@passioncode-ai/fabric-agent-adapter 0.47.0 → 0.48.0

package/CHANGELOG.md

@@ -1,5 +1,45 @@
 # Changelog
 
+## 0.48.0 (2026-10-23)
+
+### Changed
+
+- **Pinned to contract `2f020a6`**, its first tagged release `v0.1.0+2026-10-23` (FAA-109; `87d384f` stays
+  supported): DEC-0107, DEC-0109, DEC-0110 and DEC-0111. Every vendored vector is regenerated from the contract's own
+  functions at the pin.
+- **`check_service.py` `well-known.requires-token` follows DEC-0109 (CT-114).** A remote service's no-token `401` may
+  carry an identity proxy's page: it passes when the page neither parses as the well-known document nor names the
+  service's id, `id.instance`, build or pid. The service's host name is taken out first, and a value shorter than four
+  characters is not looked for; a copy of the document anywhere inside a JSON body fails. The rule is recorded on every
+  path, a later request's timeout included. Fabric Inbox's remote placement on this machine now passes 34 of 34 rules (it failed
+  this one before).
+- **A spending limit counts money only (DEC-0110, CT-115)**, both twins: `budget.spentUsd` and a machine limit's
+  `spentUsd` leave out a `subscription` route's `costUsd`, an estimate at list price; a window spent only on a
+  subscription spends `0`. New: `usage_spend` / `usageSpend`, the contract's `usageSpend`, held to 42 cases its own
+  function answers (`test/fixtures/contract/usage-spend-vectors.json`). A cost or a count past the double range answers
+  `None` in Python, as the contract answers `undefined`. The day's `costUsd` still sums every route.
+- **Both estate readers read `deltaAnchor` (DEC-0107)**: `FAC-SEM-137` in the revision rules and the verdict, and
+  `delta_anchor_of` / `deltaAnchorOf`, held to the contract's fixtures and hostile variants. `FAC-SEM-075`'s message
+  says "a secret envelope", as the contract's.
+- **The protocol register gains `call-record/1`, `credential-decision/1`, `credential-request/1`,
+  `credential-revocation/1` and `fabric-credential-envelope/1`** (DEC-0111), both twins. Credentials on request are a
+  node's and Project Observatory's duty, not the kit's.
+- `references/remote-placement.md`, `usage.md`, `estate-record.md` and `protocol.md` say so.
+
+## 0.47.1 (2026-10-23)
+
+### Fixed
+
+- **The three risks of 0.47.0's blind unit reading** (FAA-107; the reading passed with nothing broken).
+  - The Python estate reader matched a `view` machine's id against a secret's `from` with `===`, where the contract
+    keeps the ids in a `Set` (SameValueZero), so a NaN id never matched a NaN `from`. No JSON the kit loads carries
+    NaN; a Python caller building the record itself could. The core gains `set_has` (a Set's `has`), used by
+    `FAC-SEM-134`, and `same`'s docstring no longer claims SameValueZero. The Node twin already matched.
+  - `profile-forbids`' 403 is asserted in both delegation kits (status, no `WWW-Authenticate`, the message); it was
+    held only by the default branch.
+  - Nine vendored `FAC-SEM-134` variants put a `view` machine id of another JSON type (null, a number, a boolean, an
+    object, an array, `-0`) against each secret's `from`, answered by the contract's own rules.
+
 ## 0.47.0 (2026-10-23)
 
 ### Changed

package/README.md

@@ -274,7 +274,7 @@ Scaffolding is non-destructive by default. It writes only the paths declared in
 The default pin for new bundles is [`fabric-contract.lock.json`](fabric-contract.lock.json):
 
 - version: `0.1.0`
-- commit: `87d384ffce2757081b7ab227e5dad3dddd08328f`
+- commit: `2f020a696453ae299b123517f14957f6a1354379`
 
 Every other mention of the default contract revision (this section, the skills' metadata, the
 skill card, `adapt_project.py`) must equal it; `python3 test/validate.py` fails a tree

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/fabric-agent-adapter",
-  "version": "0.47.0",
+  "version": "0.48.0",
   "description": "Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.",
   "scripts": {
     "test": "python3 test/validate.py && python3 -m unittest discover -s test -q && node --test 'test/*.test.mjs'"

package/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks.",
-  "version": "0.47.0",
+  "version": "0.48.0",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -5,9 +5,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.47.0"
+  version: "0.48.0"
   contract-version: "0.1.0"
-  contract-commit: "87d384ffce2757081b7ab227e5dad3dddd08328f"
+  contract-commit: "2f020a696453ae299b123517f14957f6a1354379"
 ---
 
 # Adapting projects to Fabric
@@ -76,7 +76,7 @@ Use exactly:
 
 - contract version `0.1.0`;
 - repository `https://github.com/passioncode-ai/fabric-agent-contract`;
-- commit `87d384ffce2757081b7ab227e5dad3dddd08328f`.
+- commit `2f020a696453ae299b123517f14957f6a1354379`.
 
 This is the default for new bundles. When checking an issued legacy bundle, preserve its
 explicit supported lock and use that exact clean checkout. Never silently upgrade or

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/adapt_project.py

@@ -22,10 +22,10 @@ import fabric_secrets as _secrets  # noqa: E402 - the contract's credential dete
 
 CONTRACT_VERSION = "0.1.0"
 CONTRACT_REPOSITORY = "https://github.com/passioncode-ai/fabric-agent-contract"
-CONTRACT_COMMIT = "87d384ffce2757081b7ab227e5dad3dddd08328f"
+CONTRACT_COMMIT = "2f020a696453ae299b123517f14957f6a1354379"
 # #region supported-contract-revisions — docs: README.md#contract-pin
 # Only this declaration may name a legacy revision in live files.
-SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "0a4ce773c4b9e6bec40c6387eb3f988af7152c0e", "e742016dc396aa31e5a13a893489e43f15786c69", "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0", "c55f2d5a11c9a0197e958e87212fca7ae1154769", "07042181bfae2a481aa0da1a5651f24c76669c48", "d8146cfb0a1c74fc6432284c4356bb0c864b37b5", "82e163665e156a08aa3b92e4711015582c06162c", "1636fa97262f4a26e2086572d540c2ee701e0010", "f00a7685e3861c27f7899c033fb850a145a1708f", "a046f57cf46ea9e3da57ff8ce6a3ed4d26d8774b", "fe55fc67cba1a9e34a736da7d148d4fe2a8fbfa0", "b291bf09e0a9f9fd3c16cf540832cd021203b7d1", "0cacd08b0e95b6abf131eae1206b60792138bc3c", "2eb91c00e852d9c31d804310d38fad91589fcbac", "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
+SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "87d384ffce2757081b7ab227e5dad3dddd08328f", "0a4ce773c4b9e6bec40c6387eb3f988af7152c0e", "e742016dc396aa31e5a13a893489e43f15786c69", "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0", "c55f2d5a11c9a0197e958e87212fca7ae1154769", "07042181bfae2a481aa0da1a5651f24c76669c48", "d8146cfb0a1c74fc6432284c4356bb0c864b37b5", "82e163665e156a08aa3b92e4711015582c06162c", "1636fa97262f4a26e2086572d540c2ee701e0010", "f00a7685e3861c27f7899c033fb850a145a1708f", "a046f57cf46ea9e3da57ff8ce6a3ed4d26d8774b", "fe55fc67cba1a9e34a736da7d148d4fe2a8fbfa0", "b291bf09e0a9f9fd3c16cf540832cd021203b7d1", "0cacd08b0e95b6abf131eae1206b60792138bc3c", "2eb91c00e852d9c31d804310d38fad91589fcbac", "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
 # #endregion supported-contract-revisions
 INTEROP_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/interop/0.1"
 MCP_REVISION = "2026-07-28"

package/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -14,10 +14,10 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Python 3.9+ or Node.js 20+ for the kits (Node.js 22+ for a Linux service's instance lock); the probe needs Python 3.9+. launchd steps are macOS-only; Linux services install a systemd user unit and Windows ones a per-user Scheduled Task with the kits' writers. Dashboard handoff optionally uses Fabric Dashboards MCP link/host_status/open; without it, report unresolved host capability. The contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.47.0"
+  version: "0.48.0"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
-  extension-commit: "87d384ffce2757081b7ab227e5dad3dddd08328f"
+  extension-commit: "2f020a696453ae299b123517f14957f6a1354379"
 ---
 
 # Building Fabric services

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/estate-record.md

@@ -3,7 +3,8 @@
 Fabric Agent Contract DEC-0055, `docs/specification/estate-record.md`, schema `schemas/estate-record.schema.json`,
 rules `FAC-SEM-072…076`, with contexts (DEC-0082, `docs/specification/contexts.md`, `FAC-SEM-110`, `FAC-SEM-111`) and a
 partner's scoped publisher key (DEC-0090, `docs/specification/partner-channel.md`, `FAC-SEM-122`) and each machine's
-profile (DEC-0106, `docs/specification/machine-calls.md`, `FAC-SEM-134`).
+profile (DEC-0106, `docs/specification/machine-calls.md`, `FAC-SEM-134`), and the revocation delta's head a
+revision vouches for (DEC-0107, `deltaAnchor`, `FAC-SEM-137`).
 One revision of one person's estate lists:
 - the passkeys that sign it;
 - the machines, with their device keys, a certificate of each machine's hub key and, optionally, a profile;
@@ -21,6 +22,7 @@ derived from its own digest. Python: [`scripts/fabric_estate.py`](../scripts/fab
 - Trusting a delegation key
 - Contexts: one agent for you and for an organization
 - Machine profiles: full, member, view
+- The delta anchor
 - The estate ceremonies
 - Share grants into an organization
 - Checking a record you produce
@@ -59,7 +61,8 @@ It checks, in the order of the ER table:
 7. **The window.** At most 30 days. A revision may be issued up to 60 s ahead of the verifier's clock (DEC-0066,
    `CLOCK_SKEW_SECONDS`); earlier than that it is `not-yet-valid`.
 8. **The record's own rules.** A violation is `rule-violation` with its `codes`, `FAC-SEM-072…076`, `FAC-SEM-110`,
-   `FAC-SEM-111`, `FAC-SEM-122`, `FAC-SEM-134` and `FAC-SEM-092`
+   `FAC-SEM-111`, `FAC-SEM-122`, `FAC-SEM-134` and `FAC-SEM-092`, and against the parent `FAC-SEM-114` and
+   `FAC-SEM-137`
    (each passkey the record lists is a signing credential, its origins within its RP ID).
 
 Dates are strict RFC 3339: a `T`, an offset, and a day that exists. `:60` and a space are refused. Passkey JWK `x`
@@ -160,6 +163,16 @@ own profile vectors (`fixtures/vectors/machine-call.json`) and hostile inputs (`
   service is one yet (FAA-106). A delegation verifier still names the refusal: `profile-forbids` is a DL-19 code
   ([delegation](delegation.md)).
 
+## The delta anchor
+
+DEC-0107 lets a revision name the revocation delta's head it vouches for: `deltaAnchor {sequence, sha256}`. Every
+revocation of the delta's entries up to it is in the record. `FAC-SEM-137` keeps it from moving back: once a parent
+anchors the delta, its next revision anchors it too, at the parent's sequence or later, with the parent's hash at the
+same sequence. `delta_anchor_of(record)` / `deltaAnchorOf(record)` answers the anchor, or `None` / `undefined` when the
+record names none or one of another shape. Applying the delta against the anchor (`anchorDelta`) is a machine's duty
+when it applies revisions; the kit verifies the revision and does not hold a delta. Fabric writes `deltaAnchor` only
+once every reader is pinned at or after DEC-0107: update a copied kit first, as for `profile`.
+
 ## The estate ceremonies
 
 Contract DEC-0084: create a network, add a machine nearby (a six-digit comparison code) or headless (an enroll token),

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/protocol.md

@@ -1,6 +1,6 @@
 # fabric-service/0.1: wire reference
 
-Pinned to `fabric-agent-contract` commit `87d384ffce2757081b7ab227e5dad3dddd08328f`
+Pinned to `fabric-agent-contract` commit `2f020a696453ae299b123517f14957f6a1354379`
 (`docs/specification/service.md`, DEC-0015; the usage report DEC-0021; Windows and Linux supervision
 DEC-0032 and DEC-0033; the operator channel DEC-0034 and DEC-0035; the embedded dashboard DEC-0036;
 delegation and the operator session's lifetime DEC-0039; the meter's call window DEC-0041; session handoff DEC-0042;
@@ -12,7 +12,9 @@ by normal form DEC-0076; the project board's directory page DEC-0077 and a repla
 DEC-0096; a schema pattern never uses a bare dot DEC-0097; the board as Fabric 0.3.9 serves it DEC-0098 and DEC-0102, a
 `processor-hosted` peer DEC-0099, three device protocols in the register DEC-0101; a call queue's `queue-full` and
 the `agent-directory`, `fabric-load` and `service-load` protocols DEC-0104; a machine's `profile` in the estate record,
-`profile-forbids` and the `fabric-agent-call` protocol DEC-0106). The contract's schemas are normative;
+`profile-forbids` and the `fabric-agent-call` protocol DEC-0106; the delta anchor DEC-0107; a remote service's
+no-token `401` DEC-0109; money apart from a subscription's estimate DEC-0110; the five credential and call-record
+protocols of DEC-0111 in the register). The contract's schemas are normative;
 this page is the working summary. Extension key:
 `https://fabric.passioncode.ai/agent-contract/extensions/service/0.1`.
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/remote-placement.md

@@ -64,6 +64,16 @@ router answers it, usually `404` or `421`. The probe counts that as the refusal
 the body is not the well-known document. The Origin and cross-site checks name the right `Host`,
 reach the service, and still need its own `403`.
 
+Without the token the well-known route answers `401` with none of the service's data (DEC-0109). The kit's server
+answers it with an empty body. An identity proxy in front of the service (Cloudflare Access, for one) may answer that
+`401` with its own sign-in page: `well-known.requires-token` passes it when the page neither parses as the well-known
+document nor names the service's identity values (its id, `id.instance`, build, or pid, as whole words). The probe
+takes the service's own host name out first, because a sign-in page names the address it guards, and does not look for
+a value shorter than four characters, because a platform's pid is often `1`. A copy of the document anywhere inside a JSON body
+fails, however short the id. One false FAIL remains possible: when the document was read, a proxy page that happens to
+contain the service's pid as a whole number (an inline script's constant, say) fails the rule; the evidence names the
+value it found.
+
 ## What a host does and will not do
 
 | Situation | Host |

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/usage.md

@@ -78,7 +78,11 @@ ledger.report(service_id=ID, budget={"period": "month", "limitUsd": 100}, budget
 ```
 
 - A machine limit with a `period` and no `spentUsd` is counted by the kit from the receipts, the
-  way `budget` is, so `budget` and its twin in `budgets` never disagree. A per-order limit
+  way `budget` is, so `budget` and its twin in `budgets` never disagree. Both count money only (DEC-0110):
+  a `subscription` route's `costUsd` is an estimate at list price, never spent money, so a window
+  spent only on a subscription spends `0`, and money is `null` only while no call off a subscription
+  is priced. `usage_spend(rows)` / `usageSpend(rows)` is the contract's `usageSpend` over
+  `days[].byModel[]` rows: money and the subscription's estimate apart. A per-order limit
   (`per_job`, `approval`) gets `spentUsd: null`. Every other limit states its own spend.
 - `scope` is `machine`, `project`, `pool` or `job`; a `project` or `pool` limit names its
   `subject`. A limit has at most one window (`period`, `windowSeconds` or `since`), and it agrees

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/check_service.py

@@ -9,7 +9,7 @@
 
 A remote placement (DEC-0019 — an online agent or dashboard at an https origin) is probed over
 TLS with the certificate verified: the well-known document must refuse a request without the
-token (401, empty body), the guards must refuse a foreign Host/Origin and cross-site requests,
+token (401 with none of the service's data: an empty body, or an identity proxy's page, DEC-0109), the guards must refuse a foreign Host/Origin and cross-site requests,
 and the session cookie must be __Host- and Secure. Loopback, launchd, lock and state rules do
 not apply to it and are reported NOT_RUN with that reason.
 
@@ -62,7 +62,7 @@ from check_service_rules import PLATFORM_HOST_REFUSALS  # noqa: E402,F401 - move
 from check_service_rules import plist_problems  # noqa: E402,F401 - moved (FAA-65)
 from check_service_rules import marker_problem  # noqa: E402,F401 - moved (FAA-65)
 from check_service_rules import priority_problems  # noqa: E402,F401 - moved (FAA-65)
-from check_service_rules import guard_verdict  # noqa: E402,F401 - moved (FAA-65)
+from check_service_rules import guard_verdict, no_token_verdict  # noqa: E402,F401 - moved (FAA-65)
 from check_service_rules import board_responder_verdict  # noqa: E402,F401 - moved (FAA-65)
 from check_service_rules import session_lifetime_problem  # noqa: E402,F401 - moved (FAA-65)
 from check_service_rules import _semver  # noqa: E402,F401 - moved (FAA-65)
@@ -190,10 +190,10 @@ class Probe:
             except (OSError, ssl.SSLError) as exc:
                 self.add("well-known.answers", "FAIL", "no TLS answer on %s: %s" % (self.d.get("origin"), exc))
                 return
-            self.add("well-known.requires-token", "PASS" if status == 401 and not body else "FAIL",
-                     "HTTP %d without a token, %d byte(s)" % (status, len(body)))
+            no_token = (status, body)  # judged once the document names the identity values (DEC-0109)
             self.read_token()
             if not self.token:
+                self.add_no_token(no_token, None)
                 self.add("well-known.answers", "NOT_RUN", "no readable token to ask with")
                 return
             protected = self.auth_headers()
@@ -204,16 +204,24 @@ class Probe:
                 status, headers, body = self.request("GET", "/.well-known/fabric-service", protected)
                 timings.append((time.perf_counter() - started) * 1000)
         except OSError as exc:
+            if self.remote:
+                self.add_no_token(no_token, None)
             self.add("well-known.answers", "FAIL", "no answer on %s: %s" % (self.d.get("origin"), exc))
             return
         if status != 200:
+            if self.remote:
+                self.add_no_token(no_token, None)
             self.add("well-known.answers", "FAIL", "HTTP %d" % status)
             return
         try:
             self.wk = json.loads(body)
         except ValueError:
+            if self.remote:
+                self.add_no_token(no_token, None)
             self.add("well-known.answers", "FAIL", "body is not JSON")
             return
+        if self.remote:
+            self.add_no_token(no_token, self.wk)
         self.add("well-known.answers", "PASS", "HTTP 200")
         median = sorted(timings)[1]
         if self.remote:
@@ -257,6 +265,25 @@ class Probe:
         self.add("well-known.ready-means-healthy", "FAIL" if ready_bad else "PASS",
                  "status %s, %d degraded" % (wk.get("status"), len(wk.get("degraded") or [])))
 
+    def add_no_token(self, answer: Tuple[int, bytes], wk: Any) -> None:
+        """`well-known.requires-token` (DEC-0109): the no-token answer, against the identity values the descriptor
+        names and, when the document was read, its build and pid."""
+        status, body = answer
+        sid, instance = str(self.d.get("id") or ""), str(self.d.get("instance") or "default")
+        values = [sid, "%s.%s" % (sid, instance)]
+        if isinstance(wk, dict):
+            svc = wk.get("service") if isinstance(wk.get("service"), dict) else {}
+            build = svc.get("build") if isinstance(svc.get("build"), dict) else {}
+            process = wk.get("process") if isinstance(wk.get("process"), dict) else {}
+            if svc.get("id"):
+                values.append(str(svc["id"]))
+                values.append("%s.%s" % (svc["id"], svc.get("instance") or instance))
+            values += [str(build[k]) for k in ("commit", "digest") if build.get(k)]
+            if isinstance(process.get("pid"), int) and not isinstance(process.get("pid"), bool):
+                values.append(str(process["pid"]))
+        verdict, evidence = no_token_verdict(status, body, list(dict.fromkeys(values)), self.host_name)
+        self.add("well-known.requires-token", verdict, evidence)
+
     # network ------------------------------------------------------------------
     def network_rules(self) -> None:
         for rule, headers in (

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/check_service_rules.py

@@ -88,6 +88,48 @@ def guard_verdict(rule: str, remote: bool, status: int, body: bytes) -> Tuple[st
     return "FAIL", "HTTP %d%s" % (status, ", and the body is the well-known document" if disclosed else "")
 
 
+def _carries_document(value: Any, depth: int = 0) -> bool:
+    """Whether a parsed body is, or holds anywhere inside it, an object that reads as the well-known document: its
+    `protocol` is the extension's, or it carries `service` or `process` (D3 of FAA-109)."""
+    if depth > 64:
+        return True  # nothing honest nests that deep; refuse rather than recurse without bound
+    if isinstance(value, dict):
+        if value.get("protocol") == fs.PROTOCOL or "service" in value or "process" in value:
+            return True
+        return any(_carries_document(v, depth + 1) for v in value.values())
+    if isinstance(value, list):
+        return any(_carries_document(v, depth + 1) for v in value)
+    return False
+
+
+def no_token_verdict(status: int, body: bytes, identities: List[str], host: str = "") -> Tuple[str, str]:
+    """DEC-0109 (`well-known.requires-token` on a remote placement): the no-token answer is `401` and carries none of
+    the service's data. An empty body passes; so does an identity proxy's page in front of the service, as long as it
+    neither parses as the well-known document nor names one of the service's own identity values (its id, its
+    `id.instance`, its build or its pid, as whole words). The service's own host name is taken out first: a sign-in page
+    names the address it guards, and the address is not the document's data. A value shorter than four characters
+    names nothing on its own (a platform's pid is often 1) and is not looked for."""
+    if status != 401:
+        return "FAIL", "HTTP %d without a token" % status
+    if not body:
+        return "PASS", "HTTP 401 without a token, an empty body"
+    text = body.decode("utf-8", "replace")
+    try:
+        doc = json.loads(text)
+    except RecursionError:
+        return "FAIL", "HTTP 401, and the body nests deeper than any page does"
+    except ValueError:
+        doc = None
+    if _carries_document(doc):
+        return "FAIL", "HTTP 401, and the body carries the well-known document"
+    if host:
+        text = re.sub(re.escape(host), " ", text, flags=re.IGNORECASE)
+    for value in identities:
+        if len(value) >= 4 and re.search(r"(?<![A-Za-z0-9_.-])%s(?![A-Za-z0-9_-])" % re.escape(value), text):
+            return "FAIL", "HTTP 401, and the %d-byte body names the service's identity value %r" % (len(body), value)
+    return "PASS", "HTTP 401 without a token, a %d-byte page that is not the service's (an identity proxy's, DEC-0109)" % len(body)
+
+
 def board_responder_verdict(wk: Any, kit: Optional[str] = None) -> Tuple[str, str]:
     """board.responder: NOT_RUN when the well-known document declares no fabric-project-comms revision; FAIL when it
     declares one this kit does not read or the kit's fixture conversation finds a problem; PASS otherwise. `kit` is the

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-estate.mjs

@@ -6,6 +6,8 @@
 //   it has checked the revision against estate-record.schema.json (the verifier does not check the schema);
 // - estateRecordRules(kind, value) — FAC-SEM-072…076, with FAC-SEM-134 on each machine's profile (DEC-0106);
 // - machineProfile(record, machineId) — a machine's profile (DEC-0106): `full`, `member`, `view`, or undefined;
+// - deltaAnchorOf(record) — the revocation delta's head a revision vouches for (DEC-0107), or undefined; a revision
+//   never moves it back (FAC-SEM-137, in the revision rules and the verdict);
 // - hubKeyCertified(record, kid, x, at) — DL-14: a delegation verifier that reads the estate record trusts a token's
 //   `kid` only while a current revision certifies it for a machine (fabric-delegation.mjs calls it).
 //
@@ -228,7 +230,7 @@ export function verifyEstateRecord(record, trust) {
   if (at < issuedAt - CLOCK_SKEW_SECONDS * 1000) return { ok: false, problem: 'not-yet-valid' };
   if (at > validUntil) return { ok: false, problem: 'expired' };
   // With a parent, what the revision drops it revokes (FAC-SEM-114, DEC-0084): a removed machine, a replaced key.
-  const dropped = isObject(trust.parent) ? droppedFindings(trust.parent, record) : [];
+  const dropped = isObject(trust.parent) ? [...droppedFindings(trust.parent, record), ...anchorFindings(trust.parent, record)] : [];
   const codes = [...new Set([...recordFindings(record), ...dropped].map((finding) => finding.code))];
   if (codes.length > 0) return { ok: false, problem: 'rule-violation', codes };
   return { ok: true, digest, revision: record.revision, signedBy: credential.credentialId, signCount: assertion.signCount };
@@ -460,7 +462,7 @@ function secretReferences(value, flag) {
       if (!placed.has(keyOf(secret.agentRef, contextOf(secret)))) flag(`${at}/agentRef`, "a secret goes only where a placed package declares it (v4 Path 2): this agent is not placed on this machine in the secret's context");
       if (!machineIds.has(secret.from)) flag(`${at}/from`, 'the slot is filled from a machine of this estate');
       // An envelope names no context (DEC-0082), so an organization's instance fills its slot on its own machine.
-      else if (contextOf(secret) !== PERSONAL_CONTEXT && secret.from !== machine.id) flag(`${at}/from`, "an organization's instance fills its slot from its own machine's vault, never by an envelope from another machine");
+      else if (contextOf(secret) !== PERSONAL_CONTEXT && secret.from !== machine.id) flag(`${at}/from`, "an organization's instance fills its slot from its own machine's vault, never by a secret envelope from another machine");
       const key = keyOf(secret.agentRef, secret.slot, contextOf(secret));
       if (slots.has(key)) flag(`${at}/slot`, `slot ${show(secret.slot)} is placed twice for one agent in one context on one machine`);
       slots.add(key);
@@ -642,6 +644,29 @@ function installation(value) {
   return findings;
 }
 
+/** The anchor a record vouches for (DEC-0107), or undefined when it names none or its shape is not the schema's. */
+export function deltaAnchorOf(record) {
+  if (!isObject(record) || !isObject(record.deltaAnchor)) return undefined;
+  const { sequence, sha256 } = record.deltaAnchor;
+  return Number.isSafeInteger(sequence) && sequence >= 1 && isString(sha256) && /^[a-f0-9]{64}$/.test(sha256) ? { sequence, sha256 } : undefined;
+}
+
+/**
+ * FAC-SEM-137 across two revisions (DEC-0107): the delta anchor never moves back. A revision whose parent anchors the
+ * delta anchors it too, at the parent's sequence or later, with the parent's hash at the same sequence.
+ */
+function anchorFindings(parent, next) {
+  const findings = [];
+  const flag = flagger(findings, 'FAC-SEM-137');
+  const before = deltaAnchorOf(parent);
+  if (before === undefined) return findings;
+  const after = deltaAnchorOf(next);
+  if (after === undefined) flag('/next/deltaAnchor', `the parent anchors the delta at ${before.sequence}: a revision keeps an anchor once one is set`);
+  else if (after.sequence < before.sequence) flag('/next/deltaAnchor/sequence', `the anchor moves back from ${before.sequence} to ${after.sequence}`);
+  else if (after.sequence === before.sequence && after.sha256 !== before.sha256) flag('/next/deltaAnchor/sha256', `another hash at sequence ${after.sequence}: two delta histories`);
+  return findings;
+}
+
 /**
  * FAC-SEM-114 across two revisions (DEC-0084): what a revision drops, it revokes in the same revision. A removed machine
  * as `machine <id>` and its hub key as `hub-key <kid>`; a replaced or dropped device key of a kept machine as `device-key`
@@ -680,7 +705,11 @@ function droppedFindings(parent, next) {
 export function estateRecordRules(kind, value) {
   const doc = isObject(value) ? value : {};
   if (kind === 'estate-record') return recordFindings(doc);
-  if (kind === 'estate-record-revision') return [...revisionChain(doc), ...droppedFindings(isObject(doc.parent) ? doc.parent : {}, isObject(doc.next) ? doc.next : {})];
+  if (kind === 'estate-record-revision') {
+    const parent = isObject(doc.parent) ? doc.parent : {};
+    const next = isObject(doc.next) ? doc.next : {};
+    return [...revisionChain(doc), ...droppedFindings(parent, next), ...anchorFindings(parent, next)];
+  }
   if (kind === 'estate-placement') return installation(doc);
   return undefined;
 }

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-protocols.mjs

@@ -7,8 +7,8 @@ import { credentialName, secretArgument, secretUrl, secretValue } from './fabric
 
 /** Each contract protocol's published revisions, oldest first (the contract's `PROTOCOL_REVISIONS`); a test holds it equal to the contract's. */
 export const PROTOCOL_REVISIONS = new Map(Object.entries({
-  'access-log': ['1'], approval: ['1'], 'activity-summary': ['1'], 'agent-directory': ['1'], 'coding-agents': ['1'], 'enroll-token': ['1'], entitlement: ['1'], 'entitlement-key-set': ['1'], 'estate-record': ['1'], 'execution-packet': ['1'],
-  'fabric-activity': ['0.1'], 'fabric-agent-call': ['1'], 'fabric-connections': ['0.1'], 'fabric-load': ['0.1'], 'fabric-dashboard': ['0.1'], 'fabric-delegation': ['0.1'], 'fabric-device': ['0.1'],
+  'access-log': ['1'], approval: ['1'], 'activity-summary': ['1'], 'agent-directory': ['1'], 'call-record': ['1'], 'coding-agents': ['1'], 'credential-decision': ['1'], 'credential-request': ['1'], 'credential-revocation': ['1'], 'enroll-token': ['1'], entitlement: ['1'], 'entitlement-key-set': ['1'], 'estate-record': ['1'], 'execution-packet': ['1'],
+  'fabric-activity': ['0.1'], 'fabric-agent-call': ['1'], 'fabric-connections': ['0.1'], 'fabric-credential-envelope': ['1'], 'fabric-load': ['0.1'], 'fabric-dashboard': ['0.1'], 'fabric-delegation': ['0.1'], 'fabric-device': ['0.1'],
   'fabric-interop': ['0.1', '0.2'], 'fabric-local-channel': ['0.1'], 'fabric-local-runner': ['0.1'], 'fabric-operator-channel': ['0.1'],
   'fabric-package': ['1'], 'fabric-project-comms': ['0.1'], 'fabric-proposal': ['1'], 'fabric-provider': ['0.1'], 'fabric-relay': ['0.1'],
   'fabric-secret-envelope': ['1'], 'fabric-service': ['0.1'], 'fabric-settings-backup': ['1'], heartbeat: ['1'], 'learning-note': ['1'],

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-service.mjs

@@ -70,6 +70,7 @@ export {
   attributionSettingFindings,
   attributionHeaders,
   usageReport,
+  usageSpend,
   LIMIT_SCOPES,
   PER_ORDER_KINDS,
   isTimestamp,

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-usage.mjs

@@ -310,21 +310,65 @@ export function usageReport(receipts, { id, instance = 'default', now = Date.now
   return report;
 }
 
-/** Spend in a rolling window, from the receipts' own times; null when every call in it is unpriced. */
+/**
+ * What a host shows for usage rows (DEC-0110, the contract's usageSpend): money spent apart from a subscription's
+ * estimate. `rows` are `days[].byModel[]` rows. Money is the `costUsd` of every row whose `route` is `key`,
+ * `platform-metered` or absent; a `subscription` row's `costUsd` is an estimate at list price, summed apart. A window
+ * whose calls were all on a subscription spent 0; money is null only when it has calls off a subscription and none of
+ * them is priced, and a lower bound while some are priced and some are not. An unknown `route`, or counts or a cost the
+ * schema refuses, answers undefined. It never throws on a JSON value.
+ */
+export function usageSpend(rows) {
+  if (!Array.isArray(rows)) return undefined;
+  const known = (value) => typeof value === 'number' && Number.isFinite(value) && value >= 0;
+  const money = [], estimate = [];
+  let calls = 0, subscriptionCalls = 0;
+  const paid = { calls: 0, priced: 0, unpriced: false }, sub = { calls: 0, priced: 0, unpriced: false };
+  for (const row of rows) {
+    if (!isPlainObject(row)) return undefined;
+    const { route } = row;
+    if (route !== undefined && !(typeof route === 'string' && USAGE_ROUTES.includes(route))) return undefined;
+    const rowCalls = row.calls, unpriced = row.unpricedCalls === undefined ? 0 : row.unpricedCalls, rowCost = row.costUsd;
+    if (!Number.isSafeInteger(rowCalls) || rowCalls < 0 || !Number.isSafeInteger(unpriced) || unpriced < 0 || unpriced > rowCalls) return undefined;
+    if (rowCost !== null && !known(rowCost)) return undefined;
+    if (rowCalls > 0 && (rowCost === null) !== (unpriced === rowCalls)) return undefined; // FAC-SEM-025's own pairing
+    calls += rowCalls;
+    const side = route === 'subscription' ? sub : paid;
+    if (route === 'subscription') subscriptionCalls += rowCalls;
+    side.calls += rowCalls;
+    side.priced += rowCalls - unpriced;
+    if (unpriced > 0) side.unpriced = true;
+    if (known(rowCost)) (route === 'subscription' ? estimate : money).push(rowCost);
+  }
+  const total = (side, costs) => (side.calls > 0 && side.priced === 0 ? null : costs.sort((a, b) => a - b).reduce((n, x) => n + x, 0));
+  return {
+    calls,
+    moneyUsd: total(paid, money),
+    moneyLowerBound: paid.priced > 0 && paid.unpriced,
+    estimateUsd: total(sub, estimate),
+    estimateLowerBound: sub.priced > 0 && sub.unpriced,
+    subscriptionCalls,
+  };
+}
+
+/** CT-115: a limit counts money only, never a subscription's estimate (DEC-0110). */
+function money(spend) {
+  return spend === undefined || spend.moneyUsd === null ? null : Math.round(spend.moneyUsd * 1e6) / 1e6;
+}
+
+/** Money spent in a rolling window, from the receipts' own times; null when no call off a subscription in it is priced. */
 function spentSince(receipts, start, end) {
   const iso = (ms) => new Date(ms).toISOString().replace(/\.\d{3}Z$/, 'Z');
   const lo = iso(start), hi = iso(end);
   const inside = [...receipts].filter((r) => String(r.at ?? '') > lo && String(r.at ?? '') <= hi);
-  if (inside.length && inside.every((r) => r.costUsd === null || r.costUsd === undefined)) return null;
-  return Math.round(inside.reduce((n, r) => n + (r.costUsd ?? 0), 0) * 1e6) / 1e6;
+  const priced = (r) => r.costUsd !== null && r.costUsd !== undefined;
+  return money(usageSpend(inside.map((r) => ({ ...(r.route ? { route: r.route } : {}), calls: 1, unpricedCalls: priced(r) ? 0 : 1, costUsd: priced(r) ? r.costUsd : null }))));
 }
 
-/** Spend in the current UTC day or month; null when every call in it is unpriced. */
+/** Money spent in the current UTC day or month, over the window's model rows; null when no call off a subscription in it is priced. */
 function spentIn(outDays, period, last) {
   const prefix = period === 'day' ? last : last.slice(0, 7);
-  const window = outDays.filter((d) => d.date.startsWith(prefix));
-  const unknown = window.length > 0 && window.every((d) => d.costUsd === null);
-  return unknown ? null : Math.round(window.reduce((n, d) => n + (d.costUsd ?? 0), 0) * 1e6) / 1e6;
+  return money(usageSpend(outDays.filter((d) => d.date.startsWith(prefix)).flatMap((d) => d.byModel)));
 }
 
 export const LIMIT_SCOPES = Object.freeze(['machine', 'project', 'pool', 'job']);

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_estate.py

@@ -12,6 +12,8 @@ at the pin, ported answer for answer and held to the contract's own vectors (`te
 - ``estate_record_rules(kind, value)`` — FAC-SEM-072…076 for `estate-record`, `estate-record-revision` and
   `estate-placement`, with FAC-SEM-134 on each machine's profile (DEC-0106);
 - ``machine_profile(record, machine_id)`` — a machine's profile (DEC-0106): `full`, `member`, `view`, or None;
+- ``delta_anchor_of(record)`` — the revocation delta's head a revision vouches for (DEC-0107), or None; a revision
+  never moves it back (FAC-SEM-137, in the revision rules and the verdict);
 - ``hub_key_certified(record, kid, x, at)`` — DL-14: a delegation verifier that reads the estate record trusts a token's
   `kid` only while a current revision certifies it for a machine (``fabric_delegation`` calls it).
 
@@ -57,6 +59,7 @@ from fabric_jsvalue import (  # noqa: E402 - the core (FAA-65)
     objects as _list,
     safe_integer as _safe_integer,
     same as _same,
+    set_has as _set_has,
     show as _show,
 )
 from fabric_time import (  # noqa: E402 - the core (FAA-65)
@@ -355,7 +358,7 @@ def verify_estate_record(record: Any, *, at: Any, parent: Any = _MISSING, author
         return {"ok": False, "problem": "expired"}
     codes: List[str] = []
     # With a parent, what the revision drops it revokes (FAC-SEM-114, DEC-0084): a removed machine, a replaced key.
-    dropped = _dropped_findings(parent, record) if isinstance(parent, dict) else []
+    dropped = _dropped_findings(parent, record) + _anchor_findings(parent, record) if isinstance(parent, dict) else []
     for finding in _record_findings(record) + dropped:
         if finding["code"] not in codes:
             codes.append(finding["code"])
@@ -639,7 +642,7 @@ def _secret_references(value: Dict[str, Any], flag) -> None:
                 flag("%s/from" % at, "the slot is filled from a machine of this estate")
             elif not _same(_context_of(secret), PERSONAL_CONTEXT) and not _same(_get(secret, "from"), _get(machine, "id")):
                 # An envelope names no context (DEC-0082): an organization's instance fills its slot on its own machine.
-                flag("%s/from" % at, "an organization's instance fills its slot from its own machine's vault, never by an envelope from another machine")
+                flag("%s/from" % at, "an organization's instance fills its slot from its own machine's vault, never by a secret envelope from another machine")
             key = _key_of(_get(secret, "agentRef"), _get(secret, "slot"), _context_of(secret))
             if key in slots:
                 flag("%s/slot" % at, "slot %s is placed twice for one agent in one context on one machine" % _show(_get(secret, "slot")))
@@ -690,7 +693,7 @@ def _machine_profiles(value: Dict[str, Any], flag) -> None:
                 flag("/machines/%d/secrets" % m, "a view machine holds none of the estate's secrets")
     for machine, m in _indexed(_get(value, "machines")):
         for secret, s in _indexed(_get(machine, "secrets")):
-            if _contains(views, _get(secret, "from")):
+            if _set_has(views, _get(secret, "from")):  # the contract's Set: NaN matches NaN
                 flag("/machines/%d/secrets/%d/from" % (m, s), "machine %s is a view machine: it is the source of no secret" % _show(_get(secret, "from")))
 
 
@@ -781,6 +784,38 @@ def _placement_grants(value: Dict[str, Any], flag) -> None:
                 flag("/machines/%d/packages/%d%s" % (m, p, suffix), message)
 
 
+_ANCHOR_HASH = re.compile(r"[a-f0-9]{64}")
+
+
+def delta_anchor_of(record: Any) -> Optional[Dict[str, Any]]:
+    """The anchor a record vouches for (DEC-0107), or None when it names none or its shape is not the schema's. The
+    contract's ``deltaAnchorOf``."""
+    if not isinstance(record, dict) or not isinstance(_get(record, "deltaAnchor"), dict):
+        return None
+    sequence, sha = _get(record["deltaAnchor"], "sequence"), _get(record["deltaAnchor"], "sha256")
+    if _safe_integer(sequence) and sequence >= 1 and isinstance(sha, str) and _ANCHOR_HASH.fullmatch(sha):
+        return {"sequence": sequence, "sha256": sha}
+    return None
+
+
+def _anchor_findings(parent: Dict[str, Any], nxt: Dict[str, Any]) -> List[Dict[str, str]]:
+    """FAC-SEM-137 across two revisions (DEC-0107): the delta anchor never moves back. A revision whose parent anchors
+    the delta anchors it too, at the parent's sequence or later, with the parent's hash at the same sequence."""
+    findings: List[Dict[str, str]] = []
+    flag = _finding(findings, "FAC-SEM-137")
+    before = delta_anchor_of(parent)
+    if before is None:
+        return findings
+    after = delta_anchor_of(nxt)
+    if after is None:
+        flag("/next/deltaAnchor", "the parent anchors the delta at %s: a revision keeps an anchor once one is set" % _js_string(before["sequence"]))
+    elif after["sequence"] < before["sequence"]:
+        flag("/next/deltaAnchor/sequence", "the anchor moves back from %s to %s" % (_js_string(before["sequence"]), _js_string(after["sequence"])))
+    elif after["sequence"] == before["sequence"] and after["sha256"] != before["sha256"]:
+        flag("/next/deltaAnchor/sha256", "another hash at sequence %s: two delta histories" % _js_string(after["sequence"]))
+    return findings
+
+
 def _dropped_findings(parent: Dict[str, Any], nxt: Dict[str, Any]) -> List[Dict[str, str]]:
     """FAC-SEM-114 across two revisions (DEC-0084): what a revision drops, it revokes in the same revision. A removed
     machine as ``machine <id>`` and its hub key as ``hub-key <kid>``; a replaced or dropped device key of a kept machine
@@ -894,7 +929,7 @@ def estate_record_rules(kind: str, value: Any) -> Optional[List[Dict[str, str]]]
     if kind == "estate-record-revision":
         parent = value["parent"] if isinstance(_get(value, "parent"), dict) else {}
         nxt = value["next"] if isinstance(_get(value, "next"), dict) else {}
-        return _revision_chain(value) + _dropped_findings(parent, nxt)
+        return _revision_chain(value) + _dropped_findings(parent, nxt) + _anchor_findings(parent, nxt)
     if kind == "estate-placement":
         return _installation(value)
     return None

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_jsvalue.py

@@ -157,7 +157,8 @@ def double(value: Any) -> float:
 
 
 def same(a: Any, b: Any) -> bool:
-    """JavaScript's === (and a Set's SameValueZero) on parsed JSON: an object equals only itself."""
+    """JavaScript's === on parsed JSON: an object equals only itself. A Set's SameValueZero differs only for NaN, which
+    no JSON value is: use ``set_has`` where the contract keeps a Set (FAA-107)."""
     if a is MISSING or b is MISSING:
         return a is b
     if isinstance(a, (dict, list)) or isinstance(b, (dict, list)):
@@ -173,6 +174,12 @@ def contains(items: List[Any], value: Any) -> bool:
     return any(same(item, value) for item in items)
 
 
+def set_has(items: List[Any], value: Any) -> bool:
+    """A JavaScript Set's ``has`` over ``items``: SameValueZero, which is ``same`` except that NaN matches NaN."""
+    nan = isinstance(value, float) and math.isnan(value)
+    return any(same(item, value) or (nan and isinstance(item, float) and math.isnan(item)) for item in items)
+
+
 #: The characters JavaScript's StringToNumber trims: WhiteSpace and LineTerminator (ECMA-262 §12.2, §12.3).
 _JS_SPACE = "\t\n\v\f\r              

  　"
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_protocols.py

@@ -13,9 +13,9 @@ if str(_Path(__file__).resolve().parent) not in _sys.path:  # the kit loads from
 #: Each contract protocol's published revisions, oldest first (the contract's `PROTOCOL_REVISIONS`, DEC-0067); a test
 #: holds it equal to the contract's register at the pin.
 PROTOCOL_REVISIONS: Dict[str, Tuple[str, ...]] = {
-    "access-log": ("1",), "approval": ("1",), "activity-summary": ("1",), "agent-directory": ("1",), "coding-agents": ("1",), "enroll-token": ("1",), "entitlement": ("1",),
+    "access-log": ("1",), "approval": ("1",), "activity-summary": ("1",), "agent-directory": ("1",), "call-record": ("1",), "coding-agents": ("1",), "credential-decision": ("1",), "credential-request": ("1",), "credential-revocation": ("1",), "enroll-token": ("1",), "entitlement": ("1",),
     "entitlement-key-set": ("1",), "estate-record": ("1",), "execution-packet": ("1",),
-    "fabric-activity": ("0.1",), "fabric-agent-call": ("1",), "fabric-connections": ("0.1",), "fabric-load": ("0.1",), "fabric-dashboard": ("0.1",), "fabric-delegation": ("0.1",), "fabric-device": ("0.1",),
+    "fabric-activity": ("0.1",), "fabric-agent-call": ("1",), "fabric-connections": ("0.1",), "fabric-credential-envelope": ("1",), "fabric-load": ("0.1",), "fabric-dashboard": ("0.1",), "fabric-delegation": ("0.1",), "fabric-device": ("0.1",),
     "fabric-interop": ("0.1", "0.2"), "fabric-local-channel": ("0.1",), "fabric-local-runner": ("0.1",),
     "fabric-operator-channel": ("0.1",), "fabric-package": ("1",), "fabric-project-comms": ("0.1",), "fabric-proposal": ("1",),
     "fabric-provider": ("0.1",), "fabric-relay": ("0.1",), "fabric-secret-envelope": ("1",), "fabric-service": ("0.1",),

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_service.py

@@ -135,6 +135,7 @@ from fabric_usage import (  # noqa: F401
     _is_openrouter,
     attribution_headers,
     usage_report,
+    usage_spend,
     _spent_since,
     _spent_in,
     LIMIT_SCOPES,

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_usage.py

@@ -494,21 +494,95 @@ def usage_report(receipts: Iterable[Dict[str, Any]], *, service_id: str, instanc
     return report
 
 
+def usage_spend(rows: Any) -> Optional[Dict[str, Any]]:
+    """What a host shows for usage rows (DEC-0110, the contract's ``usageSpend``): money spent apart from a
+    subscription's estimate. ``rows`` are ``days[].byModel[]`` rows. Money is the ``costUsd`` of every row whose
+    ``route`` is ``key``, ``platform-metered`` or absent; a ``subscription`` row's ``costUsd`` is an estimate at list
+    price, summed apart. A window whose calls were all on a subscription spent 0; money is None only when it has calls
+    off a subscription and none of them is priced, and a lower bound while some are priced and some are not. An unknown
+    ``route``, or counts or a cost the schema refuses, answers None. It never raises on a JSON value."""
+    if not isinstance(rows, list):
+        return None
+    money: List[float] = []
+    estimate: List[float] = []
+    calls = subscription_calls = 0
+    paid = {"calls": 0, "priced": 0, "unpriced": False}
+    sub = {"calls": 0, "priced": 0, "unpriced": False}
+    for row in rows:
+        if not isinstance(row, dict):
+            return None
+        route = row.get("route", _jsv.MISSING)
+        if route is not _jsv.MISSING and not (isinstance(route, str) and route in USAGE_ROUTES):
+            return None
+        row_calls, cost = row.get("calls", _jsv.MISSING), row.get("costUsd", _jsv.MISSING)
+        unpriced = row.get("unpricedCalls", 0)
+        if not _whole(row_calls) or not _whole(unpriced) or unpriced > row_calls:
+            return None
+        if cost is not None and not _known_cost(cost):
+            return None
+        if row_calls > 0 and (cost is None) != (unpriced == row_calls):  # FAC-SEM-025's own pairing
+            return None
+        calls += int(row_calls)
+        side = sub if route == "subscription" else paid
+        if route == "subscription":
+            subscription_calls += int(row_calls)
+        side["calls"] += int(row_calls)
+        side["priced"] += int(row_calls) - int(unpriced)
+        if unpriced > 0:
+            side["unpriced"] = True
+        if _known_cost(cost):
+            (estimate if route == "subscription" else money).append(_jsv.double(cost))
+
+    def total(side: Dict[str, Any], costs: List[float]) -> Optional[float]:
+        if side["calls"] > 0 and side["priced"] == 0:
+            return None
+        n: Any = 0
+        for x in sorted(costs):  # in a fixed order, one addition at a time, as JavaScript's reduce adds
+            n = n + x
+        return n
+
+    return {"calls": calls, "moneyUsd": total(paid, money), "moneyLowerBound": paid["priced"] > 0 and paid["unpriced"],
+            "estimateUsd": total(sub, estimate), "estimateLowerBound": sub["priced"] > 0 and sub["unpriced"],
+            "subscriptionCalls": subscription_calls}
+
+
+def _whole(value: Any) -> bool:
+    """Number.isSafeInteger(value) and not negative."""
+    return _jsv.safe_integer(value) and value >= 0
+
+
+def _known_cost(value: Any) -> bool:
+    """A finite cost of at least 0, the number read as JavaScript holds it (an integer past the double range is
+    Infinity, never an OverflowError)."""
+    return _number(value) and math.isfinite(_jsv.double(value)) and value >= 0
+
+
+def _money(spend: Optional[Dict[str, Any]]) -> Optional[float]:
+    """CT-115: a limit counts money only, never a subscription's estimate (DEC-0110)."""
+    if spend is None or spend["moneyUsd"] is None:
+        return None
+    return round(float(spend["moneyUsd"]), 6)
+
+
 def _spent_since(receipts: List[Dict[str, Any]], start: _dt.datetime, end: _dt.datetime) -> Optional[float]:
-    """Spend in a rolling window, from the receipts' own times; None when every call in it is unpriced."""
+    """Money spent in a rolling window, from the receipts' own times; None when no call off a subscription in it is
+    priced. A subscription's calls cost no money (DEC-0110, CT-115)."""
     lo, hi = start.strftime("%Y-%m-%dT%H:%M:%SZ"), end.strftime("%Y-%m-%dT%H:%M:%SZ")
-    inside = [r for r in receipts if lo < str(r.get("at", "")) <= hi]
-    if inside and all(r.get("costUsd") is None for r in inside):
-        return None
-    return round(sum(r.get("costUsd") or 0.0 for r in inside), 6)
+    rows = []
+    for r in receipts:
+        if lo < str(r.get("at", "")) <= hi:
+            row = {"calls": 1, "unpricedCalls": 1 if r.get("costUsd") is None else 0, "costUsd": r.get("costUsd")}
+            if r.get("route"):
+                row["route"] = r["route"]
+            rows.append(row)
+    return _money(usage_spend(rows))
 
 
 def _spent_in(out_days: List[Dict[str, Any]], period: str, last: str) -> Optional[float]:
-    """Spend in the current UTC day or month; None when every call in it is unpriced."""
+    """Money spent in the current UTC day or month, over the window's model rows; None when no call off a subscription
+    in it is priced. A subscription's calls cost no money (DEC-0110, CT-115)."""
     prefix = last if period == "day" else last[:7]
-    window = [d for d in out_days if d["date"].startswith(prefix)]
-    unknown = bool(window) and all(d["costUsd"] is None for d in window)
-    return None if unknown else round(sum(d["costUsd"] or 0.0 for d in window), 6)
+    return _money(usage_spend([m for d in out_days if d["date"].startswith(prefix) for m in d["byModel"]]))
 
 
 LIMIT_SCOPES = ("machine", "project", "pool", "job")

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/kit.json

@@ -1,6 +1,6 @@
 {
  "name": "fabric-service-kit",
- "version": "0.47.0",
+ "version": "0.48.0",
  "about": "The service kit's modules in dependency order: a module imports only modules listed before it. Written by fabric_kit.py build; edit the order and layers by hand, never the digests.",
  "python": [
   {
@@ -8,7 +8,7 @@
    "file": "fabric_jsvalue.py",
    "layer": "L0",
    "imports": [],
-   "sha256": "0cd4eab0a5d6ae35d097f7c59a08dc29173cb61c561c49e5291a8dad15d36779"
+   "sha256": "ff1bbfae999fb5683e59e31189143f1c85fa9d7780040b5a6952e060a143fc18"
   },
   {
    "module": "fabric_time",
@@ -77,7 +77,7 @@
     "fabric_secrets",
     "fabric_time"
    ],
-   "sha256": "a7400a3b2498ea2b6e3a845ed438580f2bf3c4ce58854ba4ad22d7cdf6f846bc"
+   "sha256": "f493cd424dae6380d1caad91ffdca2764e51a49a6b1051a77731e3d8755277cd"
   },
   {
    "module": "fabric_delegation",
@@ -150,7 +150,7 @@
    "imports": [
     "fabric_secrets"
    ],
-   "sha256": "89babdb43468a90e4aa9df388a82dd498ae1e0ac5445ac4a1b9c225d8bc61f67"
+   "sha256": "28e693282cddff8e4396ae39ce6fa935e875e8ddac7375bea2c189dd6fb04970"
   },
   {
    "module": "fabric_connections",
@@ -184,7 +184,7 @@
     "fabric_paths",
     "fabric_time"
    ],
-   "sha256": "ce685cb9fdfd62ea75fff8b1b2be12a2ba758da783e4bfb4dcebe47bcbeb832b"
+   "sha256": "70e984ec3ff9f4ee31539df8d503f01ef8e6dd870e65e9546c0a2cb4aa040a88"
   },
   {
    "module": "fabric_backups",
@@ -277,7 +277,7 @@
     "fabric_time",
     "fabric_usage"
    ],
-   "sha256": "d411433ce6ff3e81189b10b2c1a8462335a97cd99574ab0ee7d1c28cf48e1694"
+   "sha256": "93368b68c4375dd43997e3b61b82d96743870d5481335461dc0f2d7af7ff3a67"
   },
   {
    "module": "fabric_profiles",
@@ -473,7 +473,7 @@
     "fabric-secrets",
     "fabric-time"
    ],
-   "sha256": "c4784b0f73d06baaa5f8d104eb33ec21bf5433abfbaed046f24f1d07cf78c782"
+   "sha256": "b6610aaad9d00d8a7f42955627fb81725950841455bcedfc050abb0e079f0f93"
   },
   {
    "module": "fabric-delegation",
@@ -544,7 +544,7 @@
    "imports": [
     "fabric-secrets"
    ],
-   "sha256": "b1fcf14ef1e4f2215111d9fdc89ff5bda3ce2a49aefcd2788feb5a1c12463cbf"
+   "sha256": "dc039ec3612d0090c9ba6a3a949b0b7df54712bead300dcb6cc8b9bc305cd183"
   },
   {
    "module": "fabric-connections",
@@ -578,7 +578,7 @@
     "fabric-paths",
     "fabric-time"
    ],
-   "sha256": "e413569620bbc8221bc59e24b27e22d1483825ed18457801ed58d54a57de8114"
+   "sha256": "1c4d18004639409624ac3516a02f2b60bbf55abdb612e9a96c37e83666eb87a7"
   },
   {
    "module": "fabric-backups",
@@ -671,7 +671,7 @@
     "fabric-supervisors",
     "fabric-usage"
    ],
-   "sha256": "bc67550e52aa6aa9c6d2ed6cbae52418a3e836623e17164166699f953d8aafa8"
+   "sha256": "1b4639a10c530c1241d317c5e9cf3a10cd96e5d9af8b29fc1b1844de5c63bfec"
   },
   {
    "module": "fabric-profiles",
@@ -2495,6 +2495,158 @@
    "fabric-openrouter.mjs": "f8f0168691f968b7cd85f36aa98e2167e88cc44f1104ff514fd0c7699b339253",
    "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
    "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
+  },
+  "0.47.1": {
+   "fabric_jsvalue.py": "ff1bbfae999fb5683e59e31189143f1c85fa9d7780040b5a6952e060a143fc18",
+   "fabric_time.py": "588f383da4ac6a243ea95b6ffc3a0aa99ca94245732dc4937734f190b7af4ae9",
+   "fabric_identifiers.py": "0fd814d521ac3aa39907458265870753046a73f48af3d8581ab864b93b211607",
+   "fabric_secrets.py": "68a0b5e9e90c468ec9ac67b2f0fd1848e08813d6ec1ec14a2a47337eb1a98911",
+   "fabric_crypto.py": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa",
+   "fabric_base.py": "f62bcc2ed9912660fa875d27a09f60867260cc4925f79873501fd9620be59611",
+   "fabric_platform.py": "a9350dff55ef0fb3a23cdb4d0320a15868b15a8deb10d2eb74d72c58740c284b",
+   "fabric_paths.py": "6c92af34292baddf7e10d3134d0a5b0bb23387741812a9f79c409cf1628bad23",
+   "fabric_estate.py": "d242bc4bccda94f91bf50ba03620f8dc8ade0060bfd87c6f6d704bd0657d7a2b",
+   "fabric_delegation.py": "6638a6039befe3b43f59018bab292e050931af21b544df1044cd5059572ded36",
+   "fabric_share.py": "78506fe1a60829c525dbf6266a0aa0749a2164290ed94da8249a20b4e9be5605",
+   "fabric_ceremonies.py": "a59e83cf4adb2669a9b98008e3d3a0cba991a35cbff97bc604fc82fe81cfd49f",
+   "fabric_package_schema.py": "e623f0408d38e3343ed66222fb812907c6c52e1a286eb1c1176ab2e64640c9ad",
+   "fabric_package.py": "ff533f1b3f92b4ea0f532fcec50b68c610d47549930eef8ad5247692a64dfb3c",
+   "fabric_protocols.py": "89babdb43468a90e4aa9df388a82dd498ae1e0ac5445ac4a1b9c225d8bc61f67",
+   "fabric_connections.py": "77d3ccf863c70e9209d21ef45c46a6db9c06237019bc20d54f8d3946873f3f11",
+   "fabric_lock.py": "ba2399d2137c7a7791b7133b9db9cca36693f4eb7e30955b25a75ade814e95ba",
+   "fabric_usage.py": "ce685cb9fdfd62ea75fff8b1b2be12a2ba758da783e4bfb4dcebe47bcbeb832b",
+   "fabric_backups.py": "02dc5eb66ec956723d3ddba07b6dd15f6a9726d901f4d60edfd02eee57880ceb",
+   "fabric_descriptor.py": "daf16f95b1810283b1386488e006e940a0cdfa5c3c8d09386ac33d29d58df78d",
+   "fabric_auth.py": "55794587750f6c9f40935b74295d83d7096cb4b26a0b36ac292334cd87d8f853",
+   "fabric_events.py": "0086886c2c29dbd5c9d152be9d375c5bdf4a29f89b8095baff8490c2bcd64e47",
+   "fabric_logs.py": "86dc55bfafa2a57264722e2403510a249b95de0e4a722b2e4bc3948e3bd93da9",
+   "fabric_supervisors.py": "a2dbf15aa1c4eb9de42996b413103fa4814afd2e4e66d1ab7315f30e06ab6841",
+   "fabric_service.py": "d411433ce6ff3e81189b10b2c1a8462335a97cd99574ab0ee7d1c28cf48e1694",
+   "fabric_profiles.py": "26e21ec29c016000f8ca8053b7b489184854a73be1b7fdc0a18d12990203db9b",
+   "fabric_interop_rules.py": "b5f0ecb1791b4c50c5ac151f987f692ed7001bc74841a8a161125ec775145e09",
+   "fabric_interop.py": "f92fa111328fe3811438f733d8f0eb5295e6941c774123a78e26318bdcb35fc3",
+   "fabric_hub.py": "b9ac852e601b1d54cf61351677a628afc69faeed7d1fc74ebe541c1cf38e0c2a",
+   "fabric_board_shapes.py": "0a0e8d3d40e33dfd8c457aedb85330b2ff25f8c49a33eb6cbd5a5cc8a5007f7e",
+   "fabric_board_link.py": "b5bff994cb615c6a4bb0d88d020e3a59504166180e1fa1aea3be93224f2aeccb",
+   "fabric_board_session.py": "2271834c36c23f6bfa50395cd147e6af99f294ef09325fd15f0759ca8e18d941",
+   "fabric_board_fixture.py": "69761ce205ec640762ec9b591c6903e5a87f844e8d423b041681924027e39d1e",
+   "fabric_board.py": "0f075894b3e352194fcaf3fc7d08dee4e9f1c215e859769ed85fa5010e4a1599",
+   "fabric_http.py": "5d7f72af3a73fdbe8c1f487ecf60cef23a7c46289eba542b03aff4706b8218d4",
+   "fabric_openrouter.py": "2017d898c17001d7275f58267de653be7ecf6acd17ad8d9b24ecb7a43e5617d4",
+   "fabric-jsvalue.mjs": "dfbdb8c41584972c9389750a41719374a1cfc5652ed438dd1623025190b0106e",
+   "fabric-time.mjs": "3ff932069038a720df1c68c6492976906737b2e67e5c12d9c81c418597f661de",
+   "fabric-identifiers.mjs": "a18c2a501a4aa170bfd3d99e571ad6b7662649b4d3b9d2a540c002ea42811bbf",
+   "fabric-secrets.mjs": "6ad8ab18ac899ecc2384e8ec6a3fb689b92be3b9a5ce3a59b92a37d52da5d766",
+   "fabric-crypto.mjs": "038e03689701e3c9721a1e7f8e0a4d02a52d6a5d1661b0dc84035edc3ebbfcf6",
+   "fabric-base.mjs": "7804b2df7715dbbf9702a9b61b6b8cef2110f9a52b04cabd8fb0a66458d87512",
+   "fabric-platform.mjs": "a8119d95ebba4d589a9e401f5d6fc8dda62d59d44e4c1ff811d97fac3771ac0c",
+   "fabric-paths.mjs": "2201b4ed7126f260931b63e8386377b4317d8dcad419d109bf22c683e44b7f29",
+   "fabric-estate.mjs": "c4784b0f73d06baaa5f8d104eb33ec21bf5433abfbaed046f24f1d07cf78c782",
+   "fabric-delegation.mjs": "dafde9ea327c88d92dc73d1400282b43dc6f84dd345a2d2b9b154304f65fc9d7",
+   "fabric-share.mjs": "d40a7405d7bd4c3213ed691330b7549afe8e023db0753b582e249714e672010d",
+   "fabric-ceremonies.mjs": "117d4374c9e95c930a38de7adbd4323774798f4fe6ec6f24afcd6f2c7298ca44",
+   "fabric-package-schema.mjs": "cd28092375db0fc21ffab1f0bb7794f7f8979ee08c64d3b9faf4b3845357caa6",
+   "fabric-package.mjs": "49b757eefcc50e4c91585d5a5694bf3c83d0b03d112c1837f1c9f01466797ab5",
+   "fabric-protocols.mjs": "b1fcf14ef1e4f2215111d9fdc89ff5bda3ce2a49aefcd2788feb5a1c12463cbf",
+   "fabric-connections.mjs": "303432e547ce563e90ca9ffcd827f5612f51d3582929834e1add0fdaf6485dcc",
+   "fabric-lock.mjs": "ac219ab0a326d5c43c7c4c255e0c3843d4794de795a60e3af661e7d5350ea052",
+   "fabric-usage.mjs": "e413569620bbc8221bc59e24b27e22d1483825ed18457801ed58d54a57de8114",
+   "fabric-backups.mjs": "849acdc6eba0fff648c8158e61f6b68cccd7bedf0880f7d5ec03a6a20f1e7005",
+   "fabric-descriptor.mjs": "95c0b7ff36c29d7c748f1fa6fb1767d6fe8c97fca7f1ee404559930abbd3cc84",
+   "fabric-auth.mjs": "3ea6796470fcd829bc72a772fb7e4c37532a09d1e37ff41592dcf1a1a3074ca2",
+   "fabric-events.mjs": "c463d6ffcae24229a5c608d8fcea4268d2ccc5024b19fa10e5a452284068fa71",
+   "fabric-logs.mjs": "58467e5719c16e099d05bbedec47a95712506ab03c33f3cd4be1252e8498a946",
+   "fabric-supervisors.mjs": "9d61c1a17538a5e2453e33e5ae347337336748041bc054478a96dd51f3d4fc51",
+   "fabric-service.mjs": "bc67550e52aa6aa9c6d2ed6cbae52418a3e836623e17164166699f953d8aafa8",
+   "fabric-profiles.mjs": "314376cf2deb87f235fb18b11d3b532e211f585b9af0a9302b5f4cc39971b532",
+   "fabric-interop-rules.mjs": "57a8081307956e8c381119b361fa5232a7bf791815be8e3541eb5492820e2ea5",
+   "fabric-interop.mjs": "581983ec3e197e5c2340ad25e8468320c69a2459c90097c7fcf2699766b4fb26",
+   "fabric-hub.mjs": "c005115a864cfd67daa4862097bb14acfe5a60bf653897e5bf8a570dd80f1070",
+   "fabric-board-shapes.mjs": "c1db7b7bd0d58d82bb6d8dfbc3cd1547a256a333052d367e82ff1b3edf2804d7",
+   "fabric-board-link.mjs": "4cd6d4e21713a38c8e56f7d59db3148638b8c27c08e774d96a0f6283c6049e0a",
+   "fabric-board-session.mjs": "e9eefb5d34dc66f6d6b528a9c9e85960fd884e6ea5e179c26cbfe3c054ccf7bc",
+   "fabric-board-fixture.mjs": "83c4b7e33ee47b68385faf2569d38d5c8a0c5cb0f8656090f41e1b0eed2f436e",
+   "fabric-board.mjs": "9e7bfe4d412521982224ef12bebfc2ff255eeeaf8d96cf40234ac18de68e7a59",
+   "fabric-http.mjs": "f886bcb49c4353d039387ac9568738dda26697a94dd07fc6a6204500f0bc27bf",
+   "fabric-openrouter.mjs": "f8f0168691f968b7cd85f36aa98e2167e88cc44f1104ff514fd0c7699b339253",
+   "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
+   "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
+  },
+  "0.48.0": {
+   "fabric_jsvalue.py": "ff1bbfae999fb5683e59e31189143f1c85fa9d7780040b5a6952e060a143fc18",
+   "fabric_time.py": "588f383da4ac6a243ea95b6ffc3a0aa99ca94245732dc4937734f190b7af4ae9",
+   "fabric_identifiers.py": "0fd814d521ac3aa39907458265870753046a73f48af3d8581ab864b93b211607",
+   "fabric_secrets.py": "68a0b5e9e90c468ec9ac67b2f0fd1848e08813d6ec1ec14a2a47337eb1a98911",
+   "fabric_crypto.py": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa",
+   "fabric_base.py": "f62bcc2ed9912660fa875d27a09f60867260cc4925f79873501fd9620be59611",
+   "fabric_platform.py": "a9350dff55ef0fb3a23cdb4d0320a15868b15a8deb10d2eb74d72c58740c284b",
+   "fabric_paths.py": "6c92af34292baddf7e10d3134d0a5b0bb23387741812a9f79c409cf1628bad23",
+   "fabric_estate.py": "f493cd424dae6380d1caad91ffdca2764e51a49a6b1051a77731e3d8755277cd",
+   "fabric_delegation.py": "6638a6039befe3b43f59018bab292e050931af21b544df1044cd5059572ded36",
+   "fabric_share.py": "78506fe1a60829c525dbf6266a0aa0749a2164290ed94da8249a20b4e9be5605",
+   "fabric_ceremonies.py": "a59e83cf4adb2669a9b98008e3d3a0cba991a35cbff97bc604fc82fe81cfd49f",
+   "fabric_package_schema.py": "e623f0408d38e3343ed66222fb812907c6c52e1a286eb1c1176ab2e64640c9ad",
+   "fabric_package.py": "ff533f1b3f92b4ea0f532fcec50b68c610d47549930eef8ad5247692a64dfb3c",
+   "fabric_protocols.py": "28e693282cddff8e4396ae39ce6fa935e875e8ddac7375bea2c189dd6fb04970",
+   "fabric_connections.py": "77d3ccf863c70e9209d21ef45c46a6db9c06237019bc20d54f8d3946873f3f11",
+   "fabric_lock.py": "ba2399d2137c7a7791b7133b9db9cca36693f4eb7e30955b25a75ade814e95ba",
+   "fabric_usage.py": "70e984ec3ff9f4ee31539df8d503f01ef8e6dd870e65e9546c0a2cb4aa040a88",
+   "fabric_backups.py": "02dc5eb66ec956723d3ddba07b6dd15f6a9726d901f4d60edfd02eee57880ceb",
+   "fabric_descriptor.py": "daf16f95b1810283b1386488e006e940a0cdfa5c3c8d09386ac33d29d58df78d",
+   "fabric_auth.py": "55794587750f6c9f40935b74295d83d7096cb4b26a0b36ac292334cd87d8f853",
+   "fabric_events.py": "0086886c2c29dbd5c9d152be9d375c5bdf4a29f89b8095baff8490c2bcd64e47",
+   "fabric_logs.py": "86dc55bfafa2a57264722e2403510a249b95de0e4a722b2e4bc3948e3bd93da9",
+   "fabric_supervisors.py": "a2dbf15aa1c4eb9de42996b413103fa4814afd2e4e66d1ab7315f30e06ab6841",
+   "fabric_service.py": "93368b68c4375dd43997e3b61b82d96743870d5481335461dc0f2d7af7ff3a67",
+   "fabric_profiles.py": "26e21ec29c016000f8ca8053b7b489184854a73be1b7fdc0a18d12990203db9b",
+   "fabric_interop_rules.py": "b5f0ecb1791b4c50c5ac151f987f692ed7001bc74841a8a161125ec775145e09",
+   "fabric_interop.py": "f92fa111328fe3811438f733d8f0eb5295e6941c774123a78e26318bdcb35fc3",
+   "fabric_hub.py": "b9ac852e601b1d54cf61351677a628afc69faeed7d1fc74ebe541c1cf38e0c2a",
+   "fabric_board_shapes.py": "0a0e8d3d40e33dfd8c457aedb85330b2ff25f8c49a33eb6cbd5a5cc8a5007f7e",
+   "fabric_board_link.py": "b5bff994cb615c6a4bb0d88d020e3a59504166180e1fa1aea3be93224f2aeccb",
+   "fabric_board_session.py": "2271834c36c23f6bfa50395cd147e6af99f294ef09325fd15f0759ca8e18d941",
+   "fabric_board_fixture.py": "69761ce205ec640762ec9b591c6903e5a87f844e8d423b041681924027e39d1e",
+   "fabric_board.py": "0f075894b3e352194fcaf3fc7d08dee4e9f1c215e859769ed85fa5010e4a1599",
+   "fabric_http.py": "5d7f72af3a73fdbe8c1f487ecf60cef23a7c46289eba542b03aff4706b8218d4",
+   "fabric_openrouter.py": "2017d898c17001d7275f58267de653be7ecf6acd17ad8d9b24ecb7a43e5617d4",
+   "fabric-jsvalue.mjs": "dfbdb8c41584972c9389750a41719374a1cfc5652ed438dd1623025190b0106e",
+   "fabric-time.mjs": "3ff932069038a720df1c68c6492976906737b2e67e5c12d9c81c418597f661de",
+   "fabric-identifiers.mjs": "a18c2a501a4aa170bfd3d99e571ad6b7662649b4d3b9d2a540c002ea42811bbf",
+   "fabric-secrets.mjs": "6ad8ab18ac899ecc2384e8ec6a3fb689b92be3b9a5ce3a59b92a37d52da5d766",
+   "fabric-crypto.mjs": "038e03689701e3c9721a1e7f8e0a4d02a52d6a5d1661b0dc84035edc3ebbfcf6",
+   "fabric-base.mjs": "7804b2df7715dbbf9702a9b61b6b8cef2110f9a52b04cabd8fb0a66458d87512",
+   "fabric-platform.mjs": "a8119d95ebba4d589a9e401f5d6fc8dda62d59d44e4c1ff811d97fac3771ac0c",
+   "fabric-paths.mjs": "2201b4ed7126f260931b63e8386377b4317d8dcad419d109bf22c683e44b7f29",
+   "fabric-estate.mjs": "b6610aaad9d00d8a7f42955627fb81725950841455bcedfc050abb0e079f0f93",
+   "fabric-delegation.mjs": "dafde9ea327c88d92dc73d1400282b43dc6f84dd345a2d2b9b154304f65fc9d7",
+   "fabric-share.mjs": "d40a7405d7bd4c3213ed691330b7549afe8e023db0753b582e249714e672010d",
+   "fabric-ceremonies.mjs": "117d4374c9e95c930a38de7adbd4323774798f4fe6ec6f24afcd6f2c7298ca44",
+   "fabric-package-schema.mjs": "cd28092375db0fc21ffab1f0bb7794f7f8979ee08c64d3b9faf4b3845357caa6",
+   "fabric-package.mjs": "49b757eefcc50e4c91585d5a5694bf3c83d0b03d112c1837f1c9f01466797ab5",
+   "fabric-protocols.mjs": "dc039ec3612d0090c9ba6a3a949b0b7df54712bead300dcb6cc8b9bc305cd183",
+   "fabric-connections.mjs": "303432e547ce563e90ca9ffcd827f5612f51d3582929834e1add0fdaf6485dcc",
+   "fabric-lock.mjs": "ac219ab0a326d5c43c7c4c255e0c3843d4794de795a60e3af661e7d5350ea052",
+   "fabric-usage.mjs": "1c4d18004639409624ac3516a02f2b60bbf55abdb612e9a96c37e83666eb87a7",
+   "fabric-backups.mjs": "849acdc6eba0fff648c8158e61f6b68cccd7bedf0880f7d5ec03a6a20f1e7005",
+   "fabric-descriptor.mjs": "95c0b7ff36c29d7c748f1fa6fb1767d6fe8c97fca7f1ee404559930abbd3cc84",
+   "fabric-auth.mjs": "3ea6796470fcd829bc72a772fb7e4c37532a09d1e37ff41592dcf1a1a3074ca2",
+   "fabric-events.mjs": "c463d6ffcae24229a5c608d8fcea4268d2ccc5024b19fa10e5a452284068fa71",
+   "fabric-logs.mjs": "58467e5719c16e099d05bbedec47a95712506ab03c33f3cd4be1252e8498a946",
+   "fabric-supervisors.mjs": "9d61c1a17538a5e2453e33e5ae347337336748041bc054478a96dd51f3d4fc51",
+   "fabric-service.mjs": "1b4639a10c530c1241d317c5e9cf3a10cd96e5d9af8b29fc1b1844de5c63bfec",
+   "fabric-profiles.mjs": "314376cf2deb87f235fb18b11d3b532e211f585b9af0a9302b5f4cc39971b532",
+   "fabric-interop-rules.mjs": "57a8081307956e8c381119b361fa5232a7bf791815be8e3541eb5492820e2ea5",
+   "fabric-interop.mjs": "581983ec3e197e5c2340ad25e8468320c69a2459c90097c7fcf2699766b4fb26",
+   "fabric-hub.mjs": "c005115a864cfd67daa4862097bb14acfe5a60bf653897e5bf8a570dd80f1070",
+   "fabric-board-shapes.mjs": "c1db7b7bd0d58d82bb6d8dfbc3cd1547a256a333052d367e82ff1b3edf2804d7",
+   "fabric-board-link.mjs": "4cd6d4e21713a38c8e56f7d59db3148638b8c27c08e774d96a0f6283c6049e0a",
+   "fabric-board-session.mjs": "e9eefb5d34dc66f6d6b528a9c9e85960fd884e6ea5e179c26cbfe3c054ccf7bc",
+   "fabric-board-fixture.mjs": "83c4b7e33ee47b68385faf2569d38d5c8a0c5cb0f8656090f41e1b0eed2f436e",
+   "fabric-board.mjs": "9e7bfe4d412521982224ef12bebfc2ff255eeeaf8d96cf40234ac18de68e7a59",
+   "fabric-http.mjs": "f886bcb49c4353d039387ac9568738dda26697a94dd07fc6a6204500f0bc27bf",
+   "fabric-openrouter.mjs": "f8f0168691f968b7cd85f36aa98e2167e88cc44f1104ff514fd0c7699b339253",
+   "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
+   "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
   }
  },
  "data": {

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -5,9 +5,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.47.0"
+  version: "0.48.0"
   contract-version: "0.1.0"
-  contract-commit: "87d384ffce2757081b7ab227e5dad3dddd08328f"
+  contract-commit: "2f020a696453ae299b123517f14957f6a1354379"
 ---
 
 # Creating Fabric-compatible agents
@@ -136,7 +136,7 @@ python3 <plugin-dir>/skills/adapting-projects-to-fabric/scripts/adapt_project.py
 The effect class is declared, never defaulted: ask the author what the agent does outside itself when the request
 does not say. Cost presets are only for a run whose cost varies; their amounts come from the author or measured runs.
 
-Pin exactly contract `0.1.0` at commit `87d384ffce2757081b7ab227e5dad3dddd08328f` and
+Pin exactly contract `0.1.0` at commit `2f020a696453ae299b123517f14957f6a1354379` and
 read the pinned guide before implementing protocol details. If this skill is installed
 without its sibling, the scaffolder is absent: create the bundle by hand from the pinned
 contract's `docs/guides/connecting-compatible-agents.md` and mark the structural check

package/plugins/fabric-agent-adapter/skills/working-with-fabric/SKILL.md

@@ -19,7 +19,7 @@ compatibility: >-
   this plugin; Codex/Kimi use command hooks; Hermes/OpenCode/OpenClaw/Pi use native context plugins after opt-in.
 metadata:
   author: PassionCode.ai
-  version: "0.47.0"
+  version: "0.48.0"
 ---
 
 # Working with Fabric

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session_env.py

@@ -57,7 +57,7 @@ SESSION_ID = re.compile(r"[A-Za-z0-9._:-]{1,128}")
 LOOPBACK_ORIGIN = re.compile(r"http://127\.0\.0\.1:(\d{1,5})")
 
 
-VERSION = "0.47.0"
+VERSION = "0.48.0"
 
 
 HOSTS = {"claude": "Claude Code", "codex": "Codex", "kimi": "Kimi Code",