@moda-ai/cli 1.55.60 → 1.55.61

package/dist/{cli-wbd3hzqh.js → cli-04q6xpn6.js}

@@ -103,7 +103,7 @@ import {
 } from "./cli-0v6na3yp.js";
 
 // src/harness.ts
-import { createHash as createHash5 } from "node:crypto";
+import { createHash as createHash6 } from "node:crypto";
 import { execFileSync as execFileSync3, spawn } from "node:child_process";
 import { homedir, tmpdir as tmpdir2 } from "node:os";
 import { fileURLToPath } from "node:url";
@@ -113,11 +113,11 @@ import {
   mkdtempSync as mkdtempSync2,
   mkdirSync as mkdirSync5,
   readFileSync as readFileSync12,
-  readdirSync as readdirSync4,
+  readdirSync as readdirSync5,
   writeFileSync as writeFileSync5,
   rmSync as rmSync4
 } from "node:fs";
-import { basename as basename6, delimiter, dirname as dirname7, join as join9, relative as relative6, resolve as resolve10, sep as sep5 } from "node:path";
+import { basename as basename7, delimiter, dirname as dirname7, join as join9, relative as relative6, resolve as resolve10, sep as sep5 } from "node:path";
 import { confirm, select } from "@inquirer/prompts";
 
 // src/analyst-tui.ts
@@ -12111,7 +12111,98 @@ function enrichScanCaptureMetadata(graph) {
 
 // src/harness-candidates.ts
 import { mkdirSync as mkdirSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { basename as basename5, dirname as dirname6, extname, resolve as resolve6 } from "node:path";
+import { basename as basename6, dirname as dirname6, extname as extname2, resolve as resolve6 } from "node:path";
+
+// src/harness-eval-suites.ts
+import { basename as basename5, extname } from "node:path";
+var EVAL_FILE_EXTENSIONS = new Set([".ts", ".tsx", ".mts", ".js", ".mjs", ".cjs", ".py", ".yaml", ".yml"]);
+var EVAL_CASE_DATA_EXTENSIONS = new Set([".json", ".jsonl", ".toml"]);
+var EVAL_DIR_SEGMENT = /^(?:evals|evaluations)$/i;
+var EVAL_HARNESS_DIR_SEGMENT = /^eval$/i;
+var EVAL_FILE_NAME = /(?:^|[._-])evals?(?:[._-]|$)|^promptfoo/i;
+var DOCS_ROOT = /^(?:docs?|documentation)\//i;
+var HIDDEN_DIR = /(?:^|\/)\.[^/]+\//;
+var EVAL_SCRIPT_NAME = /(?:^|[._-])(?:judges?|grader|grading|benchmarks?)(?:[._-]|$)/i;
+var SCRIPTS_ROOT = /^(?:scripts?|bin)\//i;
+var EVALUATION_NAME = /(?:^|[._-])evaluat(?:e|ion|ions|or|ors)(?:[._-]|$)/i;
+var TEST_TREE = /(?:^|\/)(?:tests?|__tests__)\//i;
+var EVAL_SEED_SCRIPT = /^(?:seed|fetch|scrape|download|populate|extract)[-_]/i;
+var EVAL_NON_CASE_DATA = /^(?:leaderboards?|results?|scores?|reports?|outputs?|summary|tsconfig|jsconfig|package(?:-lock)?)(?:[._-][^/]*)?\.[^.]+$/i;
+var TEST_FILE_NAME = /(?:^|\/)(?:test_[^/]*\.py|[^/]*_test\.py|[^/]*\.(?:test|spec)\.[^/]+)$/i;
+var EVAL_TEST_NAME = /\.evals?\.(?:test|spec)\.[^/.]+$/i;
+var EVAL_IMPORT = /(?:\bfrom\s+|\bimport\s*\(\s*|\brequire\s*\(\s*|^\s*import\s+)['"][^'"]*(?:\/(?:evals?|evaluations)\/|[\/._-]evals?(?:[._-][^'"/]*)?['"])/m;
+function evalDirectoryIndex(path) {
+  return path.split("/").slice(0, -1).findIndex((segment) => EVAL_DIR_SEGMENT.test(segment) || EVAL_HARNESS_DIR_SEGMENT.test(segment));
+}
+function isEvalHarnessDirectory(path, index) {
+  return index >= 0 && EVAL_HARNESS_DIR_SEGMENT.test(path.split("/")[index] ?? "");
+}
+function isEvalSuitePath(path) {
+  const ext = extname(path).toLowerCase();
+  const name = basename5(path);
+  if (DOCS_ROOT.test(path) || HIDDEN_DIR.test(path) || /\.d\.[cm]?ts$/i.test(path) || EVAL_SEED_SCRIPT.test(name))
+    return false;
+  const inEvalDir = evalDirectoryIndex(path) >= 0;
+  if (EVAL_CASE_DATA_EXTENSIONS.has(ext))
+    return inEvalDir && !EVAL_NON_CASE_DATA.test(name);
+  if (!EVAL_FILE_EXTENSIONS.has(ext))
+    return false;
+  return inEvalDir || EVAL_FILE_NAME.test(name) || SCRIPTS_ROOT.test(path) && EVAL_SCRIPT_NAME.test(name) || TEST_TREE.test(path) && EVALUATION_NAME.test(name);
+}
+function isTestOfEvalCode(path, text) {
+  return TEST_FILE_NAME.test(path) && !EVAL_TEST_NAME.test(path) && evalDirectoryIndex(path) < 0 && EVAL_IMPORT.test(text);
+}
+function isEvalModelSource(path) {
+  if (!isEvalSuitePath(path))
+    return false;
+  return evalDirectoryIndex(path) >= 0 || EVAL_TEST_NAME.test(path) || !TEST_FILE_NAME.test(path);
+}
+function evalFileSignal(path, text) {
+  if (!isEvalSuitePath(path) || isTestOfEvalCode(path, text))
+    return;
+  return evalDirectoryIndex(path) < 0 ? "eval.file_name" : "eval.suite_dir";
+}
+var EVAL_RUNNER_NAMES = [
+  /^(?:run|runner|main|index|eval|evaluate|cli)\.[^.]+$/i,
+  /^(?:run|runner|main|eval|evaluate)[._-]/i,
+  /(?:^|[._-])evals?(?:[._-]|$)/i
+];
+function evalSuiteKey(path) {
+  const index = evalDirectoryIndex(path);
+  const segments = path.split("/");
+  if (isEvalHarnessDirectory(path, index))
+    return segments.slice(0, index + 1).join("/");
+  if (index < 0 || segments.length - 1 <= index + 1)
+    return path;
+  return segments.slice(0, index + 2).join("/");
+}
+function promoteEvalSuites(files, confidence2, naming) {
+  const suites = new Map;
+  for (const file of files) {
+    const key = evalSuiteKey(file.path);
+    suites.set(key, [...suites.get(key) ?? [], file]);
+  }
+  return [...suites].map(([key, members]) => {
+    const sorted = [...members].sort((a, b) => a.path.localeCompare(b.path));
+    const runner = EVAL_RUNNER_NAMES.map((name) => sorted.find((file) => name.test(basename5(file.path)))).find(Boolean) ?? sorted[0];
+    const cited = [runner, ...sorted.filter((file) => file !== runner)];
+    const isDirectory = key !== runner.path;
+    const isHarness = isDirectory && isEvalHarnessDirectory(runner.path, evalDirectoryIndex(runner.path));
+    return {
+      id: naming.artifactId(key),
+      type: "eval",
+      name: isHarness ? `${key} eval harness` : isDirectory ? `${basename5(key)} eval suite` : basename5(key),
+      scope: "global",
+      sourcePath: runner.path,
+      usedByAgentIds: [],
+      confidence: confidence2,
+      confidenceReason: isDirectory ? `Deterministic: eval suite directory ${key} (${members.length} source file${members.length === 1 ? "" : "s"}); not checked by the analyst.` : naming.fileReason(runner),
+      evidence: cited.map((file) => ({ path: file.path, line: 1, reason: `deterministic detector ${file.signal}` }))
+    };
+  });
+}
+
+// src/harness-candidates.ts
 var MAX_CANDIDATES_PER_FILE_PER_SIGNAL = 20;
 var MIN_PROMPT_LITERAL_CHARS = 160;
 var CONFIDENCE_WEIGHT = {
@@ -12335,6 +12426,168 @@ var LINE_PATTERNS = [
   }
 ];
 var CODE_EXTENSIONS = new Set([...JS, ...PY]);
+var PROVIDER_MODEL_ID = /^(?:anthropic|openai|google|meta-llama|mistralai|deepseek|x-ai|perplexity|qwen|cohere|moonshotai|z-ai|minimax|amazon|nvidia|microsoft|ai21|nousresearch|bytedance|baidu|inception|openrouter)\/[a-z0-9][\w.:-]*$/i;
+var PROVIDER_COLON_MODEL_ID = /^(?:openai|anthropic|google_genai|google_vertexai|google|groq|mistralai|bedrock|bedrock_converse|azure_openai|ollama|fireworks|together|deepseek|xai|perplexity|cohere|openrouter):([a-z0-9][\w./:-]*)$/i;
+var CHOSEN_VALUE_PREFIX = /(?:\b[A-Za-z_]\w*\s*=|\bmodel\w*["']?\s*:)\s*$/i;
+function isChosenProviderColonModel(value, before) {
+  const model = PROVIDER_COLON_MODEL_ID.exec(value)?.[1];
+  return Boolean(model && PROVIDER_MODEL_NAME.test(model) && CHOSEN_VALUE_PREFIX.test(before));
+}
+var PROVIDER_MODEL_NAME = /\d|claude|gpt|gemini|gemma|llama|mistral|mixtral|qwen|deepseek|grok|sonar|kimi|glm|command|minimax|auto/i;
+var BARE_MODEL_ID = /^(?:claude-|gpt-|chatgpt-|gemini-|text-embedding-|deepseek-|mistral-|llama-?|grok-|command-|qwen|kimi-|glm-)[\w.:-]*$/i;
+var O_SERIES_MODEL_ID = /^o[1-9](?:-(?:mini|pro|preview|deep-research))*(?:-\d{4}-\d{2}-\d{2})?$/i;
+var NOT_MODEL_ID = /^(?:claude-(?:code|ai|desktop|agent-sdk)|gpt-tokenizer|gpt-3-encoder|gemini-cli)\b/i;
+var FILE_NAME_SUFFIX = /\.(?:[cm]?[jt]sx?|json|ya?ml|toml|md|txt|py|png|jpe?g|gif|svg|webp|css|html?)$/i;
+var MODEL_CANDIDATE_VALUE = /^[A-Za-z0-9][\w./:-]{2,80}$/;
+var IMPORT_LINE = /^\s*(?:import\b|export\s+(?:\*|\{[^}]*\})\s*from\b|from\s+\S+\s+import\b)|\brequire\s*\(|\bimport\s*\(/;
+var CLASS_ATTRIBUTE_PREFIX = /\bclass(?:Name|List)?\s*[=:]\s*\{?\s*$/;
+var NON_MODEL_SOURCE_PATH = /\.d\.[cm]?ts$|\.min\.[cm]?js$|(?:^|\/)(?:public|static)\/|(?:^|\/)(?:package(?:-lock)?\.json|pnpm-lock\.yaml|yarn\.lock|bun\.lockb?)$/i;
+var MODEL_ID_EXTENSIONS = new Set([...CODE_EXTENSIONS, ".json", ".jsonc", ".yaml", ".yml", ".toml"]);
+function isModelIdLiteral(value) {
+  if (value.length < 4 || value.length > 80 || /\s/.test(value) || NOT_MODEL_ID.test(value) || FILE_NAME_SUFFIX.test(value))
+    return false;
+  if (PROVIDER_MODEL_ID.test(value))
+    return PROVIDER_MODEL_NAME.test(value.slice(value.indexOf("/") + 1));
+  if (O_SERIES_MODEL_ID.test(value))
+    return true;
+  return BARE_MODEL_ID.test(value) && /\d/.test(value);
+}
+var HASH_COMMENT_EXTENSIONS = new Set([...PY, ".yaml", ".yml", ".toml"]);
+var REGEX_PRECEDER = /(?:^|[(,=:[!&|?{};+\-*%<>~^]|\b(?:return|typeof|case|in|of|delete|void|throw|new|yield|await))\s*$/;
+function startsRegexLiteral(line, start) {
+  const next = line[start + 1];
+  if (next === undefined || next === "/" || next === "*" || next === ">" || line[start - 1] === "<")
+    return false;
+  return REGEX_PRECEDER.test(line.slice(0, start));
+}
+function regexLiteralEnd(line, start) {
+  let inClass = false;
+  for (let j = start + 1;j < line.length; j += 1) {
+    const ch = line[j];
+    if (ch === "\\") {
+      j += 1;
+      continue;
+    }
+    if (ch === "[")
+      inClass = true;
+    else if (ch === "]")
+      inClass = false;
+    else if (ch === "/" && !inClass)
+      return j + 1;
+  }
+  return line.length;
+}
+function stringLiteralsInLine(line, state, hashComments) {
+  const out = [];
+  const closeAt = (from, close, escapes) => {
+    for (let j = from;j < line.length; j += 1) {
+      if (escapes && line[j] === "\\") {
+        j += 1;
+        continue;
+      }
+      if (line.startsWith(close, j))
+        return j;
+    }
+    return -1;
+  };
+  let i = 0;
+  if (state.open) {
+    const close = state.open === "/*" ? "*/" : state.open;
+    const at = closeAt(0, close, state.open !== "/*");
+    if (at < 0)
+      return out;
+    i = at + close.length;
+    state.open = null;
+  }
+  while (i < line.length) {
+    const ch = line[i];
+    if (hashComments ? ch === "#" : line.startsWith("//", i))
+      break;
+    if (!hashComments && line.startsWith("/*", i)) {
+      const at2 = closeAt(i + 2, "*/", false);
+      if (at2 < 0) {
+        state.open = "/*";
+        break;
+      }
+      i = at2 + 2;
+      continue;
+    }
+    if (!hashComments && ch === "/" && startsRegexLiteral(line, i)) {
+      i = regexLiteralEnd(line, i);
+      continue;
+    }
+    if (ch !== '"' && ch !== "'" && ch !== "`") {
+      i += 1;
+      continue;
+    }
+    const triple = hashComments && line.startsWith(ch.repeat(3), i);
+    const quote = triple ? ch.repeat(3) : ch;
+    const at = closeAt(i + quote.length, quote, true);
+    if (at < 0) {
+      if (triple || ch === "`")
+        state.open = quote;
+      break;
+    }
+    out.push({ value: line.slice(i + quote.length, at), index: i, end: at + quote.length });
+    i = at + quote.length;
+  }
+  return out;
+}
+function modelIdLiteralsInScannedLine(line, state, hashComments) {
+  const literals = stringLiteralsInLine(line, state, hashComments);
+  if (line.length > 4000 || IMPORT_LINE.test(line))
+    return [];
+  return literals.filter((literal) => {
+    if (!MODEL_CANDIDATE_VALUE.test(literal.value))
+      return false;
+    const before = line.slice(0, literal.index);
+    return (isModelIdLiteral(literal.value) || isChosenProviderColonModel(literal.value, before)) && !CLASS_ATTRIBUTE_PREFIX.test(before);
+  });
+}
+function modelIdLiteralsInLines(lines, path) {
+  const hashComments = HASH_COMMENT_EXTENSIONS.has(extname2(path).toLowerCase());
+  const state = { open: null };
+  return lines.map((line) => modelIdLiteralsInScannedLine(line, state, hashComments));
+}
+var HIGH_CONFIDENCE_MODEL_PATTERNS = LINE_PATTERNS.filter((pattern) => pattern.kind === "model_config" && pattern.confidence === "high");
+function detectModelIdLiterals(file, out) {
+  if (!MODEL_ID_EXTENSIONS.has(extname2(file.path).toLowerCase()) || NON_MODEL_SOURCE_PATH.test(file.path))
+    return;
+  const lines = file.text.split(`
+`);
+  const literals = modelIdLiteralsInLines(lines, file.path);
+  for (let i = 0;i < lines.length; i += 1) {
+    const line = lines[i];
+    if (literals[i].length === 0)
+      continue;
+    if (HIGH_CONFIDENCE_MODEL_PATTERNS.some((pattern) => pattern.pattern.test(line)))
+      continue;
+    out.push({
+      kind: "model_config",
+      path: file.path,
+      startLine: i + 1,
+      endLine: i + 1,
+      confidence: "high",
+      signal: "model.id_literal",
+      excerpt: normalizeExcerpt(line)
+    });
+  }
+}
+function detectEvalFile(file, out) {
+  const signal = evalFileSignal(file.path, file.text);
+  if (!signal)
+    return;
+  out.push({
+    kind: "eval_file",
+    path: file.path,
+    startLine: 1,
+    endLine: Math.max(1, file.text.split(`
+`).length),
+    confidence: "high",
+    signal,
+    excerpt: normalizeExcerpt(file.text.slice(0, 300))
+  });
+}
 var PROMPT_DOC_EXTENSIONS = new Set([".md", ".mdc", ".txt", ".prompt", ".jinja", ".jinja2", ".j2", ".hbs", ".tpl"]);
 var UPPERCASE_DOC_NAME = /^[A-Z0-9][A-Z0-9_-]*\.(?:md|mdc|txt)$/;
 var NON_PROMPT_DOC_BASENAMES = new Set([
@@ -12396,7 +12649,7 @@ function lineAtIndex(offsets, index) {
   return lo + 1;
 }
 function detectLinePatterns(file, out) {
-  const ext = extname(file.path).toLowerCase();
+  const ext = extname2(file.path).toLowerCase();
   const lines = file.text.split(`
 `);
   const perSignal = new Map;
@@ -12473,7 +12726,7 @@ function detectAdjacentStringBlocks(file, out) {
 }
 var PROMPT_MODULE_NAME_HINT = /(^|[._-])(system[._-]?)?prompts?([._-]|$)/i;
 function detectPromptModule(file, out) {
-  const base = basename5(file.path, extname(file.path));
+  const base = basename6(file.path, extname2(file.path));
   if (!PROMPT_MODULE_NAME_HINT.test(base))
     return;
   out.push({
@@ -12488,7 +12741,7 @@ function detectPromptModule(file, out) {
   });
 }
 function detectPromptLiterals(file, out) {
-  const ext = extname(file.path).toLowerCase();
+  const ext = extname2(file.path).toLowerCase();
   const offsets = buildLineIndex(file.text);
   let found = 0;
   const record = (startIndex, endIndex, content, signal) => {
@@ -12533,10 +12786,10 @@ function detectPromptLiterals(file, out) {
   }
 }
 function detectPromptFile(file, out) {
-  const ext = extname(file.path).toLowerCase();
+  const ext = extname2(file.path).toLowerCase();
   if (!PROMPT_DOC_EXTENSIONS.has(ext))
     return;
-  const base = basename5(file.path).toLowerCase();
+  const base = basename6(file.path).toLowerCase();
   if (NON_PROMPT_DOC_BASENAMES.has(base))
     return;
   if (/(^|\/)(docs?|documentation|examples?|\.github)\//i.test(file.path))
@@ -12553,7 +12806,7 @@ function detectPromptFile(file, out) {
   } else if (PROMPTS_DIR.test(dir)) {
     confidence2 = "high";
     signal = "prompt_file.prompts_dir";
-  } else if (dirHint && score >= 3 && !UPPERCASE_DOC_NAME.test(basename5(file.path))) {
+  } else if (dirHint && score >= 3 && !UPPERCASE_DOC_NAME.test(basename6(file.path))) {
     confidence2 = "medium";
     signal = "prompt_file.agent_dir_instruction_text";
   } else if (score >= 5) {
@@ -12574,10 +12827,10 @@ function detectPromptFile(file, out) {
   });
 }
 function detectPromptLoaderReferences(file, filesByPath, out) {
-  if (!LOADER_CODE_EXTENSIONS.has(extname(file.path).toLowerCase()) && extname(file.path).toLowerCase() !== ".md")
+  if (!LOADER_CODE_EXTENSIONS.has(extname2(file.path).toLowerCase()) && extname2(file.path).toLowerCase() !== ".md")
     return;
   const extension = "(?:\\.txt|\\.md)";
-  const pattern = extname(file.path).toLowerCase() === ".rs" ? new RegExp(`\\binclude_str!\\s*\\(\\s*["']([^"']+${extension})["']\\s*\\)`, "g") : new RegExp(`\\b(?:Template\\.from_file|from_file|read_text|readFileSync)\\s*\\(\\s*["']([^"']+${extension})["']`, "g");
+  const pattern = extname2(file.path).toLowerCase() === ".rs" ? new RegExp(`\\binclude_str!\\s*\\(\\s*["']([^"']+${extension})["']\\s*\\)`, "g") : new RegExp(`\\b(?:Template\\.from_file|from_file|read_text|readFileSync)\\s*\\(\\s*["']([^"']+${extension})["']`, "g");
   let found = 0;
   let match;
   while (found < MAX_CANDIDATES_PER_FILE_PER_SIGNAL && (match = pattern.exec(file.text)) !== null) {
@@ -12585,7 +12838,7 @@ function detectPromptLoaderReferences(file, filesByPath, out) {
     const target = normalizeLoaderTarget(file.path, reference);
     if (!target || !filesByPath.has(target))
       continue;
-    const targetBase = basename5(target).toLowerCase();
+    const targetBase = basename6(target).toLowerCase();
     const highConfidence = RUST_PROMPT_PATH_HINT.test(target) || /Template\.from_file/i.test(match[0]);
     if (!highConfidence)
       continue;
@@ -12597,7 +12850,7 @@ function detectPromptLoaderReferences(file, filesByPath, out) {
       endLine: 1,
       confidence: "high",
       signal: /Template\.from_file/i.test(match[0]) ? "prompt_file.template_loader_reference" : "prompt_file.loader_reference",
-      excerpt: normalizeExcerpt(`${basename5(file.path)} loads ${targetBase}`)
+      excerpt: normalizeExcerpt(`${basename6(file.path)} loads ${targetBase}`)
     });
   }
 }
@@ -12625,10 +12878,12 @@ function detectHarnessCandidatesInFiles(files) {
     if (typeof file.text !== "string" || file.text.length === 0)
       continue;
     const scoped = { path: file.path, text: file.text };
-    const ext = extname(file.path).toLowerCase();
+    const ext = extname2(file.path).toLowerCase();
     if (CODE_EXTENSIONS.has(ext) || ext === ".json" || ext === ".yaml" || ext === ".yml" || ext === ".toml") {
       detectLinePatterns(scoped, candidates);
     }
+    detectModelIdLiterals(scoped, candidates);
+    detectEvalFile(scoped, candidates);
     if (CODE_EXTENSIONS.has(ext)) {
       detectAdjacentStringBlocks(scoped, candidates);
       detectPromptModule(scoped, candidates);
@@ -12658,7 +12913,7 @@ function detectHarnessCandidates(rootDir) {
   const skipped = [];
   const root = resolve6(rootDir);
   const inventory = inventoryFiles(root, skipped, {
-    includeFile: (path) => PROMPT_DOC_EXTENSIONS.has(extname(path).toLowerCase()) || [".json", ".yaml", ".yml"].includes(extname(path).toLowerCase()) || extname(path).toLowerCase() === ".rs" && RUST_PROMPT_PATH_HINT.test(path)
+    includeFile: (path) => PROMPT_DOC_EXTENSIONS.has(extname2(path).toLowerCase()) || [".json", ".jsonc", ".jsonl", ".yaml", ".yml", ".toml"].includes(extname2(path).toLowerCase()) || extname2(path).toLowerCase() === ".rs" && RUST_PROMPT_PATH_HINT.test(path)
   });
   const { candidates, files } = detectHarnessCandidatesInFiles(inventory);
   const durationMs = Math.max(1, Date.now() - startedAt);
@@ -12691,7 +12946,7 @@ function writeHarnessCandidatesReport(report, outPath) {
 
 // src/harness-prompt-sources.ts
 import { createHash as createHash4 } from "node:crypto";
-import { extname as extname6 } from "node:path";
+import { extname as extname7 } from "node:path";
 
 // src/prompt-source-verification/index.ts
 import { readFileSync as readFileSync10 } from "node:fs";
@@ -12699,7 +12954,7 @@ import { z } from "zod";
 
 // src/prompt-source-validation.ts
 import { existsSync as existsSync7, lstatSync as lstatSync5 } from "node:fs";
-import { extname as extname2, relative as relative4, resolve as resolve7 } from "node:path";
+import { extname as extname3, relative as relative4, resolve as resolve7 } from "node:path";
 function checkPromptMapping(rootDir, unknownMapping) {
   const repairs = [];
   const unresolved = [];
@@ -12779,12 +13034,12 @@ function normalizePromptMapping(value) {
   return normalized;
 }
 function isPromptDefinitionPath(path) {
-  return /(^|\/)(?:prompts?|templates?)(?:\/|\.)/i.test(path) || /\.prompt\.(?:md|txt|ya?ml|json)$/i.test(path) || [".jinja", ".j2", ".mustache", ".hbs"].includes(extname2(path).toLowerCase());
+  return /(^|\/)(?:prompts?|templates?)(?:\/|\.)/i.test(path) || /\.prompt\.(?:md|txt|ya?ml|json)$/i.test(path) || [".jinja", ".j2", ".mustache", ".hbs"].includes(extname3(path).toLowerCase());
 }
 
 // src/prompt-source-verification/evidence.ts
 import { readFileSync as readFileSync9 } from "node:fs";
-import { extname as extname5 } from "node:path";
+import { extname as extname6 } from "node:path";
 
 // src/prompt-source-verification/paths.ts
 import { lstatSync as lstatSync6, realpathSync as realpathSync6 } from "node:fs";
@@ -12812,13 +13067,13 @@ function safePromptEvidencePath(rootDir, path) {
 // src/prompt-source-verification/sink-proof.ts
 var import_typescript = __toESM(require_typescript(), 1);
 import { execFileSync as execFileSync2 } from "node:child_process";
-import { extname as extname3 } from "node:path";
+import { extname as extname4 } from "node:path";
 import { readFileSync as readFileSync7 } from "node:fs";
 function proveSink(root, sink) {
   const file = safePromptEvidencePath(root, sink.path);
   const cache = new Map;
   if (!cache.has(file)) {
-    if (extname3(file) === ".py") {
+    if (extname4(file) === ".py") {
       try {
         const rows = JSON.parse(execFileSync2("python3", ["-I", "-c", PYTHON_PROOF], { input: readFileSync7(file, "utf8"), encoding: "utf8", timeout: 1e4, maxBuffer: 2 * 1024 * 1024 }));
         cache.set(file, new Map(Object.entries(rows).map(([line, proof]) => [Number(line), proof])));
@@ -12988,7 +13243,7 @@ print(json.dumps(rows))
 
 // src/prompt-source-location.ts
 import { readFileSync as readFileSync8 } from "node:fs";
-import { extname as extname4 } from "node:path";
+import { extname as extname5 } from "node:path";
 function structuredExcerpt(text, source) {
   if (source.selector?.pointer === undefined)
     return { line: 1, endLine: text.split(`
@@ -13028,7 +13283,7 @@ function structuredExcerpt(text, source) {
 }
 function promptDefinitionExcerpt(rootDir, source) {
   const file = safePromptEvidencePath(rootDir, source.path);
-  const ext = extname4(file).toLowerCase();
+  const ext = extname5(file).toLowerCase();
   if (ext === ".py") {
     const extraction = extractPythonSource(rootDir, file, source.selector?.symbol);
     if (!extraction.range)
@@ -13052,7 +13307,7 @@ function promptDefinitionRange(rootDir, source) {
 // src/prompt-source-verification/evidence.ts
 function verifyPromptSourceEvidence(rootDir, source) {
   const checked = checkPromptMapping(rootDir, source);
-  const dedicated = isPromptDefinitionPath(source.path) && [".md", ".txt", ".jinja", ".j2", ".mustache", ".hbs"].includes(extname5(source.path).toLowerCase());
+  const dedicated = isPromptDefinitionPath(source.path) && [".md", ".txt", ".jinja", ".j2", ".mustache", ".hbs"].includes(extname6(source.path).toLowerCase());
   return {
     accepted: checked.ok && dedicated && checked.kind !== "builder",
     reason: dedicated ? "Dedicated authored prompt file" : "Candidate requires independent semantic review",
@@ -13306,7 +13561,7 @@ function discoverHarnessPromptSources(rootDir, existing = []) {
     }
     try {
       let found = [];
-      const ext = extname6(path).toLowerCase();
+      const ext = extname7(path).toLowerCase();
       if (CODE.has(ext)) {
         if (attempts++ >= MAX_CODE_PROMPT_PATHS) {
           issues.push({ path, reason: "Code prompt scan limit (64 files) reached; deferred to analyst review" });
@@ -13574,8 +13829,9 @@ function applyPromptDiscovery(graph, discovery) {
 }
 
 // src/harness-candidate-promotion.ts
-import { readFileSync as readFileSync11, statSync as statSync3 } from "node:fs";
-import { extname as extname7, posix, resolve as resolve9 } from "node:path";
+import { createHash as createHash5 } from "node:crypto";
+import { readdirSync as readdirSync4, readFileSync as readFileSync11, statSync as statSync3 } from "node:fs";
+import { extname as extname8, posix, resolve as resolve9 } from "node:path";
 
 // src/harness-js-source.ts
 var import_typescript2 = __toESM(require_typescript(), 1);
@@ -13944,7 +14200,11 @@ var SIGNAL_DESCRIPTIONS = {
   "prompt_file.agent_dir_instruction_text": "instruction-like text in an agent directory",
   "prompt_file.loader_reference": "a file loaded as a prompt by code",
   "prompt_file.template_loader_reference": "a file loaded as a prompt template by code",
-  "model.assignment": "a model id assigned in code"
+  "model.assignment": "a model id assigned in code",
+  "model.registry_key": "a model registry key",
+  "model.id_literal": "a model id string literal",
+  "eval.suite_dir": "a file under an eval directory",
+  "eval.file_name": "a file named as an eval"
 };
 function detectorConfidenceReason(candidate) {
   const what = SIGNAL_DESCRIPTIONS[candidate.signal] ?? `the ${candidate.signal} pattern`;
@@ -14420,7 +14680,7 @@ function localNameIn(specifiers, identifier) {
 function importedLocalName(importerPath, lines, identifier, definitionPath, exportsDefault = false) {
   const text = lines.join(`
 `);
-  const python = extname7(importerPath) === ".py";
+  const python = extname8(importerPath) === ".py";
   if (python) {
     for (const match of text.matchAll(/^[ \t]*from\s+([.\w]+)\s+import\s+(\([^)]*\)|[^\n]*)/gm)) {
       if (!specifierResolvesTo(match[1], importerPath, definitionPath, true))
@@ -14480,7 +14740,7 @@ function calleeImportedFromModelFile(callee, path, lines, modelFiles) {
   const base = callee.split(".")[0];
   const text = lines.join(`
 `);
-  const python = extname7(path) === ".py";
+  const python = extname8(path) === ".py";
   const statements = python ? [/^[ \t]*from\s+([.\w]+)\s+import\s+(\([^)]*\)|[^\n]*)/gm] : [
     /\bimport\s+(?:type\s+)?(?:([A-Za-z_$][\w$]*)\s*,?\s*)?(?:\{([^}]*)\}|\*\s*as\s+([A-Za-z_$][\w$]*))?\s*from\s*["']([^"']+)["']/g,
     /\b(?:const|let|var)\s*\{([^}]*)\}\s*=\s*(?:await\s+)?(?:require|import)\(\s*["']([^"']+)["']\s*\)/g
@@ -14703,7 +14963,7 @@ function hasNearbyRole(lines, line) {
   return false;
 }
 function isDirectModelInput(key, value, path, lines, line, modelFiles) {
-  if (CONFIG_EXTENSIONS.has(extname7(path).toLowerCase())) {
+  if (CONFIG_EXTENSIONS.has(extname8(path).toLowerCase())) {
     return DIRECT_PROMPT_KEYS.has(key) && value.length >= MIN_CONFIG_PROMPT_CHARS;
   }
   if (modelFiles.has(path)) {
@@ -14743,7 +15003,7 @@ function fileReachesModel(path, lines, modelFiles) {
     return true;
   if (lines.some((line) => MODEL_ENDPOINT.test(line)))
     return true;
-  const python = extname7(path) === ".py";
+  const python = extname8(path) === ".py";
   return importSpecifiers(lines).some((spec) => [...modelFiles].some((modelFile) => specifierResolvesTo(spec, path, modelFile, python)));
 }
 function modelFileImports(path, rootDir, modelFiles, fileCache) {
@@ -14751,7 +15011,7 @@ function modelFileImports(path, rootDir, modelFiles, fileCache) {
     if (modelFile === path)
       return false;
     const lines = readFileLines(rootDir, modelFile, fileCache);
-    return Boolean(lines && importSpecifiers(lines).some((spec) => specifierResolvesTo(spec, modelFile, path, extname7(modelFile) === ".py")));
+    return Boolean(lines && importSpecifiers(lines).some((spec) => specifierResolvesTo(spec, modelFile, path, extname8(modelFile) === ".py")));
   });
 }
 var PASS_THROUGH_CALLEE = /^(?:Object\.(?:freeze|seal|assign)|structuredClone|Promise\.resolve|JSON\.stringify|(?:_\.|lodash\.)?(?:cloneDeep|clone|merge)|deepFreeze|defu)$/;
@@ -14821,7 +15081,7 @@ function promotePromptLiteralCandidate(candidate, rootDir, confidence2, fileCach
     use = { path: candidate.path, line: definition.line, key: "system-injection" };
   }
   const jsSource = jsSources.get(`${rootDir}::${candidate.path}`);
-  if (!use && definition.key && !PROMPT_CONFIG_KEYS.has(definition.key) && !CONFIG_EXTENSIONS.has(extname7(candidate.path).toLowerCase())) {
+  if (!use && definition.key && !PROMPT_CONFIG_KEYS.has(definition.key) && !CONFIG_EXTENSIONS.has(extname8(candidate.path).toLowerCase())) {
     const exportUsed = () => modelFileImports(candidate.path, rootDir, files.model, fileCache);
     if (jsSource) {
       const consumer = keyedValueConsumer(jsSource, definition.line, definition.key, definition.column);
@@ -14871,63 +15131,248 @@ function promotePromptLiteralCandidate(candidate, rootDir, confidence2, fileCach
     body: definition.text
   };
 }
-function promoteModelConfigCandidate(candidate, rootDir, confidence2, fileCache) {
-  const lines = readFileLines(rootDir, candidate.path, fileCache);
-  const sourceLine = lines?.[candidate.startLine - 1] ?? "";
-  const assignment = MODEL_ASSIGNMENT_VALUE.exec(sourceLine);
-  const [field, assigned] = [assignment?.[1], assignment?.[2]];
-  if (field && MODEL_PREFERENCE_FIELD.test(field) && !FULL_MODEL_ID.test(assigned ?? ""))
-    return;
-  const registryKey = candidate.signal === "model.registry_key" ? REGISTRY_KEY.exec(sourceLine)?.[1] : undefined;
-  const model = (assigned && MODEL_STRING.exec(assigned)?.[1]) ?? registryKey ?? MODEL_STRING.exec(sourceLine)?.[1] ?? MODEL_STRING.exec(candidate.excerpt)?.[1];
-  if (!model)
-    return;
-  if (MODEL_FAMILY_ALIAS.test(model.split("/").pop() ?? model))
-    return;
-  if (TEST_PATH2.test(candidate.path) && !usedOutsideTests(rootDir, model))
-    return;
-  return {
-    id: stableId("model_config", `${pathStem(candidate.path)}:L${candidate.startLine}`),
-    type: "model_config",
-    name: model,
-    scope: "shared",
-    usedByAgentIds: [],
-    confidence: confidence2,
-    confidenceReason: detectorConfidenceReason(candidate),
-    evidence: candidateEvidence(candidate)
-  };
+var ALIAS_KEY_SAME_LINE = /^\s*:\s*\{[^}]*?["']?\b(?:model|model_name|model_id|modelName|modelId|[A-Z_]*MODEL[A-Z_]*)["']?\s*[:=]/i;
+var BLOCK_KEY = /^\s*:\s*\{\s*$/;
+var MODEL_FIELD = /["']?\b(?:model|model_name|model_id|modelName|modelId|[A-Z_]*MODEL[A-Z_]*)["']?\s*[:=]\s*["'`]/i;
+var ASSIGNED_FIELD = /([A-Za-z_$][\w$]*)["']?\s*[:=]\s*(?:[A-Za-z_$][\w$.()]*\(\s*)?$/;
+var COMPARED_BEFORE = /(?:\.(?:startsWith|endsWith|includes|indexOf|match|test)\(\s*|[!=]==?\s*|\bcase\s+|[\w$\])]\[\s*)$/;
+var COMPARED_AFTER = /^\s*[!=]==?/;
+function isComparedLiteral(sourceLine, literal) {
+  return COMPARED_BEFORE.test(sourceLine.slice(0, literal.index)) || COMPARED_AFTER.test(sourceLine.slice(literal.end));
+}
+var ALIAS_BLOCK_MAX_LINES = 200;
+function isModelAliasKey(lines, row, literal, path = "") {
+  const after = lines[row].slice(literal.end);
+  if (ALIAS_KEY_SAME_LINE.test(after))
+    return true;
+  const separator = /^\s*:\s*/.exec(after);
+  if (separator && modelIdLiteralsAt(lines, path, row).some((other) => other.index === literal.end + separator[0].length))
+    return true;
+  if (!BLOCK_KEY.test(after))
+    return false;
+  let depth = 1;
+  for (const next of lines.slice(row + 1, row + 1 + ALIAS_BLOCK_MAX_LINES)) {
+    if (depth === 1 && MODEL_FIELD.test(next))
+      return true;
+    for (const ch of next) {
+      if (ch === "{")
+        depth += 1;
+      else if (ch === "}")
+        depth -= 1;
+    }
+    if (depth <= 0)
+      return false;
+  }
+  return false;
 }
-var nonTestSourcePaths = new Map;
-var modelUsedOutsideTests = new Map;
-var MAX_MODEL_SOURCE_BYTES = 1024 * 1024;
-var MODEL_SOURCE_FILE = /\.(?:[cm]?[jt]sx?|py|json|jsonc|ya?ml|toml)$/i;
-var NON_SOURCE_DIR = /(^|\/)(?:docs?|\.moda)\//i;
-function usedOutsideTests(rootDir, modelId) {
-  let results = modelUsedOutsideTests.get(rootDir);
-  if (!results) {
-    results = new Map;
-    modelUsedOutsideTests.set(rootDir, results);
+var lineLiterals = new WeakMap;
+function modelIdLiteralsAt(lines, path, row) {
+  let literals = lineLiterals.get(lines);
+  if (!literals) {
+    literals = modelIdLiteralsInLines(lines, path);
+    lineLiterals.set(lines, literals);
+  }
+  return literals[row] ?? [];
+}
+function modelIdsOnCandidateLine(candidate, lines) {
+  const rows = lines ?? [];
+  const row = candidate.startLine - 1;
+  const sourceLine = rows[row] ?? "";
+  const ids = [];
+  const literals = modelIdLiteralsAt(rows, candidate.path, row);
+  const isAliasKey = (value) => literals.some((literal) => literal.value === value && isModelAliasKey(rows, row, literal, candidate.path));
+  if (candidate.signal !== "model.id_literal") {
+    const assignment = MODEL_ASSIGNMENT_VALUE.exec(sourceLine);
+    const [field, assigned] = [assignment?.[1], assignment?.[2]];
+    const preferenceOnly = Boolean(field && MODEL_PREFERENCE_FIELD.test(field) && !FULL_MODEL_ID.test(assigned ?? ""));
+    const registryKey = candidate.signal === "model.registry_key" ? REGISTRY_KEY.exec(sourceLine)?.[1] : undefined;
+    const primary = preferenceOnly ? undefined : (assigned && MODEL_STRING.exec(assigned)?.[1]) ?? registryKey ?? MODEL_STRING.exec(sourceLine)?.[1] ?? MODEL_STRING.exec(candidate.excerpt)?.[1];
+    const compared = (value) => literals.some((literal) => literal.value === value && isComparedLiteral(sourceLine, literal));
+    if (primary && !isAliasKey(primary) && !compared(primary))
+      ids.push(primary);
+  }
+  for (const literal of literals) {
+    const { value, index } = literal;
+    if (ids.includes(value) || isModelAliasKey(rows, row, literal, candidate.path))
+      continue;
+    if (isComparedLiteral(sourceLine, literal))
+      continue;
+    const field = ASSIGNED_FIELD.exec(sourceLine.slice(0, index))?.[1];
+    if (field && MODEL_PREFERENCE_FIELD.test(field) && !FULL_MODEL_ID.test(value))
+      continue;
+    ids.push(value);
   }
-  const cached = results.get(modelId);
-  if (cached !== undefined)
+  return ids.filter((id) => !MODEL_FAMILY_ALIAS.test(id.split("/").pop() ?? id));
+}
+var OTHER_TEST_PATH = /(?:^|\/)(?:e2e|testdata|__mocks__|spec)\/|\.stories\.[^/.]+$|(?:^|\/)(?:test_[^/]*|[^/]*_test|conftest)\.py$/i;
+var NON_SOURCE_DIR = /(^|\/)(?:docs?|\.moda)\//i;
+var EMPTY_MODEL_PATH_CONTEXT = { productionScripts: new Set, rewritingPackages: new Set };
+function isHarnessModelPath(path, context = EMPTY_MODEL_PATH_CONTEXT) {
+  if (NON_SOURCE_DIR.test(path))
+    return false;
+  if (isEvalModelSource(path))
+    return true;
+  if (SCRIPTS_DIR.test(path) && !isUnderAny(path, context.productionScripts))
+    return false;
+  if (isUnderAny(path, context.rewritingPackages) && !SERVER_SIDE_PATH.test(path))
+    return false;
+  return evalDirectoryIndex(path) < 0 && !TEST_PATH2.test(path) && !OTHER_TEST_PATH.test(path);
+}
+function modelPathContext(rootDir) {
+  return { productionScripts: productionScriptPaths(rootDir), rewritingPackages: modelRewritingPackages(rootDir) };
+}
+var SERVER_SIDE_PATH = /(?:^|\/)(?:server|host|api)\/|[.+]server\.[cm]?[jt]s$/;
+var MODEL_REWRITE_CALL = /\bmodel\s*[:=]\s*[a-z]\w*\(\s*(?:\w+\.)*(?:requested\w*|\w*[mM]odel\w*)\s*,/;
+var REWRITE_SOURCE_FILE = /\.(?:[cm]?[jt]sx?|svelte|vue|py)$/i;
+var modelRewriteCache = new Map;
+function modelRewritingPackages(rootDir) {
+  const root = resolve9(rootDir);
+  const cached = modelRewriteCache.get(root);
+  if (cached)
     return cached;
-  let paths = nonTestSourcePaths.get(rootDir);
-  if (!paths) {
-    paths = inventoryFiles(rootDir, [], { includeFile: (path) => MODEL_SOURCE_FILE.test(path) }).map((file) => file.path).filter((path) => !TEST_PATH2.test(path) && MODEL_SOURCE_FILE.test(path) && !NON_SOURCE_DIR.test(path));
-    nonTestSourcePaths.set(rootDir, paths);
+  const packageRoots = new Set;
+  const sources = [];
+  walkRepo(root, (path, name) => {
+    if (name === "package.json" || name === "pyproject.toml")
+      packageRoots.add(posix.dirname(path));
+    else if (REWRITE_SOURCE_FILE.test(name))
+      sources.push(path);
+  });
+  const found = new Set;
+  for (const path of sources) {
+    let dir = posix.dirname(path);
+    while (dir !== "." && !packageRoots.has(dir))
+      dir = posix.dirname(dir);
+    if (dir === "." || found.has(dir))
+      continue;
+    let text;
+    try {
+      if (statSync3(resolve9(root, path)).size > 512 * 1024)
+        continue;
+      text = readFileSync11(resolve9(root, path), "utf8");
+    } catch {
+      continue;
+    }
+    if (MODEL_REWRITE_CALL.test(text))
+      found.add(dir);
   }
-  const used = paths.some((path) => {
+  modelRewriteCache.set(root, found);
+  return found;
+}
+var MAX_REPO_SCAN_DEPTH = 8;
+function walkRepo(root, onFile) {
+  const visit = (dir, depth) => {
+    let entries;
     try {
-      const absolute = resolve9(rootDir, path);
-      if (statSync3(absolute).size > MAX_MODEL_SOURCE_BYTES)
-        return false;
-      return readFileSync11(absolute, "utf8").includes(modelId);
+      entries = readdirSync4(resolve9(root, dir), { withFileTypes: true });
     } catch {
-      return false;
+      return;
+    }
+    for (const entry of entries) {
+      const path = dir ? `${dir}/${entry.name}` : entry.name;
+      if (entry.isDirectory()) {
+        if (depth < MAX_REPO_SCAN_DEPTH && !entry.name.startsWith(".") && entry.name !== "node_modules")
+          visit(path, depth + 1);
+      } else if (entry.isFile()) {
+        onFile(path, entry.name);
+      }
+    }
+  };
+  visit("", 0);
+}
+function isUnderAny(path, prefixes) {
+  for (const prefix of prefixes)
+    if (path === prefix || path.startsWith(`${prefix}/`))
+      return true;
+  return false;
+}
+var SCRIPTS_DIR = /^scripts\//;
+var DEPLOY_CONFIG_FILE = /^(?:Dockerfile(?:\.[\w.-]+)?|[\w.-]+\.Dockerfile|Procfile|fly\.toml|wrangler(?:\.[\w-]+)?\.(?:toml|jsonc?)|docker-compose(?:\.[\w-]+)?\.ya?ml|compose\.ya?ml|render\.ya?ml|railway\.json|vercel\.json|app\.ya?ml|crontab)$/i;
+var DEPLOY_PACKAGE_SCRIPT = /^(?:start|serve|prod|deploy|cron|worker)(?:[:_-]|$)/i;
+var SCRIPT_REFERENCE = /(?:^|[\s"'`=(,./])(scripts\/[\w./-]*[\w-])/g;
+var COMMENT_LINE = /^\s*(?:#|\/\/|\/\*|\*)/;
+var productionScriptCache = new Map;
+function productionScriptPaths(rootDir) {
+  const root = resolve9(rootDir);
+  const cached = productionScriptCache.get(root);
+  if (cached)
+    return cached;
+  const found = new Set;
+  const addReferences = (text) => {
+    for (const line of text.split(`
+`)) {
+      if (COMMENT_LINE.test(line))
+        continue;
+      for (const match of line.matchAll(SCRIPT_REFERENCE))
+        found.add(match[1].replace(/\/+$/, ""));
     }
+  };
+  walkRepo(root, (path, name) => {
+    const isDeployConfig = DEPLOY_CONFIG_FILE.test(name);
+    if (!isDeployConfig && name !== "package.json")
+      return;
+    const dir = posix.dirname(path);
+    if (isDeployConfig && SCRIPTS_DIR.test(path))
+      found.add(dir);
+    let text;
+    try {
+      text = readFileSync11(resolve9(root, path), "utf8");
+    } catch {
+      return;
+    }
+    if (isDeployConfig) {
+      addReferences(text);
+      return;
+    }
+    try {
+      const scripts = JSON.parse(text).scripts ?? {};
+      for (const [scriptName, command] of Object.entries(scripts)) {
+        if (DEPLOY_PACKAGE_SCRIPT.test(scriptName) && typeof command === "string")
+          addReferences(command);
+      }
+    } catch {}
   });
-  results.set(modelId, used);
-  return used;
+  productionScriptCache.set(root, found);
+  return found;
+}
+var MAX_MODEL_EVIDENCE = 5;
+var MAX_EVAL_SUITE_FILES = 100;
+function capPromotedEvidence(artifact) {
+  const max = artifact.type === "model_config" ? MAX_MODEL_EVIDENCE : artifact.type === "eval" ? MAX_EVAL_SUITE_FILES : undefined;
+  if (max !== undefined && artifact.evidence.length > max)
+    artifact.evidence = artifact.evidence.slice(0, max);
+}
+function distinctStableId(prefix, raw) {
+  return `${stableId(prefix, raw.replace(/\./g, "-"))}_${createHash5("sha256").update(raw).digest("hex").slice(0, 8)}`;
+}
+function promoteModelIds(occurrences, context) {
+  const out = [];
+  for (const [key, { id, at }] of occurrences) {
+    const inHarness = at.filter((entry) => isHarnessModelPath(entry.path, context));
+    if (inHarness.length === 0)
+      continue;
+    const seen = new Set;
+    const cited = [...inHarness, ...at.filter((entry) => !isHarnessModelPath(entry.path, context))].filter((entry) => {
+      const key2 = `${entry.path}:${entry.line}`;
+      if (seen.has(key2))
+        return false;
+      seen.add(key2);
+      return true;
+    });
+    const first2 = cited[0];
+    const what = SIGNAL_DESCRIPTIONS[first2.signal] ?? `the ${first2.signal} pattern`;
+    out.push({
+      id: distinctStableId("model_config", key),
+      type: "model_config",
+      name: id,
+      scope: "shared",
+      usedByAgentIds: [],
+      confidence: Math.max(...cited.map((entry) => entry.confidence)),
+      confidenceReason: `Deterministic: model id ${id} found by ${what} at ${first2.path}:${first2.line} (${inHarness.length} harness occurrence${inHarness.length === 1 ? "" : "s"}); not checked by the analyst.`,
+      evidence: cited.map((entry) => ({ path: entry.path, line: entry.line, reason: `deterministic detector ${entry.signal}` }))
+    });
+  }
+  return out;
 }
 function mergePromotedDuplicate(existing, next) {
   for (const entry of next.evidence) {
@@ -14939,10 +15384,16 @@ function mergePromotedDuplicate(existing, next) {
   if (!existing.body && next.body)
     existing.body = next.body;
 }
-function promoteHarnessCandidates(report, rootDir) {
+function promoteHarnessCandidates(report, rootDir, options = {}) {
   jsSources.clear();
+  productionScriptCache.clear();
+  modelRewriteCache.clear();
   try {
-    return promoteAll(report, rootDir);
+    const artifacts = promoteAll(report, rootDir);
+    if (!options.fullEvidence)
+      for (const artifact of artifacts)
+        capPromotedEvidence(artifact);
+    return artifacts;
   } finally {
     jsSources.clear();
   }
@@ -14954,6 +15405,15 @@ function promoteAll(report, rootDir) {
     model: new Set(report.candidates.filter((candidate) => candidate.kind === "llm_call_site" || candidate.kind === "framework_construct").map((candidate) => candidate.path)),
     searchable: new Set(report.files.map((file) => file.path))
   };
+  const modelIds = new Map;
+  const evalFiles = [];
+  const add = (artifact) => {
+    const existing = byId.get(artifact.id);
+    if (existing)
+      mergePromotedDuplicate(existing, artifact);
+    else
+      byId.set(artifact.id, artifact);
+  };
   for (const candidate of report.candidates) {
     const confidence2 = PROMOTED_CONFIDENCE[candidate.confidence];
     if (confidence2 === undefined)
@@ -14977,20 +15437,32 @@ function promoteAll(report, rootDir) {
         break;
       case "model_config":
         if (candidate.confidence === "high") {
-          artifact = promoteModelConfigCandidate(candidate, rootDir, confidence2, fileCache);
+          for (const id of modelIdsOnCandidateLine(candidate, readFileLines(rootDir, candidate.path, fileCache))) {
+            const key = id.toLowerCase();
+            const entry = modelIds.get(key) ?? { id, at: [] };
+            entry.at.push({ path: candidate.path, line: candidate.startLine, signal: candidate.signal, confidence: confidence2 });
+            modelIds.set(key, entry);
+          }
         }
         break;
+      case "eval_file":
+        if (candidate.confidence === "high")
+          evalFiles.push(candidate);
+        break;
       default:
         break;
     }
     if (!artifact)
       continue;
-    const existing = byId.get(artifact.id);
-    if (existing)
-      mergePromotedDuplicate(existing, artifact);
-    else
-      byId.set(artifact.id, artifact);
-  }
+    add(artifact);
+  }
+  for (const artifact of promoteModelIds(modelIds, modelPathContext(rootDir)))
+    add(artifact);
+  for (const artifact of promoteEvalSuites(evalFiles, PROMOTED_CONFIDENCE.high, {
+    artifactId: (suiteKey) => distinctStableId("eval", suiteKey),
+    fileReason: detectorConfidenceReason
+  }))
+    add(artifact);
   return [...byId.values()];
 }
 
@@ -15325,7 +15797,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-acxh0dbf.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-xbfvjpva.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);
@@ -16012,7 +16484,7 @@ function isToolGroupPlaceholder(name) {
 function isDetectedToolDefinitionReason(reason) {
   return typeof reason === "string" && (reason.startsWith("deterministic detector ") || reason.startsWith("Tool definition detected"));
 }
-var MODEL_SOURCE_FILE2 = /\.(?:[cm]?[jt]sx?|py|json|jsonc|ya?ml|toml)$/i;
+var MODEL_SOURCE_FILE = /\.(?:[cm]?[jt]sx?|py|json|jsonc|ya?ml|toml)$/i;
 var NON_SOURCE_DIR2 = /(^|\/)(?:docs?|\.moda)\//i;
 function isSearchableModelId(id) {
   return id.length >= 4 && !/\s/.test(id) && /[\d/.:_-]/.test(id);
@@ -16060,7 +16532,7 @@ function modelIdsUsedInSource(rootDir, ids) {
         return true;
       let entries;
       try {
-        entries = readdirSync4(current).sort();
+        entries = readdirSync5(current).sort();
       } catch {
         return true;
       }
@@ -16072,7 +16544,7 @@ function modelIdsUsedInSource(rootDir, ids) {
     }
     if (!stat.isFile() || stat.size > MAX_SCANNED_FILE_BYTES || isSecretishPath(rel2))
       return true;
-    if (TEST_PATH2.test(rel2) || !MODEL_SOURCE_FILE2.test(rel2))
+    if (TEST_PATH2.test(rel2) || !MODEL_SOURCE_FILE.test(rel2))
       return true;
     if (files >= maxFiles) {
       complete = false;
@@ -16259,7 +16731,7 @@ var CONCERN_PROMOTED_ARTIFACT_TYPES = {
   topology: new Set,
   tools: new Set(["tool"]),
   prompts: new Set(["prompt"]),
-  evals: new Set(["model_config"])
+  evals: new Set(["model_config", "eval"])
 };
 function deterministicArtifacts(rootDir, concern) {
   const graph = { artifacts: [], unknowns: [] };
@@ -16275,21 +16747,43 @@ function mergeDeterministicArtifacts(graph, rootDir, options = {}) {
   const allowedTypes = options.concern ? CONCERN_PROMOTED_ARTIFACT_TYPES[options.concern] : undefined;
   let promoted;
   try {
-    promoted = promoteHarnessCandidates(detectHarnessCandidates(rootDir), rootDir);
+    promoted = promoteHarnessCandidates(detectHarnessCandidates(rootDir), rootDir, { fullEvidence: true });
   } catch {
     return { added: 0 };
   }
   backfillRefutationEvidenceReasons(graph);
   const refuted = analystRefutations(graph);
   const candidatePaths = new Set(promoted.flatMap((artifact) => artifact.evidence.map((entry) => typeof entry.path === "string" ? normalizePath2(entry.path) : "").filter(Boolean)));
+  const modelLineCounts = new Map;
+  for (const artifact of promoted) {
+    if (artifact.type !== "model_config")
+      continue;
+    for (const entry of artifact.evidence) {
+      const key = `${entry.path}:${entry.line}`;
+      modelLineCounts.set(key, (modelLineCounts.get(key) ?? 0) + 1);
+    }
+  }
+  const sharedModelLines = new Set([...modelLineCounts].filter(([, count]) => count > 1).map(([key]) => key));
+  const pathContext = modelPathContext(rootDir);
   let added = 0;
   for (const artifact of promoted) {
     if (allowedTypes && !allowedTypes.has(artifact.type))
       continue;
-    if (graphCoversPromotedArtifact(graph, artifact))
+    if (graphCoversPromotedArtifact(graph, artifact, sharedModelLines))
       continue;
+    if ((artifact.type === "model_config" || artifact.type === "eval") && artifact.evidence.length > 1 && !refuted.candidateIds.has(artifact.id)) {
+      const kept = artifact.evidence.filter((entry) => !isRefutedByAnalyst({ ...artifact, evidence: [entry] }, refuted, candidatePaths));
+      if (kept.length === 0)
+        continue;
+      if (artifact.type === "model_config" && !kept.some((entry) => isHarnessModelPath(entry.path, pathContext)))
+        continue;
+      artifact.evidence = kept;
+      if (artifact.sourcePath && !kept.some((entry) => entry.path === artifact.sourcePath))
+        artifact.sourcePath = kept[0].path;
+    }
     if (isRefutedByAnalyst(artifact, refuted, candidatePaths))
       continue;
+    capPromotedEvidence(artifact);
     graph.artifacts.push(artifact);
     added += 1;
   }
@@ -16312,12 +16806,13 @@ var DETECTOR_ARTIFACT_TYPES = {
   message_construction: "prompt",
   tool_definition: "tool",
   tool_schema: "tool",
-  model_config: "model_config"
+  model_config: "model_config",
+  eval_file: "eval"
 };
 function refutedTypes(...texts) {
   const types = new Set;
   for (const text of texts) {
-    for (const match of String(text ?? "").matchAll(/\b(prompt_literal|prompt_file|message_construction|tool_definition|tool_schema|model_config)\b/g)) {
+    for (const match of String(text ?? "").matchAll(/\b(prompt_literal|prompt_file|message_construction|tool_definition|tool_schema|model_config|eval_file)\b/g)) {
       types.add(DETECTOR_ARTIFACT_TYPES[match[1]]);
     }
   }
@@ -16379,7 +16874,26 @@ function artifactSourceKey(artifact) {
   const pinned = Array.isArray(artifact.evidence) ? artifact.evidence.find((entry) => typeof entry.path === "string" && entry.path.length > 0) : undefined;
   return pinned ? normalizePath2(pinned.path) : undefined;
 }
-function graphCoversPromotedArtifact(graph, promoted) {
+function mentionsModelId(text, id) {
+  if (!id)
+    return false;
+  const escaped = id.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+  return new RegExp(`(?<![\\w./@-])${escaped}(?![\\w/-]|\\.\\w)`, "i").test(text);
+}
+function artifactPaths(artifact) {
+  const paths = Array.isArray(artifact.evidence) ? artifact.evidence.map((entry) => typeof entry.path === "string" ? normalizePath2(entry.path) : "").filter(Boolean) : [];
+  return artifact.sourcePath ? [normalizePath2(artifact.sourcePath), ...paths] : paths;
+}
+function graphCoversPromotedArtifact(graph, promoted, sharedModelLines = new Set) {
+  if (promoted.type === "model_config" && graph.artifacts.some((existing) => existing.type === "model_config" && mentionsModelId(`${existing.name ?? ""}
+${existing.body ?? ""}`, promoted.name)))
+    return true;
+  if (promoted.type === "eval") {
+    const suite = new Set(artifactPaths(promoted));
+    const suiteKey = promoted.sourcePath ? evalSuiteKey(normalizePath2(promoted.sourcePath)) : undefined;
+    if (graph.artifacts.some((existing) => existing.type === "eval" && artifactPaths(existing).some((path) => suite.has(path) || suiteKey !== undefined && evalSuiteKey(path.replace(/\/+$/, "")) === suiteKey)))
+      return true;
+  }
   const promotedName = promoted.name.toLowerCase();
   const isDefinitionLine = (entry) => typeof entry.line === "number" && !/^(?:passed to a model call|prompt-named literal referenced)/.test(entry.reason ?? "");
   const promotedLines = promoted.evidence.filter(isDefinitionLine);
@@ -16395,7 +16909,7 @@ function graphCoversPromotedArtifact(graph, promoted) {
       if (!existingSource || !promotedSource || existingSource === promotedSource && !distinctInline)
         return true;
     }
-    if (existing.type === promoted.type && Array.isArray(existing.evidence) && existing.evidence.some((entry) => isDefinitionLine(entry) && promotedLines.some((line) => line.path === entry.path && line.line === entry.line))) {
+    if (existing.type === promoted.type && !(promoted.type === "model_config" && isModelIdLiteral(existing.name ?? "")) && Array.isArray(existing.evidence) && existing.evidence.some((entry) => isDefinitionLine(entry) && !(promoted.type === "model_config" && sharedModelLines.has(`${entry.path}:${entry.line}`)) && promotedLines.some((line) => line.path === entry.path && line.line === entry.line))) {
       return true;
     }
     if (isWholeFilePrompt && existing.sourcePath === promoted.sourcePath)
@@ -17401,7 +17915,7 @@ var CONCERN_CANDIDATE_KINDS = {
   topology: ["llm_call_site", "framework_construct"],
   tools: ["tool_definition", "tool_schema"],
   prompts: ["prompt_file", "prompt_literal", "message_construction"],
-  evals: ["model_config"]
+  evals: ["model_config", "eval_file"]
 };
 var MAX_SEED_CANDIDATES_PER_KIND = 40;
 var MAX_INLINE_CANDIDATE_EXCERPT_CHARS = 500;
@@ -17414,7 +17928,8 @@ var SEED_CANDIDATE_KIND_LABELS = {
   message_construction: "Message constructions",
   prompt_file: "Prompt files",
   prompt_literal: "Inline prompt literals",
-  model_config: "Model configuration"
+  model_config: "Model configuration",
+  eval_file: "Eval suite files"
 };
 function renderAnalystCandidateLines(report, concern) {
   const allowedKinds = concern ? new Set(CONCERN_CANDIDATE_KINDS[concern]) : undefined;
@@ -17435,7 +17950,7 @@ function renderAnalystCandidateLines(report, concern) {
     concern ? 'Each entry is path:line [detector] excerpt. Candidates are pattern matches — verify each against the real file, drop false positives — things that are not harness components (SQL, UI props or display copy, URL templates, test fixtures, utilities), never a real component merely because it is unused (list refuted ones in unknowns: an unknown whose id starts with "refuted_", with one evidence entry {path, line, reason} per refuted candidate, using the path:line shown for that candidate and starting the reason with its [detector]), and hunt for in-concern items the patterns cannot see. Do not cite this list as evidence; cite the files.' : 'Each entry is path:line [detector] excerpt. Candidates are pattern matches — verify each against the real file and drop false positives — things that are not harness components (SQL, UI props or display copy, URL templates, test fixtures, utilities), never a real component merely because it is unused. Verified deterministic candidates are also auto-merged into the graph after your run, so prioritize (1) agents, topology, and relationships, (2) verifying or refuting these candidates (list refuted ones in unknowns: an unknown whose id starts with "refuted_", with one evidence entry {path, line, reason} per refuted candidate, using the path:line shown for that candidate and starting the reason with its [detector]; refuted candidates are never auto-merged), and (3) artifacts the patterns cannot see (runtime agents, prompts assembled at runtime, cross-file wiring) — rather than re-listing every candidate as an artifact. Do not cite this list as evidence; cite the files.'
   ];
   if (concern === "evals") {
-    lines.push("Note: evals, guardrails, and memory/retrieval stores have no deterministic detector — only model_config candidates are seeded. Discover the rest by investigation.");
+    lines.push("Note: guardrails and memory/retrieval stores have no deterministic detector — only model_config and eval_file candidates are seeded. Discover the rest by investigation.");
   }
   for (const [kind, label] of Object.entries(SEED_CANDIDATE_KIND_LABELS)) {
     const bucket = byKind.get(kind);
@@ -17500,7 +18015,7 @@ function readDirectoryPreflightPaths(rootDir) {
     const absolute = current === "." ? rootDir : join9(rootDir, current);
     let entries;
     try {
-      entries = readdirSync4(absolute);
+      entries = readdirSync5(absolute);
     } catch {
       continue;
     }
@@ -17536,7 +18051,7 @@ function shouldSkipPreflightPath(path) {
   return isSecretishPath(normalized);
 }
 function isManifestLikePath(path) {
-  const name = basename6(path).toLowerCase();
+  const name = basename7(path).toLowerCase();
   return /^(package\.json|pyproject\.toml|requirements.*\.txt|uv\.lock|poetry\.lock|pnpm-lock\.yaml|bun\.lockb?|yarn\.lock|cargo\.toml|go\.mod|deno\.json|turbo\.json|langgraph\.json|agents\.json|config\.(ts|js|json|yaml|yml|toml))$/.test(name);
 }
 function isDocLikePath(path) {
@@ -17566,7 +18081,7 @@ function resolveAnalystCommand(adapter) {
   return findOnPath("cursor-agent") || findOnPath("cursor-cli") || findOnPath("cursor") || findOnPath("/Applications/Cursor.app/Contents/Resources/app/bin/cursor");
 }
 function cursorSubcommandArgs(command, args) {
-  const name = basename6(command);
+  const name = basename7(command);
   return name === "cursor" || name === "cursor-cli" ? ["agent", ...args] : args;
 }
 function findOnPath(command) {
@@ -17595,7 +18110,7 @@ function scanHarness(options = {}) {
   const readPlan = buildHarnessReadPlan(rootDir, options.pathWasExplicit === true);
   const graph = {
     schemaVersion: SCHEMA_VERSION,
-    harnessId: stableId("harness", repo.name || basename6(rootDir) || "repo"),
+    harnessId: stableId("harness", repo.name || basename7(rootDir) || "repo"),
     tenant: options.tenantId ? {
       tenantId: options.tenantId,
       source: options.tenantSource ?? "scan_option"
@@ -17666,7 +18181,7 @@ function collectSnapshotInputs(rootDir, maxFiles, maxTextBytes) {
     if (stat.isDirectory()) {
       if (path !== "." && (isSkippedDir(path) || isSkippedPathPrefix(path)))
         return;
-      for (const entry of readdirSync4(current).sort())
+      for (const entry of readdirSync5(current).sort())
         walk(join9(current, entry));
       return;
     }
@@ -18009,7 +18524,7 @@ function findFresherHarnessReports(rootDir) {
     visited += 1;
     let entries;
     try {
-      entries = readdirSync4(dir, { withFileTypes: true });
+      entries = readdirSync5(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -18257,7 +18772,7 @@ function inventoryFiles(rootDir, skipped, options = {}) {
         recordSkipped(skipped, { path: rel2, reason: "ignored directory" });
         return;
       }
-      for (const entry of readdirSync4(current).sort()) {
+      for (const entry of readdirSync5(current).sort()) {
         walk(join9(current, entry));
       }
       return;
@@ -18344,7 +18859,7 @@ function numericEnvAllowZero(name, fallback) {
 function detectRepo(rootDir, files) {
   const packageJson = files.find((file) => file.path === "package.json");
   const pyproject = files.find((file) => file.path === "pyproject.toml");
-  const name = packageJson?.text ? safePackageName(packageJson.text) ?? basename6(rootDir) : pyproject?.text ? safeTomlName(pyproject.text) ?? basename6(rootDir) : basename6(rootDir);
+  const name = packageJson?.text ? safePackageName(packageJson.text) ?? basename7(rootDir) : pyproject?.text ? safeTomlName(pyproject.text) ?? basename7(rootDir) : basename7(rootDir);
   const packageManagers = [
     files.some((file) => file.path === "bun.lock" || file.path === "bun.lockb") ? "bun" : null,
     files.some((file) => file.path === "pnpm-lock.yaml") ? "pnpm" : null,
@@ -18618,7 +19133,7 @@ function maybeAddSkillArtifact(graph, file) {
   upsertArtifact(graph, {
     id: stableId("skill", file.path),
     type: "skill",
-    name: titleFromId(basename6(file.path).replace(/\.(md|mdc)$/i, "")),
+    name: titleFromId(basename7(file.path).replace(/\.(md|mdc)$/i, "")),
     scope: "global",
     sourcePath: file.path,
     contentHash: hashText(file.text ?? ""),
@@ -18661,7 +19176,7 @@ function inferRuntimeAgent(file, graph) {
     return null;
   if (!/\.(ts|tsx|js|mjs|py)$/i.test(file.path))
     return null;
-  if (basename6(file.path) === "__init__.py")
+  if (basename7(file.path) === "__init__.py")
     return null;
   const loweredPath = file.path.toLowerCase();
   const loweredText = file.text.toLowerCase();
@@ -18768,7 +19283,7 @@ function inferArtifactsForFile(file, graph) {
       return false;
     if (artifact.sourcePath === file.path)
       return true;
-    const base = basename6(artifact.sourcePath);
+    const base = basename7(artifact.sourcePath);
     if (text.includes(base) || text.includes(artifact.sourcePath))
       return true;
     if (artifact.type === "tool") {
@@ -19690,13 +20205,13 @@ function titleFromId(id) {
   return id.replace(/^(agent|family|channel|prompt|tool|skill|eval|identity|deploy|entry|env)_/, "").split(/[_/.-]+/).filter(Boolean).map((word) => word.charAt(0).toUpperCase() + word.slice(1)).join(" ") || id;
 }
 function promptNameFromPath(path) {
-  return titleFromId(basename6(path).replace(/\.(prompt\.)?(md|json|ya?ml)$/i, ""));
+  return titleFromId(basename7(path).replace(/\.(prompt\.)?(md|json|ya?ml)$/i, ""));
 }
 function normalizePath2(path) {
   return path.split(sep5).join("/");
 }
 function hashText(text) {
-  return createHash5("sha256").update(text).digest("hex");
+  return createHash6("sha256").update(text).digest("hex");
 }
 
 export { startRemoteAnalyze, pollRemoteAnalyzeUntilDone, isRecoverableRemoteRun, checkPromptMapping, safePromptEvidencePath, discoverHarnessPromptSources, runHarnessCommand, writeHarnessAnalyzeResult, emitWrittenArtifacts, analyzeHarnessPrompts, isToolGroupPlaceholder, repairExternalAnalystReport, deriveRelationshipsFromGraph, deterministicArtifacts, mergeDeterministicArtifacts, analystRefutations, describeCodingAgentEvent, analystEventProgress, isRetryableExternalAnalystFailure, sleep, summarizeInvalidAnalystReport, isDeterministicLocalAnalyst, resolveHarnessAnalyzeConcern, resolveExternalHarnessAnalystInvocation, detectAvailableCodingAgents, codingAgentDisplayName, runCodingAgent, readOnlyClaudeExtraArgs, resolveAnalystModel, renderExternalHarnessAnalystPrompt, CONCERN_CANDIDATE_KINDS, SEED_CANDIDATE_KIND_LABELS, renderAnalystCandidateLines, renderAnalystSeedLines, truncateText, scanHarness, summarizeHarness, buildSourceSnapshot, writeHumanProgress, describeSyncIdentity, describeSyncTenantLabel, findFresherHarnessReports, writeHarnessArtifacts, assertHarnessGraphSyncQuality, graphForSync, inventoryFiles, numericEnv, numericEnvAllowZero, computeDeterministicFloor, stableId, titleFromId, promptNameFromPath };