@moda-ai/cli 1.55.69 → 1.55.71

package/dist/{agent-grf8tb4m.js → agent-6a97sf18.js}

@@ -1,8 +1,8 @@
 import {
   buildDoctorReport
-} from "./cli-45m0bz7q.js";
-import"./cli-27kkk5z4.js";
-import"./cli-67sp41tx.js";
+} from "./cli-1ykm231r.js";
+import"./cli-rrggdmf8.js";
+import"./cli-0qnmrybh.js";
 import"./cli-mm48br00.js";
 import {
   readHarnessSyncState
@@ -15,21 +15,21 @@ import {
   readHarnessReport,
   validateHarnessReport
 } from "./cli-9ww72mrd.js";
-import"./cli-m702wdtv.js";
+import"./cli-5ms8rw8x.js";
 import"./cli-e0kbye4s.js";
-import"./cli-wcax07xh.js";
-import"./cli-bpnt0z0y.js";
+import"./cli-22yvg5kh.js";
+import"./cli-87xy1evx.js";
 import {
   resolveApiKey,
   resolveIngestUrl,
   resolveModaBaseUrl,
   resolveTenantId
-} from "./cli-15pzedv3.js";
+} from "./cli-z1t3sf7b.js";
 import {
   CliInputError
 } from "./cli-k4tqwah4.js";
 import"./cli-9kfxkxmk.js";
-import"./cli-9a4b1wxz.js";
+import"./cli-p5grm12t.js";
 import {
   __require
 } from "./cli-0v6na3yp.js";
@@ -95,7 +95,7 @@ async function buildAgentContext(context) {
   const graph = readHarnessGraphIfPresent(context.cwd);
   const reportState = readHarnessReportState(context.cwd);
   const syncState = readHarnessSyncState(context.cwd);
-  const harness = graph ? await import("./harness-zbxfgaer.js") : undefined;
+  const harness = graph ? await import("./harness-29rxrwfg.js") : undefined;
   const topFindings = doctor.checks.filter((check) => check.status === "fail" || check.status === "warning").slice(0, 12).map(checkToFinding);
   const evidenceRefs = [
     ...doctor.checks.map(checkToEvidenceRef),

package/dist/{cli-67sp41tx.js → cli-0qnmrybh.js}

@@ -4,14 +4,14 @@ import {
 } from "./cli-mm48br00.js";
 import {
   createCommandContext
-} from "./cli-m702wdtv.js";
+} from "./cli-5ms8rw8x.js";
 import {
   assertFlags,
   assertPositionals
-} from "./cli-wcax07xh.js";
+} from "./cli-22yvg5kh.js";
 import {
   callControlAPI
-} from "./cli-bpnt0z0y.js";
+} from "./cli-87xy1evx.js";
 import {
   CliInputError
 } from "./cli-k4tqwah4.js";
@@ -5543,7 +5543,7 @@ import {
 import { dirname, isAbsolute, join, relative, resolve } from "node:path";
 var promptSourcesModule;
 async function loadPromptSources() {
-  promptSourcesModule ??= await import("./prompt-sources-1hycgx6r.js");
+  promptSourcesModule ??= await import("./prompt-sources-3mq04qc6.js");
   return promptSourcesModule;
 }
 var MODA_DIR = ".moda";
@@ -5768,7 +5768,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const analyzedDefinitions = new Map;
   if (flags["no-analyze"] !== "true") {
     options.onProgress?.("Analyzing prompt sources before sync.");
-    const { analyzeHarnessPrompts } = await import("./harness-zbxfgaer.js");
+    const { analyzeHarnessPrompts } = await import("./harness-29rxrwfg.js");
     const result = await analyzeHarnessPrompts({
       rootDir: process.cwd(),
       existing: established.flatMap((prompt) => prompt.sourceDefinition ? [prompt.sourceDefinition.source] : []),
@@ -5796,7 +5796,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const mergedSources = mergePromptSources(manifest.sources, extraSources);
   const manifestUpdate = stableJson(mergedSources) === stableJson(mergePromptSources(manifest.sources, [])) ? undefined : $stringify({ version: 2, prompt_paths: manifest.promptPaths, sources: mergedSources });
   const prompts = await discoverPrompts(extraSources);
-  const { checkPromptAttribution } = await import("./prompt-attribution-8qhwgssy.js");
+  const { checkPromptAttribution } = await import("./prompt-attribution-80nzjmz0.js");
   const attribution = checkPromptAttribution(process.cwd(), prompts.map((prompt) => prompt.key));
   const brokenAttribution = attribution.references.filter((reference) => reference.status === "missing");
   if (brokenAttribution.length) {
@@ -6102,7 +6102,7 @@ async function migratePromptManifest(options = {}) {
   let addedSources = [];
   let pendingSources = [];
   if (options.discover) {
-    const { analyzeHarnessPrompts } = await import("./harness-zbxfgaer.js");
+    const { analyzeHarnessPrompts } = await import("./harness-29rxrwfg.js");
     const result = await analyzeHarnessPrompts({
       rootDir: root,
       existing: manifest.sources,

package/dist/{cli-45m0bz7q.js → cli-1ykm231r.js}

@@ -1,10 +1,10 @@
 import {
   isAuthSessionValid,
   loadAuthSession
-} from "./cli-27kkk5z4.js";
+} from "./cli-rrggdmf8.js";
 import {
   inspectPromptManifest
-} from "./cli-67sp41tx.js";
+} from "./cli-0qnmrybh.js";
 import {
   readHarnessSyncState,
   renderDoctorHuman,
@@ -12,7 +12,7 @@ import {
 } from "./cli-k0vxtzxb.js";
 import {
   callDataAPI
-} from "./cli-bpnt0z0y.js";
+} from "./cli-87xy1evx.js";
 import {
   describeModaBaseUrl,
   ensureSecretFilePermissions,
@@ -27,7 +27,7 @@ import {
   resolveSecretReference,
   resolveTenantId,
   secretFilePathFromRef
-} from "./cli-15pzedv3.js";
+} from "./cli-z1t3sf7b.js";
 import {
   __require
 } from "./cli-0v6na3yp.js";
@@ -395,7 +395,7 @@ async function harnessCurrentCheck(cwd, manifestPath, manifestExists, tenantId)
     };
   }
   try {
-    const { scanHarness } = await import("./harness-zbxfgaer.js");
+    const { scanHarness } = await import("./harness-29rxrwfg.js");
     const current = scanHarness({
       rootDir: cwd,
       scannerVersion: "doctor",

package/dist/{cli-wcax07xh.js → cli-22yvg5kh.js}

@@ -2,7 +2,7 @@ import {
   ApiError,
   callControlAPI,
   callDataAPI
-} from "./cli-bpnt0z0y.js";
+} from "./cli-87xy1evx.js";
 import {
   continuationCommand,
   embeddedTenantIdFromApiKey,
@@ -11,7 +11,7 @@ import {
   resolveApiTenantId,
   setPlatformTenantOverride,
   shellArg
-} from "./cli-15pzedv3.js";
+} from "./cli-z1t3sf7b.js";
 import {
   CliAccessError,
   CliInputError

package/dist/{cli-m702wdtv.js → cli-5ms8rw8x.js}

@@ -1,7 +1,7 @@
 import {
   createCliOutput,
   outputModeFromFlags
-} from "./cli-15pzedv3.js";
+} from "./cli-z1t3sf7b.js";
 
 // src/command-context.ts
 function flagEnabled(flags, key) {

package/dist/{cli-bpnt0z0y.js → cli-87xy1evx.js}

@@ -3,7 +3,7 @@ import {
   recordApiRequest,
   resolveApiKey,
   resolveModaBaseUrl
-} from "./cli-15pzedv3.js";
+} from "./cli-z1t3sf7b.js";
 
 // src/api-client.ts
 var REQUEST_TIMEOUT_MS = 30000;

package/dist/{cli-p2tfx93b.js → cli-k8hzbxtn.js}

@@ -13,22 +13,22 @@ import {
 } from "./cli-hcwdz9sd.js";
 import {
   createCommandContext
-} from "./cli-m702wdtv.js";
+} from "./cli-5ms8rw8x.js";
 import {
   assertFlags,
   assertPositionals,
   writeDryRun
-} from "./cli-wcax07xh.js";
+} from "./cli-22yvg5kh.js";
 import {
   callControlAPI
-} from "./cli-bpnt0z0y.js";
+} from "./cli-87xy1evx.js";
 import {
   recordApiRequest,
   resolveApiKey,
   resolveIngestUrl,
   resolveTenantId,
   shellArg
-} from "./cli-15pzedv3.js";
+} from "./cli-z1t3sf7b.js";
 import {
   CliInputError
 } from "./cli-k4tqwah4.js";

package/dist/{cli-rdwy3y4f.js → cli-n1406hqg.js}

@@ -1,10 +1,10 @@
 import {
   fetchApiKeyProbe
-} from "./cli-c7mj168q.js";
+} from "./cli-snswkrxd.js";
 import {
   authFetch,
   getCachedLoginContext
-} from "./cli-27kkk5z4.js";
+} from "./cli-rrggdmf8.js";
 import {
   embeddedTenantIdFromApiKey,
   getModaDir,
@@ -15,7 +15,7 @@ import {
   resolveTenantIdFromActiveProfile,
   saveCliConfig,
   writeSecretJsonFile
-} from "./cli-15pzedv3.js";
+} from "./cli-z1t3sf7b.js";
 import {
   CliAccessError,
   CliInputError,

package/dist/{cli-9a4b1wxz.js → cli-p5grm12t.js}

@@ -339,4 +339,4 @@ function packSnapshot(inputs, opts) {
     skips
   };
 }
-export { MAX_SCANNED_FILE_BYTES, DEFAULT_MAX_INVENTORY_FILES, DEFAULT_MAX_INVENTORY_TEXT_BYTES, MAX_RECORDED_SKIPS, SKIPPED_DIRS, isSkippedDir, isSkippedPathPrefix, isEvalLikePath, shouldInventoryFile, isTextFile, isSecretishPath, SECRET_KEYS, redactDeep, redactString, packSnapshot };
+export { MAX_SCANNED_FILE_BYTES, DEFAULT_MAX_INVENTORY_FILES, DEFAULT_MAX_INVENTORY_TEXT_BYTES, MAX_RECORDED_SKIPS, SKIPPED_DIRS, isSkippedDir, isSkippedPathPrefix, isEvalLikePath, shouldInventoryFile, isTextFile, isSecretishPath, SECRET_KEYS, redactDeep, redactString, redactSnapshotText, packSnapshot };

package/dist/{cli-9rmx2zzy.js → cli-qq4gd126.js}

@@ -3,10 +3,10 @@ import {
 } from "./cli-e0kbye4s.js";
 import {
   callDataAPI
-} from "./cli-bpnt0z0y.js";
+} from "./cli-87xy1evx.js";
 import {
   shellArg
-} from "./cli-15pzedv3.js";
+} from "./cli-z1t3sf7b.js";
 import {
   CliInputError
 } from "./cli-k4tqwah4.js";

package/dist/{cli-27kkk5z4.js → cli-rrggdmf8.js}

@@ -6,7 +6,7 @@ import {
   saveProfileConfig,
   secretFilePathFromRef,
   writeSecretJsonFile
-} from "./cli-15pzedv3.js";
+} from "./cli-z1t3sf7b.js";
 import {
   CliAuthError,
   CliInputError

package/dist/{cli-c7mj168q.js → cli-snswkrxd.js}

@@ -5,7 +5,7 @@ import {
   resolveApiKey,
   resolveApiKeyFromActiveProfile,
   resolveModaBaseUrl
-} from "./cli-15pzedv3.js";
+} from "./cli-z1t3sf7b.js";
 
 // src/api-key-auth.ts
 var PROBE_TIMEOUT_MS = 1e4;

package/dist/{cli-bwzvsmwk.js → cli-tgjvf91h.js}

@@ -36,16 +36,16 @@ import {
 import {
   createCommandContext,
   stringOption
-} from "./cli-m702wdtv.js";
+} from "./cli-5ms8rw8x.js";
 import {
   assertFlags,
   assertPositionals,
   requireTenant
-} from "./cli-wcax07xh.js";
+} from "./cli-22yvg5kh.js";
 import {
   ApiError,
   callControlAPI
-} from "./cli-bpnt0z0y.js";
+} from "./cli-87xy1evx.js";
 import {
   EXIT_DEGRADED,
   embeddedTenantIdFromApiKey,
@@ -56,7 +56,7 @@ import {
   resolveModaBaseUrl,
   resolveTenantId,
   shellArg
-} from "./cli-15pzedv3.js";
+} from "./cli-z1t3sf7b.js";
 import {
   CliInputError,
   CliInputRequiredError
@@ -72,7 +72,7 @@ import {
   require_typescript,
   resolvePromptSource,
   validatePromptSource
-} from "./cli-y5d33a1y.js";
+} from "./cli-y7dtztan.js";
 import {
   $isMap,
   $isNode,
@@ -97,8 +97,9 @@ import {
   isTextFile,
   packSnapshot,
   redactDeep,
+  redactSnapshotText,
   shouldInventoryFile
-} from "./cli-9a4b1wxz.js";
+} from "./cli-p5grm12t.js";
 import {
   __require,
   __toESM
@@ -3119,7 +3120,61 @@ var realtimeEventSink = {
     return;
   }
 };
-var CALL_SINKS = [realtimeEventSink, anthropicSink, openaiSink, aiSdkSink, workersAiSink, fetchSink, websocketSink, providerFactorySink, agentEntrySink, clientChatSink, hostedModelSink];
+function effectiveField(object, key) {
+  let last = -1;
+  object.properties.forEach((property, index) => {
+    if (!import_typescript5.default.isSpreadAssignment(property) && propertyNameText(property.name) === key)
+      last = index;
+  });
+  const fields = [];
+  const value = last >= 0 ? propertyValue(object, key) : undefined;
+  if (value)
+    fields.push({ node: value });
+  object.properties.forEach((property, index) => {
+    if (index > last && import_typescript5.default.isSpreadAssignment(property))
+      fields.push({ node: property.expression, key });
+  });
+  return fields;
+}
+var GATEWAY_METHODS = new Set(["call", "stream"]);
+var GATEWAY_BODY_KEYS = { system: "system", messages: "messages", prompt: "prompt", model: "model", tools: "tools" };
+var modelGatewaySink = {
+  id: "model-gateway",
+  sdk: "model-gateway",
+  match(call) {
+    if (!import_typescript5.default.isCallExpression(call) || call.arguments.length !== 1)
+      return;
+    const callee = unwrap(call.expression);
+    if (!import_typescript5.default.isPropertyAccessExpression(callee) || !GATEWAY_METHODS.has(callee.name.text))
+      return;
+    const receiver = unwrap(callee.expression);
+    if (!import_typescript5.default.isPropertyAccessExpression(receiver) || receiver.name.text !== "models")
+      return;
+    const request = unwrap(call.arguments[0]);
+    if (!import_typescript5.default.isObjectLiteralExpression(request) || !propertyValue(request, "kind"))
+      return;
+    const roles = [];
+    for (const body of effectiveField(request, "body")) {
+      for (const [key, role] of Object.entries(GATEWAY_BODY_KEYS)) {
+        if (body.key) {
+          roles.push({ role, node: body.node, key: `${body.key}.${key}` });
+          continue;
+        }
+        const literal = unwrap(body.node);
+        if (!import_typescript5.default.isObjectLiteralExpression(literal)) {
+          roles.push({ role, node: body.node, key });
+          continue;
+        }
+        for (const field of effectiveField(literal, key))
+          roles.push({ role, ...field });
+      }
+    }
+    for (const field of effectiveField(request, "prompt"))
+      roles.push({ role: "prompt", ...field });
+    return roles.length > 0 ? { api: `models.${callee.name.text}`, roles } : undefined;
+  }
+};
+var CALL_SINKS = [modelGatewaySink, realtimeEventSink, anthropicSink, openaiSink, aiSdkSink, workersAiSink, fetchSink, websocketSink, providerFactorySink, agentEntrySink, clientChatSink, hostedModelSink];
 function registerCallSink(recognizer) {
   CALL_SINKS.push(recognizer);
 }
@@ -3350,14 +3405,31 @@ function readSourcePathRelativeToEvidence(artifact, rootDir) {
   }
   return;
 }
+var PRIVATE_KEY_BLOCK = /-----BEGIN ([A-Z ]*)PRIVATE KEY-----(?:[\s\S]*?-----END \1PRIVATE KEY-----|(?:(?:\r\n|\r|\n)[ \t]*[A-Za-z0-9+/=]+[ \t]*(?=[\r\n]|$))*)/g;
+function maskPrivateKeyBlock(block) {
+  return block.split(/(\r\n|\r|\n)/).map((part, index) => index === 0 ? "[REDACTED PRIVATE KEY]" : index % 2 === 1 ? part : "").join("");
+}
+var CREDENTIAL_FIELD = /(\b(?:[A-Za-z0-9]+[_-])*(?:api[_-]?key|apikey|secret(?:[_-]?key)?|password|passwd|access[_-]?token|auth[_-]?token|refresh[_-]?token|client[_-]?secret|private[_-]?key)\b["']?\s*[:=]\s*["']?)(?![<${]|process\.env|os\.environ)([^\s"'`,;]{8,})/gi;
+var CALL_OR_INDEX = /^[A-Za-z_$][\w$]*(?:\.[A-Za-z_$][\w$]*)*[([]/;
+var DOTTED_REFERENCE = /^[A-Za-z_$][\w$]{0,39}(?:\.[A-Za-z_$][\w$]{0,39})+$/;
+function isCredentialReference(field, value) {
+  if (/["']$/.test(field))
+    return false;
+  return CALL_OR_INDEX.test(value) || DOTTED_REFERENCE.test(value);
+}
+function redactArtifactBody(body) {
+  const masked = body.replace(PRIVATE_KEY_BLOCK, maskPrivateKeyBlock).replace(CREDENTIAL_FIELD, (match, field, value) => isCredentialReference(field, value) ? match : `${field}[REDACTED]`);
+  return redactSnapshotText(masked).text;
+}
 function hydratePromptAndToolBodies(graph, rootDir) {
   for (const artifact of graph.artifacts) {
-    if (!requiresArtifactBody(artifact.type) || artifactHasBody(artifact)) {
-      continue;
+    if (requiresArtifactBody(artifact.type) && !artifactHasBody(artifact)) {
+      const hydrated = hydrateArtifactBody(artifact, rootDir);
+      if (hydrated)
+        artifact.body = hydrated;
     }
-    const hydrated = hydrateArtifactBody(artifact, rootDir);
-    if (hydrated)
-      artifact.body = hydrated;
+    if (typeof artifact.body === "string")
+      artifact.body = redactArtifactBody(artifact.body);
   }
 }
 function countIncompletePromptToolBodies(graph) {
@@ -17319,7 +17391,7 @@ function applyPromptDiscovery(graph, discovery) {
       type: "prompt",
       scope: prior?.scope ?? "shared",
       sourcePath: item.sourcePath,
-      body: item.content,
+      body: redactArtifactBody(item.content),
       contentHash: item.sourceDefinition.sourceHash,
       promptSource: source,
       sourceDefinition: item.sourceDefinition,
@@ -18911,7 +18983,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-ed8ncma3.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-6p1czt5h.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);
@@ -19084,7 +19156,7 @@ async function runHarnessCommand(context) {
     }
     case "extract": {
       writeHumanProgress(context, "Harness extract: tracing model call sites (no LLM, no network)...");
-      const { extractHarness: extractHarness2, serializeExtractResult } = await import("./index-s1agk3km.js");
+      const { extractHarness: extractHarness2, serializeExtractResult } = await import("./index-8pzrw7v9.js");
       const result = extractHarness2(rootDir, { fresh: true });
       writeHumanProgress(context, `Harness extract: ${result.callSites.length} call sites, ${result.roles.length} traced roles across ${result.files} files (${result.programs} programs, ${result.durationMs.toLocaleString()} ms).`);
       context.output.writeData(serializeExtractResult(result), {
@@ -19593,7 +19665,7 @@ function resolveWithInferredKind(rootDir, source) {
 }
 function applyResolvedPromptSource(artifact, source) {
   artifact.promptSource = source.sourceDefinition.source;
-  artifact.body = source.content;
+  artifact.body = redactArtifactBody(source.content);
   artifact.sourceDefinition = source.sourceDefinition;
   artifact.sourcePath = source.sourcePath;
   artifact.contentHash = source.sourceDefinition.sourceHash;
@@ -19989,6 +20061,15 @@ function mergeDeterministicArtifacts(graph, rootDir, options = {}) {
   }
   const extracted = !allowedTypes || allowedTypes.has("model_config") ? extractedModelItems(rootDir) : { artifacts: [], unknowns: [], rewritten: new Set, enabled: false };
   promoted = withExtractedModels(promoted, extracted, rootDir);
+  if (extracted.enabled && isRecord2(graph.scan)) {
+    try {
+      const { literals, truncated } = collectModelLiterals(rootDir);
+      const scan = graph.scan;
+      scan.modelLiterals = literals;
+      if (truncated)
+        scan.modelLiteralsTruncated = true;
+    } catch {}
+  }
   const extractedIds = new Set(extracted.artifacts.map((artifact) => artifact.id));
   backfillRefutationEvidenceReasons(graph);
   const refuted = analystRefutations(graph);
@@ -26321,6 +26402,174 @@ function modelUnknowns(result) {
     };
   });
 }
+var MODEL_LITERAL_FILE = /\.(?:[cm]?[jt]sx?|svelte|vue|py|sql|toml|ya?ml|jsonc?)$/i;
+var MODEL_LITERAL_SHAPE = /^[@A-Za-z0-9][\w.:/@+-]{1,127}$/;
+var MAX_MODEL_LITERALS = 2000;
+var MODEL_LITERAL_EXCLUDED = /(?:^(?:pnpm-lock\.ya?ml|package-lock\.json|npm-shrinkwrap\.json)$|\.d\.[cm]?ts$|\.min\.[cm]?js$)/i;
+var MODEL_LITERAL_DATA_FILE = /\.(?:jsonc?|ya?ml|toml)$/i;
+var MAX_MODEL_LITERAL_BYTES = 4 * 1024 * 1024;
+var C_COMMENTS = { line: ["//"], block: [["/*", "*/"]], triple: false };
+var MARKUP_COMMENTS = { line: ["//"], block: [["/*", "*/"], ["<!--", "-->"]], triple: false };
+var HASH_COMMENTS = { line: ["#"], block: [], triple: true };
+var PYTHON_COMMENTS = { ...HASH_COMMENTS, fstrings: true };
+var SQL_COMMENTS = { line: ["--"], block: [["/*", "*/"]], triple: false };
+function commentSyntax(name) {
+  const ext = name.slice(name.lastIndexOf(".") + 1).toLowerCase();
+  if (ext === "svelte" || ext === "vue")
+    return MARKUP_COMMENTS;
+  if (ext === "py")
+    return PYTHON_COMMENTS;
+  if (ext === "toml" || ext === "yaml" || ext === "yml")
+    return HASH_COMMENTS;
+  if (ext === "sql")
+    return SQL_COMMENTS;
+  return C_COMMENTS;
+}
+function opensFString(text, index) {
+  let start = index;
+  while (start > 0 && index - start < 2 && /[A-Za-z]/.test(text[start - 1]))
+    start -= 1;
+  const prefix = text.slice(start, index).toLowerCase();
+  return (prefix === "f" || prefix === "rf" || prefix === "fr") && (start === 0 || !/\w/.test(text[start - 1]));
+}
+function quotedLiterals(text, syntax) {
+  const out = [];
+  const stack = [{ kind: "code", braces: 0, fexpr: false }];
+  let i = 0;
+  while (i < text.length) {
+    const frame = stack[stack.length - 1];
+    const char = text[i];
+    if (frame.kind === "string") {
+      if (char === "\\") {
+        i += 2;
+        continue;
+      }
+      if (char === frame.quote || char === `
+` && !frame.template) {
+        stack.pop();
+        if (char === frame.quote && !frame.interpolated)
+          out.push(frame.value);
+        i += 1;
+        continue;
+      }
+      if (frame.template && text.startsWith("${", i)) {
+        frame.interpolated = true;
+        stack.push({ kind: "code", braces: 0, fexpr: false });
+        i += 2;
+        continue;
+      }
+      if (frame.fstring && char === "{") {
+        if (text[i + 1] === "{") {
+          frame.value += "{";
+          i += 2;
+          continue;
+        }
+        frame.interpolated = true;
+        stack.push({ kind: "code", braces: 0, fexpr: true });
+        i += 1;
+        continue;
+      }
+      frame.value += char;
+      i += 1;
+      continue;
+    }
+    if (frame.kind === "format") {
+      if (char === "{")
+        stack.push({ kind: "code", braces: 0, fexpr: true });
+      else if (char === "}")
+        stack.pop();
+      i += 1;
+      continue;
+    }
+    if (syntax.triple && (text.startsWith('"""', i) || text.startsWith("'''", i))) {
+      const end = text.indexOf(text.slice(i, i + 3), i + 3);
+      i = end < 0 ? text.length : end + 3;
+      continue;
+    }
+    const lineOpener = frame.fexpr ? undefined : syntax.line.find((opener) => text.startsWith(opener, i));
+    if (lineOpener) {
+      const end = text.indexOf(`
+`, i);
+      i = end < 0 ? text.length : end + 1;
+      continue;
+    }
+    const block = syntax.block.find(([open]) => text.startsWith(open, i));
+    if (block) {
+      const end = text.indexOf(block[1], i + block[0].length);
+      i = end < 0 ? text.length : end + block[1].length;
+      continue;
+    }
+    if (char === '"' || char === "'" || char === "`") {
+      const fstring = Boolean(syntax.fstrings) && char !== "`" && opensFString(text, i);
+      stack.push({ kind: "string", quote: char, template: char === "`", fstring, value: "", interpolated: false });
+    } else if (char === "{" || frame.fexpr && (char === "(" || char === "[")) {
+      frame.braces += 1;
+    } else if (char === "}" || frame.fexpr && (char === ")" || char === "]")) {
+      if (frame.braces > 0)
+        frame.braces -= 1;
+      else if (char === "}" && stack.length > 1)
+        stack.pop();
+    } else if (frame.fexpr && frame.braces === 0 && char === ":" && text[i + 1] !== "=") {
+      stack[stack.length - 1] = { kind: "format" };
+    }
+    i += 1;
+  }
+  return out;
+}
+function collectModelLiterals(rootDir) {
+  const found = new Set;
+  let seen = 0;
+  let capped = false;
+  let skipped = false;
+  const walk = (dir, rel2) => {
+    let entries;
+    try {
+      entries = readdirSync7(dir, { withFileTypes: true }).sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
+    } catch {
+      skipped = true;
+      return;
+    }
+    for (const entry of entries) {
+      if (capped)
+        return;
+      const childRel = rel2 ? `${rel2}/${entry.name}` : entry.name;
+      if (entry.isDirectory()) {
+        if (!entry.name.startsWith(".") && !SCAN_SKIPPED_DIRS.has(entry.name))
+          walk(join12(dir, entry.name), childRel);
+        continue;
+      }
+      if (!entry.isFile() || !MODEL_LITERAL_FILE.test(entry.name) || MODEL_LITERAL_EXCLUDED.test(entry.name) || isTestOnly(childRel))
+        continue;
+      if (seen >= MAX_SCANNED_FILES) {
+        capped = true;
+        return;
+      }
+      seen += 1;
+      const absolute = join12(dir, entry.name);
+      try {
+        if (statSync5(absolute).size > MAX_MODEL_LITERAL_BYTES) {
+          if (!MODEL_LITERAL_DATA_FILE.test(entry.name))
+            skipped = true;
+          continue;
+        }
+        const text = readFileSync14(absolute, "utf8");
+        for (const literal of quotedLiterals(text, commentSyntax(entry.name))) {
+          if (!MODEL_LITERAL_SHAPE.test(literal) || !isModelId(literal) || found.has(literal))
+            continue;
+          if (found.size >= MAX_MODEL_LITERALS) {
+            capped = true;
+            return;
+          }
+          found.add(literal);
+        }
+      } catch {
+        skipped = true;
+      }
+    }
+  };
+  walk(resolve12(rootDir), "");
+  return { literals: [...found].sort(), truncated: capped || skipped };
+}
 
 // src/harness-extract/types.ts
 var EXTRACT_SCHEMA_VERSION = 1;
@@ -26945,4 +27194,4 @@ function assignAgentIds(result, agentForScope) {
   }
 }
 
-export { startRemoteAnalyze, pollRemoteAnalyzeUntilDone, isRecoverableRemoteRun, checkPromptMapping, safePromptEvidencePath, discoverHarnessPromptSources, valueChildren, selectKey, allValues, renderings, CALL_SINKS, registerCallSink, registerClassSink, isModelId, collectModels, modelArtifacts, modelUnknowns, EXTRACT_SCHEMA_VERSION, ENUMERATORS, toolNamesOf, clearExtractCache, extractHarness, extractHarnessWithContext, serializeExtractResult, runEnumerators, assignAgentIds, runHarnessCommand, writeHarnessAnalyzeResult, emitWrittenArtifacts, analyzeHarnessPrompts, isToolGroupPlaceholder, repairExternalAnalystReport, deriveRelationshipsFromGraph, deterministicArtifacts, deterministicGraphItems, mergeDeterministicArtifacts, analystRefutations, describeCodingAgentEvent, analystEventProgress, isRetryableExternalAnalystFailure, sleep, summarizeInvalidAnalystReport, isDeterministicLocalAnalyst, resolveHarnessAnalyzeConcern, resolveExternalHarnessAnalystInvocation, detectAvailableCodingAgents, codingAgentDisplayName, runCodingAgent, readOnlyClaudeExtraArgs, resolveAnalystModel, renderExternalHarnessAnalystPrompt, CONCERN_CANDIDATE_KINDS, SEED_CANDIDATE_KIND_LABELS, renderAnalystCandidateLines, renderAnalystSeedLines, truncateText, scanHarness, summarizeHarness, buildSourceSnapshot, writeHumanProgress, describeSyncIdentity, describeSyncTenantLabel, findFresherHarnessReports, writeHarnessArtifacts, assertHarnessGraphSyncQuality, graphForSync, inventoryFiles, numericEnv, numericEnvAllowZero, computeDeterministicFloor, stableId, titleFromId, promptNameFromPath };
+export { startRemoteAnalyze, pollRemoteAnalyzeUntilDone, isRecoverableRemoteRun, checkPromptMapping, safePromptEvidencePath, discoverHarnessPromptSources, valueChildren, selectKey, allValues, renderings, CALL_SINKS, registerCallSink, registerClassSink, isModelId, collectModels, modelArtifacts, modelUnknowns, collectModelLiterals, EXTRACT_SCHEMA_VERSION, ENUMERATORS, toolNamesOf, clearExtractCache, extractHarness, extractHarnessWithContext, serializeExtractResult, runEnumerators, assignAgentIds, runHarnessCommand, writeHarnessAnalyzeResult, emitWrittenArtifacts, analyzeHarnessPrompts, isToolGroupPlaceholder, repairExternalAnalystReport, deriveRelationshipsFromGraph, deterministicArtifacts, deterministicGraphItems, mergeDeterministicArtifacts, analystRefutations, describeCodingAgentEvent, analystEventProgress, isRetryableExternalAnalystFailure, sleep, summarizeInvalidAnalystReport, isDeterministicLocalAnalyst, resolveHarnessAnalyzeConcern, resolveExternalHarnessAnalystInvocation, detectAvailableCodingAgents, codingAgentDisplayName, runCodingAgent, readOnlyClaudeExtraArgs, resolveAnalystModel, renderExternalHarnessAnalystPrompt, CONCERN_CANDIDATE_KINDS, SEED_CANDIDATE_KIND_LABELS, renderAnalystCandidateLines, renderAnalystSeedLines, truncateText, scanHarness, summarizeHarness, buildSourceSnapshot, writeHumanProgress, describeSyncIdentity, describeSyncTenantLabel, findFresherHarnessReports, writeHarnessArtifacts, assertHarnessGraphSyncQuality, graphForSync, inventoryFiles, numericEnv, numericEnvAllowZero, computeDeterministicFloor, stableId, titleFromId, promptNameFromPath };

package/dist/{cli-y5d33a1y.js → cli-y7dtztan.js}

@@ -4,7 +4,7 @@ import {
 import {
   SECRET_KEYS,
   redactString
-} from "./cli-9a4b1wxz.js";
+} from "./cli-p5grm12t.js";
 import {
   __commonJS,
   __require,

package/dist/{cli-15pzedv3.js → cli-z1t3sf7b.js}

@@ -12,7 +12,7 @@ import {
 } from "./cli-k4tqwah4.js";
 import {
   redactDeep
-} from "./cli-9a4b1wxz.js";
+} from "./cli-p5grm12t.js";
 
 // src/profiles.ts
 import {