shakers-cli-beta 0.9.0 → 0.10.1

package/README.md

@@ -380,15 +380,39 @@ Desktop) can drive the same features as tools. It exposes, among others:
 
 - **AI usage**: `ai_usage`, `ai_usage_result`.
 - **Auth**: `login`, `logout`, `social_signin_start`, `social_signin_poll`.
-- **Register / onboarding**: `register`, `register_status`,
-  `onboarding_interview_start`, `onboarding_interview_turn`,
-  `onboarding_interview_complete`, `repeat_onboarding_interview`
+- **Sign-up** (from the talent's own AI, ticket 39540; copy from UX review
+  39574): every talent-facing text is fixed, comes from the tools in the
+  talent's language (es/en/it/pt, fixed by their first message) and the AI shows
+  it word for word. `signup_start` (welcome and permission to look for the CV),
+  `signup_email` (the email they read most), `signup_draft` (the profile draft
+  and the data notice, confirmed before the account exists),
+  `signup_create_account` (starts the hub import of LinkedIn + CV + what the AI
+  knows and opens the local password/Google window, which claims that profile
+  with a code kept only in memory; if the email already has an account, the
+  window asks the talent to sign in instead), `signup_status`,
+  `update_existing_profile` (shows what would change in an existing profile and
+  re-imports filling only empty fields), `save_profile_details`,
+  `import_profile`, `open_web` (opens the web signed in through a one-time
+  link), `open_linkedin_profile` (only when the talent does not know where to
+  find their LinkedIn URL), plus `suggest_register_context` and `read_cv`.
+  `ai_usage` is the step after the account exists, right after its two
+  disclaimers.
+- **Onboarding interview**: `onboarding_interview_start`,
+  `onboarding_interview_turn`, `onboarding_interview_complete` (if LiveKit
+  cannot load, the talent is sent to the web), `repeat_onboarding_interview`
   (OVERWRITE-repeat — the agent must warn the talent it is irreversible before
-  calling), `onboarding_finish`.
+  calling), `onboarding_finish` (only after a repeat; the sign-up never calls it).
 - **Roles**: `list_available_roles`, `add_role`, `list_my_roles`, `set_main_role`
   — `set_main_role` is the onboarding **final step** (after
   `onboarding_interview_complete`, or if the interview was skipped, offer
   `list_my_roles` and set the picked one).
+- **Closed questions** of the sign-up (AI-usage consent, which email, interview
+  here or later, how to answer it, main role) are answered by picking an option.
+  When the client declares the MCP `elicitation` capability (spec 2025-06-18),
+  the tool asks in the client's own dialog (`elicitation/create`) and gets the
+  pick directly; otherwise it returns `question` and `options` and the AI offers
+  them as buttons or a numbered list. The legal texts are always shown in the
+  chat before any consent dialog.
 - **Profile / skills / agents**: `list_addable`, `add_skill`, `add_agent`,
   `add_project`, `get_profile`, `get_rate`, `get_languages`, `list_socials`,
   `list_experiences`, `list_portfolios`, `get_availability`.
@@ -398,7 +422,8 @@ Desktop) can drive the same features as tools. It exposes, among others:
 - **Alma**: `ask`.
 
 MCP tool names are **stable** (renaming would break existing client configs); the
-role tools above were added, not renamed.
+role tools above were added, not renamed. `register`, `register_preview` and
+`register_status` were removed with the sign-up redesign, not renamed.
 
 ## Try it
 

package/bin/ai-usage.js

@@ -24,29 +24,14 @@ const {
   renderAndFinalize,
 } = require('../src/usage-run-steps');
 
-// `run(argv, { ask })`: shared by the dispatcher and register flow; an injected
-// `ask` is caller-owned. `bypassThrottle` (options, not argv) stays register-only.
-async function run(argv = process.argv.slice(2), { ask: injectedAsk = null, bypassThrottle = false, inRegistration = false } = {}) {
-  const opts = parseArgs(argv);
-
-  // Resolve language first so even --help is localized.
-  const lang = opts.lang || detectReportLang();
-  const catalog = getCatalog(lang);
-
-  if (opts.help) {
-    process.stdout.write(catalog.cli.help);
-    return;
-  }
-
-  // One-shot commands (consent/endpoint config): act immediately, do NOT scan.
-  if (await handleOneShotCommand({ opts, catalog, injectedAsk })) return;
-
+// Steps 1-6 of a run: scan, scope, aggregate, classify; nothing is rendered or sent.
+async function computeUsage({ opts, catalog, lang, injectedAsk = null, inRegistration = false }) {
   // 1. Local scan + classify (always computed and shown, ADR-011/013).
   const { report, root, rootDir } = performScan({ opts, catalog });
 
   // 2. Identity gate + local agent-usage signal. Roadmap only for anonymous runs
   //    (gate.showRoadmap = !loggedIn) AND never during register/onboarding.
-  const { gate: identityGate } = prepareIdentityAndUsage({ report, catalog });
+  const { gate: identityGate } = prepareIdentityAndUsage({ report, catalog, quiet: opts.json === true });
   const gate = (inRegistration && identityGate.showRoadmap)
     ? { ...identityGate, showRoadmap: false }
     : identityGate;
@@ -73,12 +58,40 @@ async function run(argv = process.argv.slice(2), { ask: injectedAsk = null, bypa
   await runModelCalls({
     report, maturity, aiConsentGranted, opts, gate, hasAgents, agentRoots, rootDir, lang, catalog,
   });
+  return { report, maturity, root, gate };
+}
+
+// The MCP's scan: same steps, returned instead of printed, since stdout is its JSON-RPC channel.
+async function scanUsage(argv) {
+  const opts = parseArgs(argv);
+  const lang = opts.lang || detectReportLang();
+  const { report, maturity } = await computeUsage({ opts, catalog: getCatalog(lang), lang });
+  return { report, maturity };
+}
+
+// Shared by the dispatcher and register flow: an injected `ask` is caller-owned, `bypassThrottle` is register-only.
+async function run(argv = process.argv.slice(2), { ask: injectedAsk = null, bypassThrottle = false, inRegistration = false } = {}) {
+  const opts = parseArgs(argv);
+
+  // Resolve language first so even --help is localized.
+  const lang = opts.lang || detectReportLang();
+  const catalog = getCatalog(lang);
+
+  if (opts.help) {
+    process.stdout.write(catalog.cli.help);
+    return;
+  }
+
+  // One-shot commands (consent/endpoint config): act immediately, do NOT scan.
+  if (await handleOneShotCommand({ opts, catalog, injectedAsk })) return;
+
+  const { report, maturity, root, gate } = await computeUsage({ opts, catalog, lang, injectedAsk, inRegistration });
 
   // 7. Render (or emit --json), persist, optional --build-next-level, auto-share.
   await renderAndFinalize({ report, maturity, lang, opts, root, gate, catalog, bypassThrottle });
 }
 
-module.exports = { run, resolveRepoScope, machineWideToplevels, promptScope };
+module.exports = { run, scanUsage, resolveRepoScope, machineWideToplevels, promptScope };
 
 // Auto-run only when executed directly, not when require()'d by the dispatcher.
 if (require.main === module) {

package/bin/mcp.js

@@ -23,9 +23,11 @@ const { makeOnboardingTools } = require('../src/mcp-onboarding-tools');
 const { makeRoleTools } = require('../src/mcp-role-tools');
 const { makeDeviceLoginTools } = require('../src/mcp-device-login-tools');
 const { makeRegisterTools } = require('../src/mcp-register-tools');
+const { makeSignupTools } = require('../src/mcp-signup-tools');
 const { detectFlowLang } = require('../src/i18n');
 const { makeReportTools } = require('../src/mcp-report-tools');
 const { makePrompts } = require('../src/mcp-prompts');
+const { buildServerInstructions } = require('../src/mcp-instructions');
 const { ensureFreshSession } = require('../src/session-refresh');
 
 let VERSION = '';
@@ -43,7 +45,10 @@ const HELP = `\n  shakers mcp — local MCP server (stdio)\n\n`
   + `  MCP client, not run by hand.\n`
   + `  Tools: ai_usage, ai_usage_result, login, logout, social_signin_start, social_signin_poll,\n`
   + `         list_addable, add_skill, add_agent,\n`
-  + `         add_project, suggest_register_context, read_cv, register_preview, register, register_status, onboarding_interview_start,\n`
+  + `         add_project, signup_start, signup_email, signup_draft, signup_create_account,\n`
+  + `         signup_status, update_existing_profile, import_profile, save_profile_details, open_web,\n`
+  + `         open_linkedin_profile,\n`
+  + `         suggest_register_context, read_cv, onboarding_interview_start,\n`
   + `         onboarding_interview_turn, onboarding_interview_complete,\n`
   + `         repeat_onboarding_interview, onboarding_finish,\n`
   + `         list_available_roles, add_role, list_my_roles, set_main_role,\n`
@@ -54,21 +59,6 @@ const HELP = `\n  shakers mcp — local MCP server (stdio)\n\n`
   + `         list_certifications, get_profile, get_rate, get_languages,\n`
   + `         list_socials, list_experiences, list_portfolios, ask.\n\n`;
 
-// The register and onboarding flows span several tools. Clients that load tool
-// schemas on demand only see the tool the model picked first, so the flow lives
-// here, where the client keeps it in context.
-const SERVER_INSTRUCTIONS = [
-  'Shakers talent tools. When the talent asks to register or sign up on Shakers, go straight to a filled draft: you fill the registration from what you know and from their CV, and they only confirm. Never open with a questionnaire or a list of what you do not know.',
-  'Register flow — load and use these tools in this order:',
-  '1. First reply: ONE short question — may you search for and read their CV on this machine to fill everything in?',
-  '2. With their yes: suggest_register_context (with talentName), then read_cv on the candidates (talentConsent:true, talentName) until one has mentionsTalent:true. Drop any CV with mentionsTalent:false (someone else\'s) without describing it. Take LinkedIn, GitHub, experience, languages and location from their CV.',
-  'No CV, no permission, or none of the CVs is theirs: do NOT fall back to questions. Build the same draft from everything else you know about them: your memory of past conversations, a search of those conversations if you have that tool, this conversation and any context or memory files you can see. The CV adds facts; it is never a precondition.',
-  '3. Infer EVERY field: employment from what you know (a company email or employer means employed there), pricing as a concrete estimate from role, seniority and location, motivation as your best match. Call register_preview.',
-  '4. Show ONE summary saying where each value comes from; only truly unknown required fields as a short question at the end, optional unknowns in one line. The sign-up goes to suggest_register_context\'s `environment`: never call a test environment production.',
-  '5. After their confirmation, call register.',
-  'Onboarding interview (onboarding_interview_start / onboarding_interview_turn): follow the ANSWER MODE described in onboarding_interview_start.',
-].join('\n');
-
 // The LOCAL (filesystem/machine) tools — the only ones the .mcpb bundle exposes; the
 // server-backed tools belong to the remote connector.
 const LOCAL_ONLY_TOOL_NAMES = new Set(['ai_usage', 'ai_usage_result', 'read_cv', 'suggest_register_context']);
@@ -76,15 +66,16 @@ const LOCAL_ONLY_TOOL_NAMES = new Set(['ai_usage', 'ai_usage_result', 'read_cv',
 // `localOnly` builds the scan-only server for the Claude .mcpb bundle, reusing the SAME
 // tool registry (just filtered) — no duplicate registration.
 function buildServer({ localOnly = false } = {}) {
-  const allTools = [makeAiUsageTool(), makeAiUsageResultTool(), ...makeOnboardingTools(), ...makeRoleTools(), ...makeDeviceLoginTools(), ...makeRegisterTools({ lang: detectFlowLang() }), ...makeReportTools(), ...makeCertifyDimensionTools(), ...makeFindProjectsTools(), ...makeShowProjectTools(), ...makeSavedPositionsTools(), ...makeInvitationsTools(), ...makeApplicationsTools(), ...makeAvailabilityTools(), ...makeCertificationsTools(), ...makeProfileTools(), ...makeRateTools(), ...makeLangTools(), ...makeSocialsTools(), ...makePortfolioTools(), ...makeAskTools(), ...makeAlmaTools()];
+  const lang = detectFlowLang();
+  const allTools = [makeAiUsageTool(), makeAiUsageResultTool(), ...makeOnboardingTools(), ...makeRoleTools({ lang }), ...makeDeviceLoginTools(), ...makeSignupTools({ lang }), ...makeRegisterTools({ lang }), ...makeReportTools(), ...makeCertifyDimensionTools(), ...makeFindProjectsTools(), ...makeShowProjectTools(), ...makeSavedPositionsTools(), ...makeInvitationsTools(), ...makeApplicationsTools(), ...makeAvailabilityTools(), ...makeCertificationsTools(), ...makeProfileTools(), ...makeRateTools(), ...makeLangTools(), ...makeSocialsTools(), ...makePortfolioTools(), ...makeAskTools(), ...makeAlmaTools()];
   const tools = localOnly ? allTools.filter((t) => LOCAL_ONLY_TOOL_NAMES.has(t.name)) : allTools;
   // Slash-command prompts, kept to the tools actually registered in this mode.
-  const prompts = makePrompts(new Set(tools.map((t) => t.name)));
+  const prompts = makePrompts(new Set(tools.map((t) => t.name)), lang);
   return createMcpServer({
     tools,
     prompts,
     serverInfo: { name: localOnly ? 'Shakers (local scan)' : 'Shakers', version: VERSION || '0.0.0' },
-    instructions: localOnly ? null : SERVER_INSTRUCTIONS,
+    instructions: localOnly ? null : (client) => buildServerInstructions(client),
     // Long-lived server: refresh the email session's hub JWT from the stored
     // cookie before each tool call so a stale (~15-min) JWT never reaches a tool.
     beforeCall: () => ensureFreshSession(process.env),
@@ -120,7 +111,7 @@ async function run(argv = process.argv.slice(2)) {
   });
 }
 
-module.exports = { run, buildServer };
+module.exports = { run, buildServer, buildServerInstructions };
 
 if (require.main === module) {
   run();

package/bin/mcpb.js

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+'use strict';
+
+// Claude Desktop's built-in Node imports this entry from its own host, so it starts without a require.main check.
+require('./mcp').run();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shakers-cli-beta",
-  "version": "0.9.0",
+  "version": "0.10.1",
   "description": "Shakers AI usage & skills evaluator: a local-first CLI (`shakers` binary) plus a local MCP server. Commands: ai-usage (scan + classify your AI-tool setup, T0-T7), certify (certify Skills from your code), share (branded LinkedIn card).",
   "type": "commonjs",
   "bin": {
@@ -23,7 +23,7 @@
     "node": ">=18"
   },
   "dependencies": {
-    "@livekit/rtc-node": "^0.13.0"
+    "@livekit/rtc-node": "0.13.35"
   },
   "keywords": [
     "shakers",

package/src/auth-session-store.js

@@ -210,5 +210,6 @@ module.exports = {
   isPlatformTalent,
   PLATFORM_TALENT_USER_TYPES,
   decodeJwtPayload,
+  emailFromHubToken,
   firstNameFromSession,
 };

package/src/backend-request.js

@@ -113,8 +113,8 @@ function postMultipartWithTimeout(url, fields, timeoutMs, method = 'POST', extra
         chunks.push(value.data, Buffer.from('\r\n'));
         continue;
       }
-      const clean = String(value).replace(UNSAFE_HEADER_VALUE_RE, '');
-      chunks.push(Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="${name}"\r\n\r\n${clean}\r\n`));
+      // The boundary delimits a part, so a value keeps its line breaks (a multi-line userQuery).
+      chunks.push(Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="${name}"\r\n\r\n${String(value)}\r\n`));
     }
     chunks.push(Buffer.from(`--${boundary}--\r\n`));
     const data = Buffer.concat(chunks);

package/src/config.js

@@ -528,6 +528,31 @@ function getImportProfileEndpoint(env = process.env) {
   return deriveFromHub(env, 'works/me/import-profile');
 }
 
+// MCP sign-up (ticket 39540): public UNREGISTERED + claim code, its import status, and the one-time web login.
+function getMcpSignupEndpoint(env = process.env) {
+  return deriveFromHub(env, 'works-ai/talents/mcp-signup');
+}
+
+function getMyImportStatusEndpoint(env = process.env) {
+  return deriveFromHub(env, 'works/me/import-profile/status');
+}
+
+function getOneTimeTokenEndpoint(env = process.env) {
+  return deriveFromHub(env, 'auth/one-time-token/generate');
+}
+
+// The ONE place the web route that redeems a one-time token is spelled (the route itself is a later works-frontend ticket).
+function getOneTimeLoginUrl(token, env = process.env) {
+  if (typeof token !== 'string' || !token) return null;
+  const profile = getTalentProfileUrl(env);
+  if (!profile) return null;
+  try {
+    return `${new URL(profile).origin}/auth/one-time?token=${encodeURIComponent(token)}`;
+  } catch {
+    return null;
+  }
+}
+
 function getProfessionalDetailsEndpoint(env = process.env) {
   const explicit = readEnv(env, 'PROFESSIONAL_DETAILS_ENDPOINT');
   if (explicit && explicit.trim()) return explicit.trim();
@@ -763,6 +788,10 @@ module.exports = {
   sanitizeStaleBakedEndpoints,
   getSignUpEndpoint,
   getImportProfileEndpoint,
+  getMcpSignupEndpoint,
+  getMyImportStatusEndpoint,
+  getOneTimeTokenEndpoint,
+  getOneTimeLoginUrl,
   getProfessionalDetailsEndpoint,
   getPricingRateEndpoint,
   getSetAvailabilityEndpoint,

package/src/cv-file.js

@@ -0,0 +1,62 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+const { expandHome } = require('./env-paths');
+
+// The talent names a file on their own machine. Read it only when the resolved file (symlinks
+// followed) really is a CV: an allowed extension, a regular file, under the cap, and starting
+// with that format's signature. Anything else is refused before it is loaded or sent.
+const CV_MAX_BYTES = 10 * 1024 * 1024;
+
+const CV_FORMATS = {
+  '.pdf': { contentType: 'application/pdf', signature: Buffer.from('%PDF-') },
+  '.doc': { contentType: 'application/msword', signature: Buffer.from([0xd0, 0xcf, 0x11, 0xe0]) },
+  '.docx': {
+    contentType: 'application/vnd.openxmlformats-officedocument.wordprocessingml.document',
+    signature: Buffer.from([0x50, 0x4b, 0x03, 0x04]),
+  },
+};
+
+function readLocalCv(input, { extensions, badFormat }) {
+  if (typeof input !== 'string' || !input.trim()) return { ok: false, reason: 'cv-not-found' };
+  const given = expandHome(input.trim());
+  const ext = path.extname(given).toLowerCase();
+  if (!extensions.includes(ext)) return { ok: false, reason: badFormat };
+  const format = CV_FORMATS[ext];
+  let real;
+  try {
+    real = fs.realpathSync(given);
+  } catch {
+    return { ok: false, reason: 'cv-not-found' };
+  }
+  if (path.extname(real).toLowerCase() !== ext) return { ok: false, reason: badFormat };
+
+  let fd;
+  try {
+    fd = fs.openSync(real, 'r');
+  } catch {
+    return { ok: false, reason: 'cv-not-found' };
+  }
+  try {
+    const stat = fs.fstatSync(fd);
+    if (!stat.isFile()) return { ok: false, reason: 'cv-not-found' };
+    if (stat.size > CV_MAX_BYTES) return { ok: false, reason: 'cv-too-large' };
+    const data = Buffer.alloc(stat.size);
+    let read = 0;
+    while (read < stat.size) {
+      const n = fs.readSync(fd, data, read, stat.size - read, read);
+      if (n === 0) break;
+      read += n;
+    }
+    const content = data.subarray(0, read);
+    if (!content.subarray(0, format.signature.length).equals(format.signature)) return { ok: false, reason: badFormat };
+    return { ok: true, file: { filename: path.basename(given), contentType: format.contentType, data: content } };
+  } catch {
+    return { ok: false, reason: 'cv-not-found' };
+  } finally {
+    fs.closeSync(fd);
+  }
+}
+
+module.exports = { readLocalCv, CV_MAX_BYTES };

package/src/device-login.js

@@ -32,7 +32,7 @@ async function pollDeviceToken({ deviceCode, tokenEndpoint, clientId, timeoutMs
 
 // ORDER: a NEW user needs complete-registration BEFORE GET /auth/token (else the Hub 500s: no domain user).
 async function finalizeDeviceSession(
-  { sessionToken, isNewUser, authTokenEndpoint, completeRegistrationEndpoint = null, registrationContext = null, timeoutMs } = {},
+  { sessionToken, isNewUser, authTokenEndpoint, completeRegistrationEndpoint = null, registrationContext = null, claimCode = null, timeoutMs } = {},
   {
     requestCompleteRegistration = require('./signup-client').requestCompleteRegistration,
     requestApiToken: apiToken = requestApiToken,
@@ -40,14 +40,16 @@ async function finalizeDeviceSession(
 ) {
   if (!authTokenEndpoint) return { ok: false, reason: 'no-endpoint' };
 
+  let claimed = false;
   if (isNewUser && completeRegistrationEndpoint) {
-    const done = await requestCompleteRegistration(registrationContext || {}, { endpoint: completeRegistrationEndpoint, bearerToken: sessionToken, timeoutMs });
+    const done = await requestCompleteRegistration(registrationContext || {}, { endpoint: completeRegistrationEndpoint, bearerToken: sessionToken, claimCode, timeoutMs });
     if (!done.ok) return { ok: false, reason: done.reason || 'complete-registration-failed' };
+    claimed = done.claimed === true;
   }
 
   const jwt = await apiToken({ accessToken: sessionToken }, { endpoint: authTokenEndpoint, timeoutMs });
   if (!jwt.ok) return { ok: false, reason: 'token-exchange-failed' };
-  return { ok: true, token: jwt.token };
+  return claimCode ? { ok: true, token: jwt.token, claimed } : { ok: true, token: jwt.token };
 }
 
 async function runDeviceLogin(

package/src/find-projects-client.js

@@ -47,12 +47,13 @@ function strArray(v) {
 }
 
 // Only fields the readview's criteria map supports server-side: savedByMe,
-// attendance, country (confirmed in FindPositionsService + its prisma readview).
+// attendance, country, clusterIds (confirmed in FindPositionsService + its prisma readview).
 // languages and skills are output-only (no filter field) → not built here.
-function buildCriteria(tab, { limit = DEFAULT_LIMIT, offset = 0, attendance = null, country = null } = {}) {
+function buildCriteria(tab, { limit = DEFAULT_LIMIT, offset = 0, attendance = null, country = null, clusterId = null } = {}) {
   const criteria = { limit, offset };
   const conditions = [];
   if (tab === 'saved') conditions.push({ field: 'savedByMe', operator: 'EQUALS', value: true });
+  if (clusterId) conditions.push({ field: 'clusterIds', operator: 'IN', value: [clusterId] });
   if (attendance) conditions.push({ field: 'attendance', operator: 'IN', value: [attendance] });
   if (country) conditions.push({ field: 'country', operator: 'IN', value: [country] });
   if (conditions.length) criteria.filter = { conjunction: 'AND', conditions };
@@ -93,12 +94,12 @@ function normalizeItem(raw) {
 
 async function requestFindProjects(
   { hubAccessToken } = {},
-  { tab = 'all', endpoint, timeoutMs = DEFAULT_TIMEOUT_MS, limit = DEFAULT_LIMIT, offset = 0, attendance = null, country = null } = {},
+  { tab = 'all', endpoint, timeoutMs = DEFAULT_TIMEOUT_MS, limit = DEFAULT_LIMIT, offset = 0, attendance = null, country = null, clusterId = null } = {},
 ) {
   if (!endpoint) return { ok: false, reason: 'no-endpoint' };
   if (!hubAccessToken) return { ok: false, reason: 'no-hub-token' };
 
-  const criteria = buildCriteria(tab, { limit, offset, attendance, country });
+  const criteria = buildCriteria(tab, { limit, offset, attendance, country, clusterId });
   const url = `${endpoint}${endpoint.includes('?') ? '&' : '?'}criteria=${encodeURIComponent(JSON.stringify(criteria))}`;
   let res;
   try {
@@ -117,18 +118,27 @@ async function requestFindProjects(
 }
 
 // CLI+MCP entry: resolve the endpoint from config, then fetch one page.
-async function fetchFindProjects(deps = {}, { hubAccessToken, tab = 'all', timeoutMs = DEFAULT_TIMEOUT_MS, limit = DEFAULT_LIMIT, offset = 0, attendance = null, country = null } = {}) {
+async function fetchFindProjects(deps = {}, { hubAccessToken, tab = 'all', timeoutMs = DEFAULT_TIMEOUT_MS, limit = DEFAULT_LIMIT, offset = 0, attendance = null, country = null, clusterId = null } = {}) {
   const {
     getFindPositionsEndpoint = require('./config').getFindPositionsEndpoint,
     requestFindProjects: request = requestFindProjects,
   } = deps;
   const endpoint = getFindPositionsEndpoint();
   if (!endpoint) return { ok: false, reason: 'no-endpoint' };
-  return request({ hubAccessToken }, { tab, endpoint, timeoutMs, limit, offset, attendance, country });
+  return request({ hubAccessToken }, { tab, endpoint, timeoutMs, limit, offset, attendance, country, clusterId });
+}
+
+// Open positions visible to the talent that look for one role (cluster): the list's own total, one row fetched.
+async function countOpenPositions(deps = {}, { hubAccessToken, clusterId, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  const res = await fetchFindProjects(deps, { hubAccessToken, timeoutMs, limit: 1, clusterId });
+  if (!res.ok) return res;
+  const total = res.meta && Number.isInteger(res.meta.total) ? res.meta.total : null;
+  return total === null ? { ok: false, reason: 'no-total' } : { ok: true, total };
 }
 
 module.exports = {
   TABS,
+  countOpenPositions,
   ATTENDANCE,
   DEFAULT_LIMIT,
   buildCriteria,

package/src/i18n.js

@@ -3,6 +3,7 @@
 const { detectLangCode } = require('./locale');
 const { toLowerLang } = require('./lang-codes');
 const { CATEGORIES } = require('./detectors');
+const { LEGAL } = require('./signup-copy');
 
 // Localization of the report (HTML + terminal) and of the CLI notices tied to the report.
 
@@ -38,7 +39,7 @@ const catalogs = {
       askFreelanceOpinion: 'Cual es tu opinion sobre el freelance?',
       freelanceOpinionLabels: {
         WAS_FREELANCE_BEFORE: 'Ya he sido freelance',
-        OPEN_TO_FREELANCE: 'Me plantearia ser freelance',
+        OPEN_TO_FREELANCE: 'Me plantearía ser freelance',
         NOT_INTERESTED: 'No me interesa',
       },
       askChangeMotivators: 'Que te motiva del freelance o de Shakers?',
@@ -50,7 +51,7 @@ const catalogs = {
         COMMUNITY: 'Pertenecer a una comunidad',
         LIFESTYLE_CHANGE: 'Cambiar de estilo de vida',
       },
-      professionalSaved: 'Situacion laboral guardada.',
+      professionalSaved: 'Situación laboral guardada.',
       chooseMethodHeading: '¿Cómo quieres crear tu cuenta?',
       signupTitle: 'Crea tu cuenta de Shakers',
       askName: 'Nombre:',
@@ -87,7 +88,7 @@ const catalogs = {
       availableAsk: 'Estas disponible para nuevos proyectos? (s/n):',
       monthlyHoursAsk: 'Cuantas horas al mes?',
       workModesAsk: 'En que modalidad quieres trabajar? (marca una o varias)',
-      workModeLabels: { REMOTE: 'Remoto', HYBRID: 'Hibrido', IN_PERSON: 'Presencial' },
+      workModeLabels: { REMOTE: 'Remoto', HYBRID: 'Híbrido', IN_PERSON: 'Presencial' },
       workModesHint: 'Espacio para marcar/desmarcar · Enter para confirmar',
       onlyRemoteNote: 'Has marcado solo Remoto: no veras proyectos hibridos ni presenciales.',
       countryAsk: 'Pais (codigo ISO-2 de 2 letras, p.ej. ES):',
@@ -97,7 +98,7 @@ const catalogs = {
       longFullTimeAsk: 'Abierto a proyectos largos a tiempo completo? (s/n):',
       phonePrefixAsk: 'Prefijo telefonico (opcional, p.ej. +34, Enter para omitir):',
       phoneNumberAsk: 'Numero de telefono (opcional, Enter para omitir):',
-      phoneSaved: 'Telefono guardado.',
+      phoneSaved: 'Teléfono guardado.',
       phoneUnavailable: 'No pudimos guardar tu telefono ahora. Puedes actualizarlo mas tarde.',
       availabilitySaved: 'Disponibilidad guardada.',
       availabilityUnavailable: 'No pudimos guardar tu disponibilidad ahora. Puedes actualizarla mas tarde.',
@@ -106,35 +107,35 @@ const catalogs = {
       languagesAsk: 'Quieres indicar los idiomas que hablas? (s/n):',
       askLanguageCode: 'Idioma:',
       languageNames: {
-        es: 'Espanol',
-        en: 'Ingles',
-        fr: 'Frances',
-        ca: 'Catalan',
-        de: 'Aleman',
+        es: 'Español',
+        en: 'Inglés',
+        fr: 'Francés',
+        ca: 'Catalán',
+        de: 'Alemán',
         eu: 'Euskera',
         it: 'Italiano',
-        pt: 'Portugues',
+        pt: 'Portugués',
       },
       askLanguageLevel: 'Tu nivel en ese idioma:',
       languageLevelLabels: {
-        NATIVE: 'Nativo o bilingue',
-        ADVANCED: 'Fluido en el trabajo y el dia a dia',
-        INTERMEDIATE: 'Puedo trabajar en el (hablado y escrito)',
-        INTERMEDIATE_WRITTEN: 'Puedo trabajar en el, prefiero comunicacion escrita',
+        NATIVE: 'Nativo o bilingüe',
+        ADVANCED: 'Fluido en el trabajo y el día a día',
+        INTERMEDIATE: 'Puedo trabajar en él (hablado y escrito)',
+        INTERMEDIATE_WRITTEN: 'Puedo trabajar en él, prefiero comunicación escrita',
       },
       askAnotherLanguage: 'Quieres anadir otro idioma? (s/n):',
       languagesSaved: 'Idiomas guardados.',
       languagesUnavailable: 'No pudimos guardar tus idiomas ahora. Puedes anadirlos mas tarde.',
       languagesSkipped: 'De acuerdo, puedes indicar tus idiomas mas tarde.',
       usageTitle: 'Evaluacion de tu uso de IA (opcional)',
-      usageInfoAccessed: 'Se accede a: la estructura de tus herramientas de IA y a extractos redactados de tu actividad en este equipo. Tu codigo y tus prompts en crudo NUNCA salen de tu maquina.',
-      usageGoalDuration: 'Objetivo: medir como trabajas con IA para tu perfil. Duracion: ~1-2 minutos.',
+      usageInfoAccessed: LEGAL.es.usageInfoAccessed,
+      usageGoalDuration: LEGAL.es.usageGoalDuration,
       usageAccept: 'Quieres evaluar tu uso de IA ahora? (s/n):',
       usageSkippedEvidence: 'Ya tienes evidencia de uso de IA en Shakers; nos saltamos este paso.',
       interviewTitle: 'Entrevista de onboarding (opcional)',
       interviewOnlyTitle: 'Entrevista de onboarding',
-      interviewInfoAccessed: 'Se accede a: tus respuestas en esta entrevista y tu perfil importado. La conduce el servidor de Shakers.',
-      interviewGoalDuration: 'Objetivo: conocer tu rol, tu dedicacion y como usas la IA. Duracion: ~5 minutos.',
+      interviewInfoAccessed: LEGAL.es.interviewInfoAccessed,
+      interviewGoalDuration: LEGAL.es.interviewGoalDuration,
       interviewAccept: 'Quieres hacer la entrevista ahora? (s/n):',
       interviewComplete: 'Entrevista completada. Gracias!',
       interviewAlreadyDone: 'Ya completaste la entrevista de onboarding; no se puede repetir desde la CLI. Puedes seguir ajustando tu perfil.',
@@ -1730,14 +1731,14 @@ const catalogs = {
       languagesUnavailable: 'We could not save your languages right now. You can add them later.',
       languagesSkipped: 'OK, you can add your languages later.',
       usageTitle: 'Evaluate your AI usage (optional)',
-      usageInfoAccessed: 'Accessed: the structure of your AI tools and redacted excerpts of your activity on this machine. Your raw code and prompts NEVER leave your machine.',
-      usageGoalDuration: 'Goal: measure how you work with AI for your profile. Duration: ~1-2 minutes.',
+      usageInfoAccessed: LEGAL.en.usageInfoAccessed,
+      usageGoalDuration: LEGAL.en.usageGoalDuration,
       usageAccept: 'Do you want to evaluate your AI usage now? (y/n):',
       usageSkippedEvidence: 'You already have AI-usage evidence on Shakers; skipping this step.',
       interviewTitle: 'Onboarding interview (optional)',
       interviewOnlyTitle: 'Onboarding interview',
-      interviewInfoAccessed: 'Accessed: your answers in this interview and your imported profile. It is conducted by the Shakers server.',
-      interviewGoalDuration: 'Goal: learn your role, your dedication and how you use AI. Duration: ~5 minutes.',
+      interviewInfoAccessed: LEGAL.en.interviewInfoAccessed,
+      interviewGoalDuration: LEGAL.en.interviewGoalDuration,
       interviewAccept: 'Do you want to take the interview now? (y/n):',
       interviewComplete: 'Interview complete. Thank you!',
       interviewAlreadyDone: 'You already completed the onboarding interview; it cannot be repeated from the CLI. You can keep refining your profile.',