@passioncode-ai/fabric-agent-adapter 0.82.0 → 0.84.1

package/CHANGELOG.md

@@ -1,5 +1,171 @@
 # Changelog
 
+## 0.84.1 (2026-11-13)
+
+0.84.0 was tagged and not published: its release run failed one Node 18 test on the hosted floor runner.
+
+### Fixed
+
+- **The board mandate's linear-time test reads bodies large enough to time** (FAA-135): at 64 KiB a read lasted under a
+  millisecond of CPU time, and one garbage collection made the 4x ratio read as 10x on Node 18; it now compares 256 KiB
+  with 1 MiB, where linear is still about 4 and quadratic about 16, and repeats each read until 50 ms of CPU time
+  (Windows counts it in 15.6 ms ticks, and one short read measured 0), in both twins' tests. No shipped code changes.
+
+## 0.84.0 (2026-11-13)
+
+Wave 6 of the backlog sweep of 2026-11-12. The contract pin stays at `93e7db16` (`v0.1.0+2026-11-08.1`).
+
+### Changed
+
+- **Every service kit module carries the package's licence as an SPDX line** (FAA-192 item 15, the operator's decision
+  of 2026-11-13): `AGPL-3.0-only OR LicenseRef-PassionCode-Commercial`, right after a shebang or as the first line, so
+  every copy `fabric_kit.py install` makes keeps it, an agent whose own files are all rights reserved included; the
+  kit's JSON schemas cannot carry a comment. `kit.json`'s digests change for every module. The dashboard kit moves to
+  1.1.9 for the same line in its three copied files.
+- **creating-fabric-agents names where an agent reads the private cloud Fabric-server template's repository, never the
+  repository** (FAA-192 item 1, the operator's decision of 2026-11-13): the instance's settings or the estate's agent
+  map.
+- **`board.slot.returned` means one thing** (FAA-325): the reference service's take-back says `board.slot.taken_back`
+  (the slot still away), and the kit says `board.slot.returned` once the slot is held again, after a move back and now
+  also once an enroll or replace lands after the operator's take-back (once per take-back in the same process, both
+  twins); a take-back of a slot still held marks nothing.
+- The supervisors' well-known reader uses the kit's one loopback rule (`fabric_socket_proof.loopback_host` /
+  `loopbackHost`): `127.1`, `2130706433`, `0x7f.1` and names under `.localhost` go on the checked connection (FAA-326).
+- `fabric_peer_owner` no longer adds the kit folder to the host's `sys.path` (FAA-327): it asks the `fabric_socket_proof`
+  beside it, the host's imported module when that is the same file (one calibration in a process), else that file by
+  its path; a copy vendored alone keeps the table's answer, and every kit install that brings `fabric_peer_owner` still
+  brings `fabric_socket_proof`. `PEER_OWNER_VERSION` is `1.3.1+kit.8`.
+- The supervisors' well-known reader refuses unread a loopback address the kit's rule does not take, with a zone
+  (`[::1%lo0]`) or IPv4-mapped (`[::ffff:127.0.0.1]`), where `urlopen` or `fetch` would reach the listener without the
+  owner check (0.84.0 seam reading).
+- `test/validate.py` reads the private-terms list with the functions `admit.py` ships (`terms_file`, `terms_pattern`,
+  `term_lines`, `listed_files`), pinned to one case table; `admit.py`'s file listing no longer fails when `git` cannot
+  run (FAA-328).
+
+### Upgrading
+
+- A dashboard or feed that reads `board.slot.returned` as the operator's take-back request reads
+  `board.slot.taken_back` now (FAA-325).
+
+## 0.83.1 (2026-11-13)
+
+0.83.0 was tagged and not published: its release run failed one Windows test of the tailnet identity module.
+
+### Fixed
+
+- **A same-size rewrite of the groups file within one timestamp tick is seen** (FAA-324): `TailnetIdentity` read the
+  file again only when its inode, size, mtime or ctime changed, and Windows' runner left all of them as they were for
+  an in-place rewrite of the same size. While the file's mtime is under two seconds old, an unchanged stat now reads
+  its bytes and compares their SHA-256 (git's racy-clean rule), in both twins; an older unchanged stat is not read.
+
+## 0.83.0 (2026-11-13)
+
+Wave 5 of the backlog sweep of 2026-11-12. The contract pin stays at `93e7db16` (`v0.1.0+2026-11-08.1`).
+
+### Added
+
+- **The accepted-socket proof** (FAA-292, FAA-272): a new L0 kit module, `fabric_socket_proof` /
+  `fabric-socket-proof.mjs`, finds the server end of a connection, or a listener on exactly 127.0.0.1, among this OS
+  account's own processes (DEC-0155 RT-2; Python reads libproc, calibrated on a pair of its own, with an lsof fallback;
+  Node reads `lsof -F pun`). `fabric_peer_owner` asks it on a restricted macOS table before the RT-3 vouch, and stands
+  alone without it. `PEER_OWNER_VERSION` is `1.3.1+kit.7`.
+- **Operations digests** (FAA-206 part 2): `fabric_ops_digest` and `fabric-ops-digest.mjs` fold a service's own counts
+  into `ops.digest.hourly@1` and `ops.digest.daily@1` (DEC-0153), held to the contract's reference folds and its
+  fixtures (FAC-SEM-166, FAC-SEM-167); they keep the hour the service stops in for the next run, never fill hours
+  across a sleep, and catch up missed days. `ops_digest_extension` writes the descriptor's OD-9 declaration. New
+  `references/ops-digest.md`.
+- **A2A serving and calling** (FAA-10): `fabric_a2a_server` and `fabric-a2a-server.mjs` build the Agent Card from the
+  service's capabilities, check it before serving it, and map the A2A 1.0 JSON-RPC binding (`SendMessage`,
+  `SendStreamingMessage` as server-sent events, `GetTask`, `CancelTask`) onto the interop job store. `A2AClient` reaches
+  only origins on the operator's list, with its key from the environment. `check_service_a2a.py` holds the probe rows.
+  New `references/a2a.md`. The interop test against Hermes waits on a reachable endpoint.
+- **A data-agent recipe** (FAA-66): `recipes/data-agent/`, numbers computed by code from a read-only source and answered
+  with a truth envelope where missing is never zero (built from the agents database's `data-room` template).
+- **The support recipe** (FAA-116, FAA-182, FAA-264): a person's categories are routed first, a same-vendor fallback is
+  refused at load, the outbox is redacted, knowledge ids must be citable, and `support-agent.mjs` is `check_reply`'s
+  Node twin (31 shared cases).
+- **`FABRIC_DATA_HOME`** puts a service's data folder on a durable volume, both `fabric_paths` twins (FAA-192).
+- Guidance: the data-home base and a second context's home, the uptime A and B rows, model classes on the spend policy
+  or grant, a template takes precedence over the communication prompt (FAA-277), adapting step 4c scoped to an
+  existing agent; building `SKILL.md` names the board responder's mandate opt-in, the LaunchDaemon refusing `purge`, and
+  Apple's Python on macOS 27.2.
+- **`admit.py`** (FAA-271): `creating-fabric-agents/scripts/admit.py` chains the source check, the probe, the strict
+  template check and the private-terms list into one admission check.
+- **`test/validate.py --private-terms`** (FAA-243): tracked files are checked against the operator's local list of
+  private terms (`$PASSIONCODE_PRIVATE_TERMS`, else `~/.config/passioncode/private-terms.txt`), printing paths and lines
+  only; it exits 2 when the list is absent, and the release checklist runs it before a push.
+- **A person's identity at every door behind `tailscale serve`** (FAA-324, board request `087f41ef`): new L0 kit module
+  `fabric_tailnet_identity` / `fabric-tailnet-identity.mjs`. Each door (dashboard, MCP, the service's own door) reads
+  `Tailscale-User-Login`, believed only when the service listens on loopback and the peer is loopback (the local
+  `tailscale serve`, which strips and sets the identity headers); a request without a login, a tagged node's, a Funnel
+  request's or one from another peer is refused with a stable code, HTTP 403 and a sentence, never a silent pass.
+  Groups come from a `tailnet-groups/1` file (its JSON Schema beside the module) or from the agents base's
+  `door-groups/1`, read for one service; the file is read again on change without a restart, and every door is closed
+  while it is unreadable or invalid. `references/surfaces-and-auth.md` shows the wiring.
+- **`identify_agent` / `identifyAgent`** (FAA-135): a per-agent credential's agent id is bound into the mandate chain
+  (`McpToolServer`, `identifiedAgent`) and through the board responder.
+
+### Changed
+
+- `pid_listens` takes an `owner` (this account by default, a uid, or None), and the LaunchDaemon check reads that one
+  lsof reader (FAA-286); a vouch is taken only for a connection that reached 127.0.0.1 (FAA-273).
+- One loopback host rule (`loopback_host` / `loopbackHost`) for `fabric_http` and `fabric_delegation`; Python's
+  `check_url` and `JwksCache` refuse a host `new URL` refuses and one Python's IDNA codec cannot write, up front. One
+  base URL rule for both OpenRouter clients: a tab or line break, a non-ASCII path, a backslash or a dot segment is a
+  `config` error in both (Node used to rewrite and send it), and attribution reads the host as dialed (FAA-187).
+- Hold records written before 0.83.0 are matched under both whitespace squashes; new records carry
+  `squash: "ecmascript"` (FAA-320). The connections reader finds URL schemes in linear time (FAA-322). A delegation key
+  set holding NaN or Infinity is refused (FAA-194). The adapter scaffold names `__pycache__/` and `*.pyc` in
+  `.gitignore` (FAA-190).
+- `AGENTS.md` carries item 1a, the course check before every change (fabric-workspace `knowledge/rules.md` §0).
+- Private terms in `CHANGELOG.md` and `docs/backlog.md` are replaced by neutral words; ids and findings stay (FAA-243).
+- `fabric_secrets.repository_name` reads a JWT at a word's start in one pass, both twins (FAA-321). Neutral words replace
+  private terms in the docs and the dashboard kit, which moves to 1.1.8 (FAA-243; only comments changed, so moving a
+  copy from 1.1.7 is optional).
+- The source check reads `fabric_secrets` by public names, refuses a detector of another version with exit 2, and has
+  its command line in `fabric_source_check_cli.py` (FAA-190). `register_remote` warns before it writes its token;
+  validators refuse a non-string id or instance; the services folder keeps only JSON objects; refusals name relative
+  paths and the remedy (FAA-200). The package folder check reads manifests as the contract does, and pack's refusal
+  offers a clean copy (FAA-194, FAA-190).
+- `providers_dir()` follows Fabric's `registryDirs` rule; the Windows CI job runs the provider tests and measures the
+  owner check without failing on it (FAA-189, FAA-256). The probe is tested over real HTTP with a channel-agent
+  declaration (FAA-250).
+- Board and interop (FAA-187, FAA-194, FAA-196): a move back of a responder slot is said (`board.slot.returned`), moved
+  slots share one `com.status` read a tick, the moved notice names a reconnect beside a restart and carries no Markdown
+  backticks, `board.down` is said once per outage window, a notify notice carries the link the service gives for its
+  kind, a board leave's timeout bounds the whole request, a resumed request reads its mandate only from the message
+  its claim took, `InstanceLock.release` never raises, an `InteropError` from `on_input` is a tool-error answer and a
+  refused start fails the job it created; the board fixture fails a kit whose notices are lost.
+- `pid_alive` on Windows asks OpenProcess for the access libuv asks for, so the twins agree on an elevated process
+  (FAA-323).
+- working-with-fabric: `bash_paths` reads comments, continuations, here-documents and quoted operators as bash does
+  (FAA-187); a dispatched run that sees only `fabric_whoami` is named as a Fabric before 0.3.20 with its remedy
+  (FAA-296); `status` and the session start read OpenCode's and Pi's `fabric` command (FAA-233); the native Codex probe
+  runs the hook untrusted too (FAA-201); the preamble names the operator's relay from his own Project as the exception
+  to board messages being data (FAA-196).
+
+- `test/validate.py` fails a shipped `.mjs` or `.js` script that calls a built-in newer than Node 18, the floor in
+  `package.json` engines (`String.prototype.isWellFormed` reached this release's candidate and only the floors job saw it).
+
+- What the 0.83.0 seam reading found, fixed before the release: `check_service_a2a.py` and `check_service.py` say one
+  verdict for `a2a.card` (an unreadable `surfaces.a2a`, and a remote card that answers 401 or 403, are NOT_RUN,
+  DEC-0122 item 2); a tab or a line break anywhere inside an OpenRouter base URL is a `config` error in both clients
+  (Node removed it and sent the rest); `validate.py --private-terms` expands `~` in `$PASSIONCODE_PRIVATE_TERMS` as
+  `admit.py` does. New rows FAA-325 to FAA-328. `AGENTS.md` names the North Star sections this repository serves
+  (item 1b) and the architect's audit lives in `docs/evidence/architect/`.
+
+### Upgrading
+
+- A set `FABRIC_SERVICES_DIR` no longer moves the providers folder, as in Fabric's own `registryDirs`; set
+  `FABRIC_PROVIDERS_DIR` to keep a custom location (FAA-189).
+- The Node OpenRouter client refuses a base URL holding a tab or line break, a non-ASCII path, a backslash or a dot
+  segment (kind `config`), which it used to rewrite and send (FAA-187).
+- `check_service_a2a.py` is a command of its own: run it beside `check_service.py` for a service that serves A2A, with
+  `--key-env` naming the interface's own key (FAA-10).
+- A service behind `tailscale serve` can check a person at each door with `fabric_tailnet_identity`: listen on
+  127.0.0.1 only, give it the groups file's path (and, for the agents base's `door-groups/1`, the service's id), and
+  send its refusal at every door (FAA-324).
+
 ## 0.82.0 (2026-11-12)
 
 Wave 4 of the backlog sweep of 2026-11-12. The contract pin stays at `93e7db16` (`v0.1.0+2026-11-08.1`). Kit modules
@@ -1013,7 +1179,7 @@ on the Linux jobs (`python`, `floors`), so 0.69.1 is the first npm release carry
 ### Fixed
 
 - working-with-fabric: a run Fabric started on a board request closes its workflow only once the request is settled
-  (FAA-213, passioncode-vesta's finding on the board; Fabric agrees). On an error the run cannot get past (a refused
+  (FAA-213, a board project's finding; Fabric agrees). On an error the run cannot get past (a refused
   claim, a missing key, a tool that fails twice) `references/on-demand-session.md` closed the workflow while the
   request could still be `queued` or `claimed`, and Fabric's next dispatch then failed at the take-back on every cycle
   (Fabric's main at `a6f0ffda`, before 0.3.16).
@@ -2094,7 +2260,7 @@ command's POSIX paths through Windows path rules. 0.53.1 is 0.53.0 with this fix
 ### Fixed
 
 - The hooks now name this release to Fabric: 0.51.1 still said 0.51.0, and `test/validate.py` now checks it.
-  Copylot check `4028969a-aa35-48f9-9300-331da036fb1d`: no findings.
+  Text check `4028969a-aa35-48f9-9300-331da036fb1d`: no findings.
 
 ## 0.51.1 (2026-10-26)
 
@@ -2213,7 +2379,7 @@ release carrying everything listed under 0.51.0 below.
   its four strings were English only, so a Russian dashboard could not mount it without editing a vendored file that
   `dashboard_kit.py install` then refuses as changed. The message now uses a colon. The button reads the page's `lang`
   and shows Russian on a Russian page, English otherwise; `data-label-chat`, `data-label-session` (with `{name}`),
-  `data-label-open` and `data-label-absent` set a page's own words. The strings were checked with Copylot in the
+  `data-label-open` and `data-label-absent` set a page's own words. The strings were checked with the text checker in the
   PassionCode.ai site voice (en-US report `239ff62c-e0af-4b8b-96e1-0c45c5eca02a`, ru-RU report
   `be37143c-aff1-4502-b9d0-f8b1be56bbf3`, no findings). A test fails on U+2014 in any kit asset, and the WebKit test
   opens a Russian page and a page with its own words. The button's accessible name follows the page too (*Открыть Fabric*, or

package/README.md

@@ -89,8 +89,9 @@ retries, the agent's own key, a spend ceiling before every attempt, usage receip
 [connectors](plugins/fabric-agent-adapter/skills/building-fabric-services/references/connectors.md)); the draft-and-check step of a support agent as a
 [recipe](plugins/fabric-agent-adapter/skills/building-fabric-services/recipes/support-agent/README.md)
 (the whole agent starts from the [agents database](plugins/fabric-agent-adapter/skills/creating-fabric-agents/references/agents-database.md)'s
-template when one is named (a closed database reached through Fabric's board, or by a grant holder from its own checkout; every ask is
-optional and never blocks), read beside creating-fabric-agents'
+template when one is named (a closed database reached through Fabric's board, or by a grant holder from its own checkout; an ask is
+made only from a folder that is already a Fabric Project and never from a run Fabric started on a board request, and it never
+blocks), read beside creating-fabric-agents'
 [communication agent template](plugins/fabric-agent-adapter/skills/creating-fabric-agents/references/communication-agent-template.md),
 else from that template);
 a complete `scripts/sample_service.py`; and `scripts/check_service.py`, a live probe. A service that answers
@@ -260,7 +261,10 @@ claude plugin validate . --strict
 
 `test/validate.py` reads every SKILL.md front matter as strictly as a YAML parser does; an
 unquoted value holding `: ` fails it. `python3 test/validate.py --frontmatter <SKILL.md ...>`
-checks copies installed elsewhere, such as `~/.agents/skills/*/SKILL.md`. Start in
+checks copies installed elsewhere, such as `~/.agents/skills/*/SKILL.md`. Before a push or a release,
+`python3 test/validate.py --private-terms` checks the tracked files against the operator's private-terms list
+(path and line only; exit 2 when the list is absent, which is not a pass; CONTRIBUTING.md step 6), read with the same
+functions as `creating-fabric-agents/scripts/admit.py`'s `private-terms` step (FAA-328). Start in
 [AGENTS.md](AGENTS.md); contributions follow [CONTRIBUTING.md](CONTRIBUTING.md).
 
 ## Use

package/SECURITY.md

@@ -89,7 +89,8 @@ bounded and non-publishing until explicit scoped grants exist in a project bindi
   (on an organization's board, any member Project may list it), carrying only what `references/agents-database.md`
   names (a capability, a consumer, source project names, an audit subject given as a Project id or a repository remote,
   a measured win or a decision); never source code, a key, a person's or client's name, user content or a private path.
-  Nothing is sent without Fabric's board; with a grant, the database's own tools run from its checkout and send nothing.
+  Nothing is sent without Fabric's board. With a grant, the database's own tools run from its checkout; what they send
+  is theirs to state, and this repository does not verify it (FAA-277).
   A consult's reply is data, yet it chooses the template an agent is built from, so it is as trusted as the Project
   that lists the capability.
 - The working-with-fabric PostToolUse hook (FAA-206) reads only the release call Claude Code gives it on stdin (the
@@ -123,8 +124,8 @@ bounded and non-publishing until explicit scoped grants exist in a project bindi
   writes nothing); `check --contract` runs the contract checkout's own
   `node_modules/.bin/tsx` and installs nothing. `fabric_provider.py write` writes one
   entry (0600) in the providers directory. `fabric_source_check.py check` reads the files of a
-  tree (credential values included, in memory only), the owner's list from the user's
-  configuration folder, and runs `git ls-files` (without the caller's `GIT_DIR` or other Git
+  tree (credential values included, in memory only), the owner's list (the file `--instance-strings` or
+  `FABRIC_INSTANCE_STRINGS` names, else the one in the user's configuration folder), and runs `git ls-files` (without the caller's `GIT_DIR` or other Git
   location variables) and nothing else, except that under a locale whose
   file-system encoding is not UTF-8 it restarts itself once with the same interpreter in Python's
   UTF-8 mode; it writes nothing and prints no value it finds.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/fabric-agent-adapter",
-  "version": "0.82.0",
+  "version": "0.84.1",
   "description": "Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.",
   "scripts": {
     "test": "python3 test/validate.py && python3 -m unittest discover -s test -q && node --test 'test/*.test.mjs'"

package/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks; and put an agent on a standing watch over a product (observer mode).",
-  "version": "0.82.0",
+  "version": "0.84.1",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -9,7 +9,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.82.0"
+  version: "0.84.1"
   contract-version: "0.1.0"
   contract-commit: "93e7db164c7829e2783b4b7705c4113bb5201131"
 ---
@@ -186,7 +186,12 @@ default and a committed `*.example`; a key into the secret store, named only. Ru
 A value already committed stays in Git history: say so; a fresh history is the owner's act (no history rewrite, no
 force-push). Then lay down the source manifest, `fabric.source.json` (DEC-0149): `scripts/adapt_project.py source
 <project-root> --dry-run` proposes it, the author narrows `include` and names each key and store as a slot, and the
-check reads the source under it (the reference, *The source manifest*).
+check reads the source under it (the reference, *The source manifest*). An existing agent keeps its data where it is
+until its owner moves it: of the reference's data home, apply what 4c asks (no instance value in the source); the
+data home and the per-release transfer audit are for an agent built new, and an existing one adopts them only when
+its owner asks. An existing agent that answers people (support, sales, reviews) is compared, part by part, with
+creating-fabric-agents' communication agent template and `references/agents-that-answer-people.md`: each part it
+lacks is a finding in the report.
 
 ### 5. Make probes safe and meaningful
 

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/references/agents-database.md

@@ -48,6 +48,16 @@ repository-relative path at a commit, an eval report). A decision without a numb
 | building-fabric-services | at each release | contribute the release's measured wins as success cases and its new technical decisions |
 | working-with-fabric | the retro after work | a lesson with a measured effect is also a success case: contribute it beside the lesson it records |
 
+## A template and the communication prompt
+
+For an agent that talks with people on a channel, the database's template and creating-fabric-agents' communication
+agent prompt (`references/communication-agent-template.md`) are read together, never as two templates (the database's
+own rule). Where they disagree, the template wins, in every part and not only the first-release ones: it is the merged
+practice of the agents of its kind. A part the prompt carries and the template lacks (a first-release part, a check, a
+pipeline step) is built too, unless the template rules it out, and goes back to the database as feedback on that
+template (`agents-db.contribute`); the completion report names each such part. Without a template for the kind, the
+prompt is the recipe.
+
 ## Recording the template
 
 An agent built from a template declares it: `provenance.template` with its id and version, so a later template

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/references/provider-entry.md

@@ -12,7 +12,7 @@ directory:
 | macOS | `~/Library/Application Support/ai.passioncode.fabric/providers/` |
 | Linux | `${XDG_DATA_HOME:-~/.local/share}/passioncode-fabric/providers/` |
 | Windows | `%LOCALAPPDATA%\passioncode-fabric\providers\` (the same root as the services folder, DEC-0032; `~\AppData\Local` when `LOCALAPPDATA` is unset) |
-| any | `FABRIC_PROVIDERS_DIR` when set |
+| any | `FABRIC_PROVIDERS_DIR` when set; `FABRIC_SERVICES_DIR` moves the services folder only, as Fabric's `registryDirs` reads them (FAA-189) |
 
 A service uses a descriptor instead (the `building-fabric-services` skill). One id is a
 service or a provider, never both.
@@ -25,7 +25,7 @@ and refuses what the contract refuses.
 ```bash
 python3 scripts/fabric_provider.py write --id example-agent --provider-id https://agents.example/providers/example-agent \
   --name "Example Agent" \
-  --manifest ~/.local/share/example-agent/fabric-agent.json --installed-by "example-agent 1.0.0" \
+  --manifest '~/.local/share/example-agent/fabric-agent.json' --installed-by "example-agent 1.0.0" \
   --env EXAMPLE_API_KEY=secret-ref:example-agent/EXAMPLE_API_KEY \
   --stdio ~/.local/bin/example-agent mcp
 python3 scripts/fabric_provider.py write ... --url http://127.0.0.1:47201/mcp
@@ -33,6 +33,8 @@ python3 scripts/fabric_provider.py validate ~/Library/Application\ Support/ai.pa
 python3 scripts/fabric_provider.py remove example-agent      # the uninstaller
 ```
 
+The manifest is quoted so the entry keeps `~/`, which every Fabric release reads: unquoted, a shell expands it, and
+Git Bash on Windows hands Python `C:/Users/...`, which Fabric v0.3.15 and earlier refuse (FAA-189).
 `--stdio` comes last and takes the rest of the line as the argument array; there is no shell string. A writer
 option after it (`--env`, `--name`, ...) is refused rather than swallowed into argv; write `--stdio -- EXECUTABLE ...`
 when the server itself takes an option of that name. `--env` belongs to a stdio server and is refused with `--url`. An entry may carry

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/references/source-and-instance.md

@@ -54,7 +54,11 @@ source under it.
 
 - **The data has a home of its own from the first commit: `<agent>-data`.** For an agent that is not a kit service it
   is a folder beside the checkout, never inside it, and `<AGENT>_DATA_DIR` names it (its default is
-  `../<agent>-data`); a kit service keeps the kit's folders above. When the owner keeps the data in Git, it goes to a
+  `../<agent>-data`, resolved against the checkout's root, the folder that holds the agent's source, never the working
+  directory). Two sibling checkouts, and a second context's instance from the same checkout (an organization's beside
+  the personal one), would share that default: each sets its own `<AGENT>_DATA_DIR` (`../<agent>-data.<instance>`), so
+  no copy reads another's data. A kit service keeps the kit's folders above, and on a host whose disk does not persist
+  `FABRIC_DATA_HOME` moves its data folder onto a durable volume (building-fabric-services, the remote placement). When the owner keeps the data in Git, it goes to a
   separate private repository named `<agent>-data`, never to the source's repository. On a cloud host that does not
   keep its disk across a restart (Heroku and the like, an uptime A agent's default), the data home is a durable store
   the same variable names (a database, an object store, that private repository); the folder and the kit's folders
@@ -114,13 +118,22 @@ untracked ones that are not ignored, as they are in the work tree; a staged copy
 | Kind | Finds |
 |---|---|
 | `home-path` | an absolute path inside a person's home folder (a web route under `/home/` is reported too; a route under `/users/` is not): `/Users/<name>/`, `/home/<name>/`, `C:\Users\<name>\`, Git Bash's `/c/Users/<name>/`, WSL's `/mnt/c/Users/<name>/`, and the dashed (`-Users-<name>-`, `C--Users-<name>-`) and URL-encoded forms a tool makes of one. The name is ASCII, and in the dashed form it ends at the next dash: an owner whose home name holds a space, a dash, a dot, an underscore or an apostrophe (each a dash in the dashed form; a slashed name also ends at a space) declares it with `home: <name>` in the owner's list, which reads it whole in every form, and one whose home name is not ASCII, or holds another character, lists it as a plain string (a typographic apostrophe a keyboard typed, which the folder's name does not hold, is written as `'` in `home:`; a folder whose name holds `’` is listed as a plain string with `’` kept and declared too with `home: <name>` written with `'`, which reads the dashed forms; its URL-encoded `’` is not read; a name outside ASCII of one or two characters cannot be checked) |
-| `secret` | a value shaped like a credential by the contract's detector (DEC-0044), read line by line: a provider key starting a word, a JWT, a bearer token, a long random value assigned to a credential's name (but a whole Ed25519 signature under a JSON `"sig"`, `"signature"` or `"signatures"` member, as `sign` writes it, which is public); or a private key: a PEM, OpenSSH or PGP block, or a JWK's `d` as a JSON member, escaped JSON or a Python dict; a URL with a password of 8 or more characters mixing letters and digits (a password without a digit or without a letter is not read) or a credential in its query, percent-encoded or not, JSON-escaped (`\u0026`, `\/`) or nested in another URL's parameter (two levels deep); a file that is a credential by its name, as `pack` refuses it (`.env`, `*.pem`, `*.key`, `.npmrc` and the rest), or a kit credential file (`*.token`, `board.credential`) |
+| `secret` | a value shaped like a credential by the contract's detector (DEC-0044), read line by line: a provider key starting a word, a JWT, a bearer token, a long random value assigned to a credential's name (a run of 40 or more characters mixing upper case, lower case and digits, so a shorter key under `X_API_KEY=` is not read; but a whole Ed25519 signature under a JSON `"sig"`, `"signature"` or `"signatures"` member, as `sign` writes it, which is public); or a private key: a PEM, OpenSSH or PGP block, or a JWK's `d` as a JSON member, escaped JSON or a Python dict; a URL with a password of 8 or more characters mixing letters and digits (a password without a digit or without a letter is not read) or a credential in its query, percent-encoded or not, JSON-escaped (`\u0026`, `\/`) or nested in another URL's parameter (two levels deep); a file that is a credential by its name, as `pack` refuses it (`.env`, `*.pem`, `*.key`, `.npmrc` and the rest), or a kit credential file (`*.token`, `board.credential`) |
 | `instance-string` | a string from the owner's list, in a file, in a file's path or in a link's target |
 
 ```bash
 python3 <plugin-dir>/skills/adapting-projects-to-fabric/scripts/fabric_source_check.py check <project-root>
 ```
 
+Run it by path, with its scripts folder whole: it loads its siblings (`fabric_source_ignore.py`,
+`fabric_source_homes.py`, `fabric_source_restart.py`, `fabric_source_check_cli.py`, `fabric_source_tree.py` and the
+contract's detector `fabric_secrets.py`) and refuses with exit `2` when one is missing or from another version, a
+detector without one of the public names it reads included (FAA-190). `python3 -m fabric_source_check` writes its own
+`.pyc` before the check turns bytecode off; run by path, it writes nothing. `ROOT` defaults to the current folder.
+`--json` prints one object: `mode` (`git` or a walk), `files`, `findings` (`path`, `line`, `kind`, `rule`),
+`notRead`, `skipped`, `dependencies`, `instanceStrings`, `ownerHomes`, `instanceList`, `blocking` (a finding) and
+`complete` (every file read); `--help` names each option.
+
 - It **never repeats** a value it found: no value, no line holding one, no entry of the owner's list and not the
   folder it checks reaches its output. A file's path is checked like its text (line `0` of a finding), and printed
   with an entry of the list as `<line N>`, a home folder's name as `<home>` and each segment holding a
@@ -167,7 +180,7 @@ python3 <plugin-dir>/skills/adapting-projects-to-fabric/scripts/fabric_source_ch
   percent-encodings or an escaped apostrophe (`\'`, `\x27`, `\u0027`, `&#39;`, `&#x27;`, `&apos;`), the same separators it is found with in every form; a home that is also your name goes in the list
   as a plain string too, to be found in text. It is `--instance-strings FILE`, else the file
   `FABRIC_INSTANCE_STRINGS` names, else `passioncode-fabric/instance-strings.txt` in the user's configuration folder
-  (`$XDG_CONFIG_HOME` when it is absolute, else `~/.config`; `%APPDATA%` on Windows). A list inside the tree is refused, because it would
+  (`$XDG_CONFIG_HOME` when it is absolute, else `~/.config`; on Windows `%APPDATA%` when it is absolute, else `~\AppData\Roaming`). A list inside the tree is refused, because it would
   travel with the source. A person who already keeps private terms for org-index's `check_private.py`
   (`~/.config/passioncode/private-terms.txt`) passes that file with `--instance-strings`; this check matches a term
   anywhere in a word, and it does not look for e-mail addresses or account ids by their shape.
@@ -183,7 +196,8 @@ python3 <plugin-dir>/skills/adapting-projects-to-fabric/scripts/fabric_source_ch
   repository is not read; `--every-file` and a folder outside Git read its files, its `.git` left out. An exception line (`!`) is refused, since what it would
   bring back would go unread. Name the files, or a folder that holds
   only synthetic vectors, never a whole source folder (a nested repository checked in its own tree is the one
-  exception), and say why on the line above. The `LICENSE` is the other: its copyright line names the holder, which is
+  exception), and say why on the line above. The one owner's file named this way is the `LICENSE` (a file, never a
+  folder exception): its copyright line names the holder, which is
   authorship and travels with the source, so when the holder is on the owner's list the licence file is named in the ignore
   file by its own path (`LICENSE`, `LICENSE.md`) with that reason (`# the copyright holder is authorship and travels with the source`); no other file of the
   owner's is. A file `pack` refuses by its name cannot ship in a package: a public

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/adapt_project.py

@@ -451,6 +451,20 @@ def _declared_effect(args: argparse.Namespace) -> Tuple[str, str]:
     return effect, idempotency
 
 
+#: What running the kit leaves in a scaffold, which the source check reads as binary in Git mode (FAA-190 item 36).
+GITIGNORE_LINES = ("__pycache__/", "*.pyc")
+
+
+def _gitignore(root: Path, write: bool) -> str:
+    """`.gitignore` holds GITIGNORE_LINES, created or with the missing lines appended (nothing else changes)."""
+    path = root / ".gitignore"
+    text = path.read_text(encoding="utf-8", errors="replace") if path.exists() else None
+    missing = "".join(line + "\n" for line in GITIGNORE_LINES if line not in (text or "").splitlines())
+    if missing and write:
+        path.write_text((text or "") + ("\n" if text and not text.endswith("\n") else "") + missing, encoding="utf-8")
+    return "unchanged" if not missing else "created" if text is None else "appended"
+
+
 def scaffold_project(root: Path, args: argparse.Namespace) -> Dict[str, Any]:
     if not root.is_dir():
         raise AdaptationError("project path is not a directory: %s" % root)
@@ -472,6 +486,7 @@ def scaffold_project(root: Path, args: argparse.Namespace) -> Dict[str, Any]:
             "wouldReplace": sorted(collisions),
             "needsForce": bool(collisions) and not args.force,
             "diffs": diffs,
+            "gitignore": _gitignore(root, write=False),
         }
     if collisions and not args.force:
         raise AdaptationError("refusing to overwrite existing paths: %s" % ", ".join(collisions))
@@ -484,6 +499,7 @@ def scaffold_project(root: Path, args: argparse.Namespace) -> Dict[str, Any]:
         "profile": args.profile,
         "created": sorted(generated),
         "replaced": sorted(collisions),
+        "gitignore": _gitignore(root, write=True),
         "next": "Replace all placeholders, implement the adapter, then run check with the pinned contract checkout.",
     }
 

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/fabric_identifiers.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 """Identifier equality (contract DEC-0076): two identifiers are the same when their normal forms are equal.
 
 A port of the contract's `src/identifiers.ts`, held to its `fixtures/vectors/identifiers.json`. The normal form of a URI

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/fabric_provider.py

@@ -93,26 +93,29 @@ class ProviderError(Exception):
     """An entry was refused; the message is one readable sentence and never quotes a value."""
 
 
-def services_dir() -> Path:
-    override = os.environ.get("FABRIC_SERVICES_DIR")
-    if override:
-        return Path(override).expanduser()
+def fabric_root() -> Path:
+    """The platform's Fabric root, as Fabric's registryDirs computes it: the folder `services/` and `providers/` sit in
+    when neither override is set."""
     home = Path.home()
     if sys.platform == "darwin":
-        return home / "Library/Application Support/ai.passioncode.fabric/services"
+        return home / "Library/Application Support/ai.passioncode.fabric"
     if sys.platform == "win32":
         # provider.md "Where the directory is" (DEC-0032): LOCALAPPDATA, never the roaming APPDATA.
         local = os.environ.get("LOCALAPPDATA")
-        return (Path(local) if local else home / "AppData" / "Local") / "passioncode-fabric" / "services"
-    return Path(os.environ.get("XDG_DATA_HOME") or str(home / ".local/share")) / "passioncode-fabric/services"
+        return (Path(local) if local else home / "AppData" / "Local") / "passioncode-fabric"
+    return Path(os.environ.get("XDG_DATA_HOME") or str(home / ".local/share")) / "passioncode-fabric"
+
+
+def services_dir() -> Path:
+    override = os.environ.get("FABRIC_SERVICES_DIR")
+    return Path(override).expanduser() if override else fabric_root() / "services"
 
 
 def providers_dir() -> Path:
-    """FABRIC_PROVIDERS_DIR, else `providers/` in the same root as `services/`."""
+    """FABRIC_PROVIDERS_DIR, else `providers/` in the platform's Fabric root, as Fabric's registryDirs reads it: a set
+    FABRIC_SERVICES_DIR moves the services folder only (FAA-189 (2))."""
     override = os.environ.get("FABRIC_PROVIDERS_DIR")
-    if override:
-        return Path(override).expanduser()
-    return services_dir().parent / "providers"
+    return Path(override).expanduser() if override else fabric_root() / "providers"
 
 
 def looks_like_credential(value: str) -> bool:
@@ -155,7 +158,7 @@ def validate_provider_entry(entry: Any) -> List[str]:
             # FAA-120, as the service kit: a repository is named, never reached with a credential in its URI. Said
             # before the character check, so a password beside a character the URI class refuses (a backslash, as
             # git reads one) is still named a credential (FAA-127).
-            problems.append("source.repository carries no password or credential: it names the repository")
+            problems.append("source.repository carries no password or credential: it names the repository (write the repository's name in lower case if it is one)")
         elif "repository" in source and not _is_uri(source["repository"]):
             problems.append("source.repository is an absolute URI")
     if not isinstance(entry["installedAt"], str) or not _TIMESTAMP.fullmatch(entry["installedAt"]):
@@ -207,12 +210,17 @@ def _run_problems(run: Any) -> List[str]:
     return problems
 
 
+def _no_constant(name: str) -> Any:
+    raise ValueError("%s is no JSON" % name)
+
+
 def manifest_problems(entry: Dict[str, Any]) -> List[str]:
     """FAC-SEM-014 (DEC-0017), URI half: the manifest resolves and its provider.id equals providerId, compared by normal
     form (DEC-0076)."""
     try:
-        manifest = json.loads(Path(os.path.expanduser(str(entry["manifest"]))).read_text(encoding="utf-8"))
-    except (OSError, ValueError):
+        manifest = json.loads(Path(os.path.expanduser(str(entry["manifest"]))).read_text(encoding="utf-8"),
+                              parse_constant=_no_constant)
+    except (OSError, ValueError, RecursionError):  # NaN or Infinity is no JSON, as pack reads it (FAA-194 (38))
         return ["the manifest %s does not resolve (FAC-SEM-014)" % entry["manifest"]]
     provider = manifest.get("provider") if isinstance(manifest, dict) else None
     if not isinstance(provider, dict) or not isinstance(manifest.get("capabilities"), list):
@@ -300,6 +308,14 @@ def entry_stem(path: str) -> str:
     return re.sub(r"\.json\Z", "", re.sub(r"\A[^\n\r\u2028\u2029]*[\\/]", "", path, count=1))
 
 
+def argument_stem(path: str, platform: Optional[str] = None) -> str:
+    """The stem of the file a `validate` argument names: CT-193's, after a Windows drive-relative prefix (`C:name.json`
+    is name.json in that drive's folder) is set aside, which the registry never meets (FAA-189 (8))."""
+    if (platform or sys.platform) == "win32":
+        path = re.sub(r"\A[A-Za-z]:(?![\\/])", "", path)
+    return entry_stem(path)
+
+
 def main(argv: Optional[List[str]] = None) -> int:
     parser = argparse.ArgumentParser(description=__doc__, formatter_class=argparse.RawDescriptionHelpFormatter)
     sub = parser.add_subparsers(dest="command", required=True)
@@ -335,7 +351,7 @@ def main(argv: Optional[List[str]] = None) -> int:
             entry = json.loads(args.path.read_text(encoding="utf-8"))
             problems = validate_provider_entry(entry)
             # CT-193 (FAC-SEM-014): the stem is what follows the last / or \ and loses .json, on every platform.
-            stem = entry_stem(str(args.path))
+            stem = argument_stem(str(args.path))
             if isinstance(entry, dict) and entry.get("id") != stem:
                 problems.append("the file name %s is not <id>.json for %s (FAC-SEM-014)" % (args.path.name, entry.get("id")))
             if not problems: