@moda-ai/cli 1.55.94 → 1.55.95

package/README.md

@@ -77,6 +77,29 @@ moda harness candidates --path=. --promote=all --out=harness-components.json --y
 
 Every enumerated component includes a source citation and `reachable` or `defined_only` status. Production trace evidence can later promote it to `in_prod`. Dynamic MCP allow-all servers are one group; extraction does not connect to those servers. The repository-bound `createAgentScopeResolver(result, ctx)` callback maps `CallSite.enclosing` to emitted agent IDs, including inherited hooks and shared helpers; ambiguous or unknown scopes return `[]`.
 
+### Component skeleton and diff
+
+```bash
+moda harness skeleton --path=. --out=/tmp/skeleton.json --json
+moda harness skeleton-diff /tmp/before.json /tmp/after.json --json
+moda harness skeleton-diff --from=/tmp/before.json --to=/tmp/after.json --json
+```
+
+`skeleton` produces `harness-skeleton/v1`, a component map of the harness: a `HarnessGraph` (agents, artifacts and relationships in the usual places, so sync and Ask read it unchanged) plus `skeleton.callSites`, counts, commit, content hash, coverage and a control-flow slot. It runs locally without an LLM or network calls and holds locations and owners, never bodies.
+
+- Prompts: a named builder, template or prompt file a model call reaches is one unit, shared by every call that reaches it. Text assembled in the calling function is a `call` unit for that function, with the pieces as `members`. Constants inside a builder are not listed separately.
+- Ids are stable across commits: they hold no line numbers, except the extractor's anonymous `path#L<line>` scopes. Repeated keys get `~2`, `~3` in source order.
+- `liveKey` is the key traces and the traced registry match on, normalised like the backend's trace status: agent class name, model-facing tool name, model id, skill name. Prompts and call sites have none.
+- Map edges live in `skeleton.edges`, a compact table; decode them with `decodeSkeletonEdges(graph.skeleton.edges)` into `{ id: "<type>:<from>-><to>", type, from, to, source, evidence }`. Types: `triggers` (entry point to agent), `invokes_subagent` and `hands_off_to` (agent to agent), `uses_artifact` (agent to prompt, tool or model), `implemented_by` (tool to `code:<path>#<handler>`), `has_control_flow` and `guards` (agent to control-flow item to call site), and `covered_by_eval` (agent or tool to eval suite). `source` is `code` for every extracted edge; consumers merge edges seen in traces as `trace`. `relationships` keeps only the agent-to-agent edges in the usual graph form, so sync and Ask read them unchanged.
+- `skeleton.coverage` says per component type whether detection is `complete` or `partial`, with `skeleton.knownGaps`. Claim completeness only for `complete` types.
+- Entry points: workflows and crons, exported route handlers of route agents (`trigger: "http_route"`) and Durable Object bindings (`trigger: "do_binding"`) of agent classes or of classes that construct one. Each lists the agents it starts in their `entrypointIds` (`triggers` edges); a workflow starts the function agents and sub-agent calls its code reaches.
+- Tools are attributed to agents whose own model calls receive tools. A call that picks its model from a table at runtime has `modelSource: "factory (computed)"` and the table in `modelCandidates`; those candidates are not the call's or the agent's models, and each agent lists such calls in `modelChoices` (call site, location and candidates). A Workers eval suite that drives the deployed Worker covers the agents bound in its default Wrangler config.
+- `covered_by_eval` is a static association (what the suite's own files import, through re-export barrels, and its own model calls), not execution or assertion coverage.
+
+The JSON envelope's `data` is the skeleton; `--out` writes the bare skeleton. Incomplete scans return exit code 3 with warnings. `skeleton-diff` accepts either form, lists added, removed, moved and changed components and edges, ignores line-only shifts, and pairs unique same-name components across file renames as `moved`. Its `identical` flag compares content hashes. `harness extract` output is unchanged.
+
+Library exports (`src/harness-extract/skeleton/index.ts`): `buildHarnessSkeleton(rootDir, options?)`, `skeletonFromExtract(result, ctx)`, `diffHarnessSkeletons(before, after)` and `registerControlFlowDetector(detector)`. A detector receives `{result, ctx, callSites, agents, callSiteIdOf}` and returns control-flow items; items naming unknown call sites or agents are dropped, a throwing detector leaves `controlFlowStatus: "failed"` with a warning, and without a detector the status is `not_run`.
+
 ## Usage
 
 Find things by meaning, then drill in:

package/dist/{agent-pncdccck.js → agent-wa8tx02f.js}

@@ -1,9 +1,10 @@
 import {
   buildDoctorReport
-} from "./cli-gdm94hh4.js";
+} from "./cli-abfcqf4p.js";
 import"./cli-qwnkv4jy.js";
-import"./cli-dk08ywkn.js";
+import"./cli-92zfpz9f.js";
 import"./cli-mm48br00.js";
+import"./cli-764m5azg.js";
 import {
   readHarnessSyncState
 } from "./cli-k0vxtzxb.js";
@@ -15,10 +16,10 @@ import {
   readHarnessReport,
   validateHarnessReport
 } from "./cli-krm4w2v9.js";
-import"./cli-6ga6kmdp.js";
-import"./cli-dxajrq9h.js";
 import"./cli-13zdcv4w.js";
+import"./cli-6ga6kmdp.js";
 import"./cli-e0kbye4s.js";
+import"./cli-dxajrq9h.js";
 import {
   resolveApiKey,
   resolveIngestUrl,
@@ -95,7 +96,7 @@ async function buildAgentContext(context) {
   const graph = readHarnessGraphIfPresent(context.cwd);
   const reportState = readHarnessReportState(context.cwd);
   const syncState = readHarnessSyncState(context.cwd);
-  const harness = graph ? await import("./harness-wnye9acm.js") : undefined;
+  const harness = graph ? await import("./harness-jka07f99.js") : undefined;
   const topFindings = doctor.checks.filter((check) => check.status === "fail" || check.status === "warning").slice(0, 12).map(checkToFinding);
   const evidenceRefs = [
     ...doctor.checks.map(checkToEvidenceRef),

package/dist/{change-impact-2hqk7kj0.js → change-impact-3n23nhd8.js}

@@ -11,16 +11,16 @@ import {
   resolvedSymbol,
   returnExpressions,
   valueDeclaration
-} from "./cli-5c37h7n5.js";
+} from "./cli-1sdz17sn.js";
 import"./cli-k0vxtzxb.js";
 import"./cli-97fnztpy.js";
 import {
   detectBoundRuntimeClasses
 } from "./cli-krm4w2v9.js";
-import"./cli-6ga6kmdp.js";
-import"./cli-dxajrq9h.js";
 import"./cli-13zdcv4w.js";
+import"./cli-6ga6kmdp.js";
 import"./cli-e0kbye4s.js";
+import"./cli-dxajrq9h.js";
 import"./cli-1nd4339b.js";
 import"./cli-k4tqwah4.js";
 import {

package/dist/{cli-5c37h7n5.js → cli-1sdz17sn.js}

@@ -36,6 +36,10 @@ import {
   validateHarnessReport,
   writeHarnessReportArtifacts
 } from "./cli-krm4w2v9.js";
+import {
+  createCommandContext,
+  stringOption
+} from "./cli-13zdcv4w.js";
 import {
   assertFlags,
   assertPositionals,
@@ -45,10 +49,6 @@ import {
   ApiError,
   callControlAPI
 } from "./cli-dxajrq9h.js";
-import {
-  createCommandContext,
-  stringOption
-} from "./cli-13zdcv4w.js";
 import {
   EXIT_DEGRADED,
   embeddedTenantIdFromApiKey,
@@ -19420,8 +19420,19 @@ class PromptResolver {
     this.maxParamLevels = options.maxParamLevels ?? DEFAULT_MAX_PARAM_LEVELS;
     this.keepAll = options.keepAll === true;
     this.views = Object.entries(options.views ?? {}).map(([name, admits]) => ({ name, admits, refs: new Map }));
+    if (options.viewOf) {
+      const byName = new Map(this.views.map((view) => [view.name, view]));
+      const viewOf = options.viewOf;
+      this.viewFor = (site) => {
+        const view = byName.get(viewOf(site) ?? "");
+        return view && view.admits(site) ? [view] : [];
+      };
+    }
   }
+  viewFor;
   refMaps(walk) {
+    if (this.viewFor)
+      return [this.refs, ...this.viewFor(walk.site).map((view) => view.refs)];
     return this.views.length ? [this.refs, ...this.views.filter((view) => view.admits(walk.site)).map((view) => view.refs)] : [this.refs];
   }
   resolveArgument(site, role, node, project = []) {
@@ -20522,7 +20533,16 @@ class PromptResolver {
     }
     return;
   }
+  declarationsByNode = new WeakMap;
   declarationsOf(node) {
+    const cached = this.declarationsByNode.get(node);
+    if (cached)
+      return cached;
+    const declarations = this.lookupDeclarations(node);
+    this.declarationsByNode.set(node, declarations);
+    return declarations;
+  }
+  lookupDeclarations(node) {
     const path = this.relative(node.getSourceFile().fileName);
     const checker = this.context.checkerFor(path);
     if (!checker)
@@ -20989,6 +21009,10 @@ async function runHarnessCommand(context) {
   if (context.dryRun && !HARNESS_DRY_RUN_SUBCOMMANDS.has(subcommand)) {
     throw new CliInputError(`'moda harness ${subcommand}' has no dry-run mode, so nothing was sent.`, `Remove --dry-run to run it for real. Harness commands with a real dry-run: ${[...HARNESS_DRY_RUN_SUBCOMMANDS].join(", ")}.`);
   }
+  if (subcommand === "skeleton" || subcommand === "skeleton-diff") {
+    const { runSkeletonCommand } = await import("./cli-gcqpbes6.js");
+    return runSkeletonCommand(context);
+  }
   if (subcommand === "register")
     return runHarnessRegister(context);
   if (subcommand === "registration")
@@ -20998,7 +21022,7 @@ async function runHarnessCommand(context) {
     assertPositionals("harness impact", context.positionals, 1, "moda harness impact --from=<commit> --to=<commit>");
     if (!context.flags.from)
       throw new CliInputError("harness impact requires --from=<old-commit>.");
-    const { localChangeImpact, readRecordedImpactCalls } = await import("./change-impact-2hqk7kj0.js");
+    const { localChangeImpact, readRecordedImpactCalls } = await import("./change-impact-3n23nhd8.js");
     const result = localChangeImpact({
       checkout: resolve10(context.cwd, context.flags.path ?? "."),
       from: context.flags.from,
@@ -21270,7 +21294,7 @@ async function runHarnessCommand(context) {
         throw new CliInputError("Focused remote prompt analysis is not supported yet.", "Use local --analyst=claude|codex|cursor|local-scan, or drop --concern for a full remote report.");
       }
       if (context.flags["github-actions"] === "true") {
-        const { runGithubActionsAnalyze } = await import("./harness-github-actions-75z9c68t.js");
+        const { runGithubActionsAnalyze } = await import("./harness-github-actions-h9b973z0.js");
         const result = await runGithubActionsAnalyze(rootDir, {
           writeReport: (report2) => {
             const normalized = normalizeHarnessReport(report2);
@@ -21421,8 +21445,8 @@ async function runHarnessCommand(context) {
         }
         const { artifacts, unknowns, canonicalAgentIdentities } = deterministicGraphItems(rootDir, promote === "all" ? undefined : promote);
         tagComponentStatus({ runtimeAgents: [], artifacts }, rootDir);
-        const { extractHarnessWithContext: extractHarnessWithContext2 } = await import("./index-09t1rsf2.js");
-        const { enumerateHarnessComponents, mergeEnumeratedComponents } = await import("./index-61yya1cm.js");
+        const { extractHarnessWithContext: extractHarnessWithContext2 } = await import("./index-0na4ydkc.js");
+        const { enumerateHarnessComponents, mergeEnumeratedComponents } = await import("./index-zp7y6mft.js");
         let components = { runtimeAgents: [], artifacts: [], warnings: [] };
         if (promote === "all" || promote === "topology" || promote === "tools") {
           const { result, ctx } = extractHarnessWithContext2(rootDir);
@@ -21494,8 +21518,8 @@ async function runHarnessCommand(context) {
     }
     case "extract": {
       writeHumanProgress(context, "Harness extract: tracing model call sites (no LLM, no network)...");
-      const { extractHarnessWithContext: extractHarnessWithContext2, serializeExtractResult } = await import("./index-09t1rsf2.js");
-      const { enumerateHarnessComponents, mergeEnumeratedComponents } = await import("./index-61yya1cm.js");
+      const { extractHarnessWithContext: extractHarnessWithContext2, serializeExtractResult } = await import("./index-0na4ydkc.js");
+      const { enumerateHarnessComponents, mergeEnumeratedComponents } = await import("./index-zp7y6mft.js");
       const { result, ctx } = extractHarnessWithContext2(rootDir, { fresh: true });
       const items = deterministicGraphItems(rootDir);
       const artifacts = items.artifacts;
@@ -21629,7 +21653,7 @@ async function runHarnessCommand(context) {
       return { exitCode: 0 };
     }
     default:
-      throw new CliInputError(`Unknown harness command '${subcommand}'.`, "Usage: moda harness analyze|pull|validate-report|approve|scan|candidates|extract|sync|delete|list|show|versions|diff|agents|graph|explain|write-summary|status|register|registration");
+      throw new CliInputError(`Unknown harness command '${subcommand}'.`, "Usage: moda harness analyze|pull|validate-report|approve|scan|candidates|extract|skeleton|skeleton-diff|sync|delete|list|show|versions|diff|agents|graph|explain|write-summary|status|register|registration");
   }
 }
 function writeHarnessAnalyzeResult(context, payload) {
@@ -22402,8 +22426,8 @@ var CONCERN_PROMOTED_ARTIFACT_TYPES = {
   evals: new Set(["model_config", "eval"])
 };
 async function deterministicFloorGraph(rootDir, options = {}) {
-  const { extractHarnessWithContext: extractHarnessWithContext2 } = await import("./index-09t1rsf2.js");
-  const { enumerateHarnessComponents, mergeEnumeratedComponents } = await import("./index-61yya1cm.js");
+  const { extractHarnessWithContext: extractHarnessWithContext2 } = await import("./index-0na4ydkc.js");
+  const { enumerateHarnessComponents, mergeEnumeratedComponents } = await import("./index-zp7y6mft.js");
   const { result, ctx } = extractHarnessWithContext2(rootDir);
   const items = deterministicGraphItems(rootDir);
   const components = mergeEnumeratedComponents(items.artifacts, enumerateHarnessComponents(result, ctx));
@@ -28831,7 +28855,7 @@ function normalizedModels(ctx, roles = []) {
   }
   return { rewritten: out, outputs: served, spans };
 }
-function collectModels(result, ctx) {
+function collectModels(result, ctx, options = {}) {
   const byId = new Map;
   const add = (id, resolution, at, site) => {
     let entry = byId.get(id);
@@ -28955,7 +28979,7 @@ function collectModels(result, ctx) {
       resolution: entry.resolution,
       definition: definitions[0],
       ...definitions.length > 1 ? { otherDefinitions: definitions.slice(1, 8) } : {},
-      calledFrom: sites.slice(0, MAX_CALLED_FROM).map((site) => ({
+      calledFrom: sites.slice(0, options.maxCalledFrom ?? MAX_CALLED_FROM).map((site) => ({
         callSite: site.id,
         path: site.path,
         line: site.line,
@@ -30991,4 +31015,4 @@ function assignAgentIds(result, agentForScope) {
   }
 }
 
-export { relPath, unwrap, calleeChain, enclosingClass, returnExpressions, importOrigin, resolvedSymbol, valueDeclaration, isTestPath, isEvalPath, EXTRACT_SCHEMA_VERSION, valueChildren, selectKey, allValues, renderings, receiverClasses, frameworkBaseOf, createFrameworkMemo, CALL_SINKS, registerCallSink, registerClassSink, checkPromptMapping, safePromptEvidencePath, discoverHarnessPromptSources, isModelId, collectModels, modelArtifacts, modelUnknowns, collectModelLiterals, TEST_PATH2 as TEST_PATH, EVAL_PATH2 as EVAL_PATH, enumerationRepository, nameOf, visit, componentId, artifact, emptyResult, stableResult, toolNamesOf, surfaceOf, emitToolsCached, workspacePackages, toolArtifacts, clearExtractCache, extractHarness, extractHarnessWithContext, extractFingerprint, scopeOf, serializeExtractResult, assignAgentIds, createAgentScopeResolver, enumerateAgents, startRemoteAnalyze, pollRemoteAnalyzeUntilDone, isRecoverableRemoteRun, resolvePromptArguments, runHarnessCommand, writeHarnessAnalyzeResult, emitWrittenArtifacts, analyzeHarnessPrompts, isToolGroupPlaceholder, deterministicOnlyArtifactTypes, repairExternalAnalystReport, deriveRelationshipsFromGraph, deterministicFloorGraph, deterministicArtifacts, deterministicGraphItems, mergeDeterministicArtifacts, analystRefutations, describeCodingAgentEvent, analystEventProgress, isRetryableExternalAnalystFailure, sleep, summarizeInvalidAnalystReport, isDeterministicLocalAnalyst, resolveHarnessAnalyzeConcern, resolveExternalHarnessAnalystInvocation, detectAvailableCodingAgents, codingAgentDisplayName, runCodingAgent, readOnlyClaudeExtraArgs, resolveAnalystModel, renderExternalHarnessAnalystPrompt, CONCERN_CANDIDATE_KINDS, SEED_CANDIDATE_KIND_LABELS, renderAnalystCandidateLines, renderAnalystSeedLines, truncateText, scanHarness, summarizeHarness, buildSourceSnapshot, writeHumanProgress, describeSyncIdentity, describeSyncTenantLabel, findFresherHarnessReports, writeHarnessArtifacts, assertHarnessGraphSyncQuality, graphForSync, inventoryFiles, numericEnv, numericEnvAllowZero, computeDeterministicFloor, stableId, titleFromId, promptNameFromPath };
+export { svelteVirtualName, relPath, lineOf, unwrap, propertyNameText, calleeChain, isFunctionLike, enclosingFunction, functionName, enclosingClass, returnExpressions, importOrigin, resolvedSymbol, valueDeclaration, isTestPath, isEvalPath, EXTRACT_SCHEMA_VERSION, valueChildren, selectKey, allValues, renderings, receiverClasses, frameworkBaseOf, createFrameworkMemo, CALL_SINKS, registerCallSink, registerClassSink, evalFileSignal, evalSuiteKey, checkPromptMapping, safePromptEvidencePath, discoverHarnessPromptSources, isModelId, collectModels, modelArtifacts, modelUnknowns, collectModelLiterals, parse, TEST_PATH2 as TEST_PATH, EVAL_PATH2 as EVAL_PATH, enumerationRepository, nameOf, visit, componentId, artifact, emptyResult, stableResult, toolNamesOf, surfaceOf, emitToolsCached, workspacePackages, toolArtifacts, clearExtractCache, extractHarness, extractHarnessWithContext, extractFingerprint, scopeOf, serializeExtractResult, assignAgentIds, createAgentScopeResolver, enumerateAgents, startRemoteAnalyze, pollRemoteAnalyzeUntilDone, isRecoverableRemoteRun, resolvePromptArguments, runHarnessCommand, writeHarnessAnalyzeResult, emitWrittenArtifacts, analyzeHarnessPrompts, isToolGroupPlaceholder, deterministicOnlyArtifactTypes, repairExternalAnalystReport, deriveRelationshipsFromGraph, deterministicFloorGraph, deterministicArtifacts, deterministicGraphItems, mergeDeterministicArtifacts, analystRefutations, describeCodingAgentEvent, analystEventProgress, isRetryableExternalAnalystFailure, sleep, summarizeInvalidAnalystReport, isDeterministicLocalAnalyst, resolveHarnessAnalyzeConcern, resolveExternalHarnessAnalystInvocation, detectAvailableCodingAgents, codingAgentDisplayName, runCodingAgent, readOnlyClaudeExtraArgs, resolveAnalystModel, renderExternalHarnessAnalystPrompt, CONCERN_CANDIDATE_KINDS, SEED_CANDIDATE_KIND_LABELS, renderAnalystCandidateLines, renderAnalystSeedLines, truncateText, scanHarness, summarizeHarness, buildSourceSnapshot, writeHumanProgress, describeSyncIdentity, describeSyncTenantLabel, findFresherHarnessReports, writeHarnessArtifacts, assertHarnessGraphSyncQuality, graphForSync, inventoryFiles, numericEnv, numericEnvAllowZero, computeDeterministicFloor, stableId, titleFromId, promptNameFromPath };