@moda-ai/cli 1.55.55 → 1.55.57

package/dist/{agent-dc9zkdsm.js → agent-81f11bvs.js}

@@ -1,8 +1,8 @@
 import {
   buildDoctorReport
-} from "./cli-eqj302as.js";
+} from "./cli-krt4ap9y.js";
 import"./cli-94r5x9bg.js";
-import"./cli-jnwba1f3.js";
+import"./cli-8mqz9qgt.js";
 import"./cli-mm48br00.js";
 import {
   readHarnessSyncState
@@ -95,7 +95,7 @@ async function buildAgentContext(context) {
   const graph = readHarnessGraphIfPresent(context.cwd);
   const reportState = readHarnessReportState(context.cwd);
   const syncState = readHarnessSyncState(context.cwd);
-  const harness = graph ? await import("./harness-j0n400bv.js") : undefined;
+  const harness = graph ? await import("./harness-7cncbphq.js") : undefined;
   const topFindings = doctor.checks.filter((check) => check.status === "fail" || check.status === "warning").slice(0, 12).map(checkToFinding);
   const evidenceRefs = [
     ...doctor.checks.map(checkToEvidenceRef),

package/dist/{cli-px4dmcy0.js → cli-6k25gr7h.js}

@@ -12128,7 +12128,7 @@ var LINE_PATTERNS = [
     kind: "prompt_literal",
     signal: "code.prompt_configuration_field",
     confidence: "high",
-    pattern: /(?:^|[{,])\s*(?:instructions|systemPrompt|system_prompt)\s*:/,
+    pattern: /(?:^|[{,])\s*["']?(?:instructions?|systemPrompt|system_prompt|systemMessage|system_message|systemInstruction|system_instruction|backstory)["']?\s*:/,
     extensions: JS
   },
   {
@@ -12145,6 +12145,14 @@ var LINE_PATTERNS = [
     pattern: /^\s*(?:export\s+)?(?:(?:const|let|var)\s+)?(?:(?:[A-Za-z_$][\w$]*)?(?:prompt|instructions|system|template)[\w$]*)\s*(?::[^=]+)?=/i,
     extensions: [...JS, ...PY]
   },
+  {
+    kind: "prompt_literal",
+    signal: "code.system_injection",
+    confidence: "high",
+    pattern: /["'`]\s*\[SYSTEM:/,
+    extensions: [...JS, ...PY],
+    maxPerFile: 200
+  },
   {
     kind: "prompt_literal",
     signal: "code.prompt_builder_definition",
@@ -12311,7 +12319,13 @@ var LINE_PATTERNS = [
     kind: "model_config",
     signal: "model.assignment",
     confidence: "high",
-    pattern: /\b(model|model_name|model_id|modelName|modelId|MODEL[A-Z_]*)\s*[:=]\s*["'`][\w.:/-]*(gpt-|o[134](-mini)?\b|claude|gemini|llama|mistral|mixtral|deepseek|qwen|grok|sonnet|opus|haiku|command-r|glm|gemma)[\w.:/-]*["'`]/i
+    pattern: /\b(model|model_name|model_id|modelName|modelId|[A-Z_]*MODEL[A-Z_]*)\s*[:=]\s*["'`][\w.:/-]*(gpt-|o[134](-mini)?\b|claude|gemini|llama|mistral|mixtral|deepseek|qwen|grok|sonnet|opus|haiku|command-r|glm|gemma)[\w.:/-]*["'`]/i
+  },
+  {
+    kind: "model_config",
+    signal: "model.registry_key",
+    confidence: "high",
+    pattern: /^\s*["'`](?:openai|anthropic|google|meta-llama|mistralai|deepseek|qwen|x-ai|cohere|z-ai|moonshotai)\/[\w.:-]+["'`]\s*:/i
   },
   {
     kind: "model_config",
@@ -12396,7 +12410,7 @@ function detectLinePatterns(file, out) {
       if (!pattern.pattern.test(line))
         continue;
       const seen = perSignal.get(pattern.signal) ?? 0;
-      if (seen >= MAX_CANDIDATES_PER_FILE_PER_SIGNAL)
+      if (seen >= (pattern.maxPerFile ?? MAX_CANDIDATES_PER_FILE_PER_SIGNAL) && pattern.kind !== "model_config")
         break;
       perSignal.set(pattern.signal, seen + 1);
       out.push({
@@ -13560,8 +13574,349 @@ function applyPromptDiscovery(graph, discovery) {
 }
 
 // src/harness-candidate-promotion.ts
-import { readFileSync as readFileSync11 } from "node:fs";
+import { readFileSync as readFileSync11, statSync as statSync3 } from "node:fs";
 import { extname as extname7, posix, resolve as resolve9 } from "node:path";
+
+// src/harness-js-source.ts
+var import_typescript2 = __toESM(require_typescript(), 1);
+var JS_EXTENSION = /\.(?:[cm]?[jt]sx?)$/i;
+function isJsSourcePath(path) {
+  return JS_EXTENSION.test(path);
+}
+function scriptKindFor(path) {
+  const lower = path.toLowerCase();
+  if (lower.endsWith(".tsx"))
+    return import_typescript2.default.ScriptKind.TSX;
+  if (lower.endsWith(".ts") || lower.endsWith(".mts") || lower.endsWith(".cts"))
+    return import_typescript2.default.ScriptKind.TS;
+  if (lower.endsWith(".jsx"))
+    return import_typescript2.default.ScriptKind.JSX;
+  return import_typescript2.default.ScriptKind.JS;
+}
+function parseJsSource(path, text) {
+  return import_typescript2.default.createSourceFile(path, text, import_typescript2.default.ScriptTarget.Latest, true, scriptKindFor(path));
+}
+function codeOnlyLines(source) {
+  const text = source.text;
+  const chars = text.split("");
+  const seen = new Set;
+  const jsxText = [];
+  const collectJsxText = (node) => {
+    if (node.kind === import_typescript2.default.SyntaxKind.JsxText)
+      jsxText.push([node.getFullStart(), node.getEnd()]);
+    import_typescript2.default.forEachChild(node, collectJsxText);
+  };
+  collectJsxText(source);
+  const blank = (range) => {
+    if (seen.has(range.pos))
+      return;
+    if (jsxText.some(([start, end]) => range.pos >= start && range.pos < end))
+      return;
+    seen.add(range.pos);
+    for (let i = range.pos;i < range.end; i += 1) {
+      if (chars[i] !== `
+` && chars[i] !== "\r")
+        chars[i] = " ";
+    }
+  };
+  const visit = (node) => {
+    if (node.kind === import_typescript2.default.SyntaxKind.JsxText)
+      return;
+    const children = node.getChildren(source);
+    if (children.length === 0) {
+      for (const range of import_typescript2.default.getLeadingCommentRanges(text, node.getFullStart()) ?? [])
+        blank(range);
+      for (const range of import_typescript2.default.getTrailingCommentRanges(text, node.getEnd()) ?? [])
+        blank(range);
+      return;
+    }
+    for (const child of children)
+      visit(child);
+  };
+  visit(source);
+  for (const range of import_typescript2.default.getLeadingCommentRanges(text, source.endOfFileToken.getFullStart()) ?? [])
+    blank(range);
+  return chars.join("").split(/\r?\n/);
+}
+var TRIM_METHODS = new Set(["trim", "trimStart", "trimEnd"]);
+var TEXT_TAGS = new Map([
+  ["dedent", stripIndent],
+  ["outdent", stripIndent],
+  ["stripIndent", stripIndent],
+  ["stripIndents", (text) => text.replace(/^[ \t]+/gm, "").trim()],
+  ["oneLine", (text) => text.replace(/(?:\n(?:\s*))+/g, " ").trim()],
+  ["oneLineTrim", (text) => text.replace(/(?:\n(?:\s*))+/g, "").trim()]
+]);
+function stripIndent(text) {
+  const indents = text.split(`
+`).filter((line) => line.trim() !== "").map((line) => /^[ \t]*/.exec(line)[0].length);
+  const common = indents.length > 0 ? Math.min(...indents) : 0;
+  return (common > 0 ? text.replace(new RegExp(`^[ \\t]{${common}}`, "gm"), "") : text).trim();
+}
+function stringValueOf(node, source) {
+  if (import_typescript2.default.isStringLiteral(node) || import_typescript2.default.isNoSubstitutionTemplateLiteral(node))
+    return node.text;
+  if (import_typescript2.default.isTemplateExpression(node)) {
+    let out = node.head.text;
+    for (const span of node.templateSpans)
+      out += `\${${span.expression.getText(source)}}${span.literal.text}`;
+    return out;
+  }
+  if (import_typescript2.default.isParenthesizedExpression(node) || import_typescript2.default.isAsExpression(node) || import_typescript2.default.isSatisfiesExpression(node) || import_typescript2.default.isTypeAssertionExpression(node)) {
+    return stringValueOf(node.expression, source);
+  }
+  if (import_typescript2.default.isTaggedTemplateExpression(node)) {
+    const transform = import_typescript2.default.isIdentifier(node.tag) ? TEXT_TAGS.get(node.tag.text) : undefined;
+    const inner = transform && stringValueOf(node.template, source);
+    return inner === undefined || !transform ? undefined : transform(inner);
+  }
+  if (import_typescript2.default.isBinaryExpression(node) && node.operatorToken.kind === import_typescript2.default.SyntaxKind.PlusToken) {
+    const parts = composedParts([node.left, node.right], source);
+    return parts?.join("");
+  }
+  if (import_typescript2.default.isArrayLiteralExpression(node)) {
+    return composedParts(node.elements, source)?.join(`
+`);
+  }
+  if (import_typescript2.default.isCallExpression(node)) {
+    const callee = node.expression;
+    const array = import_typescript2.default.isPropertyAccessExpression(callee) && callee.name.text === "join" ? unfiltered(callee.expression) : undefined;
+    if (array && import_typescript2.default.isArrayLiteralExpression(array)) {
+      const separatorArg = node.arguments[0];
+      const separator = separatorArg === undefined ? "," : import_typescript2.default.isStringLiteral(separatorArg) || import_typescript2.default.isNoSubstitutionTemplateLiteral(separatorArg) ? separatorArg.text : undefined;
+      if (separator === undefined)
+        return;
+      return composedParts(array.elements, source)?.join(separator);
+    }
+    if (import_typescript2.default.isPropertyAccessExpression(callee) && TRIM_METHODS.has(callee.name.text) && node.arguments.length === 0) {
+      const inner = stringValueOf(callee.expression, source);
+      return inner === undefined ? undefined : callee.name.text === "trimStart" ? inner.trimStart() : callee.name.text === "trimEnd" ? inner.trimEnd() : inner.trim();
+    }
+    const transform = import_typescript2.default.isIdentifier(callee) && node.arguments.length === 1 ? TEXT_TAGS.get(callee.text) : undefined;
+    if (transform) {
+      const inner = stringValueOf(node.arguments[0], source);
+      return inner === undefined ? undefined : transform(inner);
+    }
+    return;
+  }
+  return;
+}
+function composedParts(elements, source) {
+  let literal = false;
+  const parts = [];
+  for (const element of elements) {
+    if (import_typescript2.default.isOmittedExpression(element))
+      return;
+    const value = import_typescript2.default.isSpreadElement(element) ? undefined : stringValueOf(element, source);
+    if (value !== undefined)
+      literal = true;
+    parts.push(value ?? `\${${element.getText(source)}}`);
+  }
+  return literal && parts.length > 0 ? parts : undefined;
+}
+function unfiltered(node) {
+  let current = node;
+  while (import_typescript2.default.isCallExpression(current) && import_typescript2.default.isPropertyAccessExpression(current.expression) && current.expression.name.text === "filter") {
+    const [predicate] = current.arguments;
+    if (current.arguments.length !== 1 || !import_typescript2.default.isIdentifier(predicate) || predicate.text !== "Boolean")
+      return;
+    current = current.expression.expression;
+  }
+  return current;
+}
+var PROMPT_NAME = /prompt|instruction|system|template|rubric|persona|backstory|content/i;
+function comparable(text) {
+  return text.replace(/\\/g, "").replace(/\s+/g, " ").trim();
+}
+function jsSystemInjectionLiteralAt(source, startLine) {
+  let found;
+  const visit = (node) => {
+    if (found || lineOf(source, node.getEnd()) < startLine || lineOf(source, node.getStart(source)) > startLine)
+      return;
+    if ((import_typescript2.default.isStringLiteral(node) || import_typescript2.default.isNoSubstitutionTemplateLiteral(node) || import_typescript2.default.isTemplateExpression(node)) && lineOf(source, node.getStart(source)) === startLine) {
+      let outer = node;
+      for (;; ) {
+        const parent = outer.parent;
+        if (import_typescript2.default.isBinaryExpression(parent) && parent.operatorToken.kind === import_typescript2.default.SyntaxKind.PlusToken && parent.left === outer) {
+          outer = parent;
+        } else if (import_typescript2.default.isArrayLiteralExpression(parent) && parent.elements[0] === outer && import_typescript2.default.isPropertyAccessExpression(parent.parent) && parent.parent.name.text === "join" && import_typescript2.default.isCallExpression(parent.parent.parent) && parent.parent.parent.expression === parent.parent) {
+          outer = parent.parent.parent;
+        } else {
+          break;
+        }
+      }
+      const text = stringValueOf(outer, source) ?? stringValueOf(node, source);
+      if (text !== undefined && /^\s*\[SYSTEM:/.test(text)) {
+        found = { text, line: startLine };
+        return;
+      }
+    }
+    import_typescript2.default.forEachChild(node, visit);
+  };
+  visit(source);
+  return found;
+}
+function lineOf(source, position) {
+  return source.getLineAndCharacterOfPosition(position).line + 1;
+}
+function propertyNameText(name) {
+  if (import_typescript2.default.isIdentifier(name) || import_typescript2.default.isStringLiteral(name) || import_typescript2.default.isPrivateIdentifier(name))
+    return name.text;
+  return;
+}
+function enclosingFunctionName(node) {
+  for (let current = node.parent;current; current = current.parent) {
+    if (import_typescript2.default.isFunctionDeclaration(current) || import_typescript2.default.isMethodDeclaration(current)) {
+      return current.name && (import_typescript2.default.isIdentifier(current.name) || import_typescript2.default.isStringLiteral(current.name)) ? current.name.text : undefined;
+    }
+    if (import_typescript2.default.isArrowFunction(current) || import_typescript2.default.isFunctionExpression(current)) {
+      const holder = current.parent;
+      if (holder && import_typescript2.default.isVariableDeclaration(holder) && import_typescript2.default.isIdentifier(holder.name))
+        return holder.name.text;
+      if (holder && import_typescript2.default.isPropertyAssignment(holder))
+        return propertyNameText(holder.name);
+      return;
+    }
+  }
+  return;
+}
+function jsLiteralDefinitionAt(source, startLine, excerpt2) {
+  const literal = excerpt2 ? comparable(excerpt2).slice(0, 120) : "";
+  const all = [];
+  const consider = (node, value, def, depth) => {
+    const defLine = lineOf(source, node.getStart(source));
+    const valueLine = lineOf(source, value.getStart(source));
+    const valueEndLine = lineOf(source, value.getEnd());
+    const distance = valueLine === startLine || defLine === startLine ? 0 : defLine === startLine - 1 && valueEndLine >= startLine ? 1 : -1;
+    if (distance < 0)
+      return;
+    const text = stringValueOf(value, source);
+    if (text === undefined)
+      return;
+    all.push({
+      def: { ...def, text, line: defLine },
+      start: node.getStart(source),
+      depth,
+      distance,
+      matches: literal.length > 0 && comparable(value.getText(source)).includes(literal),
+      named: PROMPT_NAME.test(def.key ?? def.identifier ?? "")
+    });
+  };
+  const visit = (node, depth) => {
+    const nodeStart = lineOf(source, node.getStart(source));
+    const nodeEnd = lineOf(source, node.getEnd());
+    if (nodeEnd < startLine - 1 || nodeStart > startLine)
+      return;
+    if (import_typescript2.default.isVariableDeclaration(node) && import_typescript2.default.isIdentifier(node.name) && node.initializer) {
+      consider(node, node.initializer, { identifier: node.name.text }, depth);
+    } else if (import_typescript2.default.isPropertyAssignment(node)) {
+      const key = propertyNameText(node.name);
+      if (key)
+        consider(node, node.initializer, { key }, depth);
+    } else if (import_typescript2.default.isPropertyDeclaration(node) && node.initializer) {
+      const name = propertyNameText(node.name);
+      if (name)
+        consider(node, node.initializer, { identifier: name }, depth);
+    } else if (import_typescript2.default.isBinaryExpression(node) && node.operatorToken.kind === import_typescript2.default.SyntaxKind.EqualsToken) {
+      const target = node.left;
+      const name = import_typescript2.default.isIdentifier(target) ? target.text : import_typescript2.default.isPropertyAccessExpression(target) ? target.name.text : undefined;
+      if (name)
+        consider(node, node.right, { identifier: name }, depth);
+    } else if (import_typescript2.default.isReturnStatement(node) && node.expression) {
+      const name = enclosingFunctionName(node);
+      if (name)
+        consider(node, node.expression, { identifier: name }, depth);
+    }
+    import_typescript2.default.forEachChild(node, (child) => visit(child, depth + 1));
+  };
+  visit(source, 0);
+  const rank = (a, b) => a.distance - b.distance || Number(b.matches) - Number(a.matches) || Number(b.named) - Number(a.named) || b.def.text.length - a.def.text.length || b.depth - a.depth;
+  const best = all.sort(rank)[0];
+  if (!best)
+    return;
+  const earlier = all.some((other) => other.def.line === best.def.line && other.start < best.start);
+  return earlier ? { ...best.def, column: source.getLineAndCharacterOfPosition(best.start).character + 1 } : best.def;
+}
+function calleeText(call, source) {
+  return call.expression.getText(source).replace(/\s+/g, "");
+}
+function outermostContainer(node) {
+  let current = node;
+  while (current.parent && (import_typescript2.default.isPropertyAssignment(current.parent) || import_typescript2.default.isObjectLiteralExpression(current.parent) || import_typescript2.default.isArrayLiteralExpression(current.parent) || import_typescript2.default.isParenthesizedExpression(current.parent) || import_typescript2.default.isAsExpression(current.parent) || import_typescript2.default.isSatisfiesExpression(current.parent) || import_typescript2.default.isSpreadElement(current.parent) || import_typescript2.default.isShorthandPropertyAssignment(current.parent) || import_typescript2.default.isAwaitExpression(current.parent) || import_typescript2.default.isNonNullExpression(current.parent)))
+    current = current.parent;
+  return current;
+}
+function isExportedDeclaration(declaration) {
+  const statement = declaration.parent?.parent;
+  return Boolean(statement && import_typescript2.default.isVariableStatement(statement) && statement.modifiers?.some((modifier) => modifier.kind === import_typescript2.default.SyntaxKind.ExportKeyword));
+}
+function followValue(start, source, callees, targets, seen, out) {
+  let current = start;
+  for (;; ) {
+    let parent = current.parent;
+    while (parent && ((import_typescript2.default.isPropertyAccessExpression(parent) || import_typescript2.default.isElementAccessExpression(parent)) && parent.expression === current)) {
+      current = parent;
+      parent = current.parent;
+    }
+    const container = outermostContainer(current);
+    const holder = container.parent;
+    if (holder && (import_typescript2.default.isCallExpression(holder) || import_typescript2.default.isNewExpression(holder)) && (holder.arguments?.includes(container) || import_typescript2.default.isCallExpression(holder) && holder.expression === container)) {
+      callees.push(calleeText(holder, source));
+      targets.push(holder.arguments?.[0]?.getText(source) ?? "");
+      current = holder;
+      continue;
+    }
+    if (holder && import_typescript2.default.isVariableDeclaration(holder) && import_typescript2.default.isIdentifier(holder.name) && holder.initializer === container) {
+      if (seen.has(holder))
+        return;
+      seen.add(holder);
+      const name = holder.name.text;
+      const declaration = holder.name;
+      const before = out.length;
+      if (isExportedDeclaration(holder))
+        out.push({ callees: [...callees], targets: [...targets], display: false, escape: "export" });
+      const visit = (node) => {
+        if (import_typescript2.default.isIdentifier(node) && node.text === name && node !== declaration && !(node.parent && import_typescript2.default.isPropertyAccessExpression(node.parent) && node.parent.name === node)) {
+          followValue(node, source, [...callees], [...targets], seen, out);
+        }
+        import_typescript2.default.forEachChild(node, visit);
+      };
+      visit(source);
+      if (out.length === before)
+        out.push({ callees: [...callees], targets: [...targets], display: false, escape: "unknown" });
+      return;
+    }
+    const display = Boolean(holder && (import_typescript2.default.isJsxExpression(holder) || import_typescript2.default.isJsxSpreadAttribute(holder)));
+    const statement = Boolean(holder && import_typescript2.default.isExpressionStatement(holder));
+    const exported = Boolean(holder && (import_typescript2.default.isExportSpecifier(holder) || import_typescript2.default.isExportAssignment(holder)));
+    out.push({ callees, targets, display, escape: display || statement ? undefined : exported ? "export" : "unknown" });
+    return;
+  }
+}
+function keyedValueConsumer(source, line, key, column) {
+  let property;
+  const find = (node) => {
+    if (property)
+      return;
+    if (import_typescript2.default.isPropertyAssignment(node) && lineOf(source, node.getStart(source)) === line && (column === undefined || source.getLineAndCharacterOfPosition(node.getStart(source)).character + 1 === column) && (import_typescript2.default.isIdentifier(node.name) || import_typescript2.default.isStringLiteral(node.name)) && node.name.text === key) {
+      property = node;
+      return;
+    }
+    import_typescript2.default.forEachChild(node, find);
+  };
+  find(source);
+  if (!property)
+    return { kind: "uses", uses: [{ callees: [], targets: [], display: false, escape: "unknown" }] };
+  const owner = property.parent;
+  if (import_typescript2.default.isObjectLiteralExpression(owner) && owner.properties.some((other) => import_typescript2.default.isPropertyAssignment(other) && import_typescript2.default.isIdentifier(other.name) && other.name.text === "role" && (import_typescript2.default.isStringLiteral(other.initializer) || import_typescript2.default.isNoSubstitutionTemplateLiteral(other.initializer)) && /^(?:system|user|assistant|developer|human)$/.test(other.initializer.text))) {
+    return { kind: "chat_message" };
+  }
+  const uses = [];
+  followValue(property, source, [], [], new Set, uses);
+  return { kind: "uses", uses };
+}
+
+// src/harness-candidate-promotion.ts
 var PROMOTED_CONFIDENCE = {
   high: 0.85,
   medium: 0.6
@@ -13573,7 +13928,28 @@ var JS_ASSIGNMENT_NAME = /(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*=/;
 var JS_PROPERTY_NAME = /^\s*(?:public\s+|readonly\s+)?([A-Za-z_$][\w$]*)\s*:\s*(?:new\s+)?(?:[\w.$]*\.)?(?:tool|functionTool|createTool|dynamicTool|DynamicStructuredTool)\s*\(/;
 var JS_TRAILING_ASSIGNMENT_NAME = /(?:const|let|var)\s+([A-Za-z_$][\w$]*)\s*=\s*(?:new\s+)?$/;
 var REGISTRY_CALL_NAME = /\b(?:register_tool|registerTool|add_tool)\s*\(\s*["']?([A-Za-z_$][\w$]*)/;
+var MODEL_FAMILY_ALIAS = /^(?:opus|sonnet|haiku)(?:[-.]?(?:\d[\w.]*|low|medium|high|xhigh|max|none|fast))*$/i;
+var MODEL_ASSIGNMENT_VALUE = /["']?\b(model|model_name|model_id|modelName|modelId|[A-Z_]*MODEL[A-Z_]*)["']?\s*[:=]\s*(["'`][^"'`]+["'`])/i;
+var MODEL_PREFERENCE_FIELD = /model\w*(?:preference|choice|option|label)|(?:preferred|selected|chosen)\w*model/i;
+var REGISTRY_KEY = /^\s*["'`]([\w-]+\/[\w.:-]+)["'`]\s*:/;
+var FULL_MODEL_ID = /[\w-]+\/[\w.:-]+|\d{8}/;
 var MODEL_STRING = /["'`]([\w.:/-]*(?:gpt-|o[134](?:-mini)?\b|claude|gemini|llama|mistral|mixtral|deepseek|qwen|grok|sonnet|opus|haiku|command-r|glm|gemma)[\w.:/-]*)["'`]/i;
+var SIGNAL_DESCRIPTIONS = {
+  "python.tool_decorator": "a tool decorator on the function",
+  "python.base_tool_subclass": "a BaseTool subclass",
+  "js.ai_sdk_tool": "a tool() factory call",
+  "tool_registry.registration": "a tool registry call",
+  "prompt_file.name_hint": "a document named like a prompt",
+  "prompt_file.prompts_dir": "a document under a prompts/ directory",
+  "prompt_file.agent_dir_instruction_text": "instruction-like text in an agent directory",
+  "prompt_file.loader_reference": "a file loaded as a prompt by code",
+  "prompt_file.template_loader_reference": "a file loaded as a prompt template by code",
+  "model.assignment": "a model id assigned in code"
+};
+function detectorConfidenceReason(candidate) {
+  const what = SIGNAL_DESCRIPTIONS[candidate.signal] ?? `the ${candidate.signal} pattern`;
+  return `Deterministic: found by ${what} at ${candidate.path}:${candidate.startLine} (${candidate.confidence}-confidence detector); not checked by the analyst.`;
+}
 function candidateEvidence(candidate) {
   return [{
     path: candidate.path,
@@ -13584,13 +13960,21 @@ function candidateEvidence(candidate) {
 function pathStem(path) {
   return path.replace(/\.[^.]+$/, "");
 }
+var jsSources = new Map;
 function readFileLines(rootDir, path, cache) {
   const cached = cache.get(path);
   if (cached !== undefined)
     return cached;
   let lines;
   try {
-    lines = readFileSync11(resolve9(rootDir, path), "utf8").split(/\r?\n/);
+    const text = readFileSync11(resolve9(rootDir, path), "utf8");
+    if (isJsSourcePath(path)) {
+      const source = parseJsSource(path, text);
+      jsSources.set(`${rootDir}::${path}`, source);
+      lines = codeOnlyLines(source);
+    } else {
+      lines = text.split(/\r?\n/);
+    }
   } catch {
     lines = null;
   }
@@ -13631,6 +14015,7 @@ function promoteToolCandidate(candidate, rootDir, confidence2, fileCache) {
     sourcePath: candidate.path,
     usedByAgentIds: [],
     confidence: confidence2,
+    confidenceReason: detectorConfidenceReason(candidate),
     evidence: candidateEvidence(candidate),
     body: extractToolBody({ path: candidate.path, rootDir }, { name, reason: candidate.signal })
   };
@@ -13665,6 +14050,12 @@ function buildsPrompts(path, lines) {
     return false;
   return exportedNames(path, lines).some((name) => !UTILITY_EXPORT.test(name) && (BUILDER_VERB.test(name) || PROMPT_NOUN_LAST.test(name)));
 }
+var TEST_FILE2 = /(?:^|\/)(?:test_[^/]*\.py|[^/]*_test\.py|conftest\.py|[^/]*\.(?:test|spec)\.[^/]+)$/i;
+var FIXTURE_DIR2 = /(?:^|\/)(?:fixtures?|test-fixtures|__fixtures__|__mocks__)(?:\/|$)/i;
+var EVAL_HARNESS_PATH = /(?:^|[\/_.-])(?:evals?|evaluations?|judges?|grader|grading|pairwise|quality|rubrics?|benchmarks?)(?:[\/_.-]|$)/i;
+function isTestInput(path) {
+  return (TEST_FILE2.test(path) || FIXTURE_DIR2.test(path)) && !EVAL_HARNESS_PATH.test(path);
+}
 function promotePromptFileCandidate(candidate, confidence2) {
   return {
     id: stableId("prompt", candidate.path),
@@ -13674,6 +14065,7 @@ function promotePromptFileCandidate(candidate, confidence2) {
     sourcePath: candidate.path,
     usedByAgentIds: [],
     confidence: confidence2,
+    confidenceReason: detectorConfidenceReason(candidate),
     evidence: candidateEvidence(candidate)
   };
 }
@@ -13696,6 +14088,7 @@ var MODEL_INPUT_KEYS = [
   "text"
 ];
 var DIRECT_PROMPT_KEYS = new Set([
+  "instruction",
   "system",
   "systemPrompt",
   "system_prompt",
@@ -13727,8 +14120,12 @@ var CONFIG_EXTENSIONS = new Set([".json", ".yaml", ".yml"]);
 var PROMPT_NAMED_IDENTIFIER = /prompt|system|instruction/i;
 var SECOND_PERSON_OPENING = /^\s*(?:\[[A-Z]+:\s*|<\w+>\s*)*(?:you|your)\b/i;
 var MIN_UNNAMED_REFERENCED_PROMPT_CHARS = 200;
+var UNUSED_PROMPT_CONFIDENCE = 0.6;
 var REFERENCED_PROMPT_CONFIDENCE = 0.7;
 var MIN_RESOLVED_PROMPT_CHARS = 20;
+var SYSTEM_INJECTION = /^\s*\[SYSTEM:/;
+var BARE_SYSTEM_TAG = /^\s*\[SYSTEM:[\sA-Z0-9_-]*\]\s*$/;
+var SYSTEM_INJECTION_LITERAL = /["'`]\s*\[SYSTEM:/;
 var MIN_CONFIG_PROMPT_CHARS = 40;
 var MAX_BUILDER_LOOKBEHIND_LINES = 40;
 var DEFINITION_HEAD = /^\s*(?:export\s+)?(?:(?:const|let|var|readonly|static|public|private)\s+)*["']?([A-Za-z_$][\w$]*)["']?\s*(?:(?::\s*[\w$.<>[\]|, ]+?)?\s*(=)(?![=>])|(:))\s*(.*)$/;
@@ -13753,128 +14150,15 @@ function readStringLiteral(text, start) {
       i += 2;
       continue;
     }
-    if (opener.length === 1 && opener !== "`" && char === `
+    if (opener.length === 1 && char === `
 `)
       return;
-    if (opener === "`" && char === "$" && text[i + 1] === "{") {
-      let depth = 1;
-      i += 2;
-      while (i < text.length && depth > 0) {
-        if (text[i] === "`" || text[i] === '"' || text[i] === "'") {
-          const nested = readStringLiteral(text, i);
-          if (nested) {
-            i = nested.end;
-            continue;
-          }
-          if (text[i] === "`")
-            return;
-          i += 1;
-          continue;
-        }
-        const regexEnd = text[i] === "/" ? regexLiteralEnd(text, i) : undefined;
-        if (regexEnd !== undefined) {
-          i = regexEnd;
-          continue;
-        }
-        if (text.startsWith("//", i)) {
-          const newline = text.indexOf(`
-`, i);
-          i = newline < 0 ? text.length : newline;
-          continue;
-        }
-        if (text.startsWith("/*", i)) {
-          const close = text.indexOf("*/", i + 2);
-          if (close < 0)
-            return;
-          i = close + 2;
-          continue;
-        }
-        if (text[i] === "{")
-          depth += 1;
-        else if (text[i] === "}")
-          depth -= 1;
-        i += 1;
-      }
-      continue;
-    }
     if (text.startsWith(opener, i))
       return { value: text.slice(start + opener.length, i), end: i + opener.length };
     i += 1;
   }
   return;
 }
-var EXPRESSION_KEYWORDS = new Set([
-  "return",
-  "typeof",
-  "instanceof",
-  "in",
-  "of",
-  "new",
-  "delete",
-  "void",
-  "throw",
-  "case",
-  "do",
-  "else",
-  "yield",
-  "await"
-]);
-function endsWithOperand(text, end) {
-  let i = end;
-  while (i > 0 && /\s/.test(text[i - 1]))
-    i -= 1;
-  if (i === 0)
-    return false;
-  const char = text[i - 1];
-  if (char === ")" || char === "]" || char === '"' || char === "'" || char === "`")
-    return true;
-  if (/[\w$]/.test(char)) {
-    let wordStart = i;
-    while (wordStart > 0 && /[\w$]/.test(text[wordStart - 1]))
-      wordStart -= 1;
-    const word = text.slice(wordStart, i);
-    if (/^\d/.test(word))
-      return true;
-    let before = wordStart;
-    while (before > 0 && /\s/.test(text[before - 1]))
-      before -= 1;
-    const isProperty = text[before - 1] === "." && text[before - 2] !== ".";
-    return isProperty || !EXPRESSION_KEYWORDS.has(word);
-  }
-  if ((char === "+" || char === "-") && text[i - 2] === char)
-    return endsWithOperand(text, i - 2);
-  if (char === "!" && i >= 2 && /[\w$)\]]/.test(text[i - 2]))
-    return endsWithOperand(text, i - 1);
-  return false;
-}
-function regexLiteralEnd(text, start) {
-  if (text[start + 1] === "/" || text[start + 1] === "*")
-    return;
-  if (endsWithOperand(text, start))
-    return;
-  let inClass = false;
-  for (let i = start + 1;i < text.length; i += 1) {
-    const char = text[i];
-    if (char === `
-`)
-      return;
-    if (char === "\\") {
-      i += 1;
-      continue;
-    }
-    if (char === "[")
-      inClass = true;
-    else if (char === "]")
-      inClass = false;
-    else if (char === "/" && !inClass) {
-      let end = i + 1;
-      while (/[a-z]/i.test(text[end] ?? ""))
-        end += 1;
-      return end;
-    }
-  }
-  return;
-}
 function readStringValue(text, offset) {
   let i = offset;
   const parts = [];
@@ -13931,7 +14215,9 @@ function stringStart(rest) {
   }
   return STRING_OPENER.test(remaining) ? consumed : -1;
 }
-function resolvePromptLiteralDefinition(lines, startLine) {
+function resolvePromptLiteralDefinition(lines, startLine, jsSource, excerpt2) {
+  if (jsSource)
+    return jsLiteralDefinitionAt(jsSource, startLine, excerpt2);
   const text = lines.join(`
 `);
   for (const index of [startLine - 1, startLine - 2]) {
@@ -14009,16 +14295,8 @@ function resolvePromptLiteralDefinition(lines, startLine) {
 }
 function endsInComment(prefix) {
   let quote;
-  let inBlock = false;
   for (let i = 0;i < prefix.length; i += 1) {
     const char = prefix[i];
-    if (inBlock) {
-      if (prefix.startsWith("*/", i)) {
-        inBlock = false;
-        i += 1;
-      }
-      continue;
-    }
     if (quote) {
       if (char === "\\")
         i += 1;
@@ -14026,23 +14304,14 @@ function endsInComment(prefix) {
         quote = undefined;
       continue;
     }
-    if (char === '"' || char === "'" || char === "`") {
+    if (char === '"' || char === "'") {
       quote = char;
       continue;
     }
-    const regexEnd = char === "/" ? regexLiteralEnd(prefix, i) : undefined;
-    if (regexEnd !== undefined) {
-      i = regexEnd - 1;
-      continue;
-    }
-    if (prefix.startsWith("//", i))
+    if (char === "#")
       return true;
-    else if (prefix.startsWith("/*", i)) {
-      inBlock = true;
-      i += 1;
-    }
   }
-  return inBlock;
+  return false;
 }
 function readYamlBlockScalar(lines, index, rest) {
   const indicator = /^([|>])([-+]?)\s*(?:#.*)?$/.exec(rest.trim());
@@ -14206,7 +14475,7 @@ function importStatementLines(lines) {
   }
   return covered;
 }
-var MODEL_CALLEE = /model|llm|complet|generat|chat|invoke|infer|prompt|agent|judge|claude|gpt|openai|anthropic|gemini|\.create$/i;
+var MODEL_CALLEE = /model|llm|complet|generat|chat|invoke|infer|prompt|agent|judge|jev|claude|gpt|openai|anthropic|gemini|\.create$/i;
 function calleeImportedFromModelFile(callee, path, lines, modelFiles) {
   const base = callee.split(".")[0];
   const text = lines.join(`
@@ -14251,7 +14520,10 @@ function localHelperCallsModel(callee, lines) {
   const start = lines.findIndex((line) => head.test(line));
   if (start < 0)
     return false;
-  return lines.slice(start + 1, start + 1 + MAX_HELPER_BODY_LINES).some((line) => MODEL_CALL_IN_BODY.test(line));
+  const match = head.exec(lines[start]);
+  const declared = /^\s*(?:export\s+)?(?:async\s+)?(?:function|def|const|let|var)\b/.test(lines[start]);
+  const sameLine = declared && match ? lines[start].slice(match.index + match[0].length) : "";
+  return [sameLine, ...lines.slice(start + 1, start + 1 + MAX_HELPER_BODY_LINES)].some((line) => MODEL_CALL_IN_BODY.test(line));
 }
 function callCarriesChatMessages(lines, index) {
   for (let i = Math.max(0, index - CALL_ROLE_WINDOW_LINES);i < Math.min(lines.length, index + CALL_ROLE_WINDOW_LINES + 1); i += 1) {
@@ -14398,6 +14670,31 @@ function readsAsInstructions(identifier, text) {
     return score >= 2 || secondPerson;
   return secondPerson && score >= 2 && text.length >= MIN_UNNAMED_REFERENCED_PROMPT_CHARS;
 }
+function readsAsUnusedPrompt(name, text) {
+  if (UI_COPY_NAME.test(name))
+    return false;
+  if (DIRECT_PROMPT_KEYS.has(name) && instructionScore(text) >= 2)
+    return true;
+  return readsAsInstructions(name, text);
+}
+var UI_COPY_NAME = /placeholder|label|tooltip|hint|title|caption|toast|button|error|empty_?state|copy/i;
+function isOnlyDisplayed(lines, identifier, definitionLine) {
+  const ident = escapeRegExp(identifier);
+  const reference = new RegExp(`(?<![\\w$.])${ident}(?![\\w$])`);
+  const display = new RegExp(`\\{\\s*${ident}\\s*\\}(?!\\s*from)|[\\w-]+=\\{\\s*${ident}\\s*\\}|\\b(?:console|logger|log)\\.\\w+\\([^)]*\\b${ident}\\b|\\b(?:toast|alert|notify)\\w*\\([^)]*\\b${ident}\\b`);
+  let references = 0;
+  for (let index = 0;index < lines.length; index += 1) {
+    const line = lines[index];
+    if (index === definitionLine - 1 || !reference.test(line))
+      continue;
+    if (/^\s*(?:\/\/|#|\*|export\s*(?:default\s+)?\{|export\s+default\s+[\w$]+\s*;?\s*$)/.test(line))
+      continue;
+    references += 1;
+    if (!display.test(line))
+      return false;
+  }
+  return references > 0;
+}
 function hasNearbyRole(lines, line) {
   for (let i = Math.max(0, line - 4);i < Math.min(lines.length, line + 3); i += 1) {
     if (/\brole\b\s*["']?\s*[:=]/.test(lines[i]))
@@ -14412,22 +14709,131 @@ function isDirectModelInput(key, value, path, lines, line, modelFiles) {
   if (modelFiles.has(path)) {
     return DIRECT_PROMPT_KEYS.has(key) || key === "content" && hasNearbyRole(lines, line);
   }
+  if (PROMPT_CONFIG_KEYS.has(key))
+    return true;
   return DIRECT_PROMPT_KEYS.has(key) && instructionScore(value) >= 2;
 }
+function isModelCallee(callee, path, lines, modelFiles) {
+  return MODEL_CALLEE.test(callee) || calleeImportedFromModelFile(callee, path, lines, modelFiles) || localHelperCallsModel(callee, lines);
+}
+function importSpecifiers(lines) {
+  return lines.flatMap((line) => [...line.matchAll(/\bfrom\s+["']?([.\w/@$-]+)["']?|\bimport\s*\(\s*["']([^"']+)["']|\brequire\(\s*["']([^"']+)["']/g)].map((match) => match[1] ?? match[2] ?? match[3]));
+}
+var MODEL_ENDPOINT = /api\.anthropic\.com|api\.openai\.com|openrouter\.ai|generativelanguage\.googleapis\.com|api\.mistral\.ai|api\.groq\.com|api\.together\.(?:xyz|ai)|api\.deepseek\.com|\/chat\/completions\b|\/v1\/messages\b|\/v1\/responses\b/;
+var HTTP_CALLEE = /^(?:fetch|axios(?:\.post|\.request)?|got(?:\.post)?|ky(?:\.post)?|request|ofetch|\$fetch)$/;
+function targetsModelEndpoint(target, lines) {
+  if (MODEL_ENDPOINT.test(target))
+    return true;
+  const name = /^(?:[A-Za-z_$][\w$]*\.)*([A-Za-z_$][\w$]*)$/.exec(target.trim())?.[1];
+  if (!name)
+    return false;
+  const binding = new RegExp(`\\b${escapeRegExp(name)}\\s*[:=](?!=)`);
+  return lines.some((line, index) => {
+    const match = binding.exec(line);
+    if (!match)
+      return false;
+    const initializer = [line.slice(match.index), ...lines.slice(index + 1, index + 4)].join(`
+`);
+    const end = initializer.search(/;|,\s*$/m);
+    return MODEL_ENDPOINT.test(end < 0 ? initializer : initializer.slice(0, end));
+  });
+}
+function fileReachesModel(path, lines, modelFiles) {
+  if (modelFiles.has(path))
+    return true;
+  if (lines.some((line) => MODEL_ENDPOINT.test(line)))
+    return true;
+  const python = extname7(path) === ".py";
+  return importSpecifiers(lines).some((spec) => [...modelFiles].some((modelFile) => specifierResolvesTo(spec, path, modelFile, python)));
+}
+function modelFileImports(path, rootDir, modelFiles, fileCache) {
+  return [...modelFiles].some((modelFile) => {
+    if (modelFile === path)
+      return false;
+    const lines = readFileLines(rootDir, modelFile, fileCache);
+    return Boolean(lines && importSpecifiers(lines).some((spec) => specifierResolvesTo(spec, modelFile, path, extname7(modelFile) === ".py")));
+  });
+}
+var PASS_THROUGH_CALLEE = /^(?:Object\.(?:freeze|seal|assign)|structuredClone|Promise\.resolve|JSON\.stringify|(?:_\.|lodash\.)?(?:cloneDeep|clone|merge)|deepFreeze|defu)$/;
+function escapesAsItself(use, kind) {
+  return use.escape !== undefined && (kind === undefined || use.escape === kind) && use.callees.every((callee) => PASS_THROUGH_CALLEE.test(callee));
+}
+function keyedObjectReachesModel(consumer, path, lines, modelFiles) {
+  if (consumer.kind === "chat_message")
+    return true;
+  return consumer.uses.some((use) => escapesAsItself(use) || use.callees.some((callee, index) => isModelCallee(callee, path, lines, modelFiles) || HTTP_CALLEE.test(callee) && targetsModelEndpoint(use.targets[index] ?? "", lines)));
+}
+var PROMPT_CONFIG_KEYS = new Set([
+  "instructions",
+  "instruction",
+  "systemPrompt",
+  "system_prompt",
+  "systemMessage",
+  "system_message",
+  "systemInstruction",
+  "system_instruction",
+  "backstory"
+]);
+function systemInjectionLiteralAt(lines, startLine, jsSource) {
+  if (jsSource)
+    return jsSystemInjectionLiteralAt(jsSource, startLine);
+  const line = lines[startLine - 1];
+  if (line === undefined || /^\s*(?:\/\/|\*(?!\/)|#)/.test(line))
+    return;
+  const match = SYSTEM_INJECTION_LITERAL.exec(line);
+  if (!match || endsInComment(line.slice(0, match.index)) || opensInsideString(line.slice(0, match.index)))
+    return;
+  const text = readStringValue(lines.join(`
+`), textOffsetOfLine(lines, startLine - 1) + match.index);
+  return text === undefined ? undefined : { text, line: startLine };
+}
+function opensInsideString(prefix) {
+  let quote;
+  for (let i = 0;i < prefix.length; i += 1) {
+    const char = prefix[i];
+    if (char === "\\")
+      i += 1;
+    else if (quote) {
+      if (char === quote)
+        quote = undefined;
+    } else if (char === '"' || char === "'" || char === "`")
+      quote = char;
+  }
+  return quote !== undefined;
+}
 function promotePromptLiteralCandidate(candidate, rootDir, confidence2, fileCache, files) {
   const lines = readFileLines(rootDir, candidate.path, fileCache);
   if (!lines)
     return;
-  const definition = resolvePromptLiteralDefinition(lines, candidate.startLine);
+  const definition = resolvePromptLiteralDefinition(lines, candidate.startLine, jsSources.get(`${rootDir}::${candidate.path}`), candidate.excerpt) ?? (candidate.signal === "code.system_injection" ? systemInjectionLiteralAt(lines, candidate.startLine, jsSources.get(`${rootDir}::${candidate.path}`)) : undefined);
   if (!definition)
     return;
   const value = definition.text.trim();
   const literalText = value.replace(/\$\{[^}]*\}|\{[A-Za-z_][\w.]*\}/g, "").trim();
-  if (literalText.length < MIN_RESOLVED_PROMPT_CHARS || isCodeLikeContent(value))
+  const minChars = definition.key && PROMPT_CONFIG_KEYS.has(definition.key) ? 1 : MIN_RESOLVED_PROMPT_CHARS;
+  if (literalText.length < minChars || isCodeLikeContent(value))
+    return;
+  if (isTestInput(candidate.path))
     return;
   const key = definition.key ?? (definition.identifier && DIRECT_PROMPT_KEYS.has(definition.identifier) ? definition.identifier : undefined);
   let use;
-  if (key && isDirectModelInput(key, value, candidate.path, lines, definition.line, files.model)) {
+  if (SYSTEM_INJECTION.test(value) && !BARE_SYSTEM_TAG.test(value)) {
+    use = { path: candidate.path, line: definition.line, key: "system-injection" };
+  }
+  const jsSource = jsSources.get(`${rootDir}::${candidate.path}`);
+  if (!use && definition.key && !PROMPT_CONFIG_KEYS.has(definition.key) && !CONFIG_EXTENSIONS.has(extname7(candidate.path).toLowerCase())) {
+    const exportUsed = () => modelFileImports(candidate.path, rootDir, files.model, fileCache);
+    if (jsSource) {
+      const consumer = keyedValueConsumer(jsSource, definition.line, definition.key, definition.column);
+      if (!fileReachesModel(candidate.path, lines, files.model) && !(consumer.kind === "uses" && consumer.uses.some((use2) => escapesAsItself(use2, "export")) && exportUsed()))
+        return;
+      if (!keyedObjectReachesModel(consumer, candidate.path, lines, files.model))
+        return;
+    } else if (!fileReachesModel(candidate.path, lines, files.model) && !exportUsed()) {
+      return;
+    }
+  }
+  if (!use && key && isDirectModelInput(key, value, candidate.path, lines, definition.line, files.model)) {
     use = { path: candidate.path, line: definition.line, key };
   }
   if (!use && definition.identifier) {
@@ -14435,9 +14841,15 @@ function promotePromptLiteralCandidate(candidate, rootDir, confidence2, fileCach
       allowReference: readsAsInstructions(definition.identifier, value)
     });
   }
-  if (!use)
-    return;
   const name = definition.identifier ?? definition.key;
+  const unused = !use;
+  if (!use) {
+    if (!name || !readsAsUnusedPrompt(name, value))
+      return;
+    if (definition.identifier && isOnlyDisplayed(lines, definition.identifier, definition.line))
+      return;
+    use = { path: candidate.path, line: definition.line, key: "unused" };
+  }
   const evidence = [{ path: candidate.path, line: definition.line, reason: `deterministic detector ${candidate.signal}` }];
   const sameSite = use.path === candidate.path && use.line === definition.line;
   if (!sameSite) {
@@ -14448,13 +14860,13 @@ function promotePromptLiteralCandidate(candidate, rootDir, confidence2, fileCach
     });
   }
   return {
-    id: stableId("prompt", `${pathStem(candidate.path)}:L${definition.line}`),
+    id: stableId("prompt", `${pathStem(candidate.path)}:L${definition.line}${definition.column ? `C${definition.column}` : ""}`),
     type: "prompt",
     name: name ? titleFromId(name) : `Inline Prompt (${candidate.path}:${definition.line})`,
     scope: "shared",
     usedByAgentIds: [],
-    confidence: use.referenceOnly ? Math.min(confidence2, REFERENCED_PROMPT_CONFIDENCE) : confidence2,
-    confidenceReason: use.referenceOnly ? `Deterministic: instruction-like literal ${name} is referenced at ${use.path}:${use.line} through ${use.via}, but no prompt key (system, instructions, content) was found at the call.` : sameSite ? `Deterministic: string literal written under the ${use.key} key at ${candidate.path}:${definition.line}.` : `Deterministic: string literal ${name} passed to a model call as ${use.key} at ${use.path}:${use.line}.`,
+    confidence: unused ? Math.min(confidence2, UNUSED_PROMPT_CONFIDENCE) : use.referenceOnly ? Math.min(confidence2, REFERENCED_PROMPT_CONFIDENCE) : confidence2,
+    confidenceReason: unused ? `Deterministic: instruction-like literal ${name} at ${candidate.path}:${definition.line}; no model call using it was found, so it may be unused.` : use.referenceOnly ? `Deterministic: instruction-like literal ${name} is referenced at ${use.path}:${use.line} through ${use.via}, but no prompt key (system, instructions, content) was found at the call.` : use.key === "system-injection" ? `Deterministic: literal at ${candidate.path}:${definition.line} opens with [SYSTEM:, a message injected into the agent's conversation.` : sameSite ? `Deterministic: string literal written under the ${use.key} key at ${candidate.path}:${definition.line}.` : `Deterministic: string literal ${name} passed to a model call as ${use.key} at ${use.path}:${use.line}.`,
     evidence,
     body: definition.text
   };
@@ -14462,9 +14874,18 @@ function promotePromptLiteralCandidate(candidate, rootDir, confidence2, fileCach
 function promoteModelConfigCandidate(candidate, rootDir, confidence2, fileCache) {
   const lines = readFileLines(rootDir, candidate.path, fileCache);
   const sourceLine = lines?.[candidate.startLine - 1] ?? "";
-  const model = MODEL_STRING.exec(sourceLine)?.[1] ?? MODEL_STRING.exec(candidate.excerpt)?.[1];
+  const assignment = MODEL_ASSIGNMENT_VALUE.exec(sourceLine);
+  const [field, assigned] = [assignment?.[1], assignment?.[2]];
+  if (field && MODEL_PREFERENCE_FIELD.test(field) && !FULL_MODEL_ID.test(assigned ?? ""))
+    return;
+  const registryKey = candidate.signal === "model.registry_key" ? REGISTRY_KEY.exec(sourceLine)?.[1] : undefined;
+  const model = (assigned && MODEL_STRING.exec(assigned)?.[1]) ?? registryKey ?? MODEL_STRING.exec(sourceLine)?.[1] ?? MODEL_STRING.exec(candidate.excerpt)?.[1];
   if (!model)
     return;
+  if (MODEL_FAMILY_ALIAS.test(model.split("/").pop() ?? model))
+    return;
+  if (TEST_PATH2.test(candidate.path) && !usedOutsideTests(rootDir, model))
+    return;
   return {
     id: stableId("model_config", `${pathStem(candidate.path)}:L${candidate.startLine}`),
     type: "model_config",
@@ -14472,9 +14893,42 @@ function promoteModelConfigCandidate(candidate, rootDir, confidence2, fileCache)
     scope: "shared",
     usedByAgentIds: [],
     confidence: confidence2,
+    confidenceReason: detectorConfidenceReason(candidate),
     evidence: candidateEvidence(candidate)
   };
 }
+var nonTestSourcePaths = new Map;
+var modelUsedOutsideTests = new Map;
+var MAX_MODEL_SOURCE_BYTES = 1024 * 1024;
+var MODEL_SOURCE_FILE = /\.(?:[cm]?[jt]sx?|py|json|jsonc|ya?ml|toml)$/i;
+var NON_SOURCE_DIR = /(^|\/)(?:docs?|\.moda)\//i;
+function usedOutsideTests(rootDir, modelId) {
+  let results = modelUsedOutsideTests.get(rootDir);
+  if (!results) {
+    results = new Map;
+    modelUsedOutsideTests.set(rootDir, results);
+  }
+  const cached = results.get(modelId);
+  if (cached !== undefined)
+    return cached;
+  let paths = nonTestSourcePaths.get(rootDir);
+  if (!paths) {
+    paths = inventoryFiles(rootDir, [], { includeFile: (path) => MODEL_SOURCE_FILE.test(path) }).map((file) => file.path).filter((path) => !TEST_PATH2.test(path) && MODEL_SOURCE_FILE.test(path) && !NON_SOURCE_DIR.test(path));
+    nonTestSourcePaths.set(rootDir, paths);
+  }
+  const used = paths.some((path) => {
+    try {
+      const absolute = resolve9(rootDir, path);
+      if (statSync3(absolute).size > MAX_MODEL_SOURCE_BYTES)
+        return false;
+      return readFileSync11(absolute, "utf8").includes(modelId);
+    } catch {
+      return false;
+    }
+  });
+  results.set(modelId, used);
+  return used;
+}
 function mergePromotedDuplicate(existing, next) {
   for (const entry of next.evidence) {
     const already = existing.evidence.some((candidate) => candidate.path === entry.path && candidate.line === entry.line && candidate.reason === entry.reason);
@@ -14486,6 +14940,14 @@ function mergePromotedDuplicate(existing, next) {
     existing.body = next.body;
 }
 function promoteHarnessCandidates(report, rootDir) {
+  jsSources.clear();
+  try {
+    return promoteAll(report, rootDir);
+  } finally {
+    jsSources.clear();
+  }
+}
+function promoteAll(report, rootDir) {
   const fileCache = new Map;
   const byId = new Map;
   const files = {
@@ -14502,7 +14964,9 @@ function promoteHarnessCandidates(report, rootDir) {
         artifact = promoteToolCandidate(candidate, rootDir, confidence2, fileCache);
         break;
       case "prompt_file":
-        if (candidate.signal === "prompt_module.name_hint" && (TEST_PATH2.test(candidate.path) || !buildsPrompts(candidate.path, readFileLines(rootDir, candidate.path, fileCache))))
+        if (candidate.signal === "prompt_module.name_hint" && (isTestInput(candidate.path) || !buildsPrompts(candidate.path, readFileLines(rootDir, candidate.path, fileCache))))
+          break;
+        if (isTestInput(candidate.path))
           break;
         artifact = promotePromptFileCandidate(candidate, confidence2);
         break;
@@ -14861,7 +15325,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-6bex338w.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-tzn5ye9e.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);
@@ -16707,6 +17171,7 @@ function renderExternalHarnessAnalystPrompt(options) {
     "Include every real harness component in your scope whether or not anything uses it: a tool defined but never registered, a prompt file or prompt literal nothing references, an agent, Workflow, or Durable Object class defined or exported but never bound, an eval or fixture that tests the agent, a model config declared but unused. Never drop a component for being unused, dead, or legacy; Moda tags its deployment status separately. A class defined here that nothing binds or instantiates is an `entrypoint` artifact, not a runtime agent.",
     'A `tool` artifact is one tool definition. Never emit a group of tools ("MCP server tools", "composio_*", "worker tools") as a tool; record a dynamic tool source (MCP servers, Composio, webhooks) as a graph unknown that cites where the tools are loaded.',
     "Ignore any checked-in .moda/ directory: it is the output of an earlier Moda run and is often stale. Never cite it or reuse its entities.",
+    "The harness includes every real harness component, used or not: a prompt, tool, or model config that is defined but never called is still part of the harness (lower its confidence and say so in confidenceReason). A false positive is only something that is not a harness component: SQL, React or UI props and display copy, URL or path templates, test fixtures, and general utilities. Refute only those; never refute a real component because it is unused.",
     'Every graph item with confidence below 0.85 must also carry confidenceReason: one sentence naming what held confidence down, e.g. "Inferred from AGENTS.md:231-232 only; no source file defines this agent." or "Entrypoint read, but the tool registry was outside the snapshot."',
     "Each graph item with evidence must use evidence: [{ path, reason }], not citationIds/citations.",
     ...spec ? spec.contractLines : [
@@ -16845,7 +17310,7 @@ function renderAnalystCandidateLines(report, concern) {
   const lines = [
     "",
     concern ? `Deterministic candidate inventory for the ${concern} concern (${candidates.length} candidates, scanned in ${report.stats.durationMs}ms):` : `Deterministic candidate inventory (${candidates.length} candidates across ${report.stats.filesWithCandidates} files, scanned in ${report.stats.durationMs}ms):`,
-    concern ? 'Each entry is path:line [detector] excerpt. Candidates are pattern matches — verify each against the real file, drop false positives (list refuted ones in unknowns: an unknown whose id starts with "refuted_", with one evidence entry {path, line, reason} per refuted candidate, using the path:line shown for that candidate and starting the reason with its [detector]), and hunt for in-concern items the patterns cannot see. Do not cite this list as evidence; cite the files.' : 'Each entry is path:line [detector] excerpt. Candidates are pattern matches — verify each against the real file and drop false positives. Verified deterministic candidates are also auto-merged into the graph after your run, so prioritize (1) agents, topology, and relationships, (2) verifying or refuting these candidates (list refuted ones in unknowns: an unknown whose id starts with "refuted_", with one evidence entry {path, line, reason} per refuted candidate, using the path:line shown for that candidate and starting the reason with its [detector]; refuted candidates are never auto-merged), and (3) artifacts the patterns cannot see (runtime agents, prompts assembled at runtime, cross-file wiring) — rather than re-listing every candidate as an artifact. Do not cite this list as evidence; cite the files.'
+    concern ? 'Each entry is path:line [detector] excerpt. Candidates are pattern matches — verify each against the real file, drop false positives — things that are not harness components (SQL, UI props or display copy, URL templates, test fixtures, utilities), never a real component merely because it is unused (list refuted ones in unknowns: an unknown whose id starts with "refuted_", with one evidence entry {path, line, reason} per refuted candidate, using the path:line shown for that candidate and starting the reason with its [detector]), and hunt for in-concern items the patterns cannot see. Do not cite this list as evidence; cite the files.' : 'Each entry is path:line [detector] excerpt. Candidates are pattern matches — verify each against the real file and drop false positives — things that are not harness components (SQL, UI props or display copy, URL templates, test fixtures, utilities), never a real component merely because it is unused. Verified deterministic candidates are also auto-merged into the graph after your run, so prioritize (1) agents, topology, and relationships, (2) verifying or refuting these candidates (list refuted ones in unknowns: an unknown whose id starts with "refuted_", with one evidence entry {path, line, reason} per refuted candidate, using the path:line shown for that candidate and starting the reason with its [detector]; refuted candidates are never auto-merged), and (3) artifacts the patterns cannot see (runtime agents, prompts assembled at runtime, cross-file wiring) — rather than re-listing every candidate as an artifact. Do not cite this list as evidence; cite the files.'
   ];
   if (concern === "evals") {
     lines.push("Note: evals, guardrails, and memory/retrieval stores have no deterministic detector — only model_config candidates are seeded. Discover the rest by investigation.");

package/dist/{cli-jnwba1f3.js → cli-8mqz9qgt.js}

@@ -5768,7 +5768,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const analyzedDefinitions = new Map;
   if (flags["no-analyze"] !== "true") {
     options.onProgress?.("Analyzing prompt sources before sync.");
-    const { analyzeHarnessPrompts } = await import("./harness-j0n400bv.js");
+    const { analyzeHarnessPrompts } = await import("./harness-7cncbphq.js");
     const result = await analyzeHarnessPrompts({
       rootDir: process.cwd(),
       existing: established.flatMap((prompt) => prompt.sourceDefinition ? [prompt.sourceDefinition.source] : []),
@@ -5796,7 +5796,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const mergedSources = mergePromptSources(manifest.sources, extraSources);
   const manifestUpdate = stableJson(mergedSources) === stableJson(mergePromptSources(manifest.sources, [])) ? undefined : $stringify({ version: 2, prompt_paths: manifest.promptPaths, sources: mergedSources });
   const prompts = await discoverPrompts(extraSources);
-  const { checkPromptAttribution } = await import("./prompt-attribution-x84cgdct.js");
+  const { checkPromptAttribution } = await import("./prompt-attribution-x5bzrr8n.js");
   const attribution = checkPromptAttribution(process.cwd(), prompts.map((prompt) => prompt.key));
   const brokenAttribution = attribution.references.filter((reference) => reference.status === "missing");
   if (brokenAttribution.length) {
@@ -6102,7 +6102,7 @@ async function migratePromptManifest(options = {}) {
   let addedSources = [];
   let pendingSources = [];
   if (options.discover) {
-    const { analyzeHarnessPrompts } = await import("./harness-j0n400bv.js");
+    const { analyzeHarnessPrompts } = await import("./harness-7cncbphq.js");
     const result = await analyzeHarnessPrompts({
       rootDir: root,
       existing: manifest.sources,

package/dist/{cli-eqj302as.js → cli-krt4ap9y.js}

@@ -4,7 +4,7 @@ import {
 } from "./cli-94r5x9bg.js";
 import {
   inspectPromptManifest
-} from "./cli-jnwba1f3.js";
+} from "./cli-8mqz9qgt.js";
 import {
   readHarnessSyncState,
   renderDoctorHuman,
@@ -395,7 +395,7 @@ async function harnessCurrentCheck(cwd, manifestPath, manifestExists, tenantId)
     };
   }
   try {
-    const { scanHarness } = await import("./harness-j0n400bv.js");
+    const { scanHarness } = await import("./harness-7cncbphq.js");
     const current = scanHarness({
       rootDir: cwd,
       scannerVersion: "doctor",

package/dist/cli.js

@@ -2968,25 +2968,25 @@ function leafManifestFields(leaf, commands) {
 import { fileURLToPath } from "url";
 import { realpathSync } from "fs";
 async function runPromptsCommand(...args) {
-  return (await import("./prompts-r0mv69yx.js")).runPromptsCommand(...args);
+  return (await import("./prompts-e2nyqkyv.js")).runPromptsCommand(...args);
 }
 async function runSkillsCommand(...args) {
   return (await import("./skills-etzcqhp8.js")).runSkillsCommand(...args);
 }
 async function runHarnessCommand(...args) {
-  return (await import("./harness-j0n400bv.js")).runHarnessCommand(...args);
+  return (await import("./harness-7cncbphq.js")).runHarnessCommand(...args);
 }
 async function runSyncCommand(...args) {
-  return (await import("./sync-p4dz7qmn.js")).runSyncCommand(...args);
+  return (await import("./sync-agcws2qn.js")).runSyncCommand(...args);
 }
 async function runRegistryCommand(...args) {
   return (await import("./registry-wv1zzyce.js")).runRegistryCommand(...args);
 }
 async function runDoctorCommand(...args) {
-  return (await import("./doctor-r16n0me8.js")).runDoctorCommand(...args);
+  return (await import("./doctor-ascpx1py.js")).runDoctorCommand(...args);
 }
 async function runStatusCommand(...args) {
-  return (await import("./doctor-r16n0me8.js")).runStatusCommand(...args);
+  return (await import("./doctor-ascpx1py.js")).runStatusCommand(...args);
 }
 async function runAuthCommand(...args) {
   return (await import("./profile-commands-yvpe4d8y.js")).runAuthCommand(...args);
@@ -2998,7 +2998,7 @@ async function runProfilesCommand(...args) {
   return (await import("./profile-commands-yvpe4d8y.js")).runProfilesCommand(...args);
 }
 async function runAgentCommand(...args) {
-  return (await import("./agent-dc9zkdsm.js")).runAgentCommand(...args);
+  return (await import("./agent-81f11bvs.js")).runAgentCommand(...args);
 }
 async function runProductionCommand(...args) {
   return (await import("./production-intelligence-fqvhzq6s.js")).runProductionCommand(...args);
@@ -6762,7 +6762,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result-and-error",
     handler: async (context) => {
-      const { runInit } = await import("./index-ecy3ntzc.js");
+      const { runInit } = await import("./index-zh4ygqq0.js");
       if (context.outputMode === "agent-stream") {
         context.output.writeEvent({
           event: "started",

package/dist/{doctor-r16n0me8.js → doctor-ascpx1py.js}

@@ -3,9 +3,9 @@ import {
   promptsDiscoveredCheck,
   runDoctorCommand,
   runStatusCommand
-} from "./cli-eqj302as.js";
+} from "./cli-krt4ap9y.js";
 import"./cli-94r5x9bg.js";
-import"./cli-jnwba1f3.js";
+import"./cli-8mqz9qgt.js";
 import"./cli-mm48br00.js";
 import"./cli-xq45etg1.js";
 import"./cli-v2h21cgf.js";

package/dist/{harness-j0n400bv.js → harness-7cncbphq.js}

@@ -43,7 +43,7 @@ import {
   writeHarnessAnalyzeResult,
   writeHarnessArtifacts,
   writeHumanProgress
-} from "./cli-px4dmcy0.js";
+} from "./cli-6k25gr7h.js";
 import"./cli-97fnztpy.js";
 import"./cli-xq45etg1.js";
 import"./cli-v2h21cgf.js";

package/dist/{harness-github-actions-6bex338w.js → harness-github-actions-tzn5ye9e.js}

@@ -1,6 +1,6 @@
 import {
   buildSourceSnapshot
-} from "./cli-px4dmcy0.js";
+} from "./cli-6k25gr7h.js";
 import"./cli-97fnztpy.js";
 import"./cli-xq45etg1.js";
 import"./cli-v2h21cgf.js";

package/dist/{index-ecy3ntzc.js → index-zh4ygqq0.js}

@@ -21,7 +21,7 @@ import {
 } from "./cli-hcwdz9sd.js";
 import {
   buildDoctorReport
-} from "./cli-eqj302as.js";
+} from "./cli-krt4ap9y.js";
 import {
   ConnectCodeError,
   connectWithCode,
@@ -32,7 +32,7 @@ import {
 import {
   initPrompts,
   runPromptSync
-} from "./cli-jnwba1f3.js";
+} from "./cli-8mqz9qgt.js";
 import"./cli-mm48br00.js";
 import {
   codingAgentDisplayName,
@@ -46,7 +46,7 @@ import {
   runCodingAgent,
   runHarnessCommand,
   startRemoteAnalyze
-} from "./cli-px4dmcy0.js";
+} from "./cli-6k25gr7h.js";
 import {
   stripAnsi
 } from "./cli-97fnztpy.js";

package/dist/{prompt-attribution-x84cgdct.js → prompt-attribution-x5bzrr8n.js}

@@ -1,7 +1,7 @@
 import {
   inventoryFiles,
   safePromptEvidencePath
-} from "./cli-px4dmcy0.js";
+} from "./cli-6k25gr7h.js";
 import"./cli-97fnztpy.js";
 import"./cli-xq45etg1.js";
 import"./cli-v2h21cgf.js";

package/dist/prompt-source-mcp.js

@@ -3,7 +3,7 @@ import {
   checkPromptMapping,
   discoverHarnessPromptSources,
   safePromptEvidencePath
-} from "./cli-px4dmcy0.js";
+} from "./cli-6k25gr7h.js";
 import"./cli-97fnztpy.js";
 import"./cli-xq45etg1.js";
 import"./cli-v2h21cgf.js";

package/dist/{prompts-r0mv69yx.js → prompts-e2nyqkyv.js}

@@ -9,7 +9,7 @@ import {
   runPromptSync,
   runPromptsCommand,
   writePromptSyncProgress
-} from "./cli-jnwba1f3.js";
+} from "./cli-8mqz9qgt.js";
 import {
   promptSourceHashPayload
 } from "./cli-mm48br00.js";

package/dist/{sync-p4dz7qmn.js → sync-agcws2qn.js}

@@ -6,11 +6,11 @@ import"./cli-rjav0vj1.js";
 import"./cli-hcwdz9sd.js";
 import {
   runPromptsCommand
-} from "./cli-jnwba1f3.js";
+} from "./cli-8mqz9qgt.js";
 import"./cli-mm48br00.js";
 import {
   runHarnessCommand
-} from "./cli-px4dmcy0.js";
+} from "./cli-6k25gr7h.js";
 import"./cli-97fnztpy.js";
 import"./cli-xq45etg1.js";
 import"./cli-v2h21cgf.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moda-ai/cli",
-  "version": "1.55.55",
+  "version": "1.55.57",
   "description": "CLI for Moda: production monitoring and evals for AI agents.",
   "type": "module",
   "bin": {

package/skills/integration/index.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "moda.skill_index.v1",
-  "bundled_at": "2026-10-21T02:38:15.319Z",
-  "cli_version": "1.55.55",
+  "bundled_at": "2026-10-21T03:02:49.348Z",
+  "cli_version": "1.55.57",
   "skills": [
     {
       "id": "integration-cloudflare-think",