@passioncode-ai/fabric-agent-adapter 0.8.3 → 0.9.0

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/dashboard_kit.py

@@ -0,0 +1,437 @@
+#!/usr/bin/env python3
+"""The dashboard kit (fabric-dashboard/0.1, Fabric Agent Contract DEC-0036): status, install, build, notice.
+
+  dashboard_kit.py status [REPO] [--json]       # kit copies in a repository: version, state, what differs
+  dashboard_kit.py install DIR [--force] [--dry-run]
+                                               # copy fabric-dashboard.css and .js into DIR; a copy the
+                                               # service changed is never overwritten without --force
+  dashboard_kit.py build [--check]             # regenerate the theme block from themes.json, refresh kit.json
+  dashboard_kit.py notice                      # the plugin's SessionStart hook: one line, or nothing
+
+The kit lives next to this script in ../assets/dashboard-kit/. Standard library only; nothing here
+reads a token, opens a port or writes outside the directory it is given. `notice` never writes and
+always exits 0: a hook that fails would cost every session, in every repository.
+"""
+
+from __future__ import annotations
+
+# argparse, hashlib and tempfile are imported where they are used: the SessionStart notice runs in
+# every session, so its path imports only what it needs.
+import json
+import os
+from pathlib import Path
+import re
+import subprocess
+import sys
+from typing import Any, Dict, List, Optional, Sequence, Tuple
+
+KIT_DIR = Path(__file__).resolve().parent.parent / "assets" / "dashboard-kit"
+KIT_NAME = "fabric-dashboard-kit"
+COPIED = ("fabric-dashboard.css", "fabric-dashboard.js")
+MARKER = re.compile(r"fabric-dashboard-kit@(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?")
+CSS_BEGIN, CSS_END = "/* fabric-dashboard-kit:themes:begin */", "/* fabric-dashboard-kit:themes:end */"
+JS_BEGIN, JS_END = "/* fabric-dashboard-kit:theme-ids:begin */", "/* fabric-dashboard-kit:theme-ids:end */"
+TOKEN_ORDER = ("bg", "panel", "panel-2", "ink", "muted", "border", "border-strong", "edge", "accent",
+               "accent-weak", "accent-ink", "ok", "ok-weak", "warn", "warn-weak", "danger", "danger-weak",
+               "info", "info-weak")
+SKIP_DIRS = {".git", "node_modules", "dist", "build", ".venv", "venv", "__pycache__", ".next", "out"}
+EXTENSION_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/dashboard/0.1"
+
+
+class KitError(Exception):
+    pass
+
+
+# --- the kit itself ------------------------------------------------------------
+
+def load_manifest(kit_dir: Path = KIT_DIR) -> Dict[str, Any]:
+    return json.loads((kit_dir / "kit.json").read_text(encoding="utf-8"))
+
+
+def sha256(path: Path) -> str:
+    import hashlib
+    return hashlib.sha256(path.read_bytes()).hexdigest()
+
+
+def version_tuple(text: str) -> Optional[Tuple[int, int, int]]:
+    m = MARKER.search(text)
+    return (int(m.group(1)), int(m.group(2)), int(m.group(3))) if m else None
+
+
+def claimed_version(path: Path) -> Optional[str]:
+    """The kit version a copied file says it is, from the marker in its first lines."""
+    try:
+        with path.open("r", encoding="utf-8", errors="replace") as handle:
+            head = handle.read(600)
+    except OSError:
+        return None
+    m = MARKER.search(head)
+    return m.group(0).split("@", 1)[1] if m else None
+
+
+def parse_version(text: str) -> Tuple[int, int, int]:
+    found = version_tuple(KIT_NAME + "@" + text)
+    if not found:
+        raise KitError("%r is not a semantic version." % text)
+    return found
+
+
+def theme_css(themes: Dict[str, Any]) -> str:
+    """The generated theme block: graphite is the default for :root; every theme has a light rule,
+    a [data-scheme=dark] rule and a prefers-color-scheme rule that a data-scheme="light" opts out of."""
+    default = themes["default"]
+    entries = themes["themes"]
+    if default not in entries:
+        raise KitError("themes.json: the default theme %r is not defined." % default)
+
+    def decls(palette: Dict[str, str], scheme: str) -> str:
+        missing = [t for t in TOKEN_ORDER if t not in palette]
+        if missing:
+            raise KitError("themes.json: %s %s misses %s." % (scheme, palette, ", ".join(missing)))
+        return "color-scheme: %s; " % scheme + " ".join("--%s: %s;" % (t, palette[t]) for t in TOKEN_ORDER)
+
+    lines, media = [], []
+    for theme_id, theme in entries.items():
+        if not re.fullmatch(r"[a-z][a-z0-9-]{0,31}", theme_id):
+            raise KitError("themes.json: %r is not a theme id." % theme_id)
+        own = ':root[data-theme="%s"]' % theme_id
+        if theme_id == default:
+            lines.append(":root, %s { %s }" % (own, decls(theme["light"], "light")))
+            lines.append(':root[data-scheme="dark"], %s[data-scheme="dark"] { %s }' % (own, decls(theme["dark"], "dark")))
+            media.insert(0, '  :root:not([data-scheme="light"]) { %s }' % decls(theme["dark"], "dark"))
+        else:
+            lines.append("%s { %s }" % (own, decls(theme["light"], "light")))
+            lines.append('%s[data-scheme="dark"] { %s }' % (own, decls(theme["dark"], "dark")))
+            media.append('  %s:not([data-scheme="light"]) { %s }' % (own, decls(theme["dark"], "dark")))
+    return "\n".join(lines + ["@media (prefers-color-scheme: dark) {"] + media + ["}"])
+
+
+def replace_between(text: str, begin: str, end: str, body: str, name: str) -> str:
+    start, stop = text.find(begin), text.find(end)
+    if start < 0 or stop < start:
+        raise KitError("%s has lost its %s … %s markers." % (name, begin, end))
+    return text[: start + len(begin)] + "\n" + body + "\n" + text[stop:]
+
+
+def build(kit_dir: Path = KIT_DIR, check: bool = False) -> List[str]:
+    """Regenerate the theme block and the theme ids from themes.json and refresh kit.json.
+    Returns the files that changed (with check=True: that would change, and nothing is written)."""
+    themes = json.loads((kit_dir / "themes.json").read_text(encoding="utf-8"))
+    css_path, js_path = kit_dir / "fabric-dashboard.css", kit_dir / "fabric-dashboard.js"
+    css = css_path.read_text(encoding="utf-8")
+    js = js_path.read_text(encoding="utf-8")
+    ids = list(themes["themes"])
+    new_css = replace_between(css, CSS_BEGIN, CSS_END, theme_css(themes), css_path.name)
+    new_js = replace_between(js, JS_BEGIN, JS_END, "  var THEMES = %s;" % json.dumps(ids).replace('"', "'"), js_path.name)
+    manifest = load_manifest(kit_dir)
+    version = manifest["version"]
+    for text, name in ((new_css, css_path.name), (new_js, js_path.name)):
+        if claimed_version_text(text) != version:
+            raise KitError("%s says %s, kit.json says %s; raise them together." % (name, claimed_version_text(text), version))
+    import hashlib
+    changed = []
+    for path, text in ((css_path, new_css), (js_path, new_js)):
+        if text != path.read_text(encoding="utf-8"):
+            changed.append(path.name)
+            if not check:
+                atomic_write(path, text)
+    digest = {name: hashlib.sha256((new_css if name.endswith(".css") else new_js).encode("utf-8")).hexdigest() for name in COPIED}
+    digest["themes.json"] = sha256(kit_dir / "themes.json")
+    new_manifest = dict(manifest)
+    new_manifest["themes"] = ids
+    new_manifest["files"] = digest
+    history = dict(manifest.get("history") or {})
+    history[version] = {name: digest[name] for name in COPIED}
+    new_manifest["history"] = history
+    if new_manifest != manifest:
+        changed.append("kit.json")
+        if not check:
+            atomic_write(kit_dir / "kit.json", json.dumps(new_manifest, indent=2) + "\n")
+    return changed
+
+
+def claimed_version_text(text: str) -> Optional[str]:
+    m = MARKER.search(text[:600])
+    return m.group(0).split("@", 1)[1] if m else None
+
+
+def atomic_write(path: Path, text: str, mode: int = 0o644) -> None:
+    import tempfile
+    fd, tmp = tempfile.mkstemp(prefix="." + path.name + ".", dir=str(path.parent))
+    try:
+        with os.fdopen(fd, "w", encoding="utf-8") as handle:
+            handle.write(text)
+            handle.flush()
+            os.fsync(handle.fileno())
+        os.chmod(tmp, mode)
+        os.replace(tmp, path)
+    except BaseException:
+        try:
+            os.unlink(tmp)
+        except OSError:
+            pass
+        raise
+
+
+# --- copies in a repository -------------------------------------------------------
+
+def is_kit_source(path: Path) -> bool:
+    """The kit's own directory (this repository, or an installed copy of the plugin) is not a copy."""
+    manifest = path.parent / "kit.json"
+    try:
+        return json.loads(manifest.read_text(encoding="utf-8")).get("name") == KIT_NAME
+    except (OSError, ValueError, AttributeError):
+        return False
+
+
+def git(repo: Path, *args: str, timeout: float = 2.0) -> Optional[str]:
+    try:
+        done = subprocess.run(["git", "-C", str(repo)] + list(args), capture_output=True, text=True, timeout=timeout)
+    except (OSError, subprocess.SubprocessError):
+        return None
+    return done.stdout if done.returncode == 0 else None
+
+
+def repo_root(start: Path) -> Optional[Path]:
+    out = git(start, "rev-parse", "--show-toplevel")
+    return Path(out.strip()) if out and out.strip() else None
+
+
+def find_copies(repo: Path) -> List[Path]:
+    listed = git(repo, "ls-files", "-z", "--cached", "--others", "--exclude-standard", "--",
+                 "*fabric-dashboard.css", "*fabric-dashboard.js")
+    if listed is not None:
+        paths = [repo / p for p in listed.split("\0") if p]
+    else:
+        paths = []
+        for top, dirs, files in os.walk(repo):
+            dirs[:] = [d for d in dirs if d not in SKIP_DIRS]
+            if len(Path(top).relative_to(repo).parts) > 6:
+                dirs[:] = []
+            paths += [Path(top) / f for f in files if f in COPIED]
+    return sorted(p for p in paths if p.name in COPIED and p.is_file() and not is_kit_source(p))
+
+
+def copy_state(path: Path, manifest: Dict[str, Any]) -> Dict[str, Any]:
+    current = manifest["version"]
+    version = claimed_version(path)
+    digest = sha256(path)
+    known = ((manifest.get("history") or {}).get(version or "") or {}).get(path.name)
+    if version is None:
+        state = "unmarked"
+    elif parse_version(version) > parse_version(current):
+        state = "newer"
+    elif known is not None and digest != known:
+        state = "changed"
+    elif parse_version(version) < parse_version(current):
+        state = "older"
+    else:
+        state = "current"
+    return {"path": str(path), "file": path.name, "version": version, "state": state, "current": current}
+
+
+def services_dir() -> Path:
+    override = os.environ.get("FABRIC_SERVICES_DIR")
+    if override:
+        return Path(override).expanduser()
+    home = Path.home()
+    if sys.platform == "darwin":
+        return home / "Library/Application Support/ai.passioncode.fabric/services"
+    if sys.platform == "win32":
+        base = os.environ.get("LOCALAPPDATA") or str(home / "AppData/Local")
+        return Path(base) / "passioncode-fabric" / "services"
+    return Path(os.environ.get("XDG_DATA_HOME") or str(home / ".local/share")) / "passioncode-fabric/services"
+
+
+def same_repository(a: str, b: str) -> bool:
+    def norm(u: str) -> str:
+        u = u.strip().lower()
+        u = re.sub(r"^git@([^:]+):", r"\1/", u)
+        u = re.sub(r"^[a-z+]+://", "", u)
+        u = re.sub(r"^[^@/]+@", "", u)
+        return re.sub(r"\.git$", "", u).rstrip("/")
+    return bool(a and b) and norm(a) == norm(b)
+
+
+def services_of(repo: Path, directory: Optional[Path] = None) -> List[str]:
+    """The services whose descriptor names this repository as its source (`source.repository`)."""
+    origin = (git(repo, "config", "--get", "remote.origin.url") or "").strip()
+    if not origin:
+        return []
+    found = []
+    try:
+        entries = sorted((directory or services_dir()).glob("*.json"))
+    except OSError:
+        return []
+    for path in entries:
+        try:
+            d = json.loads(path.read_text(encoding="utf-8"))
+        except (OSError, ValueError):
+            continue
+        source = str(((d.get("source") or {}) if isinstance(d, dict) else {}).get("repository") or "")
+        if same_repository(source, origin):
+            found.append("%s.%s" % (d.get("id"), d.get("instance", "default")))
+    return found
+
+
+def declares_dashboard(repo: Path) -> bool:
+    """Whether the repository's code declares a dashboard surface (a quick git grep, no network)."""
+    out = git(repo, "grep", "--untracked", "-l", "-I", "-E", r"""["']?dashboard["']?[[:space:]]*[:=][[:space:]]*\{?[[:space:]]*["']?path""", "--",
+              "*.py", "*.mjs", "*.js", "*.ts", "*.json", timeout=2.0)
+    return bool(out and out.strip())
+
+
+def status(repo: Path, manifest: Optional[Dict[str, Any]] = None, directory: Optional[Path] = None) -> Dict[str, Any]:
+    manifest = manifest or load_manifest()
+    copies = [copy_state(p, manifest) for p in find_copies(repo)]
+    services = services_of(repo, directory)
+    return {"repository": str(repo), "kit": "%s@%s" % (KIT_NAME, manifest["version"]), "copies": copies,
+            "services": services, "dashboard": bool(copies) or (bool(services) and declares_dashboard(repo))}
+
+
+def notice_line(report: Dict[str, Any], script: Path) -> Optional[str]:
+    """One line for the session, or None. Only an older (or unmarked) copy, or a service of this
+    repository with a dashboard and no kit at all, earns it."""
+    current = report["kit"].split("@", 1)[1]
+    stale = [c for c in report["copies"] if c["state"] in ("older", "unmarked")]
+    where = ", ".join(report["services"]) or "this repository's dashboard"
+    command = 'python3 "%s" status' % script
+    tail = ("fabric-dashboard/0.1, contract DEC-0036. Do not change it on your own: tell the operator, and with "
+            "their go-ahead run `%s`, then follow building-fabric-services references/dashboard-kit.md, "
+            "\"Upgrading an existing dashboard\"." % command)
+    if stale:
+        versions = sorted({c["version"] or "unmarked" for c in stale})
+        return "[fabric-agent-adapter] %s is built from %s %s; %s is current (%s" % (
+            where, KIT_NAME, " and ".join(versions), current, tail + ")")
+    if not report["copies"] and report["dashboard"] and report["services"]:
+        return "[fabric-agent-adapter] %s has a dashboard without %s; %s is current (%s" % (
+            where, KIT_NAME, current, tail + ")")
+    return None
+
+
+def install(target: Path, force: bool = False, dry_run: bool = False, kit_dir: Path = KIT_DIR) -> List[str]:
+    """Copy the kit's page files into target. Returns one sentence per file. Raises KitError, writing
+    nothing, when a copy there was changed by the service and force is not given."""
+    if not target.is_dir():
+        raise KitError("%s is not a directory." % target)
+    manifest = load_manifest(kit_dir)
+    history = manifest.get("history") or {}
+    refused, plan = [], []
+    for name in COPIED:
+        source, dest = kit_dir / name, target / name
+        if not dest.exists():
+            plan.append((source, dest, "added %s %s" % (name, manifest["version"])))
+            continue
+        digest, version = sha256(dest), claimed_version(dest)
+        if digest == manifest["files"][name]:
+            plan.append((None, dest, "%s is already %s" % (name, manifest["version"])))
+            continue
+        known = (history.get(version or "") or {}).get(name)
+        if known != digest and not force:
+            refused.append("%s was changed after it was copied (it says %s); move the page's own rules into its own "
+                           "stylesheet or script, or pass --force to replace it" % (name, version or "no version"))
+            continue
+        plan.append((source, dest, "replaced %s %s with %s" % (name, version or "(unmarked)", manifest["version"])))
+    if refused:
+        raise KitError("; ".join(refused) + ". Nothing was written.")
+    out = []
+    for source, dest, sentence in plan:
+        if source is not None and not dry_run:
+            atomic_write(dest, source.read_text(encoding="utf-8"))
+        out.append(("would be " + sentence) if dry_run and source is not None else sentence)
+    return out
+
+
+def declaration(manifest: Optional[Dict[str, Any]] = None) -> Dict[str, Any]:
+    manifest = manifest or load_manifest()
+    return {EXTENSION_KEY: {"minWidth": 360, "appearance": ["scheme", "theme"], "themes": manifest["themes"],
+                            "kit": "%s@%s" % (KIT_NAME, manifest["version"])}}
+
+
+# --- command line --------------------------------------------------------------
+
+def hook_cwd(stdin_text: str) -> Path:
+    try:
+        payload = json.loads(stdin_text) if stdin_text.strip() else {}
+        cwd = payload.get("cwd") if isinstance(payload, dict) else None
+    except ValueError:
+        cwd = None
+    return Path(cwd or os.getcwd())
+
+
+def notice() -> int:
+    try:
+        stdin_text = "" if sys.stdin is None or sys.stdin.isatty() else sys.stdin.read(65536)
+        root = repo_root(hook_cwd(stdin_text))
+        if root is not None:
+            line = notice_line(status(root), Path(__file__).resolve())
+            if line:
+                print(line)
+    except Exception:  # noqa: BLE001 — a hook never breaks a session
+        pass
+    return 0
+
+
+def main(argv: Optional[Sequence[str]] = None) -> int:
+    argv = sys.argv[1:] if argv is None else list(argv)
+    if argv == ["notice"]:
+        return notice()
+    import argparse
+    parser = argparse.ArgumentParser(description=__doc__, formatter_class=argparse.RawDescriptionHelpFormatter)
+    sub = parser.add_subparsers(dest="command")
+    p_status = sub.add_parser("status", help="kit copies in a repository")
+    p_status.add_argument("repo", nargs="?", default=".")
+    p_status.add_argument("--json", action="store_true")
+    p_install = sub.add_parser("install", help="copy the kit into a directory")
+    p_install.add_argument("dir")
+    p_install.add_argument("--force", action="store_true")
+    p_install.add_argument("--dry-run", action="store_true")
+    p_build = sub.add_parser("build", help="regenerate the theme block from themes.json")
+    p_build.add_argument("--check", action="store_true")
+    sub.add_parser("notice", help="the SessionStart hook")
+    args = parser.parse_args(argv)
+
+    if args.command == "notice":
+        return notice()
+    try:
+        if args.command == "status":
+            start = Path(args.repo).expanduser().resolve()
+            report = status(repo_root(start) or start)
+            if args.json:
+                print(json.dumps(report, indent=2))
+                return 0
+            print("%s: current kit %s" % (report["repository"], report["kit"]))
+            for c in report["copies"]:
+                print("  %-8s %s (%s)" % (c["state"], c["path"], c["version"] or "no version marker"))
+            if not report["copies"]:
+                print("  no kit copy" + (" — services %s declare a dashboard" % ", ".join(report["services"])
+                                         if report["dashboard"] and report["services"] else ""))
+            if report["services"]:
+                print("  services from this repository: %s" % ", ".join(report["services"]))
+            print("  declaration: %s" % json.dumps(declaration()))
+            return 0
+        if args.command == "install":
+            for sentence in install(Path(args.dir).expanduser(), force=args.force, dry_run=args.dry_run):
+                print(sentence)
+            print("Next: link both files same-origin, declare %s" % json.dumps(declaration()))
+            print("in the well-known document's extensions, and run check_dashboard_layout.mjs.")
+            return 0
+        if args.command == "build":
+            changed = build(check=args.check)
+            if args.check:
+                if changed:
+                    print("out of date: %s (run dashboard_kit.py build)" % ", ".join(changed))
+                    return 1
+                print("up to date")
+                return 0
+            print("rebuilt: %s" % (", ".join(changed) or "nothing changed"))
+            return 0
+    except KitError as exc:
+        print(str(exc), file=sys.stderr)
+        return 1
+    parser.print_usage(sys.stderr)
+    return 2
+
+
+if __name__ == "__main__":
+    raise SystemExit(main())

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-service.mjs

@@ -11,6 +11,11 @@ import path from 'node:path';
 
 export const PROTOCOL = 'fabric-service/0.1';
 export const EXTENSION_KEY = 'https://fabric.passioncode.ai/agent-contract/extensions/service/0.1';
+// The embedded dashboard declaration (fabric-dashboard/0.1, DEC-0036 ED-9), under the well-known
+// document's `extensions`. The kit is assets/dashboard-kit; its version is the one in kit.json.
+export const DASHBOARD_EXTENSION_KEY = 'https://fabric.passioncode.ai/agent-contract/extensions/dashboard/0.1';
+export const DASHBOARD_KIT = 'fabric-dashboard-kit@1.0.0';
+export const REFERENCE_THEMES = ['graphite', 'fabric', 'paper', 'forest', 'ocean', 'ember', 'contrast'];
 export const EXIT_ALREADY_RUNNING = 75;
 // Lifecycle contract (fabric-workspace knowledge/lifecycle.md), the same values as fabric_service.py.
 // A launchd-supervised copy that finds the lock held backs off in-process before its exit 75 (LC-03).
@@ -339,7 +344,45 @@ export function removeDescriptor(id, instance = 'default', dir = servicesDir())
 
 // --- well-known and events ------------------------------------------------------------
 
-export function buildWellKnown({ id, instance, name, version, build, startedAt, status, degraded = [], surfaces, summary, updateAvailable = null, pid = process.pid }) {
+const THEME_ID = /^[a-z][a-z0-9-]{0,31}$/;
+const KIT_REF = /^[a-z][a-z0-9-]{0,63}@(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?$/;
+
+// What makes value not a valid ED-9 declaration (service-dashboard-extension.schema.json).
+export function dashboardExtensionProblems(value) {
+  if (!value || typeof value !== 'object' || Array.isArray(value)) return ['the declaration is not an object'];
+  const out = [];
+  const extra = Object.keys(value).filter((k) => !['minWidth', 'appearance', 'themes', 'kit'].includes(k)).sort();
+  if (extra.length) out.push(`unknown field(s): ${extra.join(', ')}`);
+  const w = value.minWidth;
+  if (!Number.isInteger(w)) out.push('minWidth is required and must be a whole number of CSS pixels');
+  else if (w < 360 || w > 1280) out.push(`minWidth ${w} is outside 360…1280`);
+  if ('appearance' in value) {
+    const a = value.appearance;
+    if (!Array.isArray(a) || a.length > 2 || new Set(a).size !== a.length || a.some((x) => x !== 'scheme' && x !== 'theme')) out.push('appearance is a list of distinct fields from scheme, theme');
+  }
+  if ('themes' in value) {
+    const t = value.themes;
+    if (!Array.isArray(t) || t.length < 1 || t.length > 32 || new Set(t).size !== t.length || t.some((x) => typeof x !== 'string' || !THEME_ID.test(x))) out.push('themes is 1…32 distinct theme ids matching ^[a-z][a-z0-9-]{0,31}$');
+  }
+  if ('kit' in value && !(typeof value.kit === 'string' && KIT_REF.test(value.kit))) out.push(`kit is name@semver, for example ${DASHBOARD_KIT}`);
+  return out;
+}
+
+// The `extensions` entry a dashboard built from the kit declares (DEC-0036 ED-9). Declare it only
+// when the page meets ED-1…ED-6 — check_dashboard_layout.mjs measures that.
+export function dashboardExtension({ minWidth = 360, appearance = ['scheme', 'theme'], themes = REFERENCE_THEMES, kit = DASHBOARD_KIT } = {}) {
+  const value = { minWidth };
+  if (appearance?.length) value.appearance = [...appearance];
+  if (themes?.length) value.themes = [...themes];
+  if (kit) value.kit = kit;
+  const problems = dashboardExtensionProblems(value);
+  if (problems.length) throw new ServiceError(`Dashboard declaration: ${problems.join('; ')}.`);
+  return { [DASHBOARD_EXTENSION_KEY]: value };
+}
+
+// `extensions` is kept as given (a reader ignores keys it does not know); a dashboard declaration in
+// it must be valid (dashboardExtension builds one).
+export function buildWellKnown({ id, instance, name, version, build, startedAt, status, degraded = [], surfaces, summary, updateAvailable = null, pid = process.pid, extensions }) {
   if (!STATUSES.includes(status)) throw new ServiceError(`status must be one of ${STATUSES.join(', ')}.`);
   if (!surfaces?.events) throw new ServiceError('surfaces.events is required.');
   if (!(build?.commit || build?.digest)) throw new ServiceError('build needs a commit or a digest.');
@@ -353,6 +396,13 @@ export function buildWellKnown({ id, instance, name, version, build, startedAt,
     update: { available: updateAvailable },
   };
   if (summary?.length) doc.summary = summary.slice(0, 6);
+  if (extensions && Object.keys(extensions).length) {
+    if (DASHBOARD_EXTENSION_KEY in extensions) {
+      const problems = dashboardExtensionProblems(extensions[DASHBOARD_EXTENSION_KEY]);
+      if (problems.length) throw new ServiceError(`Dashboard declaration: ${problems.join('; ')}.`);
+    }
+    doc.extensions = { ...extensions };
+  }
   return doc;
 }
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_service.py

@@ -40,6 +40,11 @@ import urllib.request
 
 PROTOCOL = "fabric-service/0.1"
 EXTENSION_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/service/0.1"
+# The embedded dashboard declaration (fabric-dashboard/0.1, DEC-0036 ED-9), under the well-known
+# document's `extensions`. The kit is assets/dashboard-kit; its version is the one in kit.json.
+DASHBOARD_EXTENSION_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/dashboard/0.1"
+DASHBOARD_KIT = "fabric-dashboard-kit@1.0.0"
+REFERENCE_THEMES = ("graphite", "fabric", "paper", "forest", "ocean", "ember", "contrast")
 EXIT_ALREADY_RUNNING = 75
 # Lifecycle contract (fabric-workspace knowledge/lifecycle.md). A launchd-supervised copy that finds
 # the lock held backs off in-process for this long before its exit 75 (LC-03, F8): under KeepAlive
@@ -701,11 +706,63 @@ def build_info(repo_root: Optional[Path] = None, package_file: Optional[Path] =
     return info
 
 
+_THEME_ID = re.compile(r"^[a-z][a-z0-9-]{0,31}$")
+_KIT_REF = re.compile(r"^[a-z][a-z0-9-]{0,63}@(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-[0-9A-Za-z.-]+)?$")
+
+
+def dashboard_extension_problems(value: Any) -> List[str]:
+    """What makes value not a valid ED-9 declaration (service-dashboard-extension.schema.json)."""
+    if not isinstance(value, dict):
+        return ["the declaration is not an object"]
+    out: List[str] = []
+    extra = sorted(set(value) - {"minWidth", "appearance", "themes", "kit"})
+    if extra:
+        out.append("unknown field(s): %s" % ", ".join(extra))
+    width = value.get("minWidth")
+    if isinstance(width, bool) or not isinstance(width, int):
+        out.append("minWidth is required and must be a whole number of CSS pixels")
+    elif not 360 <= width <= 1280:
+        out.append("minWidth %d is outside 360…1280" % width)
+    if "appearance" in value:
+        a = value["appearance"]
+        if not isinstance(a, list) or len(a) > 2 or len(set(map(str, a))) != len(a) or any(x not in ("scheme", "theme") for x in a):
+            out.append("appearance is a list of distinct fields from scheme, theme")
+    if "themes" in value:
+        t = value["themes"]
+        if not isinstance(t, list) or not 1 <= len(t) <= 32 or len(set(map(str, t))) != len(t) \
+                or any(not isinstance(x, str) or not _THEME_ID.match(x) for x in t):
+            out.append("themes is 1…32 distinct theme ids matching ^[a-z][a-z0-9-]{0,31}$")
+    if "kit" in value and not (isinstance(value["kit"], str) and _KIT_REF.match(value["kit"])):
+        out.append("kit is name@semver, for example %s" % DASHBOARD_KIT)
+    return out
+
+
+def dashboard_extension(min_width: int = 360, appearance: Sequence[str] = ("scheme", "theme"),
+                        themes: Optional[Sequence[str]] = REFERENCE_THEMES,
+                        kit: Optional[str] = DASHBOARD_KIT) -> Dict[str, Any]:
+    """The `extensions` entry a dashboard built from the kit declares (DEC-0036 ED-9). Declare it only
+    when the page meets ED-1…ED-6 — check_dashboard_layout.mjs measures that."""
+    value: Dict[str, Any] = {"minWidth": min_width}
+    if appearance:
+        value["appearance"] = list(appearance)
+    if themes:
+        value["themes"] = list(themes)
+    if kit:
+        value["kit"] = kit
+    problems = dashboard_extension_problems(value)
+    if problems:
+        raise ServiceError("Dashboard declaration: %s." % "; ".join(problems))
+    return {DASHBOARD_EXTENSION_KEY: value}
+
+
 def build_well_known(*, service_id: str, instance: str, name: str, version: str, build: Dict[str, Any],
                      started_at: str, status: str, degraded: Sequence[Dict[str, str]],
                      surfaces: Dict[str, Any], summary: Optional[Sequence[Dict[str, Any]]] = None,
-                     update_available: Optional[str] = None, pid: Optional[int] = None) -> Dict[str, Any]:
-    """The unauthenticated identity answer. `degraded` is always present; ready means empty."""
+                     update_available: Optional[str] = None, pid: Optional[int] = None,
+                     extensions: Optional[Dict[str, Any]] = None) -> Dict[str, Any]:
+    """The unauthenticated identity answer. `degraded` is always present; ready means empty.
+    `extensions` is kept as given (a reader ignores keys it does not know); a dashboard declaration
+    in it must be valid (dashboard_extension builds one)."""
     if status not in STATUSES:
         raise ServiceError("status must be one of %s." % ", ".join(STATUSES))
     degraded = list(degraded)
@@ -724,6 +781,12 @@ def build_well_known(*, service_id: str, instance: str, name: str, version: str,
     }
     if summary:
         doc["summary"] = list(summary)[:6]
+    if extensions:
+        if DASHBOARD_EXTENSION_KEY in extensions:
+            problems = dashboard_extension_problems(extensions[DASHBOARD_EXTENSION_KEY])
+            if problems:
+                raise ServiceError("Dashboard declaration: %s." % "; ".join(problems))
+        doc["extensions"] = dict(extensions)
     return doc
 
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/sample_service.py

@@ -29,10 +29,21 @@ import fabric_service as fs  # noqa: E402
 import fabric_interop as fi  # noqa: E402
 
 VERSION = "0.1.0"
+# The dashboard is built from the dashboard kit (fabric-dashboard/0.1, DEC-0036) and declares it
+# in the well-known document only when the kit is there to serve.
+KIT_DIR = Path(__file__).resolve().parent.parent / "assets" / "dashboard-kit"
+KIT_FILES = {"/kit/fabric-dashboard.css": ("fabric-dashboard.css", "text/css; charset=utf-8"),
+             "/kit/fabric-dashboard.js": ("fabric-dashboard.js", "text/javascript; charset=utf-8")}
 PAGE = """<!doctype html><html lang="en"><head><meta charset="utf-8">
 <meta name="viewport" content="width=device-width,initial-scale=1"><title>{name}</title>
-<style>body{{font:15px system-ui;margin:2rem;color:#e9e4ec;background:#0a070d}}li{{margin:.3rem 0}}</style>
-</head><body><h1>{name}</h1><p>Status: {status}</p><ul>{rows}</ul></body></html>"""
+<link rel="stylesheet" href="/kit/fabric-dashboard.css"><script src="/kit/fabric-dashboard.js" defer></script>
+</head><body><div class="fd-chrome"><header class="fd-header"><p class="fd-title">{name}</p>
+<span class="fd-chip fd-s-ok"><span class="fd-dot"></span>Status: {status}</span></header>
+<nav class="fd-nav" aria-label="Sections"><ul class="fd-nav-list"><li><a href="#events" aria-current="page">Events</a></li>
+<li><a href="#about">About</a></li></ul></nav></div>
+<main class="fd-page"><section id="events"><h2>Events</h2><ul>{rows}</ul></section>
+<section id="about"><h2>About</h2><p class="fd-hint">A sample fabric-service/0.1 service built on the kit.</p></section></main>
+</body></html>"""
 
 
 def _schema(name: str, body: Dict[str, Any]) -> Dict[str, Any]:
@@ -130,6 +141,7 @@ class Service:
             surfaces={"dashboard": {"path": "/", "login": True}, "events": {"path": "/fabric/v1/events"},
                       "mcp": {"path": "/mcp", "transport": "streamable-http", "capabilities": [c["name"] for c in CAPABILITIES]},
                       "usage": {"path": fs.USAGE_PATH}},
+            extensions=fs.dashboard_extension() if (KIT_DIR / "fabric-dashboard.css").is_file() else None,
         )
 
 
@@ -148,7 +160,7 @@ def make_handler(svc: Service):
             self.send_response(status)
             self.send_header("Cache-Control", "no-store")
             self.send_header("X-Content-Type-Options", "nosniff")
-            self.send_header("Content-Security-Policy", "default-src 'none'; style-src 'unsafe-inline'; frame-ancestors 'self'")
+            self.send_header("Content-Security-Policy", "default-src 'none'; style-src 'self'; script-src 'self'; frame-ancestors 'self'")
             if body is not None:
                 self.send_header("Content-Type", content_type)
                 self.send_header("Content-Length", str(len(payload)))
@@ -203,6 +215,12 @@ def make_handler(svc: Service):
                 if not cookie:
                     return self._send(403, "This sign-in link was already used or has expired.", content_type="text/plain")
                 return self._send(302, None, {"Location": "/", "Set-Cookie": fs.session_cookie_header(cookie)})
+            if url.path in KIT_FILES:
+                name, kind = KIT_FILES[url.path]
+                try:
+                    return self._send(200, (KIT_DIR / name).read_text(encoding="utf-8"), content_type=kind)
+                except OSError:
+                    return self._send(404, {"error": "Not found."})
             if url.path == "/":
                 if not self._session_ok():
                     return self._send(401, "Open this dashboard from Fabric Dashboards.", content_type="text/plain")