fraim 2.0.203 → 2.0.204

package/dist/src/ai-hub/catalog.js

@@ -1,406 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.summarizeProject = summarizeProject;
-exports.discoverEmployeeJobs = discoverEmployeeJobs;
-exports.discoverManagerTemplates = discoverManagerTemplates;
-exports.loadJobPhases = loadJobPhases;
-exports.loadAllJobPhaseIds = loadAllJobPhaseIds;
-exports.labelForPhaseId = labelForPhaseId;
-exports.getAiHubCategories = getAiHubCategories;
-const fs_1 = __importDefault(require("fs"));
-const path_1 = __importDefault(require("path"));
-const project_fraim_paths_1 = require("../core/utils/project-fraim-paths");
-// Directories scanned for employee jobs at runtime, in lowest-to-highest
-// precedence order. Later entries win on {categoryId, jobId} collision.
-//
-// FRAIM execution normally reads only the two `fraim/` layers: the synced
-// baseline and the personalized override. The Hub can explicitly opt into the
-// source `registry/` fallback when running against the FRAIM repo before sync.
-//   - <project>/fraim/ai-employee/jobs/<category>/           - synced baseline
-//   - <project>/fraim/personalized-employee/jobs/<category>/ - taught/customized override
-// Only the personalized-employee layer is "personalized" (issue #566).
-const EMPLOYEE_JOB_LAYERS = [
-    { segments: ['ai-employee', 'jobs'], personalized: false },
-    { segments: ['personalized-employee', 'jobs'], personalized: true },
-];
-// Manager templates use the matching layer model.
-const MANAGER_JOB_LAYERS = [
-    { segments: ['ai-manager', 'jobs'], personalized: false },
-    { segments: ['personalized-employee', 'manager-jobs'], personalized: true },
-];
-const REGISTRY_EMPLOYEE_JOB_LAYERS = [
-    { base: 'project', segments: ['registry', 'jobs', 'ai-employee'], personalized: false },
-];
-const REGISTRY_MANAGER_JOB_LAYERS = [
-    { base: 'project', segments: ['registry', 'jobs', 'ai-manager'], personalized: false },
-];
-const KNOWN_LABEL_OVERRIDES = {
-    // Project conventions where a directory name should render as a recognized
-    // short form rather than its mechanical title-case spelling.
-    'go-to-market': 'GTM',
-    gtm: 'GTM',
-    'qa': 'QA',
-    rfp: 'RFP',
-    ai: 'AI',
-    // Manager-side groups whose directory names are already idiomatic and
-    // shouldn't be split on dashes by the default humanizer.
-    '1-1': '1:1',
-};
-const sectionValue = (content, heading) => {
-    const match = content.match(new RegExp(`## ${heading}\\r?\\n([\\s\\S]*?)(?:\\r?\\n## |\\r?\\n---|$)`));
-    if (!match)
-        return [];
-    return match[1]
-        .split(/\r?\n/)
-        .map((line) => line.trim())
-        .filter(Boolean)
-        .map((line) => line.replace(/^[-*]\s*/, '').trim());
-};
-const humanizeName = (raw) => {
-    const lower = raw.toLowerCase();
-    if (KNOWN_LABEL_OVERRIDES[lower])
-        return KNOWN_LABEL_OVERRIDES[lower];
-    return raw
-        .split(/[-_\s]+/)
-        .filter((part) => part.length > 0)
-        .map((part) => {
-        const partLower = part.toLowerCase();
-        if (KNOWN_LABEL_OVERRIDES[partLower])
-            return KNOWN_LABEL_OVERRIDES[partLower];
-        return `${part[0].toUpperCase()}${part.slice(1).toLowerCase()}`;
-    })
-        .join(' ');
-};
-const toPosix = (value) => value.replace(/\\/g, '/');
-function readSubdirectoryNames(dirPath) {
-    if (!fs_1.default.existsSync(dirPath))
-        return [];
-    return fs_1.default
-        .readdirSync(dirPath, { withFileTypes: true })
-        .filter((entry) => entry.isDirectory())
-        .map((entry) => entry.name)
-        .sort((a, b) => a.localeCompare(b));
-}
-function readMarkdownFileNames(dirPath) {
-    if (!fs_1.default.existsSync(dirPath))
-        return [];
-    return fs_1.default
-        .readdirSync(dirPath, { withFileTypes: true })
-        .filter((entry) => entry.isFile() && entry.name.endsWith('.md'))
-        .map((entry) => entry.name)
-        .sort((a, b) => a.localeCompare(b));
-}
-function parseJobStub(filePath, categoryId, categoryLabel, projectPath, personalized) {
-    const content = fs_1.default.readFileSync(filePath, 'utf8');
-    const fileName = path_1.default.basename(filePath, '.md');
-    const intent = sectionValue(content, 'Intent')[0] || 'No intent summary available.';
-    const outcome = sectionValue(content, 'Outcome');
-    return {
-        id: fileName,
-        title: humanizeName(fileName),
-        categoryId,
-        categoryLabel,
-        intent,
-        outcome,
-        stubPath: toPosix(path_1.default.relative(projectPath, filePath)),
-        personalized: !!personalized,
-    };
-}
-function parseManagerStub(filePath, groupId, groupLabel, projectPath) {
-    const content = fs_1.default.readFileSync(filePath, 'utf8');
-    const fileName = path_1.default.basename(filePath, '.md');
-    const intent = sectionValue(content, 'Intent')[0] || 'No intent summary available.';
-    return {
-        id: fileName,
-        title: humanizeName(fileName),
-        groupId,
-        groupLabel,
-        intent,
-        stubPath: toPosix(path_1.default.relative(projectPath, filePath)),
-    };
-}
-function summarizeProject(projectPath) {
-    if (!projectPath) {
-        return {
-            path: '',
-            exists: false,
-            hasFraim: false,
-            message: 'Choose a project path to load FRAIM jobs.',
-        };
-    }
-    if (!fs_1.default.existsSync(projectPath)) {
-        return {
-            path: projectPath,
-            exists: false,
-            hasFraim: false,
-            message: 'Project path does not exist on this machine.',
-        };
-    }
-    const fraimDir = (0, project_fraim_paths_1.getWorkspaceFraimDir)(projectPath);
-    const hasFraim = fs_1.default.existsSync(fraimDir);
-    if (!hasFraim) {
-        return {
-            path: projectPath,
-            exists: true,
-            hasFraim: false,
-            needsOnboarding: true,
-            message: 'This folder has not been set up with FRAIM yet. Onboarding will get your AI employee started.',
-        };
-    }
-    return {
-        path: projectPath,
-        exists: true,
-        hasFraim: true,
-    };
-}
-function resolveLayerRoot(projectPath, layer) {
-    if (layer.base === 'project')
-        return path_1.default.join(projectPath, ...layer.segments);
-    return path_1.default.join((0, project_fraim_paths_1.getWorkspaceFraimDir)(projectPath), ...layer.segments);
-}
-function discoverLayers(projectPath, layers) {
-    const out = [];
-    for (const layer of layers) {
-        const layerRoot = resolveLayerRoot(projectPath, layer);
-        for (const categoryName of readSubdirectoryNames(layerRoot)) {
-            out.push({
-                layerRoot,
-                categoryId: categoryName,
-                categoryDir: path_1.default.join(layerRoot, categoryName),
-                personalized: layer.personalized,
-            });
-        }
-    }
-    return out;
-}
-function discoverEmployeeJobs(projectPath, options = {}) {
-    const project = summarizeProject(projectPath);
-    if (!project.exists || (!project.hasFraim && !options.includeRegistry))
-        return [];
-    const layers = discoverLayers(projectPath, options.includeRegistry
-        ? [...REGISTRY_EMPLOYEE_JOB_LAYERS, ...EMPLOYEE_JOB_LAYERS]
-        : EMPLOYEE_JOB_LAYERS);
-    // Group by categoryId so all layers contribute to the same labelled category.
-    const jobsByKey = new Map();
-    for (const layer of layers) {
-        const categoryLabel = humanizeName(layer.categoryId);
-        for (const fileName of readMarkdownFileNames(layer.categoryDir)) {
-            const filePath = path_1.default.join(layer.categoryDir, fileName);
-            const job = parseJobStub(filePath, layer.categoryId, categoryLabel, projectPath, layer.personalized);
-            // Later layers override earlier layers on {category, jobId} collision —
-            // personalized-employee wins over the synced ai-employee baseline. The
-            // winning job carries its own layer's `personalized` flag (issue #566).
-            jobsByKey.set(`${job.categoryId}::${job.id}`, job);
-        }
-    }
-    // Stable sort: category label, then job title.
-    return [...jobsByKey.values()].sort((a, b) => {
-        if (a.categoryLabel !== b.categoryLabel)
-            return a.categoryLabel.localeCompare(b.categoryLabel);
-        return a.title.localeCompare(b.title);
-    });
-}
-function discoverManagerTemplates(projectPath, options = {}) {
-    const project = summarizeProject(projectPath);
-    if (!project.exists || (!project.hasFraim && !options.includeRegistry))
-        return [];
-    const layers = discoverLayers(projectPath, options.includeRegistry
-        ? [...REGISTRY_MANAGER_JOB_LAYERS, ...MANAGER_JOB_LAYERS]
-        : MANAGER_JOB_LAYERS);
-    const templatesByKey = new Map();
-    for (const layer of layers) {
-        const groupLabel = humanizeName(layer.categoryId);
-        for (const fileName of readMarkdownFileNames(layer.categoryDir)) {
-            const filePath = path_1.default.join(layer.categoryDir, fileName);
-            const template = parseManagerStub(filePath, layer.categoryId, groupLabel, projectPath);
-            templatesByKey.set(`${template.groupId}::${template.id}`, template);
-        }
-    }
-    return [...templatesByKey.values()].sort((a, b) => {
-        if (a.groupLabel !== b.groupLabel)
-            return a.groupLabel.localeCompare(b.groupLabel);
-        return a.title.localeCompare(b.title);
-    });
-}
-// Issue #347 — load the phase list for a job, in declaration order, with
-// only the phases reachable on the active run's path. The Hub UI uses
-// this to render the pizza tracker.
-// Namespace prefixes the friendly-label formatter strips. Order matters
-// only for tie-breaking; we always pick the longest match.
-const KNOWN_PHASE_PREFIXES = [
-    'implement-',
-    'address-',
-    'spec-',
-    'design-',
-    'context-',
-];
-function friendlyPhaseLabel(phaseId, override) {
-    if (override)
-        return override;
-    let body = phaseId;
-    for (const prefix of KNOWN_PHASE_PREFIXES) {
-        if (body.startsWith(prefix) && body.length > prefix.length) {
-            body = body.slice(prefix.length);
-            break;
-        }
-    }
-    const spaced = body.replace(/-/g, ' ').trim();
-    if (spaced.length === 0)
-        return phaseId;
-    // Spec R1.2: first letter uppercase, rest lowercase.
-    return spaced[0].toUpperCase() + spaced.slice(1).toLowerCase();
-}
-function readJobFrontmatter(filePath) {
-    const raw = fs_1.default.readFileSync(filePath, 'utf8');
-    const match = raw.match(/^---\r?\n([\s\S]*?)\r?\n---/);
-    if (!match)
-        return null;
-    const block = match[1].trim();
-    if (!block.startsWith('{'))
-        return null;
-    try {
-        return JSON.parse(block);
-    }
-    catch {
-        return null;
-    }
-}
-function findJobStubPath(projectPath, jobId) {
-    // Walk both employee and manager layer sets. The analytics surfaces can
-    // inspect any FRAIM job run, including manager-side jobs such as
-    // sleep-on-learnings.
-    const layers = discoverLayers(projectPath, [
-        ...EMPLOYEE_JOB_LAYERS,
-        ...MANAGER_JOB_LAYERS,
-    ]);
-    let resolved = null;
-    for (const layer of layers) {
-        const candidate = path_1.default.join(layer.categoryDir, `${jobId}.md`);
-        if (fs_1.default.existsSync(candidate)) {
-            resolved = candidate; // do not break — later layers override
-        }
-    }
-    if (resolved)
-        return resolved;
-    // Fallback: look in the hub's own built-in stubs. This covers first-run
-    // jobs (e.g. project-onboarding) that run against a project that hasn't
-    // been synced yet, so no local stubs exist under the project directory.
-    // In the compiled dist, __dirname is dist/ai-hub/ so this resolves to
-    // dist/registry/stubs/jobs/.
-    const hubStubsDir = path_1.default.resolve(__dirname, '..', 'registry', 'stubs', 'jobs');
-    for (const hostType of ['ai-employee', 'ai-manager']) {
-        const hostDir = path_1.default.join(hubStubsDir, hostType);
-        for (const category of readSubdirectoryNames(hostDir)) {
-            const candidate = path_1.default.join(hostDir, category, `${jobId}.md`);
-            if (fs_1.default.existsSync(candidate))
-                return candidate;
-        }
-    }
-    return null;
-}
-// Resolve a phase's `onSuccess` edge to the next phase id given the run's
-// discriminant. Returns null when the edge is absent or terminal.
-function nextPhase(edge, discriminant) {
-    if (edge == null)
-        return null;
-    if (typeof edge === 'string')
-        return edge;
-    if (typeof edge === 'object') {
-        if (typeof edge[discriminant] === 'string')
-            return edge[discriminant];
-        if (typeof edge.default === 'string')
-            return edge.default;
-    }
-    return null;
-}
-// Parse the ordered phase list from a job stub's ## Steps section.
-// Real FRAIM job stubs use Markdown steps rather than JSON frontmatter;
-// this is the fallback parser that makes the pizza tracker work for them.
-function loadJobPhasesFromSteps(filePath) {
-    const raw = fs_1.default.readFileSync(filePath, 'utf8');
-    const stepsMatch = raw.match(/## Steps\r?\n([\s\S]*?)(?:\r?\n## |\r?\n---|$)/);
-    if (!stepsMatch)
-        return [];
-    const phases = [];
-    for (const line of stepsMatch[1].split(/\r?\n/)) {
-        const m = line.match(/`([a-z][a-z0-9-]*)`/);
-        if (m)
-            phases.push({ id: m[1], label: friendlyPhaseLabel(m[1]) });
-    }
-    return phases;
-}
-function loadJobPhases(jobId, projectPath, discriminant = 'feature') {
-    const stubPath = findJobStubPath(projectPath, jobId);
-    if (!stubPath)
-        return [];
-    const fm = readJobFrontmatter(stubPath);
-    if (!fm || !fm.initialPhase || !fm.phases)
-        return loadJobPhasesFromSteps(stubPath);
-    const visited = new Set();
-    const ordered = [];
-    let cursor = fm.initialPhase;
-    // Walk onSuccess edges to compute the path; guard against cycles by
-    // tracking visited phase ids. A phase can only appear once in the path.
-    while (cursor && !visited.has(cursor)) {
-        visited.add(cursor);
-        ordered.push(cursor);
-        const phaseDef = fm.phases[cursor];
-        if (!phaseDef)
-            break;
-        cursor = nextPhase(phaseDef.onSuccess, discriminant);
-    }
-    const labels = fm.phaseLabels || {};
-    return ordered.map((id) => ({ id, label: friendlyPhaseLabel(id, labels[id]) }));
-}
-// Issue #347 — return the set of ALL phase ids declared in the job's
-// frontmatter (not just the onSuccess-reachable path). Used by
-// deriveStages to vet whether a visited phase id genuinely belongs to
-// this job before appending it to the tracker, so cross-job pollution
-// (agent calling seekMentoring for a different job mid-run) cannot
-// surface stages from elsewhere.
-function loadAllJobPhaseIds(jobId, projectPath) {
-    const stubPath = findJobStubPath(projectPath, jobId);
-    if (!stubPath)
-        return new Set();
-    const fm = readJobFrontmatter(stubPath);
-    if (!fm || !fm.phases) {
-        const phases = loadJobPhasesFromSteps(stubPath);
-        return new Set(phases.map((p) => p.id));
-    }
-    return new Set(Object.keys(fm.phases));
-}
-// Issue #347 — public exposure of the friendly-label rule so callers
-// outside catalog.ts can render labels for phases that exist in the
-// frontmatter but weren't on the reachable path returned by loadJobPhases.
-function labelForPhaseId(phaseId, jobId, projectPath) {
-    const stubPath = findJobStubPath(projectPath, jobId);
-    if (stubPath) {
-        const fm = readJobFrontmatter(stubPath);
-        if (fm?.phaseLabels?.[phaseId])
-            return fm.phaseLabels[phaseId];
-    }
-    return friendlyPhaseLabel(phaseId);
-}
-function getAiHubCategories(projectPath, options = {}) {
-    const project = summarizeProject(projectPath);
-    if (!project.exists || (!project.hasFraim && !options.includeRegistry))
-        return [];
-    // A category is any directory found at any layer; deduplicate by id.
-    const layers = discoverLayers(projectPath, options.includeRegistry
-        ? [...REGISTRY_EMPLOYEE_JOB_LAYERS, ...EMPLOYEE_JOB_LAYERS]
-        : EMPLOYEE_JOB_LAYERS);
-    const seen = new Map();
-    for (const layer of layers) {
-        if (!seen.has(layer.categoryId)) {
-            seen.set(layer.categoryId, {
-                id: layer.categoryId,
-                label: humanizeName(layer.categoryId),
-                description: `${humanizeName(layer.categoryId)} jobs discovered in this project.`,
-            });
-        }
-    }
-    return [...seen.values()].sort((a, b) => a.label.localeCompare(b.label));
-}

package/dist/src/ai-hub/cert-store.js

@@ -1,70 +0,0 @@
-"use strict";
-var __importDefault = (this && this.__importDefault) || function (mod) {
-    return (mod && mod.__esModule) ? mod : { "default": mod };
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.loadOrCreateCert = loadOrCreateCert;
-exports.trustCert = trustCert;
-const fs_1 = __importDefault(require("fs"));
-const path_1 = __importDefault(require("path"));
-const os_1 = __importDefault(require("os"));
-const child_process_1 = require("child_process");
-function certDir() {
-    const base = process.env.APPDATA ||
-        (process.platform === 'darwin'
-            ? path_1.default.join(os_1.default.homedir(), 'Library', 'Application Support')
-            : path_1.default.join(os_1.default.homedir(), '.config'));
-    return path_1.default.join(base, 'FRAIM', 'certs');
-}
-function certPaths() {
-    const dir = certDir();
-    return { keyPath: path_1.default.join(dir, 'localhost.key'), certPath: path_1.default.join(dir, 'localhost.crt') };
-}
-async function loadOrCreateCert() {
-    const { keyPath, certPath } = certPaths();
-    if (fs_1.default.existsSync(keyPath) && fs_1.default.existsSync(certPath)) {
-        return { key: fs_1.default.readFileSync(keyPath, 'utf8'), cert: fs_1.default.readFileSync(certPath, 'utf8') };
-    }
-    // eslint-disable-next-line @typescript-eslint/no-require-imports
-    const selfsigned = require('selfsigned');
-    const pem = await selfsigned.generate([{ name: 'commonName', value: 'localhost' }], {
-        keySize: 2048,
-        days: 3650,
-        algorithm: 'sha256',
-        extensions: [
-            { name: 'subjectAltName', altNames: [{ type: 2, value: 'localhost' }, { type: 7, ip: '127.0.0.1' }] },
-            { name: 'keyUsage', keyCertSign: true, digitalSignature: true, keyEncipherment: true },
-            { name: 'extKeyUsage', serverAuth: true },
-        ],
-    });
-    fs_1.default.mkdirSync(path_1.default.dirname(keyPath), { recursive: true });
-    fs_1.default.writeFileSync(keyPath, pem.private, { mode: 0o600 });
-    fs_1.default.writeFileSync(certPath, pem.cert, { mode: 0o644 });
-    // NOTE: we deliberately do NOT install this into the OS trusted-root store here.
-    // Desktop Word/PowerPoint reach the pane over plain HTTP loopback and need no cert.
-    // Trusting a root CA triggers a Windows security popup on every add/remove and is
-    // invasive, so it is reserved for explicit Word-Online opt-in via trustCert() below.
-    return { key: pem.private, cert: pem.cert };
-}
-/**
- * Installs the cert as a trusted root CA in the user's OS certificate store.
- * ONLY call this for explicit Word-Online support — it prompts a Windows security
- * dialog. It is idempotent: it no-ops if a matching localhost cert is already
- * trusted, so it never produces the delete/add popup churn.
- *   Windows: certutil -addstore -user Root  (skipped if already present)
- *   macOS:   security add-trusted-cert -r trustRoot -k login.keychain
- */
-function trustCert(certPath) {
-    if (process.platform === 'win32') {
-        // Skip if a localhost cert is already trusted — avoids the confirmation popup.
-        const check = (0, child_process_1.spawnSync)('certutil', ['-user', '-store', 'Root', 'localhost'], { encoding: 'utf8' });
-        if (check.status === 0 && /localhost/i.test(check.stdout))
-            return;
-        (0, child_process_1.spawnSync)('certutil', ['-addstore', '-user', 'Root', certPath], { stdio: 'ignore' });
-        return;
-    }
-    if (process.platform === 'darwin') {
-        const keychain = path_1.default.join(os_1.default.homedir(), 'Library', 'Keychains', 'login.keychain-db');
-        (0, child_process_1.spawnSync)('security', ['add-trusted-cert', '-r', 'trustRoot', '-k', keychain, certPath], { stdio: 'ignore' });
-    }
-}