fraim-framework 2.0.177 → 2.0.180

package/dist/src/cli/setup/auto-mcp-setup.js

@@ -44,17 +44,7 @@ const prompts_1 = __importDefault(require("prompts"));
 const ide_detector_1 = require("./ide-detector");
 const mcp_config_generator_1 = require("./mcp-config-generator");
 const codex_local_config_1 = require("./codex-local-config");
-const provider_registry_1 = require("../providers/provider-registry");
-const normalizePlatformTokens = (tokenInput) => {
-    if (!tokenInput)
-        return {};
-    if (typeof tokenInput === 'string') {
-        return tokenInput ? { github: tokenInput } : {};
-    }
-    return tokenInput;
-};
-const promptForIDESelection = async (detectedIDEs, tokenInput) => {
-    const tokens = normalizePlatformTokens(tokenInput);
+const promptForIDESelection = async (detectedIDEs) => {
     if (process.env.FRAIM_NON_INTERACTIVE) {
         console.log(chalk_1.default.yellow(`\nℹ️  Non-interactive mode: configuring all detected IDEs (${detectedIDEs.length})`));
         return detectedIDEs;
@@ -70,17 +60,8 @@ const promptForIDESelection = async (detectedIDEs, tokenInput) => {
     console.log(chalk_1.default.blue('FRAIM will add these MCP servers to selected IDEs:'));
     console.log(chalk_1.default.gray('   • fraim (required for FRAIM jobs)'));
     console.log(chalk_1.default.gray('   • git (version control integration)'));
-    // Show configured provider MCP servers dynamically
-    const allProviderIds = await (0, provider_registry_1.getAllProviderIds)();
-    for (const providerId of allProviderIds) {
-        if (tokens[providerId]) {
-            const provider = await (0, provider_registry_1.getProvider)(providerId);
-            if (provider) {
-                console.log(chalk_1.default.gray(`   - ${providerId} (${provider.displayName} API access)`));
-            }
-        }
-    }
     console.log(chalk_1.default.gray('   • playwright (browser automation)'));
+    console.log(chalk_1.default.blue('\n💡 Run "fraim add-provider <provider>" after setup to connect GitHub, GitLab, Jira, or other tools.'));
     console.log(chalk_1.default.yellow('\n💡 Existing MCP servers will be preserved - only missing servers will be added.'));
     const response = await (0, prompts_1.default)({
         type: 'text',
@@ -153,8 +134,7 @@ const validateSetupResults = async (configuredIDEs) => {
     }
 };
 exports.validateSetupResults = validateSetupResults;
-const configureIDEMCP = async (ide, fraimKey, tokenInput, providerConfigs) => {
-    const tokens = normalizePlatformTokens(tokenInput);
+const configureIDEMCP = async (ide, fraimKey) => {
     const configPath = (0, ide_detector_1.expandPath)(ide.configPath);
     console.log(chalk_1.default.blue(`🔧 Configuring ${ide.name}...`));
     // Create backup
@@ -185,11 +165,9 @@ const configureIDEMCP = async (ide, fraimKey, tokenInput, providerConfigs) => {
             existingTomlContent = fs_1.default.readFileSync(configPath, 'utf8');
             console.log(chalk_1.default.gray(`  📋 Found existing TOML config`));
         }
-        const newTomlContent = await (0, mcp_config_generator_1.generateMCPConfig)(ide.configType, fraimKey, tokens, providerConfigs);
+        const newTomlContent = await (0, mcp_config_generator_1.generateMCPConfig)(ide.configType, fraimKey, {});
         const { getAllMCPServerIds } = await Promise.resolve().then(() => __importStar(require('../mcp/mcp-server-registry')));
-        const baseServerIds = getAllMCPServerIds();
-        const providerServerIds = Object.keys(tokens).filter(id => tokens[id]);
-        const serversToAdd = [...baseServerIds, ...providerServerIds];
+        const serversToAdd = getAllMCPServerIds();
         const mergeResult = (0, mcp_config_generator_1.mergeTomlMCPServers)(existingTomlContent, newTomlContent, serversToAdd);
         fs_1.default.writeFileSync(configPath, mergeResult.content);
         mergeResult.addedServers.forEach(server => {
@@ -204,7 +182,7 @@ const configureIDEMCP = async (ide, fraimKey, tokenInput, providerConfigs) => {
     }
     else {
         // For JSON configs - intelligent merging
-        const newConfig = await (0, mcp_config_generator_1.generateMCPConfig)(ide.configType, fraimKey, tokens, providerConfigs);
+        const newConfig = await (0, mcp_config_generator_1.generateMCPConfig)(ide.configType, fraimKey, {});
         const newMCPServers = newConfig[serversKey] || newConfig.mcpServers || {};
         // Merge MCP servers intelligently
         const mergedMCPServers = { ...existingMCPServers };
@@ -251,8 +229,7 @@ const configureIDEMCP = async (ide, fraimKey, tokenInput, providerConfigs) => {
         console.log(chalk_1.default.green(`  ✅ ${status} local Codex config: ${localResult.path}`));
     }
 };
-const autoConfigureMCP = async (fraimKey, tokenInput, selectedIDEs, providerConfigs) => {
-    const tokens = normalizePlatformTokens(tokenInput);
+const autoConfigureMCP = async (fraimKey, selectedIDEs) => {
     const detectedIDEs = (0, ide_detector_1.detectInstalledIDEs)();
     if (detectedIDEs.length === 0 && (!selectedIDEs || selectedIDEs.length === 0)) {
         console.log(chalk_1.default.yellow('⚠️ No supported IDEs detected.'));
@@ -294,7 +271,7 @@ const autoConfigureMCP = async (fraimKey, tokenInput, selectedIDEs, providerConf
     }
     else {
         // Interactive selection
-        idesToConfigure = await (0, exports.promptForIDESelection)(detectedIDEs, tokens);
+        idesToConfigure = await (0, exports.promptForIDESelection)(detectedIDEs);
     }
     if (idesToConfigure.length === 0) {
         console.log(chalk_1.default.yellow('⚠️ No IDEs selected for configuration.'));
@@ -308,7 +285,7 @@ const autoConfigureMCP = async (fraimKey, tokenInput, selectedIDEs, providerConf
     };
     for (const ide of idesToConfigure) {
         try {
-            await configureIDEMCP(ide, fraimKey, tokens, providerConfigs);
+            await configureIDEMCP(ide, fraimKey);
             results.successful.push(ide.name);
         }
         catch (error) {

package/dist/src/cli/setup/ide-detector.js

@@ -24,15 +24,25 @@ const checkMultiplePaths = (paths) => {
     return paths.some(p => fs_1.default.existsSync(expandPath(p)));
 };
 // Issue #646 (Bug 2): a config directory left behind after uninstall (e.g. ~/.cursor,
-// ~/Library/Application Support/Cursor) made config-surface detection report a GUI app
-// as "Installed" when it was not. On macOS an installed GUI app keeps its .app bundle,
-// which is the reliable signal. So on macOS we require app-bundle evidence for GUI apps;
-// on Windows/Linux we keep the existing config-surface check unchanged (no reported
-// false-positive there, and those install paths are not validated on this platform).
-const macAppBundlePaths = (appName) => [
+// ~/Library/Application Support/Cursor) made config-surface detection report Cursor
+// as "Installed" when it was not. App evidence is the reliable signal for Cursor;
+// other GUI surfaces keep their existing config-surface checks for compatibility
+// with the #640 first-run detection contract.
+const appBundlePaths = (appName) => [
     `/Applications/${appName}.app`,
     `~/Applications/${appName}.app`,
 ];
+const windowsUserAppPaths = (appName) => {
+    switch (appName) {
+        case 'Cursor':
+            return [
+                '~/AppData/Local/Programs/Cursor/Cursor.exe',
+                '~/AppData/Local/Cursor/Cursor.exe',
+            ];
+        default:
+            return [];
+    }
+};
 // Issue #646 follow-up: a user may run a GUI app from a non-standard location
 // (e.g. straight from a mounted DMG: /Volumes/.../Cursor.app) that the
 // /Applications checks miss. A running process of the app is definitive proof it
@@ -48,10 +58,19 @@ const isMacAppRunning = (appName) => {
     const result = (0, child_process_1.spawnSync)('pgrep', ['-f', `${appName}.app/Contents`], { encoding: 'utf8', timeout: 1500 });
     return result.status === 0 && Boolean((result.stdout || '').trim());
 };
-const guiAppDetect = (configSurfaceCheck, macAppName) => {
+const hasAppEvidence = (appName) => {
+    const evidencePaths = process.platform === 'win32'
+        ? [...appBundlePaths(appName), ...windowsUserAppPaths(appName)]
+        : appBundlePaths(appName);
+    return checkMultiplePaths(evidencePaths) || isMacAppRunning(appName);
+};
+const guiAppDetect = (configSurfaceCheck, appName, options = {}) => {
     return () => {
+        if (options.requireAppEvidence) {
+            return hasAppEvidence(appName);
+        }
         if (process.platform === 'darwin') {
-            return checkMultiplePaths(macAppBundlePaths(macAppName)) || isMacAppRunning(macAppName);
+            return hasAppEvidence(appName);
         }
         return configSurfaceCheck();
     };
@@ -81,12 +100,12 @@ const detectVSCode = () => {
     ];
     return checkMultiplePaths(paths);
 };
-const detectCursor = () => {
+const detectCursorMcpConfig = () => {
     const paths = [
-        '~/.cursor',
-        '~/Library/Application Support/Cursor',
-        '~/AppData/Roaming/Cursor',
-        '~/.config/Cursor'
+        '~/.cursor/mcp.json',
+        '~/Library/Application Support/Cursor/mcp.json',
+        '~/AppData/Roaming/Cursor/mcp.json',
+        '~/.config/Cursor/mcp.json'
     ];
     return checkMultiplePaths(paths);
 };
@@ -104,6 +123,7 @@ const detectGeminiCli = () => {
 };
 const detectGeminiSurface = () => {
     const paths = [
+        '~/.gemini',
         '~/.gemini/settings.json',
         '~/AppData/Roaming/gemini/settings.json',
         '~/.config/gemini/settings.json'
@@ -196,7 +216,7 @@ exports.IDE_CONFIGS = [
         configType: 'kiro',
         adapterConfigType: 'cursor',
         invocationProfile: 'cursor-mention',
-        detectMethod: guiAppDetect(detectCursor, 'Cursor'),
+        detectMethod: () => detectCursorMcpConfig() || hasAppEvidence('Cursor'),
         alternativePaths: [
             '~/Library/Application Support/Cursor/mcp.json',
             '~/AppData/Roaming/Cursor/mcp.json',

package/dist/src/config/persona-capability-bundles.js

@@ -40,7 +40,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'beza',
         bundleId: 'persona-beza-core',
         catalogMetadata: buildCatalogMetadata('beza', ['competitive-analysis', 'review-business-strategy', 'business-plan-creation']),
-        protectedJobs: ['competitive-analysis', 'review-business-strategy', 'business-plan-creation', 'problem-statement-crystallization', 'business-idea-validation-and-scoping', 'founder-market-fit-analysis', 'rfp-response-preparation', 'aws-activate-credits-application', 'community-funding-preparation', 'fundraising-prospect-discovery', 'google-cloud-credits-application', 'investor-pitch-preparation', 'microsoft-azure-credits-application', 'review-funding-preparation', 'advisory-board-development', 'advisor-interview', 'advisory-board-selection'],
+        protectedJobs: ['competitive-analysis', 'review-business-strategy', 'business-plan-creation', 'problem-statement-crystallization', 'business-idea-validation-and-scoping', 'founder-market-fit-analysis', 'community-funding-preparation', 'fundraising-prospect-discovery', 'investor-pitch-preparation', 'review-funding-preparation', 'advisory-board-development', 'advisor-interview', 'advisory-board-selection', 'blue-sky-brainstorming', 'domain-registration-research'],
         protectedAliases: ['business-strategy', 'company-strategy'],
         defaultHireMode: 'job',
         lockCopy: 'Hire BeZa to unlock business strategy work for this request.'
@@ -49,7 +49,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'pam',
         bundleId: 'persona-pam-core',
         catalogMetadata: buildCatalogMetadata('pam', ['feature-specification', 'technical-design', 'issue-preparation']),
-        protectedJobs: ['feature-specification', 'technical-design', 'issue-preparation', 'implementation-design-review', 'issue-retrospective', 'work-completion', 'scrum-sprint-planning', 'mvp-validation-plan'],
+        protectedJobs: ['feature-specification', 'technical-design', 'issue-preparation', 'implementation-design-review', 'issue-retrospective', 'work-completion', 'scrum-sprint-planning', 'mvp-validation-plan', 'sprint-planning', 'customer-prospect-discovery', 'interview-preparation', 'participant-recruitment', 'process-interview-notes', 'review-customer-development', 'triage-customer-needs'],
         protectedAliases: ['product-management', 'product-spec'],
         defaultHireMode: 'job',
         lockCopy: 'Hire PaM to unlock product-management work for this request.'
@@ -58,7 +58,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'swen',
         bundleId: 'persona-swen-core',
         catalogMetadata: buildCatalogMetadata('swen', ['feature-implementation', 'code-refactoring', 'pr-iteration']),
-        protectedJobs: ['feature-implementation', 'code-refactoring', 'pr-iteration', 'mobile-app-development', 'mcp-server-creation', 'cloud-application-deployment', 'cloud-cost-optimization', 'cloud-performance-diagnosis', 'route-llm-spend-to-cloud-credits', 'set-up-cloud-cost-alerts', 'gitlabs-to-github', 'system-migration', 'cross-cloud-migration', 'data-pipeline-design', 'data-quality-monitoring', 'data-platform-architecture', 'write-dev-docs', 'database-schema-design'],
+        protectedJobs: ['feature-implementation', 'code-refactoring', 'pr-iteration', 'mobile-app-development', 'mcp-server-creation', 'cloud-application-deployment', 'cloud-cost-optimization', 'cloud-performance-diagnosis', 'route-llm-spend-to-cloud-credits', 'set-up-cloud-cost-alerts', 'gitlabs-to-github', 'system-migration', 'cross-cloud-migration', 'data-pipeline-design', 'data-quality-monitoring', 'data-platform-architecture', 'write-dev-docs', 'database-schema-design', 'create-architecture', 'project-scaffolding', 'codebase-analysis-and-ideation', 'github-org-setup', 'google-workspace-setup', 'mobile-app-rejection-response', 'mobile-app-submission', 'publish-mcp-app', 'application-replication-workflow'],
         protectedAliases: ['software-engineering', 'implementation'],
         defaultHireMode: 'job',
         lockCopy: 'Hire SWEn to unlock software-engineering delivery for this request.'
@@ -76,7 +76,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'huxley',
         bundleId: 'persona-huxley-core',
         catalogMetadata: buildCatalogMetadata('huxley', ['design-system-creation', 'user-facing-prototyping', 'ux-research-synthesis']),
-        protectedJobs: ['design-system-creation', 'user-facing-prototyping', 'website-creation', 'linkedin-carousel-from-deck', 'brand-creation', 'branding-quality-audit', 'ux-research-synthesis', 'user-journey-mapping'],
+        protectedJobs: ['design-system-creation', 'user-facing-prototyping', 'website-creation', 'brand-creation', 'branding-quality-audit', 'ux-research-synthesis', 'user-journey-mapping'],
         protectedAliases: ['ux-design', 'brand-design'],
         defaultHireMode: 'job',
         lockCopy: 'Hire hUXley to unlock design-system, UX research, and brand design work for this request.'
@@ -85,7 +85,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'gautam',
         bundleId: 'persona-gautam-core',
         catalogMetadata: buildCatalogMetadata('gautam', ['analyze-revenue-system', 'build-gtm-motion', 'ppc-campaign-management']),
-        protectedJobs: ['pricing-strategy-definition', 'marketing-strategy-definition', 'product-launch-management', 'customer-prospect-discovery', 'evangelist-content-development', 'funnel-analysis', 'growth-loop-design', 'analyze-revenue-system', 'design-gtm-system', 'build-gtm-motion', 'build-gtm-stack', 'plan-gtm-team', 'marketing-content-creation', 'ppc-campaign-management', 'paid-social-strategy', 'ad-performance-analysis', 'tracking-and-attribution-setup', 'developer-advocacy', 'seo-strategy', 'marketing-analytics-review'],
+        protectedJobs: ['pricing-strategy-definition', 'marketing-strategy-definition', 'product-launch-management', 'evangelist-content-development', 'funnel-analysis', 'growth-loop-design', 'analyze-revenue-system', 'design-gtm-system', 'build-gtm-motion', 'build-gtm-stack', 'plan-gtm-team', 'marketing-content-creation', 'ppc-campaign-management', 'paid-social-strategy', 'ad-performance-analysis', 'tracking-and-attribution-setup', 'developer-advocacy', 'seo-strategy', 'marketing-analytics-review', 'linkedin-company-page-setup', 'x-account-setup', 'social-engagement-campaign', 'thought-leadership-engagement', 'promo-video-creation', 'linkedin-carousel-from-deck'],
         protectedAliases: ['gtm', 'marketing'],
         defaultHireMode: 'job',
         lockCopy: 'Hire GauTaM to unlock go-to-market and paid media work for this request.'
@@ -94,7 +94,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'cela',
         bundleId: 'persona-cela-core',
         catalogMetadata: buildCatalogMetadata('cela', ['contract-review-analysis', 'nda-creation', 'saas-contract-package-creation']),
-        protectedJobs: ['contract-review-analysis', 'nda-creation', 'saas-contract-package-creation', 'trademark-registration-management', 'provisional-patent-application-creation', 'opensign-cloud-esign-dispatch', 'w9-creation', 'invoice-generation', 'entity-type-selection', 'state-incorporation-filing', 'business-tax-registration', 'ein-application', 'cap-table-construction', 'founder-and-equity-agreements', 'ip-assignment-agreement-creation', 'employment-structure-decision', 'business-banking-setup'],
+        protectedJobs: ['contract-review-analysis', 'nda-creation', 'saas-contract-package-creation', 'trademark-registration-management', 'provisional-patent-application-creation', 'opensign-cloud-esign-dispatch', 'w9-creation', 'entity-type-selection', 'state-incorporation-filing', 'business-tax-registration', 'ein-application', 'cap-table-construction', 'founder-and-equity-agreements', 'ip-assignment-agreement-creation', 'employment-structure-decision'],
         protectedAliases: ['legal', 'counsel'],
         defaultHireMode: 'job',
         lockCopy: 'Hire CELiA to unlock legal workflow support for this request.'
@@ -103,7 +103,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'sekhar',
         bundleId: 'persona-sekhar-core',
         catalogMetadata: buildCatalogMetadata('sekhar', ['security-review', 'ai-native-security-setup', 'security-findings-command-center']),
-        protectedJobs: ['security-review', 'ai-native-security-setup', 'security-findings-command-center', 'vulnerability-triage-and-remediation', 'production-readiness-review', 'compliance-review', 'compliance-continuous-monitoring', 'compliance-policy-authoring', 'compliance-questionnaire-response', 'compliance-requirements-detection', 'generate-audit-evidence', 'regulation-evidence-management', 'soc2-evidence-management'],
+        protectedJobs: ['security-review', 'ai-native-security-setup', 'security-findings-command-center', 'vulnerability-triage-and-remediation', 'compliance-review', 'compliance-continuous-monitoring', 'compliance-policy-authoring', 'compliance-questionnaire-response', 'compliance-requirements-detection', 'generate-audit-evidence', 'regulation-evidence-management', 'soc2-evidence-management'],
         protectedAliases: ['security', 'appsec'],
         defaultHireMode: 'job',
         lockCopy: 'Hire SEChar to unlock security setup, review, and findings-command work for this request.'
@@ -112,7 +112,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'ashley',
         bundleId: 'persona-ashley-core',
         catalogMetadata: buildCatalogMetadata('ashley', ['executive-assistant', 'weekly-operating-review', 'send-thank-you-notes']),
-        protectedJobs: ['executive-assistant', 'weekly-operating-review', 'send-thank-you-notes', 'send-newsletter', 'analyze-transcript', 'send-stakeholder-update', 'portfolio-impact-report'],
+        protectedJobs: ['executive-assistant', 'weekly-operating-review', 'send-thank-you-notes', 'send-newsletter', 'analyze-transcript', 'send-stakeholder-update'],
         protectedAliases: ['executive-assistant', 'operations-assistant'],
         defaultHireMode: 'job',
         lockCopy: 'Hire AshLey to unlock executive-assistant work for this request.'
@@ -121,7 +121,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'mandy',
         bundleId: 'persona-mandy-core',
         catalogMetadata: buildCatalogMetadata('mandy', ['fully-delegate', 'project-plan-creation', 'stakeholder-status-reporting']),
-        protectedJobs: ['fully-delegate', 'delivery-governance-review', 'project-plan-creation', 'stakeholder-status-reporting', 'experiment-tracking', 'cross-functional-dependency-management'],
+        protectedJobs: ['fully-delegate', 'delivery-governance-review', 'project-plan-creation', 'stakeholder-status-reporting', 'experiment-tracking', 'cross-functional-dependency-management', 'portfolio-impact-report'],
         protectedAliases: ['manager', 'team-lead', 'orchestrator'],
         defaultHireMode: 'job',
         lockCopy: 'Hire MANdy to unlock autonomous multi-role orchestration — MANdy plans the job sequence, runs sub-agents in parallel, coaches them through verification loops, and hands back a synthesized DRAFT for your approval.'
@@ -175,7 +175,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'casey',
         bundleId: 'persona-casey-core',
         catalogMetadata: buildCatalogMetadata('casey', ['support-case-resolution', 'support-sop-operationalization', 'support-system-operationalization', 'support-playbook-evaluation']),
-        protectedJobs: ['crm-account-health-review', 'crm-case-resolution', 'customer-health-review', 'loyalty-program-management', 'survey-campaign-management', 'support-queue-management', 'support-case-resolution', 'support-sop-operationalization', 'support-system-operationalization', 'support-playbook-evaluation'],
+        protectedJobs: ['crm-account-health-review', 'crm-case-resolution', 'customer-health-review', 'loyalty-program-management', 'survey-campaign-management', 'support-queue-management', 'support-case-resolution', 'support-sop-operationalization', 'support-system-operationalization', 'support-playbook-evaluation', 'user-survey-management'],
         protectedAliases: ['customer-success', 'customer-support', 'csm', 'support'],
         defaultHireMode: 'job',
         lockCopy: 'Hire CaSey to unlock customer success and support work for this request.'
@@ -205,7 +205,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'mona',
         bundleId: 'persona-mona-core',
         catalogMetadata: buildCatalogMetadata('mona', ['financial-analysis', 'fpa-and-forecasting', 'monthly-close-review']),
-        protectedJobs: ['financial-analysis', 'fpa-and-forecasting', 'monthly-close-review', 'tax-strategy-planning'],
+        protectedJobs: ['financial-analysis', 'fpa-and-forecasting', 'monthly-close-review', 'tax-strategy-planning', 'aws-activate-credits-application', 'google-cloud-credits-application', 'microsoft-azure-credits-application', 'invoice-generation', 'business-banking-setup'],
         protectedAliases: ['finance', 'financial-modeling', 'fpa', 'bookkeeping'],
         defaultHireMode: 'job',
         lockCopy: 'Hire MONa to unlock financial modeling, FP&A, and tax strategy work for this request.'
@@ -214,7 +214,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'sreya',
         bundleId: 'persona-sreya-core',
         catalogMetadata: buildCatalogMetadata('sreya', ['slo-design-and-implementation', 'incident-response', 'reliability-review']),
-        protectedJobs: ['slo-design-and-implementation', 'incident-response', 'reliability-review'],
+        protectedJobs: ['slo-design-and-implementation', 'incident-response', 'reliability-review', 'production-readiness-review'],
         protectedAliases: ['sre', 'reliability', 'incident-response', 'on-call'],
         defaultHireMode: 'job',
         lockCopy: 'Hire SREya to unlock SLO governance, incident response, and production reliability work for this request.'
@@ -231,7 +231,8 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
             'procurement-negotiation-prep',
             'purchase-approval-and-po-package',
             'equipment-acceptance-and-supplier-retrospective',
-            'supplier-performance-review'
+            'supplier-performance-review',
+            'rfp-response-preparation'
         ],
         protectedAliases: ['procurement', 'sourcing', 'purchasing', 'supplier-management'],
         defaultHireMode: 'job',
@@ -266,6 +267,9 @@ function getPersonaCapabilityBundle(personaKey) {
     return exports.PERSONA_CAPABILITY_BUNDLES[personaKey];
 }
 function getProtectedPersonaForJob(jobName) {
+    if (isFreeJob(jobName)) {
+        return null;
+    }
     return PROTECTED_JOB_TO_PERSONA.get(jobName) || null;
 }
 function listPersonaCapabilityBundles() {

package/dist/src/db/payment-repository.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.PaymentRepository = void 0;
+const COLLECTION_NAME = 'fraim_payments';
+class PaymentRepository {
+    constructor(client, dbName = 'fraim') {
+        this.db = client.db(dbName);
+        this.collection = this.db.collection(COLLECTION_NAME);
+    }
+    async ensureIndexes() {
+        await this.collection.createIndex({ email: 1 });
+        await this.collection.createIndex({ timestamp: -1 });
+        await this.collection.createIndex({ status: 1 });
+        await this.collection.createIndex({ stripeCustomerId: 1 });
+    }
+    async createPayment(payment) {
+        const result = await this.collection.insertOne(payment);
+        return { ...payment, _id: result.insertedId.toString() };
+    }
+    async updatePaymentStatus(stripePaymentIntentId, status, metadata) {
+        const result = await this.collection.updateOne({ stripePaymentIntentId }, {
+            $set: {
+                status,
+                ...(metadata && { metadata })
+            }
+        });
+        return result.modifiedCount > 0;
+    }
+    async getPaymentById(id) {
+        return await this.collection.findOne({ _id: id });
+    }
+    async getPaymentByStripePaymentIntent(stripePaymentIntentId) {
+        return await this.collection.findOne({ stripePaymentIntentId });
+    }
+    async getPaymentsByEmail(email) {
+        return await this.collection.find({ email }).sort({ timestamp: -1 }).toArray();
+    }
+    async listPayments(filters) {
+        const query = {};
+        if (filters.plan)
+            query.plan = filters.plan;
+        if (filters.status)
+            query.status = filters.status;
+        if (filters.startDate || filters.endDate) {
+            query.timestamp = {};
+            if (filters.startDate)
+                query.timestamp.$gte = filters.startDate;
+            if (filters.endDate)
+                query.timestamp.$lte = filters.endDate;
+        }
+        const total = await this.collection.countDocuments(query);
+        const payments = await this.collection
+            .find(query)
+            .sort({ timestamp: -1 })
+            .skip(filters.offset || 0)
+            .limit(filters.limit || 50)
+            .toArray();
+        return { payments, total };
+    }
+}
+exports.PaymentRepository = PaymentRepository;

package/dist/src/first-run/session-service.js

@@ -607,12 +607,12 @@ class FirstRunSessionService {
             persistShellPath();
             const detectedIDEs = (0, ide_detector_1.detectInstalledIDEs)();
             if (detectedIDEs.length > 0) {
-                await (0, auto_mcp_setup_1.autoConfigureMCP)(this.key, {}, detectedIDEs.map((ide) => ide.name), {});
+                await (0, auto_mcp_setup_1.autoConfigureMCP)(this.key, detectedIDEs.map((ide) => ide.name));
             }
             // Write config.json after autoConfigureMCP so detectRowsOnLoad can use its
             // existence as a signal that IDE setup completed. Writing it before would cause
             // the wizard to mark this row 'ok' on retry before IDEs are actually configured.
-            (0, setup_1.saveGlobalConfig)(this.key, 'conversational', {}, {});
+            (0, setup_1.saveGlobalConfig)(this.key, 'conversational');
             const { syncUserLevelArtifacts } = await Promise.resolve().then(() => __importStar(require('../cli/setup/user-level-sync')));
             await syncUserLevelArtifacts();
             const { installSlashCommands, installGlobalRules } = await Promise.resolve().then(() => __importStar(require('../cli/setup/ide-global-integration')));

package/dist/src/fraim/config-loader.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getRepositoryInfo = exports.getConfigValue = exports.loadFraimConfig = void 0;
+/**
+ * Backward-compatible re-export.
+ * Canonical config loader lives in src/core/config-loader.ts.
+ */
+var config_loader_1 = require("../core/config-loader");
+Object.defineProperty(exports, "loadFraimConfig", { enumerable: true, get: function () { return config_loader_1.loadFraimConfig; } });
+Object.defineProperty(exports, "getConfigValue", { enumerable: true, get: function () { return config_loader_1.getConfigValue; } });
+Object.defineProperty(exports, "getRepositoryInfo", { enumerable: true, get: function () { return config_loader_1.getRepositoryInfo; } });