@passioncode-ai/fabric-agent-adapter 0.48.3 → 0.49.1

package/CHANGELOG.md

@@ -1,5 +1,74 @@
 # Changelog
 
+## 0.49.1 (2026-10-24)
+
+### Fixed
+
+- **The Python estate kit matches every membership as the contract does** (FAA-113, from the 0.49.0 seam reading).
+  The contract keeps machine ids, passkeys, publisher keys, grants and revocations in a `Set`, or tests them with
+  `includes`; both match NaN with NaN. Fifteen lookups in `fabric_estate.py` used `===`-style matching, so a record a
+  Python caller builds with a NaN id was read differently from the Node twin: a NaN id listed twice passed, and a
+  secret from a NaN machine was flagged as coming from outside the estate. They now use `set_has`. No JSON the kit
+  loads carries NaN (`parse_constant` refuses it), so a service reading records from JSON saw no difference.
+
+### Tests
+
+- FAC-SEM-137 on the verify path (FAA-112): six `verify` vectors vary the delta anchor on the contract's EdDSA
+  revision 2, re-signed with the vectors' test seed and answered by the contract's `verifyEstateRecord`.
+- The board restart cases wait on their condition, not a fixed 20 ms (FAA-114).
+
+## 0.49.0 (2026-10-24)
+
+The operator's sweep (FAA-111): blind seam and product readings of 0.47.0 to 0.48.3, their findings fixed, documented
+or filed ([dispositions](docs/evidence/reports/2026-10-24-faa-111-tiers/README.md)), and three open rows closed.
+
+### Changed
+
+- **The session start says less in a folder that does not use Fabric** (FAA-60). The plugin's `SessionStart` hook
+  printed the whole Fabric preamble (about 900 characters) in every session wherever `fabric` was registered, a project
+  Fabric never served included. It now prints the preamble only where `project_uses_fabric` finds a sign (a contract
+  file up to the checkout root, a project-scope registration, a service descriptor naming the checkout's origin), and
+  elsewhere one line that points at `fabric_whoami`, so a project Fabric serves without a contract file still finds it.
+- **`watch-mail` delivers the turns the hooks spooled** (FAA-89). A look that finds spooled turns runs the worker's own
+  `deliver` (one rejoin that reports the turns and reads the unread count) instead of a second rejoin beside them, so
+  the once-a-minute budget no longer holds a turn back while an agent waits on the board. The count it reads must be a
+  whole number of zero or more, and a look that delivered the session's end says the session ended.
+- **The trigger descriptions of three skills name their boundaries** (FAA-88): `building-fabric-services`,
+  `creating-fabric-agents` and `working-with-fabric`, after their first trigger evals against a real client
+  ([report](docs/evidence/evals/2026-10-24-trigger-run.md): 26/26, 44/45, 38/39 with Claude Code 2.1.299 and haiku).
+- **`fabric_kit.py build` refuses to rewrite a released version's digests**: when `kit.json`'s `"version"` already has
+  a release tag and the sources differ, it stops and says to move the version first (the mistake happened three times).
+
+### Fixed
+
+- **A resumed board handler ran twice** (a regression of 0.48.2). FAA-86 kept a resumed request first in the queue
+  until its resume returned; a handler that finished inside the resume (a synchronous `spawn`, the kit's fixture among
+  them) settled, the settle resumed the queue again and found the same request still first, so it ran the handler and
+  sent `com.effect_begin` a second time. Both twins now take the request off before resuming it and put it back first
+  only when the resume raises and no effect has begun (a request whose effect began waits for reconcile), which keeps
+  FAA-86's behaviour.
+- **The OpenRouter ceiling counts money only** (DEC-0110). `Client.spent_usd` / `spentUsd` and `totals()` counted a
+  `subscription` receipt's cost in a shared ledger as spent, while the usage report has counted money only since 0.48.0.
+  A `subscription` receipt is now never money; `totals()` answers `spentUsd: 0` when every call was on a subscription
+  or there was no call.
+- **The network guards no longer pass a 403 that carries the well-known document.** `guard_verdict` passed any 403;
+  a 403 whose JSON body holds the document or a part of it now fails, judged by the same shape as the no-token check.
+- **The no-token check reads the document by its shape** (D4 of FAA-111). A proxy's JSON error with a `service` string
+  of its own failed as "the well-known document"; only a `protocol` of the extension, a `service` object with an `id` or
+  a `process` object with a `pid` counts. `references/remote-placement.md` lists the two false FAILs that remain.
+
+### Documentation
+
+- `references/usage.md`: a service built with a kit older than 0.48.0 counts a subscription's estimate until it
+  re-vendors `fabric_usage`; a self-stated `spentUsd` on the twin of `budget` must match the receipts or the report is
+  refused; a counted `null` means unknown. `references/profiles.md` and `references/protocol.md`: a `subscription`
+  row's cost is an estimate, and `platform-metered` is a route.
+- Probe order on a remote placement: `auth.token-file` now comes before `well-known.requires-token` (since 0.48.0); a
+  reader that indexes the results by position should read them by rule id.
+- `test/validate.py` scans the recipes' README for em dashes. The FAA-107 and FAA-84 backlog rows are corrected.
+- Filed from the seam reading: FAA-112 (FAC-SEM-137 has no verify-path vectors) and FAA-113 (the remaining Python
+  estate lookups that mirror a Node `Set`).
+
 ## 0.48.3 (2026-10-24)
 
 ### Fixed

package/README.md

@@ -34,7 +34,8 @@ python3 plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_s
 ```
 
 In Claude Code the plugin adds four session hooks: SessionStart (at startup and `/clear`, never on compact or
-resume) puts that preamble into the session when the MCP server `fabric` is registered and Fabric runs; when Fabric
+resume) puts that preamble into the session when the MCP server `fabric` is registered, Fabric runs and the project
+uses Fabric (one line pointing at `fabric_whoami` in a folder with no sign of it); when Fabric
 is down it adds one line (skip `fabric_whoami`, start Fabric through the broker if the task needs it), and only in a
 project that uses Fabric; Stop records each turn's facts (HEAD, files changed, lines added and removed, never content)
 and the board's unread count; UserPromptSubmit adds one line only when that count rose; SessionEnd releases what the

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/fabric-agent-adapter",
-  "version": "0.48.3",
+  "version": "0.49.1",
   "description": "Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.",
   "scripts": {
     "test": "python3 test/validate.py && python3 -m unittest discover -s test -q && node --test 'test/*.test.mjs'"

package/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks.",
-  "version": "0.48.3",
+  "version": "0.49.1",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -5,7 +5,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.48.3"
+  version: "0.49.1"
   contract-version: "0.1.0"
   contract-commit: "2f020a696453ae299b123517f14957f6a1354379"
 ---

package/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -1,20 +1,20 @@
 ---
 name: building-fabric-services
 description: >-
-  Use when running an agent as a Fabric service (fabric-service/0.1, its kits and probe): a local
-  service (launchd, systemd, Windows), an ONLINE agent or dashboard on https, its dashboard link,
-  spend report, answering a Project's board requests, or packing and signing it. «сделай агенту
-  дашборд», «локальный сервис агента», «подключи агента к Fabric Dashboards», «отвечать на запросы с
-  доски проекта», «расходы агента на модели», "make this agent a local service", "make an online dashboard a Fabric service",
-  "add the well-known endpoint". NOT for a one-off script or cron job, a hosted product with no
-  agent, the provider manifest (adapting-projects-to-fabric), a new agent's design
-  (creating-fabric-agents), a session using Fabric or its board (working-with-fabric), or building
-  Fabric Dashboards.
+  Use when running an agent as a Fabric service (fabric-service/0.1, its kits and probe): a local service (launchd,
+  systemd, Windows), an ONLINE agent or dashboard on https, its dashboard link and kit (narrow panel, themes), data
+  and cache paths, how callers reach and authenticate it, long jobs (fabric.job.*), spend report and limits, runner
+  routes and model profiles, the estate record and delegation tokens, answering a Project's board requests, or packing
+  and signing it. «сделай агенту дашборд», «локальный сервис агента», «подключи агента к Fabric Dashboards», «отвечать
+  на запросы с доски проекта», «расходы агента на модели», "make this agent a local service", "make an online
+  dashboard a Fabric service", "add the well-known endpoint". NOT for a one-off script or cron job, a hosted product
+  with no agent, the provider manifest (adapting-projects-to-fabric), a new agent's design (creating-fabric-agents), a
+  session using Fabric or its board (working-with-fabric), or building the Dashboards app (window, tray).
 license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Python 3.9+ or Node.js 20+ for the kits (Node.js 22+ for a Linux service's instance lock); the probe needs Python 3.9+. launchd steps are macOS-only; Linux services install a systemd user unit and Windows ones a per-user Scheduled Task with the kits' writers. Dashboard handoff optionally uses Fabric Dashboards MCP link/host_status/open; without it, report unresolved host capability. The contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.48.3"
+  version: "0.49.1"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
   extension-commit: "2f020a696453ae299b123517f14957f6a1354379"

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/kit-modules.md

@@ -25,7 +25,7 @@ python3 $K/fabric_kit.py install <service-dir> --lang node          # fabric-ser
 python3 $K/fabric_kit.py install <service-dir> --module fabric_openrouter --module fabric_board
 python3 $K/fabric_kit.py install <service-dir> --all --dry-run      # every module, nothing written
 python3 $K/fabric_kit.py status <service-dir> [--json]              # current, older (the release), modified, missing
-python3 $K/fabric_kit.py build [--check]                            # maintainers: refresh kit.json from the sources
+python3 $K/fabric_kit.py build [--check]                            # maintainers: refresh kit.json from the sources (refuses a tagged version)
 ```
 
 - `install` copies the closure of the named modules and nothing else. It refuses to overwrite a file it does not

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/profiles.md

@@ -110,4 +110,6 @@ A probe result in an event is one of `PROBE_RESULTS`; a host never appends a run
 ## Usage by route
 
 `make_usage_receipt(..., route="subscription"|"key")` records how the call was paid: the operator's own login in its
-vendor's runner, or an issued key. The usage report keeps the rows of one model on two routes apart.
+vendor's runner, or an issued key. The usage report keeps the rows of one model on two routes apart. A subscription
+row's `costUsd` is an estimate at list price, never money spent: a limit's `spentUsd` leaves it out (DEC-0110,
+[usage](usage.md)).

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/protocol.md

@@ -84,7 +84,7 @@ No auth; the Host/Origin guard applies; answered from memory in under 100 ms.
   (a key not entered, a model not chosen). It is not an outage, and a watcher does not alert on it. The kits pass
   entries through unchanged.
 - `configuration` (DEC-0046) MAY say which runner and model profile the service resolved and from where
-  (`request`, `agent`, `binding`, `estate`); a usage receipt MAY carry the `route` (`subscription` or `key`). The kits
+  (`request`, `agent`, `binding`, `estate`); a usage receipt MAY carry the `route` (`subscription`, `key` or `platform-metered`; a `subscription` row's cost is an estimate, never money, DEC-0110). The kits
   build both: `fabric_profiles.configuration` and `make_usage_receipt(route=)` ([profiles](profiles.md)).
 - `build` needs `commit` or `digest` (`sha256:<64 hex>`).
 - `summary`: at most six tiles; `attention: true` counts toward the host's badge.

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/remote-placement.md

@@ -62,17 +62,20 @@ watch the gate fail.
 (Heroku, Fly, Render, a CDN) a request that names a foreign `Host` never reaches the process: the
 router answers it, usually `404` or `421`. The probe counts that as the refusal it is, as long as
 the body is not the well-known document. The Origin and cross-site checks name the right `Host`,
-reach the service, and still need its own `403`.
+reach the service, and still need its own `403`. No refusal carries the document: a `403` whose JSON body
+holds the document or a part of it (the shapes below) fails (FAA-111).
 
 Without the token the well-known route answers `401` with none of the service's data (DEC-0109). The kit's server
 answers it with an empty body. An identity proxy in front of the service (Cloudflare Access, for one) may answer that
 `401` with its own sign-in page: `well-known.requires-token` passes it when the page neither parses as the well-known
 document nor names the service's identity values (its id, `id.instance`, build, or pid, as whole words). The probe
 takes the service's own host name out first, because a sign-in page names the address it guards, and does not look for
-a value shorter than four characters, because a platform's pid is often `1`. A copy of the document anywhere inside a JSON body
-fails, however short the id. One false FAIL remains possible: when the document was read, a proxy page that happens to
-contain the service's pid as a whole number (an inline script's constant, say) fails the rule; the evidence names the
-value it found.
+a value shorter than four characters, because a platform's pid is often `1`. A copy of the document, or of its parts,
+anywhere inside a JSON body fails, however short the id: an object whose `protocol` is the extension's, a `service`
+object with an `id`, a `process` object with a `pid`. A proxy's own JSON error with a `service` string passes. Two false
+FAILs remain possible, and the evidence names the value it found: a proxy page that names the service's id or
+`id.instance` (an application the proxy titles after the service), and, when the document was read, a page that happens
+to contain the service's pid as a whole number (an inline script's constant, say).
 
 ## What a host does and will not do
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/usage.md

@@ -82,8 +82,15 @@ ledger.report(service_id=ID, budget={"period": "month", "limitUsd": 100}, budget
   a `subscription` route's `costUsd` is an estimate at list price, never spent money, so a window
   spent only on a subscription spends `0`, and money is `null` only while no call off a subscription
   is priced. `usage_spend(rows)` / `usageSpend(rows)` is the contract's `usageSpend` over
-  `days[].byModel[]` rows: money and the subscription's estimate apart. A per-order limit
-  (`per_job`, `approval`) gets `spentUsd: null`. Every other limit states its own spend.
+  `days[].byModel[]` rows: money and the subscription's estimate apart. A day's `costUsd` still sums every
+  route, so beside a subscription it is larger than the limit's `spentUsd`. A service built with a kit older than
+  0.48.0 keeps counting the estimate as spent until it re-vendors `fabric_usage`
+  (`fabric_kit.py install <dir> --module fabric_usage`, or `--lang node --module fabric-usage`). A per-order limit
+  (`per_job`, `approval`) gets `spentUsd: null`. Every other limit states its own spend. The machine twin of
+  `budget` may leave `spentUsd` out (the kit counts it) or state the same number the receipts give; a different
+  number makes the twins disagree, and the report is refused (`FAC-SEM-031`). A counted `spentUsd` of `null` means
+  unknown, never zero: no call off a subscription in the window is priced, or one receipt in it names a `route` the
+  contract does not know or a cost its schema refuses, and then the whole window is unknown rather than guessed.
 - `scope` is `machine`, `project`, `pool` or `job`; a `project` or `pool` limit names its
   `subject`. A limit has at most one window (`period`, `windowSeconds` or `since`), and it agrees
   with the kind (`daily`: the day or 86400 s; `monthly`: the month or 28–31 days; `velocity`: a

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/check_service_rules.py

@@ -79,22 +79,39 @@ def priority_problems(plist: dict) -> list:
 PLATFORM_HOST_REFUSALS = (400, 404, 421)
 
 
+def _body_carries_document(body: bytes) -> bool:
+    """Whether a raw answer body parses as JSON that carries the well-known document or a part of it."""
+    try:
+        return _carries_document(json.loads((body or b"").decode("utf-8", "replace")))
+    except RecursionError:
+        return True
+    except ValueError:
+        return False
+
+
 def guard_verdict(rule: str, remote: bool, status: int, body: bytes) -> Tuple[str, str]:
+    """A guard refuses with the service's own 403, and no refusal carries the well-known document (a 403 whose body is
+    the document refused nothing). Elsewhere the substring `fabric-service/` alone already counts as disclosure."""
     if status == 403:
+        if _body_carries_document(body):
+            return "FAIL", "HTTP 403, and the body carries the well-known document"
         return "PASS", "HTTP 403"
-    disclosed = b"fabric-service/" in (body or b"")
+    disclosed = b"fabric-service/" in (body or b"") or _body_carries_document(body)
     if rule == "network.host-check" and remote and status in PLATFORM_HOST_REFUSALS and not disclosed:
         return "PASS", "HTTP %d from the platform router: a foreign Host never reaches the service" % status
     return "FAIL", "HTTP %d%s" % (status, ", and the body is the well-known document" if disclosed else "")
 
 
 def _carries_document(value: Any, depth: int = 0) -> bool:
-    """Whether a parsed body is, or holds anywhere inside it, an object that reads as the well-known document: its
-    `protocol` is the extension's, or it carries `service` or `process` (D3 of FAA-109)."""
+    """Whether a parsed body is, or holds anywhere inside it, an object that reads as the well-known document or a part
+    of it: its `protocol` is the extension's, its `service` is an object with an `id`, or its `process` an object with
+    a `pid` (D3 of FAA-109). A proxy's own error with a `service` string is none of these."""
     if depth > 64:
         return True  # nothing honest nests that deep; refuse rather than recurse without bound
     if isinstance(value, dict):
-        if value.get("protocol") == fs.PROTOCOL or "service" in value or "process" in value:
+        service, process = value.get("service"), value.get("process")
+        if value.get("protocol") == fs.PROTOCOL or (isinstance(service, dict) and "id" in service) \
+                or (isinstance(process, dict) and "pid" in process):
             return True
         return any(_carries_document(v, depth + 1) for v in value.values())
     if isinstance(value, list):

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-board-session.mjs

@@ -318,9 +318,10 @@ export class Responder {
   }
 
   /**
-   * Resume a transferred request while nothing runs; each idle tick takes the next (finding 39). A request leaves the
-   * queue only once it has resumed: a lost answer, of its probe (finding 35) or of the `com.complete` that sends a known
-   * outcome (FAA-86), keeps it first in line, and the next tick sends the same keys again from the checkpoint.
+   * Resume a transferred request while nothing runs; each idle tick takes the next (finding 39). A lost answer, of its
+   * probe (finding 35) or of the `com.complete` that sends a known outcome (FAA-86), puts the request back first in
+   * line, and the next tick sends the same keys again from the checkpoint. It leaves the queue before it resumes, so a
+   * handler that settles inside the resume (and reaches `replace`, which resumes the queue again) never runs it twice.
    */
   async resumeNext() {
     while (!this.current && this.toResume.length && !this.stopping) {
@@ -331,8 +332,15 @@ export class Responder {
       }
       const entry = JSON.parse(JSON.stringify(stored));
       if (entry.probe) await this.repliedBefore(entry);
-      await this.resume(entry);
-      if (this.toResume[0] === entry.request) this.toResume.shift();
+      this.toResume.shift();
+      try {
+        await this.resume(entry);
+      } catch (error) {
+        // Back first only while it can still be resumed: once its effect began it waits for reconcile.
+        const held = this.checkpoint.entries[entry.request];
+        if (held && !held.effect && held.step !== 'unknown' && !this.toResume.includes(entry.request)) this.toResume.unshift(entry.request);
+        throw error;
+      }
     }
   }
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-openrouter.mjs

@@ -142,6 +142,7 @@ export class Client {
     let total = 0;
     for (const r of this.ledger.receipts()) {
       if (!isObject(r) || !this.inWindow(r.at, today)) continue;
+      if (r.route === 'subscription') continue; // an estimate at list price, never money spent (DEC-0110)
       if (typeof r.costUsd === 'number' && price(r.costUsd) !== null) total += r.costUsd;
       else total += this.unmeasuredWorst.get(`${r.at} ${r.model}`) ?? unmeasuredUsd; // known here, else unmeasuredUsd
     }
@@ -322,14 +323,22 @@ export class Client {
   }
 }
 
-// Calls, priced spend and unpriced calls over receipts; spentUsd is null when every call is unpriced.
+// Calls, money spent and unpriced calls over receipts. A subscription receipt's cost is an estimate, never money
+// (DEC-0110): spentUsd is null only when calls off a subscription exist and none is priced, 0 when all were on one.
 export function totals(receipts) {
   let calls = 0;
   let priced = 0;
+  let paid = 0;
+  let paidPriced = 0;
   let spent = 0;
   for (const r of receipts) {
     calls += 1;
-    if (typeof r.costUsd === 'number' && price(r.costUsd) !== null) { priced += 1; spent += r.costUsd; }
+    const onSubscription = r.route === 'subscription';
+    if (!onSubscription) paid += 1;
+    if (typeof r.costUsd === 'number' && price(r.costUsd) !== null) {
+      priced += 1;
+      if (!onSubscription) { paidPriced += 1; spent += r.costUsd; }
+    }
   }
-  return { calls, spentUsd: priced ? spent : null, unpricedCalls: calls - priced };
+  return { calls, spentUsd: paid && !paidPriced ? null : spent, unpricedCalls: calls - priced };
 }

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_board_session.py

@@ -377,19 +377,27 @@ class Responder:
         self.checkpoint.put(entry)
 
     def _resume_next(self) -> None:
-        """Resume a transferred request while nothing runs; each idle tick takes the next (finding 39). A request leaves
-        the queue only once it has resumed: a lost answer, of its probe (finding 35) or of the `com.complete` that sends
-        a known outcome (FAA-86), keeps it first in line, and the next tick sends the same keys again from the
-        checkpoint."""
+        """Resume a transferred request while nothing runs; each idle tick takes the next (finding 39). A lost answer,
+        of its probe (finding 35) or of the `com.complete` that sends a known outcome (FAA-86), puts the request back
+        first in line, and the next tick sends the same keys again from the checkpoint. It leaves the queue before it
+        resumes, so a handler that settles inside the resume (and reaches `_replace`, which resumes the queue again)
+        never runs it twice."""
         while self.current is None and self._to_resume and not self.stopping:
             entry = self.checkpoint.entries.get(self._to_resume[0])
             if entry is not None and self.slots.get(entry["capability"], {}).get("state") == "held":
                 entry = json.loads(json.dumps(entry))
                 if entry.get("probe"):
                     self._replied_before(entry)
-                self._resume(entry)
-                if self._to_resume and self._to_resume[0] == entry["request"]:
-                    self._to_resume.pop(0)
+                self._to_resume.pop(0)
+                try:
+                    self._resume(entry)
+                except BaseException:
+                    # Back first only while it can still be resumed: once its effect began it waits for reconcile.
+                    held = self.checkpoint.entries.get(entry["request"])
+                    if held is not None and not held.get("effect") and held.get("step") != "unknown" \
+                            and entry["request"] not in self._to_resume:
+                        self._to_resume.insert(0, entry["request"])
+                    raise
             else:
                 self._to_resume.pop(0)
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_estate.py

@@ -49,7 +49,6 @@ from fabric_crypto import (  # noqa: E402 - the core (FAA-65)
 )
 from fabric_jsvalue import (  # noqa: E402 - the core (FAA-65)
     MISSING as _MISSING,
-    contains as _contains,
     get as _get,
     get_string as _s,
     indexed_objects as _indexed,
@@ -59,7 +58,7 @@ from fabric_jsvalue import (  # noqa: E402 - the core (FAA-65)
     objects as _list,
     safe_integer as _safe_integer,
     same as _same,
-    set_has as _set_has,
+    set_has as _set_has,  # every membership the contract keeps in a Set or tests with includes (FAA-113)
     show as _show,
 )
 from fabric_time import (  # noqa: E402 - the core (FAA-65)
@@ -331,7 +330,7 @@ def verify_estate_record(record: Any, *, at: Any, parent: Any = _MISSING, author
     if not matches:
         return {"ok": False, "problem": "unknown-authority"}
     authority = matches[0]
-    if _contains(revoked, _get(authority, "credentialId")):
+    if _set_has(revoked, _get(authority, "credentialId")):
         return {"ok": False, "problem": "revoked-authority"}
     origins = _get(authority, "origins")
     credential = {"credentialId": _s(authority, "credentialId"), "alg": _s(authority, "alg"),
@@ -385,7 +384,7 @@ def _scope_admits(record: Any, kid: Any, context: Any) -> bool:
     """DEC-0090: a key no `publisherScopes[]` entry names is trusted in any context; a partner's key, only in a context
     one of its scopes lists."""
     scopes = [s for s in _list(_get(record, "publisherScopes")) if _same(_get(s, "kid"), kid)]
-    return not scopes or any(isinstance(_get(s, "contexts"), list) and _contains(s["contexts"], context) for s in scopes)
+    return not scopes or any(isinstance(_get(s, "contexts"), list) and _set_has(s["contexts"], context) for s in scopes)
 
 
 #: v4 §7, Freshness: an estate revision's window is at most 30 days (DEC-0055 item 2).
@@ -545,7 +544,7 @@ def _keys(value: Dict[str, Any], flag) -> None:
     hub_keys: List[Any] = []
     for machine, m in _indexed(_get(value, "machines")):
         at = "/machines/%d" % m
-        if _contains(ids, _get(machine, "id")):
+        if _set_has(ids, _get(machine, "id")):
             flag("%s/id" % at, "machine %s is listed twice" % _show(_get(machine, "id")))
         ids.append(_get(machine, "id"))
         device_keys = _list(_get(machine, "deviceKeys"))
@@ -562,15 +561,15 @@ def _keys(value: Dict[str, Any], flag) -> None:
                 flag("%s/deviceKeys/%d/publicKey" % (at, k), "a device key's octets are written in canonical padded base64, the one form a key reference can name (DEC-0084)")
             elif not _valid_device_key(key):
                 flag("%s/deviceKeys/%d/publicKey" % (at, k), "an Ed25519 key is never of small order (DEC-0045) and a P-256 key is a valid point (SEC 1 §3.2.2)")
-            if _contains(seen, _get(key, "publicKey")):
+            if _set_has(seen, _get(key, "publicKey")):
                 flag("%s/deviceKeys/%d/publicKey" % (at, k), "one key is never used for the other role")
             seen.append(_get(key, "publicKey"))
         hub = _get(machine, "hubKey")
         if isinstance(hub, dict):
-            if _contains(hub_kids, _get(hub, "kid")):
+            if _set_has(hub_kids, _get(hub, "kid")):
                 flag("%s/hubKey/kid" % at, "hub key %s is certified for two machines: one kid per machine" % _show(_get(hub, "kid")))
             hub_kids.append(_get(hub, "kid"))
-            if _contains(hub_keys, _get(hub, "x")):
+            if _set_has(hub_keys, _get(hub, "x")):
                 flag("%s/hubKey/x" % at, "one hub public key is certified for two machines under two kids: one key per machine")
             hub_keys.append(_get(hub, "x"))
             x = _get(hub, "x")
@@ -579,7 +578,7 @@ def _keys(value: Dict[str, Any], flag) -> None:
                 flag("%s/hubKey/x" % at, "a hub key of small order verifies forged tokens and is never certified (DEC-0045)")
     credentials: List[Any] = []
     for authority, index in _indexed(_get(value, "authorities")):
-        if _contains(credentials, _get(authority, "credentialId")):
+        if _set_has(credentials, _get(authority, "credentialId")):
             flag("/authorities/%d/credentialId" % index, "a passkey is listed once")
         credentials.append(_get(authority, "credentialId"))
         if "problem" in credential_key(_get(authority, "publicKey"), _show(_get(authority, "alg"))):
@@ -589,7 +588,7 @@ def _keys(value: Dict[str, Any], flag) -> None:
 def _placements(value: Dict[str, Any], flag) -> None:
     kids: List[Any] = []
     for key, index in _indexed(_get(value, "publisherKeys")):
-        if _contains(kids, _get(key, "kid")):
+        if _set_has(kids, _get(key, "kid")):
             flag("/publisherKeys/%d/kid" % index, "publisher key %s is pinned twice" % _show(_get(key, "kid")))
         kids.append(_get(key, "kid"))
     for machine, m in _indexed(_get(value, "machines")):
@@ -601,7 +600,7 @@ def _placements(value: Dict[str, Any], flag) -> None:
                 flag("%s/agentRef" % at, "%s is placed twice on one machine in the context %s"
                      % (_show(_get(placement, "agentRef")), _show(_context_of(placement))))
             agents.append(key)
-            if not _contains(kids, _get(placement, "publisherKid")):
+            if not _set_has(kids, _get(placement, "publisherKid")):
                 flag("%s/publisherKid" % at, "publisher key %s is not in publisherKeys, so the machine pins no key to verify the package under" % _show(_get(placement, "publisherKid")))
 
 
@@ -611,10 +610,10 @@ def _partner_scopes(value: Dict[str, Any], flag) -> None:
     pinned = [_get(k, "kid") for k in _list(_get(value, "publisherKeys"))]
     scoped: List[Any] = []
     for scope, index in _indexed(_get(value, "publisherScopes")):
-        if _contains(scoped, _get(scope, "kid")):
+        if _set_has(scoped, _get(scope, "kid")):
             flag("/publisherScopes/%d/kid" % index, "publisher key %s is scoped twice" % _show(_get(scope, "kid")))
         scoped.append(_get(scope, "kid"))
-        if not _contains(pinned, _get(scope, "kid")):
+        if not _set_has(pinned, _get(scope, "kid")):
             flag("/publisherScopes/%d/kid" % index, "publisher key %s is not in publisherKeys, so the scope limits no key" % _show(_get(scope, "kid")))
     for machine, m in _indexed(_get(value, "machines")):
         for placement, p in _indexed(_get(machine, "packages")):
@@ -638,7 +637,7 @@ def _secret_references(value: Dict[str, Any], flag) -> None:
                     flag("%s/%s" % (at, field), "a secret placement names a slot, never a value: this looks like a credential")
             if _key_of(_get(secret, "agentRef"), _context_of(secret)) not in placed:
                 flag("%s/agentRef" % at, "a secret goes only where a placed package declares it (v4 Path 2): this agent is not placed on this machine in the secret's context")
-            if not _contains(machine_ids, _get(secret, "from")):
+            if not _set_has(machine_ids, _get(secret, "from")):
                 flag("%s/from" % at, "the slot is filled from a machine of this estate")
             elif not _same(_context_of(secret), PERSONAL_CONTEXT) and not _same(_get(secret, "from"), _get(machine, "id")):
                 # An envelope names no context (DEC-0082): an organization's instance fills its slot on its own machine.
@@ -693,7 +692,7 @@ def _machine_profiles(value: Dict[str, Any], flag) -> None:
                 flag("/machines/%d/secrets" % m, "a view machine holds none of the estate's secrets")
     for machine, m in _indexed(_get(value, "machines")):
         for secret, s in _indexed(_get(machine, "secrets")):
-            if _set_has(views, _get(secret, "from")):  # the contract's Set: NaN matches NaN
+            if _set_has(views, _get(secret, "from")):
                 flag("/machines/%d/secrets/%d/from" % (m, s), "machine %s is a view machine: it is the source of no secret" % _show(_get(secret, "from")))
 
 
@@ -709,7 +708,7 @@ def _grants_and_revocations(value: Dict[str, Any], flag) -> None:
         if _get(grant, "principalKind") != "external":
             flag("/shareGrants/%d/principalKind" % index, "a share grant is to a principal outside the estate: principalKind external")
         ident = _get(_get(grant, "meta"), "id") if isinstance(_get(grant, "meta"), dict) else _MISSING
-        if _contains(grant_ids, _grant_key(ident)):
+        if _set_has(grant_ids, _grant_key(ident)):
             flag("/shareGrants/%d/meta/id" % index, "grant %s is listed twice" % _show(ident))
         grant_ids.append(_grant_key(ident))
     machines = _list(_get(value, "machines"))
@@ -735,7 +734,7 @@ def _grants_and_revocations(value: Dict[str, Any], flag) -> None:
         if _get(revocation, "kind") == "device-key" and isinstance(raw_ref, str) and "@" in raw_ref and not KEY_REFERENCE.match(raw_ref):
             flag("/revocations/%d/ref" % index, "a device-key revocation names a kid or a key reference <kid>@sha256:<64 lower-case hex digits> (DEC-0084)")
         seen.append(key)
-        if _contains(listed.get(kind, []), ref):
+        if _set_has(listed.get(kind, []), ref):
             flag("/revocations/%d/ref" % index, "the record still lists the %s it revokes: revocation outranks addition" % kind)
 
 
@@ -906,7 +905,7 @@ def _installation(value: Dict[str, Any]) -> List[Dict[str, str]]:
     declared = [_get(slot, "name") for slot in _list(_get(pkg, "secrets"))]
     flag075 = _finding(findings, "FAC-SEM-075")
     for secret, index in _indexed(_get(machine, "secrets")):
-        if _same(_get(secret, "agentRef"), _get(pkg, "agentRef")) and _same(_context_of(secret), context) and not _contains(declared, _get(secret, "slot")):
+        if _same(_get(secret, "agentRef"), _get(pkg, "agentRef")) and _same(_context_of(secret), context) and not _set_has(declared, _get(secret, "slot")):
             flag075("/record/machines/%d/secrets/%d/slot" % (machine_index, index),
                     "the package declares no slot %s: a secret goes only where a placed package declares it" % _show(_get(secret, "slot")))
     if placement is not None and not _scope_admits(record, _get(placement, "publisherKid"), context):

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_jsvalue.py

@@ -158,7 +158,7 @@ def double(value: Any) -> float:
 
 def same(a: Any, b: Any) -> bool:
     """JavaScript's === on parsed JSON: an object equals only itself. A Set's SameValueZero differs only for NaN, which
-    no JSON value is: use ``set_has`` where the contract keeps a Set (FAA-107)."""
+    no JSON value is: use ``set_has`` where the contract keeps a Set or tests with ``includes`` (FAA-107, FAA-113)."""
     if a is MISSING or b is MISSING:
         return a is b
     if isinstance(a, (dict, list)) or isinstance(b, (dict, list)):

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_kit.py

@@ -23,6 +23,7 @@ import json
 import os
 import re
 import shutil
+import subprocess
 import sys
 from pathlib import Path
 from typing import Dict, List
@@ -61,6 +62,16 @@ def load_manifest() -> Dict:
     return json.loads(MANIFEST.read_text(encoding="utf-8"))
 
 
+def _released(version: str) -> bool:
+    """Whether the checkout the kit sits in carries the release tag `v<version>` (False outside a Git checkout)."""
+    try:
+        listed = subprocess.run(["git", "-C", str(HERE), "tag", "--list", "v%s" % version],
+                                capture_output=True, text=True, timeout=10)
+    except (OSError, subprocess.SubprocessError):
+        return False
+    return listed.returncode == 0 and bool(listed.stdout.strip())
+
+
 def build(check: bool = False) -> List[str]:
     """Refresh every module's imports and sha256 in kit.json, and record this release's digests in its history.
     Returns what changed (with check=True nothing is written)."""
@@ -83,6 +94,10 @@ def build(check: bool = False) -> List[str]:
     current = {e["file"]: e["sha256"] for e in manifest["python"] + manifest["node"]}
     current.update(digests)
     if manifest.setdefault("history", {}).get(manifest["version"]) != current:
+        if not check and manifest["version"] in manifest["history"] and _released(manifest["version"]):
+            # A build before the version moves on would rewrite a released version's digests (FAA-111).
+            raise SystemExit("kit.json's version %s is released (tag v%s): move its \"version\" to the next release, "
+                             "then build" % (manifest["version"], manifest["version"]))
         manifest["history"][manifest["version"]] = current
         changed.append("kit.json history %s" % manifest["version"])
     if changed and not check:

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_openrouter.py

@@ -212,12 +212,15 @@ class Client:
         return day == today if self.window == "day" else day[:7] == today[:7]
 
     def spent_usd(self, *, unmeasured_usd: float = 0.0) -> float:
-        """What the ledger records for the current window; a receipt without a cost counts as `unmeasured_usd`."""
+        """What the ledger records for the current window; a receipt without a cost counts as `unmeasured_usd`. A
+        `subscription` receipt in a shared ledger is an estimate at list price, never money spent (DEC-0110)."""
         today = fabric_time.utc_day(fabric_time.now_ms(self._now))
         total = 0.0
         for receipt in self.ledger.receipts():
             if not isinstance(receipt, dict) or not self._in_window(receipt.get("at"), today):
                 continue
+            if receipt.get("route") == "subscription":
+                continue
             cost = receipt.get("costUsd")
             measured = isinstance(cost, (int, float)) and _price(cost) is not None
             if measured:
@@ -419,13 +422,18 @@ class Client:
 
 
 def totals(receipts: Iterable[Mapping[str, Any]]) -> Dict[str, Any]:
-    """Calls, priced spend and unpriced calls over receipts (what a dashboard line shows); `spentUsd` is None when
-    every call is unpriced."""
-    calls = priced = 0
+    """Calls, money spent and unpriced calls over receipts (what a dashboard line shows). A `subscription` receipt's
+    cost is an estimate, never money (DEC-0110): `spentUsd` is None only when calls off a subscription exist and none of
+    them is priced, and 0.0 when every call was on a subscription."""
+    calls = priced = paid = paid_priced = 0
     spent = 0.0
     for r in receipts:
         calls += 1
+        on_subscription = r.get("route") == "subscription"
+        paid += 0 if on_subscription else 1
         if isinstance(r.get("costUsd"), (int, float)) and _price(r.get("costUsd")) is not None:
             priced += 1
-            spent += float(r["costUsd"])
-    return {"calls": calls, "spentUsd": spent if priced else None, "unpricedCalls": calls - priced}
+            if not on_subscription:
+                paid_priced += 1
+                spent += float(r["costUsd"])
+    return {"calls": calls, "spentUsd": None if paid and not paid_priced else spent, "unpricedCalls": calls - priced}

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/kit.json

@@ -1,6 +1,6 @@
 {
  "name": "fabric-service-kit",
- "version": "0.48.3",
+ "version": "0.49.1",
  "about": "The service kit's modules in dependency order: a module imports only modules listed before it. Written by fabric_kit.py build; edit the order and layers by hand, never the digests.",
  "python": [
   {
@@ -8,7 +8,7 @@
    "file": "fabric_jsvalue.py",
    "layer": "L0",
    "imports": [],
-   "sha256": "ff1bbfae999fb5683e59e31189143f1c85fa9d7780040b5a6952e060a143fc18"
+   "sha256": "12888a2c934a885d35999ac9782eaedc8d04946d9775213344a235a8814d3d28"
   },
   {
    "module": "fabric_time",
@@ -77,7 +77,7 @@
     "fabric_secrets",
     "fabric_time"
    ],
-   "sha256": "f493cd424dae6380d1caad91ffdca2764e51a49a6b1051a77731e3d8755277cd"
+   "sha256": "a0ddc49d748c1efb1830de176998d6c8eac30f77d387c71eae12549c52aaab27"
   },
   {
    "module": "fabric_delegation",
@@ -355,7 +355,7 @@
     "fabric_hub",
     "fabric_service"
    ],
-   "sha256": "6fa205f7aa80f920cb910b52516086a54f0a06ce88c01dc6c39dbeabacc779d2"
+   "sha256": "2845d7d758b06ac4588bdf825a471c201a46ce535a631805697b1e35495fead6"
   },
   {
    "module": "fabric_board_fixture",
@@ -397,7 +397,7 @@
     "fabric_time",
     "fabric_usage"
    ],
-   "sha256": "2017d898c17001d7275f58267de653be7ecf6acd17ad8d9b24ecb7a43e5617d4"
+   "sha256": "309f588f9c976b1061323f3161e35d86248afd5b59b16391afbfc4e1099ecd65"
   }
  ],
  "node": [
@@ -747,7 +747,7 @@
     "fabric-hub",
     "fabric-service"
    ],
-   "sha256": "82961581c6a5b6872dec0c18c2afca77286ab86dae5d21300aeea9903ec785a4"
+   "sha256": "26c9b0b2818a4cedc5248b08ea6732e2ee4ee81e31f6fee2b572a019db813c93"
   },
   {
    "module": "fabric-board-fixture",
@@ -788,7 +788,7 @@
     "fabric-time",
     "fabric-usage"
    ],
-   "sha256": "f8f0168691f968b7cd85f36aa98e2167e88cc44f1104ff514fd0c7699b339253"
+   "sha256": "ab6c4c7251d563980d895061ee19976bde2f364c21b6354efdd9a9027b1ea139"
   }
  ],
  "history": {
@@ -2875,6 +2875,158 @@
    "fabric-openrouter.mjs": "f8f0168691f968b7cd85f36aa98e2167e88cc44f1104ff514fd0c7699b339253",
    "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
    "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
+  },
+  "0.49.0": {
+   "fabric_jsvalue.py": "ff1bbfae999fb5683e59e31189143f1c85fa9d7780040b5a6952e060a143fc18",
+   "fabric_time.py": "588f383da4ac6a243ea95b6ffc3a0aa99ca94245732dc4937734f190b7af4ae9",
+   "fabric_identifiers.py": "0fd814d521ac3aa39907458265870753046a73f48af3d8581ab864b93b211607",
+   "fabric_secrets.py": "68a0b5e9e90c468ec9ac67b2f0fd1848e08813d6ec1ec14a2a47337eb1a98911",
+   "fabric_crypto.py": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa",
+   "fabric_base.py": "f62bcc2ed9912660fa875d27a09f60867260cc4925f79873501fd9620be59611",
+   "fabric_platform.py": "a9350dff55ef0fb3a23cdb4d0320a15868b15a8deb10d2eb74d72c58740c284b",
+   "fabric_paths.py": "6c92af34292baddf7e10d3134d0a5b0bb23387741812a9f79c409cf1628bad23",
+   "fabric_estate.py": "f493cd424dae6380d1caad91ffdca2764e51a49a6b1051a77731e3d8755277cd",
+   "fabric_delegation.py": "6638a6039befe3b43f59018bab292e050931af21b544df1044cd5059572ded36",
+   "fabric_share.py": "78506fe1a60829c525dbf6266a0aa0749a2164290ed94da8249a20b4e9be5605",
+   "fabric_ceremonies.py": "a59e83cf4adb2669a9b98008e3d3a0cba991a35cbff97bc604fc82fe81cfd49f",
+   "fabric_package_schema.py": "e623f0408d38e3343ed66222fb812907c6c52e1a286eb1c1176ab2e64640c9ad",
+   "fabric_package.py": "ff533f1b3f92b4ea0f532fcec50b68c610d47549930eef8ad5247692a64dfb3c",
+   "fabric_protocols.py": "28e693282cddff8e4396ae39ce6fa935e875e8ddac7375bea2c189dd6fb04970",
+   "fabric_connections.py": "77d3ccf863c70e9209d21ef45c46a6db9c06237019bc20d54f8d3946873f3f11",
+   "fabric_lock.py": "ba2399d2137c7a7791b7133b9db9cca36693f4eb7e30955b25a75ade814e95ba",
+   "fabric_usage.py": "b1f335cab4625171a616cf68cf3fd892b18bdadcf4baec3a3a0fdcf12785c170",
+   "fabric_backups.py": "02dc5eb66ec956723d3ddba07b6dd15f6a9726d901f4d60edfd02eee57880ceb",
+   "fabric_descriptor.py": "daf16f95b1810283b1386488e006e940a0cdfa5c3c8d09386ac33d29d58df78d",
+   "fabric_auth.py": "55794587750f6c9f40935b74295d83d7096cb4b26a0b36ac292334cd87d8f853",
+   "fabric_events.py": "0086886c2c29dbd5c9d152be9d375c5bdf4a29f89b8095baff8490c2bcd64e47",
+   "fabric_logs.py": "86dc55bfafa2a57264722e2403510a249b95de0e4a722b2e4bc3948e3bd93da9",
+   "fabric_supervisors.py": "a2dbf15aa1c4eb9de42996b413103fa4814afd2e4e66d1ab7315f30e06ab6841",
+   "fabric_service.py": "103ab4026f96e127c01cd91e4ad44f6b0ce2424ff33f078ed106b39e773a10e3",
+   "fabric_profiles.py": "26e21ec29c016000f8ca8053b7b489184854a73be1b7fdc0a18d12990203db9b",
+   "fabric_interop_rules.py": "b5f0ecb1791b4c50c5ac151f987f692ed7001bc74841a8a161125ec775145e09",
+   "fabric_interop.py": "f92fa111328fe3811438f733d8f0eb5295e6941c774123a78e26318bdcb35fc3",
+   "fabric_hub.py": "b9ac852e601b1d54cf61351677a628afc69faeed7d1fc74ebe541c1cf38e0c2a",
+   "fabric_board_shapes.py": "0a0e8d3d40e33dfd8c457aedb85330b2ff25f8c49a33eb6cbd5a5cc8a5007f7e",
+   "fabric_board_link.py": "b5bff994cb615c6a4bb0d88d020e3a59504166180e1fa1aea3be93224f2aeccb",
+   "fabric_board_session.py": "2845d7d758b06ac4588bdf825a471c201a46ce535a631805697b1e35495fead6",
+   "fabric_board_fixture.py": "69761ce205ec640762ec9b591c6903e5a87f844e8d423b041681924027e39d1e",
+   "fabric_board.py": "0f075894b3e352194fcaf3fc7d08dee4e9f1c215e859769ed85fa5010e4a1599",
+   "fabric_http.py": "5d7f72af3a73fdbe8c1f487ecf60cef23a7c46289eba542b03aff4706b8218d4",
+   "fabric_openrouter.py": "309f588f9c976b1061323f3161e35d86248afd5b59b16391afbfc4e1099ecd65",
+   "fabric-jsvalue.mjs": "dfbdb8c41584972c9389750a41719374a1cfc5652ed438dd1623025190b0106e",
+   "fabric-time.mjs": "3ff932069038a720df1c68c6492976906737b2e67e5c12d9c81c418597f661de",
+   "fabric-identifiers.mjs": "a18c2a501a4aa170bfd3d99e571ad6b7662649b4d3b9d2a540c002ea42811bbf",
+   "fabric-secrets.mjs": "6ad8ab18ac899ecc2384e8ec6a3fb689b92be3b9a5ce3a59b92a37d52da5d766",
+   "fabric-crypto.mjs": "038e03689701e3c9721a1e7f8e0a4d02a52d6a5d1661b0dc84035edc3ebbfcf6",
+   "fabric-base.mjs": "7804b2df7715dbbf9702a9b61b6b8cef2110f9a52b04cabd8fb0a66458d87512",
+   "fabric-platform.mjs": "a8119d95ebba4d589a9e401f5d6fc8dda62d59d44e4c1ff811d97fac3771ac0c",
+   "fabric-paths.mjs": "2201b4ed7126f260931b63e8386377b4317d8dcad419d109bf22c683e44b7f29",
+   "fabric-estate.mjs": "b6610aaad9d00d8a7f42955627fb81725950841455bcedfc050abb0e079f0f93",
+   "fabric-delegation.mjs": "dafde9ea327c88d92dc73d1400282b43dc6f84dd345a2d2b9b154304f65fc9d7",
+   "fabric-share.mjs": "d40a7405d7bd4c3213ed691330b7549afe8e023db0753b582e249714e672010d",
+   "fabric-ceremonies.mjs": "117d4374c9e95c930a38de7adbd4323774798f4fe6ec6f24afcd6f2c7298ca44",
+   "fabric-package-schema.mjs": "cd28092375db0fc21ffab1f0bb7794f7f8979ee08c64d3b9faf4b3845357caa6",
+   "fabric-package.mjs": "13913ea6d12056c3a31b8222b6c4aab8395941fe519913692e1a06d8672e1c88",
+   "fabric-protocols.mjs": "dc039ec3612d0090c9ba6a3a949b0b7df54712bead300dcb6cc8b9bc305cd183",
+   "fabric-connections.mjs": "303432e547ce563e90ca9ffcd827f5612f51d3582929834e1add0fdaf6485dcc",
+   "fabric-lock.mjs": "ac219ab0a326d5c43c7c4c255e0c3843d4794de795a60e3af661e7d5350ea052",
+   "fabric-usage.mjs": "1c4d18004639409624ac3516a02f2b60bbf55abdb612e9a96c37e83666eb87a7",
+   "fabric-backups.mjs": "849acdc6eba0fff648c8158e61f6b68cccd7bedf0880f7d5ec03a6a20f1e7005",
+   "fabric-descriptor.mjs": "95c0b7ff36c29d7c748f1fa6fb1767d6fe8c97fca7f1ee404559930abbd3cc84",
+   "fabric-auth.mjs": "3ea6796470fcd829bc72a772fb7e4c37532a09d1e37ff41592dcf1a1a3074ca2",
+   "fabric-events.mjs": "c463d6ffcae24229a5c608d8fcea4268d2ccc5024b19fa10e5a452284068fa71",
+   "fabric-logs.mjs": "58467e5719c16e099d05bbedec47a95712506ab03c33f3cd4be1252e8498a946",
+   "fabric-supervisors.mjs": "9d61c1a17538a5e2453e33e5ae347337336748041bc054478a96dd51f3d4fc51",
+   "fabric-service.mjs": "1b4639a10c530c1241d317c5e9cf3a10cd96e5d9af8b29fc1b1844de5c63bfec",
+   "fabric-profiles.mjs": "314376cf2deb87f235fb18b11d3b532e211f585b9af0a9302b5f4cc39971b532",
+   "fabric-interop-rules.mjs": "57a8081307956e8c381119b361fa5232a7bf791815be8e3541eb5492820e2ea5",
+   "fabric-interop.mjs": "581983ec3e197e5c2340ad25e8468320c69a2459c90097c7fcf2699766b4fb26",
+   "fabric-hub.mjs": "c005115a864cfd67daa4862097bb14acfe5a60bf653897e5bf8a570dd80f1070",
+   "fabric-board-shapes.mjs": "c1db7b7bd0d58d82bb6d8dfbc3cd1547a256a333052d367e82ff1b3edf2804d7",
+   "fabric-board-link.mjs": "4cd6d4e21713a38c8e56f7d59db3148638b8c27c08e774d96a0f6283c6049e0a",
+   "fabric-board-session.mjs": "26c9b0b2818a4cedc5248b08ea6732e2ee4ee81e31f6fee2b572a019db813c93",
+   "fabric-board-fixture.mjs": "83c4b7e33ee47b68385faf2569d38d5c8a0c5cb0f8656090f41e1b0eed2f436e",
+   "fabric-board.mjs": "9e7bfe4d412521982224ef12bebfc2ff255eeeaf8d96cf40234ac18de68e7a59",
+   "fabric-http.mjs": "f886bcb49c4353d039387ac9568738dda26697a94dd07fc6a6204500f0bc27bf",
+   "fabric-openrouter.mjs": "ab6c4c7251d563980d895061ee19976bde2f364c21b6354efdd9a9027b1ea139",
+   "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
+   "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
+  },
+  "0.49.1": {
+   "fabric_jsvalue.py": "12888a2c934a885d35999ac9782eaedc8d04946d9775213344a235a8814d3d28",
+   "fabric_time.py": "588f383da4ac6a243ea95b6ffc3a0aa99ca94245732dc4937734f190b7af4ae9",
+   "fabric_identifiers.py": "0fd814d521ac3aa39907458265870753046a73f48af3d8581ab864b93b211607",
+   "fabric_secrets.py": "68a0b5e9e90c468ec9ac67b2f0fd1848e08813d6ec1ec14a2a47337eb1a98911",
+   "fabric_crypto.py": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa",
+   "fabric_base.py": "f62bcc2ed9912660fa875d27a09f60867260cc4925f79873501fd9620be59611",
+   "fabric_platform.py": "a9350dff55ef0fb3a23cdb4d0320a15868b15a8deb10d2eb74d72c58740c284b",
+   "fabric_paths.py": "6c92af34292baddf7e10d3134d0a5b0bb23387741812a9f79c409cf1628bad23",
+   "fabric_estate.py": "a0ddc49d748c1efb1830de176998d6c8eac30f77d387c71eae12549c52aaab27",
+   "fabric_delegation.py": "6638a6039befe3b43f59018bab292e050931af21b544df1044cd5059572ded36",
+   "fabric_share.py": "78506fe1a60829c525dbf6266a0aa0749a2164290ed94da8249a20b4e9be5605",
+   "fabric_ceremonies.py": "a59e83cf4adb2669a9b98008e3d3a0cba991a35cbff97bc604fc82fe81cfd49f",
+   "fabric_package_schema.py": "e623f0408d38e3343ed66222fb812907c6c52e1a286eb1c1176ab2e64640c9ad",
+   "fabric_package.py": "ff533f1b3f92b4ea0f532fcec50b68c610d47549930eef8ad5247692a64dfb3c",
+   "fabric_protocols.py": "28e693282cddff8e4396ae39ce6fa935e875e8ddac7375bea2c189dd6fb04970",
+   "fabric_connections.py": "77d3ccf863c70e9209d21ef45c46a6db9c06237019bc20d54f8d3946873f3f11",
+   "fabric_lock.py": "ba2399d2137c7a7791b7133b9db9cca36693f4eb7e30955b25a75ade814e95ba",
+   "fabric_usage.py": "b1f335cab4625171a616cf68cf3fd892b18bdadcf4baec3a3a0fdcf12785c170",
+   "fabric_backups.py": "02dc5eb66ec956723d3ddba07b6dd15f6a9726d901f4d60edfd02eee57880ceb",
+   "fabric_descriptor.py": "daf16f95b1810283b1386488e006e940a0cdfa5c3c8d09386ac33d29d58df78d",
+   "fabric_auth.py": "55794587750f6c9f40935b74295d83d7096cb4b26a0b36ac292334cd87d8f853",
+   "fabric_events.py": "0086886c2c29dbd5c9d152be9d375c5bdf4a29f89b8095baff8490c2bcd64e47",
+   "fabric_logs.py": "86dc55bfafa2a57264722e2403510a249b95de0e4a722b2e4bc3948e3bd93da9",
+   "fabric_supervisors.py": "a2dbf15aa1c4eb9de42996b413103fa4814afd2e4e66d1ab7315f30e06ab6841",
+   "fabric_service.py": "103ab4026f96e127c01cd91e4ad44f6b0ce2424ff33f078ed106b39e773a10e3",
+   "fabric_profiles.py": "26e21ec29c016000f8ca8053b7b489184854a73be1b7fdc0a18d12990203db9b",
+   "fabric_interop_rules.py": "b5f0ecb1791b4c50c5ac151f987f692ed7001bc74841a8a161125ec775145e09",
+   "fabric_interop.py": "f92fa111328fe3811438f733d8f0eb5295e6941c774123a78e26318bdcb35fc3",
+   "fabric_hub.py": "b9ac852e601b1d54cf61351677a628afc69faeed7d1fc74ebe541c1cf38e0c2a",
+   "fabric_board_shapes.py": "0a0e8d3d40e33dfd8c457aedb85330b2ff25f8c49a33eb6cbd5a5cc8a5007f7e",
+   "fabric_board_link.py": "b5bff994cb615c6a4bb0d88d020e3a59504166180e1fa1aea3be93224f2aeccb",
+   "fabric_board_session.py": "2845d7d758b06ac4588bdf825a471c201a46ce535a631805697b1e35495fead6",
+   "fabric_board_fixture.py": "69761ce205ec640762ec9b591c6903e5a87f844e8d423b041681924027e39d1e",
+   "fabric_board.py": "0f075894b3e352194fcaf3fc7d08dee4e9f1c215e859769ed85fa5010e4a1599",
+   "fabric_http.py": "5d7f72af3a73fdbe8c1f487ecf60cef23a7c46289eba542b03aff4706b8218d4",
+   "fabric_openrouter.py": "309f588f9c976b1061323f3161e35d86248afd5b59b16391afbfc4e1099ecd65",
+   "fabric-jsvalue.mjs": "dfbdb8c41584972c9389750a41719374a1cfc5652ed438dd1623025190b0106e",
+   "fabric-time.mjs": "3ff932069038a720df1c68c6492976906737b2e67e5c12d9c81c418597f661de",
+   "fabric-identifiers.mjs": "a18c2a501a4aa170bfd3d99e571ad6b7662649b4d3b9d2a540c002ea42811bbf",
+   "fabric-secrets.mjs": "6ad8ab18ac899ecc2384e8ec6a3fb689b92be3b9a5ce3a59b92a37d52da5d766",
+   "fabric-crypto.mjs": "038e03689701e3c9721a1e7f8e0a4d02a52d6a5d1661b0dc84035edc3ebbfcf6",
+   "fabric-base.mjs": "7804b2df7715dbbf9702a9b61b6b8cef2110f9a52b04cabd8fb0a66458d87512",
+   "fabric-platform.mjs": "a8119d95ebba4d589a9e401f5d6fc8dda62d59d44e4c1ff811d97fac3771ac0c",
+   "fabric-paths.mjs": "2201b4ed7126f260931b63e8386377b4317d8dcad419d109bf22c683e44b7f29",
+   "fabric-estate.mjs": "b6610aaad9d00d8a7f42955627fb81725950841455bcedfc050abb0e079f0f93",
+   "fabric-delegation.mjs": "dafde9ea327c88d92dc73d1400282b43dc6f84dd345a2d2b9b154304f65fc9d7",
+   "fabric-share.mjs": "d40a7405d7bd4c3213ed691330b7549afe8e023db0753b582e249714e672010d",
+   "fabric-ceremonies.mjs": "117d4374c9e95c930a38de7adbd4323774798f4fe6ec6f24afcd6f2c7298ca44",
+   "fabric-package-schema.mjs": "cd28092375db0fc21ffab1f0bb7794f7f8979ee08c64d3b9faf4b3845357caa6",
+   "fabric-package.mjs": "13913ea6d12056c3a31b8222b6c4aab8395941fe519913692e1a06d8672e1c88",
+   "fabric-protocols.mjs": "dc039ec3612d0090c9ba6a3a949b0b7df54712bead300dcb6cc8b9bc305cd183",
+   "fabric-connections.mjs": "303432e547ce563e90ca9ffcd827f5612f51d3582929834e1add0fdaf6485dcc",
+   "fabric-lock.mjs": "ac219ab0a326d5c43c7c4c255e0c3843d4794de795a60e3af661e7d5350ea052",
+   "fabric-usage.mjs": "1c4d18004639409624ac3516a02f2b60bbf55abdb612e9a96c37e83666eb87a7",
+   "fabric-backups.mjs": "849acdc6eba0fff648c8158e61f6b68cccd7bedf0880f7d5ec03a6a20f1e7005",
+   "fabric-descriptor.mjs": "95c0b7ff36c29d7c748f1fa6fb1767d6fe8c97fca7f1ee404559930abbd3cc84",
+   "fabric-auth.mjs": "3ea6796470fcd829bc72a772fb7e4c37532a09d1e37ff41592dcf1a1a3074ca2",
+   "fabric-events.mjs": "c463d6ffcae24229a5c608d8fcea4268d2ccc5024b19fa10e5a452284068fa71",
+   "fabric-logs.mjs": "58467e5719c16e099d05bbedec47a95712506ab03c33f3cd4be1252e8498a946",
+   "fabric-supervisors.mjs": "9d61c1a17538a5e2453e33e5ae347337336748041bc054478a96dd51f3d4fc51",
+   "fabric-service.mjs": "1b4639a10c530c1241d317c5e9cf3a10cd96e5d9af8b29fc1b1844de5c63bfec",
+   "fabric-profiles.mjs": "314376cf2deb87f235fb18b11d3b532e211f585b9af0a9302b5f4cc39971b532",
+   "fabric-interop-rules.mjs": "57a8081307956e8c381119b361fa5232a7bf791815be8e3541eb5492820e2ea5",
+   "fabric-interop.mjs": "581983ec3e197e5c2340ad25e8468320c69a2459c90097c7fcf2699766b4fb26",
+   "fabric-hub.mjs": "c005115a864cfd67daa4862097bb14acfe5a60bf653897e5bf8a570dd80f1070",
+   "fabric-board-shapes.mjs": "c1db7b7bd0d58d82bb6d8dfbc3cd1547a256a333052d367e82ff1b3edf2804d7",
+   "fabric-board-link.mjs": "4cd6d4e21713a38c8e56f7d59db3148638b8c27c08e774d96a0f6283c6049e0a",
+   "fabric-board-session.mjs": "26c9b0b2818a4cedc5248b08ea6732e2ee4ee81e31f6fee2b572a019db813c93",
+   "fabric-board-fixture.mjs": "83c4b7e33ee47b68385faf2569d38d5c8a0c5cb0f8656090f41e1b0eed2f436e",
+   "fabric-board.mjs": "9e7bfe4d412521982224ef12bebfc2ff255eeeaf8d96cf40234ac18de68e7a59",
+   "fabric-http.mjs": "f886bcb49c4353d039387ac9568738dda26697a94dd07fc6a6204500f0bc27bf",
+   "fabric-openrouter.mjs": "ab6c4c7251d563980d895061ee19976bde2f364c21b6354efdd9a9027b1ea139",
+   "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
+   "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
   }
  },
  "data": {

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: creating-fabric-agents
-description: Use when designing and building a NEW agent or provider that must be Fabric-compatible from its first commit, «создай агента, совместимого с фабрикой Passion Code», «новый агент под Fabric», "create a fabric-compatible agent", "build a new Fabric provider", "fabric-ready agent from scratch", «агент в облаке организации», "which models and OpenRouter key for a new Fabric agent". Runs the intake grill (capability, named consumer, workflow or agent, profile, effects, where it runs, models, who pays, how it learns), turns source projects' recorded failures into planted eval fixtures, scaffolds the pinned contract bundle and sets the canary expectation. NOT for adapting an existing project (adapting-projects-to-fabric), making an agent a local or online Fabric service with a dashboard (building-fabric-services), a coding session working through Fabric or its board (working-with-fabric), the Fabric host or orchestrator, or agent design without Fabric.
+description: Use when designing and building a NEW agent or provider that must be Fabric-compatible from its first commit, «создай агента, совместимого с фабрикой Passion Code», «новый агент под Fabric», "create a fabric-compatible agent", "build a new Fabric provider", "fabric-ready agent from scratch", «агент в облаке организации», "which models and OpenRouter key for a new Fabric agent". Runs the intake grill (capability, named consumer, workflow or agent, profile, effects, where it runs, models, who pays, how it learns), turns source projects' recorded failures into planted eval fixtures, scaffolds the pinned contract bundle and sets the canary expectation. NOT for adapting an existing project (adapting-projects-to-fabric), making an agent a local or online Fabric service with a dashboard (building-fabric-services), a coding session working through Fabric or its board (working-with-fabric), the Fabric host or orchestrator, or an agent, bot or A2A server that need not speak Fabric.
 license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.48.3"
+  version: "0.49.1"
   contract-version: "0.1.0"
   contract-commit: "2f020a696453ae299b123517f14957f6a1354379"
 ---

package/plugins/fabric-agent-adapter/skills/working-with-fabric/SKILL.md

@@ -2,15 +2,15 @@
 name: working-with-fabric
 description: >-
   Use when a coding agent (Claude Code, Codex, Kimi Code, Kilo, Hermes) works in a project through Fabric from a
-  terminal: finding Fabric, having the lifecycle broker start it, registering fabric-mcp once with no secret,
-  fabric_whoami first, the project board (com.status, com.list, com.read_ack; asking another Project only through
-  com.submit; unread-mail lines, watch-mail), claiming and releasing work (fabric_work_claim, fabric_work_release),
-  reports, handoffs, refusals. Triggers: "connect to Fabric", "register fabric-mcp", "claim the task in Fabric",
-  "check the project board", "ask the other project through Fabric", "Fabric is not running", «подключись к
-  Fabric», «возьми задачу в Fabric», «проверь доску проекта»,
-  «Fabric не запущен», "hit your limit, resets at". Explains the plugin's session
-  hooks. NOT for building or adapting an agent or a board responder (creating-fabric-agents,
-  adapting-projects-to-fabric, building-fabric-services), changing Fabric's own code, or messaging people.
+  terminal: finding Fabric, having the lifecycle broker start Fabric (not other apps), registering fabric-mcp once
+  with no secret, fabric_whoami first, the project board (com.status, com.list, com.read_ack; asking another Project
+  only through com.submit; unread-mail lines, watch-mail), claiming and releasing work (fabric_work_claim,
+  fabric_work_release), reports, handoffs, refusals. Triggers: "connect to Fabric", "register fabric-mcp", "claim the
+  task in Fabric", "check the project board", "ask the other project through Fabric", "Fabric is not running",
+  «подключись к Fabric», «возьми задачу в Fabric», «проверь доску проекта», «Fabric не запущен», "hit your limit,
+  resets at". Explains the plugin's session hooks. NOT for building or adapting an agent or a board responder
+  (creating-fabric-agents, adapting-projects-to-fabric, building-fabric-services), changing Fabric's own code, or
+  messaging people.
 license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: >-
   Needs the Fabric desktop app (0.4.0 or later for fabric-mcp and the fabric_work tools) and an MCP client.
@@ -19,7 +19,7 @@ compatibility: >-
   this plugin; Codex/Kimi use command hooks; Hermes/OpenCode/OpenClaw/Pi use native context plugins after opt-in.
 metadata:
   author: PassionCode.ai
-  version: "0.48.3"
+  version: "0.49.1"
 ---
 
 # Working with Fabric
@@ -227,8 +227,9 @@ and do the work without claiming Fabric saw it.
 
 ## The session hooks
 
-In Claude Code this plugin ships four: at session start and `/clear` (not on compact or resume) the preamble above,
-or, when Fabric is down and the project uses Fabric, one line pointing at Step 1; after each turn the turn's facts (HEAD, files changed, lines added
+In Claude Code this plugin ships four: at session start and `/clear` (not on compact or resume) the preamble above
+in a project that uses Fabric, one line pointing at `fabric_whoami` in a folder with no sign of it, or, when Fabric is
+down and the project uses Fabric, one line pointing at Step 1; after each turn the turn's facts (HEAD, files changed, lines added
 and removed) and the board's unread count; at each prompt one line only when that count rose; at the end, the
 release of what the session left claimed. The turn, prompt and end hooks spool and call Fabric only when the running
 Fabric advertises `session-hooks/1`; the turn and end hooks always prune their own stale spool. All are silent in a session Fabric launched, never block the session and read no token. Read

package/plugins/fabric-agent-adapter/skills/working-with-fabric/references/session-hooks.md

@@ -19,7 +19,7 @@ need from Fabric. In Claude Code they live in the plugin's `hooks/hooks.json` an
 
 | Event | When it acts | What it does |
 |---|---|---|
-| SessionStart (`startup`, `clear`; the plugin's matcher, and the script ignores `compact` and `resume` for every host) | Claude Code has an MCP server named `fabric` (local, project or user scope) | Fabric running: adds the preamble: `fabric_whoami` first; `com.status` and `com.list`, `com.read_ack` only what was read; `fabric_work_list`, then `fabric_work_claim`; `fabric_work_release` at the end; ask another Project only through `com.submit`. Fabric down, in a project that uses Fabric (below): one line, skip `fabric_whoami` and the board, start Fabric through the lifecycle broker only if the task needs it. Fabric down anywhere else, or not registered: nothing. |
+| SessionStart (`startup`, `clear`; the plugin's matcher, and the script ignores `compact` and `resume` for every host) | Claude Code has an MCP server named `fabric` (local, project or user scope) | Fabric running, in a project that uses Fabric (below): adds the preamble: `fabric_whoami` first; `com.status` and `com.list`, `com.read_ack` only what was read; `fabric_work_list`, then `fabric_work_claim`; `fabric_work_release` at the end; ask another Project only through `com.submit`. Fabric running in a folder with no such sign (a user-scope registration reaches every folder): one line pointing at `fabric_whoami`, which names the project when Fabric serves the folder anyway (FAA-60). Fabric down, in a project that uses Fabric: one line, skip `fabric_whoami` and the board, start Fabric through the lifecycle broker only if the task needs it. Fabric down anywhere else, or not registered: nothing. |
 | Stop (each turn) | as for SessionStart, and the running Fabric's `hub.json` lists `"session-hooks/1"` in `features` | measures the turn's facts (HEAD, files changed, lines added and removed: counts and ids only, git sharing 1.5 s), spools them in one entry and starts a detached worker that sends `fabric_session_observe {event: "turn", head, filesChanged, linesAdded, linesRemoved, …}` as stored, then reads `com.status` and keeps the unread count in the session's spool (`board.json`) |
 | UserPromptSubmit | the session's spool holds a count | adds ONE line, `N unread on the project board: com.list`, only when the count rose since the last line; a fall or the same count says nothing. It reads two small files and never calls Fabric. |
 | SessionEnd | as for Stop | spools the end; the worker sends `fabric_work_release {claims: "session", outcome: "let-go", …}` (with `observedAt`, the time the hook fired, where the tool's input schema names it: Fabric 0.3.9 then refuses an end from before the session enrolled), then `fabric_session_observe {event: "end", reason}`, and removes the session's spool. Reason `clear` ends nothing: `/clear` keeps the agent process and its fabric-mcp, so no claim is released and no end observed; turns already spooled still go out (since 0.42.0) |
@@ -74,7 +74,9 @@ starts it under a background watcher. It rejoins the session (`CLAUDE_CODE_SESSI
 `fabric-mcp --rejoin-only` for each look, prints one line each time the unread count rises, and waits `interval`
 ± 20 % between looks (after the jitter never under 10 s and never over 15 minutes). It shares the session's
 once-a-minute rejoin with the Stop worker: a look within a minute of the last rejoin (the worker's `rejoined` mark or
-its own) waits instead, and its own rejoin renews that mark when the session's folder exists. While Fabric is down or
+its own) waits instead, and its own rejoin renews that mark when the session's folder exists. Because its looks keep
+that mark fresh, a Stop-hook turn usually waits in the spool while it runs: a look that finds spooled turns delivers
+them through its own rejoin, as the worker would, and reads the board's count the worker writes (FAA-89). While Fabric is down or
 the board unreadable it says so once and backs off, doubling to at most 15 minutes. It exits on its stdin's end (when started with a pipe), SIGTERM, SIGINT or SIGHUP,
 or when its parent is gone. It refuses to start in a session Fabric launched, and without a `fabric` registration.
 

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session.py

@@ -118,6 +118,7 @@ from fabric_session_hosts import (  # noqa: F401
 from fabric_session_cli import (  # noqa: F401
     REJOIN_MIN_INTERVAL_S,
     PREAMBLE,
+    POINTER,
     DOWN_NOTICE,
     QUIET_SOURCES,
     read_hook_input,

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session_cli.py

@@ -65,6 +65,16 @@ PREAMBLE = (
 )
 
 
+#: FAA-60: one line where Fabric runs and `fabric` is registered, but nothing says this folder works through it (a
+#: user-scope registration reaches every folder of the machine). It hides nothing: `fabric_whoami` names the project
+#: when Fabric serves the folder all the same.
+POINTER = (
+    "[fabric-agent-adapter] Fabric is running and this {host} has `fabric` registered; this folder carries no sign that "
+    "it works through Fabric. If it does, call `fabric_whoami`: it names the project. The working-with-fabric skill has "
+    "the routine."
+)
+
+
 #: One line, and only in a project that uses Fabric (project_uses_fabric): everywhere else a Fabric that is down is
 #: nothing the session needs to hear.
 DOWN_NOTICE = (
@@ -89,8 +99,8 @@ def read_hook_input() -> Dict[str, Any]:
 def hook_session_start(payload: Dict[str, Any], env: Optional[Dict[str, str]] = None,
                        host: str = "claude") -> Optional[str]:
     """What to print, or None: Claude/Codex hook JSON, plain context for native plugins and Kimi. The preamble when the
-    host has `fabric` registered and Fabric runs; when it is down, one line, and only in a project that uses Fabric
-    (project_uses_fabric). Silent on a compacted or resumed session (`source`), which already holds what it was told,
+    host has `fabric` registered, Fabric runs and the project uses Fabric (project_uses_fabric); a one-line pointer
+    when the project shows no sign (FAA-60); when Fabric is down, one line, and only in a project that uses Fabric. Silent on a compacted or resumed session (`source`), which already holds what it was told,
     and in a session Fabric launched. How to read the machine's Fabric services is the host instructions' to say."""
     if host not in HOSTS or payload.get("source") in QUIET_SOURCES or fabric_launched(env):
         return None
@@ -102,7 +112,7 @@ def hook_session_start(payload: Dict[str, Any], env: Optional[Dict[str, str]] =
     if not registered:
         return None
     if locate_hub(fabric_root(env=env))["state"] == "running":
-        context = PREAMBLE.format(host=HOSTS[host])
+        context = (PREAMBLE if project_uses_fabric(cwd, env, registration) else POINTER).format(host=HOSTS[host])
     elif project_uses_fabric(cwd, env, registration):
         context = DOWN_NOTICE
     else:

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session_env.py

@@ -57,7 +57,7 @@ SESSION_ID = re.compile(r"[A-Za-z0-9._:-]{1,128}")
 LOOPBACK_ORIGIN = re.compile(r"http://127\.0\.0\.1:(\d{1,5})")
 
 
-VERSION = "0.48.3"
+VERSION = "0.49.1"
 
 
 HOSTS = {"claude": "Claude Code", "codex": "Codex", "kimi": "Kimi Code",

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session_mail.py

@@ -2,11 +2,12 @@
 agent waits on it, with backoff while Fabric is down. Standard library only."""
 from __future__ import annotations
 
+import json
 import os
 import sys
 import time
 from pathlib import Path
-from typing import Optional
+from typing import Any, Dict, Optional, Tuple
 
 from fabric_session_env import (  # noqa: E402 - the kit (FAA-65)
     BOARD_STATUS_TOOL,
@@ -28,6 +29,7 @@ from fabric_session_mcp import (  # noqa: E402 - the kit (FAA-65)
     NoSessionError,
     _wait_for_session_tools,
     board_unread,
+    deliver,
 )
 
 
@@ -43,7 +45,8 @@ def poll_unread(session_id: str, cwd: Path, env: Optional[Dict[str, str]] = None
     answers but the board cannot be read, ("down", why) when Fabric cannot be reached, ("wait", seconds) when the
     session rejoined within the last minute (the Stop worker's mark, or this one's): the rejoin budget is shared, so
     no fabric-mcp starts then (FAA-68). No fabric-mcp starts unless the running Fabric advertises session-hooks/1
-    (the rejoin). A successful rejoin renews the mark in the session's folder when the hooks made one."""
+    (the rejoin). A successful rejoin renews the mark in the session's folder when the hooks made one. Turns the hooks
+    spooled while the mark held them back are delivered by this look, through the same rejoin (FAA-89)."""
     env = dict(os.environ if env is None else env)
     directory = session_dir(session_id, env)
     left = rejoin_wait(directory)
@@ -57,6 +60,8 @@ def poll_unread(session_id: str, cwd: Path, env: Optional[Dict[str, str]] = None
     registration = claude_registration(cwd, env)
     if not registration:
         return "down", "Claude Code has no MCP server named fabric"
+    if directory.is_dir() and any(directory.glob("*-*.json")):
+        return _deliver_and_count(directory, env, deadline_s)
     client: Optional[McpStdio] = None
     try:
         deadline = time.monotonic() + deadline_s
@@ -86,6 +91,35 @@ def poll_unread(session_id: str, cwd: Path, env: Optional[Dict[str, str]] = None
             client.close()
 
 
+def _deliver_and_count(directory: Path, env: Dict[str, str], deadline_s: float) -> Tuple[str, Any]:
+    """FAA-89: the hooks' worker drains the spool through one rejoin and writes the board's unread count beside it;
+    this look reads that count instead of rejoining a second time within the minute."""
+    started = time.time()
+    deliver(directory, env, deadline_s)
+    if not directory.is_dir():  # the look delivered the session's end, and the worker removed its folder
+        return "down", "the session ended: its spooled turns were delivered"
+    board = directory / "board.json"
+    try:
+        fresh = board.stat().st_mtime >= started - 1
+    except OSError:
+        fresh = False
+    unread = None
+    if fresh:
+        try:
+            data = json.loads(board.read_text(encoding="utf-8"))
+            unread = data.get("unread") if isinstance(data, dict) else None
+        except (OSError, ValueError):
+            unread = None
+    if isinstance(unread, int) and not isinstance(unread, bool) and unread >= 0:
+        return "ok", unread
+    if fresh:
+        return "unavailable", "the project board cannot be read"
+    left = rejoin_wait(directory)
+    if left > 0:
+        return "wait", left
+    return "down", "the spooled turns could not be delivered now"
+
+
 def watch_mail(session_id: str, cwd: Path, env: Optional[Dict[str, str]] = None, interval: float = 60, *,
                poll: Optional[Callable[[], Tuple[str, Any]]] = None, out: Callable[[str], None] = print,
                wait: Callable[[float], bool], stop: Callable[[], bool], rng: Callable[[], float]) -> int: