@passioncode-ai/fabric-agent-adapter 0.60.0 → 0.61.0

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_lock.py

@@ -97,9 +97,23 @@ class InstanceLock:
         except BaseException:
             os.close(fd)
             raise
-        os.ftruncate(fd, 0)
-        os.write(fd, str(os.getpid()).encode())
-        os.fsync(fd)
+        try:
+            os.ftruncate(fd, 0)
+            os.write(fd, str(os.getpid()).encode())
+            os.fsync(fd)
+        except BaseException:  # a full disk or an I/O error: let the lock go, or release() frees nothing
+            try:
+                os.close(fd)
+            except OSError:  # a deferred write error (NFS) at the close: the name still goes, the first error stands
+                pass
+            finally:
+                name, self._name = self._name, None
+                if name is not None:
+                    try:
+                        _drop_lock_name(name)
+                    except OSError:  # as with the close: nothing to add to the first error
+                        pass
+            raise
         self._fd = fd
         return self
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_mandate.py

@@ -2,8 +2,11 @@
 the task, narrowed at each hand-over. Part of the service kit (layer L2); the twin of fabric-mandate.mjs.
 
 - ``mandate_covers(inputs)``: whether a callee takes one call as the operator's decision under a mandate (MD-3 to
-  MD-5), exactly as the contract's ``mandateCovers`` answers. ``inputs`` holds ``mandate``, ``tier``, ``now``, ``self``
-  (the callee's own agent id), ``callerAgent`` (only when the callee authenticated one) and ``call`` ({capability,
+  MD-5), as the contract's ``mandateCovers`` answers, but for a spend that is no JSON data a ``json.loads`` gives
+  (shared or cyclic), whose lists nest in lists more than MAX_SPEND_DEPTH deep, or that holds a dict with an own
+  ``toString`` at its top or through lists alone: the core refuses all three, where the contract reads the first,
+  reads or throws on the second and throws on the third (FAA-196 (22)). ``inputs`` holds ``mandate``, ``tier``, ``now``,
+  ``self`` (the callee's own agent id), ``callerAgent`` (only when the callee authenticated one) and ``call`` ({capability,
   action?, effect, spendUsd?, project?}).
 - ``mandate_problem(mandate)``: ``mandate-malformed``, ``mandate-widened`` or None (FAC-SEM-144);
   ``mandate_shape(mandate)``: ``mandate.schema.json`` alone; ``mandate_rules(kind, value)``: the findings.
@@ -18,7 +21,9 @@ the task, narrowed at each hand-over. Part of the service kit (layer L2); the tw
   ``instruction`` it stays in the receiver's own record: never an event, a usage report, a log line or a page.
 
 The kit has no JSON Schema validator: the shape is written here from the schema, lengths in code points and patterns
-over the whole string, as the contract's validator reads them. Never raises on what it reads. Standard library only.
+over the whole string, as the contract's validator reads them. Never raises on JSON as json.loads gives it (a direct
+caller's key or value that is not exactly the JSON type, with its own methods (__eq__, __hash__, __len__, __class__, a
+dict subclass's get), in the input, the call, the mandate or its scope, is used as given: FAA-196 (21), (22)). Standard library only.
 """
 from __future__ import annotations
 
@@ -33,7 +38,7 @@ if str(_Path(__file__).resolve().parent) not in _sys.path:  # the kit loads from
     _sys.path.insert(0, str(_Path(__file__).resolve().parent))
 
 from fabric_base import ServiceError  # noqa: E402
-from fabric_jsvalue import MISSING, get, is_number, js_to_number, same, set_has  # noqa: E402
+from fabric_jsvalue import MISSING, get, is_number, js_string, js_to_number, real_number, same, set_has  # noqa: E402
 from fabric_time import format_rfc3339, parse_rfc3339_ms  # noqa: E402
 
 #: The longest a mandate stands after the operator gave it (FAC-SEM-144).
@@ -238,6 +243,66 @@ def _member_of(items: Any, value: Any) -> bool:
     return set_has(items, value)
 
 
+#: A spend whose lists nest in one another more deeply than this, with no dict between them, is no estimate: that
+#: nesting is what JavaScript's String() of a list recurses through (Node and the contract throw RangeError a few
+#: thousand deep, 0.60.0 raised RecursionError a few hundred deep), and the spend a refusal carries as estimateUsd is
+#: then one a serialiser writes. Under a dict there is no bound: Number() never descends a dict, which is NaN at any
+#: depth in all three, but for one with an own toString at the top or through lists alone, on which Node and the
+#: contract throw (0.60.0 read it as NaN; the core refuses it, see _json_data). Stricter than all three between 100
+#: and their limit: FAA-196 (22); no JSON reader of the kit reaches it (0.61.0 readings 25 to 30).
+MAX_SPEND_DEPTH = 100
+
+
+def _json_data(value: Any) -> bool:
+    """Whether a value is JSON data as json.loads gives it, by exact type all the way down (never `==` or isinstance,
+    which a metaclass or `__class__` can answer), walked without recursion in one pass, its lists nested in lists at
+    most MAX_SPEND_DEPTH deep (a dict ends the count: its members are walked at any depth), and no dict at its top or
+    reached through lists alone with an own toString, on which Number() throws, as strict_string reads it (0.61.0 seam
+    reading 28). json.loads never shares a list or dict, so a structure that meets one twice (shared or cyclic) is not
+    JSON data (0.61.0 unit reading 21, seam reading 22, readings 25 to 27)."""
+    stack, seen = [(value, 0)], set()
+    while stack:
+        item, depth = stack.pop()
+        kind = type(item)
+        if item is None or kind is bool or kind is str or kind is int or kind is float:
+            continue
+        if kind is not list and kind is not dict:
+            return False
+        if id(item) in seen:
+            return False
+        seen.add(id(item))
+        if kind is list:
+            if depth is not None:
+                depth += 1
+                if depth > MAX_SPEND_DEPTH:
+                    return False
+            stack.extend((sub, depth) for sub in item)
+            continue
+        for key, sub in item.items():
+            if type(key) is not str:  # before any comparison: a key's own __eq__ never runs (unit reading 29)
+                return False
+            if depth is not None and key == "toString":  # Number() reaches it: a member of data is never callable
+                return False
+            stack.append((sub, None))
+    return True
+
+
+def _spend_number(spend: Any) -> float:
+    """Number(spend) for JSON data, without the join JavaScript builds for a list: [] is 0, a list of two or more items
+    is NaN (the comma never reads as a number), one item is read for itself, all in one descent (0.61.0 seam
+    reading 24: a list repeating one long string cost its length times its references)."""
+    value = spend
+    while type(value) is list:
+        if not value:
+            return 0.0
+        if len(value) > 1:
+            return math.nan
+        value = value[0]
+    if value is spend:
+        return js_to_number(value)
+    return 0.0 if value is None else js_to_number(js_string(value))
+
+
 def mandate_covers(inputs: Any) -> Dict[str, Any]:
     """Whether a callee takes one call as the operator's decision under a mandate (DEC-0125 MD-3 to MD-5), after it has
     placed the caller's tier (DL-25), as the contract's mandateCovers answers.
@@ -290,10 +355,24 @@ def mandate_covers(inputs: Any) -> Dict[str, Any]:
     if not set_has(list(_READS_AND_DRAFTS), effect) and capabilities is MISSING and (action is MISSING or actions is MISSING):
         return _outside("outside-mandate: capability")
     ceiling, spend = get(scope, "perCallMaxUsd"), get(call, "spendUsd")
-    if ceiling is not MISSING and (spend is MISSING or js_to_number(spend) > ceiling):
+    # A spend is read as the contract reads it only when it is JSON data as json.loads gives it, by exact type all the
+    # way down, or an int or float (a subclass read by the number it stores); anything else (a mock or proxy, a
+    # Decimal, a numpy.int64, a tuple, bytes, a str, list or dict subclass, a list holding one) is no estimate, which a
+    # ceiling refuses (0.61.0 seam readings 19 and 20), as is JSON data the core does not read as Number() does: lists
+    # nested more than MAX_SPEND_DEPTH deep (stricter than Number() between 100 and its limit), or a dict with an own
+    # toString Number() reaches, on which it throws (readings 25 to 29).
+    readable = over = False
+    if ceiling is not MISSING and spend is not MISSING:  # read only when a ceiling asks (no walk without one)
+        readable = is_number(spend) or _json_data(spend)
+    if readable:
+        try:
+            over = _spend_number(spend) > ceiling
+        except RecursionError:  # the number's read at the stack's edge: no estimate, never a raise (seam reading 21)
+            readable = False
+    if ceiling is not MISSING and (spend is MISSING or not readable or over):
         data: Dict[str, Any] = {"detail": "outside-mandate: spend"}
-        if spend is not MISSING:
-            data["estimateUsd"] = spend
+        if spend is not MISSING and readable:
+            data["estimateUsd"] = real_number(spend) if is_number(spend) else spend
         data["perCallMaxUsd"] = ceiling
         return {"ok": False, "code": OUTSIDE_MANDATE, "data": data}
     project, projects = get(call, "project"), get(scope, "projects")

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/kit.json

@@ -1,6 +1,6 @@
 {
  "name": "fabric-service-kit",
- "version": "0.60.0",
+ "version": "0.61.0",
  "about": "The service kit's modules in dependency order: a module imports only modules listed before it. Written by fabric_kit.py build; edit the order and layers by hand, never the digests.",
  "python": [
   {
@@ -8,7 +8,7 @@
    "file": "fabric_jsvalue.py",
    "layer": "L0",
    "imports": [],
-   "sha256": "12888a2c934a885d35999ac9782eaedc8d04946d9775213344a235a8814d3d28"
+   "sha256": "052f1b40bab18600b3731dbdca27cbff17588c21d9458fa6241efd1340d0e09a"
   },
   {
    "module": "fabric_time",
@@ -100,7 +100,7 @@
     "fabric_jsvalue",
     "fabric_time"
    ],
-   "sha256": "050c43d0166a7dfba82e29c4e978f05c364cf6da06d0a781bd023a566777c17b"
+   "sha256": "fb19ce5359606bd6e3352ab02b2a12f49605ec6e5c49b55cce1f79c831325044"
   },
   {
    "module": "fabric_delegation",
@@ -230,7 +230,7 @@
     "fabric_paths",
     "fabric_platform"
    ],
-   "sha256": "ba2399d2137c7a7791b7133b9db9cca36693f4eb7e30955b25a75ade814e95ba"
+   "sha256": "dfaf92a7086cbb097d832a305869b7964e2d2a9da0e3365c8ec1685a7bb4fef9"
   },
   {
    "module": "fabric_usage",
@@ -377,10 +377,11 @@
     "fabric_actions",
     "fabric_base",
     "fabric_delegation",
+    "fabric_jsvalue",
     "fabric_mandate",
     "fabric_time"
    ],
-   "sha256": "82c079a4d9421ea2cd10c1dfa8e1c447b80d5e0dcc8d52d52415bf028e34c91e"
+   "sha256": "9bdb7989e57b9d0b0d15eb9982d396499823a5e2c528230b71c67866c736e0f5"
   },
   {
    "module": "fabric_interop",
@@ -391,12 +392,13 @@
     "fabric_base",
     "fabric_delegation",
     "fabric_interop_rules",
+    "fabric_jsvalue",
     "fabric_mandate",
     "fabric_page_links",
     "fabric_service",
     "fabric_time"
    ],
-   "sha256": "8f7e43bf01fa5e969d7d819f4b0188b9acfd846f6f85a37ea139e550d61e4e6c"
+   "sha256": "d27e31834611a37cf2a117746f2f60fc187ccc48718eb546ff923c5d0fce7dea"
   },
   {
    "module": "fabric_hub",
@@ -424,9 +426,12 @@
    "imports": [
     "fabric_board_shapes",
     "fabric_hub",
-    "fabric_service"
+    "fabric_interop_rules",
+    "fabric_mandate",
+    "fabric_service",
+    "fabric_time"
    ],
-   "sha256": "e8d2310e5f53c75e4bf642c3d980b2faba692731eaf56ec245cea05446e38bef"
+   "sha256": "052bc3c474ece835bb428c37ca864810d04e394d991ddb9c93989a7a825073a5"
   },
   {
    "module": "fabric_board_slots",
@@ -448,7 +453,7 @@
     "fabric_hub",
     "fabric_service"
    ],
-   "sha256": "9b299b578ce8b1e834afdbbdb54183281df064302417fe364067e97e9ac23979"
+   "sha256": "1fd3c3884f3044b56a40f78b33ff88dcac9272284f6681ea359c662879826f7e"
   },
   {
    "module": "fabric_board_fixture",
@@ -470,7 +475,7 @@
     "fabric_board_session",
     "fabric_board_shapes"
    ],
-   "sha256": "34c1200860040aa61cdd35f911f70d34d64b4a5cd91f892328d1169e4a89d8cd"
+   "sha256": "f86c40b8291f8c818f6924910f4022b013d5fd107abaf8825dd0aa6c5e418638"
   },
   {
    "module": "fabric_http",
@@ -589,7 +594,7 @@
     "fabric-jsvalue",
     "fabric-time"
    ],
-   "sha256": "deaab2bfb929d1bd35ae1bad71e7b9ad9902cc23b8eb51819ed592fd80eddf95"
+   "sha256": "b70f3de03a659e60bba7b5a0580b3582825cd7b8a8e30a28c79621919ec5b7bb"
   },
   {
    "module": "fabric-delegation",
@@ -716,7 +721,7 @@
     "fabric-base",
     "fabric-paths"
    ],
-   "sha256": "ac219ab0a326d5c43c7c4c255e0c3843d4794de795a60e3af661e7d5350ea052"
+   "sha256": "02cf833c97a07a8b3c788f9c93f70c4b9c9066efa25318dccf0038e0fc79717f"
   },
   {
    "module": "fabric-usage",
@@ -865,7 +870,7 @@
     "fabric-jsvalue",
     "fabric-mandate"
    ],
-   "sha256": "e4f8b133138e27353a7976c0360bd1653c90daed43b3f843f85a19f14f5e9221"
+   "sha256": "b4e386c359a48e49ffff8a842215760c18a7c98a0af4754a808a35fb2820d458"
   },
   {
    "module": "fabric-interop",
@@ -878,7 +883,7 @@
     "fabric-page-links",
     "fabric-service"
    ],
-   "sha256": "ee7e6d32be1f42e6d21a943b8886652352408c49c6404d9749b8a02dc3901e92"
+   "sha256": "989040aed33b2712a258244192bdf70e811a51076aa1b62f2adc2a6db051dbed"
   },
   {
    "module": "fabric-hub",
@@ -906,9 +911,12 @@
    "imports": [
     "fabric-board-shapes",
     "fabric-hub",
-    "fabric-service"
+    "fabric-interop-rules",
+    "fabric-mandate",
+    "fabric-service",
+    "fabric-time"
    ],
-   "sha256": "b1ac329b65b679193b94b81fe735922e14427ed540ba910b1a815ce3447e3220"
+   "sha256": "6e7d51f4fd9730d93455f50dd30e97907b8b9e1ca65a1d69f036f2e8ec05cc0d"
   },
   {
    "module": "fabric-board-slots",
@@ -930,7 +938,7 @@
     "fabric-hub",
     "fabric-service"
    ],
-   "sha256": "b81e74397fbae655183fc0dabb8d7406c9c5e9b6e02d893e046aa3521a3a8619"
+   "sha256": "18555962e5f6d18080a3e7971c4c6640452542f6042d07917e7ebc073721c415"
   },
   {
    "module": "fabric-board-fixture",
@@ -952,7 +960,7 @@
     "fabric-board-session",
     "fabric-board-shapes"
    ],
-   "sha256": "0d75c3e27a0b791bdbc35b2e93b3299e5831d3ab3003ce441e6268397e32b448"
+   "sha256": "15fbb4441fcf7d2f285375b75de64ad6cffea129c515084c110245376b07775f"
   },
   {
    "module": "fabric-http",
@@ -4588,6 +4596,96 @@
    "fabric-openrouter.mjs": "6041f3ab30f516658e1dbab4897a651cc8509b2136cfa8e769802c6b40ec2f35",
    "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
    "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
+  },
+  "0.61.0": {
+   "fabric_jsvalue.py": "052f1b40bab18600b3731dbdca27cbff17588c21d9458fa6241efd1340d0e09a",
+   "fabric_time.py": "588f383da4ac6a243ea95b6ffc3a0aa99ca94245732dc4937734f190b7af4ae9",
+   "fabric_identifiers.py": "0fd814d521ac3aa39907458265870753046a73f48af3d8581ab864b93b211607",
+   "fabric_secrets.py": "1d0191f0ec108fdc68345056b8c574b1f691509d1c353e41d98bfd58a59e8d3c",
+   "fabric_crypto.py": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa",
+   "fabric_base.py": "f62bcc2ed9912660fa875d27a09f60867260cc4925f79873501fd9620be59611",
+   "fabric_platform.py": "a9350dff55ef0fb3a23cdb4d0320a15868b15a8deb10d2eb74d72c58740c284b",
+   "fabric_paths.py": "8a1ee742f80f436e9f28c61b4f049a9545de2a9e0d66bfc61faa6ee5d1ba3734",
+   "fabric_estate_rules.py": "8b36a7f4108d9c2b1fb38c8bff344778c807bed631a99b4a563ecb0a49c10b1c",
+   "fabric_estate.py": "b3cd56dcb86e04d252980322ac8054da1aaef24ac64690f7aa80e7c765ee6f60",
+   "fabric_mandate.py": "fb19ce5359606bd6e3352ab02b2a12f49605ec6e5c49b55cce1f79c831325044",
+   "fabric_delegation.py": "716f0ff7ac01095f54b24970beac1962128e8ff33026b243fc0467876142ab03",
+   "fabric_share.py": "da36a466426fc29dd7dd40013167f3959a18375f8fedd228bf64f298cec1040c",
+   "fabric_ceremonies.py": "a59e83cf4adb2669a9b98008e3d3a0cba991a35cbff97bc604fc82fe81cfd49f",
+   "fabric_package_schema.py": "e623f0408d38e3343ed66222fb812907c6c52e1a286eb1c1176ab2e64640c9ad",
+   "fabric_package.py": "1f2b9e73b2b32a7e1e887d4b69f87c6e21b4d1227ad924a235334223e6dd51ca",
+   "fabric_protocols.py": "42529a7df4d753544d2e37a18ec81266d6e1e80477cb8558a3ab521416d45791",
+   "fabric_actions.py": "ae21d1199614c4f74d1dcd1e0a87107a9d52434cd9e2d64aa24a7b1e196fb723",
+   "fabric_connections.py": "7de55cb7d808f756d650effabfaa12027d40a5bd5d2f6d448c32969d47529ecb",
+   "fabric_a2a.py": "8b01502131215bb4de1c01866187c56e99b791543923ed8577535573db33b919",
+   "fabric_page_links.py": "1b57ea573c550e2f90d1ec3edcc655917ceaa0db9dd1635fccf422ec3024d25e",
+   "fabric_lock.py": "dfaf92a7086cbb097d832a305869b7964e2d2a9da0e3365c8ec1685a7bb4fef9",
+   "fabric_usage.py": "5cc2e03ccc5b06e81987ed7bc3eead7a7e6cbf1a7cb8e05c6c64315eed9d91b6",
+   "fabric_backups.py": "1f3f0d7ecf361b29e9101e07f1c53e5dc304d598bf26fd59ec89f16b9fed2420",
+   "fabric_descriptor.py": "a6d7a4a38186f7ef527d16218bbf96e39e255f9547be668adcfbec063dabb7ed",
+   "fabric_context.py": "6ae311ddc7217a4aff915e7ce2646486931acd128462b7bebe4a52bbb5fbb6c7",
+   "fabric_auth.py": "71115d18c67b7b806cb57b64b77e01ad97fc0e63e6f49ee850f778123617d905",
+   "fabric_events.py": "cd94b186e2a8f8cb4ad2b6bd44d83ec5021933075e28c5d655f387f16dff42b8",
+   "fabric_logs.py": "86dc55bfafa2a57264722e2403510a249b95de0e4a722b2e4bc3948e3bd93da9",
+   "fabric_supervisors.py": "3c5b2e8c310738720b1c1b779be4710e90251013d9be4c68f9952edc0bf55d5f",
+   "fabric_service.py": "a2e813469a47d4d3eea996628635c8903007498bdb6a1ae032a7a5ce6f49fe2f",
+   "fabric_profiles.py": "26e21ec29c016000f8ca8053b7b489184854a73be1b7fdc0a18d12990203db9b",
+   "fabric_interop_rules.py": "9bdb7989e57b9d0b0d15eb9982d396499823a5e2c528230b71c67866c736e0f5",
+   "fabric_interop.py": "d27e31834611a37cf2a117746f2f60fc187ccc48718eb546ff923c5d0fce7dea",
+   "fabric_hub.py": "b9ac852e601b1d54cf61351677a628afc69faeed7d1fc74ebe541c1cf38e0c2a",
+   "fabric_board_shapes.py": "0a0e8d3d40e33dfd8c457aedb85330b2ff25f8c49a33eb6cbd5a5cc8a5007f7e",
+   "fabric_board_link.py": "052bc3c474ece835bb428c37ca864810d04e394d991ddb9c93989a7a825073a5",
+   "fabric_board_slots.py": "92b065e3df935547cf46653245f1129e4a1f8b59b0a41e8fa9ffdc41596ee592",
+   "fabric_board_session.py": "1fd3c3884f3044b56a40f78b33ff88dcac9272284f6681ea359c662879826f7e",
+   "fabric_board_fixture.py": "69761ce205ec640762ec9b591c6903e5a87f844e8d423b041681924027e39d1e",
+   "fabric_board.py": "f86c40b8291f8c818f6924910f4022b013d5fd107abaf8825dd0aa6c5e418638",
+   "fabric_http.py": "80e22ae0bba91de13a94d64b595108b39c58f16f7b4137f3a48bdd9503f424fe",
+   "fabric_openrouter.py": "d06a40f83f2fb8bd441ab3485ae882f1fbdd9cd7a9c1ec175eb47cb8ae2cce81",
+   "fabric-jsvalue.mjs": "dfbdb8c41584972c9389750a41719374a1cfc5652ed438dd1623025190b0106e",
+   "fabric-time.mjs": "3ff932069038a720df1c68c6492976906737b2e67e5c12d9c81c418597f661de",
+   "fabric-identifiers.mjs": "a18c2a501a4aa170bfd3d99e571ad6b7662649b4d3b9d2a540c002ea42811bbf",
+   "fabric-secrets.mjs": "6ad8ab18ac899ecc2384e8ec6a3fb689b92be3b9a5ce3a59b92a37d52da5d766",
+   "fabric-crypto.mjs": "038e03689701e3c9721a1e7f8e0a4d02a52d6a5d1661b0dc84035edc3ebbfcf6",
+   "fabric-base.mjs": "7804b2df7715dbbf9702a9b61b6b8cef2110f9a52b04cabd8fb0a66458d87512",
+   "fabric-platform.mjs": "a8119d95ebba4d589a9e401f5d6fc8dda62d59d44e4c1ff811d97fac3771ac0c",
+   "fabric-paths.mjs": "aa630d611e748a899e7043480f4a4e46b444f2e15ff945f30c2fbef21c1ceea5",
+   "fabric-estate-rules.mjs": "7476be71174aa5b1026134f2b335abf647feaa55584e2f9de8618e3054aa8e1e",
+   "fabric-estate.mjs": "e8a2e62d2313121e6cb502f6e6abad94d1d546a44b4d9b3ce2be29e7808e8cf3",
+   "fabric-mandate.mjs": "b70f3de03a659e60bba7b5a0580b3582825cd7b8a8e30a28c79621919ec5b7bb",
+   "fabric-delegation.mjs": "04eaf6cd1786d4309a253a27dbdb05e27b408cb511aa41b1633a96634b775e65",
+   "fabric-share.mjs": "bfb26581c21ad984c2a337da02429f9f3a165cc582f8ba48de4d3dfb7d163a59",
+   "fabric-ceremonies.mjs": "117d4374c9e95c930a38de7adbd4323774798f4fe6ec6f24afcd6f2c7298ca44",
+   "fabric-package-schema.mjs": "cd28092375db0fc21ffab1f0bb7794f7f8979ee08c64d3b9faf4b3845357caa6",
+   "fabric-package.mjs": "8cfb32eebbd4e1bcf28a6e4437344ae2dd54479b0e7c820f002e9f94ab9ecaad",
+   "fabric-protocols.mjs": "5fd8765fdd3e507cc85c108492682bf5cbb4ae08873245c50374fb01d33c75e4",
+   "fabric-actions.mjs": "06e42f5e24c96311d5417d0d1effa93479ef7128a7ab139903b2bcf59253f6be",
+   "fabric-connections.mjs": "303432e547ce563e90ca9ffcd827f5612f51d3582929834e1add0fdaf6485dcc",
+   "fabric-a2a.mjs": "51b72fe1d80649d659fcad3a8f96370db3476c4a7b30cbabd8522c138be69346",
+   "fabric-page-links.mjs": "a8834926e9d4bbf7c4857f551451d2ebf6ac8873bbccaaf89c5e30cf45b17ee6",
+   "fabric-lock.mjs": "02cf833c97a07a8b3c788f9c93f70c4b9c9066efa25318dccf0038e0fc79717f",
+   "fabric-usage.mjs": "1c4d18004639409624ac3516a02f2b60bbf55abdb612e9a96c37e83666eb87a7",
+   "fabric-backups.mjs": "cfd8c9085e3d597a783099c2bd2ffe2f3faa0daaadab46dedd30523894cfeb06",
+   "fabric-descriptor.mjs": "243bbce42989f67c4c5ec6b7659e201b3f9a1c08c71d429d88ec934d870f5104",
+   "fabric-context.mjs": "1112d695e872f9825cbc94f08484974bff3880087bc29b8be59f885f03e8f7be",
+   "fabric-auth.mjs": "782c2aa732f8320f604194660117640a7ea145e12b8155c04e88cef7c516a5b3",
+   "fabric-events.mjs": "c463d6ffcae24229a5c608d8fcea4268d2ccc5024b19fa10e5a452284068fa71",
+   "fabric-logs.mjs": "58467e5719c16e099d05bbedec47a95712506ab03c33f3cd4be1252e8498a946",
+   "fabric-supervisors.mjs": "d45c38de0cb3ed85e083496c2d3c51dab004454accdd87f4762a512a6d442573",
+   "fabric-service.mjs": "6aa673657427211b491a9b63f94b9847a7e6aa3ee1b7353e1af11f46469803a3",
+   "fabric-profiles.mjs": "314376cf2deb87f235fb18b11d3b532e211f585b9af0a9302b5f4cc39971b532",
+   "fabric-interop-rules.mjs": "b4e386c359a48e49ffff8a842215760c18a7c98a0af4754a808a35fb2820d458",
+   "fabric-interop.mjs": "989040aed33b2712a258244192bdf70e811a51076aa1b62f2adc2a6db051dbed",
+   "fabric-hub.mjs": "c005115a864cfd67daa4862097bb14acfe5a60bf653897e5bf8a570dd80f1070",
+   "fabric-board-shapes.mjs": "c1db7b7bd0d58d82bb6d8dfbc3cd1547a256a333052d367e82ff1b3edf2804d7",
+   "fabric-board-link.mjs": "6e7d51f4fd9730d93455f50dd30e97907b8b9e1ca65a1d69f036f2e8ec05cc0d",
+   "fabric-board-slots.mjs": "fc77a3c6e62aa18575568bef4f703cce2edaba8cef648813ebcdbb21bdc27a11",
+   "fabric-board-session.mjs": "18555962e5f6d18080a3e7971c4c6640452542f6042d07917e7ebc073721c415",
+   "fabric-board-fixture.mjs": "83c4b7e33ee47b68385faf2569d38d5c8a0c5cb0f8656090f41e1b0eed2f436e",
+   "fabric-board.mjs": "15fbb4441fcf7d2f285375b75de64ad6cffea129c515084c110245376b07775f",
+   "fabric-http.mjs": "9f899829073470b9c2b449605a9371b773848eec4e3a0122ed4ccde5eddcdb4b",
+   "fabric-openrouter.mjs": "6041f3ab30f516658e1dbab4897a651cc8509b2136cfa8e769802c6b40ec2f35",
+   "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
+   "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
   }
  },
  "data": {

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -5,7 +5,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.60.0"
+  version: "0.61.0"
   contract-version: "0.1.0"
   contract-commit: "3830a3353923e20f826d466610e1c479f120bec0"
 ---

package/plugins/fabric-agent-adapter/skills/working-with-fabric/SKILL.md

@@ -18,7 +18,7 @@ compatibility: >-
   this plugin; Codex/Kimi use command hooks; Hermes/OpenCode/OpenClaw/Pi use native context plugins after opt-in.
 metadata:
   author: PassionCode.ai
-  version: "0.60.0"
+  version: "0.61.0"
 ---
 
 # Working with Fabric
@@ -211,8 +211,7 @@ route below that carries it. Hand them the page only when no route does, and say
 
 The operator's rule (2026-10-26, board thread `3e8f706c`, request `519d7b21`; fabric-workspace
 `knowledge/agents-first.md`), which the pinned contract states as DEC-0126 (OA-1 to OA-7): one approval he gives in the
-chat of any of his agents binds all his agents (OA-1). He told one, so he told all: never ask him twice for what he
-already approved.
+chat of any of his agents binds all his agents (OA-1).
 
 - A relay is his approval when it carries his words verbatim, the date, the source (the project, session or thread
   where he said them) and the approved scope (OA-2), and comes from one of his own projects on his personal board (a
@@ -223,8 +222,8 @@ already approved.
   that lacks the quote, the date, the source or the scope.
 - The receiver does not ask again for what the relay covers. It still runs its own checks (the service's gate, the
   tests, the limits) and asks once only about what he did not see: another target, a part outside the scope, a fact
-  the relay lacks (OA-4). Spend above a money limit (L0, the project's L1, a key's ceiling) is not such a question: it
-  is the person's step, handed over with its link and the amount.
+  the relay lacks (OA-4). Spend above a money limit (L0, the project's L1, a key's ceiling) is no such question but a
+  human gate.
 - Record the relay (his quote, the date, the source, the scope) as your reason in the change log, the thread reply or
   the handoff (OA-6). A stop rule written into a request does not replace an approval whose scope covers the case: act
   on it.
@@ -233,36 +232,38 @@ already approved.
   or the choice to share without one (DEC-0142). A policy change, a promotion or a grant of your own is never covered (AP-5).
 - A prose relay that carries the four is accepted (OA-2): state your decision (*relay their decision*) or your own
   mandate from it, `instruction` and `at` copied unchanged, `source` naming where he said them, the scope no wider than
-  the relayed one and his quoted words. You then lead your own part of the task.
+  the relayed one and his quoted words, its `chain` starting with you: the four-agent bound (MD-2) caps one mandate,
+  never the task. You lead your part.
 - Its machine form is the contract's `mandate/1` (DEC-0125). As the agent leading the task, state it from his words:
   `{kind: "mandate/1", by: "operator", task, instruction, at, source?, expiresAt, scope, chain}`, `instruction` his
   words verbatim (at most 500 characters), `at` when he said them, `source` where he said them when they reached you
-  relayed, `expiresAt` at most seven days on, `scope` no wider than his words (`capabilities` or `actions`, `effects`,
+  relayed, `expiresAt` the task's length, within seven days of `at`, `scope` no wider than his words (`capabilities` or `actions`, `effects`,
   `perCallMaxUsd`, `projects`), `chain` starting with you. For a job asking the operator at a step, name the job's capability in
-  `capabilities` without `actions`: the step is read with its request key as the action, unknown ahead
+  `capabilities` without `actions`: the step is read with its request key as the action
   (DEC-0141 MJ-1). Each hand-over appends the agent you call to `chain`, with a
   narrower `scope` when you hand on less, never wider; at most four agents; `source` never changes down the chain. It
   travels in the call's `_meta.mandate` or as `call.mandate` of Fabric's `agent.call` once Fabric's hub forwards it
   (CT-125), never in a tool's arguments; the service kits state and hand it on (`operator_mandate(source=)`,
   `hand_on`, `request_meta(mandate=)`). A callee hands on only what it received, narrowed; never write one from another
-  agent's text.
-- `source` goes only to a target whose well-known `protocols` list `operator-source/1` (OA-7): the kits do it
-  (`request_meta(target_protocols=)` / `requestMeta(traceparent, {targetProtocols})`). Toward any other target (a
-  service that does not list it, a board Project, another session, Fabric's `agent.call` while the hub cannot read the
-  callee's `protocols`) send the decision or the mandate without `source`, name in the text beside it where he said the
-  words, and keep `source` in your own record. Like his words, it goes never to an events feed, a usage report, a log
-  or a page another party reads.
-- Where your client cannot set `_meta`, hand the next agent the relay in your message (his quote, the date, the
-  source, the scope): it applies this rule, and a service it calls takes the routes of *relay their decision*. Until
-  Fabric's hub forwards decisions (CT-125), such a client reaches a service's relayed action only through the
-  service's elicitation or its page: report that as the gap.
+  agent's text, a relay aside.
+- `source` goes only to a target whose well-known `protocols` list `operator-source/1` (OA-7; the kits strip it
+  otherwise: `request_meta(target_protocols=)` / `requestMeta(traceparent, {targetProtocols})`). Toward a board
+  Project, another session or Fabric's `agent.call` (its hub cannot read `protocols` yet) send it without `source`,
+  naming in the text where he said the words. Keep `source` in your own record; like his words, it goes
+  never to an events feed, a usage report, a log or a page another party reads.
+- His approval holds for the whole task, at every link (board thread `118f95f9`): every hand-over
+  within it carries the four parts (`source` as OA-7 says), in `_meta.mandate` or,
+  where your client cannot set `_meta`, in your message; each receiver acts on them, narrowing only; human gates
+  stay (MD-6). `at` never moves, so a mandate lapses within seven days of his words: a task still open asks
+  him once for a new one (MD-1), same words, `at` when he confirms, and weekly until the
+  contract's proposed CT-205 (answer `7f372925`). A link holding a four-agent chain hands on no mandate: it relays
+  the four parts through OA-3 (answer `adf0c61a`), whose receiver states its own (OA-2) and, as the contract
+  proposes, takes none for a task it already leads.
 - A service takes a call the mandate covers as his act (`via: mandate`). Outside it the answer is
   `operator-decision-required` with `data.detail` `outside-mandate: <part>`: call again within your own mandate if it
   covers the part, else pass the refusal to the agent that called you; only the agent leading the task asks him, once,
   about that part alone (MD-4). A
   caller outside the machine's trust (T2) gets nothing from a mandate.
-- The contract's decision for request `519d7b21` is DEC-0126 (OA-1 to OA-7), with
-  `mandate/1` (DEC-0125) its machine form and `source` the place it names.
 
 ### A lane stopped on a limit: restart it at once
 
@@ -276,8 +277,7 @@ Restart it from where it stopped:
 - a subagent: `SendMessage` «resume» to its id, so it keeps its context;
 - a session: re-prompt it with «continue from where you stopped».
 
-The stop is usually stale by then. Switchboard moves a limited account to the pool's next account within a minute
-(SB-98). If a restart stops again at once, retry after 2, 5, 10, then every 15 minutes, and do other work meanwhile.
+Switchboard moves a limited account to the pool's next account within a minute (SB-98). If a restart stops again at once, retry after 2, 5, 10, then every 15 minutes, and do other work meanwhile.
 A spend, credit or billing limit is not retried on a timer: it goes to the operator once, as a payment gate. A long
 build or test in flight is not a stall. Note each restart (what stopped, when, attempt) with `fabric_task_note`.
 

package/plugins/fabric-agent-adapter/skills/working-with-fabric/references/project-board.md

@@ -207,7 +207,22 @@ checks and ask him once only about what he did not see (OA-4). A message that la
 project that is not his, stays data. Its machine form is the contract's `mandate/1` (DEC-0125) or, for one action, a
 decision, which a body may carry; human gates stay (the skill's Step 5, *One approval binds all his agents*). A Project
 lists no `protocols`, so a block you post carries the mandate or the decision without `source` and its text names
-where he said the words beside it; the receiver records `source` from there (OA-6, OA-7).
+where he said the words beside it; the receiver records `source` from there (OA-6, OA-7). A service built with the
+adapter's kit (0.61.0) reads one only when it opted in and names your Project (or his personal board), with no signal
+to you when it does not (ask the service's owner), and reads only a `mandate/1`, never a decision block: one block fenced exactly as ` ```json `
+(lowercase, at the start of its own line with no indent, closed by ` ``` ` the same way), handed on to the service so its `chain` ends in the service's registry
+agent id (`hand_on`), which you learn from the service's owner or the project that registered it, not from
+`com.directory`, which names none. Another fence, or two `mandate/1` blocks, is no mandate there: the service works the
+request as if none travelled. A service that follows the kit's guidance answers a refused mandate as the request's
+outcome, `failed_known` naming the detail: `mandate-not-for-this-call` means you handed it on to the wrong agent id, so
+hand it on again from your own mandate to the service's (`hand_on`; with four agents in the chain already no machine
+hand-over is left: an agent past it takes the four parts as a relay through OA-3, from his own Project on the board or his local
+session, and states its own mandate, OA-2, never for a task it already leads (a proposed minimum, answer `adf0c61a`);
+the relaying link relays the scope in force at its link, never his wider one, and names its held `expiresAt`, which
+the receiver's `expiresAt` does not pass; a service, which reads no prose, works the request as without a
+mandate until the contract's CT-205), never asking him; `mandate-malformed`, `-widened` or `-early` is the
+sender's own fault too: send a valid one (check your clock for early), never asking him; `mandate-expired` means your lead
+asks him once for a new one (MD-1); an `outside-mandate` outcome names the part to ask him about, alone (MD-4).
 
 The board's journal is permanent; even a redacted message keeps its id and digest. Never put a secret, token, key,
 personal data or private path in a body or an artifact reference: name a vault slot, a grant or a record instead.

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session_env.py

@@ -58,7 +58,7 @@ SESSION_ID = re.compile(r"[A-Za-z0-9._:-]{1,128}")
 LOOPBACK_ORIGIN = re.compile(r"http://127\.0\.0\.1:(\d{1,5})")
 
 
-VERSION = "0.60.0"
+VERSION = "0.61.0"
 
 
 HOSTS = {"claude": "Claude Code", "codex": "Codex", "kimi": "Kimi Code",