aiox-core 5.0.7 → 5.0.8

package/packages/installer/tests/unit/artifact-copy-pipeline/artifact-copy-pipeline.test.js

@@ -7,7 +7,9 @@ const os = require('os');
 const {
   copySkillFiles,
   copyExtraCommandFiles,
+  copyClaudeHooksFolder,
   createClaudeSettingsLocal,
+  shouldCopyProHooks,
   HOOK_EVENT_MAP,
   DEFAULT_HOOK_CONFIG,
 } = require('../../../../../packages/installer/src/wizard/ide-config-generator');
@@ -20,6 +22,15 @@ function cleanup(dir) {
   fs.rmSync(dir, { recursive: true, force: true });
 }
 
+function expectedAvailableHooks(...fileNames) {
+  const hooksDir = path.join(__dirname, '../../../../../.claude/hooks');
+  if (!fs.existsSync(hooksDir)) {
+    throw new Error(`Expected Claude hooks source directory at ${hooksDir}`);
+  }
+  const available = new Set(fs.readdirSync(hooksDir));
+  return fileNames.filter(file => available.has(file)).sort();
+}
+
 describe('artifact-copy-pipeline (Story INS-4.3)', () => {
   describe('copySkillFiles', () => {
     test('copies skill directories from source to target via real function', async () => {
@@ -94,7 +105,7 @@ describe('artifact-copy-pipeline (Story INS-4.3)', () => {
         expect(result.count).toBe(1);
         const content = fs.readFileSync(
           path.join(targetRoot, '.claude', 'skills', 'test-skill', 'SKILL.md'),
-          'utf8'
+          'utf8',
         );
         expect(content).toBe('# v2');
       } finally {
@@ -168,6 +179,78 @@ describe('artifact-copy-pipeline (Story INS-4.3)', () => {
     });
   });
 
+  describe('copyClaudeHooksFolder tier selection (Issue #544)', () => {
+    test('free tier copies only free hooks and does not register PreCompact', async () => {
+      const targetRoot = createTempDir();
+
+      try {
+        const copied = await copyClaudeHooksFolder(targetRoot, { tier: 'free' });
+        const fileNames = copied.map(file => path.basename(file)).sort();
+
+        expect(fileNames).toEqual(expectedAvailableHooks(
+          'README.md',
+          'code-intel-pretool.cjs',
+          'synapse-engine.cjs',
+        ));
+
+        const settingsPath = await createClaudeSettingsLocal(targetRoot);
+        expect(settingsPath).toEqual(expect.any(String));
+        const settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
+
+        expect(settings.hooks.UserPromptSubmit).toHaveLength(1);
+        if (fileNames.includes('code-intel-pretool.cjs')) {
+          expect(settings.hooks.PreToolUse).toHaveLength(1);
+        } else {
+          expect(settings.hooks.PreToolUse).toBeUndefined();
+        }
+        expect(settings.hooks.PreCompact).toBeUndefined();
+      } finally {
+        cleanup(targetRoot);
+      }
+    });
+
+    test('pro tier copies free hooks plus PreCompact session digest hook', async () => {
+      const targetRoot = createTempDir();
+
+      try {
+        const copied = await copyClaudeHooksFolder(targetRoot, { tier: 'pro' });
+        const fileNames = copied.map(file => path.basename(file)).sort();
+
+        expect(fileNames).toEqual(expectedAvailableHooks(
+          'README.md',
+          'code-intel-pretool.cjs',
+          'precompact-session-digest.cjs',
+          'synapse-engine.cjs',
+        ));
+
+        const settingsPath = await createClaudeSettingsLocal(targetRoot);
+        expect(settingsPath).toEqual(expect.any(String));
+        const settings = JSON.parse(fs.readFileSync(settingsPath, 'utf8'));
+
+        expect(settings.hooks.UserPromptSubmit).toHaveLength(1);
+        if (fileNames.includes('code-intel-pretool.cjs')) {
+          expect(settings.hooks.PreToolUse).toHaveLength(1);
+        } else {
+          expect(settings.hooks.PreToolUse).toBeUndefined();
+        }
+        expect(settings.hooks.PreCompact).toHaveLength(1);
+      } finally {
+        cleanup(targetRoot);
+      }
+    });
+
+    test('explicit wizard tier controls Pro hook selection', () => {
+      expect(shouldCopyProHooks({ tier: 'pro' })).toBe(true);
+      expect(shouldCopyProHooks({ tier: 'free' })).toBe(false);
+      expect(shouldCopyProHooks({ tier: 'community' })).toBe(false);
+      expect(shouldCopyProHooks({ tier: 'core' })).toBe(false);
+      expect(shouldCopyProHooks({ proTier: 'pro' })).toBe(true);
+      expect(shouldCopyProHooks({ tier: 'free', proTier: 'pro' })).toBe(false);
+      expect(shouldCopyProHooks({ pro: { enabled: true } })).toBe(true);
+      expect(shouldCopyProHooks({ pro: { enabled: false } })).toBe(false);
+    });
+  });
+
   describe('HOOK_EVENT_MAP (Story MIS-3.1)', () => {
     test('maps synapse-engine.cjs to UserPromptSubmit', () => {
       const config = HOOK_EVENT_MAP['synapse-engine.cjs'];

package/packages/installer/tests/unit/claude-md-template-v5/claude-md-template-v5.test.js

@@ -10,7 +10,7 @@ const {
 
 const TEMPLATE_PATH = path.join(
   __dirname, '..', '..', '..', '..', '..', '.aiox-core',
-  'product', 'templates', 'ide-rules', 'claude-rules.md'
+  'product', 'templates', 'ide-rules', 'claude-rules.md',
 );
 
 describe('CLAUDE.md Template v5 (Story INS-4.4)', () => {

package/packages/installer/tests/unit/doctor/doctor-checks.test.js

@@ -35,8 +35,20 @@ const mockContext = {
   options: { fix: false, json: false, dryRun: false, quiet: false },
 };
 
+const dirEntry = (name) => ({
+  name,
+  isDirectory: () => true,
+  isFile: () => false,
+});
+
+const fileEntry = (name) => ({
+  name,
+  isDirectory: () => false,
+  isFile: () => true,
+});
+
 beforeEach(() => {
-  jest.clearAllMocks();
+  jest.resetAllMocks();
 });
 
 describe('node-version check', () => {
@@ -352,11 +364,16 @@ describe('code-intel check', () => {
 });
 
 describe('ide-sync check', () => {
+  const portablePath = (targetPath) => String(targetPath).replace(/\\/g, '/');
+
   it('should PASS when counts match', async () => {
     fs.existsSync.mockReturnValue(true);
     fs.readdirSync.mockImplementation((p) => {
-      if (p.includes('commands')) return ['dev.md', 'qa.md'];
-      return ['dev.md', 'qa.md'];
+      const normalizedPath = portablePath(p);
+      if (normalizedPath.includes('.claude/skills')) return [dirEntry('dev'), dirEntry('qa')];
+      if (normalizedPath.includes('.claude/commands')) return ['dev.md', 'qa.md'];
+      if (normalizedPath.includes('development/agents')) return ['dev.md', 'qa.md'];
+      return [];
     });
 
     const result = await ideSyncCheck.run(mockContext);
@@ -366,13 +383,45 @@ describe('ide-sync check', () => {
   it('should WARN when counts mismatch', async () => {
     fs.existsSync.mockReturnValue(true);
     fs.readdirSync.mockImplementation((p) => {
-      if (p.includes('commands')) return ['dev.md', 'qa.md', 'pm.md'];
-      return ['dev.md', 'qa.md'];
+      const normalizedPath = portablePath(p);
+      if (normalizedPath.includes('.claude/skills')) return [dirEntry('dev'), dirEntry('qa')];
+      if (normalizedPath.includes('commands')) return ['dev.md', 'qa.md', 'pm.md'];
+      if (normalizedPath.includes('development/agents')) return ['dev.md', 'qa.md'];
+      return [];
     });
 
     const result = await ideSyncCheck.run(mockContext);
     expect(result.status).toBe('WARN');
   });
+
+  it('should WARN when counts match but agent identities mismatch', async () => {
+    fs.existsSync.mockReturnValue(true);
+    fs.readdirSync.mockImplementation((p) => {
+      const normalizedPath = portablePath(p);
+      if (normalizedPath.includes('.claude/skills')) return [dirEntry('dev'), dirEntry('pm')];
+      if (normalizedPath.includes('.claude/commands')) return ['dev.md', 'qa.md'];
+      if (normalizedPath.includes('development/agents')) return ['dev.md', 'qa.md'];
+      return [];
+    });
+
+    const result = await ideSyncCheck.run(mockContext);
+    expect(result.status).toBe('WARN');
+    expect(result.message).toContain('missing: qa');
+    expect(result.message).toContain('extra: pm');
+  });
+
+  it('should FAIL when Claude directories cannot be read', async () => {
+    fs.existsSync.mockReturnValue(true);
+    fs.readdirSync.mockImplementation((p) => {
+      const normalizedPath = portablePath(p);
+      if (normalizedPath.includes('development/agents')) return ['dev.md', 'qa.md'];
+      throw new Error('permission denied');
+    });
+
+    const result = await ideSyncCheck.run(mockContext);
+    expect(result.status).toBe('FAIL');
+    expect(result.message).toContain('permission denied');
+  });
 });
 
 // === INS-4.8: New checks ===
@@ -380,12 +429,13 @@ describe('ide-sync check', () => {
 describe('skills-count check', () => {
   it('should PASS when >=7 skills directories with SKILL.md', async () => {
     fs.existsSync.mockReturnValue(true);
-    const dirs = Array.from({ length: 8 }, (_, i) => ({
-      name: `skill-${i}`,
-      isDirectory: () => true,
-      isFile: () => false,
-    }));
-    fs.readdirSync.mockReturnValue(dirs);
+    fs.readdirSync.mockImplementation((p) => {
+      if (p.endsWith(path.join('.claude', 'skills'))) {
+        return Array.from({ length: 8 }, (_, i) => dirEntry(`skill-${i}`));
+      }
+      if (p.includes(`${path.sep}skill-`)) return [fileEntry('SKILL.md')];
+      return [];
+    });
 
     const result = await skillsCountCheck.run(mockContext);
     expect(result.check).toBe('skills-count');
@@ -399,12 +449,13 @@ describe('skills-count check', () => {
       if (p.includes('SKILL.md')) return true;
       return true;
     });
-    const dirs = Array.from({ length: 3 }, (_, i) => ({
-      name: `skill-${i}`,
-      isDirectory: () => true,
-      isFile: () => false,
-    }));
-    fs.readdirSync.mockReturnValue(dirs);
+    fs.readdirSync.mockImplementation((p) => {
+      if (p.endsWith(path.join('.claude', 'skills'))) {
+        return Array.from({ length: 3 }, (_, i) => dirEntry(`skill-${i}`));
+      }
+      if (p.includes(`${path.sep}skill-`)) return [fileEntry('SKILL.md')];
+      return [];
+    });
 
     const result = await skillsCountCheck.run(mockContext);
     expect(result.status).toBe('WARN');
@@ -416,8 +467,10 @@ describe('skills-count check', () => {
       if (p.includes('SKILL.md')) return false;
       return true;
     });
-    const dirs = [{ name: 'empty', isDirectory: () => true, isFile: () => false }];
-    fs.readdirSync.mockReturnValue(dirs);
+    fs.readdirSync.mockImplementation((p) => {
+      if (p.endsWith(path.join('.claude', 'skills'))) return [dirEntry('empty')];
+      return [];
+    });
 
     const result = await skillsCountCheck.run(mockContext);
     expect(result.status).toBe('FAIL');
@@ -429,6 +482,19 @@ describe('skills-count check', () => {
     const result = await skillsCountCheck.run(mockContext);
     expect(result.status).toBe('FAIL');
   });
+
+  it('should FAIL when skills directory cannot be read', async () => {
+    fs.existsSync.mockReturnValue(true);
+    fs.readdirSync.mockImplementation(() => {
+      const error = new Error('permission denied');
+      error.code = 'EACCES';
+      throw error;
+    });
+
+    const result = await skillsCountCheck.run(mockContext);
+    expect(result.status).toBe('FAIL');
+    expect(result.message).toContain('permission denied');
+  });
 });
 
 describe('commands-count check', () => {

package/packages/installer/tests/unit/entity-registry-bootstrap.test.js

@@ -12,17 +12,17 @@ const path = require('path');
 
 const WIZARD_PATH = path.join(__dirname, '..', '..', 'src', 'wizard', 'index.js');
 const POPULATE_SCRIPT = path.join(
-  __dirname, '..', '..', '..', '..', '.aiox-core', 'development', 'scripts', 'populate-entity-registry.js'
+  __dirname, '..', '..', '..', '..', '.aiox-core', 'development', 'scripts', 'populate-entity-registry.js',
 );
 const DOCTOR_CHECK = path.join(
-  __dirname, '..', '..', '..', '..', '.aiox-core', 'core', 'doctor', 'checks', 'entity-registry.js'
+  __dirname, '..', '..', '..', '..', '.aiox-core', 'core', 'doctor', 'checks', 'entity-registry.js',
 );
 const REGISTRY_PATH = path.join(
-  __dirname, '..', '..', '..', '..', '.aiox-core', 'data', 'entity-registry.yaml'
+  __dirname, '..', '..', '..', '..', '.aiox-core', 'data', 'entity-registry.yaml',
 );
 const PRE_PUSH_HOOK = path.join(__dirname, '..', '..', '..', '..', '.husky', 'pre-push');
 const IDS_PRE_PUSH = path.join(
-  __dirname, '..', '..', '..', '..', '.aiox-core', 'hooks', 'ids-pre-push.js'
+  __dirname, '..', '..', '..', '..', '.aiox-core', 'hooks', 'ids-pre-push.js',
 );
 
 describe('Entity Registry Bootstrap (Story INS-4.6)', () => {

package/packages/installer/tests/unit/generate-settings-json/generate-settings-json.test.js

@@ -49,7 +49,7 @@ function createTempProject(boundary, existingSettings) {
     fs.writeFileSync(
       path.join(claudeDir, 'settings.json'),
       JSON.stringify(existingSettings, null, 2) + '\n',
-      'utf8'
+      'utf8',
     );
   }
 
@@ -256,7 +256,7 @@ describe('generate-settings-json', () => {
           protected: ['bin/aiox.js'],
           exceptions: [],
         },
-        { language: 'pt', customSetting: true }
+        { language: 'pt', customSetting: true },
       );
 
       try {
@@ -273,14 +273,14 @@ describe('generate-settings-json', () => {
       }
     });
 
-    test('frameworkProtection false preserves user settings and removes permissions', () => {
+    test('frameworkProtection false preserves user settings and existing permissions', () => {
       const tmpDir = createTempProject(
         {
           frameworkProtection: false,
           protected: ['bin/aiox.js'],
           exceptions: [],
         },
-        { language: 'pt', permissions: { deny: ['old-rule'], allow: [] } }
+        { language: 'pt', permissions: { deny: ['old-rule'], allow: [] } },
       );
 
       try {
@@ -289,7 +289,7 @@ describe('generate-settings-json', () => {
         const parsed = JSON.parse(content);
 
         expect(parsed.language).toBe('pt');
-        expect(parsed.permissions).toBeUndefined();
+        expect(parsed.permissions).toEqual({ deny: ['old-rule'], allow: [] });
       } finally {
         cleanupTempProject(tmpDir);
       }

package/packages/installer/tests/unit/ide-sync-integration/ide-sync-integration.test.js

@@ -21,7 +21,7 @@ jest.mock('../../../../../.aiox-core/infrastructure/scripts/ide-sync/index', ()
 // We need to verify that the wizard source code has the correct integration
 const fs = require('fs');
 const WIZARD_PATH = path.join(
-  __dirname, '..', '..', '..', 'src', 'wizard', 'index.js'
+  __dirname, '..', '..', '..', 'src', 'wizard', 'index.js',
 );
 
 describe('IDE Sync Integration (Story INS-4.5)', () => {
@@ -34,7 +34,7 @@ describe('IDE Sync Integration (Story INS-4.5)', () => {
   describe('AC1: IDE sync called via adapter pattern', () => {
     test('wizard imports commandSync and commandValidate from ide-sync', () => {
       expect(wizardSource).toContain(
-        "const { commandSync, commandValidate } = require('../../../../.aiox-core/infrastructure/scripts/ide-sync/index')"
+        "const { commandSync, commandValidate } = require('../../../../.aiox-core/infrastructure/scripts/ide-sync/index')",
       );
     });
 
@@ -61,7 +61,7 @@ describe('IDE Sync Integration (Story INS-4.5)', () => {
     });
 
     test('commandSync called with { quiet: true }', () => {
-      expect(wizardSource).toContain("await commandSync({ quiet: true })");
+      expect(wizardSource).toContain('await commandSync({ quiet: true })');
     });
 
     test('does NOT pass projectRoot or ides as parameters to commandSync', () => {
@@ -78,7 +78,7 @@ describe('IDE Sync Integration (Story INS-4.5)', () => {
     });
 
     test('failure message suggests aiox doctor --fix', () => {
-      expect(wizardSource).toContain("aiox doctor --fix");
+      expect(wizardSource).toContain('aiox doctor --fix');
     });
 
     test('install summary includes sync status on success', () => {

package/packages/installer/tests/unit/merger/yaml-merger.test.js

@@ -15,7 +15,7 @@ const path = require('path');
 const fs = require('fs');
 
 const { YamlMerger } = require(path.join(
-  __dirname, '..', '..', '..', 'src', 'merger', 'strategies', 'yaml-merger.js'
+  __dirname, '..', '..', '..', 'src', 'merger', 'strategies', 'yaml-merger.js',
 ));
 
 describe('YamlMerger (Story INS-4.7)', () => {
@@ -54,7 +54,7 @@ describe('YamlMerger (Story INS-4.7)', () => {
   describe('AC1: Strategy registration', () => {
     test('.yaml extension registered in strategies/index.js', () => {
       const { hasMergeStrategy, getMergeStrategy } = require(path.join(
-        __dirname, '..', '..', '..', 'src', 'merger', 'strategies', 'index.js'
+        __dirname, '..', '..', '..', 'src', 'merger', 'strategies', 'index.js',
       ));
 
       expect(hasMergeStrategy('config.yaml')).toBe(true);
@@ -64,7 +64,7 @@ describe('YamlMerger (Story INS-4.7)', () => {
 
     test('.yml extension also registered', () => {
       const { hasMergeStrategy } = require(path.join(
-        __dirname, '..', '..', '..', 'src', 'merger', 'strategies', 'index.js'
+        __dirname, '..', '..', '..', 'src', 'merger', 'strategies', 'index.js',
       ));
 
       expect(hasMergeStrategy('config.yml')).toBe(true);
@@ -72,7 +72,7 @@ describe('YamlMerger (Story INS-4.7)', () => {
 
     test('YamlMerger exported from merger/index.js', () => {
       const mergerModule = require(path.join(
-        __dirname, '..', '..', '..', 'src', 'merger', 'index.js'
+        __dirname, '..', '..', '..', 'src', 'merger', 'index.js',
       ));
 
       expect(mergerModule.YamlMerger).toBeDefined();
@@ -91,7 +91,7 @@ describe('YamlMerger (Story INS-4.7)', () => {
       expect(result.stats.added).toBeGreaterThanOrEqual(1);
 
       const addedChange = result.changes.find(
-        c => c.type === 'added' && c.identifier === 'newFeature'
+        c => c.type === 'added' && c.identifier === 'newFeature',
       );
       expect(addedChange).toBeDefined();
     });
@@ -107,7 +107,7 @@ describe('YamlMerger (Story INS-4.7)', () => {
       expect(result.stats.preserved).toBeGreaterThanOrEqual(1);
 
       const preservedChange = result.changes.find(
-        c => c.type === 'preserved' && c.identifier === 'key'
+        c => c.type === 'preserved' && c.identifier === 'key',
       );
       expect(preservedChange).toBeDefined();
     });
@@ -123,7 +123,7 @@ describe('YamlMerger (Story INS-4.7)', () => {
       expect(result.stats.conflicts).toBeGreaterThanOrEqual(1);
 
       const conflictChange = result.changes.find(
-        c => c.type === 'conflict' && c.identifier === 'setting'
+        c => c.type === 'conflict' && c.identifier === 'setting',
       );
       expect(conflictChange).toBeDefined();
       expect(conflictChange.reason).toContain('Keeping user value');
@@ -139,7 +139,7 @@ describe('YamlMerger (Story INS-4.7)', () => {
       expect(merged.legacyKey).toBe('old-value');
 
       const deprecatedChange = result.changes.find(
-        c => c.type === 'conflict' && c.identifier === 'legacyKey'
+        c => c.type === 'conflict' && c.identifier === 'legacyKey',
       );
       expect(deprecatedChange).toBeDefined();
       expect(deprecatedChange.reason).toContain('Deprecated');
@@ -294,7 +294,7 @@ describe('Brownfield Upgrader Integration (Story INS-4.7)', () => {
   test('brownfield-upgrader imports YamlMerger', () => {
     const upgraderSource = fs.readFileSync(
       path.join(__dirname, '..', '..', '..', 'src', 'installer', 'brownfield-upgrader.js'),
-      'utf8'
+      'utf8',
     );
     expect(upgraderSource).toContain('YamlMerger');
     expect(upgraderSource).toContain('yaml-merger.js');
@@ -303,7 +303,7 @@ describe('Brownfield Upgrader Integration (Story INS-4.7)', () => {
   test('upgrader has core-config.yaml merge exception in userModifiedFiles loop', () => {
     const upgraderSource = fs.readFileSync(
       path.join(__dirname, '..', '..', '..', 'src', 'installer', 'brownfield-upgrader.js'),
-      'utf8'
+      'utf8',
     );
     expect(upgraderSource).toContain("file.path.endsWith('core-config.yaml')");
     expect(upgraderSource).toContain('merger.merge(sourceContent, targetContent)');
@@ -313,7 +313,7 @@ describe('Brownfield Upgrader Integration (Story INS-4.7)', () => {
   test('upgrader still skips non-yaml user-modified files', () => {
     const upgraderSource = fs.readFileSync(
       path.join(__dirname, '..', '..', '..', 'src', 'installer', 'brownfield-upgrader.js'),
-      'utf8'
+      'utf8',
     );
     expect(upgraderSource).toContain('User modified - preserving local changes');
   });

package/pro/README.md

@@ -2,6 +2,8 @@
 
 Premium features for [Synkra AIOX](https://github.com/SynkraAI/aiox-core).
 
+> **New npm namespace:** AIOX Pro is published as `@aiox-squads/pro`. This is the canonical successor to the unpublished `@aiox-fullstack/pro` target and the legacy `@aios-fullstack/pro` package.
+
 ## Overview
 
 AIOX Pro extends the open-source AIOX framework with premium capabilities:
@@ -16,6 +18,9 @@ AIOX Pro extends the open-source AIOX framework with premium capabilities:
 AIOX Pro requires an active license and is distributed via npm.
 
 ```bash
+# Package install
+npm install @aiox-squads/pro
+
 # Install
 npx aiox-pro install
 
@@ -43,6 +48,12 @@ aiox pro activate --key PRO-XXXX-XXXX-XXXX-XXXX
 aiox pro status
 ```
 
+## Version 0.4.0 - Stable License Machine ID
+
+AIOX Pro now derives `machineId` from the native OS machine UUID instead of hostname, CPU, and MAC address. This prevents Wi-Fi MAC rotation, VPN changes, and network interface ordering from consuming extra license seats on the same computer.
+
+Existing encrypted license caches are migrated automatically on next read: the client opens the legacy cache key, re-encrypts with the new native machine ID key, and keeps a 90-day legacy fallback window for already activated installations.
+
 ## Structure
 
 ```
@@ -58,7 +69,7 @@ aiox-pro/
 ## Requirements
 
 - Node.js >= 18
-- aiox-core >= 3.12.0
+- aiox-core >= 5.0.8
 - Active AIOX Pro license
 
 ## License

package/pro/license/index.js

@@ -5,7 +5,7 @@
  * and feature gating in AIOX Pro.
  *
  * Usage:
- *   const { featureGate, licenseApi } = require('@aiox-fullstack/pro/license');
+ *   const { featureGate, licenseApi } = require('@aiox-squads/pro/license');
  *
  *   // Check feature availability
  *   if (featureGate.isAvailable('pro.squads.premium')) {
@@ -48,18 +48,10 @@ const {
 const { LicenseApiClient, licenseApi } = require('./license-api');
 
 // Crypto utilities
-const {
-  generateMachineId,
-  maskKey,
-  validateKeyFormat,
-} = require('./license-crypto');
+const { generateMachineId, maskKey, validateKeyFormat } = require('./license-crypto');
 
 // Error classes
-const {
-  ProFeatureError,
-  LicenseActivationError,
-  LicenseValidationError,
-} = require('./errors');
+const { ProFeatureError, LicenseActivationError, LicenseValidationError } = require('./errors');
 
 // Graceful degradation utilities
 const {

package/pro/license/license-api.js

@@ -572,6 +572,31 @@ class LicenseApiClient {
     }
   }
 
+  // ────────────────────────────────────────────────────────────────
+  // Buyer operator methods (Story 123.8 — Cohort CLI migration)
+  // ────────────────────────────────────────────────────────────────
+
+  /**
+   * Validate if an email corresponds to an AIOX Pro buyer.
+   *
+   * Thin wrapper over checkEmail() with a narrower contract intended for
+   * CLI buyer-admin operations. Returns exactly { email, isBuyer, hasAccount }.
+   *
+   * Public endpoint (server-side rate-limited). No admin auth required.
+   *
+   * @param {string} email - Buyer email to validate
+   * @returns {Promise<{email: string, isBuyer: boolean, hasAccount: boolean}>}
+   * @throws {AuthError} On rate-limit or network failure
+   */
+  async validateBuyer(email) {
+    const result = await this.checkEmail(email);
+    return {
+      email: result.email,
+      isBuyer: result.isBuyer,
+      hasAccount: result.hasAccount,
+    };
+  }
+
   /**
    * Request a password reset email via Supabase.
    *