shakers-cli 0.15.0 → 0.17.0

package/bin/shakers.js

@@ -10,354 +10,30 @@ if (_nodeMajor < 18) {
   process.exit(1);
 }
 
-const { detectReportLang, getCatalog } = require('../src/i18n');
-const { promptSelect } = require('../src/prompt-select');
-const { createStdinAsk } = require('../src/stdin-ask');
-const { migrateLegacyConfigDir } = require('../src/config-dir');
-const { sanitizeStaleBakedEndpoints } = require('../src/config');
-const { ensureFreshSession } = require('../src/session-refresh');
-const { hasUsableSession } = require('../src/session-gate');
-const { run: runAiUsage } = require('./ai-usage');
-const { run: runCertify } = require('./certify');
-const { run: runShare } = require('./share');
-const { run: runReport } = require('./report-html');
-const { run: runSuperadmin } = require('./superadmin');
-const { run: runLogin, runLogout } = require('./login');
-const { run: runAddSkill } = require('./add-skill');
-const { run: runAddAgent } = require('./add-agent');
-const { run: runAddProject } = require('./add-project');
-const { run: runAddRole } = require('./add-role');
-const { run: runChangeRole } = require('./change-role');
-const { run: runFindProjects } = require('./find-projects');
-const { run: runShowProject } = require('./show-project');
-const { run: runSave, runUnsave } = require('./save');
-const { run: runInvitations } = require('./invitations');
-const { run: runApplications } = require('./applications');
-const { run: runAvailability } = require('./availability');
-const { run: runCertifications } = require('./certifications');
-const { run: runMe } = require('./me');
-const { run: runRate } = require('./rate');
-const { run: runLang } = require('./lang');
-const { run: runSocials } = require('./socials');
-const { run: runExperiences } = require('./experiences');
-const { run: runPortfolios } = require('./portfolios');
-const { run: runAlma } = require('./alma');
-const { run: runRegister } = require('./register');
-const { run: runOnboarding } = require('./onboarding');
-const { run: runConfig } = require('./config');
-const { run: runMcp } = require('./mcp');
-const { run: runUpdate } = require('./update');
-const { checkOnboardingCompleted } = require('../src/onboarding-availability');
-const { emitCommandAudit } = require('../src/command-audit');
-const { readPackageInfo } = require('../src/update-flow');
-const { isSuppressed, maybeNotify, triggerBackgroundCheck } = require('../src/update-notifier');
-
-let VERSION = '';
-try {
-  VERSION = require('../package.json').version || '';
-} catch {
-  VERSION = '';
-}
-
-function parseLang(argv) {
-  for (let i = 0; i < argv.length; i++) {
-    const a = argv[i];
-    if (a === '--lang' && (argv[i + 1] === 'es' || argv[i + 1] === 'en')) return argv[i + 1];
-    if (a === '--lang=es') return 'es';
-    if (a === '--lang=en') return 'en';
-  }
-  return null;
+if (['--version', '-v', 'version'].includes(String(process.argv[2]).toLowerCase())) {
+  require('./version');
+  process.exit(0);
 }
 
-const HANDLERS = {
-  'ai-usage': runAiUsage,
-  certify: runCertify,
-  share: runShare,
-  report: runReport,
-  sheet: runReport,
-  'add-skill': runAddSkill,
-  'add-agent': runAddAgent,
-  'add-project': runAddProject,
-  'add-role': runAddRole,
-  'change-role': runChangeRole,
-  'find-projects': runFindProjects,
-  'show-project': runShowProject,
-  'save-project': runSave,
-  'unsave-project': runUnsave,
-  invitations: runInvitations,
-  applications: runApplications,
-  availability: runAvailability,
-  certifications: runCertifications,
-  me: runMe,
-  profile: runMe,
-  rate: runRate,
-  lang: runLang,
-  socials: runSocials,
-  experiences: runExperiences,
-  portfolios: runPortfolios,
-  alma: runAlma,
-  register: runRegister,
-  onboarding: runOnboarding,
-  config: runConfig,
-  update: runUpdate,
-  login: runLogin,
-  logout: runLogout,
-  superadmin: runSuperadmin,
-  mcp: runMcp,
-};
-
-const SESSION_EXEMPT = new Set(['ai-usage', 'register', 'config', 'login', 'logout', 'superadmin', 'mcp', 'share', 'alma', 'update']);
-
-// Command FAMILIES — a navigation layer over the flat commands (which all stay
-// valid as aliases). `shakers <family> <sub>` resolves to the flat handler; every
-// sub is just a friendlier name for an existing command. Additive, never breaking.
-const FAMILIES = {
-  add: { skill: 'add-skill', agent: 'add-agent', project: 'add-project', role: 'add-role' },
-  role: { add: 'add-role', change: 'change-role', main: 'change-role' },
-  profile: {
-    show: 'me', rate: 'rate', languages: 'lang', lang: 'lang', socials: 'socials',
-    experiences: 'experiences', portfolios: 'portfolios', availability: 'availability',
-    certifications: 'certifications',
-  },
-  projects: {
-    find: 'find-projects', show: 'show-project', save: 'save-project', unsave: 'unsave-project',
-    invitations: 'invitations', applications: 'applications',
-  },
-  usage: { run: 'ai-usage', report: 'report', share: 'share' },
-  account: { login: 'login', logout: 'logout', register: 'register', config: 'config', update: 'update' },
-  certs: { list: 'certifications', certify: 'certify' },
-};
-
-// `shakers <family>` with no sub: obvious default, else the family help.
-const FAMILY_DEFAULTS = { usage: 'ai-usage', profile: 'me', certs: 'certifications' };
-
-function familyHelpText(family, lang) {
-  const map = FAMILIES[family] || {};
-  const subs = Object.keys(map);
-  // Show `shakers <family> <sub>` next to the flat alias it maps to, so both forms are discoverable.
-  const lines = subs.map((s) => `    shakers ${family} ${s}   (alias: shakers ${map[s]})`).join('\n');
-  if (lang === 'es') {
-    return `\n  Familia "${family}" — subcomandos (los comandos planos entre paréntesis siguen valiendo):\n${lines}\n\n  Ejecuta \`shakers ${family} <subcomando> --help\` para las opciones.\n\n`;
-  }
-  return `\n  "${family}" family — subcommands (the flat commands in parentheses still work):\n${lines}\n\n  Run \`shakers ${family} <subcommand> --help\` for the options.\n\n`;
-}
+const config = require('../src/config');
 
-// Resolves a family + sub into a flat command, mutating nothing the flat path relies on.
-function resolveFamily(command, args) {
-  const family = FAMILIES[command];
-  if (!family) return { command, args };
-  const subToken = args.find((a) => !a.startsWith('-'));
-  const sub = subToken ? subToken.toLowerCase() : null;
-  if (sub && family[sub]) {
-    return { command: family[sub], args: args.filter((_, i) => i !== args.indexOf(subToken)) };
-  }
-  if (!sub && FAMILY_DEFAULTS[command]) return { command: FAMILY_DEFAULTS[command], args };
-  // A pure family (not also a flat handler) with no valid sub → signal "show family help".
-  if (!HANDLERS[command]) return { command, args, familyHelp: true };
-  return { command, args };
-}
-
-async function remindAccountForAiUsage(lang, args) {
-  if (!process.stdin.isTTY || args.includes('--json')) return;
-  const r = getCatalog(lang).cli.accountReminder;
-  const ask = createStdinAsk();
-  let choice;
-  try {
-    choice = await promptSelect({
-      ask,
-      stdinIsTTY: true,
-      out: (line) => process.stdout.write(`  ${line}\n`),
-      header: r.question,
-      hint: r.hint,
-      items: [{ id: 'yes', label: r.yes }, { id: 'no', label: r.no }],
-      labelFor: (it) => it.label,
-    });
-  } finally {
-    ask.close();
-  }
-  if (choice && choice.id === 'yes') {
-    await runLogin(['--lang', lang]);
-  }
-}
-
-function usageText(lang, { hideOnboarding = false } = {}) {
-  const title = VERSION ? `shakers v${VERSION}` : 'shakers';
-  if (lang === 'es') {
-    const onboardingLine = hideOnboarding ? '' : `    onboarding   La entrevista de onboarding (por voz/texto, LiveKit)\n`;
-    return `\n  ${title} — evaluación de uso de IA y skills\n\n`
-      + `  Uso: shakers <comando> [opciones]\n\n`
-      + `  Público (sin sesión):\n`
-      + `    ai-usage     Escanea este proyecto + tu máquina y puntúa tu setup de IA\n`
-      + `    register     Registro completo: perfil, precio, uso de IA y entrevista\n`
-      + `    mcp          Servidor MCP local (stdio) para apps de IA de escritorio\n\n`
-      + `  Requieren sesión (ejecuta antes: shakers login):\n`
-      + onboardingLine
-      + `    certify      Certifica una dimensión de tu rol (entrevista por LiveKit)\n`
-      + `    add-skill    Declara Skills detectadas en tu perfil\n`
-      + `    add-agent    Declara un agente detectado en tu perfil\n`
-      + `    add-project  Añade este proyecto a tu portfolio\n`
-      + `    add-role     Añade un rol a tu perfil (rol de crecimiento)\n`
-      + `    change-role  Cambia tu rol principal por uno de los que ya tienes\n`
-      + `    find-projects Lista los proyectos/posiciones disponibles para ti\n`
-      + `    show-project Detalle de un proyecto/posición por id\n`
-      + `    save-project/unsave-project  Guarda o quita un proyecto de tus guardados\n`
-      + `    invitations  Tus invitaciones a proyectos\n`
-      + `    applications Proyectos a los que has aplicado + estado\n`
-      + `    availability Ver o fijar tu disponibilidad\n`
-      + `    certifications Tus dimensiones certificadas/sin certificar\n`
-      + `    me           Tu resumen de perfil\n`
-      + `    rate         Ver o fijar tu tarifa por proyecto\n`
-      + `    lang         Ver o fijar tus idiomas y nivel\n`
-      + `    socials      Ver o fijar tus enlaces sociales\n`
-      + `    experiences  Tus experiencias laborales\n`
-      + `    portfolios   Tus piezas de portfolio\n`
-      + `    alma         Mini-shell interactivo para conversar con Alma\n`
-      + `    report       Abre el informe HTML completo y compartible\n`
-      + `    share        Tarjeta de uso con marca para LinkedIn\n\n`
-      + `  Sesión:\n`
-      + `    login        Inicia sesión en tu cuenta de Shakers\n`
-      + `    logout       Cierra la sesión\n`
-      + `    config       Lee/escribe la configuración (bases de hub/certs)\n`
-      + `    update       Actualiza el CLI a la última versión publicada (--check solo informa)\n\n`
-      + `  Familias (agrupan los comandos de arriba; los nombres planos siguen valiendo como alias):\n`
-      + `    add <skill|agent|project|role>     ·  role <add|change>\n`
-      + `    profile <show|rate|languages|socials|experiences|portfolios|availability|certifications>\n`
-      + `    projects <find|show|save|unsave|invitations|applications>\n`
-      + `    usage <run|report|share>  ·  certs <list|certify>  ·  account <login|logout|register|config|update>\n`
-      + `    Ejecuta \`shakers <familia>\` (sin subcomando) para ver sus subcomandos.\n\n`
-      + `  Ejecuta shakers <comando> --help para las opciones de cada comando.\n\n`;
-  }
-  const onboardingLine = hideOnboarding ? '' : `    onboarding   The onboarding interview (over voice/text, LiveKit)\n`;
-  return `\n  ${title} — AI usage & skills evaluator\n\n`
-    + `  Usage: shakers <command> [options]\n\n`
-    + `  Public (no session):\n`
-    + `    ai-usage     Scan this project + machine and score your AI setup\n`
-    + `    register     Full registration: profile, pricing, AI usage and interview\n`
-    + `    mcp          Local MCP server (stdio) for desktop AI apps\n\n`
-    + `  Require a session (run \`shakers login\` first):\n`
-    + onboardingLine
-    + `    certify      Certify a dimension of your role (LiveKit interview)\n`
-    + `    add-skill    Declare detected Skills on your profile\n`
-    + `    add-agent    Declare a detected agent on your profile\n`
-    + `    add-project  Add this project to your portfolio\n`
-    + `    add-role     Add a role to your profile (a growth role)\n`
-    + `    change-role  Switch your main role to one you already have\n`
-    + `    find-projects List the Projects/Positions available to you\n`
-    + `    show-project Detail of a project/position by id\n`
-    + `    save-project/unsave-project  Save or remove a project from your saved list\n`
-    + `    invitations  Your project invitations\n`
-    + `    applications Projects you applied to + status\n`
-    + `    availability View or set your availability\n`
-    + `    certifications Your certified/uncertified dimensions\n`
-    + `    me           Your profile summary\n`
-    + `    rate         View or set your per-project rate\n`
-    + `    lang         View or set your languages and level\n`
-    + `    socials      View or set your social links\n`
-    + `    experiences  Your work experiences\n`
-    + `    portfolios   Your portfolio pieces\n`
-    + `    alma         Interactive mini-shell to converse with Alma\n`
-    + `    report       Open the full shareable HTML report\n`
-    + `    share        Branded usage card for LinkedIn\n\n`
-    + `  Session:\n`
-    + `    login        Sign in to your Shakers account\n`
-    + `    logout       Sign out\n`
-    + `    config       Read/write configuration (hub/certs bases)\n`
-    + `    update       Update the CLI to the latest published version (--check only reports)\n\n`
-    + `  Families (group the commands above; the flat names still work as aliases):\n`
-    + `    add <skill|agent|project|role>     ·  role <add|change>\n`
-    + `    profile <show|rate|languages|socials|experiences|portfolios|availability|certifications>\n`
-    + `    projects <find|show|save|unsave|invitations|applications>\n`
-    + `    usage <run|report|share>  ·  certs <list|certify>  ·  account <login|logout|register|config|update>\n`
-    + `    Run \`shakers <family>\` (no subcommand) to list its subcommands.\n\n`
-    + `  Run \`shakers <command> --help\` for a command's options.\n\n`;
-}
-
-function gateText(command, lang) {
-  if (lang === 'es') {
-    return `\n  "${command}" requiere una sesión activa.\n`
-      + `  Inicia sesión:  shakers login\n`
-      + `  ¿Sin cuenta?:   shakers register\n\n`;
-  }
-  return `\n  "${command}" requires an active session.\n`
-    + `  Sign in:      shakers login\n`
-    + `  No account?:  shakers register\n\n`;
-}
-
-function unknownText(command, lang) {
-  if (lang === 'es') {
-    return `\n  Comando desconocido: "${command}".\n`
-      + `  Ejecuta shakers para ver los comandos disponibles.\n\n`;
-  }
-  return `\n  Unknown command: "${command}".\n`
-    + `  Run \`shakers\` to see the available commands.\n\n`;
+const problem = config.envProfileProblem(process.env);
+if (problem) {
+  process.stderr.write(`\n  shakers: ${problem}\n\n`);
+  process.exit(1);
 }
 
-async function main() {
-  const argv = process.argv.slice(2);
-  const lang = parseLang(argv) || detectReportLang();
-
-  migrateLegacyConfigDir(process.env);
-  sanitizeStaleBakedEndpoints(process.env);
-  // Mint a fresh hub JWT from the stored cookie once per command (email sessions only; a no-op for Google/legacy or when no session exists).
-  try { await ensureFreshSession(process.env); } catch { /* never blocks a command */ }
-
-  const token = argv.find((a) => !a.startsWith('-'));
-
-  // Single dispatch choke-point (ADR-060): audit EXACTLY once before branching, fire-and-forget (never awaited). MCP tool calls run in-process and never reach here.
-  const auditCommand =
-    !token || token.toLowerCase() === 'help' ? 'help' : token.toLowerCase();
-  emitCommandAudit({ command: auditCommand, argv, env: process.env });
-
-  // Non-blocking update notice: reads a cached version synchronously, registry check runs in a detached worker; stderr-only, suppressed for --json/non-TTY/CI/update/opt-out.
-  if (!isSuppressed({ argv, command: auditCommand, env: process.env })) {
-    maybeNotify({ currentVersion: VERSION, lang, env: process.env });
-    triggerBackgroundCheck({ name: readPackageInfo().name, env: process.env });
-  }
-
-  if (!token || token.toLowerCase() === 'help') {
-    let hideOnboarding = false;
-    try {
-      hideOnboarding = await checkOnboardingCompleted({ timeoutMs: 3000 });
-    } catch {
-      hideOnboarding = false;
-    }
-    process.stdout.write(usageText(lang, { hideOnboarding }));
-    return;
-  }
+const argv = process.argv.slice(2);
+const token = argv.find((a) => !a.startsWith('-'));
+const rest = argv.filter((_, i) => i !== argv.indexOf(token));
 
-  const rawCommand = token.toLowerCase();
-  const rawArgs = argv.filter((_, i) => i !== argv.indexOf(token));
-
-  // Family navigation layer (flat commands still work as aliases).
-  const resolved = resolveFamily(rawCommand, rawArgs);
-  if (resolved.familyHelp) {
-    process.stdout.write(familyHelpText(rawCommand, lang));
-    return;
-  }
-  const command = resolved.command;
-  const args = resolved.args;
-
-  const handler = HANDLERS[command];
-  if (!handler) {
-    process.stderr.write(unknownText(command, lang));
-    process.exitCode = 1;
-    return;
-  }
-
-  const wantsHelp = args.includes('--help') || args.includes('-h');
-  const loggedIn = await hasUsableSession(process.env);
-
-  if (!wantsHelp && !SESSION_EXEMPT.has(command) && !loggedIn) {
-    process.stderr.write(gateText(command, lang));
-    process.exitCode = 1;
-    return;
-  }
-
-  if (command === 'ai-usage' && !wantsHelp && !loggedIn) {
-    await remindAccountForAiUsage(lang, args);
-  }
-
-  await handler(args);
+if (token && token.toLowerCase() === 'mcp' && rest[0] !== 'install') {
+  require('../src/config-dir').migrateLegacyConfigDir(process.env);
+  config.sanitizeStaleBakedEndpoints(process.env);
+  require('../src/session-refresh').ensureFreshSession(process.env)
+    .catch(() => null)
+    .then(() => require('../src/command-audit').emitCommandAudit({ command: 'mcp', argv, env: process.env }));
+  require('./mcp').run(rest, { makeInterviewClient: require('../src/interview-client').createInterviewClient });
+} else {
+  require('./shakers-cli').main();
 }
-
-main();

package/bin/share.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 'use strict';
 
-// `share` — turns the project's AI-usage FOOTPRINT result into a branded card to post on LinkedIn (skill-code-certification).
+// `share` — turns the project's AI-usage FOOTPRINT result into a branded card to post on LinkedIn.
 
 const { detectReportLang, getCatalog } = require('./../src/i18n');
 const { generateShareCard } = require('./../src/share-card');

package/bin/superadmin.js

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 'use strict';
 
-// `superadmin` — NON-PROD, password-authenticated superadmin SESSION (ADR-027, supersedes the ADR-021/022/023 provision/teardown/authorized-authoring flow).
+// `superadmin` — NON-PROD, password-authenticated superadmin SESSION.
 
 const http = require('http');
 const https = require('https');
@@ -94,7 +94,7 @@ async function promptLine(ask, canPrompt, label) {
   return String(await ask(label)).trim();
 }
 
-// The SECRET prompt (issue 102).
+// The SECRET prompt.
 async function promptSecret(ask, canPrompt, label) {
   if (!canPrompt) return '';
   const read = typeof ask.secret === 'function' ? ask.secret.bind(ask) : ask;
@@ -214,7 +214,7 @@ async function run(argv = process.argv.slice(2), { ask: injectedAsk = null, inpu
         return;
       }
       process.stdout.write(`\n  ${c.sessionIntro}\n`);
-      // talents-ai-score, ADR-020/021 (coordinator ruling): superadmin is DELIBERATELY single-hop, PRIMARY (certifications service) ONLY — never hub.
+      // Superadmin is DELIBERATELY single-hop, PRIMARY (certifications service) ONLY — never hub.
       process.stdout.write(`  ${c.queryingPrimary(endpoint)}\n`);
       // Always true (three-way review): the password has NO argv flag anymore, so it must always be collectible — either from a real TTY, the REPL's injected reader, or a piped stdin.
       const password = await promptSecret(ask, true, c.passwordPrompt);
@@ -230,7 +230,7 @@ async function run(argv = process.argv.slice(2), { ask: injectedAsk = null, inpu
   }
 }
 
-// ADR-025 read-only attribution receipt for stored certifications.
+// Read-only attribution receipt for stored certifications.
 async function runInspect({ opts, c, endpoint, password, ask, canPrompt }) {
   const email = await resolveEmailArg(opts, c, ask, canPrompt, c.inspectEmailPrompt);
   if (!password || !email || !isValidEmail(email)) {
@@ -308,7 +308,7 @@ async function resolveEmailArg(opts, c, ask, canPrompt, promptLabel) {
   return null;
 }
 
-// ADR-027: open a superadmin SESSION — validate the password server-side, get a token, persist it locally.
+// Open a superadmin SESSION — validate the password server-side, get a token, persist it locally.
 async function runOpenSession({ opts, c, endpoint, password, ask, canPrompt }) {
   const email = await resolveEmailArg(opts, c, ask, canPrompt, c.emailPrompt);
   if (!password || !email || !isValidEmail(email)) {

package/bin/version.js

@@ -0,0 +1,3 @@
+'use strict';
+
+process.stdout.write(`${require('../package.json').version}\n`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shakers-cli",
-  "version": "0.15.0",
+  "version": "0.17.0",
   "description": "Shakers AI usage & skills evaluator: a local-first CLI (`shakers` binary) plus a local MCP server. Commands: ai-usage (scan + classify your AI-tool setup, T0-T7), certify (certify Skills from your code), share (branded LinkedIn card).",
   "type": "commonjs",
   "bin": {
@@ -15,9 +15,11 @@
   "scripts": {
     "start": "node bin/shakers.js",
     "shakers": "node bin/shakers.js",
-    "test": "node --test test/*.test.js",
+    "test": "node --require ./test-fixtures/test-env.js --test test/*.test.js",
     "build:mcpb": "sh scripts/build-mcpb.sh",
-    "publish:beta": "node scripts/prepare-beta.js && npm publish --tag latest && git checkout -- package.json"
+    "publish:beta": "node scripts/prepare-beta.js && npm publish --tag latest && git checkout -- package.json README.md",
+    "lint": "oxlint --deny-warnings bin src scripts test test-fixtures",
+    "check:boundaries": "node scripts/check-boundaries.js"
   },
   "engines": {
     "node": ">=18"
@@ -35,8 +37,15 @@
     "certification"
   ],
   "license": "SEE LICENSE IN LICENSE",
+  "devDependencies": {
+    "oxlint": "1.86.0"
+  },
   "publishConfig": {
     "access": "public",
     "registry": "https://registry.npmjs.org/"
+  },
+  "amplitude": {
+    "env": "prod",
+    "apiKey": "03bbeda1f0c96d51774faee68ce12a3"
   }
 }

package/src/account-marker.js

@@ -0,0 +1,40 @@
+'use strict';
+
+const crypto = require('crypto');
+const fs = require('fs');
+const path = require('path');
+const { getConfigDir } = require('./config-dir');
+
+const MARKER_FILE_NAME = 'account-marker.json';
+const MARKER_FILE_VERSION = 1;
+
+function accountMarkerPath(env = process.env) {
+  return path.join(getConfigDir(env), MARKER_FILE_NAME);
+}
+
+function hasAccountMarker(env = process.env, { fs: fsImpl = fs } = {}) {
+  return fsImpl.existsSync(accountMarkerPath(env));
+}
+
+function recordAccountMarker(kind, env = process.env, { fs: fsImpl = fs } = {}) {
+  if (hasAccountMarker(env, { fs: fsImpl })) return;
+  const target = accountMarkerPath(env);
+  const dir = path.dirname(target);
+  const tmp = path.join(dir, `.${MARKER_FILE_NAME}.${process.pid}.${crypto.randomBytes(6).toString('hex')}.tmp`);
+  const payload = `${JSON.stringify({ version: MARKER_FILE_VERSION, kind, at: new Date().toISOString() }, null, 2)}\n`;
+  try {
+    fsImpl.mkdirSync(dir, { recursive: true, mode: 0o700 });
+    const fd = fsImpl.openSync(tmp, 'wx', 0o600);
+    try {
+      fsImpl.writeFileSync(fd, payload);
+      try { fsImpl.fsyncSync(fd); } catch {}
+    } finally {
+      fsImpl.closeSync(fd);
+    }
+    fsImpl.renameSync(tmp, target);
+  } catch {
+    try { fsImpl.unlinkSync(tmp); } catch {}
+  }
+}
+
+module.exports = { hasAccountMarker, recordAccountMarker };

package/src/account-trace.js

@@ -0,0 +1,23 @@
+'use strict';
+
+const { hasAuthSessionFile } = require('./auth-session-store');
+const { loadConsentState } = require('./share-consent-state');
+const { loadConfigFile } = require('./config');
+const { hasAccountMarker, recordAccountMarker } = require('./account-marker');
+
+function hasCurrentTrace(env) {
+  const consent = loadConsentState(env);
+  return hasAuthSessionFile(env)
+    || !!(consent && consent.lastSentAt)
+    || require('./report-store').hasRecordedUpload(env)
+    || !!loadConfigFile(env).superadminSession;
+}
+
+function hasAccountTrace(env = process.env) {
+  if (hasAccountMarker(env)) return true;
+  if (!hasCurrentTrace(env)) return false;
+  recordAccountMarker('existing-trace', env);
+  return true;
+}
+
+module.exports = { hasAccountTrace };

package/src/agent-category.js

@@ -1,6 +1,6 @@
 'use strict';
 
-// THE AGENT-CATEGORY VOCABULARY, AND WHICH OF IT IS A SPECIALITY (issue 120).
+// THE AGENT-CATEGORY VOCABULARY, AND WHICH OF IT IS A SPECIALITY.
 
 /** The floor category key, as the service's catalog defines it (`other-1`'s category). */
 const FLOOR_CATEGORY = 'other';

package/src/agent-evaluation.js

@@ -4,7 +4,7 @@ const { scrubSecrets } = require('./agent-synthesis');
 const { requestBackend } = require('./backend-request');
 const { reporterFor, REASON } = require('./model-call-record');
 
-// Agent definition-quality evaluation client (ADR-016, agent evaluation).
+// Agent definition-quality evaluation client.
 
 // HOW LONG TO WAIT FOR THE AGENT EVALUATION, and why it keeps growing.
 const DEFAULT_TIMEOUT_MS = 150000;
@@ -29,7 +29,7 @@ function buildAgentEvaluationRequest(structuralAgents, definitionsByName, locale
       parent: a.parent || null,
     })),
     promptVersion: PROMPT_VERSION,
-    // ADR-026: detected report language for the rationale + description prose.
+    // Detected report language for the rationale + description prose.
     ...(locale === 'es' || locale === 'en' ? { locale } : {}),
     ...(consentGranted === true ? { traceContentConsent: true } : {}),
   };
@@ -103,7 +103,7 @@ function normalizeEvaluations(list) {
     .map((e) => ({
       name: e.name,
       rationale: typeof e.rationale === 'string' ? e.rationale : '',
-      // ADR-026: target-language one-line description; null when the server
+      // Target-language one-line description; null when the server
       // omitted it — the caller falls back to the verbatim phrase.
       description: typeof e.description === 'string' && e.description ? e.description : null,
       // v4 (agent classification): closest catalog agent + how it was matched.

package/src/agent-org-chart.js

@@ -4,7 +4,7 @@ const fs = require('fs');
 const path = require('path');
 const { getHomeDir } = require('./env-paths');
 
-// Deterministic (no-LLM) parser of the talent's AI agent org chart (talents-ai-score, ADR-009).
+// Deterministic (no-LLM) parser of the talent's AI agent org chart.
 
 // Safety caps mirror scanner.js's FOOTPRINT_MAX_* (avoid pathological scans,
 // never a product requirement).
@@ -145,12 +145,12 @@ function buildAgentFromFrontmatter(fm, filePath) {
     // the card in place of the LLM `model`.
     aiProduct: deriveAiProduct(filePath),
     model: typeof fm.model === 'string' && fm.model ? fm.model : null,
-    // Hierarchy (ADR-009): first honour an explicit `parent` frontmatter key when a project declares one.
+    // Hierarchy: first honour an explicit `parent` frontmatter key when a project declares one.
     parent: typeof fm.parent === 'string' && fm.parent ? fm.parent : null,
   };
 }
 
-// `parseAgentFile` USED TO BE HERE (removed by issue 093's sweep): read one `.md` and build an agent from its frontmatter.
+// `parseAgentFile` USED TO BE HERE (removed): read one `.md` and build an agent from its frontmatter.
 
 // Markdown body (everything after the closing ` ` of the frontmatter).
 function bodyAfterFrontmatter(content) {
@@ -239,7 +239,7 @@ function parseAgentOrgChartFromDirs(dirs) {
   return agents;
 }
 
-// Deterministic (no-LLM) agent org chart, scoped to `.claude/agents/` in BOTH the project root and the home directory (ADR-014, project ∪ home).
+// Deterministic (no-LLM) agent org chart, scoped to `.claude/agents/` in BOTH the project root and the home directory (project ∪ home).
 function parseAgentOrgChart(root) {
   return parseAgentOrgChartFromDirs(agentDirs(root));
 }
@@ -249,7 +249,7 @@ function parseAgentOrgChartForRoots(roots) {
   return parseAgentOrgChartFromDirs(agentDirsForRoots(Array.isArray(roots) ? roots : [roots]));
 }
 
-// talents-ai-score, ADR-010: returns `[{ name, description }]` — the ONLY function in this module that ever returns description/prompt content.
+// Returns `[{ name, description }]` — the ONLY function in this module that ever returns description/prompt content.
 function parseAgentDescriptionsFromDirs(dirs) {
   const seen = new Set();
   const result = [];

package/src/agent-synthesis.js

@@ -3,7 +3,7 @@
 const { requestBackend } = require('./backend-request');
 const { reporterFor, REASON } = require('./model-call-record');
 
-// Agent synthesis client (talents-ai-score, ADR-010 / ADR-011).
+// Agent synthesis client.
 
 const DEFAULT_TIMEOUT_MS = 8000;
 
@@ -28,7 +28,7 @@ const PEM_BLOCK_RE = /-----BEGIN[ A-Z]*PRIVATE KEY-----[\s\S]*?-----END[ A-Z]*PR
 const CONN_STRING_RE = /\b([a-zA-Z][a-zA-Z0-9+.-]{1,15}:\/\/)[^\s'"/:@]+:[^\s'"@]+@/g; // scheme://user:pass@ -> scheme://[REDACTED]@
 const GENERIC_KV_RE = /\b(?:password|secret|token|api[_-]?key|bearer)\s*[:=]\s*\S+/gi;
 
-// Heuristic, best-effort redaction — an "invisible safety net" (ADR-011), not a substitute for the talent's own judgment about what they write in agent descriptions.
+// Heuristic, best-effort redaction — an "invisible safety net", not a substitute for the talent's own judgment about what they write in agent descriptions.
 function scrubSecrets(text) {
   if (typeof text !== 'string' || !text) return '';
   let out = text;
@@ -77,7 +77,7 @@ function isValidSynthesisResponse(parsed) {
 
 // Requests the agent-synthesis endpoint.
 async function requestAgentSynthesis(requestBody, { endpoint, timeoutMs = DEFAULT_TIMEOUT_MS, onOutcome = null } = {}) {
-  // Issue 109: the four `return null`s below are four DIFFERENT situations that used to be one.
+  // The four `return null`s below are four DIFFERENT situations that used to be one.
   const outcome = reporterFor(onOutcome, { timeoutMs });
   if (!endpoint) {
     outcome.skip(REASON.NO_ENDPOINT);

package/src/agent-usage.js

@@ -4,7 +4,7 @@ const fs = require('fs');
 const path = require('path');
 const { getHomeDir } = require('./env-paths');
 
-// Local Claude Code agent-usage signal (ADR-016, agent evaluation feature).
+// Local Claude Code agent-usage signal.
 
 const MAX_FILES = 500; // cap total session files scanned (bounded work)
 const MAX_BYTES_PER_FILE = 8 * 1024 * 1024; // read at most an 8MB head per file