@moda-ai/cli 1.55.96 → 1.55.97

package/README.md

@@ -489,3 +489,26 @@ in order; changed old literals cannot qualify through unchanged sibling text.
 Keep call inputs and redirected output outside the repository: they can contain customer content.
 Python, unresolved dynamic dispatch and new files without old context remain unmodelled. This
 local result does not establish deployment attribution or production precision/recall.
+
+### Updating agent installations
+
+The CLI checks npm at most daily. When a newer version is cached, `--json`
+commands also print an update notice on stderr without requiring a terminal,
+including on validation and authentication failures. JSON stdout is unchanged.
+With a writable home, notices are limited to once an hour for each running/latest version pair;
+`--quiet`, `--no-update-check`, `MODA_CLI_UPDATE_CHECK=0`, `DO_NOT_TRACK=1`,
+and CI suppress them. Read-only homes still receive cached guidance without a
+persisted cooldown. Agent envelopes continue to carry `meta.update`.
+
+After updating, run `moda skills install moda-cli` from the project directory.
+It refreshes the installed guide and the init-managed Moda block in `AGENTS.md`,
+replacing legacy `moda fixes` instructions. Text outside that block stays intact;
+locally edited skill files are kept. Malformed or duplicated block markers and
+symlinked `AGENTS.md` files are left unchanged with a warning and recovery steps.
+Repeated installation is idempotent.
+
+Retired `fix`, `fixes`, `prompts ab`, and `prompts propose` calls fail locally
+with migration guidance. Read problem evidence with `moda problems get <id>
+--evidence`, make changes in your project, and use `moda prompts status`,
+`moda prompts diff`, and `moda prompts sync --dry-run` to review prompt versions.
+The retired names stay out of help and the manifest.

package/dist/{cli-f0z97a7t.js → cli-4t3zznhh.js}

@@ -41,7 +41,7 @@ import { execFileSync } from "node:child_process";
 import { createHash } from "node:crypto";
 import {
   existsSync as existsSync2,
-  lstatSync,
+  lstatSync as lstatSync2,
   mkdirSync as mkdirSync2,
   readdirSync,
   readFileSync as readFileSync2,
@@ -50,7 +50,7 @@ import {
 import { basename, dirname as dirname2, join as join2, relative } from "node:path";
 
 // src/agents-md.ts
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { existsSync, lstatSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname, join } from "node:path";
 var AGENTS_MD_FILENAME = "AGENTS.md";
 var FIXES_BLOCK_BEGIN = "<!-- moda:fixes:begin -->";
@@ -119,7 +119,7 @@ function upsertManagedBlock(existing, block) {
   const problem = begins === 1 && ends === 1 ? `its ${FIXES_BLOCK_END} marker comes before its ${FIXES_BLOCK_BEGIN} marker` : `it has ${begins} ${FIXES_BLOCK_BEGIN} and ${ends} ${FIXES_BLOCK_END} marker(s) instead of one of each`;
   return {
     ok: false,
-    reason: `The Moda block in ${AGENTS_MD_FILENAME} was not updated because ${problem}. ` + "The file was left unchanged so no text is lost. Keep exactly one begin marker followed by one end marker " + "(or delete the stray markers), then rerun `moda skills push`."
+    reason: `The Moda block in ${AGENTS_MD_FILENAME} was not updated because ${problem}. ` + "The file was left unchanged so no text is lost. Keep exactly one begin marker followed by one end marker " + "(or delete the stray markers), then rerun `moda skills install moda-cli` (or `moda skills push`)."
   };
 }
 function writeFileIfChanged(filePath, content) {
@@ -141,6 +141,15 @@ function writeFileIfChanged(filePath, content) {
 function upsertFixesAgentsBlock(cwd) {
   const filePath = join(cwd, AGENTS_MD_FILENAME);
   let existing = null;
+  try {
+    if (lstatSync(filePath).isSymbolicLink()) {
+      return { path: AGENTS_MD_FILENAME, status: "skipped", reason: "AGENTS.md is a symlink and was left unchanged. Update the linked file manually, or replace the link with a project file and rerun `moda skills install moda-cli`." };
+    }
+  } catch (err) {
+    if (err.code !== "ENOENT") {
+      return { path: AGENTS_MD_FILENAME, status: "failed", reason: `Could not inspect ${AGENTS_MD_FILENAME}: ${err instanceof Error ? err.message : String(err)}` };
+    }
+  }
   if (existsSync(filePath)) {
     try {
       existing = readFileSync(filePath, "utf8");
@@ -485,7 +494,7 @@ function walkSkillFiles(dir, depth) {
     const fullPath = join2(dir, entry);
     let stat;
     try {
-      stat = lstatSync(fullPath);
+      stat = lstatSync2(fullPath);
     } catch {
       continue;
     }
@@ -899,9 +908,15 @@ async function installModaCliSkill(context) {
   if (result.status === "skipped") {
     throw new CliInputError("No supported coding agent was detected here, so the moda-cli skill was not installed.", "Run this from a project with a .claude or .cursor directory, or with Claude Code on PATH. Only Claude Code and Cursor are supported.");
   }
+  const agentsMd = result.status === "failed" ? undefined : upsertFixesAgentsBlock(context.cwd);
+  const blockWarning = agentsMdProblem(agentsMd);
+  if (blockWarning) {
+    result.warnings.push(blockWarning);
+    result.status = "warning";
+  }
   const summary = summarizeInstall(result);
   if (context.outputMode !== "human") {
-    context.output.writeData({ skill: MODA_CLI_SKILL_ID, status: result.status, agents: result.agents, counts: result.counts, summary, outcomes: result.outcomes, notes: result.notes }, { ...result.status === "failed" ? { status: "error" } : {}, warnings: result.warnings });
+    context.output.writeData({ skill: MODA_CLI_SKILL_ID, status: result.status, agents: result.agents, counts: result.counts, summary, outcomes: result.outcomes, notes: result.notes, agentsMd }, { ...result.status === "failed" ? { status: "error" } : {}, warnings: result.warnings });
   } else {
     console.log(`moda-cli skill for ${result.agents.join(", ")}: ${summary}`);
     for (const note of result.notes)

package/dist/cli.js

@@ -142,7 +142,7 @@ import {
 } from "./cli-0v6na3yp.js";
 
 // src/cli.ts
-import { randomUUID as randomUUID3 } from "node:crypto";
+import { randomUUID as randomUUID4 } from "node:crypto";
 import { z } from "zod";
 
 // src/trace-findings.ts
@@ -314,6 +314,17 @@ function batchNotRunWarning(results) {
   return [`Families not run (detector off or trace not processed yet), so no detections there does not mean clean: ${notRun.join("; ")}.`];
 }
 
+// src/retired-commands.ts
+function retiredCommandError(command, positionals) {
+  const fix = command === "fix" || command === "fixes";
+  const prompt = command === "prompts" && ["ab", "propose"].includes(positionals[0]);
+  if (!fix && !prompt)
+    return;
+  const name = fix ? command : `prompts ${positionals[0]}`;
+  const commands = fix ? ["moda problems", "moda problems get <problem_id> --evidence", "moda skills install moda-cli"] : ["moda prompts status", "moda prompts diff", "moda prompts sync --dry-run", "moda skills install moda-cli"];
+  return new CliInputError(`The 'moda ${name}' command was retired. Nothing was run. ` + (fix ? "Moda supplies production evidence; engineers make changes in their own code, prompts, tools or skills." : "The old automatic prompt proposal and A/B workflow was retired. Review and edit prompt changes in your project."), `Use ${commands.map((value) => `\`${value}\``).join(", ")}. ` + "Refresh the installed guide and the Moda-managed AGENTS.md block with `moda skills install moda-cli`. " + "Review any user-authored instructions that still reference the retired workflow.", "retired_command", { field: "<command>", suggestedCommands: commands });
+}
+
 // src/telemetry.ts
 import { spawn as spawn2 } from "node:child_process";
 
@@ -444,7 +455,7 @@ function appendLines(path, text) {
 function sleepSync(ms) {
   Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, ms);
 }
-function createLockFile(path, staleMs, now) {
+function createLockFile(path, staleMs, now, onError) {
   for (let attempt = 0;attempt < 2; attempt += 1) {
     try {
       const fd = openSync(path, fsConstants.O_WRONLY | fsConstants.O_CREAT | fsConstants.O_EXCL | O_NOFOLLOW, 384);
@@ -455,13 +466,18 @@ function createLockFile(path, staleMs, now) {
       }
       return true;
     } catch (error) {
-      if (error.code !== "EEXIST")
+      if (error.code !== "EEXIST") {
+        onError?.(error);
         return false;
+      }
       try {
         if (now - statSync(path).mtimeMs < staleMs)
           return false;
         unlinkSync(path);
-      } catch {}
+      } catch (error2) {
+        if (error2.code !== "ENOENT")
+          onError?.(error2);
+      }
     }
   }
   return false;
@@ -542,10 +558,10 @@ function flushDue(entries, group, now) {
   }
   return false;
 }
-function acquireFlushLock(dir = telemetrySpoolDir(), now = Date.now()) {
+function acquireFlushLock(dir = telemetrySpoolDir(), now = Date.now(), onError) {
   ensureDir(dir);
   const path = join(dir, LOCK_FILE);
-  return createLockFile(path, FLUSH_LOCK_STALE_MS, now) ? path : undefined;
+  return createLockFile(path, FLUSH_LOCK_STALE_MS, now, onError) ? path : undefined;
 }
 function releaseFlushLock(path) {
   if (!path)
@@ -976,7 +992,8 @@ async function sendCliUsageTelemetry(input) {
 }
 
 // src/update-check.ts
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, writeFileSync } from "node:fs";
+import { mkdirSync as mkdirSync2, readFileSync as readFileSync2, renameSync as renameSync2, rmSync as rmSync2, writeFileSync } from "node:fs";
+import { randomUUID as randomUUID3 } from "node:crypto";
 import { join as join2 } from "node:path";
 var UPDATE_CHECK_FLAG = "no-update-check";
 var CHECK_INTERVAL_MS = 24 * 60 * 60 * 1000;
@@ -1091,12 +1108,59 @@ function getUpdateNotice(options = {}) {
   ].join(`
 `);
 }
-function printUpdateNotice(options = {}) {
-  if (!process.stderr.isTTY)
+function printUpdateNotice(options = {}, mode = {}, now) {
+  if (mode.quiet || !process.stderr.isTTY && mode.outputMode !== "json")
     return;
-  const notice = getUpdateNotice(options);
-  if (notice)
+  let lock;
+  try {
+    const notice = getUpdateNotice(options);
+    if (!notice)
+      return;
+    if (mode.outputMode === "json") {
+      let lockFailed = false;
+      try {
+        lock = acquireFlushLock(join2(getModaDir(options), "update-notice-lock"), now ?? Date.now(), () => {
+          lockFailed = true;
+        });
+      } catch {
+        lockFailed = true;
+      }
+      if (!lock) {
+        if (lockFailed)
+          console.error(notice);
+        return;
+      }
+      const noticeNow = now ?? Date.now();
+      const path = join2(getModaDir(options), "update-notice.json");
+      const version = `${VERSION}:${getAvailableUpdate(options)}`;
+      const notices = {};
+      try {
+        const previous = JSON.parse(readFileSync2(path, "utf8"));
+        if (previous?.notices && typeof previous.notices === "object") {
+          for (const [pair, timestamp] of Object.entries(previous.notices)) {
+            if (typeof timestamp === "number" && Number.isFinite(timestamp) && timestamp <= noticeNow && noticeNow - timestamp < 60 * 60 * 1000)
+              notices[pair] = timestamp;
+          }
+        }
+        if (notices[version] !== undefined)
+          return;
+      } catch {}
+      const temporary = `${path}.${randomUUID3()}.tmp`;
+      try {
+        mkdirSync2(getModaDir(options), { recursive: true });
+        writeFileSync(temporary, JSON.stringify({ notices: { ...notices, [version]: noticeNow } }) + `
+`, { flag: "wx", mode: 384 });
+        renameSync2(temporary, path);
+      } catch {} finally {
+        try {
+          rmSync2(temporary, { force: true });
+        } catch {}
+      }
+    }
     console.error(notice);
+  } catch {} finally {
+    releaseFlushLock(lock);
+  }
 }
 // src/command-tree.ts
 var CANONICAL_LEAVES = [
@@ -3005,13 +3069,13 @@ async function runPromptsCommand(...args) {
   return (await import("./prompts-x3vdeax6.js")).runPromptsCommand(...args);
 }
 async function runSkillsCommand(...args) {
-  return (await import("./skills-1pv2mp9v.js")).runSkillsCommand(...args);
+  return (await import("./skills-9c1xvp2s.js")).runSkillsCommand(...args);
 }
 async function runHarnessCommand(...args) {
   return (await import("./harness-jka07f99.js")).runHarnessCommand(...args);
 }
 async function runSyncCommand(...args) {
-  return (await import("./sync-4zeyb408.js")).runSyncCommand(...args);
+  return (await import("./sync-skzdw9fb.js")).runSyncCommand(...args);
 }
 async function runRegistryCommand(...args) {
   return (await import("./registry-4mhr7xsd.js")).runRegistryCommand(...args);
@@ -6368,7 +6432,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
       }
       const data = await callDataAPI(reviewPath, {
         method: "POST",
-        body: JSON.stringify({ ...reviewBody, request_nonce: randomUUID3() }),
+        body: JSON.stringify({ ...reviewBody, request_nonce: randomUUID4() }),
         headers: { "Content-Type": "application/json" }
       });
       context.output.writeData(data);
@@ -6461,7 +6525,7 @@ async function runCommand(command, positional, flags, positionals = positional ?
         });
         break;
       }
-      const sentBody = request.body && request.nonce ? { ...request.body, request_nonce: randomUUID3() } : request.body;
+      const sentBody = request.body && request.nonce ? { ...request.body, request_nonce: randomUUID4() } : request.body;
       const data = await callDataAPI(request.path, {
         method: request.method,
         ...sentBody ? { body: JSON.stringify(sentBody), headers: { "Content-Type": "application/json" } } : {}
@@ -6796,7 +6860,7 @@ var commandRegistry = createCommandRegistry([
     resetApiRequestCountBeforeRun: true,
     telemetry: "result-and-error",
     handler: async (context) => {
-      const { runInit } = await import("./index-w2hs49tb.js");
+      const { runInit } = await import("./index-wdttmhsg.js");
       if (context.outputMode === "agent-stream") {
         context.output.writeEvent({
           event: "started",
@@ -7945,6 +8009,12 @@ async function dispatchParsedCommand(parsed, startedAt = Date.now()) {
   try {
     return await dispatchParsedCommandInner(parsed, startedAt);
   } finally {
+    if (!isUpdateCheckDisabled(parsed.flags) && parsed.command && !["--version", "-V", "--help", "-h"].includes(parsed.command) && !optOutFlagSet(parsed.flags, "help") && !optOutFlagSet(parsed.flags, "version") && !optOutFlagSet(parsed.flags, "json-schemas")) {
+      printUpdateNotice({}, {
+        outputMode: resolveOutputMode(parsed.flags, { isTTY: process.stdout.isTTY, env: process.env }),
+        quiet: optOutFlagSet(parsed.flags, "quiet")
+      });
+    }
     if (previousProfileEnv === undefined)
       delete process.env.MODA_PROFILE;
     else
@@ -8100,6 +8170,15 @@ async function dispatchParsedCommandInner(typedParsed, startedAt) {
     console.log(`moda-cli ${VERSION}`);
     return 0;
   }
+  const retired = retiredCommandError(command, typedParsed.positionals);
+  if (retired) {
+    const mode = resolveOutputMode(typedFlags, { isTTY: process.stdout.isTTY, env: process.env });
+    if (mode === "agent" || mode === "agent-stream" || mode === "json")
+      printAgentCliError(command, retired, mode);
+    else
+      printCliError(retired);
+    return 1;
+  }
   if (command === "--help" || command === "-h" || flags.help === "true") {
     if (command && printTreeHelp(typedParsed))
       return 0;
@@ -8330,9 +8409,6 @@ async function dispatchParsedCommandInner(typedParsed, startedAt) {
         recorded: context.getTelemetryMeta()
       });
     }
-    if (!updateCheckDisabled) {
-      printUpdateNotice();
-    }
     printFeedbackTip(definition.name, context);
     return finishRun(context, { kind: "completed", exitCode: result.exitCode });
   } catch (thrown) {
@@ -8354,9 +8430,6 @@ async function dispatchParsedCommandInner(typedParsed, startedAt) {
     } else {
       printCliError(error);
     }
-    if (!updateCheckDisabled) {
-      printUpdateNotice();
-    }
     context.output.close();
     return exitCodeForError(error);
   }

package/dist/{index-w2hs49tb.js → index-wdttmhsg.js}

@@ -4,7 +4,7 @@ import {
 import {
   agentsMdProblem,
   runSkillSync
-} from "./cli-f0z97a7t.js";
+} from "./cli-4t3zznhh.js";
 import"./cli-998n4kz9.js";
 import {
   buildDoctorReport

package/dist/{skills-1pv2mp9v.js → skills-9c1xvp2s.js}

@@ -3,7 +3,7 @@ import {
   pullSkills,
   runSkillSync,
   runSkillsCommand
-} from "./cli-f0z97a7t.js";
+} from "./cli-4t3zznhh.js";
 import"./cli-qm5b1vck.js";
 import"./cli-rjav0vj1.js";
 import"./cli-hcwdz9sd.js";

package/dist/{sync-4zeyb408.js → sync-skzdw9fb.js}

@@ -1,6 +1,6 @@
 import {
   runSkillsCommand
-} from "./cli-f0z97a7t.js";
+} from "./cli-4t3zznhh.js";
 import {
   runPromptsCommand
 } from "./cli-92zfpz9f.js";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@moda-ai/cli",
-  "version": "1.55.96",
+  "version": "1.55.97",
   "description": "CLI for Moda: production monitoring and evals for AI agents.",
   "type": "module",
   "bin": {

package/skills/integration/index.json

@@ -1,7 +1,7 @@
 {
   "schema_version": "moda.skill_index.v1",
-  "bundled_at": "2026-10-23T22:44:22.701Z",
-  "cli_version": "1.55.96",
+  "bundled_at": "2026-10-24T02:25:39.492Z",
+  "cli_version": "1.55.97",
   "skills": [
     {
       "id": "integration-cloudflare-think",