@passioncode-ai/fabric-agent-adapter 0.44.0 → 0.44.2

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## 0.44.2 (2026-10-22)
+
+### Fixed
+
+- **The consumed-approval file is written with the kit's private writer** (FAA-85). `FileJtiStore` in both twins
+  opened its file with a plain 0600 mode and set no Windows ACL, so on Windows its privacy rested on its folder alone,
+  and a write that failed left its temporary file behind. It now writes through `fabric_paths.atomic_write` /
+  `atomicWrite`: a protected owner-only ACL before the bytes on Windows (DEC-0032), 0600 elsewhere, fsynced and renamed
+  into place, nothing left on failure. The file holds consumed approval ids, not a secret.
+- **The kit's private writer removes its temporary file whatever fails, and reports the error that caused it**
+  (FAA-85, found by the blind readings). Node `atomicWrite` cleaned up only when chmod or the rename failed; a failure
+  while setting the Windows ACL, writing or syncing left `.<name>.<pid>.<hex>` beside the real file. Python
+  `atomic_write` set the Windows ACL before it wrapped the file's handle, so when that step failed the handle stayed
+  open, Windows could not delete the file, and the delete's error replaced the ACL's. Both now close the file on every
+  path, remove it, and raise the original error even when the removal fails.
+
+### Changed
+
+- `fabric_base`, `fabric_platform` and `fabric_paths` (and their Node twins) move from layer L3 to L1 in `kit.json`, so
+  the L2 modules may use them: their code and names are unchanged. `fabric_delegation` now imports `fabric_paths`, so
+  a service that copies `fabric_delegation` by hand copies `fabric_base`, `fabric_platform` and `fabric_paths` too
+  (`fabric_kit.py install` and `status` name them).
+
+## 0.44.1 (2026-10-22)
+
+### Changed
+
+- **Two kit modules split by responsibility** (FAA-92). `fabric_interop` and `fabric_package` stood at the 1000-line
+  ceiling `test_fabric_kit` enforces. The rules of `fabric-interop/0.1` that need no running service (constants,
+  `InteropError`, `UnknownJob`, trace context, the job limits of DEC-0087) moved to `fabric_interop_rules` /
+  `fabric-interop-rules.mjs` (L3), and the reading of `fabric-package.schema.json` to `fabric_package_schema` /
+  `fabric-package-schema.mjs` (L2), which now carries that schema as its data. `fabric_interop` and `fabric_package`
+  re-export every name they had, in both languages, so no caller changes; a service that copies the kit by hand
+  copies the two new files too (`fabric_kit.py install` and `status` name them). No behaviour changed.
+
+### Fixed
+
+- A board test (`test_a_revision_conflict_on_renew_reads_again_and_keeps_the_attempt`) read the call order before its
+  handler's thread had started its effect, and failed under load. It now waits for the effect to start.
+
 ## 0.44.0 (2026-10-22)
 
 ### Added

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/fabric-agent-adapter",
-  "version": "0.44.0",
+  "version": "0.44.2",
   "description": "Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.",
   "scripts": {
     "test": "python3 test/validate.py && python3 -m unittest discover -s test -q && node --test 'test/*.test.mjs'"

package/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks.",
-  "version": "0.44.0",
+  "version": "0.44.2",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -5,7 +5,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.44.0"
+  version: "0.44.2"
   contract-version: "0.1.0"
   contract-commit: "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0"
 ---

package/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -14,7 +14,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Python 3.9+ or Node.js 20+ for the kits (Node.js 22+ for a Linux service's instance lock); the probe needs Python 3.9+. launchd steps are macOS-only; Linux services install a systemd user unit and Windows ones a per-user Scheduled Task with the kits' writers. Dashboard handoff optionally uses Fabric Dashboards MCP link/host_status/open; without it, report unresolved host capability. The contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.44.0"
+  version: "0.44.2"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
   extension-commit: "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0"

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/delegation.md

@@ -80,7 +80,7 @@ then the grant check where there is one, then `verify_approval` / `verifyApprova
 `jti` last, then the action. Without an approval, answer `approval-required` with
 `action_digest(action)` / `actionDigest(action)` (the SHA-256 of the action's RFC 8785 form, `jcs`) so the caller
 can ask the hub. When the meter denies a grant check, answer `refusal_from_denial(denial)` /
-`refusalFromDenial(denial)`: the meter's code unchanged, its window and level in `error.data` (DL-21 step 6). Keep consumed ids in `FileJtiStore` (0600, survives a restart); `MemoryJtiStore` is for tests
+`refusalFromDenial(denial)`: the meter's code unchanged, its window and level in `error.data` (DL-21 step 6). Keep consumed ids in `FileJtiStore` (owner-only through the kit's private writer: 0600, on Windows a protected ACL; survives a restart); `MemoryJtiStore` is for tests
 and `UNSAFE_NO_JTI_STORE` exists only by name. No store at all, or a store file that cannot be read, is
 `unknown-state`, never a pass.
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/kit-modules.md

@@ -54,14 +54,15 @@ A module imports only modules listed before it in `kit.json`, so the kit has no
 | L0 | `fabric_identifiers` | identifier equality by normal form (DEC-0076) |
 | L0 | `fabric_secrets` | the contract's one credential detector (DEC-0044) |
 | L1 | `fabric_crypto` | Ed25519 signing (a Montgomery ladder that does not branch on the key) and verification, P-256 verification, base64url, sha256 |
+| L1 | `fabric_base` | the protocol name, `ServiceError`, small shared helpers |
+| L1 | `fabric_platform` | Windows: named pipes, owner-only files (DEC-0032) |
+| L1 | `fabric_paths` | the services directory, a service's folders, atomic and private writes (L1 since 0.44.2, so `fabric_delegation` writes its consumed approval ids with them, FAA-85) |
 | L2 | `fabric_estate` | `estate-record/1` revisions and their rules (DEC-0055) |
 | L2 | `fabric_delegation` | the callee's side of `fabric-delegation/0.1` (DEC-0039) |
 | L2 | `fabric_share` | share grants and registrations (DEC-0086) |
 | L2 | `fabric_ceremonies` | the headless join token (DEC-0084) |
-| L2 | `fabric_package` | `fabric-package/1`: pack, sign, verify (DEC-0050, DEC-0051) |
-| L3 | `fabric_base` | the protocol name, `ServiceError`, small shared helpers |
-| L3 | `fabric_platform` | Windows: named pipes, owner-only files (DEC-0032) |
-| L3 | `fabric_paths` | the services directory, a service's folders, atomic and private writes |
+| L2 | `fabric_package_schema` | the reading of `fabric-package.schema.json` with JavaScript's pattern and format semantics (FAA-92) |
+| L2 | `fabric_package` | `fabric-package/1`: pack, sign, verify; re-exports `schema_problems` (DEC-0050, DEC-0051) |
 | L3 | `fabric_protocols` | protocol revisions (DEC-0067) and feed data (DEC-0070) |
 | L3 | `fabric_connections` | what an agent uses, `fabric-connections/0.1`: the reference reading and the declaration (DEC-0096, FAC-SEM-127) |
 | L3 | `fabric_lock` | the instance lock and the supervisor marker (LC-01, DEC-0057) |
@@ -74,7 +75,8 @@ A module imports only modules listed before it in `kit.json`, so the kit has no
 | L3 | `fabric_supervisors` | launchd, systemd user units, Task Scheduler (DEC-0032, LC-14) |
 | L3 | `fabric_service` | the facade: every name 0.39.1 exported, re-exported from the modules above |
 | L3 | `fabric_profiles` | runner and model profiles ([profiles](profiles.md)) |
-| L3 | `fabric_interop` | `fabric-interop/0.1`: jobs, envelopes, MCP tools ([interop](interop.md)) |
+| L3 | `fabric_interop_rules` | `fabric-interop/0.1` rules without a service: constants, `InteropError`, trace context, job limits (DEC-0087; FAA-92) |
+| L3 | `fabric_interop` | `fabric-interop/0.1`: jobs, envelopes, MCP tools; re-exports the rule layer ([interop](interop.md)) |
 | L4 | `fabric_hub` | the Fabric hub's door (`fabric-hub/0.1`) |
 | L4 | `fabric_board_shapes` | the project board's wire: constants, refusal codes, shapes |
 | L4 | `fabric_board_link` | the board's link: the MCP session over the hub, the fsynced checkpoint, a claimed request as data |
@@ -94,7 +96,8 @@ the kit live in `../recipes/` ([the support agent](../recipes/support-agent/READ
 public name 0.39.1 had, in both languages (the snapshot is `test/fixtures/kit-api/kit-api-0.39.1.json`; a missing
 name fails `test_kit_api`), and the Python facade the private names other code reached through it (`_number`,
 `_DAY_MS`, `_utc_date_ms` from the core). `fabric_board` and `fabric-board.mjs` are
-facades the same way. What changed for a service that copies the kit: `fabric_service.py` alone is no longer enough;
+facades the same way, and since 0.44.1 so are `fabric_interop` (over `fabric_interop_rules`) and `fabric_package` (over
+`fabric_package_schema`), with their Node twins: patch the rule or schema module, not the facade. What changed for a service that copies the kit: `fabric_service.py` alone is no longer enough;
 install with `fabric_kit.py install` and `status` names what is missing. A test or service that replaced a function
 by assigning it on the facade (`fabric_service.X = ...`) no longer changes what the kit does: the code reads its own
 module's name, so patch the module that defines it (`fabric_lock.X`, `fabric_session_env.X`). A service that imported a module-private

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-base.mjs

@@ -1,5 +1,5 @@
 // What every module of the Node service kit shares: the protocol name, ServiceError, ids, nowIso and expand.
-// Part of the Node service kit (FAA-65, layer L3); the twin of fabric_base.py. Node 20+, no dependency.
+// Part of the Node service kit (FAA-65, layer L1); the twin of fabric_base.py. Node 20+, no dependency.
 import os from 'node:os';
 import path from 'node:path';
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-delegation.mjs

@@ -13,8 +13,8 @@
 import crypto from 'node:crypto';
 import fs from 'node:fs';
 import net from 'node:net';
-import path from 'node:path';
 import { hubKeyCertified } from './fabric-estate.mjs';
+import { atomicWrite } from './fabric-paths.mjs'; // the kit's private writer (FAA-85)
 
 export const REFUSAL_CODES = Object.freeze([
   'unauthenticated', 'token-expired', 'wrong-audience', 'scope-not-granted', 'effect-above-ceiling', 'no-grant',
@@ -347,7 +347,7 @@ export function createMemoryJtiStore() {
 export class JtiStoreError extends Error {}
 
 /**
- * Consumed approval ids in a 0600 JSON file, so a second use is refused across a restart (DL-18). A file that
+ * Consumed approval ids in an owner-only JSON file, so a second use is refused across a restart (DL-18). A file that
  * cannot be read throws JtiStoreError: forgetting every consumed id would let each approval be replayed.
  */
 export class FileJtiStore {
@@ -364,11 +364,9 @@ export class FileJtiStore {
     const seen = new Map(Object.entries(read).filter(([, until]) => typeof until === 'number' && until + LEEWAY_SECONDS >= now));
     if (seen.has(jti)) return false;
     seen.set(jti, expiresAt);
-    fs.mkdirSync(path.dirname(this.file), { recursive: true });
-    const temp = path.join(path.dirname(this.file), `.${path.basename(this.file)}.${crypto.randomBytes(4).toString('hex')}.tmp`);
-    const fd = fs.openSync(temp, 'wx', 0o600);
-    try { fs.writeSync(fd, JSON.stringify(Object.fromEntries(seen))); fs.fsyncSync(fd); } finally { fs.closeSync(fd); }
-    fs.renameSync(temp, this.file);
+    // Owner-only (0600; on Windows a protected ACL before the bytes, DEC-0032), fsynced, renamed into place, and no
+    // temporary file left when it fails (FAA-85).
+    atomicWrite(this.file, JSON.stringify(Object.fromEntries(seen)));
     return true;
   }
 }

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-interop-rules.mjs

@@ -0,0 +1,264 @@
+// fabric-interop/0.1, the rule layer: the extension's names and limits, its errors, the trace context (C3.4), a usage
+// object's reading (C3.2) and the job limits and uncertain effects (DEC-0087). Every function answers by a rule and
+// touches no file; fabric-interop.mjs builds the tools, the envelope and the job store on it and re-exports every public
+// name here. Part of the Node service kit (FAA-92, split from fabric-interop.mjs; layer L3); the twin of
+// fabric_interop_rules.py. Node 20+, no dependency.
+import crypto from 'node:crypto';
+import { ServiceError } from './fabric-base.mjs';
+import { jcs } from './fabric-delegation.mjs';
+import { isString } from './fabric-jsvalue.mjs'; // the core's (FAA-65)
+import { isObject } from './fabric-jsvalue.mjs'; // the core's (FAA-65)
+
+export const PROTOCOL = 'fabric-interop/0.1';
+export const EXTENSION_KEY = 'https://fabric.passioncode.ai/agent-contract/extensions/interop/0.1';
+export const MCP_REVISION = '2026-07-28';
+export const TERMINAL = ['completed', 'failed', 'cancelled'];
+export const CONTRACT_VERSION = '0.1.0';
+export const OUTCOMES = ['succeeded', 'partial', 'failed', 'cancelled', 'blocked'];
+export const ENVELOPE_REQUIRED = ['id', 'contractVersion', 'outcome', 'done', 'proof', 'scope', 'notVerified', 'artifacts', 'createdAt', 'producer', 'output', 'usage'];
+// The job handle inline, as a job tool's outputSchema carries it (contract interop-job-handle.schema.json).
+export const JOB_HANDLE_SCHEMA = {
+  type: 'object', required: ['job'], additionalProperties: false,
+  properties: { job: { type: 'object', required: ['id', 'status'], additionalProperties: false,
+    properties: { id: { type: 'string', minLength: 1, maxLength: 128, pattern: '^[A-Za-z0-9._:-]+$' }, status: { const: 'working' } } } },
+};
+
+export const TRACEPARENT = /^([0-9a-f]{2})-([0-9a-f]{32})-([0-9a-f]{16})-([0-9a-f]{2})$/;
+export const JOB_ID = /^[A-Za-z0-9._:-]{1,128}$/;
+export const KEY = /^[A-Za-z0-9_.-]{1,64}$/;
+export const SECRET_WORDS = /pass(word|phrase)|secret|api[\s_-]?key|access[\s_-]?key|private[\s_-]?key|(access|auth|bearer|refresh|session)[\s_-]?token|^token$|credential/i;
+export const USAGE_KEYS = ['inputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens', 'costUsd', 'wallMs'];
+
+export class InteropError extends ServiceError {}
+export class UnknownJob extends InteropError {
+  constructor(jobId) { super(`unknown-job: no job ${jobId} here.`); this.jobId = jobId; }
+}
+
+// --- C3.4 trace context ---------------------------------------------------------------
+export function parseTraceparent(value) {
+  const m = typeof value === 'string' ? TRACEPARENT.exec(value) : null;
+  if (!m) return null;
+  const [, version, traceId, spanId, flags] = m;
+  if (version === 'ff' || /^0+$/.test(traceId) || /^0+$/.test(spanId)) return null;
+  return { version, traceId, spanId, flags };
+}
+
+export const spanIdNew = () => { for (;;) { const v = crypto.randomBytes(8).toString('hex'); if (!/^0+$/.test(v)) return v; } };
+
+export function childTraceparent(parent) {
+  const p = parseTraceparent(parent);
+  return `00-${p ? p.traceId : crypto.randomBytes(16).toString('hex')}-${spanIdNew()}-${p ? p.flags : '01'}`;
+}
+
+export const traceIds = (traceparent) => {
+  const p = parseTraceparent(traceparent);
+  return p ? { traceId: p.traceId, spanId: p.spanId } : {};
+};
+
+export function checkUsage(usage, nulls = false) {
+  if (!usage || typeof usage !== 'object') throw new InteropError('usage must be an object.');
+  for (const key of ['inputTokens', 'outputTokens', 'wallMs']) if (!(key in usage)) throw new InteropError(`usage.${key} is required.`);
+  for (const [key, value] of Object.entries(usage)) {
+    if (nulls && key === 'partial') {
+      if (typeof value !== 'boolean') throw new InteropError('usage.partial must be a boolean.');
+      continue;
+    }
+    if (!USAGE_KEYS.includes(key)) throw new InteropError(`usage.${key} is not a usage field.`);
+    if (nulls && value === null) continue;
+    const ok = typeof value === 'number' && value >= 0 && (key === 'costUsd' || Number.isInteger(value));
+    if (!ok) throw new InteropError(`usage.${key} must be a non-negative ${key === 'costUsd' ? 'number' : 'integer'}.`);
+  }
+  if (nulls && usageFindings(usage, '').length) throw new InteropError('usage.partial is false while a number is null: an unknown number makes the usage partial (FAC-SEM-119).');
+  return { ...usage };
+}
+// --- C3.2 limits and uncertain effects (DEC-0087) ------------------------------------------
+// #region job-limits-kit-node, docs: plugins/fabric-agent-adapter/skills/building-fabric-services/references/interop.md#limits-and-uncertain-effects
+// The contract's src/job-limits.ts, answer for answer (test/fixtures/contract/job-limit-vectors.json), the twin of
+// fabric_interop.py. Every function here answers and never throws on malformed input.
+
+export const QUOTA_EXHAUSTED = 'quota-exhausted';
+export const OUTCOME_UNKNOWN = 'outcome-unknown';
+export const LIMIT_REACHED = 'limit-reached';
+export const INTEROP_NULL_USAGE = 'fabric-interop/0.2';
+/** The revisions this kit reads, named in a request's `_meta.protocols` (DEC-0067, DEC-0087). */
+export const PROTOCOLS_READ = Object.freeze(['fabric-interop/0.1', INTEROP_NULL_USAGE]);
+export const JOB_STATUSES = ['working', 'input_required', 'completed', 'failed', 'cancelled'];
+export const UTC_INSTANT = /^([0-9]{4})-([0-9]{2})-([0-9]{2})T([0-9]{2}):([0-9]{2}):([0-5][0-9])(?:\.([0-9]{1,3}))?Z$/;
+export const PAUSE = /^quota-exhausted(?: until ([^ \t\n\r]+?))?(?:: ([ \t\n\r]*[^ \t\n\r][\s\S]*))?$/;
+export const ERROR_CODE = /^[a-z][a-z0-9-]{1,63}$/;
+export const MAX_STATUS_MESSAGE = 500;
+export const MAX_ERROR_MESSAGE = 2000;
+export const codePoints = (value) => [...value].length;
+export const own = (value, key) => (isObject(value) && Object.hasOwn(value, key) ? value[key] : undefined);
+
+/** A UTC instant as milliseconds, or NaN: the pattern and a day that exists, as the contract's strictTime reads it. */
+export function utcTime(value) {
+  const m = isString(value) ? UTC_INSTANT.exec(value) : null;
+  if (!m) return Number.NaN;
+  const [year, month, day, hour, minute, second] = m.slice(1, 7).map(Number);
+  const date = new Date(0);
+  date.setUTCFullYear(year, month - 1, day);
+  if (date.getUTCMonth() !== month - 1 || date.getUTCDate() !== day || hour > 23 || minute > 59) return Number.NaN;
+  date.setUTCHours(hour, minute, second, Number((m[7] ?? '').padEnd(3, '0')));
+  return date.getTime();
+}
+
+export function quotaDataOk(data) {
+  const retryable = own(data, 'retryable');
+  if (!isObject(data) || typeof retryable !== 'boolean') return false;
+  if (Object.keys(data).some((name) => name !== 'retryable' && name !== 'resetsAt')) return false;
+  if (!Object.hasOwn(data, 'resetsAt')) return true;
+  return retryable && Number.isFinite(utcTime(own(data, 'resetsAt')));
+}
+
+export function jobOf(answer) {
+  const job = own(answer, 'job');
+  const id = own(job, 'id');
+  if (!isObject(job) || !isString(id) || id.length === 0 || !JOB_STATUSES.includes(own(job, 'status'))) return undefined;
+  return job;
+}
+
+export function readJobPause(answer) {
+  const job = jobOf(answer);
+  const message = own(job, 'statusMessage');
+  if (!job || own(job, 'status') !== 'working' || !isString(message) || !message.startsWith(QUOTA_EXHAUSTED)) return { paused: false };
+  const match = PAUSE.exec(message);
+  if (!match || codePoints(message) > MAX_STATUS_MESSAGE) return { paused: false, malformed: true };
+  const until = match[1];
+  if (until === undefined) return { paused: true };
+  return Number.isFinite(utcTime(until)) ? { paused: true, resetsAt: until } : { paused: false, malformed: true };
+}
+
+/** What a caller does with one fabric.job.get or fabric.job.cancel answer at `now`; never "submit anew". */
+export function jobCallerAction(answer, now) {
+  const at = utcTime(now);
+  const job = jobOf(answer);
+  if (!Number.isFinite(at) || !job) return { action: 'invalid' };
+  const status = own(job, 'status');
+  if (status === 'working') {
+    const pause = readJobPause(answer);
+    if ('malformed' in pause) return { action: 'invalid' };
+    if (!pause.paused) return { action: 'poll' };
+    if (pause.resetsAt === undefined) return { action: 'wait' };
+    return utcTime(pause.resetsAt) > at ? { action: 'wait', notBefore: pause.resetsAt } : { action: 'poll' };
+  }
+  if (status === 'input_required') return { action: 'answer' };
+  if (status === 'completed') return { action: 'done' };
+  if (status === 'cancelled') return { action: 'cancelled' };
+  const error = own(job, 'error');
+  const code = own(error, 'code');
+  const message = own(error, 'message');
+  const codeOk = (isString(code) && ERROR_CODE.test(code)) || Number.isInteger(code);
+  const shapeOk = isObject(error) && Object.keys(error).every((name) => name === 'code' || name === 'message' || name === 'data');
+  if (!shapeOk || !codeOk || !isString(message) || message.length === 0 || codePoints(message) > MAX_ERROR_MESSAGE) return { action: 'invalid' };
+  if (code === OUTCOME_UNKNOWN) return { action: 'reconcile' };
+  if (code === LIMIT_REACHED) return { action: 'person' };
+  if (code !== QUOTA_EXHAUSTED) return { action: 'failed' };
+  const data = own(error, 'data');
+  if (!quotaDataOk(data)) return { action: 'invalid' };
+  if (!data.retryable) return { action: 'person' };
+  return data.resetsAt !== undefined && utcTime(data.resetsAt) > at ? { action: 'resend', notBefore: data.resetsAt } : { action: 'resend' };
+}
+
+/** The idempotency key of an intent {agentId, capability, input, request?}: a UUID of version 8 over its RFC 8785 form. */
+export function intentIdempotencyKey(intent) {
+  const names = ['agentId', 'capability', 'input', 'request'];
+  if (!isObject(intent) || Object.keys(intent).some((name) => !names.includes(name))) return undefined;
+  const [agentId, capability, input, request] = names.map((name) => own(intent, name));
+  if (!isString(agentId) || agentId.length === 0 || !isString(capability) || capability.length === 0 || !isObject(input)) return undefined;
+  if (Object.hasOwn(intent, 'request') && (!isString(request) || request.length === 0 || codePoints(request) > 256)) return undefined;
+  let form;
+  try {
+    form = jcs(Object.hasOwn(intent, 'request') ? { agentId, capability, input, request } : { agentId, capability, input });
+  } catch {
+    return undefined;
+  }
+  const bytes = crypto.createHash('sha256').update(form, 'utf8').digest().subarray(0, 16);
+  bytes[6] = (bytes[6] & 0x0f) | 0x80;
+  bytes[8] = (bytes[8] & 0x3f) | 0x80;
+  const hex = bytes.toString('hex');
+  return `${hex.slice(0, 8)}-${hex.slice(8, 12)}-${hex.slice(12, 16)}-${hex.slice(16, 20)}-${hex.slice(20)}`;
+}
+
+export function readsNullUsage(requestMeta) {
+  const protocols = own(requestMeta, 'protocols');
+  return Array.isArray(protocols) && protocols.includes(INTEROP_NULL_USAGE);
+}
+
+/** A request's `_meta` from this kit as a caller: its trace, and the interop revisions it reads (DEC-0087). */
+export function requestMeta(traceparent) {
+  const meta = { protocols: [...PROTOCOLS_READ] };
+  if (parseTraceparent(traceparent)) meta.traceparent = traceparent;
+  return meta;
+}
+
+/** FAC-SEM-119 on a usage: partial false asserts every number known, so it stands beside no null. */
+export function usageFindings(usage, at) {
+  if (!isObject(usage) || usage.partial !== false) return [];
+  const unknown = USAGE_KEYS.filter((name) => Object.hasOwn(usage, name) && usage[name] === null);
+  if (unknown.length === 0) return [];
+  return [{ code: 'FAC-SEM-119', instancePath: `${at}/partial`, message: `partial is false while ${unknown.join(', ')} is null: an unknown number makes the usage partial` }];
+}
+
+/** The usage a provider writes toward a caller: null and partial toward a 0.2 reader, the measured lower bound otherwise. */
+export function usageToward(usage, meta) {
+  if (readsNullUsage(meta)) {
+    const checked = checkUsage(usage, true);
+    if (USAGE_KEYS.some((name) => checked[name] === null) && !('partial' in checked)) checked.partial = true;
+    return checked;
+  }
+  if (!isObject(usage)) throw new InteropError('usage must be an object.');
+  return checkUsage(Object.fromEntries(Object.entries(usage).filter(([key]) => key !== 'partial').map(([key, value]) => [key, value === null ? 0 : value])));
+}
+
+export function jobFindings(value) {
+  const findings = [];
+  if ('malformed' in readJobPause(value)) {
+    findings.push({ code: 'FAC-SEM-119', instancePath: '/job/statusMessage', message: "a working job's message that starts quota-exhausted reads `quota-exhausted`, `quota-exhausted until <UTC instant>`, then optionally `: <text>`, at most 500 characters" });
+  }
+  const error = own(own(value, 'job'), 'error');
+  const data = own(error, 'data');
+  if (own(error, 'code') === QUOTA_EXHAUSTED && isString(own(data, 'resetsAt')) && !Number.isFinite(utcTime(own(data, 'resetsAt')))) {
+    findings.push({ code: 'FAC-SEM-119', instancePath: '/job/error/data/resetsAt', message: 'resetsAt is a UTC instant on a day that exists' });
+  }
+  findings.push(...usageFindings(own(own(own(value, 'job'), 'result'), 'usage'), '/job/result/usage'));
+  return findings;
+}
+
+export const sameJson = (a, b) => JSON.stringify(a) === JSON.stringify(b);
+
+/** FAC-SEM-119 (kinds interop-job, usage and result) and FAC-SEM-120 (kind job-caller); undefined for another kind. */
+export function jobLimitRules(kind, value) {
+  if (kind === 'interop-job') return jobFindings(value);
+  if (kind === 'usage') return usageFindings(value, '');
+  if (kind === 'result') return usageFindings(own(value, 'usage'), '/usage');
+  if (kind === 'job-caller') {
+    const expected = jobCallerAction(own(value, 'answer'), own(value, 'now'));
+    return sameJson(own(value, 'action'), expected) ? [] : [{ code: 'FAC-SEM-120', instancePath: '/action', message: `the caller answers ${JSON.stringify(expected)} as jobCallerAction does` }];
+  }
+  return undefined;
+}
+
+/** A paused job's statusMessage in the pause grammar; throws InteropError for one a reader would call malformed. */
+export function pauseMessage({ resetsAt, text } = {}) {
+  const message = `${QUOTA_EXHAUSTED}${resetsAt === undefined ? '' : ` until ${resetsAt}`}${text === undefined ? '' : `: ${text}`}`;
+  if ('malformed' in readJobPause({ job: { id: 'x', status: 'working', statusMessage: message } })) {
+    throw new InteropError('A pause reads quota-exhausted [until <UTC instant, Z, at most 3 fraction digits>][: <text>], at most 500 characters.');
+  }
+  return message;
+}
+
+/** The provider's answer to a repeated key: 'run' (the intent runs again, once) or 'same' (answer with that job). */
+export function repeatedKeyDecision(job, now, { limitHolds, approvalGranted = false } = {}) {
+  if (!isObject(job) || job.status !== 'failed') return 'same';
+  const error = own(job, 'error');
+  const code = own(error, 'code');
+  if (code === LIMIT_REACHED) return approvalGranted === true ? 'run' : 'same';
+  if (code !== QUOTA_EXHAUSTED) return 'same';
+  if (limitHolds !== undefined && limitHolds !== null) return limitHolds === false ? 'run' : 'same';
+  const data = own(error, 'data');
+  const at = utcTime(now);
+  if (!quotaDataOk(data) || !data.retryable || !Number.isFinite(at)) return 'same';
+  return data.resetsAt === undefined || utcTime(data.resetsAt) <= at ? 'run' : 'same';
+}
+// #endregion job-limits-kit-node