shakers-cli 0.0.0-stage → 0.14.1

package/src/portfolio-git-info.js

@@ -0,0 +1,61 @@
+'use strict';
+
+const { execFileSync } = require('child_process');
+
+// Git-derived signals for the "Add project to portfolio" route (talents-ai- score, ADR-059): the remote URL (step 4) and the first/last-commit date range (auto `startDate`/`endDate`).
+
+const GIT_TIMEOUT_MS = 15000;
+
+function runGit(root, args) {
+  try {
+    return execFileSync('git', ['-C', root, ...args], {
+      encoding: 'utf8',
+      timeout: GIT_TIMEOUT_MS,
+      stdio: ['ignore', 'pipe', 'ignore'],
+      maxBuffer: 8 * 1024 * 1024,
+    });
+  } catch {
+    return null;
+  }
+}
+
+function getRemoteUrl(root) {
+  const raw = runGit(root, ['remote', 'get-url', 'origin']);
+  if (!raw || !raw.trim()) return null;
+  return normalizeRemoteUrl(raw.trim());
+}
+
+function normalizeRemoteUrl(url) {
+  const stripped = url.replace(/\.git$/, '');
+  const scp = stripped.match(/^[^@/]+@([^:]+):(.+)$/); // git@host:owner/repo
+  if (scp) return `https://${scp[1]}/${scp[2]}`;
+  try {
+    const u = new URL(stripped);
+    if (u.protocol !== 'http:' && u.protocol !== 'https:') return null; // e.g. an ssh:// scheme
+    return `${u.protocol}//${u.host}${u.pathname}`.replace(/\/+$/, '');
+  } catch {
+    return null; // not a URL this function recognizes — never guess
+  }
+}
+
+function getCommitDateRange(root) {
+  const endRaw = runGit(root, ['log', '-1', '--format=%aI']);
+  const endDate = isoDateOnly(endRaw);
+
+  const rootShas = runGit(root, ['rev-list', '--max-parents=0', 'HEAD']);
+  const firstSha = rootShas && rootShas.trim() ? rootShas.trim().split('\n')[0] : null;
+  const startRaw = firstSha ? runGit(root, ['show', '-s', '--format=%aI', firstSha]) : null;
+  const startDate = isoDateOnly(startRaw);
+
+  return { startDate, endDate };
+}
+
+function isoDateOnly(raw) {
+  const s = raw && raw.trim();
+  if (!s) return null;
+  const d = new Date(s);
+  if (Number.isNaN(d.getTime())) return null;
+  return s.slice(0, 10); // %aI is already ISO 8601 (e.g. 2026-08-01T12:00:00+02:00); take the date part
+}
+
+module.exports = { getRemoteUrl, normalizeRemoteUrl, getCommitDateRange };

package/src/portfolios-client.js

@@ -0,0 +1,85 @@
+'use strict';
+
+// Portfolio entries client (hub `works/me/portfolios`, talent Bearer). ONE
+// entity with a `type` discriminator: EXPERIENCE (work history) vs PORTFOLIO
+// (showcase pieces). `experiences` and `portfolios` are the two `?type=` subsets.
+
+const { postJsonWithTimeout } = require('./backend-request');
+const { reasonForError } = require('./onboarding-client');
+
+const DEFAULT_TIMEOUT_MS = 20000;
+const TYPES = { experiences: 'EXPERIENCE', portfolios: 'PORTFOLIO' };
+
+function parseJson(raw) {
+  try {
+    return raw ? JSON.parse(raw) : null;
+  } catch {
+    return null;
+  }
+}
+
+function bearerHeaders(accessToken) {
+  const headers = {};
+  if (typeof accessToken === 'string' && accessToken) headers.Authorization = `Bearer ${accessToken}`;
+  return headers;
+}
+
+function str(v) {
+  return typeof v === 'string' && v ? v : null;
+}
+
+// Keep only the human-useful fields (+ id/projectId for --json/tools).
+function normalizePortfolio(raw) {
+  const it = raw && typeof raw === 'object' ? raw : {};
+  const skills = Array.isArray(it.skillIds)
+    ? it.skillIds.map((s) => (s && typeof s === 'object' ? str(s.name) : str(s))).filter(Boolean)
+    : [];
+  return {
+    id: str(it.id),
+    name: str(it.name),
+    company: str(it.clientName),
+    startDate: it.startDate ? String(it.startDate) : null,
+    endDate: it.endDate ? String(it.endDate) : null,
+    isCurrent: it.isCurrent === true,
+    location: str(it.location),
+    description: str(it.aboutDescription),
+    url: str(it.aboutUrl),
+    skills,
+    projectId: str(it.projectId),
+    generatedWith: str(it.generatedWith),
+  };
+}
+
+async function requestPortfolios({ hubAccessToken } = {}, { endpoint, type, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  if (!endpoint) return { ok: false, reason: 'no-endpoint' };
+  if (!hubAccessToken) return { ok: false, reason: 'no-hub-token' };
+  const url = type ? `${endpoint}${endpoint.includes('?') ? '&' : '?'}type=${encodeURIComponent(type)}` : endpoint;
+  let res;
+  try {
+    res = await postJsonWithTimeout(url, null, timeoutMs, 'GET', null, bearerHeaders(hubAccessToken));
+  } catch (e) {
+    return { ok: false, reason: (e && e.kind) || 'network-error' };
+  }
+  if (res.status < 200 || res.status >= 300) return { ok: false, reason: reasonForError(res.status, res.raw) };
+  const env = parseJson(res.raw);
+  const data = env && env.status === 'OK' ? env.data : env;
+  const rows = Array.isArray(data) ? data : (Array.isArray(data && data.items) ? data.items : null);
+  if (!rows) return { ok: false, reason: 'bad-response' };
+  return { ok: true, items: rows.map(normalizePortfolio) };
+}
+
+// `kind` = 'experiences' | 'portfolios' → the matching `type` filter.
+async function fetchPortfolios(deps = {}, { hubAccessToken, kind, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  const getEndpoint = deps.getMePortfoliosEndpoint || require('./config').getMePortfoliosEndpoint;
+  const request = deps.requestPortfolios || requestPortfolios;
+  const endpoint = getEndpoint();
+  if (!endpoint) return { ok: false, reason: 'no-endpoint' };
+  return request({ hubAccessToken }, { endpoint, type: TYPES[kind] || null, timeoutMs });
+}
+
+module.exports = {
+  TYPES,
+  normalizePortfolio,
+  requestPortfolios,
+  fetchPortfolios,
+};

package/src/portfolios-flow.js

@@ -0,0 +1,79 @@
+'use strict';
+
+// Shared flow for `experiences` (type=EXPERIENCE) and `portfolios`
+// (type=PORTFOLIO): both list the talent's portfolio entries, read-only, with
+// the same shape. `kind` selects the `?type=` subset and the i18n namespace.
+
+const { styleLabelPrefix } = require('./ansi');
+const { resolveName } = require('./translations-client');
+
+function makePortfoliosDeps(overrides = {}) {
+  const client = require('./portfolios-client');
+  return {
+    fetchPortfolios: (opts) => client.fetchPortfolios({}, opts),
+    fetchTranslationMap: (opts) => require('./translations-client').fetchTranslationMap({}, opts),
+    ...overrides,
+  };
+}
+
+// Skill names arrive as static-data i18n KEYS; resolve them to readable names
+// (only fetch the translations map when there is at least one key to resolve).
+async function resolveSkillNames(items, { deps, hubAccessToken, lang }) {
+  const needs = items.some((it) => (it.skills || []).some((s) => /^staticData/.test(s)));
+  if (!needs) return items;
+  const tm = await deps.fetchTranslationMap({ hubAccessToken, lang });
+  const map = tm && tm.ok ? tm.map : null;
+  if (!map) return items;
+  return items.map((it) => ({ ...it, skills: (it.skills || []).map((s) => resolveName(map, s)) }));
+}
+
+function dateRange(item, fp) {
+  const start = item.startDate ? item.startDate.slice(0, 10) : null;
+  const end = item.isCurrent ? fp.current : (item.endDate ? item.endDate.slice(0, 10) : null);
+  if (!start && !end) return null;
+  return `${start || '—'} → ${end || '—'}`;
+}
+
+// Human render never prints ids (they ride --json / the tools).
+function formatItem(item, index, fp) {
+  const headline = item.name || fp.untitled;
+  const lines = [`${index}) ${headline}${item.company ? ` — ${item.company}` : ''}`];
+  const range = dateRange(item, fp);
+  if (range) lines.push(`   ${styleLabelPrefix(fp.datesLabel(range))}`);
+  if (item.location) lines.push(`   ${styleLabelPrefix(fp.locationLabel(item.location))}`);
+  if (item.skills.length) lines.push(`   ${styleLabelPrefix(fp.skillsLabel(item.skills.join(', ')))}`);
+  return lines.join('\n  ');
+}
+
+async function runPortfolioList({ io, rawOut, lang = 'en', session, catalog, kind, opts = {}, deps = makePortfoliosDeps() }) {
+  const fp = catalog[kind];
+  const hubAccessToken = session ? session.hubAccessToken : null;
+
+  const doFetch = () => deps.fetchPortfolios({ hubAccessToken, kind });
+  const res = opts.json ? await doFetch() : await io.withProgress(fp.loading, doFetch);
+  if (!res.ok) {
+    io.error(fp.fetchFailed(res.reason));
+    return { ok: false, reason: res.reason };
+  }
+  const items = await resolveSkillNames(Array.isArray(res.items) ? res.items : [], { deps, hubAccessToken, lang });
+
+  if (opts.json) {
+    (rawOut || ((s) => process.stdout.write(s)))(`${JSON.stringify({ ok: true, items }, null, 2)}\n`);
+    return { ok: true, items };
+  }
+
+  io.section(fp.title);
+  if (items.length === 0) {
+    io.notify(fp.none);
+    return { ok: true, items };
+  }
+  items.forEach((item, i) => {
+    if (i > 0) io.notify('');
+    io.notify(formatItem(item, i + 1, fp));
+  });
+  io.notify(styleLabelPrefix(fp.countNote(items.length)));
+  io.success(fp.done);
+  return { ok: true, items };
+}
+
+module.exports = { makePortfoliosDeps, runPortfolioList, formatItem };

package/src/profile-client.js

@@ -0,0 +1,133 @@
+'use strict';
+
+// AI-profile client. The "My work
+// with AI" read model: setup/usage tier+level, 3x3 cell, vision, howIWork.
+
+const { postJsonWithTimeout } = require('./backend-request');
+const { reasonForError } = require('./onboarding-client');
+
+const DEFAULT_TIMEOUT_MS = 20000;
+
+function parseJson(raw) {
+  try {
+    return raw ? JSON.parse(raw) : null;
+  } catch {
+    return null;
+  }
+}
+
+function bearerHeaders(accessToken) {
+  const headers = {};
+  if (typeof accessToken === 'string' && accessToken) headers.Authorization = `Bearer ${accessToken}`;
+  return headers;
+}
+
+function str(v) {
+  return typeof v === 'string' && v ? v : null;
+}
+
+async function requestAiProfile({ hubAccessToken } = {}, { endpoint, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  if (!endpoint) return { ok: false, reason: 'no-endpoint' };
+  if (!hubAccessToken) return { ok: false, reason: 'no-hub-token' };
+  let res;
+  try {
+    res = await postJsonWithTimeout(endpoint, null, timeoutMs, 'GET', null, bearerHeaders(hubAccessToken));
+  } catch (e) {
+    return { ok: false, reason: (e && e.kind) || 'network-error' };
+  }
+  if (res.status === 404) return { ok: false, reason: 'not-found' };
+  if (res.status < 200 || res.status >= 300) return { ok: false, reason: reasonForError(res.status, res.raw) };
+
+  const env = parseJson(res.raw);
+  const data = env && env.status === 'OK' ? env.data : env;
+  if (!data || typeof data !== 'object') return { ok: false, reason: 'bad-response' };
+  const setup = data.setup && typeof data.setup === 'object' ? data.setup : {};
+  const usage = data.usage && typeof data.usage === 'object' ? data.usage : {};
+  const traction = data.traction && typeof data.traction === 'object' ? data.traction : {};
+  return {
+    ok: true,
+    aiProfile: {
+      setupTier: str(setup.tier),
+      setupLevel: str(setup.level),
+      usageLevel: str(usage.level),
+      cell: str(data.cell),
+      isAiNative: data.isAiNative === true,
+      agentsOnProfile: typeof traction.agentsOnProfile === 'number' ? traction.agentsOnProfile : null,
+      vision: data.vision && typeof data.vision === 'object' ? str(data.vision.text) : null,
+      howIWork: data.howIWork && typeof data.howIWork === 'object' ? str(data.howIWork.body) : null,
+    },
+  };
+}
+
+async function fetchAiProfile(deps = {}, { hubAccessToken, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  const {
+    getAiProfileEndpoint = require('./config').getAiProfileEndpoint,
+    requestAiProfile: request = requestAiProfile,
+  } = deps;
+  const endpoint = getAiProfileEndpoint();
+  if (!endpoint) return { ok: false, reason: 'no-endpoint' };
+  return request({ hubAccessToken }, { endpoint, timeoutMs });
+}
+
+// GET on a hub endpoint that returns a `{status,data}` envelope, mapped by `map`.
+async function getMapped(endpoint, hubAccessToken, timeoutMs, map) {
+  if (!endpoint) return { ok: false, reason: 'no-endpoint' };
+  if (!hubAccessToken) return { ok: false, reason: 'no-hub-token' };
+  let res;
+  try {
+    res = await postJsonWithTimeout(endpoint, null, timeoutMs, 'GET', null, bearerHeaders(hubAccessToken));
+  } catch (e) {
+    return { ok: false, reason: (e && e.kind) || 'network-error' };
+  }
+  if (res.status === 404) return { ok: false, reason: 'not-found' };
+  if (res.status < 200 || res.status >= 300) return { ok: false, reason: reasonForError(res.status, res.raw) };
+  const env = parseJson(res.raw);
+  const data = env && env.status === 'OK' ? env.data : env;
+  if (data === undefined || data === null) return { ok: false, reason: 'bad-response' };
+  return { ok: true, ...map(data) };
+}
+
+async function fetchMeProfile(deps = {}, { hubAccessToken, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  const getEndpoint = deps.getMeProfileEndpoint || require('./config').getMeProfileEndpoint;
+  const req = deps.getMapped || getMapped;
+  return req(getEndpoint(), hubAccessToken, timeoutMs, (d) => ({ headline: str(d && d.headline) }));
+}
+
+async function fetchTalentMeProfile(deps = {}, { hubAccessToken, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  const getEndpoint = deps.getTalentMeProfileEndpoint || require('./config').getTalentMeProfileEndpoint;
+  const req = deps.getMapped || getMapped;
+  return req(getEndpoint(), hubAccessToken, timeoutMs, (d) => ({
+    completedProfilePercentage: typeof (d && d.completedProfilePercentage) === 'number' ? d.completedProfilePercentage : null,
+    freelanceType: str(d && d.freelanceType),
+    onboardingStatus: str(d && d.onboardingStatus),
+  }));
+}
+
+async function fetchLanguages(deps = {}, { hubAccessToken, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  const getEndpoint = deps.getLanguagesEndpoint || require('./config').getLanguagesEndpoint;
+  const req = deps.getMapped || getMapped;
+  return req(getEndpoint(), hubAccessToken, timeoutMs, (d) => {
+    const rows = Array.isArray(d) ? d : (Array.isArray(d && d.items) ? d.items : []);
+    const codes = rows.map((r) => (r && r.language && str(r.language.code)) || str(r && r.code)).filter(Boolean);
+    return { languageCodes: codes, languageCount: rows.length };
+  });
+}
+
+// `works/users/me` -> the stored phone, null when hub has none.
+async function fetchTelephone(deps = {}, { hubAccessToken, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  const getEndpoint = deps.getUserMeEndpoint || require('./config').getUserMeEndpoint;
+  const req = deps.getMapped || getMapped;
+  return req(getEndpoint(), hubAccessToken, timeoutMs, (d) => {
+    const t = d && d.telephone;
+    return { telephone: t && str(t.code) && str(t.number) ? { code: str(t.code), number: str(t.number) } : null };
+  });
+}
+
+module.exports = {
+  requestAiProfile,
+  fetchAiProfile,
+  fetchMeProfile,
+  fetchTalentMeProfile,
+  fetchLanguages,
+  fetchTelephone,
+};

package/src/profile-flow.js

@@ -0,0 +1,115 @@
+'use strict';
+
+// `me` / `profile` flow: a summary combining the "My work with AI" read model,
+// the main role (from certifications) and the per-project rate. Read-only.
+
+const { styleLabelPrefix } = require('./ansi');
+
+function makeProfileDeps(overrides = {}) {
+  const profile = require('./profile-client');
+  const rate = require('./rate-client');
+  const certs = require('./certifications-client');
+  const availability = require('./availability-client');
+  return {
+    fetchAiProfile: (opts) => profile.fetchAiProfile({}, opts),
+    fetchPricingRate: (opts) => rate.fetchPricingRate({}, opts),
+    fetchMeCertifications: (opts) => certs.fetchMeCertifications({}, opts),
+    fetchMeProfile: (opts) => profile.fetchMeProfile({}, opts),
+    fetchTalentMeProfile: (opts) => profile.fetchTalentMeProfile({}, opts),
+    fetchLanguages: (opts) => profile.fetchLanguages({}, opts),
+    fetchAvailability: (opts) => availability.fetchAvailability({}, opts),
+    ...overrides,
+  };
+}
+
+function trim(text, max) {
+  if (!text) return null;
+  const t = String(text).trim();
+  return t.length > max ? `${t.slice(0, max - 1)}…` : t;
+}
+
+async function runProfile({ io, rawOut, session, catalog, opts = {}, deps = makeProfileDeps() }) {
+  const fp = catalog.profile;
+  const hubAccessToken = session ? session.hubAccessToken : null;
+
+  // Independent reads; each degrades to null so one outage never blanks the
+  // whole summary.
+  const doFetch = () => Promise.all([
+    deps.fetchAiProfile({ hubAccessToken }),
+    deps.fetchPricingRate({ hubAccessToken }),
+    deps.fetchMeCertifications({ hubAccessToken }),
+    deps.fetchMeProfile({ hubAccessToken }),
+    deps.fetchTalentMeProfile({ hubAccessToken }),
+    deps.fetchLanguages({ hubAccessToken }),
+    deps.fetchAvailability({ hubAccessToken }),
+  ]);
+  const [ai, rate, certs, meProfile, talentProfile, languages, availability] = opts.json ? await doFetch() : await io.withProgress(fp.loading, doFetch);
+
+  if (!ai.ok && !rate.ok && !certs.ok && !meProfile.ok && !talentProfile.ok) {
+    io.error(fp.fetchFailed(ai.reason || rate.reason || certs.reason));
+    return { ok: false, reason: ai.reason || rate.reason || certs.reason };
+  }
+
+  const aiProfile = ai.ok ? ai.aiProfile : null;
+  const pricing = rate.ok ? rate.pricing : null;
+  const mainRole = certs.ok ? certs.mainRole : null;
+  const headline = meProfile.ok ? meProfile.headline : null;
+  const completion = talentProfile.ok ? talentProfile.completedProfilePercentage : null;
+  const freelanceType = talentProfile.ok ? talentProfile.freelanceType : null;
+  const languageCodes = languages.ok ? languages.languageCodes : [];
+  const availabilitySummary = availability.ok ? availability.availability : null;
+  const skillsCount = certs.ok && certs.skillsRatio && typeof certs.skillsRatio.total === 'number' ? certs.skillsRatio.total : null;
+  const agentsCount = aiProfile ? aiProfile.agentsOnProfile : null;
+
+  if (opts.json) {
+    (rawOut || ((s) => process.stdout.write(s)))(`${JSON.stringify({
+      ok: true, mainRole, headline, completedProfilePercentage: completion, freelanceType,
+      languageCodes, skillsCount, agentsCount, availability: availabilitySummary, aiProfile, pricing,
+    }, null, 2)}\n`);
+    return { ok: true, mainRole, aiProfile, pricing };
+  }
+
+  io.section(fp.title);
+  if (headline) io.notify(styleLabelPrefix(fp.headline(headline)));
+  if (mainRole && mainRole.name) io.notify(styleLabelPrefix(fp.role(mainRole.name)));
+  if (freelanceType) io.notify(styleLabelPrefix(fp.freelanceType(freelanceType)));
+  if (completion != null) io.notify(styleLabelPrefix(fp.completion(completion)));
+  if (pricing) {
+    const m = pricing.fullTimeSelected ? pricing.fullTimePrice : null;
+    io.notify(styleLabelPrefix(fp.rate(m && m.amount != null ? `${m.amount}${m.currency ? ` ${m.currency}` : ''}` : fp.rateNotSet)));
+  }
+  if (availabilitySummary) {
+    io.notify(styleLabelPrefix(fp.availability(
+      availabilitySummary.available === true ? fp.availYes : availabilitySummary.available === false ? fp.availNo : fp.availUnknown,
+      availabilitySummary.monthlyHours || fp.availUnknown,
+    )));
+  }
+  if (languageCodes.length) io.notify(styleLabelPrefix(fp.languages(languageCodes.join(', '))));
+  const counts = [
+    skillsCount != null ? fp.skillsCount(skillsCount) : null,
+    agentsCount != null ? fp.agentsCount(agentsCount) : null,
+  ].filter(Boolean);
+  if (counts.length) io.notify(counts.join(' · '));
+  if (aiProfile) {
+    if (aiProfile.cell) io.notify(styleLabelPrefix(fp.cell(aiProfile.cell)));
+    const axes = [
+      aiProfile.setupTier ? styleLabelPrefix(fp.setup(aiProfile.setupTier, aiProfile.setupLevel || '—')) : null,
+      aiProfile.usageLevel ? styleLabelPrefix(fp.usage(aiProfile.usageLevel)) : null,
+    ].filter(Boolean);
+    if (axes.length) io.notify(axes.join(' · '));
+    if (aiProfile.isAiNative) io.notify(fp.aiNative);
+    const vision = trim(aiProfile.vision, 240);
+    if (vision) { io.section(fp.visionHeading); io.notify(vision); }
+    const howIWork = trim(aiProfile.howIWork, 240);
+    if (howIWork) { io.section(fp.howIWorkHeading); io.notify(howIWork); }
+  } else {
+    io.notify(fp.noAiProfile);
+  }
+  io.success(fp.done);
+  return { ok: true, mainRole, aiProfile, pricing };
+}
+
+module.exports = {
+  makeProfileDeps,
+  runProfile,
+};

package/src/profile-switch.js

@@ -0,0 +1,46 @@
+'use strict';
+
+const fs = require('fs');
+const path = require('path');
+
+const { getConfigDir } = require('./config-dir');
+const { loadConfigFile, saveConfigFile, VALID_PROFILES } = require('./config');
+const { clearAuthSession } = require('./auth-session-store');
+
+function reportStatePath(env) {
+  return path.join(getConfigDir(env), 'report-state.json');
+}
+function consentStatePath(env) {
+  return path.join(getConfigDir(env), 'consent.json');
+}
+
+// Best-effort delete: a file that doesn't exist (nothing to purge yet, e.g.
+// a superadmin who never ran `usage` in this profile) is not a failure.
+function unlinkIfExists(p) {
+  try {
+    fs.unlinkSync(p);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+// `switchProfile(target, env)`.
+function switchProfile(target, env = process.env) {
+  if (!VALID_PROFILES.has(target)) return { ok: false, reason: 'invalid-profile' };
+
+  const config = loadConfigFile(env);
+  const from = VALID_PROFILES.has(config.profile) ? config.profile : 'talent';
+  config.profile = target;
+  saveConfigFile(config, env);
+
+  const purged = {
+    reportState: unlinkIfExists(reportStatePath(env)),
+    consent: unlinkIfExists(consentStatePath(env)),
+    authSession: clearAuthSession(env),
+  };
+
+  return { ok: true, from, to: target, purged };
+}
+
+module.exports = { switchProfile, reportStatePath, consentStatePath };

package/src/prompt-select.js

@@ -0,0 +1,66 @@
+'use strict';
+
+const { runInteractiveMultiSelect } = require('./interactive-select');
+
+async function promptSelect({ ask, stdinIsTTY, out, items, labelFor = (x) => String(x), header = '', hint = '', input, output } = {}) {
+  if (stdinIsTTY && typeof ask.suspend === 'function') {
+    ask.suspend();
+    const picked = await runInteractiveMultiSelect({
+      items,
+      labelFor,
+      header,
+      hint,
+      single: true,
+      ...(input ? { input } : {}),
+      ...(output ? { output } : {}),
+    });
+    ask.resume();
+    return picked && picked.length ? picked[0] : null;
+  }
+  if (header) out(header);
+  items.forEach((it, i) => out(`  ${i + 1}) ${labelFor(it)}`));
+  const raw = (await ask('  > ')).trim();
+  const n = parseInt(raw, 10);
+  if (Number.isInteger(n) && n >= 1 && n <= items.length) return items[n - 1];
+  const lowered = raw.toLowerCase();
+  return items.find((it) => labelFor(it).toLowerCase() === lowered || String(it).toLowerCase() === lowered) || null;
+}
+
+// Multi-pick variant: SPACE toggles, ENTER confirms; returns the chosen items as
+// an array (possibly empty). Non-TTY fallback accepts space/comma-separated
+// indices or labels.
+async function promptMultiSelect({ ask, stdinIsTTY, out, items, labelFor = (x) => String(x), header = '', hint = '', initialMarked = [], input, output } = {}) {
+  if (stdinIsTTY && typeof ask.suspend === 'function') {
+    ask.suspend();
+    const picked = await runInteractiveMultiSelect({
+      items,
+      labelFor,
+      header,
+      hint,
+      single: false,
+      initialMarked,
+      ...(input ? { input } : {}),
+      ...(output ? { output } : {}),
+    });
+    ask.resume();
+    return Array.isArray(picked) ? picked : [];
+  }
+  if (header) out(header);
+  items.forEach((it, i) => out(`  ${i + 1}) ${labelFor(it)}`));
+  const raw = (await ask('  > ')).trim();
+  if (!raw) return [];
+  const chosen = [];
+  for (const tok of raw.split(/[\s,]+/).filter(Boolean)) {
+    const n = parseInt(tok, 10);
+    let item = null;
+    if (Number.isInteger(n) && n >= 1 && n <= items.length) item = items[n - 1];
+    else {
+      const lowered = tok.toLowerCase();
+      item = items.find((it) => labelFor(it).toLowerCase() === lowered || String(it).toLowerCase() === lowered) || null;
+    }
+    if (item != null && !chosen.includes(item)) chosen.push(item);
+  }
+  return chosen;
+}
+
+module.exports = { promptSelect, promptMultiSelect };

package/src/rate-client.js

@@ -0,0 +1,81 @@
+'use strict';
+
+// Pricing-rate client. READ-ONLY here: setting the rate is a financial PUT, left to register.
+
+const { postJsonWithTimeout } = require('./backend-request');
+const { reasonForError } = require('./onboarding-client');
+
+const DEFAULT_TIMEOUT_MS = 20000;
+
+function parseJson(raw) {
+  try {
+    return raw ? JSON.parse(raw) : null;
+  } catch {
+    return null;
+  }
+}
+
+function bearerHeaders(accessToken) {
+  const headers = {};
+  if (typeof accessToken === 'string' && accessToken) headers.Authorization = `Bearer ${accessToken}`;
+  return headers;
+}
+
+function money(m) {
+  if (!m || typeof m !== 'object') return null;
+  return { amount: typeof m.amount === 'number' ? m.amount : null, currency: typeof m.currency === 'string' ? m.currency : null };
+}
+
+async function requestPricingRate({ hubAccessToken } = {}, { endpoint, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  if (!endpoint) return { ok: false, reason: 'no-endpoint' };
+  if (!hubAccessToken) return { ok: false, reason: 'no-hub-token' };
+  let res;
+  try {
+    res = await postJsonWithTimeout(endpoint, null, timeoutMs, 'GET', null, bearerHeaders(hubAccessToken));
+  } catch (e) {
+    return { ok: false, reason: (e && e.kind) || 'network-error' };
+  }
+  if (res.status === 404) return { ok: false, reason: 'not-found' };
+  if (res.status < 200 || res.status >= 300) return { ok: false, reason: reasonForError(res.status, res.raw) };
+
+  const env = parseJson(res.raw);
+  const data = env && env.status === 'OK' ? env.data : env;
+  if (!data || typeof data !== 'object') return { ok: false, reason: 'bad-response' };
+  return {
+    ok: true,
+    pricing: {
+      fullTimeSelected: data.fullTimeProjectSelected === true,
+      fullTimePrice: money(data.fullTimeProjectPrice),
+      partTimeSelected: data.partTimeProjectSelected === true,
+      partTimePrice: money(data.partTimeProjectPrice),
+    },
+  };
+}
+
+async function fetchPricingRate(deps = {}, { hubAccessToken, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  const {
+    getPricingRateEndpoint = require('./config').getPricingRateEndpoint,
+    requestPricingRate: request = requestPricingRate,
+  } = deps;
+  const endpoint = getPricingRateEndpoint();
+  if (!endpoint) return { ok: false, reason: 'no-endpoint' };
+  return request({ hubAccessToken }, { endpoint, timeoutMs });
+}
+
+// PUT the pricing (upsert). Reuses the SAME endpoint + request the register
+// pricing step uses, so `rate --set` and onboarding never diverge on the wire.
+async function savePricingRate(deps = {}, { hubAccessToken, pricing, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  const {
+    getPricingRateEndpoint = require('./config').getPricingRateEndpoint,
+    requestSetPricingRate = require('./onboarding-client').requestSetPricingRate,
+  } = deps;
+  const endpoint = getPricingRateEndpoint();
+  if (!endpoint) return { ok: false, reason: 'no-endpoint' };
+  return requestSetPricingRate({ pricing, hubAccessToken }, { endpoint, timeoutMs });
+}
+
+module.exports = {
+  requestPricingRate,
+  fetchPricingRate,
+  savePricingRate,
+};