@passioncode-ai/fabric-agent-adapter 0.38.0 → 0.39.1

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/usage.md

@@ -1,4 +1,4 @@
-# Usage report — what the agent spent (DEC-0021)
+# Usage report: what the agent spent (DEC-0021)
 
 Fabric Agent Contract DEC-0021, `docs/specification/service.md` → *Usage report*, schema
 `schemas/service-usage.schema.json`. Optional. A service that calls paid models or tools should
@@ -36,6 +36,11 @@ ledger.record(k.makeUsageReceipt('openrouter', model, { inputTokens, outputToken
   records `cost_usd=None`. The report counts it in `unpricedCalls`, and a host shows a lower bound
   («≥ $x») or «unknown». A call that is really free (a template, a cached answer) records
   `cost_usd=0.0` with `price-list`.
+- **Unknown tokens are named too** (DEC-0091). When the provider gave no token count (a stream cut off, a local
+  model without a counter), pass `tokens_measured=False` / `tokensMeasured: false` with the tokens you have (often 0).
+  The receipt carries `tokensMeasured: false`, and the report counts the call in `unmeasuredCalls` on its day and model
+  row, never more than `calls`; a host then shows the token totals as a lower bound. A job whose usage you send as
+  `null` or `partial` ([interop](interop.md)) is such a call.
 - **No content.** A receipt carries no prompt, output, caller or user id. The kits accept only the
   fields above.
 - If the service already keeps a ledger (a jobs table with token counts), build the receipts from
@@ -59,7 +64,7 @@ left out.
 it, and the host only shows it.
 
 **Every limit (DEC-0027).** Pass `budgets` to list every spending limit the service applies,
-enforced or not, so the spend view shows all of them — the operator asked for that on 2026-10-07:
+enforced or not, so the spend view shows all of them; the operator asked for that on 2026-10-07:
 
 ```python
 ledger.report(service_id=ID, budget={"period": "month", "limitUsd": 100}, budgets=[
@@ -74,7 +79,7 @@ ledger.report(service_id=ID, budget={"period": "month", "limitUsd": 100}, budget
   way `budget` is, so `budget` and its twin in `budgets` never disagree. A per-order limit
   (`per_job`, `approval`) gets `spentUsd: null`. Every other limit states its own spend.
 - `scope` is `machine`, `project`, `pool` or `job`; a `project` or `pool` limit names its
-  `subject`. A limit has at most one window — `period`, `windowSeconds` or `since` — and it agrees
+  `subject`. A limit has at most one window (`period`, `windowSeconds` or `since`), and it agrees
   with the kind (`daily`: the day or 86400 s; `monthly`: the month or 28–31 days; `velocity`: a
   rolling window). `tripped: true` (work stopped by it now) needs `enforced: true`. An unknown
   kind is shown generically, never refused.

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/check_service.py

@@ -90,12 +90,12 @@ def marker_problem(plist: dict) -> Optional[str]:
     fix = ("a copy that finds the lock held exits 75 at once and KeepAlive respawns it every ThrottleInterval; "
            "regenerate the plist with launchd_plist / launchdPlist and reinstall")
     if marker["kind"] == "conflict":
-        return "%s — %s" % (fs.marker_conflict_message(marker), fix)
+        return "%s: %s" % (fs.marker_conflict_message(marker), fix)
     if marker["kind"] == "supervised":
-        return "the marker names %s, not launchd — %s" % (marker["manager"], fix)
+        return "the marker names %s, not launchd: %s" % (marker["manager"], fix)
     if marker.get("unreadable") is not None:
-        return "the marker %r names no supervisor — %s" % (marker["unreadable"], fix)
-    return "no %s=launchd — %s" % (fs.SUPERVISOR_ENV, fix)
+        return "the marker %r names no supervisor: %s" % (marker["unreadable"], fix)
+    return "no %s=launchd: %s" % (fs.SUPERVISOR_ENV, fix)
 
 
 def priority_problems(plist: dict) -> list:
@@ -729,7 +729,7 @@ class Probe:
                  marker or "%s: %s=launchd, so a copy that finds the lock held backs off" % (plist_path.name, fs.SUPERVISOR_ENV))
         slow = priority_problems(plist)
         self.add("lifecycle.priority", "FAIL" if slow else "PASS",
-                 "; ".join(slow) + " — macOS may starve the service under load and hosts then see an outage; use ProcessType Standard"
+                 "; ".join(slow) + ". macOS may starve the service under load and hosts then see an outage; use ProcessType Standard"
                  if slow else "%s: scheduled as a standard process" % plist_path.name)
         if sys.platform != "darwin" or not shutil.which("launchctl"):
             self.add("lifecycle.one-copy", "NOT_RUN", "launchctl is not available")
@@ -920,49 +920,26 @@ def usage_problems(report: Any, service_id: str, instance: str) -> List[str]:
     days = report.get("days")
     if not isinstance(days, list) or len(days) > fs.USAGE_DAYS:
         return out + ["days is not a list of at most 31"]
-    fields = ("calls", "unpricedCalls", "inputTokens", "outputTokens", "cacheReadTokens", "cacheWriteTokens")
-
-    def priced(row: Dict[str, Any], at: str) -> None:
-        calls, unpriced, cost = row.get("calls", 0), row.get("unpricedCalls", 0), row.get("costUsd")
-        if unpriced > calls:
-            out.append("%s: more unpriced calls than calls" % at)
-        if calls and unpriced == calls and cost is not None:
-            out.append("%s: every call is unpriced, so the cost must be null, not %r" % (at, cost))
-        if unpriced < calls and cost is None:
-            out.append("%s: priced calls carry a cost" % at)
-        if cost is not None and (not isinstance(cost, (int, float)) or cost < 0):
-            out.append("%s: costUsd is not a non-negative number" % at)
-
-    previous = ""
+    # The arithmetic of FAC-SEM-025 is the kit's `usage_findings`, the contract's `usageRules` held to its vectors: one
+    # implementation, so the probe never disagrees with the kit and never throws on a count that is not a number.
     for i, day in enumerate(days):
-        at = "days[%d]" % i
-        date = str(day.get("date", "")) if isinstance(day, dict) else ""
-        if not re.match(r"^\d{4}-\d{2}-\d{2}$", date) or date <= previous:
-            out.append("%s: dates must run forward" % at)
-        previous = date
-        priced(day, at)
-        models = day.get("byModel") if isinstance(day, dict) else None
-        if not isinstance(models, list):
-            out.append("%s: byModel missing" % at)
+        if not isinstance(day, dict):
+            out.append("days[%d]: not an object" % i)
             continue
-        for j, m in enumerate(models):
-            priced(m, "%s.byModel[%d]" % (at, j))
-        for f in fields:
-            if day.get(f, 0) != sum(m.get(f, 0) for m in models):
-                out.append("%s: %s is not the sum of its models" % (at, f))
-        known = sum(m["costUsd"] for m in models if isinstance(m.get("costUsd"), (int, float)))
-        if isinstance(day.get("costUsd"), (int, float)) and abs(day["costUsd"] - known) > 1e-6:
-            out.append("%s: costUsd is not the sum of its models' known costs" % at)
-        for j, m in enumerate(models):
+        if not isinstance(day.get("byModel"), list):
+            out.append("days[%d]: byModel missing" % i)
+            continue
+        for row, at in [(day, "days[%d]" % i)] + [(m, "days[%d].byModel[%d]" % (i, j)) for j, m in enumerate(day["byModel"]) if isinstance(m, dict)]:
+            cost = row.get("costUsd")
+            if cost is not None and (isinstance(cost, bool) or not isinstance(cost, (int, float)) or cost < 0):
+                out.append("%s: costUsd is not a non-negative number" % at)
+        for j, m in enumerate(day["byModel"]):
             # DEC-0046, DEC-0061: a row's route is a login in its vendor's runner, an issued key, or the platform's
             # own metered models (a listing in the cloud).
-            if "route" in m and m["route"] not in fs.USAGE_ROUTES:
-                out.append("%s.byModel[%d]: route %r is not subscription, key or platform-metered" % (at, j, m["route"]))
-    # DEC-0065: the window and the project attribution, as the contract's usageRules reads them (FAC-SEM-025).
+            if isinstance(m, dict) and "route" in m and m["route"] not in fs.USAGE_ROUTES:
+                out.append("days[%d].byModel[%d]: route %r is not subscription, key or platform-metered" % (i, j, m["route"]))
     for finding in fs.usage_findings(report):
-        path, message = finding["instancePath"], finding["message"]
-        if path.startswith(("/byProject", "/generatedAt")) or "generatedAt" in message or "exists in its month" in message:
-            out.append("%s: %s" % (path or "/", message))
+        out.append("%s: %s" % (finding["instancePath"] or "/", finding["message"]))
     return out
 
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/dashboard_kit.py

@@ -408,7 +408,7 @@ def main(argv: Optional[Sequence[str]] = None) -> int:
             for c in report["copies"]:
                 print("  %-8s %s (%s)" % (c["state"], c["path"], c["version"] or "no version marker"))
             if not report["copies"]:
-                print("  no kit copy" + (" — services %s declare a dashboard" % ", ".join(report["services"])
+                print("  no kit copy" + (" (services %s declare a dashboard)" % ", ".join(report["services"])
                                          if report["dashboard"] and report["services"] else ""))
             if report["services"]:
                 print("  services from this repository: %s" % ", ".join(report["services"]))

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-board.mjs

@@ -362,7 +362,7 @@ export class BoardSession {
     try {
       return await this.post(this.grant.origin, body, this.grant.bearer(), { session: this.mcpSession, timeout: this.timeout, method, protocolVersion: this.mcpSession ? this.protocolVersion : undefined });
     } catch (e) {
-      if (e instanceof HubError) throw new BoardError('unreachable', 'Fabric\'s hub did not answer; a write may have been stored — send it again with the same idempotency key.', true);
+      if (e instanceof HubError) throw new BoardError('unreachable', 'Fabric\'s hub did not answer; a write may have been stored, so send it again with the same idempotency key.', true);
       throw e;
     }
   }

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-delegation.mjs

@@ -178,11 +178,17 @@ function authentic(token, jwks, typ) {
   return { compact, kid, x: found.x };
 }
 
-/** Depth of an actor chain; Infinity for a chain that is not one (a missing or non-string sub at any level). */
+const ORG_CONTEXT = /^org:[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
+/** DEC-0090: a partner actor is exactly {partner: org:<id>}, never with a sub, a session or an act. */
+export const isPartnerActor = (node) => isObject(node) && typeof node.partner === 'string' && ORG_CONTEXT.test(node.partner) && Object.keys(node).length === 1;
+
+/** Depth of an actor chain; Infinity for a chain that is not one (a missing or non-string sub at any level). A partner
+ * actor ends the chain and counts, never begins it (DEC-0090). */
 export function chainDepth(act) {
   let depth = 0;
   let node = act;
   while (node !== undefined) {
+    if (depth > 0 && isPartnerActor(node)) return depth + 1; // a partner actor ends the chain, never begins it
     if (!isObject(node) || !isString(node.sub)) return Number.POSITIVE_INFINITY;
     depth += 1;
     if (depth > 64) return depth;
@@ -193,7 +199,7 @@ export function chainDepth(act) {
 
 function chainOf(act) {
   const chain = [];
-  for (let node = act; node; node = node.act) chain.push(node.sub);
+  for (let node = act; node; node = 'act' in node ? node.act : undefined) chain.push('partner' in node ? node.partner : node.sub);
   return chain;
 }
 
@@ -212,6 +218,7 @@ function actorChainDepth(act) {
   if (act === undefined) return undefined;
   let depth = 0;
   for (let node = act; node !== undefined; node = node.act) {
+    if (depth > 0 && isPartnerActor(node)) return depth + 1; // DEC-0090: innermost only, it ends the chain
     if (!isObject(node) || typeof node.sub !== 'string' || !AGENT_ID.test(node.sub)) return undefined;
     if (node.session !== undefined && !(typeof node.session === 'string' && OPAQUE_ID.test(node.session))) return undefined;
     depth += 1;

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-estate.mjs

@@ -300,9 +300,17 @@ export function placementTrust(record, machineId, agentRef, context = PERSONAL_C
   const machine = list(record.machines).find((entry) => entry.id === machineId);
   const placement = list(machine?.packages).find((entry) => entry.agentRef === agentRef && contextOf(entry) === context);
   if (!placement) return undefined;
+  // DEC-0090: a partner's key is trusted only in the contexts its scope names.
+  if (!scopeAdmits(record, placement.publisherKid, context)) return { publisher: [] };
   return { publisher: list(record.publisherKeys).filter((key) => key.kid === placement.publisherKid) };
 }
 
+/** Whether a placement in `context` under `kid` may use that key (DEC-0090): an unscoped key anywhere, a scoped one only in its contexts. */
+function scopeAdmits(record, kid, context) {
+  const scopes = list(record.publisherScopes).filter((scope) => scope.kid === kid);
+  return scopes.length === 0 || scopes.some((scope) => Array.isArray(scope.contexts) && scope.contexts.includes(context));
+}
+
 const MAX_WINDOW_MS = MAX_VALIDITY_SECONDS * 1000;
 const isRevision = (value) => Number.isSafeInteger(value) && value >= 1;
 const refused = (fault, detail) => ({ certified: false, fault, detail });
@@ -472,6 +480,27 @@ function placements(value, flag) {
   });
 }
 
+/**
+ * FAC-SEM-122 on one record (DEC-0090): a partner's publisher key is scoped once, to a key the record pins, and a
+ * placement under it is in one of the organization contexts its scope names, never `personal` or another.
+ */
+function partnerScopes(value, flag) {
+  const pinned = new Set(list(value.publisherKeys).map((key) => key.kid));
+  const scoped = new Set();
+  indexed(value.publisherScopes).forEach(([scope, index]) => {
+    if (scoped.has(scope.kid)) flag(`/publisherScopes/${index}/kid`, `publisher key ${show(scope.kid)} is scoped twice`);
+    scoped.add(scope.kid);
+    if (!pinned.has(scope.kid)) flag(`/publisherScopes/${index}/kid`, `publisher key ${show(scope.kid)} is not in publisherKeys, so the scope limits no key`);
+  });
+  indexed(value.machines).forEach(([machine, m]) => {
+    indexed(machine.packages).forEach(([placement, p]) => {
+      if (!scopeAdmits(value, placement.publisherKid, contextOf(placement))) {
+        flag(`/machines/${m}/packages/${p}/publisherKid`, `publisher key ${show(placement.publisherKid)} is a partner's, trusted only in the contexts its scope names, not in ${show(contextOf(placement))}`);
+      }
+    });
+  });
+}
+
 function secretReferences(value, flag) {
   const machineIds = new Set(list(value.machines).map((machine) => machine.id));
   indexed(value.machines).forEach(([machine, m]) => {
@@ -573,6 +602,7 @@ function recordFindings(value) {
   revisionWhole(value, flagger(findings, 'FAC-SEM-072'));
   keys(value, flagger(findings, 'FAC-SEM-073'));
   placements(value, flagger(findings, 'FAC-SEM-074'));
+  partnerScopes(value, flagger(findings, 'FAC-SEM-122'));
   secretReferences(value, flagger(findings, 'FAC-SEM-075'));
   grantsAndRevocations(value, flagger(findings, 'FAC-SEM-076'));
   indexed(value.shareGrants).forEach(([grant, index]) => findings.push(...grantContextFindings(grant, `/shareGrants/${index}`)));
@@ -613,6 +643,9 @@ function installation(value) {
   indexed(machine.secrets).forEach(([secret, index]) => {
     if (secret.agentRef === pkg.agentRef && contextOf(secret) === context && !declared.has(secret.slot)) flag075(`/record/machines/${machineIndex}/secrets/${index}/slot`, `the package declares no slot ${show(secret.slot)}: a secret goes only where a placed package declares it`);
   });
+  if (placement && !scopeAdmits(record, placement.publisherKid, context)) {
+    flagger(findings, 'FAC-SEM-122')(`/record/machines/${machineIndex}/packages/${placementIndex}/publisherKid`, `publisher key ${show(placement.publisherKid)} is a partner's, not trusted in ${show(context)}`);
+  }
   if (placement) {
     const flag111 = flagger(findings, 'FAC-SEM-111');
     for (const [suffix, message] of placementGrantProblems(record, placement)) flag111(`/record/machines/${machineIndex}/packages/${placementIndex}${suffix}`, message);

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-package.mjs

@@ -420,7 +420,7 @@ export function readFolder(folder) {
     }
   };
   walk(folder, '');
-  if (refused.length) throw new PackageError(`Not packed: remove these or pack a clean copy — ${refused.sort().join('; ')}`);
+  if (refused.length) throw new PackageError(`Not packed: remove these or pack a clean copy: ${refused.sort().join('; ')}`);
   return files;
 }
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-service.mjs

@@ -17,7 +17,7 @@ export const EXTENSION_KEY = 'https://fabric.passioncode.ai/agent-contract/exten
 // The embedded dashboard declaration (fabric-dashboard/0.1, DEC-0036 ED-9), under the well-known
 // document's `extensions`. The kit is assets/dashboard-kit; its version is the one in kit.json.
 export const DASHBOARD_EXTENSION_KEY = 'https://fabric.passioncode.ai/agent-contract/extensions/dashboard/0.1';
-export const DASHBOARD_KIT = 'fabric-dashboard-kit@1.1.0';
+export const DASHBOARD_KIT = 'fabric-dashboard-kit@1.1.1';
 export const REFERENCE_THEMES = ['graphite', 'fabric', 'paper', 'forest', 'ocean', 'ember', 'contrast'];
 export const EXIT_ALREADY_RUNNING = 75;
 // Lifecycle rules: references/lifecycle.md (the rule for this kit's users; it implements the public
@@ -862,13 +862,13 @@ export function buildWellKnown({ id, instance, name, version, build, startedAt,
 
 /** Each contract protocol's published revisions, oldest first (the contract's `PROTOCOL_REVISIONS`); a test holds it equal to the contract's. */
 export const PROTOCOL_REVISIONS = new Map(Object.entries({
-  'access-log': ['1'], approval: ['1'], 'activity-summary': ['1'], 'enroll-token': ['1'], entitlement: ['1'], 'entitlement-key-set': ['1'], 'estate-record': ['1'], 'execution-packet': ['1'],
+  'access-log': ['1'], approval: ['1'], 'activity-summary': ['1'], 'coding-agents': ['1'], 'enroll-token': ['1'], entitlement: ['1'], 'entitlement-key-set': ['1'], 'estate-record': ['1'], 'execution-packet': ['1'],
   'fabric-activity': ['0.1'], 'fabric-dashboard': ['0.1'], 'fabric-delegation': ['0.1'], 'fabric-device': ['0.1'],
   'fabric-interop': ['0.1', '0.2'], 'fabric-local-channel': ['0.1'], 'fabric-local-runner': ['0.1'], 'fabric-operator-channel': ['0.1'],
   'fabric-package': ['1'], 'fabric-project-comms': ['0.1'], 'fabric-proposal': ['1'], 'fabric-provider': ['0.1'], 'fabric-relay': ['0.1'],
   'fabric-secret-envelope': ['1'], 'fabric-service': ['0.1'], 'fabric-settings-backup': ['1'], heartbeat: ['1'], 'learning-note': ['1'],
   memory: ['0.1'], 'pairing-message': ['1'], pipeline: ['0.1'], 'revocation-delta': ['1'], 'session-handoff': ['1'],
-  'share-registration': ['1'], 'share-registration-receipt': ['1'], 'window-lease': ['1'],
+  'share-registration': ['1'], 'share-registration-receipt': ['1'], 'support-quality-daily': ['1'], 'window-lease': ['1'],
 }));
 export const MAX_PROTOCOLS = 64;
 const REVISION = /^([a-z][a-z0-9.-]{0,63})\/([0-9]{1,4}(?:\.[0-9]{1,4}){0,2})$/;
@@ -1023,7 +1023,9 @@ const COUNTS = ['inputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTok
  * One model call. `projectId` (a URI, kept in its normal form, DEC-0076) and `taskRunId` (the service's own run id) attribute
  * it to the project the service ran it for (DEC-0065); they never name a caller, session or person.
  */
-export function makeUsageReceipt(provider, model, { inputTokens, outputTokens, cacheReadTokens = 0, cacheWriteTokens = 0, costUsd = null, costBasis, at, route, projectId, taskRunId } = {}) {
+// tokensMeasured: false marks a call whose token counts are a lower bound or unknown (DEC-0091): the report counts it
+// in unmeasuredCalls and its token totals are a lower bound.
+export function makeUsageReceipt(provider, model, { inputTokens, outputTokens, cacheReadTokens = 0, cacheWriteTokens = 0, costUsd = null, costBasis, at, route, projectId, taskRunId, tokensMeasured = true } = {}) {
   if (!PROVIDER.test(provider ?? '')) throw new ServiceError('provider must be a lowercase name such as anthropic or openrouter.');
   model = String(model ?? '').trim();
   if (!model || model.length > 128) throw new ServiceError('model must be 1 to 128 characters.');
@@ -1033,10 +1035,11 @@ export function makeUsageReceipt(provider, model, { inputTokens, outputTokens, c
   const basis = costBasis ?? (costUsd === null ? 'unknown' : 'provider');
   if (!COST_BASES.includes(basis) || (costUsd === null) !== (basis === 'unknown')) throw new ServiceError('costBasis is provider or price-list with a cost, unknown without one.');
   if (route !== undefined && !USAGE_ROUTES.includes(route)) throw new ServiceError('route is subscription, key or platform-metered (DEC-0046, DEC-0061).');
+  if (tokensMeasured !== true && tokensMeasured !== false) throw new ServiceError('tokensMeasured is true or false.');
   if (taskRunId !== undefined && projectId === undefined) throw new ServiceError('a task run belongs to a project: give projectId with taskRunId.');
   if (projectId !== undefined && !(typeof projectId === 'string' && /^[A-Za-z][A-Za-z0-9+.-]*:\S+$/.test(projectId))) throw new ServiceError('projectId is the URI of the project the service ran the call for.');
   if (taskRunId !== undefined && !(typeof taskRunId === 'string' && /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/.test(taskRunId))) throw new ServiceError("taskRunId is the service's own run id: ^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$.");
-  return { at: at ?? nowIso(), provider, model, ...counts, costUsd, costBasis: basis, ...(route === undefined ? {} : { route }),
+  return { at: at ?? nowIso(), provider, model, ...counts, costUsd, costBasis: basis, ...(tokensMeasured ? {} : { tokensMeasured: false }), ...(route === undefined ? {} : { route }),
     ...(projectId === undefined ? {} : { projectId: normalIdentifier(projectId) }), ...(taskRunId === undefined ? {} : { taskRunId }) };
 }
 
@@ -1104,6 +1107,8 @@ function pricedRow(row, at) {
   const calls = usageCount(row.calls), unpriced = usageCount(row.unpricedCalls);
   const flag = (p, message) => [{ code: 'FAC-SEM-025', instancePath: p, message }];
   if (unpriced > calls) return flag(`${at}/unpricedCalls`, 'more unpriced calls than calls');
+  // DEC-0091: calls whose token count is unknown are some of the calls, never more.
+  if (usageCount(row.unmeasuredCalls) > calls) return flag(`${at}/unmeasuredCalls`, 'more calls with unknown tokens than calls');
   if (calls > 0 && unpriced === calls && row.costUsd !== null) return flag(`${at}/costUsd`, 'every call is unpriced, so the cost is unknown (null), not a number');
   if (unpriced < calls && row.costUsd === null) return flag(`${at}/costUsd`, 'priced calls carry a cost; null is only for a row with no priced call');
   return [];
@@ -1114,6 +1119,25 @@ function pricedRow(row, at) {
  * date exists, not after `generatedAt`'s UTC date, at most 30 days before it) and the project attribution (each project
  * once by its normal form, each task run once; calls, priced calls and known costs bounded). Never throws.
  */
+/** The contract's `toNumber` (src/findings.ts): `Number()` without its throw on an object such as {"toString": 1}. */
+function toNumber(value) {
+  try {
+    return Number(value);
+  } catch {
+    return Number.NaN;
+  }
+}
+
+/** The contract's `show`: `String()`, or the value's JSON where `String()` would throw. */
+function show(value) {
+  if (typeof value === 'string') return value;
+  try {
+    return String(value);
+  } catch {
+    return JSON.stringify(value) ?? typeof value;
+  }
+}
+
 export function usageFindings(report) {
   const value = typeof report === 'object' && report !== null && !Array.isArray(report) ? report : {};
   const findings = [];
@@ -1122,23 +1146,24 @@ export function usageFindings(report) {
   let previous = '';
   days.forEach((day, i) => {
     const at = `/days/${i}`;
-    const date = String(day.date ?? '');
+    const date = show(day.date ?? '');
     if (date <= previous) flag(`${at}/date`, `days must run forward without a repeat (${date} after ${previous})`);
     previous = date;
     findings.push(...pricedRow(day, at));
     const models = usageList(day.byModel);
     models.forEach((m, j) => findings.push(...pricedRow(m, `${at}/byModel/${j}`)));
     if (!models.length) {
-      const spent = ['calls', 'inputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens'].some((f) => Number(day[f] ?? 0) > 0) || Number(day.costUsd ?? 0) > 0;
+      const spent = ['calls', 'inputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens'].some((f) => toNumber(day[f] ?? 0) > 0) || toNumber(day.costUsd ?? 0) > 0;
       if (spent) flag(`${at}/byModel`, 'a day with calls, tokens or cost names the models they belong to');
       return;
     }
-    for (const field of ['calls', 'unpricedCalls', 'inputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens']) {
-      const sum = models.reduce((n, m) => n + Number(m[field] ?? 0), 0);
-      if (Number(day[field] ?? 0) !== sum) flag(`${at}/${field}`, `the day's ${field} is not the sum of its models (${String(day[field] ?? 0)} ≠ ${sum})`);
+    for (const field of ['calls', 'unpricedCalls', 'unmeasuredCalls', 'inputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens']) {
+      const sum = models.reduce((n, m) => n + toNumber(m[field] ?? 0), 0);
+      if (toNumber(day[field] ?? 0) !== sum) flag(`${at}/${field}`, `the day's ${field} is not the sum of its models (${show(day[field] ?? 0)} ≠ ${sum})`);
     }
     const known = models.map((m) => (typeof m.costUsd === 'number' ? m.costUsd : null)).filter((x) => x !== null).reduce((n, x) => n + x, 0);
-    if (typeof day.costUsd === 'number' && Math.abs(day.costUsd - known) > 0.000001 + 1e-9 * Math.max(Math.abs(day.costUsd), Math.abs(known))) flag(`${at}/costUsd`, "the day's cost is not the sum of its models' known costs");
+    // The contract's !close(day, known): Infinity or NaN is never close, so it is a finding.
+    if (typeof day.costUsd === 'number' && !(Math.abs(day.costUsd - known) <= 0.000001 + 1e-9 * Math.max(Math.abs(day.costUsd), Math.abs(known)))) flag(`${at}/costUsd`, "the day's cost is not the sum of its models' known costs");
   });
   if (days.length) {
     const generated = strictTime(value.generatedAt);
@@ -1162,8 +1187,8 @@ export function usageFindings(report) {
       const at = `/byProject/${p}`;
       const normal = normalIdentifier(project.projectId);
       if (normal !== undefined) {
-        if (seen.has(normal)) flag(`${at}/projectId`, `each project is one row: ${String(project.projectId)} names the project ${seen.get(normal)} already names`);
-        else seen.set(normal, String(project.projectId));
+        if (seen.has(normal)) flag(`${at}/projectId`, `each project is one row: ${show(project.projectId)} names the project ${seen.get(normal)} already names`);
+        else seen.set(normal, show(project.projectId));
       }
       projectCalls += usageCount(project.calls);
       projectCost += usageCost(project.costUsd);
@@ -1272,6 +1297,7 @@ export function usageReport(receipts, { id, instance = 'default', now = Date.now
     row.calls += 1;
     for (const c of COUNTS) row[c] += Number(r[c] ?? 0);
     if (r.costUsd === null || r.costUsd === undefined) row.unpricedCalls += 1; else row.cost += r.costUsd;
+    if (r.tokensMeasured === false) row.unmeasuredCalls = (row.unmeasuredCalls ?? 0) + 1; // absent is 0 (DEC-0091)
     row.bases.add(r.costBasis ?? 'unknown');
   }
   const outDays = [...days.keys()].sort().map((date) => {
@@ -1281,6 +1307,7 @@ export function usageReport(receipts, { id, instance = 'default', now = Date.now
     const day = emptyRow({ date });
     for (const m of models) {
       for (const c of ['calls', 'unpricedCalls', ...COUNTS]) day[c] += m[c];
+      if (m.unmeasuredCalls) day.unmeasuredCalls = (day.unmeasuredCalls ?? 0) + m.unmeasuredCalls;
       day.cost += m.costUsd ?? 0;
     }
     return { ...closeRow(day), byModel: models };

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_board.py

@@ -483,7 +483,7 @@ class BoardSession:
             return self.post(self.grant.origin, body, self.grant.bearer(), session=self.mcp_session, timeout=self.timeout,
                              method=method, protocol_version=self.protocol_version if self.mcp_session else None)
         except _hub.HubError as exc:
-            raise BoardError("unreachable", "Fabric's hub did not answer; a write may have been stored — send it again with "
+            raise BoardError("unreachable", "Fabric's hub did not answer; a write may have been stored, so send it again with "
                              "the same idempotency key.", True) from exc
 
     def open(self) -> None:

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_delegation.py

@@ -334,11 +334,22 @@ def _authentic(token: Any, jwks: Dict[str, Any], typ: str) -> Dict[str, Any]:
     return {"compact": compact, "kid": kid, "x": found["x"]}
 
 
+_ORG_CONTEXT = re.compile(r"org:[A-Za-z0-9][A-Za-z0-9_-]{0,127}\Z")
+
+
+def is_partner_actor(node: Any) -> bool:
+    """DEC-0090: a partner actor is exactly {partner: org:<id>}, never with a sub, a session or an act."""
+    return isinstance(node, dict) and len(node) == 1 and isinstance(node.get("partner"), str) and _ORG_CONTEXT.match(node["partner"]) is not None
+
+
 def chain_depth(act: Any) -> float:
-    """Depth of an actor chain; infinity for a chain that is not one (a missing or non-string sub at any level)."""
+    """Depth of an actor chain; infinity for a chain that is not one (a missing or non-string sub at any level). A
+    partner actor ends the chain and counts, never begins it (DEC-0090)."""
     depth = 0
     node = act
     while node is not _MISSING:
+        if depth > 0 and is_partner_actor(node):
+            return depth + 1
         if not isinstance(node, dict) or not _is_string(node.get("sub")):
             return math.inf
         depth += 1
@@ -352,7 +363,7 @@ def _chain_of(act: Dict[str, Any]) -> List[str]:
     chain = []
     node: Any = act
     while isinstance(node, dict):
-        chain.append(node["sub"])
+        chain.append(node["partner"] if "partner" in node else node["sub"])  # the contract's chainOf, partner first
         node = node.get("act")
     return chain
 
@@ -379,6 +390,8 @@ def _actor_chain_depth(act: Any) -> Optional[int]:
     depth = 0
     node = act
     while node is not _MISSING:
+        if depth > 0 and is_partner_actor(node):  # DEC-0090: innermost only, it ends the chain
+            return depth + 1
         if not isinstance(node, dict) or not _full(AGENT_ID, node.get("sub")):
             return None
         if "session" in node and not _full(OPAQUE_ID, node["session"]):

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_estate.py

@@ -734,9 +734,18 @@ def placement_trust(record: Dict[str, Any], machine_id: str, agent_ref: str, con
                       if _same(_get(p, "agentRef"), agent_ref) and _same(_context_of(p), context)), None)
     if placement is None:
         return None
+    if not _scope_admits(record, _get(placement, "publisherKid"), context):  # DEC-0090: a partner's key, in its contexts only
+        return {"publisher": []}
     return {"publisher": [k for k in _list(_get(record, "publisherKeys")) if _same(_get(k, "kid"), _get(placement, "publisherKid"))]}
 
 
+def _scope_admits(record: Any, kid: Any, context: Any) -> bool:
+    """DEC-0090: a key no `publisherScopes[]` entry names is trusted in any context; a partner's key, only in a context
+    one of its scopes lists."""
+    scopes = [s for s in _list(_get(record, "publisherScopes")) if _same(_get(s, "kid"), kid)]
+    return not scopes or any(isinstance(_get(s, "contexts"), list) and _contains(s["contexts"], context) for s in scopes)
+
+
 #: v4 §7, Freshness: an estate revision's window is at most 30 days (DEC-0055 item 2).
 _MAX_WINDOW_MS = MAX_VALIDITY_SECONDS * 1000
 
@@ -953,6 +962,25 @@ def _placements(value: Dict[str, Any], flag) -> None:
                 flag("%s/publisherKid" % at, "publisher key %s is not in publisherKeys, so the machine pins no key to verify the package under" % _show(_get(placement, "publisherKid")))
 
 
+def _partner_scopes(value: Dict[str, Any], flag) -> None:
+    """FAC-SEM-122 on one record (DEC-0090): a partner's publisher key is scoped once, to a key the record pins, and a
+    placement under it is in one of the organization contexts its scope names, never ``personal`` or another."""
+    pinned = [_get(k, "kid") for k in _list(_get(value, "publisherKeys"))]
+    scoped: List[Any] = []
+    for scope, index in _indexed(_get(value, "publisherScopes")):
+        if _contains(scoped, _get(scope, "kid")):
+            flag("/publisherScopes/%d/kid" % index, "publisher key %s is scoped twice" % _show(_get(scope, "kid")))
+        scoped.append(_get(scope, "kid"))
+        if not _contains(pinned, _get(scope, "kid")):
+            flag("/publisherScopes/%d/kid" % index, "publisher key %s is not in publisherKeys, so the scope limits no key" % _show(_get(scope, "kid")))
+    for machine, m in _indexed(_get(value, "machines")):
+        for placement, p in _indexed(_get(machine, "packages")):
+            if not _scope_admits(value, _get(placement, "publisherKid"), _context_of(placement)):
+                flag("/machines/%d/packages/%d/publisherKid" % (m, p),
+                     "publisher key %s is a partner's, trusted only in the contexts its scope names, not in %s"
+                     % (_show(_get(placement, "publisherKid")), _show(_context_of(placement))))
+
+
 def _secret_references(value: Dict[str, Any], flag) -> None:
     machine_ids = [_get(m, "id") for m in _list(_get(value, "machines"))]
     for machine, m in _indexed(_get(value, "machines")):
@@ -1110,6 +1138,7 @@ def _record_findings(value: Dict[str, Any]) -> List[Dict[str, str]]:
     _revision_whole(value, _finding(findings, "FAC-SEM-072"))
     _keys(value, _finding(findings, "FAC-SEM-073"))
     _placements(value, _finding(findings, "FAC-SEM-074"))
+    _partner_scopes(value, _finding(findings, "FAC-SEM-122"))
     _secret_references(value, _finding(findings, "FAC-SEM-075"))
     _grants_and_revocations(value, _finding(findings, "FAC-SEM-076"))
     for grant, index in _indexed(_get(value, "shareGrants")):  # FAC-SEM-110 (DEC-0082)
@@ -1156,6 +1185,9 @@ def _installation(value: Dict[str, Any]) -> List[Dict[str, str]]:
         if _same(_get(secret, "agentRef"), _get(pkg, "agentRef")) and _same(_context_of(secret), context) and not _contains(declared, _get(secret, "slot")):
             flag075("/record/machines/%d/secrets/%d/slot" % (machine_index, index),
                     "the package declares no slot %s: a secret goes only where a placed package declares it" % _show(_get(secret, "slot")))
+    if placement is not None and not _scope_admits(record, _get(placement, "publisherKid"), context):
+        _finding(findings, "FAC-SEM-122")("/record/machines/%d/packages/%d/publisherKid" % (machine_index, placement_index),
+                                          "publisher key %s is a partner's, not trusted in %s" % (_show(_get(placement, "publisherKid")), _show(context)))
     if placement is not None:
         flag111 = _finding(findings, "FAC-SEM-111")
         for suffix, message in _placement_grant_problems(record, placement):

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_package.py

@@ -648,7 +648,7 @@ def read_folder(folder: Any) -> Dict[str, bytes]:
                 continue
             files[rel] = full.read_bytes()
     if refused:
-        raise PackageError("Not packed: remove these or pack a clean copy — " + "; ".join(sorted(refused)))
+        raise PackageError("Not packed: remove these or pack a clean copy: " + "; ".join(sorted(refused)))
     return files