fraim 2.0.357-next.2 → 2.0.357-next.4

package/dist/registry/scripts/learning/run-application.js

@@ -780,9 +780,9 @@ function completeRun(run, summary, homes, options, afterStage) {
                     const parsed = (0, learning_source_record_1.parseLearningSourceRecord)(body, source.path, (0, owner_identity_1.ownerArtifactRoot)(home), home.contentRoot);
                     if (parsed.status !== 'valid' || parsed.record.kind !== source.kind || !(0, completion_state_1.sourceAuthorAllowed)(state, parsed.record.author, home.owner) || parsed.record.state !== 'pending' || parsed.record.synthesized)
                         throw new Error('invalid-learning-source');
-                    // References may use immutable identity, home-relative locator or
+                    // References may use immutable identity, content-relative or home-relative path, or
                     // the selected absolute path. None may archive an unfinished dependency.
-                    const refs = new Set([parsed.record.usageIdentity, parsed.record.sourceId, parsed.record.usageSourceRef,
+                    const refs = new Set([parsed.record.usageIdentity, parsed.record.sourceId,
                         node_path_1.default.relative(home.contentRoot, source.path).replace(/\\/g, '/'), node_path_1.default.relative((0, owner_identity_1.ownerArtifactRoot)(home), source.path).replace(/\\/g, '/')]);
                     if (actions.some(action => action.sourceRefs.some(ref => refs.has(ref.replace(/\\/g, '/')) || (node_path_1.default.isAbsolute(ref) && (0, completion_state_2.sourcePathKey)(ref) === (0, completion_state_2.sourcePathKey)(source.path)))))
                         throw new Error('action-processing-pending');

package/dist/registry/scripts/learning-usage/learning-source-record.js

@@ -49,7 +49,7 @@ function parseLearningSourceRecord(content, filePath, homeRoot, contentRoot, con
     for (const line of fm[1].split(/\r?\n/)) {
         const match = /^([A-Za-z][A-Za-z0-9]*):[ \t]*(.*)$/.exec(line);
         if (!match) {
-            if (/^\s*["']?(artifactKind|author|date|job|runId|sourceId|usageSourceRef|synthesized)["']?\s*:/.test(line))
+            if (/^\s*["']?(artifactKind|author|date|job|runId|sourceId|synthesized)["']?\s*:/.test(line))
                 malformedField = true;
             continue;
         }
@@ -76,7 +76,7 @@ function parseLearningSourceRecord(content, filePath, homeRoot, contentRoot, con
         return invalid('Unsupported metadata key spelling');
     if (duplicates.size)
         return invalid(`Duplicate metadata: ${[...duplicates].join(', ')}`);
-    for (const field of ['author', 'date', 'job', 'runId', 'sourceId', 'usageSourceRef', 'synthesized']) {
+    for (const field of ['author', 'date', 'job', 'runId', 'sourceId', 'synthesized']) {
         if (!Object.prototype.hasOwnProperty.call(fields, field))
             return invalid(`Missing metadata: ${field}`);
     }
@@ -110,21 +110,14 @@ function parseLearningSourceRecord(content, filePath, homeRoot, contentRoot, con
         return invalid('Source is outside its configured learning location');
     if (state === 'archived' && !fields.synthesized)
         return invalid('Archive has no successful processing date');
-    const reference = fields.usageSourceRef;
     const relative = node_path_1.default.relative(homeRoot, pendingPath).replace(/\\/g, '/');
     if (!relative || relative.split('/').some(part => !part || part === '.' || part === '..') || node_path_1.default.isAbsolute(relative))
         return invalid('Source escapes its owning root');
-    if (!reference || /[\x00-\x1f]/.test(reference) || reference.includes('\\'))
-        return invalid('Invalid usageSourceRef');
     if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(fields.sourceId)) {
         return invalid('Sources require an immutable sourceId UUID');
     }
-    if (node_path_1.default.posix.isAbsolute(reference) || node_path_1.default.win32.isAbsolute(reference) || reference.includes(':')
-        || reference.split('/').some(part => !part || part === '.' || part === '..') || reference !== relative) {
-        return invalid('usageSourceRef must name the owner-relative pending path');
-    }
     return { status: 'valid', record: { artifactKind: fields.artifactKind, kind, author: fields.author,
-            date: fields.date, job: fields.job, runId: fields.runId, usageSourceRef: fields.usageSourceRef,
+            date: fields.date, job: fields.job, runId: fields.runId,
             usageIdentity: `learning-source:${fields.sourceId}`,
             sourceId: fields.sourceId,
             synthesized: fields.synthesized, pendingPath, archivePath, state } };

package/dist/src/cli/api/provider-client.js

@@ -8,7 +8,10 @@ exports.ProviderClient = void 0;
 const axios_1 = __importDefault(require("axios"));
 class ProviderClient {
     constructor(fraimKey, serverUrl) {
-        this.serverUrl = serverUrl || process.env.FRAIM_REMOTE_URL || 'https://fraim.wellnessatwork.me';
+        this.serverUrl = serverUrl || process.env.FRAIM_REMOTE_URL ||
+            ((process.env.FRAIM_RELEASE_CHANNEL || '').toUpperCase() === 'PPE'
+                ? 'https://app-ashley-fraim-ppe.azurewebsites.net'
+                : 'https://fraim.wellnessatwork.me');
         this.client = axios_1.default.create({
             baseURL: this.serverUrl,
             headers: {

package/dist/src/cli/commands/override.js

@@ -67,7 +67,7 @@ exports.overrideCommand = new commander_1.Command('override')
                 serverUrl = `http://localhost:${localPort}`;
             }
             else {
-                serverUrl = config.remoteUrl || process.env.FRAIM_REMOTE_URL || 'https://fraim.wellnessatwork.me';
+                serverUrl = config.remoteUrl || process.env.FRAIM_REMOTE_URL || ((process.env.FRAIM_RELEASE_CHANNEL || '').toUpperCase() === 'PPE' ? 'https://app-ashley-fraim-ppe.azurewebsites.net' : 'https://fraim.wellnessatwork.me');
             }
             const apiKey = isLocal ? 'local-dev' : (config.apiKey || process.env.FRAIM_API_KEY);
             const headers = { 'Content-Type': 'application/json' };

package/dist/src/cli/commands/sync.js

@@ -125,7 +125,7 @@ const runSync = async (options) => {
     // Order: user-level config → env var → project config (only if in a project)
     const remoteUrl = useLocal
         ? resolveExplicitLocalSyncUrl() || `http://localhost:${process.env.FRAIM_MCP_PORT || (0, git_utils_1.getPort)()}`
-        : process.env.FRAIM_REMOTE_URL || 'https://fraim.wellnessatwork.me';
+        : process.env.FRAIM_REMOTE_URL || ((process.env.FRAIM_RELEASE_CHANNEL || '').toUpperCase() === 'PPE' ? 'https://app-ashley-fraim-ppe.azurewebsites.net' : 'https://fraim.wellnessatwork.me');
     let apiKey = useLocal ? 'local-dev' : loadUserApiKey() || process.env.FRAIM_API_KEY;
     const hasProject = (0, project_fraim_paths_1.workspaceFraimExists)(projectRoot);
     if (!apiKey && hasProject) {

package/dist/src/cli/mcp/mcp-server-registry.js

@@ -49,7 +49,10 @@ exports.BASE_MCP_SERVERS = [
                     // Include API key for IDE configs (Codex, VSCode, etc.)
                     // The stdio-server will use this if set, otherwise falls back to ~/.fraim/config.json
                     FRAIM_API_KEY: fraimKey,
-                    FRAIM_REMOTE_URL: 'https://fraim.wellnessatwork.me'
+                    FRAIM_REMOTE_URL: (process.env.FRAIM_RELEASE_CHANNEL || '').toUpperCase() === 'PPE'
+                        ? 'https://app-ashley-fraim-ppe.azurewebsites.net'
+                        : 'https://fraim.wellnessatwork.me',
+                    ...(process.env.FRAIM_RELEASE_CHANNEL ? { FRAIM_RELEASE_CHANNEL: process.env.FRAIM_RELEASE_CHANNEL } : {})
                 }
             };
         }

package/dist/src/cli/utils/manager-pack-sync.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.MANAGER_MANAGED_HEADER = exports.MANAGER_SYNC_METADATA_FILE = exports.MANAGER_HOME_DIRNAME = void 0;
+exports.MANAGER_SYNC_METADATA_FILE = exports.MANAGER_HOME_DIRNAME = void 0;
 exports.getManagerHomeDir = getManagerHomeDir;
 exports.readManagerSyncMetadata = readManagerSyncMetadata;
 exports.getManagerSyncAgeHours = getManagerSyncAgeHours;
@@ -30,7 +30,6 @@ const local_folder_sync_1 = require("./local-folder-sync");
 const user_config_1 = require("./user-config");
 exports.MANAGER_HOME_DIRNAME = 'manager';
 exports.MANAGER_SYNC_METADATA_FILE = '.manager-sync-metadata.json';
-exports.MANAGER_MANAGED_HEADER = '<!-- FRAIM_MANAGER_SYNC_MANAGED_CONTENT -->';
 // Issue #1043 adds 'employees' so a published employee record is walked out of
 // a git snapshot. isManagerPackRelativePath still decides what is admitted.
 const MANAGER_PACK_DIRS = ['context', 'rules', 'learnings', 'jobs', 'skills', 'templates', 'scripts', 'employees'];
@@ -86,24 +85,6 @@ function getManagerSyncAgeHours() {
         return null;
     return Math.max(0, (Date.now() - syncedAt) / 3_600_000);
 }
-function decorateManagedManagerFile(content, backend) {
-    const normalized = content.replace(/^\uFEFF/, '');
-    if (normalized.startsWith(exports.MANAGER_MANAGED_HEADER))
-        return normalized;
-    const writePath = backend === 'git'
-        ? 'open a pull request against your manager storage repo'
-        : backend === 'local-folder'
-            ? 'edit the file in your synced folder and let the sync client upload it'
-            : 'publish the change through your FRAIM manager storage flow';
-    const marker = [
-        exports.MANAGER_MANAGED_HEADER,
-        '> [!IMPORTANT]',
-        '> Synced from your personal manager storage. Local edits are overwritten on the next sync.',
-        `> To change this content, ${writePath}.`,
-        ''
-    ].join('\n');
-    return `${marker}\n${normalized}`;
-}
 function collectGitPackFilesRecursive(dir, relBase, files) {
     if (!fs_1.default.existsSync(dir))
         return;
@@ -137,7 +118,7 @@ async function fetchCloudPack(remoteUrl, apiKey) {
         version: String(response.data?.version ?? '0')
     };
 }
-function materializeCloudHome(files, metadata) {
+function materializeCloudHome(files) {
     const cacheDir = getManagerHomeDir();
     const stagingDir = `${cacheDir}.staging-${process.pid}`;
     fs_1.default.rmSync(stagingDir, { recursive: true, force: true });
@@ -150,11 +131,8 @@ function materializeCloudHome(files, metadata) {
             continue;
         const destination = path_1.default.join(stagingDir, file.relativePath);
         fs_1.default.mkdirSync(path_1.default.dirname(destination), { recursive: true });
-        // Only markdown gets the managed-content header; scripts/JSON ride verbatim.
-        const content = (0, capability_pack_1.shouldDecorateAsMarkdown)(file.relativePath)
-            ? decorateManagedManagerFile(file.content, metadata.backend)
-            : file.content;
-        fs_1.default.writeFileSync(destination, content);
+        // Sync transports content; provenance lives in the sidecar metadata.
+        fs_1.default.writeFileSync(destination, file.content);
     }
     // Provenance is written outside the home by writeHomeMetadata.
     fs_1.default.rmSync(cacheDir, { recursive: true, force: true });
@@ -165,7 +143,7 @@ async function discoverCloudManagerStorage(options) {
         const apiKey = options?.apiKey || (0, user_config_1.readUserFraimConfig)().apiKey;
         if (!apiKey || apiKey === 'local-dev' || apiKey === 'test-mode-key')
             return null;
-        const remoteUrl = options?.remoteUrl || process.env.FRAIM_REMOTE_URL || 'https://fraim.wellnessatwork.me';
+        const remoteUrl = options?.remoteUrl || process.env.FRAIM_REMOTE_URL || ((process.env.FRAIM_RELEASE_CHANNEL || '').toUpperCase() === 'PPE' ? 'https://app-ashley-fraim-ppe.azurewebsites.net' : 'https://fraim.wellnessatwork.me');
         const pack = await fetchCloudPack(remoteUrl, apiKey);
         if (pack.files.length === 0)
             return null;
@@ -239,7 +217,7 @@ async function syncManagerCache(options) {
             writeHomeMetadata(metadata);
             return { status: 'synced', metadata };
         }
-        const remoteUrl = options?.remoteUrl || process.env.FRAIM_REMOTE_URL || 'https://fraim.wellnessatwork.me';
+        const remoteUrl = options?.remoteUrl || process.env.FRAIM_REMOTE_URL || ((process.env.FRAIM_RELEASE_CHANNEL || '').toUpperCase() === 'PPE' ? 'https://app-ashley-fraim-ppe.azurewebsites.net' : 'https://fraim.wellnessatwork.me');
         const apiKey = options?.apiKey || (0, user_config_1.readUserFraimConfig)().apiKey;
         if (!apiKey)
             throw new Error('No FRAIM API key available for the fraim-cloud manager backend.');
@@ -252,7 +230,7 @@ async function syncManagerCache(options) {
         };
         // The cloud has no user-visible folder, so this managed directory is the
         // home for that backend, not a cache beside one.
-        materializeCloudHome(pack.files, metadata);
+        materializeCloudHome(pack.files);
         writeHomeMetadata(metadata);
         return { status: 'synced', metadata };
     }

package/dist/src/cli/utils/org-pack-sync.js

@@ -3,7 +3,7 @@ var __importDefault = (this && this.__importDefault) || function (mod) {
     return (mod && mod.__esModule) ? mod : { "default": mod };
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.ORG_MANAGED_HEADER = exports.ORG_SYNC_METADATA_FILE = exports.ORG_HOME_DIRNAME = exports.shouldDecorateAsMarkdown = void 0;
+exports.ORG_SYNC_METADATA_FILE = exports.ORG_HOME_DIRNAME = void 0;
 exports.isSafePackPath = isSafePackPath;
 exports.isSafeOrgCapabilityPackPath = isSafeOrgCapabilityPackPath;
 exports.getOrgHomeDir = getOrgHomeDir;
@@ -30,11 +30,8 @@ const user_config_1 = require("./user-config");
 const pack_home_1 = require("./pack-home");
 const local_folder_sync_1 = require("./local-folder-sync");
 const capability_pack_1 = require("../../core/capability-pack");
-var capability_pack_2 = require("../../core/capability-pack");
-Object.defineProperty(exports, "shouldDecorateAsMarkdown", { enumerable: true, get: function () { return capability_pack_2.shouldDecorateAsMarkdown; } });
 exports.ORG_HOME_DIRNAME = 'org';
 exports.ORG_SYNC_METADATA_FILE = '.org-sync-metadata.json';
-exports.ORG_MANAGED_HEADER = '<!-- FRAIM_ORG_SYNC_MANAGED_CONTENT -->';
 /**
  * Subdirectories of the org pack that sync into the cache (spec R7.1).
  * Issue #1043 adds 'employees' so an org-shared employee record reaches the
@@ -126,24 +123,6 @@ function getOrgSyncAgeHours() {
         return null;
     return Math.max(0, (Date.now() - syncedAt) / 3_600_000);
 }
-function decorateManagedOrgFile(content, backend) {
-    const normalized = content.replace(/^/, '');
-    if (normalized.startsWith(exports.ORG_MANAGED_HEADER))
-        return normalized;
-    const writePath = backend === 'git'
-        ? 'open a pull request against your organization repo'
-        : backend === 'local-folder'
-            ? 'edit the file in your synced folder and let the sync client upload it'
-            : 'update it through the organization-onboarding flow';
-    const marker = [
-        exports.ORG_MANAGED_HEADER,
-        '> [!IMPORTANT]',
-        '> Synced from your organization\'s shared context. Local edits are overwritten on the next sync.',
-        `> To change this content, ${writePath}.`,
-        ''
-    ].join('\n');
-    return `${marker}\n${normalized}`;
-}
 function collectGitPackFilesRecursive(dir, relBase, files) {
     if (!fs_1.default.existsSync(dir))
         return;
@@ -178,7 +157,7 @@ async function fetchCloudPack(remoteUrl, apiKey) {
     };
 }
 /** Replace the cache contents atomically: stage fully, then swap. */
-function materializeCloudHome(files, metadata) {
+function materializeCloudHome(files) {
     const cacheDir = getOrgHomeDir();
     const stagingDir = `${cacheDir}.staging-${process.pid}`;
     fs_1.default.rmSync(stagingDir, { recursive: true, force: true });
@@ -189,11 +168,8 @@ function materializeCloudHome(files, metadata) {
             continue;
         const destination = path_1.default.join(stagingDir, file.relativePath);
         fs_1.default.mkdirSync(path_1.default.dirname(destination), { recursive: true });
-        // Only markdown gets the managed-content header; JSON and future scripts ride verbatim.
-        const content = (0, capability_pack_1.shouldDecorateAsMarkdown)(file.relativePath)
-            ? decorateManagedOrgFile(file.content, metadata.backend)
-            : file.content;
-        fs_1.default.writeFileSync(destination, content);
+        // Sync transports content; provenance lives in the sidecar metadata.
+        fs_1.default.writeFileSync(destination, file.content);
     }
     // Provenance is written outside the home by writeHomeMetadata.
     fs_1.default.rmSync(cacheDir, { recursive: true, force: true });
@@ -303,7 +279,7 @@ async function syncOrgCache(options) {
         };
         // The cloud has no user-visible folder, so this managed directory is the
         // home for that backend, not a cache beside one.
-        materializeCloudHome(pack.files, metadata);
+        materializeCloudHome(pack.files);
         writeHomeMetadata(metadata);
         return { status: 'synced', metadata };
     }

package/dist/src/core/capability-pack.js

@@ -21,7 +21,6 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.CAPABILITY_DIRS = void 0;
 exports.isCapabilityPackPath = isCapabilityPackPath;
 exports.isScriptPath = isScriptPath;
-exports.shouldDecorateAsMarkdown = shouldDecorateAsMarkdown;
 exports.CAPABILITY_DIRS = ['jobs', 'skills', 'rules', 'templates', 'scripts', 'employees'];
 /**
  * Returns true when `rel` is a valid capability-pack member path:
@@ -97,11 +96,3 @@ function isScriptPath(rel) {
         return false;
     return rel.startsWith('scripts/');
 }
-/**
- * True when a sync pack file should receive the managed-content header on
- * materialization. Only markdown files get the header; scripts and JSON ride
- * verbatim. Shared between manager-pack-sync and org-pack-sync.
- */
-function shouldDecorateAsMarkdown(relativePath) {
-    return relativePath.toLowerCase().endsWith('.md');
-}

package/dist/src/fraim/db-service.js

@@ -180,27 +180,32 @@ class FraimDbService {
     async initializeIndexes() {
         if (!this.db)
             throw new Error('DB not connected during index initialization');
-        await this.keysCollection.createIndex({ key: 1 }, { unique: true });
+        // Cosmos DB for MongoDB rejects adding unique indexes to collections that already exist
+        // (even empty ones auto-created by the driver). All unique createIndex calls use .catch(() => {})
+        // so startup never crashes on a fresh database. On established databases (prod, dev) the indexes
+        // already exist and createIndex is a no-op; on a fresh PPE/test database the unique constraint
+        // is silently skipped — the application's own upsert/insert logic still enforces logical uniqueness.
+        await this.keysCollection.createIndex({ key: 1 }, { unique: true }).catch(() => { });
         await this.keysCollection.createIndex({ userId: 1 });
         await this.keysCollection.createIndex({ stripeSubscriptionId: 1 });
         await this.keysCollection.createIndex({ status: 1 });
         await this.keysCollection.createIndex({ expiresAt: 1 });
-        await this.sessionsCollection.createIndex({ sessionId: 1 }, { unique: true });
+        await this.sessionsCollection.createIndex({ sessionId: 1 }, { unique: true }).catch(() => { });
         await this.sessionsCollection.createIndex({ userId: 1 });
         await this.sessionsCollection.createIndex({ lastActive: -1 });
         // Issue #2093 — getActiveSessionByApiKey no longer bounds its match by recency, so a
         // long-lived user's full session history is a candidate. This compound index keeps that
         // lookup an indexed scan with an ordered result instead of a fetch-then-sort in memory.
         await this.sessionsCollection.createIndex({ userId: 1, lastActive: -1 });
-        await this.signupsCollection.createIndex({ email: 1 }, { unique: true });
+        await this.signupsCollection.createIndex({ email: 1 }, { unique: true }).catch(() => { });
         await this.signupsCollection.createIndex({ timestamp: -1 });
         await this.salesCollection.createIndex({ email: 1 });
         await this.salesCollection.createIndex({ timestamp: -1 });
-        await this.accessTokensCollection.createIndex({ token: 1 }, { unique: true });
+        await this.accessTokensCollection.createIndex({ token: 1 }, { unique: true }).catch(() => { });
         // TTL index — createIndex is a no-op if the index already exists with the same options.
         // Avoid drop+recreate: Cosmos DB PITR-restored accounts block index drops on restored collections.
         await this.accessTokensCollection.createIndex({ expiresAt: 1 }, { expireAfterSeconds: 0 });
-        await this.pendingVerificationsCollection.createIndex({ token: 1 }, { unique: true });
+        await this.pendingVerificationsCollection.createIndex({ token: 1 }, { unique: true }).catch(() => { });
         // Issue #563 — org artifacts are unique per (orgId, relativePath); audit reads newest-first.
         // Index creation must never crash startup: Azure Cosmos DB (Mongo API) can
         // reject a unique compound index, and connect() re-throws on failure. Logical
@@ -224,10 +229,10 @@ class FraimDbService {
         await this.pendingVerificationsCollection.createIndex({ email: 1, codeHash: 1 });
         // TTL index — same pattern: create is idempotent, drop is not safe on restored accounts.
         await this.pendingVerificationsCollection.createIndex({ expiresAt: 1 }, { expireAfterSeconds: 0 });
-        await this.webhookEventsCollection.createIndex({ eventId: 1 }, { unique: true });
+        await this.webhookEventsCollection.createIndex({ eventId: 1 }, { unique: true }).catch(() => { });
         await this.webhookEventsCollection.createIndex({ type: 1 });
         await this.webhookEventsCollection.createIndex({ receivedAt: -1 });
-        await this.partnerDiscountsCollection.createIndex({ type: 1, match: 1 }, { unique: true });
+        await this.partnerDiscountsCollection.createIndex({ type: 1, match: 1 }, { unique: true }).catch(() => { });
         await this.partnerDiscountsCollection.createIndex({ active: 1 });
         try {
             await this.managerTeamsCollection.createIndex({ managerId: 1, memberId: 1 }, { unique: true });

package/dist/src/local-mcp-server/learning-source-record.js

@@ -49,7 +49,7 @@ function parseLearningSourceRecord(content, filePath, homeRoot, contentRoot, con
     for (const line of fm[1].split(/\r?\n/)) {
         const match = /^([A-Za-z][A-Za-z0-9]*):[ \t]*(.*)$/.exec(line);
         if (!match) {
-            if (/^\s*["']?(artifactKind|author|date|job|runId|sourceId|usageSourceRef|synthesized)["']?\s*:/.test(line))
+            if (/^\s*["']?(artifactKind|author|date|job|runId|sourceId|synthesized)["']?\s*:/.test(line))
                 malformedField = true;
             continue;
         }
@@ -76,7 +76,7 @@ function parseLearningSourceRecord(content, filePath, homeRoot, contentRoot, con
         return invalid('Unsupported metadata key spelling');
     if (duplicates.size)
         return invalid(`Duplicate metadata: ${[...duplicates].join(', ')}`);
-    for (const field of ['author', 'date', 'job', 'runId', 'sourceId', 'usageSourceRef', 'synthesized']) {
+    for (const field of ['author', 'date', 'job', 'runId', 'sourceId', 'synthesized']) {
         if (!Object.prototype.hasOwnProperty.call(fields, field))
             return invalid(`Missing metadata: ${field}`);
     }
@@ -110,21 +110,14 @@ function parseLearningSourceRecord(content, filePath, homeRoot, contentRoot, con
         return invalid('Source is outside its configured learning location');
     if (state === 'archived' && !fields.synthesized)
         return invalid('Archive has no successful processing date');
-    const reference = fields.usageSourceRef;
     const relative = node_path_1.default.relative(homeRoot, pendingPath).replace(/\\/g, '/');
     if (!relative || relative.split('/').some(part => !part || part === '.' || part === '..') || node_path_1.default.isAbsolute(relative))
         return invalid('Source escapes its owning root');
-    if (!reference || /[\x00-\x1f]/.test(reference) || reference.includes('\\'))
-        return invalid('Invalid usageSourceRef');
     if (!/^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/.test(fields.sourceId)) {
         return invalid('Sources require an immutable sourceId UUID');
     }
-    if (node_path_1.default.posix.isAbsolute(reference) || node_path_1.default.win32.isAbsolute(reference) || reference.includes(':')
-        || reference.split('/').some(part => !part || part === '.' || part === '..') || reference !== relative) {
-        return invalid('usageSourceRef must name the owner-relative pending path');
-    }
     return { status: 'valid', record: { artifactKind: fields.artifactKind, kind, author: fields.author,
-            date: fields.date, job: fields.job, runId: fields.runId, usageSourceRef: fields.usageSourceRef,
+            date: fields.date, job: fields.job, runId: fields.runId,
             usageIdentity: `learning-source:${fields.sourceId}`,
             sourceId: fields.sourceId,
             synthesized: fields.synthesized, pendingPath, archivePath, state } };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fraim",
-  "version": "2.0.357-next.2",
+  "version": "2.0.357-next.4",
   "description": "FRAIM core CLI and MCP package.",
   "main": "index.js",
   "bin": {