shakers-cli 0.18.0 → 0.19.0

package/bin/add-agent.js

@@ -11,19 +11,21 @@ const VALID_LANGS = new Set(['es', 'en']);
 
 const COPY = {
   es: {
-    help: 'add-agent — añade a tu perfil de Talento un agente de tu inventario descubierto. Uso: add-agent [--lang es|en] [--accept-disclaimer]',
+    help: 'add-agent — añade a tu perfil de Talento un agente de tu inventario descubierto, o todos los nuevos con --all. Uso: add-agent [--all [--yes]] [--lang es|en] [--accept-disclaimer]',
     gate: '"add-agent" requiere una sesión activa.\n  Falta: iniciar sesión. Ejecuta primero: shakers login',
     missingAccept: 'Modo no interactivo: falta --accept-disclaimer.\n  add-agent es un flujo interactivo (elegir agente, editar campos) y su borrado por IA envía datos.\n  Reejecuta con --accept-disclaimer, aportando las respuestas por stdin.',
+    missingYes: 'Modo no interactivo: falta --yes.\n  add-agent --all añade a tu perfil todos los agentes detectados que aún no tienes.\n  Reejecuta con --all --yes para confirmarlo sin terminal.',
   },
   en: {
-    help: 'add-agent — add an agent from your discovered inventory to your Talent profile. Usage: add-agent [--lang es|en] [--accept-disclaimer]',
+    help: 'add-agent — add an agent from your discovered inventory to your Talent profile, or every new one with --all. Usage: add-agent [--all [--yes]] [--lang es|en] [--accept-disclaimer]',
     gate: '"add-agent" requires an active session.\n  Missing: sign-in. Run `shakers login` first.',
     missingAccept: 'Non-interactive mode: --accept-disclaimer is missing.\n  add-agent is an interactive flow (pick an agent, edit fields) and its AI draft sends data.\n  Re-run with --accept-disclaimer, feeding the answers over stdin.',
+    missingYes: 'Non-interactive mode: --yes is missing.\n  add-agent --all adds every detected agent you do not have yet to your profile.\n  Re-run with --all --yes to confirm it without a terminal.',
   },
 };
 
 function parseArgs(argv) {
-  const o = { root: null, lang: null, help: false, acceptDisclaimer: false };
+  const o = { root: null, lang: null, help: false, acceptDisclaimer: false, all: false, yes: false };
   for (let i = 0; i < argv.length; i++) {
     const a = argv[i];
     if (a === '--root') o.root = argv[++i];
@@ -31,6 +33,8 @@ function parseArgs(argv) {
     else if (a === '--lang') o.lang = VALID_LANGS.has(argv[++i]) ? argv[i] : null;
     else if (a.startsWith('--lang=')) { const v = a.slice(7); o.lang = VALID_LANGS.has(v) ? v : null; }
     else if (a === '--accept-disclaimer') o.acceptDisclaimer = true;
+    else if (a === '--all') o.all = true;
+    else if (a === '--yes' || a === '-y') o.yes = true;
     else if (a === '--help' || a === '-h') o.help = true;
   }
   return o;
@@ -59,21 +63,23 @@ async function run(
 
   const stdinIsTTY = ttyOverride !== undefined ? ttyOverride : !!process.stdin.isTTY;
 
-  if (!stdinIsTTY && !o.acceptDisclaimer) {
-    process.stderr.write(`\n  ${c.missingAccept}\n\n`);
+  if (!stdinIsTTY && (o.all ? !o.yes : !o.acceptDisclaimer)) {
+    process.stderr.write(`\n  ${o.all ? c.missingYes : c.missingAccept}\n\n`);
     process.exitCode = 1;
     return;
   }
 
   const ask = injectedAsk || createStdinAsk();
   try {
-    await runAddAgents({
+    return await runAddAgents({
       ask,
       catalog,
       root: o.root || process.cwd(),
       session,
       stdinIsTTY,
       preAccepted: o.acceptDisclaimer,
+      all: o.all,
+      yes: o.yes,
       deps: { runLogin },
     });
   } finally {

package/bin/ai-usage.js

@@ -17,6 +17,7 @@ const {
   resolveAiConsent,
   renderAndFinalize,
 } = require('../src/usage-run-steps');
+const { run: runLogin } = require('./login');
 
 // Shared by the dispatcher and register flow: an injected `ask` is caller-owned, `bypassThrottle` is register-only.
 async function run(argv = process.argv.slice(2), { ask: injectedAsk = null, bypassThrottle = false, inRegistration = false } = {}) {
@@ -59,7 +60,7 @@ async function run(argv = process.argv.slice(2), { ask: injectedAsk = null, bypa
       },
     });
 
-    await renderAndFinalize({ report, maturity, lang, opts, root, gate, catalog, bypassThrottle, repos, injectedAsk: ask });
+    await renderAndFinalize({ report, maturity, lang, opts, root, gate, catalog, bypassThrottle, repos, injectedAsk: ask, offerAgents: inRegistration ? null : { runLogin } });
   } finally {
     if (!injectedAsk) ask.close();
   }

package/bin/apply.js

@@ -0,0 +1,66 @@
+#!/usr/bin/env node
+'use strict';
+
+const { detectReportLang, getCatalog } = require('../src/i18n');
+const { loadAuthSession, sessionStatus } = require('../src/auth-session-store');
+const { createStdinAsk } = require('../src/stdin-ask');
+const { makeIo } = require('./register');
+const { runApply, makeApplyDeps } = require('../src/apply-flow');
+
+function parseApplyArgs(argv = []) {
+  const o = { lang: null, help: false, id: null };
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === '--help' || a === '-h') o.help = true;
+    else if (a === '--lang') { const v = argv[++i]; o.lang = v === 'es' || v === 'en' ? v : null; }
+    else if (a.startsWith('--lang=')) { const v = a.slice(7); o.lang = v === 'es' || v === 'en' ? v : null; }
+    else if (a === '--id') o.id = argv[++i] != null ? argv[i] : null;
+    else if (a.startsWith('--id=')) o.id = a.slice('--id='.length);
+    else if (!a.startsWith('-') && o.id == null) o.id = a;
+  }
+  return o;
+}
+
+async function run(
+  argv = process.argv.slice(2),
+  { ask: injectedAsk = null, stdinIsTTY: ttyOverride = undefined, deps = null, session: injectedSession = null, out = null, input, output } = {},
+) {
+  const opts = parseApplyArgs(argv);
+  const lang = opts.lang || detectReportLang();
+  const catalog = getCatalog(lang);
+  const fp = catalog.apply;
+  const write = out || ((s) => process.stdout.write(s));
+
+  if (opts.help) {
+    write(fp.help + '\n');
+    return;
+  }
+
+  const session = injectedSession || loadAuthSession();
+  if (sessionStatus(session) !== 'active') {
+    process.stderr.write(`\n  ${fp.loginRequired}\n\n`);
+    process.exitCode = 1;
+    return;
+  }
+
+  const stdinIsTTY = ttyOverride !== undefined ? ttyOverride : !!process.stdin.isTTY;
+  const ask = injectedAsk || createStdinAsk();
+  try {
+    const io = makeIo({ ask, lang, out: write, stdinIsTTY });
+    const result = await runApply({
+      io, ask, session, catalog,
+      opts: { id: opts.id, stdinIsTTY, input, output },
+      deps: deps || makeApplyDeps(),
+    });
+    if (result && result.ok === false) process.exitCode = 1;
+    return result;
+  } finally {
+    if (!injectedAsk) ask.close();
+  }
+}
+
+module.exports = { run, parseApplyArgs };
+
+if (require.main === module) {
+  run();
+}

package/bin/mcp.js

@@ -8,6 +8,7 @@ const { makeCertifyDimensionTools } = require('../src/mcp-certify-dimension-tool
 const { makeFindProjectsTools } = require('../src/mcp-find-projects-tools');
 const { makeShowProjectTools } = require('../src/mcp-show-project-tools');
 const { makeSavedPositionsTools } = require('../src/mcp-saved-positions-tools');
+const { makeApplyTools } = require('../src/mcp-apply-tools');
 const { makeInvitationsTools } = require('../src/mcp-invitations-tools');
 const { makeApplicationsTools } = require('../src/mcp-applications-tools');
 const { makeAvailabilityTools } = require('../src/mcp-availability-tools');
@@ -52,12 +53,14 @@ const HELP = `\n  shakers mcp — local MCP server (stdio)\n\n`
   + `  MCP client, not run by hand.\n`
   + `  Tools: signup (the whole sign-up, step by step), ai_usage, ai_usage_upload,\n`
   + `         ai_usage_result, logout, social_signin_start, social_signin_poll,\n`
-  + `         list_addable, add_skill, add_agent, add_project, open_web,\n`
+  + `         list_addable, add_skill, add_agent, add_detected_agents,\n`
+  + `         add_project, open_web,\n`
   + `         onboarding_interview_start, onboarding_interview_turn,\n`
   + `         onboarding_interview_complete, repeat_onboarding_interview,\n`
   + `         onboarding_finish, list_available_roles, add_role, list_my_roles,\n`
   + `         set_main_role, report, share, list_certifiable_dimensions,\n`
   + `         find_projects, show_project, save_project, unsave_project,\n`
+  + `         prepare_application, apply_to_project,\n`
   + `         list_invitations, list_applications, get_availability,\n`
   + `         list_certifications, get_profile, get_rate, get_languages,\n`
   + `         list_socials, list_experiences, list_portfolios, alma_chat, alma_decision.\n\n`;
@@ -71,7 +74,7 @@ const LOCAL_ONLY_TOOL_NAMES = new Set(['ai_usage', 'ai_usage_upload', 'ai_usage_
 function buildServer({ localOnly = false, funnel = createFunnel({ surface: 'mcp' }), makeInterviewClient = null } = {}) {
   const lang = detectFlowLang();
   const aiUsage = makeAiUsageTools();
-  const allTools = [aiUsage.usage, aiUsage.upload, makeAiUsageResultTool(), ...makeOnboardingTools(), ...makeRoleTools({ lang, funnel }), ...makeDeviceLoginTools({ lang, funnel }), ...makeSignupTools({ lang, funnel }), ...makeRegisterTools({ lang, funnel, flowDeps: { makeInterviewClient } }), ...makeReportTools(), ...makeCertifyDimensionTools(), ...makeFindProjectsTools(), ...makeShowProjectTools(), ...makeSavedPositionsTools(), ...makeInvitationsTools(), ...makeApplicationsTools(), ...makeAvailabilityTools(), ...makeCertificationsTools(), ...makeProfileTools(), ...makeRateTools(), ...makeLangTools(), ...makeSocialsTools(), ...makePortfolioTools(), ...makeAlmaTools()];
+  const allTools = [aiUsage.usage, aiUsage.upload, makeAiUsageResultTool(), ...makeOnboardingTools(), ...makeRoleTools({ lang, funnel }), ...makeDeviceLoginTools({ lang, funnel }), ...makeSignupTools({ lang, funnel }), ...makeRegisterTools({ lang, funnel, flowDeps: { makeInterviewClient } }), ...makeReportTools(), ...makeCertifyDimensionTools(), ...makeFindProjectsTools(), ...makeShowProjectTools(), ...makeSavedPositionsTools(), ...makeApplyTools(), ...makeInvitationsTools(), ...makeApplicationsTools(), ...makeAvailabilityTools(), ...makeCertificationsTools(), ...makeProfileTools(), ...makeRateTools(), ...makeLangTools(), ...makeSocialsTools(), ...makePortfolioTools(), ...makeAlmaTools()];
   // The sign-up runs through one tool (`signup`), so Claude Desktop asks the talent once instead of once per step.
   const tools = localOnly
     ? allTools.filter((t) => LOCAL_ONLY_TOOL_NAMES.has(t.name))

package/bin/shakers-cli.js

@@ -21,6 +21,7 @@ const { run: runChangeRole } = require('./change-role');
 const { run: runFindProjects } = require('./find-projects');
 const { run: runShowProject } = require('./show-project');
 const { run: runSave, runUnsave } = require('./save');
+const { run: runApply } = require('./apply');
 const { run: runInvitations } = require('./invitations');
 const { run: runApplications } = require('./applications');
 const { run: runAvailability } = require('./availability');
@@ -74,6 +75,7 @@ const HANDLERS = {
   'show-project': runShowProject,
   'save-project': runSave,
   'unsave-project': runUnsave,
+  apply: runApply,
   invitations: runInvitations,
   applications: runApplications,
   availability: runAvailability,
@@ -111,7 +113,7 @@ const FAMILIES = {
     certifications: 'certifications',
   },
   projects: {
-    find: 'find-projects', show: 'show-project', save: 'save-project', unsave: 'unsave-project',
+    find: 'find-projects', show: 'show-project', save: 'save-project', unsave: 'unsave-project', apply: 'apply',
     invitations: 'invitations', applications: 'applications',
   },
   usage: { run: 'ai-usage', report: 'report', share: 'share' },
@@ -193,6 +195,7 @@ function usageText(lang, { hideOnboarding = false } = {}) {
       + `    find-projects Lista los proyectos/posiciones disponibles para ti\n`
       + `    show-project Detalle de un proyecto/posición por id\n`
       + `    save-project/unsave-project  Guarda o quita un proyecto de tus guardados\n`
+      + `    apply        Aplica a un proyecto/posición con tu mensaje y respuestas\n`
       + `    invitations  Tus invitaciones a proyectos\n`
       + `    applications Proyectos a los que has aplicado + estado\n`
       + `    availability Ver o fijar tu disponibilidad\n`
@@ -214,7 +217,7 @@ function usageText(lang, { hideOnboarding = false } = {}) {
       + `  Familias (agrupan los comandos de arriba; los nombres planos siguen valiendo como alias):\n`
       + `    add <skill|agent|project|role>     ·  role <add|change>\n`
       + `    profile <show|rate|languages|socials|experiences|portfolios|availability|certifications>\n`
-      + `    projects <find|show|save|unsave|invitations|applications>\n`
+      + `    projects <find|show|save|unsave|apply|invitations|applications>\n`
       + `    usage <run|report|share>  ·  certs <list|certify>  ·  account <login|logout|register|config|update>\n`
       + `    Ejecuta \`shakers <familia>\` (sin subcomando) para ver sus subcomandos.\n\n`
       + `  Ejecuta shakers <comando> --help para las opciones de cada comando.\n\n`;
@@ -238,6 +241,7 @@ function usageText(lang, { hideOnboarding = false } = {}) {
     + `    find-projects List the Projects/Positions available to you\n`
     + `    show-project Detail of a project/position by id\n`
     + `    save-project/unsave-project  Save or remove a project from your saved list\n`
+    + `    apply        Apply to a project/position with your message and answers\n`
     + `    invitations  Your project invitations\n`
     + `    applications Projects you applied to + status\n`
     + `    availability View or set your availability\n`
@@ -259,7 +263,7 @@ function usageText(lang, { hideOnboarding = false } = {}) {
     + `  Families (group the commands above; the flat names still work as aliases):\n`
     + `    add <skill|agent|project|role>     ·  role <add|change>\n`
     + `    profile <show|rate|languages|socials|experiences|portfolios|availability|certifications>\n`
-    + `    projects <find|show|save|unsave|invitations|applications>\n`
+    + `    projects <find|show|save|unsave|apply|invitations|applications>\n`
     + `    usage <run|report|share>  ·  certs <list|certify>  ·  account <login|logout|register|config|update>\n`
     + `    Run \`shakers <family>\` (no subcommand) to list its subcommands.\n\n`
     + `  Run \`shakers <command> --help\` for a command's options.\n\n`;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "shakers-cli",
-  "version": "0.18.0",
+  "version": "0.19.0",
   "description": "Shakers AI usage & skills evaluator: a local-first CLI (`shakers` binary) plus a local MCP server. Commands: ai-usage (scan + classify your AI-tool setup, T0-T7), certify (certify Skills from your code), share (branded LinkedIn card).",
   "type": "commonjs",
   "bin": {

package/src/apply-client.js

@@ -0,0 +1,164 @@
+'use strict';
+
+const { postJsonWithTimeout } = require('./backend-request');
+const { reasonForError } = require('./onboarding-client');
+
+const DEFAULT_TIMEOUT_MS = 20000;
+const APPLICATION_SOURCE = 'NO_SOURCE';
+const SELECTED_MESSAGE = 'manual';
+
+const CANDIDATURE_CODE_TO_REASON = {
+  'candidatures.already_exists': 'already-applied',
+  'candidatures.position_not_available_for_application': 'position-unavailable',
+  'candidatures.position_not_found': 'not-found',
+  'candidatures.project_not_found': 'not-found',
+  'candidatures.talent_not_found': 'talent-not-found',
+  'candidatures.creation_failed': 'creation-failed',
+};
+
+function parseJson(raw) {
+  try {
+    return raw ? JSON.parse(raw) : null;
+  } catch {
+    return null;
+  }
+}
+
+function bearerHeaders(accessToken) {
+  const headers = {};
+  if (typeof accessToken === 'string' && accessToken) headers.Authorization = `Bearer ${accessToken}`;
+  return headers;
+}
+
+const text = (v) => (typeof v === 'string' && v.trim() ? v.trim() : null);
+
+function normalizeQuestion(q) {
+  if (!q || !text(q.text)) return null;
+  if (q.type === 'MULTIPLE_CHOICE') {
+    const options = Array.isArray(q.options) ? q.options.map(text).filter(Boolean) : [];
+    return options.length ? { type: 'MULTIPLE_CHOICE', text: q.text.trim(), options } : null;
+  }
+  return { type: 'OPEN', text: q.text.trim() };
+}
+
+async function requestPositionApplication({ hubAccessToken } = {}, { endpoint, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  if (!endpoint) return { ok: false, reason: 'no-endpoint' };
+  if (!hubAccessToken) return { ok: false, reason: 'no-hub-token' };
+  let res;
+  try {
+    res = await postJsonWithTimeout(endpoint, null, timeoutMs, 'GET', null, bearerHeaders(hubAccessToken));
+  } catch (e) {
+    return { ok: false, reason: (e && e.kind) || 'network-error' };
+  }
+  if (res.status === 404) return { ok: false, reason: 'not-found' };
+  if (res.status < 200 || res.status >= 300) return { ok: false, reason: reasonForError(res.status, res.raw) };
+  const json = parseJson(res.raw);
+  const data = json && json.status === 'OK' && json.data && typeof json.data === 'object' ? json.data : null;
+  if (!data) return { ok: false, reason: 'bad-response' };
+  if (data.redirectUrl || !data.position) return { ok: true, open: false };
+  const p = data.position;
+  const questions = p.questions && typeof p.questions === 'object' ? p.questions : {};
+  return {
+    ok: true,
+    open: true,
+    title: text(p.title),
+    doubleCheck: text(p.doubleCheck),
+    mainMotivationQuestion: text(questions.mainMotivationQuestion),
+    questions: (Array.isArray(questions.extraQuestions) ? questions.extraQuestions : []).map(normalizeQuestion).filter(Boolean),
+  };
+}
+
+function escapeHtml(s) {
+  return s.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+}
+
+function toHubMessage(message) {
+  return escapeHtml(message.trim()).replace(/\r\n?/g, '\n').replace(/\n/g, '<br>');
+}
+
+function buildCandidatureBody({ positionId, message, answers = [], mainMotivationQuestion }) {
+  const chat = text(message) ? toHubMessage(message) : null;
+  const extra = answers.filter((a) => a && text(a.question) && (Array.isArray(a.answer) ? a.answer.length > 0 : text(a.answer)));
+  const questions = {};
+  if (chat) questions.main_motivation = { question: mainMotivationQuestion, answer: chat };
+  if (extra.length) questions.extra_questions = extra.map((a) => ({ question: a.question, answer: Array.isArray(a.answer) ? a.answer : a.answer.trim() }));
+  const form = { selectedMessage: SELECTED_MESSAGE };
+  if (Object.keys(questions).length) form.questions = questions;
+  return {
+    positionId,
+    applicationSource: APPLICATION_SOURCE,
+    ...(chat ? { sendPresentationChatMessage: chat } : {}),
+    form,
+  };
+}
+
+async function requestCreateCandidature({ hubAccessToken } = {}, { endpoint, body, timeoutMs = DEFAULT_TIMEOUT_MS } = {}) {
+  if (!endpoint) return { ok: false, reason: 'no-endpoint' };
+  if (!hubAccessToken) return { ok: false, reason: 'no-hub-token' };
+  let res;
+  try {
+    res = await postJsonWithTimeout(endpoint, body, timeoutMs, 'POST', null, bearerHeaders(hubAccessToken));
+  } catch (e) {
+    return { ok: false, reason: (e && e.kind) || 'network-error' };
+  }
+  const json = parseJson(res.raw);
+  if (res.status < 200 || res.status >= 300) {
+    const code = json && typeof json.code === 'string' ? json.code : null;
+    const reason = (code && CANDIDATURE_CODE_TO_REASON[code]) || reasonForError(res.status, res.raw);
+    const meta = json && json.meta && typeof json.meta === 'object' ? json.meta : {};
+    return reason === 'already-applied'
+      ? { ok: false, reason, applicationStatus: text(meta.applicationStatus) }
+      : { ok: false, reason };
+  }
+  const data = json && json.status === 'OK' && json.data && typeof json.data === 'object' ? json.data : null;
+  if (!data) return { ok: false, reason: 'bad-response' };
+  return { ok: true, candidatureId: data.candidatureId || null, status: text(data.status), chatId: data.chatId || null };
+}
+
+async function loadApplication(deps = {}, { hubAccessToken, positionId, timeoutMs } = {}) {
+  const {
+    getPositionApplicationEndpoint = require('./config').getPositionApplicationEndpoint,
+    fetchPositionDetail = (opts) => require('./show-project-client').fetchPositionDetail({}, opts),
+    requestPositionApplication: request = requestPositionApplication,
+  } = deps;
+  const endpoint = getPositionApplicationEndpoint(positionId);
+  if (!endpoint) return { ok: false, reason: positionId ? 'no-endpoint' : 'no-id' };
+  const [application, detail] = await Promise.all([
+    request({ hubAccessToken }, { endpoint, timeoutMs }),
+    fetchPositionDetail({ hubAccessToken, positionId }).catch(() => null),
+  ]);
+  if (!application.ok || !application.open) return application;
+  const company = detail && detail.ok && detail.position && detail.position.company ? text(detail.position.company.name) : null;
+  return { ...application, company };
+}
+
+async function submitApplication(deps = {}, { hubAccessToken, positionId, message, answers, mainMotivationQuestion, timeoutMs } = {}) {
+  const {
+    getCandidaturesEndpoint = require('./config').getCandidaturesEndpoint,
+    requestCreateCandidature: request = requestCreateCandidature,
+  } = deps;
+  const body = buildCandidatureBody({ positionId, message, answers, mainMotivationQuestion });
+  return request({ hubAccessToken }, { endpoint: getCandidaturesEndpoint(), body, timeoutMs });
+}
+
+function applicationSummary(t, { title, company, doubleCheck }, { message, answers = [] }) {
+  return [
+    t.summaryTitle,
+    t.titleLine(title || t.untitled),
+    company ? t.companyLine(company) : null,
+    t.messageLine(text(message) || t.empty),
+    ...answers.map((a) => t.answerLine(a.question, Array.isArray(a.answer) ? a.answer.join(', ') : a.answer)),
+    t.sendNotice(title || t.untitled),
+    doubleCheck && doubleCheck !== 'NO' ? t.reviewNotice : null,
+  ].filter(Boolean);
+}
+
+module.exports = {
+  APPLICATION_SOURCE,
+  requestPositionApplication,
+  requestCreateCandidature,
+  buildCandidatureBody,
+  loadApplication,
+  submitApplication,
+  applicationSummary,
+};

package/src/apply-flow.js

@@ -0,0 +1,105 @@
+'use strict';
+
+const { styleLabelPrefix } = require('./ansi');
+const { sanitizeRenderText: clean } = require('./sanitize-network-text');
+const { applicationSummary } = require('./apply-client');
+
+function makeApplyDeps(overrides = {}) {
+  const client = require('./apply-client');
+  return {
+    loadApplication: (opts) => client.loadApplication({}, opts),
+    submitApplication: (opts) => client.submitApplication({}, opts),
+    resolveRef: (raw) => require('./find-projects-cache').resolvePositionRef(raw),
+    promptSelect: (opts) => require('./prompt-select').promptSelect(opts),
+    ...overrides,
+  };
+}
+
+async function askAnswers({ io, ask, fp, questions, opts, deps }) {
+  const answers = [];
+  for (const q of questions) {
+    if (q.type === 'MULTIPLE_CHOICE') {
+      const picked = await deps.promptSelect({
+        ask,
+        stdinIsTTY: true,
+        out: (s) => io.notify(s),
+        header: clean(q.text),
+        hint: fp.choiceHint,
+        items: [...q.options.map((value) => ({ label: clean(value), value })), { label: fp.skipChoice, value: null }],
+        labelFor: (x) => x.label,
+        input: opts.input,
+        output: opts.output,
+      });
+      if (picked && picked.value) answers.push({ question: q.text, answer: [picked.value] });
+    } else {
+      const answer = String(await io.ask(fp.askOpen(clean(q.text)))).trim();
+      if (answer) answers.push({ question: q.text, answer });
+    }
+  }
+  return answers;
+}
+
+function paintedSummary(fp, app, message, answers) {
+  return applicationSummary(fp, {
+    title: app.title && clean(app.title),
+    company: app.company && clean(app.company),
+    doubleCheck: app.doubleCheck,
+  }, {
+    message,
+    answers: answers.map((a) => ({ question: clean(a.question), answer: Array.isArray(a.answer) ? a.answer.map(clean) : a.answer })),
+  });
+}
+
+async function runApply({ io, ask, session, catalog, opts = {}, deps = makeApplyDeps() }) {
+  const fp = catalog.apply;
+  if (!opts.stdinIsTTY) {
+    io.error(fp.needsInteractive);
+    return { ok: false, reason: 'non-interactive' };
+  }
+  const resolved = deps.resolveRef(opts.id);
+  if (!resolved.ok) {
+    io.error(resolved.reason === 'no-cache' ? fp.refNoCache
+      : resolved.reason === 'out-of-range' ? fp.refOutOfRange(resolved.count)
+        : fp.idRequired);
+    return { ok: false, reason: resolved.reason };
+  }
+  const positionId = resolved.id;
+  const hubAccessToken = session ? session.hubAccessToken : null;
+
+  const app = await io.withProgress(fp.loading, () => deps.loadApplication({ hubAccessToken, positionId }));
+  if (!app.ok) {
+    io.error(app.reason === 'not-found' ? fp.notFound : fp.fetchFailed(app.reason));
+    return { ok: false, reason: app.reason };
+  }
+  if (!app.open) {
+    io.notify(fp.notOpen);
+    return { ok: false, reason: 'not-open' };
+  }
+
+  io.section(app.title ? clean(app.title) : fp.untitled);
+  if (app.company) io.notify(styleLabelPrefix(fp.companyLine(clean(app.company))));
+  const mainMotivationQuestion = app.mainMotivationQuestion || fp.mainMotivationFallback;
+  const message = String(await io.ask(fp.askMessage(clean(mainMotivationQuestion)))).trim();
+  const answers = await askAnswers({ io, ask, fp, questions: app.questions, opts, deps });
+
+  const [heading, ...lines] = paintedSummary(fp, app, message, answers);
+  io.section(heading);
+  for (const line of lines) io.notify(line);
+  if (!(await io.confirm(fp.confirm))) {
+    io.notify(fp.cancelled);
+    return { ok: true, cancelled: true };
+  }
+
+  const res = await io.withProgress(fp.sending, () => deps.submitApplication({ hubAccessToken, positionId, message, answers, mainMotivationQuestion }));
+  if (!res.ok) {
+    if (res.reason === 'already-applied') io.notify(fp.alreadyApplied(res.applicationStatus));
+    else if (res.reason === 'position-unavailable') io.error(fp.notOpen);
+    else if (res.reason === 'not-found') io.error(fp.notFound);
+    else io.error(fp.failed(res.reason));
+    return { ok: false, reason: res.reason };
+  }
+  io.success(res.status === 'PENDING' ? fp.sentPending : fp.sent);
+  return { ok: true, status: res.status };
+}
+
+module.exports = { makeApplyDeps, runApply };

package/src/command-audit.js

@@ -37,6 +37,16 @@ function redactArgs(argv) {
   return scrubbed || null;
 }
 
+// `apply` takes only the position ref: anything typed after it could be the talent's message, so it never reaches the log.
+function withoutFreeText(argv) {
+  if (!Array.isArray(argv)) return argv;
+  const words = argv.filter((a) => typeof a === 'string' && !a.startsWith('-')).map((w) => w.toLowerCase());
+  const at = words[0] === 'apply' ? 0 : words[0] === 'projects' && words[1] === 'apply' ? 1 : -1;
+  if (at === -1) return argv;
+  const kept = argv.filter((a) => typeof a === 'string' && !a.startsWith('-'));
+  return kept.slice(0, at + 2);
+}
+
 // Anonymous runs carry only a best-effort machine hint; authenticated runs identify via the Bearer instead.
 function machineHint() {
   let osUser = null;
@@ -77,7 +87,7 @@ function buildAudit(command, argv, env, id = null) {
   const body = {
     ...(id ? { id } : {}),
     command: String(command || 'unknown').slice(0, 100),
-    args: redactArgs(argv),
+    args: redactArgs(withoutFreeText(argv)),
     cliVersion: cliVersion(),
     clientTimestamp: new Date().toISOString(),
   };
@@ -133,7 +143,7 @@ function startCommandAudit({ command, argv = [], env = process.env } = {}) {
       detached: true,
       stdio: 'ignore',
       windowsHide: true,
-      env: { ...env, [PAYLOAD_VAR]: JSON.stringify({ id, command, args: redactArgs(argv) }) },
+      env: { ...env, [PAYLOAD_VAR]: JSON.stringify({ id, command, args: redactArgs(withoutFreeText(argv)) }) },
     });
     child.on('error', () => {});
     child.unref();
@@ -148,4 +158,4 @@ function currentRunId() {
   return runId;
 }
 
-module.exports = { emitCommandAudit, startCommandAudit, logCommandRun, currentRunId, redactArgs, buildAudit, PAYLOAD_VAR };
+module.exports = { emitCommandAudit, startCommandAudit, logCommandRun, currentRunId, redactArgs, withoutFreeText, buildAudit, PAYLOAD_VAR };

package/src/config.js

@@ -413,6 +413,19 @@ function getUnsavePositionEndpoint(positionId, env = process.env) {
   return deriveFromHub(env, `works/talent/saved-positions/${encodeURIComponent(positionId)}`);
 }
 
+function getPositionApplicationEndpoint(positionId, env = process.env) {
+  const explicit = readEnv(env, 'POSITION_APPLICATION_ENDPOINT');
+  if (explicit && explicit.trim()) return explicit.trim();
+  if (positionId == null || typeof positionId === 'object') return null;
+  return deriveFromHub(env, `works/talent/positions/${encodeURIComponent(positionId)}/application`);
+}
+
+function getCandidaturesEndpoint(env = process.env) {
+  const explicit = readEnv(env, 'CANDIDATURES_ENDPOINT');
+  if (explicit && explicit.trim()) return explicit.trim();
+  return deriveFromHub(env, 'works/talent/candidatures');
+}
+
 function getReceivedInvitationsEndpoint(env = process.env) {
   const explicit = readEnv(env, 'RECEIVED_INVITATIONS_ENDPOINT');
   if (explicit && explicit.trim()) return explicit.trim();
@@ -837,6 +850,8 @@ module.exports = {
   // Marketplace (show-project / save-project / unsave-project / invitations).
   getPositionDetailEndpoint,
   getSavePositionEndpoint,
+  getPositionApplicationEndpoint,
+  getCandidaturesEndpoint,
   getUnsavePositionEndpoint,
   getReceivedInvitationsEndpoint,
   getMyCandidaturesEndpoint,

package/src/detected-agents.js

@@ -0,0 +1,40 @@
+'use strict';
+
+const { normalizeAgentName } = require('./tier-engine');
+const { scrubSecrets } = require('./agent-synthesis');
+const { requestDeclareAgent } = require('./agents-client');
+
+function detectedAgentsFromReport(report) {
+  const synthesis = report && report.agentSynthesis && Array.isArray(report.agentSynthesis.agents) ? report.agentSynthesis.agents : [];
+  const whatItDoesByName = new Map(synthesis.filter((a) => a && a.name).map((a) => [a.name, a.whatItDoes]));
+  const agents = report && Array.isArray(report.agents) ? report.agents : [];
+  return agents
+    .filter((a) => a && typeof a.name === 'string' && a.name)
+    .map((a) => ({ name: a.name, whatItDoes: whatItDoesByName.get(a.name) || null }));
+}
+
+function newDetectedAgents(candidates, profileAgents) {
+  const taken = new Set((Array.isArray(profileAgents) ? profileAgents : []).map((a) => normalizeAgentName(a && a.name)));
+  const fresh = [];
+  for (const agent of Array.isArray(candidates) ? candidates : []) {
+    const key = normalizeAgentName(agent && agent.name);
+    if (!key || taken.has(key)) continue;
+    taken.add(key);
+    fresh.push({ name: agent.name.trim(), whatItDoes: typeof agent.whatItDoes === 'string' && agent.whatItDoes ? agent.whatItDoes : null });
+  }
+  return fresh;
+}
+
+async function declareDetectedAgents(agents, { accessToken, hubAccessToken }, { endpoint, declare = requestDeclareAgent } = {}) {
+  const added = [];
+  const failed = [];
+  for (const agent of agents) {
+    const whatItDoes = agent.whatItDoes ? scrubSecrets(agent.whatItDoes) : undefined;
+    const result = await declare({ name: agent.name, whatItDoes, accessToken, hubAccessToken }, { endpoint });
+    if (result && result.ok) added.push(agent);
+    else failed.push({ agent, reason: (result && result.reason) || 'declare-failed' });
+  }
+  return { added, failed };
+}
+
+module.exports = { detectedAgentsFromReport, newDetectedAgents, declareDetectedAgents };