@moda-ai/cli 1.55.57 → 1.55.59

package/dist/{agent-81f11bvs.js → agent-zxzp33vn.js}

@@ -1,12 +1,12 @@
 import {
   buildDoctorReport
-} from "./cli-krt4ap9y.js";
+} from "./cli-0zz7kg8d.js";
 import"./cli-94r5x9bg.js";
-import"./cli-8mqz9qgt.js";
+import"./cli-q89d6scp.js";
 import"./cli-mm48br00.js";
 import {
   readHarnessSyncState
-} from "./cli-xq45etg1.js";
+} from "./cli-k0vxtzxb.js";
 import"./cli-v2h21cgf.js";
 import"./cli-e0kbye4s.js";
 import"./cli-31ybq5f2.js";
@@ -95,7 +95,7 @@ async function buildAgentContext(context) {
   const graph = readHarnessGraphIfPresent(context.cwd);
   const reportState = readHarnessReportState(context.cwd);
   const syncState = readHarnessSyncState(context.cwd);
-  const harness = graph ? await import("./harness-7cncbphq.js") : undefined;
+  const harness = graph ? await import("./harness-f8e1xhc9.js") : undefined;
   const topFindings = doctor.checks.filter((check) => check.status === "fail" || check.status === "warning").slice(0, 12).map(checkToFinding);
   const evidenceRefs = [
     ...doctor.checks.map(checkToEvidenceRef),

package/dist/{cli-krt4ap9y.js → cli-0zz7kg8d.js}

@@ -4,12 +4,12 @@ import {
 } from "./cli-94r5x9bg.js";
 import {
   inspectPromptManifest
-} from "./cli-8mqz9qgt.js";
+} from "./cli-q89d6scp.js";
 import {
   readHarnessSyncState,
   renderDoctorHuman,
   renderStatusHuman
-} from "./cli-xq45etg1.js";
+} from "./cli-k0vxtzxb.js";
 import {
   callDataAPI
 } from "./cli-hawwf30b.js";
@@ -395,7 +395,7 @@ async function harnessCurrentCheck(cwd, manifestPath, manifestExists, tenantId)
     };
   }
   try {
-    const { scanHarness } = await import("./harness-7cncbphq.js");
+    const { scanHarness } = await import("./harness-f8e1xhc9.js");
     const current = scanHarness({
       rootDir: cwd,
       scannerVersion: "doctor",

package/dist/{cli-6k25gr7h.js → cli-9hr66ft2.js}

@@ -9,7 +9,7 @@ import {
   renderHarnessAnalystPreflight,
   renderHarnessAnalyzeHumanResult,
   renderHarnessProgress
-} from "./cli-xq45etg1.js";
+} from "./cli-k0vxtzxb.js";
 import {
   createCommandContext,
   stringOption
@@ -15325,7 +15325,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-tzn5ye9e.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-zczyrzra.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);
@@ -16012,6 +16012,89 @@ function isToolGroupPlaceholder(name) {
 function isDetectedToolDefinitionReason(reason) {
   return typeof reason === "string" && (reason.startsWith("deterministic detector ") || reason.startsWith("Tool definition detected"));
 }
+var MODEL_SOURCE_FILE2 = /\.(?:[cm]?[jt]sx?|py|json|jsonc|ya?ml|toml)$/i;
+var NON_SOURCE_DIR2 = /(^|\/)(?:docs?|\.moda)\//i;
+function isSearchableModelId(id) {
+  return id.length >= 4 && !/\s/.test(id) && /[\d/.:_-]/.test(id);
+}
+function modelIdsUsedInSource(rootDir, ids) {
+  const pending = new Map;
+  for (const id of new Set(ids.filter(isSearchableModelId))) {
+    const token = `(?<![\\w-])${id.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(?![\\w-]|\\.\\w)`;
+    pending.set(id, { quoted: new RegExp(`(['"\`])[^'"\`\\n]*?${token}[^'"\`\\n]*?\\1`), bare: new RegExp(token) });
+  }
+  const found = new Set;
+  if (pending.size === 0)
+    return found;
+  const rootReal = resolve10(rootDir);
+  const maxFiles = numericEnv("MODA_HARNESS_MAX_FILES", DEFAULT_MAX_INVENTORY_FILES);
+  const maxTextBytes = numericEnv("MODA_HARNESS_MAX_TEXT_BYTES", DEFAULT_MAX_INVENTORY_TEXT_BYTES);
+  let files = 0;
+  let textBytes = 0;
+  let complete = true;
+  const search = (rel2, text) => {
+    const bareValues = /\.(?:ya?ml|toml)$/i.test(rel2);
+    const lines = text.split(`
+`).filter((line) => !/^\s*(?:\/\/|\/\*|\*|#)/.test(line));
+    for (const [id, pattern] of pending) {
+      if (lines.some((line) => pattern.quoted.test(line) || bareValues && pattern.bare.test(line))) {
+        found.add(id);
+        pending.delete(id);
+      }
+    }
+  };
+  const walk = (current) => {
+    if (pending.size === 0)
+      return false;
+    const rel2 = normalizePath2(relative6(rootReal, current)) || ".";
+    let stat;
+    try {
+      stat = lstatSync7(current);
+    } catch {
+      return true;
+    }
+    if (stat.isSymbolicLink())
+      return true;
+    if (stat.isDirectory()) {
+      if (rel2 !== "." && (shouldSkipDirectory(rel2) || NON_SOURCE_DIR2.test(`${rel2}/`)))
+        return true;
+      let entries;
+      try {
+        entries = readdirSync4(current).sort();
+      } catch {
+        return true;
+      }
+      for (const entry of entries) {
+        if (!walk(join9(current, entry)))
+          return false;
+      }
+      return true;
+    }
+    if (!stat.isFile() || stat.size > MAX_SCANNED_FILE_BYTES || isSecretishPath(rel2))
+      return true;
+    if (TEST_PATH2.test(rel2) || !MODEL_SOURCE_FILE2.test(rel2))
+      return true;
+    if (files >= maxFiles) {
+      complete = false;
+      return false;
+    }
+    if (textBytes + stat.size > maxTextBytes) {
+      complete = false;
+      return true;
+    }
+    files += 1;
+    textBytes += stat.size;
+    try {
+      search(rel2, readFileSync12(current, "utf8"));
+    } catch {}
+    return true;
+  };
+  walk(rootReal);
+  if (!complete)
+    for (const id of pending.keys())
+      found.add(id);
+  return found;
+}
 function removeArtifacts(report, ids) {
   const graph = report.graph;
   const keep = (id) => typeof id !== "string" || !ids.has(id);
@@ -16077,16 +16160,20 @@ function repairExternalAnalystReport(report, rootDir, options = {}) {
       evidence: artifact.evidence
     });
   }
-  for (const artifact of normalized.graph.artifacts) {
+  const testOnlyModels = normalized.graph.artifacts.filter((artifact) => {
     if (artifact.type !== "model_config" || unverified.has(artifact.id))
-      continue;
+      return false;
     const paths = artifact.evidence.map((entry) => entry.path).filter((path) => typeof path === "string" && path.length > 0);
-    if (paths.length === 0 || !paths.every((path) => TEST_PATH2.test(path)))
+    return paths.length > 0 && paths.every((path) => TEST_PATH2.test(path));
+  });
+  const usedInSource = testOnlyModels.length > 0 ? modelIdsUsedInSource(rootDir, testOnlyModels.map((artifact) => (artifact.name ?? "").trim())) : new Set;
+  for (const artifact of testOnlyModels) {
+    if (usedInSource.has((artifact.name ?? "").trim()))
       continue;
     unverified.add(artifact.id);
     normalized.graph.unknowns.push({
       id: `unresolved_${artifact.id}`,
-      question: `Model ${artifact.name ?? artifact.id} is cited only from test or fixture files, so it is a test input rather than the harness's model configuration.`,
+      question: `Model ${artifact.name ?? artifact.id} appears only in test or fixture files, so it is a test input rather than the harness's model configuration.`,
       candidateIds: [artifact.id],
       evidence: artifact.evidence
     });

package/dist/{cli-xq45etg1.js → cli-k0vxtzxb.js}

@@ -1,13 +1,13 @@
 // ../../packages/messaging/messaging.json
 var messaging_default = {
   $schema: "./messaging.schema.json",
-  version: "1.0.4",
-  locked_on: "2026-10-15",
+  version: "1.0.5",
+  locked_on: "2026-10-20",
   approved_by: "mo",
-  source: "Branding project docs/positioning.md v1.0.4",
+  source: "Branding project docs/positioning.md v1.0.5",
   canonical_strings: {
-    version: "1.0.4",
-    locked_on: "2026-10-15",
+    version: "1.0.5",
+    locked_on: "2026-10-20",
     approved_by: "mo",
     strings: [
       {
@@ -212,7 +212,7 @@ var messaging_default = {
     ]
   },
   banned_phrases: {
-    version: "1.0.4",
+    version: "1.0.5",
     phrases: [
       {
         id: "fixes_your_agent",
@@ -389,7 +389,7 @@ var messaging_default = {
     ]
   },
   terminology: {
-    version: "1.0.4",
+    version: "1.0.5",
     terms: [
       {
         use: "trace",

package/dist/{cli-8mqz9qgt.js → cli-q89d6scp.js}

@@ -5768,7 +5768,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const analyzedDefinitions = new Map;
   if (flags["no-analyze"] !== "true") {
     options.onProgress?.("Analyzing prompt sources before sync.");
-    const { analyzeHarnessPrompts } = await import("./harness-7cncbphq.js");
+    const { analyzeHarnessPrompts } = await import("./harness-f8e1xhc9.js");
     const result = await analyzeHarnessPrompts({
       rootDir: process.cwd(),
       existing: established.flatMap((prompt) => prompt.sourceDefinition ? [prompt.sourceDefinition.source] : []),
@@ -5796,7 +5796,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const mergedSources = mergePromptSources(manifest.sources, extraSources);
   const manifestUpdate = stableJson(mergedSources) === stableJson(mergePromptSources(manifest.sources, [])) ? undefined : $stringify({ version: 2, prompt_paths: manifest.promptPaths, sources: mergedSources });
   const prompts = await discoverPrompts(extraSources);
-  const { checkPromptAttribution } = await import("./prompt-attribution-x5bzrr8n.js");
+  const { checkPromptAttribution } = await import("./prompt-attribution-b0k1tcrb.js");
   const attribution = checkPromptAttribution(process.cwd(), prompts.map((prompt) => prompt.key));
   const brokenAttribution = attribution.references.filter((reference) => reference.status === "missing");
   if (brokenAttribution.length) {
@@ -6102,7 +6102,7 @@ async function migratePromptManifest(options = {}) {
   let addedSources = [];
   let pendingSources = [];
   if (options.discover) {
-    const { analyzeHarnessPrompts } = await import("./harness-7cncbphq.js");
+    const { analyzeHarnessPrompts } = await import("./harness-f8e1xhc9.js");
     const result = await analyzeHarnessPrompts({
       rootDir: root,
       existing: manifest.sources,

package/dist/cli.js

@@ -2968,25 +2968,25 @@ function leafManifestFields(leaf, commands) {
 import { fileURLToPath } from "url";
 import { realpathSync } from "fs";
 async function runPromptsCommand(...args) {
-  return (await import("./prompts-e2nyqkyv.js")).runPromptsCommand(...args);
+  return (await import("./prompts-33ywsv3x.js")).runPromptsCommand(...args);
 }
 async function runSkillsCommand(...args) {
   return (await import("./skills-etzcqhp8.js")).runSkillsCommand(...args);
 }
 async function runHarnessCommand(...args) {
-  return (await import("./harness-7cncbphq.js")).runHarnessCommand(...args);
+  return (await import("./harness-f8e1xhc9.js")).runHarnessCommand(...args);
 }
 async function runSyncCommand(...args) {
-  return (await import("./sync-agcws2qn.js")).runSyncCommand(...args);
+  return (await import("./sync-e02rm8d9.js")).runSyncCommand(...args);
 }
 async function runRegistryCommand(...args) {
   return (await import("./registry-wv1zzyce.js")).runRegistryCommand(...args);
 }
 async function runDoctorCommand(...args) {
-  return (await import("./doctor-ascpx1py.js")).runDoctorCommand(...args);
+  return (await import("./doctor-p63wxy0s.js")).runDoctorCommand(...args);
 }
 async function runStatusCommand(...args) {
-  return (await import("./doctor-ascpx1py.js")).runStatusCommand(...args);
+  return (await import("./doctor-p63wxy0s.js")).runStatusCommand(...args);
 }
 async function runAuthCommand(...args) {
   return (await import("./profile-commands-yvpe4d8y.js")).runAuthCommand(...args);
@@ -2998,7 +2998,7 @@ async function runProfilesCommand(...args) {
   return (await import("./profile-commands-yvpe4d8y.js")).runProfilesCommand(...args);
 }
 async function runAgentCommand(...args) {
-  return (await import("./agent-81f11bvs.js")).runAgentCommand(...args);
+  return (await import("./agent-zxzp33vn.js")).runAgentCommand(...args);
 }
 async function runProductionCommand(...args) {
   return (await import("./production-intelligence-fqvhzq6s.js")).runProductionCommand(...args);
@@ -6762,7 +6762,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result-and-error",
     handler: async (context) => {
-      const { runInit } = await import("./index-zh4ygqq0.js");
+      const { runInit } = await import("./index-92eabh3j.js");
       if (context.outputMode === "agent-stream") {
         context.output.writeEvent({
           event: "started",

package/dist/{doctor-ascpx1py.js → doctor-p63wxy0s.js}

@@ -3,11 +3,11 @@ import {
   promptsDiscoveredCheck,
   runDoctorCommand,
   runStatusCommand
-} from "./cli-krt4ap9y.js";
+} from "./cli-0zz7kg8d.js";
 import"./cli-94r5x9bg.js";
-import"./cli-8mqz9qgt.js";
+import"./cli-q89d6scp.js";
 import"./cli-mm48br00.js";
-import"./cli-xq45etg1.js";
+import"./cli-k0vxtzxb.js";
 import"./cli-v2h21cgf.js";
 import"./cli-e0kbye4s.js";
 import"./cli-31ybq5f2.js";

package/dist/{harness-7cncbphq.js → harness-f8e1xhc9.js}

@@ -43,9 +43,9 @@ import {
   writeHarnessAnalyzeResult,
   writeHarnessArtifacts,
   writeHumanProgress
-} from "./cli-6k25gr7h.js";
+} from "./cli-9hr66ft2.js";
 import"./cli-97fnztpy.js";
-import"./cli-xq45etg1.js";
+import"./cli-k0vxtzxb.js";
 import"./cli-v2h21cgf.js";
 import"./cli-e0kbye4s.js";
 import"./cli-31ybq5f2.js";

package/dist/{harness-github-actions-tzn5ye9e.js → harness-github-actions-zczyrzra.js}

@@ -1,8 +1,8 @@
 import {
   buildSourceSnapshot
-} from "./cli-6k25gr7h.js";
+} from "./cli-9hr66ft2.js";
 import"./cli-97fnztpy.js";
-import"./cli-xq45etg1.js";
+import"./cli-k0vxtzxb.js";
 import"./cli-v2h21cgf.js";
 import"./cli-e0kbye4s.js";
 import"./cli-31ybq5f2.js";

package/dist/{index-zh4ygqq0.js → index-92eabh3j.js}

@@ -21,7 +21,7 @@ import {
 } from "./cli-hcwdz9sd.js";
 import {
   buildDoctorReport
-} from "./cli-krt4ap9y.js";
+} from "./cli-0zz7kg8d.js";
 import {
   ConnectCodeError,
   connectWithCode,
@@ -32,7 +32,7 @@ import {
 import {
   initPrompts,
   runPromptSync
-} from "./cli-8mqz9qgt.js";
+} from "./cli-q89d6scp.js";
 import"./cli-mm48br00.js";
 import {
   codingAgentDisplayName,
@@ -46,7 +46,7 @@ import {
   runCodingAgent,
   runHarnessCommand,
   startRemoteAnalyze
-} from "./cli-6k25gr7h.js";
+} from "./cli-9hr66ft2.js";
 import {
   stripAnsi
 } from "./cli-97fnztpy.js";
@@ -57,7 +57,7 @@ import {
   renderInitNote,
   renderInitSetupPlan,
   renderInitStep
-} from "./cli-xq45etg1.js";
+} from "./cli-k0vxtzxb.js";
 import {
   createCommandContext
 } from "./cli-v2h21cgf.js";

package/dist/{prompt-attribution-x5bzrr8n.js → prompt-attribution-b0k1tcrb.js}

@@ -1,9 +1,9 @@
 import {
   inventoryFiles,
   safePromptEvidencePath
-} from "./cli-6k25gr7h.js";
+} from "./cli-9hr66ft2.js";
 import"./cli-97fnztpy.js";
-import"./cli-xq45etg1.js";
+import"./cli-k0vxtzxb.js";
 import"./cli-v2h21cgf.js";
 import"./cli-e0kbye4s.js";
 import"./cli-31ybq5f2.js";

package/dist/prompt-source-mcp.js

@@ -3,9 +3,9 @@ import {
   checkPromptMapping,
   discoverHarnessPromptSources,
   safePromptEvidencePath
-} from "./cli-6k25gr7h.js";
+} from "./cli-9hr66ft2.js";
 import"./cli-97fnztpy.js";
-import"./cli-xq45etg1.js";
+import"./cli-k0vxtzxb.js";
 import"./cli-v2h21cgf.js";
 import"./cli-e0kbye4s.js";
 import"./cli-31ybq5f2.js";

package/dist/{prompts-e2nyqkyv.js → prompts-33ywsv3x.js}

@@ -9,7 +9,7 @@ import {
   runPromptSync,
   runPromptsCommand,
   writePromptSyncProgress
-} from "./cli-8mqz9qgt.js";
+} from "./cli-q89d6scp.js";
 import {
   promptSourceHashPayload
 } from "./cli-mm48br00.js";

package/dist/{sync-agcws2qn.js → sync-e02rm8d9.js}

@@ -6,13 +6,13 @@ import"./cli-rjav0vj1.js";
 import"./cli-hcwdz9sd.js";
 import {
   runPromptsCommand
-} from "./cli-8mqz9qgt.js";
+} from "./cli-q89d6scp.js";
 import"./cli-mm48br00.js";
 import {
   runHarnessCommand
-} from "./cli-6k25gr7h.js";
+} from "./cli-9hr66ft2.js";
 import"./cli-97fnztpy.js";
-import"./cli-xq45etg1.js";
+import"./cli-k0vxtzxb.js";
 import"./cli-v2h21cgf.js";
 import"./cli-e0kbye4s.js";
 import"./cli-31ybq5f2.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moda-ai/cli",
-  "version": "1.55.57",
+  "version": "1.55.59",
   "description": "CLI for Moda: production monitoring and evals for AI agents.",
   "type": "module",
   "bin": {

package/skills/integration/index.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "moda.skill_index.v1",
-  "bundled_at": "2026-10-21T03:02:49.348Z",
-  "cli_version": "1.55.57",
+  "bundled_at": "2026-10-21T04:29:19.389Z",
+  "cli_version": "1.55.59",
   "skills": [
     {
       "id": "integration-cloudflare-think",