origem 0.1.0 → 0.2.1

package/dist/index.js

@@ -22,14 +22,14 @@ function yamlScalar(value) {
   return /[:#"'{}\[\],&*?|<>=!%@`]/.test(v) ? JSON.stringify(v) : v;
 }
 var DEFAULT_SECTIONS = [
-  { type: "instruction", title: "Instru\xE7\xF5es" },
-  { type: "spec", title: "Especifica\xE7\xF5es (requisitos)" },
+  { type: "instruction", title: "Instructions" },
+  { type: "spec", title: "Specs (requirements)" },
   { type: "boundary", title: "Limites (Sempre / Perguntar antes / Nunca)" },
-  { type: "rule", title: "Regras & Instru\xE7\xF5es" },
-  { type: "memory", title: "Mem\xF3rias & Contexto" },
+  { type: "rule", title: "Rules & Instructions" },
+  { type: "memory", title: "Memory & Context" },
   { type: "knowledge", title: "Conhecimento" },
   { type: "prompt", title: "Prompts" },
-  { type: "integration", title: "Integra\xE7\xF5es" }
+  { type: "integration", title: "Integrations" }
 ];
 function renderMarkdown(brain, sections = DEFAULT_SECTIONS) {
   const lines = [];
@@ -38,7 +38,7 @@ function renderMarkdown(brain, sections = DEFAULT_SECTIONS) {
     lines.push(`
 > ${brain.brain.description}`);
   lines.push(`
-_Configura\xE7\xE3o gerada pelo Origem. Adote as regras, mem\xF3rias e conhecimento abaixo como contexto operacional._`);
+_Configuration generated by Origem. Adopt the rules, memory and knowledge below as your operating context._`);
   for (const section of sections) {
     const group = byType(brain.cards, section.type);
     if (group.length === 0)
@@ -61,16 +61,16 @@ ${card.content}`);
 
 // ../origem-adapters/dist/adapters.js
 var GENERIC_SECTIONS = [
-  { type: "instruction", title: "Instru\xE7\xF5es" },
-  { type: "spec", title: "Especifica\xE7\xF5es (requisitos)" },
+  { type: "instruction", title: "Instructions" },
+  { type: "spec", title: "Specs (requirements)" },
   { type: "boundary", title: "Limites (Sempre / Perguntar antes / Nunca)" },
-  { type: "rule", title: "Regras & Padr\xF5es" },
-  { type: "memory", title: "Mem\xF3rias & Contexto" },
+  { type: "rule", title: "Rules & Standards" },
+  { type: "memory", title: "Memory & Context" },
   { type: "knowledge", title: "Conhecimento" },
   { type: "skill", title: "Skills / Capacidades" },
   { type: "agent", title: "Subagentes" },
   { type: "prompt", title: "Prompts & Comandos" },
-  { type: "integration", title: "Integra\xE7\xF5es" }
+  { type: "integration", title: "Integrations" }
 ];
 function toAgentsMd(brain) {
   return [
@@ -84,13 +84,13 @@ function toAgentsMd(brain) {
   ];
 }
 var CLAUDE_SECTIONS = [
-  { type: "instruction", title: "Instru\xE7\xF5es" },
-  { type: "spec", title: "Especifica\xE7\xF5es (requisitos)" },
+  { type: "instruction", title: "Instructions" },
+  { type: "spec", title: "Specs (requirements)" },
   { type: "boundary", title: "Limites (Sempre / Perguntar antes / Nunca)" },
-  { type: "rule", title: "Regras & Padr\xF5es" },
-  { type: "memory", title: "Mem\xF3rias & Contexto" },
+  { type: "rule", title: "Rules & Standards" },
+  { type: "memory", title: "Memory & Context" },
   { type: "knowledge", title: "Conhecimento" },
-  { type: "integration", title: "Integra\xE7\xF5es" }
+  { type: "integration", title: "Integrations" }
 ];
 function toClaudeMd(brain) {
   return [
@@ -348,14 +348,14 @@ var TARGET_CAPABILITIES = [
       mcp: "none"
       // vira .mcp.json
     },
-    note: "Instru\xE7\xF5es can\xF4nicas. Prompt/skill/agent/harness/mcp viram arquivos pr\xF3prios do Claude."
+    note: "Canonical instructions. Prompt/skill/agent/harness/mcp become their own Claude files."
   },
   {
     id: "claude-settings",
     label: "Claude Code \xB7 settings.json",
     path: ".claude/settings.json",
     support: onlyNative("harness"),
-    note: "Permiss\xF5es, env, hooks e modelo. Privilegiado (executa na m\xE1quina)."
+    note: "Permissions, env, hooks and model. Privileged (runs on your machine)."
   },
   {
     id: "claude-skills",
@@ -380,14 +380,14 @@ var TARGET_CAPABILITIES = [
     label: "MCP servers \xB7 .mcp.json",
     path: ".mcp.json",
     support: onlyNative("mcp"),
-    note: "Port\xE1vel em conceito; o CAMINHO varia por ferramenta (Cursor: .cursor/mcp.json, VS Code: .vscode/mcp.json)."
+    note: "Portable in concept; the PATH varies per tool (Cursor: .cursor/mcp.json, VS Code: .vscode/mcp.json)."
   },
   {
     id: "agents",
     label: "AGENTS.md (Codex, Windsurf, Zed, Aider\u2026)",
     path: "AGENTS.md",
     support: ALL_DEGRADED,
-    note: "Padr\xE3o convergido de instru\xE7\xF5es. Sem conceito nativo de skills/subagentes \u2192 viram documenta\xE7\xE3o."
+    note: "The converged instruction standard. No native skills/subagents concept \u2192 they become documentation."
   },
   {
     id: "gemini",
@@ -418,7 +418,7 @@ var TARGET_CAPABILITIES = [
       skill: "none",
       agent: "none"
     },
-    note: "Nosso adapter gera s\xF3 regras (.mdc). Cursor tamb\xE9m l\xEA AGENTS.md e .cursor/mcp.json (roadmap)."
+    note: "Our adapter emits rules only (.mdc). Cursor also reads AGENTS.md and .cursor/mcp.json (roadmap)."
   }
 ];
 function onlyNative(type) {
@@ -597,36 +597,36 @@ async function fetchBrain(apiUrl, key) {
   try {
     res = await fetch(url);
   } catch (e) {
-    throw new Error(`N\xE3o consegui conectar em ${base}: ${e.message}`);
+    throw new Error(`Could not reach ${base}: ${e.message}`);
   }
   if (res.status === 401) {
-    throw new Error("Token inv\xE1lido, expirado ou revogado. Gere um novo link no Origem.");
+    throw new Error("Token is invalid, expired or revoked. Run `origem connect` again.");
   }
   if (res.status === 403) {
-    throw new Error("Token sem permiss\xE3o de leitura.");
+    throw new Error("Token has no read permission.");
   }
   if (!res.ok) {
-    throw new Error(`Falha ao puxar o Brain (HTTP ${res.status}).`);
+    throw new Error(`Failed to pull the harness (HTTP ${res.status}).`);
   }
   const payload = await res.json();
   const secret = process.env.ORIGEM_SIGNING_SECRET;
   if (payload.signature) {
     if (!secret) {
       warn(
-        "O payload vem assinado, mas ORIGEM_SIGNING_SECRET n\xE3o est\xE1 definido \u2014 n\xE3o \xE9 poss\xEDvel verificar a origem. Config privilegiada ser\xE1 bloqueada."
+        "The payload is signed but ORIGEM_SIGNING_SECRET is not set \u2014 its origin cannot be verified. Privileged config will be blocked."
       );
       payload.__unverified = true;
     } else {
       const { signature, ...rest } = payload;
       if (!verifyPayload(rest, signature, secret)) {
         throw new Error(
-          "Assinatura inv\xE1lida \u2014 o Brain pode ter sido adulterado. Abortando."
+          "Invalid signature \u2014 the harness may have been tampered with. Aborting."
         );
       }
     }
   } else if (secret) {
     warn(
-      "ORIGEM_SIGNING_SECRET est\xE1 definido, mas o payload N\xC3O vem assinado. Config privilegiada ser\xE1 bloqueada."
+      "ORIGEM_SIGNING_SECRET is set but the payload is NOT signed. Privileged config will be blocked."
     );
     payload.__unverified = true;
   }
@@ -640,7 +640,7 @@ function resolveKey(flag) {
   const key = flag || process.env.ORIGEM_TOKEN || readConfig().token || "";
   if (!key) {
     throw new Error(
-      "Token ausente. Rode `origem login --key <token>` uma vez (grava em ~/.origem/config.json), ou passe --key / ORIGEM_TOKEN. Gere o link em 'Conectar com IA' no app Origem."
+      "No token. Run `origem connect` once \u2014 it stores the credential in ~/.origem/config.json \u2014 or pass --key / ORIGEM_TOKEN."
     );
   }
   return key;
@@ -655,20 +655,20 @@ async function probeToken(apiUrl, key) {
       signal: AbortSignal.timeout(1e4)
     });
   } catch (e) {
-    throw new Error(`N\xE3o consegui falar com ${apiUrl}: ${e.message}`);
+    throw new Error(`Could not reach ${apiUrl}: ${e.message}`);
   }
-  if (res.status === 401) throw new Error("Token inv\xE1lido, expirado ou revogado.");
+  if (res.status === 401) throw new Error("Token is invalid, expired or revoked.");
   if (res.status === 403) {
     throw new Error(
-      "Token sem escopo de escrita. O watch e o hook precisam de um link de escrita (ingest\xE3o)."
+      "Token has no write scope. Watch and hooks need a write-scoped token."
     );
   }
   if (res.status === 404) {
     throw new Error(
-      `Esta API n\xE3o tem o endpoint /run (HTTP 404). Ela precisa estar publicada com o m\xF3dulo de runs.`
+      `This API has no /run endpoint (HTTP 404). It must be deployed with the runs module.`
     );
   }
-  if (!res.ok) throw new Error(`Falha na verifica\xE7\xE3o (HTTP ${res.status}).`);
+  if (!res.ok) throw new Error(`Verification failed (HTTP ${res.status}).`);
 }
 
 // src/fsutil.ts
@@ -701,7 +701,7 @@ function ensureDir(abs) {
 function wrapBlock(content) {
   const body = content.replace(/\n+$/, "");
   return `${MB_START}
-<!-- Gerado pelo Origem (origem apply). N\xE3o edite dentro do bloco. -->
+<!-- Generated by Origem. Do not edit inside this block. -->
 ${body}
 ${MB_END}
 `;
@@ -767,7 +767,7 @@ function diskManagedHash(abs, strategy, jsonKeys) {
   }
 }
 function unwrapBlock(block) {
-  return block.replace(MB_START, "").replace(MB_END, "").replace(/^\s*<!-- Gerado pelo Origem[^\n]*-->\n?/, "").replace(/^\n+/, "").replace(/\n+$/, "");
+  return block.replace(MB_START, "").replace(MB_END, "").replace(/^\s*<!-- (?:Generated by|Gerado pelo) Origem[^\n]*-->\n?/, "").replace(/^\n+/, "").replace(/\n+$/, "");
 }
 function writeTarget(abs, strategy, content) {
   ensureDir(abs);
@@ -847,19 +847,19 @@ function buildPlan(brain, scope, targets, lock) {
   return { items, skipped };
 }
 function actionLabel(a) {
-  if (a === "create") return color.green("criar   ");
-  if (a === "update") return color.yellow("atualizar");
+  if (a === "create") return color.green("create  ");
+  if (a === "update") return color.yellow("update  ");
   return color.dim("ok      ");
 }
 function printPlan(items, skipped) {
-  info(color.bold("\nPlano:"));
+  info(color.bold("\nPlan:"));
   for (const it of items) {
-    const risk = it.risk === "privileged" ? color.red(" [privilegiado]") : "";
-    const drift = it.driftedLocally ? color.yellow(" (editado localmente)") : "";
+    const risk = it.risk === "privileged" ? color.red(" [privileged]") : "";
+    const drift = it.driftedLocally ? color.yellow(" (edited locally)") : "";
     info(`  ${actionLabel(it.action)}  ${it.output.path}${risk}${drift}`);
   }
   for (const s of skipped) {
-    info(`  ${color.dim("pular   ")}  ${s.path} ${color.dim("(n\xE3o se aplica a este escopo)")}`);
+    info(`  ${color.dim("skip    ")}  ${s.path} ${color.dim("(does not apply to this scope)")}`);
   }
 }
 async function runApply(opts) {
@@ -874,8 +874,8 @@ async function runApply(opts) {
   const orphans = (lock?.files ?? []).filter((f) => !currentPaths.has(f.path));
   printPlan(items, skipped);
   if (orphans.length) {
-    info(color.bold("\nRemover (n\xE3o est\xE3o mais no Brain):"));
-    for (const o of orphans) info(`  ${color.red("remover ")}  ${o.path}`);
+    info(color.bold("\nRemove (no longer in the harness):"));
+    for (const o of orphans) info(`  ${color.red("remove  ")}  ${o.path}`);
   }
   if (dryRun) {
     info(color.dim("\n(dry-run \u2014 nada foi escrito.)"));
@@ -885,18 +885,18 @@ async function runApply(opts) {
   if (privileged.length > 0) {
     if (unverified) {
       warn(
-        "Config privilegiada bloqueada: o payload n\xE3o p\xF4de ser verificado (assinatura ausente/ inv\xE1lida)."
+        "Privileged config blocked: the payload could not be verified (missing or invalid signature)."
       );
       allowPrivileged = false;
     } else if (yes) {
       allowPrivileged = true;
     } else if (!process.stdin.isTTY) {
-      warn("Sem terminal interativo \u2014 pulando config privilegiada. Use --yes para aplicar.");
+      warn("No interactive terminal \u2014 skipping privileged config. Use --yes to apply it.");
       allowPrivileged = false;
     } else {
-      info(color.bold("\n\u26A0 Config privilegiada (executa comandos/segredos na sua m\xE1quina):"));
+      info(color.bold("\n\u26A0 Privileged config (runs commands / holds secrets on your machine):"));
       for (const p of privileged) info(`  \u2022 ${p.output.path}`);
-      allowPrivileged = await confirm("Aplicar tamb\xE9m esses arquivos privilegiados?");
+      allowPrivileged = await confirm("Apply these privileged files too?");
     }
   }
   for (const o of orphans) {
@@ -933,32 +933,32 @@ async function runApply(opts) {
     files: [...nextEntries.values()]
   });
   ok(
-    `Aplicado: ${written} arquivo(s) escrito(s), ${orphans.length} removido(s). Estado em ${color.cyan(".origem/lock.json")}.`
+    `Applied: ${written} file(s) written, ${orphans.length} removed. State in ${color.cyan(".origem/lock.json")}.`
   );
   if (!allowPrivileged && privileged.length > 0) {
-    warn(`${privileged.length} arquivo(s) privilegiado(s) N\xC3O aplicado(s).`);
+    warn(`${privileged.length} privileged file(s) NOT applied.`);
   }
 }
 function runStatus(brain, scope, targets) {
   const baseDir = process.cwd();
   const lock = readLock(baseDir);
   if (!lock) {
-    info("N\xE3o inicializado neste diret\xF3rio. Rode `origem apply`.");
+    info("Not initialised here. Run `origem connect`.");
     return;
   }
   const remoteRev = brain.origem?.revision ?? null;
   const localRev = lock.revision;
-  info(color.bold(`Brain: ${lock.brainName ?? lock.brainId ?? "?"}`));
+  info(color.bold(`Harness: ${lock.brainName ?? lock.brainId ?? "?"}`));
   info(
-    `Revis\xE3o local: ${localRev ?? "?"} \xB7 remota: ${remoteRev ?? "?"} ` + (remoteRev !== null && localRev !== remoteRev ? color.yellow("(desatualizado \u2014 rode `origem apply`)") : color.green("(em dia)"))
+    `Local revision: ${localRev ?? "?"} \xB7 remote: ${remoteRev ?? "?"} ` + (remoteRev !== null && localRev !== remoteRev ? color.yellow("(out of date \u2014 run `origem connect`)") : color.green("(up to date)"))
   );
   const { items } = buildPlan(brain, scope, targets, lock);
-  info(color.bold("\nArquivos:"));
+  info(color.bold("\nFiles:"));
   for (const it of items) {
     const parts = [];
     if (it.action !== "unchanged") parts.push(color.yellow(it.action));
-    if (it.driftedLocally) parts.push(color.yellow("editado localmente"));
-    if (parts.length === 0) parts.push(color.green("em dia"));
+    if (it.driftedLocally) parts.push(color.yellow("edited locally"));
+    if (parts.length === 0) parts.push(color.green("up to date"));
     info(`  ${it.output.path} \u2014 ${parts.join(", ")}`);
   }
 }
@@ -966,7 +966,7 @@ function runRemove(scope) {
   const baseDir = process.cwd();
   const lock = readLock(baseDir);
   if (!lock) {
-    info("Nada para remover (sem .origem/lock.json).");
+    info("Nothing to remove (no .origem/lock.json).");
     return;
   }
   for (const f of lock.files) {
@@ -974,7 +974,7 @@ function runRemove(scope) {
     if (abs) removeTarget(abs, f.strategy, f.jsonKeys);
   }
   deleteLock(baseDir);
-  ok(`Removidos ${lock.files.length} arquivo(s) do Origem e limpo o lock.`);
+  ok(`Removed ${lock.files.length} Origem file(s) and cleared the lock.`);
 }
 
 // src/hook.ts
@@ -1078,7 +1078,7 @@ var HOOK_ENTRIES = (bin, args) => ({
             type: "command",
             command: `${bin} hook stop${args}`,
             timeout: 15,
-            statusMessage: "Reportando ao Origem\u2026"
+            statusMessage: "Reporting to Origem\u2026"
           }
         ]
       }
@@ -1097,22 +1097,22 @@ async function hookInstall(opts) {
   const target = join4(process.cwd(), ".claude", file);
   const args = (opts.key ? ` --key ${shellQuote(opts.key)}` : "") + (opts.apiUrl ? ` --api-url ${shellQuote(opts.apiUrl)}` : "");
   const snippet = HOOK_ENTRIES(opts.bin, args);
-  info(`${color.bold("Vai escrever em:")} ${target}`);
+  info(`${color.bold("Will write to:")} ${target}`);
   info(JSON.stringify(snippet, null, 2));
   info(
     color.yellow(
-      "\nIsto \xE9 config privilegiada: os hooks rodam um comando na sua m\xE1quina a cada\nturno, e o `stop` pode CONTINUAR a sess\xE3o com um prompt vindo do site.\nQuem escrever na fila do Brain dirige esta sess\xE3o."
+      "\nThis is privileged config: the hooks run a command on your machine every\nturn, and `stop` can CONTINUE the session with a prompt coming from the site.\nWhoever can write to the queue drives this session."
     )
   );
   if (opts.key && !opts.local) {
     info(
       color.yellow(
-        "O token vai ficar GRAVADO neste arquivo. Se ele for versionado, use --local\n(.claude/settings.local.json, ignorado pelo git) ou exporte ORIGEM_TOKEN."
+        "The token will be STORED in this file. If it is committed, use --local\n(.claude/settings.local.json, which git ignores) or export ORIGEM_TOKEN."
       )
     );
   }
-  if (!opts.yes && !await confirm("Instalar os hooks?")) {
-    warn("Nada foi escrito.");
+  if (!opts.yes && !await confirm("Install the hooks?")) {
+    warn("Nothing was written.");
     return;
   }
   let existing = {};
@@ -1120,25 +1120,25 @@ async function hookInstall(opts) {
     try {
       existing = JSON.parse(readFileSync4(target, "utf8"));
     } catch {
-      throw new Error(`${target} existe mas n\xE3o \xE9 JSON v\xE1lido \u2014 corrija antes de instalar.`);
+      throw new Error(`${target} exists but is not valid JSON \u2014 fix it before installing.`);
     }
   }
   const merged = mergeHooks(existing, snippet.hooks);
   mkdirSync4(dirname4(target), { recursive: true });
   writeFileSync4(target, `${JSON.stringify(merged, null, 2)}
 `);
-  ok(`Hooks instalados em ${target}`);
+  ok(`Hooks installed in ${target}`);
   if (opts.key || opts.apiUrl) {
     const p = saveConfig({
       ...opts.key ? { token: opts.key } : {},
       ...opts.apiUrl ? { apiUrl: opts.apiUrl } : {}
     });
-    info(color.dim(`Credenciais tamb\xE9m gravadas em ${p} \u2014 \`origem watch\` j\xE1 roda sem flag.`));
+    info(color.dim(`Credentials also stored in ${p} \u2014 \`origem watch\` now runs with no flags.`));
   }
   if (!opts.key) {
     info(
       color.dim(
-        "Sem --key: o hook usa ORIGEM_TOKEN do ambiente do processo do Claude Code.\nNuma sess\xE3o j\xE1 aberta isso n\xE3o pega \u2014 reinicie o Claude com a vari\xE1vel exportada,\nou reinstale com --key."
+        "Without --key the hook uses ORIGEM_TOKEN from the Claude Code process environment.\nIn an already-open session that will not apply \u2014 restart Claude with the variable\nexported, or reinstall with --key."
       )
     );
   }
@@ -1226,7 +1226,7 @@ function resolveClaudeBin(flag) {
   const found = candidates().find(isExecutable);
   if (!found) {
     throw new Error(
-      "N\xE3o achei o bin\xE1rio do Claude Code. Passe --claude <caminho> (no VS Code fica em ~/.vscode/extensions/anthropic.claude-code-*/resources/native-binary/claude)."
+      "Could not find the Claude Code binary. Pass --claude <path> (no VS Code fica em ~/.vscode/extensions/anthropic.claude-code-*/resources/native-binary/claude)."
     );
   }
   saveConfig({ claudeBin: found });
@@ -1266,27 +1266,27 @@ function runClaude(bin, opts, prompt, resumeId) {
 }
 async function runWatch(opts) {
   const bin = resolveClaudeBin(opts.claudeBin);
-  info(`${color.bold("origem watch")} \u2014 plant\xE3o local`);
+  info(`${color.bold("origem watch")} \u2014 local runner`);
   info(`  fila:      ${opts.apiUrl}/run`);
-  info(`  diret\xF3rio: ${opts.cwd}`);
+  info(`  directory: ${opts.cwd}`);
   info(`  claude:    ${bin}`);
   info(opts.once ? "  modo:      uma passada" : `  intervalo: ${Math.round(opts.intervalMs / 1e3)}s`);
   info(
     color.yellow(
-      "\nEnquanto isto roda, quem escrever na fila do Brain FAZ o Claude Code rodar\nnesta m\xE1quina, neste diret\xF3rio. O que trafega \xE9 prompt, e as permiss\xF5es do\nprojeto continuam valendo \u2014 mas o gatilho passa a ser remoto."
+      "\nWhile this runs, whoever writes to the queue MAKES Claude Code run on this\nmachine, in this directory. What travels is a prompt, and Claude Code\nprojeto continuam valendo \u2014 mas o gatilho passa a ser remoto."
     )
   );
   if (opts.permissionMode === "bypassPermissions") {
-    warn("--permission-mode bypassPermissions desliga TODA checagem. N\xE3o use com fila remota.");
+    warn("--permission-mode bypassPermissions turns OFF every check. Do not use it with a remote queue.");
   }
-  if (!opts.dryRun && !opts.once && !opts.yes && !await confirm("\nIniciar o plant\xE3o?")) {
+  if (!opts.dryRun && !opts.once && !opts.yes && !await confirm("\nStart the runner?")) {
     warn("Cancelado.");
     return;
   }
   let stop = false;
   process.on("SIGINT", () => {
     stop = true;
-    info("\nEncerrando o plant\xE3o\u2026");
+    info("\nShutting the runner down\u2026");
   });
   let quiet = 0;
   while (!stop) {
@@ -1309,18 +1309,18 @@ async function runWatch(opts) {
       await sleep(opts.intervalMs);
       continue;
     }
-    const alvo = command.targetSessionId ? `retomando a sess\xE3o ${command.targetSessionId}` : "sess\xE3o nova";
+    const alvo = command.targetSessionId ? `resuming session ${command.targetSessionId}` : "new session";
     ok(`Comando recebido (${alvo})`);
     info(`  ${color.dim(command.prompt)}`);
     if (opts.dryRun) {
-      info(color.dim("  --dry-run: n\xE3o executei."));
+      info(color.dim("  --dry-run: did not execute."));
       if (opts.once) return;
       await sleep(opts.intervalMs);
       continue;
     }
     const code = await runClaude(bin, opts, command.prompt, command.targetSessionId);
-    if (code === 0) ok("Comando conclu\xEDdo.");
-    else warn(`Claude Code saiu com c\xF3digo ${code}.`);
+    if (code === 0) ok("Command finished.");
+    else warn(`Claude Code exited with code ${code}.`);
     if (opts.once) return;
   }
 }
@@ -1330,24 +1330,24 @@ import { rmSync as rmSync2, existsSync as existsSync6 } from "node:fs";
 async function runLogin(opts) {
   const key = opts.key || process.env.ORIGEM_TOKEN;
   if (!key) {
-    throw new Error("Passe --key <token>. Gere o link de escrita em 'Conectar com IA' no Origem.");
+    throw new Error("Pass --key <token>, or just run `origem connect`.");
   }
-  info(`Verificando o token em ${color.cyan(opts.apiUrl)}\u2026`);
+  info(`Checking the token against ${color.cyan(opts.apiUrl)}\u2026`);
   await probeToken(opts.apiUrl, key);
   const p = saveConfig({ token: key, apiUrl: opts.apiUrl });
-  ok(`Token v\xE1lido, com escopo de escrita. Gravado em ${p} (0600).`);
-  info(color.dim("Agora `origem watch` roda sem flag nenhuma."));
+  ok(`Token is valid, with write scope. Stored in ${p} (0600).`);
+  info(color.dim("`origem watch` now runs with no flags."));
 }
 function runLogout() {
   const p = configPath();
   if (!existsSync6(p)) {
-    warn("Nada gravado.");
+    warn("Nothing stored.");
     return;
   }
   const { claudeBin } = readConfig();
   rmSync2(p);
   if (claudeBin) saveConfig({ claudeBin });
-  ok(`Credenciais removidas de ${p}.`);
+  ok(`Credentials removed from ${p}.`);
 }
 
 // src/connect.ts
@@ -1363,102 +1363,102 @@ import { dirname as dirname5, join as join6 } from "node:path";
 var SKILL_PATH = join6(".claude", "skills", "origem", "SKILL.md");
 var SKILL_MD = `---
 name: origem
-description: Sincroniza e inspeciona o harness deste reposit\xF3rio, que \xE9 gerenciado pelo Origem. Use quando o usu\xE1rio pedir para atualizar/sincronizar/puxar o harness ou a config da IA, perguntar de onde v\xEAm CLAUDE.md ou .claude/*, quiser saber se a config local divergiu do Origem, ou pedir para mudar uma regra, skill, subagente ou permiss\xE3o de forma permanente.
+description: Syncs and inspects this repository's harness, which is managed by Origem. Use when the user asks to update/sync/pull the harness or the AI config, asks where CLAUDE.md or .claude/* come from, wants to know whether the local config drifted from Origem, or asks to change a rule, skill, subagent or permission permanently.
 ---
 
-# Harness gerenciado pelo Origem
+# Harness managed by Origem
 
-Os arquivos de configura\xE7\xE3o deste reposit\xF3rio \u2014 \`CLAUDE.md\`, \`.claude/settings.json\`,
-\`.claude/skills/\`, \`.claude/agents/\`, \`.claude/commands/\` e \`.mcp.json\` \u2014 n\xE3o foram
-escritos \xE0 m\xE3o aqui. Eles s\xE3o materializados a partir de um harness guardado no Origem,
-e o invent\xE1rio do que foi escrito est\xE1 em \`.origem/lock.json\`.
+This repository's configuration files \u2014 \`CLAUDE.md\`, \`.claude/settings.json\`,
+\`.claude/skills/\`, \`.claude/agents/\`, \`.claude/commands/\` and \`.mcp.json\` \u2014 were not
+written by hand here. They are materialised from a harness stored in Origem, and the
+inventory of what was written lives in \`.origem/lock.json\`.
 
-## O que isso muda no seu comportamento
+## What this changes about your behaviour
 
-**Mudan\xE7a permanente vai para o Origem, n\xE3o para o arquivo.** Se o usu\xE1rio pedir uma regra
-nova, uma skill nova, uma permiss\xE3o diferente ou qualquer coisa que deva valer nas pr\xF3ximas
-sess\xF5es, editar o arquivo local funciona at\xE9 o pr\xF3ximo \`origem connect\` \u2014 e some ali.
-Diga isso ao usu\xE1rio e ofere\xE7a registrar a mudan\xE7a no Origem.
+**A permanent change goes to Origem, not to the file.** If the user asks for a new rule,
+a new skill, a different permission, or anything that should hold in future sessions,
+editing the local file works until the next \`origem connect\` \u2014 and disappears there.
+Say so, and offer to record the change in Origem.
 
-**Um arquivo listado no lock \xE9 territ\xF3rio do Origem.** Antes de editar \`CLAUDE.md\` ou
-qualquer coisa sob \`.claude/\`, confira \`.origem/lock.json\`. Arquivos fora dessa lista s\xE3o
-do projeto e voc\xEA edita normalmente.
+**A file listed in the lock is Origem's territory.** Before editing \`CLAUDE.md\` or
+anything under \`.claude/\`, check \`.origem/lock.json\`. Files outside that list belong to
+the project and you edit them normally.
 
-## Comandos
+## Commands
 
-| Comando | O que faz |
+| Command | What it does |
 |---|---|
-| \`npx origem status\` | Mostra o que mudaria e se h\xE1 edi\xE7\xE3o local divergente. \xC9 a leitura segura \u2014 n\xE3o escreve nada. |
-| \`npx origem connect\` | Autoriza (navegador), puxa a vers\xE3o mais nova e reescreve os arquivos. \xC9 tamb\xE9m o comando de sincronizar. |
-| \`npx origem apply\` | Reaplica com a credencial j\xE1 gravada, sem passar pelo navegador. |
-| \`npx origem apply --dry-run\` | S\xF3 imprime o plano. |
-| \`npx origem remove\` | Reverte tudo que o Origem escreveu, usando o lock. |
-| \`npx origem propose\` | Sugere uma mudan\xE7a no harness. **N\xE3o escreve nada** \u2014 fica pendente at\xE9 a pessoa aceitar no site. |
-| \`npx origem spec\` | Mostra os specs abertos e em que est\xE1gio cada um est\xE1. |
-| \`npx origem doctor\` | Compara o harness com este reposit\xF3rio e aponta o que divergiu. |
-| \`npx origem bootstrap\` | L\xEA o reposit\xF3rio e prop\xF5e um harness inteiro (para projeto sem harness). |
+| \`npx origem status\` | What would change, and whether a managed block was edited locally. The safe read \u2014 writes nothing. |
+| \`npx origem connect\` | Authorises (browser), pulls the newest version and rewrites the files. Also the sync command. |
+| \`npx origem apply\` | Re-applies with the stored credential, without the browser. |
+| \`npx origem apply --dry-run\` | Prints the plan only. |
+| \`npx origem remove\` | Reverts everything Origem wrote, using the lock. |
+| \`npx origem propose\` | Suggests a change to the harness. **Writes nothing** \u2014 it stays pending until someone accepts it. |
+| \`npx origem spec\` | Open specs and the stage each one is in. |
+| \`npx origem doctor\` | Compares the harness against this repository and reports what drifted. |
+| \`npx origem bootstrap\` | Reads the repository and proposes a whole harness (for a project without one). |
 
-## No come\xE7o de uma tarefa
+## At the start of a task
 
-Rode \`npx origem spec\`. Se houver spec aberto relacionado ao que o usu\xE1rio pediu, use os
-crit\xE9rios de aceite dele como defini\xE7\xE3o de pronto, e diga em que est\xE1gio o trabalho est\xE1.
-Se n\xE3o houver, siga normalmente \u2014 trabalho avulso \xE9 leg\xEDtimo.
+Run \`npx origem spec\`. If there is an open spec related to what the user asked, use its
+acceptance criteria as the definition of done, and say which stage the work is in. If
+there is none, carry on \u2014 standalone work is legitimate.
 
-## Quando o comando que voc\xEA rodou falhar por n\xE3o existir
+## When a command you ran fails because it does not exist
 
-Rode \`npx origem doctor\`. Ele compara o que o harness afirma com o que o reposit\xF3rio
-declara e costuma encontrar a causa (script renomeado, gerenciador de pacotes errado).
-Corrigir o harness evita que o pr\xF3ximo turno tropece no mesmo lugar.
+Run \`npx origem doctor\`. It compares what the harness claims against what the repository
+declares and usually finds the cause (renamed script, wrong package manager). Fixing the
+harness stops the next turn from tripping on the same thing.
 
-## Quando propor uma mudan\xE7a
+## When to propose a change
 
-Se durante a sess\xE3o o usu\xE1rio corrigir voc\xEA sobre a mesma coisa mais de uma vez, ou estabelecer
-uma conven\xE7\xE3o que deve valer nas pr\xF3ximas sess\xF5es, proponha:
+If during the session the user corrects you about the same thing more than once, or
+establishes a convention that should hold in future sessions, propose it:
 
 \`\`\`
 npx origem propose \\
   --type rule \\
-  --title "Terraform: apply \xE9 sempre manual" \\
-  --why "O usu\xE1rio me corrigiu 3x sobre isto nesta sess\xE3o." \\
-  --content "Nunca rode \`terraform apply\` sem mostrar o plan antes."
+  --title "Terraform: apply is always manual" \\
+  --why "The user corrected me on this 3 times in this session." \\
+  --content "Never run \`terraform apply\` without showing the plan first."
 \`\`\`
 
-Compartimentos v\xE1lidos: \`instruction\`, \`rule\`, \`boundary\`, \`memory\`, \`knowledge\`,
+Valid compartments: \`instruction\`, \`rule\`, \`boundary\`, \`memory\`, \`knowledge\`,
 \`skill\`, \`agent\`, \`prompt\`, \`harness\`, \`mcp\`, \`integration\`.
 
-Regras para propor bem:
-- **\`--why\` \xE9 o que a pessoa l\xEA para decidir.** Cite o que aconteceu na sess\xE3o, n\xE3o uma
-  justificativa gen\xE9rica.
-- Proponha **uma coisa por vez**. Duas regras juntas viram uma decis\xE3o dif\xEDcil.
-- N\xE3o proponha o que j\xE1 est\xE1 no harness \u2014 leia antes.
-- Para alterar uma pe\xE7a existente, passe \`--card <id>\` em vez de criar uma nova.
+Rules for proposing well:
+- **\`--why\` is what the reviewer reads to decide.** Cite what happened in the session,
+  not a generic justification.
+- Propose **one thing at a time**. Two rules together make one hard decision.
+- Do not propose what is already in the harness \u2014 read it first.
+- To change an existing piece, pass \`--card <id>\` instead of creating a new one.
 
-## Quando o usu\xE1rio pedir para sincronizar
+## When the user asks to sync
 
-Rode \`npx origem status\` primeiro e mostre o resultado. Se houver edi\xE7\xE3o local dentro de um
-bloco gerenciado, avise **antes** de aplicar \u2014 o apply sobrescreve esse bloco.
+Run \`npx origem status\` first and show the result. If there is a local edit inside a
+managed block, warn **before** applying \u2014 the apply overwrites that block.
 
-## Limites
+## Limits
 
-N\xE3o edite \`.origem/lock.json\` na m\xE3o: ele \xE9 o invent\xE1rio que o \`origem remove\` usa para
-saber o que reverter, e um lock inconsistente deixa arquivos \xF3rf\xE3os no projeto.
+Do not edit \`.origem/lock.json\` by hand: it is the inventory \`origem remove\` uses to
+know what to revert, and an inconsistent lock leaves orphan files in the project.
 `;
 function installOrigemSkill(baseDir, lock) {
   const fromHarness = (lock?.files ?? []).some(
     (f) => f.path.replace(/\\/g, "/") === SKILL_PATH.replace(/\\/g, "/")
   );
   if (fromHarness) {
-    info(color.dim(`skill do Origem: veio do pr\xF3prio harness, mantida como est\xE1`));
+    info(color.dim("Origem skill: it comes from the harness itself, left as is"));
     return;
   }
   const abs = join6(baseDir, SKILL_PATH);
   if (existsSync7(abs) && readFileSync5(abs, "utf8") === SKILL_MD) {
-    info(color.dim(`skill do Origem j\xE1 atualizada em ${SKILL_PATH}`));
+    info(color.dim(`Origem skill already up to date at ${SKILL_PATH}`));
     return;
   }
   mkdirSync5(dirname5(abs), { recursive: true });
   writeFileSync5(abs, SKILL_MD, "utf8");
-  ok(`skill do Origem instalada em ${SKILL_PATH}`);
+  ok(`Origem skill installed at ${SKILL_PATH}`);
 }
 
 // src/connect.ts
@@ -1494,7 +1494,7 @@ async function resolveEndpoints(apiUrl) {
     }
   }
   throw new Error(
-    `N\xE3o encontrei os endpoints OAuth em ${base}. Confira a URL da API (--api-url ou ORIGEM_API_URL) e se ela est\xE1 publicada com o m\xF3dulo de OAuth.`
+    `No OAuth endpoints found at ${base}. Check the API URL (--api-url or ORIGEM_API_URL) and that it is deployed with the OAuth module.`
   );
 }
 function page(title, body, accent) {
@@ -1518,18 +1518,18 @@ async function startCallbackServer(state) {
     const gotState = url.searchParams.get("state");
     if (error) {
       res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-      res.end(page("Autoriza\xE7\xE3o negada", "Pode fechar esta aba e voltar ao terminal.", "#b3392e"));
-      fail?.(new Error(`Autoriza\xE7\xE3o negada (${error}).`));
+      res.end(page("Authorisation denied", "You can close this tab and go back to the terminal.", "#b3392e"));
+      fail?.(new Error(`Authorisation denied (${error}).`));
       return;
     }
     if (!code || gotState !== state) {
       res.writeHead(400, { "Content-Type": "text/html; charset=utf-8" });
-      res.end(page("Retorno inv\xE1lido", "Recomece com `origem connect`.", "#b3392e"));
-      fail?.(new Error("Retorno do navegador inv\xE1lido (state n\xE3o confere)."));
+      res.end(page("Invalid callback", "Start again with `origem connect`.", "#b3392e"));
+      fail?.(new Error("Invalid callback from the browser (state mismatch)."));
       return;
     }
     res.writeHead(200, { "Content-Type": "text/html; charset=utf-8" });
-    res.end(page("Conectado", "Pode fechar esta aba \u2014 o resto acontece no terminal.", "#2540d8"));
+    res.end(page("Connected", "You can close this tab \u2014 the rest happens in the terminal.", "#2540d8"));
     settle?.({ code });
   });
   await new Promise((resolve, reject) => {
@@ -1537,7 +1537,7 @@ async function startCallbackServer(state) {
     server.listen(0, "127.0.0.1", resolve);
   });
   const timer = setTimeout(() => {
-    fail?.(new Error("Tempo esgotado esperando a autoriza\xE7\xE3o no navegador (5 min)."));
+    fail?.(new Error("Timed out waiting for authorisation in the browser (5 min)."));
   }, CALLBACK_TIMEOUT_MS);
   timer.unref?.();
   return {
@@ -1576,10 +1576,10 @@ async function registerClient(endpoint, redirectUri) {
     signal: AbortSignal.timeout(15e3)
   });
   if (!res.ok) {
-    throw new Error(`N\xE3o consegui registrar o cliente OAuth (HTTP ${res.status}).`);
+    throw new Error(`Could not register the OAuth client (HTTP ${res.status}).`);
   }
   const data = await res.json();
-  if (!data.client_id) throw new Error("Registro OAuth devolveu resposta sem client_id.");
+  if (!data.client_id) throw new Error("OAuth registration returned no client_id.");
   return data;
 }
 async function exchangeCode(endpoint, input) {
@@ -1598,12 +1598,12 @@ async function exchangeCode(endpoint, input) {
   const data = await res.json().catch(() => ({}));
   if (!res.ok || !data.access_token) {
     throw new Error(
-      `Troca do c\xF3digo falhou (HTTP ${res.status}): ${data.error_description || data.error || "resposta sem access_token"}`
+      `Code exchange failed (HTTP ${res.status}): ${data.error_description || data.error || "response had no access_token"}`
     );
   }
   if (!(data.scope ?? "").split(/\s+/).includes("write")) {
     warn(
-      "O token veio sem escopo de escrita \u2014 a sess\xE3o n\xE3o vai conseguir reportar turnos. Refa\xE7a o connect e confirme a permiss\xE3o na tela de autoriza\xE7\xE3o."
+      "The token came back without write scope \u2014 the session will not be able to report turns. Run connect again and confirm the permission on the authorisation screen."
     );
   }
   return data.access_token;
@@ -1626,10 +1626,13 @@ async function runConnect(opts) {
     authorizeUrl.searchParams.set("code_challenge_method", "S256");
     authorizeUrl.searchParams.set("state", state);
     authorizeUrl.searchParams.set("scope", "read write");
-    info(`${color.cyan("\u2192")} abrindo o navegador para autorizar\u2026  ${color.dim(redirectUri)}`);
-    info(color.dim(`   se nada abrir, cole no navegador:
+    info(`${color.cyan("\u2192")} opening your browser to authorise\u2026`);
+    info(color.dim(`   if nothing opens, paste this in your browser:
    ${authorizeUrl.toString()}`));
     openBrowser(authorizeUrl.toString());
+    info(
+      color.bold("\n   Waiting for you to authorise. Keep this terminal open.") + color.dim("\n   It is not frozen \u2014 it is listening on 127.0.0.1 for the browser to come back.\n")
+    );
     const { code } = await server.waitForCode;
     token = await exchangeCode(endpoints.token, {
       code,
@@ -1641,11 +1644,11 @@ async function runConnect(opts) {
     server.close();
   }
   saveConfig({ token, apiUrl });
-  ok("autorizado \u2014 credencial gravada em ~/.origem/config.json (0600)");
+  ok("authorised \u2014 credential stored in ~/.origem/config.json (0600)");
   const brain = await fetchBrain(apiUrl, token);
   brain.__apiUrl = apiUrl;
   info(
-    `${color.cyan("\u2192")} harness ${color.bold(brain.brain?.name ?? "(sem nome)")} \u2014 ${brain.cards?.length ?? 0} pe\xE7as`
+    `${color.cyan("\u2192")} harness ${color.bold(brain.brain?.name ?? "(unnamed)")} \u2014 ${brain.cards?.length ?? 0} pieces`
   );
   await runApply({
     brain,
@@ -1656,7 +1659,7 @@ async function runConnect(opts) {
   });
   installOrigemSkill(process.cwd(), readLock(process.cwd()));
   if (opts.noHooks) {
-    info(color.dim("hooks pulados (--no-hooks): a sess\xE3o n\xE3o vai reportar turnos ao Origem."));
+    info(color.dim("hooks skipped (--no-hooks): the session will not report turns to Origem."));
   } else {
     info("");
     await hookInstall({
@@ -1669,8 +1672,8 @@ async function runConnect(opts) {
     });
   }
   info("");
-  ok(color.bold("ligado."));
-  info(color.dim("rode `origem connect` de novo a qualquer momento para sincronizar."));
+  ok(color.bold("connected."));
+  info(color.dim("run `origem connect` again any time to sync."));
 }
 
 // src/propose.ts
@@ -1690,14 +1693,14 @@ var PROPOSABLE = [
 ];
 async function runPropose(opts) {
   if (!PROPOSABLE.includes(opts.type)) {
-    throw new Error(`--type inv\xE1lido: ${opts.type}. Use um de: ${PROPOSABLE.join(", ")}`);
+    throw new Error(`Invalid --type: ${opts.type}. Use one of: ${PROPOSABLE.join(", ")}`);
   }
   if (!opts.rationale?.trim()) {
-    throw new Error("--why \xE9 obrigat\xF3rio: diga por que est\xE1 propondo (\xE9 o que a pessoa l\xEA pra decidir).");
+    throw new Error("--why is required: say why you are proposing it \u2014 that is what the reviewer reads.");
   }
   const content = opts.file ? readFileSync6(opts.file, "utf8") : opts.content ?? "";
   if (!content.trim()) {
-    throw new Error("Conte\xFAdo vazio. Passe --content <texto> ou --file <caminho>.");
+    throw new Error("Empty content. Pass --content <text> or --file <path>.");
   }
   const base = opts.apiUrl.replace(/\/$/, "");
   const res = await fetch(`${base}/propose?k=${encodeURIComponent(opts.key)}`, {
@@ -1714,28 +1717,30 @@ async function runPropose(opts) {
     signal: AbortSignal.timeout(15e3)
   });
   const data = await res.json().catch(() => ({}));
-  if (res.status === 403) throw new Error("Token sem escopo de escrita \u2014 refa\xE7a o `origem connect`.");
-  if (res.status === 429) throw new Error(data.error ?? "Rate limit ou fila de propostas cheia.");
+  if (res.status === 403) throw new Error("Token has no write scope \u2014 run `origem connect` again.");
+  if (res.status === 429) throw new Error(data.error ?? "Rate limited, or the proposal queue is full.");
   if (!res.ok || !data.proposalId) {
-    throw new Error(data.error ?? `Falha ao propor (HTTP ${res.status}).`);
+    throw new Error(data.error ?? `Failed to propose (HTTP ${res.status}).`);
   }
-  ok(`proposta enviada: ${color.bold(opts.title)}`);
-  info(color.dim("Ela fica pendente at\xE9 ser aceita no Origem \u2014 nada foi escrito no harness."));
+  ok(`proposal sent: ${color.bold(opts.title)}`);
+  info(color.dim("It stays pending until accepted in Origem \u2014 nothing was written to the harness."));
 }
 
 // src/spec.ts
 var STAGES = ["requisito", "design", "implementacao", "verificacao"];
 async function runSpec(opts) {
   const base = opts.apiUrl.replace(/\/$/, "");
-  const res = await fetch(`${base}/specs?k=${encodeURIComponent(opts.key)}`, {
-    signal: AbortSignal.timeout(15e3)
-  });
+  const q = `?k=${encodeURIComponent(opts.key)}`;
+  let res = await fetch(`${base}/api/specs${q}`, { signal: AbortSignal.timeout(15e3) });
+  if (res.status === 404) {
+    res = await fetch(`${base}/specsFeed${q}`, { signal: AbortSignal.timeout(15e3) });
+  }
   const data = await res.json().catch(() => ({}));
-  if (res.status === 401) throw new Error("Token inv\xE1lido \u2014 refa\xE7a o `origem connect`.");
-  if (!res.ok) throw new Error(data.error ?? `Falha ao ler os specs (HTTP ${res.status}).`);
+  if (res.status === 401) throw new Error("Invalid token \u2014 run `origem connect` again.");
+  if (!res.ok) throw new Error(data.error ?? `Failed to read the specs (HTTP ${res.status}).`);
   const specs = data.specs ?? [];
   if (specs.length === 0) {
-    ok("nenhum spec aberto \u2014 o trabalho desta sess\xE3o \xE9 avulso.");
+    ok("no open spec \u2014 this session is standalone work.");
     return;
   }
   for (const s of specs) {
@@ -1754,7 +1759,7 @@ ${color.bold(s.title)}  ${color.dim(`(${s.id})`)}`);
   info(
     color.dim(
       `
-${specs.length} spec(s) aberto(s). Ao concluir um est\xE1gio, reporte com \`origem hook stop\` (o hook j\xE1 faz isso) \u2014 o board avan\xE7a sozinho.`
+${specs.length} open spec(s). When you close a stage, it is reported by \`origem hook stop\` (the hook does it) \u2014 the board advances on its own.`
     )
   );
 }
@@ -1887,15 +1892,15 @@ function detectDrift(brain, repo) {
     if (declared.has(name)) continue;
     findings.push({
       severity: "critical",
-      message: `O harness manda rodar "${name}", que n\xE3o existe no projeto.`,
-      detail: `Dispon\xEDveis: ${[...declared].slice(0, 12).join(", ") || "(nenhum)"}`
+      message: `The harness tells you to run "${name}", which does not exist in this project.`,
+      detail: `Available: ${[...declared].slice(0, 12).join(", ") || "(none)"}`
     });
   }
   const testScript = repo.scripts.find((s) => /^(test|tests|check|verify)$/.test(s.name));
   if (testScript && !/\btest/.test(text)) {
     findings.push({
       severity: "critical",
-      message: "O projeto tem comando de teste e o harness n\xE3o menciona nenhum.",
+      message: "The project has a test command and the harness mentions none.",
       detail: `${testScript.from}: ${testScript.name} \u2192 ${testScript.command}`
     });
   }
@@ -1905,24 +1910,24 @@ function detectDrift(brain, repo) {
     if (wrong.length > 0 && !new RegExp(`\\b${repo.packageManager}\\b`).test(text)) {
       findings.push({
         severity: "warning",
-        message: `O harness usa ${wrong.join("/")}, mas o lockfile \xE9 de ${repo.packageManager}.`,
-        detail: "Rodar o gerenciador errado reescreve o lock e quebra o CI."
+        message: `The harness uses ${wrong.join("/")}, but the lockfile is ${repo.packageManager}.`,
+        detail: "Running the wrong package manager rewrites the lock and breaks CI."
       });
     }
   }
   if (repo.hasIac && !/\b(nunca|never|terraform|aprova|confirm)/.test(text)) {
     findings.push({
       severity: "warning",
-      message: "O reposit\xF3rio tem infraestrutura como c\xF3digo e o harness n\xE3o declara limites.",
-      detail: "Um `apply` sem gate \xE9 a diferen\xE7a entre um erro e um incidente."
+      message: "This repo has infrastructure as code and the harness declares no boundaries.",
+      detail: "An ungated `apply` is the difference between a mistake and an incident."
     });
   }
   for (const lang of repo.languages.slice(0, 3)) {
     if (!text.includes(lang)) {
       findings.push({
         severity: "warning",
-        message: `O projeto \xE9 ${lang} e o harness n\xE3o menciona a linguagem.`,
-        detail: "Sem isso, conven\xE7\xF5es de estilo e ferramentas ficam por conta do palpite."
+        message: `This project is ${lang} and the harness never mentions the language.`,
+        detail: "Without that, style conventions and tooling are left to guesswork."
       });
       break;
     }
@@ -1933,18 +1938,18 @@ async function runDoctor(opts) {
   const brain = await fetchBrain(opts.apiUrl, opts.key);
   const repo = readRepo(process.cwd());
   info(
-    `${color.bold(repo.name)} \u2014 ${repo.languages.join(", ") || "linguagem indefinida"}${repo.packageManager ? ` \xB7 ${repo.packageManager}` : ""} \xB7 ${repo.scripts.length} comando(s)`
+    `${color.bold(repo.name)} \u2014 ${repo.languages.join(", ") || "unknown language"}${repo.packageManager ? ` \xB7 ${repo.packageManager}` : ""} \xB7 ${repo.scripts.length} command(s)`
   );
-  info(color.dim(`harness: ${brain.brain?.name ?? "?"} \u2014 ${brain.cards?.length ?? 0} pe\xE7as
+  info(color.dim(`harness: ${brain.brain?.name ?? "?"} \u2014 ${brain.cards?.length ?? 0} pieces
 `));
   const findings = detectDrift(brain, repo);
   if (findings.length === 0) {
-    ok("nenhum drift entre o harness e o reposit\xF3rio.");
+    ok("no drift between the harness and this repository.");
     return;
   }
   for (const f of findings) {
     if (f.severity === "critical") {
-      console.error(`${color.red("\u2717 cr\xEDtico")}  ${f.message}`);
+      console.error(`${color.red("\u2717 critical")}  ${f.message}`);
     } else {
       warn(f.message);
     }
@@ -1953,7 +1958,7 @@ async function runDoctor(opts) {
   info(
     color.dim(
       `
-${findings.length} achado(s). Corrija no Origem (a mudan\xE7a vale nas pr\xF3ximas sess\xF5es) ou proponha com \`origem propose\`.`
+${findings.length} finding(s). Fix it in Origem (the change applies to every future session) or send it with \`origem propose\`.`
     )
   );
 }
@@ -1968,42 +1973,42 @@ function buildEntries(repo, commits) {
   const identity = [
     `# ${repo.name}`,
     "",
-    repo.languages.length ? `Projeto em ${repo.languages.join(", ")}.` : "",
-    repo.packageManager ? `Gerenciador de pacotes: **${repo.packageManager}** \u2014 use este, n\xE3o outro.` : "",
+    repo.languages.length ? `A ${repo.languages.join(", ")} project.` : "",
+    repo.packageManager ? `Package manager: **${repo.packageManager}** \u2014 use this one, not another.` : "",
     "",
-    "## Comandos",
+    "## Commands",
     ""
   ];
   const cmd = (label, s) => s ? `- **${label}:** \`${s.from === "Makefile" ? s.command : `${pm} run ${s.name}`}\`` : "";
-  identity.push(cmd("build", build), cmd("testes", test), cmd("dev", dev));
+  identity.push(cmd("build", build), cmd("tests", test), cmd("dev", dev));
   const others = repo.scripts.filter((s) => ![build, test, dev].includes(s)).slice(0, 8).map((s) => `- \`${s.from === "Makefile" ? s.command : `${pm} run ${s.name}`}\` \u2014 ${s.command}`);
-  if (others.length) identity.push("", "### Outros", "", ...others);
+  if (others.length) identity.push("", "### Other", "", ...others);
   entries.push({
     type: "instruction",
-    title: `${repo.name} \u2014 vis\xE3o e comandos`,
+    title: `${repo.name} \u2014 overview and commands`,
     content: identity.filter(Boolean).join("\n"),
     tags: ["bootstrap"]
   });
   const boundaries = [];
   if (repo.hasIac) {
     boundaries.push(
-      "- Nunca rode `terraform apply` sem mostrar o plan e obter confirma\xE7\xE3o.",
-      "- Sempre pe\xE7a confirma\xE7\xE3o antes de qualquer opera\xE7\xE3o que destrua recurso."
+      "- Never run `terraform apply` without showing the plan and getting confirmation.",
+      "- Always ask for confirmation before any operation that destroys a resource."
     );
   }
   if (repo.packageManager) {
     boundaries.push(
-      `- Nunca rode outro gerenciador que n\xE3o \`${repo.packageManager}\` \u2014 reescreve o lockfile e quebra o CI.`
+      `- Never run a package manager other than \`${repo.packageManager}\` \u2014 it rewrites the lockfile and breaks CI.`
     );
   }
   if (repo.hasCi) {
-    boundaries.push("- Perguntar antes de alterar workflows em `.github/workflows/`.");
+    boundaries.push("- Ask before changing workflows under `.github/workflows/`.");
   }
   if (boundaries.length) {
     entries.push({
       type: "boundary",
-      title: "Limites do projeto",
-      content: ["Sempre / Perguntar antes / Nunca:", "", ...boundaries].join("\n"),
+      title: "Project boundaries",
+      content: ["Always / Ask first / Never:", "", ...boundaries].join("\n"),
       tags: ["bootstrap"]
     });
   }
@@ -2011,11 +2016,11 @@ function buildEntries(repo, commits) {
   if (commits.length >= 10 && conventional.length / commits.length > 0.6) {
     entries.push({
       type: "rule",
-      title: "Conven\xE7\xE3o de commits",
+      title: "Commit convention",
       content: [
-        `Este reposit\xF3rio usa Conventional Commits \u2014 ${conventional.length} dos ${commits.length} commits recentes seguem o padr\xE3o.`,
+        `This repository uses Conventional Commits \u2014 ${conventional.length} of the last ${commits.length} commits follow it.`,
         "",
-        "Formato: `tipo(escopo): descri\xE7\xE3o`, ex.: `fix(auth): corrige refresh do token`."
+        "Format: `type(scope): description`, e.g. `fix(auth): correct token refresh`."
       ].join("\n"),
       tags: ["bootstrap"]
     });
@@ -2036,23 +2041,23 @@ async function runBootstrap(opts) {
   const commits = recentCommitSubjects(baseDir);
   const entries = buildEntries(repo, commits);
   info(
-    `${color.bold(repo.name)} \u2014 ${repo.languages.join(", ") || "linguagem indefinida"}${repo.packageManager ? ` \xB7 ${repo.packageManager}` : ""}`
+    `${color.bold(repo.name)} \u2014 ${repo.languages.join(", ") || "unknown language"}${repo.packageManager ? ` \xB7 ${repo.packageManager}` : ""}`
   );
-  info(`${repo.scripts.length} comando(s) \xB7 ${repo.docs.length} doc(s) \xB7 ${commits.length} commits lidos
+  info(`${repo.scripts.length} command(s) \xB7 ${repo.docs.length} doc(s) \xB7 ${commits.length} commits read
 `);
-  info(color.bold("Vai propor:"));
+  info(color.bold("Will propose:"));
   for (const e of entries) {
     const preview = e.content.split("\n").find((l) => l.trim() && !l.startsWith("#")) ?? "";
     info(`  ${color.cyan(e.type.padEnd(12))} ${e.title}`);
     info(color.dim(`               ${preview.slice(0, 76)}`));
   }
   if (opts.dryRun) {
-    info(color.dim("\n--dry-run: nada foi enviado."));
+    info(color.dim("\n--dry-run: nothing was sent."));
     return;
   }
   if (!opts.yes && !await confirm(`
-Enviar ${entries.length} proposta(s)?`)) {
-    warn("Nada foi enviado.");
+Send ${entries.length} proposal(s)?`)) {
+    warn("Nothing was sent.");
     return;
   }
   const base = opts.apiUrl.replace(/\/$/, "");
@@ -2063,73 +2068,74 @@ Enviar ${entries.length} proposta(s)?`)) {
     signal: AbortSignal.timeout(3e4)
   });
   const data = await res.json().catch(() => ({}));
-  if (res.status === 403) throw new Error("Token sem escopo de escrita \u2014 refa\xE7a o `origem connect`.");
-  if (!res.ok) throw new Error(data.error ?? `Falha ao propor (HTTP ${res.status}).`);
-  ok(`${data.proposed} pe\xE7a(s) propostas como um lote.`);
-  info(color.dim("Aceite ou descarte o lote no Origem \u2014 nada foi escrito no harness ainda."));
+  if (res.status === 403) throw new Error("Token has no write scope \u2014 run `origem connect` again.");
+  if (!res.ok) throw new Error(data.error ?? `Failed to propose (HTTP ${res.status}).`);
+  ok(`${data.proposed} piece(s) proposed as one batch.`);
+  info(color.dim("Accept or discard the batch in Origem \u2014 nothing was written to the harness yet."));
 }
 
 // src/index.ts
-var HELP = `${color.bold("origem")} \u2014 materializa um Brain do Origem na config da sua IA.
+var HELP = `${color.bold("origem")} \u2014 connects a repository to your Origem harness.
 
-${color.bold("Uso:")}
-  origem connect  [op\xE7\xF5es]     Conecta este reposit\xF3rio a um harness (autoriza no
-                               navegador, aplica em disco, instala skill + hooks).
-                               Rodar de novo sincroniza.
-  origem spec                  Mostra os specs abertos e em que est\xE1gio est\xE3o
-  origem doctor                Compara o harness com este reposit\xF3rio (drift)
-  origem bootstrap             L\xEA o reposit\xF3rio e prop\xF5e um harness inteiro
-  origem propose  [op\xE7\xF5es]     Sugere uma mudan\xE7a no harness (fica pendente at\xE9
-                               ser aceita no site; n\xE3o escreve nada)
-  origem apply    [op\xE7\xF5es]     Puxa o Brain e escreve os arquivos de config
-  origem status   [op\xE7\xF5es]     Mostra o que mudaria e se h\xE1 edi\xE7\xF5es locais
-  origem remove   [op\xE7\xF5es]     Reverte tudo que o Origem escreveu (usa o lock)
-  origem login    --key <t>    Grava token + API em ~/.origem/config.json (0600)
-  origem logout                Remove as credenciais gravadas
-  origem watch    [op\xE7\xF5es]     Plant\xE3o local: executa comandos da fila mesmo sem sess\xE3o aberta
-  origem hook install          Instala os hooks que ligam a sess\xE3o ao Origem
-  origem hook start            (uso interno) marca o in\xEDcio do turno
-  origem hook stop             (uso interno) reporta o turno e busca comando
-  origem help                  Esta ajuda
+${color.bold("Usage:")}
+  origem connect  [options]    Connect this repo to a harness (authorises in the
+                               browser, writes the files, installs skill + hooks).
+                               Run it again to sync.
+  origem spec                  Open specs and the stage each one is in
+  origem doctor                Compare the harness against this repo (drift)
+  origem bootstrap             Read the repo and propose a whole harness
+  origem propose  [options]    Suggest one change (stays pending until accepted
+                               on the site; writes nothing)
+  origem apply    [options]    Pull the harness and write the config files
+  origem status   [options]    What would change, and whether you edited a block
+  origem remove   [options]    Revert everything Origem wrote (uses the lock)
+  origem login    --key <t>    Store token + API in ~/.origem/config.json (0600)
+  origem logout                Remove the stored credentials
+  origem watch    [options]    Local runner: executes queued commands with no session open
+  origem hook install          Install the hooks that link the session to Origem
+  origem hook start            (internal) marks the start of a turn
+  origem hook stop             (internal) reports the turn and fetches a command
+  origem help                  This help
 
-${color.bold("Op\xE7\xF5es:")}
-  -k, --key <token>     Token de capacidade (ou env ORIGEM_TOKEN)
-      --api-url <url>   Base da API (ou env ORIGEM_API_URL)
-      --scope <s>       project (padr\xE3o) | user (~/.claude)
-      --dry-run         S\xF3 mostra o plano; n\xE3o escreve
-  -y, --yes             Aplica config privilegiada sem perguntar
-      --targets a,b     Alvos espec\xEDficos (ex: claude,claude-settings,mcp)
-      --all             Todos os alvos (AGENTS.md, Cursor, Gemini, Copilot\u2026)
-      --finish          (hook stop) fecha o run em vez de s\xF3 reportar o turno
-      --quiet           (hook stop) n\xE3o escreve erro no stderr
-      --bin <cmd>       (hook install) comando gravado no settings.json
-      --local           (hook install) grava em .claude/settings.local.json
-      --once            (watch) uma passada s\xF3 e sai (bom pra cron)
-      --no-hooks        (connect) n\xE3o instala os hooks de sess\xE3o
-      --type <t>        (propose) compartimento: rule, boundary, memory, skill\u2026
-      --title <t>       (propose) t\xEDtulo da pe\xE7a
-      --content <t>     (propose) conte\xFAdo, ou use --file <caminho>
-      --why <t>         (propose) por que est\xE1 propondo \u2014 obrigat\xF3rio
-      --card <id>       (propose) altera uma pe\xE7a existente em vez de criar
-      --interval <s>    (watch) segundos entre consultas \xE0 fila (padr\xE3o 5)
-      --claude <path>   (watch) bin\xE1rio do Claude Code (padr\xE3o: descobre sozinho)
-      --cwd <dir>       (watch) diret\xF3rio onde executar (padr\xE3o: o atual)
-      --permission-mode (watch) repassado ao Claude Code
+${color.bold("Options:")}
+  -k, --key <token>     Capability token (or env ORIGEM_TOKEN)
+      --api-url <url>   API base URL (or env ORIGEM_API_URL)
+      --scope <s>       project (default) | user (~/.claude)
+      --dry-run         Print the plan only; write nothing
+  -y, --yes             Apply privileged config without asking
+      --targets a,b     Specific targets (e.g. claude,claude-settings,mcp)
+      --all             Every target (AGENTS.md, Cursor, Gemini, Copilot\u2026)
+      --finish          (hook stop) close the run instead of just reporting
+      --quiet           (hook stop) do not write errors to stderr
+      --bin <cmd>       (hook install) command stored in settings.json
+      --local           (hook install) write to .claude/settings.local.json
+      --once            (watch) a single pass, then exit (good for cron)
+      --no-hooks        (connect) do not install the session hooks
+      --type <t>        (propose) compartment: rule, boundary, memory, skill\u2026
+      --title <t>       (propose) title of the piece
+      --content <t>     (propose) content, or use --file <path>
+      --why <t>         (propose) why you are proposing it \u2014 required
+      --card <id>       (propose) change an existing piece instead of creating
+      --interval <s>    (watch) seconds between queue polls (default 5)
+      --claude <path>   (watch) Claude Code binary (default: auto-detect)
+      --cwd <dir>       (watch) directory to run in (default: current)
+      --permission-mode (watch) passed through to Claude Code
 
-${color.bold("Alvos padr\xE3o (Claude Code):")} ${CLAUDE_TARGETS.join(", ")}
-${color.bold("Todos:")} ${ALL_TARGETS.join(", ")}
+${color.bold("Default targets (Claude Code):")} ${CLAUDE_TARGETS.join(", ")}
+${color.bold("All:")} ${ALL_TARGETS.join(", ")}
 
-${color.bold("Come\xE7ando:")} \`origem connect\` \xE9 o \xFAnico comando necess\xE1rio \u2014 ele autoriza no
-navegador (OAuth + PKCE, sem token colado), grava a credencial, materializa o harness
-e instala a skill. \`login\`/\`apply\`/\`hook install\` continuam dispon\xEDveis pra quem
-precisa dos passos separados.
+${color.bold("Getting started:")} \`origem connect\` is the only command you need \u2014 it
+authorises in the browser (OAuth + PKCE, no token to paste), stores the credential,
+writes the harness to disk and installs the skill. \`login\`/\`apply\`/\`hook install\`
+are still there for whoever needs the steps apart.
 
-${color.bold("Controle pelo site:")} com os hooks instalados, cada turno \xE9 reportado ao
-Origem e a resposta pode trazer o pr\xF3ximo prompt da fila \u2014 a sess\xE3o continua sozinha.
-O que trafega \xE9 PROMPT, nunca shell: quem decide o que roda \xE9 a permiss\xE3o do Claude.
+${color.bold("Driving from the site:")} with the hooks installed, every turn is reported to
+Origem and the reply may carry the next prompt from the queue \u2014 the session continues on
+its own. What travels back is a PROMPT, never shell: what runs is still decided by
+Claude Code's permission layer.
 
-${color.bold("Confian\xE7a:")} arquivos privilegiados (settings.json com hooks/env, .mcp.json
-com command) exigem confirma\xE7\xE3o. Defina ORIGEM_SIGNING_SECRET pra exigir assinatura.
+${color.bold("Trust:")} privileged files (settings.json with hooks/env, .mcp.json with
+command) require confirmation. Set ORIGEM_SIGNING_SECRET to require a signed payload.
 `;
 function parseArgs(argv) {
   const cmd = argv[0] && !argv[0].startsWith("-") ? argv[0] : "help";
@@ -2162,7 +2168,7 @@ function parseArgs(argv) {
         break;
       case "--scope": {
         const s = rest[++i];
-        if (s !== "project" && s !== "user") throw new Error(`--scope inv\xE1lido: ${s}`);
+        if (s !== "project" && s !== "user") throw new Error(`Invalid --scope: ${s}`);
         flags.scope = s;
         break;
       }
@@ -2193,7 +2199,7 @@ function parseArgs(argv) {
         break;
       case "--interval": {
         const n = Number(rest[++i]);
-        if (!Number.isFinite(n) || n < 2) throw new Error("--interval deve ser >= 2 (segundos)");
+        if (!Number.isFinite(n) || n < 2) throw new Error("--interval must be >= 2 (seconds)");
         flags.interval = n;
         break;
       }
@@ -2234,7 +2240,7 @@ function parseArgs(argv) {
         flags.permissionMode = rest[++i];
         break;
       default:
-        throw new Error(`Op\xE7\xE3o desconhecida: ${a}`);
+        throw new Error(`Unknown option: ${a}`);
     }
   }
   return { cmd, flags };
@@ -2262,7 +2268,7 @@ async function main() {
     }
     case "propose": {
       if (!flags.type || !flags.title) {
-        throw new Error("Use: origem propose --type <compartimento> --title <t\xEDtulo> --content <texto> --why <motivo>");
+        throw new Error("Usage: origem propose --type <compartment> --title <title> --content <text> --why <reason>");
       }
       await runPropose({
         apiUrl: resolveApiUrl(flags.apiUrl),
@@ -2355,7 +2361,7 @@ async function main() {
             quiet: flags.quiet
           });
         } else {
-          err("Use: origem hook install | origem hook start | origem hook stop");
+          err("Usage: origem hook install | origem hook start | origem hook stop");
           process.exitCode = 1;
         }
       } catch (e) {
@@ -2365,7 +2371,7 @@ async function main() {
       break;
     }
     default:
-      err(`Comando desconhecido: ${cmd}`);
+      err(`Unknown command: ${cmd}`);
       info(HELP);
       process.exitCode = 1;
   }