@moda-ai/cli 1.55.9 → 1.55.10

package/dist/{cli-mx9r1689.js → cli-0qnghzg4.js}

@@ -1935,4 +1935,4 @@ function createCommandContext(input, options = {}) {
   };
 }
 
-export { PROD_BASE_URL, DEFAULT_INGEST_URL, getModaPaths, getModaDir, isLoopbackBaseUrl, assertValidProfileName, describeBaseUrlSource, loadProfileConfig, saveProfileConfig, getActiveProfile, setActiveProfile, upsertProfile, clearStoredApiKeyCredentials, secretFilePathFromRef, resolveSecretReference, resolveApiKeyFromActiveProfile, resolveTenantIdFromActiveProfile, ensureSecretFilePermissions, writeSecretJsonFile, CliInputError, CliAccessError, CliInputRequiredError, CliAuthError, CliCancellationError, isNetworkLikeError, isApiLikeError, VERSION, MODA_BASE_URL, loadCliConfig, saveCliConfig, resolveApiKey, embeddedTenantIdFromApiKey, resolveIngestUrl2 as resolveIngestUrl, resolveTenantId, resolveApiTenantId, resolveModaBaseUrl, validateConfig, recordApiRequest, getApiRequestCount, resetApiRequestCount, MAX_SCANNED_FILE_BYTES, DEFAULT_MAX_INVENTORY_FILES, DEFAULT_MAX_INVENTORY_TEXT_BYTES, MAX_RECORDED_SKIPS, SKIPPED_DIRS, isSkippedDir, isSkippedPathPrefix, isEvalLikePath, shouldInventoryFile, isTextFile, isSecretishPath, SECRET_KEYS, redactDeep, redactString, packSnapshot, EXIT_OK, EXIT_ERROR, EXIT_DEGRADED, EXIT_AUTH_REQUIRED, EXIT_INPUT_REQUIRED, EXIT_CANCELLED, AGENT_ERROR_CODES, wasOutputCancelled, safeWriteStdout, safeWriteStderr, explicitOutputMode, resolveOutputMode, createCliOutput, agentEnvelopeFits, agentMaxOutputBytes, parseBooleanFlagValue, stringOption, createCommandContext };
+export { PROD_BASE_URL, DEFAULT_INGEST_URL, getModaPaths, getModaDir, isLoopbackBaseUrl, describeBaseUrlSource, loadProfileConfig, saveProfileConfig, getActiveProfile, setActiveProfile, upsertProfile, clearStoredApiKeyCredentials, secretFilePathFromRef, resolveSecretReference, resolveApiKeyFromActiveProfile, resolveTenantIdFromActiveProfile, ensureSecretFilePermissions, writeSecretJsonFile, CliInputError, CliAccessError, CliInputRequiredError, CliAuthError, CliCancellationError, isNetworkLikeError, isApiLikeError, VERSION, MODA_BASE_URL, loadCliConfig, saveCliConfig, resolveApiKey, embeddedTenantIdFromApiKey, resolveIngestUrl2 as resolveIngestUrl, resolveTenantId, resolveApiTenantId, resolveModaBaseUrl, validateConfig, recordApiRequest, getApiRequestCount, resetApiRequestCount, MAX_SCANNED_FILE_BYTES, DEFAULT_MAX_INVENTORY_FILES, DEFAULT_MAX_INVENTORY_TEXT_BYTES, MAX_RECORDED_SKIPS, SKIPPED_DIRS, isSkippedDir, isSkippedPathPrefix, isEvalLikePath, shouldInventoryFile, isTextFile, isSecretishPath, SECRET_KEYS, redactDeep, redactString, packSnapshot, EXIT_OK, EXIT_ERROR, EXIT_DEGRADED, EXIT_AUTH_REQUIRED, EXIT_INPUT_REQUIRED, EXIT_CANCELLED, AGENT_ERROR_CODES, wasOutputCancelled, safeWriteStdout, safeWriteStderr, explicitOutputMode, resolveOutputMode, createCliOutput, agentEnvelopeFits, agentMaxOutputBytes, parseBooleanFlagValue, stringOption, createCommandContext };

package/dist/{cli-tw8jj190.js → cli-4f0p8erk.js}

@@ -8,7 +8,7 @@ import {
   saveProfileConfig,
   secretFilePathFromRef,
   writeSecretJsonFile
-} from "./cli-mx9r1689.js";
+} from "./cli-0qnghzg4.js";
 import {
   __require
 } from "./cli-0v6na3yp.js";

package/dist/{cli-fhfdnvh4.js → cli-7s48d6ty.js}

@@ -1,7 +1,7 @@
 import {
   authFetch,
   getCachedLoginContext
-} from "./cli-tw8jj190.js";
+} from "./cli-4f0p8erk.js";
 import {
   CliAccessError,
   CliInputError,
@@ -16,7 +16,7 @@ import {
   resolveTenantIdFromActiveProfile,
   saveCliConfig,
   writeSecretJsonFile
-} from "./cli-mx9r1689.js";
+} from "./cli-0qnghzg4.js";
 
 // src/init/tenant.ts
 import { randomUUID } from "node:crypto";

package/dist/{cli-sjc132j8.js → cli-d3c95kks.js}

@@ -21,7 +21,7 @@ import {
   safePromptEvidencePath,
   scanHarness,
   setPlatformTenantOverride
-} from "./cli-4af3thx7.js";
+} from "./cli-v27q5dvh.js";
 import {
   SKILL_SOURCE_HARNESS,
   SKILL_SOURCE_INTEGRATION_BUNDLED,
@@ -34,7 +34,7 @@ import {
 import {
   isAuthSessionValid,
   loadAuthSession
-} from "./cli-tw8jj190.js";
+} from "./cli-4f0p8erk.js";
 import {
   CliInputError,
   EXIT_ERROR,
@@ -54,7 +54,7 @@ import {
   resolveTenantId,
   secretFilePathFromRef,
   validateConfig
-} from "./cli-mx9r1689.js";
+} from "./cli-0qnghzg4.js";
 import {
   __commonJS,
   __require,
@@ -6752,7 +6752,7 @@ async function runPromptSyncExclusive(flags, profileOptions, options) {
   const analyzedDefinitions = new Map;
   if (flags["no-analyze"] !== "true") {
     options.onProgress?.("Analyzing prompt sources before sync.");
-    const { analyzeHarnessPrompts } = await import("./harness-yshh2pgj.js");
+    const { analyzeHarnessPrompts } = await import("./harness-0tnqw849.js");
     const result = await analyzeHarnessPrompts({
       rootDir: process.cwd(),
       existing: established.flatMap((prompt) => prompt.sourceDefinition ? [prompt.sourceDefinition.source] : []),
@@ -7082,7 +7082,7 @@ async function migratePromptManifest(options = {}) {
   let addedSources = [];
   let pendingSources = [];
   if (options.discover) {
-    const { analyzeHarnessPrompts } = await import("./harness-yshh2pgj.js");
+    const { analyzeHarnessPrompts } = await import("./harness-0tnqw849.js");
     const result = await analyzeHarnessPrompts({
       rootDir: root,
       existing: manifest.sources,
@@ -8444,7 +8444,7 @@ async function runSkillRegistryCommand(sub, positionals, flags, context) {
 
 // src/doctor.ts
 import { createHash as createHash3 } from "node:crypto";
-import { existsSync as existsSync5, readFileSync as readFileSync4, statSync as statSync2 } from "node:fs";
+import { existsSync as existsSync5, readFileSync as readFileSync4 } from "node:fs";
 import { join as join4 } from "node:path";
 async function runDoctorCommand(context) {
   const report = await buildDoctorReport(context, {
@@ -8483,7 +8483,7 @@ async function runStatusCommand(context) {
     harness: checkStatus(report.checks, "harness_manifest_current"),
     harnessSync: checkStatus(report.checks, "harness_sync_state_present"),
     harnessReport: "skipped",
-    shadowSpark: checkStatus(report.checks, "shadow_spark_workspace_health"),
+    shadowSpark: "skipped",
     prompts: checkStatus(report.checks, "prompts_discovered"),
     skills: checkStatus(report.checks, "skills_discovered"),
     topBrokenCheck: topBroken ? {
@@ -9102,7 +9102,7 @@ function recentDataFlowCheck(overview) {
       { label: "last_event_at", value: lastEventAt ?? "none" }
     ],
     remediation: hasData ? undefined : "No recent Moda data was visible in the overview window.",
-    nextCommand: hasData ? undefined : "moda hooks install --agent=all"
+    nextCommand: hasData ? undefined : "moda init"
   };
 }
 function numberAt(value, path) {

package/dist/{cli-4af3thx7.js → cli-v27q5dvh.js}

@@ -27,7 +27,7 @@ import {
   resolveTenantId,
   shouldInventoryFile,
   stringOption
-} from "./cli-mx9r1689.js";
+} from "./cli-0qnghzg4.js";
 import {
   __commonJS,
   __require,
@@ -193387,12 +193387,12 @@ function assertHarnessGraphSyncSize(graph) {
 // ../../packages/messaging/messaging.json
 var messaging_default = {
   $schema: "./messaging.schema.json",
-  version: "1.0.2",
+  version: "1.0.3",
   locked_on: "2026-10-14",
   approved_by: "mo",
-  source: "Branding project docs/positioning.md v1.0.2",
+  source: "Branding project docs/positioning.md v1.0.3",
   canonical_strings: {
-    version: "1.0.2",
+    version: "1.0.3",
     locked_on: "2026-10-14",
     approved_by: "mo",
     strings: [
@@ -193419,7 +193419,7 @@ var messaging_default = {
         text: "Production monitoring and evals for AI agents.",
         match: "contains_ci",
         surfaces: [
-          "apps/moda-frontend/components/landing/hero.tsx (eyebrow above the H1)",
+          "apps/moda-frontend/app/llms.txt/route.ts (after the tagline)",
           "every bio, package description and directory listing below"
         ]
       },
@@ -193598,7 +193598,7 @@ var messaging_default = {
     ]
   },
   banned_phrases: {
-    version: "1.0.2",
+    version: "1.0.3",
     phrases: [
       {
         id: "fixes_your_agent",
@@ -193775,7 +193775,7 @@ var messaging_default = {
     ]
   },
   terminology: {
-    version: "1.0.2",
+    version: "1.0.3",
     terms: [
       {
         use: "trace",
@@ -194777,7 +194777,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-73a08nct.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-wpkr7jjr.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);

package/dist/cli.js

@@ -8,7 +8,7 @@ import {
   runPromptsCommand,
   runSkillsCommand,
   runStatusCommand
-} from "./cli-sjc132j8.js";
+} from "./cli-d3c95kks.js";
 import"./cli-mm48br00.js";
 import {
   ApiError,
@@ -39,7 +39,7 @@ import {
   terminalStyles,
   unknownSignalsSubcommandError,
   validateHarnessReport
-} from "./cli-4af3thx7.js";
+} from "./cli-v27q5dvh.js";
 import"./cli-ssfq84k5.js";
 import {
   authFetch,
@@ -48,7 +48,7 @@ import {
   loadAuthSession,
   login,
   revokeCliSessionToken
-} from "./cli-tw8jj190.js";
+} from "./cli-4f0p8erk.js";
 import {
   AGENT_ERROR_CODES,
   CliAccessError,
@@ -68,7 +68,6 @@ import {
   VERSION,
   agentEnvelopeFits,
   agentMaxOutputBytes,
-  assertValidProfileName,
   clearStoredApiKeyCredentials,
   createCliOutput,
   createCommandContext,
@@ -101,9 +100,8 @@ import {
   setActiveProfile,
   upsertProfile,
   validateConfig,
-  wasOutputCancelled,
-  writeSecretJsonFile
-} from "./cli-mx9r1689.js";
+  wasOutputCancelled
+} from "./cli-0qnghzg4.js";
 import {
   __require
 } from "./cli-0v6na3yp.js";
@@ -4946,124 +4944,6 @@ async function probeApiKey(key, options = {}) {
   return { outcome: "live" };
 }
 
-// src/keys.ts
-import { createHash as createHash2 } from "node:crypto";
-import { existsSync as existsSync3, readFileSync as readFileSync4 } from "node:fs";
-import { join as join3 } from "node:path";
-function keySecretRef(profile, keyId) {
-  assertValidProfileName(profile);
-  assertSafeKeyId(keyId);
-  return `file:secrets/api-keys/${profile}/${keyId}.json`;
-}
-function createLocalKeyDescriptor(input) {
-  assertValidProfileName(input.profile);
-  const now = input.now ?? new Date;
-  const id = stableKeyId(input.profile, input.name, now);
-  return {
-    id,
-    profile: input.profile,
-    name: input.name,
-    purpose: input.purpose ?? "data_api",
-    environment: input.environment,
-    tenant_id: input.tenant_id,
-    workspace_id: input.workspace_id,
-    secret_ref: input.secret_ref ?? keySecretRef(input.profile, id),
-    status: "active",
-    created_at: now.toISOString()
-  };
-}
-function validateKeyDescriptor(descriptor) {
-  assertValidProfileName(descriptor.profile);
-  assertSafeKeyId(descriptor.id);
-  if (!descriptor.name.trim()) {
-    throw new Error("Key name is required.");
-  }
-  if (descriptor.status !== "active" && descriptor.status !== "rotating" && descriptor.status !== "revoked") {
-    throw new Error(`Invalid key status '${descriptor.status}'.`);
-  }
-  if (descriptor.purpose !== "data_api" && descriptor.purpose !== "ingest" && descriptor.purpose !== "automation") {
-    throw new Error(`Invalid key purpose '${descriptor.purpose}'.`);
-  }
-  if (descriptor.environment !== "local" && descriptor.environment !== "dev" && descriptor.environment !== "staging" && descriptor.environment !== "prod") {
-    throw new Error(`Invalid key environment '${descriptor.environment}'.`);
-  }
-  if (!descriptor.secret_ref.startsWith("file:")) {
-    throw new Error("Local key descriptors must point to a file: secret ref.");
-  }
-}
-function writeLocalApiKeySecret(descriptor, apiKey, options = {}) {
-  validateKeyDescriptor(descriptor);
-  if (!apiKey.trim()) {
-    throw new Error("API key value is required.");
-  }
-  const path = secretFilePathFromRef(descriptor.secret_ref, options);
-  if (!path) {
-    throw new Error(`Unsupported key secret reference: ${descriptor.secret_ref}`);
-  }
-  writeSecretJsonFile(path, {
-    value: apiKey,
-    key_id: descriptor.id,
-    profile: descriptor.profile,
-    purpose: descriptor.purpose,
-    created_at: descriptor.created_at
-  });
-  return path;
-}
-function keyDescriptorStorePath(options = {}) {
-  return join3(getModaPaths(options).dir, "keys.json");
-}
-function loadLocalKeyDescriptors(options = {}) {
-  const path = keyDescriptorStorePath(options);
-  try {
-    if (!existsSync3(path))
-      return [];
-    const parsed = JSON.parse(readFileSync4(path, "utf8"));
-    if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
-      return [];
-    }
-    const keys = parsed.keys;
-    if (!Array.isArray(keys))
-      return [];
-    return keys.filter((key) => {
-      try {
-        validateKeyDescriptor(key);
-        return true;
-      } catch {
-        return false;
-      }
-    });
-  } catch {
-    return [];
-  }
-}
-function saveLocalKeyDescriptors(keys, options = {}) {
-  for (const key of keys)
-    validateKeyDescriptor(key);
-  writeSecretJsonFile(keyDescriptorStorePath(options), {
-    version: 1,
-    keys
-  });
-}
-function upsertLocalKeyDescriptor(descriptor, options = {}) {
-  validateKeyDescriptor(descriptor);
-  const keys = loadLocalKeyDescriptors(options);
-  const next = [
-    ...keys.filter((key) => key.id !== descriptor.id),
-    descriptor
-  ].sort((a, b) => a.created_at.localeCompare(b.created_at));
-  saveLocalKeyDescriptors(next, options);
-  return next;
-}
-function stableKeyId(profile, name, now) {
-  const hash = createHash2("sha256").update(`${profile}\x00${name}\x00${now.toISOString()}`).digest("hex").slice(0, 12);
-  return `key_${hash}`;
-}
-function assertSafeKeyId(keyId) {
-  if (!/^[A-Za-z0-9][A-Za-z0-9._-]{0,127}$/.test(keyId)) {
-    throw new Error(`Invalid key id '${keyId}'. Use letters, numbers, dots, dashes, or underscores.`);
-  }
-}
-
 // src/profile-commands.ts
 var ONLINE_PROBE_TIMEOUT_MS = 5000;
 function subcommand(context) {
@@ -5459,62 +5339,14 @@ async function runConfigCommand(context) {
   });
   return { exitCode: 0 };
 }
-var KEYS_LOCAL_ONLY_NOTE = "moda keys manages local key descriptors in ~/.moda only; it does not list or change your tenant's server-side API keys (see Settings → Ingestion keys in the dashboard).";
-async function runKeysCommand(context) {
-  switch (subcommand(context)) {
-    case "list": {
-      const profile = context.profile ?? (context.env.MODA_PROFILE?.trim() || undefined) ?? loadProfileConfig({ env: context.env }).active_profile;
-      const keys = loadLocalKeyDescriptors({ env: context.env }).filter((key) => !profile || key.profile === profile);
-      context.output.writeData({
-        scope: "local_descriptors",
-        profile,
-        keys
-      }, {
-        warnings: [KEYS_LOCAL_ONLY_NOTE]
-      });
-      return { exitCode: 0 };
-    }
-    case "create": {
-      const active = getActiveProfile({ profile: context.profile, env: context.env });
-      const name = flag(context, "name") ?? `${active.name}-${Date.now()}`;
-      const descriptor = createLocalKeyDescriptor({
-        profile: active.name,
-        environment: active.environment,
-        name,
-        purpose: "data_api",
-        tenant_id: active.tenant_id,
-        workspace_id: active.workspace_id
-      });
-      const value = flag(context, "value");
-      const secretPath = value ? writeLocalApiKeySecret(descriptor, value, { env: context.env }) : undefined;
-      upsertLocalKeyDescriptor(descriptor, { env: context.env });
-      context.output.writeData({
-        key: descriptor,
-        secret_path: secretPath,
-        scope: "local_descriptors"
-      }, {
-        warnings: [KEYS_LOCAL_ONLY_NOTE]
-      });
-      return { exitCode: 0 };
-    }
-    case "rotate":
-    case "revoke": {
-      const action = subcommand(context);
-      const keyId = requirePositional(context, 1, `Usage: moda keys ${action} <key_id>`);
-      throw new CliInputError(`moda keys ${action} is not supported: the CLI cannot ${action} server-side API keys (${keyId} was not changed).`, "Manage API keys in the dashboard at Settings → Ingestion keys.");
-    }
-    default:
-      throw unknownSubcommandError("keys", subcommand(context), ["list", "create", "rotate", "revoke"]);
-  }
-}
 
 // src/agent.ts
-import { existsSync as existsSync4, readFileSync as readFileSync5, statSync as statSync2 } from "node:fs";
-import { join as join4, relative as relative2, resolve as resolve3 } from "node:path";
+import { existsSync as existsSync3, readFileSync as readFileSync4, statSync as statSync2 } from "node:fs";
+import { join as join3, relative as relative2, resolve as resolve3 } from "node:path";
 var MODA_DIR = ".moda";
-var HARNESS_PATH = join4(MODA_DIR, "harness.json");
-var HARNESS_REPORT_MARKDOWN_PATH = join4(MODA_DIR, "HARNESS_REPORT.md");
-var HARNESS_SUMMARY_PATH = join4(MODA_DIR, "HARNESS.md");
+var HARNESS_PATH = join3(MODA_DIR, "harness.json");
+var HARNESS_REPORT_MARKDOWN_PATH = join3(MODA_DIR, "HARNESS_REPORT.md");
+var HARNESS_SUMMARY_PATH = join3(MODA_DIR, "HARNESS.md");
 async function runAgentCommand(context) {
   const subcommand2 = context.positionals[0] ?? "context";
   switch (subcommand2) {
@@ -5558,22 +5390,6 @@ async function runAgentCommand(context) {
       });
       return { exitCode: 0 };
     }
-    case "ask": {
-      const loaded = await buildAgentContext(context);
-      const question = context.positionals.slice(1).join(" ").trim() || context.flags.question;
-      context.output.writeData({
-        schemaVersion: "agent_ask.v0.1",
-        generatedAt: loaded.payload.generatedAt,
-        question: question || null,
-        answer: "Moda CLI can provide local harness context today. Cloud intelligence for free-form production questions belongs to the future Moda Ask layer.",
-        recommendedActions: loaded.payload.recommendedActions,
-        nextCommands: loaded.payload.nextCommands,
-        evidenceRefs: loaded.payload.evidenceRefs
-      }, agentWriteOptions(loaded, {
-        summary: "Returned local Moda context and next commands for the requested agent question."
-      }));
-      return { exitCode: 0 };
-    }
     default:
       throw new CliInputError(`Unknown agent subcommand '${subcommand2}'`, "Usage: moda agent context|next-action|evidence (for production issues use moda investigate)");
   }
@@ -5618,7 +5434,7 @@ async function buildAgentContext(context) {
       },
       report: reportState.state,
       sync: syncState ? {
-        path: join4(MODA_DIR, "sync-state.json"),
+        path: join3(MODA_DIR, "sync-state.json"),
         exists: true,
         source: syncState.source,
         updatedAt: syncState.updatedAt,
@@ -5626,7 +5442,7 @@ async function buildAgentContext(context) {
         remoteHarnessId: syncState.remote.harnessId,
         remoteVersionId: syncState.remote.versionId
       } : {
-        path: join4(MODA_DIR, "sync-state.json"),
+        path: join3(MODA_DIR, "sync-state.json"),
         exists: false
       }
     },
@@ -5676,18 +5492,18 @@ function summarizeAgentContext(payload, noun) {
   return `Local Moda ${noun} is healthy with ${agents} runtime agent(s).`;
 }
 function readHarnessGraphIfPresent(cwd) {
-  const path = join4(cwd, HARNESS_PATH);
-  if (!existsSync4(path))
+  const path = join3(cwd, HARNESS_PATH);
+  if (!existsSync3(path))
     return;
   try {
-    return JSON.parse(readFileSync5(path, "utf8"));
+    return JSON.parse(readFileSync4(path, "utf8"));
   } catch {
     return;
   }
 }
 function readHarnessReportState(cwd) {
-  const path = join4(cwd, HARNESS_REPORT_PATH);
-  if (!existsSync4(path)) {
+  const path = join3(cwd, HARNESS_REPORT_PATH);
+  if (!existsSync3(path)) {
     return {
       state: {
         path: HARNESS_REPORT_PATH,
@@ -5731,11 +5547,11 @@ function readHarnessReportState(cwd) {
   }
 }
 function readApproval(cwd) {
-  const path = join4(cwd, HARNESS_REPORT_APPROVAL_PATH);
-  if (!existsSync4(path))
+  const path = join3(cwd, HARNESS_REPORT_APPROVAL_PATH);
+  if (!existsSync3(path))
     return;
   try {
-    return JSON.parse(readFileSync5(path, "utf8"));
+    return JSON.parse(readFileSync4(path, "utf8"));
   } catch {
     return;
   }
@@ -5811,9 +5627,9 @@ function existingArtifacts(cwd) {
     [HARNESS_REPORT_PATH, "harness_report", "Cited harness analyst report."],
     [HARNESS_REPORT_MARKDOWN_PATH, "harness_report_markdown", "Human-readable harness analyst report."],
     [HARNESS_SUMMARY_PATH, "harness_summary", "Human-readable harness graph summary."],
-    [join4(MODA_DIR, "sync-state.json"), "sync_state", "Last local harness sync state."],
-    [join4(MODA_DIR, "prompts.yml"), "prompt_manifest", "Local prompt discovery manifest."]
-  ].flatMap(([path, kind, description]) => existsSync4(join4(cwd, path)) ? [{ path, kind, description }] : []);
+    [join3(MODA_DIR, "sync-state.json"), "sync_state", "Last local harness sync state."],
+    [join3(MODA_DIR, "prompts.yml"), "prompt_manifest", "Local prompt discovery manifest."]
+  ].flatMap(([path, kind, description]) => existsSync3(join3(cwd, path)) ? [{ path, kind, description }] : []);
 }
 function expandEvidenceRef(ref, loaded, cwd) {
   if (ref.startsWith("doctor:")) {
@@ -5894,9 +5710,9 @@ function readCitationExcerpt(cwd, citation) {
   if (!citation.path || citation.type !== "file" && citation.type !== "generated_doc")
     return citation.excerpt;
   const absolute = safeResolve(cwd, citation.path);
-  if (!absolute || !existsSync4(absolute))
+  if (!absolute || !existsSync3(absolute))
     return citation.excerpt;
-  const text = readFileSync5(absolute, "utf8");
+  const text = readFileSync4(absolute, "utf8");
   if (citation.line && citation.line > 0) {
     return text.split(/\r?\n/)[citation.line - 1] ?? citation.excerpt;
   }
@@ -5907,13 +5723,13 @@ function readModaArtifact(cwd, artifactPath) {
     throw new CliInputError(`Artifact '${artifactPath}' is outside .moda and cannot be expanded directly.`, "Use a citation evidence ref for source-file evidence.");
   }
   const absolute = safeResolve(cwd, artifactPath);
-  if (!absolute || !existsSync4(absolute))
+  if (!absolute || !existsSync3(absolute))
     throw missingEvidence(`artifact:${artifactPath}`);
   const size = statSync2(absolute).size;
   return {
     path: artifactPath,
     bytes: size,
-    text: readFileSync5(absolute, "utf8")
+    text: readFileSync4(absolute, "utf8")
   };
 }
 function safeResolve(cwd, path) {
@@ -5951,8 +5767,8 @@ function purposeForCommand(command) {
 }
 
 // src/production-intelligence.ts
-import { existsSync as existsSync5, readFileSync as readFileSync6 } from "node:fs";
-import { join as join5 } from "node:path";
+import { existsSync as existsSync4, readFileSync as readFileSync5 } from "node:fs";
+import { join as join4 } from "node:path";
 
 // src/ask-stream.ts
 class AskStreamError extends Error {
@@ -7465,12 +7281,12 @@ function loadHarnessHints(cwd) {
     skillPaths: new Map,
     entrypointPaths: []
   };
-  const harnessPath = join5(cwd, ".moda", "harness.json");
-  if (!existsSync5(harnessPath))
+  const harnessPath = join4(cwd, ".moda", "harness.json");
+  if (!existsSync4(harnessPath))
     return hints;
   hints.reportPath = ".moda/harness.json";
   try {
-    const parsed = JSON.parse(readFileSync6(harnessPath, "utf8"));
+    const parsed = JSON.parse(readFileSync5(harnessPath, "utf8"));
     const graph = asRecord(parsed);
     const artifacts = Array.isArray(graph?.artifacts) ? graph.artifacts : [];
     for (const item of artifacts) {
@@ -7498,11 +7314,11 @@ function loadHarnessHints(cwd) {
   return hints;
 }
 function localHarnessSummary(cwd) {
-  const path = join5(cwd, ".moda", "harness.json");
-  if (!existsSync5(path))
+  const path = join4(cwd, ".moda", "harness.json");
+  if (!existsSync4(path))
     return null;
   try {
-    const parsed = JSON.parse(readFileSync6(path, "utf8"));
+    const parsed = JSON.parse(readFileSync5(path, "utf8"));
     return {
       harnessId: parsed.harnessId,
       graphHash: parsed.graphHash,
@@ -7513,16 +7329,16 @@ function localHarnessSummary(cwd) {
   }
 }
 function localSyncBrief(cwd, relativePath, label) {
-  const path = join5(cwd, relativePath);
-  if (!existsSync5(path)) {
+  const path = join4(cwd, relativePath);
+  if (!existsSync4(path)) {
     return { status: "missing", summary: `${label} state not found`, path: relativePath };
   }
   return { status: "present", summary: `${label} state exists locally`, path: relativePath };
 }
 function localSkillBrief(cwd) {
-  const claudeSkill = join5(cwd, ".claude", "skills");
-  const cursorRules = join5(cwd, ".cursor", "rules");
-  if (existsSync5(claudeSkill) || existsSync5(cursorRules)) {
+  const claudeSkill = join4(cwd, ".claude", "skills");
+  const cursorRules = join4(cwd, ".cursor", "rules");
+  if (existsSync4(claudeSkill) || existsSync4(cursorRules)) {
     return { status: "present", summary: "Local agent skill/rule directory exists" };
   }
   return { status: "missing", summary: "No local agent skill/rule directory found" };
@@ -7960,7 +7776,6 @@ var RAW_BOOLEAN_FLAGS = new Set([
   "no-clustering",
   "no-analyze",
   "improve-candidates",
-  "hook-stdin",
   "auto-generate",
   "allow-no-agents",
   "allow-any-model",
@@ -8099,8 +7914,6 @@ Commands:
   profiles use <name>              Switch active Moda profile
   profiles create <name>           Create or update a local Moda profile
   profiles doctor [name]           Validate a local Moda profile
-  keys list                        List local key descriptors (not server-side API keys)
-  keys create                      Create a local key descriptor
   config show                      Show resolved Moda config
   harness analyze                  Produce a cited structured harness report
   harness pull                     Fetch a server-side analyze run (status, or result when done)
@@ -9245,7 +9058,7 @@ function normalizeBooleanFlags(target) {
   }
   return error;
 }
-var PROFILE_MANAGING_COMMANDS = new Set(["profiles", "auth", "init", "provision", "status", "config", "keys", "manifest", "agent", "doctor"]);
+var PROFILE_MANAGING_COMMANDS = new Set(["profiles", "auth", "init", "provision", "status", "config", "manifest", "agent", "doctor"]);
 async function runProblemsRemainder(flags, context) {
   const params = parseCommandFlags(ProblemsRemainderSchema, flagsToArgs(flags), "problems remainder");
   const query2 = new URLSearchParams;
@@ -10492,8 +10305,6 @@ function initArtifactKind(file) {
     return "prompt_manifest";
   if (file.includes("workflow"))
     return "ci_workflow";
-  if (file.startsWith("~/"))
-    return "agent_hook_config";
   return "init_artifact";
 }
 var dataApiDefaults = {
@@ -10516,7 +10327,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result",
     handler: async (context) => {
-      const { runInit } = await import("./index-f3k9jgrt.js");
+      const { runInit } = await import("./index-jqexf7kn.js");
       if (context.outputMode === "agent-stream") {
         context.output.writeEvent({
           event: "started",
@@ -10557,7 +10368,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result-and-error",
     handler: async (context) => {
-      const { runProvision } = await import("./provision-parsn3xg.js");
+      const { runProvision } = await import("./provision-5pkn25hh.js");
       return runProvision(context, {
         resumeCommand: buildResumeCommand("provision", context.rawFlags)
       });
@@ -10731,18 +10542,6 @@ var commandRegistry = createCommandRegistry([
     telemetry: "none",
     handler: runConfigCommand
   },
-  {
-    name: "keys",
-    description: "Local key descriptors in ~/.moda only (not your server-side API keys; manage those in the dashboard)",
-    examples: ["moda keys list", "moda keys create --name=local-dev"],
-    auth: "none",
-    outputModes: ["human", "json", "agent"],
-    mutability: "write",
-    validateConfigBeforeRun: false,
-    resetApiRequestCountBeforeRun: false,
-    telemetry: "none",
-    handler: runKeysCommand
-  },
   {
     name: "harness",
     description: "Analyze, validate, approve, sync, delete, and explain the local multi-agent harness graph; register it for Replay Environments",

package/dist/{harness-yshh2pgj.js → harness-0tnqw849.js}

@@ -42,8 +42,8 @@ import {
   writeHarnessAnalyzeResult,
   writeHarnessArtifacts,
   writeHumanProgress
-} from "./cli-4af3thx7.js";
-import"./cli-mx9r1689.js";
+} from "./cli-v27q5dvh.js";
+import"./cli-0qnghzg4.js";
 import"./cli-0v6na3yp.js";
 export {
   writeHumanProgress,

package/dist/{harness-github-actions-73a08nct.js → harness-github-actions-wpkr7jjr.js}

@@ -1,9 +1,9 @@
 import {
   buildSourceSnapshot
-} from "./cli-4af3thx7.js";
+} from "./cli-v27q5dvh.js";
 import {
   recordApiRequest
-} from "./cli-mx9r1689.js";
+} from "./cli-0qnghzg4.js";
 import"./cli-0v6na3yp.js";
 
 // src/harness-github-actions.ts

package/dist/{index-f3k9jgrt.js → index-jqexf7kn.js}

@@ -3,7 +3,7 @@ import {
   initPrompts,
   runPromptSync,
   runSkillSync
-} from "./cli-sjc132j8.js";
+} from "./cli-d3c95kks.js";
 import"./cli-mm48br00.js";
 import {
   canonicalText,
@@ -24,7 +24,7 @@ import {
   runHarnessCommand,
   startRemoteAnalyze,
   stripAnsi
-} from "./cli-4af3thx7.js";
+} from "./cli-v27q5dvh.js";
 import {
   bundledSkillsDir,
   installIntegrationSkill,
@@ -36,14 +36,14 @@ import {
 } from "./cli-ssfq84k5.js";
 import {
   selectTenantAndCreateKey
-} from "./cli-fhfdnvh4.js";
+} from "./cli-7s48d6ty.js";
 import {
   ConnectCodeError,
   connectWithCode,
   loadAuthSession,
   loadToken,
   login
-} from "./cli-tw8jj190.js";
+} from "./cli-4f0p8erk.js";
 import {
   CliAuthError,
   CliInputError,
@@ -52,7 +52,7 @@ import {
   recordApiRequest,
   resolveIngestUrl,
   resolveModaBaseUrl
-} from "./cli-mx9r1689.js";
+} from "./cli-0qnghzg4.js";
 import"./cli-0v6na3yp.js";
 
 // src/init/index.ts
@@ -1751,7 +1751,6 @@ async function runInit(flags, options = {}) {
   let setupPlan = [];
   const renderPlan = () => {
     setupPlan = buildSetupPlan({
-      installHooks: false,
       integrateSdk,
       configureCiCd,
       configureAutosync,
@@ -1861,7 +1860,7 @@ async function runInit(flags, options = {}) {
     board ??= new InitProgressBoard;
     return board;
   };
-  const validationFailure = () => new CliInputError("Moda Analyst produced a harness report that did not pass validation.", "Review .moda/harness-report-validation.json, then rerun `moda init --local --analyst=claude|cursor|codex` or `moda harness analyze --analyst=local-scan --summary`.");
+  const validationFailure = () => new CliInputError("Moda Analyst produced a harness report that did not pass validation.", "Review .moda/harness-report-validation.json, then rerun `moda init --local --analyst=claude|cursor|codex` or `moda harness analyze --analyst=local-scan --summary --experimental`.");
   let harnessPhase = { id: "harness", title: "Harness discovery", status: "completed" };
   let harnessDeferred = false;
   let harnessSkipped = false;
@@ -1891,7 +1890,7 @@ async function runInit(flags, options = {}) {
     } : undefined;
     if (signals && harnessLooksIncomplete(signals)) {
       const names = [...signals.frameworks, ...signals.providers].join(", ");
-      const retryCommand = remote ? "moda harness analyze --remote --summary --experimental" : "moda harness analyze --analyst=claude|cursor|codex --summary";
+      const retryCommand = remote ? "moda harness analyze --remote --summary --experimental" : "moda harness analyze --analyst=claude|cursor|codex --summary --experimental";
       warn(renderInitNote(`Harness discovery found 0 runtime agents, but this repo has LLM framework signals (${names}). ` + "Discovery likely failed, so the result was NOT approved or synced.", "warning"));
       warn(`  Retry with \`${retryCommand}\`, then \`moda harness approve --yes && moda harness sync --from-report\`.`);
       emit("harness", "Harness discovery found 0 agents despite LLM framework signals; sync withheld.", "warning");
@@ -2012,7 +2011,6 @@ Harness analysis keeps running on Moda. Resume anytime with \`${HARNESS_PULL_REC
   }
   emit("apply", "Applying approved setup changes.");
   const laneBoard = startBoard();
-  const ingestCodingAgentTraces = false;
   const agents = detectAgents();
   laneBoard?.startLane("agent-skills", "Agent skills");
   if (agents.length > 0) {
@@ -2093,7 +2091,6 @@ Harness analysis keeps running on Moda. Resume anytime with \`${HARNESS_PULL_REC
   } else {
     markApplied(setupPlan, "sdk", "User skipped SDK integration.");
   }
-  markApplied(setupPlan, "hooks", ingestCodingAgentTraces ? undefined : "Coding-agent trace capture is temporarily unavailable.");
   markApplied(setupPlan, "prompts");
   markApplied(setupPlan, "skills");
   if (remote && pollPromise && remoteRunId) {
@@ -2214,16 +2211,7 @@ function buildSetupPlan(options) {
         ".moda/harness.json",
         ".moda/HARNESS.md"
       ],
-      command: options.remote ? "moda harness analyze --remote --summary && moda harness approve --yes && moda harness sync --from-report" : "moda harness analyze --analyst=auto --summary && moda harness approve --yes && moda harness sync --from-report"
-    },
-    {
-      category: "hooks",
-      title: "Install coding-agent trace hooks",
-      status: options.installHooks ? "planned" : "skipped",
-      approved: options.installHooks,
-      files: ["~/.claude/settings.json", "~/.codex/hooks.json", "~/.cursor/hooks.json"],
-      command: "moda hooks install --agent=all",
-      reason: options.installHooks ? undefined : "Coding-agent trace capture is temporarily unavailable."
+      command: options.remote ? "moda harness analyze --remote --summary --experimental && moda harness approve --yes && moda harness sync --from-report" : "moda harness analyze --analyst=auto --summary --experimental && moda harness approve --yes && moda harness sync --from-report"
     },
     {
       category: "prompts",
@@ -2274,7 +2262,7 @@ function buildSetupPlan(options) {
       status: options.configureHarnessRescan ? "planned" : "manual",
       approved: options.configureHarnessRescan,
       files: [".github/workflows/moda-harness-rescan.yml"],
-      command: "moda harness analyze --remote --yes && moda harness approve --yes && moda harness sync --from-report",
+      command: "moda harness analyze --remote --yes --experimental && moda harness approve --yes && moda harness sync --from-report",
       reason: options.configureHarnessRescan ? undefined : "No harness rescan workflow is written until it is explicitly approved (--harness-rescan)."
     },
     {

package/dist/prompt-source-mcp.js

@@ -5,8 +5,8 @@ import {
   inspectCodeSelectors,
   inspectPythonSelectors,
   safePromptEvidencePath
-} from "./cli-4af3thx7.js";
-import"./cli-mx9r1689.js";
+} from "./cli-v27q5dvh.js";
+import"./cli-0qnghzg4.js";
 import {
   __commonJS,
   __toESM
@@ -9258,7 +9258,7 @@ class StdioServerTransport {
 }
 
 // src/prompt-analyst-tools.ts
-import { relative, resolve } from "node:path";
+import { resolve } from "node:path";
 function safeRoot(rootDir) {
   const root = resolve(rootDir);
   return root;

package/dist/{provision-parsn3xg.js → provision-5pkn25hh.js}

@@ -1,15 +1,15 @@
 import {
   selectTenantAndCreateKey
-} from "./cli-fhfdnvh4.js";
+} from "./cli-7s48d6ty.js";
 import {
   loadAuthSession
-} from "./cli-tw8jj190.js";
+} from "./cli-4f0p8erk.js";
 import {
   CliAuthError,
   resolveIngestUrl,
   resolveModaBaseUrl,
   stringOption
-} from "./cli-mx9r1689.js";
+} from "./cli-0qnghzg4.js";
 import"./cli-0v6na3yp.js";
 
 // src/provision.ts

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moda-ai/cli",
-  "version": "1.55.9",
+  "version": "1.55.10",
   "description": "CLI for Moda: production monitoring and evals for AI agents.",
   "type": "module",
   "bin": {
@@ -19,7 +19,6 @@
     "dist/**/*.js",
     "dist/**/*.d.ts",
     "!dist/__tests__",
-    "hooks/**",
     "skills/**",
     "README.md"
   ],

package/skills/integration/index.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "moda.skill_index.v1",
-  "bundled_at": "2026-10-15T02:17:23.557Z",
-  "cli_version": "1.55.9",
+  "bundled_at": "2026-10-15T04:43:16.280Z",
+  "cli_version": "1.55.10",
   "skills": [
     {
       "id": "integration-cloudflare-think",

package/skills/moda-cli/SKILL.md

@@ -1291,8 +1291,8 @@ moda feedback "trace is a refund request, not this problem" \
   you saw.
 - Feedback does not change the problem itself. To act on a misroute directly,
   use `moda problem-feedback <problem_id> --action=flag_attribution
-  --attribution-id=<uuid> --reason=TEXT`, `moda false-positive <kind> <target>
-  --reason=TEXT`, or `moda fix dismiss <fix_id> --reason=TEXT`.
+  --attribution-id=<uuid> --reason=TEXT` or `moda false-positive <kind> <target>
+  --reason=TEXT`.
 - Never include secrets or full transcripts in the note.
 
 ## Validation — how to know it worked

package/hooks/moda-snapshot.sh

@@ -1,41 +0,0 @@
-#!/usr/bin/env bash
-# Moda shadow workspace hook for coding agents.
-# Triggered by Claude Code, Codex, and Cursor lifecycle/tool matchers.
-#
-# Claude Code passes hook context as a JSON object on stdin (per the Claude
-# Code hooks reference): session_id, tool_use_id, prompt, hook_event_name,
-# etc. We forward that stdin straight through to `moda workspace snapshot
-# --hook-stdin`, which parses it server-side so the CLI sees the same
-# correlation keys (session_id, tool_use_id, prompt_sha) the ingest worker
-# will later join on. The previous version read $CLAUDE_SESSION_ID and
-# $CLAUDE_PROMPT_HASH env vars, but Claude never sets those — so session_id
-# and prompt-level joins were unrecoverable. Reading stdin fixes that.
-#
-# Runs `moda workspace snapshot` in the background so the hook never blocks
-# Claude; redirects all output to /dev/null so user-visible output stays
-# clean; always exits 0 so a transient failure can't break the user session.
-
-set +e
-case "${1:-}" in
-  claude|claude_code|codex|cursor)
-    PROVIDER="$1"
-    EVENT="${2:-UserPromptSubmit}"
-    ;;
-  *)
-    PROVIDER="claude_code"
-    EVENT="${1:-UserPromptSubmit}"
-    ;;
-esac
-MODA_SNAPSHOT_BIN="${MODA_BIN:-moda}"
-
-# Buffer the hook JSON once so the background subshell sees it after this
-# script's stdin is closed by Claude.
-PAYLOAD="$(cat)"
-
-(
-  printf '%s' "$PAYLOAD" \
-    | "$MODA_SNAPSHOT_BIN" workspace snapshot --provider "$PROVIDER" --event "$EVENT" --json --hook-stdin \
-    > /dev/null 2>&1
-) &
-
-exit 0