@passioncode-ai/fabric-agent-adapter 0.34.0 → 0.35.0

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_profiles.py

@@ -43,6 +43,34 @@ def _list(value: Any) -> List[Dict[str, Any]]:
     return [item for item in value if isinstance(item, dict)] if isinstance(value, list) else []
 
 
+_MISSING_KEY = _estate._MISSING
+
+
+def _at(value: Any, key: str) -> Any:
+    """value[key] as JavaScript reads a member: absent is distinct from null (``_MISSING_KEY``)."""
+    return _estate._get(value, key)
+
+
+def _json_equal(a: Any, b: Any) -> bool:
+    """The contract's jsonEqual on parsed JSON: arrays by item, objects by member whatever the order, anything else by
+    ===, so 1 and true differ and NaN equals nothing."""
+    if isinstance(a, list) or isinstance(b, list):
+        return isinstance(a, list) and isinstance(b, list) and len(a) == len(b) and all(_json_equal(x, y) for x, y in zip(a, b))
+    if isinstance(a, dict) or isinstance(b, dict):
+        return (isinstance(a, dict) and isinstance(b, dict) and len(a) == len(b)
+                and all(k in b and _json_equal(v, b[k]) for k, v in a.items()))
+    return _estate._same(a, b)  # NaN != NaN in Python too
+
+
+def _without_nan(value: Any) -> Any:
+    """A resolution as JSON writes it: NaN and an infinity become null."""
+    if isinstance(value, dict):
+        return {k: _without_nan(v) for k, v in value.items()}
+    if isinstance(value, list):
+        return [_without_nan(v) for v in value]
+    return None if isinstance(value, float) and not math.isfinite(value) else value
+
+
 def _indexed(value: Any) -> List[tuple]:
     """The object items of an array with their index as written, so an instancePath names the item even after a
     non-object (the contract's ``indexed``)."""
@@ -59,7 +87,7 @@ def _set_key(value: Any) -> Any:
     if isinstance(value, bool):
         return ("boolean", value)
     if isinstance(value, (int, float)):
-        return ("number", float(value))
+        return ("number", _estate._double(value))
     if isinstance(value, str):
         return ("string", value)
     return ("object", id(value))
@@ -76,40 +104,12 @@ def _strings(value: Any) -> List[str]:
     return [item for item in value if isinstance(item, str)] if isinstance(value, list) else []
 
 
-def _js_string(value: Any) -> str:
-    """JavaScript's String(value), which the contract's messages and policy ids use."""
-    if value is None:
-        return "undefined"
-    if value is True:
-        return "true"
-    if value is False:
-        return "false"
-    if isinstance(value, float) and value.is_integer():
-        return str(int(value))
-    if isinstance(value, (dict, list)):
-        return "[object Object]" if isinstance(value, dict) else ",".join(_js_string(v) for v in value)
-    return str(value)
-
-
-def _js_number(value: Any) -> Optional[float]:
-    """JavaScript's Number(value); NaN is None (JSON writes it as null)."""
-    if isinstance(value, bool):
-        return 1 if value else 0
-    if isinstance(value, (int, float)):
-        return value if not (isinstance(value, float) and math.isnan(value)) else None
-    if isinstance(value, str):
-        text = value.strip()
-        if text == "":
-            return 0
-        try:
-            number = float(text)
-        except ValueError:
-            return None
-        return int(number) if number.is_integer() else number
-    return None
+def resolve_model_profile(*, catalogue: Any = None, profiles: Any = None, choices: Any = None, policy: Any = None) -> Dict[str, Any]:
+    """FAC-SEM-060, as JSON writes the contract's answer (a policy revision that is not a number is null)."""
+    return _without_nan(_resolve(catalogue=catalogue, profiles=profiles, choices=choices, policy=policy))
 
 
-def resolve_model_profile(*, catalogue: Any = None, profiles: Any = None, choices: Any = None, policy: Any = None) -> Dict[str, Any]:
+def _resolve(*, catalogue: Any = None, profiles: Any = None, choices: Any = None, policy: Any = None) -> Dict[str, Any]:
     """FAC-SEM-060: the request's profile, else the agent's, else the binding's or project's, else the estate default.
     When the project's policy names `modelClasses`, a model stays only if every class the catalogue gives it is
     allowed; the descriptive class `open-vendor` is not checked (DEC-0083), and a model with no other class does not stay.
@@ -137,7 +137,8 @@ def resolve_model_profile(*, catalogue: Any = None, profiles: Any = None, choice
     if within:
         return {"from": level, "profile": profile_id, "models": within}
     meta = policy.get("meta") if isinstance(policy.get("meta"), dict) else {}
-    return {"refused": "model-classes-empty", "profile": profile_id, "policy": {"id": _js_string(meta.get("id")), "revision": _js_number(meta.get("revision"))}}
+    return {"refused": "model-classes-empty", "profile": profile_id,
+            "policy": {"id": _estate._show(_at(meta, "id")), "revision": _estate._js_to_number(_at(meta, "revision"))}}
 
 
 def _finding(code: str, path: str, message: str) -> Dict[str, str]:
@@ -170,16 +171,16 @@ def _model_profiles(value: Dict[str, Any]) -> List[Dict[str, str]]:
 def _runner_profile(value: Dict[str, Any]) -> List[Dict[str, str]]:
     findings = []
     if value.get("route") == "subscription" and isinstance(value.get("subscription"), dict):
-        login = _js_string(value["subscription"].get("login"))
-        runner = SUBSCRIPTION_RUNNER.get(login)
-        if runner != value.get("runnerKind"):
+        login = _estate._show(_at(value["subscription"], "login"))
+        runner = SUBSCRIPTION_RUNNER.get(login, _MISSING_KEY)
+        if not _estate._same(runner, _at(value, "runnerKind")):
             findings.append(_finding("FAC-SEM-059", "/runnerKind", "a %s subscription runs only in %s, not in %s; another runner takes the key route"
-                                     % (login, runner if runner is not None else "its vendor's runner", _js_string(value.get("runnerKind")))))
+                                     % (login, runner if runner is not _MISSING_KEY else "its vendor's runner", _estate._show(_at(value, "runnerKind")))))
     if value.get("route") == "key" and isinstance(value.get("key"), dict):
         key = value["key"]
-        if key.get("modelAllowList") != value.get("modelProfile") or ("modelAllowList" in key) != ("modelProfile" in value):
+        if not _estate._same(_at(key, "modelAllowList"), _at(value, "modelProfile")):
             findings.append(_finding("FAC-SEM-059", "/key/modelAllowList", "the key admits the models of %s, but the profile runs %s"
-                                     % (_js_string(key.get("modelAllowList")), _js_string(value.get("modelProfile")))))
+                                     % (_estate._show(_at(key, "modelAllowList")), _estate._show(_at(value, "modelProfile")))))
         if isinstance(key.get("ref"), str) and _secrets.secret_value(key["ref"]):
             findings.append(_finding("FAC-SEM-059", "/key/ref", "the key is named by its secret reference, never by its value"))
     return findings
@@ -203,9 +204,9 @@ def _profile_resolution(value: Dict[str, Any]) -> List[Dict[str, str]]:
             if isinstance(model, str) and model not in catalogued:
                 findings.append(_finding("FAC-SEM-060", "/profiles/%d/models/%d" % (i, j), "profile %s names %s, which the catalogue does not hold" % (_show_id(profile), model)))
     choices = value.get("choices") if isinstance(value.get("choices"), dict) else {}
-    expected = resolve_model_profile(catalogue=catalogue, profiles=value.get("profiles"), choices=choices, policy=value.get("policy"))
-    if "resolved" not in value or value["resolved"] != expected:
-        findings.append(_finding("FAC-SEM-060", "/resolved", "the resolution is %s" % _compact(expected)))
+    expected = _resolve(catalogue=catalogue, profiles=value.get("profiles"), choices=choices, policy=value.get("policy"))
+    if not _json_equal(_at(value, "resolved"), expected):
+        findings.append(_finding("FAC-SEM-060", "/resolved", "the resolution is %s" % _estate._json_stringify(_without_nan(expected))))
     return findings
 
 
@@ -346,18 +347,20 @@ def runner_check(entry: Dict[str, Any], *, path: Optional[str] = None,
 
 def model_usable(model: str, catalogue: Any, policy: Any = None) -> List[str]:
     """Problems with running `model` here: not in the catalogue, or a class the project's policy does not allow."""
-    rows = {row.get("id"): row for row in _list(catalogue.get("models") if isinstance(catalogue, dict) else None)}
-    if model not in rows:
-        return ["model %s is not in the model catalogue" % model]
+    # The last row of an id wins, as a JavaScript Map built from the rows; only a string id can match a model's name.
+    rows = {row["id"]: row for row in _list(catalogue.get("models") if isinstance(catalogue, dict) else None) if isinstance(row.get("id"), str)}
+    if not isinstance(model, str) or model not in rows:
+        return ["model %s is not in the model catalogue" % _estate._show(model)]
     if isinstance(policy, dict) and isinstance(policy.get("modelClasses"), list):
         allowed = set(_strings(policy["modelClasses"]))
         meta = policy.get("meta") if isinstance(policy.get("meta"), dict) else {}
+        policy_id = _estate._show(_at(meta, "id"))
         admission = [c for c in _strings(rows[model].get("classes")) if c != OPEN_VENDOR]  # DEC-0083: descriptive
         if not admission:
-            return ["model %s has no class but %s, which admits nothing, so policy %s does not allow it" % (model, OPEN_VENDOR, _js_string(meta.get("id")))]
+            return ["model %s has no class but %s, which admits nothing, so policy %s does not allow it" % (model, OPEN_VENDOR, policy_id)]
         outside = [c for c in admission if c not in allowed]
         if outside:
-            return ["model %s has class %s, which policy %s does not allow" % (model, ", ".join(outside), _js_string(meta.get("id")))]
+            return ["model %s has class %s, which policy %s does not allow" % (model, ", ".join(outside), policy_id)]
     return []
 
 
@@ -401,13 +404,9 @@ _MISSING = object()
 
 
 def _field(value: Dict[str, Any], key: str) -> str:
-    """String(value[key]) as JavaScript writes it: `undefined` for a missing key, `null` for null."""
-    found = value.get(key, _MISSING) if isinstance(value, dict) else _MISSING
-    if found is _MISSING:
-        return "undefined"
-    if found is None:
-        return "null"
-    return _js_string(found)
+    """The contract's show(value[key]): `undefined` for a missing key, `null` for null, and an object whose own
+    `toString` is data as its JSON, where String() would throw."""
+    return _estate._show(_at(value, key))
 
 
 def _object_at(value: Any, key: str) -> Dict[str, Any]:
@@ -496,11 +495,14 @@ def _catalogue_agreement(catalogue: List[Dict[str, Any]], route: Dict[str, Any])
     return findings
 
 
-def _index_of(ref: Dict[str, Any]) -> int:
+def _index_of(ref: Dict[str, Any]) -> float:
+    """The contract's indexOf: a JSON number that is an integer, as JavaScript holds it (a double; beyond the double
+    range it is Infinity, which is no integer), else -1."""
     index = ref.get("index")
-    if isinstance(index, bool) or not isinstance(index, (int, float)) or not float(index).is_integer():
+    if isinstance(index, bool) or not isinstance(index, (int, float)):
         return -1
-    return int(index)
+    number = _estate._double(index)
+    return number if math.isfinite(number) and number.is_integer() else -1
 
 
 def _route_event(value: Dict[str, Any]) -> List[Dict[str, str]]:
@@ -521,8 +523,8 @@ def _route_event(value: Dict[str, Any]) -> List[Dict[str, str]]:
 
     def candidate_at(ref: Dict[str, Any], path: str) -> Optional[Dict[str, Any]]:
         index = _index_of(ref)
-        candidate = candidates[index] if 0 <= index < len(candidates) else None
-        if (candidate is None or candidate.get("runnerKind", _MISSING) != ref.get("runnerKind", _MISSING)
+        candidate = candidates[int(index)] if 0 <= index < len(candidates) else None
+        if (candidate is None or not _estate._same(_at(candidate, "runnerKind"), _at(ref, "runnerKind"))
                 or ("provider" in ref and not _same_ref(candidate.get("provider"), ref["provider"]))):
             wrong(path, "candidate %s (%s) is not that position of the route" % (_field(ref, "index"), _field(ref, "runnerKind")))
             return None
@@ -536,12 +538,12 @@ def _route_event(value: Dict[str, Any]) -> List[Dict[str, str]]:
         if candidate is not None and probe.get("result") == "spawn-failed" and _object_at(candidate, "session").get("spawn") != "allowed":
             wrong("/probes/%d/result" % position, "%s has spawn: never, so it cannot have failed to spawn" % _field(probe, "runnerKind"))
 
-    def expect_probes(count: int) -> None:
+    def expect_probes(count: float) -> None:
         indexes = [_index_of(p) for p in probes]
-        expected = list(range(max(count, 0)))
-        if indexes != expected:
+        expected = range(int(max(count, 0)))  # Array.from({length: count}): ToLength, built only where it is read
+        if len(indexes) != len(expected) or any(index != expected[position] for position, index in enumerate(indexes)):
             wrong("/probes", "the walk must record candidates %s in order; it records %s"
-                  % (", ".join(map(str, expected)) or "none", ", ".join(map(str, indexes)) or "none"))
+                  % (", ".join(map(_estate._js_string, expected)) or "none", ", ".join(map(_estate._js_string, indexes)) or "none"))
 
     if event.get("kind") == "runner-exhausted":
         expect_probes(len(candidates))
@@ -557,7 +559,7 @@ def _route_event(value: Dict[str, Any]) -> List[Dict[str, str]]:
             wrong("/selected/session", "%s has attach: never, so the host cannot attach it" % _field(selected, "runnerKind"))
         if selected.get("session") == "spawned" and session.get("spawn") != "allowed":
             wrong("/selected/session", "%s has spawn: never, so the host cannot spawn it" % _field(selected, "runnerKind"))
-        if "drive" in chosen and "drive" in selected and selected["drive"] != chosen["drive"]:
+        if "drive" in chosen and "drive" in selected and not _estate._same(selected["drive"], chosen["drive"]):
             wrong("/selected/drive", "the route runs %s through %s, not %s" % (_field(selected, "runnerKind"), _field(chosen, "drive"), _field(selected, "drive")))
         if event.get("sticky") is True:
             # A sticky relaunch keeps the conversation's runner and walks nothing above it.

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -5,7 +5,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.34.0"
+  version: "0.35.0"
   contract-version: "0.1.0"
   contract-commit: "d8146cfb0a1c74fc6432284c4356bb0c864b37b5"
 ---

package/plugins/fabric-agent-adapter/skills/working-with-fabric/SKILL.md

@@ -16,10 +16,10 @@ compatibility: >-
   Needs the Fabric desktop app (0.4.0 or later for fabric-mcp and the fabric_work tools) and an MCP client.
   The status script needs Python 3.9+ (3.11+ to edit Kimi Code's config.toml). Starting Fabric needs the
   local-lifecycle MCP server; without it the person opens Fabric. The full session hooks run in Claude Code from
-  this plugin; Codex and Kimi Code get the session-start preamble hook on the person's consent.
+  this plugin; Codex/Kimi use command hooks; Hermes/OpenCode/OpenClaw/Pi use native context plugins after opt-in.
 metadata:
   author: PassionCode.ai
-  version: "0.34.0"
+  version: "0.35.0"
 ---
 
 # Working with Fabric
@@ -202,17 +202,19 @@ Never tell the person a call failed or succeeded when its outcome is unknown.
 ## Codex, Kimi Code and other agents
 
 Register with the agent's own CLI (Step 2). They cannot rejoin their Fabric session from a hook yet, so they get one
-hook only: the session-start preamble, which the person adds on consent. Show the edit first, then apply it when the
-person agrees:
+context bridge only. Inspect its dry run, then apply within the person's existing authorization:
 
 ```bash
-python3 <skill-dir>/scripts/fabric_session.py install-host-hooks --host codex   # or kimi; a dry run, writes nothing
+python3 <skill-dir>/scripts/fabric_session.py install-host-hooks --host codex   # kimi, hermes, opencode, openclaw or pi; dry run
 python3 <skill-dir>/scripts/fabric_session.py install-host-hooks --host codex --apply --expect-sha256 <digest>
 ```
 
 It edits `~/.codex/hooks.json` (`hooks.SessionStart`) or appends one `[[hooks]]` table to `~/.kimi-code/config.toml`,
 backs the file up first, refuses a file of another shape or one that changed since the dry run, and `--remove` takes
-it out again. Never edit those files by hand for the person. Without the hook, put the preamble into the first prompt
+it out again. Hermes/OpenCode/OpenClaw/Pi use their native plugin loaders, not Claude hook JSON.
+Hermes also needs `hermes plugins enable fabric-agent-adapter`; removal uses `hermes plugins disable fabric-agent-adapter`.
+Read [native host hooks](references/native-host-hooks.md) for exact paths, permission behavior and verification.
+Registration and a loaded hook do not prove live Fabric admission. Never edit those files by hand for the person. Without the hook, put the preamble into the first prompt
 yourself: "Call `fabric_whoami` first; `com.status` and `com.list`; `fabric_work_list`, then `fabric_work_claim`,
 before you start; `fabric_work_release` when you stop." Without an MCP client at all there is no way in: say so,
 and do the work without claiming Fabric saw it.

package/plugins/fabric-agent-adapter/skills/working-with-fabric/references/native-host-hooks.md

@@ -0,0 +1,53 @@
+# Native host context hooks (FAA-48)
+
+Use this when installing, upgrading or diagnosing startup context outside Claude Code. Hook delivery and Fabric admission are separate: the agent still calls `fabric_whoami` and reads its actual answer. No adapter here enrolls a session, starts Fabric or calls a model.
+
+## Supported adapters
+
+| Host | Native integration | Output consumed by host | Activation |
+|---|---|---|---|
+| Claude Code | Plugin `hooks/hooks.json` | SessionStart `hookSpecificOutput.additionalContext` JSON | Enable the Claude plugin; reload the session |
+| Codex | `hooks.SessionStart` in `$CODEX_HOME/hooks.json` | SessionStart JSON, including the event name | Install command hook; inspect `/hooks` if its exact definition needs trust |
+| Kimi Code | `[[hooks]]` in `~/.kimi-code/config.toml` | Plain stdout; existing adapter retained | Install command hook; start a new session; current native consumption is not covered by the six-host fixture |
+| Hermes | Native plugin prompt section `fabric.context` | Session-frozen section, maximum 4000 characters | Install files, then `hermes plugins enable fabric-agent-adapter` |
+| OpenCode | Native `experimental.chat.system.transform` | Appends one unique system string | Install `.js` loader; start a new instance |
+| OpenClaw | Plugin `before_prompt_build` | `{prependContext}` | Install native plugin path/config; host runtime must be installed; reload through its owner |
+| Pi | Extension `before_agent_start` | Structured section, or preserved forced/legacy system prompt | Install `.js` loader; use the host's extension reload or a new instance |
+
+These adapters were checked against Codex 0.162.1, Hermes 0.21.4 (2026.9.21), OpenCode 1.19.0, OpenClaw 2026.10.4 and Pi 1.1.0. Claude Code 2.1.299 also executed SessionStart through an isolated SDK initialization, without a user turn. A parser/loader fixture does not establish a model run or live Fabric connection.
+
+Codex accepts plain text only when it does not look like JSON. The old `[fabric-agent-adapter]` prefix begins with `[`, so Codex tries JSON parsing and reports `hook returned invalid session start JSON output`. Structured JSON removes that ambiguity.
+
+## Install, update and remove
+
+```sh
+python3 <skill-dir>/scripts/fabric_session.py install-host-hooks --host opencode
+python3 <skill-dir>/scripts/fabric_session.py install-host-hooks --host opencode --apply --expect-sha256 <printed-digest>
+python3 <skill-dir>/scripts/fabric_session.py install-host-hooks --host opencode --remove
+```
+
+Use `codex`, `kimi`, `hermes`, `opencode`, `openclaw` or `pi`. Default is a dry run. `--config` overrides the native destination, `--script` selects an absolute `fabric_session.py` in a **complete installed skill**. Keep that path stable; a versioned plugin cache disappears on updates. Reapply after moving the skill. The native installer checks the helper and every required host module before writing a loader.
+
+| Host | Default destination |
+|---|---|
+| Hermes | `$HERMES_HOME/plugins/fabric-agent-adapter/`, default `~/.hermes/plugins/` |
+| OpenCode | `$XDG_CONFIG_HOME/opencode/plugins/fabric-agent-adapter.js`, default `~/.config/` |
+| OpenClaw | `$OPENCLAW_CONFIG_PATH`, otherwise `$OPENCLAW_STATE_DIR/openclaw.json`, default `~/.openclaw/` |
+| Pi | `$PI_CODING_AGENT_DIR/extensions/fabric-agent-adapter.js`, default `~/.pi/agent/` |
+
+Hermes activation remains its own explicit CLI step. Remove its activation with `hermes plugins disable fabric-agent-adapter`, then remove the loader. The installer does not parse or rewrite arbitrary Hermes YAML.
+
+OpenClaw uses strict JSON. For a JSON5 configuration, use OpenClaw's own config commands; this installer refuses it without guessing. An existing master/entry disable, deny list or denied hook permission is preserved and reported. This adapter needs both `allowConversationAccess` and `allowPromptInjection`; it does not read messages. Removing it drops its recognized load path and owned entry; customized entries are disabled. An existing allow-list entry is retained to avoid changing broader discovery policy. Removal is ownership-limited, not an exact rollback of the whole config.
+
+OpenCode and Pi loader files carry a managed marker. A foreign file at the same destination is refused, not overwritten. Existing unrelated extensions/settings remain. Config replacement uses a backup and a stale-plan hash check; Hermes's multi-file loader is preflighted before writes, but the operation is not a filesystem-wide transaction.
+
+## Runtime and failure boundaries
+
+- Native bridges give the Python helper only a working directory and, when observed, a boolean Fabric registration. Hermes uses its native read-only config, OpenCode its resolved enabled MCP entry, OpenClaw its resolved MCP servers and Pi an exact callable `fabric_whoami` tool name. Config registration is not admission.
+- Missing helper/Python, malformed values, excessive output or a four-second deadline produce no context. Existing host errors and permission failures are not silenced globally.
+- Fabric-launched sessions are silent. Other native events are not advertised: turn observations, unread counts and rejoin-only release remain Claude-specific and feature-gated.
+- A host in Switchboard's catalog may support MCP, proxy or launch while exposing no startup context hook. Never copy this configuration to another host solely because it can launch an agent.
+
+## Verification
+
+The repository has focused tests in `test/test_fabric_session.py`, `test/test_native_hook_install.py`, `test/test_hermes_host.py`, `test/host-hooks-opencode-pi.test.mjs` and `test/openclaw-hooks.test.mjs`. Optional native probes use isolated configuration and neutral fixtures, without paid inference. The task's evidence and full 31-host survey live in the owning repository under `docs/evidence/specs/host-hooks-2026-10-16/`; these repository paths are not required to run the installed skill.

package/plugins/fabric-agent-adapter/skills/working-with-fabric/references/session-hooks.md

@@ -32,7 +32,8 @@ zero; a `degraded` board that still gives the count is read.
 
 ## Codex and Kimi Code
 
-`fabric_session.py hook session-start --host codex|kimi` prints the preamble as plain text when the host has `fabric`
+`fabric_session.py hook session-start --host codex|kimi` emits structured SessionStart JSON for Codex and plain text
+for Kimi when the host has `fabric`
 registered (`[mcp_servers.fabric]` in `$CODEX_HOME/config.toml`; `mcpServers.fabric` in `~/.kimi-code/mcp.json`),
 plus the service line. Nothing else: no turn observation and no unread line, because a rejoin needs the runtime
 session id Fabric keeps with the enrollment, which only Claude Code supplies today (D1).
@@ -46,6 +47,9 @@ the entry out again. Codex may ask the person to trust a new hook (`/hooks`) bef
 `fabric_session.py` of the skills install (`~/.agents/skills/working-with-fabric/`) when there is one, else this
 script's own path; a plugin cache path changes with each update, so pass `--script <a stable path>` there.
 
+Native Hermes, OpenCode, OpenClaw and Pi bridges are described in [native host hooks](native-host-hooks.md).
+They consume the same context through their own APIs. They never use the Claude-only rejoin/turn lifecycle.
+
 ## `watch-mail`
 
 `fabric_session.py watch-mail [--interval 60]` is for an idle Claude Code session waiting on the board; the agent

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session.py

@@ -3,11 +3,11 @@
 COM-04; FAA-12a).
 
   fabric_session.py status [--json] [--cwd DIR]          # Fabric, fabric-mcp, the registrations; ONE next action
-  fabric_session.py hook session-start [--host H]         # H: claude (default), codex, kimi — the preamble
+  fabric_session.py hook session-start [--host H]         # H: claude, codex, kimi, hermes, opencode, openclaw, pi
   fabric_session.py hook stop|session-end|user-prompt-submit   # Claude Code only: hook JSON on stdin, always exit 0
   fabric_session.py deliver SESSION_DIR                  # the detached worker the stop and session-end hooks start
   fabric_session.py watch-mail [--interval 60]           # Claude Code: one line each time the unread count rises
-  fabric_session.py install-host-hooks --host codex|kimi [--apply | --remove]   # dry run unless --apply/--remove
+  fabric_session.py install-host-hooks --host HOST [--apply | --remove]   # dry run unless --apply/--remove
 
 Standard library only. Nothing here reads a token or a credential: Fabric's door token and enrollment credentials
 stay with `fabric-mcp`. Nothing secret goes into argv or the log. A turn observation is facts only: the HEAD commit,
@@ -60,8 +60,10 @@ WATCH_MAX_BACKOFF_S = 900
 SESSION_ID = re.compile(r"[A-Za-z0-9._:-]{1,128}")
 LOOPBACK_ORIGIN = re.compile(r"http://127\.0\.0\.1:(\d{1,5})")
 LOCAL_ORIGIN = re.compile(r'"origin": "http://(?:127\.0\.0\.1|localhost)')
-VERSION = "0.34.0"
-HOSTS = {"claude": "Claude Code", "codex": "Codex", "kimi": "Kimi Code"}
+VERSION = "0.35.0"
+HOSTS = {"claude": "Claude Code", "codex": "Codex", "kimi": "Kimi Code",
+         "hermes": "Hermes", "opencode": "OpenCode", "openclaw": "OpenClaw", "pi": "Pi"}
+NATIVE_PLUGIN_HOSTS = frozenset(("hermes", "opencode", "openclaw", "pi"))
 # A session Fabric launched. FABRIC_LAUNCHED_SESSION=1 is the marker Fabric is asked to set (need D6); the others are
 # what Fabric already gives a launched session (fabric sessionBundle.ts): only their NAMES are looked at, never a value
 # — two of them carry the session's credential.
@@ -69,7 +71,8 @@ LAUNCH_MARKER = "FABRIC_LAUNCHED_SESSION"
 LAUNCH_SIGNALS = ("FABRIC_ACP_SESSION", "FABRIC_BRIDGE_URL", "KILO_CONFIG_CONTENT")
 
 PREAMBLE = (
-    "[fabric-agent-adapter] Fabric is running and this {host} has its MCP server `fabric`. "
+    "[fabric-agent-adapter] Fabric is running and this {host} has its MCP server `fabric` registered. "
+    "Registration is not proof of connection or admission. "
     "Call `fabric_whoami` first. Then read the project board: `com.status` (is it ready, how many unread), "
     "`com.list` for the messages, and `com.read_ack` only for what you actually read. "
     "Before you start work, call `fabric_work_list` (who is working on what here) and "
@@ -443,14 +446,17 @@ def read_hook_input() -> Dict[str, Any]:
 
 def hook_session_start(payload: Dict[str, Any], env: Optional[Dict[str, str]] = None,
                        host: str = "claude") -> Optional[str]:
-    """What to print, or None: Claude Code's hook JSON, or plain text for Codex and Kimi Code. The preamble when the
+    """What to print, or None: Claude/Codex hook JSON, plain context for native plugins and Kimi. The preamble when the
     host has `fabric` registered (one line pointing at the broker when Fabric is down), and the machine's
     descriptor-count line when it has Fabric services. Silent in a session Fabric launched."""
     if host not in HOSTS or fabric_launched(env):
         return None
     cwd = Path(payload.get("cwd") or os.getcwd())
     parts: List[str] = []
-    if host_registered(host, cwd, env):
+    registered = host_registered(host, cwd, env)
+    if host in NATIVE_PLUGIN_HOSTS and payload.get("fabric_registered") is True:
+        registered = True  # Native bridge's boolean observation, never enrollment or authorization.
+    if registered:
         hub = locate_hub(fabric_root(env=env))
         if hub["state"] == "running":
             parts.append(PREAMBLE.format(host=HOSTS[host]))
@@ -462,7 +468,7 @@ def hook_session_start(payload: Dict[str, Any], env: Optional[Dict[str, str]] =
     if not parts or launched_by_ancestor(env):
         return None
     context = "\n".join(parts)
-    if host != "claude":
+    if host not in ("claude", "codex"):
         return context
     return json.dumps({"hookSpecificOutput": {"hookEventName": "SessionStart", "additionalContext": context}})
 
@@ -1083,8 +1089,14 @@ def install_host_hooks_cli(argv: Sequence[str], env: Optional[Dict[str, str]] =
         args = parser.parse_args(list(argv))
     except SystemExit as exc:
         return int(exc.code or 2)
+    if args.host in NATIVE_PLUGIN_HOSTS:
+        import importlib.util
+        spec = importlib.util.spec_from_file_location("_fabric_native_installer", Path(__file__).with_name("host_hooks.py"))
+        installer = importlib.util.module_from_spec(spec)
+        spec.loader.exec_module(installer)
+        return installer.main(list(argv), env=env, out=out, err=err)
     if args.host not in ("codex", "kimi"):
-        err("install-host-hooks: --host must be codex or kimi (Claude Code gets its hooks from the plugin)")
+        err("install-host-hooks: --host must be codex, kimi, hermes, opencode, openclaw or pi (Claude uses its plugin)")
         return 2
     if args.config:
         path = Path(args.config).expanduser()
@@ -1117,8 +1129,15 @@ def install_host_hooks_cli(argv: Sequence[str], env: Optional[Dict[str, str]] =
                     del doc["hooks"]["SessionStart"]
                 new = (json.dumps(doc, indent=2) + "\n").encode("utf-8")
             elif present:
-                out("install-host-hooks: the Fabric preamble hook is already in %s; nothing to change" % path)
-                return 0
+                owned = [h for g in doc["hooks"]["SessionStart"] for h in g.get("hooks", [])
+                         if _is_ours(h.get("command"), args.host)]
+                if len(owned) != 1:
+                    raise Refused("multiple Fabric hooks are configured; preserve their matchers and resolve duplicates before updating")
+                if owned[0]["command"] == command:
+                    out("install-host-hooks: the Fabric preamble hook is already in %s; nothing to change" % path)
+                    return 0
+                owned[0]["command"] = command
+                new = (json.dumps(doc, indent=2) + "\n").encode("utf-8")
             else:
                 doc.setdefault("hooks", {}).setdefault("SessionStart", []).append(entry)
                 new = (json.dumps(doc, indent=2) + "\n").encode("utf-8")