shakers-cli-beta 0.8.0-beta.0

package/src/shakers-wordmark.js

@@ -0,0 +1,17 @@
+'use strict';
+
+// Shakers hand-drawn "shakers" WORDMARK, inlined VERBATIM from the design asset shakers-hub-frontend/apps/hub/public/images/shakers-text-logo.svg (viewBox 0 0 87 18, 7 glyph <path>s).
+
+const WORDMARK_VIEWBOX = { w: 87, h: 18 };
+
+const WORDMARK_PATHS = [
+  'M19.2845 8.74573C19.2845 8.74573 16.556 10.0876 15.7698 10.5041C15.7236 11.4295 15.6311 12.355 15.5848 13.2804C15.5386 14.3447 15.4924 14.9462 15.4461 16.0105C15.4461 16.2419 15.4461 16.4732 15.3999 16.6583C15.2611 17.445 14.8449 17.9077 14.2437 17.9077C13.55 17.9077 13.0876 17.3987 13.0876 16.5658C13.0876 15.1776 13.1801 14.2059 13.2263 12.8177C13.2263 12.4475 13.2263 11.8923 13.2263 11.4758C13.2263 11.4758 12.8101 11.6609 12.5326 11.7072C12.0701 11.6609 11.7002 11.4295 11.5614 10.9668C11.4227 10.5041 11.5614 10.0876 11.9314 9.76372C12.0239 9.71745 13.5963 8.74573 13.5963 8.74573C13.6425 6.80228 13.735 4.07221 13.8737 2.17503C13.92 1.80485 13.9662 1.43467 14.105 1.11077C14.2437 0.694314 14.6137 0.462951 15.0761 0.509223C15.5386 0.509223 15.8623 0.786858 15.9548 1.20331C16.0473 1.57349 16.0935 1.98994 16.0935 2.4064C16.0473 3.93339 16.0011 4.95138 15.9548 6.47837C15.9548 6.84856 15.9548 7.21873 15.9548 7.774C17.7122 6.9411 17.8971 6.70974 19.562 5.92311C19.6545 4.53493 19.7007 3.65575 19.7932 2.26758C19.8395 1.80485 19.8857 1.29586 19.9782 0.833131C20.117 0.324133 20.4869 0.000226092 21.0419 0.0464986C21.5968 0.0927711 21.9205 0.416678 22.013 0.925676C22.0593 1.34213 22.0593 1.71231 22.0593 2.12876C22.0593 3.05421 21.9668 3.7483 21.9668 4.81257C22.2905 4.72002 22.7067 4.30357 23.0304 4.2573C23.6779 4.07221 24.2791 4.34984 24.5103 4.90511C24.7416 5.41411 24.5566 5.96938 24.0016 6.33956C23.5854 6.52465 21.7356 7.68146 21.7356 7.68146C21.6893 10.6892 21.5968 12.8177 21.5043 15.8717C21.5043 16.1493 21.5043 16.4732 21.4581 16.7509C21.3193 17.445 20.8569 17.8614 20.2557 17.8151C19.6545 17.7689 19.2383 17.3524 19.1458 16.6583C19.0995 16.3807 19.192 12.4013 19.2845 9.76372C19.2845 9.39354 19.2845 9.20845 19.2845 8.74573Z',
+  'M64.097 4.67388C63.542 4.72016 63.1258 4.76643 62.7558 4.76643C61.9697 4.76643 61.5072 4.48879 61.4147 3.88725C61.3222 3.28571 61.6459 2.82299 62.3859 2.59162C62.9408 2.40653 63.542 2.31399 64.097 2.22144C65.9931 1.99008 67.8429 1.89754 69.6927 2.45281C70.3402 2.6379 70.9414 2.91553 71.4963 3.28571C72.8837 4.21116 73.1612 5.73815 72.2825 7.1726C71.7738 8.0055 70.9876 8.60705 70.1552 9.06977C69.6002 9.39368 69.0453 9.67131 68.3978 9.99522C68.8603 10.4117 73.1149 13.5582 73.4849 14.0209C73.8549 14.4837 73.8086 15.1315 73.4386 15.5479C73.0687 15.9644 72.56 16.0569 72.005 15.8256C71.6813 15.6405 71.4038 15.4091 71.0801 15.1777C69.8315 14.206 67.6579 12.6328 66.3168 11.5685C66.2705 12.0312 65.9931 15.0389 65.9468 16.1032C65.9468 16.3808 65.9468 16.7047 65.8543 16.9824C65.7156 17.5376 65.2069 17.8615 64.6982 17.8153C64.1432 17.769 63.7733 17.4914 63.6345 16.9824C63.542 16.5659 63.542 16.1032 63.542 15.6867C63.727 12.6328 64.097 5.18288 64.097 4.67388ZM66.4555 8.14432C67.7504 7.63532 68.9528 7.1726 69.8777 6.24715C70.2477 5.87697 70.1552 5.27543 69.6927 5.04406C68.6753 4.58134 67.6117 4.53507 66.548 4.44252L66.4555 8.14432Z',
+  'M32.2335 12.8178C31.9097 13.1879 31.6785 13.4656 31.4473 13.6969C30.6149 14.4836 29.8287 15.3627 28.95 16.0568C28.4413 16.4733 27.7939 16.7047 27.1464 16.8897C25.7128 17.2599 24.4641 16.427 24.2792 14.8538C24.1867 14.0208 24.2329 13.0954 24.4641 12.2625C25.3428 9.02342 27.1002 6.29334 29.6437 4.1648C30.2449 3.65581 30.9386 3.28563 31.6323 3.00799C33.5746 2.22136 35.1007 3.8409 35.1007 5.55298C35.0082 6.5247 34.7308 12.4939 34.6845 14.4373C34.6845 14.7612 34.6845 15.1314 34.592 15.4553C34.4533 16.0568 33.9446 16.4733 33.3896 16.427C32.8809 16.3807 32.4185 16.0106 32.326 15.409C32.2335 14.8538 32.2797 14.2985 32.2797 13.6969C32.2797 13.5118 32.2797 13.2342 32.2335 12.8178ZM26.9614 14.3448C29.6899 13.2805 32.6497 8.51442 32.3722 5.64552C32.3722 5.46043 32.1872 5.36789 32.0485 5.46043C29.6899 6.5247 26.684 11.337 26.684 14.1134C26.684 14.2522 26.8227 14.391 26.9614 14.3448Z',
+  'M40.4189 7.91296C41.9451 6.84869 43.2399 5.92324 44.5348 5.04406C44.8586 4.8127 45.1823 4.58134 45.5522 4.39625C46.2459 4.02607 46.8934 4.16489 47.2171 4.67388C47.5408 5.18288 47.4483 5.73815 46.8934 6.24715C46.5234 6.57106 46.1534 6.84869 45.7372 7.12633C44.3498 8.09805 42.9625 9.06977 41.4363 10.134C41.8063 10.3191 41.9913 10.5042 42.2688 10.5968C43.8874 11.3834 45.4598 12.1238 47.0784 12.8641C47.4483 13.0492 47.8183 13.2343 48.0958 13.5119C48.512 13.8821 48.5582 14.3448 48.327 14.8538C48.0958 15.3166 47.6333 15.5479 47.1246 15.4554C46.7546 15.4091 46.4309 15.224 46.1072 15.0852C44.5811 14.3448 43.055 13.6045 41.4826 12.9104C41.2051 12.7716 40.8814 12.6328 40.4652 12.4939C40.4189 12.8178 40.3727 13.0492 40.3727 13.2806C40.3727 14.3448 40.3264 14.9464 40.3264 16.0569C40.3264 16.3808 40.3264 16.7047 40.2802 17.0286C40.1415 17.6765 39.7252 18.0466 39.1703 18.0466C38.6153 18.0466 38.1529 17.6765 38.0141 17.0286C37.9679 16.7047 37.9679 16.3808 37.9679 16.0569C38.0141 10.643 38.1066 7.58905 38.1529 2.17517C38.1529 1.75872 38.1991 1.34227 38.2454 0.972085C38.3379 0.463088 38.7078 0.139181 39.2628 0.092908C39.7715 0.000363052 40.234 0.370543 40.4189 0.925813C40.5114 1.29599 40.5114 2.03635 40.5114 2.03635C40.5114 4.16489 40.4189 4.48879 40.3727 6.61733C40.3727 6.94124 40.3727 7.31142 40.4189 7.91296Z',
+  'M51.5643 9.20847C50.7781 8.88456 50.5468 8.09793 51.0093 7.35757C51.148 7.12621 51.3793 6.89485 51.6105 6.70976C53.8766 4.48868 55.4027 3.19305 57.6687 1.01824C57.9462 0.740604 58.2237 0.509241 58.5012 0.324151C59.0099 0.000243835 59.5648 0.0465163 59.9348 0.416696C60.3048 0.786876 60.351 1.34215 60.0273 1.85114C59.796 2.17505 59.5186 2.49896 59.2411 2.77659C57.6687 4.34986 56.8825 4.9514 55.3102 6.52467C55.079 6.75603 54.8015 7.03366 54.4315 7.45012C55.5877 7.68148 56.5126 7.91284 57.4837 8.1442C57.9462 8.23675 58.4087 8.32929 58.8711 8.46811C59.3798 8.60693 59.796 8.93084 59.8885 9.53238C59.981 10.0876 59.7036 10.5504 59.1024 10.828C57.9462 11.337 56.7901 11.7535 55.5877 12.2162C54.894 12.4938 54.154 12.7715 53.2754 13.1416C53.6453 13.373 56.1889 14.7149 57.345 15.3627C57.6225 15.5478 57.9462 15.6866 58.1774 15.918C58.6399 16.3344 58.7786 16.936 58.5012 17.3987C58.2237 17.8614 57.6687 18.0928 57.0675 17.9077C56.8363 17.8152 56.6051 17.7226 56.3738 17.5838C54.339 16.427 52.4429 15.5478 50.4081 14.3447C50.2694 14.2522 50.0844 14.1596 49.9456 14.0671C49.067 13.373 49.1132 12.355 50.1306 11.846C50.9168 11.4296 55.2177 9.9951 55.2177 9.9951C55.2177 9.9951 51.9342 9.39356 51.5643 9.20847Z',
+  'M83.0116 9.9949C82.0866 9.90236 81.4392 9.85608 80.7455 9.80981C79.7281 9.71727 78.7107 9.62472 77.6933 9.53218C77.4158 9.4859 77.1383 9.43963 76.8608 9.30081C75.566 8.79182 75.1497 7.49619 76.0284 6.2931C76.4446 5.69156 76.9533 5.18256 77.5083 4.71984C79.4044 3.1003 81.5779 2.12858 83.7977 1.20313C83.9827 1.11058 84.214 1.01804 84.4452 1.06431C84.7227 1.11058 85.0464 1.2494 85.1389 1.48076C85.2314 1.7584 85.2314 2.22112 85.0926 2.45248C84.8152 2.82266 84.4452 3.05403 84.0752 3.28539C83.0116 3.88693 81.9016 4.4422 80.8842 5.04374C79.9593 5.59901 79.0806 6.15428 78.2482 7.21855C78.8494 7.26482 79.3119 7.35737 79.7743 7.40364C81.4392 7.54246 83.1041 7.635 84.7689 7.77382C85.1389 7.82009 85.5088 7.86637 85.8326 8.00518C86.9425 8.37536 87.2199 9.43963 86.4338 10.3651C86.0175 10.8741 85.4626 11.3368 84.9076 11.707C83.7052 12.5399 82.4104 13.3265 81.208 14.2057C80.2368 14.8998 79.2656 15.5939 78.2945 16.288C77.9245 16.5193 77.5545 16.797 77.1383 16.9358C76.6296 17.1209 76.2134 16.8895 75.9359 16.4268C75.6584 15.9641 75.7047 15.5013 76.0284 15.0849C76.2596 14.8072 76.5834 14.5759 76.8608 14.3445C78.7107 13.0489 80.5605 11.7995 82.3641 10.5502C82.5029 10.4576 82.6416 10.3188 83.0116 9.9949Z',
+  'M3.56097 8.32919C4.53213 8.51428 5.22582 8.65309 5.96576 8.74564C6.79819 8.88446 7.63061 8.93073 8.50929 9.02327C9.20298 9.11582 9.80418 9.39345 10.0354 10.1338C10.2666 10.9204 9.89667 11.4757 9.34172 11.9384C9.06424 12.1698 8.74052 12.4012 8.46304 12.6325C6.38197 14.1132 4.3009 15.594 2.21983 17.0747C2.08109 17.1672 1.94236 17.306 1.75737 17.3986C1.24867 17.6762 0.693714 17.5837 0.323746 17.1672C-0.0462222 16.7508 -0.0924682 16.1955 0.231254 15.6865C0.462484 15.3163 0.786206 15.0387 1.10993 14.8073C2.63605 13.6968 4.16216 12.6325 5.87327 11.3832C5.36456 11.2444 5.04084 11.1981 4.71712 11.1055C3.83844 10.9204 2.95977 10.7816 2.12734 10.504C0.601222 9.94872 0.231254 8.60682 1.29491 7.31119C1.9886 6.47829 2.82103 5.73793 3.65346 5.04384C4.80961 4.16466 6.05825 3.37803 7.30689 2.5914C8.27806 1.94358 8.97175 1.98985 9.38796 2.63767C9.80418 3.28548 9.5267 3.9333 8.60178 4.62739C7.44563 5.46029 6.24323 6.24692 5.08708 7.07983C4.62462 7.40374 4.20841 7.77392 3.56097 8.32919Z',
+];
+
+module.exports = { WORDMARK_VIEWBOX, WORDMARK_PATHS };

package/src/share-card.js

@@ -0,0 +1,362 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+
+const { getCatalog } = require('./i18n');
+const { setupLevelForTier } = require('./tier-engine');
+const { renderDocument } = require('./report-theme');
+const { loadState, configDir, projectSlug, fileUrl } = require('./report-store');
+const { WORDMARK_VIEWBOX, WORDMARK_PATHS } = require('./shakers-wordmark');
+
+// LinkedIn shares render best at 1.91:1 (1200×627). Fixed so the browser-side
+// canvas export writes exactly these pixels.
+const CARD_W = 1200;
+const CARD_H = 627;
+
+// Brand palette (from shakers-design-system/design-spec/tokens.css).
+const BRAND = {
+  lime: '#d8e637',      // hero accent (tier, score arc, stat numbers)
+  dark: '#181B1A',      // card background
+  white: '#ffffff',
+  zinc300: '#d4d4d8',   // stat labels / technology names (light, secondary)
+  zinc400: '#a1a1aa',   // "/ 100", muted labels
+  zinc500: '#71717a',   // shakersworks.com, separators
+  teal500: '#0e7d69',   // teal-500 — accent stripe + eyebrow
+  teal700: '#08473c',   // teal-700 — band pill + score-ring track
+};
+
+// Font stack shared with the reports (Inter -> system fallback).
+const FONT_STACK =
+  "Inter, ui-sans-serif, system-ui, -apple-system, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif";
+
+function esc(s) {
+  return String(s == null ? '' : s).replace(/[&<>"']/g, (ch) => ({
+    '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;',
+  }[ch]));
+}
+
+function loadProjectFootprint(root, { load = loadState } = {}) {
+  const absRoot = path.resolve(root || process.cwd());
+  let state;
+  try {
+    state = load();
+  } catch {
+    return null;
+  }
+  const project = state && state.projects && state.projects[absRoot];
+  const fp = project && project.footprint;
+  const m = fp && fp.maturity;
+  if (!m || m.tierKey == null || typeof m.score !== 'number') return null;
+
+  // Derived signals from the persisted report (defensive: any missing piece
+  // reads as 0 / empty — an older stored report never crashes the card).
+  const report = (fp && fp.report) || {};
+  const counts = report.agentCounts || {};
+  const toolsDetected = Array.isArray(report.tools)
+    ? report.tools.filter((tl) => tl && tl.detected).length
+    : 0;
+  const mcpTotal = report.mcp && typeof report.mcp.total === 'number'
+    ? report.mcp.total
+    : (typeof counts.mcpServers === 'number' ? counts.mcpServers : 0);
+  const technologies = Array.isArray(report.technologies)
+    ? report.technologies.filter((s) => typeof s === 'string' && s.trim())
+    : [];
+
+  return {
+    root: absRoot,
+    tier: m.tier,
+    tierKey: m.tierKey,
+    score: m.score,
+    level: m.level,
+    levelKey: m.key,
+    // ADR-016: Setup Level for the card pill (replaces the 0-4 band). Prefer the
+    // persisted `setupLevel`; derive from the tier for older stored reports.
+    setupLevelKey: (m.setupLevel && m.setupLevel.key)
+      || (typeof m.tier === 'number' ? setupLevelForTier(m.tier).key : 'none'),
+    generatedAt: fp.generatedAt || null,
+    signals: {
+      toolsDetected,
+      mcpServers: mcpTotal,
+      agents: typeof counts.agents === 'number' ? counts.agents : 0,
+      skills: typeof counts.skills === 'number' ? counts.skills : 0,
+      commands: typeof counts.commands === 'number' ? counts.commands : 0,
+      hooks: typeof counts.hooks === 'number' ? counts.hooks : 0,
+      technologies,
+    },
+  };
+}
+
+// How many top technologies to name on the card (kept small — social card).
+const MAX_TECHNOLOGIES = 4;
+
+// Maps the raw footprint into the card's display model.
+function buildCardModel(fp) {
+  const en = getCatalog('en');
+  const tierKey = fp.tierKey;
+  const tierName = (en.tierNames && en.tierNames[tierKey]) || tierKey;
+  // ADR-016: Setup Level label for the pill (English-fixed like the tier name).
+  const setupKey = fp.setupLevelKey || 'none';
+  const bandName = (en.setupLevels && en.setupLevels[setupKey] && en.setupLevels[setupKey].label) || '';
+
+  const s = fp.signals || {};
+  const n = (v) => (typeof v === 'number' && isFinite(v) ? v : 0);
+  // Only stats with a value > 0 make the card — never a "0 skills" filler.
+  // Order is the reading order the label list implies (tools -> hooks).
+  const stats = [
+    { value: n(s.toolsDetected), label: 'AI tools' },
+    { value: n(s.mcpServers), label: 'MCP' },
+    { value: n(s.agents), label: 'agents' },
+    { value: n(s.skills), label: 'skills' },
+    { value: n(s.commands), label: 'commands' },
+    { value: n(s.hooks), label: 'hooks' },
+  ].filter((st) => st.value > 0);
+  const technologies = Array.isArray(s.technologies) ? s.technologies.slice(0, MAX_TECHNOLOGIES) : [];
+
+  return {
+    tierKey,
+    tierName,
+    bandName,
+    score: Math.max(0, Math.min(100, Math.round(fp.score))),
+    stats,
+    technologies,
+  };
+}
+
+// Suggested LinkedIn caption, built deterministically from the model. English.
+function buildSuggestedText(model) {
+  return (
+    `I just measured my AI tooling maturity with the Shakers AI Usage Evaluator: `
+    + `tier ${model.tierKey} (${model.tierName}), scoring ${model.score}/100. `
+    + `How do you work with AI? Measure yours at shakersworks.com `
+    + `#AI #DeveloperExperience #AITooling #Shakers`
+  );
+}
+
+// Builds the branded card as a SELF-CONTAINED SVG (1200×627).
+function renderCardSvg(model, { id = 'share-card-svg' } = {}) {
+  const { tierKey, tierName, bandName, score, stats, technologies } = model;
+
+  // Logo: the REAL hand-drawn "shakers" wordmark (87×18 asset), ~44px tall, top-left, in white.
+  const wordmarkScale = 44 / WORDMARK_VIEWBOX.h; // ≈ 2.44
+  const wordmark = WORDMARK_PATHS
+    .map((d) => `<path d="${d}" fill="${BRAND.white}"/>`)
+    .join('');
+
+  // Score donut ring (right). Deterministic geometry from the score.
+  const cx = 980;
+  const cy = 262;
+  const r = 118;
+  const circ = 2 * Math.PI * r;
+  const dashOffset = (circ * (1 - score / 100)).toFixed(2);
+
+  // Stats: a single LIGHT line — only signals with a value > 0 (buildCardModel
+  // already filtered zeros out). Number in lime, label muted, " · " separators.
+  const SEP = `<tspan fill="${BRAND.zinc500}">   ·   </tspan>`;
+  const statsInline = (Array.isArray(stats) ? stats : [])
+    .map((st) => `<tspan font-weight="800" fill="${BRAND.lime}">${esc(st.value)}</tspan><tspan fill="${BRAND.zinc300}"> ${esc(st.label)}</tspan>`)
+    .join(SEP);
+  const statsLine = stats && stats.length
+    ? `<text x="82" y="500" font-size="27" fill="${BRAND.zinc300}">${statsInline}</text>`
+    : '';
+
+  // Technologies: one muted line ("Top: A · B · C"), only when present.
+  const techLine = Array.isArray(technologies) && technologies.length
+    ? `<text x="82" y="546" font-size="22" fill="${BRAND.zinc400}">Top: <tspan fill="${BRAND.white}">${esc(technologies.join(' · '))}</tspan></text>`
+    : '';
+
+  // Band pill (teal, secondary) with a lime status dot before the band name.
+  const pillWidth = Math.max(150, 58 + bandName.length * 12);
+
+  return `<svg id="${id}" width="${CARD_W}" height="${CARD_H}" viewBox="0 0 ${CARD_W} ${CARD_H}"`
+    + ` xmlns="http://www.w3.org/2000/svg" font-family="${esc(FONT_STACK)}">
+  <rect width="${CARD_W}" height="${CARD_H}" fill="${BRAND.dark}"/>
+  <rect x="0" y="0" width="12" height="${CARD_H}" fill="${BRAND.teal500}"/>
+
+  <!-- logo: real hand-drawn shakers wordmark (inline vector paths, self-contained) -->
+  <g transform="translate(80,56) scale(${wordmarkScale.toFixed(4)})">${wordmark}</g>
+  <text x="1160" y="92" text-anchor="end" font-size="19" fill="${BRAND.zinc500}">shakersworks.com</text>
+
+  <!-- eyebrow (teal, letterspaced) -->
+  <text x="82" y="176" font-size="25" letter-spacing="4" font-weight="700" fill="${BRAND.teal500}">AI TOOLING MATURITY</text>
+
+  <!-- tier (hero, lime) + tier name -->
+  <text x="76" y="330" font-size="150" font-weight="800" fill="${BRAND.lime}">${esc(tierKey)}</text>
+  <text x="82" y="392" font-size="40" font-weight="700" fill="${BRAND.white}">${esc(tierName)}</text>
+
+  <!-- maturity band pill (teal, secondary) with a lime status dot -->
+  <g transform="translate(82,414)">
+    <rect x="0" y="0" rx="15" ry="15" width="${pillWidth}" height="40" fill="${BRAND.teal700}"/>
+    <circle cx="24" cy="20" r="6" fill="${BRAND.lime}"/>
+    <text x="42" y="27" font-size="19" font-weight="700" fill="${BRAND.white}">${esc(bandName)}</text>
+  </g>
+
+  <!-- score donut (hero, lime arc on a teal track) -->
+  <g transform="translate(${cx},${cy})">
+    <circle r="${r}" fill="none" stroke="${BRAND.teal700}" stroke-width="22"/>
+    <circle r="${r}" fill="none" stroke="${BRAND.lime}" stroke-width="22" stroke-linecap="round"
+      stroke-dasharray="${circ.toFixed(2)}" stroke-dashoffset="${dashOffset}" transform="rotate(-90)"/>
+    <text text-anchor="middle" y="14" font-size="86" font-weight="800" fill="${BRAND.white}">${score}</text>
+    <text text-anchor="middle" y="56" font-size="24" letter-spacing="2" fill="${BRAND.zinc400}">/ 100</text>
+  </g>
+
+  <!-- light stats line + technologies (no panel, no footer; bottom edge breathes) -->
+  ${statsLine}
+  ${techLine}
+</svg>`;
+}
+
+// Component CSS for the HTML wrapper (the page around the card). Reuses the
+// report theme tokens (var(--...)) from report-theme.js's renderDocument.
+const SHARE_CSS = `
+  .card-frame{margin:8px 0 22px}
+  .card-svg-wrap{max-width:760px;border-radius:var(--r-xl);overflow:hidden;
+    box-shadow:var(--shadow-lg);border:1px solid var(--border);background:#181B1A}
+  .card-svg-wrap svg{display:block;width:100%;height:auto}
+  .actions{display:flex;flex-wrap:wrap;gap:12px;margin:0 0 18px}
+  .btn{display:inline-flex;align-items:center;gap:8px;font:inherit;font-size:15px;
+    font-weight:600;padding:11px 20px;border-radius:var(--r-md);border:1px solid transparent;
+    cursor:pointer;text-decoration:none;line-height:1}
+  .btn-primary{background:var(--primary);color:var(--primary-fg)}
+  .btn-primary:hover{background:var(--emphasis-strong)}
+  .btn-secondary{background:var(--accent-lime);color:var(--accent-lime-fg)}
+  .btn-secondary:hover{filter:brightness(.96)}
+  .flow-note{display:flex;gap:12px;padding:16px 18px;border-radius:var(--r-lg);
+    background:var(--secondary);color:var(--secondary-fg);margin:0 0 22px;font-size:14px;line-height:1.55}
+  .flow-note ol{margin:6px 0 0;padding-left:20px}
+  .flow-note li{margin:2px 0}
+  .suggested{margin:0 0 8px}
+  .sug-head{display:flex;align-items:center;justify-content:space-between;margin:0 0 8px}
+  .sug-head span{font-size:13px;font-weight:600;letter-spacing:.04em;text-transform:uppercase;color:var(--faint)}
+  .copy{font:inherit;font-size:12.5px;font-weight:600;padding:6px 12px;border-radius:var(--r-sm);
+    border:1px solid var(--border);background:var(--surface);color:var(--muted);cursor:pointer}
+  .copy.copied{background:var(--secondary);color:var(--secondary-fg);border-color:var(--secondary)}
+  #li-text{margin:0;padding:16px 18px;border:1px solid var(--border);border-radius:var(--r-md);
+    background:var(--track);color:var(--fg);font-size:14.5px;line-height:1.6}
+`;
+
+// Browser-side PNG export + LinkedIn share wiring.
+const SHARE_SCRIPT = `
+  (function(){
+    var CARD_W=${CARD_W}, CARD_H=${CARD_H};
+    var svg=document.getElementById('share-card-svg');
+    var dl=document.getElementById('dl-png');
+    var li=document.getElementById('li-share');
+    var liText=document.getElementById('li-text');
+    if(li){
+      var text=liText?liText.textContent:'';
+      li.setAttribute('href','https://www.linkedin.com/feed/?shareActive=true&text='+encodeURIComponent(text));
+    }
+    if(dl&&svg){
+      dl.addEventListener('click',function(){
+        // Serialize the inline SVG and load it as an image. encodeURIComponent
+        // (not btoa) so any non-ASCII survives; charset is declared for safety.
+        var xml=new XMLSerializer().serializeToString(svg);
+        var src='data:image/svg+xml;charset=utf-8,'+encodeURIComponent(xml);
+        var img=new Image();
+        img.onload=function(){
+          var canvas=document.createElement('canvas');
+          canvas.width=CARD_W; canvas.height=CARD_H;
+          var ctx=canvas.getContext('2d');
+          ctx.fillStyle='#181B1A'; ctx.fillRect(0,0,CARD_W,CARD_H);
+          ctx.drawImage(img,0,0,CARD_W,CARD_H);
+          var png;
+          try{ png=canvas.toDataURL('image/png'); }
+          catch(e){ /* self-contained SVG shouldn't taint; bail quietly if it did */ return; }
+          var a=document.createElement('a');
+          a.href=png; a.download='shakers-ai-maturity.png';
+          document.body.appendChild(a); a.click(); a.remove();
+        };
+        img.onerror=function(){};
+        img.src=src;
+      });
+    }
+  })();
+`;
+
+// Assembles the full, self-contained HTML page around the card, using the shared Shakers report theme (report-theme.js#renderDocument).
+function renderShareCardHtml(model) {
+  const svg = renderCardSvg(model);
+  const suggested = buildSuggestedText(model);
+
+  const body = `<header>
+    <span class="badge"><span class="spark"></span>SHAKERS</span>
+    <h1>Share your AI maturity</h1>
+    <p class="sub">A branded card to post on LinkedIn.</p>
+  </header>
+
+  <div class="card-frame">
+    <div class="card-svg-wrap">${svg}</div>
+  </div>
+
+  <div class="actions">
+    <button type="button" id="dl-png" class="btn btn-primary">Download PNG</button>
+    <a id="li-share" class="btn btn-secondary" href="https://www.linkedin.com/feed/?shareActive=true" target="_blank" rel="noopener">Share on LinkedIn</a>
+  </div>
+
+  <div class="flow-note">
+    <span aria-hidden="true">💡</span>
+    <div>
+      <strong>LinkedIn can't attach an image from a URL.</strong> To post the card:
+      <ol>
+        <li>Click <strong>Download PNG</strong> to save the image.</li>
+        <li>Click <strong>Share on LinkedIn</strong> to open the composer (with the suggested text).</li>
+        <li>Attach the downloaded PNG to your post.</li>
+      </ol>
+    </div>
+  </div>
+
+  <section class="suggested">
+    <div class="sug-head">
+      <span>Suggested text</span>
+      <button type="button" class="copy" data-copy-target="li-text" data-copied-label="Copied ✓">Copy</button>
+    </div>
+    <p id="li-text">${esc(suggested)}</p>
+  </section>
+
+  <footer>
+    <div class="priv">
+      <span class="lock" aria-hidden="true">🔒</span>
+      <span>Generated locally on your machine. The card and the PNG are built entirely in your browser — nothing is uploaded.</span>
+    </div>
+  </footer>`;
+
+  return renderDocument({
+    lang: 'en',
+    title: 'Shakers — Share your AI maturity',
+    componentCss: SHARE_CSS,
+    body,
+    script: SHARE_SCRIPT,
+  });
+}
+
+// Per-project card file, alongside the reports in ~/.config/ai-footprint/ (override via SHAKERS_CLI_CONFIG_DIR).
+function cardPathFor(absRoot) {
+  return path.join(configDir(), `share-${projectSlug(path.resolve(absRoot))}.html`);
+}
+
+// Orchestrates the command: load the project's footprint, and either return a "no footprint" signal or render + write the card and return its file:// link.
+function generateShareCard({ root, load } = {}) {
+  const absRoot = path.resolve(root || process.cwd());
+  const fp = loadProjectFootprint(absRoot, load ? { load } : {});
+  if (!fp) return { ok: false, reason: 'no-footprint', root: absRoot };
+
+  const model = buildCardModel(fp);
+  const html = renderShareCardHtml(model);
+  fs.mkdirSync(configDir(), { recursive: true });
+  const htmlPath = cardPathFor(absRoot);
+  fs.writeFileSync(htmlPath, html);
+  return { ok: true, root: absRoot, model, html, htmlPath, fileUrl: fileUrl(htmlPath) };
+}
+
+module.exports = {
+  CARD_W,
+  CARD_H,
+  loadProjectFootprint,
+  buildCardModel,
+  buildSuggestedText,
+  renderCardSvg,
+  renderShareCardHtml,
+  cardPathFor,
+  generateShareCard,
+};

package/src/share-certification.js

@@ -0,0 +1,111 @@
+'use strict';
+
+// Certification-persistence payload (skill-code-certification, issue 005), extracted from src/share.js (structure refactor, issue 020).
+
+const { scrubSecrets } = require('./agent-synthesis');
+
+const CERTIFY_SEND_THROTTLE_MS = 60 * 60 * 1000;
+const CERT_SCHEMA_VERSION = 1;
+
+// Strict whitelist: the analyzed RESULT + observability provenance (ADR-017), rebuilt field-by-field (never spread).
+const CERT_DIMENSION_KEYS = ['idiomatic', 'correctness', 'depth', 'structure', 'testing'];
+function deriveDimensionScores(dimensions) {
+  if (!dimensions || typeof dimensions !== 'object') return null;
+  const out = {};
+  let any = false;
+  for (const key of CERT_DIMENSION_KEYS) {
+    const v = dimensions[key];
+    if (typeof v === 'number' && Number.isInteger(v) && v >= 0 && v <= 4) {
+      out[key] = v;
+      any = true;
+    } else {
+      out[key] = null;
+    }
+  }
+  return any ? out : null;
+}
+
+const MAX_INTERVIEW_EVIDENCE_TOKEN_CHARS = 4096;
+function interviewEvidenceTokenOf(item) {
+  const t = item && item.interviewEvidenceToken;
+  return typeof t === 'string' && t ? t.slice(0, MAX_INTERVIEW_EVIDENCE_TOKEN_CHARS) : null;
+}
+
+const MAX_CERTIFY_EVIDENCE_TOKEN_CHARS = 4096;
+function certifyEvidenceTokenOf(item) {
+  const t = item && item.result && item.result.evidenceToken;
+  return typeof t === 'string' && t ? t.slice(0, MAX_CERTIFY_EVIDENCE_TOKEN_CHARS) : null;
+}
+
+function deriveCertificationPayload(items, { repository = null, commitRange = null, toolVersion = null } = {}) {
+  const list = Array.isArray(items) ? items : [];
+  const skillCodeAssessments = list
+    .filter((i) => i && i.result && typeof i.result === 'object')
+    .map((i) => {
+      const assessment = {
+      skillId: i.skillId != null ? i.skillId : null,
+      skillName: typeof i.skillName === 'string' ? i.skillName : null,
+      technology: typeof i.technology === 'string' ? i.technology : null,
+      score: typeof i.result.score === 'number' ? i.result.score : null,
+      rationale: scrubSecrets(typeof i.result.rationale === 'string' ? i.result.rationale : ''),
+      improvements: Array.isArray(i.result.improvements)
+        ? i.result.improvements.filter((x) => typeof x === 'string' && x).map((x) => scrubSecrets(x))
+        : [],
+      sampled: !!(i.sampling && i.sampling.sampleable),
+      model: typeof i.result.model === 'string' && i.result.model ? i.result.model : null,
+      // Paths only (never content). The attribution gate already filtered
+      // these to the Talent's own files (bin/certify.js).
+      sampledFiles: Array.isArray(i.sampledFiles)
+        ? i.sampledFiles.filter((p) => typeof p === 'string' && p)
+        : [],
+      // Verified-authorship evidence: every considered author-email + match flag.
+      authorEmails: Array.isArray(i.authorEmails)
+        ? i.authorEmails
+            .filter((a) => a && typeof a.email === 'string' && a.email)
+            .map((a) => ({ email: a.email, matched: !!a.matched }))
+        : [],
+      // Model's per-file scores; `[]` when the model degraded to aggregate-only.
+      perFileBreakdown: Array.isArray(i.result.perFileBreakdown)
+        ? i.result.perFileBreakdown
+            .filter((f) => f && typeof f.path === 'string' && typeof f.score === 'number')
+            .map((f) => ({
+              path: f.path,
+              score: f.score,
+              note: typeof f.note === 'string' && f.note ? scrubSecrets(f.note) : null,
+            }))
+        : [],
+      // ADR-024 rubric dimensions (0-4 or null) — the inputs the server used to
+      // compute the deterministic score. Rebuilt key-by-key, never spread.
+      dimensionScores: deriveDimensionScores(i.result.dimensions),
+      };
+      const certifyToken = certifyEvidenceTokenOf(i);
+      if (certifyToken) assessment.evidenceToken = certifyToken;
+      // ADR-049 / issue 128: the attested combined level, bound ONLY when an
+      // interview ran. Added conditionally so an item without one is byte-identical.
+      const token = interviewEvidenceTokenOf(i);
+      if (token) assessment.interviewEvidenceToken = token;
+      return assessment;
+    });
+  return {
+    schemaVersion: CERT_SCHEMA_VERSION,
+    generatedAt: new Date().toISOString(),
+    kind: 'skill-code-assessment',
+    skillCodeAssessments,
+    toolVersion: typeof toolVersion === 'string' && toolVersion ? toolVersion : null,
+    repository: typeof repository === 'string' && repository ? repository : null,
+    commitRange: typeof commitRange === 'string' && commitRange ? commitRange : null,
+  };
+}
+
+function isCertifyThrottled(state, now = Date.now()) {
+  if (!state || !state.lastCertifySentAt) return false;
+  const last = new Date(state.lastCertifySentAt).getTime();
+  if (Number.isNaN(last)) return false;
+  return now - last < CERTIFY_SEND_THROTTLE_MS;
+}
+
+module.exports = {
+  deriveCertificationPayload,
+  isCertifyThrottled,
+  CERTIFY_SEND_THROTTLE_MS,
+};

package/src/share-consent-state.js

@@ -0,0 +1,157 @@
+'use strict';
+
+// Consent state + email identity + client-side throttle, extracted from src/share.js (structure refactor, issue 020).
+
+const fs = require('fs');
+const path = require('path');
+const { getConfigDir } = require('./config-dir');
+
+function configDir() {
+  return getConfigDir(process.env);
+}
+
+function consentPath() {
+  return path.join(configDir(), 'consent.json');
+}
+
+// Client-side throttle: don't retry a submission if the last one was less than 1h ago.
+const SEND_THROTTLE_MS = 60 * 60 * 1000;
+
+// consent state (~/.config/ai-footprint/consent.json) Replaces the old `credentials.json` (token model).
+
+function loadConsentState() {
+  try {
+    return JSON.parse(fs.readFileSync(consentPath(), 'utf8'));
+  } catch {
+    return null;
+  }
+}
+
+function saveConsentState(state) {
+  fs.mkdirSync(configDir(), { recursive: true });
+  fs.writeFileSync(consentPath(), JSON.stringify(state, null, 2));
+  try { fs.chmodSync(consentPath(), 0o600); } catch { /* e.g. Windows */ }
+}
+
+// Returns 'granted' | 'denied' | null ("no decision persisted yet").
+function getConsentDecision(state) {
+  if (!state || state.consent === undefined || state.consent === null) return null;
+  return state.consent;
+}
+
+function hasTraceContentConsent() {
+  return getConsentDecision(loadConsentState()) === 'granted';
+}
+
+/* ---------- email ---------- */
+
+const EMAIL_RE = /^[^\s@]+@[^\s@]+\.[^\s@]+$/;
+
+// Basic format validation only (specs.md: "validación de formato básica").
+function isValidEmail(value) {
+  return typeof value === 'string' && EMAIL_RE.test(value.trim());
+}
+
+// Same normalization the backend applies (specs.md Data model): trim +
+// lowercase, so client and server agree on what "the same email" means.
+function normalizeEmail(value) {
+  return String(value).trim().toLowerCase();
+}
+
+// Persists a consent decision.
+function recordConsent(decision, email = null, { verified } = {}) {
+  if (decision !== 'granted' && decision !== 'denied') {
+    throw new Error(`Decisión de consentimiento no válida: ${decision}`);
+  }
+  if (decision === 'granted' && !isValidEmail(email)) {
+    throw new Error('No se puede conceder consentimiento sin un correo válido.');
+  }
+  const state = loadConsentState() || {};
+  state.consent = decision;
+  if (email !== null) state.email = normalizeEmail(email);
+  if (state.lastSentAt === undefined) state.lastSentAt = null;
+  // Email-ownership verification flag (skill-code-certification / ADR-006).
+  if (decision === 'granted' && verified !== undefined) {
+    state.emailVerified = verified === true;
+  }
+  saveConsentState(state);
+  return state;
+}
+
+// consent management (issue 007: status / revoke / change email) One-shot actions (do not scan), same pattern the retired `--enroll` used.
+
+// Read-only snapshot for `--consent-status`. Never throws.
+function getConsentStatus() {
+  const state = loadConsentState();
+  return {
+    consent: getConsentDecision(state),
+    email: state && state.email ? state.email : null,
+    emailVerified: state ? state.emailVerified !== false : false,
+    lastSentAt: state && state.lastSentAt ? state.lastSentAt : null,
+  };
+}
+
+// Revokes consent unconditionally (works even with no prior decision, or after a prior `denied` — idempotent): from this point on `autoShare` skips with `consent-denied`.
+function revokeConsent() {
+  const state = recordConsent('denied');
+  return { ok: true, state };
+}
+
+function resetConsent() {
+  const state = loadConsentState() || {};
+  delete state.consent;
+  // A re-grant is "concede de cero" (ADR-006): drop the verification flag so the OTP runs again from scratch and nothing is sent under the old email until it's re-verified.
+  delete state.emailVerified;
+  if (state.lastSentAt === undefined) state.lastSentAt = null;
+  saveConsentState(state);
+  return { ok: true, state };
+}
+
+function clearConsentState() {
+  try {
+    fs.rmSync(consentPath(), { force: true });
+  } catch { /* no-op */ }
+  return { ok: true };
+}
+
+// Changes the persisted email WITHOUT touching the consent decision (specs.md: "sin tocar la decisión de consentimiento").
+function setEmail(newEmail) {
+  if (!isValidEmail(newEmail)) {
+    return { ok: false, reason: 'invalid-email' };
+  }
+  const state = loadConsentState() || {};
+  state.email = normalizeEmail(newEmail);
+  // A new email is unverified until proven (ADR-006): reset the flag so
+  // autoShare won't send under an address whose ownership wasn't checked.
+  state.emailVerified = false;
+  saveConsentState(state);
+  return { ok: true, state };
+}
+
+/* ---------- client-side throttle ---------- */
+
+function isThrottled(state, now = Date.now()) {
+  if (!state || !state.lastSentAt) return false;
+  const last = new Date(state.lastSentAt).getTime();
+  if (Number.isNaN(last)) return false;
+  return now - last < SEND_THROTTLE_MS;
+}
+
+module.exports = {
+  configDir,
+  consentPath,
+  SEND_THROTTLE_MS,
+  loadConsentState,
+  saveConsentState,
+  getConsentDecision,
+  hasTraceContentConsent,
+  isValidEmail,
+  normalizeEmail,
+  recordConsent,
+  getConsentStatus,
+  revokeConsent,
+  resetConsent,
+  clearConsentState,
+  setEmail,
+  isThrottled,
+};