fraim-framework 2.0.145 → 2.0.147

package/dist/src/ai-hub/desktop-main.js

@@ -3,6 +3,15 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.launchDesktopShell = launchDesktopShell;
 const electron_1 = require("electron");
 const server_1 = require("./server");
+const db_service_1 = require("../fraim/db-service");
+function tryCreateDbService() {
+    try {
+        return new db_service_1.FraimDbService();
+    }
+    catch {
+        return undefined;
+    }
+}
 let server = null;
 let mainWindow = null;
 let stopping = null;
@@ -79,7 +88,7 @@ async function createWindow(url) {
 }
 async function launchDesktopShell(options) {
     const port = await (0, server_1.findAvailablePort)(options.preferredPort);
-    server = new server_1.AiHubServer({ projectPath: options.projectPath });
+    server = new server_1.AiHubServer({ projectPath: options.projectPath, dbService: tryCreateDbService() });
     await server.start(port);
     await createWindow(`http://127.0.0.1:${port}/ai-hub/`);
 }

package/dist/src/ai-hub/hosts.js

@@ -253,22 +253,40 @@ function detectEmployees() {
         };
     });
 }
-// Rewrite a /fraim or $fraim job invocation to a direct MCP tool call instruction.
-// Gemini CLI has a /fraim command but it conflicts when both workspace-level and
-// user-level fraim.toml commands exist (Gemini renames both), making /fraim
-// unrecognised. Sending an explicit get_fraim_job instruction bypasses the slash
-// command entirely and works regardless of whether the command exists.
-function transformGeminiMessage(message) {
-    const match = message.match(/^[/$]fraim\s+(\S+)\n?([\s\S]*)$/);
+function parseFraimInvocation(message) {
+    const trimmed = message.trim();
+    if (!trimmed)
+        return null;
+    const match = trimmed.match(/^[/$]fraim(?:\s+(\S+))?\s*([\s\S]*)$/);
     if (!match)
+        return null;
+    return {
+        jobId: match[1] || null,
+        remainder: (match[2] || '').trim(),
+    };
+}
+// Rewrite UI-facing /fraim or $fraim invocations into direct MCP tool
+// instructions for headless hosts. The Hub still shows the familiar
+// invocation in the manager timeline, but the actual CLI child process
+// receives an explicit instruction that works in non-interactive mode.
+function transformHeadlessFraimMessage(message, kind) {
+    const parsed = parseFraimInvocation(message);
+    if (!parsed)
+        return message;
+    if (kind === 'continue') {
+        if (parsed.remainder) {
+            return `Continue the active FRAIM job with this manager coaching:\n\n${parsed.remainder}`;
+        }
+        return 'Continue the active FRAIM job using the current session context.';
+    }
+    if (!parsed.jobId)
         return message;
-    const jobId = match[1];
-    const instructions = match[2].trim();
     const parts = [
-        `Call the get_fraim_job MCP tool with job "${jobId}" to get the full job instructions, then follow them exactly.`,
+        `Call the get_fraim_job MCP tool with job "${parsed.jobId}" to get the full job instructions, then follow them exactly.`,
     ];
-    if (instructions)
-        parts.push(`\n\nUser instructions: ${instructions}`);
+    if (parsed.remainder) {
+        parts.push(`\n\nUser instructions: ${parsed.remainder}`);
+    }
     return parts.join('');
 }
 // If ~/.gemini/settings.json has a wrong/test FRAIM_API_KEY, patch it with the
@@ -301,7 +319,7 @@ function buildStartPlan(hostId, message) {
         return {
             command: executableName('codex'),
             args: ['exec', '--json', '--skip-git-repo-check', '--dangerously-bypass-approvals-and-sandbox'],
-            stdin: message,
+            stdin: transformHeadlessFraimMessage(message, 'start'),
         };
     }
     if (hostId === 'gemini') {
@@ -309,13 +327,13 @@ function buildStartPlan(hostId, message) {
         return {
             command: executableName('gemini'),
             args: ['--yolo', '--skip-trust'],
-            stdin: transformGeminiMessage(message),
+            stdin: transformHeadlessFraimMessage(message, 'start'),
         };
     }
     return {
         command: executableName('claude'),
         args: ['-p', '--verbose', '--output-format', 'stream-json', '--dangerously-skip-permissions'],
-        stdin: message,
+        stdin: transformHeadlessFraimMessage(message, 'start'),
     };
 }
 function buildContinuePlan(hostId, sessionId, message) {
@@ -323,7 +341,7 @@ function buildContinuePlan(hostId, sessionId, message) {
         return {
             command: executableName('codex'),
             args: ['exec', 'resume', '--json', '--skip-git-repo-check', '--dangerously-bypass-approvals-and-sandbox', sessionId],
-            stdin: message,
+            stdin: transformHeadlessFraimMessage(message, 'continue'),
         };
     }
     if (hostId === 'gemini') {
@@ -332,13 +350,13 @@ function buildContinuePlan(hostId, sessionId, message) {
         return {
             command: executableName('gemini'),
             args: ['--yolo', '--skip-trust'],
-            stdin: message,
+            stdin: transformHeadlessFraimMessage(message, 'continue'),
         };
     }
     return {
         command: executableName('claude'),
         args: ['-p', '--verbose', '--output-format', 'stream-json', '--dangerously-skip-permissions', '-r', sessionId],
-        stdin: message,
+        stdin: transformHeadlessFraimMessage(message, 'continue'),
     };
 }
 function parseHostLine(hostId, line) {

package/dist/src/ai-hub/preferences.js

@@ -14,6 +14,7 @@ const defaultPreferences = (projectPath) => ({
     employeeId: DEFAULT_EMPLOYEE,
     categoryId: DEFAULT_CATEGORY,
     recentJobIds: [],
+    personaKey: null,
 });
 class AiHubPreferencesStore {
     constructor(stateFilePath = path_1.default.join((0, project_fraim_paths_1.getUserFraimDirPath)(), 'ai-hub-state.json')) {
@@ -30,6 +31,8 @@ class AiHubPreferencesStore {
                 employeeId: (raw.employeeId === 'claude' || raw.employeeId === 'codex') ? raw.employeeId : DEFAULT_EMPLOYEE,
                 categoryId: typeof raw.categoryId === 'string' && raw.categoryId.length > 0 ? raw.categoryId : DEFAULT_CATEGORY,
                 recentJobIds: Array.isArray(raw.recentJobIds) ? raw.recentJobIds.filter((value) => typeof value === 'string') : [],
+                personaKey: typeof raw.personaKey === 'string' ? raw.personaKey : null,
+                apiKey: typeof raw.apiKey === 'string' && raw.apiKey.length > 0 ? raw.apiKey : undefined,
             };
         }
         catch {

package/dist/src/ai-hub/server.js

@@ -13,6 +13,33 @@ const os_1 = __importDefault(require("os"));
 const crypto_1 = require("crypto");
 const child_process_1 = require("child_process");
 const types_1 = require("../first-run/types");
+const persona_entitlement_service_1 = require("../services/persona-entitlement-service");
+const persona_capability_bundles_1 = require("../config/persona-capability-bundles");
+const PERSONA_AVATAR_SEEDS = {
+    maestro: { seed: 'MAESTRO-founder-mode', bg: 'fde68a' },
+    beza: { seed: 'BEZA-strategist', bg: 'c7d2fe' },
+    pam: { seed: 'PAM-product', bg: 'ddd6fe' },
+    swen: { seed: 'SWEN-engineer', bg: 'bfdbfe' },
+    qasm: { seed: 'QASM-quality', bg: 'a7f3d0' },
+    huxley: { seed: 'HUXLEY-design', bg: 'fbcfe8' },
+    gautam: { seed: 'Gautam-marketing', bg: 'fed7aa' },
+    cela: { seed: 'CELA-legal', bg: 'cbd5e1' },
+    sekhar: { seed: 'SEKHAR-security', bg: 'fecaca' },
+    ashley: { seed: 'Ashley-assistant', bg: 'fde68a' },
+    mandy: { seed: 'MANDY-manager', bg: 'ede9fe' },
+    hari: { seed: 'HARI-hr', bg: 'ccfbf1' },
+    careena: { seed: 'CAREENA-career-coach', bg: 'e0f2fe' },
+    ricardo: { seed: 'RICARDO-recruiter', bg: 'ede9fe' },
+    sade: { seed: 'SADE-salesforce-dev', bg: 'bae6fd' },
+    sam: { seed: 'SAM-sales-manager', bg: 'bbf7d0' },
+    casey: { seed: 'CASEY-customer-cx', bg: 'fecdd3' },
+};
+function buildPersonaAvatarUrl(personaKey) {
+    const data = PERSONA_AVATAR_SEEDS[personaKey] ?? { seed: personaKey, bg: 'f1f5f9' };
+    const params = new URLSearchParams({ seed: data.seed, backgroundColor: data.bg, radius: '50' });
+    return `https://api.dicebear.com/9.x/notionists/svg?${params.toString()}`;
+}
+const db_service_1 = require("../fraim/db-service");
 const catalog_1 = require("./catalog");
 const agent_token_prices_1 = require("../local-mcp-server/agent-token-prices");
 const hosts_1 = require("./hosts");
@@ -327,6 +354,18 @@ class AiHubServer {
         this.projectPath = options.projectPath || process.cwd();
         this.preferencesStore = options.preferencesStore || new preferences_1.AiHubPreferencesStore();
         this.hostRuntime = options.hostRuntime || (process.env.FRAIM_AI_HUB_FAKE_HOST === '1' ? new hosts_1.FakeHostRuntime() : new hosts_1.CliHostRuntime());
+        if (options.dbService !== undefined) {
+            this.dbService = options.dbService;
+        }
+        else {
+            try {
+                this.dbService = new db_service_1.FraimDbService();
+            }
+            catch {
+                this.dbService = undefined;
+                console.warn('[ai-hub] No dbService — personas will show as locked');
+            }
+        }
         this.app.use(express_1.default.json());
         this.app.use('/ai-hub', express_1.default.static(resolveAiHubPublicDir()));
         this.app.get('/health', (_req, res) => {
@@ -338,6 +377,15 @@ class AiHubServer {
         return this.app;
     }
     async start(port) {
+        if (this.dbService) {
+            try {
+                await this.dbService.connect();
+            }
+            catch (err) {
+                console.warn('[ai-hub] DB connect failed — personas will show as locked:', err);
+                this.dbService = undefined;
+            }
+        }
         await new Promise((resolve, reject) => {
             this.httpServer = this.app.listen(port, '127.0.0.1');
             this.httpServer.once('listening', () => resolve());
@@ -358,7 +406,7 @@ class AiHubServer {
         });
         this.httpServer = undefined;
     }
-    bootstrapResponse(projectPath) {
+    async bootstrapResponse(projectPath, apiKey) {
         const normalizedProjectPath = path_1.default.resolve(projectPath || this.projectPath);
         const employees = this.hostRuntime.detectEmployees();
         let preferences = this.preferencesStore.load(normalizedProjectPath);
@@ -373,8 +421,13 @@ class AiHubServer {
             }
         }
         const project = (0, catalog_1.summarizeProject)(normalizedProjectPath);
-        const jobs = (0, catalog_1.discoverEmployeeJobs)(normalizedProjectPath);
+        const rawJobs = (0, catalog_1.discoverEmployeeJobs)(normalizedProjectPath);
+        const jobs = rawJobs.map((job) => ({
+            ...job,
+            requiredPersonaKey: (0, persona_capability_bundles_1.getProtectedPersonaForJob)(job.id),
+        }));
         const managerTemplates = (0, catalog_1.discoverManagerTemplates)(normalizedProjectPath);
+        const { personas, subscriptionActive } = await this.computePersonas(apiKey || preferences.apiKey);
         // Issue #347: enrich the activeRun the same way GET /runs/:id does
         // so the bootstrap surface (used on first paint) carries stages and
         // live totals — not just the raw run state.
@@ -388,15 +441,67 @@ class AiHubServer {
             jobs,
             managerTemplates,
             employees,
+            personas,
+            subscriptionActive,
             activeRun,
         };
     }
+    async computePersonas(apiKey) {
+        const allBundles = (0, persona_capability_bundles_1.listPersonaCapabilityBundles)();
+        const fallbackPersonas = allBundles.map((bundle) => ({
+            key: bundle.personaKey,
+            displayName: bundle.catalogMetadata.displayName,
+            role: bundle.catalogMetadata.role,
+            avatarUrl: buildPersonaAvatarUrl(bundle.personaKey),
+            pricingLabel: bundle.catalogMetadata.pricingLabel,
+            status: 'locked',
+            hireUrl: (0, persona_entitlement_service_1.buildPersonaHireUrl)(bundle.personaKey, bundle.defaultHireMode),
+        }));
+        if (!apiKey || !this.dbService)
+            return { personas: fallbackPersonas, subscriptionActive: false };
+        try {
+            const state = await (0, persona_entitlement_service_1.getWorkspacePersonaState)(this.dbService, 'anonymous', apiKey);
+            const hiredKeys = new Set(state.entitlements
+                .filter((e) => e.status === 'active')
+                .map((e) => e.personaKey));
+            const personas = allBundles.map((bundle) => ({
+                key: bundle.personaKey,
+                displayName: bundle.catalogMetadata.displayName,
+                role: bundle.catalogMetadata.role,
+                avatarUrl: buildPersonaAvatarUrl(bundle.personaKey),
+                pricingLabel: hiredKeys.has(bundle.personaKey) ? '' : bundle.catalogMetadata.pricingLabel,
+                status: (hiredKeys.has(bundle.personaKey) ? 'hired' : 'locked'),
+                hireUrl: (0, persona_entitlement_service_1.buildPersonaHireUrl)(bundle.personaKey, bundle.defaultHireMode),
+            }));
+            return { personas, subscriptionActive: state.subscriptionActive };
+        }
+        catch (err) {
+            console.error('[ai-hub] persona entitlement lookup failed:', err);
+            return { personas: fallbackPersonas, subscriptionActive: false };
+        }
+    }
     registerRoutes() {
-        this.app.get('/api/ai-hub/bootstrap', (req, res) => {
+        this.app.get('/api/ai-hub/bootstrap', async (req, res) => {
             const projectPath = typeof req.query.projectPath === 'string' && req.query.projectPath.length > 0
                 ? req.query.projectPath
                 : this.projectPath;
-            res.json(this.bootstrapResponse(projectPath));
+            // Read API key from header — query-param API keys are prohibited (§3.14)
+            const apiKey = typeof req.headers['x-fraim-api-key'] === 'string' ? req.headers['x-fraim-api-key'] : undefined;
+            res.json(await this.bootstrapResponse(projectPath, apiKey));
+        });
+        this.app.post('/api/ai-hub/api-key', (req, res) => {
+            const { apiKey } = req.body;
+            if (!apiKey || typeof apiKey !== 'string')
+                return res.status(400).json({ error: 'apiKey required' });
+            const prefs = this.preferencesStore.load(this.projectPath);
+            this.preferencesStore.save({ ...prefs, apiKey });
+            return res.json({ ok: true });
+        });
+        this.app.post('/api/ai-hub/preferences', (req, res) => {
+            const { personaKey } = req.body;
+            const prefs = this.preferencesStore.load(this.projectPath);
+            this.preferencesStore.save({ ...prefs, personaKey: personaKey ?? null });
+            return res.json({ ok: true });
         });
         this.app.post('/api/ai-hub/project-path/pick', (_req, res) => {
             try {
@@ -508,6 +613,7 @@ class AiHubServer {
                     phaseHistory: [],
                     totals: emptyTotals(),
                     lastStatusChangeAt: startTimestamp,
+                    personaKey: (0, persona_capability_bundles_1.getProtectedPersonaForJob)(jobId) ?? null,
                     // Gemini CLI does not emit a session ID in its output stream;
                     // pre-seed one so the Send button is enabled and the continue
                     // endpoint can proceed. continueRun for Gemini ignores it.

package/dist/src/cli/commands/add-ide.js

@@ -354,38 +354,39 @@ const runAddIDE = async (options) => {
     else {
         console.log(chalk_1.default.green('✅ Using existing FRAIM configuration\n'));
     }
-    // Detect available IDEs
-    const detectedIDEs = (0, ide_detector_1.detectInstalledIDEs)();
-    if (detectedIDEs.length === 0) {
-        console.log(chalk_1.default.yellow('⚠️ No supported IDEs detected on your system.'));
-        console.log(chalk_1.default.gray('Supported IDEs: Claude, Claude Code, Antigravity, Gemini CLI, Kiro, Cursor, VSCode, Codex, Windsurf'));
-        console.log(chalk_1.default.blue('\n💡 Install an IDE and run this command again.'));
-        return;
-    }
     let idesToConfigure;
     if (options.ide) {
-        // Configure specific IDE
+        // Explicit IDE requested: configure it regardless of whether it is
+        // currently detected.  Use the detected path if available (may differ
+        // from the default), otherwise fall back to the default so the config
+        // can be pre-staged before the IDE is installed.
         const requestedIDE = (0, ide_detector_1.findIDEByName)(options.ide);
         if (!requestedIDE) {
             console.log(chalk_1.default.red(`❌ IDE "${options.ide}" not supported.`));
             console.log(chalk_1.default.yellow('💡 Use "fraim add-ide --list" to see supported IDEs.'));
             return;
         }
+        const detectedIDEs = (0, ide_detector_1.detectInstalledIDEs)();
         const detectedIDE = detectedIDEs.find(ide => ide.name === requestedIDE.name);
-        if (!detectedIDE) {
-            console.log(chalk_1.default.red(`❌ ${requestedIDE.name} not found on your system.`));
-            console.log(chalk_1.default.yellow(`💡 Please install ${requestedIDE.name} and try again.`));
-            return;
-        }
-        idesToConfigure = [detectedIDE];
-    }
-    else if (options.all) {
-        // Configure all detected IDEs
-        idesToConfigure = detectedIDEs;
+        idesToConfigure = [detectedIDE || requestedIDE];
     }
     else {
-        // Interactive selection
-        idesToConfigure = await promptForIDESelection(detectedIDEs, platformTokens);
+        // Auto-detect or interactive selection.
+        const detectedIDEs = (0, ide_detector_1.detectInstalledIDEs)();
+        if (detectedIDEs.length === 0) {
+            console.log(chalk_1.default.yellow('⚠️ No supported IDEs detected on your system.'));
+            console.log(chalk_1.default.gray('Supported IDEs: Claude, Claude Code, Antigravity, Gemini CLI, Kiro, Cursor, VSCode, Codex, Windsurf'));
+            console.log(chalk_1.default.blue('\n💡 Install an IDE and run this command again.'));
+            return;
+        }
+        if (options.all) {
+            // Configure all detected IDEs
+            idesToConfigure = detectedIDEs;
+        }
+        else {
+            // Interactive selection
+            idesToConfigure = await promptForIDESelection(detectedIDEs, platformTokens);
+        }
     }
     if (idesToConfigure.length === 0) {
         console.log(chalk_1.default.yellow('⚠️ No IDEs selected for configuration.'));

package/dist/src/cli/setup/ide-detector.js

@@ -199,11 +199,23 @@ const findBestConfigPath = (ide) => {
     // Return default path if nothing found (will be created)
     return ide.configPath;
 };
+let _cachedIDEs = null;
+let _cacheTimestamp = 0;
+let _cacheHomeDir = '';
+const DETECT_CACHE_TTL_MS = 5000;
 const detectInstalledIDEs = () => {
-    return exports.IDE_CONFIGS.filter(ide => ide.detectMethod()).map(ide => ({
+    const now = Date.now();
+    const currentHome = os_1.default.homedir();
+    if (_cachedIDEs !== null && _cacheHomeDir === currentHome && (now - _cacheTimestamp) < DETECT_CACHE_TTL_MS) {
+        return _cachedIDEs;
+    }
+    _cachedIDEs = exports.IDE_CONFIGS.filter(ide => ide.detectMethod()).map(ide => ({
         ...ide,
         configPath: findBestConfigPath(ide)
     }));
+    _cacheTimestamp = now;
+    _cacheHomeDir = currentHome;
+    return _cachedIDEs;
 };
 exports.detectInstalledIDEs = detectInstalledIDEs;
 const getAllSupportedIDEs = () => {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fraim-framework",
-  "version": "2.0.145",
+  "version": "2.0.147",
   "description": "FRAIM: AI Workforce Infrastructure — the organizational capability that turns AI agents into an accountable workforce, their operators into capable AI managers, and executives into leaders with clear optics on AI proficiency.",
   "main": "index.js",
   "bin": {

package/public/ai-hub/index.html

@@ -11,13 +11,16 @@
 
   <div class="page">
 
-    <header class="header">
-      <h1>AI Hub</h1>
-      <button class="project-button" type="button" id="project-button">
-        <span class="folder">Project</span>
-        <strong id="project-name">Choose a folder</strong>
-      </button>
-    </header>
+    <header class="header">
+      <div class="header-copy">
+        <span class="header-eyebrow">FRAIM Hub</span>
+        <h1>AI Hub</h1>
+      </div>
+      <button class="project-button" type="button" id="project-button">
+        <span class="folder">Project</span>
+        <strong id="project-name">Choose a folder</strong>
+      </button>
+    </header>
 
     <section class="welcome">
       Hi <strong class="you">there</strong>, remember, you are the
@@ -63,10 +66,20 @@
     </section>
 
     <div class="layout">
-      <aside class="rail">
-        <button class="new-conv" type="button" id="new-conv-btn">+ New job</button>
-        <div class="conv-list" id="conv-list"></div>
-      </aside>
+      <aside class="rail">
+        <button class="new-conv" type="button" id="new-conv-btn">+ New job</button>
+        <div class="rail-note">Alpha: browser shell for directing employees across your project.</div>
+        <!-- R2.4: team roster — horizontal row of avatar chips per hired persona -->
+        <section class="rail-section rail-section--employees">
+          <div class="rail-section-label">Hired employees</div>
+          <div class="team-roster" id="team-roster" hidden></div>
+        </section>
+
+        <section class="rail-section rail-section--runs">
+          <div class="rail-section-label">Runs</div>
+          <div class="conv-list" id="conv-list"></div>
+        </section>
+      </aside>
 
       <main class="conversation" id="conversation">
         <div class="empty-state" id="empty">
@@ -74,16 +87,25 @@
           <p>Pick an existing job from the left, or click <strong>+ New job</strong> to give your employee something to work on.</p>
         </div>
 
-        <div id="active-conv" hidden>
-          <div class="conv-header">
-            <h2 id="active-title"></h2>
-            <div class="conv-job" id="active-job"></div>
-            <div id="artifact-slot"></div>
-          </div>
-
-          <!-- Issue #347 R1: pizza tracker. Hidden when the active job
-               declares no phases. Populated by renderTracker() in script.js. -->
-          <div class="tracker" id="tracker" aria-label="Job progress" hidden>
+        <div id="active-conv" hidden>
+          <div class="conv-topline">
+            <div class="employee-identity" id="active-identity"></div>
+            <div class="run-state-pill" id="run-state-pill"></div>
+          </div>
+
+          <div class="conv-header">
+            <div class="title-block">
+              <h2 id="active-title"></h2>
+              <div class="conv-job" id="active-job"></div>
+            </div>
+            <div id="artifact-slot"></div>
+          </div>
+
+          <div class="summary-strip" id="summary-strip"></div>
+
+          <!-- Issue #347 R1: pizza tracker. Hidden when the active job
+               declares no phases. Populated by renderTracker() in script.js. -->
+          <div class="tracker" id="tracker" aria-label="Job progress" hidden>
             <div class="tracker-rows" id="tracker-rows"></div>
             <div class="tracker-note" id="tracker-note" hidden></div>
           </div>
@@ -93,28 +115,32 @@
             <span class="latest" id="latest"></span>
           </div>
 
-          <div class="messages" id="messages"></div>
+          <section class="thread-surface" aria-label="Manager and employee thread">
+            <div class="thread-surface-label">Manager and employee thread</div>
+            <div class="messages" id="messages"></div>
+          </section>
 
           <div class="coach">
-            <div class="coach-title-row">
-              <span class="section-title">Coach the employee</span>
-              <span class="active-employee-row">
-                <label for="active-employee-select" class="active-employee-label">via</label>
-                <select id="active-employee-select" class="employee-select inline"></select>
-              </span>
-            </div>
-            <textarea id="coach-text" placeholder="Tell the employee what to do next…"></textarea>
-            <div class="coach-actions">
-              <!-- Issue #347 R2: template picker. Hidden when the project
-                   has no manager-job templates. -->
-              <button class="ghost" type="button" id="template-picker-btn" aria-haspopup="menu" aria-expanded="false" hidden>Use a template ▾</button>
-              <button class="send-button" type="button" id="send" disabled>Send</button>
-              <div class="template-popover" id="template-popover" role="menu" hidden></div>
-            </div>
-            <!-- Issue #347 R4: run-level totals. Discoverable, not dominating.
-                 Populated by renderTotals() each poll tick. -->
-            <div class="totals" id="totals" aria-label="Run totals" hidden></div>
-          </div>
+            <div class="coach-title-row">
+              <span class="section-title">Coach the employee</span>
+              <span class="active-employee-row">
+                <label for="active-employee-select" class="active-employee-label">tool</label>
+                <select id="active-employee-select" class="employee-select inline"></select>
+              </span>
+            </div>
+            <textarea id="coach-text" placeholder="Tell the employee what to do next…"></textarea>
+            <div class="coach-actions">
+              <!-- Issue #347 R2: template picker. Hidden when the project
+                   has no manager-job templates. -->
+              <button class="ghost" type="button" id="template-picker-btn" aria-haspopup="menu" aria-expanded="false" hidden>Use a template ▾</button>
+              <button class="send-button" type="button" id="send" disabled>Send</button>
+              <div class="template-popover" id="template-popover" role="menu" hidden></div>
+            </div>
+            <div class="coach-note" id="coach-note"></div>
+            <!-- Issue #347 R4: run-level totals. Discoverable, not dominating.
+                 Populated by renderTotals() each poll tick. -->
+            <div class="totals" id="totals" aria-label="Run totals" hidden></div>
+          </div>
 
           <details class="micro" id="micro-manage">
             <summary>Micro-manage — raw host details</summary>
@@ -138,8 +164,18 @@
         </div>
         <div class="modal-body">
           <input class="search" type="text" placeholder="Search jobs…" id="job-search">
+          <!-- R3+: persona job filter — only shown when subscription is active -->
+          <div id="job-persona-filter" hidden></div>
           <div id="job-catalog"></div>
         </div>
+        <!-- R3: hire-required notice — shown when a locked job is clicked -->
+        <div id="hire-notice" hidden>
+          <p id="hire-notice-text"></p>
+          <div class="hire-notice-actions">
+            <a id="hire-notice-link" href="#" target="_blank" rel="noopener" class="send-button">Go to Pricing →</a>
+            <button id="hire-notice-back" type="button" class="ghost">← Back to all jobs</button>
+          </div>
+        </div>
         <div class="modal-footer">
           <span class="left" id="job-pick-status">Choose a job to continue</span>
           <div class="right">