shakers-cli-beta 0.8.0-beta.4 → 0.9.0

package/src/i18n.js

@@ -702,11 +702,11 @@ const catalogs = {
     // language the Talent may not read. Vocabulario CONTEXT: Talent, Skill.
     certifyDimension: {
       help:
-        'certify — certifica una DIMENSIÓN de tu rol con una entrevista por LiveKit (como el onboarding).\n\n'
+        'certify - certifica una DIMENSIÓN de tu rol. La entrevista se hace en la web.\n\n'
         + 'Uso:\n'
         + '  certify [--lang es|en] [--dimension <clave|slug|n>]\n\n'
         + 'Requiere una sesión activa (ejecuta antes: shakers login).\n'
-        + 'Solo se ofrecen las dimensiones que puedes certificar por aquí y que aún no tienes certificadas.\n',
+        + 'Eliges la dimensión aquí y te damos el enlace para certificarla en la web.\n',
       title: 'Certificar una dimensión',
       loginRequired: '"certify" requiere una sesión activa.\n  Falta: iniciar sesión. Ejecuta primero: shakers login',
       discovering: 'Buscando las dimensiones que puedes certificar…',
@@ -722,22 +722,9 @@ const catalogs = {
       stateExpired: 'caducada',
       dimensionInvalid: 'Esa dimensión no está entre las certificables ahora mismo.',
       dimensionUsing: (slug) => `Dimensión elegida: ${slug}`,
-      creating: 'Creando la entrevista…',
-      createFailed: (reason) => `No se pudo crear la entrevista (${reason}).`,
-      onCooldown: (day) => (day
-        ? `Ya hiciste esta dimensión hace poco. Podrás repetirla a partir del ${day}.`
-        : 'Ya hiciste esta dimensión hace poco y todavía no se puede repetir.'),
-      needsWeb: 'Esta dimensión lleva un ejercicio que por ahora solo se hace en la web, no por terminal.',
-      interviewUnavailable: (reason) => `La entrevista no pudo completarse (${reason}).`,
-      reportPolling: 'Calculando tu veredicto…',
-      reportTimeout: 'El veredicto todavía se está calculando. Consúltalo en tu perfil en unos minutos.',
-      reportFailed: (reason) => `No se pudo obtener el veredicto (${reason}). Consúltalo en tu perfil.`,
-      verdictTitle: 'Veredicto',
-      verdictDimension: (dim) => `Dimensión: ${dim}`,
-      verdictBand: (band) => `Nivel: ${band}`,
-      verdictCertified: 'Resultado: certificada',
-      verdictNotCertified: 'Resultado: no certificada esta vez',
-      done: 'Certificación completada.',
+      webHandoff: 'La entrevista de certificación se hace en la web.',
+      webHandoffLink: (url) => `Ábrela aquí para certificar esta dimensión:\n  ${url}`,
+      webHandoffNoLink: 'Entra en tu perfil de Shakers en la web y ve a Certificaciones para hacerla.',
     },
     findProjects: {
       help:
@@ -2310,11 +2297,11 @@ const catalogs = {
     // English mirror of the `certify` catalog. Same content/invariants.
     certifyDimension: {
       help:
-        'certify — certify a DIMENSION of your role with a LiveKit interview (like onboarding).\n\n'
+        'certify - certify a DIMENSION of your role. The interview is done on the web.\n\n'
         + 'Usage:\n'
         + '  certify [--lang es|en] [--dimension <key|slug|n>]\n\n'
         + 'Requires an active session (run `shakers login` first).\n'
-        + 'Only dimensions you can certify here and have not already certified are offered.\n',
+        + 'You pick the dimension here and we hand you the link to certify it on the web.\n',
       title: 'Certify a dimension',
       loginRequired: '"certify" requires an active session.\n  Missing: sign-in. Run `shakers login` first.',
       discovering: 'Looking up the dimensions you can certify…',
@@ -2330,22 +2317,9 @@ const catalogs = {
       stateExpired: 'expired',
       dimensionInvalid: 'That dimension is not among the certifiable ones right now.',
       dimensionUsing: (slug) => `Chosen dimension: ${slug}`,
-      creating: 'Creating the interview…',
-      createFailed: (reason) => `Could not create the interview (${reason}).`,
-      onCooldown: (day) => (day
-        ? `You took this dimension recently. You can retake it from ${day}.`
-        : 'You took this dimension recently and cannot retake it yet.'),
-      needsWeb: 'This dimension has an exercise that for now is only taken on the web, not in the terminal.',
-      interviewUnavailable: (reason) => `The interview could not be completed (${reason}).`,
-      reportPolling: 'Computing your verdict…',
-      reportTimeout: 'The verdict is still being computed. Check your profile in a few minutes.',
-      reportFailed: (reason) => `Could not fetch the verdict (${reason}). Check your profile.`,
-      verdictTitle: 'Verdict',
-      verdictDimension: (dim) => `Dimension: ${dim}`,
-      verdictBand: (band) => `Level: ${band}`,
-      verdictCertified: 'Result: certified',
-      verdictNotCertified: 'Result: not certified this time',
-      done: 'Certification complete.',
+      webHandoff: 'The certification interview is done on the web.',
+      webHandoffLink: (url) => `Open it here to certify this dimension:\n  ${url}`,
+      webHandoffNoLink: 'Open your Shakers profile on the web and go to Certifications to take it.',
     },
     findProjects: {
       help:

package/src/mcp-auth-form.js

@@ -18,24 +18,26 @@ const FONT_STACK = '"Inter", ui-sans-serif, system-ui, -apple-system, BlinkMacSy
 
 const COPY = {
   en: {
-    signin: 'Sign in', create: 'Create account', welcome: 'Welcome to Shakers — create your talent account to get started.',
+    signin: 'Sign in', create: 'Create account', welcome: 'Welcome to Shakers. Create your talent account to get started.',
     email: 'Email', password: 'Password', repeat: 'Repeat password', first: 'First name', last: 'Last name',
     lang: 'Language', newsletter: 'Receive the newsletter', how: 'How do you work?', intent: 'Freelance intent',
-    hint: 'Your password stays on this machine. It is never sent to the chat.', mismatch: 'Passwords do not match.',
-    done: 'You are signed in.', doneSub: 'You can close this tab and return to your AI app.',
+    hint: 'Your password stays on this computer. We never send it to the chat.', mismatch: 'The passwords do not match.',
+    done: 'You are signed in.', doneSub: 'You can close this tab and go back to your AI app.',
     chooseTitleLogin: 'How do you want to sign in?', chooseTitleRegister: 'How do you want to create your account?',
-    continueGoogle: 'Continue with Google', continueEmail: 'Email and password', continueEmailRegister: 'Continue with email',
-    googleOpening: 'Opening Google sign-in…', googleOpeningSub: 'A Google window is opening. You can return to your AI app; it will confirm once you finish.',
+    continueGoogle: 'Continue with Google', continueLinkedin: 'Continue with LinkedIn', continueEmail: 'Email and password', continueEmailRegister: 'Continue with email',
+    socialOpening: (name) => `Opening sign-in with ${name}…`,
+    socialOpeningSub: 'A sign-in window just opened. Finish there and come back to your AI app, it will carry on.',
   },
   es: {
-    signin: 'Iniciar sesión', create: 'Crear cuenta', welcome: 'Bienvenido a Shakers — crea tu cuenta de talento para empezar.',
+    signin: 'Iniciar sesión', create: 'Crear cuenta', welcome: 'Bienvenido a Shakers. Crea tu cuenta de talento para empezar.',
     email: 'Email', password: 'Contraseña', repeat: 'Repite la contraseña', first: 'Nombre', last: 'Apellidos',
     lang: 'Idioma', newsletter: 'Recibir la newsletter', how: '¿Cómo trabajas?', intent: 'Intención freelance',
-    hint: 'Tu contraseña se queda en este equipo. Nunca se envía al chat.', mismatch: 'Las contraseñas no coinciden.',
+    hint: 'Tu contraseña se queda en este equipo. Nunca la enviamos al chat.', mismatch: 'Las contraseñas no coinciden.',
     done: 'Sesión iniciada.', doneSub: 'Puedes cerrar esta pestaña y volver a tu app de IA.',
     chooseTitleLogin: '¿Cómo quieres iniciar sesión?', chooseTitleRegister: '¿Cómo quieres crear tu cuenta?',
-    continueGoogle: 'Continuar con Google', continueEmail: 'Email y contraseña', continueEmailRegister: 'Continuar con email',
-    googleOpening: 'Abriendo el acceso con Google…', googleOpeningSub: 'Se está abriendo una ventana de Google. Puedes volver a tu app de IA; te confirmará cuando termines.',
+    continueGoogle: 'Continuar con Google', continueLinkedin: 'Continuar con LinkedIn', continueEmail: 'Email y contraseña', continueEmailRegister: 'Continuar con email',
+    socialOpening: (name) => `Abriendo el acceso con ${name}…`,
+    socialOpeningSub: 'Se acaba de abrir una ventana para terminar el acceso. Cuando acabes, vuelve a tu app de IA y seguirá por su cuenta.',
   },
 };
 
@@ -56,7 +58,7 @@ function styles() {
     + `:root{--background:#ffffff;--foreground:#18181b;--primary:#05342c;--primary-foreground:#fafafa;`
     + `--secondary:#e2f2f0;--secondary-foreground:#0b5a4c;--muted-foreground:#3f3f46;--accent:#e2f2f0;--accent-foreground:#08473c;`
     + `--input:#d4d4d8;--border:#e4e4e7;--ring:#0e7d69;--destructive:#e11d48;--radius:0.625rem;--radius-md:calc(var(--radius) - 2px);`
-    + `--shadow-xs:0 1px 2px 0 rgb(0 0 0 / .05)}`
+    + `--shadow-xs:0 1px 3px 0px rgb(0 0 0 / .05)}`
     + `*{box-sizing:border-box}`
     + `body{font-family:${FONT_STACK};margin:0;min-height:100vh;display:flex;align-items:center;justify-content:center;background:#fafafa;color:var(--foreground);padding:1.5rem;-webkit-font-smoothing:antialiased;text-rendering:optimizeLegibility}`
     + `.card{width:100%;max-width:26rem;background:var(--background);border:1px solid var(--border);border-radius:var(--radius);box-shadow:0 10px 30px rgb(3 33 28 / .08);overflow:hidden}`
@@ -104,7 +106,7 @@ function errorBanner(reason) {
 
 function loginFormHtml(lang, { error } = {}) {
   const c = copy(lang);
-  return page(`Shakers — ${c.signin}`, {
+  return page(`Shakers · ${c.signin}`, {
     inner: `<h1>${c.signin}</h1>${errorBanner(error)}`
       + `<form method="post" action="/submit">`
       + `<label>${c.email}</label><input name="email" type="email" required autofocus>`
@@ -117,7 +119,7 @@ function loginFormHtml(lang, { error } = {}) {
 
 function registerFormHtml(lang, { error } = {}) {
   const c = copy(lang);
-  return page(`Shakers — ${c.create}`, {
+  return page(`Shakers · ${c.create}`, {
     banner: panel(c.welcome),
     inner: `<h1>${c.create}</h1>${errorBanner(error)}`
       + `<form method="post" action="/submit">`
@@ -140,22 +142,28 @@ const GOOGLE_G = '<svg class="g" viewBox="0 0 48 48" aria-hidden="true">'
   + '<path fill="#FBBC05" d="M10.4 28.3c-.5-1.5-.8-3.1-.8-4.8s.3-3.3.8-4.8l-7.8-6.1C.9 15.9 0 19.8 0 23.5s.9 7.6 2.6 10.9l7.8-6.1z"/>'
   + '<path fill="#34A853" d="M24 47c6.5 0 11.9-2.1 15.9-5.8l-7.3-5.7c-2 1.4-4.7 2.3-8.6 2.3-6.4 0-11.8-3.8-13.6-9.8l-7.8 6.1C6.5 41.6 14.6 47 24 47z"/></svg>';
 
+const LINKEDIN_IN = '<svg class="g" viewBox="0 0 24 24" aria-hidden="true">'
+  + '<path fill="#0A66C2" d="M20.45 20.45h-3.56v-5.57c0-1.33-.03-3.04-1.85-3.04-1.86 0-2.14 1.45-2.14 2.94v5.67H9.35V9h3.41v1.56h.05c.47-.9 1.63-1.85 3.36-1.85 3.6 0 4.26 2.37 4.26 5.45v6.29zM5.34 7.43a2.06 2.06 0 1 1 0-4.13 2.06 2.06 0 0 1 0 4.13zM7.12 20.45H3.56V9h3.56v11.45zM22.22 0H1.77C.79 0 0 .77 0 1.73v20.54C0 23.22.79 24 1.77 24h20.45c.98 0 1.78-.78 1.78-1.73V1.73C24 .77 23.2 0 22.22 0z"/></svg>';
+
 // The method-choice screen (talents-ai-score) — the FIRST screen of the loopback form when more than one method is offered for this flow.
 function methodChoiceHtml(mode, lang, methods) {
   const c = copy(lang);
   const title = mode === 'register' ? c.chooseTitleRegister : c.chooseTitleLogin;
   const emailLabel = mode === 'register' ? c.continueEmailRegister : c.continueEmail;
-  const buttons = methods.map((id) => (id === 'google'
-    ? `<a class="mbtn primary" href="/google">${GOOGLE_G}${c.continueGoogle}</a>`
-    : `<a class="mbtn secondary" href="/email">${emailLabel}</a>`)).join('');
-  return page(`Shakers — ${title}`, {
+  const buttons = methods.map((id) => {
+    if (id === 'google') return `<a class="mbtn primary" href="/google">${GOOGLE_G}${c.continueGoogle}</a>`;
+    if (id === 'linkedin') return `<a class="mbtn secondary" href="/linkedin">${LINKEDIN_IN}${c.continueLinkedin}</a>`;
+    return `<a class="mbtn secondary" href="/email">${emailLabel}</a>`;
+  }).join('');
+  return page(`Shakers · ${title}`, {
     inner: `<h1>${title}</h1><div class="actions">${buttons}</div><p class="hint">${c.hint}</p>`,
   });
 }
 
-function googleHandoffHtml(lang) {
+function socialHandoffHtml(lang, provider) {
   const c = copy(lang);
-  return page('Shakers', { inner: `<h1>${c.googleOpening}</h1><p>${c.googleOpeningSub}</p>` });
+  const name = provider === 'linkedin' ? 'LinkedIn' : 'Google';
+  return page('Shakers', { inner: `<h1>${c.socialOpening(name)}</h1><p>${c.socialOpeningSub}</p>` });
 }
 
 function successHtml(lang) {
@@ -247,8 +255,14 @@ function runLoopbackAuth(
       }
       if (req.method === 'GET' && url.pathname === '/google' && methods.includes('google')) {
         res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
-        res.end(googleHandoffHtml(lang));
-        finish({ ok: true, viaGoogle: true });
+        res.end(socialHandoffHtml(lang, 'google'));
+        finish({ ok: true, viaSocial: true, provider: 'google' });
+        return;
+      }
+      if (req.method === 'GET' && url.pathname === '/linkedin' && methods.includes('linkedin')) {
+        res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' });
+        res.end(socialHandoffHtml(lang, 'linkedin'));
+        finish({ ok: true, viaSocial: true, provider: 'linkedin' });
         return;
       }
       if (req.method === 'POST' && url.pathname === '/submit') {
@@ -279,4 +293,4 @@ function runLoopbackAuth(
   });
 }
 
-module.exports = { runLoopbackAuth, doAuth, loginFormHtml, registerFormHtml, methodChoiceHtml, googleHandoffHtml, DEFAULT_TIMEOUT_MS };
+module.exports = { runLoopbackAuth, doAuth, loginFormHtml, registerFormHtml, methodChoiceHtml, socialHandoffHtml, DEFAULT_TIMEOUT_MS };

package/src/mcp-certify-dimension-tools.js

@@ -1,6 +1,6 @@
 'use strict';
 
-// MCP: list the offerable dimensions (the interview itself runs over LiveKit in the CLI).
+// MCP: list the offerable dimensions (the certification interview itself is done on the web).
 
 const LIST_CERTIFIABLE_DIMENSIONS_SCHEMA = {
   type: 'object',
@@ -45,7 +45,7 @@ function makeCertifyDimensionTools(deps = {}) {
   return [
     {
       name: 'list_certifiable_dimensions',
-      description: "List the dimensions the talent can certify by CLI right now: their main role's hub dimensions whose interview runs by text (terminal or spoken-case templates) and not already CERTIFIED (UNCERTIFIED/EXPIRED). Requires an active session. The certification interview itself runs over LiveKit via `shakers certify` in the terminal. The dimensionKey/clusterId in each item are INTERNAL handles for tools only — never show or mention them to the talent; refer to a dimension by its name.",
+      description: "List the dimensions the talent can certify right now: their main role's hub dimensions whose interview runs by text (terminal or spoken-case templates) and not already CERTIFIED (UNCERTIFIED/EXPIRED). Requires an active session. The certification interview itself is done on the web; running `shakers certify` in the terminal hands the talent the web link to take it. The dimensionKey/clusterId in each item are INTERNAL handles for tools only — never show or mention them to the talent; refer to a dimension by its name.",
       inputSchema: LIST_CERTIFIABLE_DIMENSIONS_SCHEMA,
       handler: listCertifiableDimensions,
     },

package/src/mcp-onboarding-tools.js

@@ -131,7 +131,7 @@ function makeOnboardingTools(deps = {}) {
   // No explicit `method`: the loopback form opens on its email/social choice screen.
   async function loginViaForm({ method = null } = {}) {
     const result = await runLoopbackAuth(method ? { mode: 'login', method } : { mode: 'login' });
-    if (result.viaGoogle) return socialSigninPointer('login', 'google');
+    if (result.viaSocial) return socialSigninPointer('login', result.provider || 'google');
     if (!result.ok) return { ok: false, reason: result.reason || 'login-failed' };
     return { ok: true, method: 'email', email: result.email || null };
   }

package/src/mcp-prompts.js

@@ -0,0 +1,71 @@
+'use strict';
+
+// MCP prompts = in-client slash-commands. Each is a thin wrapper that injects a user turn
+// telling the assistant which Shakers tool(s) to use — the logic stays in the tools, so
+// there is no duplication. `buildMessages(args)` returns the prompts/get message list.
+
+function userText(text) {
+  return [{ role: 'user', content: { type: 'text', text } }];
+}
+
+// Only reference tools that exist in the FULL server; `available(toolNames)` hides a prompt
+// when its tool isn't registered (e.g. the --local scan-only server).
+const PROMPTS = [
+  {
+    name: 'ai_usage',
+    description: 'Evaluate and showcase how you work with AI (scans this machine, builds your "My work with AI").',
+    tools: ['ai_usage'],
+    buildMessages: () => userText(
+      'Evaluate how I work with AI for my Shakers profile. First ask me for consent and the email to attribute it to, then call the `ai_usage` tool and show me the resulting report verbatim. Never show internal ids/codes.',
+    ),
+  },
+  {
+    name: 'onboarding',
+    description: 'Register and onboard on Shakers (profile import, pricing, availability, interview).',
+    tools: ['register', 'suggest_register_context'],
+    buildMessages: () => userText(
+      'Help me get set up on Shakers. Use `suggest_register_context` to pre-fill what you can, show me `register_preview`, then `register`, and offer the `onboarding_interview_*` tools. Ask me only for what you cannot infer.',
+    ),
+  },
+  {
+    name: 'find_projects',
+    description: 'Find open Shakers projects/positions matched to you.',
+    tools: ['find_projects'],
+    buildMessages: () => userText(
+      'Find open Shakers positions that match me: call `find_projects` and summarize them by title/company (never show internal ids). Offer `save_project` / `show_project` for ones I like.',
+    ),
+  },
+  {
+    name: 'certify',
+    description: 'See which role dimensions you can certify and start a certification.',
+    tools: ['list_certifiable_dimensions'],
+    buildMessages: () => userText(
+      'Help me certify on Shakers: call `list_certifiable_dimensions`, present the dimensions I can certify by name, and guide me through certifying the one I pick.',
+    ),
+  },
+  {
+    name: 'ask',
+    description: 'Ask Alma, the Shakers AI assistant, a question.',
+    tools: ['ask'],
+    arguments: [{ name: 'message', description: 'What to ask Alma.', required: false }],
+    buildMessages: (args = {}) => userText(
+      `Ask Alma (the Shakers assistant) and relay her answer as-is. My question: ${typeof args.message === 'string' && args.message ? args.message : '(ask me what I want to know first)'}`,
+    ),
+  },
+  {
+    name: 'my_profile',
+    description: 'Show your Shakers profile (role, rate, availability, "My work with AI").',
+    tools: ['get_profile'],
+    buildMessages: () => userText(
+      'Show my Shakers profile: call `get_profile` (and `get_rate` / `get_availability` if useful) and present it in plain terms. Any ids/codes are internal — never show them.',
+    ),
+  },
+];
+
+function makePrompts(toolNames = null) {
+  const available = toolNames instanceof Set ? toolNames : null;
+  // Keep a prompt only if at least one of its tools is present in this server.
+  return PROMPTS.filter((p) => !available || p.tools.some((t) => available.has(t)));
+}
+
+module.exports = { makePrompts, PROMPTS };

package/src/mcp-register-tools.js

@@ -96,7 +96,7 @@ function buildSchemas(lang) {
 // collection guide with friendly labels inline for every choice field.
 function buildRegisterDescription(lang) {
   const L = getCatalog(lang).onboarding;
-  return "The talent registers THEMSELVES on Shakers (self-service; no prior session needed). Your job is to relay the non-secret profile details the talent gives you in the chat as arguments. Credentials never touch the chat or any tool argument: the tool opens a sign-up window on the talent's own machine (127.0.0.1) where they either Continue with Google (no password at all) or type an email and password directly into that local window.\n\nSAVE THE TALENT TYPING: first call suggest_register_context (timezone, local git identity, GitHub login, CV files) and PROPOSE those values for them to confirm; then call register_preview with the partial payload to get a review (what would be written, what is still missing) and show the talent a short summary to confirm or correct BEFORE calling register. Pre-fill EVERY field you can reasonably infer from what you know about the talent (your memory of past conversations, the chat, context) — including `pricing` and `workSituation.changeMotivators`. PRICING: whenever you know anything about their role, seniority, stack or location, ALWAYS propose a concrete per-project amount yourself (full-time and/or part-time, in their currency), labelled as your estimate — do not hand the question back to the talent; only ask for it when you know nothing at all about their work. MOTIVATORS: pick the one that best matches what they have told you. What you know about the person outranks suggest_register_context: if the git identity does not match the person you know, ignore it. For each inferred value briefly say where it comes from. Ask ONLY for what you genuinely have no basis for. Use suggest_register_context's githubUrl and cvCandidates to propose profile.githubUrl and profile.cvPath (cvCandidates often include OTHER people's CVs, e.g. candidates they downloaded: propose a CV ONLY if its file name matches the talent's name — nameMatch:true or a name you know — and never one named after someone else; if none matches but there is a generic:true one like cv.pdf, ASK the talent whether it is theirs and whether you may read it and send it with the registration; otherwise ask for the path). Once the talent confirms a CV and allows it, ALWAYS call read_cv BEFORE register_preview and use its text to pre-fill or correct the other fields (languages and levels, experience, location); if the CV adds or changes any value, show the talent just those changes and get their OK before calling register; pass paths exactly as given, the short ~/ form is fine. For optional fields you have no basis for (phone, website, newsletter), do not ask one by one: add a single closing line offering them (e.g. '¿Quieres añadir teléfono o web?'). The goal is that the talent only has to answer 'sí' or correct a value. Never write without the talent's confirmation of the summary. All of this is self-declared profile data.\n\nFor whatever you still have to ASK (only what you could not infer), ask in ONE grouped message, not one field at a time, and for every CHOICE field PRESENT THE VALID OPTIONS so the talent just picks one. For every choice field SHOW THE TALENT THE FRIENDLY LABEL, never the raw code (e.g. show 'Nativo', not 'NATIVE'), and pass the code as the value. Fields, grouped:\n1. Identity — name, lastName, email (optional: preferredLanguage, newsletterConsent).\n2. Profile — `profile.linkedinUrl` (required source; optional GitHub/website/CV path).\n3. Work — freelanceType (offer: "
+  return "The talent registers THEMSELVES on Shakers (self-service; no prior session needed). Your job is to relay the non-secret profile details the talent gives you in the chat as arguments. Credentials never touch the chat or any tool argument: the tool opens a sign-up window on the talent's own machine (127.0.0.1) where they either Continue with Google (no password at all) or type an email and password directly into that local window.\n\nGO STRAIGHT TO A FILLED DRAFT — never open with a questionnaire or a list of what you do not know. (1) Your FIRST reply is one short question: may you search for and read their CV on this machine to fill everything in? (skip it if they already said yes). (2) With their yes: call suggest_register_context with talentName = the name you know, then read_cv the candidates (nameMatch first, then generic ones like cv.pdf) with talentConsent:true and talentName, until one returns mentionsTalent:true; a CV with mentionsTalent:false belongs to someone else: drop it and never show or use anything from it. From their CV take LinkedIn/GitHub (links), experience, education, languages and location; pass paths exactly as given (the short ~/ form is fine). If they say no, there is no CV, or none of the CVs is theirs, do NOT fall back to questions: build the same draft from everything else you know about them — your memory of past conversations, a search of those conversations if you have that tool, this conversation and any context or memory files you can see; the CV adds facts, it is never a precondition. (3) Pre-fill EVERY field: identity from git/your memory/the CV; workSituation from what you know (a company email or employer in memory or CV means employed there — propose it); `pricing` ALWAYS as a concrete per-project estimate from their role, seniority, stack and location, labelled as your estimate (ask only if you know nothing about their work); `workSituation.changeMotivators` as your best match; availability, languages and country from context. What you know about the person outranks git: if the git identity is someone else, ignore it. (4) Call register_preview and show ONE summary that says where each value comes from, for the talent to confirm or correct in one reply. Required fields you truly have no basis for go in one short question at the end; optional unknowns (phone, website, newsletter) in a single 'si quieres' line, never as missing items. (5) After their confirmation, call register. The sign-up goes to suggest_register_context's `environment` (local/development/staging/production): name it correctly and never call a test environment production. All of this is self-declared profile data.\n\nFor whatever you still have to ASK (only what you could not infer), ask in ONE grouped message, not one field at a time, and for every CHOICE field PRESENT THE VALID OPTIONS so the talent just picks one. For every choice field SHOW THE TALENT THE FRIENDLY LABEL, never the raw code (e.g. show 'Nativo', not 'NATIVE'), and pass the code as the value. Fields, grouped:\n1. Identity — name, lastName, email (optional: preferredLanguage, newsletterConsent).\n2. Profile — `profile.linkedinUrl` (required source; optional GitHub/website/CV path).\n3. Work — freelanceType (offer: "
     + labelledOptions(FREELANCE_TYPES, L.freelanceTypeLabels)
     + ") and `workSituation` (offer situation: "
     + labelledOptions(WORK_SITUATIONS, L.workSituationLabels)
@@ -244,15 +244,17 @@ function makeRegisterTools(deps = {}) {
     if (!check.ok) return { ok: false, step: 'signup', reason: check.reason };
 
     const created = await runLoopbackAuth({ mode: 'register', deps: resolved, lang, registerFields });
-    if (created.viaGoogle) {
+    if (created.viaSocial) {
       // Social registration is the device flow (start/poll tools), not this single blocking call.
+      const provider = created.provider || 'google';
       return {
         ok: false,
         step: 'signup',
         reason: 'use-device-flow',
         next: 'social_signin_start',
         mode: 'register',
-        message: `To register with a social provider, call social_signin_start (provider "google" or "linkedin", mode "register", freelanceType "${registerFields.freelanceType || ''}") to get a URL and code to show the talent, then social_signin_poll. Once it returns authorized, run the profile steps (import, work situation, pricing).`,
+        provider,
+        message: `To register with ${provider}, call social_signin_start (provider "${provider}", mode "register", freelanceType "${registerFields.freelanceType || ''}") to get a URL and code to show the talent, then social_signin_poll. Once it returns authorized, run the profile steps (import, work situation, pricing).`,
       };
     }
     if (!created.ok) {
@@ -460,17 +462,19 @@ function makeRegisterTools(deps = {}) {
   }
 
   // Content-free context the model may PROPOSE to the talent (never auto-write).
-  async function suggestContext() {
+  async function suggestContext(args = {}) {
     const read = deps.readRegisterContextSuggestions || require('./register-context').readRegisterContextSuggestions;
-    return { ok: true, suggestions: read({}), note: 'Propose these to the talent to confirm; never write them without confirmation.' };
+    return { ok: true, suggestions: read({ talentName: args.talentName }), note: 'Propose these to the talent to confirm; never write them without confirmation.' };
   }
 
   // Text of the CV the talent confirmed as theirs, read only with their permission.
   async function readCv(args = {}) {
     if (args.talentConsent !== true) return { ok: false, reason: 'consent-required', message: 'Ask the talent first whether this CV is theirs and whether you may read it; call again with talentConsent:true only after they say yes.' };
     const read = deps.readCvText || require('./cv-text').readCvText;
-    const result = read(args.path);
+    const result = read(args.path, { talentName: args.talentName });
     if (!result.ok) return { ...result, message: 'Could not read the CV text here. Ask the talent to attach the CV to the chat, or to tell you what it says.' };
+    // Someone else's CV (a candidate they downloaded): never hand its contents over.
+    if (result.mentionsTalent === false) return { ok: true, mentionsTalent: false, note: "This CV does not name the talent: it belongs to someone else. Do not use, quote or describe it; try the next candidate." };
     return result;
   }
 
@@ -489,18 +493,19 @@ function makeRegisterTools(deps = {}) {
     },
     {
       name: 'suggest_register_context',
-      description: "Get local SUGGESTIONS to speed up registration: the environment timezone, the local git identity (user.name / user.email), the GitHub login the gh CLI is signed in with (githubUser/githubUrl), and cvCandidates — PDF files in Desktop/Documents/Downloads whose NAME looks like a CV (names only, never read), each with nameMatch (file name contains the git name). Only propose a CV that is clearly the talent's own; never propose one named after someone else. A generic:true name (cv.pdf, curriculum_2024.pdf) may be theirs: ask 'is this CV yours? may I read it and send it with your registration?'. These are PROPOSALS only — present them to the talent to confirm (e.g. 'I see your timezone is Europe/Madrid and your git email is X — use these?') and never write any of them without the talent's confirmation. No session needed. Use it before register_preview to pre-fill availability.timezone, name/email, profile.githubUrl and profile.cvPath.",
-      inputSchema: { type: 'object', properties: {} },
+      description: "Local SUGGESTIONS to fill the registration (no network, no file contents): `environment` the sign-up goes to (local/development/staging/production — name it correctly, never call a test environment production), timezone, git name/email, the GitHub login of the gh CLI (githubUser/githubUrl), and cvCandidates — PDF/DOC/DOCX files in Desktop, Documents, Downloads and iCloud Drive whose NAME looks like a CV or carries the talent's full name, each with nameMatch and generic flags (people who hire keep other people's CVs, so a candidate is only a lead: confirm it with read_cv). Pass talentName = the talent's name as you know it to sharpen the match. Propose values, never write without the talent's confirmation.",
+      inputSchema: { type: 'object', properties: { talentName: { type: 'string', description: "The talent's full name as you know it (memory, chat); improves CV matching." } } },
       handler: suggestContext,
     },
     {
       name: 'read_cv',
-      description: "Read the TEXT of the talent's CV PDF so you can pre-fill the register and the onboarding from what it says (experience, projects, stack, languages, education). Only for a CV the talent has CONFIRMED is theirs, and only after they gave you PERMISSION to read it — set talentConsent:true only then. Typical path: one of suggest_register_context's cvCandidates. Local only: the file is read on this machine and its text comes back to you; nothing is uploaded by this tool (the CV is sent to Shakers only if the talent also confirms it as profile.cvPath in register). Returns { ok, text, truncated } or { ok:false, reason } — on failure ask the talent to attach the CV to the chat.",
+      description: "Read the TEXT of a CV file (PDF, DOC, DOCX) on this machine to fill the register and the onboarding from it. Call it once the talent has allowed you to search and read their CV (talentConsent:true), with talentName set. Returns { mentionsTalent, links: { linkedin, github, emails, phones }, text } for the talent's own CV; for a CV that does not name them it returns only mentionsTalent:false — it is someone else's: drop it, never describe it, try the next candidate. Local only: nothing is uploaded by this tool (the CV is sent to Shakers only as profile.cvPath in a confirmed register). On failure ask the talent to attach the CV to the chat.",
       inputSchema: {
         type: 'object',
         properties: {
-          path: { type: 'string', description: 'Path to the PDF the talent confirmed as their CV, exactly as suggest_register_context gave it (the short ~/ form is fine) or absolute.' },
-          talentConsent: { type: 'boolean', description: 'true ONLY after the talent explicitly agreed that this is their CV and that you may read it.' },
+          path: { type: 'string', description: 'Path to the CV file, exactly as suggest_register_context gave it (the short ~/ form is fine) or absolute.' },
+          talentConsent: { type: 'boolean', description: 'true ONLY after the talent allowed you to search for and read their CV.' },
+          talentName: { type: 'string', description: "The talent's full name as you know it; used to tell their CV from other people's." },
         },
         required: ['path', 'talentConsent'],
       },

package/src/mcp-server.js

@@ -27,7 +27,7 @@ function errorResponse(id, code, message, data) {
   return { jsonrpc: JSONRPC, id: id === undefined ? null : id, error };
 }
 
-function createMcpServer({ tools = [], serverInfo = {}, protocolVersion, beforeCall = null, instructions = null } = {}) {
+function createMcpServer({ tools = [], prompts = [], serverInfo = {}, protocolVersion, beforeCall = null, instructions = null } = {}) {
   const registry = new Map();
   for (const t of tools) {
     if (!t || !t.name || typeof t.handler !== 'function') {
@@ -36,6 +36,14 @@ function createMcpServer({ tools = [], serverInfo = {}, protocolVersion, beforeC
     registry.set(t.name, t);
   }
 
+  const promptRegistry = new Map();
+  for (const p of prompts) {
+    if (!p || !p.name || typeof p.buildMessages !== 'function') {
+      throw new Error('each prompt needs a name and a buildMessages function');
+    }
+    promptRegistry.set(p.name, p);
+  }
+
   const advertisedVersion = protocolVersion || DEFAULT_PROTOCOL_VERSION;
 
   function shapeTool(t) {
@@ -50,6 +58,27 @@ function createMcpServer({ tools = [], serverInfo = {}, protocolVersion, beforeC
     return { tools: [...registry.values()].map(shapeTool) };
   }
 
+  function shapePrompt(p) {
+    const out = { name: p.name, description: p.description || '' };
+    if (Array.isArray(p.arguments)) out.arguments = p.arguments;
+    return out;
+  }
+
+  function listPrompts() {
+    return { prompts: [...promptRegistry.values()].map(shapePrompt) };
+  }
+
+  function getPrompt(params) {
+    const name = params && params.name;
+    const prompt = name && promptRegistry.get(name);
+    if (!prompt) {
+      const err = new Error(`unknown prompt: ${name}`);
+      err.rpcCode = ERROR.INVALID_PARAMS;
+      throw err;
+    }
+    return { description: prompt.description || '', messages: prompt.buildMessages((params && params.arguments) || {}) };
+  }
+
   async function listAvailableTools() {
     const out = [];
     for (const t of registry.values()) {
@@ -112,7 +141,10 @@ function createMcpServer({ tools = [], serverInfo = {}, protocolVersion, beforeC
           const requested = msg.params && msg.params.protocolVersion;
           return resultResponse(id, {
             protocolVersion: requested || advertisedVersion,
-            capabilities: { tools: { listChanged: false } },
+            capabilities: {
+              tools: { listChanged: false },
+              ...(promptRegistry.size ? { prompts: { listChanged: false } } : {}),
+            },
             serverInfo: {
               name: serverInfo.name || 'shakers-mcp',
               version: serverInfo.version || '0.0.0',
@@ -128,6 +160,10 @@ function createMcpServer({ tools = [], serverInfo = {}, protocolVersion, beforeC
           return resultResponse(id, await listAvailableTools());
         case 'tools/call':
           return resultResponse(id, await callTool(msg.params));
+        case 'prompts/list':
+          return resultResponse(id, listPrompts());
+        case 'prompts/get':
+          return resultResponse(id, getPrompt(msg.params));
         default:
           if (isNotification(msg)) return null;
           return errorResponse(id, ERROR.METHOD_NOT_FOUND, `method not found: ${method}`);

package/src/register-context.js

@@ -11,10 +11,12 @@ const path = require('path');
 const { execFileSync } = require('child_process');
 const { getHomeDir, tildify } = require('./env-paths');
 
-// Where a talent keeps a CV, and how deep we look under each folder.
-const CV_DIRS = ['Desktop', 'Documents', 'Downloads', 'Escritorio', 'Documentos', 'Descargas'];
-const CV_MAX_DEPTH = 2;
-const CV_MAX_RESULTS = 5;
+// Where a talent keeps a CV, and how deep we look under each folder. iCloud
+// Drive holds Desktop/Documents for many Mac users.
+const CV_DIRS = ['Desktop', 'Documents', 'Downloads', 'Escritorio', 'Documentos', 'Descargas', 'Library/Mobile Documents/com~apple~CloudDocs'];
+const CV_MAX_DEPTH = 3;
+const CV_MAX_RESULTS = 8;
+const CV_EXTENSIONS = /\.(pdf|docx?)$/i;
 const CV_NAME = /(^|[^a-z])(cv|curriculum|curr[ií]culum|resume|r[ée]sum[ée])([^a-z]|$)/i;
 
 function detectTimezone() {
@@ -56,12 +58,22 @@ function detectGithubUser(home, cwd) {
 
 const fold = (text) => String(text || '').normalize('NFD').replace(/[\u0300-\u036f]/g, '').toLowerCase();
 
+const nameTokens = (personName) => fold(personName).split(/[^a-z0-9]+/).filter((t) => t.length >= 3);
+
 // Whether a file name carries a token of the person's name. People who hire keep
 // other people's CVs in Downloads; only a name match makes a candidate theirs.
 function matchesName(fileName, personName) {
-  const tokens = fold(personName).split(/[^a-z0-9]+/).filter((t) => t.length >= 3);
   const file = fold(fileName);
-  return tokens.some((t) => file.includes(t));
+  return nameTokens(personName).some((t) => file.includes(t));
+}
+
+// A file named after the person but without a CV word (`Alvaro Torro.pdf`) is a
+// candidate only when it carries their full name, so one common first name does
+// not pull in every contract and invoice.
+function carriesFullName(fileName, personName) {
+  const tokens = nameTokens(personName);
+  const file = fold(fileName);
+  return tokens.length >= 2 && tokens.every((t) => file.includes(t));
 }
 
 // Words that say nothing about whose CV it is: `cv.pdf`, `Curriculum_2024_ES.pdf`,
@@ -73,8 +85,8 @@ function isGenericCvName(fileName) {
   return rest.trim().length === 0;
 }
 
-// PDFs whose NAME looks like a CV: name matches first, then generic names, then
-// newest. Never opens a file.
+// PDF/Word files whose NAME looks like a CV or carries the person's full name:
+// name matches first, then generic names, then newest. Never opens a file.
 function findCvCandidates(home, personName) {
   const found = [];
   const walk = (dir, depth) => {
@@ -89,7 +101,8 @@ function findCvCandidates(home, personName) {
       const full = path.join(dir, entry.name);
       if (entry.isDirectory()) {
         if (depth < CV_MAX_DEPTH) walk(full, depth + 1);
-      } else if (entry.isFile() && /\.pdf$/i.test(entry.name) && CV_NAME.test(entry.name.replace(/\.pdf$/i, ''))) {
+      } else if (entry.isFile() && CV_EXTENSIONS.test(entry.name)
+        && (CV_NAME.test(entry.name.replace(CV_EXTENSIONS, '')) || carriesFullName(entry.name, personName))) {
         try {
           found.push({
             path: full,
@@ -110,19 +123,37 @@ function findCvCandidates(home, personName) {
     .map(({ path: cvPath, nameMatch, generic }) => ({ path: tildify(cvPath, { SHAKERS_CLI_HOME_DIR: home }), nameMatch, generic }));
 }
 
-// Returns the signals found, each clearly a SUGGESTION to confirm.
-function readRegisterContextSuggestions({ cwd, env = process.env } = {}) {
+// Which backend this install talks to, so the AI never calls a test sign-up
+// "production".
+function detectEnvironment(env) {
+  let base = '';
+  try {
+    base = String(require('./config').getHubBase(env) || '');
+  } catch {
+    return 'unknown';
+  }
+  if (/localhost|127\.0\.0\.1/.test(base)) return 'local';
+  if (/staging/.test(base)) return 'staging';
+  if (/\.dev\.|new-works/.test(base)) return 'development';
+  return base ? 'production' : 'unknown';
+}
+
+// Returns the signals found, each clearly a SUGGESTION to confirm. `talentName`
+// (what the AI already knows) sharpens the CV match beyond the git name.
+function readRegisterContextSuggestions({ cwd, env = process.env, talentName } = {}) {
   const home = getHomeDir(env);
   const githubUser = detectGithubUser(home, cwd);
   const gitName = gitConfig('user.name', cwd);
+  const personName = [talentName, gitName].filter((n) => typeof n === 'string' && n.trim()).join(' ');
   return {
+    environment: detectEnvironment(env),
     timezone: detectTimezone(),
     gitName,
     gitEmail: gitConfig('user.email', cwd),
     githubUser,
     githubUrl: githubUser ? `https://github.com/${githubUser}` : null,
-    cvCandidates: findCvCandidates(home, gitName),
+    cvCandidates: findCvCandidates(home, personName),
   };
 }
 
-module.exports = { readRegisterContextSuggestions, detectTimezone, findCvCandidates, detectGithubUser, isGenericCvName };
+module.exports = { readRegisterContextSuggestions, detectTimezone, findCvCandidates, detectGithubUser, isGenericCvName, detectEnvironment, nameTokens, fold };

package/src/scanner.js

@@ -202,7 +202,19 @@ function computeRecency(paths) {
 /* ---------- version: ONLY runs the ALREADY detected binary, with --version ---------- */
 /* Never arbitrary commands; all output is discarded except the version pattern. */
 
+// scan() runs once per selected repo; remember each binary's version for a minute instead of asking again.
+const VERSION_TTL_MS = 60 * 1000;
+const versionCache = new Map();
+
 function getVersion(bin) {
+  const cached = versionCache.get(bin);
+  if (cached && Date.now() - cached.at <= VERSION_TTL_MS) return cached.version;
+  const version = readVersion(bin);
+  versionCache.set(bin, { version, at: Date.now() });
+  return version;
+}
+
+function readVersion(bin) {
   try {
     const out = execFileSync(bin, ['--version'], {
       timeout: 3000,
@@ -609,4 +621,4 @@ function mergeReports(reports) {
   };
 }
 
-module.exports = { scan, scanForRoots };
+module.exports = { scan, scanForRoots, getVersion };