fraim 2.0.271 → 2.0.272

package/dist/src/cli/commands/setup.js

@@ -36,15 +36,14 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.setupCommandInitialization = exports.setupCommand = exports.runSetup = exports.saveGlobalConfig = void 0;
-// Refactored setup.ts - Generic provider system with zero hardcoded provider knowledge
+exports.setupCommand = exports.runSetup = exports.saveGlobalConfig = void 0;
+// Global FRAIM setup. Third-party provider setup is delegated to connect-mcp.
 const commander_1 = require("commander");
 const chalk_1 = __importDefault(require("chalk"));
 const prompts_1 = __importDefault(require("prompts"));
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const add_ide_1 = require("./add-ide");
-const provider_registry_1 = require("../providers/provider-registry");
 const script_sync_utils_1 = require("../utils/script-sync-utils");
 function parseModeOption(mode) {
     if (mode === 'conversational' || mode === 'integrated' || mode === 'split') {
@@ -204,10 +203,10 @@ const runSetup = async (options) => {
             if (!isKeyUpdate) {
                 console.log(chalk_1.default.gray('   Current configuration:'));
                 console.log(chalk_1.default.gray(`   • Mode: ${mode}`));
-                console.log(chalk_1.default.gray('   • Platforms: managed per-project via fraim add-provider'));
+                console.log(chalk_1.default.gray('   • Platforms: connected by your agent through the FRAIM connect-mcp skill'));
                 console.log();
                 if (process.env.FRAIM_NON_INTERACTIVE || process.env.CI) {
-                    console.log(chalk_1.default.gray('Setup already configured. Use "fraim add-provider <provider>" to connect platforms.'));
+                    console.log(chalk_1.default.gray('Setup already configured. Ask your agent to use the FRAIM connect-mcp skill for platforms.'));
                     return;
                 }
                 const response = await (0, prompts_1.default)({
@@ -252,9 +251,9 @@ const runSetup = async (options) => {
                     console.log(chalk_1.default.blue('\n💾 Saving global configuration...'));
                     (0, exports.saveGlobalConfig)(fraimKey, mode);
                     console.log(chalk_1.default.blue('\n🔌 Configuring MCP servers...'));
-                    await (0, add_ide_1.runAddIDE)({ ide: options.ide, all: !options.ide, skipTokenPrompts: true });
+                    await (0, add_ide_1.runAddIDE)({ ide: options.ide, all: !options.ide });
                     console.log(chalk_1.default.green('\n🎯 Reconfiguration complete!'));
-                    console.log(chalk_1.default.cyan('\n💡 To connect platforms, run: fraim add-provider <github|gitlab|ado|jira>'));
+                    console.log(chalk_1.default.cyan('\n💡 To connect a platform, ask your agent to use the FRAIM connect-mcp skill.'));
                     return;
                 }
             }
@@ -272,12 +271,12 @@ const runSetup = async (options) => {
         console.log(chalk_1.default.gray('   • Configure FRAIM MCP servers in your IDEs'));
         console.log(chalk_1.default.gray('   • Sync FRAIM scripts to your system\n'));
         console.log(chalk_1.default.gray('   Platforms (GitHub, GitLab, etc.) are connected per-project'));
-        console.log(chalk_1.default.gray('   via "fraim add-provider" — no tokens needed here.\n'));
+        console.log(chalk_1.default.gray('   by your agent through the FRAIM connect-mcp skill.\n'));
         fraimKey = options.key || await promptForFraimKey();
         console.log(chalk_1.default.green('✅ FRAIM key accepted\n'));
         mode = options.mode ? parseModeOption(options.mode) : await promptForMode();
     }
-    // Save global configuration (key + mode only; provider tokens live in IDE MCP configs)
+    // Save global configuration (key + mode only; third-party authentication is provider/host-owned)
     console.log(chalk_1.default.blue('💾 Saving global configuration...'));
     (0, exports.saveGlobalConfig)(fraimKey, mode);
     // Configure MCP servers and install IDE surfaces (slash commands, rules)
@@ -285,10 +284,10 @@ const runSetup = async (options) => {
     console.log(chalk_1.default.blue(isUpdate ? '\n🔄 Updating IDE MCP configurations...' : '\n🔌 Configuring MCP servers...'));
     if (!isUpdate && mode === 'conversational') {
         console.log(chalk_1.default.yellow('ℹ️  Conversational mode: Configuring FRAIM MCP server'));
-        console.log(chalk_1.default.gray('   FRAIM jobs will work; platform-specific features are added via fraim add-provider\n'));
+        console.log(chalk_1.default.gray('   FRAIM jobs will work; platform connections are handled through the FRAIM connect-mcp skill\n'));
     }
     try {
-        await (0, add_ide_1.runAddIDE)({ ide: options.ide, all: isUpdate || !options.ide, skipTokenPrompts: true });
+        await (0, add_ide_1.runAddIDE)({ ide: options.ide, all: isUpdate || !options.ide });
     }
     catch (e) {
         console.log(chalk_1.default.yellow('⚠️  MCP configuration encountered issues'));
@@ -368,9 +367,9 @@ const runSetup = async (options) => {
             console.log(chalk_1.default.gray('    This enables project-specific customizations,'));
             console.log(chalk_1.default.gray('    GitHub workflows, and team learning.'));
             console.log(chalk_1.default.cyan('\n  To connect platforms (GitHub, GitLab, ADO, Jira):'));
-            console.log(chalk_1.default.white('    fraim add-provider <provider>'));
-            console.log(chalk_1.default.gray('    Provider tokens are stored directly in IDE MCP configs.'));
-            console.log(chalk_1.default.gray('    GitHub uses IDE-native OAuth — no token needed.'));
+            console.log(chalk_1.default.white('    Ask your agent to use the FRAIM connect-mcp skill.'));
+            console.log(chalk_1.default.gray('    The agent follows current provider and host guidance for each selected target.'));
+            console.log(chalk_1.default.gray('    Authentication and credential entry stay outside model context.'));
         }
     }
     else {
@@ -390,44 +389,8 @@ const runSetup = async (options) => {
 };
 exports.runSetup = runSetup;
 exports.setupCommand = new commander_1.Command('setup')
-    .description('Complete global FRAIM setup with platform configuration')
+    .description('Complete global FRAIM setup')
     .option('--key <key>', 'FRAIM API key')
     .option('--mode <mode>', 'Usage mode: integrated | split | conversational')
     .option('--ide <ides>', 'Configure specific IDEs');
-// Track initialization promise for CLI entry point
-exports.setupCommandInitialization = null;
-// Dynamically add provider options from registry (async initialization)
-exports.setupCommandInitialization = (async () => {
-    try {
-        const allProviderIds = await (0, provider_registry_1.getAllProviderIds)();
-        for (const providerId of allProviderIds) {
-            const provider = await (0, provider_registry_1.getProvider)(providerId);
-            if (!provider)
-                continue;
-            // Add provider flag (e.g., --github)
-            exports.setupCommand.option(`--${providerId}`, `Add/update ${provider.displayName} integration`);
-            // Add token option (e.g., --github-token) - primarily for testing/automation
-            exports.setupCommand.option(`--${providerId}-token <token>`, `${provider.displayName} token (optional - will prompt if not provided)`);
-            // Add config options if provider requires them
-            const configReqs = await (0, provider_registry_1.getProviderConfigRequirements)(providerId);
-            configReqs.forEach(req => {
-                // Use custom CLI option name if provided, otherwise convert key to kebab-case
-                const optionSuffix = req.cliOptionName || req.key.replace(/([A-Z])/g, '-$1').toLowerCase();
-                const optionName = `${providerId}-${optionSuffix}`;
-                exports.setupCommand.option(`--${optionName} <value>`, `${req.description} (optional - will prompt if not provided)`);
-            });
-        }
-    }
-    catch (error) {
-        // If we can't fetch providers (e.g., no config yet), that's okay
-        // The command will still work, just without dynamic options
-    }
-})();
-// Wrap the action to ensure initialization completes first
-exports.setupCommand.action(async (options) => {
-    // Wait for dynamic options to be registered
-    if (exports.setupCommandInitialization) {
-        await exports.setupCommandInitialization;
-    }
-    return (0, exports.runSetup)(options);
-});
+exports.setupCommand.action(exports.runSetup);

package/dist/src/cli/commands/sync.js

@@ -181,46 +181,34 @@ function failSync(mode, message) {
 }
 const runSync = async (options) => {
     const failHard = options.failHard ?? 'exit';
-    // Handle --global flag: sync to user-level ~/.fraim/ instead of project
-    if (options.global) {
-        console.log(chalk_1.default.blue('Syncing FRAIM content to user-level directory (~/.fraim/)...'));
-        try {
-            const { syncUserLevelArtifacts } = await Promise.resolve().then(() => __importStar(require('../setup/user-level-sync')));
-            await syncUserLevelArtifacts();
-            console.log(chalk_1.default.green('\n✅ User-level FRAIM content sync complete.'));
-        }
-        catch (error) {
-            console.error(chalk_1.default.red(`User-level sync failed: ${error.message}`));
-            failSync(failHard, `User-level sync failed: ${error.message}`);
-        }
-        return;
-    }
     const projectRoot = options.projectRoot ? path_1.default.resolve(options.projectRoot) : process.cwd();
-    const config = (0, config_loader_1.loadFraimConfig)((0, project_fraim_paths_1.getWorkspaceConfigPath)(projectRoot));
-    const fraimDir = (0, project_fraim_paths_1.getWorkspaceFraimDir)(projectRoot);
-    const refreshLocalIgnoreConfig = () => {
-        const ignoreUpdate = (0, fraim_gitignore_1.ensureFraimSyncedContentLocallyExcluded)(projectRoot);
-        if (ignoreUpdate.gitInfoExcludeUpdated) {
-            console.log(chalk_1.default.green('Updated .git/info/exclude FRAIM managed block'));
+    // ─── Credential resolution (before project detection) ─────────────────────
+    // Order: user-level config → env var → project config (only if in a project)
+    const remoteUrl = process.env.FRAIM_REMOTE_URL || 'https://fraim.wellnessatwork.me';
+    let apiKey = loadUserApiKey() || process.env.FRAIM_API_KEY;
+    const hasProject = (0, project_fraim_paths_1.workspaceFraimExists)(projectRoot);
+    if (!apiKey && hasProject) {
+        const config = (0, config_loader_1.loadFraimConfig)((0, project_fraim_paths_1.getWorkspaceConfigPath)(projectRoot));
+        apiKey = config.apiKey;
+    }
+    if (!apiKey) {
+        if (process.env.TEST_MODE === 'true') {
+            console.log(chalk_1.default.yellow('TEST_MODE: No API key configured. Using test placeholder key.'));
+            apiKey = 'test-mode-key';
         }
-        if (ignoreUpdate.gitignoreUpdated) {
-            console.log(chalk_1.default.green('Removed legacy FRAIM sync block from .gitignore'));
+        else {
+            console.error(chalk_1.default.red('No API key configured. Cannot sync.'));
+            console.error(chalk_1.default.yellow('Set FRAIM_API_KEY in your environment, or add apiKey to ~/.fraim/config.json'));
+            console.error(chalk_1.default.yellow('Or use --local to sync from a locally running FRAIM server.'));
+            failSync(failHard, 'No API key configured.');
         }
-    };
-    // Issue #563: refresh the machine-level org cache (~/.fraim/org/) from the
-    // configured org backend. Failures never fail the sync: an existing cache is
-    // served stale with its age (R2.3, R4.3).
-    const refreshOrgCache = async (remoteUrl, apiKey) => {
-        // Org sync is a network round-trip to the org backend. In automated
-        // tests there is no org configured and no server to reach, so skip it
-        // entirely rather than emit warnings or attempt a real request. Local
-        // dev (--local / FRAIM_LOCAL_SYNC) passes the loopback URL + 'local-dev'
-        // key below, which syncOrgCache treats as "no cloud org" unless a git
-        // backend is configured, so it degrades cleanly without this guard.
+    }
+    // ─── Closures shared between layers ───────────────────────────────────────
+    const refreshOrgCache = async (url, key) => {
         if (process.env.TEST_MODE === 'true')
             return;
         const { syncOrgCache } = await Promise.resolve().then(() => __importStar(require('../utils/org-pack-sync')));
-        const outcome = await syncOrgCache({ remoteUrl, apiKey });
+        const outcome = await syncOrgCache({ remoteUrl: url, apiKey: key });
         if (outcome.status === 'synced') {
             console.log(chalk_1.default.green(`Org context synced (${outcome.metadata.backend}, version ${outcome.metadata.version.slice(0, 12)})`));
         }
@@ -230,8 +218,6 @@ const runSync = async (options) => {
         else if (outcome.status === 'absent') {
             console.log(chalk_1.default.yellow(`Org context not synced: ${outcome.error}`));
         }
-        // Migrate stranded content from the legacy standard path to contentRoot,
-        // then report any files that still could not be moved.
         try {
             const { migrateStrandedContent, findStrandedLegacyContent, resolvePackHome } = await Promise.resolve().then(() => __importStar(require('../utils/pack-home')));
             migrateStrandedContent('org');
@@ -247,10 +233,6 @@ const runSync = async (options) => {
             }
         }
         catch { /* reporting must never fail a sync */ }
-        // 'disabled' (no org configured) stays silent.
-        // R8.1: one-time publish offer for legacy machine-local org files. The
-        // publish itself runs through organization-onboarding (propose-and-approve);
-        // sync only surfaces the offer and never moves files on its own (R8.2).
         if (outcome.status !== 'disabled') {
             const { detectLegacyOrgArtifacts } = await Promise.resolve().then(() => __importStar(require('../utils/org-migration')));
             const legacy = detectLegacyOrgArtifacts();
@@ -260,11 +242,11 @@ const runSync = async (options) => {
             }
         }
     };
-    const refreshManagerCache = async (remoteUrl, apiKey) => {
+    const refreshManagerCache = async (url, key) => {
         if (process.env.TEST_MODE === 'true')
             return;
         const { syncManagerCache } = await Promise.resolve().then(() => __importStar(require('../utils/manager-pack-sync')));
-        const outcome = await syncManagerCache({ remoteUrl, apiKey });
+        const outcome = await syncManagerCache({ remoteUrl: url, apiKey: key });
         if (outcome.status === 'synced') {
             console.log(chalk_1.default.green(`Manager context synced (${outcome.metadata.backend}, version ${outcome.metadata.version.slice(0, 12)})`));
         }
@@ -274,8 +256,6 @@ const runSync = async (options) => {
         else if (outcome.status === 'absent') {
             console.log(chalk_1.default.yellow(`Manager context not synced: ${outcome.error}`));
         }
-        // Migrate stranded content from the legacy standard path to contentRoot,
-        // then report any files that still could not be moved.
         try {
             const { migrateStrandedContent, findStrandedLegacyContent, resolvePackHome } = await Promise.resolve().then(() => __importStar(require('../utils/pack-home')));
             migrateStrandedContent('manager');
@@ -292,25 +272,17 @@ const runSync = async (options) => {
         }
         catch { /* reporting must never fail a sync */ }
     };
-    const isNpx = process.env.npm_config_prefix === undefined || process.env.npm_lifecycle_event === 'npx';
-    const isGlobal = !isNpx && (process.env.npm_config_global === 'true' || process.env.npm_config_prefix);
-    if (isGlobal && !options.skipUpdates) {
-        console.log(chalk_1.default.yellow('You are running a global installation of FRAIM.'));
-        console.log(chalk_1.default.gray('Updates are not automatic in this mode.'));
-        console.log(chalk_1.default.cyan('Recommended: Use "npx fraim@latest sync" instead.\n'));
-    }
-    const { syncFromRemote } = await Promise.resolve().then(() => __importStar(require('../utils/remote-sync')));
-    // Allow `FRAIM_LOCAL_SYNC=1` to flip into local-mode without needing
-    // the --local CLI flag. The FRE's runProjectRow path doesn't surface
-    // a --local flag, but devs validating the FRE locally need a way to
-    // point sync at their localhost MCP server. With this env var set,
-    // any caller (including the FRE) routes through the local sync path
-    // exactly as if the user had passed --local.
+    // ─── Local sync shortcut (dev mode) ───────────────────────────────────────
     const useLocal = options.local || process.env.FRAIM_LOCAL_SYNC === '1';
     if (useLocal) {
         console.log(chalk_1.default.blue('Syncing FRAIM jobs from local server...'));
         const localPort = process.env.FRAIM_MCP_PORT ? parseInt(process.env.FRAIM_MCP_PORT) : (0, git_utils_1.getPort)();
         const localUrl = resolveExplicitLocalSyncUrl() || `http://localhost:${localPort}`;
+        const { syncFromRemote } = await Promise.resolve().then(() => __importStar(require('../utils/remote-sync')));
+        if (!hasProject) {
+            console.error(chalk_1.default.red('Local sync requires a FRAIM project directory (fraim/ must exist).'));
+            failSync(failHard, 'Local sync requires a project directory.');
+        }
         const result = await syncFromRemote({
             remoteUrl: localUrl,
             apiKey: 'local-dev',
@@ -319,9 +291,16 @@ const runSync = async (options) => {
         });
         if (result.success) {
             console.log(chalk_1.default.green(`Successfully synced ${result.employeeJobsSynced} ai-employee jobs, ${result.managerJobsSynced} ai-manager jobs, ${result.skillsSynced} skills, ${result.rulesSynced} rules, ${result.scriptsSynced} scripts, and ${result.docsSynced} docs from local server`));
+            const fraimDir = (0, project_fraim_paths_1.getWorkspaceFraimDir)(projectRoot);
             removeLegacyVersionFromConfig(fraimDir);
             writeSyncMetadata('local', localUrl);
-            refreshLocalIgnoreConfig();
+            const ignoreUpdate = (0, fraim_gitignore_1.ensureFraimSyncedContentLocallyExcluded)(projectRoot);
+            if (ignoreUpdate.gitInfoExcludeUpdated) {
+                console.log(chalk_1.default.green('Updated .git/info/exclude FRAIM managed block'));
+            }
+            if (ignoreUpdate.gitignoreUpdated) {
+                console.log(chalk_1.default.green('Removed legacy FRAIM sync block from .gitignore'));
+            }
             if (options.projectAdapters) {
                 const allowedTypes = resolveAllowedConfigTypes();
                 await cleanupStaleAdapterFiles(projectRoot, allowedTypes);
@@ -338,39 +317,91 @@ const runSync = async (options) => {
         console.error(chalk_1.default.yellow('Make sure the FRAIM MCP server is running locally (npm run dev).'));
         failSync(failHard, `Local sync failed: ${result.error}`);
     }
-    let apiKey = loadUserApiKey() || config.apiKey || process.env.FRAIM_API_KEY;
-    if (!apiKey) {
+    // ─── Global install notice ────────────────────────────────────────────────
+    const isNpx = process.env.npm_config_prefix === undefined || process.env.npm_lifecycle_event === 'npx';
+    const isGlobal = !isNpx && (process.env.npm_config_global === 'true' || process.env.npm_config_prefix);
+    if (isGlobal && !options.skipUpdates) {
+        console.log(chalk_1.default.yellow('You are running a global installation of FRAIM.'));
+        console.log(chalk_1.default.gray('Updates are not automatic in this mode.'));
+        console.log(chalk_1.default.cyan('Recommended: Use "npx fraim@latest sync" instead.\n'));
+    }
+    // ═══════════════════════════════════════════════════════════════════════════
+    // LAYER 1 — Machine-level sync (always runs)
+    // ═══════════════════════════════════════════════════════════════════════════
+    console.log(chalk_1.default.blue('Syncing machine-level FRAIM content (~/.fraim/)...'));
+    // 1a. Fetch registry files (single API call shared with Layer 2)
+    let registryFiles = [];
+    try {
+        registryFiles = await (0, remote_sync_1.fetchRegistryFiles)(remoteUrl, apiKey);
+    }
+    catch (error) {
         if (process.env.TEST_MODE === 'true') {
-            console.log(chalk_1.default.yellow('TEST_MODE: No API key configured. Using test placeholder key.'));
-            apiKey = 'test-mode-key';
+            console.log(chalk_1.default.yellow('TEST_MODE: Registry fetch failed (server may be unavailable). Continuing.'));
         }
         else {
-            console.error(chalk_1.default.red('No API key configured. Cannot sync.'));
-            console.error(chalk_1.default.yellow(`Set FRAIM_API_KEY in your environment, or add apiKey to ~/.fraim/config.json or ${(0, project_fraim_paths_1.getWorkspaceFraimDisplayPath)('config.json')}`));
-            console.error(chalk_1.default.yellow('Or use --local to sync from a locally running FRAIM server.'));
-            failSync(failHard, 'No API key configured.');
+            console.error(chalk_1.default.red(`Registry sync failed: ${error.message}`));
+            console.error(chalk_1.default.yellow('Check your API key and network connection.'));
+            failSync(failHard, `Registry sync failed: ${error.message}`);
         }
     }
-    console.log(chalk_1.default.blue('Syncing FRAIM jobs from remote server...'));
+    // 1b. Sync scripts to ~/.fraim/scripts/
+    const scriptsSynced = await (0, remote_sync_1.syncScriptsToUserDir)(registryFiles);
+    if (scriptsSynced > 0) {
+        console.log(chalk_1.default.green(`  Synced ${scriptsSynced} scripts to ~/.fraim/scripts/`));
+    }
+    // 1c. Refresh org home
+    await refreshOrgCache(remoteUrl, apiKey);
+    // 1d. Refresh manager home
+    await refreshManagerCache(remoteUrl, apiKey);
+    // 1e. Refresh MCP proxy launcher
+    const { ensureFraimMcpLatestLauncher } = await Promise.resolve().then(() => __importStar(require('../mcp/fraim-mcp-latest-launcher')));
+    ensureFraimMcpLatestLauncher();
+    // 1f. Ensure user-level directories
+    const { ensureUserLevelDirectories } = await Promise.resolve().then(() => __importStar(require('../setup/user-level-sync')));
+    ensureUserLevelDirectories();
+    // 1g. Write sync metadata
+    writeSyncMetadata('remote', remoteUrl);
+    console.log(chalk_1.default.green('✅ Machine-level sync complete.'));
+    // ═══════════════════════════════════════════════════════════════════════════
+    // LAYER 2 — Project-level sync (conditional)
+    // ═══════════════════════════════════════════════════════════════════════════
+    if (options.global) {
+        console.log(chalk_1.default.gray('--global: skipping project-level sync.'));
+        return;
+    }
+    if (!hasProject) {
+        console.log(chalk_1.default.cyan('No FRAIM project detected at cwd. Machine-level sync complete.'));
+        console.log(chalk_1.default.cyan('Run from a project folder or pass --project-root to sync project stubs.'));
+        return;
+    }
+    console.log(chalk_1.default.blue('Syncing project-level FRAIM content (fraim/)...'));
+    const { syncFromRemote } = await Promise.resolve().then(() => __importStar(require('../utils/remote-sync')));
+    const config = (0, config_loader_1.loadFraimConfig)((0, project_fraim_paths_1.getWorkspaceConfigPath)(projectRoot));
+    const fraimDir = (0, project_fraim_paths_1.getWorkspaceFraimDir)(projectRoot);
     const result = await syncFromRemote({
-        remoteUrl: config.remoteUrl,
+        remoteUrl: config.remoteUrl || remoteUrl,
         apiKey,
         projectRoot,
-        skipUpdates: options.skipUpdates || false
+        skipUpdates: options.skipUpdates || false,
+        registryFiles
     });
     if (!result.success) {
-        console.error(chalk_1.default.red(`Remote sync failed: ${result.error}`));
-        console.error(chalk_1.default.yellow('Check your API key and network connection.'));
+        console.error(chalk_1.default.red(`Project sync failed: ${result.error}`));
         if (process.env.TEST_MODE === 'true') {
-            console.log(chalk_1.default.yellow('TEST_MODE: Continuing without remote sync (server may be unavailable).'));
+            console.log(chalk_1.default.yellow('TEST_MODE: Continuing without project sync.'));
             return;
         }
-        failSync(failHard, `Remote sync failed: ${result.error}`);
+        failSync(failHard, `Project sync failed: ${result.error}`);
     }
-    console.log(chalk_1.default.green(`Successfully synced ${result.employeeJobsSynced} ai-employee jobs, ${result.managerJobsSynced} ai-manager jobs, ${result.skillsSynced} skills, ${result.rulesSynced} rules, ${result.scriptsSynced} scripts, and ${result.docsSynced} docs from remote`));
+    console.log(chalk_1.default.green(`Successfully synced ${result.employeeJobsSynced} ai-employee jobs, ${result.managerJobsSynced} ai-manager jobs, ${result.skillsSynced} skills, ${result.rulesSynced} rules, and ${result.docsSynced} docs`));
     removeLegacyVersionFromConfig(fraimDir);
-    writeSyncMetadata('remote', config.remoteUrl || process.env.FRAIM_REMOTE_URL || 'https://fraim.wellnessatwork.me');
-    refreshLocalIgnoreConfig();
+    const ignoreUpdate = (0, fraim_gitignore_1.ensureFraimSyncedContentLocallyExcluded)(projectRoot);
+    if (ignoreUpdate.gitInfoExcludeUpdated) {
+        console.log(chalk_1.default.green('Updated .git/info/exclude FRAIM managed block'));
+    }
+    if (ignoreUpdate.gitignoreUpdated) {
+        console.log(chalk_1.default.green('Removed legacy FRAIM sync block from .gitignore'));
+    }
     if (options.projectAdapters) {
         const allowedTypes = resolveAllowedConfigTypes();
         await cleanupStaleAdapterFiles(projectRoot, allowedTypes);
@@ -379,8 +410,7 @@ const runSync = async (options) => {
             console.log(chalk_1.default.green(`Updated FRAIM agent adapter files: ${adapterUpdates.join(', ')}`));
         }
     }
-    await refreshOrgCache(config.remoteUrl || process.env.FRAIM_REMOTE_URL || 'https://fraim.wellnessatwork.me', apiKey);
-    await refreshManagerCache(config.remoteUrl || process.env.FRAIM_REMOTE_URL || 'https://fraim.wellnessatwork.me', apiKey);
+    console.log(chalk_1.default.green('✅ Project-level sync complete.'));
 };
 exports.runSync = runSync;
 exports.syncCommand = new commander_1.Command('sync')
@@ -388,6 +418,7 @@ exports.syncCommand = new commander_1.Command('sync')
     .option('-f, --force', 'Force sync even if digest matches')
     .option('--skip-updates', 'Skip checking for CLI updates (legacy)')
     .option('--local', 'Sync from local development server (port derived from git branch)')
-    .option('--global', 'Sync user-level FRAIM content (~/.fraim/) instead of project')
+    .option('--global', 'Sync machine-level FRAIM content only (~/.fraim/), skip project stubs')
+    .option('--project-root <path>', 'Explicit project root (enables project-level sync from any cwd)')
     .option('--project-adapters', 'Write legacy project-local FRAIM agent adapter files')
     .action(exports.runSync);

package/dist/src/cli/fraim.js

@@ -1,38 +1,5 @@
 #!/usr/bin/env node
 "use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
 var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
@@ -56,7 +23,6 @@ const workspace_config_1 = require("./commands/workspace-config");
 const org_1 = require("./commands/org");
 const manager_1 = require("./commands/manager");
 const cleanup_artifacts_1 = require("./commands/cleanup-artifacts");
-const learning_usage_1 = require("./commands/learning-usage");
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const program = new commander_1.Command();
@@ -102,13 +68,4 @@ program.addCommand(workspace_config_1.workspaceConfigCommand);
 program.addCommand(org_1.orgCommand);
 program.addCommand(manager_1.managerCommand);
 program.addCommand(cleanup_artifacts_1.cleanupArtifactsCommand);
-program.addCommand(learning_usage_1.learningUsageCommand);
-// Wait for async command initialization before parsing
-(async () => {
-    // Import the initialization promise from setup command
-    const { setupCommandInitialization } = await Promise.resolve().then(() => __importStar(require('./commands/setup')));
-    if (setupCommandInitialization) {
-        await setupCommandInitialization;
-    }
-    program.parse(process.argv);
-})();
+program.parse(process.argv);

package/dist/src/cli/mcp/ide-formats.js

@@ -257,7 +257,7 @@ class CodexFormat {
                 const escapedUrl = this.escapeToml(server.url);
                 sections.push(`[mcp_servers.${key}]`);
                 sections.push(`url = "${escapedUrl}"`);
-                // OAuth-first providers (e.g. GitHub) have no Authorization header — IDE manages auth
+                // URL-only provider metadata serializes without a synthesized Authorization header.
                 if (authHeader) {
                     sections.push(`http_headers = { Authorization = "${this.escapeToml(authHeader)}" }`);
                 }

package/dist/src/cli/mcp/mcp-server-registry.js

@@ -81,9 +81,9 @@ async function buildProviderMCPServer(providerId, token, config) {
     }
 }
 /**
- * Build an HTTP MCP server.
- * When authHeaderTemplate is absent the provider uses IDE-native OAuth (e.g. GitHub);
- * write a URL-only entry so the IDE handles the OAuth flow on first tool use.
+ * Serialize an HTTP MCP server from explicit provider metadata.
+ * A missing authHeaderTemplate produces a URL-only shape; it does not establish
+ * authentication compatibility for any agent host.
  */
 function buildHTTPServer(mcpConfig, token) {
     if (!mcpConfig.url) {

package/dist/src/cli/providers/local-provider-registry.js

@@ -22,7 +22,7 @@ const LOCAL_PROVIDERS = [
         description: 'GitHub repository and issue management',
         capabilities: ['code', 'issues', 'integrated'],
         docsUrl: 'https://docs.github.com',
-        setupInstructions: 'Run "fraim add-provider github" — your IDE handles OAuth automatically on first use',
+        setupInstructions: 'Ask your agent to use the FRAIM connect-mcp skill and follow current GitHub and host guidance',
         hasAdditionalConfig: false,
         mcpServer: {
             type: 'http',
@@ -35,7 +35,7 @@ const LOCAL_PROVIDERS = [
         description: 'GitLab repository and issue management',
         capabilities: ['code', 'issues', 'integrated'],
         docsUrl: 'https://docs.gitlab.com',
-        setupInstructions: 'Create a Personal Access Token in your GitLab settings',
+        setupInstructions: 'Ask your agent to use the FRAIM connect-mcp skill and follow current GitLab and host guidance',
         hasAdditionalConfig: false,
         mcpServer: {
             type: 'http',
@@ -49,7 +49,7 @@ const LOCAL_PROVIDERS = [
         description: 'Azure DevOps repository and issue management',
         capabilities: ['code', 'issues', 'integrated'],
         docsUrl: 'https://docs.microsoft.com/azure/devops',
-        setupInstructions: 'Create a Personal Access Token in Azure DevOps',
+        setupInstructions: 'Ask your agent to use the FRAIM connect-mcp skill and follow current Azure DevOps and host guidance',
         hasAdditionalConfig: true,
         mcpServer: {
             type: 'stdio',
@@ -66,7 +66,7 @@ const LOCAL_PROVIDERS = [
         description: 'Jira issue tracking and project management',
         capabilities: ['issues'],
         docsUrl: 'https://support.atlassian.com/jira',
-        setupInstructions: 'Create an API token at https://id.atlassian.com/manage-profile/security/api-tokens',
+        setupInstructions: 'Ask your agent to use the FRAIM connect-mcp skill and follow current Jira and host guidance',
         hasAdditionalConfig: true,
         mcpServer: {
             type: 'stdio',

package/dist/src/cli/setup/auto-mcp-setup.js

@@ -36,7 +36,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.autoConfigureMCP = exports.validateSetupResults = exports.promptForGitHubToken = exports.promptForIDESelection = void 0;
+exports.autoConfigureMCP = exports.validateSetupResults = exports.promptForIDESelection = void 0;
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
 const chalk_1 = __importDefault(require("chalk"));
@@ -60,7 +60,7 @@ const promptForIDESelection = async (detectedIDEs) => {
     console.log(chalk_1.default.gray('   • fraim (required for FRAIM jobs)'));
     console.log(chalk_1.default.gray('   • git (version control integration)'));
     console.log(chalk_1.default.gray('   • playwright (browser automation)'));
-    console.log(chalk_1.default.blue('\n💡 Run "fraim add-provider <provider>" after setup to connect GitHub, GitLab, Jira, or other tools.'));
+    console.log(chalk_1.default.blue('\n💡 Ask your agent to use the FRAIM connect-mcp skill for GitHub, GitLab, Jira, or other tools.'));
     console.log(chalk_1.default.yellow('\n💡 Existing MCP servers will be preserved - only missing servers will be added.'));
     const response = await (0, prompts_1.default)({
         type: 'text',
@@ -87,15 +87,6 @@ const promptForIDESelection = async (detectedIDEs) => {
     return selectedIndices.map((i) => detectedIDEs[i]).filter((ide) => ide !== undefined);
 };
 exports.promptForIDESelection = promptForIDESelection;
-// Re-export promptForProviderToken for backward compatibility
-// This maintains the same interface but uses the generic system
-const promptForGitHubToken = async () => {
-    const { promptForProviderToken } = await Promise.resolve().then(() => __importStar(require('./provider-prompts')));
-    const { getProviderClient } = await Promise.resolve().then(() => __importStar(require('../api/get-provider-client')));
-    const client = getProviderClient();
-    return promptForProviderToken(client, 'github');
-};
-exports.promptForGitHubToken = promptForGitHubToken;
 const backupConfig = (configPath) => {
     if (fs_1.default.existsSync(configPath)) {
         const backupPath = `${configPath}.fraim-backup-${Date.now()}`;
@@ -188,8 +179,8 @@ const configureIDEMCP = async (ide, fraimKey) => {
         const addedServers = [];
         const updatedServers = [];
         const skippedServers = [];
-        // Servers that should always be updated (not skipped)
-        const alwaysUpdateServers = new Set(['fraim', 'github', 'gitlab', 'jira', 'ado', 'linear']);
+        // FRAIM owns its own base server entry. Third-party entries are preserved.
+        const alwaysUpdateServers = new Set(['fraim']);
         for (const [serverName, serverConfig] of Object.entries(newMCPServers)) {
             if (!existingMCPServers[serverName]) {
                 mergedMCPServers[serverName] = serverConfig;