt.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-6bex338w.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);
@@ -15189,7 +14983,7 @@ async function runHarnessCommand(context) {
         report: {
           reportId: approval.report.reportId,
           reportHash: hashHarnessReport(approval.report),
-          path: normalizePath2(relative7(rootDir, reportPath)) || ".moda/harness-report.json"
+          path: normalizePath2(relative6(rootDir, reportPath)) || ".moda/harness-report.json"
         },
         validation: approval.validation,
         approval: approval.approval
@@ -15212,6 +15006,7 @@ async function runHarnessCommand(context) {
           throw new CliInputError("Missing output path for --out.", "Usage: moda harness candidates --promote=<concern|all> --out=<file>");
         }
         const artifacts = deterministicArtifacts(rootDir, promote === "all" ? undefined : promote);
+        tagComponentStatus({ runtimeAgents: [], artifacts }, rootDir);
         const promoted = { concern: promote, artifacts };
         const promoteWritten = [];
         if (promoteOut && !context.dryRun) {
@@ -15279,7 +15074,7 @@ async function runHarnessCommand(context) {
       return { exitCode: 0 };
     }
     case "status": {
-      const manifestPath = join10(rootDir, HARNESS_PATH);
+      const manifestPath = join9(rootDir, HARNESS_PATH);
       const graph = existsSync8(manifestPath) ? readHarnessGraph(manifestPath) : scanHarness({
         rootDir,
         tenantId: tenant?.tenantId,
@@ -15420,10 +15215,10 @@ function emitWrittenArtifacts(context, written, description) {
   }
 }
 async function runPromptConcernAnalysis(context, rootDir, scanPlan, tenant) {
-  const manifest = join10(rootDir, ".moda/prompts.yml");
+  const manifest = join9(rootDir, ".moda/prompts.yml");
   let existing = [];
   if (existsSync8(manifest)) {
-    const document = $parseDocument(readFileSync13(manifest, "utf8"));
+    const document = $parseDocument(readFileSync12(manifest, "utf8"));
     if (document.errors.length)
       throw new CliInputError("Invalid prompt manifest.", document.errors[0].message);
     existing = document.toJS({ maxAliasCount: 20 })?.sources ?? [];
@@ -15677,7 +15472,7 @@ function readExternalAnalystReport(rootDir, result, adapter, concern) {
       result.stderr
     ].join(`
 `));
-    debugHint = `Raw analyst output saved to ${join10(MODA_DIR, "analyst-debug.log")} for debugging.`;
+    debugHint = `Raw analyst output saved to ${join9(MODA_DIR, "analyst-debug.log")} for debugging.`;
   } catch {}
   throw new CliInputError(`Harness analyst ${adapter} did not return a harness report.`, [
     `Expected ${HARNESS_REPORT_PATH} or final JSON between ${REPORT_JSON_BEGIN} and ${REPORT_JSON_END}.`,
@@ -15788,6 +15583,7 @@ function repairExternalAnalystReport(report, rootDir, options = {}) {
   mergeDeterministicArtifacts(normalized.graph, rootDir, { concern: options.concern });
   if (!options.concern || options.concern === "topology")
     mergeBoundRuntimeClasses(normalized.graph, rootDir);
+  tagComponentStatus(normalized.graph, rootDir);
   hydratePromptAndToolBodies(normalized.graph, rootDir);
   const unverified = new Set;
   for (const artifact of normalized.graph.artifacts) {
@@ -16034,7 +15830,8 @@ function artifactSourceKey(artifact) {
 }
 function graphCoversPromotedArtifact(graph, promoted) {
   const promotedName = promoted.name.toLowerCase();
-  const promotedLines = promoted.evidence.filter((entry) => typeof entry.line === "number");
+  const isDefinitionLine = (entry) => typeof entry.line === "number" && !/^(?:passed to a model call|prompt-named literal referenced)/.test(entry.reason ?? "");
+  const promotedLines = promoted.evidence.filter(isDefinitionLine);
   const promotedSource = artifactSourceKey(promoted);
   const isWholeFilePrompt = promoted.type === "prompt" && Boolean(promoted.sourcePath);
   return graph.artifacts.some((existing) => {
@@ -16042,10 +15839,12 @@ function graphCoversPromotedArtifact(graph, promoted) {
       return true;
     if (existing.type === promoted.type && existing.name?.toLowerCase() === promotedName) {
       const existingSource = artifactSourceKey(existing);
-      if (!existingSource || !promotedSource || existingSource === promotedSource)
+      const existingLines = Array.isArray(existing.evidence) ? existing.evidence.filter(isDefinitionLine) : [];
+      const distinctInline = !existing.sourcePath && !promoted.sourcePath && existingLines.length > 0 && promotedLines.length > 0;
+      if (!existingSource || !promotedSource || existingSource === promotedSource && !distinctInline)
         return true;
     }
-    if (existing.type === promoted.type && Array.isArray(existing.evidence) && existing.evidence.some((entry) => typeof entry.line === "number" && promotedLines.some((line) => line.path === entry.path && line.line === entry.line))) {
+    if (existing.type === promoted.type && Array.isArray(existing.evidence) && existing.evidence.some((entry) => isDefinitionLine(entry) && promotedLines.some((line) => line.path === entry.path && line.line === entry.line))) {
       return true;
     }
     if (isWholeFilePrompt && existing.sourcePath === promoted.sourcePath)
@@ -16081,7 +15880,7 @@ function repairCitationLines(report, rootDir) {
       continue;
     let text;
     try {
-      text = readFileSync13(candidatePath, "utf8");
+      text = readFileSync12(candidatePath, "utf8");
     } catch {
       continue;
     }
@@ -16687,14 +16486,14 @@ function createPromptAnalystIsolation(adapter, rootDir) {
   const serverPath = bundledServer ? bundled : source;
   const command = bundledServer ? process.execPath : resolveBunRuntime();
   const serverArgs = [serverPath, "--root", rootDir];
-  const tempPath = mkdtempSync2(join10(tmpdir2(), "moda-prompt-analyst-"));
+  const tempPath = mkdtempSync2(join9(tmpdir2(), "moda-prompt-analyst-"));
   const cleanup = () => {
     try {
       rmSync4(tempPath, { recursive: true, force: true });
     } catch {}
   };
   if (adapter === "claude") {
-    const configPath = join10(tempPath, "claude-mcp.json");
+    const configPath = join9(tempPath, "claude-mcp.json");
     writeFileSync5(configPath, JSON.stringify({ mcpServers: { "moda-prompt-source": { command, args: serverArgs } } }));
     return { configPath, cleanup };
   }
@@ -16905,6 +16704,7 @@ function renderExternalHarnessAnalystPrompt(options) {
     "",
     'Use exact field names and numeric confidence values from 0 to 1. Do not write string confidence values like "high". Do not use confidence >= 0.90 unless the claim is direct evidence from the cited line(s).',
     `Name each runtime agent after the class or exported symbol that defines it, adding the role in parentheses when helpful, e.g. "AutonomousPlanWorkflow (weekly planner)"; a Cloudflare Workflow or Durable Object class keeps its class name. Never emit an agent whose class is not defined or exported in this source tree: a binding to another worker's class (e.g. a wrangler script_name binding) is a deployment detail, not an agent of this repo.`,
+    "Include every real harness component in your scope whether or not anything uses it: a tool defined but never registered, a prompt file or prompt literal nothing references, an agent, Workflow, or Durable Object class defined or exported but never bound, an eval or fixture that tests the agent, a model config declared but unused. Never drop a component for being unused, dead, or legacy; Moda tags its deployment status separately. A class defined here that nothing binds or instantiates is an `entrypoint` artifact, not a runtime agent.",
     'A `tool` artifact is one tool definition. Never emit a group of tools ("MCP server tools", "composio_*", "worker tools") as a tool; record a dynamic tool source (MCP servers, Composio, webhooks) as a graph unknown that cites where the tools are loaded.',
     "Ignore any checked-in .moda/ directory: it is the output of an earlier Moda run and is often stale. Never cite it or reuse its entities.",
     'Every graph item with confidence below 0.85 must also carry confidenceReason: one sentence naming what held confidence down, e.g. "Inferred from AGENTS.md:231-232 only; no source file defines this agent." or "Entrypoint read, but the tool registry was outside the snapshot."',
@@ -17110,10 +16910,10 @@ function readDirectoryPreflightPaths(rootDir) {
   const stack = ["."];
   while (stack.length > 0 && paths.length < 2000) {
     const current = stack.pop() ?? ".";
-    const absolute = current === "." ? rootDir : join10(rootDir, current);
+    const absolute = current === "." ? rootDir : join9(rootDir, current);
     let entries;
     try {
-      entries = readdirSync5(absolute);
+      entries = readdirSync4(absolute);
     } catch {
       continue;
     }
@@ -17121,10 +16921,10 @@ function readDirectoryPreflightPaths(rootDir) {
       const child = current === "." ? entry : `${current}/${entry}`;
       if (shouldSkipPreflightPath(child))
         continue;
-      const childAbsolute = join10(rootDir, child);
+      const childAbsolute = join9(rootDir, child);
       let stat;
       try {
-        stat = lstatSync8(childAbsolute);
+        stat = lstatSync7(childAbsolute);
       } catch {
         continue;
       }
@@ -17186,7 +16986,7 @@ function findOnPath(command) {
   if (command.includes("/") && existsSync8(command))
     return command;
   for (const dir of (process.env.PATH ?? "").split(delimiter).filter(Boolean)) {
-    const candidate = join10(dir, command);
+    const candidate = join9(dir, command);
     if (existsSync8(candidate))
       return candidate;
   }
@@ -17240,6 +17040,7 @@ function scanHarness(options = {}) {
   linkFrameworksAndProviders(graph);
   finalizeGraph(graph);
   hydratePromptAndToolBodies(graph, rootDir);
+  tagComponentStatus(graph, rootDir);
   enrichScanCaptureMetadata(graph);
   return graph;
 }
@@ -17264,10 +17065,10 @@ function collectSnapshotInputs(rootDir, maxFiles, maxTextBytes) {
   let inventoryFileCount = 0;
   let inventoryTextBytes = 0;
   function walk(current) {
-    const path = normalizePath2(relative7(rootDir, current)) || ".";
+    const path = normalizePath2(relative6(rootDir, current)) || ".";
     let stat;
     try {
-      stat = lstatSync8(current);
+      stat = lstatSync7(current);
     } catch {
       return;
     }
@@ -17278,8 +17079,8 @@ function collectSnapshotInputs(rootDir, maxFiles, maxTextBytes) {
     if (stat.isDirectory()) {
       if (path !== "." && (isSkippedDir(path) || isSkippedPathPrefix(path)))
         return;
-      for (const entry of readdirSync5(current).sort())
-        walk(join10(current, entry));
+      for (const entry of readdirSync4(current).sort())
+        walk(join9(current, entry));
       return;
     }
     if (!stat.isFile())
@@ -17302,7 +17103,7 @@ function collectSnapshotInputs(rootDir, maxFiles, maxTextBytes) {
     let text = "";
     if (isTextFile(path)) {
       try {
-        text = readFileSync13(current, "utf8");
+        text = readFileSync12(current, "utf8");
         inventoryTextBytes += Buffer.byteLength(text, "utf8");
       } catch {
         return;
@@ -17321,7 +17122,7 @@ function buildSourceSnapshot(rootDir) {
   const inputs = collectSnapshotInputs(root, maxFiles, maxTextBytes);
   const repo = detectRepo(root, inputs.map((input) => ({
     path: input.path,
-    absPath: join10(root, input.path),
+    absPath: join9(root, input.path),
     rootDir: root,
     text: input.text
   })));
@@ -17335,7 +17136,7 @@ function buildSourceSnapshot(rootDir) {
 }
 function buildCommandScanPlan(context, rootDir) {
   const explicitPath = context.flags.path !== undefined;
-  const rel2 = normalizePath2(relative7(context.cwd, rootDir)) || ".";
+  const rel2 = normalizePath2(relative6(context.cwd, rootDir)) || ".";
   const scope = explicitPath && rel2 !== "." ? "narrow" : "broad";
   const machineReadable = context.outputMode !== "human";
   const approvalRequired = context.positional === "analyze" && scope === "broad" && !context.yes;
@@ -17420,7 +17221,7 @@ function writeHumanBlock(context, message) {
 function buildHarnessReadPlan(rootDir, pathWasExplicit) {
   return {
     scope: pathWasExplicit ? "narrow" : "broad",
-    rootPaths: [normalizePath2(relative7(rootDir, rootDir)) || "."],
+    rootPaths: [normalizePath2(relative6(rootDir, rootDir)) || "."],
     willRead: [
       "package manifests",
       "source files under the selected path",
@@ -17538,7 +17339,7 @@ async function syncHarnessWithRemote(context, body) {
   }, profileOptions);
 }
 function writeHarnessSyncState(rootDir, state) {
-  const path = join10(rootDir, SYNC_STATE_PATH);
+  const path = join9(rootDir, SYNC_STATE_PATH);
   mkdirSync5(dirname7(path), { recursive: true });
   writeFileSync5(path, `${JSON.stringify(state, null, 2)}
 `);
@@ -17552,7 +17353,7 @@ function selectedRuntimeAgentId(flags) {
   return;
 }
 function loadOrScanHarness(rootDir, tenant, context) {
-  const manifestPath = join10(rootDir, HARNESS_PATH);
+  const manifestPath = join9(rootDir, HARNESS_PATH);
   if (existsSync8(manifestPath))
     return readHarnessGraph(manifestPath);
   if (context) {
@@ -17609,7 +17410,7 @@ var FRESHER_REPORT_MAX_DIRS = 4000;
 function findFresherHarnessReports(rootDir) {
   let rootMtimeMs = 0;
   try {
-    rootMtimeMs = lstatSync8(join10(rootDir, HARNESS_REPORT_PATH)).mtimeMs;
+    rootMtimeMs = lstatSync7(join9(rootDir, HARNESS_REPORT_PATH)).mtimeMs;
   } catch {
     rootMtimeMs = 0;
   }
@@ -17621,19 +17422,19 @@ function findFresherHarnessReports(rootDir) {
     visited += 1;
     let entries;
     try {
-      entries = readdirSync5(dir, { withFileTypes: true });
+      entries = readdirSync4(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
       if (!entry.isDirectory() || entry.name.startsWith(".") || SKIPPED_DIRS.has(entry.name))
         continue;
-      const child = join10(dir, entry.name);
+      const child = join9(dir, entry.name);
       try {
-        const candidate = lstatSync8(join10(child, HARNESS_REPORT_PATH));
+        const candidate = lstatSync7(join9(child, HARNESS_REPORT_PATH));
         if (candidate.isFile() && candidate.mtimeMs > rootMtimeMs) {
           fresher.push({
-            path: normalizePath2(relative7(rootDir, join10(child, HARNESS_REPORT_PATH))),
+            path: normalizePath2(relative6(rootDir, join9(child, HARNESS_REPORT_PATH))),
             mtimeMs: candidate.mtimeMs
           });
         }
@@ -17645,7 +17446,7 @@ function findFresherHarnessReports(rootDir) {
   return fresher.sort((a, b) => b.mtimeMs - a.mtimeMs);
 }
 function warnFresherSubdirHarnessReports(context, rootDir, explicitReport) {
-  const explicitReportPath = explicitReport && explicitReport !== "true" ? normalizePath2(relative7(rootDir, resolve10(rootDir, explicitReport))) : undefined;
+  const explicitReportPath = explicitReport && explicitReport !== "true" ? normalizePath2(relative6(rootDir, resolve10(rootDir, explicitReport))) : undefined;
   if (explicitReportPath && explicitReportPath !== normalizePath2(HARNESS_REPORT_PATH))
     return;
   let fresher;
@@ -17658,16 +17459,16 @@ function warnFresherSubdirHarnessReports(context, rootDir, explicitReport) {
     return;
   const newest = fresher[0];
   const subdir = normalizePath2(dirname7(dirname7(newest.path)));
-  const rootState = existsSync8(join10(rootDir, HARNESS_REPORT_PATH)) ? `older ${HARNESS_REPORT_PATH}` : `no ${HARNESS_REPORT_PATH}`;
+  const rootState = existsSync8(join9(rootDir, HARNESS_REPORT_PATH)) ? `older ${HARNESS_REPORT_PATH}` : `no ${HARNESS_REPORT_PATH}`;
   writeHarnessNotice(context, `A fresher harness report exists at ${newest.path} (this directory has ${rootState}). If you meant that report, re-run with --path=${subdir}.`);
 }
 function readHarnessGraph(manifestPath) {
-  return JSON.parse(readFileSync13(manifestPath, "utf8"));
+  return JSON.parse(readFileSync12(manifestPath, "utf8"));
 }
 function writeHarnessArtifacts(graph, rootDir, options = {}) {
-  const modaDir = join10(rootDir, MODA_DIR);
+  const modaDir = join9(rootDir, MODA_DIR);
   mkdirSync5(modaDir, { recursive: true });
-  const manifestPath = join10(rootDir, HARNESS_PATH);
+  const manifestPath = join9(rootDir, HARNESS_PATH);
   writeFileSync5(manifestPath, `${JSON.stringify(graph, null, 2)}
 `);
   const written = [HARNESS_PATH];
@@ -17677,7 +17478,7 @@ function writeHarnessArtifacts(graph, rootDir, options = {}) {
   return written;
 }
 function writeHarnessSummary(graph, rootDir) {
-  const summaryPath = join10(rootDir, HARNESS_SUMMARY_PATH);
+  const summaryPath = join9(rootDir, HARNESS_SUMMARY_PATH);
   mkdirSync5(dirname7(summaryPath), { recursive: true });
   writeFileSync5(summaryPath, renderHarnessMarkdown(graph));
   return HARNESS_SUMMARY_PATH;
@@ -17852,10 +17653,10 @@ function inventoryFiles(rootDir, skipped, options = {}) {
   const maxTextBytes = numericEnv("MODA_HARNESS_MAX_TEXT_BYTES", DEFAULT_MAX_INVENTORY_TEXT_BYTES);
   let textBytes = 0;
   function walk(current) {
-    const rel2 = normalizePath2(relative7(rootReal, current)) || ".";
+    const rel2 = normalizePath2(relative6(rootReal, current)) || ".";
     let stat;
     try {
-      stat = lstatSync8(current);
+      stat = lstatSync7(current);
     } catch {
       recordSkipped(skipped, { path: rel2, reason: "stat failed" });
       return;
@@ -17869,8 +17670,8 @@ function inventoryFiles(rootDir, skipped, options = {}) {
         recordSkipped(skipped, { path: rel2, reason: "ignored directory" });
         return;
       }
-      for (const entry of readdirSync5(current).sort()) {
-        walk(join10(current, entry));
+      for (const entry of readdirSync4(current).sort()) {
+        walk(join9(current, entry));
       }
       return;
     }
@@ -17901,7 +17702,7 @@ function inventoryFiles(rootDir, skipped, options = {}) {
         recordSkipped(skipped, { path: rel2, reason: "scan text budget exceeded" });
       } else {
         try {
-          item.text = readFileSync13(current, "utf8");
+          item.text = readFileSync12(current, "utf8");
           textBytes += Buffer.byteLength(item.text, "utf8");
         } catch {
           recordSkipped(skipped, { path: rel2, reason: "text read failed" });
@@ -18208,7 +18009,7 @@ function maybeAddPromptArtifact(graph, file) {
   if (!isPrompt)
     return;
   const id = stableId("prompt", file.path);
-  const text = file.text ?? readFileSync13(file.absPath, "utf8");
+  const text = file.text ?? readFileSync12(file.absPath, "utf8");
   upsertArtifact(graph, {
     id,
     type: "prompt",
@@ -18786,10 +18587,10 @@ function computeDeterministicFloor(rootDir) {
 }
 function detectProviderPackagesInManifests(rootDir) {
   const present = new Set;
-  const packageJsonPath = join10(rootDir, "package.json");
+  const packageJsonPath = join9(rootDir, "package.json");
   if (existsSync8(packageJsonPath)) {
     try {
-      const deps = packageDependencyNames(readFileSync13(packageJsonPath, "utf8"));
+      const deps = packageDependencyNames(readFileSync12(packageJsonPath, "utf8"));
       for (const provider of PROVIDER_CATALOG) {
         for (const name of provider.packageNames) {
           if (deps.has(name))
@@ -18798,10 +18599,10 @@ function detectProviderPackagesInManifests(rootDir) {
       }
     } catch {}
   }
-  const pyprojectPath = join10(rootDir, "pyproject.toml");
+  const pyprojectPath = join9(rootDir, "pyproject.toml");
   if (existsSync8(pyprojectPath)) {
     try {
-      const deps = pyprojectDependencyNames(readFileSync13(pyprojectPath, "utf8"));
+      const deps = pyprojectDependencyNames(readFileSync12(pyprojectPath, "utf8"));
       for (const provider of PROVIDER_CATALOG) {
         for (const name of provider.packageNames) {
           if (deps.has(name.toLowerCase()))
@@ -19203,12 +19004,12 @@ function contentHashForAnnotatedSource(sourcePath, annotation) {
 function readSmallTextFileForHash(absPath, rootDir) {
   if (!existsSync8(absPath))
     return;
-  const rel2 = normalizePath2(relative7(rootDir, absPath));
+  const rel2 = normalizePath2(relative6(rootDir, absPath));
   if (isSecretishPath(rel2))
     return;
   let stat;
   try {
-    stat = lstatSync8(absPath);
+    stat = lstatSync7(absPath);
   } catch {
     return;
   }
@@ -19218,7 +19019,7 @@ function readSmallTextFileForHash(absPath, rootDir) {
   if (!isTextFile(rel2))
     return;
   try {
-    return readFileSync13(absPath, "utf8");
+    return readFileSync12(absPath, "utf8");
   } catch {
     return;
   }