@passioncode-ai/fabric-agent-adapter 0.44.1 → 0.45.0

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## 0.45.0 (2026-10-22)
+
+### Changed
+
+- **Pinned to contract `e742016`** (FAA-100; `bfa9a67` stays supported): DEC-0098 to DEC-0103. Every vendored vector
+  is regenerated from the contract's own functions at the pin.
+- **The board kit reads the board as Fabric 0.3.9 serves it** (DEC-0098, DEC-0102), both twins: a request may be
+  `answered` (the target Project's participant message answered it; a responder's fenced reply never does), a bulk
+  `com.read_ack` receipt carries `marked`, `alreadyRead` and `more`, and a request's `com.submit` receipt may carry
+  `noResponder` (nobody can answer that capability now; the request is stored). Each is refused outside the call that
+  answers it. A responder that restarts and finds a request `answered` drops it from its checkpoint: the request is
+  no longer its own (found by the blind reading; it stayed there for good).
+- **`peer.custody` admits `processor-hosted`** (DEC-0099): an organization's cloud a processor runs under a processing
+  agreement. Both descriptor checks and `references/protocol.md`.
+- **The protocol register gains `node-summary/1`, `repair-request/1` and `repair-result/1`** (DEC-0101), both twins.
+- The kit's `share-registration.schema.json` carries the refusal code `purpose-not-collected` (DEC-0100).
+
+## 0.44.2 (2026-10-22)
+
+### Fixed
+
+- **The consumed-approval file is written with the kit's private writer** (FAA-85). `FileJtiStore` in both twins
+  opened its file with a plain 0600 mode and set no Windows ACL, so on Windows its privacy rested on its folder alone,
+  and a write that failed left its temporary file behind. It now writes through `fabric_paths.atomic_write` /
+  `atomicWrite`: a protected owner-only ACL before the bytes on Windows (DEC-0032), 0600 elsewhere, fsynced and renamed
+  into place, nothing left on failure. The file holds consumed approval ids, not a secret.
+- **The kit's private writer removes its temporary file whatever fails, and reports the error that caused it**
+  (FAA-85, found by the blind readings). Node `atomicWrite` cleaned up only when chmod or the rename failed; a failure
+  while setting the Windows ACL, writing or syncing left `.<name>.<pid>.<hex>` beside the real file. Python
+  `atomic_write` set the Windows ACL before it wrapped the file's handle, so when that step failed the handle stayed
+  open, Windows could not delete the file, and the delete's error replaced the ACL's. Both now close the file on every
+  path, remove it, and raise the original error even when the removal fails.
+
+### Changed
+
+- `fabric_base`, `fabric_platform` and `fabric_paths` (and their Node twins) move from layer L3 to L1 in `kit.json`, so
+  the L2 modules may use them: their code and names are unchanged. `fabric_delegation` now imports `fabric_paths`, so
+  a service that copies `fabric_delegation` by hand copies `fabric_base`, `fabric_platform` and `fabric_paths` too
+  (`fabric_kit.py install` and `status` name them).
+
 ## 0.44.1 (2026-10-22)
 
 ### Changed

package/README.md

@@ -274,7 +274,7 @@ Scaffolding is non-destructive by default. It writes only the paths declared in
 The default pin for new bundles is [`fabric-contract.lock.json`](fabric-contract.lock.json):
 
 - version: `0.1.0`
-- commit: `bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0`
+- commit: `e742016dc396aa31e5a13a893489e43f15786c69`
 
 Every other mention of the default contract revision (this section, the skills' metadata, the
 skill card, `adapt_project.py`) must equal it; `python3 test/validate.py` fails a tree

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/fabric-agent-adapter",
-  "version": "0.44.1",
+  "version": "0.45.0",
   "description": "Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.",
   "scripts": {
     "test": "python3 test/validate.py && python3 -m unittest discover -s test -q && node --test 'test/*.test.mjs'"

package/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks.",
-  "version": "0.44.1",
+  "version": "0.45.0",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -5,9 +5,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.44.1"
+  version: "0.45.0"
   contract-version: "0.1.0"
-  contract-commit: "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0"
+  contract-commit: "e742016dc396aa31e5a13a893489e43f15786c69"
 ---
 
 # Adapting projects to Fabric
@@ -76,7 +76,7 @@ Use exactly:
 
 - contract version `0.1.0`;
 - repository `https://github.com/passioncode-ai/fabric-agent-contract`;
-- commit `bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0`.
+- commit `e742016dc396aa31e5a13a893489e43f15786c69`.
 
 This is the default for new bundles. When checking an issued legacy bundle, preserve its
 explicit supported lock and use that exact clean checkout. Never silently upgrade or

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/adapt_project.py

@@ -22,10 +22,10 @@ import fabric_secrets as _secrets  # noqa: E402 - the contract's credential dete
 
 CONTRACT_VERSION = "0.1.0"
 CONTRACT_REPOSITORY = "https://github.com/passioncode-ai/fabric-agent-contract"
-CONTRACT_COMMIT = "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0"
+CONTRACT_COMMIT = "e742016dc396aa31e5a13a893489e43f15786c69"
 # #region supported-contract-revisions — docs: README.md#contract-pin
 # Only this declaration may name a legacy revision in live files.
-SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "c55f2d5a11c9a0197e958e87212fca7ae1154769", "07042181bfae2a481aa0da1a5651f24c76669c48", "d8146cfb0a1c74fc6432284c4356bb0c864b37b5", "82e163665e156a08aa3b92e4711015582c06162c", "1636fa97262f4a26e2086572d540c2ee701e0010", "f00a7685e3861c27f7899c033fb850a145a1708f", "a046f57cf46ea9e3da57ff8ce6a3ed4d26d8774b", "fe55fc67cba1a9e34a736da7d148d4fe2a8fbfa0", "b291bf09e0a9f9fd3c16cf540832cd021203b7d1", "0cacd08b0e95b6abf131eae1206b60792138bc3c", "2eb91c00e852d9c31d804310d38fad91589fcbac", "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
+SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0", "c55f2d5a11c9a0197e958e87212fca7ae1154769", "07042181bfae2a481aa0da1a5651f24c76669c48", "d8146cfb0a1c74fc6432284c4356bb0c864b37b5", "82e163665e156a08aa3b92e4711015582c06162c", "1636fa97262f4a26e2086572d540c2ee701e0010", "f00a7685e3861c27f7899c033fb850a145a1708f", "a046f57cf46ea9e3da57ff8ce6a3ed4d26d8774b", "fe55fc67cba1a9e34a736da7d148d4fe2a8fbfa0", "b291bf09e0a9f9fd3c16cf540832cd021203b7d1", "0cacd08b0e95b6abf131eae1206b60792138bc3c", "2eb91c00e852d9c31d804310d38fad91589fcbac", "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
 # #endregion supported-contract-revisions
 INTEROP_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/interop/0.1"
 MCP_REVISION = "2026-07-28"

package/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -14,10 +14,10 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Python 3.9+ or Node.js 20+ for the kits (Node.js 22+ for a Linux service's instance lock); the probe needs Python 3.9+. launchd steps are macOS-only; Linux services install a systemd user unit and Windows ones a per-user Scheduled Task with the kits' writers. Dashboard handoff optionally uses Fabric Dashboards MCP link/host_status/open; without it, report unresolved host capability. The contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.44.1"
+  version: "0.45.0"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
-  extension-commit: "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0"
+  extension-commit: "e742016dc396aa31e5a13a893489e43f15786c69"
 ---
 
 # Building Fabric services

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/board.md

@@ -117,7 +117,9 @@ spend sees it) is the service's own responsibility. A message never carries an a
 | `idempotency_conflict` | a key sent with other content is a defect, not an outage: `board.blocked` (notify) naming it, and the session is left |
 | in progress at a reconnect whose slot another session still holds | marked `unknown`; reconciled every five minutes once the slot is this session's |
 
-On restart the checkpoint is read back: settled or queued requests are dropped; `in_progress` and `outcome_unknown` are
+On restart the checkpoint is read back: settled, queued, claimed or `answered` requests are dropped (`answered`:
+the target Project's participant reply answered it, DEC-0098 and DEC-0102; not settled, the requester may still cancel
+it, but no longer this responder's); `in_progress` and `outcome_unknown` are
 reconciled from what `observe(entry)` answers (observed only; with no observation they stay unknown and notify);
 accepted ones go back to this responder with `com.responder_replace {expectedGeneration, transfer}`, whose receipt's
 `transferred` (DEC-0078: `{request, revision, attempt}`) carries the new fence. **A Fabric that does not answer

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/delegation.md

@@ -80,7 +80,7 @@ then the grant check where there is one, then `verify_approval` / `verifyApprova
 `jti` last, then the action. Without an approval, answer `approval-required` with
 `action_digest(action)` / `actionDigest(action)` (the SHA-256 of the action's RFC 8785 form, `jcs`) so the caller
 can ask the hub. When the meter denies a grant check, answer `refusal_from_denial(denial)` /
-`refusalFromDenial(denial)`: the meter's code unchanged, its window and level in `error.data` (DL-21 step 6). Keep consumed ids in `FileJtiStore` (0600, survives a restart); `MemoryJtiStore` is for tests
+`refusalFromDenial(denial)`: the meter's code unchanged, its window and level in `error.data` (DL-21 step 6). Keep consumed ids in `FileJtiStore` (owner-only through the kit's private writer: 0600, on Windows a protected ACL; survives a restart); `MemoryJtiStore` is for tests
 and `UNSAFE_NO_JTI_STORE` exists only by name. No store at all, or a store file that cannot be read, is
 `unknown-state`, never a pass.
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/kit-modules.md

@@ -54,15 +54,15 @@ A module imports only modules listed before it in `kit.json`, so the kit has no
 | L0 | `fabric_identifiers` | identifier equality by normal form (DEC-0076) |
 | L0 | `fabric_secrets` | the contract's one credential detector (DEC-0044) |
 | L1 | `fabric_crypto` | Ed25519 signing (a Montgomery ladder that does not branch on the key) and verification, P-256 verification, base64url, sha256 |
+| L1 | `fabric_base` | the protocol name, `ServiceError`, small shared helpers |
+| L1 | `fabric_platform` | Windows: named pipes, owner-only files (DEC-0032) |
+| L1 | `fabric_paths` | the services directory, a service's folders, atomic and private writes (L1 since 0.44.2, so `fabric_delegation` writes its consumed approval ids with them, FAA-85) |
 | L2 | `fabric_estate` | `estate-record/1` revisions and their rules (DEC-0055) |
 | L2 | `fabric_delegation` | the callee's side of `fabric-delegation/0.1` (DEC-0039) |
 | L2 | `fabric_share` | share grants and registrations (DEC-0086) |
 | L2 | `fabric_ceremonies` | the headless join token (DEC-0084) |
 | L2 | `fabric_package_schema` | the reading of `fabric-package.schema.json` with JavaScript's pattern and format semantics (FAA-92) |
 | L2 | `fabric_package` | `fabric-package/1`: pack, sign, verify; re-exports `schema_problems` (DEC-0050, DEC-0051) |
-| L3 | `fabric_base` | the protocol name, `ServiceError`, small shared helpers |
-| L3 | `fabric_platform` | Windows: named pipes, owner-only files (DEC-0032) |
-| L3 | `fabric_paths` | the services directory, a service's folders, atomic and private writes |
 | L3 | `fabric_protocols` | protocol revisions (DEC-0067) and feed data (DEC-0070) |
 | L3 | `fabric_connections` | what an agent uses, `fabric-connections/0.1`: the reference reading and the declaration (DEC-0096, FAC-SEM-127) |
 | L3 | `fabric_lock` | the instance lock and the supervisor marker (LC-01, DEC-0057) |

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/protocol.md

@@ -1,6 +1,6 @@
 # fabric-service/0.1: wire reference
 
-Pinned to `fabric-agent-contract` commit `bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0`
+Pinned to `fabric-agent-contract` commit `e742016dc396aa31e5a13a893489e43f15786c69`
 (`docs/specification/service.md`, DEC-0015; the usage report DEC-0021; Windows and Linux supervision
 DEC-0032 and DEC-0033; the operator channel DEC-0034 and DEC-0035; the embedded dashboard DEC-0036;
 delegation and the operator session's lifetime DEC-0039; the meter's call window DEC-0041; session handoff DEC-0042;
@@ -41,7 +41,7 @@ File `<id>.<instance>.json`, mode 0600 (on Windows a protected ACL), atomic.
 | `source.repository`, `fabricManifest` | optional |
 | `installedAt`, `installedBy` | when, and who installed it: the installer and its version as a string, or `{by, role?, tool}` (DEC-0061): `by` `person` (with `role` `operator` or `administrator`), `node` or `organization`; `role` for a person only; `tool` the installer and its version. It names a role, never a person. An app's descriptor uses the object form with `by: "person"`. `register_remote` / `registerRemote` and the sample write the object form |
 | `runner` | optional `{kind?, credentialKind}` (DEC-0061): `credentialKind` `subscription`, `key`, `platform-metered` or `none`: a kind, never a credential (`FAC-SEM-086` refuses a credential-shaped value here or in `installedBy`); a subscription names its vendor's runner (`claude-code`, `kimi-code`, `codex`) |
-| `peer` | optional `{endpoint, custody, residency, maxDataClass}` (DEC-0061): the service is offered to others. `endpoint` `https://<dns-name>[:<port>][/<path>]`, never a reserved name (`FAC-SEM-085`); `custody` `organization-managed` or `personal`; `residency` 1–32 ISO 3166-1 alpha-2 codes, `EU` admitted, user-assigned codes refused; `maxDataClass` `public` < `internal` < `confidential` < `restricted`. An offer needs `runner` and never runs on a subscription. A host sends a request from anyone but the operator only when `peer_refusal` / `peerRefusal` answers null (`FAC-SEM-088`); usage rows may take `route: "platform-metered"` |
+| `peer` | optional `{endpoint, custody, residency, maxDataClass}` (DEC-0061): the service is offered to others. `endpoint` `https://<dns-name>[:<port>][/<path>]`, never a reserved name (`FAC-SEM-085`); `custody` `organization-managed`, `personal` or `processor-hosted` (an organization's cloud a processor runs under a processing agreement, DEC-0099); `residency` 1–32 ISO 3166-1 alpha-2 codes, `EU` admitted, user-assigned codes refused; `maxDataClass` `public` < `internal` < `confidential` < `restricted`. An offer needs `runner` and never runs on a subscription. A host sends a request from anyone but the operator only when `peer_refusal` / `peerRefusal` answers null (`FAC-SEM-088`); usage rows may take `route: "platform-metered"` |
 
 ## Identifier equality (DEC-0076)
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-base.mjs

@@ -1,5 +1,5 @@
 // What every module of the Node service kit shares: the protocol name, ServiceError, ids, nowIso and expand.
-// Part of the Node service kit (FAA-65, layer L3); the twin of fabric_base.py. Node 20+, no dependency.
+// Part of the Node service kit (FAA-65, layer L1); the twin of fabric_base.py. Node 20+, no dependency.
 import os from 'node:os';
 import path from 'node:path';
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-board-session.mjs

@@ -22,6 +22,9 @@ export const EVENT_SCHEMA = 'urn:fabric:schema:board-responder-event:1';
 export const STOP_CODES = Object.freeze(new Set(['fenced', 'lease_expired', 'authority_changed']));
 
 const TERMINAL = new Set(['completed', 'failed_known', 'cancelled', 'expired']);
+// No longer this responder's to work on: back in the queue, claimed again, or answered by the target Project's
+// participant reply (DEC-0098, DEC-0102; not terminal, the requester may still cancel it, and nobody claims it).
+const NOT_OURS = new Set(['queued', 'claimed', 'answered']);
 
 /** A lost call is sent again this long before the lease it keeps would lapse (FAA-77, finding 38). */
 export const LEASE_MARGIN_SECONDS = 10;
@@ -226,7 +229,7 @@ export class Responder {
         }
         throw e;
       }
-      if (state === null || TERMINAL.has(state) || state === 'queued' || state === 'claimed') this.checkpoint.drop(entry.request);
+      if (state === null || TERMINAL.has(state) || NOT_OURS.has(state)) this.checkpoint.drop(entry.request);
       else if (state === 'accepted') (transfer[entry.capability] ??= []).push(entry);
       else reconcile.push(entry);
     }
@@ -348,7 +351,7 @@ export class Responder {
   async reconcile(entry) {
     const state = await this.readState(entry);
     if (state !== 'outcome_unknown') {
-      if (state !== null && (TERMINAL.has(state) || state === 'queued' || state === 'claimed')) this.checkpoint.drop(entry.request);
+      if (state !== null && (TERMINAL.has(state) || NOT_OURS.has(state))) this.checkpoint.drop(entry.request);
       else if (state === 'in_progress' && entry.step !== 'unknown') {
         entry.step = 'unknown'; // no next holder took the slot yet: a later tick tries again (finding 38)
         this.checkpoint.put(entry);

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-board-shapes.mjs

@@ -39,7 +39,8 @@ export const REFUSAL_CODES = Object.freeze(new Set(['invalid_arguments', 'body_t
   'capacity_exceeded', 'digest_conflict', 'revision_conflict', 'fenced', 'lease_expired', 'invalid_transition', 'reconcile_required',
   'observation_required', 'cursor_reset_required', 'immutable_participants', 'held']));
 
-export const REQUEST_STATES = ['queued', 'claimed', 'accepted', 'in_progress', 'completed', 'failed_known', 'cancelled', 'expired', 'outcome_unknown'];
+// answered (DEC-0098, DEC-0102): the target Project's participant message answered it; never a responder's fenced reply.
+export const REQUEST_STATES = ['queued', 'claimed', 'accepted', 'in_progress', 'completed', 'failed_known', 'cancelled', 'expired', 'outcome_unknown', 'answered'];
 
 const EFFECT_STATES = ['not_started', 'started', 'succeeded_observed', 'failed_observed', 'unknown'];
 
@@ -139,7 +140,7 @@ function attemptProblems(a, at, problems) {
 /** comms-receipt at the pin, closed at every level; transferred answers com.responder_replace only, each request once. */
 export function receiptProblems(value, op) {
   const problems = [];
-  const allowed = ['ok', 'repeated', 'message', 'thread', 'at', 'request', 'slot', 'attempt', 'transferred'];
+  const allowed = ['ok', 'repeated', 'message', 'thread', 'at', 'request', 'slot', 'attempt', 'transferred', 'marked', 'alreadyRead', 'more', 'noResponder'];
   if (!closed(value, '', ['ok', 'repeated'], allowed, problems)) return problems;
   if (value.ok !== true) problems.push('/ok is true');
   if (typeof value.repeated !== 'boolean') problems.push('/repeated is a boolean');
@@ -189,6 +190,21 @@ export function receiptProblems(value, op) {
       });
     }
   }
+  // DEC-0098: a bulk com.read_ack counts what it marked; `more` is present only as true (more than 1000 qualified).
+  for (const k of ['marked', 'alreadyRead']) if (k in value && !isInt(value[k], 0)) problems.push(`/${k} is an integer ≥ 0`);
+  if ('more' in value && value.more !== true) problems.push('/more is true when present');
+  if (op !== undefined && ['marked', 'alreadyRead', 'more'].some((k) => k in value) && op !== 'com.read_ack') problems.push('/marked, /alreadyRead and /more answer com.read_ack only (DEC-0098)');
+  if ('noResponder' in value) {
+    // DEC-0098: only in the requester's own com.submit receipt for a request; the request is stored all the same.
+    const n = value.noResponder;
+    if (op !== undefined && op !== 'com.submit') problems.push('/noResponder answers com.submit only (DEC-0098)');
+    const keys = ['target', 'capability', 'message'];
+    if (closed(n, '/noResponder', keys, keys, problems)) {
+      if (!str(n.target, PROJECT)) problems.push('/noResponder/target is a Project id');
+      if (!str(n.capability, CAPABILITY)) problems.push('/noResponder/capability is a capability name');
+      if (!(typeof n.message === 'string' && [...n.message].length >= 1 && [...n.message].length <= 300)) problems.push('/noResponder/message is 1 to 300 characters');
+    }
+  }
   return problems;
 }
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-delegation.mjs

@@ -13,8 +13,8 @@
 import crypto from 'node:crypto';
 import fs from 'node:fs';
 import net from 'node:net';
-import path from 'node:path';
 import { hubKeyCertified } from './fabric-estate.mjs';
+import { atomicWrite } from './fabric-paths.mjs'; // the kit's private writer (FAA-85)
 
 export const REFUSAL_CODES = Object.freeze([
   'unauthenticated', 'token-expired', 'wrong-audience', 'scope-not-granted', 'effect-above-ceiling', 'no-grant',
@@ -347,7 +347,7 @@ export function createMemoryJtiStore() {
 export class JtiStoreError extends Error {}
 
 /**
- * Consumed approval ids in a 0600 JSON file, so a second use is refused across a restart (DL-18). A file that
+ * Consumed approval ids in an owner-only JSON file, so a second use is refused across a restart (DL-18). A file that
  * cannot be read throws JtiStoreError: forgetting every consumed id would let each approval be replayed.
  */
 export class FileJtiStore {
@@ -364,11 +364,9 @@ export class FileJtiStore {
     const seen = new Map(Object.entries(read).filter(([, until]) => typeof until === 'number' && until + LEEWAY_SECONDS >= now));
     if (seen.has(jti)) return false;
     seen.set(jti, expiresAt);
-    fs.mkdirSync(path.dirname(this.file), { recursive: true });
-    const temp = path.join(path.dirname(this.file), `.${path.basename(this.file)}.${crypto.randomBytes(4).toString('hex')}.tmp`);
-    const fd = fs.openSync(temp, 'wx', 0o600);
-    try { fs.writeSync(fd, JSON.stringify(Object.fromEntries(seen))); fs.fsyncSync(fd); } finally { fs.closeSync(fd); }
-    fs.renameSync(temp, this.file);
+    // Owner-only (0600; on Windows a protected ACL before the bytes, DEC-0032), fsynced, renamed into place, and no
+    // temporary file left when it fails (FAA-85).
+    atomicWrite(this.file, JSON.stringify(Object.fromEntries(seen)));
     return true;
   }
 }

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-descriptor.mjs

@@ -174,7 +174,7 @@ export function descriptorMemberProblems(d) {
     const m = typeof peer.endpoint === 'string' && peer.endpoint.length <= 2048 ? PEER_ENDPOINT.exec(peer.endpoint) : null;
     if (!m) problems.push('peer.endpoint is https://<dns-name>[:<port>][/<path>], no query, fragment, userinfo or IP literal');
     else if (RESERVED_HOST.test(m[1])) problems.push(`FAC-SEM-085: a service offered to others cannot be reached at the reserved name ${m[1]}`);
-    if (!['organization-managed', 'personal'].includes(peer.custody)) problems.push('peer.custody is organization-managed or personal');
+    if (!['organization-managed', 'personal', 'processor-hosted'].includes(peer.custody)) problems.push('peer.custody is organization-managed, personal or processor-hosted'); // processor-hosted: DEC-0099
     const r = peer.residency;
     if (!Array.isArray(r) || r.length < 1 || r.length > 32 || new Set(r.map((x) => JSON.stringify(x))).size !== r.length || !r.every((x) => typeof x === 'string' && RESIDENCY.test(x))) {
       problems.push('peer.residency is 1 to 32 distinct ISO 3166-1 alpha-2 codes in upper case, EU admitted, no user-assigned code');

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-paths.mjs

@@ -1,5 +1,5 @@
 // Where a service's things live (fabric-service/0.1): the services directory, its data, config, logs and run dirs per OS, private dirs, atomic writes.
-// Part of the Node service kit (FAA-65, layer L3); the twin of fabric_paths.py. Node 20+, no dependency.
+// Part of the Node service kit (FAA-65, layer L1); the twin of fabric_paths.py. Node 20+, no dependency.
 import crypto from 'node:crypto';
 import fs from 'node:fs';
 import os from 'node:os';
@@ -51,19 +51,21 @@ export function atomicWrite(file, data, mode = 0o600) {
   const tmp = path.join(path.dirname(file), `.${path.basename(file)}.${process.pid}.${crypto.randomBytes(4).toString('hex')}`);
   const fd = fs.openSync(tmp, 'wx', mode);
   try {
-    // On Windows the file's ACL is its privacy (DEC-0032): set explicitly and protected — before the bytes go in —
-    // so it does not depend on what the folder hands down. A rename keeps it.
-    if (process.platform === 'win32') windowsProtect(tmp, { folder: false });
-    fs.writeSync(fd, data);
-    fs.fsyncSync(fd);
-  } finally {
-    fs.closeSync(fd);
-  }
-  try {
+    try {
+      // On Windows the file's ACL is its privacy (DEC-0032): set explicitly and protected — before the bytes go in —
+      // so it does not depend on what the folder hands down. A rename keeps it.
+      if (process.platform === 'win32') windowsProtect(tmp, { folder: false });
+      fs.writeSync(fd, data);
+      fs.fsyncSync(fd);
+    } finally {
+      fs.closeSync(fd);
+    }
     if (process.platform !== 'win32') fs.chmodSync(tmp, mode);
     fs.renameSync(tmp, file);
   } catch (error) {
-    fs.rmSync(tmp, { force: true });
+    // Whatever failed, no half-written file is left beside the real one, and a failed cleanup never replaces the
+    // error that caused it (FAA-85).
+    try { fs.rmSync(tmp, { force: true }); } catch { /* the original error is the one to report */ }
     throw error;
   }
 }

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-platform.mjs

@@ -1,5 +1,5 @@
 // Windows, where the kit needs it (DEC-0032): reading a file's ACL to refuse a token file others can read.
-// Part of the Node service kit (FAA-65, layer L3); the twin of fabric_platform.py. Node 20+, no dependency.
+// Part of the Node service kit (FAA-65, layer L1); the twin of fabric_platform.py. Node 20+, no dependency.
 import crypto from 'node:crypto';
 import fs from 'node:fs';
 import os from 'node:os';

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-protocols.mjs

@@ -12,7 +12,8 @@ export const PROTOCOL_REVISIONS = new Map(Object.entries({
   'fabric-interop': ['0.1', '0.2'], 'fabric-local-channel': ['0.1'], 'fabric-local-runner': ['0.1'], 'fabric-operator-channel': ['0.1'],
   'fabric-package': ['1'], 'fabric-project-comms': ['0.1'], 'fabric-proposal': ['1'], 'fabric-provider': ['0.1'], 'fabric-relay': ['0.1'],
   'fabric-secret-envelope': ['1'], 'fabric-service': ['0.1'], 'fabric-settings-backup': ['1'], heartbeat: ['1'], 'learning-note': ['1'],
-  memory: ['0.1'], 'pairing-message': ['1'], pipeline: ['0.1'], 'revocation-delta': ['1'], 'session-handoff': ['1'],
+  memory: ['0.1'], 'node-summary': ['1'], 'pairing-message': ['1'], pipeline: ['0.1'], 'repair-request': ['1'], 'repair-result': ['1'],
+  'revocation-delta': ['1'], 'session-handoff': ['1'],
   'share-registration': ['1'], 'share-registration-receipt': ['1'], 'support-quality-daily': ['1'], 'window-lease': ['1'],
 }));
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_base.py

@@ -1,4 +1,4 @@
-"""What every module of the service kit shares (FAA-65, layer L3): the protocol name, ServiceError, the
+"""What every module of the service kit shares (FAA-65, layer L1): the protocol name, ServiceError, the
 platform, ids and now_iso. Standard library only."""
 from __future__ import annotations
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_board_session.py

@@ -61,6 +61,9 @@ STOP_CODES = frozenset(["fenced", "lease_expired", "authority_changed"])
 
 
 TERMINAL = frozenset(["completed", "failed_known", "cancelled", "expired"])
+#: No longer this responder's to work on: back in the queue, claimed again, or answered by the target Project's
+#: participant reply (DEC-0098, DEC-0102; not terminal, the requester may still cancel it, and nobody claims it).
+NOT_OURS = frozenset(["queued", "claimed", "answered"])
 
 
 #: A lost call is sent again this long before the lease it keeps would lapse (FAA-77, finding 38).
@@ -283,8 +286,8 @@ class Responder:
                     self.checkpoint.drop(entry["request"])
                     continue
                 raise
-            if state is None or state in TERMINAL or state in ("queued", "claimed"):
-                self.checkpoint.drop(entry["request"])  # settled, or back in the queue for whoever claims next
+            if state is None or state in TERMINAL or state in NOT_OURS:
+                self.checkpoint.drop(entry["request"])  # settled, or no longer this responder's (NOT_OURS)
             elif state == "accepted":
                 transfer.setdefault(entry["capability"], []).append(entry)
             else:  # in_progress (lost result once a new generation holds the slot) or outcome_unknown
@@ -401,7 +404,7 @@ class Responder:
     def _reconcile(self, entry: Dict[str, Any]) -> None:
         state = self._read_state(entry)
         if state != "outcome_unknown":
-            if state in TERMINAL or state in ("queued", "claimed"):
+            if state in TERMINAL or state in NOT_OURS:
                 self.checkpoint.drop(entry["request"])
             elif state == "in_progress" and entry.get("step") != "unknown":
                 entry["step"] = "unknown"  # no next holder took the slot yet: a later tick tries again (finding 38)

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_board_shapes.py

@@ -46,8 +46,9 @@ REFUSAL_CODES = frozenset(["invalid_arguments", "body_too_large", "not_authorize
                            "cursor_reset_required", "immutable_participants", "held"])
 
 
+#: answered (DEC-0098, DEC-0102): the target Project's participant message answered it; never a responder's fenced reply.
 REQUEST_STATES = ("queued", "claimed", "accepted", "in_progress", "completed", "failed_known", "cancelled", "expired",
-                  "outcome_unknown")
+                  "outcome_unknown", "answered")
 
 
 EFFECT_STATES = ("not_started", "started", "succeeded_observed", "failed_observed", "unknown")
@@ -176,7 +177,8 @@ def receipt_problems(value: Any, op: Optional[str] = None) -> List[str]:
     """`comms-receipt.schema.json` at the pin, closed at every level (a seq or a holder is refused, C3), plus what a
     schema cannot say: `transferred` answers only `com.responder_replace` (DEC-0078) and names each request once."""
     problems: List[str] = []
-    allowed = ("ok", "repeated", "message", "thread", "at", "request", "slot", "attempt", "transferred")
+    allowed = ("ok", "repeated", "message", "thread", "at", "request", "slot", "attempt", "transferred", "marked",
+               "alreadyRead", "more", "noResponder")
     if not _closed(value, "", ("ok", "repeated"), allowed, problems):
         return problems
     if value.get("ok") is not True:
@@ -241,6 +243,27 @@ def receipt_problems(value: Any, op: Optional[str] = None) -> List[str]:
                     if not _is_int(item.get("revision"), 1):
                         problems.append("%s/revision is an integer ≥ 1" % at)
                     _attempt_problems(item.get("attempt"), at + "/attempt", problems)
+    # DEC-0098: a bulk com.read_ack counts what it marked; `more` is present only as true (more than 1000 qualified).
+    for key in ("marked", "alreadyRead"):
+        if key in value and not _is_int(value[key], 0):
+            problems.append("/%s is an integer ≥ 0" % key)
+    if "more" in value and value["more"] is not True:
+        problems.append("/more is true when present")
+    if op is not None and any(k in value for k in ("marked", "alreadyRead", "more")) and op != "com.read_ack":
+        problems.append("/marked, /alreadyRead and /more answer com.read_ack only (DEC-0098)")
+    if "noResponder" in value:
+        # DEC-0098: only in the requester's own com.submit receipt for a request; the request is stored all the same.
+        n = value["noResponder"]
+        if op is not None and op != "com.submit":
+            problems.append("/noResponder answers com.submit only (DEC-0098)")
+        keys = ("target", "capability", "message")
+        if _closed(n, "/noResponder", keys, keys, problems):
+            if not (isinstance(n.get("target"), str) and _PROJECT.fullmatch(n["target"])):
+                problems.append("/noResponder/target is a Project id")
+            if not (isinstance(n.get("capability"), str) and _CAPABILITY.fullmatch(n["capability"])):
+                problems.append("/noResponder/capability is a capability name")
+            if not (isinstance(n.get("message"), str) and 1 <= len(n["message"]) <= 300):
+                problems.append("/noResponder/message is 1 to 300 characters")
     return problems
 
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_delegation.py

@@ -21,10 +21,8 @@ import http.client
 import ipaddress
 import json
 import math
-import os
 from pathlib import Path
 import re
-import secrets
 import threading
 import time
 from typing import Any, Callable, Dict, List, Mapping, Optional, Tuple
@@ -46,6 +44,7 @@ from fabric_jsvalue import (  # noqa: E402 - the core (FAA-65)
     MISSING as _MISSING,
     jcs,
 )
+from fabric_paths import atomic_write as _atomic_write  # noqa: E402 - the kit's private writer (FAA-85)
 
 REFUSAL_CODES = (
     "unauthenticated", "token-expired", "wrong-audience", "scope-not-granted", "effect-above-ceiling", "no-grant",
@@ -484,7 +483,7 @@ class JtiStoreError(RuntimeError):
 
 
 class FileJtiStore:
-    """Consumed approval ids in a 0600 JSON file, so a second use is refused across a restart (DL-18). One
+    """Consumed approval ids in an owner-only JSON file, so a second use is refused across a restart (DL-18). One
     service instance writes it (the kit's instance lock keeps other processes out); threads are serialised."""
 
     _locks: Dict[str, threading.Lock] = {}
@@ -511,14 +510,9 @@ class FileJtiStore:
             if jti in seen:
                 return False
             seen[jti] = expires_at
-            self.path.parent.mkdir(parents=True, exist_ok=True)
-            temp = self.path.with_name(".%s.%s.tmp" % (self.path.name, secrets.token_hex(4)))
-            fd = os.open(str(temp), os.O_WRONLY | os.O_CREAT | os.O_EXCL, 0o600)
-            with os.fdopen(fd, "w") as handle:
-                json.dump(seen, handle)
-                handle.flush()
-                os.fsync(handle.fileno())
-            os.replace(str(temp), str(self.path))
+            # The kit's private writer: owner-only (0600; on Windows a protected ACL before the bytes, DEC-0032),
+            # fsynced, renamed into place, and no temporary file left when it fails (FAA-85).
+            _atomic_write(self.path, json.dumps(seen).encode("utf-8"))
             return True
 
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_descriptor.py

@@ -285,8 +285,8 @@ def descriptor_member_problems(descriptor: Dict[str, Any]) -> List[str]:
             problems.append("peer.endpoint is https://<dns-name>[:<port>][/<path>], no query, fragment, userinfo or IP literal")
         elif _RESERVED_HOST.search(match.group("host")):
             problems.append("FAC-SEM-085: a service offered to others cannot be reached at the reserved name %s" % match.group("host"))
-        if peer.get("custody") not in ("organization-managed", "personal"):
-            problems.append("peer.custody is organization-managed or personal")
+        if peer.get("custody") not in ("organization-managed", "personal", "processor-hosted"):  # processor-hosted: DEC-0099
+            problems.append("peer.custody is organization-managed, personal or processor-hosted")
         residency = peer.get("residency")
         if (not isinstance(residency, list) or not 1 <= len(residency) <= 32 or len(set(map(json.dumps, residency))) != len(residency)
                 or not all(isinstance(r, str) and _RESIDENCY.match(r) for r in residency)):

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_paths.py

@@ -1,5 +1,5 @@
 """Where a service's things live (fabric-service/0.1): the services directory, a service's data, config, logs and run
-directories per OS, private directories and atomic writes. Part of the service kit (FAA-65, layer L3)."""
+directories per OS, private directories and atomic writes. Part of the service kit (FAA-65, layer L1)."""
 from __future__ import annotations
 
 import os
@@ -83,11 +83,11 @@ def atomic_write(path: Path, data: bytes, mode: int = 0o600) -> None:
     path.parent.mkdir(parents=True, exist_ok=True)
     fd, tmp = tempfile.mkstemp(prefix="." + path.name + ".", dir=str(path.parent))
     try:
-        if WINDOWS:
-            # The file's ACL is its privacy (DEC-0032): set explicitly and protected — before the bytes go in — so
-            # it does not depend on what the folder hands down. A rename keeps it.
-            _win_protect(Path(tmp), folder=False)
-        with os.fdopen(fd, "wb") as handle:
+        with os.fdopen(fd, "wb") as handle:  # closed on every path: Windows cannot delete a file still open
+            if WINDOWS:
+                # The file's ACL is its privacy (DEC-0032): set explicitly and protected — before the bytes go in —
+                # so it does not depend on what the folder hands down. A rename keeps it.
+                _win_protect(Path(tmp), folder=False)
             handle.write(data)
             handle.flush()
             os.fsync(handle.fileno())
@@ -97,6 +97,6 @@ def atomic_write(path: Path, data: bytes, mode: int = 0o600) -> None:
     except BaseException:
         try:
             os.unlink(tmp)
-        except FileNotFoundError:
-            pass
+        except OSError:
+            pass  # the error that got us here is the one to report, not a failed cleanup (FAA-85)
         raise

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_platform.py

@@ -1,6 +1,6 @@
 """Windows, where the kit needs it (DEC-0032): named pipes that hold one copy, protecting a file to its owner, and
 reading a file's ACL to refuse a token file others can read. On other systems the same names exist and do nothing
-or answer "absent". Part of the service kit (FAA-65, layer L3)."""
+or answer "absent". Part of the service kit (FAA-65, layer L1)."""
 from __future__ import annotations
 
 import os

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_protocols.py

@@ -19,8 +19,8 @@ PROTOCOL_REVISIONS: Dict[str, Tuple[str, ...]] = {
     "fabric-interop": ("0.1", "0.2"), "fabric-local-channel": ("0.1",), "fabric-local-runner": ("0.1",),
     "fabric-operator-channel": ("0.1",), "fabric-package": ("1",), "fabric-project-comms": ("0.1",), "fabric-proposal": ("1",),
     "fabric-provider": ("0.1",), "fabric-relay": ("0.1",), "fabric-secret-envelope": ("1",), "fabric-service": ("0.1",),
-    "fabric-settings-backup": ("1",), "heartbeat": ("1",), "learning-note": ("1",), "memory": ("0.1",), "pairing-message": ("1",), "pipeline": ("0.1",),
-    "revocation-delta": ("1",), "session-handoff": ("1",), "share-registration": ("1",),
+    "fabric-settings-backup": ("1",), "heartbeat": ("1",), "learning-note": ("1",), "memory": ("0.1",), "node-summary": ("1",), "pairing-message": ("1",),
+    "pipeline": ("0.1",), "repair-request": ("1",), "repair-result": ("1",), "revocation-delta": ("1",), "session-handoff": ("1",), "share-registration": ("1",),
     "share-registration-receipt": ("1",), "support-quality-daily": ("1",), "window-lease": ("1",),
 }
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/kit.json

@@ -1,6 +1,6 @@
 {
  "name": "fabric-service-kit",
- "version": "0.44.1",
+ "version": "0.45.0",
  "about": "The service kit's modules in dependency order: a module imports only modules listed before it. Written by fabric_kit.py build; edit the order and layers by hand, never the digests.",
  "python": [
   {
@@ -40,6 +40,32 @@
    "imports": [],
    "sha256": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa"
   },
+  {
+   "module": "fabric_base",
+   "file": "fabric_base.py",
+   "layer": "L1",
+   "imports": [],
+   "sha256": "f62bcc2ed9912660fa875d27a09f60867260cc4925f79873501fd9620be59611"
+  },
+  {
+   "module": "fabric_platform",
+   "file": "fabric_platform.py",
+   "layer": "L1",
+   "imports": [
+    "fabric_base"
+   ],
+   "sha256": "a9350dff55ef0fb3a23cdb4d0320a15868b15a8deb10d2eb74d72c58740c284b"
+  },
+  {
+   "module": "fabric_paths",
+   "file": "fabric_paths.py",
+   "layer": "L1",
+   "imports": [
+    "fabric_base",
+    "fabric_platform"
+   ],
+   "sha256": "6c92af34292baddf7e10d3134d0a5b0bb23387741812a9f79c409cf1628bad23"
+  },
   {
    "module": "fabric_estate",
    "file": "fabric_estate.py",
@@ -60,9 +86,10 @@
    "imports": [
     "fabric_crypto",
     "fabric_estate",
-    "fabric_jsvalue"
+    "fabric_jsvalue",
+    "fabric_paths"
    ],
-   "sha256": "350e30cc0fb527bce1739c5f96bb9bec9028144def9d1b2630d1478529f8f996"
+   "sha256": "4eb5004188fdc6f5c0fd21fb0f9f1f538899a0383bcde0365dea080ef8347182"
   },
   {
    "module": "fabric_share",
@@ -116,32 +143,6 @@
    ],
    "sha256": "ff533f1b3f92b4ea0f532fcec50b68c610d47549930eef8ad5247692a64dfb3c"
   },
-  {
-   "module": "fabric_base",
-   "file": "fabric_base.py",
-   "layer": "L3",
-   "imports": [],
-   "sha256": "684533b3a2aa3acd9b9e645a7a443427d279408f9f12f13456a0a991d57954ce"
-  },
-  {
-   "module": "fabric_platform",
-   "file": "fabric_platform.py",
-   "layer": "L3",
-   "imports": [
-    "fabric_base"
-   ],
-   "sha256": "8b0cd89193bc55da204a4a1850665c96929c6778523a8715b8156c5643745288"
-  },
-  {
-   "module": "fabric_paths",
-   "file": "fabric_paths.py",
-   "layer": "L3",
-   "imports": [
-    "fabric_base",
-    "fabric_platform"
-   ],
-   "sha256": "0d87e572bde2b930391b27aa370d808e093ce45cfba6148706f5318219906d30"
-  },
   {
    "module": "fabric_protocols",
    "file": "fabric_protocols.py",
@@ -149,7 +150,7 @@
    "imports": [
     "fabric_secrets"
    ],
-   "sha256": "71482284e57334b2d364a44596fc4183baddfe61a80083d3099b7ef423dc6f38"
+   "sha256": "0d58251ce5f36c8f6372f8e38719543166833399078f824804430b2e070b11f6"
   },
   {
    "module": "fabric_connections",
@@ -208,7 +209,7 @@
     "fabric_secrets",
     "fabric_usage"
    ],
-   "sha256": "5f6c8f3593fe0cef92d866109cd9def807f67dd5beae2c4bca05452f50521080"
+   "sha256": "64acadc3bbf6e1f95ff275344a7a1fa8b53809e725cd3305a0832a968e7403e9"
   },
   {
    "module": "fabric_auth",
@@ -331,7 +332,7 @@
    "imports": [
     "fabric_identifiers"
    ],
-   "sha256": "a8daefdc9283219206875b5d964b49552b6b3ba7e69c925abe08a44afc91c234"
+   "sha256": "0a0e8d3d40e33dfd8c457aedb85330b2ff25f8c49a33eb6cbd5a5cc8a5007f7e"
   },
   {
    "module": "fabric_board_link",
@@ -354,7 +355,7 @@
     "fabric_hub",
     "fabric_service"
    ],
-   "sha256": "878ceed970a84087a320fd8eb971c210613a0fa2c524b68793fb32042910581e"
+   "sha256": "2271834c36c23f6bfa50395cd147e6af99f294ef09325fd15f0759ca8e18d941"
   },
   {
    "module": "fabric_board_fixture",
@@ -435,6 +436,32 @@
    "imports": [],
    "sha256": "038e03689701e3c9721a1e7f8e0a4d02a52d6a5d1661b0dc84035edc3ebbfcf6"
   },
+  {
+   "module": "fabric-base",
+   "file": "fabric-base.mjs",
+   "layer": "L1",
+   "imports": [],
+   "sha256": "7804b2df7715dbbf9702a9b61b6b8cef2110f9a52b04cabd8fb0a66458d87512"
+  },
+  {
+   "module": "fabric-platform",
+   "file": "fabric-platform.mjs",
+   "layer": "L1",
+   "imports": [
+    "fabric-base"
+   ],
+   "sha256": "a8119d95ebba4d589a9e401f5d6fc8dda62d59d44e4c1ff811d97fac3771ac0c"
+  },
+  {
+   "module": "fabric-paths",
+   "file": "fabric-paths.mjs",
+   "layer": "L1",
+   "imports": [
+    "fabric-base",
+    "fabric-platform"
+   ],
+   "sha256": "2201b4ed7126f260931b63e8386377b4317d8dcad419d109bf22c683e44b7f29"
+  },
   {
    "module": "fabric-estate",
    "file": "fabric-estate.mjs",
@@ -455,9 +482,10 @@
    "imports": [
     "fabric-crypto",
     "fabric-estate",
-    "fabric-jsvalue"
+    "fabric-jsvalue",
+    "fabric-paths"
    ],
-   "sha256": "2bc4310c6c7f0f6a11ba29d8bad2341feb0e0285758c33080e879e0a3a5cf128"
+   "sha256": "85a7e00e606244e7e02f9cbecc3e421bfcb9c1e12cd2a91daadf8a9c2403104d"
   },
   {
    "module": "fabric-share",
@@ -509,32 +537,6 @@
    ],
    "sha256": "49b757eefcc50e4c91585d5a5694bf3c83d0b03d112c1837f1c9f01466797ab5"
   },
-  {
-   "module": "fabric-base",
-   "file": "fabric-base.mjs",
-   "layer": "L3",
-   "imports": [],
-   "sha256": "17a92f5e9b71a855648e39e06388bad7f1b969605bd7b1f534ddf67b41a2fb5d"
-  },
-  {
-   "module": "fabric-platform",
-   "file": "fabric-platform.mjs",
-   "layer": "L3",
-   "imports": [
-    "fabric-base"
-   ],
-   "sha256": "1349e3638c21caf7da7937ef6a5dfeefe05a8ee733520f0d581624095efeb388"
-  },
-  {
-   "module": "fabric-paths",
-   "file": "fabric-paths.mjs",
-   "layer": "L3",
-   "imports": [
-    "fabric-base",
-    "fabric-platform"
-   ],
-   "sha256": "e6f5e2ce7c8e7a1452d6ee69977489f4c09ca6f1d3100df9c303274f0b7b16b1"
-  },
   {
    "module": "fabric-protocols",
    "file": "fabric-protocols.mjs",
@@ -542,7 +544,7 @@
    "imports": [
     "fabric-secrets"
    ],
-   "sha256": "0ecc3c19bb0bd0393ff3a9ec503034e0ab251eaaf0254edf353e15d1b561f761"
+   "sha256": "5d0c222cd7cabebdbfe9a8ae395462b2bba2af7097de1d24511ddf913ac8fdc6"
   },
   {
    "module": "fabric-connections",
@@ -602,7 +604,7 @@
     "fabric-secrets",
     "fabric-usage"
    ],
-   "sha256": "e75b16bbf15ee72a3c581df8164533ea84270f6167e7a0d2527e15bf4b78457d"
+   "sha256": "82ab706b9f2322544bb565c78e2077a5503556614161a2a3083d2200bc9e6d69"
   },
   {
    "module": "fabric-auth",
@@ -722,7 +724,7 @@
    "imports": [
     "fabric-identifiers"
    ],
-   "sha256": "ad1094397540862b104d9317d6902031d35e64b16c12bf849fb883e12cb78d45"
+   "sha256": "c1db7b7bd0d58d82bb6d8dfbc3cd1547a256a333052d367e82ff1b3edf2804d7"
   },
   {
    "module": "fabric-board-link",
@@ -745,7 +747,7 @@
     "fabric-hub",
     "fabric-service"
    ],
-   "sha256": "744a8c9a518c27f2ddfd20b1b22afebc3ccc4f59aeeb7a38d7c12c2ddcae158d"
+   "sha256": "e9eefb5d34dc66f6d6b528a9c9e85960fd884e6ea5e179c26cbfe3c054ccf7bc"
   },
   {
    "module": "fabric-board-fixture",
@@ -2037,10 +2039,162 @@
    "fabric-openrouter.mjs": "f8f0168691f968b7cd85f36aa98e2167e88cc44f1104ff514fd0c7699b339253",
    "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
    "share-registration.schema.json": "0df979d5973809d194723b23a0d18e520d9f1badc0f4a9e557aa33cbe7bc2922"
+  },
+  "0.44.2": {
+   "fabric_jsvalue.py": "0cd4eab0a5d6ae35d097f7c59a08dc29173cb61c561c49e5291a8dad15d36779",
+   "fabric_time.py": "588f383da4ac6a243ea95b6ffc3a0aa99ca94245732dc4937734f190b7af4ae9",
+   "fabric_identifiers.py": "0fd814d521ac3aa39907458265870753046a73f48af3d8581ab864b93b211607",
+   "fabric_secrets.py": "68a0b5e9e90c468ec9ac67b2f0fd1848e08813d6ec1ec14a2a47337eb1a98911",
+   "fabric_crypto.py": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa",
+   "fabric_base.py": "f62bcc2ed9912660fa875d27a09f60867260cc4925f79873501fd9620be59611",
+   "fabric_platform.py": "a9350dff55ef0fb3a23cdb4d0320a15868b15a8deb10d2eb74d72c58740c284b",
+   "fabric_paths.py": "6c92af34292baddf7e10d3134d0a5b0bb23387741812a9f79c409cf1628bad23",
+   "fabric_estate.py": "50cc12166a00b680ba5b2e458200912d7bcfbef70bd73ec4edf57c7fcfa9b687",
+   "fabric_delegation.py": "4eb5004188fdc6f5c0fd21fb0f9f1f538899a0383bcde0365dea080ef8347182",
+   "fabric_share.py": "78506fe1a60829c525dbf6266a0aa0749a2164290ed94da8249a20b4e9be5605",
+   "fabric_ceremonies.py": "a59e83cf4adb2669a9b98008e3d3a0cba991a35cbff97bc604fc82fe81cfd49f",
+   "fabric_package_schema.py": "e623f0408d38e3343ed66222fb812907c6c52e1a286eb1c1176ab2e64640c9ad",
+   "fabric_package.py": "ff533f1b3f92b4ea0f532fcec50b68c610d47549930eef8ad5247692a64dfb3c",
+   "fabric_protocols.py": "71482284e57334b2d364a44596fc4183baddfe61a80083d3099b7ef423dc6f38",
+   "fabric_connections.py": "77d3ccf863c70e9209d21ef45c46a6db9c06237019bc20d54f8d3946873f3f11",
+   "fabric_lock.py": "ba2399d2137c7a7791b7133b9db9cca36693f4eb7e30955b25a75ade814e95ba",
+   "fabric_usage.py": "ce685cb9fdfd62ea75fff8b1b2be12a2ba758da783e4bfb4dcebe47bcbeb832b",
+   "fabric_backups.py": "02dc5eb66ec956723d3ddba07b6dd15f6a9726d901f4d60edfd02eee57880ceb",
+   "fabric_descriptor.py": "5f6c8f3593fe0cef92d866109cd9def807f67dd5beae2c4bca05452f50521080",
+   "fabric_auth.py": "55794587750f6c9f40935b74295d83d7096cb4b26a0b36ac292334cd87d8f853",
+   "fabric_events.py": "0086886c2c29dbd5c9d152be9d375c5bdf4a29f89b8095baff8490c2bcd64e47",
+   "fabric_logs.py": "86dc55bfafa2a57264722e2403510a249b95de0e4a722b2e4bc3948e3bd93da9",
+   "fabric_supervisors.py": "a2dbf15aa1c4eb9de42996b413103fa4814afd2e4e66d1ab7315f30e06ab6841",
+   "fabric_service.py": "d411433ce6ff3e81189b10b2c1a8462335a97cd99574ab0ee7d1c28cf48e1694",
+   "fabric_profiles.py": "26e21ec29c016000f8ca8053b7b489184854a73be1b7fdc0a18d12990203db9b",
+   "fabric_interop_rules.py": "845d87f7ec601bc2a8ce1ab0dcdc48a95f474ec38ba0ebd7aace85046c3c43f5",
+   "fabric_interop.py": "0b4ca623caad90814426f00e328a7cf2bb52b936d824972136372dd9a0f87d7b",
+   "fabric_hub.py": "b9ac852e601b1d54cf61351677a628afc69faeed7d1fc74ebe541c1cf38e0c2a",
+   "fabric_board_shapes.py": "a8daefdc9283219206875b5d964b49552b6b3ba7e69c925abe08a44afc91c234",
+   "fabric_board_link.py": "b5bff994cb615c6a4bb0d88d020e3a59504166180e1fa1aea3be93224f2aeccb",
+   "fabric_board_session.py": "878ceed970a84087a320fd8eb971c210613a0fa2c524b68793fb32042910581e",
+   "fabric_board_fixture.py": "69761ce205ec640762ec9b591c6903e5a87f844e8d423b041681924027e39d1e",
+   "fabric_board.py": "0f075894b3e352194fcaf3fc7d08dee4e9f1c215e859769ed85fa5010e4a1599",
+   "fabric_http.py": "5d7f72af3a73fdbe8c1f487ecf60cef23a7c46289eba542b03aff4706b8218d4",
+   "fabric_openrouter.py": "2017d898c17001d7275f58267de653be7ecf6acd17ad8d9b24ecb7a43e5617d4",
+   "fabric-jsvalue.mjs": "dfbdb8c41584972c9389750a41719374a1cfc5652ed438dd1623025190b0106e",
+   "fabric-time.mjs": "3ff932069038a720df1c68c6492976906737b2e67e5c12d9c81c418597f661de",
+   "fabric-identifiers.mjs": "a18c2a501a4aa170bfd3d99e571ad6b7662649b4d3b9d2a540c002ea42811bbf",
+   "fabric-secrets.mjs": "6ad8ab18ac899ecc2384e8ec6a3fb689b92be3b9a5ce3a59b92a37d52da5d766",
+   "fabric-crypto.mjs": "038e03689701e3c9721a1e7f8e0a4d02a52d6a5d1661b0dc84035edc3ebbfcf6",
+   "fabric-base.mjs": "7804b2df7715dbbf9702a9b61b6b8cef2110f9a52b04cabd8fb0a66458d87512",
+   "fabric-platform.mjs": "a8119d95ebba4d589a9e401f5d6fc8dda62d59d44e4c1ff811d97fac3771ac0c",
+   "fabric-paths.mjs": "2201b4ed7126f260931b63e8386377b4317d8dcad419d109bf22c683e44b7f29",
+   "fabric-estate.mjs": "912b1ceab57ed20f946986bf14ae2faf41fb8ea539e818164496874f3749ef65",
+   "fabric-delegation.mjs": "85a7e00e606244e7e02f9cbecc3e421bfcb9c1e12cd2a91daadf8a9c2403104d",
+   "fabric-share.mjs": "d40a7405d7bd4c3213ed691330b7549afe8e023db0753b582e249714e672010d",
+   "fabric-ceremonies.mjs": "117d4374c9e95c930a38de7adbd4323774798f4fe6ec6f24afcd6f2c7298ca44",
+   "fabric-package-schema.mjs": "cd28092375db0fc21ffab1f0bb7794f7f8979ee08c64d3b9faf4b3845357caa6",
+   "fabric-package.mjs": "49b757eefcc50e4c91585d5a5694bf3c83d0b03d112c1837f1c9f01466797ab5",
+   "fabric-protocols.mjs": "0ecc3c19bb0bd0393ff3a9ec503034e0ab251eaaf0254edf353e15d1b561f761",
+   "fabric-connections.mjs": "303432e547ce563e90ca9ffcd827f5612f51d3582929834e1add0fdaf6485dcc",
+   "fabric-lock.mjs": "ac219ab0a326d5c43c7c4c255e0c3843d4794de795a60e3af661e7d5350ea052",
+   "fabric-usage.mjs": "e413569620bbc8221bc59e24b27e22d1483825ed18457801ed58d54a57de8114",
+   "fabric-backups.mjs": "849acdc6eba0fff648c8158e61f6b68cccd7bedf0880f7d5ec03a6a20f1e7005",
+   "fabric-descriptor.mjs": "e75b16bbf15ee72a3c581df8164533ea84270f6167e7a0d2527e15bf4b78457d",
+   "fabric-auth.mjs": "3ea6796470fcd829bc72a772fb7e4c37532a09d1e37ff41592dcf1a1a3074ca2",
+   "fabric-events.mjs": "c463d6ffcae24229a5c608d8fcea4268d2ccc5024b19fa10e5a452284068fa71",
+   "fabric-logs.mjs": "58467e5719c16e099d05bbedec47a95712506ab03c33f3cd4be1252e8498a946",
+   "fabric-supervisors.mjs": "9d61c1a17538a5e2453e33e5ae347337336748041bc054478a96dd51f3d4fc51",
+   "fabric-service.mjs": "bc67550e52aa6aa9c6d2ed6cbae52418a3e836623e17164166699f953d8aafa8",
+   "fabric-profiles.mjs": "314376cf2deb87f235fb18b11d3b532e211f585b9af0a9302b5f4cc39971b532",
+   "fabric-interop-rules.mjs": "317f29e407d30ab2afa9bc5e87b3c57c547f216a4c51844d6427d05d6f8f6c9e",
+   "fabric-interop.mjs": "11051f914f2457fd1b3424d7b4174d64500a08f7ce66ac10ed8eda71565511b1",
+   "fabric-hub.mjs": "c005115a864cfd67daa4862097bb14acfe5a60bf653897e5bf8a570dd80f1070",
+   "fabric-board-shapes.mjs": "ad1094397540862b104d9317d6902031d35e64b16c12bf849fb883e12cb78d45",
+   "fabric-board-link.mjs": "4cd6d4e21713a38c8e56f7d59db3148638b8c27c08e774d96a0f6283c6049e0a",
+   "fabric-board-session.mjs": "744a8c9a518c27f2ddfd20b1b22afebc3ccc4f59aeeb7a38d7c12c2ddcae158d",
+   "fabric-board-fixture.mjs": "83c4b7e33ee47b68385faf2569d38d5c8a0c5cb0f8656090f41e1b0eed2f436e",
+   "fabric-board.mjs": "9e7bfe4d412521982224ef12bebfc2ff255eeeaf8d96cf40234ac18de68e7a59",
+   "fabric-http.mjs": "f886bcb49c4353d039387ac9568738dda26697a94dd07fc6a6204500f0bc27bf",
+   "fabric-openrouter.mjs": "f8f0168691f968b7cd85f36aa98e2167e88cc44f1104ff514fd0c7699b339253",
+   "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
+   "share-registration.schema.json": "0df979d5973809d194723b23a0d18e520d9f1badc0f4a9e557aa33cbe7bc2922"
+  },
+  "0.45.0": {
+   "fabric_jsvalue.py": "0cd4eab0a5d6ae35d097f7c59a08dc29173cb61c561c49e5291a8dad15d36779",
+   "fabric_time.py": "588f383da4ac6a243ea95b6ffc3a0aa99ca94245732dc4937734f190b7af4ae9",
+   "fabric_identifiers.py": "0fd814d521ac3aa39907458265870753046a73f48af3d8581ab864b93b211607",
+   "fabric_secrets.py": "68a0b5e9e90c468ec9ac67b2f0fd1848e08813d6ec1ec14a2a47337eb1a98911",
+   "fabric_crypto.py": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa",
+   "fabric_base.py": "f62bcc2ed9912660fa875d27a09f60867260cc4925f79873501fd9620be59611",
+   "fabric_platform.py": "a9350dff55ef0fb3a23cdb4d0320a15868b15a8deb10d2eb74d72c58740c284b",
+   "fabric_paths.py": "6c92af34292baddf7e10d3134d0a5b0bb23387741812a9f79c409cf1628bad23",
+   "fabric_estate.py": "50cc12166a00b680ba5b2e458200912d7bcfbef70bd73ec4edf57c7fcfa9b687",
+   "fabric_delegation.py": "4eb5004188fdc6f5c0fd21fb0f9f1f538899a0383bcde0365dea080ef8347182",
+   "fabric_share.py": "78506fe1a60829c525dbf6266a0aa0749a2164290ed94da8249a20b4e9be5605",
+   "fabric_ceremonies.py": "a59e83cf4adb2669a9b98008e3d3a0cba991a35cbff97bc604fc82fe81cfd49f",
+   "fabric_package_schema.py": "e623f0408d38e3343ed66222fb812907c6c52e1a286eb1c1176ab2e64640c9ad",
+   "fabric_package.py": "ff533f1b3f92b4ea0f532fcec50b68c610d47549930eef8ad5247692a64dfb3c",
+   "fabric_protocols.py": "0d58251ce5f36c8f6372f8e38719543166833399078f824804430b2e070b11f6",
+   "fabric_connections.py": "77d3ccf863c70e9209d21ef45c46a6db9c06237019bc20d54f8d3946873f3f11",
+   "fabric_lock.py": "ba2399d2137c7a7791b7133b9db9cca36693f4eb7e30955b25a75ade814e95ba",
+   "fabric_usage.py": "ce685cb9fdfd62ea75fff8b1b2be12a2ba758da783e4bfb4dcebe47bcbeb832b",
+   "fabric_backups.py": "02dc5eb66ec956723d3ddba07b6dd15f6a9726d901f4d60edfd02eee57880ceb",
+   "fabric_descriptor.py": "64acadc3bbf6e1f95ff275344a7a1fa8b53809e725cd3305a0832a968e7403e9",
+   "fabric_auth.py": "55794587750f6c9f40935b74295d83d7096cb4b26a0b36ac292334cd87d8f853",
+   "fabric_events.py": "0086886c2c29dbd5c9d152be9d375c5bdf4a29f89b8095baff8490c2bcd64e47",
+   "fabric_logs.py": "86dc55bfafa2a57264722e2403510a249b95de0e4a722b2e4bc3948e3bd93da9",
+   "fabric_supervisors.py": "a2dbf15aa1c4eb9de42996b413103fa4814afd2e4e66d1ab7315f30e06ab6841",
+   "fabric_service.py": "d411433ce6ff3e81189b10b2c1a8462335a97cd99574ab0ee7d1c28cf48e1694",
+   "fabric_profiles.py": "26e21ec29c016000f8ca8053b7b489184854a73be1b7fdc0a18d12990203db9b",
+   "fabric_interop_rules.py": "845d87f7ec601bc2a8ce1ab0dcdc48a95f474ec38ba0ebd7aace85046c3c43f5",
+   "fabric_interop.py": "0b4ca623caad90814426f00e328a7cf2bb52b936d824972136372dd9a0f87d7b",
+   "fabric_hub.py": "b9ac852e601b1d54cf61351677a628afc69faeed7d1fc74ebe541c1cf38e0c2a",
+   "fabric_board_shapes.py": "0a0e8d3d40e33dfd8c457aedb85330b2ff25f8c49a33eb6cbd5a5cc8a5007f7e",
+   "fabric_board_link.py": "b5bff994cb615c6a4bb0d88d020e3a59504166180e1fa1aea3be93224f2aeccb",
+   "fabric_board_session.py": "2271834c36c23f6bfa50395cd147e6af99f294ef09325fd15f0759ca8e18d941",
+   "fabric_board_fixture.py": "69761ce205ec640762ec9b591c6903e5a87f844e8d423b041681924027e39d1e",
+   "fabric_board.py": "0f075894b3e352194fcaf3fc7d08dee4e9f1c215e859769ed85fa5010e4a1599",
+   "fabric_http.py": "5d7f72af3a73fdbe8c1f487ecf60cef23a7c46289eba542b03aff4706b8218d4",
+   "fabric_openrouter.py": "2017d898c17001d7275f58267de653be7ecf6acd17ad8d9b24ecb7a43e5617d4",
+   "fabric-jsvalue.mjs": "dfbdb8c41584972c9389750a41719374a1cfc5652ed438dd1623025190b0106e",
+   "fabric-time.mjs": "3ff932069038a720df1c68c6492976906737b2e67e5c12d9c81c418597f661de",
+   "fabric-identifiers.mjs": "a18c2a501a4aa170bfd3d99e571ad6b7662649b4d3b9d2a540c002ea42811bbf",
+   "fabric-secrets.mjs": "6ad8ab18ac899ecc2384e8ec6a3fb689b92be3b9a5ce3a59b92a37d52da5d766",
+   "fabric-crypto.mjs": "038e03689701e3c9721a1e7f8e0a4d02a52d6a5d1661b0dc84035edc3ebbfcf6",
+   "fabric-base.mjs": "7804b2df7715dbbf9702a9b61b6b8cef2110f9a52b04cabd8fb0a66458d87512",
+   "fabric-platform.mjs": "a8119d95ebba4d589a9e401f5d6fc8dda62d59d44e4c1ff811d97fac3771ac0c",
+   "fabric-paths.mjs": "2201b4ed7126f260931b63e8386377b4317d8dcad419d109bf22c683e44b7f29",
+   "fabric-estate.mjs": "912b1ceab57ed20f946986bf14ae2faf41fb8ea539e818164496874f3749ef65",
+   "fabric-delegation.mjs": "85a7e00e606244e7e02f9cbecc3e421bfcb9c1e12cd2a91daadf8a9c2403104d",
+   "fabric-share.mjs": "d40a7405d7bd4c3213ed691330b7549afe8e023db0753b582e249714e672010d",
+   "fabric-ceremonies.mjs": "117d4374c9e95c930a38de7adbd4323774798f4fe6ec6f24afcd6f2c7298ca44",
+   "fabric-package-schema.mjs": "cd28092375db0fc21ffab1f0bb7794f7f8979ee08c64d3b9faf4b3845357caa6",
+   "fabric-package.mjs": "49b757eefcc50e4c91585d5a5694bf3c83d0b03d112c1837f1c9f01466797ab5",
+   "fabric-protocols.mjs": "5d0c222cd7cabebdbfe9a8ae395462b2bba2af7097de1d24511ddf913ac8fdc6",
+   "fabric-connections.mjs": "303432e547ce563e90ca9ffcd827f5612f51d3582929834e1add0fdaf6485dcc",
+   "fabric-lock.mjs": "ac219ab0a326d5c43c7c4c255e0c3843d4794de795a60e3af661e7d5350ea052",
+   "fabric-usage.mjs": "e413569620bbc8221bc59e24b27e22d1483825ed18457801ed58d54a57de8114",
+   "fabric-backups.mjs": "849acdc6eba0fff648c8158e61f6b68cccd7bedf0880f7d5ec03a6a20f1e7005",
+   "fabric-descriptor.mjs": "82ab706b9f2322544bb565c78e2077a5503556614161a2a3083d2200bc9e6d69",
+   "fabric-auth.mjs": "3ea6796470fcd829bc72a772fb7e4c37532a09d1e37ff41592dcf1a1a3074ca2",
+   "fabric-events.mjs": "c463d6ffcae24229a5c608d8fcea4268d2ccc5024b19fa10e5a452284068fa71",
+   "fabric-logs.mjs": "58467e5719c16e099d05bbedec47a95712506ab03c33f3cd4be1252e8498a946",
+   "fabric-supervisors.mjs": "9d61c1a17538a5e2453e33e5ae347337336748041bc054478a96dd51f3d4fc51",
+   "fabric-service.mjs": "bc67550e52aa6aa9c6d2ed6cbae52418a3e836623e17164166699f953d8aafa8",
+   "fabric-profiles.mjs": "314376cf2deb87f235fb18b11d3b532e211f585b9af0a9302b5f4cc39971b532",
+   "fabric-interop-rules.mjs": "317f29e407d30ab2afa9bc5e87b3c57c547f216a4c51844d6427d05d6f8f6c9e",
+   "fabric-interop.mjs": "11051f914f2457fd1b3424d7b4174d64500a08f7ce66ac10ed8eda71565511b1",
+   "fabric-hub.mjs": "c005115a864cfd67daa4862097bb14acfe5a60bf653897e5bf8a570dd80f1070",
+   "fabric-board-shapes.mjs": "c1db7b7bd0d58d82bb6d8dfbc3cd1547a256a333052d367e82ff1b3edf2804d7",
+   "fabric-board-link.mjs": "4cd6d4e21713a38c8e56f7d59db3148638b8c27c08e774d96a0f6283c6049e0a",
+   "fabric-board-session.mjs": "e9eefb5d34dc66f6d6b528a9c9e85960fd884e6ea5e179c26cbfe3c054ccf7bc",
+   "fabric-board-fixture.mjs": "83c4b7e33ee47b68385faf2569d38d5c8a0c5cb0f8656090f41e1b0eed2f436e",
+   "fabric-board.mjs": "9e7bfe4d412521982224ef12bebfc2ff255eeeaf8d96cf40234ac18de68e7a59",
+   "fabric-http.mjs": "f886bcb49c4353d039387ac9568738dda26697a94dd07fc6a6204500f0bc27bf",
+   "fabric-openrouter.mjs": "f8f0168691f968b7cd85f36aa98e2167e88cc44f1104ff514fd0c7699b339253",
+   "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
+   "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
   }
  },
  "data": {
   "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
-  "share-registration.schema.json": "0df979d5973809d194723b23a0d18e520d9f1badc0f4a9e557aa33cbe7bc2922"
+  "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
  }
 }

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/share-registration.schema.json

@@ -153,7 +153,7 @@
     },
     "refusal": {
       "type": "object",
-      "description": "The receiver's refusal of a registration after the request authenticated (devices.md transport steps 0 to 8) and its revision is one it reads: 400 malformed, 403 wrong-organization or unassigned-device, 409 already-withdrawn, agent-mismatch, stale-revision or revision-conflict.",
+      "description": "The receiver's refusal of a registration after the request authenticated (devices.md transport steps 0 to 8) and its revision is one it reads: 400 malformed, 403 wrong-organization or unassigned-device, 409 already-withdrawn, agent-mismatch, stale-revision or revision-conflict; 403 purpose-not-collected when the person's acknowledged notice does not name a share registration's purposes (DEC-0100), sent again when the notice changes.",
       "required": [
         "error"
       ],
@@ -173,7 +173,8 @@
                 "already-withdrawn",
                 "agent-mismatch",
                 "stale-revision",
-                "revision-conflict"
+                "revision-conflict",
+                "purpose-not-collected"
               ]
             },
             "message": {

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -5,9 +5,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.44.1"
+  version: "0.45.0"
   contract-version: "0.1.0"
-  contract-commit: "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0"
+  contract-commit: "e742016dc396aa31e5a13a893489e43f15786c69"
 ---
 
 # Creating Fabric-compatible agents
@@ -136,7 +136,7 @@ python3 <plugin-dir>/skills/adapting-projects-to-fabric/scripts/adapt_project.py
 The effect class is declared, never defaulted: ask the author what the agent does outside itself when the request
 does not say. Cost presets are only for a run whose cost varies; their amounts come from the author or measured runs.
 
-Pin exactly contract `0.1.0` at commit `bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0` and
+Pin exactly contract `0.1.0` at commit `e742016dc396aa31e5a13a893489e43f15786c69` and
 read the pinned guide before implementing protocol details. If this skill is installed
 without its sibling, the scaffolder is absent: create the bundle by hand from the pinned
 contract's `docs/guides/connecting-compatible-agents.md` and mark the structural check

package/plugins/fabric-agent-adapter/skills/working-with-fabric/SKILL.md

@@ -19,7 +19,7 @@ compatibility: >-
   this plugin; Codex/Kimi use command hooks; Hermes/OpenCode/OpenClaw/Pi use native context plugins after opt-in.
 metadata:
   author: PassionCode.ai
-  version: "0.44.1"
+  version: "0.45.0"
 ---
 
 # Working with Fabric

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session_env.py

@@ -57,7 +57,7 @@ SESSION_ID = re.compile(r"[A-Za-z0-9._:-]{1,128}")
 LOOPBACK_ORIGIN = re.compile(r"http://127\.0\.0\.1:(\d{1,5})")
 
 
-VERSION = "0.44.1"
+VERSION = "0.45.0"
 
 
 HOSTS = {"claude": "Claude Code", "codex": "Codex", "kimi": "Kimi Code",