@passioncode-ai/fabric-agent-adapter 0.69.1 → 0.71.0

package/CHANGELOG.md

@@ -1,5 +1,74 @@
 # Changelog
 
+## 0.71.0 (2026-11-06)
+
+The contract pin moves to `eac1a594` (`v0.1.0+2026-11-06.1`) from `3830a33` (`v0.1.0+2026-10-27.6`); between them
+DEC-0140, DEC-0146 to DEC-0148, DEC-0150 and DEC-0153.
+
+### Added
+
+- **The protocol register** gains `channel-agent-standard/1` (DEC-0150) and `fabric-ops-digest/0.1` (DEC-0153) in both
+  twins (`fabric_protocols.py`, `fabric-protocols.mjs`; `feed-protocols-vectors.json` regenerated), so a service's
+  well-known that names one is read as a known revision. A well-known naming another revision of either, such as
+  `channel-agent-standard/2`, is now refused as an unknown revision of a known protocol (FAC-SEM-099), where before
+  the name was unknown and passed.
+- The contract's `service-descriptor-ops-digest` fixture is vendored (`descriptor-fixtures.json`, 12 valid
+  descriptors); both kits' descriptor checks accept it.
+- `references/protocol.md` names the two new extension keys: `extensions/channel-agent/0.1` in a well-known answer
+  for a service with no manifest (else the manifest's `provider.extensions`), `extensions/ops-digest/0.1` in a local
+  descriptor only. The kits know their revisions and do not build or check either declaration yet: the
+  channel agent's check is FAA-197, the operations digest FAA-206 part 2.
+
+### Changed
+
+- working-with-fabric: a human gate is "a secret typed in or handed out" (DEC-0147 reads AP-4's `secret` so, a peer
+  share's export included) where it said "a typed secret": SKILL.md's human gates, the exit contract of a run Fabric
+  started on a board request, `references/on-demand-session.md` and the scenario evals; creating-fabric-agents
+  `references/resilience-and-autonomy.md` too.
+- creating-fabric-agents `references/practices.md` and the support-agent recipe name DEC-0150 as the contract's,
+  released in `v0.1.0+2026-11-05.2`, where they called it proposed, and say `check_service.py` does not read the
+  declaration yet (FAA-197), where they said it would once the schema was published.
+- working-with-fabric `references/on-demand-session.md` no longer says that an operator decision recorded under a
+  gate question's `about` settles later questions: Fabric keeps the `about` and settles nothing by it (thread
+  `1add3c03`, `5b216035`), so each gate question reaches the operator.
+
+### Upgrading
+
+- A channel agent declares under `provider.extensions` of its `fabric-agent.json`, or in its well-known `extensions` only
+  when it has no manifest (CA-1): the support-agent recipe now says so, where it offered either. A declaration
+  elsewhere is not read, and the kit does not report it yet (FAA-197).
+- A well-known `protocols` list naming another revision of the two gained protocols (`channel-agent-standard/2`,
+  `fabric-ops-digest/0.2`) now gets FAC-SEM-099 from both kits and the probe (above, Added).
+- A bundle pinned to `3830a33` or an earlier supported commit keeps working; `adapt_project.py` accepts it
+  (`SUPPORTED_CONTRACT_COMMITS`). A new scaffold writes `eac1a594`.
+- DEC-0140 PR-1 (`project.work` reserved for a Project's primary responder), DEC-0146 (the machines' report), DEC-0148
+  (a renewal by the key on record) and DEC-0147's peer-share report reach no kit code: the adapter declares no
+  `project.work` and implements none of those sides; a service built with the kit must not declare or serve
+  `project.work` either, and the kits do not check it yet (FAA-244). DEC-0140 PR-2 (the operator's move of a slot) the board kit has
+  followed since FAA-155 (0.53.1); it is now inside the pin (`references/board.md`). No vendored schema changed.
+
+## 0.70.0 (2026-11-06)
+
+### Fixed
+
+- working-with-fabric: on macOS, with `PASSIONCODE_APPLICATIONS` set to a folder starting with `/`, `status` looks for
+  `Fabric.app` only there, as the launcher installs every app in that one folder (its `lib/catalog.js` `appsDir`); an
+  empty or relative value keeps the default order (FAA-237, the launcher's reading of its PR #277, board thread
+  `cb1df3d5`). `status` names root's copy outside the home "the administrator's copy, which the launcher does not
+  update" (`administratorsCopy` and `launcherFolder` in `--json`); a launcher's folder that already holds another
+  user's `Fabric.app` is not proposed: `status` says to unset the variable and use `~/Applications`, as the launcher's
+  PR #277 advises for a bundle the user cannot write (`bd22566`, open: launcher 0.2.75 with the variable unset
+  installs into `/Applications`, so the person puts the copy in `~/Applications`); the label is about the copy
+  `status` found, not the registered command, and running it stays allowed. A folder this user cannot enter reads as
+  holding no copy: `status` names it in its install advice instead of stopping on Python's `PermissionError` (before
+  Python 3.14). With the folder set, `status` names it in its install advice and its `fabric-mcp:` line, never
+  `~/Applications` unless that folder holds another user's copy (above). The SKILL.md Step 0 row and the
+  `a-second-user-of-a-mac-registers-fabric` eval name the folder.
+- `references/project-board.md` and `references/on-demand-session.md` name Fabric's `board.read-at-start` rule for the
+  slot condition of a gate decline: Fabric took it from the adapter into its board rule (main `dbfbfce4`) and into
+  `com.enroll`'s own tool description (main `12d57bdd`), from its next release, so a live session gets one instruction
+  (FAA-231).
+
 ## 0.69.1 (2026-11-06)
 
 The tag `v0.69.0` was never published: its release run

package/README.md

@@ -301,7 +301,7 @@ Scaffolding is non-destructive by default. It writes only the paths declared in
 The default pin for new bundles is [`fabric-contract.lock.json`](fabric-contract.lock.json):
 
 - version: `0.1.0`
-- commit: `3830a3353923e20f826d466610e1c479f120bec0`
+- commit: `eac1a594aa131851f079da8bb7b2149e1951f35f`
 
 Every other mention of the default contract revision (this section, the skills' metadata, the
 skill card, `adapt_project.py`) must equal it; `python3 test/validate.py` fails a tree

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/fabric-agent-adapter",
-  "version": "0.69.1",
+  "version": "0.71.0",
   "description": "Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.",
   "scripts": {
     "test": "python3 test/validate.py && python3 -m unittest discover -s test -q && node --test 'test/*.test.mjs'"

package/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks.",
-  "version": "0.69.1",
+  "version": "0.71.0",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -5,9 +5,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.69.1"
+  version: "0.71.0"
   contract-version: "0.1.0"
-  contract-commit: "3830a3353923e20f826d466610e1c479f120bec0"
+  contract-commit: "eac1a594aa131851f079da8bb7b2149e1951f35f"
 ---
 
 # Adapting projects to Fabric
@@ -76,7 +76,7 @@ Use exactly:
 
 - contract version `0.1.0`;
 - repository `https://github.com/passioncode-ai/fabric-agent-contract`;
-- commit `3830a3353923e20f826d466610e1c479f120bec0`.
+- commit `eac1a594aa131851f079da8bb7b2149e1951f35f`.
 
 This is the default for new bundles. When checking an issued legacy bundle, preserve its
 explicit supported lock and use that exact clean checkout. Never silently upgrade or

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/adapt_project.py

@@ -22,10 +22,10 @@ import fabric_secrets as _secrets  # noqa: E402 - the contract's credential dete
 
 CONTRACT_VERSION = "0.1.0"
 CONTRACT_REPOSITORY = "https://github.com/passioncode-ai/fabric-agent-contract"
-CONTRACT_COMMIT = "3830a3353923e20f826d466610e1c479f120bec0"
+CONTRACT_COMMIT = "eac1a594aa131851f079da8bb7b2149e1951f35f"
 # #region supported-contract-revisions — docs: README.md#contract-pin
 # Only this declaration may name a legacy revision in live files.
-SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "00e050ba7429c0c60261cec871779e0fd6aeeb28", "1197a90dc4b57152cabcc71ad17db7559f35a27f", "e6c4fc16b415eec3190dd34d924d269405359dc9", "a3a66eb0052043847f6556348e37d34ca873a629", "52c7d798b9f4eb784eb4e29e717038a8912c759d", "2f020a696453ae299b123517f14957f6a1354379", "87d384ffce2757081b7ab227e5dad3dddd08328f", "0a4ce773c4b9e6bec40c6387eb3f988af7152c0e", "e742016dc396aa31e5a13a893489e43f15786c69", "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0", "c55f2d5a11c9a0197e958e87212fca7ae1154769", "07042181bfae2a481aa0da1a5651f24c76669c48", "d8146cfb0a1c74fc6432284c4356bb0c864b37b5", "82e163665e156a08aa3b92e4711015582c06162c", "1636fa97262f4a26e2086572d540c2ee701e0010", "f00a7685e3861c27f7899c033fb850a145a1708f", "a046f57cf46ea9e3da57ff8ce6a3ed4d26d8774b", "fe55fc67cba1a9e34a736da7d148d4fe2a8fbfa0", "b291bf09e0a9f9fd3c16cf540832cd021203b7d1", "0cacd08b0e95b6abf131eae1206b60792138bc3c", "2eb91c00e852d9c31d804310d38fad91589fcbac", "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
+SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "3830a3353923e20f826d466610e1c479f120bec0", "00e050ba7429c0c60261cec871779e0fd6aeeb28", "1197a90dc4b57152cabcc71ad17db7559f35a27f", "e6c4fc16b415eec3190dd34d924d269405359dc9", "a3a66eb0052043847f6556348e37d34ca873a629", "52c7d798b9f4eb784eb4e29e717038a8912c759d", "2f020a696453ae299b123517f14957f6a1354379", "87d384ffce2757081b7ab227e5dad3dddd08328f", "0a4ce773c4b9e6bec40c6387eb3f988af7152c0e", "e742016dc396aa31e5a13a893489e43f15786c69", "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0", "c55f2d5a11c9a0197e958e87212fca7ae1154769", "07042181bfae2a481aa0da1a5651f24c76669c48", "d8146cfb0a1c74fc6432284c4356bb0c864b37b5", "82e163665e156a08aa3b92e4711015582c06162c", "1636fa97262f4a26e2086572d540c2ee701e0010", "f00a7685e3861c27f7899c033fb850a145a1708f", "a046f57cf46ea9e3da57ff8ce6a3ed4d26d8774b", "fe55fc67cba1a9e34a736da7d148d4fe2a8fbfa0", "b291bf09e0a9f9fd3c16cf540832cd021203b7d1", "0cacd08b0e95b6abf131eae1206b60792138bc3c", "2eb91c00e852d9c31d804310d38fad91589fcbac", "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
 # #endregion supported-contract-revisions
 INTEROP_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/interop/0.1"
 MCP_REVISION = "2026-07-28"

package/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -14,10 +14,10 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Python 3.9+ or Node.js 20+ for the kits (Node.js 22+ for a Linux service's instance lock); the probe needs Python 3.9+. launchd steps are macOS-only; Linux services install a systemd user unit and Windows ones a per-user Scheduled Task with the kits' writers. Dashboard handoff optionally uses Fabric Dashboards MCP link/host_status/open; without it, report unresolved host capability. The contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.69.1"
+  version: "0.71.0"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
-  extension-commit: "3830a3353923e20f826d466610e1c479f120bec0"
+  extension-commit: "eac1a594aa131851f079da8bb7b2149e1951f35f"
 ---
 
 # Building Fabric services

package/plugins/fabric-agent-adapter/skills/building-fabric-services/recipes/support-agent/README.md

@@ -105,9 +105,9 @@ on its page and opens one alert when `stale` turns true: the recipe has no page
 ## Declaring the channel-agent standard
 
 An agent that answers people on a channel declares what it follows under
-`https://fabric.passioncode.ai/agent-contract/extensions/channel-agent/0.1` (the contract's proposed DEC-0150, not
-merged yet, so the key and the form may change), in its `fabric-agent.json` or its
-well-known `extensions` (the standard's 11 and 13.6; the doctrine: creating-fabric-agents
+`https://fabric.passioncode.ai/agent-contract/extensions/channel-agent/0.1` (the contract's DEC-0150, release
+`v0.1.0+2026-11-05.2`), under `provider.extensions` of its `fabric-agent.json`, or, for a service with no manifest,
+under its well-known `extensions` (CA-1; the standard's 11 and 13.6; the doctrine: creating-fabric-agents
 [practices](../../../creating-fabric-agents/references/practices.md#agents-on-a-channel-people-write-to)).
 `channel-agent.example.json` is one project's declaration in the standard's round 4 form: a required member that is
 not there yet reads `{"none": "not_yet", "until": "<date>"}`, one not used `{"none": "not_used"}`, never null except
@@ -115,8 +115,9 @@ where nothing is decided (a channel's `decision`); a final text never `not_used`
 on (FAC-SEM-164); `recommendation` only with `answered_signal: "none"`, the id of the
 board thread where the queue's owner was told; a channel's `items_seen_unit` one of `mails`, `updates`, `messages`,
 `reviews`; durations in ISO 8601; the knowledge file as a source with its
-maximum age. `test/test_channel_agent_example.py` holds the example to that form; `check_service.py` reads the
-declaration once the contract publishes its schema.
+maximum age. `test/test_channel_agent_example.py` holds the example to that form; the contract publishes its schema
+at the pin (`service-channel-agent-extension.schema.json`); `check_service.py` does not read the declaration yet
+(FAA-197).
 
 ## Configure
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/board.md

@@ -243,7 +243,7 @@ whose responder was gone. Read it as the owner's attestation, not the responder'
 
 ## When the operator moves a slot to another session (FAA-155)
 
-The contract's DEC-0140 PR-2 (accepted 2026-10-30, after this kit's pin) lets the operator move a
+The contract's DEC-0140 PR-2 (accepted 2026-10-30; in the pin since 0.71.0) lets the operator move a
 (Project, capability) slot to another live session of the Project: one transition, as `com.responder_replace` would make
 it for the receiving session (generation up, `claimed` back to `queued`, `in_progress` to `outcome_unknown`, `accepted`
 held and not transferred). The responder keeps that move instead of undoing it:

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/protocol.md

@@ -1,6 +1,6 @@
 # fabric-service/0.1: wire reference
 
-Pinned to `fabric-agent-contract` commit `3830a3353923e20f826d466610e1c479f120bec0`
+Pinned to `fabric-agent-contract` commit `eac1a594aa131851f079da8bb7b2149e1951f35f`
 (`docs/specification/service.md`, DEC-0015; the usage report DEC-0021; Windows and Linux supervision
 DEC-0032 and DEC-0033; the operator channel DEC-0034 and DEC-0035; the embedded dashboard DEC-0036;
 delegation and the operator session's lifetime DEC-0039; the meter's call window DEC-0041; session handoff DEC-0042;
@@ -25,8 +25,8 @@ record pins DEC-0127 and DEC-0128; the family and the agent network named DEC-01
 the sender it answers, or to whom it names DEC-0135; a hand-over adds no naming list the scope in force leaves out
 DEC-0136; a job's step under the mandate read under the job's own capability DEC-0141; a person's comparison of codes as a human
 step DEC-0142. The organization's member list, draft exchange, relay and the machines' report, DEC-0129, DEC-0131 to
-DEC-0134 and DEC-0139, an organization's adaptation DEC-0138 and the peer share DEC-0142, reach the kit only as
-protocol register entries). The contract's schemas are normative;
+DEC-0134 and DEC-0139, an organization's adaptation DEC-0138, the peer share DEC-0142, the channel-agent standard DEC-0150
+and the operations digest DEC-0153, reach the kit only as protocol register entries). The contract's schemas are normative;
 this page is the working summary. Extension key:
 `https://fabric.passioncode.ai/agent-contract/extensions/service/0.1`.
 
@@ -61,6 +61,11 @@ File `<id>.<instance>.json`, mode 0600 (on Windows a protected ACL), atomic.
 | `runner` | optional `{kind?, credentialKind}` (DEC-0061): `credentialKind` `subscription`, `key`, `platform-metered` or `none`: a kind, never a credential (`FAC-SEM-086` refuses a credential-shaped value here or in `installedBy`); a subscription names its vendor's runner (`claude-code`, `kimi-code`, `codex`) |
 | `peer` | optional `{endpoint, custody, residency, maxDataClass}` (DEC-0061): the service is offered to others. `endpoint` `https://<dns-name>[:<port>][/<path>]`, never a reserved name (`FAC-SEM-085`); `custody` `organization-managed`, `personal` or `processor-hosted` (an organization's cloud a processor runs under a processing agreement, DEC-0099); `residency` 1–32 ISO 3166-1 alpha-2 codes, `EU` admitted, user-assigned codes refused; `maxDataClass` `public` < `internal` < `confidential` < `restricted`. An offer needs `runner` and never runs on a subscription. A host sends a request from anyone but the operator only when `peer_refusal` / `peerRefusal` answers null (`FAC-SEM-088`); usage rows may take `route: "platform-metered"` |
 
+A local descriptor MAY say where a collector on the same machine reads its daily operations digests, under
+`https://fabric.passioncode.ai/agent-contract/extensions/ops-digest/0.1` (`fabric-ops-digest/0.1`, DEC-0153, OD-9,
+FAC-SEM-168): 1 to 8 `{dir, source}`, `dir` a folder inside `paths.data`. A remote descriptor carries none, and the key
+is read nowhere else. The kits know the revision and neither write nor check the declaration yet (FAA-206).
+
 ## Identifier equality (DEC-0076)
 
 Two identifiers are the same when their normal forms are equal. `normal_identifier` / `normalIdentifier` and
@@ -139,6 +144,12 @@ No auth; the Host/Origin guard applies; answered from memory in under 100 ms.
        {"id": "notify", "kind": "service", "target": "communicator.default", "capability": "communicator.notify"}],
       degraded=degraded, states={"router": "ok" if model_answered else "down"}))
   ```
+- `extensions` MAY carry a channel agent's declaration under
+  `https://fabric.passioncode.ai/agent-contract/extensions/channel-agent/0.1` (`channel-agent-standard/1`, DEC-0150,
+  FAC-SEM-162 to 165) only for a service with no manifest; one with a manifest declares it under its manifest's
+  `provider.extensions` alone (CA-1). A well-known answer lists `channel-agent-standard/1` in its `protocols` only once
+  its readers have re-pinned to this revision of the contract (channel-agent.md). The kits know the revision (`PROTOCOL_REVISIONS`) and do not build or check the
+  declaration yet (FAA-197).
 - `surfaces.mcp.auth`: `descriptor` (default), `own` (DEC-0024) or `delegation` (DEC-0039, DL-16):
   the MCP surface takes only the estate's delegation tokens, and the top-level
   `auth.delegation {issuer, jwks}` is then required. With `own` or `delegation` the descriptor's

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-protocols.mjs

@@ -5,11 +5,11 @@ import { credentialName, secretArgument, secretUrl, secretValue } from './fabric
 // An event about traced work carries traceId and spanId together (fabric-interop/0.1 C3.4 c);
 // traceIds(traceparent) in fabric-interop.mjs gives both.
 
-/** Each contract protocol's published revisions, oldest first (the contract's `PROTOCOL_REVISIONS`); a test holds it equal to the contract's. */
+/** Each contract protocol's published revisions, oldest first (the contract's `PROTOCOL_REVISIONS`); the adapter's own test holds it equal to the contract's at the adapter's pin, not in a vendored copy. */
 export const PROTOCOL_REVISIONS = new Map(Object.entries({
-  'access-log': ['1'], approval: ['1'], 'activity-summary': ['1'], 'agent-directory': ['1'], 'call-record': ['1'], 'coding-agents': ['1'], 'credential-decision': ['1'], 'credential-request': ['1'], 'credential-revocation': ['1'], 'enroll-token': ['1'], entitlement: ['1'], 'entitlement-key-set': ['1'], 'estate-record': ['1'], 'execution-packet': ['1'],
+  'access-log': ['1'], approval: ['1'], 'activity-summary': ['1'], 'agent-directory': ['1'], 'call-record': ['1'], 'channel-agent-standard': ['1'], 'coding-agents': ['1'], 'credential-decision': ['1'], 'credential-request': ['1'], 'credential-revocation': ['1'], 'enroll-token': ['1'], entitlement: ['1'], 'entitlement-key-set': ['1'], 'estate-record': ['1'], 'execution-packet': ['1'],
   'fabric-actions': ['0.1'], 'fabric-activity': ['0.1'], 'fabric-agent-call': ['1'], 'fabric-connections': ['0.1'], 'fabric-credential-envelope': ['1'], 'fabric-load': ['0.1'], 'fabric-dashboard': ['0.1'], 'fabric-delegation': ['0.1'], 'fabric-device': ['0.1'],
-  'fabric-interop': ['0.1', '0.2'], 'fabric-local-channel': ['0.1'], 'fabric-local-runner': ['0.1'], 'fabric-machine-report': ['1'], 'fabric-operator-channel': ['0.1'],
+  'fabric-interop': ['0.1', '0.2'], 'fabric-local-channel': ['0.1'], 'fabric-local-runner': ['0.1'], 'fabric-machine-report': ['1'], 'fabric-ops-digest': ['0.1'], 'fabric-operator-channel': ['0.1'],
   'fabric-package': ['1'],
   'fabric-peer-share': ['1'], 'fabric-peer-share-envelope': ['1'], 'fabric-peer-share-report': ['1'], 'fabric-project-comms': ['0.1'], 'fabric-proposal': ['1'], 'fabric-provider': ['0.1'], 'fabric-relay': ['0.1'],
   'fabric-secret-envelope': ['1'], 'fabric-service': ['0.1'], 'fabric-settings-backup': ['1'], heartbeat: ['1'], 'learning-note': ['1'], 'machine-report': ['1'], mandate: ['1'],

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_protocols.py

@@ -10,13 +10,13 @@ if str(_Path(__file__).resolve().parent) not in _sys.path:  # the kit loads from
     _sys.path.insert(0, str(_Path(__file__).resolve().parent))
 
 
-#: Each contract protocol's published revisions, oldest first (the contract's `PROTOCOL_REVISIONS`, DEC-0067); a test
-#: holds it equal to the contract's register at the pin.
+#: Each contract protocol's published revisions, oldest first (the contract's `PROTOCOL_REVISIONS`, DEC-0067); the
+#: adapter's own test holds it equal to the contract's register at the adapter's pin, not in a vendored copy.
 PROTOCOL_REVISIONS: Dict[str, Tuple[str, ...]] = {
-    "access-log": ("1",), "approval": ("1",), "activity-summary": ("1",), "agent-directory": ("1",), "call-record": ("1",), "coding-agents": ("1",), "credential-decision": ("1",), "credential-request": ("1",), "credential-revocation": ("1",), "enroll-token": ("1",), "entitlement": ("1",),
+    "access-log": ("1",), "approval": ("1",), "activity-summary": ("1",), "agent-directory": ("1",), "call-record": ("1",), "channel-agent-standard": ("1",), "coding-agents": ("1",), "credential-decision": ("1",), "credential-request": ("1",), "credential-revocation": ("1",), "enroll-token": ("1",), "entitlement": ("1",),
     "entitlement-key-set": ("1",), "estate-record": ("1",), "execution-packet": ("1",),
     "fabric-actions": ("0.1",), "fabric-activity": ("0.1",), "fabric-agent-call": ("1",), "fabric-connections": ("0.1",), "fabric-credential-envelope": ("1",), "fabric-load": ("0.1",), "fabric-dashboard": ("0.1",), "fabric-delegation": ("0.1",), "fabric-device": ("0.1",),
-    "fabric-interop": ("0.1", "0.2"), "fabric-local-channel": ("0.1",), "fabric-local-runner": ("0.1",), "fabric-machine-report": ("1",),
+    "fabric-interop": ("0.1", "0.2"), "fabric-local-channel": ("0.1",), "fabric-local-runner": ("0.1",), "fabric-machine-report": ("1",), "fabric-ops-digest": ("0.1",),
     "fabric-operator-channel": ("0.1",), "fabric-package": ("1",),
     "fabric-peer-share": ("1",), "fabric-peer-share-envelope": ("1",), "fabric-peer-share-report": ("1",), "fabric-project-comms": ("0.1",), "fabric-proposal": ("1",),
     "fabric-provider": ("0.1",), "fabric-relay": ("0.1",), "fabric-secret-envelope": ("1",), "fabric-service": ("0.1",),

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/kit.json

@@ -1,6 +1,6 @@
 {
  "name": "fabric-service-kit",
- "version": "0.69.1",
+ "version": "0.71.0",
  "about": "The service kit's modules in dependency order: a module imports only modules listed before it. Written by fabric_kit.py build; edit the order and layers by hand, never the digests.",
  "python": [
   {
@@ -174,7 +174,7 @@
    "imports": [
     "fabric_secrets"
    ],
-   "sha256": "42529a7df4d753544d2e37a18ec81266d6e1e80477cb8558a3ab521416d45791"
+   "sha256": "077c6f03f3b887a2e22d9ce6b5bd3750199d71a29d4c82b1d5af8a615b509d93"
   },
   {
    "module": "fabric_actions",
@@ -666,7 +666,7 @@
    "imports": [
     "fabric-secrets"
    ],
-   "sha256": "5fd8765fdd3e507cc85c108492682bf5cbb4ae08873245c50374fb01d33c75e4"
+   "sha256": "a560b7d6eb0d26204c5536711c3dda9daae90cc91e07cdc75412e75c86272767"
   },
   {
    "module": "fabric-actions",
@@ -5496,6 +5496,186 @@
    "fabric-openrouter.mjs": "6041f3ab30f516658e1dbab4897a651cc8509b2136cfa8e769802c6b40ec2f35",
    "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
    "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
+  },
+  "0.70.0": {
+   "fabric_jsvalue.py": "052f1b40bab18600b3731dbdca27cbff17588c21d9458fa6241efd1340d0e09a",
+   "fabric_time.py": "588f383da4ac6a243ea95b6ffc3a0aa99ca94245732dc4937734f190b7af4ae9",
+   "fabric_identifiers.py": "0fd814d521ac3aa39907458265870753046a73f48af3d8581ab864b93b211607",
+   "fabric_secrets.py": "53c5df8d6f2c87433c288853bfaad9a43f544789bdf1e39bda8d3ff14485c89d",
+   "fabric_crypto.py": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa",
+   "fabric_base.py": "f62bcc2ed9912660fa875d27a09f60867260cc4925f79873501fd9620be59611",
+   "fabric_platform.py": "a9350dff55ef0fb3a23cdb4d0320a15868b15a8deb10d2eb74d72c58740c284b",
+   "fabric_paths.py": "8a1ee742f80f436e9f28c61b4f049a9545de2a9e0d66bfc61faa6ee5d1ba3734",
+   "fabric_estate_rules.py": "8b36a7f4108d9c2b1fb38c8bff344778c807bed631a99b4a563ecb0a49c10b1c",
+   "fabric_estate.py": "0737ae1d1bb12586bae49de1f15ef1348bc207b5007cced9dad4c55bb5870874",
+   "fabric_mandate.py": "fb19ce5359606bd6e3352ab02b2a12f49605ec6e5c49b55cce1f79c831325044",
+   "fabric_delegation.py": "716f0ff7ac01095f54b24970beac1962128e8ff33026b243fc0467876142ab03",
+   "fabric_share.py": "da36a466426fc29dd7dd40013167f3959a18375f8fedd228bf64f298cec1040c",
+   "fabric_ceremonies.py": "a59e83cf4adb2669a9b98008e3d3a0cba991a35cbff97bc604fc82fe81cfd49f",
+   "fabric_package_schema.py": "e623f0408d38e3343ed66222fb812907c6c52e1a286eb1c1176ab2e64640c9ad",
+   "fabric_package.py": "1f2b9e73b2b32a7e1e887d4b69f87c6e21b4d1227ad924a235334223e6dd51ca",
+   "fabric_protocols.py": "42529a7df4d753544d2e37a18ec81266d6e1e80477cb8558a3ab521416d45791",
+   "fabric_actions.py": "ae21d1199614c4f74d1dcd1e0a87107a9d52434cd9e2d64aa24a7b1e196fb723",
+   "fabric_connections.py": "7de55cb7d808f756d650effabfaa12027d40a5bd5d2f6d448c32969d47529ecb",
+   "fabric_a2a.py": "8b01502131215bb4de1c01866187c56e99b791543923ed8577535573db33b919",
+   "fabric_page_links.py": "1b57ea573c550e2f90d1ec3edcc655917ceaa0db9dd1635fccf422ec3024d25e",
+   "fabric_lock.py": "dfaf92a7086cbb097d832a305869b7964e2d2a9da0e3365c8ec1685a7bb4fef9",
+   "fabric_usage.py": "5cc2e03ccc5b06e81987ed7bc3eead7a7e6cbf1a7cb8e05c6c64315eed9d91b6",
+   "fabric_backups.py": "1f3f0d7ecf361b29e9101e07f1c53e5dc304d598bf26fd59ec89f16b9fed2420",
+   "fabric_descriptor.py": "c08c91ca0960c694ed7677e7e9247d6307c7b63f37a7e614db022c080cd92ccc",
+   "fabric_context.py": "6ae311ddc7217a4aff915e7ce2646486931acd128462b7bebe4a52bbb5fbb6c7",
+   "fabric_auth.py": "74ccc10239b65a3567cec5213a7b344cbd88d6eee1fd1c5f7be1d6daf985993c",
+   "fabric_events.py": "cd94b186e2a8f8cb4ad2b6bd44d83ec5021933075e28c5d655f387f16dff42b8",
+   "fabric_logs.py": "86dc55bfafa2a57264722e2403510a249b95de0e4a722b2e4bc3948e3bd93da9",
+   "fabric_supervisors.py": "3c5b2e8c310738720b1c1b779be4710e90251013d9be4c68f9952edc0bf55d5f",
+   "fabric_service.py": "4b13f90aa26881fbfe0d9f3077fbb3552f3ce0a3c59279d6baa92df872867d8d",
+   "fabric_profiles.py": "26e21ec29c016000f8ca8053b7b489184854a73be1b7fdc0a18d12990203db9b",
+   "fabric_interop_rules.py": "9bdb7989e57b9d0b0d15eb9982d396499823a5e2c528230b71c67866c736e0f5",
+   "fabric_interop.py": "d27e31834611a37cf2a117746f2f60fc187ccc48718eb546ff923c5d0fce7dea",
+   "fabric_hub.py": "b9ac852e601b1d54cf61351677a628afc69faeed7d1fc74ebe541c1cf38e0c2a",
+   "fabric_board_shapes.py": "0a0e8d3d40e33dfd8c457aedb85330b2ff25f8c49a33eb6cbd5a5cc8a5007f7e",
+   "fabric_board_link.py": "052bc3c474ece835bb428c37ca864810d04e394d991ddb9c93989a7a825073a5",
+   "fabric_board_slots.py": "92b065e3df935547cf46653245f1129e4a1f8b59b0a41e8fa9ffdc41596ee592",
+   "fabric_board_session.py": "1fd3c3884f3044b56a40f78b33ff88dcac9272284f6681ea359c662879826f7e",
+   "fabric_board_fixture.py": "69761ce205ec640762ec9b591c6903e5a87f844e8d423b041681924027e39d1e",
+   "fabric_board.py": "f86c40b8291f8c818f6924910f4022b013d5fd107abaf8825dd0aa6c5e418638",
+   "fabric_http.py": "8b443477dc29d5a1fe908b9dccaf68f05fab837eae0670074051a1dd2dfb71ad",
+   "fabric_openrouter.py": "d06a40f83f2fb8bd441ab3485ae882f1fbdd9cd7a9c1ec175eb47cb8ae2cce81",
+   "fabric-jsvalue.mjs": "dfbdb8c41584972c9389750a41719374a1cfc5652ed438dd1623025190b0106e",
+   "fabric-time.mjs": "3ff932069038a720df1c68c6492976906737b2e67e5c12d9c81c418597f661de",
+   "fabric-identifiers.mjs": "a18c2a501a4aa170bfd3d99e571ad6b7662649b4d3b9d2a540c002ea42811bbf",
+   "fabric-secrets.mjs": "5822a7e25ecf2e87b5bab4f99c1074af7379d8b49e2784283b5d7d8c25022cde",
+   "fabric-crypto.mjs": "038e03689701e3c9721a1e7f8e0a4d02a52d6a5d1661b0dc84035edc3ebbfcf6",
+   "fabric-base.mjs": "7804b2df7715dbbf9702a9b61b6b8cef2110f9a52b04cabd8fb0a66458d87512",
+   "fabric-platform.mjs": "a8119d95ebba4d589a9e401f5d6fc8dda62d59d44e4c1ff811d97fac3771ac0c",
+   "fabric-paths.mjs": "aa630d611e748a899e7043480f4a4e46b444f2e15ff945f30c2fbef21c1ceea5",
+   "fabric-estate-rules.mjs": "7476be71174aa5b1026134f2b335abf647feaa55584e2f9de8618e3054aa8e1e",
+   "fabric-estate.mjs": "e8a2e62d2313121e6cb502f6e6abad94d1d546a44b4d9b3ce2be29e7808e8cf3",
+   "fabric-mandate.mjs": "b70f3de03a659e60bba7b5a0580b3582825cd7b8a8e30a28c79621919ec5b7bb",
+   "fabric-delegation.mjs": "8f63a63aab9a8746b7f664720b87e9398137d01b8d50880974d5070038e414a0",
+   "fabric-share.mjs": "bfb26581c21ad984c2a337da02429f9f3a165cc582f8ba48de4d3dfb7d163a59",
+   "fabric-ceremonies.mjs": "117d4374c9e95c930a38de7adbd4323774798f4fe6ec6f24afcd6f2c7298ca44",
+   "fabric-package-schema.mjs": "cd28092375db0fc21ffab1f0bb7794f7f8979ee08c64d3b9faf4b3845357caa6",
+   "fabric-package.mjs": "8cfb32eebbd4e1bcf28a6e4437344ae2dd54479b0e7c820f002e9f94ab9ecaad",
+   "fabric-protocols.mjs": "5fd8765fdd3e507cc85c108492682bf5cbb4ae08873245c50374fb01d33c75e4",
+   "fabric-actions.mjs": "06e42f5e24c96311d5417d0d1effa93479ef7128a7ab139903b2bcf59253f6be",
+   "fabric-connections.mjs": "303432e547ce563e90ca9ffcd827f5612f51d3582929834e1add0fdaf6485dcc",
+   "fabric-a2a.mjs": "51b72fe1d80649d659fcad3a8f96370db3476c4a7b30cbabd8522c138be69346",
+   "fabric-page-links.mjs": "a8834926e9d4bbf7c4857f551451d2ebf6ac8873bbccaaf89c5e30cf45b17ee6",
+   "fabric-lock.mjs": "02cf833c97a07a8b3c788f9c93f70c4b9c9066efa25318dccf0038e0fc79717f",
+   "fabric-usage.mjs": "1c4d18004639409624ac3516a02f2b60bbf55abdb612e9a96c37e83666eb87a7",
+   "fabric-backups.mjs": "cfd8c9085e3d597a783099c2bd2ffe2f3faa0daaadab46dedd30523894cfeb06",
+   "fabric-descriptor.mjs": "7c0ef7d245c037eb9e859ab481f6e66fb3e5ef2cf6d1e0a8d32b6d303097ca43",
+   "fabric-context.mjs": "1112d695e872f9825cbc94f08484974bff3880087bc29b8be59f885f03e8f7be",
+   "fabric-auth.mjs": "10ff37a39f9e3adb4d0f05db66c45f49b10eef582e9220c213907964109d7e52",
+   "fabric-events.mjs": "c463d6ffcae24229a5c608d8fcea4268d2ccc5024b19fa10e5a452284068fa71",
+   "fabric-logs.mjs": "58467e5719c16e099d05bbedec47a95712506ab03c33f3cd4be1252e8498a946",
+   "fabric-supervisors.mjs": "d45c38de0cb3ed85e083496c2d3c51dab004454accdd87f4762a512a6d442573",
+   "fabric-service.mjs": "297fef11ac76dc831d12d24c5581b7a93587c300c20664db703b3f924c0f9f1a",
+   "fabric-profiles.mjs": "314376cf2deb87f235fb18b11d3b532e211f585b9af0a9302b5f4cc39971b532",
+   "fabric-interop-rules.mjs": "b4e386c359a48e49ffff8a842215760c18a7c98a0af4754a808a35fb2820d458",
+   "fabric-interop.mjs": "989040aed33b2712a258244192bdf70e811a51076aa1b62f2adc2a6db051dbed",
+   "fabric-hub.mjs": "c005115a864cfd67daa4862097bb14acfe5a60bf653897e5bf8a570dd80f1070",
+   "fabric-board-shapes.mjs": "c1db7b7bd0d58d82bb6d8dfbc3cd1547a256a333052d367e82ff1b3edf2804d7",
+   "fabric-board-link.mjs": "6e7d51f4fd9730d93455f50dd30e97907b8b9e1ca65a1d69f036f2e8ec05cc0d",
+   "fabric-board-slots.mjs": "fc77a3c6e62aa18575568bef4f703cce2edaba8cef648813ebcdbb21bdc27a11",
+   "fabric-board-session.mjs": "18555962e5f6d18080a3e7971c4c6640452542f6042d07917e7ebc073721c415",
+   "fabric-board-fixture.mjs": "83c4b7e33ee47b68385faf2569d38d5c8a0c5cb0f8656090f41e1b0eed2f436e",
+   "fabric-board.mjs": "15fbb4441fcf7d2f285375b75de64ad6cffea129c515084c110245376b07775f",
+   "fabric-http.mjs": "317d7668c291570d4d93bc73295312f2853eb93940f4cf754a4a4619cb87ace9",
+   "fabric-openrouter.mjs": "6041f3ab30f516658e1dbab4897a651cc8509b2136cfa8e769802c6b40ec2f35",
+   "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
+   "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
+  },
+  "0.71.0": {
+   "fabric_jsvalue.py": "052f1b40bab18600b3731dbdca27cbff17588c21d9458fa6241efd1340d0e09a",
+   "fabric_time.py": "588f383da4ac6a243ea95b6ffc3a0aa99ca94245732dc4937734f190b7af4ae9",
+   "fabric_identifiers.py": "0fd814d521ac3aa39907458265870753046a73f48af3d8581ab864b93b211607",
+   "fabric_secrets.py": "53c5df8d6f2c87433c288853bfaad9a43f544789bdf1e39bda8d3ff14485c89d",
+   "fabric_crypto.py": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa",
+   "fabric_base.py": "f62bcc2ed9912660fa875d27a09f60867260cc4925f79873501fd9620be59611",
+   "fabric_platform.py": "a9350dff55ef0fb3a23cdb4d0320a15868b15a8deb10d2eb74d72c58740c284b",
+   "fabric_paths.py": "8a1ee742f80f436e9f28c61b4f049a9545de2a9e0d66bfc61faa6ee5d1ba3734",
+   "fabric_estate_rules.py": "8b36a7f4108d9c2b1fb38c8bff344778c807bed631a99b4a563ecb0a49c10b1c",
+   "fabric_estate.py": "0737ae1d1bb12586bae49de1f15ef1348bc207b5007cced9dad4c55bb5870874",
+   "fabric_mandate.py": "fb19ce5359606bd6e3352ab02b2a12f49605ec6e5c49b55cce1f79c831325044",
+   "fabric_delegation.py": "716f0ff7ac01095f54b24970beac1962128e8ff33026b243fc0467876142ab03",
+   "fabric_share.py": "da36a466426fc29dd7dd40013167f3959a18375f8fedd228bf64f298cec1040c",
+   "fabric_ceremonies.py": "a59e83cf4adb2669a9b98008e3d3a0cba991a35cbff97bc604fc82fe81cfd49f",
+   "fabric_package_schema.py": "e623f0408d38e3343ed66222fb812907c6c52e1a286eb1c1176ab2e64640c9ad",
+   "fabric_package.py": "1f2b9e73b2b32a7e1e887d4b69f87c6e21b4d1227ad924a235334223e6dd51ca",
+   "fabric_protocols.py": "077c6f03f3b887a2e22d9ce6b5bd3750199d71a29d4c82b1d5af8a615b509d93",
+   "fabric_actions.py": "ae21d1199614c4f74d1dcd1e0a87107a9d52434cd9e2d64aa24a7b1e196fb723",
+   "fabric_connections.py": "7de55cb7d808f756d650effabfaa12027d40a5bd5d2f6d448c32969d47529ecb",
+   "fabric_a2a.py": "8b01502131215bb4de1c01866187c56e99b791543923ed8577535573db33b919",
+   "fabric_page_links.py": "1b57ea573c550e2f90d1ec3edcc655917ceaa0db9dd1635fccf422ec3024d25e",
+   "fabric_lock.py": "dfaf92a7086cbb097d832a305869b7964e2d2a9da0e3365c8ec1685a7bb4fef9",
+   "fabric_usage.py": "5cc2e03ccc5b06e81987ed7bc3eead7a7e6cbf1a7cb8e05c6c64315eed9d91b6",
+   "fabric_backups.py": "1f3f0d7ecf361b29e9101e07f1c53e5dc304d598bf26fd59ec89f16b9fed2420",
+   "fabric_descriptor.py": "c08c91ca0960c694ed7677e7e9247d6307c7b63f37a7e614db022c080cd92ccc",
+   "fabric_context.py": "6ae311ddc7217a4aff915e7ce2646486931acd128462b7bebe4a52bbb5fbb6c7",
+   "fabric_auth.py": "74ccc10239b65a3567cec5213a7b344cbd88d6eee1fd1c5f7be1d6daf985993c",
+   "fabric_events.py": "cd94b186e2a8f8cb4ad2b6bd44d83ec5021933075e28c5d655f387f16dff42b8",
+   "fabric_logs.py": "86dc55bfafa2a57264722e2403510a249b95de0e4a722b2e4bc3948e3bd93da9",
+   "fabric_supervisors.py": "3c5b2e8c310738720b1c1b779be4710e90251013d9be4c68f9952edc0bf55d5f",
+   "fabric_service.py": "4b13f90aa26881fbfe0d9f3077fbb3552f3ce0a3c59279d6baa92df872867d8d",
+   "fabric_profiles.py": "26e21ec29c016000f8ca8053b7b489184854a73be1b7fdc0a18d12990203db9b",
+   "fabric_interop_rules.py": "9bdb7989e57b9d0b0d15eb9982d396499823a5e2c528230b71c67866c736e0f5",
+   "fabric_interop.py": "d27e31834611a37cf2a117746f2f60fc187ccc48718eb546ff923c5d0fce7dea",
+   "fabric_hub.py": "b9ac852e601b1d54cf61351677a628afc69faeed7d1fc74ebe541c1cf38e0c2a",
+   "fabric_board_shapes.py": "0a0e8d3d40e33dfd8c457aedb85330b2ff25f8c49a33eb6cbd5a5cc8a5007f7e",
+   "fabric_board_link.py": "052bc3c474ece835bb428c37ca864810d04e394d991ddb9c93989a7a825073a5",
+   "fabric_board_slots.py": "92b065e3df935547cf46653245f1129e4a1f8b59b0a41e8fa9ffdc41596ee592",
+   "fabric_board_session.py": "1fd3c3884f3044b56a40f78b33ff88dcac9272284f6681ea359c662879826f7e",
+   "fabric_board_fixture.py": "69761ce205ec640762ec9b591c6903e5a87f844e8d423b041681924027e39d1e",
+   "fabric_board.py": "f86c40b8291f8c818f6924910f4022b013d5fd107abaf8825dd0aa6c5e418638",
+   "fabric_http.py": "8b443477dc29d5a1fe908b9dccaf68f05fab837eae0670074051a1dd2dfb71ad",
+   "fabric_openrouter.py": "d06a40f83f2fb8bd441ab3485ae882f1fbdd9cd7a9c1ec175eb47cb8ae2cce81",
+   "fabric-jsvalue.mjs": "dfbdb8c41584972c9389750a41719374a1cfc5652ed438dd1623025190b0106e",
+   "fabric-time.mjs": "3ff932069038a720df1c68c6492976906737b2e67e5c12d9c81c418597f661de",
+   "fabric-identifiers.mjs": "a18c2a501a4aa170bfd3d99e571ad6b7662649b4d3b9d2a540c002ea42811bbf",
+   "fabric-secrets.mjs": "5822a7e25ecf2e87b5bab4f99c1074af7379d8b49e2784283b5d7d8c25022cde",
+   "fabric-crypto.mjs": "038e03689701e3c9721a1e7f8e0a4d02a52d6a5d1661b0dc84035edc3ebbfcf6",
+   "fabric-base.mjs": "7804b2df7715dbbf9702a9b61b6b8cef2110f9a52b04cabd8fb0a66458d87512",
+   "fabric-platform.mjs": "a8119d95ebba4d589a9e401f5d6fc8dda62d59d44e4c1ff811d97fac3771ac0c",
+   "fabric-paths.mjs": "aa630d611e748a899e7043480f4a4e46b444f2e15ff945f30c2fbef21c1ceea5",
+   "fabric-estate-rules.mjs": "7476be71174aa5b1026134f2b335abf647feaa55584e2f9de8618e3054aa8e1e",
+   "fabric-estate.mjs": "e8a2e62d2313121e6cb502f6e6abad94d1d546a44b4d9b3ce2be29e7808e8cf3",
+   "fabric-mandate.mjs": "b70f3de03a659e60bba7b5a0580b3582825cd7b8a8e30a28c79621919ec5b7bb",
+   "fabric-delegation.mjs": "8f63a63aab9a8746b7f664720b87e9398137d01b8d50880974d5070038e414a0",
+   "fabric-share.mjs": "bfb26581c21ad984c2a337da02429f9f3a165cc582f8ba48de4d3dfb7d163a59",
+   "fabric-ceremonies.mjs": "117d4374c9e95c930a38de7adbd4323774798f4fe6ec6f24afcd6f2c7298ca44",
+   "fabric-package-schema.mjs": "cd28092375db0fc21ffab1f0bb7794f7f8979ee08c64d3b9faf4b3845357caa6",
+   "fabric-package.mjs": "8cfb32eebbd4e1bcf28a6e4437344ae2dd54479b0e7c820f002e9f94ab9ecaad",
+   "fabric-protocols.mjs": "a560b7d6eb0d26204c5536711c3dda9daae90cc91e07cdc75412e75c86272767",
+   "fabric-actions.mjs": "06e42f5e24c96311d5417d0d1effa93479ef7128a7ab139903b2bcf59253f6be",
+   "fabric-connections.mjs": "303432e547ce563e90ca9ffcd827f5612f51d3582929834e1add0fdaf6485dcc",
+   "fabric-a2a.mjs": "51b72fe1d80649d659fcad3a8f96370db3476c4a7b30cbabd8522c138be69346",
+   "fabric-page-links.mjs": "a8834926e9d4bbf7c4857f551451d2ebf6ac8873bbccaaf89c5e30cf45b17ee6",
+   "fabric-lock.mjs": "02cf833c97a07a8b3c788f9c93f70c4b9c9066efa25318dccf0038e0fc79717f",
+   "fabric-usage.mjs": "1c4d18004639409624ac3516a02f2b60bbf55abdb612e9a96c37e83666eb87a7",
+   "fabric-backups.mjs": "cfd8c9085e3d597a783099c2bd2ffe2f3faa0daaadab46dedd30523894cfeb06",
+   "fabric-descriptor.mjs": "7c0ef7d245c037eb9e859ab481f6e66fb3e5ef2cf6d1e0a8d32b6d303097ca43",
+   "fabric-context.mjs": "1112d695e872f9825cbc94f08484974bff3880087bc29b8be59f885f03e8f7be",
+   "fabric-auth.mjs": "10ff37a39f9e3adb4d0f05db66c45f49b10eef582e9220c213907964109d7e52",
+   "fabric-events.mjs": "c463d6ffcae24229a5c608d8fcea4268d2ccc5024b19fa10e5a452284068fa71",
+   "fabric-logs.mjs": "58467e5719c16e099d05bbedec47a95712506ab03c33f3cd4be1252e8498a946",
+   "fabric-supervisors.mjs": "d45c38de0cb3ed85e083496c2d3c51dab004454accdd87f4762a512a6d442573",
+   "fabric-service.mjs": "297fef11ac76dc831d12d24c5581b7a93587c300c20664db703b3f924c0f9f1a",
+   "fabric-profiles.mjs": "314376cf2deb87f235fb18b11d3b532e211f585b9af0a9302b5f4cc39971b532",
+   "fabric-interop-rules.mjs": "b4e386c359a48e49ffff8a842215760c18a7c98a0af4754a808a35fb2820d458",
+   "fabric-interop.mjs": "989040aed33b2712a258244192bdf70e811a51076aa1b62f2adc2a6db051dbed",
+   "fabric-hub.mjs": "c005115a864cfd67daa4862097bb14acfe5a60bf653897e5bf8a570dd80f1070",
+   "fabric-board-shapes.mjs": "c1db7b7bd0d58d82bb6d8dfbc3cd1547a256a333052d367e82ff1b3edf2804d7",
+   "fabric-board-link.mjs": "6e7d51f4fd9730d93455f50dd30e97907b8b9e1ca65a1d69f036f2e8ec05cc0d",
+   "fabric-board-slots.mjs": "fc77a3c6e62aa18575568bef4f703cce2edaba8cef648813ebcdbb21bdc27a11",
+   "fabric-board-session.mjs": "18555962e5f6d18080a3e7971c4c6640452542f6042d07917e7ebc073721c415",
+   "fabric-board-fixture.mjs": "83c4b7e33ee47b68385faf2569d38d5c8a0c5cb0f8656090f41e1b0eed2f436e",
+   "fabric-board.mjs": "15fbb4441fcf7d2f285375b75de64ad6cffea129c515084c110245376b07775f",
+   "fabric-http.mjs": "317d7668c291570d4d93bc73295312f2853eb93940f4cf754a4a4619cb87ace9",
+   "fabric-openrouter.mjs": "6041f3ab30f516658e1dbab4897a651cc8509b2136cfa8e769802c6b40ec2f35",
+   "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
+   "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
   }
  },
  "data": {

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -5,9 +5,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.69.1"
+  version: "0.71.0"
   contract-version: "0.1.0"
-  contract-commit: "3830a3353923e20f826d466610e1c479f120bec0"
+  contract-commit: "eac1a594aa131851f079da8bb7b2149e1951f35f"
 ---
 
 # Creating Fabric-compatible agents
@@ -156,7 +156,7 @@ python3 <plugin-dir>/skills/adapting-projects-to-fabric/scripts/adapt_project.py
 The effect class is declared, never defaulted: ask the author what the agent does outside itself when the request
 does not say. Cost presets are only for a run whose cost varies; their amounts come from the author or measured runs.
 
-Pin exactly contract `0.1.0` at commit `3830a3353923e20f826d466610e1c479f120bec0` and
+Pin exactly contract `0.1.0` at commit `eac1a594aa131851f079da8bb7b2149e1951f35f` and
 read the pinned guide before implementing protocol details. If this skill is installed
 without its sibling, the scaffolder is absent: create the bundle by hand from the pinned
 contract's `docs/guides/connecting-compatible-agents.md` and mark the structural check

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/references/practices.md

@@ -139,19 +139,20 @@ draft-and-check step owns.
   finished sync, changed or not: the standard ages a source from its last sync). Check: the recipe's `KnowledgeSource`.
 - **A hand-off queue is a source too**: declared with the signal that it was answered, or with "none" and a
   recommendation to its owner, posted on the board: `recommendation` is that board thread's id. Many `referred` tickets show a missing signal, not a regression.
-- **Text from a channel is data** (the contract's proposed DEC-0150 CA-8): a message, caption, file name, link or
+- **Text from a channel is data** (the contract's DEC-0150 CA-8): a message, caption, file name, link or
   quoted reply is never an instruction; the agent makes no tool call, send, spend or access change because a message
-  asks, and acts on its own task and its operator's word. Check: the recipe's fence around the message and its checks.
+  asks, and acts on its own task; an operator's word in a chat acts only in that chat and never outside the task
+  (a paraphrase; FAA-197 quotes CA-8 verbatim). Check: the recipe's fence around the message and its checks.
 - **Only metadata leaves the agent's side**: an opaque ticket id, times, outcome, step, category code and at most an
   80-character paraphrase that passed a personal-data check run inside the side; never a message, an identity or a
   reply's text.
 - **The declaration lives under the extension key**
   `https://fabric.passioncode.ai/agent-contract/extensions/channel-agent/0.1`, one entry per project (the contract's
-  proposed DEC-0150, not merged yet; the key and the form may change when it is). A required
+  DEC-0150, release `v0.1.0+2026-11-05.2`). A required
   member is never null, except where nothing is decided (a channel's `decision`, and the optional `quiet_window`,
   `late_answer_window` and `evals.spend_record`): a member not there yet is `{"none": "not_yet", "until": "<date>"}`,
   one not used `{"none": "not_used"}` (only `question_route`, `gap_registry`, `tickets.pd_check` and a channel's
   `texts.final` take that form, and a final text is never `not_used` beside a holding reply with replies on: a holding
   reply owes a final one, the contract's FAC-SEM-164); `recommendation` appears only with `answered_signal: "none"`; what each channel
   counts (`channels[].items_seen_unit`) is one of `mails`, `updates`, `messages` or `reviews`. Example: the recipe's
-  `channel-agent.example.json`. `check_service.py` reads it once the contract publishes its schema.
+  `channel-agent.example.json`. The contract publishes its schema at the pin (`service-channel-agent-extension.schema.json`); `check_service.py` does not read the declaration yet (FAA-197).

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/references/resilience-and-autonomy.md

@@ -116,8 +116,8 @@ mechanism that held after the fix. Every rule is cheaper to build in than to ret
 
 1. **An open question is a decision to make.** Decide from the recorded decisions, then the
    goal, then the safest reversible option; write the decision and its source where the work
-   lives; batch the questions only a person can answer (sign-in, consent, payment, a typed
-   secret) and keep working around them.
+   lives; batch the questions only a person can answer (sign-in, consent, payment, a secret
+   typed in or handed out) and keep working around them.
 2. **Nothing in a user's path waits for a human approval.** Send now or not at all; when unsure,
    say so, open a recorded question, and answer again automatically when the knowledge changes.
    Drafts awaiting approval waited for days.

package/plugins/fabric-agent-adapter/skills/working-with-fabric/SKILL.md

@@ -18,7 +18,7 @@ compatibility: >-
   this plugin; Codex/Kimi use command hooks; Hermes/OpenCode/OpenClaw/Pi use native context plugins after opt-in.
 metadata:
   author: PassionCode.ai
-  version: "0.69.1"
+  version: "0.71.0"
 ---
 
 # Working with Fabric
@@ -50,7 +50,7 @@ By hand, when Python is absent: Fabric publishes `hub.json` in its folder while
 
 | OS | Fabric's folder (`hub.json`) | `<Fabric>/bin` |
 |---|---|---|
-| macOS | `~/Library/Application Support/ai.passioncode.fabric/` | `~/Applications/Fabric.app/Contents/Resources/bin`, then `/Applications` if yours or root's |
+| macOS | `~/Library/Application Support/ai.passioncode.fabric/` | `$PASSIONCODE_APPLICATIONS/Fabric.app/...` if absolute, else `~/Applications/Fabric.app/Contents/Resources/bin`, then `/Applications` if yours or root's |
 | Windows | `%LOCALAPPDATA%\passioncode-fabric\` | the install folder's `resources\bin` (`fabric-mcp.cmd`); per-user default `%LOCALAPPDATA%\Programs\Fabric` |
 | Linux | `$XDG_DATA_HOME/passioncode-fabric/` (default `~/.local/share/`) | the install folder's `resources/bin`; the `.deb` puts it in `/opt/Fabric` |
 
@@ -88,7 +88,7 @@ claude mcp add --scope user fabric -- "<Fabric>/bin/fabric-mcp" --runner claude-
 codex mcp add fabric -- "<Fabric>/bin/fabric-mcp" --runner codex
 ```
 
-On a Mac, a registration naming another user's copy (outside your home, neither yours nor root's) is replaced by your
+On a Mac, a registration naming another user's copy (outside your home, not yours or root's) is replaced by your
 own (or root's) copy: `claude mcp remove` then `add` with the same scope; a project's `.mcp.json` entry is overridden with
 `--scope local`, never edited (`status` checks Claude Code's).
 
@@ -154,7 +154,7 @@ Fabric v0.3.5+ (REQ-38):
    nothing either (Fabric chose that parent, FAA-153) and tell the person which. `spawned_from: null` comes
    with `spawned_from_why`: link it yourself once with `fabric_task_link {taskId: <the piece>, rel: "spawned",
    targetTaskId: <the claimed task>}`, and if that is refused too, tell the person that reason; never file the piece
-   again. A filed piece (`created: true`) with no `spawned_from` at all is a Fabric before 0.3.14: link it yourself the same way unless the answer says
+   again. A filed piece (`created: true`) with no `spawned_from` is a Fabric before 0.3.14: link it yourself the same way unless the answer says
    `chained: true` with `chained_to` your claimed task (board `c42071bc`); an answer with `chained: false` names its
    `chain_reason`, which you tell the person if your link is refused.
 3. A related-work warning (same backlog row, a linked task, an overlapping folder) names the other agent, its
@@ -234,8 +234,8 @@ chat of any of his agents binds all his agents (OA-1).
   on it.
 - His word is done the first time, by you (CT-220): no command for him to run; on a risk, one short question, then do
   it.
-- Human gates stay (OA-5): sign-in, a one-time code, consent, payment or top-up, a typed secret, spend above a limit
-  (handed over with its link and amount, never asked in chat), a passkey, a comparison of codes with another person
+- Human gates stay (OA-5): sign-in, one-time code, consent, payment, top-up, secret typed in or handed out (DEC-0147),
+  spend above a limit (link and amount handed over, never a chat question), a passkey, a comparison of codes with another person
   or the choice to share without one (DEC-0142). A policy change, a promotion or a grant of your own is never covered (AP-5).
 - A prose relay that carries the four is accepted (OA-2): state your decision (*relay their decision*) or your own
   mandate from it, `instruction` and `at` copied unchanged, `source` naming where he said them, the scope no wider than
@@ -340,7 +340,7 @@ python3 <skill-dir>/scripts/fabric_session.py install-host-hooks --host codex --
 It edits `~/.codex/hooks.json` (`hooks.SessionStart`) or appends one `[[hooks]]` table to `~/.kimi-code/config.toml`,
 backs the file up first, refuses a file of another shape or one that changed since the dry run, and `--remove` takes
 it out again. Hermes/OpenCode/OpenClaw/Pi use their native plugin loaders, not Claude hook JSON.
-Hermes also needs `hermes plugins enable fabric-agent-adapter`; removal uses `hermes plugins disable fabric-agent-adapter`.
+Hermes needs `hermes plugins enable fabric-agent-adapter`; removal uses `hermes plugins disable fabric-agent-adapter`.
 Read [native host hooks](references/native-host-hooks.md) for exact paths, permission behavior and verification.
 Registration and a loaded hook do not prove admission. Never edit those files by hand. Without the hook, put the preamble into the first prompt
 yourself: "Call `fabric_whoami` first; `com.status` and `com.list`, answering what waits this turn; `fabric_work_list`,

package/plugins/fabric-agent-adapter/skills/working-with-fabric/references/on-demand-session.md

@@ -95,9 +95,9 @@ hook, or a Switchboard before 0.7.8 started the run, the launcher's appended exi
    release with CO-506, which grants it at `com.enroll`; on Fabric 0.3.16 nothing else does, since Agent access only
    decides a request a service filed; once CO-506 shipped, the reason Fabric's `board.own-respond` log line names and
    what lifts it: a machine marked as an organization's (the mark in Fabric's settings), no live credential (the agent
-   enrolls again) or a standing denial ("Снять отказ" in Agent access); Fabric, thread `1add3c03`, `315c5b54`); it waits for no answer (FAA-224; the tool needs no slot, and an
-   operator decision recorded under that `about` settles later questions on the gate: Fabric, thread `1add3c03`,
-   `a58b4280`). A question that fails is left (the decline already answered the request), and the closing write's
+   enrolls again) or a standing denial ("Снять отказ" in Agent access); Fabric, thread `1add3c03`, `315c5b54`); it waits for no answer (FAA-224; the tool needs no slot; Fabric keeps the
+   `about` with the question and settles no later question by it yet (CO-519), so each gate question reaches the operator and a
+   repeat with the same `commandId` returns the same question: Fabric, thread `1add3c03`, `5b216035`). A question that fails is left (the decline already answered the request), and the closing write's
    `notes` say so, since then nothing about the gate reached the operator. Then it closes the workflow `done` once
    `com.get` reads it answered (step 6), and writes the retro (step 7); in any other state, or with the slot `stale`, `active`, or `absent` at a generation of 1 or more (a holder enrolled on it: a
    service of this Project, or after CO-506 a session; one that stopped cleanly reads `absent`, and a service takes the
@@ -114,10 +114,12 @@ hook, or a Switchboard before 0.7.8 started the run, the launcher's appended exi
    where CO-506 grants nothing (a machine marked as an organization's, no live credential for the session or its runner,
    or a standing denial of that ask); the reply then names CO-506 though it shipped, and the real gate is that grant (left open in FAA-215).
    FAA-219; Fabric's answer in board thread `1add3c03` (option (b), 2026-11-05), the responder's run's rule plus the
-   slot condition, which is the adapter's (Fabric's corrected description has none);
+   slot condition, which Fabric's `board.read-at-start` took from the adapter (FAA-231, main `dbfbfce4`, in no release
+   yet);
    Fabric's `com.enroll` description in 0.3.16 tells a session to ask the grant, which it cannot, and 0.3.16's own
-   `not_authorized` refusal says to reply with the answer; step 3 wins over both, and over the corrected description on Fabric's
-   `main` (which answers whatever the slot reads); the refusal text waits for its CO-507. An earlier run may have left the request taken: `com.get` on the
+   `not_authorized` refusal says to reply with the answer; step 3 wins over both (Fabric's `main` gives `com.enroll`'s
+   tool description the same slot condition since `12d57bdd`, FAA-231, in no release yet); the refusal text waits
+   for its CO-507. An earlier run may have left the request taken: `com.get` on the
    request shows its state, and the latest checkpoint (step 1) what that run recorded. An accepted request is never
    claimed again: take it over with `com.responder_replace {expectedGeneration, transfer}` (its receipt carries the new
    attempt). An `outcome_unknown` one is resolved only by `com.reconcile` with an observed result; so is an `in_progress` one an
@@ -158,7 +160,7 @@ hook, or a Switchboard before 0.7.8 started the run, the launcher's appended exi
 
    A launcher that stops a run gives no time to answer:
    Switchboard sends SIGTERM and kills it about 5 s later on macOS and Linux, and at once on Windows (`taskkill`). Money, deletion and publication still go through `fabric_effect_request`. A sign-in, a one-time code,
-   a typed secret or a payment is the person's: name it in the answer rather than wait. A production step is the
+   a secret typed in or handed out (DEC-0147), or a payment is the person's: name it in the answer rather than wait. A production step is the
    operator's to approve, and named the same way until he does: no person is in this chat, the request alone never approves it, and
    his own words do when relayed verbatim, with their date and source, from one of his own projects (provenance
    `trusted`) and with a scope naming the step (`project-board.md`, *No person in the chat*).

package/plugins/fabric-agent-adapter/skills/working-with-fabric/references/project-board.md

@@ -194,9 +194,11 @@ it answers the request once that it cannot be taken now and why, does no work on
 operator once with `fabric_question_ask` (`kind: access`, `about: board.gate.<capability>`, the `commandId` that
 `python3 <skill-dir>/scripts/fabric_session.py gate-id <request>` prints, the same a run uses, and a `text` naming the request, the gate and what
 opens it; without Python, no `commandId` can be made: tell the person only), tells the person (the question stays
-filed even when that is the operator: his decision is recorded under that `about` in Fabric), and stops handling that
-request without waiting (Fabric's `board.read-at-start` rule asks every session the same from its CO-517, main
-`603da12f`, in no release yet; the slot condition is this adapter's). Never write "it stays queued" in a reply: the reply itself ends the queue. A
+filed even when that is the operator: Fabric keeps its `about` and settles nothing by it yet, CO-519), and stops handling
+that request without waiting (Fabric's `board.read-at-start` rule and `com.enroll`'s own tool description said the
+same, slot condition included, at main `603da12f`, `dbfbfce4` and `12d57bdd`; since main `4f3c742a` they also ask the
+operator at the other slot states, which the adapter takes in 0.72.0, FAA-241; in no Fabric release yet: on Fabric
+0.3.16 this rule wins). Never write "it stays queued" in a reply: the reply itself ends the queue. A
 run Fabric started on a board request has no person in its chat to tell: with the slot `absent` at generation 0 it declines,
 asks for a resend and asks the operator with `fabric_question_ask`; otherwise it leaves the request queued ([on-demand session](on-demand-session.md), step 3).
 

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session.py

@@ -48,9 +48,12 @@ from fabric_session_env import (  # noqa: F401
     _home,
     fabric_root,
     state_root,
+    a_file,
+    administrators_copy,
     another_users_copy,
     fabric_bin_candidates,
     find_fabric_bin,
+    launcher_folder,
     read_small,
     pid_alive,
     locate_hub,

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session_cli.py

@@ -25,11 +25,15 @@ from fabric_session_env import (  # noqa: E402 - the kit (FAA-65)
     _write_private,
     claude_registration,
     codex_registered,
+    a_file,
+    administrators_copy,
     another_users_copy,
     fabric_bin_candidates,
     fabric_launched,
     fabric_root,
+    APPLICATIONS_ENV,
     find_fabric_bin,
+    launcher_folder,
     host_registered,
     launched_by_ancestor,
     locate_hub,
@@ -133,7 +137,7 @@ DISPATCH_IF = (
     " Other values: no run; say so in the request's thread and stop. The run:")
 #: The conditional contract at its longest (a 64-character handoff and a session id) is held under Hermes' 4000
 #: characters by test_a_native_bridge_is_always_told_the_contract_and_writes_no_record; measure before adding words
-#: (3996 in 0.68.0 and in 0.69.0: a new rule takes its characters back from the text around it).
+#: (3996 in 0.68.0 and in 0.69.0, 3999 in 0.71.0: a new rule takes its characters back from the text around it).
 DISPATCH_CONTRACT = (
     " Do that "
     "request and end; never wait for a person. 1. `fabric_whoami`, then the packet "
@@ -154,13 +158,13 @@ DISPATCH_CONTRACT = (
     "work that cannot end by run-ends-at posts its state (`com.progress`); "
     "if it called `com.effect_begin`, or when the request's deadline is not after run-ends-at plus 10 minutes, `com.complete` failed_known (observed: true) saying so and steps 6 and 7; "
     "otherwise it is left accepted for the next run, an in_progress checkpoint without `close`, steps 5 and 6 "
-    "skipped. Money, deletion, publication: `fabric_effect_request`; a sign-in, a one-time code, a typed "
-    "secret or a payment is a person's (none is in this chat), and so is a production step unless the operator's "
+    "skipped. Money, deletion, publication: `fabric_effect_request`; a sign-in, one-time code, secret "
+    "typed in or handed out, or payment is a person's (none is in this chat), and so is a production step unless the operator's "
     "words, relayed verbatim, dated and sourced, from his trusted projects with a scope naming it, approve it: name it in "
     "the answer. 5. `com.reply` in the thread, then "
     "`com.complete` (observed: true): completed, or failed_known with the reason. 6. Once the board took it, "
     "`observatory_checkpoint_write` with `workflowId` {workflow}, a `stepId`, "
-    "the `leaseId`, `close: true`, a status and the packet's body with `done` and `notes` added: done for completed; for "
+    "the `leaseId`, `close: true`, a status, the packet's body plus `done` and `notes`: done for completed; for "
     "failed_known blocked with the reason in notes (failed once Observatory takes it, OBS-323). 7. Write the retro "
     "(`observatory_lesson` and insight/1 lines in `insights/`, or one line that there is nothing; no "
     "values), then end: no board sweep, work claim or watch-mail. On an error you cannot get past: complete the request failed_known if you hold its fence; close the workflow "
@@ -722,14 +726,29 @@ def status(cwd: Path, env: Optional[Dict[str, str]] = None, platform: str = sys.
     foreign = bool(claude) and claude["fabricMcp"] and not command.startswith(("./", ".\\")) and another_users_copy(
         Path(command), platform, env)
     report["ownCopyRule"] = platform == "darwin"
+    chosen = launcher_folder(env) if platform == "darwin" else None
+    report["launcherFolder"] = str(chosen) if chosen else None
+    # FAA-237: root's copy runs, and the launcher calls it the administrator's and does not update it
+    report["administratorsCopy"] = bool(binary) and administrators_copy(binary, platform, env)
     report["registeredCopy"] = "another user's" if foreign else "ok"
+    # where the user's own copy goes: the launcher's folder when the person named one, else ~/Applications (FAA-237);
+    # a launcher's folder that already holds another user's Fabric.app is no place for this user's (0.70.0 seam reading
+    # 3): unset PASSIONCODE_APPLICATIONS and use ~/Applications, as the launcher's PR #277 says then (its 0.2.75 would
+    # install into /Applications with the variable unset, so the person puts the copy there)
+    candidates = fabric_bin_candidates(platform, env)
+    occupied = bool(chosen) and a_file(candidates[0]) and another_users_copy(candidates[0], platform, env)
+    place = str(chosen) if chosen and not occupied else "~/Applications"
+    if occupied:
+        unset = {k: v for k, v in (os.environ if env is None else env).items() if k != APPLICATIONS_ENV}
+        candidates = fabric_bin_candidates(platform, unset)
+        place = "~/Applications, with %s unset: %s holds another user's Fabric.app" % (APPLICATIONS_ENV, chosen)
     if binary is None and claude is None:
         report["next"] = "Install Fabric v0.3.5 or later%s; no fabric-mcp %sis at %s." % (
-            " (your own copy, in ~/Applications)" if platform == "darwin" else "", "of yours " if platform == "darwin" else "",
+            " (your own copy, in %s)" % place if platform == "darwin" else "", "of yours " if platform == "darwin" else "",
             ", ".join(str(p) for p in fabric_bin_candidates(platform, env)))
     elif foreign:
-        own = '"%s"' % (binary or fabric_bin_candidates(platform, env)[0])
-        first = "" if binary else "put your own Fabric.app in ~/Applications, then "
+        own = '"%s"' % (binary or candidates[0])
+        first = "" if binary else "put your own Fabric.app in %s, then " % place
         where = claude.get("folder", "")
         if claude["scope"] == "project":
             # the project's .mcp.json is shared with every collaborator: a local entry overrides it for this user alone
@@ -760,8 +779,10 @@ def print_status(report: Dict[str, Any]) -> None:
             "not-a-hub": "not verified: %s" % hub.get("reason")}[hub["state"]]
     claude = report["claudeCode"]
     print("Fabric: %s" % line)
-    print("fabric-mcp: %s" % (report["fabricMcp"] or (
-        "none of yours at the default install locations" if report.get("ownCopyRule")
+    print("fabric-mcp: %s" % ((report["fabricMcp"] + (" (the administrator's copy, which the launcher does not update)"
+                                                    if report.get("administratorsCopy") else "")) if report["fabricMcp"] else (
+        "none of yours in %s (PASSIONCODE_APPLICATIONS)" % report["launcherFolder"] if report.get("launcherFolder")
+        else "none of yours at the default install locations" if report.get("ownCopyRule")
         else "not found at the default install locations")))
     print("Claude Code: %s" % ("fabric registered (%s scope) -> %s%s" % (
         claude["scope"], claude["command"], "" if claude["fabricMcp"] else " (not fabric-mcp)") + (

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session_env.py

@@ -58,7 +58,7 @@ SESSION_ID = re.compile(r"[A-Za-z0-9._:-]{1,128}")
 LOOPBACK_ORIGIN = re.compile(r"http://127\.0\.0\.1:(\d{1,5})")
 
 
-VERSION = "0.69.1"
+VERSION = "0.71.0"
 
 
 HOSTS = {"claude": "Claude Code", "codex": "Codex", "kimi": "Kimi Code",
@@ -162,11 +162,29 @@ def state_root(platform: str = sys.platform, env: Optional[Dict[str, str]] = Non
     return Path(env.get("XDG_CACHE_HOME") or str(home / ".cache")) / "fabric-agent-adapter"
 
 
+#: The launcher's folder for every app it installs, when the person sets one (FAA-237).
+APPLICATIONS_ENV = "PASSIONCODE_APPLICATIONS"
+
+
+def launcher_folder(env: Optional[Dict[str, str]] = None) -> Optional[Path]:
+    """The folder `PASSIONCODE_APPLICATIONS` names, when it starts with `/` (FAA-237). The launcher's `appsDir` takes
+    any non-empty value as it is, so a relative value or a literal `~` would be a folder under the launcher's working
+    folder, which no other process can find: none here, and the default order holds. A macOS path is POSIX on
+    whatever host reads it."""
+    value = (os.environ if env is None else env).get(APPLICATIONS_ENV) or ""
+    return Path(value) if value.startswith("/") else None
+
+
 def fabric_bin_candidates(platform: str = sys.platform, env: Optional[Dict[str, str]] = None) -> List[Path]:
     """Where `<Fabric>/bin/fabric-mcp` is on a default install (ADR-0134 amendment 2; electron-builder targets)."""
     env = os.environ if env is None else env
     home = _home(env)
     if platform == "darwin":
+        # The launcher's one folder for every app, when the person set it (its lib/catalog.js appsDir; FAA-237): only
+        # there. An empty or relative value is not a place, and the default order holds.
+        chosen = launcher_folder(env)
+        if chosen:
+            return [chosen / "Fabric.app/Contents/Resources/bin/fabric-mcp"]
         # The user's own copy first: on a Mac with several users a copy in /Applications may be another user's
         # (FAA-229; the launcher's order from its PR #277, lib/catalog.js appPath, planned for launcher 0.2.76).
         return [home / "Applications/Fabric.app/Contents/Resources/bin/fabric-mcp",
@@ -184,6 +202,15 @@ def _owner_uid(path: Path) -> Optional[int]:
         return None
 
 
+def a_file(path: Path) -> bool:
+    """`path.is_file()`, False where it cannot be read: the launcher's folder is the person's choice and may sit under a
+    folder this user cannot enter, where Python before 3.14 raises PermissionError (0.70.0 unit reading 4)."""
+    try:
+        return path.is_file()
+    except (OSError, ValueError):
+        return False
+
+
 def _real(path: Path) -> Path:
     try:
         return Path(os.path.realpath(str(path)))
@@ -215,13 +242,24 @@ def another_users_copy(path: Path, platform: str = sys.platform, env: Optional[D
     return owner is not None and owner not in (os.getuid(), 0)
 
 
+def administrators_copy(path: Path, platform: str = sys.platform, env: Optional[Dict[str, str]] = None) -> bool:
+    """On macOS, a file outside the user's home that root owns: an install the administrator made (a pkg or MDM). This
+    user may run it, and the launcher does not update it (its doctor calls it the administrator's from its PR #277,
+    planned for 0.2.76; FAA-237)."""
+    if platform != "darwin" or not hasattr(os, "getuid") or os.getuid() == 0 or not path.is_absolute():
+        return False
+    path = _real(path)
+    if _real(_home(os.environ if env is None else env)) in path.parents:
+        return False
+    return _owner_uid(path) == 0
+
+
 def find_fabric_bin(platform: str = sys.platform, env: Optional[Dict[str, str]] = None) -> Optional[Path]:
-    """The first candidate that is a file. On macOS a copy outside the user's home is taken only when it is this
-    user's or root's (an install every user shares): another user's copy is skipped (FAA-229). The launcher installs
-    the user's own copy in `~/Applications` unless the user owns and can write `/Applications` (its lib/catalog.js
-    appPath, from its PR #277, planned for 0.2.76): it updates the bundle, while this only runs it."""
+    """The first candidate that is a file (only the launcher's folder when `PASSIONCODE_APPLICATIONS` names one). On
+    macOS a copy outside the user's home is taken only when it is this user's or root's (an install every user
+    shares): another user's copy is skipped (FAA-229, FAA-237)."""
     for candidate in fabric_bin_candidates(platform, env):
-        if candidate.is_file() and not another_users_copy(candidate, platform, env):
+        if a_file(candidate) and not another_users_copy(candidate, platform, env):
             return candidate
     return None