fraim 2.0.217 → 2.0.219

package/dist/src/cli/commands/add-ide.js

@@ -44,7 +44,6 @@ const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const ide_detector_1 = require("../setup/ide-detector");
 const mcp_config_generator_1 = require("../setup/mcp-config-generator");
-const codex_local_config_1 = require("../setup/codex-local-config");
 const claude_code_telemetry_1 = require("../setup/claude-code-telemetry");
 const script_sync_utils_1 = require("../utils/script-sync-utils");
 const mcp_server_registry_1 = require("../mcp/mcp-server-registry");
@@ -254,12 +253,6 @@ const configureIDEMCP = async (ide, fraimKey, tokens, providerConfigs) => {
         });
     }
     console.log(chalk_1.default.green(`✅ Updated ${configPath}`));
-    // Handle IDE-specific local config (e.g., Codex needs project-level config)
-    if (ide.configType === 'codex') {
-        const localResult = (0, codex_local_config_1.ensureCodexLocalConfig)(process.cwd());
-        const status = localResult.created ? 'Created' : localResult.updated ? 'Updated' : 'Verified';
-        console.log(chalk_1.default.green(`  ✅ ${status} local ${ide.name} config: ${localResult.path}`));
-    }
     // Enable token telemetry for Claude Code via project-level settings
     if (ide.configType === 'claude-code') {
         (0, claude_code_telemetry_1.ensureClaudeCodeTelemetryEnv)();

package/dist/src/cli/commands/init-project.js

@@ -12,7 +12,6 @@ const chalk_1 = __importDefault(require("chalk"));
 const sync_1 = require("./sync");
 const platform_detection_1 = require("../utils/platform-detection");
 const ide_detector_1 = require("../setup/ide-detector");
-const codex_local_config_1 = require("../setup/codex-local-config");
 const claude_code_telemetry_1 = require("../setup/claude-code-telemetry");
 const fraim_gitignore_1 = require("../utils/fraim-gitignore");
 const agent_adapters_1 = require("../utils/agent-adapters");
@@ -173,7 +172,7 @@ const runInitProject = async (options = {}) => {
         console.log(chalk_1.default.green('Removed legacy FRAIM sync block from .gitignore'));
     }
     if (!process.env.FRAIM_SKIP_SYNC) {
-        await (0, sync_1.runSync)({ projectRoot, failHard });
+        await (0, sync_1.runSync)({ projectRoot, failHard, projectAdapters: options.projectAdapters });
         result.syncPerformed = true;
     }
     else {
@@ -187,24 +186,21 @@ const runInitProject = async (options = {}) => {
     if (detectedConfigTypes.length > 0) {
         (0, user_config_1.writeUserFraimConfig)({ installedIdes: detectedConfigTypes });
     }
-    const codexAvailable = detectedIdes.some((ide) => ide.configType === 'codex');
-    if (codexAvailable) {
-        const codexLocalResult = (0, codex_local_config_1.ensureCodexLocalConfig)(projectRoot);
-        const status = codexLocalResult.created ? 'Created' : codexLocalResult.updated ? 'Updated' : 'Verified';
-        console.log(chalk_1.default.green(`${status} project Codex config at ${codexLocalResult.path}`));
-    }
     // Enable token telemetry for Claude Code (user-level, applies to all projects)
     const claudeCodeAvailable = detectedIdes.some((ide) => ide.configType === 'claude-code');
     if (claudeCodeAvailable) {
         (0, claude_code_telemetry_1.ensureClaudeCodeTelemetryEnv)();
     }
-    const adapterUpdates = (0, agent_adapters_1.ensureAgentAdapterFiles)(projectRoot, detectedConfigTypes.length > 0 ? detectedConfigTypes : null);
-    if (adapterUpdates.length > 0) {
-        console.log(chalk_1.default.green(`Updated FRAIM agent adapter files: ${adapterUpdates.join(', ')}`));
+    if (options.projectAdapters) {
+        const adapterUpdates = (0, agent_adapters_1.ensureAgentAdapterFiles)(projectRoot, detectedConfigTypes.length > 0 ? detectedConfigTypes : null);
+        if (adapterUpdates.length > 0) {
+            console.log(chalk_1.default.green(`Updated FRAIM agent adapter files: ${adapterUpdates.join(', ')}`));
+        }
     }
     (0, project_bootstrap_1.printInitProjectSummary)(result);
 };
 exports.runInitProject = runInitProject;
 exports.initProjectCommand = new commander_1.Command('init-project')
     .description('Initialize FRAIM in the current project (requires global setup)')
-    .action(() => (0, exports.runInitProject)());
+    .option('--project-adapters', 'Write legacy project-local FRAIM agent adapter files')
+    .action((options) => (0, exports.runInitProject)({ projectAdapters: Boolean(options.projectAdapters) }));

package/dist/src/cli/commands/org.js

@@ -12,8 +12,8 @@ exports.orgCommand = new commander_1.Command('org')
     .description('Manage your shared organization context');
 exports.orgCommand
     .command('publish')
-    .description('Publish org context/rules/learnings files to the configured org backend')
-    .argument('<files...>', 'Local files to publish: org_context.md, org_rules.md, and/or org-*.md learnings')
+    .description('Publish org context/rules/learnings/brand files to the configured org backend')
+    .argument('<files...>', 'Local files to publish: org_context.md, org_rules.md, org_brand.json, and/or org-*.md learnings')
     .action(async (files) => {
     try {
         const artifacts = files.map((f) => {

package/dist/src/cli/commands/sync.js

@@ -288,11 +288,13 @@ const runSync = async (options) => {
             removeLegacyVersionFromConfig(fraimDir);
             writeSyncMetadata('local', localUrl);
             refreshLocalIgnoreConfig();
-            const allowedTypes = resolveAllowedConfigTypes();
-            await cleanupStaleAdapterFiles(projectRoot, allowedTypes);
-            const adapterUpdates = (0, agent_adapters_1.ensureAgentAdapterFiles)(projectRoot, allowedTypes);
-            if (adapterUpdates.length > 0) {
-                console.log(chalk_1.default.green(`Updated FRAIM agent adapter files: ${adapterUpdates.join(', ')}`));
+            if (options.projectAdapters) {
+                const allowedTypes = resolveAllowedConfigTypes();
+                await cleanupStaleAdapterFiles(projectRoot, allowedTypes);
+                const adapterUpdates = (0, agent_adapters_1.ensureAgentAdapterFiles)(projectRoot, allowedTypes);
+                if (adapterUpdates.length > 0) {
+                    console.log(chalk_1.default.green(`Updated FRAIM agent adapter files: ${adapterUpdates.join(', ')}`));
+                }
             }
             await refreshOrgCache(localUrl, 'local-dev');
             await refreshManagerCache(localUrl, 'local-dev');
@@ -335,11 +337,13 @@ const runSync = async (options) => {
     removeLegacyVersionFromConfig(fraimDir);
     writeSyncMetadata('remote', config.remoteUrl || process.env.FRAIM_REMOTE_URL || 'https://fraim.wellnessatwork.me');
     refreshLocalIgnoreConfig();
-    const allowedTypes = resolveAllowedConfigTypes();
-    await cleanupStaleAdapterFiles(projectRoot, allowedTypes);
-    const adapterUpdates = (0, agent_adapters_1.ensureAgentAdapterFiles)(projectRoot, allowedTypes);
-    if (adapterUpdates.length > 0) {
-        console.log(chalk_1.default.green(`Updated FRAIM agent adapter files: ${adapterUpdates.join(', ')}`));
+    if (options.projectAdapters) {
+        const allowedTypes = resolveAllowedConfigTypes();
+        await cleanupStaleAdapterFiles(projectRoot, allowedTypes);
+        const adapterUpdates = (0, agent_adapters_1.ensureAgentAdapterFiles)(projectRoot, allowedTypes);
+        if (adapterUpdates.length > 0) {
+            console.log(chalk_1.default.green(`Updated FRAIM agent adapter files: ${adapterUpdates.join(', ')}`));
+        }
     }
     await refreshOrgCache(config.remoteUrl || process.env.FRAIM_REMOTE_URL || 'https://fraim.wellnessatwork.me', apiKey);
     await refreshManagerCache(config.remoteUrl || process.env.FRAIM_REMOTE_URL || 'https://fraim.wellnessatwork.me', apiKey);
@@ -351,4 +355,5 @@ exports.syncCommand = new commander_1.Command('sync')
     .option('--skip-updates', 'Skip checking for CLI updates (legacy)')
     .option('--local', 'Sync from local development server (port derived from git branch)')
     .option('--global', 'Sync user-level FRAIM content (~/.fraim/) instead of project')
+    .option('--project-adapters', 'Write legacy project-local FRAIM agent adapter files')
     .action(exports.runSync);

package/dist/src/cli/setup/auto-mcp-setup.js

@@ -43,7 +43,6 @@ const chalk_1 = __importDefault(require("chalk"));
 const prompts_1 = __importDefault(require("prompts"));
 const ide_detector_1 = require("./ide-detector");
 const mcp_config_generator_1 = require("./mcp-config-generator");
-const codex_local_config_1 = require("./codex-local-config");
 const promptForIDESelection = async (detectedIDEs) => {
     if (process.env.FRAIM_NON_INTERACTIVE) {
         console.log(chalk_1.default.yellow(`\nℹ️  Non-interactive mode: configuring all detected IDEs (${detectedIDEs.length})`));
@@ -223,11 +222,6 @@ const configureIDEMCP = async (ide, fraimKey) => {
         });
     }
     console.log(chalk_1.default.green(`✅ Updated ${configPath}`));
-    if (ide.configType === 'codex') {
-        const localResult = (0, codex_local_config_1.ensureCodexLocalConfig)(process.cwd());
-        const status = localResult.created ? 'Created' : localResult.updated ? 'Updated' : 'Verified';
-        console.log(chalk_1.default.green(`  ✅ ${status} local Codex config: ${localResult.path}`));
-    }
 };
 const autoConfigureMCP = async (fraimKey, selectedIDEs) => {
     const detectedIDEs = (0, ide_detector_1.detectInstalledIDEs)();

package/dist/src/cli/setup/codex-local-config.js

@@ -4,34 +4,12 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
 };
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ensureCodexLocalConfig = void 0;
-const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
-const mcp_config_generator_1 = require("./mcp-config-generator");
-const escapeTomlString = (value) => value.replace(/\\/g, '\\\\').replace(/"/g, '\\"');
-const buildFraimCwdBlock = (projectRoot) => `
-[mcp_servers.fraim]
-cwd = "${escapeTomlString(projectRoot)}"
-`;
 const ensureCodexLocalConfig = (projectRoot) => {
-    const codexDir = path_1.default.join(projectRoot, '.codex');
-    const codexConfigPath = path_1.default.join(codexDir, 'config.toml');
-    if (!fs_1.default.existsSync(codexDir)) {
-        fs_1.default.mkdirSync(codexDir, { recursive: true });
-    }
-    const hadExistingFile = fs_1.default.existsSync(codexConfigPath);
-    const existingContent = hadExistingFile ? fs_1.default.readFileSync(codexConfigPath, 'utf8') : '';
-    const generatedContent = buildFraimCwdBlock(projectRoot);
-    const mergeResult = (0, mcp_config_generator_1.mergeTomlMCPServers)(existingContent, generatedContent, ['fraim']);
-    const normalizedExisting = existingContent.replace(/\r\n/g, '\n');
-    const normalizedMerged = mergeResult.content.replace(/\r\n/g, '\n');
-    const shouldWrite = !hadExistingFile || normalizedExisting !== normalizedMerged;
-    if (shouldWrite) {
-        fs_1.default.writeFileSync(codexConfigPath, mergeResult.content);
-    }
-    return {
-        path: codexConfigPath,
-        created: !hadExistingFile,
-        updated: shouldWrite && hadExistingFile
-    };
+    const codexConfigPath = path_1.default.join(projectRoot, '.codex', 'config.toml');
+    // Codex resolves the active workspace from its process cwd. FRAIM's Codex
+    // MCP server belongs in machine-level config; project-local partial TOML can
+    // shadow a valid profile and break configured Hub launches.
+    return { path: codexConfigPath, created: false, updated: false };
 };
 exports.ensureCodexLocalConfig = ensureCodexLocalConfig;

package/dist/src/cli/setup/ide-invocation-surfaces.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.FRAIM_INVOCATION_BODY = exports.FRAIM_DEFERRED_TOOL_PRELOAD = exports.CURSOR_MDC_FRONTMATTER = exports.FRAIM_LAUNCH_PHRASE = void 0;
+exports.CODEX_SKILL_FRONTMATTER = exports.FRAIM_INVOCATION_BODY = exports.FRAIM_DEFERRED_TOOL_PRELOAD = exports.CURSOR_MDC_FRONTMATTER = exports.FRAIM_LAUNCH_PHRASE = void 0;
 exports.buildFraimInvocationBody = buildFraimInvocationBody;
 exports.buildClaudeSkillContent = buildClaudeSkillContent;
 exports.buildClaudeCommandShimContent = buildClaudeCommandShimContent;
@@ -98,8 +98,13 @@ function buildCursorMentionRuleContent() {
 ${buildFraimInvocationBody('generic-tool-discovery')}
 `;
 }
+exports.CODEX_SKILL_FRONTMATTER = `---
+name: fraim
+description: Discover and execute FRAIM jobs and skills from Codex.
+---`;
 function buildCodexSkillContent() {
-    return `# FRAIM
+    return `${exports.CODEX_SKILL_FRONTMATTER}
+# FRAIM
 
 ${buildFraimInvocationBody('codex-tool-search')}`;
 }

package/dist/src/cli/utils/manager-pack-sync.js

@@ -24,13 +24,14 @@ const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const project_fraim_paths_1 = require("../../core/utils/project-fraim-paths");
 const manager_pack_1 = require("../../core/manager-pack");
+const capability_pack_1 = require("../../core/capability-pack");
 const git_org_sync_1 = require("./git-org-sync");
 const local_folder_sync_1 = require("./local-folder-sync");
 const user_config_1 = require("./user-config");
 exports.MANAGER_CACHE_DIRNAME = 'manager';
 exports.MANAGER_SYNC_METADATA_FILE = '.manager-sync-metadata.json';
 exports.MANAGER_CACHE_MANAGED_HEADER = '<!-- FRAIM_MANAGER_SYNC_MANAGED_CONTENT -->';
-const MANAGER_PACK_DIRS = ['context', 'rules', 'learnings'];
+const MANAGER_PACK_DIRS = ['context', 'rules', 'learnings', 'jobs', 'skills', 'templates', 'scripts'];
 function getManagerCacheDir() {
     return path_1.default.join((0, project_fraim_paths_1.getUserFraimDirPath)(), exports.MANAGER_CACHE_DIRNAME);
 }
@@ -72,20 +73,23 @@ function decorateManagedManagerFile(content, backend) {
     ].join('\n');
     return `${marker}\n${normalized}`;
 }
+function collectGitPackFilesRecursive(dir, relBase, files) {
+    if (!fs_1.default.existsSync(dir))
+        return;
+    for (const entry of fs_1.default.readdirSync(dir, { withFileTypes: true })) {
+        const rel = `${relBase}/${entry.name}`;
+        if (entry.isDirectory()) {
+            collectGitPackFilesRecursive(path_1.default.join(dir, entry.name), rel, files);
+        }
+        else if (entry.isFile() && (0, manager_pack_1.isManagerPackRelativePath)(rel)) {
+            files.push({ relativePath: rel, content: fs_1.default.readFileSync(path_1.default.join(dir, entry.name), 'utf8') });
+        }
+    }
+}
 function collectGitPackFiles(snapshotDir) {
     const files = [];
     for (const dirName of MANAGER_PACK_DIRS) {
-        const dirPath = path_1.default.join(snapshotDir, dirName);
-        if (!fs_1.default.existsSync(dirPath))
-            continue;
-        for (const entry of fs_1.default.readdirSync(dirPath, { withFileTypes: true })) {
-            if (!entry.isFile() || !entry.name.endsWith('.md'))
-                continue;
-            files.push({
-                relativePath: `${dirName}/${entry.name}`,
-                content: fs_1.default.readFileSync(path_1.default.join(dirPath, entry.name), 'utf8')
-            });
-        }
+        collectGitPackFilesRecursive(path_1.default.join(snapshotDir, dirName), dirName, files);
     }
     return files;
 }
@@ -110,9 +114,16 @@ function materializeCache(files, metadata) {
     for (const file of files) {
         if (!(0, manager_pack_1.isManagerPackRelativePath)(file.relativePath))
             continue;
+        // Scripts require a security-review gate (Phase 3). Skip in Phase 1.
+        if ((0, capability_pack_1.isCapabilityPackPath)(file.relativePath) && file.relativePath.startsWith('scripts/'))
+            continue;
         const destination = path_1.default.join(stagingDir, file.relativePath);
         fs_1.default.mkdirSync(path_1.default.dirname(destination), { recursive: true });
-        fs_1.default.writeFileSync(destination, decorateManagedManagerFile(file.content, metadata.backend));
+        // Only markdown gets the managed-content header; scripts/JSON ride verbatim.
+        const content = (0, capability_pack_1.shouldDecorateAsMarkdown)(file.relativePath)
+            ? decorateManagedManagerFile(file.content, metadata.backend)
+            : file.content;
+        fs_1.default.writeFileSync(destination, content);
     }
     fs_1.default.writeFileSync(path_1.default.join(stagingDir, exports.MANAGER_SYNC_METADATA_FILE), JSON.stringify(metadata, null, 2));
     fs_1.default.rmSync(cacheDir, { recursive: true, force: true });

package/dist/src/cli/utils/manager-publish.js

@@ -22,8 +22,10 @@ function managerPackRelativePathFor(filePath) {
     const relativePath = (0, manager_pack_1.managerPackRelativePathForFileName)(filePath);
     if (relativePath)
         return relativePath;
+    // Capability files (jobs/skills/rules/templates/scripts) carry their pack-relative
+    // path verbatim — the caller supplies the full relative path, not just a basename.
     const base = path_1.default.basename(filePath);
-    throw new Error(`Cannot infer manager-pack location for '${base}' (expected manager_context.md, manager_rules.md, or a personal learning file)`);
+    throw new Error(`Cannot infer manager-pack location for '${base}' (expected manager_context.md, manager_rules.md, a personal learning file, or a full capability path like jobs/<cat>/<name>.md)`);
 }
 function gitCompareUrl(gitUrl, branch) {
     const httpUrl = gitUrl.replace(/\.git$/, '').replace(/^git@([^:]+):/, 'https://$1/');

package/dist/src/cli/utils/org-pack-sync.js

@@ -3,9 +3,9 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ORG_CACHE_MANAGED_HEADER = exports.ORG_SYNC_METADATA_FILE = exports.ORG_CACHE_DIRNAME = void 0;
+exports.ORG_CACHE_MANAGED_HEADER = exports.ORG_SYNC_METADATA_FILE = exports.ORG_CACHE_DIRNAME = exports.shouldDecorateAsMarkdown = void 0;
 exports.isSafePackPath = isSafePackPath;
-exports.shouldDecorateAsMarkdown = shouldDecorateAsMarkdown;
+exports.isSafeOrgCapabilityPackPath = isSafeOrgCapabilityPackPath;
 exports.getOrgCacheDir = getOrgCacheDir;
 exports.readOrgCacheMetadata = readOrgCacheMetadata;
 exports.getOrgCacheAgeHours = getOrgCacheAgeHours;
@@ -29,11 +29,14 @@ const project_fraim_paths_1 = require("../../core/utils/project-fraim-paths");
 const user_config_1 = require("./user-config");
 const git_org_sync_1 = require("./git-org-sync");
 const local_folder_sync_1 = require("./local-folder-sync");
+const capability_pack_1 = require("../../core/capability-pack");
+var capability_pack_2 = require("../../core/capability-pack");
+Object.defineProperty(exports, "shouldDecorateAsMarkdown", { enumerable: true, get: function () { return capability_pack_2.shouldDecorateAsMarkdown; } });
 exports.ORG_CACHE_DIRNAME = 'org';
 exports.ORG_SYNC_METADATA_FILE = '.org-sync-metadata.json';
 exports.ORG_CACHE_MANAGED_HEADER = '<!-- FRAIM_ORG_SYNC_MANAGED_CONTENT -->';
 /** Subdirectories of the org pack that sync into the cache (spec R7.1). */
-const ORG_PACK_DIRS = ['context', 'rules', 'learnings'];
+const ORG_PACK_DIRS = ['context', 'rules', 'learnings', 'jobs', 'skills', 'templates'];
 /**
  * Pack files must stay inside the three org pack directories. Applied to
  * every relativePath before it touches the filesystem, so a compromised
@@ -48,19 +51,24 @@ const SAFE_PACK_RELATIVE_PATH = /^(context|rules|learnings)\/[\w.-]+\.md$/;
 const ORG_BRAND_PACK_PATH = 'context/org_brand.json';
 /**
  * True when a pack-relative path is safe to materialize: a markdown file inside
- * one of the three org pack dirs, or the org brand descriptor. A single guard
- * shared by the git and cloud paths.
+ * one of the three org pack dirs, the org brand descriptor, or a capability
+ * pack path (issue #869 Phase 2). Scripts require a Phase-3 security gate and
+ * are blocked here.
  */
 function isSafePackPath(relativePath) {
     return SAFE_PACK_RELATIVE_PATH.test(relativePath) || relativePath === ORG_BRAND_PACK_PATH;
 }
 /**
- * Managed-content decoration prepends a markdown "synced from your org" header.
- * It must only touch markdown — prepending it to org_brand.json would corrupt
- * the JSON (#744).
+ * Issue #869 Phase 2: true when a path is safe to materialize as an org
+ * capability overlay (jobs/skills/rules-nested/templates — no scripts until Phase 3).
  */
-function shouldDecorateAsMarkdown(relativePath) {
-    return relativePath.toLowerCase().endsWith('.md');
+function isSafeOrgCapabilityPackPath(relativePath) {
+    if (!(0, capability_pack_1.isCapabilityPackPath)(relativePath))
+        return false;
+    // Scripts require the Phase-3 triple security gate; block at materialization.
+    if ((0, capability_pack_1.isScriptPath)(relativePath))
+        return false;
+    return true;
 }
 function getOrgCacheDir() {
     return path_1.default.join((0, project_fraim_paths_1.getUserFraimDirPath)(), exports.ORG_CACHE_DIRNAME);
@@ -103,22 +111,23 @@ function decorateManagedOrgFile(content, backend) {
     ].join('\n');
     return `${marker}\n${normalized}`;
 }
+function collectGitPackFilesRecursive(dir, relBase, files) {
+    if (!fs_1.default.existsSync(dir))
+        return;
+    for (const entry of fs_1.default.readdirSync(dir, { withFileTypes: true })) {
+        const rel = `${relBase}/${entry.name}`;
+        if (entry.isDirectory()) {
+            collectGitPackFilesRecursive(path_1.default.join(dir, entry.name), rel, files);
+        }
+        else if (entry.isFile() && (isSafePackPath(rel) || isSafeOrgCapabilityPackPath(rel))) {
+            files.push({ relativePath: rel, content: fs_1.default.readFileSync(path_1.default.join(dir, entry.name), 'utf8') });
+        }
+    }
+}
 function collectGitPackFiles(snapshotDir) {
     const files = [];
     for (const dirName of ORG_PACK_DIRS) {
-        const dirPath = path_1.default.join(snapshotDir, dirName);
-        if (!fs_1.default.existsSync(dirPath))
-            continue;
-        for (const entry of fs_1.default.readdirSync(dirPath, { withFileTypes: true })) {
-            const relativePath = `${dirName}/${entry.name}`;
-            // Markdown in any pack dir, plus the org brand descriptor (#744).
-            if (!entry.isFile() || !isSafePackPath(relativePath))
-                continue;
-            files.push({
-                relativePath,
-                content: fs_1.default.readFileSync(path_1.default.join(dirPath, entry.name), 'utf8')
-            });
-        }
+        collectGitPackFilesRecursive(path_1.default.join(snapshotDir, dirName), dirName, files);
     }
     return files;
 }
@@ -130,7 +139,7 @@ async function fetchCloudPack(remoteUrl, apiKey) {
     const files = Array.isArray(response.data?.files) ? response.data.files : [];
     return {
         files: files.filter((f) => typeof f?.relativePath === 'string' &&
-            isSafePackPath(f.relativePath) &&
+            (isSafePackPath(f.relativePath) || isSafeOrgCapabilityPackPath(f.relativePath)) &&
             typeof f?.content === 'string'),
         version: String(response.data?.version ?? '0')
     };
@@ -142,12 +151,13 @@ function materializeCache(files, metadata) {
     fs_1.default.rmSync(stagingDir, { recursive: true, force: true });
     fs_1.default.mkdirSync(stagingDir, { recursive: true });
     for (const file of files) {
-        if (!isSafePackPath(file.relativePath))
+        const isSafe = isSafePackPath(file.relativePath) || isSafeOrgCapabilityPackPath(file.relativePath);
+        if (!isSafe)
             continue;
         const destination = path_1.default.join(stagingDir, file.relativePath);
         fs_1.default.mkdirSync(path_1.default.dirname(destination), { recursive: true });
-        // #744: only markdown gets the managed-content header; JSON is written verbatim.
-        const content = shouldDecorateAsMarkdown(file.relativePath)
+        // Only markdown gets the managed-content header; JSON and future scripts ride verbatim.
+        const content = (0, capability_pack_1.shouldDecorateAsMarkdown)(file.relativePath)
             ? decorateManagedOrgFile(file.content, metadata.backend)
             : file.content;
         fs_1.default.writeFileSync(destination, content);
@@ -212,7 +222,7 @@ async function syncOrgCache(options) {
     try {
         if (organization.backend === 'local-folder') {
             const localPath = organization.localPath;
-            const files = (0, local_folder_sync_1.collectLocalFolderFiles)(localPath, isSafePackPath);
+            const files = (0, local_folder_sync_1.collectLocalFolderFiles)(localPath, (rel) => isSafePackPath(rel) || isSafeOrgCapabilityPackPath(rel));
             const metadata = {
                 version: (0, local_folder_sync_1.localFolderVersion)(localPath),
                 backend: 'local-folder',

package/dist/src/cli/utils/org-publish.js

@@ -23,23 +23,38 @@ const os_1 = __importDefault(require("os"));
 const path_1 = __importDefault(require("path"));
 const user_config_1 = require("./user-config");
 const local_folder_sync_1 = require("./local-folder-sync");
+const capability_pack_1 = require("../../core/capability-pack");
 const PACK_RELATIVE_PATH = /^(context|rules|learnings)\/[\w.-]+\.md$/;
+// #868: the company brand descriptor is JSON stored beside org_context.md. It
+// publishes through the same backends as org markdown but is delivered verbatim
+// (no managed-content header — that decoration is markdown-only, added on sync).
+// Mirrors org-pack-sync.isSafePackPath and fraim-mcp-server.isOrgPackPublishRelativePath.
+const ORG_BRAND_PACK_PATH = 'context/org_brand.json';
 const ALLOWED_GIT_URL = /^(https?:\/\/|ssh:\/\/|git:\/\/|file:\/\/|[\w.-]+@[\w.-]+:)/;
 /**
- * Infer the org-pack location for a local file by its name:
+ * Infer the org-pack location for a local file by its name or path:
  *   org_context.md -> context/org_context.md
  *   org_rules.md   -> rules/org_rules.md
+ *   org_brand.json -> context/org_brand.json
  *   org-*.md       -> learnings/org-*.md
+ *   jobs/<cat>/<name>.md | skills/<cat>/<name>.md | rules/<cat>/<name>.md |
+ *   templates/<cat>/<name>.md -> capability path returned as-is (issue #869 Phase 2)
  */
 function packRelativePathFor(filePath) {
+    const normalized = filePath.replace(/\\/g, '/').replace(/^\/+/, '');
+    // Issue #869: if the caller passes a full capability-pack relative path, return it as-is.
+    if ((0, capability_pack_1.isCapabilityPackPath)(normalized))
+        return normalized;
     const base = path_1.default.basename(filePath);
     if (base === 'org_context.md')
         return 'context/org_context.md';
     if (base === 'org_rules.md')
         return 'rules/org_rules.md';
+    if (base === 'org_brand.json')
+        return ORG_BRAND_PACK_PATH;
     if (/^org-[\w.-]*\.md$/.test(base))
         return `learnings/${base}`;
-    throw new Error(`Cannot infer org-pack location for '${base}' (expected org_context.md, org_rules.md, or org-*.md)`);
+    throw new Error(`Cannot infer org-pack location for '${base}' (expected org_context.md, org_rules.md, org_brand.json, org-*.md, or a capability path like jobs/<cat>/<name>.md)`);
 }
 function gitCompareUrl(gitUrl, branch) {
     const httpUrl = gitUrl.replace(/\.git$/, '').replace(/^git@([^:]+):/, 'https://$1/');
@@ -60,8 +75,10 @@ async function publishOrgArtifacts(artifacts, opts) {
     if (artifacts.length === 0)
         throw new Error('No artifacts to publish.');
     for (const a of artifacts) {
-        if (!PACK_RELATIVE_PATH.test(a.relativePath)) {
-            throw new Error(`Invalid org-pack path '${a.relativePath}' (must be context|rules|learnings/<name>.md).`);
+        const isLegacyPath = PACK_RELATIVE_PATH.test(a.relativePath) || a.relativePath === ORG_BRAND_PACK_PATH;
+        const isCapabilityPath = (0, capability_pack_1.isCapabilityPackPath)(a.relativePath);
+        if (!isLegacyPath && !isCapabilityPath) {
+            throw new Error(`Invalid org-pack path '${a.relativePath}' (must be context|rules|learnings/<name>.md, context/org_brand.json, or a capability path like jobs/<cat>/<name>.md).`);
         }
     }
     if (organization.backend === 'local-folder') {

package/dist/src/config/persona-capability-bundles.js

@@ -1,18 +1,23 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PERSONA_CAPABILITY_BUNDLES = exports.FREE_JOBS = void 0;
+exports.PERSONA_CAPABILITY_BUNDLES = exports.FREE_JOBS = exports.GENERIC_WORKER_PERSONA_KEY = void 0;
 exports.isFreeJob = isFreeJob;
 exports.getPersonaCapabilityBundle = getPersonaCapabilityBundle;
 exports.getProtectedPersonaForJob = getProtectedPersonaForJob;
 exports.listPersonaCapabilityBundles = listPersonaCapabilityBundles;
 const persona_hiring_1 = require("./persona-hiring");
 const persona_catalog_routes_1 = require("../routes/persona-catalog-routes");
-exports.FREE_JOBS = new Set([
-    'create-architecture', 'project-scaffolding',
-    'blue-sky-brainstorming', 'codebase-analysis-and-ideation',
-    'domain-registration-research', 'google-workspace-setup', 'github-org-setup',
-    'contribute-to-fraim', 'file-fraim-issue', 'praise-fraim',
-]);
+// The Hub-only generic worker identity. It is NOT a hireable persona in
+// PERSONA_HIRE_CATALOG and NOT a PERSONA_CAPABILITY_BUNDLES entry, so it never
+// appears in the persona catalog, pricing, or hire flows. FRAIM-internal jobs
+// that no named specialist owns resolve to this key so the Hub attributes them
+// to FRAIMworker; consumers that gate on ownership must treat it as ungated.
+exports.GENERIC_WORKER_PERSONA_KEY = 'fraimworker';
+// Issue #902: the FREE_JOBS bypass is retired. Every catalog job now resolves
+// through explicit named ownership (see getProtectedPersonaForJob). This set is
+// intentionally empty and isFreeJob() always returns false; both are retained as
+// a stable compatibility surface for existing callers and tests.
+exports.FREE_JOBS = new Set();
 function isFreeJob(jobName) {
     return exports.FREE_JOBS.has(jobName);
 }
@@ -39,8 +44,8 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
     beza: {
         personaKey: 'beza',
         bundleId: 'persona-beza-core',
-        catalogMetadata: buildCatalogMetadata('beza', ['competitive-analysis', 'review-business-strategy', 'business-plan-creation']),
-        protectedJobs: ['competitive-analysis', 'review-business-strategy', 'business-plan-creation', 'problem-statement-crystallization', 'business-idea-validation-and-scoping', 'founder-market-fit-analysis', 'community-funding-preparation', 'fundraising-prospect-discovery', 'investor-pitch-preparation', 'review-funding-preparation', 'advisory-board-development', 'advisor-interview', 'advisory-board-selection', 'blue-sky-brainstorming', 'domain-registration-research'],
+        catalogMetadata: buildCatalogMetadata('beza', ['competitive-analysis', 'review-business-strategy', 'pricing-strategy-definition']),
+        protectedJobs: ['competitive-analysis', 'review-business-strategy', 'business-plan-creation', 'problem-statement-crystallization', 'business-idea-validation-and-scoping', 'founder-market-fit-analysis', 'advisory-board-development', 'advisor-interview', 'advisory-board-selection', 'pricing-strategy-definition', 'blue-sky-brainstorming'],
         protectedAliases: ['business-strategy', 'company-strategy'],
         defaultHireMode: 'job',
         lockCopy: 'Hire BeZa to unlock business strategy work for this request.'
@@ -48,8 +53,8 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
     pam: {
         personaKey: 'pam',
         bundleId: 'persona-pam-core',
-        catalogMetadata: buildCatalogMetadata('pam', ['feature-specification', 'technical-design', 'issue-preparation']),
-        protectedJobs: ['feature-specification', 'technical-design', 'issue-preparation', 'implementation-design-review', 'issue-retrospective', 'work-completion', 'scrum-sprint-planning', 'mvp-validation-plan', 'sprint-planning', 'customer-prospect-discovery', 'interview-preparation', 'participant-recruitment', 'process-interview-notes', 'review-customer-development', 'triage-customer-needs'],
+        catalogMetadata: buildCatalogMetadata('pam', ['feature-specification', 'technical-design', 'project-plan-creation']),
+        protectedJobs: ['feature-specification', 'technical-design', 'experiment-tracking', 'project-plan-creation', 'implementation-feature-review', 'scrum-sprint-planning', 'mvp-validation-plan', 'sprint-planning', 'customer-prospect-discovery', 'interview-preparation', 'participant-recruitment', 'process-interview-notes', 'review-customer-development', 'triage-customer-needs'],
         protectedAliases: ['product-management', 'product-spec'],
         defaultHireMode: 'job',
         lockCopy: 'Hire PaM to unlock product-management work for this request.'
@@ -57,8 +62,8 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
     swen: {
         personaKey: 'swen',
         bundleId: 'persona-swen-core',
-        catalogMetadata: buildCatalogMetadata('swen', ['feature-implementation', 'code-refactoring', 'pr-iteration']),
-        protectedJobs: ['feature-implementation', 'code-refactoring', 'pr-iteration', 'mobile-app-development', 'mcp-server-creation', 'cloud-application-deployment', 'cloud-cost-optimization', 'cloud-performance-diagnosis', 'route-llm-spend-to-cloud-credits', 'set-up-cloud-cost-alerts', 'gitlabs-to-github', 'system-migration', 'cross-cloud-migration', 'data-pipeline-design', 'data-quality-monitoring', 'data-platform-architecture', 'write-dev-docs', 'database-schema-design', 'create-architecture', 'project-scaffolding', 'codebase-analysis-and-ideation', 'github-org-setup', 'google-workspace-setup', 'mobile-app-rejection-response', 'mobile-app-submission', 'publish-mcp-app', 'application-replication-workflow'],
+        catalogMetadata: buildCatalogMetadata('swen', ['feature-implementation', 'technical-design', 'code-refactoring']),
+        protectedJobs: ['feature-implementation', 'implementation-design-review', 'code-refactoring', 'pr-iteration', 'mobile-app-development', 'mcp-server-creation', 'cloud-application-deployment', 'cloud-cost-optimization', 'cloud-performance-diagnosis', 'route-llm-spend-to-cloud-credits', 'set-up-cloud-cost-alerts', 'gitlabs-to-github', 'system-migration', 'cross-cloud-migration', 'data-pipeline-design', 'data-quality-monitoring', 'data-platform-architecture', 'write-dev-docs', 'database-schema-design', 'create-architecture', 'project-scaffolding', 'codebase-analysis-and-ideation', 'github-org-setup', 'google-workspace-setup', 'mobile-app-rejection-response', 'mobile-app-submission', 'publish-mcp-app', 'application-replication-workflow'],
         protectedAliases: ['software-engineering', 'implementation'],
         defaultHireMode: 'job',
         lockCopy: 'Hire SWEn to unlock software-engineering delivery for this request.'
@@ -67,7 +72,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'qasm',
         bundleId: 'persona-qasm-core',
         catalogMetadata: buildCatalogMetadata('qasm', ['test-execution', 'browser-application-validation', 'ui-polish-validation']),
-        protectedJobs: ['test-execution', 'browser-application-validation', 'ui-polish-validation', 'code-quality-assessment', 'test-quality-assessment', 'user-testing-and-bug-bash', 'broken-windows-detection-and-remediation', 'iterative-quality-improvement', 'implementation-feature-review', 'accessibility-audit', 'api-testing', 'performance-benchmarking'],
+        protectedJobs: ['test-execution', 'browser-application-validation', 'ui-polish-validation', 'code-quality-assessment', 'test-quality-assessment', 'user-testing-and-bug-bash', 'broken-windows-detection-and-remediation', 'iterative-quality-improvement', 'accessibility-audit', 'api-testing', 'performance-benchmarking'],
         protectedAliases: ['qa', 'quality-assurance'],
         defaultHireMode: 'job',
         lockCopy: 'Hire QAsm to unlock QA validation for this request.'
@@ -84,8 +89,8 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
     gautam: {
         personaKey: 'gautam',
         bundleId: 'persona-gautam-core',
-        catalogMetadata: buildCatalogMetadata('gautam', ['analyze-revenue-system', 'build-gtm-motion', 'ppc-campaign-management']),
-        protectedJobs: ['pricing-strategy-definition', 'marketing-strategy-definition', 'product-launch-management', 'evangelist-content-development', 'funnel-analysis', 'growth-loop-design', 'analyze-revenue-system', 'design-gtm-system', 'build-gtm-motion', 'build-gtm-stack', 'plan-gtm-team', 'marketing-content-creation', 'ppc-campaign-management', 'paid-social-strategy', 'ad-performance-analysis', 'tracking-and-attribution-setup', 'developer-advocacy', 'seo-strategy', 'marketing-analytics-review', 'linkedin-company-page-setup', 'x-account-setup', 'social-engagement-campaign', 'thought-leadership-engagement', 'promo-video-creation', 'linkedin-carousel-from-deck'],
+        catalogMetadata: buildCatalogMetadata('gautam', ['analyze-revenue-system', 'build-gtm-motion', 'domain-registration-research']),
+        protectedJobs: ['marketing-strategy-definition', 'product-launch-management', 'evangelist-content-development', 'funnel-analysis', 'growth-loop-design', 'analyze-revenue-system', 'design-gtm-system', 'build-gtm-motion', 'build-gtm-stack', 'plan-gtm-team', 'marketing-content-creation', 'ppc-campaign-management', 'paid-social-strategy', 'ad-performance-analysis', 'tracking-and-attribution-setup', 'developer-advocacy', 'seo-strategy', 'marketing-analytics-review', 'linkedin-company-page-setup', 'x-account-setup', 'domain-registration-research', 'social-engagement-campaign', 'thought-leadership-engagement', 'promo-video-creation', 'linkedin-carousel-from-deck', 'notebooklm-content-generation'],
         protectedAliases: ['gtm', 'marketing'],
         defaultHireMode: 'job',
         lockCopy: 'Hire GauTaM to unlock go-to-market and paid media work for this request.'
@@ -111,8 +116,8 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
     ashley: {
         personaKey: 'ashley',
         bundleId: 'persona-ashley-core',
-        catalogMetadata: buildCatalogMetadata('ashley', ['chief-of-staff-briefing', 'executive-assistant', 'weekly-operating-review']),
-        protectedJobs: ['chief-of-staff-briefing', 'calendar-triage', 'meeting-preparation', 'executive-assistant', 'weekly-operating-review', 'send-thank-you-notes', 'send-newsletter', 'analyze-transcript', 'send-stakeholder-update'],
+        catalogMetadata: buildCatalogMetadata('ashley', ['chief-of-staff-briefing', 'executive-assistant', 'analyze-transcript']),
+        protectedJobs: ['chief-of-staff-briefing', 'calendar-triage', 'meeting-preparation', 'executive-assistant', 'send-newsletter', 'send-thank-you-notes', 'analyze-transcript'],
         protectedAliases: ['executive-assistant', 'operations-assistant'],
         defaultHireMode: 'job',
         lockCopy: 'Hire AshLey to unlock executive-assistant work for this request.'
@@ -120,8 +125,8 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
     mandy: {
         personaKey: 'mandy',
         bundleId: 'persona-mandy-core',
-        catalogMetadata: buildCatalogMetadata('mandy', ['fully-delegate', 'project-plan-creation', 'stakeholder-status-reporting']),
-        protectedJobs: ['fully-delegate', 'delivery-governance-review', 'project-plan-creation', 'stakeholder-status-reporting', 'experiment-tracking', 'cross-functional-dependency-management', 'portfolio-impact-report'],
+        catalogMetadata: buildCatalogMetadata('mandy', ['fully-delegate', 'issue-preparation', 'operational-reporting']),
+        protectedJobs: ['fully-delegate', 'delivery-governance-review', 'issue-preparation', 'issue-retrospective', 'work-completion', 'operational-reporting', 'send-stakeholder-update', 'cross-functional-dependency-management'],
         protectedAliases: ['manager', 'team-lead', 'orchestrator'],
         defaultHireMode: 'job',
         lockCopy: 'Hire MANdy to unlock autonomous multi-role orchestration — MANdy plans the job sequence, runs sub-agents in parallel, coaches them through verification loops, and hands back a synthesized DRAFT for your approval.'
@@ -174,8 +179,8 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
     casey: {
         personaKey: 'casey',
         bundleId: 'persona-casey-core',
-        catalogMetadata: buildCatalogMetadata('casey', ['support-case-resolution', 'support-sop-operationalization', 'support-system-operationalization', 'support-playbook-evaluation']),
-        protectedJobs: ['crm-account-health-review', 'crm-case-resolution', 'customer-health-review', 'loyalty-program-management', 'survey-campaign-management', 'support-queue-management', 'support-case-resolution', 'support-sop-operationalization', 'support-system-operationalization', 'support-playbook-evaluation', 'user-survey-management'],
+        catalogMetadata: buildCatalogMetadata('casey', ['update-crm', 'support-case-resolution', 'support-system-operationalization']),
+        protectedJobs: ['crm-case-resolution', 'customer-health-review', 'loyalty-program-management', 'survey-campaign-management', 'update-crm', 'support-queue-management', 'support-case-resolution', 'support-sop-operationalization', 'support-system-operationalization', 'support-playbook-evaluation', 'user-survey-management'],
         protectedAliases: ['customer-success', 'customer-support', 'csm', 'support'],
         defaultHireMode: 'job',
         lockCopy: 'Hire CaSey to unlock customer success and support work for this request.'
@@ -204,8 +209,8 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
     mona: {
         personaKey: 'mona',
         bundleId: 'persona-mona-core',
-        catalogMetadata: buildCatalogMetadata('mona', ['financial-analysis', 'fpa-and-forecasting', 'monthly-close-review']),
-        protectedJobs: ['financial-analysis', 'fpa-and-forecasting', 'monthly-close-review', 'tax-strategy-planning', 'aws-activate-credits-application', 'google-cloud-credits-application', 'microsoft-azure-credits-application', 'invoice-generation', 'business-banking-setup'],
+        catalogMetadata: buildCatalogMetadata('mona', ['financial-analysis', 'fundraising-prospect-discovery', 'investor-pitch-preparation']),
+        protectedJobs: ['financial-analysis', 'fpa-and-forecasting', 'monthly-close-review', 'tax-strategy-planning', 'cloud-credits-application', 'community-funding-preparation', 'fundraising-prospect-discovery', 'investor-pitch-preparation', 'review-funding-preparation', 'invoice-generation', 'business-banking-setup'],
         protectedAliases: ['finance', 'financial-modeling', 'fpa', 'bookkeeping'],
         defaultHireMode: 'job',
         lockCopy: 'Hire MONa to unlock financial modeling, FP&A, and tax strategy work for this request.'
@@ -263,14 +268,27 @@ for (const bundle of Object.values(exports.PERSONA_CAPABILITY_BUNDLES)) {
         PROTECTED_JOB_TO_PERSONA.set(jobName, bundle.personaKey);
     }
 }
+// FRAIM-internal jobs owned by the generic FRAIMworker identity rather than a
+// named specialist persona. They resolve through ownership (never short-circuited
+// as "free") so the Hub attributes them to FRAIMworker, but they are never
+// hire-gated because FRAIMworker is not a purchasable persona.
+const GENERIC_WORKER_OWNED_JOBS = new Set([
+    'contribute-to-fraim',
+    'file-fraim-issue',
+    'praise-fraim',
+]);
 function getPersonaCapabilityBundle(personaKey) {
     return exports.PERSONA_CAPABILITY_BUNDLES[personaKey];
 }
 function getProtectedPersonaForJob(jobName) {
-    if (isFreeJob(jobName)) {
-        return null;
+    const protectedPersona = PROTECTED_JOB_TO_PERSONA.get(jobName);
+    if (protectedPersona) {
+        return protectedPersona;
+    }
+    if (GENERIC_WORKER_OWNED_JOBS.has(jobName)) {
+        return exports.GENERIC_WORKER_PERSONA_KEY;
     }
-    return PROTECTED_JOB_TO_PERSONA.get(jobName) || null;
+    return null;
 }
 function listPersonaCapabilityBundles() {
     return Object.values(exports.PERSONA_CAPABILITY_BUNDLES);

package/dist/src/core/capability-pack.js

@@ -0,0 +1,85 @@
+"use strict";
+/**
+ * Shared allowlist contract for capability-pack paths (issue #869).
+ *
+ * A single source of truth for which relative paths are valid capability
+ * members in a manager or org pack. All publish validators, sync guards, and
+ * resolver overlay checks import from here so the allowlist never drifts.
+ *
+ * Phase-1 scope: jobs, skills, rules/<category>/…, templates, scripts.
+ * (Scripts are accepted by isCapabilityPackPath so the guard is correct from
+ * Phase 1; the server-side security gate for scripts is Phase 3 work.)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CAPABILITY_DIRS = void 0;
+exports.isCapabilityPackPath = isCapabilityPackPath;
+exports.isScriptPath = isScriptPath;
+exports.shouldDecorateAsMarkdown = shouldDecorateAsMarkdown;
+exports.CAPABILITY_DIRS = ['jobs', 'skills', 'rules', 'templates', 'scripts'];
+/**
+ * Returns true when `rel` is a valid capability-pack member path:
+ *
+ *   jobs/<category>/<name>.md
+ *   skills/<category>/<name>.md
+ *   templates/<category>/<name>.md
+ *   rules/<category>/<name>.md          (depth ≥ 2 — flat rules/<name>.md is reserved)
+ *   scripts/<name>.<ext>
+ *
+ * Rejects: path traversal (../ or \), absolute paths (/), control characters,
+ * flat rules/<name>.md (reserved for org_rules.md / manager_rules.md).
+ */
+function isCapabilityPackPath(rel) {
+    if (!rel)
+        return false;
+    // Reject control characters (includes null bytes, newlines, etc.)
+    // eslint-disable-next-line no-control-regex
+    if (/[\x00-\x1F\x7F]/.test(rel))
+        return false;
+    // Reject backslashes (Windows-style traversal)
+    if (rel.includes('\\'))
+        return false;
+    // Reject absolute paths
+    if (rel.startsWith('/'))
+        return false;
+    // Reject any path traversal sequence
+    const parts = rel.split('/');
+    if (parts.some(p => p === '..' || p === '.'))
+        return false;
+    const [dir, ...rest] = parts;
+    // Must be one of the five capability directories
+    if (!exports.CAPABILITY_DIRS.includes(dir))
+        return false;
+    if (dir === 'scripts') {
+        // scripts/<name>.<ext> — exactly one path segment with an extension
+        if (rest.length !== 1)
+            return false;
+        const name = rest[0];
+        return name.length > 0 && /\.[a-zA-Z]+$/.test(name);
+    }
+    if (dir === 'rules') {
+        // rules/<category>/<name>.md — depth exactly 2 (no flat rules/)
+        if (rest.length !== 2)
+            return false;
+        const [, name] = rest;
+        return name.endsWith('.md') && name.length > 3;
+    }
+    // jobs, skills, templates: <dir>/<category>/<name>.md — depth exactly 2
+    if (rest.length !== 2)
+        return false;
+    const [, name] = rest;
+    return name.endsWith('.md') && name.length > 3;
+}
+/** True when the path is a script (executable) capability member. */
+function isScriptPath(rel) {
+    if (!isCapabilityPackPath(rel))
+        return false;
+    return rel.startsWith('scripts/');
+}
+/**
+ * True when a sync pack file should receive the managed-content header on
+ * materialization. Only markdown files get the header; scripts and JSON ride
+ * verbatim. Shared between manager-pack-sync and org-pack-sync.
+ */
+function shouldDecorateAsMarkdown(relativePath) {
+    return relativePath.toLowerCase().endsWith('.md');
+}

package/dist/src/core/manager-pack.js

@@ -7,12 +7,13 @@ exports.MANAGER_PACK_RELATIVE_PATH_RE = exports.MANAGER_LEARNING_FILE_RE = expor
 exports.isManagerPackRelativePath = isManagerPackRelativePath;
 exports.managerPackRelativePathForFileName = managerPackRelativePathForFileName;
 const path_1 = __importDefault(require("path"));
+const capability_pack_1 = require("./capability-pack");
 exports.MANAGER_CONTEXT_RELATIVE_PATH = 'context/manager_context.md';
 exports.MANAGER_RULES_RELATIVE_PATH = 'rules/manager_rules.md';
 exports.MANAGER_LEARNING_FILE_RE = /^(?!org-)[A-Za-z0-9._%+@-]+-(mistake-patterns|preferences|manager-coaching|validated-patterns)\.md$/;
 exports.MANAGER_PACK_RELATIVE_PATH_RE = /^(context\/manager_context\.md|rules\/manager_rules\.md|learnings\/(?!org-)[A-Za-z0-9._%+@-]+-(mistake-patterns|preferences|manager-coaching|validated-patterns)\.md)$/;
 function isManagerPackRelativePath(value) {
-    return exports.MANAGER_PACK_RELATIVE_PATH_RE.test(value);
+    return exports.MANAGER_PACK_RELATIVE_PATH_RE.test(value) || (0, capability_pack_1.isCapabilityPackPath)(value);
 }
 function managerPackRelativePathForFileName(fileName) {
     const base = path_1.default.basename(fileName);
@@ -22,5 +23,10 @@ function managerPackRelativePathForFileName(fileName) {
         return exports.MANAGER_RULES_RELATIVE_PATH;
     if (exports.MANAGER_LEARNING_FILE_RE.test(base))
         return `learnings/${base}`;
+    // Capability files carry their full relative path as-is (e.g. jobs/cat/name.md).
+    // callers that have the full relative path should pass it directly to
+    // isManagerPackRelativePath; this filename-only lookup cannot reconstruct the
+    // category from a bare basename, so return null and let the caller supply the
+    // full path.
     return null;
 }

package/dist/src/core/utils/local-registry-resolver.js

@@ -53,6 +53,10 @@ class LocalRegistryResolver {
         this.remoteContentResolver = options.remoteContentResolver;
         this.parser = new inheritance_parser_1.InheritanceParser(options.maxDepth);
         this.shouldFilter = options.shouldFilter;
+        // Issue #869: default manager cache root to ~/.fraim/manager/
+        this.managerCacheRoot = options.managerCacheRoot ?? (0, path_1.join)((0, project_fraim_paths_1.getUserFraimDirPath)(), 'manager');
+        // Issue #869 Phase 2: default org cache root to ~/.fraim/org/
+        this.orgCacheRoot = options.orgCacheRoot ?? (0, path_1.join)((0, project_fraim_paths_1.getUserFraimDirPath)(), 'org');
     }
     /**
      * Get a path within the effective FRAIM directory.
@@ -225,9 +229,70 @@ class LocalRegistryResolver {
             return null;
         }
     }
+    /**
+     * Issue #869: read a capability file from the manager overlay cache
+     * (~/.fraim/manager/<type>/…). Returns null if not present or filtered.
+     *
+     * Security: the cache is written by the sync layer which already validated
+     * paths; we defensively resolve and check the canonical path stays inside
+     * the cache root to guard against future path-traversal bugs in sync.
+     */
+    readManagerOverlayFile(path) {
+        const normalized = path.replace(/\\/g, '/').replace(/^\/+/, '');
+        const destination = (0, path_1.join)(this.managerCacheRoot, ...normalized.split('/'));
+        // Guard: resolved path must stay within the manager cache root.
+        const resolved = (0, path_1.resolve)(destination);
+        const cacheResolved = (0, path_1.resolve)(this.managerCacheRoot);
+        if (!resolved.startsWith(cacheResolved + path_1.sep) && resolved !== cacheResolved) {
+            return null;
+        }
+        if (!(0, fs_1.existsSync)(destination))
+            return null;
+        try {
+            const content = (0, fs_1.readFileSync)(destination, 'utf-8');
+            if (this.shouldFilter && this.shouldFilter(content))
+                return null;
+            return content;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Issue #869 Phase 2: read a capability file from the org overlay cache
+     * (~/.fraim/org/<type>/…). Returns null if not present or filtered.
+     *
+     * Precedence: project > manager > org > synced baseline > registry > remote.
+     * Security: same canonical-path containment guard as readManagerOverlayFile.
+     */
+    readOrgOverlayFile(path) {
+        const normalized = path.replace(/\\/g, '/').replace(/^\/+/, '');
+        const destination = (0, path_1.join)(this.orgCacheRoot, ...normalized.split('/'));
+        const resolved = (0, path_1.resolve)(destination);
+        const cacheResolved = (0, path_1.resolve)(this.orgCacheRoot);
+        if (!resolved.startsWith(cacheResolved + path_1.sep) && resolved !== cacheResolved) {
+            return null;
+        }
+        if (!(0, fs_1.existsSync)(destination))
+            return null;
+        try {
+            const content = (0, fs_1.readFileSync)(destination, 'utf-8');
+            if (this.shouldFilter && this.shouldFilter(content))
+                return null;
+            return content;
+        }
+        catch {
+            return null;
+        }
+    }
     readWorkspaceRegistryFile(path) {
         const normalizedPath = path.replace(/\\/g, '/').replace(/^\/+/, '');
-        const registryPath = (0, path_1.join)(this.workspaceRoot, 'registry', ...normalizedPath.split('/'));
+        const registryRoot = (0, path_1.join)(this.workspaceRoot, 'registry');
+        const registryPath = (0, path_1.join)(registryRoot, ...normalizedPath.split('/'));
+        const resolved = (0, path_1.resolve)(registryPath);
+        const rootResolved = (0, path_1.resolve)(registryRoot);
+        if (!resolved.startsWith(rootResolved + path_1.sep) && resolved !== rootResolved)
+            return null;
         if (!(0, fs_1.existsSync)(registryPath)) {
             return null;
         }
@@ -386,6 +451,28 @@ class LocalRegistryResolver {
         const stripMcpHeader = options.stripMcpHeader ?? false;
         // Check for local override
         if (!this.hasLocalOverride(path)) {
+            // Issue #869: manager overlay (precedence 2 — between project override and synced baseline)
+            const managerOverlayContent = this.readManagerOverlayFile(path);
+            if (managerOverlayContent !== null) {
+                return {
+                    content: managerOverlayContent,
+                    source: 'local',
+                    personalized: true,
+                    inherited: false,
+                    scope: 'manager'
+                };
+            }
+            // Issue #869 Phase 2: org overlay (precedence 3 — after manager, before synced baseline)
+            const orgOverlayContent = this.readOrgOverlayFile(path);
+            if (orgOverlayContent !== null) {
+                return {
+                    content: orgOverlayContent,
+                    source: 'local',
+                    personalized: true,
+                    inherited: false,
+                    scope: 'org'
+                };
+            }
             const syncedLocalContent = this.readSyncedLocalFile(path);
             if (syncedLocalContent !== null) {
                 // Synced baseline (fraim/ai-employee), not personalized.
@@ -463,7 +550,8 @@ class LocalRegistryResolver {
             source: 'local',
             personalized: true,
             inherited: resolved.imports.length > 0,
-            imports: resolved.imports.length > 0 ? resolved.imports : undefined
+            imports: resolved.imports.length > 0 ? resolved.imports : undefined,
+            scope: 'project'
         };
         // Add metadata comment
         if (includeMetadata) {

package/dist/src/services/persona-entitlement-service.js

@@ -285,7 +285,10 @@ async function evaluatePersonaAccess(dbService, userId, jobName, apiKey, returnT
         .map((entitlement) => entitlement.personaKey)
         .filter((personaKey) => (0, persona_hiring_1.isPersonaHireKey)(personaKey))));
     const protectedPersonaKey = (0, persona_capability_bundles_1.getProtectedPersonaForJob)(jobName);
-    if (!protectedPersonaKey) {
+    // No protected owner, or a non-hireable owner (the display-only FRAIMworker
+    // identity, issue #902), means the job is not hire-gated. Allow it and never
+    // look the key up in PERSONA_HIRE_CATALOG, which is undefined for FRAIMworker.
+    if (!protectedPersonaKey || !(0, persona_hiring_1.isPersonaHireKey)(protectedPersonaKey)) {
         return {
             allowed: true,
             personaKey: null,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fraim",
-  "version": "2.0.217",
+  "version": "2.0.219",
   "description": "FRAIM core CLI and MCP package.",
   "main": "index.js",
   "bin": {