@passioncode-ai/fabric-agent-adapter 0.81.0 → 0.82.0

package/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/fabric-button.js

@@ -1,4 +1,4 @@
-/* fabric-dashboard-kit@1.1.6 · Fabric's button (Fabric Agent Contract DEC-0040, FB-1…FB-8, FL-1…FL-6)
+/* fabric-dashboard-kit@1.1.7 · Fabric's button (Fabric Agent Contract DEC-0040, FB-1…FB-8, FL-1…FL-6)
    Load it same-origin, after fabric-dashboard.css, with the service it opens Fabric on:
      <script src="fabric-button.js" defer data-service="example-agent.default" data-service-name="Example Agent"
              data-project="project-a" data-project-name="Project A"></script>
@@ -11,7 +11,7 @@
 (function (root) {
   'use strict';
 
-  var VERSION = '1.1.6';
+  var VERSION = '1.1.7';
   var COOKIE = 'fabric_button';
   var GET_FABRIC = 'https://passioncode.ai/fabric';
   var ABSENT_AFTER_MS = 1500;
@@ -37,8 +37,26 @@
     session: ['token', 'id'],
     code: ['login', 'auth', 'access', 'session']
   };
-  var JWT_SHAPE = /eyJ[A-Za-z0-9_-]{2,}\.[A-Za-z0-9_-]{2,}\.[A-Za-z0-9_-]*/;
-  var SECRET_VALUE = /(^bearer\s.+|sk-[A-Za-z0-9_-]{16,}|gh[pousr]_[A-Za-z0-9]{20,}|xox[abposr]-[A-Za-z0-9-]{10,}|AKIA[0-9A-Z]{16}|glpat-[A-Za-z0-9_-]{20,})/i;
+  // Whether /eyJ[A-Za-z0-9_-]{2,}\.[A-Za-z0-9_-]{2,}\.[A-Za-z0-9_-]*/ matches anywhere, read in one pass (the
+  // contract's hasJwt, FAA-313): the expression backtracks from every `eyJ` of a long run, while every `eyJ` of one run
+  // shares that run's end, so only its first is tried.
+  var URL_BASE64 = /[A-Za-z0-9_-]/;
+  function runEnd(text, from) { while (from < text.length && URL_BASE64.test(text.charAt(from))) from += 1; return from; }
+  function hasJwt(text) {
+    var at = text.indexOf('eyJ');
+    while (at >= 0) {
+      var one = runEnd(text, at + 3);
+      if (one - at - 3 >= 2 && text.charAt(one) === '.') {
+        var two = runEnd(text, one + 1);
+        if (two - one - 1 >= 2 && text.charAt(two) === '.') return true;
+      }
+      at = text.indexOf('eyJ', one);
+    }
+    return false;
+  }
+  // The contract's SECRET_VALUE at the pin (DEC-0151), as the kit's fabric-secrets.mjs writes it (FAA-314, kit 1.1.7):
+  // `Bearer ` only at a value's start, a provider key's prefix in its canonical case after a boundary.
+  var SECRET_VALUE = /(^[Bb][Ee][Aa][Rr][Ee][Rr]\s.+|(?:^|[^A-Za-z0-9]|%[0-9A-Fa-f]{2}|\\[nrt"']|\\u[0-9A-Fa-f]{4}|\\x[0-9A-Fa-f]{2}|\\[bfv0ae]|\\[0-7]{1,3}|%25[0-9A-Fa-f]{2}|\x1b\[[0-9;:]*m|(?:\\u001[bB]|\\x1[bB]|\\e|\\033|\\33)\[[0-9;:]*m)(?:sk-(?=[A-Za-z0-9_-]{0,255}?\d)(?:(?=[A-Za-z0-9_-]{0,255}?[A-Z])[A-Za-z0-9_-]{16,}|[A-Za-z0-9_-]{32,})|gh[pousr]_[A-Za-z0-9]{20,}|xox[abposr]-[A-Za-z0-9-]{10,}|AKIA[0-9A-Z]{16}|glpat-[A-Za-z0-9_-]{20,}))/;
   var LONG_RUN = /[A-Za-z0-9+/=_-]{40,}/g;
 
   function nameWords(name) {
@@ -60,7 +78,7 @@
   function longSecret(value) {
     return (value.match(LONG_RUN) || []).some(function (run) { return /[a-z]/.test(run) && /[A-Z]/.test(run) && /[0-9]/.test(run); });
   }
-  function secretValue(value) { return JWT_SHAPE.test(value) || SECRET_VALUE.test(value) || longSecret(value); }
+  function secretValue(value) { return hasJwt(value) || SECRET_VALUE.test(value) || longSecret(value); }
   function decodeKeepingPlus(raw) { try { return decodeURIComponent(raw); } catch (e) { return raw; } }
   function firstKey(text) { var it = new URLSearchParams(text).keys().next(); return it.done ? '' : it.value; }
   function rawValues(query) {

package/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/fabric-dashboard.css

@@ -1,4 +1,4 @@
-/* fabric-dashboard-kit@1.1.6 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
+/* fabric-dashboard-kit@1.1.7 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
    A Fabric service dashboard shown inside a host pane: usable from 360 CSS px up, navigation always
    reachable, wide content in its own scroll box, one vertical scroller, appearance from the host.
    Copy this file next to fabric-dashboard.js; do not edit it in place. Put the page's own rules in

package/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/fabric-dashboard.js

@@ -1,4 +1,4 @@
-/* fabric-dashboard-kit@1.1.6 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
+/* fabric-dashboard-kit@1.1.7 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
    Load it same-origin with <script src="fabric-dashboard.js" defer></script>: no inline script, no
    eval, nothing from a CDN. It applies the host's appearance (ED-6, ED-8), folds navigation that
    does not fit into a More menu (ED-3), makes wide boxes keyboard-reachable (ED-4) and keeps
@@ -8,7 +8,7 @@
   'use strict';
 
   var KIT = 'fabric-dashboard-kit';
-  var VERSION = '1.1.6';
+  var VERSION = '1.1.7';
   /* fabric-dashboard-kit:theme-ids:begin */
   var THEMES = ['graphite', 'fabric', 'paper', 'forest', 'ocean', 'ember', 'contrast'];
 /* fabric-dashboard-kit:theme-ids:end */

package/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/kit.json

@@ -1,6 +1,6 @@
 {
   "name": "fabric-dashboard-kit",
-  "version": "1.1.6",
+  "version": "1.1.7",
   "profile": "fabric-dashboard/0.1",
   "decision": "DEC-0036",
   "declarationKey": "https://fabric.passioncode.ai/agent-contract/extensions/dashboard/0.1",
@@ -15,9 +15,9 @@
     "contrast"
   ],
   "files": {
-    "fabric-dashboard.css": "7a90bbe1f1a2170df5dac0f596a3f302167bef9a7243457bb21dd0eb34f4d359",
-    "fabric-dashboard.js": "146ec9a0fd50af2df3245c02ec7dfba75b7d4e8cb5476fedb5ef727869fef1cc",
-    "fabric-button.js": "60c2b6d44571213e0237c29a94a4cf220f9de3efcfa697ac6a33777d1ad25fd6",
+    "fabric-dashboard.css": "549c1c1546bc9f8d2c1a579e7ad1035d009c94c3324b91d89d892afc437d5800",
+    "fabric-dashboard.js": "fa966a8f3b228391c2dae33674887a0d44b102cb58e42dbe6331f08bab57b391",
+    "fabric-button.js": "220c5c9719a9f6e35851d8748e2abb1d6606ffdb9fc43f3aff2b01f34637d925",
     "themes.json": "511839f1a1a83eb37fadfd132791474497d5c28c5091700b9aa31ad076e359b5"
   },
   "history": {
@@ -59,6 +59,11 @@
       "fabric-dashboard.css": "7a90bbe1f1a2170df5dac0f596a3f302167bef9a7243457bb21dd0eb34f4d359",
       "fabric-dashboard.js": "146ec9a0fd50af2df3245c02ec7dfba75b7d4e8cb5476fedb5ef727869fef1cc",
       "fabric-button.js": "60c2b6d44571213e0237c29a94a4cf220f9de3efcfa697ac6a33777d1ad25fd6"
+    },
+    "1.1.7": {
+      "fabric-dashboard.css": "549c1c1546bc9f8d2c1a579e7ad1035d009c94c3324b91d89d892afc437d5800",
+      "fabric-dashboard.js": "fa966a8f3b228391c2dae33674887a0d44b102cb58e42dbe6331f08bab57b391",
+      "fabric-button.js": "220c5c9719a9f6e35851d8748e2abb1d6606ffdb9fc43f3aff2b01f34637d925"
     }
   }
 }

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/board.md

@@ -37,7 +37,8 @@ refuses it with `invalid_arguments` (FAA-244).
    binding credential, shown once, goes into `credential_file` (0600, atomic) and never into the answer, a log or argv.
    Keep the file in the service's data directory or the operator's vault.
 3. Each connection joins with `fabric.board.join {projectId}` (`join_board` / `joinBoard`). It re-reads `hub.json`,
-   checks the pid it names is alive, tells the owner of the door's listener from the socket table (DEC-0154 HA-2:
+   checks the pid it names is alive (a process of another OS account under that id is `HubError` code `not-a-hub`,
+   retryable, saying not verified, as the session hooks say it, FAA-304; none at all is `not-running`), tells the owner of the door's listener from the socket table (DEC-0154 HA-2:
    another OS account's process, or one whose owner cannot be told, is `HubError` code `foreign-user`, retryable, with
    nothing sent; a restricted macOS table, which a retry never clears, is `data.reason` `table-restricted` and not
    retryable, protocol.md, FAA-272), and only then sends the credential (a session already running carries that refusal as `BoardError` code
@@ -403,7 +404,8 @@ Python (`fabric_hub`): `fabric_root(platform, env)`, `locate_hub(root=None, aliv
 `read_door_token(location)`, `read_credential(path)`, `HubClient(root=None, *, alive, timeout, estate, post)` with
 `request_board_access(agent_id, project_id, capabilities, reason)`, `poll_access(request_id, poll_secret,
 credential_file)`, `join_board(project_id, credential_file) -> BoardGrant`, `call_door(tool, args)`,
-`call_binding(tool, args, credential_file)`; `Backoff(first=2, cap=300, jitter=0.2, floor=1)`; `HubError(code,
+`call_binding(tool, args, credential_file)`; `pid_alive(pid)` answers True, False, or None for another OS account's
+process (not verified); `Backoff(first=2, cap=300, jitter=0.2, floor=1)`; `HubError(code,
 message, retryable, data)`.
 
 Python (`fabric_board`): `Responder(*, hub, project_id, capabilities, credential_file, checkpoint_file, handler,

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/dashboard-kit.md

@@ -105,7 +105,8 @@ service. Load it after the stylesheet, with ids only:
   Fabric* on a Russian page, or the page's `data-label-open`);
   `--ink` on `--panel` with an `--edge` boundary, the pairs the themes are measured on.
 - **Links (FL-1…FL-6):** built with the kit's port of the contract's `buildFabricLink`; a value outside the grammar
-  (or one shaped like a credential) means no button, never a bad link. A press opens a view in Fabric and starts
+  (or one shaped like a credential, by the contract's DEC-0151 detector as the kit's `fabric-secrets.mjs` reads it, since
+  1.1.7) means no button, never a bad link. A press opens a view in Fabric and starts
   nothing (FB-8).
 - **The host (FB-6):** when the host's `fabric_button` cookie says `owner=host`, the page hides its own button.
 - **Fabric absent (FB-5):** when the cookie says `fabric=absent`, or `data-fabric="absent"`, or when the page is still
@@ -148,6 +149,16 @@ vertically by the viewport or a clipping ancestor; ED-4 is `NOT_RUN` on a page p
 the scroll position: say so in the report. A `NOT_RUN` is not a pass. Exit codes: 0 when no rule fails and at least
 one passed, 1 on a `FAIL`, 2 on a usage error, 3 when no rule was measured (every rule `NOT_RUN`, since 0.44.0).
 
+Since 0.81.0 the probe opens a loopback page (and asks a local service for its login code) only after it reads the
+page's listener from the socket table as this OS account's (DEC-0154 PL-3, HA-2; FAA-260). On a Mac whose socket
+table is restricted for the runtime that runs the probe (macOS 27.2 shows an ad-hoc-signed Node, such as Homebrew's,
+nothing through `netstat`; DEC-0155 RT-1) the listener reads `unknown` (`table-restricted`), so every rule is
+`NOT_RUN` and the probe exits 3, whatever the page. That is not a pass and not the page's fault: say so in the report,
+with the reason the probe printed. The probe does not vouch for the listener by the service's pid, since only a
+caller that started the process may (DEC-0155 RT-3, the installers' route), and the well-known `process.pid` proves
+nothing. To measure the page, run the probe with a Node whose table reads (an Apple-signed or Developer ID one), or
+on a host without the restriction (FAA-318).
+
 ## Upgrading an existing dashboard
 
 A session that starts (or is cleared) in a repository that owns a service, whose dashboard has no
@@ -166,7 +177,9 @@ In the middle of an unrelated task, finish that first or record the upgrade as a
 3. A page with an older kit: `dashboard_kit.py install <dir>`. A `changed` copy is refused; move the
    edits into the page's own files, then install (or `--force` when the operator says the edits go).
 4. Raise `kit` in the declaration (`dashboard_extension()` does it), restart the service, and run
-   both probes above. Report the layout table with every `NOT_RUN`.
+   both probes above. Report the layout table with every `NOT_RUN`. On a Mac with a restricted socket
+   table the layout probe measures nothing since 0.81.0 (every rule `NOT_RUN`, exit 3, the reason
+   `table-restricted`; *Proving it* above): report that as not measured, never as a pass.
 
 ## When something is missing
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/dashboard-links.md

@@ -123,7 +123,15 @@ if_absent policy, the same device and `"listener_owner": "this-account"`: the ki
 the host read for the listener on http_url's port (`fabric_peer_owner`'s
 `this-account`, `another-account`, `system`, `unknown`, `none`, or
 `check_service.py`'s `foreign-user`); any other, or none given, refuses the
-browser (DEC-0154 PL-3, FAA-251). The native link does not take it: Fabric
+browser (DEC-0154 PL-3, FAA-251). The host reads that kind right before it opens
+the page with the adapter's
+`python3 building-fabric-services/scripts/fabric_peer_owner.py listener <port>`
+(or `node building-fabric-services/scripts/fabric-peer-owner.mjs listener <port>`),
+which prints it on one line (`--json` prints the whole owner) and sends nothing
+to the port (FAA-315). Where the socket table is restricted (macOS 27.2 for an
+ad-hoc-signed Python or Node, DEC-0155 RT-4) only this account's listener on
+exactly `127.0.0.1` reads `this-account`; a wildcard or `::1` bind reads
+`unknown` (`table-restricted`), and the browser is refused. The native link does not take it: Fabric
 Dashboards checks its own listener. Contract DEC-0123 PL-3 also allows a browser
 on `unsupported` (a system the host does not ship for); the gate treats
 `unsupported` as no fallback, by the operator's rule that a browser opens only on a

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/kit-modules.md

@@ -59,7 +59,7 @@ A module imports only modules listed before it in `kit.json`, so the kit has no
 | L0 | `fabric_time` | strict RFC 3339, UTC days, formatting, day windows, the clock ([dates](#dates-and-times)) |
 | L0 | `fabric_identifiers` | identifier equality by normal form (DEC-0076) |
 | L0 | `fabric_secrets` | the contract's one credential detector (DEC-0044) |
-| L0 | `fabric_peer_owner` | which OS account owns each end of a loopback connection, from the computer's socket table (DEC-0154 HA-2, FAA-226): `listener`, `server_end`, `peer`, `CheckedHTTPConnection`; the Python file is Project Observatory's `peer_owner.py`, vendored from commit `f86f0622` (1.1.0) and read against `2180235c` (1.2.0, whose Linux rule it carries), with the readings its header names (`1.2.0+kit.5`; Observatory's 1.3.x libproc proof is FAA-292), the Node twin reads netstat, `/proc` and the owner SID where Python reads `sysctl`, `/proc` and `GetExtendedTcpTable`; on a restricted macOS table (FAA-267) a caller may vouch with a pid it started, proved by `lsof -p` |
+| L0 | `fabric_peer_owner` | which OS account owns each end of a loopback connection, from the computer's socket table (DEC-0154 HA-2, FAA-226): `listener`, `server_end`, `peer`, `CheckedHTTPConnection`; the Python file is Project Observatory's `peer_owner.py`, vendored from commit `f86f0622` (1.1.0) and read against `2180235c` (1.2.0, whose Linux rule it carries), with the readings its header names (`1.2.0+kit.6`; Observatory's 1.3.x libproc proof is FAA-292), the Node twin reads netstat, `/proc` and the owner SID where Python reads `sysctl`, `/proc` and `GetExtendedTcpTable`; on a restricted macOS table (FAA-267) a caller may vouch with a pid it started, proved by `lsof -p` |
 | L0 | `fabric_tailnet` | who calls an agent behind `tailscale serve` and what that person may open (FAA-297): `Tailscale-User-Login` only on the agent's own serve listener from a loopback peer, groups from a generated `tailnet-perimeter/1` file, a personal SHA-256-stored key for MCP no wider than the groups; `authorize`, `load_perimeter`, `load_keys`, `hash_key`, refusals 401/403 with a code ([surfaces-and-auth.md](surfaces-and-auth.md#behind-tailscale-serve)) |
 | L1 | `fabric_crypto` | Ed25519 signing (a Montgomery ladder that does not branch on the key) and verification, P-256 verification, base64url, sha256 |
 | L1 | `fabric_base` | the protocol name, `ServiceError`, small shared helpers |
@@ -79,7 +79,7 @@ A module imports only modules listed before it in `kit.json`, so the kit has no
 | L3 | `fabric_a2a` | the reading side of an A2A Agent Card: `surfaces.a2a` as the schema reads it, and what a public card must not carry (DEC-0122) |
 | L3 | `fabric_page_links` | a service's pages as Fabric Dashboards' open_link: build and read it, a raw local address, FAC-SEM-143 on a link and on a URL-mode input request (DEC-0123); the Python twin reads URLs as WHATWG does by hand |
 | L3 | `fabric_load` | the call queue and the load report of DEC-0104 (FAA-289): `job_caller_key`, `next_queued_job`, `admit_job`, `queue_status_message`, `read_queue_position`, FAC-SEM-131 to 133, the `service-load/1` and `extensions/load/0.1` shapes, `load_extension`; imports `fabric_connections` for ajv's `date-time` ([interop](interop.md#a-nodes-call-queue)) |
-| L3 | `fabric_lock` | the instance lock and the supervisor marker (LC-01, DEC-0057) |
+| L3 | `fabric_lock` | the instance lock, its watch where the lock has no path-keyed name (macOS, FAA-303), and the supervisor marker (LC-01, DEC-0057) |
 | L3 | `fabric_usage` | usage receipts, the ledger, the usage report, attribution, spending limits ([usage](usage.md)) |
 | L3 | `fabric_backups` | settings backups (DEC-0025) |
 | L3 | `fabric_descriptor` | the descriptor, peers, app descriptors, the well-known document, the loopback HTTP server that refuses another OS account's peer before reading it (`LoopbackHTTPServer`, Node `loopbackServer`; FAA-227) |

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/lifecycle.md

@@ -106,7 +106,8 @@ systemd and Task Scheduler do not poll yet, FAA-253).
    then poll the well-known document until it answers with this `id.instance` on a listener of this OS account
    (DEC-0154 HA-2: another account's listener, or one whose owner cannot be told, is `foreign-user` and never a
    successful install; the error names it). Where the socket table hides other processes (macOS 27.2 under an
-   ad-hoc-signed interpreter), the installer vouches with its own job's pid from `launchctl print`; a listener it
+   ad-hoc-signed interpreter), the installer vouches with its own job's pid from `launchctl print`, for a listen on
+   exactly `127.0.0.1` alone (DEC-0155 RT-3; a wildcard bind is never vouched for since FAA-312); a listener it
    cannot prove reads `table-restricted` and the error names the way round it (FAA-267). The pid is the job's own, so a
    `ProgramArguments` wrapper that starts the server as a child (`sh -c` without `exec`, `uv run`, `npm start`) cannot
    vouch for it: on such a host start the server with `exec` or run the installer from Apple's `/usr/bin/python3`.
@@ -381,6 +382,26 @@ holds the same name beside its file lock, so the two kits exclude each other eve
 name needs Node 22 or later: Node 18 and early 20 collapse every abstract socket name into one, and later 20 pads it so
 no Python copy or probe sees it, so the Node kit refuses to start there with a sentence naming Node 22 (FAA-72).
 
+**A lock that moves under its holder (FAA-303).** `acquire` checks that the inode it locked is the file at the path
+(FAA-293), which closes the race between two copies starting at once. A folder swapped under a copy that already holds
+the lock (a data import replacing the data folder) is a second case. On Linux and Windows the path-keyed name above
+still keeps a second copy out. On macOS the lock is `flock` (Python) or `O_EXLOCK` (Node), both on an inode, so a
+second copy locks the new file and starts. There `hold_single_instance` / `holdSingleInstance` start a watch on the
+held lock (`InstanceLock.watch` / `InstanceLock#watch`): every `LOCK_WATCH_SECONDS` (2 s; one `stat` and one `fstat`)
+the holder compares the inode it locked with the file at the path, and once the path names another file (the imported
+folder's lock, or the one a second copy made) it stops at once with 75 and one sentence naming the path
+(`lost_lock_message` / `lostLockMessage`), so the copy started on the new folder runs alone. The two copies overlap for
+at most one interval. The stop is abrupt on purpose (`stop_lost_holder` / `stopLostHolder`: `os._exit`,
+`process.exit`): a graceful shutdown would write the old copy's state into the folder now at the path, which is not the
+one it read. Under a supervisor the stopped copy is restarted and takes the new folder's lock, or waits as above while
+another copy holds it. A path that is gone or cannot be
+read now (a folder removed, a permission, an I/O error) is read as nothing there yet and tried again next time: a
+second copy has to make a file there to start, and the watch then sees that file. `release` ends the watch. Pass
+`on_lost` / `onLost` to `hold_single_instance` / `holdSingleInstance` (or call `watch` yourself on an `InstanceLock`) to
+react otherwise. A path-keyed name on macOS was weighed and left: it needs a file outside the data folder, in a folder
+the system never cleans and every copy of every user can write, which the standard library cannot promise; and a
+watch also stops a holder that would otherwise go on writing stale state into the imported folder.
+
 **Token files on Windows.** The privacy of `service.token` is its ACL (service.md *Windows
 token files*): the kits write a protected list: the user, SYSTEM and Administrators, set before the
 token's bytes go in, any entry already there dropped. On read, `windows_token_acl_problem` /

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/protocol.md

@@ -232,15 +232,21 @@ on macOS, the same `/proc` files on Linux, and `netstat -ano` with the owner SID
 
 macOS 27.2 shows an ad-hoc-signed interpreter (a Homebrew Python, measured; a Homebrew Node is ad-hoc-signed too and was not measured) only its own sockets: sysctl lists this
 process alone and netstat prints nothing. The Python calibration therefore also asks for a child process's listener,
-and an empty netstat is `unknown` with reason `table-restricted` (never another account's). A caller that started the
+and a restricted table is `unknown` with a reason beginning `table-restricted` (never another account's): DEC-0155 RT-1
+reads so a netstat that prints nothing or only its header, one that fails or exits non-zero, a table holding no row of
+another uid (sysctl) or of another process (netstat), and a macOS table without the reader's own connection (FAA-312;
+Linux and Windows keep `no-row`). Under it `listener(port)` reads this account's listener as its own only on exactly
+`127.0.0.1` (RT-4). `fabric_peer_owner.py listener <port>` and `fabric-peer-owner.mjs listener <port>` print the kind
+(`--json` the whole owner; FAA-315). A caller that started the
 server itself may vouch with that pid: `lsof -p <pid>` asks the process, which the restriction leaves readable, and a
 listener of this account's pid on the port counts as this account's (`CheckedHTTPConnection(vouch_pid=...)`, Node
 `checkedSocket({vouchPid})`). The launchd installers vouch with their own job's pid; elsewhere a restricted table
 refuses (the probe, the hub client and `fabric_http` included, FAA-272), and Apple's `/usr/bin/python3` sees the
-whole table (FAA-267). A vouch is a weaker proof than the table's: it shows the job's pid listens on the port (`127.0.0.1` or the
-IPv4 wildcard for a LaunchAgent's installer, exactly `127.0.0.1` for a LaunchDaemon's), not that it accepted this connection, so a more specific bind by root over a wildcard job would pass;
-the pin's ruling on vouching is DEC-0155 RT-3 (the contract's CT-261), which vouches only for a listen on exactly
-`127.0.0.1`: the kit's IPv4 wildcard vouch for a LaunchAgent departs from it until a later release (filed by FAA-258).
+whole table (FAA-267). A vouch is a weaker proof than the table's: it shows the job's pid listens on exactly `127.0.0.1`
+on the port, not that it accepted this connection. Since FAA-312 every vouch follows DEC-0155 RT-3: a wildcard or `::1`
+listener is never vouched for (`lsof` prints an IPv6-only wildcard as `*:<port>` too), and a reader whose real and
+effective uid differ vouches for nothing. The accepted socket itself (RT-2, libproc or `lsof` of established sockets)
+is not read yet (FAA-292; the repository's `docs/evidence/specs/2026-11-12-faa-292-libproc-decision.md`).
 
 Every kit client that sends a credential to loopback checks first: `check_service.py` (rule `listener.owner`, the first that reads the port for
 a local placement; `FAIL` `foreign-user` and no rule reads the port), the hub client (`HubError` `foreign-user`, its

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/check_dashboard_link.py

@@ -28,6 +28,24 @@ CREDENTIAL_PAIRS = {
     'session': {'token', 'id'},
     'code': {'login', 'auth', 'access', 'session'}}
 JWT_SHAPE = re.compile(r'eyJ[A-Za-z0-9_-]{2,}\.[A-Za-z0-9_-]{2,}\.[A-Za-z0-9_-]*')
+URL_BASE64_RUN = re.compile(r'[A-Za-z0-9_-]*')
+
+
+def has_jwt(text):
+    # Whether JWT_SHAPE matches anywhere, read in one pass (the contract's hasJwt, FAA-313): the expression backtracks
+    # from every `eyJ` of a long run, quadratic in it, while every `eyJ` of one run shares that run's end, so only its
+    # first is tried. The kit's fabric_secrets.has_jwt reads the same way; this file stands alone, so it has its own.
+    at = text.find('eyJ')
+    while at >= 0:
+        one = URL_BASE64_RUN.match(text, at + 3).end()
+        if one - at - 3 >= 2 and text[one:one + 1] == '.':
+            two = URL_BASE64_RUN.match(text, one + 1).end()
+            if two - one - 1 >= 2 and text[two:two + 1] == '.':
+                return True
+        at = text.find('eyJ', one)
+    return False
+
+
 # The contract's SECRET_VALUE at the pin (DEC-0151): `Bearer ` at a value's start in any case, or a provider key with its
 # prefix in its canonical case after a boundary (the start, a character that is no ASCII letter or digit, or an escape);
 # an `sk-` key holds a digit and an upper-case letter with 16 or more characters, or a digit with 32 or more.
@@ -58,7 +76,7 @@ def credential_name(name):
 def secret_value(value):
     long_secret = any(re.search(r'[a-z]', run) and re.search(r'[A-Z]', run) and re.search(r'[0-9]', run)
                       for run in LONG_RUN.findall(value))
-    return bool(JWT_SHAPE.search(value) or SECRET_VALUE.search(value) or long_secret)
+    return bool(has_jwt(value) or SECRET_VALUE.search(value) or long_secret)
 
 
 def carries_credential(text):

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/check_service.py

@@ -825,13 +825,15 @@ class Probe:
         out = subprocess.run(["launchctl", "print", "%s/%s" % (domain, life.get("label"))], capture_output=True, text=True)
         match = re.search(r"^\s*pid = (\d+)", out.stdout, re.MULTILINE)
         served = ((self.wk or {}).get("process") or {}).get("pid")
+        # a LaunchDaemon's leftover LaunchAgent runs in its UserName's gui/<uid> (FAA-317)
+        second = other_domain_copy(life.get("label"), domain, plist.get("UserName")) if out.returncode == 0 and match else None
         if out.returncode != 0:
             self.add("lifecycle.one-copy", "FAIL", "launchd job %s is not loaded in %s" % (life.get("label"), domain))
         elif not match:
             self.add("lifecycle.one-copy", "FAIL", "launchd job loaded but not running")
-        elif other_domain_copy(life.get("label"), domain):  # loaded in both domains: two copies (FAA-286 item 6)
+        elif second:  # loaded in both domains: two copies (FAA-286 item 6)
             self.add("lifecycle.one-copy", "FAIL", "launchd job %s is loaded in %s and in %s: two copies; uninstall one"
-                     % (life.get("label"), domain, other_domain_copy(life.get("label"), domain)))
+                     % (life.get("label"), domain, second))
         else:
             same = int(match.group(1)) == served
             self.add("lifecycle.one-copy", "PASS" if same else "FAIL",

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/check_service_channel_agent.py

@@ -18,7 +18,7 @@ from typing import Any, Callable, Dict, List, Optional, Tuple
 
 sys.path.insert(0, str(Path(__file__).resolve().parent))
 from fabric_jsvalue import indexed_objects, js_keys  # noqa: E402
-from fabric_secrets import JS_SPACE, JWT_SHAPE, SECRET_VALUE, raw_values, secret_argument, secret_url, secret_value  # noqa: E402
+from fabric_secrets import JS_SPACE, SECRET_VALUE, has_jwt, raw_values, secret_argument, secret_url, secret_value  # noqa: E402
 from fabric_secrets import url_parts as _whatwg_url_parts  # noqa: E402 - public since FAA-250
 import check_service_channel_agent_schema as cas  # noqa: E402
 
@@ -208,9 +208,9 @@ def read_as_url(read: str) -> bool:
 
 
 def _url_reading(read: str) -> bool:
-    """secretUrl where read_as_url admits the head, secretArgument otherwise. The kit's secret_url also reads a URL the
-    WHATWG parser refuses (the safe direction for its own callers); the contract's `new URL` throws there and finds only
-    what secretArgument finds, so a refused URL is read by secret_argument alone here."""
+    """secretUrl where read_as_url admits the head, secretArgument otherwise. A URL the WHATWG parser refuses makes the
+    contract's `new URL` throw, which finds only what secretArgument finds, so such a URL is read by secret_argument
+    alone: url_parts answers None for it here, as the kit's secret_url reads it as an argument only since FAA-309."""
     if not read_as_url(read):
         return secret_argument(read)
     return secret_argument(read) or (url_parts(read) is not None and secret_url(read))
@@ -222,7 +222,7 @@ def shaped_read(read: str) -> bool:
 
 def _key_shaped(text: str) -> bool:
     read = head(text)
-    return bool(JWT_SHAPE.search(read) or SECRET_VALUE.search(read))
+    return bool(has_jwt(read) or SECRET_VALUE.search(read))
 
 
 def plain_name(name: str) -> bool:
@@ -397,6 +397,8 @@ def url_parts(text: str) -> Optional[Tuple[str, str]]:
             return None
         if at and hostport == "":
             return None
+        if host == "" and colon > bracket:
+            return None  # an empty host ended by `:`, with an empty port or a port: `new URL` throws
         if host == "" and special and lowered != "file":
             return None
         if host and not _host_ok(host, special):

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/check_service_rules.py

@@ -135,20 +135,31 @@ import fabric_actions as fa  # noqa: E402 - beside this file (DEC-0121)
 import fabric_a2a as fa2  # noqa: E402 - beside this file (DEC-0122)
 
 
-def other_domain_copy(label: object, domain: str) -> Optional[str]:
-    """The other launchd domain when it also has job `label` loaded, a second copy (FAA-286 item 6), else None."""
-    other = ("gui/%d" % getattr(os, "getuid", lambda: 0)()) if domain == "system" else "system"
-    try:
-        out = subprocess.run(["launchctl", "print", "%s/%s" % (other, label)], capture_output=True, text=True, timeout=10)
-    except (OSError, subprocess.SubprocessError):
-        return None
-    return other if out.returncode == 0 else None
+def other_domain_copy(label: object, domain: str, user_name: object = None) -> Optional[str]:
+    """The other launchd domain when it also has job `label` loaded, a second copy (FAA-286 item 6), else None. For a
+    LaunchDaemon (`system`) that is a gui/<uid> domain: first the one of its plist's UserName (`user_name`), where a
+    leftover LaunchAgent of a dedicated account runs (FAA-317), then the probe's own."""
+    if domain == "system":
+        uids = [_sup._account_uid(user_name)] if isinstance(user_name, str) and user_name else []
+        uids.append(getattr(os, "getuid", lambda: 0)())
+        others = ["gui/%d" % uid for i, uid in enumerate(uids) if uid is not None and uid not in uids[:i]]
+    else:
+        others = ["system"]
+    for other in others:
+        try:
+            out = subprocess.run(["launchctl", "print", "%s/%s" % (other, label)], capture_output=True, text=True,
+                                 timeout=10)
+        except (OSError, subprocess.SubprocessError):
+            continue
+        if out.returncode == 0:
+            return other
+    return None
 
 
 def in_launch_daemons(plist_path: Path) -> bool:
-    """Whether a plist sits in /Library/LaunchDaemons, where launchd loads it at boot as a LaunchDaemon (FAA-278)."""
-    folder = re.sub(r"^/{2,}", "/", str(Path(os.path.abspath(str(plist_path))).parent))
-    return folder.lower() == str(_sup.SYSTEM_DAEMONS).lower()  # the supervisors' own, which a test may point elsewhere
+    """Whether a plist sits in /Library/LaunchDaemons, where launchd loads it at boot as a LaunchDaemon (FAA-278): the
+    supervisors' own rule, imported (FAA-317), which a test may point elsewhere through their SYSTEM_DAEMONS."""
+    return _sup._in_daemons(plist_path)
 
 
 def plist_problems(plist: dict, label: object, token: object = None, *, system: bool = False,

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-connections.mjs

@@ -3,7 +3,7 @@
 // connectionsExtension builds the `extensions` entry a service declares, `state` from its own checks and its degraded[].
 // Part of the Node service kit (FAA-62, layer L3); the twin of fabric_connections.py. Node 20+, no dependency.
 import { ServiceError } from './fabric-base.mjs';
-import { BEARER_INSIDE, JWT_SHAPE, longSecret, secretUrl } from './fabric-secrets.mjs';
+import { BEARER_INSIDE, hasJwt, longSecret, secretUrl } from './fabric-secrets.mjs';
 import { isObject } from './fabric-jsvalue.mjs';
 
 export const CONNECTIONS_EXTENSION_KEY = 'https://fabric.passioncode.ai/agent-contract/extensions/connections/0.1';
@@ -112,8 +112,9 @@ const longRun = (value) =>
     const cut = at < 0 ? -1 : piece.indexOf('://', at);
     return longSecret(cut < 0 ? piece : piece.slice(0, cut));
   });
+// hasJwt reads a JWT in one pass, where JWT_SHAPE backtracks from every `eyJ` of a long run (FAA-313).
 const credential = (value, runs) =>
-  JWT_SHAPE.test(value) || KEY_SHAPE.test(value) || BEARER_INSIDE.test(value) || (runs && longRun(value)) || urlsIn(value).some(secretUrl);
+  hasJwt(value) || KEY_SHAPE.test(value) || BEARER_INSIDE.test(value) || (runs && longRun(value)) || urlsIn(value).some(secretUrl);
 
 /** What the schema cannot state: an id named twice, a credential in any string member. */
 function beyondShape(list) {

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-delegation.mjs

@@ -9,6 +9,8 @@
 //     effects: { 'example.write': 'draft' }, issuer: wk.auth.delegation.issuer });
 //   const verdict = await gate(toolName, req.headers);   // before the tool runs
 //   if (!verdict.ok) return refusalToolResult(verdict);
+//
+// Example URLs write their scheme in angle brackets: read `<https>` as `https` (FAA-212).
 
 import crypto from 'node:crypto';
 import fs from 'node:fs';

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-descriptor.mjs

@@ -18,7 +18,7 @@ import { ROUTES } from './fabric-usage.mjs';
 // document's `extensions`. The kit is assets/dashboard-kit; its version is the one in kit.json.
 export const DASHBOARD_EXTENSION_KEY = 'https://fabric.passioncode.ai/agent-contract/extensions/dashboard/0.1';
 
-export const DASHBOARD_KIT = 'fabric-dashboard-kit@1.1.6';
+export const DASHBOARD_KIT = 'fabric-dashboard-kit@1.1.7';
 
 export const REFERENCE_THEMES = ['graphite', 'fabric', 'paper', 'forest', 'ocean', 'ember', 'contrast'];
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-holds.mjs

@@ -36,7 +36,10 @@ const instant = (value, name) => {
 const reasonOk = (reason, what) => {
   if (!HOLD_REASONS.includes(reason)) throw new ServiceError(`A ${what}'s reason is one of ${HOLD_REASONS.join(', ')}.`);
 };
-const squash = (text) => String(text).split(/\s+/).filter(Boolean).join(' ');
+// One run of ECMAScript's whitespace, written out as fabric_secrets.JS_SPACE is, the class both twins squash with
+// (FAA-316): Python's str.split() also takes U+001C to U+001F and U+0085 and not U+FEFF.
+const SPACES = /[\t\n\v\f\r \u00a0\u1680\u2000-\u200a\u2028\u2029\u202f\u205f\u3000\ufeff]+/g;
+const squash = (text) => String(text).replace(SPACES, ' ').replace(/^ | $/g, '');
 
 /** A held job's statusMessage; the message is shortened, never refused, to fit 500 characters. */
 export function waitingMessage(reason, since, until = null, message = null) {
@@ -50,7 +53,7 @@ export function waitingMessage(reason, since, until = null, message = null) {
     const squashed = squash(message);
     const room = MAX_STATUS_MESSAGE - head - codePoints(text) - ': '.length;
     if (squashed && room > 0) {
-      text += ': ' + (codePoints(squashed) <= room ? squashed : [...squashed].slice(0, room - 3).join('').trimEnd() + '...');
+      text += ': ' + (codePoints(squashed) <= room ? squashed : [...squashed].slice(0, room - 3).join('').replace(/ $/, '') + '...');
     }
   }
   return pauseMessage(until === null ? { text } : { resetsAt: until, text });
@@ -86,7 +89,7 @@ export function holdSentence(caller, work, reason, until) {
 }
 
 function text(value, name, high = 200) {
-  if (typeof value !== 'string' || !value.trim() || value.length > high) throw new ServiceError(`${name} is a text of 1 to ${high} characters.`);
+  if (typeof value !== 'string' || !squash(value) || value.length > high) throw new ServiceError(`${name} is a text of 1 to ${high} characters.`);
   if (secretValue(value)) throw new ServiceError(`${name} looks like a credential; a hold names callers and work, never a secret.`);
   return squash(value);
 }

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-hub.mjs

@@ -56,8 +56,9 @@ export class HubError extends Error {
 /**
  * The HubError for a hub port the peer-owner check refused (DEC-0154 HA-2): code `foreign-user`, the pinned contract's
  * state name, with the owner's reason in the sentence and in `data.reason` (FAA-272): `table-restricted` when this
- * runtime's socket table hides other processes' sockets, which never clears, so it is not retryable; otherwise the
- * owner's kind or the check's reason (`another-account`, `no-row`), retryable as before.
+ * runtime's socket table hides other processes' sockets, or, on macOS, holds no row for this connection (DEC-0155
+ * RT-1, FAA-312), which never clears, so it is not retryable; otherwise the owner's kind or the check's reason
+ * (`another-account`, or `no-row`, which only Linux and Windows give), retryable.
  */
 export function listenerRefusal(e) {
   const kind = e?.owner?.kind ?? null;
@@ -75,14 +76,18 @@ export function fabricRoot(platform = process.platform, env = process.env) {
   return path.join(env.XDG_DATA_HOME || path.join(home, '.local/share'), 'passioncode-fabric');
 }
 
-/** Whether a process with this id runs as this user (Fabric hub.ts#pidAlive): EPERM is another user's process. */
+/**
+ * true: a process of this OS account runs under pid; false: none does. null (falsy): a process of another account does
+ * (EPERM), as when the id hub.json names was reused: not verified, never called running (FAA-304, the session hooks'
+ * answer since FAA-254). Never signals it.
+ */
 export function pidAlive(pid) {
   if (!Number.isInteger(pid) || pid <= 0) return false;
   try {
     process.kill(pid, 0);
     return true;
-  } catch {
-    return false;
+  } catch (e) {
+    return e?.code === 'EPERM' ? null : false;
   }
 }
 
@@ -108,7 +113,8 @@ function readSmall(file) {
 
 /**
  * hub.json read the way an agent must, every call. Answers {origin, mcpUrl, doorTokenFile, pid, startedAt, features} or
- * throws HubError (not-running, retryable; not-a-hub). Reads no token. `estate` is {record, applied}: with it, a hubKey
+ * throws HubError (not-running, retryable; not-a-hub, retryable when hub.json names another OS account's process, not
+ * verified, FAA-304). Reads no token. `estate` is {record, applied}: with it, a hubKey
  * the document names is checked by hubKeyCertified (DEC-0060); fabric-hub/0.1 names none.
  */
 export function locateHub(root = fabricRoot(), { alive = pidAlive, estate, now } = {}) {
@@ -142,7 +148,10 @@ export function locateHub(root = fabricRoot(), { alive = pidAlive, estate, now }
     sameRoot = false;
   }
   if (!sameRoot) throw notHub('names a door token outside the registry root');
-  if (!alive(doc.pid)) throw new HubError('not-running', `Fabric is not running: hub.json names process ${doc.pid}, which is not running.`, true);
+  const live = alive(doc.pid);
+  // FAA-304: another account's process under that id, so not this account's Fabric (as FAA-254)
+  if (live === null) throw new HubError('not-a-hub', `Fabric's hub.json names process ${doc.pid}, which runs under another OS account: not verified.`, true);
+  if (!live) throw new HubError('not-running', `Fabric is not running: hub.json names process ${doc.pid}, which is not running.`, true);
   const features = Array.isArray(doc.features) ? doc.features.filter((f) => typeof f === 'string') : [];
   if (estate && doc.hubKey && typeof doc.hubKey === 'object') {
     const verdict = hubKeyCertified(estate.record, doc.hubKey.kid, doc.hubKey.x, now ?? Date.now() / 1000, estate.applied ?? undefined);