@passioncode-ai/fabric-agent-adapter 0.40.0 → 0.41.0

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_usage.py

@@ -49,7 +49,7 @@ USAGE_DAYS = 31
 COST_BASES = ("provider", "price-list", "unknown")
 
 
-_PROVIDER = re.compile(r"^[a-z][a-z0-9._-]{0,63}$")
+_PROVIDER = re.compile(r"^[a-z][a-z0-9._-]{0,63}\Z")
 
 
 def make_usage_receipt(provider: str, model: str, *, input_tokens: int, output_tokens: int,
@@ -517,10 +517,10 @@ LIMIT_SCOPES = ("machine", "project", "pool", "job")
 PER_ORDER_KINDS = ("per_job", "approval")
 
 
-_LIMIT_ID = re.compile(r"^[a-z0-9][a-z0-9._:-]{0,63}$")
+_LIMIT_ID = re.compile(r"^[a-z0-9][a-z0-9._:-]{0,63}\Z")
 
 
-_LIMIT_KIND = re.compile(r"^[a-z][a-z0-9_]{0,31}$")
+_LIMIT_KIND = re.compile(r"^[a-z][a-z0-9_]{0,31}\Z")
 
 
 _LIMIT_FIELDS = ("id", "scope", "subject", "kind", "period", "windowSeconds", "since", "limitUsd", "spentUsd", "enforced", "tripped")

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/kit.json

@@ -1,6 +1,6 @@
 {
  "name": "fabric-service-kit",
- "version": "0.40.0",
+ "version": "0.41.0",
  "about": "The service kit's modules in dependency order: a module imports only modules listed before it. Written by fabric_kit.py build; edit the order and layers by hand, never the digests.",
  "python": [
   {
@@ -31,14 +31,14 @@
    "file": "fabric_secrets.py",
    "layer": "L0",
    "imports": [],
-   "sha256": "452cb2955be438568fc241e263908813b5d4f52d65150f3685199c12d3e5071d"
+   "sha256": "68a0b5e9e90c468ec9ac67b2f0fd1848e08813d6ec1ec14a2a47337eb1a98911"
   },
   {
    "module": "fabric_crypto",
    "file": "fabric_crypto.py",
    "layer": "L1",
    "imports": [],
-   "sha256": "87e3cc70f6c877d214717f0c4478cd1777a7f93ed7141647b6f023a71d0e7803"
+   "sha256": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa"
   },
   {
    "module": "fabric_estate",
@@ -51,7 +51,7 @@
     "fabric_secrets",
     "fabric_time"
    ],
-   "sha256": "fe20cf6157cdb52d2c314d7f543334263a7ea2a6478a353ce6991b9cb5e32533"
+   "sha256": "50cc12166a00b680ba5b2e458200912d7bcfbef70bd73ec4edf57c7fcfa9b687"
   },
   {
    "module": "fabric_delegation",
@@ -62,7 +62,7 @@
     "fabric_estate",
     "fabric_jsvalue"
    ],
-   "sha256": "395ccd01a1430bbcb3e01ec32229ecdd4f7c97574af3dce60b56dbbf24ee4c89"
+   "sha256": "92ff745fb76ebb5856f9bb55f7c46936035f1ae836056c71065b7bb6276b35e7"
   },
   {
    "module": "fabric_share",
@@ -85,12 +85,11 @@
    "layer": "L2",
    "imports": [
     "fabric_crypto",
-    "fabric_delegation",
     "fabric_estate",
     "fabric_jsvalue",
     "fabric_time"
    ],
-   "sha256": "bc2a6eb86ab74048434c37a4eece6d634bcbe3b2795e402cee94f6a5726f60ea"
+   "sha256": "a59e83cf4adb2669a9b98008e3d3a0cba991a35cbff97bc604fc82fe81cfd49f"
   },
   {
    "module": "fabric_package",
@@ -102,7 +101,7 @@
     "fabric_jsvalue",
     "fabric_secrets"
    ],
-   "sha256": "495d2fa83a9053c15cd4f276704b0acb91dbd27d5d255c84ecbf35a2ca8dce46",
+   "sha256": "09e5b4d20564ccb318f5a5e4f33df0359873fa8239cf4f5fcd21c8af481fd211",
    "data": [
     "fabric-package.schema.json"
    ]
@@ -112,7 +111,7 @@
    "file": "fabric_base.py",
    "layer": "L3",
    "imports": [],
-   "sha256": "35098da3eb568c0fb4330a3a4dcb34a9982f48e9500a03e3db6786a9b15b2f7c"
+   "sha256": "684533b3a2aa3acd9b9e645a7a443427d279408f9f12f13456a0a991d57954ce"
   },
   {
    "module": "fabric_platform",
@@ -164,7 +163,7 @@
     "fabric_paths",
     "fabric_time"
    ],
-   "sha256": "26e4214c668c687e1b055cbce46ed2c21c185c17c0929d15b646c9ca63992698"
+   "sha256": "ce685cb9fdfd62ea75fff8b1b2be12a2ba758da783e4bfb4dcebe47bcbeb832b"
   },
   {
    "module": "fabric_backups",
@@ -175,7 +174,7 @@
     "fabric_paths",
     "fabric_usage"
    ],
-   "sha256": "21febe1599b870fc575bd00d352970b97947f981a8ab03a66dcfa1d20a1e4d3f"
+   "sha256": "ce042e49fc32600ef81d550603b4655153a1c4b13520b1edc04b9b9f358f4b91"
   },
   {
    "module": "fabric_descriptor",
@@ -188,7 +187,7 @@
     "fabric_secrets",
     "fabric_usage"
    ],
-   "sha256": "542ff462e1a06baaf485a80d2ee702cf57a20ddec329fc3dc5b24b98b7dea6c3"
+   "sha256": "43c59437502a1af6c6305f0d4dddfbb9e616e81441d6ad7137f9d96b7a918a06"
   },
   {
    "module": "fabric_auth",
@@ -200,7 +199,7 @@
     "fabric_paths",
     "fabric_platform"
    ],
-   "sha256": "f28b02c889c79effa5b81d4181ff02e36beaea6a24b14e46ee1a543b5dc85ab6"
+   "sha256": "55794587750f6c9f40935b74295d83d7096cb4b26a0b36ac292334cd87d8f853"
   },
   {
    "module": "fabric_events",
@@ -211,7 +210,7 @@
     "fabric_paths",
     "fabric_protocols"
    ],
-   "sha256": "dc3cf24040e09c92d40ad03a24b77dbb79ccf9a4eff258b9200c53a9df7e9047"
+   "sha256": "0086886c2c29dbd5c9d152be9d375c5bdf4a29f89b8095baff8490c2bcd64e47"
   },
   {
    "module": "fabric_logs",
@@ -233,7 +232,7 @@
     "fabric_paths",
     "fabric_secrets"
    ],
-   "sha256": "9a75b3848e2dd2c1c4395f3f9f24291e97c2be8ec581aea67159755da6593600"
+   "sha256": "a2dbf15aa1c4eb9de42996b413103fa4814afd2e4e66d1ab7315f30e06ab6841"
   },
   {
    "module": "fabric_service",
@@ -268,18 +267,19 @@
     "fabric_secrets",
     "fabric_service"
    ],
-   "sha256": "df78e0c25ea37f406e051e35640d49c61feef25327c953aa124052ac856a9155"
+   "sha256": "26e21ec29c016000f8ca8053b7b489184854a73be1b7fdc0a18d12990203db9b"
   },
   {
    "module": "fabric_interop",
    "file": "fabric_interop.py",
    "layer": "L3",
    "imports": [
+    "fabric_base",
     "fabric_delegation",
     "fabric_service",
     "fabric_time"
    ],
-   "sha256": "b30d24972242cbbe6c69a9ce45d0ee5acf7666ce7dcc93e0a75feb2d5d0d4dce"
+   "sha256": "67a78026ad434bb638c8230b6bfadc9cbe67561842ae7493c77d912855f38d61"
   },
   {
    "module": "fabric_hub",
@@ -289,7 +289,7 @@
     "fabric_estate",
     "fabric_service"
    ],
-   "sha256": "13a78794b97aa5c8d4628199cc8e20fe2d5448d9c04b58eed3322f994e15ff7f"
+   "sha256": "b9ac852e601b1d54cf61351677a628afc69faeed7d1fc74ebe541c1cf38e0c2a"
   },
   {
    "module": "fabric_board_shapes",
@@ -298,18 +298,30 @@
    "imports": [
     "fabric_identifiers"
    ],
-   "sha256": "fcc9bef27b03a6e88c5914c60e736e11e8003907f38190b94462e7c8385b094a"
+   "sha256": "a8daefdc9283219206875b5d964b49552b6b3ba7e69c925abe08a44afc91c234"
+  },
+  {
+   "module": "fabric_board_link",
+   "file": "fabric_board_link.py",
+   "layer": "L4",
+   "imports": [
+    "fabric_board_shapes",
+    "fabric_hub",
+    "fabric_service"
+   ],
+   "sha256": "b5bff994cb615c6a4bb0d88d020e3a59504166180e1fa1aea3be93224f2aeccb"
   },
   {
    "module": "fabric_board_session",
    "file": "fabric_board_session.py",
    "layer": "L4",
    "imports": [
+    "fabric_board_link",
     "fabric_board_shapes",
     "fabric_hub",
     "fabric_service"
    ],
-   "sha256": "7a352e6442d8ab4c31ba401bc55670e0e7b54495d793d08652114c6eba706917"
+   "sha256": "878ceed970a84087a320fd8eb971c210613a0fa2c524b68793fb32042910581e"
   },
   {
    "module": "fabric_board_fixture",
@@ -331,7 +343,7 @@
     "fabric_board_session",
     "fabric_board_shapes"
    ],
-   "sha256": "c9600d24552a858f0bef8a0a7dd3fd05759c90c36e6b31f282aa01ae2d7698eb"
+   "sha256": "0f075894b3e352194fcaf3fc7d08dee4e9f1c215e859769ed85fa5010e4a1599"
   },
   {
    "module": "fabric_http",
@@ -340,7 +352,7 @@
    "imports": [
     "fabric_jsvalue"
    ],
-   "sha256": "679954d16a433c47889ec858c1e13de4ae0b682e6901d69bc23990cc610fdf20"
+   "sha256": "5d7f72af3a73fdbe8c1f487ecf60cef23a7c46289eba542b03aff4706b8218d4"
   },
   {
    "module": "fabric_openrouter",
@@ -401,7 +413,7 @@
     "fabric-secrets",
     "fabric-time"
    ],
-   "sha256": "01a1c8bc31a64b31438122bd3f7258cac2e130e0e7cf964b2b9f5c24e97b5113"
+   "sha256": "912b1ceab57ed20f946986bf14ae2faf41fb8ea539e818164496874f3749ef65"
   },
   {
    "module": "fabric-delegation",
@@ -412,7 +424,7 @@
     "fabric-estate",
     "fabric-jsvalue"
    ],
-   "sha256": "4ab54a3dc13f887933551eb88443b777f282b451777992664e83f6d22eb54d89"
+   "sha256": "c27c84aca9d0374c8930eabc82b8c5d2ad66b3a936d7cff324ddd49dbd1f9618"
   },
   {
    "module": "fabric-share",
@@ -435,9 +447,10 @@
    "imports": [
     "fabric-delegation",
     "fabric-estate",
-    "fabric-jsvalue"
+    "fabric-jsvalue",
+    "fabric-time"
    ],
-   "sha256": "070d4fefe14aa56bbfbe668a4877c4697f6d087c01c012339438964178fb272b"
+   "sha256": "117d4374c9e95c930a38de7adbd4323774798f4fe6ec6f24afcd6f2c7298ca44"
   },
   {
    "module": "fabric-package",
@@ -448,7 +461,7 @@
     "fabric-jsvalue",
     "fabric-secrets"
    ],
-   "sha256": "3751721f3001c17674e09101e19d2fe54ffac2bf8d0d0d29a8092d6eea3caece",
+   "sha256": "b9cc4b0e213dc2a606cd57303e4c61c65fbc8dd8e1a863e1419fd4c781261086",
    "data": [
     "fabric-package.schema.json"
    ]
@@ -496,7 +509,7 @@
     "fabric-base",
     "fabric-paths"
    ],
-   "sha256": "2726869f3d03725783f611aec67e5925af4322b3bd20346a4fcb4e3fd9e18237"
+   "sha256": "ac219ab0a326d5c43c7c4c255e0c3843d4794de795a60e3af661e7d5350ea052"
   },
   {
    "module": "fabric-usage",
@@ -534,7 +547,7 @@
     "fabric-secrets",
     "fabric-usage"
    ],
-   "sha256": "c94d4c6857c325f19a396d355b1570f3f5d97e6f0c9ee2938f9048f74c7fc682"
+   "sha256": "b9304be4cba4fedddc6a0da83eef861f045691c8309ff614a5522946af4069b0"
   },
   {
    "module": "fabric-auth",
@@ -547,7 +560,7 @@
     "fabric-platform",
     "fabric-usage"
    ],
-   "sha256": "b6f469876a8264898b08ff2e398ab967aa99d3997fcbef4df8fd35ea2e04494a"
+   "sha256": "3ea6796470fcd829bc72a772fb7e4c37532a09d1e37ff41592dcf1a1a3074ca2"
   },
   {
    "module": "fabric-events",
@@ -580,7 +593,7 @@
     "fabric-paths",
     "fabric-secrets"
    ],
-   "sha256": "74ddab15b514243fd0f09d44f2747d9bd80cae9089ef98a7a00f548ab6215c34"
+   "sha256": "9d61c1a17538a5e2453e33e5ae347337336748041bc054478a96dd51f3d4fc51"
   },
   {
    "module": "fabric-service",
@@ -623,7 +636,7 @@
     "fabric-jsvalue",
     "fabric-service"
    ],
-   "sha256": "5cf7b5c63062198abb379b1024f74e30bf9f4ca7a07fb6d065f6ee05760c79c4"
+   "sha256": "81c0b09045ada54f6645f40d935c0de06119793631b3240b1a613f4f2afd9d84"
   },
   {
    "module": "fabric-hub",
@@ -642,18 +655,30 @@
    "imports": [
     "fabric-identifiers"
    ],
-   "sha256": "8bc697bf222d8178905540e97f951957772a1135369d52da99f7d1e91c7ca413"
+   "sha256": "ad1094397540862b104d9317d6902031d35e64b16c12bf849fb883e12cb78d45"
+  },
+  {
+   "module": "fabric-board-link",
+   "file": "fabric-board-link.mjs",
+   "layer": "L4",
+   "imports": [
+    "fabric-board-shapes",
+    "fabric-hub",
+    "fabric-service"
+   ],
+   "sha256": "4cd6d4e21713a38c8e56f7d59db3148638b8c27c08e774d96a0f6283c6049e0a"
   },
   {
    "module": "fabric-board-session",
    "file": "fabric-board-session.mjs",
    "layer": "L4",
    "imports": [
+    "fabric-board-link",
     "fabric-board-shapes",
     "fabric-hub",
     "fabric-service"
    ],
-   "sha256": "f08c00647fd308d25448f4bd4563a092d8605a4e07e64671a375e16feff0f8db"
+   "sha256": "744a8c9a518c27f2ddfd20b1b22afebc3ccc4f59aeeb7a38d7c12c2ddcae158d"
   },
   {
    "module": "fabric-board-fixture",
@@ -675,7 +700,7 @@
     "fabric-board-session",
     "fabric-board-shapes"
    ],
-   "sha256": "87ae681a3c991c9aed40fb71289c19cd6da33ad6ebbec6858e51f031e8a7ab7b"
+   "sha256": "9e7bfe4d412521982224ef12bebfc2ff255eeeaf8d96cf40234ac18de68e7a59"
   },
   {
    "module": "fabric-http",
@@ -1517,6 +1542,76 @@
    "fabric-openrouter.mjs": "f8f0168691f968b7cd85f36aa98e2167e88cc44f1104ff514fd0c7699b339253",
    "fabric-package.schema.json": "6b688152984e294b806ffaf3483e6fa2e55cd0d9205bb5cba85f646868d90d58",
    "share-registration.schema.json": "82ef3e8703dd6653b84ba9fdbaec2f366e062596da981b1823be3804fcb65b90"
+  },
+  "0.41.0": {
+   "fabric_jsvalue.py": "0cd4eab0a5d6ae35d097f7c59a08dc29173cb61c561c49e5291a8dad15d36779",
+   "fabric_time.py": "588f383da4ac6a243ea95b6ffc3a0aa99ca94245732dc4937734f190b7af4ae9",
+   "fabric_identifiers.py": "0fd814d521ac3aa39907458265870753046a73f48af3d8581ab864b93b211607",
+   "fabric_secrets.py": "68a0b5e9e90c468ec9ac67b2f0fd1848e08813d6ec1ec14a2a47337eb1a98911",
+   "fabric_crypto.py": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa",
+   "fabric_estate.py": "50cc12166a00b680ba5b2e458200912d7bcfbef70bd73ec4edf57c7fcfa9b687",
+   "fabric_delegation.py": "92ff745fb76ebb5856f9bb55f7c46936035f1ae836056c71065b7bb6276b35e7",
+   "fabric_share.py": "78506fe1a60829c525dbf6266a0aa0749a2164290ed94da8249a20b4e9be5605",
+   "fabric_ceremonies.py": "a59e83cf4adb2669a9b98008e3d3a0cba991a35cbff97bc604fc82fe81cfd49f",
+   "fabric_package.py": "09e5b4d20564ccb318f5a5e4f33df0359873fa8239cf4f5fcd21c8af481fd211",
+   "fabric_base.py": "684533b3a2aa3acd9b9e645a7a443427d279408f9f12f13456a0a991d57954ce",
+   "fabric_platform.py": "8b0cd89193bc55da204a4a1850665c96929c6778523a8715b8156c5643745288",
+   "fabric_paths.py": "0d87e572bde2b930391b27aa370d808e093ce45cfba6148706f5318219906d30",
+   "fabric_protocols.py": "9f418eef2d64796067d213f36a967978486e632c9acac50e216dd22cb898216c",
+   "fabric_lock.py": "ba2399d2137c7a7791b7133b9db9cca36693f4eb7e30955b25a75ade814e95ba",
+   "fabric_usage.py": "ce685cb9fdfd62ea75fff8b1b2be12a2ba758da783e4bfb4dcebe47bcbeb832b",
+   "fabric_backups.py": "ce042e49fc32600ef81d550603b4655153a1c4b13520b1edc04b9b9f358f4b91",
+   "fabric_descriptor.py": "43c59437502a1af6c6305f0d4dddfbb9e616e81441d6ad7137f9d96b7a918a06",
+   "fabric_auth.py": "55794587750f6c9f40935b74295d83d7096cb4b26a0b36ac292334cd87d8f853",
+   "fabric_events.py": "0086886c2c29dbd5c9d152be9d375c5bdf4a29f89b8095baff8490c2bcd64e47",
+   "fabric_logs.py": "86dc55bfafa2a57264722e2403510a249b95de0e4a722b2e4bc3948e3bd93da9",
+   "fabric_supervisors.py": "a2dbf15aa1c4eb9de42996b413103fa4814afd2e4e66d1ab7315f30e06ab6841",
+   "fabric_service.py": "3c8f69e139ee6fe714cad78c30de1a076ac7fbf9f7f419cd2cd131e95d889f6a",
+   "fabric_profiles.py": "26e21ec29c016000f8ca8053b7b489184854a73be1b7fdc0a18d12990203db9b",
+   "fabric_interop.py": "67a78026ad434bb638c8230b6bfadc9cbe67561842ae7493c77d912855f38d61",
+   "fabric_hub.py": "b9ac852e601b1d54cf61351677a628afc69faeed7d1fc74ebe541c1cf38e0c2a",
+   "fabric_board_shapes.py": "a8daefdc9283219206875b5d964b49552b6b3ba7e69c925abe08a44afc91c234",
+   "fabric_board_link.py": "b5bff994cb615c6a4bb0d88d020e3a59504166180e1fa1aea3be93224f2aeccb",
+   "fabric_board_session.py": "878ceed970a84087a320fd8eb971c210613a0fa2c524b68793fb32042910581e",
+   "fabric_board_fixture.py": "69761ce205ec640762ec9b591c6903e5a87f844e8d423b041681924027e39d1e",
+   "fabric_board.py": "0f075894b3e352194fcaf3fc7d08dee4e9f1c215e859769ed85fa5010e4a1599",
+   "fabric_http.py": "5d7f72af3a73fdbe8c1f487ecf60cef23a7c46289eba542b03aff4706b8218d4",
+   "fabric_openrouter.py": "2017d898c17001d7275f58267de653be7ecf6acd17ad8d9b24ecb7a43e5617d4",
+   "fabric-jsvalue.mjs": "dfbdb8c41584972c9389750a41719374a1cfc5652ed438dd1623025190b0106e",
+   "fabric-time.mjs": "3ff932069038a720df1c68c6492976906737b2e67e5c12d9c81c418597f661de",
+   "fabric-identifiers.mjs": "a18c2a501a4aa170bfd3d99e571ad6b7662649b4d3b9d2a540c002ea42811bbf",
+   "fabric-secrets.mjs": "2f7baaebfd08daf8b9c9ae1b75ba8ca04997d9dbf113897b4fb1464391c2d66d",
+   "fabric-crypto.mjs": "038e03689701e3c9721a1e7f8e0a4d02a52d6a5d1661b0dc84035edc3ebbfcf6",
+   "fabric-estate.mjs": "912b1ceab57ed20f946986bf14ae2faf41fb8ea539e818164496874f3749ef65",
+   "fabric-delegation.mjs": "c27c84aca9d0374c8930eabc82b8c5d2ad66b3a936d7cff324ddd49dbd1f9618",
+   "fabric-share.mjs": "d40a7405d7bd4c3213ed691330b7549afe8e023db0753b582e249714e672010d",
+   "fabric-ceremonies.mjs": "117d4374c9e95c930a38de7adbd4323774798f4fe6ec6f24afcd6f2c7298ca44",
+   "fabric-package.mjs": "b9cc4b0e213dc2a606cd57303e4c61c65fbc8dd8e1a863e1419fd4c781261086",
+   "fabric-base.mjs": "17a92f5e9b71a855648e39e06388bad7f1b969605bd7b1f534ddf67b41a2fb5d",
+   "fabric-platform.mjs": "1349e3638c21caf7da7937ef6a5dfeefe05a8ee733520f0d581624095efeb388",
+   "fabric-paths.mjs": "e6f5e2ce7c8e7a1452d6ee69977489f4c09ca6f1d3100df9c303274f0b7b16b1",
+   "fabric-protocols.mjs": "45277a794ef40f37599b25dd6ceebc3fa3e60a4cd51caf33e56e48eba8600920",
+   "fabric-lock.mjs": "ac219ab0a326d5c43c7c4c255e0c3843d4794de795a60e3af661e7d5350ea052",
+   "fabric-usage.mjs": "e413569620bbc8221bc59e24b27e22d1483825ed18457801ed58d54a57de8114",
+   "fabric-backups.mjs": "c504b4ce85b8ed1e926683da93a70693fd8d23a7935f9b57c950e24304a0fa92",
+   "fabric-descriptor.mjs": "b9304be4cba4fedddc6a0da83eef861f045691c8309ff614a5522946af4069b0",
+   "fabric-auth.mjs": "3ea6796470fcd829bc72a772fb7e4c37532a09d1e37ff41592dcf1a1a3074ca2",
+   "fabric-events.mjs": "c463d6ffcae24229a5c608d8fcea4268d2ccc5024b19fa10e5a452284068fa71",
+   "fabric-logs.mjs": "58467e5719c16e099d05bbedec47a95712506ab03c33f3cd4be1252e8498a946",
+   "fabric-supervisors.mjs": "9d61c1a17538a5e2453e33e5ae347337336748041bc054478a96dd51f3d4fc51",
+   "fabric-service.mjs": "fd31188c1709b0cebbcea995fc817ad7b6ad4fe21f2af12f65d001309f6baacc",
+   "fabric-profiles.mjs": "314376cf2deb87f235fb18b11d3b532e211f585b9af0a9302b5f4cc39971b532",
+   "fabric-interop.mjs": "81c0b09045ada54f6645f40d935c0de06119793631b3240b1a613f4f2afd9d84",
+   "fabric-hub.mjs": "c005115a864cfd67daa4862097bb14acfe5a60bf653897e5bf8a570dd80f1070",
+   "fabric-board-shapes.mjs": "ad1094397540862b104d9317d6902031d35e64b16c12bf849fb883e12cb78d45",
+   "fabric-board-link.mjs": "4cd6d4e21713a38c8e56f7d59db3148638b8c27c08e774d96a0f6283c6049e0a",
+   "fabric-board-session.mjs": "744a8c9a518c27f2ddfd20b1b22afebc3ccc4f59aeeb7a38d7c12c2ddcae158d",
+   "fabric-board-fixture.mjs": "83c4b7e33ee47b68385faf2569d38d5c8a0c5cb0f8656090f41e1b0eed2f436e",
+   "fabric-board.mjs": "9e7bfe4d412521982224ef12bebfc2ff255eeeaf8d96cf40234ac18de68e7a59",
+   "fabric-http.mjs": "f886bcb49c4353d039387ac9568738dda26697a94dd07fc6a6204500f0bc27bf",
+   "fabric-openrouter.mjs": "f8f0168691f968b7cd85f36aa98e2167e88cc44f1104ff514fd0c7699b339253",
+   "fabric-package.schema.json": "6b688152984e294b806ffaf3483e6fa2e55cd0d9205bb5cba85f646868d90d58",
+   "share-registration.schema.json": "82ef3e8703dd6653b84ba9fdbaec2f366e062596da981b1823be3804fcb65b90"
   }
  },
  "data": {

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/sample_service.py

@@ -264,6 +264,15 @@ def make_handler(svc: Service):
                                   content_type="text/html; charset=utf-8")
             self._send(404, {"error": "Not found."})
 
+        def _length(self, cap: int) -> "int | None":
+            """The body's declared length, 0..cap; anything else answers 400 and reads nothing (finding 17)."""
+            raw = (self.headers.get("Content-Length") or "0").strip()
+            if raw.isdigit() and raw.isascii() and int(raw) <= cap:
+                return int(raw)
+            self.close_connection = True  # an unread body must not be taken for the next request
+            self._send(400, {"error": "Content-Length must be a whole number of bytes up to %d." % cap})
+            return None
+
         def do_POST(self) -> None:  # noqa: N802
             if not self._guard():
                 return
@@ -271,10 +280,12 @@ def make_handler(svc: Service):
             if url.path == "/mcp":
                 if not self._token_ok():
                     return
-                length = min(int(self.headers.get("Content-Length") or 0), 1048576)
+                length = self._length(1048576)
+                if length is None:
+                    return
                 try:
                     message = json.loads(self.rfile.read(length) or b"null")
-                except ValueError:
+                except (ValueError, RecursionError):
                     return self._send(400, {"jsonrpc": "2.0", "id": None, "error": {"code": -32700, "message": "Parse error."}})
                 try:
                     with svc.drain.work():
@@ -300,11 +311,18 @@ def make_handler(svc: Service):
                     return self._send(401, {"error": "Sign in first."})
                 if self.headers.get("X-Fabric-Request") != "1":
                     return self._send(403, {"error": "Missing request header."})
-                length = min(int(self.headers.get("Content-Length") or 0), 65536)
-                body = json.loads(self.rfile.read(length) or b"{}")
-                event = svc.log.append(body.get("kind", "demo.note"), body.get("level", "info"),
-                                       body.get("text", "A note from the sample service."),
-                                       notify=bool(body.get("notify")), link=body.get("link"))
+                length = self._length(65536)
+                if length is None:
+                    return
+                try:
+                    body = json.loads(self.rfile.read(length) or b"{}")
+                    if not isinstance(body, dict):
+                        raise ValueError("not an object")
+                    event = svc.log.append(body.get("kind", "demo.note"), body.get("level", "info"),
+                                           body.get("text", "A note from the sample service."),
+                                           notify=bool(body.get("notify")), link=body.get("link"))
+                except (ValueError, RecursionError, fs.ServiceError) as exc:  # finding 17: a 400, never a crash
+                    return self._send(400, {"error": "The note is a JSON object the event log takes: %s" % exc})
                 return self._send(200, event)
             self._send(404, {"error": "Not found."})
 

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: creating-fabric-agents
-description: Use when designing and building a NEW agent or provider that must be Fabric-compatible from its first commit, «создай агента, совместимого с фабрикой Passion Code», «новый агент под Fabric», "create a fabric-compatible agent", "build a new Fabric provider", "fabric-ready agent from scratch", «агент в облаке организации», "which models and OpenRouter key for a new Fabric agent". Runs the intake grill (capability, named consumer, workflow-or-agent, MCP/A2A/local-runner profile, effect declarations, where it runs, models, who pays, how it learns), distils source projects into a knowledge pack whose recorded failures become planted eval fixtures, scaffolds the pinned contract bundle, and sets the two-clock eval expectation with the conformance report. NOT for adapting an existing project (use adapting-projects-to-fabric), building the Fabric host or orchestrator, or generic agent design where Fabric compatibility is not part of the request.
+description: Use when designing and building a NEW agent or provider that must be Fabric-compatible from its first commit, «создай агента, совместимого с фабрикой Passion Code», «новый агент под Fabric», "create a fabric-compatible agent", "build a new Fabric provider", "fabric-ready agent from scratch", «агент в облаке организации», "which models and OpenRouter key for a new Fabric agent". Runs the intake grill (capability, named consumer, workflow or agent, profile, effects, where it runs, models, who pays, how it learns), turns source projects' recorded failures into planted eval fixtures, scaffolds the pinned contract bundle and sets the canary expectation. NOT for adapting an existing project (adapting-projects-to-fabric), making an agent a local or online Fabric service with a dashboard (building-fabric-services), a coding session working through Fabric or its board (working-with-fabric), the Fabric host or orchestrator, or agent design without Fabric.
 license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.40.0"
+  version: "0.41.0"
   contract-version: "0.1.0"
   contract-commit: "c55f2d5a11c9a0197e958e87212fca7ae1154769"
 ---
@@ -24,6 +24,10 @@ Use this skill to design and build a new provider. Do not use it to:
 
 - adapt a project that already has a stable API, MCP/A2A surface, or CLI: that is
   `adapting-projects-to-fabric`, and entering there skips nothing;
+- run an agent as a local or online service with a dashboard on its own: that is
+  `building-fabric-services` (step 4 hands over to it for a new agent that needs one);
+- work in a project through Fabric from a coding session (the board, claims): that is
+  `working-with-fabric`;
 - design the Fabric host, registry, scheduler, admission service, or binding runtime;
 - build a generic agent with no Fabric requirement: nothing here helps a project that
   will never be a provider;
@@ -99,30 +103,21 @@ authored now: it grows from real traces once the provider runs, and the step-1 f
 are its seed because a source project's recorded failures count as production.
 
 **For a PassionCode.ai repository**, the new agent's repository follows the organization's
-[repository standard](https://github.com/passioncode-ai/fabric-workspace/blob/main/knowledge/repository-standard.md) (`knowledge/repository-standard.md`
-in the organization's knowledge base; a clone has it at `fabric-workspace/knowledge/`) from its
-first commit:
-
-- `LICENSE`, `COMMERCIAL-LICENSE.md` and `CLA.md` copied byte for byte from the knowledge base's
-  `templates/`, and `AGPL-3.0-only OR LicenseRef-PassionCode-Commercial` in every manifest and
-  every SKILL.md `license:`; `SECURITY.md` when the repository is public;
-- a README whose first heading is the full name, with `## Quick start for a new teammate`
-  (Install; Configure, key names only; MCP, the registration command and one proving tool call,
-  verified with a real client in a temporary config; Develop) and `## License`;
-- an `AGENTS.md` that opens with the template's *Read first* block and closes with *After work*,
-  and a `CLAUDE.md` whose first line is `@AGENTS.md`.
-
-**Every credential the agent uses comes from Project Observatory, by name**, from its first
-commit: the README's Configure section lists key NAMES; the agent finds them with
-`observatory_credentials` and runs with `use_secret.py run --vault-only` (a long-running
-service: `use_secret.py serve`), with `OBSERVATORY_VAULT_ONLY=1` in its environment. No `.env`
-of its own, no key file beside its data, no value in code, configuration or a commit. A
-workflow names the keys it needs in its checkpoint (`credentials`), never their values.
-
-org-index `scripts/check_format.py` reports 0 findings for it before it is called done. **An agent
-someone builds for themselves is not a PassionCode.ai repository:** its licence is its owner's
-choice, nothing about it is published or listed by the organization, and none of these files is
-required of it, though the verified MCP quick start is still how anyone learns to drive it.
+repository standard (`knowledge/repository-standard.md`) from its first commit: the licence files,
+the README quick start verified with a real client, `AGENTS.md` and `CLAUDE.md`, as
+[the operator channel and the repository standard](references/operator-channel-and-repository.md)
+lists them. An agent someone builds for themselves is not a PassionCode.ai repository: its licence
+is its owner's choice and none of those files is required of it.
+
+**Every credential the agent uses is read by name, never held as a value**, from its first commit:
+the README's Configure section lists key NAMES. With Project Observatory installed, the agent finds
+them with `observatory_credentials` and runs under
+`python3 "$(project-observatory full-path)/tools/use_secret.py" run --vault-only <project> <NAME> -- <command>`
+(a long-running service: `use_secret.py serve`), with `OBSERVATORY_VAULT_ONLY=1` in its environment.
+Without it, the person's OS keychain or secret manager injects the key into the agent's environment
+at start. Either way: no `.env` of its own, no key file beside its data, no value in argv, code,
+configuration or a commit. A workflow names the keys it needs in its checkpoint (`credentials`),
+never their values.
 
 ## Step 3: scaffold the provider bundle
 
@@ -193,31 +188,11 @@ purpose. Then record one expectation the report must carry:
 ## Step 6: propose the operator channel
 
 If the agent has a human stop (a choice, an approval, a confirmation) or emits `notify: true`
-events, propose its **operator channel** to the operator once, now. The channel is the agent's
-own messenger channel, first Telegram, that sends those events and answers its stops with
-buttons: `fabric-operator-channel/0.1` (contract DEC-0034,
-`docs/specification/operator-channel.md`), whose rule OC-11 this step follows. Give the
-operator's four steps:
-
-1. create a bot with @BotFather;
-2. put its token into the secret store (Project Observatory) under the name the agent reads
-   (for example `EXAMPLE_AGENT_TELEGRAM_BOT_TOKEN`), never into a chat, a file or the bundle;
-3. run the agent's link command;
-4. type the code it shows in the chat with the bot.
-
-In a group shared with other bots the channel follows OC-14…OC-17 (DEC-0035): it stays silent
-unless addressed (`/command@ThisBot`, a reply to its own message or a press of its own button; a
-bare `/command` in a group is not addressed), and a channel nobody receives on is `degraded`
-(`receiver-missing`). Say so in the proposal when the operator means to bind a shared group.
-
-Record the answer (`accepted`, `declined` or `later`) in the agent's state and in the
-report, and do not ask again; an agent that serves `surfaces.operatorChannel` also shows it as
-`proposal` in its status document. Creating the bot, storing the token and enabling the channel are the
-operator's action: never create the bot, ask for or store the token's value, or enable the
-channel yourself. The default pin carries DEC-0034 and DEC-0035: a served status document is checked against
-the pinned `schemas/operator-channel-status.schema.json`; the channel's runtime rules have no
-probe rule here yet, so report them `NOT_RUN`. An agent with neither stops nor notify
-events skips this step.
+events, propose its operator channel (`fabric-operator-channel/0.1`, OC-11) to the operator once,
+now, as the shared reference linked at step 2 describes: the
+operator's four steps, the answer recorded and never asked again, and the bot, the token and
+enabling the channel left to the operator. An agent with neither stops nor notify events skips
+this step.
 
 ## Resilience and autonomy
 
@@ -239,12 +214,6 @@ operator channel answer (step 6); and the exact next command. Never summarize th
 
 ## Dashboard handoff: also for consumers
 
-When handing a registered service dashboard to a person, or writing the generated
-agent's completion/notification instructions, read and apply
-[dashboard links](references/dashboard-links.md): use the host's `open_link`,
-check the target device and host, and run the bundled output gate before delivery.
-An installed host failure never means browser fallback. This applies in Claude
-Code, Codex and other providers; it needs no host-specific hook. MCP unavailable:
-report the unresolved capability or use an approved project resolver; no automatic
-client configuration. Python unavailable: perform the reference's manual checks
-and report the executable gate NOT_RUN. Headless agents need no dashboard.
+When handing a registered service dashboard to a person, or writing the generated agent's
+completion or notification instructions, read and apply [dashboard links](references/dashboard-links.md)
+and run its output gate before delivery, in any host. Headless agents need no dashboard.

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/references/dashboard-links.md

@@ -83,8 +83,10 @@ or instructions alone do not prove all final answers from every agent are filter
   path is required. Skills must be activated/loaded; install does not intercept every answer.
 - MCP absent: report unresolved host capability once, use the project's approved
   resolver/CLI if available. Do not write machine or agent MCP config automatically.
-- Python absent: perform the comparisons above manually; mark the executable gate
-  NOT_RUN. Do not label the output mechanically validated.
+- Python absent: perform the comparisons above manually, including the gate's own rules (a
+  path with a `.` or `..` segment, an encoded or backslash separator, or a query or fragment
+  name or value that reads as a credential, such as `code`, `key`, `auth` or `api_key`, is
+  refused); mark the executable gate NOT_RUN. Do not label the output mechanically validated.
 
 Syntax is owned by Fabric Dashboards and `@passioncode-ai/fabric-service-host`:
 [ADR-0005](https://github.com/passioncode-ai/fabric-dashboards/blob/51a7a80acf42781d7bec304cc87c655d48cc309b/docs/adr/0005-service-links.md).