shakers-cli 0.15.0 → 0.17.0

package/src/share-consent-state.js

@@ -1,6 +1,6 @@
 'use strict';
 
-// Consent state + email identity + client-side throttle, extracted from src/share.js (structure refactor, issue 020).
+// Consent state + email identity + client-side throttle, extracted from src/share.js.
 
 const fs = require('fs');
 const path = require('path');
@@ -10,8 +10,8 @@ function configDir() {
   return getConfigDir(process.env);
 }
 
-function consentPath() {
-  return path.join(configDir(), 'consent.json');
+function consentPath(env = process.env) {
+  return path.join(getConfigDir(env), 'consent.json');
 }
 
 // Client-side throttle: don't retry a submission if the last one was less than 1h ago.
@@ -19,9 +19,9 @@ const SEND_THROTTLE_MS = 60 * 60 * 1000;
 
 // consent state (~/.config/ai-footprint/consent.json) Replaces the old `credentials.json` (token model).
 
-function loadConsentState() {
+function loadConsentState(env = process.env) {
   try {
-    return JSON.parse(fs.readFileSync(consentPath(), 'utf8'));
+    return JSON.parse(fs.readFileSync(consentPath(env), 'utf8'));
   } catch {
     return null;
   }
@@ -70,7 +70,7 @@ function recordConsent(decision, email = null, { verified } = {}) {
   state.consent = decision;
   if (email !== null) state.email = normalizeEmail(email);
   if (state.lastSentAt === undefined) state.lastSentAt = null;
-  // Email-ownership verification flag (skill-code-certification / ADR-006).
+  // Email-ownership verification flag.
   if (decision === 'granted' && verified !== undefined) {
     state.emailVerified = verified === true;
   }
@@ -78,7 +78,7 @@ function recordConsent(decision, email = null, { verified } = {}) {
   return state;
 }
 
-// consent management (issue 007: status / revoke / change email) One-shot actions (do not scan), same pattern the retired `--enroll` used.
+// consent management (status / revoke / change email). One-shot actions (do not scan), same pattern the retired `--enroll` used.
 
 // Read-only snapshot for `--consent-status`. Never throws.
 function getConsentStatus() {
@@ -100,7 +100,7 @@ function revokeConsent() {
 function resetConsent() {
   const state = loadConsentState() || {};
   delete state.consent;
-  // A re-grant is "concede de cero" (ADR-006): drop the verification flag so the OTP runs again from scratch and nothing is sent under the old email until it's re-verified.
+  // A re-grant is "concede de cero": drop the verification flag so the OTP runs again from scratch and nothing is sent under the old email until it's re-verified.
   delete state.emailVerified;
   if (state.lastSentAt === undefined) state.lastSentAt = null;
   saveConsentState(state);
@@ -121,7 +121,7 @@ function setEmail(newEmail) {
   }
   const state = loadConsentState() || {};
   state.email = normalizeEmail(newEmail);
-  // A new email is unverified until proven (ADR-006): reset the flag so
+  // A new email is unverified until proven: reset the flag so
   // autoShare won't send under an address whose ownership wasn't checked.
   state.emailVerified = false;
   saveConsentState(state);

package/src/share-payload.js

@@ -1,6 +1,6 @@
 'use strict';
 
-// The derived-payload whitelist for the `usage/reports` ingest, extracted from src/share.js (structure refactor, issue 020).
+// The derived-payload whitelist for the `usage/reports` ingest, extracted from src/share.js.
 
 const { scrubSecrets } = require('./agent-synthesis');
 const { MAX_DEFINITION_CHARS } = require('./agent-evaluation');
@@ -13,7 +13,7 @@ function whitelistSchedulerProbe(probe) {
   };
 }
 
-// WHY ONE MORE FIELD IS ADMISSIBLE ON THE AGENT WHITELIST (issue 115).
+// WHY ONE MORE FIELD IS ADMISSIBLE ON THE AGENT WHITELIST.
 function agentCatalogIdsByName(report) {
   const evaluations =
     report.agentEvaluation && Array.isArray(report.agentEvaluation.evaluations)
@@ -86,7 +86,7 @@ function derivePayload(report, maturity) {
       tools: Array.isArray(a.tools) ? a.tools : [],
       model: a.model || null,
       parent: a.parent || null,
-      // issue 115 — the ONLY classification field that travels.
+      // The ONLY classification field that travels.
       catalogId: catalogIdsByName.get(a.name) || null,
       // agent-classifier fix — the agent's own definition (frontmatter description + body), scrubbed + capped.
       ...(definitionsByName.get(a.name)
@@ -132,14 +132,14 @@ function derivePayload(report, maturity) {
         mcp: Array.isArray(browserToolsVia.mcp) && browserToolsVia.mcp.length > 0,
       },
     },
-    // Hybrid evaluation, Slice 1: two DETERMINISTIC behavioural blocks (no LLM).
+    // Two DETERMINISTIC behavioural blocks (no LLM).
     gitActivity: whitelistGitActivity(report.gitActivity),
     sessions: whitelistSessions(report.sessions),
-    // Hybrid evaluation, Slice 2: one DETERMINISTIC block (workStreams) and two REDACTED-excerpt blocks (steering, decisions).
+    // One DETERMINISTIC block (workStreams) and two REDACTED-excerpt blocks (steering, decisions).
     workStreams: whitelistWorkStreams(report.workStreams),
     steering: whitelistSteering(report.steering),
     decisions: whitelistDecisions(report.decisions),
-    // Hybrid evaluation, Slice 3c: PER-CANDIDATE authorship + depth (per detected skill, per detected agent).
+    // PER-CANDIDATE authorship + depth (per detected skill, per detected agent).
     detectionEvidence: whitelistDetectionEvidence(report.detectionEvidence),
   };
 }
@@ -176,7 +176,7 @@ function whitelistDetectionEvidence(evidence) {
   return { skills, agents, provenance: whitelistProvenance(evidence.provenance) };
 }
 
-// Re-derives the repo-level anti-noise `provenance` (Slice 3): the (weak) fork signal and the (conservative) boilerplate/tutorial signal.
+// Re-derives the repo-level anti-noise `provenance`: the (weak) fork signal and the (conservative) boilerplate/tutorial signal.
 function whitelistProvenance(provenance) {
   if (!provenance || typeof provenance !== 'object') return null;
   const marker =

package/src/share.js

@@ -33,7 +33,7 @@ const {
 
 /* ---------- minimal HTTP utility (no dependencies) ---------- */
 
-// POSTs `body` to the ONE backend (talents-ai-score, ADR-042 — the PRIMARY -> FALLBACK chain is retired), via src/backend-request.js.
+// POSTs `body` to the ONE backend (the PRIMARY -> FALLBACK chain is retired), via src/backend-request.js.
 async function requestJsonBackend(endpoint, body, { timeoutMs = 15000, idempotencyKey = null } = {}) {
   const { status, raw, backend } = await requestBackend({ endpoint, body, timeoutMs, idempotencyKey });
   let json = null;
@@ -53,7 +53,7 @@ async function autoShare(report, maturity, { root, bypassThrottle = false } = {}
   if (!state.email) {
     return { ok: false, skipped: true, reason: 'no-email' };
   }
-  // ADR-006: never SEND under an email whose ownership wasn't proven — every
+  // Never SEND under an email whose ownership wasn't proven — every
   // profile, `external` included (legal requirement), must have verified.
   if (state.emailVerified === false) {
     return { ok: false, skipped: true, reason: 'email-unverified' };
@@ -92,14 +92,14 @@ async function autoShare(report, maturity, { root, bypassThrottle = false } = {}
     return { ok: false, skipped: false, reason: 'rate-limited' };
   }
   if (res.status === 503) {
-    // Generic "service unavailable" from the server (ADR-011 retires the
-    // server-side kill switch that used to be the main 503 cause).
+    // Generic "service unavailable" from the server (the retired
+    // server-side kill switch used to be the main 503 cause).
     return { ok: false, skipped: false, reason: 'service-unavailable' };
   }
   return { ok: false, skipped: false, reason: `http-${res.status}` };
 }
 
-/* ---------- certification persistence (skill-code-certification, issue 005) ---------- */
+/* ---------- certification persistence ---------- */
 
 // Persists the analyzed certification result if (and only if) consent is granted.
 async function shareCertification(items, { repository = null, commitRange = null, toolVersion = null, superadminToken = null, root = null } = {}) {
@@ -112,7 +112,7 @@ async function shareCertification(items, { repository = null, commitRange = null
   if (!state.email) {
     return { ok: false, skipped: true, reason: 'no-email' };
   }
-  // ADR-006 (mirror of autoShare): don't persist under an unverified email.
+  // Don't persist under an unverified email.
   if (state.emailVerified === false) {
     return { ok: false, skipped: true, reason: 'email-unverified' };
   }
@@ -132,7 +132,7 @@ async function shareCertification(items, { repository = null, commitRange = null
 
   let res;
   try {
-    // ADR-027: forward the superadmin session token so the backend stamps test_origin=true (server-authoritative, non-prod only).
+    // Forward the superadmin session token so the backend stamps test_origin=true (server-authoritative, non-prod only).
     const body = { email: state.email, payload };
     if (superadminToken) body.superadminToken = superadminToken;
     // Idempotency-Key (three-way security review, cross-repo): ONE key per

package/src/signup-client.js

@@ -4,7 +4,7 @@ const { postJsonWithTimeout, extractSetCookie } = require('./backend-request');
 const { SESSION_COOKIE_NAME } = require('./auth-client');
 const { toUpperLang } = require('./lang-codes');
 
-// Register a talent via the Hub's better-auth email engine, in two steps (owner decision, supersedes ADR-031 for the email path — WEB-login parity): 1.
+// Register a talent via the Hub's better-auth email engine, in two steps (WEB-login parity): 1.
 
 const DEFAULT_TIMEOUT_MS = 30000;
 

package/src/signup-copy.js

@@ -1,6 +1,6 @@
 'use strict';
 
-// Talent-facing copy of the MCP sign-up (ticket 39540, UX review 39574): fixed text the AI shows word for word, in the talent's language.
+// Talent-facing copy of the MCP sign-up: fixed text the AI shows word for word, in the talent's language.
 
 const SIGNUP_LANGUAGES = ['es', 'en', 'it', 'pt'];
 
@@ -405,6 +405,177 @@ const COPY = {
   },
 };
 
+const REVIEW = {
+  es: {
+    cliQuestion: '¿Lo subo a tu perfil? [s/N]:',
+    cliIncludeExcerpts: '¿Incluir los extractos de texto? [S/n]:',
+    cliExcludeAgents: 'Si quieres dejar fuera algún agente, escribe sus nombres separados por comas (Enter para ninguno):',
+    cliUnknownAgents: (unknown, known) => `No reconozco: ${unknown}. Los agentes son: ${known}.`,
+    cliRepoHint: 'Para dejar fuera un repositorio, vuelve a ejecutar el comando eligiendo solo los que quieras con --repos.',
+    title: 'Todavía no se ha subido nada a tu perfil de Shakers. Esto es lo que se subiría:',
+    sentTitle: 'Esto es lo que se ha subido:',
+    tools: (list) => `Herramientas de IA detectadas: ${list}.`,
+    technologies: (list) => `Tecnologías de tus proyectos: ${list}.`,
+    activity: (sessions, days) => `Tu actividad con IA: ${sessions === 1 ? '1 sesión' : `${sessions} sesiones`}${days === null ? '' : `, unos ${days} días activos por semana`}.`,
+    repos: (list, commits) => `Repositorios analizados: ${list}. De ellos solo se envían cifras (${commits === 1 ? '1 commit' : `${commits} commits`}, líneas cambiadas, tipos de fichero), nunca su nombre ni su código.`,
+    agents: (list, definitions, summaries) => `Agentes de IA detectados: ${list}. De cada uno se envía ${listOf('es', ['su nombre', 'sus herramientas', 'su modelo', 'de qué agente depende', ...(definitions > 0 ? ['el texto de su definición (sin secretos)'] : []), ...(summaries > 0 ? ['el resumen de lo que hace'] : [])])}.`,
+    excerpts: (conversation, commands) => `Extractos de texto: ${conversation} frases cortas de lo que le pides a la IA y ${commands} comandos, de 200 caracteres como máximo, sin secretos, rutas ni emails.`,
+    noExcerpts: 'Extractos de texto: ninguno.',
+    notSent: 'No se envía: tu código, tus conversaciones completas ni los nombres de tus repositorios.',
+    explanationTitle: 'Qué hace Shakers con esto:',
+    explanation: [
+      'Te sitúa en dos ejes. Configuración: qué tienes montado (herramientas, servidores MCP, agentes), de menos a más: Asistido, Extendido u Orquestado. Uso: cómo diriges a la IA (si le das instrucciones concretas, si revisas lo que propone), de menos a más: Reactivo, Deliberado o Riguroso.',
+      'La configuración se calcula con reglas fijas a partir de lo detectado. El nivel de uso y los textos sobre cómo trabajas los escribe un modelo de IA en los servidores de Shakers.',
+      'En tu perfil aparece la sección «Mi trabajo con IA»: tus dos niveles, tu casilla en la matriz (por ejemplo Practitioner o Architect), tus herramientas y agentes, y dos textos que puedes editar en la web.',
+    ],
+    afterwards: 'Si no estás de acuerdo con el resultado, pulsa «Solicitar revisión humana» en esa sección de la web o escribe a talent@shakersworks.com. Hoy no puedes ocultar la sección tú mismo; para pedir que se borre, escribe a ese mismo correo.',
+    excludeHint: 'Si quieres dejar fuera algún repositorio, algún agente o los extractos de texto, dímelo al responder.',
+    question: '¿Lo subo a tu perfil?',
+    yes: 'Subir a mi perfil',
+    no: 'No subir',
+    formExcerpts: 'Incluir los extractos de texto',
+    formRepo: (name) => `Incluir el repositorio ${name}`,
+    formAgent: (name) => `Incluir el agente ${name}`,
+    declined: 'No se ha subido nada. El análisis se queda solo en tu equipo.',
+    nothingLeft: 'Has dejado fuera todos los repositorios, así que no se ha subido nada.',
+    throttled: 'Ya subiste un análisis hace menos de una hora, así que no se ha subido nada. Puedes volver a intentarlo más tarde.',
+    uploaded: 'Subido a tu perfil. Shakers lo está evaluando y el resultado tarda unos minutos.',
+    uploadFailed: 'No se ha podido subir. Tu análisis se queda solo en tu equipo; puedes volver a intentarlo más tarde.',
+    resultTitle: 'Tu resultado en «Mi trabajo con IA»:',
+    setupLevel: (level) => `Configuración: ${level}.`,
+    usageLevel: (level) => `Uso: ${level}.`,
+    cell: (name) => `Tu casilla en la matriz: ${name}.`,
+    levels: { ASSISTED: 'Asistido', EXTENDED: 'Extendido', ORCHESTRATED: 'Orquestado', REACTIVE: 'Reactivo', DELIBERATE: 'Deliberado', RIGOROUS: 'Riguroso' },
+    resultPending: 'Tu resultado todavía no está en «Mi trabajo con IA». Si acabas de subir tu análisis, aparecerá en unos minutos.',
+  },
+  en: {
+    cliQuestion: 'Shall I upload it to your profile? [y/N]:',
+    cliIncludeExcerpts: 'Include the text excerpts? [Y/n]:',
+    cliExcludeAgents: 'If you want to leave out an agent, type their names separated by commas (Enter for none):',
+    cliUnknownAgents: (unknown, known) => `I do not recognise: ${unknown}. The agents are: ${known}.`,
+    cliRepoHint: 'To leave out a repository, run the command again choosing only the ones you want with --repos.',
+    title: 'Nothing has been uploaded to your Shakers profile yet. This is what would be uploaded:',
+    sentTitle: 'This is what was uploaded:',
+    tools: (list) => `AI tools detected: ${list}.`,
+    technologies: (list) => `Technologies in your projects: ${list}.`,
+    activity: (sessions, days) => `Your AI activity: ${sessions === 1 ? '1 session' : `${sessions} sessions`}${days === null ? '' : `, about ${days} active days a week`}.`,
+    repos: (list, commits) => `Repositories analysed: ${list}. Only figures about them are sent (${commits === 1 ? '1 commit' : `${commits} commits`}, lines changed, file types), never their name or their code.`,
+    agents: (list, definitions, summaries) => `AI agents detected: ${list}. For each one we send ${listOf('en', ['its name', 'its tools', 'its model', 'which agent it reports to', ...(definitions > 0 ? ['the text of its definition (with secrets removed)'] : []), ...(summaries > 0 ? ['the summary of what it does'] : [])])}.`,
+    excerpts: (conversation, commands) => `Text excerpts: ${conversation} short sentences of what you ask the AI and ${commands} commands, 200 characters at most, with secrets, paths and emails removed.`,
+    noExcerpts: 'Text excerpts: none.',
+    notSent: 'Not sent: your code, your full conversations or the names of your repositories.',
+    explanationTitle: 'What Shakers does with it:',
+    explanation: [
+      'It places you on two axes. Setup: what you have in place (tools, MCP servers, agents), from less to more: Assisted, Extended or Orchestrated. Usage: how you steer the AI (whether you give it concrete instructions, whether you review what it proposes), from less to more: Reactive, Deliberate or Rigorous.',
+      'Setup is worked out with fixed rules from what was detected. The usage level and the texts about how you work are written by an AI model on Shakers servers.',
+      'Your profile shows the "My work with AI" section: your two levels, your square in the matrix (for example Practitioner or Architect), your tools and agents, and two texts you can edit on the web.',
+    ],
+    afterwards: 'If you disagree with the result, press "Request human review" in that section on the web or write to talent@shakersworks.com. Today you cannot hide the section yourself; to ask for it to be deleted, write to that same address.',
+    excludeHint: 'If you want to leave out a repository, an agent or the text excerpts, tell me when you answer.',
+    question: 'Shall I upload it to your profile?',
+    yes: 'Upload to my profile',
+    no: 'Do not upload',
+    formExcerpts: 'Include the text excerpts',
+    formRepo: (name) => `Include the repository ${name}`,
+    formAgent: (name) => `Include the agent ${name}`,
+    declined: 'Nothing was uploaded. The analysis stays on your computer only.',
+    nothingLeft: 'You left out every repository, so nothing was uploaded.',
+    throttled: 'You uploaded an analysis less than an hour ago, so nothing was uploaded. You can try again later.',
+    uploaded: 'Uploaded to your profile. Shakers is evaluating it and the result takes a few minutes.',
+    uploadFailed: 'It could not be uploaded. Your analysis stays on your computer only; you can try again later.',
+    resultTitle: 'Your result in "My work with AI":',
+    setupLevel: (level) => `Setup: ${level}.`,
+    usageLevel: (level) => `Usage: ${level}.`,
+    cell: (name) => `Your square in the matrix: ${name}.`,
+    levels: { ASSISTED: 'Assisted', EXTENDED: 'Extended', ORCHESTRATED: 'Orchestrated', REACTIVE: 'Reactive', DELIBERATE: 'Deliberate', RIGOROUS: 'Rigorous' },
+    resultPending: 'Your result is not in "My work with AI" yet. If you have just uploaded your analysis, it will show in a few minutes.',
+  },
+  it: {
+    cliQuestion: 'Lo carico sul tuo profilo? [s/N]:',
+    cliIncludeExcerpts: 'Includere gli estratti di testo? [S/n]:',
+    cliExcludeAgents: 'Se vuoi escludere un agente, scrivi i nomi separati da virgole (Invio per nessuno):',
+    cliUnknownAgents: (unknown, known) => `Non riconosco: ${unknown}. Gli agenti sono: ${known}.`,
+    cliRepoHint: 'Per escludere un repository, esegui di nuovo il comando scegliendo solo quelli che vuoi con --repos.',
+    title: "Non è stato ancora caricato nulla sul tuo profilo Shakers. Ecco cosa verrebbe caricato:",
+    sentTitle: "Ecco cosa è stato caricato:",
+    tools: (list) => `Strumenti di IA rilevati: ${list}.`,
+    technologies: (list) => `Tecnologie dei tuoi progetti: ${list}.`,
+    activity: (sessions, days) => `La tua attività con l'IA: ${sessions === 1 ? '1 sessione' : `${sessions} sessioni`}${days === null ? '' : `, circa ${days} giorni attivi a settimana`}.`,
+    repos: (list, commits) => `Repository analizzati: ${list}. Di questi si inviano solo cifre (${commits} commit, righe modificate, tipi di file), mai il nome né il codice.`,
+    agents: (list, definitions, summaries) => `Agenti di IA rilevati: ${list}. Di ognuno si inviano ${listOf('it', ['il nome', 'gli strumenti', 'il modello', 'da quale agente dipende', ...(definitions > 0 ? ['il testo della sua definizione (senza segreti)'] : []), ...(summaries > 0 ? ['il riassunto di ciò che fa'] : [])])}.`,
+    excerpts: (conversation, commands) => `Estratti di testo: ${conversation} frasi brevi di ciò che chiedi all'IA e ${commands} comandi, al massimo 200 caratteri, senza segreti, percorsi né email.`,
+    noExcerpts: 'Estratti di testo: nessuno.',
+    notSent: 'Non si inviano: il tuo codice, le tue conversazioni complete né i nomi dei tuoi repository.',
+    explanationTitle: 'Cosa fa Shakers con questi dati:',
+    explanation: [
+      "Ti colloca su due assi. Configurazione: cosa hai impostato (strumenti, server MCP, agenti), dal meno al più: Assistito, Esteso o Orchestrato. Uso: come guidi l'IA (se le dai istruzioni concrete, se controlli ciò che propone), dal meno al più: Reattivo, Deliberato o Rigoroso.",
+      "La configurazione si calcola con regole fisse da ciò che è stato rilevato. Il livello di uso e i testi su come lavori li scrive un modello di IA sui server di Shakers.",
+      "Sul tuo profilo compare la sezione «Il mio lavoro con l'IA»: i tuoi due livelli, la tua casella nella matrice (per esempio Practitioner o Architect), i tuoi strumenti e agenti, e due testi che puoi modificare sul sito.",
+    ],
+    afterwards: 'Se non sei d\'accordo con il risultato, premi «Richiedi una revisione umana» in quella sezione del sito o scrivi a talent@shakersworks.com. Oggi non puoi nascondere la sezione da solo; per chiedere che venga cancellata, scrivi allo stesso indirizzo.',
+    excludeHint: 'Se vuoi escludere un repository, un agente o gli estratti di testo, dimmelo quando rispondi.',
+    question: 'Lo carico sul tuo profilo?',
+    yes: 'Carica sul mio profilo',
+    no: 'Non caricare',
+    formExcerpts: 'Includi gli estratti di testo',
+    formRepo: (name) => `Includi il repository ${name}`,
+    formAgent: (name) => `Includi l'agente ${name}`,
+    declined: "Non è stato caricato nulla. L'analisi resta solo sul tuo computer.",
+    nothingLeft: 'Hai escluso tutti i repository, quindi non è stato caricato nulla.',
+    throttled: "Hai caricato un'analisi meno di un'ora fa, quindi non è stato caricato nulla. Puoi riprovare più tardi.",
+    uploaded: 'Caricato sul tuo profilo. Shakers lo sta valutando e il risultato richiede qualche minuto.',
+    uploadFailed: 'Non è stato possibile caricarlo. La tua analisi resta solo sul tuo computer; puoi riprovare più tardi.',
+    resultTitle: "Il tuo risultato in «Il mio lavoro con l'IA»:",
+    setupLevel: (level) => `Configurazione: ${level}.`,
+    usageLevel: (level) => `Uso: ${level}.`,
+    cell: (name) => `La tua casella nella matrice: ${name}.`,
+    levels: { ASSISTED: 'Assistito', EXTENDED: 'Esteso', ORCHESTRATED: 'Orchestrato', REACTIVE: 'Reattivo', DELIBERATE: 'Deliberato', RIGOROUS: 'Rigoroso' },
+    resultPending: "Il tuo risultato non è ancora in «Il mio lavoro con l'IA». Se hai appena caricato la tua analisi, comparirà tra qualche minuto.",
+  },
+  pt: {
+    cliQuestion: 'Carrego-o no seu perfil? [s/N]:',
+    cliIncludeExcerpts: 'Incluir os excertos de texto? [S/n]:',
+    cliExcludeAgents: 'Se quiser deixar de fora algum agente, escreva os nomes separados por vírgulas (Enter para nenhum):',
+    cliUnknownAgents: (unknown, known) => `Não reconheço: ${unknown}. Os agentes são: ${known}.`,
+    cliRepoHint: 'Para deixar de fora um repositório, volte a executar o comando escolhendo só os que quiser com --repos.',
+    title: 'Ainda não foi carregado nada no seu perfil da Shakers. Isto é o que seria carregado:',
+    sentTitle: 'Isto é o que foi carregado:',
+    tools: (list) => `Ferramentas de IA detetadas: ${list}.`,
+    technologies: (list) => `Tecnologias dos seus projetos: ${list}.`,
+    activity: (sessions, days) => `A sua atividade com IA: ${sessions === 1 ? '1 sessão' : `${sessions} sessões`}${days === null ? '' : `, cerca de ${days} dias ativos por semana`}.`,
+    repos: (list, commits) => `Repositórios analisados: ${list}. Deles só se enviam números (${commits === 1 ? '1 commit' : `${commits} commits`}, linhas alteradas, tipos de ficheiro), nunca o nome nem o código.`,
+    agents: (list, definitions, summaries) => `Agentes de IA detetados: ${list}. De cada um envia-se ${listOf('pt', ['o nome', 'as ferramentas', 'o modelo', 'de que agente depende', ...(definitions > 0 ? ['o texto da sua definição (sem segredos)'] : []), ...(summaries > 0 ? ['o resumo do que faz'] : [])])}.`,
+    excerpts: (conversation, commands) => `Excertos de texto: ${conversation} frases curtas do que pede à IA e ${commands} comandos, com 200 caracteres no máximo, sem segredos, caminhos nem emails.`,
+    noExcerpts: 'Excertos de texto: nenhum.',
+    notSent: 'Não se envia: o seu código, as suas conversas completas nem os nomes dos seus repositórios.',
+    explanationTitle: 'O que a Shakers faz com isto:',
+    explanation: [
+      'Situa-o em dois eixos. Configuração: o que tem montado (ferramentas, servidores MCP, agentes), de menos para mais: Assistido, Estendido ou Orquestrado. Uso: como orienta a IA (se lhe dá instruções concretas, se revê o que propõe), de menos para mais: Reativo, Deliberado ou Rigoroso.',
+      'A configuração calcula-se com regras fixas a partir do que foi detetado. O nível de uso e os textos sobre como trabalha são escritos por um modelo de IA nos servidores da Shakers.',
+      'No seu perfil aparece a secção «Meu trabalho com IA»: os seus dois níveis, a sua casa na matriz (por exemplo Practitioner ou Architect), as suas ferramentas e agentes, e dois textos que pode editar na web.',
+    ],
+    afterwards: 'Se não concordar com o resultado, carregue em «Solicitar revisão humana» nessa secção da web ou escreva para talent@shakersworks.com. Hoje não pode ocultar a secção sozinho; para pedir que seja apagada, escreva para esse mesmo endereço.',
+    excludeHint: 'Se quiser deixar de fora algum repositório, algum agente ou os excertos de texto, diga-me ao responder.',
+    question: 'Carrego-o no seu perfil?',
+    yes: 'Carregar no meu perfil',
+    no: 'Não carregar',
+    formExcerpts: 'Incluir os excertos de texto',
+    formRepo: (name) => `Incluir o repositório ${name}`,
+    formAgent: (name) => `Incluir o agente ${name}`,
+    declined: 'Não foi carregado nada. A análise fica só no seu computador.',
+    nothingLeft: 'Deixou de fora todos os repositórios, por isso não foi carregado nada.',
+    throttled: 'Carregou uma análise há menos de uma hora, por isso não foi carregado nada. Pode tentar mais tarde.',
+    uploaded: 'Carregado no seu perfil. A Shakers está a avaliá-lo e o resultado demora alguns minutos.',
+    uploadFailed: 'Não foi possível carregá-lo. A sua análise fica só no seu computador; pode tentar mais tarde.',
+    resultTitle: 'O seu resultado em «Meu trabalho com IA»:',
+    setupLevel: (level) => `Configuração: ${level}.`,
+    usageLevel: (level) => `Uso: ${level}.`,
+    cell: (name) => `A sua casa na matriz: ${name}.`,
+    levels: { ASSISTED: 'Assistido', EXTENDED: 'Estendido', ORCHESTRATED: 'Orquestrado', REACTIVE: 'Reativo', DELIBERATE: 'Deliberado', RIGOROUS: 'Rigoroso' },
+    resultPending: 'O seu resultado ainda não está em «Meu trabalho com IA». Se acabou de carregar a sua análise, vai aparecer dentro de alguns minutos.',
+  },
+};
+
 function toSignupLanguage(code) {
   const base = String(code || '').toLowerCase().split(/[-_]/)[0];
   return SIGNUP_LANGUAGES.includes(base) ? base : null;
@@ -418,6 +589,10 @@ function legalCopy(lang) {
   return LEGAL[toSignupLanguage(lang) || 'en'];
 }
 
+function reviewCopy(lang) {
+  return REVIEW[toSignupLanguage(lang) || 'en'];
+}
+
 // The profile draft the talent confirms before the account exists: one line per group, empty parts left out.
 function renderDraft(lang, d = {}) {
   const c = signupCopy(lang);
@@ -447,4 +622,4 @@ function renderRole(lang, { name, source, evidence, openProjects, recommended })
   ].filter(Boolean).join('\n');
 }
 
-module.exports = { SIGNUP_LANGUAGES, LEGAL, signupCopy, legalCopy, toSignupLanguage, renderDraft, renderRole, amount };
+module.exports = { SIGNUP_LANGUAGES, LEGAL, REVIEW, signupCopy, legalCopy, reviewCopy, toSignupLanguage, renderDraft, renderRole, amount };

package/src/skills-client.js

@@ -2,7 +2,7 @@
 
 const { postJsonWithTimeout } = require('./backend-request');
 
-// Talent-skills client (talents-ai-score, ADR-054/055 — `start`'s "Añadir skills" route, src/start-add-skills.js).
+// Talent-skills client (`start`'s "Añadir skills" route, src/start-add-skills.js).
 
 const DEFAULT_TIMEOUT_MS = 20000;
 

package/src/start-add-agents.js

@@ -24,7 +24,7 @@ const { reasonCopy, pickPortfolios } = require('./start-add-skills');
 const { askWithDefault } = require('./start-add-portfolio');
 const { styleQuestion, styleSuccess } = require('./ansi');
 
-// `start`'s "Add agent to profile" route (talents-ai-score Phase 2), mirror of src/start-add-portfolio.js: the IA pre-drafts, the Talent edits.
+// `start`'s "Add agent to profile" route, mirror of src/start-add-portfolio.js: the IA pre-drafts, the Talent edits.
 
 const MAX_DEFINITION_CHARS = 4000;
 
@@ -68,7 +68,7 @@ async function chooseAgent({ ask, stdinIsTTY, agents, c, input, output }) {
   return idx === null ? null : agents[idx];
 }
 
-// Step 4 — the two AI-drafted fields, consent-gated (ADR-052) before any egress.
+// Step 4 — the two AI-drafted fields, consent-gated before any egress.
 async function resolveAgentFields({ ask, catalog, c, stdinIsTTY, agent, accessToken, preAccepted = false }) {
   const freeText = async () => ({
     whatItDoes: await askFreeText(ask, c.agentWhatItDoesFreeTextPrompt),

package/src/start-add-portfolio.js

@@ -8,7 +8,7 @@ const {
   getPortfoliosListEndpoint, getPortfoliosDeclareEndpoint, getPortfolioDraftDescriptionEndpoint,
   getSkillsResolveMatchedEndpoint, getSkillsResolveAddableEndpoint, getSkillsDeclareEndpoint,
 } = require('./config');
-const { requestListPortfolios, requestDeclarePortfolio, requestDraftDescription } = require('./portfolio-client');
+const { requestListPortfolios, requestDeclarePortfolio, requestDraftDescription, normalizeDomain } = require('./portfolio-client');
 const { requestResolveAddableSkills: requestResolveMatchedSkills, requestResolveAddableSkills } = require('./skills-client');
 const { getRemoteUrl, getCommitDateRange } = require('./portfolio-git-info');
 const { confirmDisclaimerAcceptance } = require('./certify-disclaimer');
@@ -21,7 +21,7 @@ const { palette, styleQuestion, styleSuccess } = require('./ansi');
 // Only `dim`/`reset` for the numbered fallback's descriptions — the exact treatment bin/start.js's own menu and bin/certify.js's picker give theirs.
 const ANSI = palette({ reset: '\x1b[0m', dim: '\x1b[2m' });
 
-// `start`'s "Add project to portfolio" route (talents-ai-score, ADR-059).
+// `start`'s "Add project to portfolio" route.
 
 const MAX_README_CHARS = 4000;
 const MAX_PACKAGE_DESCRIPTION_CHARS = 500;
@@ -56,15 +56,6 @@ async function askFreeText(ask, promptText) {
   return String(await ask(styleQuestion(promptText))).trim();
 }
 
-function normalizeDomain(raw) {
-  let s = String(raw || '').trim().toLowerCase();
-  if (!s) return '';
-  s = s.replace(/^https?:\/\//, '');
-  s = s.split('/')[0].split('?')[0].split('#')[0];
-  s = s.replace(/^www\./, '');
-  return s;
-}
-
 // Step 2 — Type.
 function typeOptions(c) {
   return [
@@ -345,7 +336,7 @@ async function runAddPortfolio({
 
   if (declared.ok) {
     process.stdout.write(`\n  ${styleSuccess(c.portfolioDeclaredSuccess(title))}\n\n`);
-    // OPT-IN (dueño, 2026-08-12): offer the REST of the detected skills for the Talent's PROFILE, now that the portfolio itself (and whatever skillIds it carried) is safely declared.
+    // OPT-IN: offer the REST of the detected skills for the Talent's PROFILE, now that the portfolio itself (and whatever skillIds it carried) is safely declared.
     await offerAddableSkillsForProfile({ ask, catalog, c, technologies, session, stdinIsTTY, input, output, runLogin });
     return;
   }
@@ -383,6 +374,5 @@ module.exports = {
   askWithDefault,
   chooseType,
   typeOptions,
-  normalizeDomain,
   offerAddableSkillsForProfile,
 };

package/src/start-add-skills.js

@@ -9,7 +9,7 @@ const { runInteractiveMultiSelect } = require('./interactive-select');
 const { loadAuthSession, sessionStatus } = require('./auth-session-store');
 const { styleSuccess } = require('./ansi');
 
-// `start`'s "Añadir skills" route (talents-ai-score, ADR-054/055).
+// `start`'s "Añadir skills" route.
 
 // Maps a technical failure reason to the localized `start.errorReason` copy.
 function reasonCopy(reason, c) {
@@ -255,6 +255,6 @@ module.exports = {
   declareAll,
   printProfileBoost,
   offerRelateToPortfolios,
-  // Exported for src/start-add-agents.js's own relate step (ADR-041): the multi-select over the Talent's portfolios, reused verbatim.
+  // Exported for src/start-add-agents.js's own relate step: the multi-select over the Talent's portfolios, reused verbatim.
   pickPortfolios,
 };

package/src/stdin-ask.js

@@ -49,14 +49,14 @@ function createLineQueueAsk(writeQuestion) {
 
 // `onInterrupt` (optional): a Ctrl-C (SIGINT) handler for a TTY.
 function createStdinAsk({ onInterrupt } = {}) {
-  // `rl` is re-createable (issue 102), not a `const`.
+  // `rl` is re-createable, not a `const`.
   let rl = null;
   let ended = false;
   let suspending = false;
   let currentPrompt = '';
 
   const { ask, pushLine, markEnded, drain } = createLineQueueAsk((question) => {
-    // Long-answer wrap bug (skill-code-certification, certify agents): in a TTY, `readline` runs in terminal mode and redraws the current line on every keystroke (wrap, cursor).
+    // Long-answer wrap bug (certify agents): in a TTY, `readline` runs in terminal mode and redraws the current line on every keystroke (wrap, cursor).
     const text = `  ${question} `;
     const lastNewline = text.lastIndexOf('\n');
     if (lastNewline >= 0) {
@@ -98,7 +98,7 @@ function createStdinAsk({ onInterrupt } = {}) {
     r.close();
     suspending = false;
   }
-  // SECRETS DO NOT ECHO (issue 102).
+  // SECRETS DO NOT ECHO.
   ask.secret = async (question) => {
     if (!canPromptSecretly(process.stdin)) return ask(question);
     process.stdout.write(`  ${question} `);
@@ -126,4 +126,16 @@ function createStdinAsk({ onInterrupt } = {}) {
   return ask;
 }
 
-module.exports = { createStdinAsk, createLineQueueAsk };
+function createLazyStdinAsk() {
+  let real = null;
+  const open = () => { real = real || createStdinAsk(); return real; };
+  const ask = (question) => open()(question);
+  ask.secret = (question) => open().secret(question);
+  ask.drain = () => { if (real) real.drain(); };
+  ask.close = () => { if (real) real.close(); };
+  ask.suspend = () => { if (real) real.suspend(); };
+  ask.resume = () => { if (real) real.resume(); };
+  return ask;
+}
+
+module.exports = { createStdinAsk, createLazyStdinAsk, createLineQueueAsk };

package/src/strip-internal-comments.js

@@ -1,6 +1,6 @@
 'use strict';
 
-// Our comments do not travel in the talent's shareable report (issue 098).
+// Our comments do not travel in the talent's shareable report.
 
 // `<!-- … -->`, including multi-line.
 const HTML_COMMENT_RE = /<!--[\s\S]*?-->/g;

package/src/tech-detector.js

@@ -10,7 +10,7 @@ const {
   isExcludedWalkPath,
 } = require('./scan-exclusions');
 
-// Monorepo support (skill-code-certification, issue 008): manifests are discovered RECURSIVELY under `root`, not just at the top level.
+// Monorepo support: manifests are discovered RECURSIVELY under `root`, not just at the top level.
 
 // Exact dependency-name -> canonical framework/library name (npm + pip).
 const EXACT_FRAMEWORK_MAP = {
@@ -202,7 +202,7 @@ function fromPyprojectTomlFile(filePath) {
   return names;
 }
 
-// Manifest filename -> reader (skill-code-certification, issue 008).
+// Manifest filename -> reader.
 const MANIFEST_READERS = {
   'package.json': fromPackageJsonFile,
   'requirements.txt': fromRequirementsTxtFile,

package/src/templates/report-sheet.html

@@ -146,7 +146,7 @@ header.top{
 .col-head{display:flex; align-items:baseline; gap:10px; margin:2px 0 14px}
 .col-head h2{margin:0; font-size:13px; letter-spacing:.12em; text-transform:uppercase; color:var(--fg-muted); font-weight:650}
 .col-head .dot{width:6px;height:6px;border-radius:50%; background:var(--accent)}
-/* Column note (issue 096): one line under the column head, for copy that has to
+/* Column note: one line under the column head, for copy that has to
    be read before the numbers below it. `.sub` only exists inside `.card`. */
 .col-note{margin:-8px 0 14px; font-size:12.5px; line-height:1.5; color:var(--fg-muted)}
 .col-note b{color:var(--fg); font-weight:650}
@@ -211,16 +211,15 @@ header.top{
 .chip .d{width:7px;height:7px;border-radius:50%; background:var(--accent)}
 
 /* --- Agent tree --------------------------------------------- *
- * ORPHANED BUT OWNED (issue 090, kept for issue 089).
+ * ORPHANED BUT OWNED.
  *
  * Nothing emits `class="agent"` today: `render-sheet.js` builds no agent tree, so
  * this block styles markup that does not exist. It is NOT dead by accident — it
- * came with the approved mockup and it is exactly the material issue 089 (the
- * shareable report has no agents at all) needs, so that design does not have to
- * re-invent the nesting rail. Recovering the markup that used to pair with it:
- * `git show 7fae2c8^:src/render-html.js` (see `agentNodeHtml`/`agentCardsSection`).
+ * came with the approved mockup and it is exactly the material an agent section in
+ * the shareable report (which has no agents at all) needs, so that design does not
+ * have to re-invent the nesting rail.
  *
- * If 089 is dropped or solved another way, this goes with it. What it must not
+ * If that section is dropped or solved another way, this goes with it. What it must not
  * do is sit here with no owner, which is how it got orphaned in the first place.
  * ------------------------------------------------------------ */
 .tree{margin:0; padding:0; list-style:none}
@@ -312,7 +311,7 @@ header.top{
 .tag-na{background:var(--chip-bg); color:var(--fg-muted)}
 .area .icn{width:16px; text-align:center}
 
-/* anchored quotes (issue 054): one block per quote, under its own area row, with
+/* anchored quotes: one block per quote, under its own area row, with
    a left rail whose colour differs per SOURCE. The .qt-k label is the real
    distinction between the two — the rail is lost in greyscale, the label is not. */
 .area-block{display:flex; flex-direction:column; gap:3px}
@@ -401,7 +400,7 @@ __BODY__
   "use strict";
 
   /* Runs ONE independent init/update step in isolation from its siblings
-     (issue 067). `load`, `resize` and the theme toggle each chain several
+     `load`, `resize` and the theme toggle each chain several
      UNRELATED effects (paint the ring, count up the score, slide the tab
      indicator, sync a label…) as a plain sequence of statements. Before this,
      one throwing — as `paintRing()` did pre-066, on ITS OWN unguarded lookup —
@@ -448,9 +447,8 @@ __BODY__
        reached countUp / moveInd / syncExpandLabel — leaving the tab indicator
        unpositioned and the expand-all label unsynced — and the theme toggle, whose
        handler ends in paintRing(), threw on every single click. A broken script
-       fails no test; it silently degrades a report someone is reading. Found in
-       issue 066, when a report with only an agent certification became reachable
-       for the first time. */
+       fails no test; it silently degrades a report someone is reading. Found when
+       a report with only an agent certification first became reachable. */
     if(!fill) return;
     var circumference = 2 * Math.PI * 54; // r=54
     fill.style.strokeDasharray = circumference;
@@ -556,7 +554,7 @@ __BODY__
   });
 
   /* ---- init ---- */
-  // Four UNRELATED effects (issue 067): each isolated so one failing never
+  // Four UNRELATED effects: each isolated so one failing never
   // takes the other three down with it — see safeStep() above for why this,
   // and not a guard on #ringFill/#scoreNum alone, is the fix at this level.
   window.addEventListener('load', function(){