fraim 2.0.218 → 2.0.220

package/dist/src/cli/commands/org.js

@@ -12,8 +12,8 @@ exports.orgCommand = new commander_1.Command('org')
     .description('Manage your shared organization context');
 exports.orgCommand
     .command('publish')
-    .description('Publish org context/rules/learnings files to the configured org backend')
-    .argument('<files...>', 'Local files to publish: org_context.md, org_rules.md, and/or org-*.md learnings')
+    .description('Publish org context/rules/learnings/brand files to the configured org backend')
+    .argument('<files...>', 'Local files to publish: org_context.md, org_rules.md, org_brand.json, and/or org-*.md learnings')
     .action(async (files) => {
     try {
         const artifacts = files.map((f) => {

package/dist/src/cli/setup/ide-invocation-surfaces.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.FRAIM_INVOCATION_BODY = exports.FRAIM_DEFERRED_TOOL_PRELOAD = exports.CURSOR_MDC_FRONTMATTER = exports.FRAIM_LAUNCH_PHRASE = void 0;
+exports.CODEX_SKILL_FRONTMATTER = exports.FRAIM_INVOCATION_BODY = exports.FRAIM_DEFERRED_TOOL_PRELOAD = exports.CURSOR_MDC_FRONTMATTER = exports.FRAIM_LAUNCH_PHRASE = void 0;
 exports.buildFraimInvocationBody = buildFraimInvocationBody;
 exports.buildClaudeSkillContent = buildClaudeSkillContent;
 exports.buildClaudeCommandShimContent = buildClaudeCommandShimContent;
@@ -98,8 +98,13 @@ function buildCursorMentionRuleContent() {
 ${buildFraimInvocationBody('generic-tool-discovery')}
 `;
 }
+exports.CODEX_SKILL_FRONTMATTER = `---
+name: fraim
+description: Discover and execute FRAIM jobs and skills from Codex.
+---`;
 function buildCodexSkillContent() {
-    return `# FRAIM
+    return `${exports.CODEX_SKILL_FRONTMATTER}
+# FRAIM
 
 ${buildFraimInvocationBody('codex-tool-search')}`;
 }

package/dist/src/cli/utils/manager-pack-sync.js

@@ -24,13 +24,14 @@ const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const project_fraim_paths_1 = require("../../core/utils/project-fraim-paths");
 const manager_pack_1 = require("../../core/manager-pack");
+const capability_pack_1 = require("../../core/capability-pack");
 const git_org_sync_1 = require("./git-org-sync");
 const local_folder_sync_1 = require("./local-folder-sync");
 const user_config_1 = require("./user-config");
 exports.MANAGER_CACHE_DIRNAME = 'manager';
 exports.MANAGER_SYNC_METADATA_FILE = '.manager-sync-metadata.json';
 exports.MANAGER_CACHE_MANAGED_HEADER = '<!-- FRAIM_MANAGER_SYNC_MANAGED_CONTENT -->';
-const MANAGER_PACK_DIRS = ['context', 'rules', 'learnings'];
+const MANAGER_PACK_DIRS = ['context', 'rules', 'learnings', 'jobs', 'skills', 'templates', 'scripts'];
 function getManagerCacheDir() {
     return path_1.default.join((0, project_fraim_paths_1.getUserFraimDirPath)(), exports.MANAGER_CACHE_DIRNAME);
 }
@@ -72,20 +73,23 @@ function decorateManagedManagerFile(content, backend) {
     ].join('\n');
     return `${marker}\n${normalized}`;
 }
+function collectGitPackFilesRecursive(dir, relBase, files) {
+    if (!fs_1.default.existsSync(dir))
+        return;
+    for (const entry of fs_1.default.readdirSync(dir, { withFileTypes: true })) {
+        const rel = `${relBase}/${entry.name}`;
+        if (entry.isDirectory()) {
+            collectGitPackFilesRecursive(path_1.default.join(dir, entry.name), rel, files);
+        }
+        else if (entry.isFile() && (0, manager_pack_1.isManagerPackRelativePath)(rel)) {
+            files.push({ relativePath: rel, content: fs_1.default.readFileSync(path_1.default.join(dir, entry.name), 'utf8') });
+        }
+    }
+}
 function collectGitPackFiles(snapshotDir) {
     const files = [];
     for (const dirName of MANAGER_PACK_DIRS) {
-        const dirPath = path_1.default.join(snapshotDir, dirName);
-        if (!fs_1.default.existsSync(dirPath))
-            continue;
-        for (const entry of fs_1.default.readdirSync(dirPath, { withFileTypes: true })) {
-            if (!entry.isFile() || !entry.name.endsWith('.md'))
-                continue;
-            files.push({
-                relativePath: `${dirName}/${entry.name}`,
-                content: fs_1.default.readFileSync(path_1.default.join(dirPath, entry.name), 'utf8')
-            });
-        }
+        collectGitPackFilesRecursive(path_1.default.join(snapshotDir, dirName), dirName, files);
     }
     return files;
 }
@@ -110,9 +114,16 @@ function materializeCache(files, metadata) {
     for (const file of files) {
         if (!(0, manager_pack_1.isManagerPackRelativePath)(file.relativePath))
             continue;
+        // Scripts require a security-review gate (Phase 3). Skip in Phase 1.
+        if ((0, capability_pack_1.isCapabilityPackPath)(file.relativePath) && file.relativePath.startsWith('scripts/'))
+            continue;
         const destination = path_1.default.join(stagingDir, file.relativePath);
         fs_1.default.mkdirSync(path_1.default.dirname(destination), { recursive: true });
-        fs_1.default.writeFileSync(destination, decorateManagedManagerFile(file.content, metadata.backend));
+        // Only markdown gets the managed-content header; scripts/JSON ride verbatim.
+        const content = (0, capability_pack_1.shouldDecorateAsMarkdown)(file.relativePath)
+            ? decorateManagedManagerFile(file.content, metadata.backend)
+            : file.content;
+        fs_1.default.writeFileSync(destination, content);
     }
     fs_1.default.writeFileSync(path_1.default.join(stagingDir, exports.MANAGER_SYNC_METADATA_FILE), JSON.stringify(metadata, null, 2));
     fs_1.default.rmSync(cacheDir, { recursive: true, force: true });

package/dist/src/cli/utils/manager-publish.js

@@ -22,8 +22,10 @@ function managerPackRelativePathFor(filePath) {
     const relativePath = (0, manager_pack_1.managerPackRelativePathForFileName)(filePath);
     if (relativePath)
         return relativePath;
+    // Capability files (jobs/skills/rules/templates/scripts) carry their pack-relative
+    // path verbatim — the caller supplies the full relative path, not just a basename.
     const base = path_1.default.basename(filePath);
-    throw new Error(`Cannot infer manager-pack location for '${base}' (expected manager_context.md, manager_rules.md, or a personal learning file)`);
+    throw new Error(`Cannot infer manager-pack location for '${base}' (expected manager_context.md, manager_rules.md, a personal learning file, or a full capability path like jobs/<cat>/<name>.md)`);
 }
 function gitCompareUrl(gitUrl, branch) {
     const httpUrl = gitUrl.replace(/\.git$/, '').replace(/^git@([^:]+):/, 'https://$1/');

package/dist/src/cli/utils/org-pack-sync.js

@@ -3,9 +3,9 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ORG_CACHE_MANAGED_HEADER = exports.ORG_SYNC_METADATA_FILE = exports.ORG_CACHE_DIRNAME = void 0;
+exports.ORG_CACHE_MANAGED_HEADER = exports.ORG_SYNC_METADATA_FILE = exports.ORG_CACHE_DIRNAME = exports.shouldDecorateAsMarkdown = void 0;
 exports.isSafePackPath = isSafePackPath;
-exports.shouldDecorateAsMarkdown = shouldDecorateAsMarkdown;
+exports.isSafeOrgCapabilityPackPath = isSafeOrgCapabilityPackPath;
 exports.getOrgCacheDir = getOrgCacheDir;
 exports.readOrgCacheMetadata = readOrgCacheMetadata;
 exports.getOrgCacheAgeHours = getOrgCacheAgeHours;
@@ -29,11 +29,14 @@ const project_fraim_paths_1 = require("../../core/utils/project-fraim-paths");
 const user_config_1 = require("./user-config");
 const git_org_sync_1 = require("./git-org-sync");
 const local_folder_sync_1 = require("./local-folder-sync");
+const capability_pack_1 = require("../../core/capability-pack");
+var capability_pack_2 = require("../../core/capability-pack");
+Object.defineProperty(exports, "shouldDecorateAsMarkdown", { enumerable: true, get: function () { return capability_pack_2.shouldDecorateAsMarkdown; } });
 exports.ORG_CACHE_DIRNAME = 'org';
 exports.ORG_SYNC_METADATA_FILE = '.org-sync-metadata.json';
 exports.ORG_CACHE_MANAGED_HEADER = '<!-- FRAIM_ORG_SYNC_MANAGED_CONTENT -->';
 /** Subdirectories of the org pack that sync into the cache (spec R7.1). */
-const ORG_PACK_DIRS = ['context', 'rules', 'learnings'];
+const ORG_PACK_DIRS = ['context', 'rules', 'learnings', 'jobs', 'skills', 'templates'];
 /**
  * Pack files must stay inside the three org pack directories. Applied to
  * every relativePath before it touches the filesystem, so a compromised
@@ -48,19 +51,24 @@ const SAFE_PACK_RELATIVE_PATH = /^(context|rules|learnings)\/[\w.-]+\.md$/;
 const ORG_BRAND_PACK_PATH = 'context/org_brand.json';
 /**
  * True when a pack-relative path is safe to materialize: a markdown file inside
- * one of the three org pack dirs, or the org brand descriptor. A single guard
- * shared by the git and cloud paths.
+ * one of the three org pack dirs, the org brand descriptor, or a capability
+ * pack path (issue #869 Phase 2). Scripts require a Phase-3 security gate and
+ * are blocked here.
  */
 function isSafePackPath(relativePath) {
     return SAFE_PACK_RELATIVE_PATH.test(relativePath) || relativePath === ORG_BRAND_PACK_PATH;
 }
 /**
- * Managed-content decoration prepends a markdown "synced from your org" header.
- * It must only touch markdown — prepending it to org_brand.json would corrupt
- * the JSON (#744).
+ * Issue #869 Phase 2: true when a path is safe to materialize as an org
+ * capability overlay (jobs/skills/rules-nested/templates — no scripts until Phase 3).
  */
-function shouldDecorateAsMarkdown(relativePath) {
-    return relativePath.toLowerCase().endsWith('.md');
+function isSafeOrgCapabilityPackPath(relativePath) {
+    if (!(0, capability_pack_1.isCapabilityPackPath)(relativePath))
+        return false;
+    // Scripts require the Phase-3 triple security gate; block at materialization.
+    if ((0, capability_pack_1.isScriptPath)(relativePath))
+        return false;
+    return true;
 }
 function getOrgCacheDir() {
     return path_1.default.join((0, project_fraim_paths_1.getUserFraimDirPath)(), exports.ORG_CACHE_DIRNAME);
@@ -103,22 +111,23 @@ function decorateManagedOrgFile(content, backend) {
     ].join('\n');
     return `${marker}\n${normalized}`;
 }
+function collectGitPackFilesRecursive(dir, relBase, files) {
+    if (!fs_1.default.existsSync(dir))
+        return;
+    for (const entry of fs_1.default.readdirSync(dir, { withFileTypes: true })) {
+        const rel = `${relBase}/${entry.name}`;
+        if (entry.isDirectory()) {
+            collectGitPackFilesRecursive(path_1.default.join(dir, entry.name), rel, files);
+        }
+        else if (entry.isFile() && (isSafePackPath(rel) || isSafeOrgCapabilityPackPath(rel))) {
+            files.push({ relativePath: rel, content: fs_1.default.readFileSync(path_1.default.join(dir, entry.name), 'utf8') });
+        }
+    }
+}
 function collectGitPackFiles(snapshotDir) {
     const files = [];
     for (const dirName of ORG_PACK_DIRS) {
-        const dirPath = path_1.default.join(snapshotDir, dirName);
-        if (!fs_1.default.existsSync(dirPath))
-            continue;
-        for (const entry of fs_1.default.readdirSync(dirPath, { withFileTypes: true })) {
-            const relativePath = `${dirName}/${entry.name}`;
-            // Markdown in any pack dir, plus the org brand descriptor (#744).
-            if (!entry.isFile() || !isSafePackPath(relativePath))
-                continue;
-            files.push({
-                relativePath,
-                content: fs_1.default.readFileSync(path_1.default.join(dirPath, entry.name), 'utf8')
-            });
-        }
+        collectGitPackFilesRecursive(path_1.default.join(snapshotDir, dirName), dirName, files);
     }
     return files;
 }
@@ -130,7 +139,7 @@ async function fetchCloudPack(remoteUrl, apiKey) {
     const files = Array.isArray(response.data?.files) ? response.data.files : [];
     return {
         files: files.filter((f) => typeof f?.relativePath === 'string' &&
-            isSafePackPath(f.relativePath) &&
+            (isSafePackPath(f.relativePath) || isSafeOrgCapabilityPackPath(f.relativePath)) &&
             typeof f?.content === 'string'),
         version: String(response.data?.version ?? '0')
     };
@@ -142,12 +151,13 @@ function materializeCache(files, metadata) {
     fs_1.default.rmSync(stagingDir, { recursive: true, force: true });
     fs_1.default.mkdirSync(stagingDir, { recursive: true });
     for (const file of files) {
-        if (!isSafePackPath(file.relativePath))
+        const isSafe = isSafePackPath(file.relativePath) || isSafeOrgCapabilityPackPath(file.relativePath);
+        if (!isSafe)
             continue;
         const destination = path_1.default.join(stagingDir, file.relativePath);
         fs_1.default.mkdirSync(path_1.default.dirname(destination), { recursive: true });
-        // #744: only markdown gets the managed-content header; JSON is written verbatim.
-        const content = shouldDecorateAsMarkdown(file.relativePath)
+        // Only markdown gets the managed-content header; JSON and future scripts ride verbatim.
+        const content = (0, capability_pack_1.shouldDecorateAsMarkdown)(file.relativePath)
             ? decorateManagedOrgFile(file.content, metadata.backend)
             : file.content;
         fs_1.default.writeFileSync(destination, content);
@@ -212,7 +222,7 @@ async function syncOrgCache(options) {
     try {
         if (organization.backend === 'local-folder') {
             const localPath = organization.localPath;
-            const files = (0, local_folder_sync_1.collectLocalFolderFiles)(localPath, isSafePackPath);
+            const files = (0, local_folder_sync_1.collectLocalFolderFiles)(localPath, (rel) => isSafePackPath(rel) || isSafeOrgCapabilityPackPath(rel));
             const metadata = {
                 version: (0, local_folder_sync_1.localFolderVersion)(localPath),
                 backend: 'local-folder',

package/dist/src/cli/utils/org-publish.js

@@ -23,23 +23,38 @@ const os_1 = __importDefault(require("os"));
 const path_1 = __importDefault(require("path"));
 const user_config_1 = require("./user-config");
 const local_folder_sync_1 = require("./local-folder-sync");
+const capability_pack_1 = require("../../core/capability-pack");
 const PACK_RELATIVE_PATH = /^(context|rules|learnings)\/[\w.-]+\.md$/;
+// #868: the company brand descriptor is JSON stored beside org_context.md. It
+// publishes through the same backends as org markdown but is delivered verbatim
+// (no managed-content header — that decoration is markdown-only, added on sync).
+// Mirrors org-pack-sync.isSafePackPath and fraim-mcp-server.isOrgPackPublishRelativePath.
+const ORG_BRAND_PACK_PATH = 'context/org_brand.json';
 const ALLOWED_GIT_URL = /^(https?:\/\/|ssh:\/\/|git:\/\/|file:\/\/|[\w.-]+@[\w.-]+:)/;
 /**
- * Infer the org-pack location for a local file by its name:
+ * Infer the org-pack location for a local file by its name or path:
  *   org_context.md -> context/org_context.md
  *   org_rules.md   -> rules/org_rules.md
+ *   org_brand.json -> context/org_brand.json
  *   org-*.md       -> learnings/org-*.md
+ *   jobs/<cat>/<name>.md | skills/<cat>/<name>.md | rules/<cat>/<name>.md |
+ *   templates/<cat>/<name>.md -> capability path returned as-is (issue #869 Phase 2)
  */
 function packRelativePathFor(filePath) {
+    const normalized = filePath.replace(/\\/g, '/').replace(/^\/+/, '');
+    // Issue #869: if the caller passes a full capability-pack relative path, return it as-is.
+    if ((0, capability_pack_1.isCapabilityPackPath)(normalized))
+        return normalized;
     const base = path_1.default.basename(filePath);
     if (base === 'org_context.md')
         return 'context/org_context.md';
     if (base === 'org_rules.md')
         return 'rules/org_rules.md';
+    if (base === 'org_brand.json')
+        return ORG_BRAND_PACK_PATH;
     if (/^org-[\w.-]*\.md$/.test(base))
         return `learnings/${base}`;
-    throw new Error(`Cannot infer org-pack location for '${base}' (expected org_context.md, org_rules.md, or org-*.md)`);
+    throw new Error(`Cannot infer org-pack location for '${base}' (expected org_context.md, org_rules.md, org_brand.json, org-*.md, or a capability path like jobs/<cat>/<name>.md)`);
 }
 function gitCompareUrl(gitUrl, branch) {
     const httpUrl = gitUrl.replace(/\.git$/, '').replace(/^git@([^:]+):/, 'https://$1/');
@@ -60,8 +75,10 @@ async function publishOrgArtifacts(artifacts, opts) {
     if (artifacts.length === 0)
         throw new Error('No artifacts to publish.');
     for (const a of artifacts) {
-        if (!PACK_RELATIVE_PATH.test(a.relativePath)) {
-            throw new Error(`Invalid org-pack path '${a.relativePath}' (must be context|rules|learnings/<name>.md).`);
+        const isLegacyPath = PACK_RELATIVE_PATH.test(a.relativePath) || a.relativePath === ORG_BRAND_PACK_PATH;
+        const isCapabilityPath = (0, capability_pack_1.isCapabilityPackPath)(a.relativePath);
+        if (!isLegacyPath && !isCapabilityPath) {
+            throw new Error(`Invalid org-pack path '${a.relativePath}' (must be context|rules|learnings/<name>.md, context/org_brand.json, or a capability path like jobs/<cat>/<name>.md).`);
         }
     }
     if (organization.backend === 'local-folder') {

package/dist/src/config/persona-capability-bundles.js

@@ -1,24 +1,23 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PERSONA_CAPABILITY_BUNDLES = exports.FREE_JOBS = void 0;
+exports.PERSONA_CAPABILITY_BUNDLES = exports.FREE_JOBS = exports.GENERIC_WORKER_PERSONA_KEY = void 0;
 exports.isFreeJob = isFreeJob;
 exports.getPersonaCapabilityBundle = getPersonaCapabilityBundle;
 exports.getProtectedPersonaForJob = getProtectedPersonaForJob;
 exports.listPersonaCapabilityBundles = listPersonaCapabilityBundles;
 const persona_hiring_1 = require("./persona-hiring");
 const persona_catalog_routes_1 = require("../routes/persona-catalog-routes");
-exports.FREE_JOBS = new Set([
-    'create-architecture',
-    'project-scaffolding',
-    'blue-sky-brainstorming',
-    'codebase-analysis-and-ideation',
-    'domain-registration-research',
-    'google-workspace-setup',
-    'github-org-setup',
-    'contribute-to-fraim',
-    'file-fraim-issue',
-    'praise-fraim',
-]);
+// The Hub-only generic worker identity. It is NOT a hireable persona in
+// PERSONA_HIRE_CATALOG and NOT a PERSONA_CAPABILITY_BUNDLES entry, so it never
+// appears in the persona catalog, pricing, or hire flows. FRAIM-internal jobs
+// that no named specialist owns resolve to this key so the Hub attributes them
+// to FRAIMworker; consumers that gate on ownership must treat it as ungated.
+exports.GENERIC_WORKER_PERSONA_KEY = 'fraimworker';
+// Issue #902: the FREE_JOBS bypass is retired. Every catalog job now resolves
+// through explicit named ownership (see getProtectedPersonaForJob). This set is
+// intentionally empty and isFreeJob() always returns false; both are retained as
+// a stable compatibility surface for existing callers and tests.
+exports.FREE_JOBS = new Set();
 function isFreeJob(jobName) {
     return exports.FREE_JOBS.has(jobName);
 }
@@ -46,7 +45,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'beza',
         bundleId: 'persona-beza-core',
         catalogMetadata: buildCatalogMetadata('beza', ['competitive-analysis', 'review-business-strategy', 'pricing-strategy-definition']),
-        protectedJobs: ['competitive-analysis', 'review-business-strategy', 'business-plan-creation', 'problem-statement-crystallization', 'business-idea-validation-and-scoping', 'founder-market-fit-analysis', 'advisory-board-development', 'advisor-interview', 'advisory-board-selection', 'pricing-strategy-definition'],
+        protectedJobs: ['competitive-analysis', 'review-business-strategy', 'business-plan-creation', 'problem-statement-crystallization', 'business-idea-validation-and-scoping', 'founder-market-fit-analysis', 'advisory-board-development', 'advisor-interview', 'advisory-board-selection', 'pricing-strategy-definition', 'blue-sky-brainstorming'],
         protectedAliases: ['business-strategy', 'company-strategy'],
         defaultHireMode: 'job',
         lockCopy: 'Hire BeZa to unlock business strategy work for this request.'
@@ -91,7 +90,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'gautam',
         bundleId: 'persona-gautam-core',
         catalogMetadata: buildCatalogMetadata('gautam', ['analyze-revenue-system', 'build-gtm-motion', 'domain-registration-research']),
-        protectedJobs: ['marketing-strategy-definition', 'product-launch-management', 'evangelist-content-development', 'funnel-analysis', 'growth-loop-design', 'analyze-revenue-system', 'design-gtm-system', 'build-gtm-motion', 'build-gtm-stack', 'plan-gtm-team', 'marketing-content-creation', 'ppc-campaign-management', 'paid-social-strategy', 'ad-performance-analysis', 'tracking-and-attribution-setup', 'developer-advocacy', 'seo-strategy', 'marketing-analytics-review', 'linkedin-company-page-setup', 'x-account-setup', 'domain-registration-research', 'social-engagement-campaign', 'thought-leadership-engagement', 'promo-video-creation', 'linkedin-carousel-from-deck', 'notebooklm-infographic', 'notebooklm-podcast', 'notebooklm-presentation', 'notebooklm-report', 'notebooklm-video-overview'],
+        protectedJobs: ['marketing-strategy-definition', 'product-launch-management', 'evangelist-content-development', 'funnel-analysis', 'growth-loop-design', 'analyze-revenue-system', 'design-gtm-system', 'build-gtm-motion', 'build-gtm-stack', 'plan-gtm-team', 'marketing-content-creation', 'ppc-campaign-management', 'paid-social-strategy', 'ad-performance-analysis', 'tracking-and-attribution-setup', 'developer-advocacy', 'seo-strategy', 'marketing-analytics-review', 'linkedin-company-page-setup', 'x-account-setup', 'domain-registration-research', 'social-engagement-campaign', 'thought-leadership-engagement', 'promo-video-creation', 'linkedin-carousel-from-deck', 'notebooklm-content-generation'],
         protectedAliases: ['gtm', 'marketing'],
         defaultHireMode: 'job',
         lockCopy: 'Hire GauTaM to unlock go-to-market and paid media work for this request.'
@@ -126,8 +125,8 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
     mandy: {
         personaKey: 'mandy',
         bundleId: 'persona-mandy-core',
-        catalogMetadata: buildCatalogMetadata('mandy', ['fully-delegate', 'stakeholder-status-reporting', 'weekly-operating-review']),
-        protectedJobs: ['fully-delegate', 'delivery-governance-review', 'issue-preparation', 'issue-retrospective', 'work-completion', 'stakeholder-status-reporting', 'send-stakeholder-update', 'weekly-operating-review', 'cross-functional-dependency-management', 'portfolio-impact-report'],
+        catalogMetadata: buildCatalogMetadata('mandy', ['fully-delegate', 'issue-preparation', 'operational-reporting']),
+        protectedJobs: ['fully-delegate', 'delivery-governance-review', 'issue-preparation', 'issue-retrospective', 'work-completion', 'operational-reporting', 'send-stakeholder-update', 'cross-functional-dependency-management'],
         protectedAliases: ['manager', 'team-lead', 'orchestrator'],
         defaultHireMode: 'job',
         lockCopy: 'Hire MANdy to unlock autonomous multi-role orchestration — MANdy plans the job sequence, runs sub-agents in parallel, coaches them through verification loops, and hands back a synthesized DRAFT for your approval.'
@@ -181,7 +180,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'casey',
         bundleId: 'persona-casey-core',
         catalogMetadata: buildCatalogMetadata('casey', ['update-crm', 'support-case-resolution', 'support-system-operationalization']),
-        protectedJobs: ['crm-account-health-review', 'crm-case-resolution', 'customer-health-review', 'loyalty-program-management', 'survey-campaign-management', 'update-crm', 'support-queue-management', 'support-case-resolution', 'support-sop-operationalization', 'support-system-operationalization', 'support-playbook-evaluation', 'user-survey-management'],
+        protectedJobs: ['crm-case-resolution', 'customer-health-review', 'loyalty-program-management', 'survey-campaign-management', 'update-crm', 'support-queue-management', 'support-case-resolution', 'support-sop-operationalization', 'support-system-operationalization', 'support-playbook-evaluation', 'user-survey-management'],
         protectedAliases: ['customer-success', 'customer-support', 'csm', 'support'],
         defaultHireMode: 'job',
         lockCopy: 'Hire CaSey to unlock customer success and support work for this request.'
@@ -211,7 +210,7 @@ exports.PERSONA_CAPABILITY_BUNDLES = {
         personaKey: 'mona',
         bundleId: 'persona-mona-core',
         catalogMetadata: buildCatalogMetadata('mona', ['financial-analysis', 'fundraising-prospect-discovery', 'investor-pitch-preparation']),
-        protectedJobs: ['financial-analysis', 'fpa-and-forecasting', 'monthly-close-review', 'tax-strategy-planning', 'aws-activate-credits-application', 'community-funding-preparation', 'fundraising-prospect-discovery', 'google-cloud-credits-application', 'investor-pitch-preparation', 'microsoft-azure-credits-application', 'review-funding-preparation', 'invoice-generation', 'business-banking-setup'],
+        protectedJobs: ['financial-analysis', 'fpa-and-forecasting', 'monthly-close-review', 'tax-strategy-planning', 'cloud-credits-application', 'community-funding-preparation', 'fundraising-prospect-discovery', 'investor-pitch-preparation', 'review-funding-preparation', 'invoice-generation', 'business-banking-setup'],
         protectedAliases: ['finance', 'financial-modeling', 'fpa', 'bookkeeping'],
         defaultHireMode: 'job',
         lockCopy: 'Hire MONa to unlock financial modeling, FP&A, and tax strategy work for this request.'
@@ -269,14 +268,27 @@ for (const bundle of Object.values(exports.PERSONA_CAPABILITY_BUNDLES)) {
         PROTECTED_JOB_TO_PERSONA.set(jobName, bundle.personaKey);
     }
 }
+// FRAIM-internal jobs owned by the generic FRAIMworker identity rather than a
+// named specialist persona. They resolve through ownership (never short-circuited
+// as "free") so the Hub attributes them to FRAIMworker, but they are never
+// hire-gated because FRAIMworker is not a purchasable persona.
+const GENERIC_WORKER_OWNED_JOBS = new Set([
+    'contribute-to-fraim',
+    'file-fraim-issue',
+    'praise-fraim',
+]);
 function getPersonaCapabilityBundle(personaKey) {
     return exports.PERSONA_CAPABILITY_BUNDLES[personaKey];
 }
 function getProtectedPersonaForJob(jobName) {
-    if (isFreeJob(jobName)) {
-        return null;
+    const protectedPersona = PROTECTED_JOB_TO_PERSONA.get(jobName);
+    if (protectedPersona) {
+        return protectedPersona;
+    }
+    if (GENERIC_WORKER_OWNED_JOBS.has(jobName)) {
+        return exports.GENERIC_WORKER_PERSONA_KEY;
     }
-    return PROTECTED_JOB_TO_PERSONA.get(jobName) || null;
+    return null;
 }
 function listPersonaCapabilityBundles() {
     return Object.values(exports.PERSONA_CAPABILITY_BUNDLES);

package/dist/src/core/capability-pack.js

@@ -0,0 +1,85 @@
+"use strict";
+/**
+ * Shared allowlist contract for capability-pack paths (issue #869).
+ *
+ * A single source of truth for which relative paths are valid capability
+ * members in a manager or org pack. All publish validators, sync guards, and
+ * resolver overlay checks import from here so the allowlist never drifts.
+ *
+ * Phase-1 scope: jobs, skills, rules/<category>/…, templates, scripts.
+ * (Scripts are accepted by isCapabilityPackPath so the guard is correct from
+ * Phase 1; the server-side security gate for scripts is Phase 3 work.)
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.CAPABILITY_DIRS = void 0;
+exports.isCapabilityPackPath = isCapabilityPackPath;
+exports.isScriptPath = isScriptPath;
+exports.shouldDecorateAsMarkdown = shouldDecorateAsMarkdown;
+exports.CAPABILITY_DIRS = ['jobs', 'skills', 'rules', 'templates', 'scripts'];
+/**
+ * Returns true when `rel` is a valid capability-pack member path:
+ *
+ *   jobs/<category>/<name>.md
+ *   skills/<category>/<name>.md
+ *   templates/<category>/<name>.md
+ *   rules/<category>/<name>.md          (depth ≥ 2 — flat rules/<name>.md is reserved)
+ *   scripts/<name>.<ext>
+ *
+ * Rejects: path traversal (../ or \), absolute paths (/), control characters,
+ * flat rules/<name>.md (reserved for org_rules.md / manager_rules.md).
+ */
+function isCapabilityPackPath(rel) {
+    if (!rel)
+        return false;
+    // Reject control characters (includes null bytes, newlines, etc.)
+    // eslint-disable-next-line no-control-regex
+    if (/[\x00-\x1F\x7F]/.test(rel))
+        return false;
+    // Reject backslashes (Windows-style traversal)
+    if (rel.includes('\\'))
+        return false;
+    // Reject absolute paths
+    if (rel.startsWith('/'))
+        return false;
+    // Reject any path traversal sequence
+    const parts = rel.split('/');
+    if (parts.some(p => p === '..' || p === '.'))
+        return false;
+    const [dir, ...rest] = parts;
+    // Must be one of the five capability directories
+    if (!exports.CAPABILITY_DIRS.includes(dir))
+        return false;
+    if (dir === 'scripts') {
+        // scripts/<name>.<ext> — exactly one path segment with an extension
+        if (rest.length !== 1)
+            return false;
+        const name = rest[0];
+        return name.length > 0 && /\.[a-zA-Z]+$/.test(name);
+    }
+    if (dir === 'rules') {
+        // rules/<category>/<name>.md — depth exactly 2 (no flat rules/)
+        if (rest.length !== 2)
+            return false;
+        const [, name] = rest;
+        return name.endsWith('.md') && name.length > 3;
+    }
+    // jobs, skills, templates: <dir>/<category>/<name>.md — depth exactly 2
+    if (rest.length !== 2)
+        return false;
+    const [, name] = rest;
+    return name.endsWith('.md') && name.length > 3;
+}
+/** True when the path is a script (executable) capability member. */
+function isScriptPath(rel) {
+    if (!isCapabilityPackPath(rel))
+        return false;
+    return rel.startsWith('scripts/');
+}
+/**
+ * True when a sync pack file should receive the managed-content header on
+ * materialization. Only markdown files get the header; scripts and JSON ride
+ * verbatim. Shared between manager-pack-sync and org-pack-sync.
+ */
+function shouldDecorateAsMarkdown(relativePath) {
+    return relativePath.toLowerCase().endsWith('.md');
+}

package/dist/src/core/manager-pack.js

@@ -7,12 +7,13 @@ exports.MANAGER_PACK_RELATIVE_PATH_RE = exports.MANAGER_LEARNING_FILE_RE = expor
 exports.isManagerPackRelativePath = isManagerPackRelativePath;
 exports.managerPackRelativePathForFileName = managerPackRelativePathForFileName;
 const path_1 = __importDefault(require("path"));
+const capability_pack_1 = require("./capability-pack");
 exports.MANAGER_CONTEXT_RELATIVE_PATH = 'context/manager_context.md';
 exports.MANAGER_RULES_RELATIVE_PATH = 'rules/manager_rules.md';
 exports.MANAGER_LEARNING_FILE_RE = /^(?!org-)[A-Za-z0-9._%+@-]+-(mistake-patterns|preferences|manager-coaching|validated-patterns)\.md$/;
 exports.MANAGER_PACK_RELATIVE_PATH_RE = /^(context\/manager_context\.md|rules\/manager_rules\.md|learnings\/(?!org-)[A-Za-z0-9._%+@-]+-(mistake-patterns|preferences|manager-coaching|validated-patterns)\.md)$/;
 function isManagerPackRelativePath(value) {
-    return exports.MANAGER_PACK_RELATIVE_PATH_RE.test(value);
+    return exports.MANAGER_PACK_RELATIVE_PATH_RE.test(value) || (0, capability_pack_1.isCapabilityPackPath)(value);
 }
 function managerPackRelativePathForFileName(fileName) {
     const base = path_1.default.basename(fileName);
@@ -22,5 +23,10 @@ function managerPackRelativePathForFileName(fileName) {
         return exports.MANAGER_RULES_RELATIVE_PATH;
     if (exports.MANAGER_LEARNING_FILE_RE.test(base))
         return `learnings/${base}`;
+    // Capability files carry their full relative path as-is (e.g. jobs/cat/name.md).
+    // callers that have the full relative path should pass it directly to
+    // isManagerPackRelativePath; this filename-only lookup cannot reconstruct the
+    // category from a bare basename, so return null and let the caller supply the
+    // full path.
     return null;
 }

package/dist/src/core/utils/local-registry-resolver.js

@@ -53,6 +53,10 @@ class LocalRegistryResolver {
         this.remoteContentResolver = options.remoteContentResolver;
         this.parser = new inheritance_parser_1.InheritanceParser(options.maxDepth);
         this.shouldFilter = options.shouldFilter;
+        // Issue #869: default manager cache root to ~/.fraim/manager/
+        this.managerCacheRoot = options.managerCacheRoot ?? (0, path_1.join)((0, project_fraim_paths_1.getUserFraimDirPath)(), 'manager');
+        // Issue #869 Phase 2: default org cache root to ~/.fraim/org/
+        this.orgCacheRoot = options.orgCacheRoot ?? (0, path_1.join)((0, project_fraim_paths_1.getUserFraimDirPath)(), 'org');
     }
     /**
      * Get a path within the effective FRAIM directory.
@@ -225,9 +229,70 @@ class LocalRegistryResolver {
             return null;
         }
     }
+    /**
+     * Issue #869: read a capability file from the manager overlay cache
+     * (~/.fraim/manager/<type>/…). Returns null if not present or filtered.
+     *
+     * Security: the cache is written by the sync layer which already validated
+     * paths; we defensively resolve and check the canonical path stays inside
+     * the cache root to guard against future path-traversal bugs in sync.
+     */
+    readManagerOverlayFile(path) {
+        const normalized = path.replace(/\\/g, '/').replace(/^\/+/, '');
+        const destination = (0, path_1.join)(this.managerCacheRoot, ...normalized.split('/'));
+        // Guard: resolved path must stay within the manager cache root.
+        const resolved = (0, path_1.resolve)(destination);
+        const cacheResolved = (0, path_1.resolve)(this.managerCacheRoot);
+        if (!resolved.startsWith(cacheResolved + path_1.sep) && resolved !== cacheResolved) {
+            return null;
+        }
+        if (!(0, fs_1.existsSync)(destination))
+            return null;
+        try {
+            const content = (0, fs_1.readFileSync)(destination, 'utf-8');
+            if (this.shouldFilter && this.shouldFilter(content))
+                return null;
+            return content;
+        }
+        catch {
+            return null;
+        }
+    }
+    /**
+     * Issue #869 Phase 2: read a capability file from the org overlay cache
+     * (~/.fraim/org/<type>/…). Returns null if not present or filtered.
+     *
+     * Precedence: project > manager > org > synced baseline > registry > remote.
+     * Security: same canonical-path containment guard as readManagerOverlayFile.
+     */
+    readOrgOverlayFile(path) {
+        const normalized = path.replace(/\\/g, '/').replace(/^\/+/, '');
+        const destination = (0, path_1.join)(this.orgCacheRoot, ...normalized.split('/'));
+        const resolved = (0, path_1.resolve)(destination);
+        const cacheResolved = (0, path_1.resolve)(this.orgCacheRoot);
+        if (!resolved.startsWith(cacheResolved + path_1.sep) && resolved !== cacheResolved) {
+            return null;
+        }
+        if (!(0, fs_1.existsSync)(destination))
+            return null;
+        try {
+            const content = (0, fs_1.readFileSync)(destination, 'utf-8');
+            if (this.shouldFilter && this.shouldFilter(content))
+                return null;
+            return content;
+        }
+        catch {
+            return null;
+        }
+    }
     readWorkspaceRegistryFile(path) {
         const normalizedPath = path.replace(/\\/g, '/').replace(/^\/+/, '');
-        const registryPath = (0, path_1.join)(this.workspaceRoot, 'registry', ...normalizedPath.split('/'));
+        const registryRoot = (0, path_1.join)(this.workspaceRoot, 'registry');
+        const registryPath = (0, path_1.join)(registryRoot, ...normalizedPath.split('/'));
+        const resolved = (0, path_1.resolve)(registryPath);
+        const rootResolved = (0, path_1.resolve)(registryRoot);
+        if (!resolved.startsWith(rootResolved + path_1.sep) && resolved !== rootResolved)
+            return null;
         if (!(0, fs_1.existsSync)(registryPath)) {
             return null;
         }
@@ -386,6 +451,28 @@ class LocalRegistryResolver {
         const stripMcpHeader = options.stripMcpHeader ?? false;
         // Check for local override
         if (!this.hasLocalOverride(path)) {
+            // Issue #869: manager overlay (precedence 2 — between project override and synced baseline)
+            const managerOverlayContent = this.readManagerOverlayFile(path);
+            if (managerOverlayContent !== null) {
+                return {
+                    content: managerOverlayContent,
+                    source: 'local',
+                    personalized: true,
+                    inherited: false,
+                    scope: 'manager'
+                };
+            }
+            // Issue #869 Phase 2: org overlay (precedence 3 — after manager, before synced baseline)
+            const orgOverlayContent = this.readOrgOverlayFile(path);
+            if (orgOverlayContent !== null) {
+                return {
+                    content: orgOverlayContent,
+                    source: 'local',
+                    personalized: true,
+                    inherited: false,
+                    scope: 'org'
+                };
+            }
             const syncedLocalContent = this.readSyncedLocalFile(path);
             if (syncedLocalContent !== null) {
                 // Synced baseline (fraim/ai-employee), not personalized.
@@ -463,7 +550,8 @@ class LocalRegistryResolver {
             source: 'local',
             personalized: true,
             inherited: resolved.imports.length > 0,
-            imports: resolved.imports.length > 0 ? resolved.imports : undefined
+            imports: resolved.imports.length > 0 ? resolved.imports : undefined,
+            scope: 'project'
         };
         // Add metadata comment
         if (includeMetadata) {

package/dist/src/services/persona-entitlement-service.js

@@ -285,7 +285,10 @@ async function evaluatePersonaAccess(dbService, userId, jobName, apiKey, returnT
         .map((entitlement) => entitlement.personaKey)
         .filter((personaKey) => (0, persona_hiring_1.isPersonaHireKey)(personaKey))));
     const protectedPersonaKey = (0, persona_capability_bundles_1.getProtectedPersonaForJob)(jobName);
-    if (!protectedPersonaKey) {
+    // No protected owner, or a non-hireable owner (the display-only FRAIMworker
+    // identity, issue #902), means the job is not hire-gated. Allow it and never
+    // look the key up in PERSONA_HIRE_CATALOG, which is undefined for FRAIMworker.
+    if (!protectedPersonaKey || !(0, persona_hiring_1.isPersonaHireKey)(protectedPersonaKey)) {
         return {
             allowed: true,
             personaKey: null,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fraim",
-  "version": "2.0.218",
+  "version": "2.0.220",
   "description": "FRAIM core CLI and MCP package.",
   "main": "index.js",
   "bin": {