atris 3.57.4 → 3.58.5

package/commands/push.js

@@ -491,7 +491,7 @@ async function pushAtris() {
   // Push the whole business workspace by default. Brain-only sync must be
   // explicit with --only atris/ so root workspace files cannot be missed.
 
-  // Resolve business — always refresh from API
+  // Resolve business, always refresh from API
   let businessId, workspaceId, businessName, resolvedSlug;
   const businesses = loadBusinesses();
   const listResult = await apiRequestJson('/business/', { method: 'GET', token: creds.token });
@@ -516,7 +516,7 @@ async function pushAtris() {
 
   if (!workspaceId) { console.error(`Business "${slug}" has no workspace.`); process.exit(1); }
 
-  // Telemetry helper — emits one event with the elapsed wall-clock time.
+  // Telemetry helper, emits one event with the elapsed wall-clock time.
   // Awaited (not fire-and-forget) because process.exit kills in-flight requests.
   const emit = (outcome, extras = {}) =>
     emitSyncEvent(creds.token, businessId, workspaceId, 'push', outcome, elapsedMs(), extras);
@@ -590,12 +590,12 @@ async function pushAtris() {
   console.log(`Pushing to ${businessName}...`);
 
   // ───────────────────────────────────────────────────────────────────
-  // FRESHNESS CHECK — pull-before-push enforcement.
+  // FRESHNESS CHECK, pull-before-push enforcement.
   // ───────────────────────────────────────────────────────────────────
   // Compare cloud's current state to our local manifest. If cloud has any
   // file the manifest doesn't know about, OR a file with a different hash
   // than what we last pulled, the user is out of date and MUST pull first.
-  // This prevents stale local state from clobbering fresh cloud changes —
+  // This prevents stale local state from clobbering fresh cloud changes, 
   // the "lagging version push" footgun. Use --force to bypass (e.g., for
   // genuine local-canonical pushes like align --hard).
   if (!force) {
@@ -624,7 +624,7 @@ async function pushAtris() {
       // files on the next push, undoing the deletion.
       //
       // CAVEAT: the warm runner's snapshot endpoint deliberately hides certain
-      // basenames (CLAUDE.md, .* dotfiles, node_modules, __pycache__, .git) —
+      // basenames (CLAUDE.md, .* dotfiles, node_modules, __pycache__, .git), 
       // see ecs_warm_runner.py _snapshot_dir. They CAN exist on cloud but
       // never appear in cloudHashes. Skip them in the missing-side check or
       // every CLAUDE.md push will be flagged as drift forever.
@@ -646,7 +646,7 @@ async function pushAtris() {
       }
       console.log('fresh');
     } else {
-      // Snapshot fetch failed — fail closed. The whole point of the freshness
+      // Snapshot fetch failed, fail closed. The whole point of the freshness
       // check is to prevent accidental stale pushes; if we can't verify cloud
       // state, we don't push. Use --force to bypass when you know what you're
       // doing (e.g., the workspace is genuinely unhealthy and you have a clean
@@ -661,7 +661,7 @@ async function pushAtris() {
     }
   }
 
-  // Compare local hashes to manifest — NO server call needed
+  // Compare local hashes to manifest, NO server call needed
   // Files where local hash differs from manifest = changed locally
   if (parsed.changed && Array.isArray(onlyPrefixes) && onlyPrefixes.length === 0 && (!parsed.pathArgs || parsed.pathArgs.length === 0) && !parsed.onlyRaw) {
     console.log('\n  Already up to date.\n');
@@ -699,7 +699,7 @@ async function pushAtris() {
     process.exit(1);
   }
 
-  // Dry run — show what would be pushed without pushing
+  // Dry run, show what would be pushed without pushing
   if (dryRun) {
     console.log('');
     for (const f of filesToPush) {
@@ -765,7 +765,7 @@ async function pushAtris() {
   // The /sync endpoint can silently drop files (role-based filters on the
   // business workspace route, path-rejection inside the warm runner, etc.)
   // and still return HTTP 200. If we don't cross-check per-file results,
-  // the CLI prints "Pushed" for files that never actually landed — and
+  // the CLI prints "Pushed" for files that never actually landed, and
   // the manifest records a hash that makes the next push skip them too,
   // losing them permanently. `failedToLand` collects those casualties so
   // we can warn the user AND keep them out of the manifest update.
@@ -818,7 +818,7 @@ async function pushAtris() {
         }
       }
     } else {
-      // No results array in response — old server. Best-effort: assume
+      // No results array in response, old server. Best-effort: assume
       // everything sent landed. This preserves existing behavior when
       // talking to a server that doesn't return per-file status.
       for (const f of sentFiles) {
@@ -835,7 +835,7 @@ async function pushAtris() {
   };
 
   if (filesToPush.length > 0) {
-    // Push files to server (strip leading slash — server requires workspace-relative paths)
+    // Push files to server (strip leading slash, server requires workspace-relative paths)
     const uploadBatches = buildPushUploadBatches(filesToPush);
     for (const batch of uploadBatches) {
       result = await syncFiles(batch);
@@ -848,7 +848,7 @@ async function pushAtris() {
             await emit('access_denied', { error_detail: detail });
             process.exit(1);
           }
-          // Permission denied — retry with only team/ and journal/ files
+          // Permission denied, retry with only team/ and journal/ files
           const allowed = filesToPush.filter(f => f.path.startsWith('/team/') || f.path.startsWith('/journal/'));
           skipped = filesToPush.filter(f => !f.path.startsWith('/team/') && !f.path.startsWith('/journal/'));
 
@@ -901,7 +901,7 @@ async function pushAtris() {
     }
   }
 
-  // Delete loop — throttled, 429-aware, tracks per-file success/failure.
+  // Delete loop, throttled, 429-aware, tracks per-file success/failure.
   // Earlier bug: bulk deletes hit rate limit (60/min default) at request 60,
   // then process.exit'd, leaving partial state and a manifest that thought
   // everything was deleted. New behavior:
@@ -924,7 +924,7 @@ async function pushAtris() {
       { method: 'DELETE', token: creds.token }
     );
     if (deleteResult.status === 429) {
-      // Rate limit — wait 20s, retry once
+      // Rate limit, wait 20s, retry once
       _rateLimitedDeletes++;
       await new Promise((r) => setTimeout(r, 20000));
       deleteResult = await apiRequestJson(
@@ -950,7 +950,7 @@ async function pushAtris() {
     if (deleteFailed.length > 10) console.log(`    ... +${deleteFailed.length - 10} more`);
   }
 
-  // Display results — only for files the server confirmed as landed.
+  // Display results, only for files the server confirmed as landed.
   // A non-technical user seeing "+ atris/ideas/foo.md new file" naturally
   // assumes foo.md is on cloud. So we only print that line when the server
   // actually confirmed it via per-file status. Anything else goes into the
@@ -965,12 +965,12 @@ async function pushAtris() {
   for (const f of skipped) {
     console.log(`  - ${f.path.replace(/^\//, '')}  skipped (no permission)`);
   }
-  // Only print confirmed deletes (not failed ones — they were reported above)
+  // Only print confirmed deletes (not failed ones, they were reported above)
   for (const filePath of deletedConfirmed) {
     console.log(`  x ${filePath.replace(/^\//, '')}  deleted`);
   }
 
-  // Loud failure block — files the server silently dropped or rejected.
+  // Loud failure block, files the server silently dropped or rejected.
   // These did NOT land on cloud even though the HTTP call returned 200.
   if (failedToLand.length > 0) {
     console.log('');
@@ -978,7 +978,7 @@ async function pushAtris() {
     console.log(`     dropped or rejected these files):`);
     const shown = failedToLand.slice(0, 15);
     for (const f of shown) {
-      const detail = f.error ? ` — ${f.error}` : ` (${f.status})`;
+      const detail = f.error ? `, ${f.error}` : ` (${f.status})`;
       console.log(`    ✗ ${f.path.replace(/^\//, '')}${detail}`);
     }
     if (failedToLand.length > shown.length) {
@@ -1000,13 +1000,13 @@ async function pushAtris() {
   if (skipped.length > 0) parts.push(`${skipped.length} skipped`);
   console.log(`  ${parts.join(', ')}.`);
 
-  // Update manifest — mark pushed files with their new hash, drop ONLY confirmed deletes.
+  // Update manifest, mark pushed files with their new hash, drop ONLY confirmed deletes.
   // Failed deletes stay in the manifest so the next push will retry them.
   //
   // CRITICAL: only record manifest entries for files the server confirmed as
   // landed (landedPaths). If we recorded the local hash for a file that the
   // server silently dropped, the next push would compare local==manifest and
-  // skip it — the file would never land. Keeping it OUT of the manifest means
+  // skip it, the file would never land. Keeping it OUT of the manifest means
   // the next push sees it as new/changed and retries automatically.
   const updatedFiles = { ...baseFiles };
   for (const f of filesToPush) {
@@ -1019,7 +1019,7 @@ async function pushAtris() {
   }
   saveManifest(resolvedSlug || slug, buildManifest(updatedFiles, null, { workspaceRoot: sourceDir }));
 
-  // Telemetry — outcome reflects actual run quality, not just exit-code-zero.
+  // Telemetry, outcome reflects actual run quality, not just exit-code-zero.
   // Partial delete failures or rate-limit retries mean the run was NOT a clean win;
   // labeling them success would poison the RL signal.
   const bytesChanged = filesToPush.reduce((acc, f) => acc + (f.content ? Buffer.byteLength(f.content, 'utf8') : 0), 0);

package/commands/rainmaker.js

@@ -1,7 +1,7 @@
 'use strict';
 
 /**
- * atris rainmaker — passthrough to atrisos-backend/scripts/rainmaker.py
+ * atris rainmaker, passthrough to atrisos-backend/scripts/rainmaker.py
  *
  *   atris rainmaker              # ASCII status dashboard
  *   atris rainmaker instinct     # one morning opinion

package/commands/recap.js

@@ -160,14 +160,14 @@ function buildRecapData(root = process.cwd(), { days = DEFAULT_DAYS } = {}) {
 function renderRecap(data) {
   if (data.empty) {
     return [
-      `RECAP — ${data.workspace}`,
+      `RECAP: ${data.workspace}`,
       '',
       'No task history yet.',
       'Run "atris init", then let Atris do one small job. Finished work will show up here with the checks that passed.',
     ].join('\n');
   }
   const lines = [];
-  lines.push(`RECAP — ${data.workspace} — last ${data.days} day${data.days === 1 ? '' : 's'}`);
+  lines.push(`RECAP: ${data.workspace}, last ${data.days} day${data.days === 1 ? '' : 's'}`);
   lines.push('');
   lines.push('Plain English: what changed, how it was checked, and what still needs you.');
   const headline = [];
@@ -179,7 +179,7 @@ function renderRecap(data) {
 
   if (data.shipped.length) {
     lines.push('');
-    lines.push(`DONE — ${data.shipped.length}`);
+    lines.push(`DONE: ${data.shipped.length}`);
     for (const t of data.shipped.slice(0, 12)) {
       lines.push(`  ${t.id}  ${shortTitle(t.title)}`);
       const check = plainCheck(t.proof);
@@ -190,7 +190,7 @@ function renderRecap(data) {
 
   if (data.waiting.length) {
     lines.push('');
-    lines.push(`NEEDS YOU — ${data.waiting.length}`);
+    lines.push(`NEEDS YOU: ${data.waiting.length}`);
     for (const t of data.waiting.slice(0, 10)) {
       lines.push(`  ${t.id}  ${shortTitle(t.title)}`);
       const check = plainCheck(t.proof);
@@ -202,7 +202,7 @@ function renderRecap(data) {
 
   if (data.checking.length) {
     lines.push('');
-    lines.push(`STILL BEING CHECKED — ${data.checking.length}`);
+    lines.push(`STILL BEING CHECKED: ${data.checking.length}`);
     for (const t of data.checking.slice(0, 10)) {
       lines.push(`  ${t.id}  ${shortTitle(t.title)}`);
     }
@@ -211,7 +211,7 @@ function renderRecap(data) {
 
   if (data.inProgress.length) {
     lines.push('');
-    lines.push(`STILL WORKING — ${data.inProgress.length}`);
+    lines.push(`STILL WORKING: ${data.inProgress.length}`);
     for (const t of data.inProgress) {
       lines.push(`  ${t.id}  ${shortTitle(t.title)}${t.owner ? `  @${t.owner}` : ''}`);
     }
@@ -224,7 +224,7 @@ function renderRecap(data) {
 }
 
 function renderShare(data) {
-  if (data.empty) return `Nothing to share yet on ${data.workspace} — no finished tasks on record.`;
+  if (data.empty) return `Nothing to share yet on ${data.workspace}, no finished tasks on record.`;
   const lines = [];
   lines.push(`What got done on ${data.workspace} in the last ${data.days} day${data.days === 1 ? '' : 's'}:`);
   lines.push('');

package/commands/reel.js

@@ -1,4 +1,4 @@
-// atris reel — one line of text into a short, on-brand video (an animated card).
+// atris reel, one line of text into a short, on-brand video (an animated card).
 //
 //   atris reel "Ship faster" --theme brand --size square
 //   atris reel "It just works." --kind quote --by "a founder" --seconds 3
@@ -72,7 +72,7 @@ async function renderFrames(chrome, ts, spec, dir, w, h, onDone) {
 async function run(argv) {
   const { flags, pos } = parseFlags(argv);
   if (pos[0] === 'help' || flags.help) {
-    console.log(`\n  atris reel — one line of text into a short on-brand video\n
+    console.log(`\n  atris reel, one line of text into a short on-brand video\n
   atris reel "Your headline" [--kind statement|quote|stat] [--theme <name>] [--size square|og|wide|story] [--seconds 2.6]
   flags: --sub --kicker --by --number --label --brand --version --out <file.mp4>\n`);
     return 0;

package/commands/release.js

@@ -48,7 +48,7 @@ async function releaseAtris({ dryRun = false } = {}) {
   // 3. Build changelog
   const changelog = commitLines.map(l => `- ${l}`).join('\n');
 
-  // 4. Determine bump type — minor if any scorecard has reward >= 5, else patch
+  // 4. Determine bump type: minor if any scorecard has reward >= 5, else patch
   const bumpType = determineBumpType(cwd);
   console.log(`bump type: ${bumpType}`);
 
@@ -104,7 +104,7 @@ async function releaseAtris({ dryRun = false } = {}) {
     execFileSync('git', ['push', '--tags'], { cwd });
     console.log('pushed');
   } catch (err) {
-    console.log('push failed — you may need to push manually');
+    console.log('push failed, you may need to push manually');
   }
 
   // 11. Create GitHub release via gh
@@ -115,7 +115,7 @@ async function releaseAtris({ dryRun = false } = {}) {
     ], { cwd });
     console.log(`github release created: v${nextVersion}`);
   } catch (err) {
-    console.log('gh release create failed — install gh or create release manually');
+    console.log('gh release create failed, install gh or create release manually');
   }
 
   // 12. Draft launch post

package/commands/report.js

@@ -39,7 +39,7 @@ function timestampMs(value) {
 }
 
 function inlineText(value, fallback = 'untitled') {
-  const text = String(value || '').replace(/[—–]/g, '-').replace(/\s+/g, ' ').trim();
+  const text = String(value || '').replace(/[\u2014\u2013]/g, '-').replace(/\s+/g, ' ').trim();
   return text || fallback;
 }
 

package/commands/review.js

@@ -1,10 +1,10 @@
 /**
- * Atris Review — Run code review with specialist agents
+ * Atris Review: run code review with specialist agents
  *
- *   atris review                   — Review staged changes
- *   atris review <file>            — Review a specific file
- *   atris review --diff HEAD~1     — Review last commit
- *   atris review --all             — Audit all Python services
+ *   atris review                   : review staged changes
+ *   atris review <file>            : review a specific file
+ *   atris review --diff HEAD~1     : review last commit
+ *   atris review --all             : audit all Python services
  */
 
 const fs = require('fs');

package/commands/revisions.js

@@ -11,7 +11,7 @@ function plural(count, word) {
 
 function plainSubject(subject) {
   return String(subject || 'untitled landing')
-    .replace(/—/g, ',')
+    .replace(/\u2014/g, ',')
     .replace(/\s+/g, ' ')
     .trim()
     .toLowerCase();

package/commands/run.js

@@ -381,7 +381,7 @@ async function runAtris(options = {}) {
     process.exit(1);
   }
 
-  // Check configured runner CLI is available. Dry runs preview context only —
+  // Check configured runner CLI is available. Dry runs preview context only,
   // they must work on machines (and CI) without the runner installed.
   if (!dryRun) {
     try {

package/commands/scout.js

@@ -1,4 +1,4 @@
-// atris scout — dispatch cheap Haiku subagents for search/context questions.
+// atris scout: dispatch cheap Haiku subagents for search/context questions.
 // Mirrors Claude Code's built-in subagent pattern: read-only, bounded report,
 // main session never pays for the exploration.
 //
@@ -44,7 +44,7 @@ const ENGINES = {
       try {
         const j = JSON.parse(out);
         if (j && typeof j.output === 'string') return j.ok === false ? `fast lane error: ${j.error || j.output}` : j.output.trim();
-      } catch (_) { /* not JSON — fall through to raw */ }
+      } catch (_) { /* not JSON, fall through to raw */ }
       return out.trim();
     },
   },
@@ -138,7 +138,7 @@ async function scoutCommand(argv) {
 
 function showHelp() {
   console.log(`
-  atris scout — cheap read-only subagents for search & context questions
+  atris scout: cheap read-only subagents for search & context questions
 
   usage:
     atris scout "<question>" ["<question>" ...]     parallel scouts, one per question

package/commands/security-review.js

@@ -1,4 +1,4 @@
-// atris security-review — deterministic secrets / PII / privacy scan (no LLM).
+// atris security-review, deterministic secrets / PII / privacy scan (no LLM).
 //
 // "Is this workspace safe to commit, publish, or hand to an autonomous loop?"
 // Answers it with facts: file:line + rule + severity. Exit 1 on a HIGH finding,
@@ -200,7 +200,7 @@ function securityReviewCommand(argv = []) {
   if (!opts.quiet) {
     console.log('\n  ◉ atris security review');
     if (!findings.length) {
-      console.log(`\n  ✓ clean — no active secrets, PII, or sensitive files in ${raw.scanned} tracked file${raw.scanned === 1 ? '' : 's'}`);
+      console.log(`\n  ✓ clean, no active secrets, PII, or sensitive files in ${raw.scanned} tracked file${raw.scanned === 1 ? '' : 's'}`);
       if (result.suppressed) console.log(`  ${result.suppressed} accepted finding${result.suppressed === 1 ? '' : 's'} suppressed by ${result.baseline.path}`);
       console.log('');
       return 0;
@@ -225,10 +225,10 @@ function securityReviewCommand(argv = []) {
 }
 
 // The landing: short, true, decision-ready. What you read after the overnight
-// loop — the opposite of a finding dump.
+// loop, the opposite of a finding dump.
 function renderLanding(landing, threshold) {
   const date = new Date().toISOString().slice(0, 10);
-  const L = ['', `  ✈ security landing — ${date}`, ''];
+  const L = ['', `  ✈ security landing, ${date}`, ''];
   if (landing.cleared) {
     L.push(`  CLEARED TO SHIP    no unresolved findings at the ${threshold.toUpperCase()} line`);
   } else {
@@ -248,7 +248,7 @@ function renderLanding(landing, threshold) {
   if (landing.open.length) {
     L.push('  needs you:');
     for (const f of landing.open.slice(0, 10)) {
-      L.push(`    ${f.sev.toUpperCase().padEnd(8)} ${f.file}${f.line ? ':' + f.line : ''} — ${f.why}`);
+      L.push(`    ${f.sev.toUpperCase().padEnd(8)} ${f.file}${f.line ? ':' + f.line : ''}, ${f.why}`);
     }
     if (landing.open.length > 10) L.push(`    … and ${landing.open.length - 10} more`);
   } else {
@@ -268,7 +268,7 @@ function renderLanding(landing, threshold) {
 }
 
 function printRules() {
-  console.log('\n  atris security-review — deterministic rules:\n');
+  console.log('\n  atris security-review, deterministic rules:\n');
   for (const sev of SEVERITIES) {
     for (const r of RULES.filter((rule) => rule.sev === sev)) {
       console.log(`  ${r.sev.toUpperCase().padEnd(8)} ${r.cat.padEnd(8)} ${r.id.padEnd(22)} ${r.why}`);
@@ -396,7 +396,7 @@ function installHook() {
 
 function printHelp() {
   console.log(`
-  atris security-review — deterministic secrets / PII / privacy scan (no LLM)
+  atris security-review, deterministic secrets / PII / privacy scan (no LLM)
 
     atris security-review            scan git-tracked files (default)
     atris security-review <path>     scan a file or dir

package/commands/serve.js

@@ -1,5 +1,5 @@
 /**
- * Atris Serve — make this directory a live AI Computer.
+ * Atris Serve, make this directory a live AI Computer.
  *
  *   atris serve                       Start the bridge in current directory
  *   atris serve --agent <agent_id>    Bind to a specific agent
@@ -33,7 +33,7 @@ const { apiRequestJson, getApiBaseUrl } = require('../utils/api');
 const HEARTBEAT_INTERVAL_MS = 30000;
 const RECONNECT_DELAY_MS = 2000;
 const MAX_RECONNECT_DELAY_MS = 30000;
-// Bash commands are bounded to 10s — long batches won't lock the CLI for hours
+// Bash commands are bounded to 10s, long batches won't lock the CLI for hours
 const BASH_TIMEOUT_MS = 10000;
 // Hard size limits to prevent OOM on large payloads
 const MAX_WRITE_BYTES = 10 * 1024 * 1024;  // 10 MB
@@ -138,7 +138,7 @@ async function applyOp(workingDir, op) {
 
     if (type === 'bash') {
       // Execute bash in the working directory with a timeout.
-      // Note: This is a powerful op — only the session owner can dispatch it,
+      // Note: This is a powerful op, only the session owner can dispatch it,
       // AND the session must have been created with allow_bash=true.
       try {
         const stdout = execSync(op.command, {
@@ -206,10 +206,10 @@ function streamSession(token, sessionId, workingDir) {
         return;
       }
 
-      console.log(`● Bridge active — listening for ops on session ${sessionId.slice(0, 8)}...`);
+      console.log(`● Bridge active, listening for ops on session ${sessionId.slice(0, 8)}...`);
 
       // Ping watchdog: the server pings every ~30s. Silence past 3 intervals
-      // means the socket died without a FIN (server redeploy, NAT drop) —
+      // means the socket died without a FIN (server redeploy, NAT drop),
       // kill it so the outer loop reconnects/re-registers instead of zombieing.
       let lastSeen = Date.now();
       const watchdog = setInterval(() => {
@@ -222,7 +222,7 @@ function streamSession(token, sessionId, workingDir) {
 
       // Registry check: a rolling deploy can leave this stream alive on an
       // old instance while new instances answer API calls from an empty
-      // in-memory session store — pings keep flowing so the silence watchdog
+      // in-memory session store, pings keep flowing so the silence watchdog
       // never fires, but dispatchers can't find us. Ask the registry
       // directly; if it forgot this session, reconnect and re-register.
       const registryCheck = setInterval(async () => {
@@ -311,7 +311,7 @@ async function serveAtris(options = {}) {
 
   console.log('');
   console.log('╭──────────────────────────────────────────╮');
-  console.log('│   ATRIS SERVE — Local AI Computer Bridge │');
+  console.log('│   ATRIS SERVE, Local AI Computer Bridge │');
   console.log('╰──────────────────────────────────────────╯');
   console.log('');
   console.log(`  📁 Directory: ${workingDir}`);
@@ -376,7 +376,7 @@ async function serveAtris(options = {}) {
       reconnectDelay = RECONNECT_DELAY_MS; // reset on clean disconnect
     } catch (err) {
       if (shuttingDown) break;
-      // Server restarts wipe the in-memory session store — a dead session id
+      // Server restarts wipe the in-memory session store, a dead session id
       // 404s forever, so re-register instead of retrying the corpse.
       if (/session not found|404/i.test(err.message || '')) {
         try {
@@ -391,7 +391,7 @@ async function serveAtris(options = {}) {
           });
           if (result.ok && result.data && result.data.session_id) {
             session = result.data;
-            console.log(`  ✓ Session expired server-side — re-registered as ${session.session_id}`);
+            console.log(`  ✓ Session expired server-side, re-registered as ${session.session_id}`);
             reconnectDelay = RECONNECT_DELAY_MS;
             continue;
           }

package/commands/setup.js

@@ -117,7 +117,7 @@ async function setupAtris() {
     return;
   }
 
-  // Resolve selection — try number first, then slug match
+  // Resolve selection: try number first, then slug match
   let selected = null;
   const num = parseInt(answer, 10);
   if (!isNaN(num) && num >= 1 && num <= businesses.length) {

package/commands/sign.js

@@ -3,7 +3,7 @@ const path = require('path');
 
 // atris sign: co-author trailer on every commit in an atris workspace.
 // Installs a prepare-commit-msg hook that appends "Co-authored-by: Atris"
-// when the repo has an atris/ folder — same credit line Claude and Cursor use.
+// when the repo has an atris/ folder, same credit line Claude and Cursor use.
 // Idempotent and non-destructive: appends a marked block, removes only its own block.
 
 const MARKER = '# atris co-author';
@@ -66,18 +66,18 @@ function signCommand(sub) {
     const { hookPath, removed } = removeSignHook();
     console.log(removed
       ? `\n  ✓ atris co-author removed: ${rel(hookPath)}\n`
-      : `\n  nothing to remove — atris co-author is not installed\n`);
+      : `\n  nothing to remove, atris co-author is not installed\n`);
     return 0;
   }
   if (sub === 'status') {
     const { hookPath, installed } = signStatus();
     console.log(installed
       ? `\n  ✓ atris co-author is on: ${rel(hookPath)}\n    every commit gets: ${TRAILER}\n`
-      : `\n  atris co-author is off — run 'atris sign' to turn it on\n`);
+      : `\n  atris co-author is off, run 'atris sign' to turn it on\n`);
     return 0;
   }
   if (sub && sub !== 'on' && sub !== 'install') {
-    console.log(`\n  atris sign — co-author trailer on every commit\n\n  atris sign          install the prepare-commit-msg hook\n  atris sign off      remove it\n  atris sign status   check whether it's installed\n\n  While installed, any commit in a repo with an atris/ folder gets:\n    ${TRAILER}\n`);
+    console.log(`\n  atris sign: co-author trailer on every commit\n\n  atris sign          install the prepare-commit-msg hook\n  atris sign off      remove it\n  atris sign status   check whether it's installed\n\n  While installed, any commit in a repo with an atris/ folder gets:\n    ${TRAILER}\n`);
     return 2;
   }
   const { hookPath, already } = installSignHook();

package/commands/signup.js

@@ -7,7 +7,7 @@
 // seam: `npm i -g atris && atris signup x && atris play`.
 //
 // The account is born inert by design (0 credits, no executing agent, external
-// mail paid-gated) — identity is free, capability is earned via AgentXP.
+// mail paid-gated), identity is free, capability is earned via AgentXP.
 // Backend: backend/routers/agent_auth_router.py (POST /auth/agent/signup).
 
 const crypto = require('crypto');
@@ -19,7 +19,7 @@ const { argsWantHelp, isHelpToken } = require('../lib/noninteractive');
 // before spending a network round trip / a rate-limit slot.
 const HANDLE_RE = /^[a-z0-9]{3,30}$/;
 
-// Proof-of-work — mirror the server (agent_auth_router.py). The signup endpoint
+// Proof-of-work: mirror the server (agent_auth_router.py). The signup endpoint
 // requires a nonce whose sha256(prefix:handle:bucket:nonce) has DIFFICULTY_BITS
 // leading zero bits. Bucket = current 5-min window. Solved locally (~1s) so
 // signup stays a single call; this is the cost that makes mass-minting expensive.
@@ -79,7 +79,7 @@ async function signupCommand(args = []) {
     const { token, email, user_id: userId } = res.data;
     const identity = email || `${handle}@atrismail.com`;
     saveCredentials(token, null, identity, userId || null, 'atrisos');
-    console.log(`\n✓ You're in — ${identity}`);
+    console.log(`\n✓ You're in: ${identity}`);
     console.log('  Inert starter account (0 credits): identity is free, capability is earned.');
     console.log('  Saved to your active profile.');
     console.log('\nNext:');
@@ -88,7 +88,7 @@ async function signupCommand(args = []) {
     return 0;
   }
 
-  // Friendly, actionable errors — no stack traces for expected cases.
+  // Friendly, actionable errors, no stack traces for expected cases.
   if (res.status === 409) {
     console.error(`✗ "${handle}" is already taken or reserved. Try a different handle.`);
     return 1;

package/commands/site.js

@@ -1,7 +1,8 @@
-// atris site — turn a folder of markdown (docs, your wiki, memory) into a
+// atris site, turn a folder of markdown (docs, your wiki, memory) into a
 // beautiful, navigable static site in the design system. Built on lib/site.js.
 //
 //   atris site <dir|doc.md> [--out dist] [--theme atris|terminal|paper] [--title T] [--serve]
+//   atris site publish <dir> --slug <slug> [--profile strict|app] [--spa] [--no-claim] [--build] [--json]
 
 const { buildSite, serveSite } = require('../lib/site');
 const { hasFlag } = require('../lib/arg-parser');
@@ -9,6 +10,9 @@ const { hasFlag } = require('../lib/arg-parser');
 function flag(argv, name) { const i = argv.indexOf(name); return i !== -1 ? argv[i + 1] : null; }
 
 async function run(argv) {
+  if (argv[0] === 'publish') {
+    return require('../lib/site-publish').run(argv.slice(1));
+  }
   if (argv[0] === 'deploy') {
     return require('./site-deploy').run(argv.slice(1));
   }
@@ -20,14 +24,15 @@ async function run(argv) {
 
     atris site <dir|doc.md> [--out dist] [--theme atris|terminal|paper] [--title T]
     atris site atris/wiki --title "Atris Wiki" --serve
+    atris site publish <dir> --slug <slug> [--profile strict|app] [--spa] [--no-claim] [--build] [--json]
     atris site deploy <dir> --name <slug> [--spa] [--dry-run] --yes
     atris site deploy <dir> --fullstack --name <slug> [--dry-run] --yes
 
   Each .md becomes a page; an index links them all. Same anti-slop design system,
   semantic data-atris-block sections, ready for the web app. --serve previews it.
 
-  deploy publishes web folders to <slug>.atris.ai. --fullstack deploys a node
-  server with its own render service.
+  publish uploads any built web folder through the hosted-sites api. deploy is
+  the older site setup flow; --fullstack deploys a node server with render.
 `);
     return input === 'help' || hasFlag(argv, '--help') ? 0 : 2;
   }