@passioncode-ai/fabric-agent-adapter 0.83.1 → 0.84.1

package/CHANGELOG.md

@@ -1,5 +1,52 @@
 # Changelog
 
+## 0.84.1 (2026-11-13)
+
+0.84.0 was tagged and not published: its release run failed one Node 18 test on the hosted floor runner.
+
+### Fixed
+
+- **The board mandate's linear-time test reads bodies large enough to time** (FAA-135): at 64 KiB a read lasted under a
+  millisecond of CPU time, and one garbage collection made the 4x ratio read as 10x on Node 18; it now compares 256 KiB
+  with 1 MiB, where linear is still about 4 and quadratic about 16, and repeats each read until 50 ms of CPU time
+  (Windows counts it in 15.6 ms ticks, and one short read measured 0), in both twins' tests. No shipped code changes.
+
+## 0.84.0 (2026-11-13)
+
+Wave 6 of the backlog sweep of 2026-11-12. The contract pin stays at `93e7db16` (`v0.1.0+2026-11-08.1`).
+
+### Changed
+
+- **Every service kit module carries the package's licence as an SPDX line** (FAA-192 item 15, the operator's decision
+  of 2026-11-13): `AGPL-3.0-only OR LicenseRef-PassionCode-Commercial`, right after a shebang or as the first line, so
+  every copy `fabric_kit.py install` makes keeps it, an agent whose own files are all rights reserved included; the
+  kit's JSON schemas cannot carry a comment. `kit.json`'s digests change for every module. The dashboard kit moves to
+  1.1.9 for the same line in its three copied files.
+- **creating-fabric-agents names where an agent reads the private cloud Fabric-server template's repository, never the
+  repository** (FAA-192 item 1, the operator's decision of 2026-11-13): the instance's settings or the estate's agent
+  map.
+- **`board.slot.returned` means one thing** (FAA-325): the reference service's take-back says `board.slot.taken_back`
+  (the slot still away), and the kit says `board.slot.returned` once the slot is held again, after a move back and now
+  also once an enroll or replace lands after the operator's take-back (once per take-back in the same process, both
+  twins); a take-back of a slot still held marks nothing.
+- The supervisors' well-known reader uses the kit's one loopback rule (`fabric_socket_proof.loopback_host` /
+  `loopbackHost`): `127.1`, `2130706433`, `0x7f.1` and names under `.localhost` go on the checked connection (FAA-326).
+- `fabric_peer_owner` no longer adds the kit folder to the host's `sys.path` (FAA-327): it asks the `fabric_socket_proof`
+  beside it, the host's imported module when that is the same file (one calibration in a process), else that file by
+  its path; a copy vendored alone keeps the table's answer, and every kit install that brings `fabric_peer_owner` still
+  brings `fabric_socket_proof`. `PEER_OWNER_VERSION` is `1.3.1+kit.8`.
+- The supervisors' well-known reader refuses unread a loopback address the kit's rule does not take, with a zone
+  (`[::1%lo0]`) or IPv4-mapped (`[::ffff:127.0.0.1]`), where `urlopen` or `fetch` would reach the listener without the
+  owner check (0.84.0 seam reading).
+- `test/validate.py` reads the private-terms list with the functions `admit.py` ships (`terms_file`, `terms_pattern`,
+  `term_lines`, `listed_files`), pinned to one case table; `admit.py`'s file listing no longer fails when `git` cannot
+  run (FAA-328).
+
+### Upgrading
+
+- A dashboard or feed that reads `board.slot.returned` as the operator's take-back request reads
+  `board.slot.taken_back` now (FAA-325).
+
 ## 0.83.1 (2026-11-13)
 
 0.83.0 was tagged and not published: its release run failed one Windows test of the tailnet identity module.

package/README.md

@@ -263,7 +263,8 @@ claude plugin validate . --strict
 unquoted value holding `: ` fails it. `python3 test/validate.py --frontmatter <SKILL.md ...>`
 checks copies installed elsewhere, such as `~/.agents/skills/*/SKILL.md`. Before a push or a release,
 `python3 test/validate.py --private-terms` checks the tracked files against the operator's private-terms list
-(path and line only; exit 2 when the list is absent, which is not a pass; CONTRIBUTING.md step 6). Start in
+(path and line only; exit 2 when the list is absent, which is not a pass; CONTRIBUTING.md step 6), read with the same
+functions as `creating-fabric-agents/scripts/admit.py`'s `private-terms` step (FAA-328). Start in
 [AGENTS.md](AGENTS.md); contributions follow [CONTRIBUTING.md](CONTRIBUTING.md).
 
 ## Use

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/fabric-agent-adapter",
-  "version": "0.83.1",
+  "version": "0.84.1",
   "description": "Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.",
   "scripts": {
     "test": "python3 test/validate.py && python3 -m unittest discover -s test -q && node --test 'test/*.test.mjs'"

package/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks; and put an agent on a standing watch over a product (observer mode).",
-  "version": "0.83.1",
+  "version": "0.84.1",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -9,7 +9,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.83.1"
+  version: "0.84.1"
   contract-version: "0.1.0"
   contract-commit: "93e7db164c7829e2783b4b7705c4113bb5201131"
 ---

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/fabric_identifiers.py

@@ -1,3 +1,4 @@
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 """Identifier equality (contract DEC-0076): two identifiers are the same when their normal forms are equal.
 
 A port of the contract's `src/identifiers.ts`, held to its `fixtures/vectors/identifiers.json`. The normal form of a URI

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/fabric_secrets.py

@@ -1,4 +1,5 @@
 #!/usr/bin/env python3
+# SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 """The contract's one credential detector (Fabric Agent Contract DEC-0044, `src/secret-shape.ts` at the pin): a name
 that can only carry a credential, a value shaped like one, a launch argument that carries one, and a URL that does
 (LC-21). A port held to the contract's own answers by test/fixtures/contract/profile-vectors.json. Standard library

package/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -9,7 +9,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Python 3.9+ or Node.js 20+ for the kits (Node.js 22+ for a Linux service's instance lock); the probe needs Python 3.9+. launchd steps are macOS-only; Linux services install a systemd user unit and Windows ones a per-user Scheduled Task with the kits' writers. Dashboard handoff optionally uses Fabric Dashboards MCP link/host_status/open; without it, report unresolved host capability. The contract checkout is optional. On macOS 27.2 run kit services and the probe on Apple's /usr/bin/python3.
 metadata:
   author: PassionCode.ai
-  version: "0.83.1"
+  version: "0.84.1"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
   extension-commit: "93e7db164c7829e2783b4b7705c4113bb5201131"
@@ -361,7 +361,7 @@ Whoever owns the repository, an agent with a page gets the dashboard rule block
 (below). org-index `scripts/check_format.py` reports 0 findings for it before it is called done. **An agent
 someone builds for themselves is not a PassionCode.ai repository:** its licence is its owner's choice, the organization
 publishes and lists nothing about it, of these files one built new needs only a `LICENSE` naming its copyright holder (copied kit files keep
-theirs), and the verified MCP quick start teaches anyone to drive it. The kit's files stay AGPL-3.0-only or the
+theirs, each service kit module in its own SPDX line), and the verified MCP quick start teaches anyone to drive it. The kit's files stay AGPL-3.0-only or the
 PassionCode commercial licence there, in an agent built for a client too.
 
 ## Online services: the remote placement

package/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/fabric-button.js

@@ -1,4 +1,5 @@
-/* fabric-dashboard-kit@1.1.8 · Fabric's button (Fabric Agent Contract DEC-0040, FB-1…FB-8, FL-1…FL-6)
+/* fabric-dashboard-kit@1.1.9 · Fabric's button (Fabric Agent Contract DEC-0040, FB-1…FB-8, FL-1…FL-6)
+   SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
    Load it same-origin, after fabric-dashboard.css, with the service it opens Fabric on:
      <script src="fabric-button.js" defer data-service="example-agent.default" data-service-name="Example Agent"
              data-project="project-a" data-project-name="Project A"></script>
@@ -11,7 +12,7 @@
 (function (root) {
   'use strict';
 
-  var VERSION = '1.1.8';
+  var VERSION = '1.1.9';
   var COOKIE = 'fabric_button';
   var GET_FABRIC = 'https://passioncode.ai/fabric';
   var ABSENT_AFTER_MS = 1500;

package/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/fabric-dashboard.css

@@ -1,4 +1,5 @@
-/* fabric-dashboard-kit@1.1.8 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
+/* fabric-dashboard-kit@1.1.9 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
+   SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
    A Fabric service dashboard shown inside a host pane: usable from 360 CSS px up, navigation always
    reachable, wide content in its own scroll box, one vertical scroller, appearance from the host.
    Copy this file next to fabric-dashboard.js; do not edit it in place. Put the page's own rules in

package/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/fabric-dashboard.js

@@ -1,4 +1,5 @@
-/* fabric-dashboard-kit@1.1.8 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
+/* fabric-dashboard-kit@1.1.9 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
+   SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
    Load it same-origin with <script src="fabric-dashboard.js" defer></script>: no inline script, no
    eval, nothing from a CDN. It applies the host's appearance (ED-6, ED-8), folds navigation that
    does not fit into a More menu (ED-3), makes wide boxes keyboard-reachable (ED-4) and keeps
@@ -8,7 +9,7 @@
   'use strict';
 
   var KIT = 'fabric-dashboard-kit';
-  var VERSION = '1.1.8';
+  var VERSION = '1.1.9';
   /* fabric-dashboard-kit:theme-ids:begin */
   var THEMES = ['graphite', 'fabric', 'paper', 'forest', 'ocean', 'ember', 'contrast'];
 /* fabric-dashboard-kit:theme-ids:end */

package/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/kit.json

@@ -1,6 +1,6 @@
 {
   "name": "fabric-dashboard-kit",
-  "version": "1.1.8",
+  "version": "1.1.9",
   "profile": "fabric-dashboard/0.1",
   "decision": "DEC-0036",
   "declarationKey": "https://fabric.passioncode.ai/agent-contract/extensions/dashboard/0.1",
@@ -15,9 +15,9 @@
     "contrast"
   ],
   "files": {
-    "fabric-dashboard.css": "0c58c2758e780f4f520d3ea45d69a7d4221ad97cdc7e6999da7c7511e6beb96c",
-    "fabric-dashboard.js": "dfaef6b91102817061f612aea1f4b5a85699a890d7f4fbda2780dc153f2e5da1",
-    "fabric-button.js": "11ebad0cc598b09f034666be377caf0edc0042e9e86d7d8e8292dda57789be7f",
+    "fabric-dashboard.css": "99ccf34065a2cfdfafb7af17b9b6c178bf6c871b6fa8e771d997f820726037ae",
+    "fabric-dashboard.js": "cc2a02e27118df56db8d504c1894ea3ddc5fe71a0029c9ce4fb97aea44b54a76",
+    "fabric-button.js": "1e70716768202edb5323b7ee081a074fa447f0f51b1aececa0ec659e8a320e20",
     "themes.json": "511839f1a1a83eb37fadfd132791474497d5c28c5091700b9aa31ad076e359b5"
   },
   "history": {
@@ -69,6 +69,11 @@
       "fabric-dashboard.css": "0c58c2758e780f4f520d3ea45d69a7d4221ad97cdc7e6999da7c7511e6beb96c",
       "fabric-dashboard.js": "dfaef6b91102817061f612aea1f4b5a85699a890d7f4fbda2780dc153f2e5da1",
       "fabric-button.js": "11ebad0cc598b09f034666be377caf0edc0042e9e86d7d8e8292dda57789be7f"
+    },
+    "1.1.9": {
+      "fabric-dashboard.css": "99ccf34065a2cfdfafb7af17b9b6c178bf6c871b6fa8e771d997f820726037ae",
+      "fabric-dashboard.js": "cc2a02e27118df56db8d504c1894ea3ddc5fe71a0029c9ce4fb97aea44b54a76",
+      "fabric-button.js": "1e70716768202edb5323b7ee081a074fa447f0f51b1aececa0ec659e8a320e20"
     }
   }
 }

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/board.md

@@ -341,7 +341,9 @@ held and not transferred). The responder keeps that move instead of undoing it:
 - Otherwise only the operator brings the slot back: `take_back(capability)` (`takeBack`) forgets the record, and wins over a move
   being read at the same time: the move is written under the responder's lock (Node: on the fence queue, after any fenced
   call in flight) and only while the record is unchanged (FAA-158). Never edit the
-  checkpoint's `slots` record by hand to undo a move. In the same board
+  checkpoint's `slots` record by hand to undo a move. Once the slot is held again after a take-back (an enroll or a
+  replace lands, in the same process), the kit says `board.slot.returned` (info, once per take-back; FAA-325), as it
+  does for a move back. In the same board
   session the next tick enrolls once the other session lets the slot go (a live holder is waited for) and takes the work
   left `lapsed` back with a transfer. A restart or reconnect before that, with accepted work waiting for the slot, takes it
   back at once by `com.responder_replace`, as a restart did before 0.53.0: the operator asked for the slot back, so the
@@ -354,7 +356,8 @@ held and not transferred). The responder keeps that move instead of undoing it:
   (`interop.well-known-capabilities`): an agent whose MCP client sets `_meta` calls it over `/mcp` with the operator's
   decision in `_meta.decision` (a call without one is `operator-decision-required`); Claude Code and Codex send
   arguments only, so until CT-125 they hand the operator the page as Fabric Dashboards' `open_link`. Either door records
-  the take-back as a `board.slot.returned` event (info, the capability as its subject) whose sentence says the route in
+  the take-back as a `board.slot.taken_back` event (info, the capability as its subject; the slot is still away, so never
+  `board.slot.returned`, which is the kit's and means held again, FAA-325) whose sentence says the route in
   words and whose `data` holds `by`, `via` and the `caller` (none when the feed refuses the caller), never the decision's words; a repeat after a lost answer is answered `{capability, moved: false}`. A service built on the kit declares it as an operator action, a button with its tool ([Every button has a
   tool](../SKILL.md), `fabric-actions/0.1`) with gate `relayed` (the operator's decision), never `none`, so a call
   without the operator's relayed decision is refused; on a server that reads mandates (`agent_id`) it also names its effect class, for example
@@ -394,7 +397,9 @@ checked by FAC-SEM-101 (no credential in data): `board.request.completed`, `boar
 `board.reconcile.needed`, `board.slot.contested`, `board.slot.moved`, `board.slot.refused`, `board.access.needed`, `board.blocked`,
 `board.down`, each notifying episode said once, and `board.outcome.invalid` (warning) when a handler's outcome fails
 its checks and is not sent, and `board.request.mandate_unread` (warning) when a request's mandate is not read (above). The operator's hold (below) adds `board.held`, `board.slot.held`,
-`board.slot.released` and `board.request.waiting`. The reference service adds `board.slot.returned` at a take-back.
+`board.slot.released` and `board.request.waiting`. A slot held again after a move back or a take-back is
+`board.slot.returned` (info). The reference service adds `board.slot.taken_back` at a take-back, when the operator asks
+for the slot (FAA-325).
 
 `check_service.py <id> [--board-kit <the service's fabric_board.py or fabric-board.mjs>]` rule **board.responder**:
 `NOT_RUN` when the well-known `protocols` names no `fabric-project-comms` revision; `FAIL` for a revision this kit does

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/dashboard-kit.md

@@ -39,7 +39,7 @@ python3 <skill-dir>/scripts/dashboard_kit.py install <the directory your page's
 ```
 
 It copies `fabric-dashboard.css` and `fabric-dashboard.js` (each starts with
-`fabric-dashboard-kit@<version>`). Serve both same-origin and link them; nothing is inline:
+`fabric-dashboard-kit@<version>`, then, since 1.1.9, the package's SPDX licence line, which a copy keeps: FAA-192). Serve both same-origin and link them; nothing is inline:
 
 ```html
 <html lang="en" data-fd-appearance="scheme theme">

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/kit-modules.md

@@ -11,6 +11,14 @@ A module's comments write an example URL with credentials with its scheme in ang
 can copy modules unchanged; the package's CHANGELOG, a record of released notes and no module, keeps its old
 examples as written.
 
+Every module carries the package's licence as its own SPDX line, `SPDX-License-Identifier: AGPL-3.0-only OR
+LicenseRef-PassionCode-Commercial`, right after the shebang or as its first line (since 0.84.0, FAA-192), so every
+copy `install` makes keeps it, in an agent whose own files are all rights reserved too: that agent's `LICENSE` covers
+its holder's files, the line covers the kit's. The line is part of the module's bytes and of its digest in
+`kit.json`, so a copy `status` calls `current` carries it. The schemas the kit ships beside a module (`*.schema.json`)
+are JSON data and cannot carry a comment; they come under the same licence with the module that reads them. Tests:
+`test_every_kit_module_carries_its_spdx_line`, `test_an_installed_copy_keeps_its_spdx_line`.
+
 ## Contents
 
 - [Install, status, build](#install-status-build)
@@ -60,7 +68,7 @@ A module imports only modules listed before it in `kit.json`, so the kit has no
 | L0 | `fabric_identifiers` | identifier equality by normal form (DEC-0076) |
 | L0 | `fabric_secrets` | the contract's one credential detector (DEC-0044) |
 | L0 | `fabric_socket_proof` | this OS account's own TCP sockets, read from its own processes, and the two proofs they give on a restricted macOS table (DEC-0155 RT-2, FAA-292; FAA-272): `accepted` (the server end of a connection held by one of this account's processes) and `own_listener` (its listener on exactly 127.0.0.1); Python reads them through libproc (Project Observatory's `peer_owner` 1.3.1 reader, calibrated on a pair of its own) and lsof when libproc is unavailable, the Node twin through `lsof -nP -a -u <uid> -iTCP:<port> -sTCP:<state> -F pun`; `fabric_peer_owner` asks it when it sits beside it |
-| L0 | `fabric_peer_owner` | which OS account owns each end of a loopback connection, from the computer's socket table (DEC-0154 HA-2, FAA-226): `listener`, `server_end`, `peer`, `CheckedHTTPConnection`; the Python file is Project Observatory's `peer_owner.py`, vendored from commit `f86f0622` (1.1.0) and read against `2180235c` (1.2.0, whose Linux rule it carries) and `a69c6fee` (1.3.1), with the readings its header names (`1.3.1+kit.7`), the Node twin reads netstat, `/proc` and the owner SID where Python reads `sysctl`, `/proc` and `GetExtendedTcpTable`; on a restricted macOS table (FAA-267) `fabric_socket_proof`, when beside it, proves a server end or listener this account's processes hold (RT-2), and after it a caller may vouch with a pid it started, proved by `lsof -p` (RT-3) |
+| L0 | `fabric_peer_owner` | which OS account owns each end of a loopback connection, from the computer's socket table (DEC-0154 HA-2, FAA-226): `listener`, `server_end`, `peer`, `CheckedHTTPConnection`; the Python file is Project Observatory's `peer_owner.py`, vendored from commit `f86f0622` (1.1.0) and read against `2180235c` (1.2.0, whose Linux rule it carries) and `a69c6fee` (1.3.1), with the readings its header names (`1.3.1+kit.8`), the Node twin reads netstat, `/proc` and the owner SID where Python reads `sysctl`, `/proc` and `GetExtendedTcpTable`; on a restricted macOS table (FAA-267) `fabric_socket_proof`, when beside it (the host's imported copy if it is that file, else that file by its path; never through `sys.path`, and every kit install copies it, FAA-327), proves a server end or listener this account's processes hold (RT-2), and after it a caller may vouch with a pid it started, proved by `lsof -p` (RT-3) |
 | L0 | `fabric_tailnet` | who calls an agent behind `tailscale serve` and what that person may open (FAA-297): `Tailscale-User-Login` only on the agent's own serve listener from a loopback peer, groups from a generated `tailnet-perimeter/1` file, a personal SHA-256-stored key for MCP no wider than the groups; `authorize`, `load_perimeter`, `load_keys`, `hash_key`, refusals 401/403 with a code ([surfaces-and-auth.md](surfaces-and-auth.md#behind-tailscale-serve)) |
 | L0 | `fabric_tailnet_identity` | a person's identity at every door (dashboard, MCP, the service's own) of a service published through `tailscale serve` (FAA-324): `Tailscale-User-Login` believed only when the service listens on a loopback address and the peer is loopback, groups and per-door rules from the organization's `tailnet-groups/1` file (schema `tailnet-groups.schema.json`, shipped beside it as data), read again on change and closing every door while unreadable or invalid; `TailnetIdentity`, `decide`, `load_groups`, `send_refusal`, every refusal 403 with a code and a sentence ([surfaces-and-auth.md](surfaces-and-auth.md#a-groups-file-at-every-door)) |
 | L1 | `fabric_crypto` | Ed25519 signing (a Montgomery ladder that does not branch on the key) and verification, P-256 verification, base64url, sha256 |

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/lifecycle.md

@@ -55,8 +55,9 @@ on a listener of this OS account (DEC-0154 HA-2: another account's listener is `
 LaunchDaemon's root installer reads it as *The system domain* says). `well_known_of(origin)` / `wellKnownOf(origin)` read
 it so a status tells HA-2's order apart: None / null when nothing answers (`down`), a `ForeignUserAnswer` whose
 `reason` starts `foreign-user` or `table-restricted`, else the document; `fetch_well_known` keeps answering None for
-both (FAA-259). Every loopback spelling of an origin (`127.0.0.1`, another `127/8` address, `localhost`, `[::1]`) is read
-on a checked connection (FAA-257). `launchd_install` takes an injected reader, `fetch_well_known=` and
+both (FAA-259). Every loopback spelling of an origin (`127.0.0.1`, another `127/8` address in any form a URL parser
+reads, such as `127.1` or `2130706433`, `localhost` or a name under `.localhost`, `[::1]`) is read on a checked connection
+(FAA-257; the kit's one rule, `fabric_socket_proof.loopback_host` / `loopbackHost`, since FAA-326). `launchd_install` takes an injected reader, `fetch_well_known=` and
 `fetch_job_well_known=`, as the Node `launchdInstall` takes `fetchWellKnown` and `fetchJobWellKnown`.
 `status` is `starting`, `ready`, `degraded` or `stopping`; `degraded` is always present, and an empty list asserts
 full health. A process that cannot serve does not answer, and a host derives `down`. An install or upgrade polls

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-a2a-server.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // The serving side and a bounded client of A2A 1.0 (FAA-10, DEC-0122): an Agent Card built from the service's
 // capabilities (agentCard, checked by agentCardFindings before it is served), the JSON-RPC binding (A2ABinding:
 // SendMessage, SendStreamingMessage, GetTask, CancelTask) mapped onto the interop job store (a task is a job, a choice

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-a2a.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // The reading side of an A2A Agent Card (DEC-0122): the well-known document's surfaces.a2a member, read as the contract's
 // schema reads it (a2aSurfaceFindings, a2aView; a2aSurface builds one), and what a public card must not carry
 // (agentCardFindings): no member about the running process, no secret, no securitySchemes entry naming the descriptor's

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-actions.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // Every action a person has, its agent tool and who decides it: fabric-actions/0.1, the extension keyed
 // extensions/actions/0.1 (DEC-0121, FAC-SEM-142). Part of the Node service kit (layer L3); the twin of fabric_actions.py.
 //

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-auth.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // Who may call a service: the descriptor token, the network guard, the operator's one-time login and session, remote placement (DEC-0019), the feed client's token header.
 // Part of the Node service kit (FAA-65, layer L3); the twin of fabric_auth.py. Node 20+, no dependency.
 import crypto from 'node:crypto';

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-backups.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // Settings backups (DEC-0025, FAC-SEM-035): canonical form, digest, write, list, check, restore.
 // Part of the Node service kit (FAA-65, layer L3); the twin of fabric_backups.py. Node 20+, no dependency.
 import crypto from 'node:crypto';

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-base.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // What every module of the Node service kit shares: the protocol name, ServiceError, ids, nowIso and expand.
 // Part of the Node service kit (FAA-65, layer L1); the twin of fabric_base.py. Node 20+, no dependency.
 import os from 'node:os';

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-board-fixture.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // A fixture conversation for the probe (check_service.py, rule board.responder): a scripted board a responder can run against without Fabric.
 // Part of the Node board connector (FAA-65, layer L4); the twin of fabric_board_fixture.py. Node 20+, no dependency.
 import fs from 'node:fs';

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-board-link.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // The board link (DEC-0078, FAA-12b): the board session over the hub, the fsynced checkpoint and a claimed request as data.
 // Part of the Node board connector (FAA-65, layer L4), below the responder in fabric-board-session.mjs, which re-exports
 // these names; the twin of fabric_board_link.py. Node 18+, no dependency.

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-board-session.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // The board responder (DEC-0078, FAA-12b): the work context a handler sees and the responder loop. The session, the
 // checkpoint and the request live in fabric-board-link.mjs and are re-exported here.
 // Part of the Node board connector (FAA-65, layer L4); the twin of fabric_board_session.py. Node 20+, no dependency.
@@ -124,6 +125,7 @@ export class Responder extends SlotKeeper {
     /** The first pause under an operator's hold (DEC-0079); it doubles to HOLD_RETRY_MAX_SECONDS. */
     this.holdDelay = POLL_SECONDS;
     this.onHold = new Set();
+    this.takenBack = new Set(); // capabilities the operator took back, not yet held again (FAA-325)
     /** One fenced call at a time, and the entry edits beside them (FAA-77, finding 36). */
     this.fenceQueue = Promise.resolve();
     this.toResume = []; // transferred requests waiting until nothing runs (finding 39)

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-board-shapes.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // The project board's wire (fabric-project-comms/0.1, DEC-0022, DEC-0073, DEC-0077): constants, refusal codes, the request digest, the closed shapes the kit reads back, evidence.
 // Part of the Node board connector (FAA-65, layer L4); the twin of fabric_board_shapes.py. Node 20+, no dependency.
 import crypto from 'node:crypto';

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-board-slots.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // The board responder's slot records (FAA-155, FAA-163): the generation it holds each slot at, a move to another
 // session and its take-back, and a capability whose enroll was refused, retried on its own. Part of the board
 // connector (FAA-65, layer L4); Responder (fabric-board-session.mjs) extends SlotKeeper.
@@ -27,6 +28,9 @@ export class SlotKeeper {
     this.confirmed[capability] = generation;
     delete this.said[`board.slot.refused:${capability}`]; // held again: a later refusal is said again
     delete this.said[`board.slot.contested:${capability}`]; // and a later contest, by enroll or replace
+    if (this.takenBack.delete(capability)) { // FAA-325: held again after the operator's take-back, said once
+      this.emit('board.slot.returned', 'info', `The ${capability} slot on this Project is this service's again: the operator took it back, and it answers it from now on.`, { capability, generation });
+    }
   }
 
   /** The slot record, best effort: one that cannot be written now is written at the next receipt. */
@@ -212,6 +216,7 @@ export class SlotKeeper {
     const back = await this.locked(() => {
       if (!sameRecord(this.checkpoint.slots[capability], held)) return false; // a takeBack forgot it; its own next tick enrolls
       this.slots[capability] = { state: 'held', generation, renewedAt: -Infinity }; // no lease yet
+      this.takenBack.delete(capability); // said below as a move back, once
       this.heldAt(capability, generation);
       delete this.said['board.slot.moved']; // a later move is said again
       return true;
@@ -230,8 +235,11 @@ export class SlotKeeper {
     this.checkpoint.slot(capability, null);
     delete this.claimKeys[capability]; // a receipt from before the take-back may be dead
     this.probing.delete(capability);
-    if (this.slots[capability]?.state === 'moved') this.slots[capability] = { state: 'contested', renewedAt: 0 };
+    const state = this.slots[capability]?.state;
+    if (state === 'moved') this.slots[capability] = { state: 'contested', renewedAt: 0 };
     delete this.said['board.slot.moved'];
+    // board.slot.returned is said once the slot is held again (FAA-325); a slot still held has nothing to say
+    if (state !== 'held') this.takenBack.add(capability);
   }
 
   // -- one capability's refusal (FAA-163) --

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-board.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // The project board connector, Node: the facade (fabric-project-comms/0.1; the twin of fabric_board.py).
 // Since 0.40.0 (FAA-65) it is layered modules: fabric-board-shapes, fabric-board-link (since 0.41.0), fabric-board-session and
 // fabric-board-fixture. This file re-exports everything it exported at 0.39.1. Node 20+, no dependency.

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-ceremonies.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // The estate ceremonies' headless join (contract DEC-0084), the Node kit; the twin of fabric_ceremonies.py, answer for
 // answer (test/fixtures/contract/ceremony-vectors.json). Node built-ins only.
 // verifyEnrollToken (the hub's and the node's verifier of an enroll-token/1), enrollJoinInput (what the joining machine

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-connections.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // What an agent uses: fabric-connections/0.1, the extension keyed extensions/connections/0.1 (DEC-0096, FAC-SEM-127).
 // connectionsView reads a well-known document as the contract's connectionsView does (it never throws);
 // connectionsExtension builds the `extensions` entry a service declares, `state` from its own checks and its degraded[].

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-context.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // One instance per context (FAA-125, organization row N-11; contract DEC-0082, "One instance per context on a machine"):
 // from a context, `personal` or `org:<orgId>`, the service instance, its folders, descriptor and instance lock.
 // Part of the Node service kit (layer L3, after fabric-descriptor); the twin of fabric_context.py, answer for answer

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-crypto.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // The Node kit's cryptography helpers, once (FAA-65, layer L1); the twin of fabric_crypto.py. Signature verification
 // itself is Node's (`crypto.verify`); what lives here is what the runtime does not refuse on its own: keys of small
 // order (DEC-0045) and P-256 points off the curve, plus sha256. Node 20+, no dependency.

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-delegation.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // The callee's side of fabric-delegation/0.1 (Fabric Agent Contract DEC-0039, Fabric ADR-0144): check a
 // delegation token or an approval offline against the estate's published keys, and answer `ok` or one refusal
 // code. A port of the contract's `src/delegation.ts` at the pinned revision; the shared vectors in

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-descriptor.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // How a service is found (fabric-service/0.1): its descriptor, peers and app descriptors (DEC-0061, DEC-0069), build identity and the well-known document.
 // Part of the Node service kit (FAA-65, layer L3); the twin of fabric_descriptor.py. Node 20+, no dependency.
 import { spawnSync } from 'node:child_process';
@@ -18,7 +19,7 @@ import { ROUTES, isPlainObject } from './fabric-usage.mjs';
 // document's `extensions`. The kit is assets/dashboard-kit; its version is the one in kit.json.
 export const DASHBOARD_EXTENSION_KEY = 'https://fabric.passioncode.ai/agent-contract/extensions/dashboard/0.1';
 
-export const DASHBOARD_KIT = 'fabric-dashboard-kit@1.1.8';
+export const DASHBOARD_KIT = 'fabric-dashboard-kit@1.1.9';
 
 export const REFERENCE_THEMES = ['graphite', 'fabric', 'paper', 'forest', 'ocean', 'ember', 'contrast'];
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-estate-rules.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // `estate-record/1` (Fabric Agent Contract DEC-0055): the record's own rules, without a verifier; the twin of
 // fabric_estate_rules.py. The contract's src/estate-record-rules.ts at the pin, held to the contract's own vectors
 // (test/fixtures/contract/estate-vectors.json). Split from fabric-estate.mjs (0.52.0, decision D8) so each module stays

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-estate.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // `estate-record/1` (Fabric Agent Contract DEC-0055): verify an estate revision and check its rules, the twin of
 // fabric_estate.py. The contract's src/estate-record-rules.ts, src/webauthn.ts and src/p256.ts at the pin, held to the
 // contract's own vectors (test/fixtures/contract/estate-vectors.json):

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-events.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // A service's events (DEC-0029): making them, paging them and the JSONL event log.
 // Part of the Node service kit (FAA-65, layer L3); the twin of fabric_events.py. Node 20+, no dependency.
 import { ServiceError } from './fabric-base.mjs';

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-holds.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // Work a service holds by its own limits, said to its caller and its operator (FAA-298): a held job's statusMessage in
 // the contract's pause grammar (`quota-exhausted[ until <until>]: waiting <reason> since <since>[: <message>]`; the
 // pinned interop-job schema is closed, so `waiting {reason, since, until, message}` rides statusMessage, never a field

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-http.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // An outbound HTTP client for a service: one deadline across every attempt, bounded retries with jittered backoff,
 // `Retry-After` honoured up to a cap, a response size cap, and no secret in an error. The twin of fabric_http.py:
 // the same rules, the same cases (test/fixtures/kit-http-cases.json).

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-hub.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // The Fabric hub's door, as a service agent reaches it (fabric-hub/0.1; Fabric ADR-0115 §1, ADR-0149 §4; FAA-12b).
 // The twin of fabric_hub.py, same rules and the same answers; Node built-ins only.
 //

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-identifiers.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // Identifier equality (contract DEC-0076): two identifiers are the same when their normal forms are equal. A port of the
 // contract's src/identifiers.ts (types removed), held to its fixtures/vectors/identifiers.json; the twin of
 // fabric_identifiers.py. Nothing here throws.

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-interop-rules.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // fabric-interop/0.1, the rule layer: the extension's names and limits, its errors, the trace context (C3.4), a usage
 // object's reading (C3.2) and the job limits and uncertain effects (DEC-0087). Every function answers by a rule and
 // touches no file; fabric-interop.mjs builds the tools, the envelope and the job store on it and re-exports every public

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-interop.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // Reference kit for the fabric-interop/0.1 extension — Node.js 20+, no dependencies.
 // The Node twin of fabric_interop.py: the same rules and the same job file format, so a
 // job written by one kit is read by the other. The minimal MCP dispatcher is Python-only;

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-jsvalue.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // JavaScript's view of JSON values, once for the whole Node kit (FAA-65, layer L0); the twin of fabric_jsvalue.py.
 // The contract's answers are computed by TypeScript; every reader in the kit takes these helpers from here:
 // isObject, isString, objects (an array's object items), indexed (with their index as written), show (the

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-load.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // The call queue and the load report of DEC-0104 (contract src/agent-network.ts, FAC-SEM-131 to FAC-SEM-133), as the
 // contract's reference answers them: a node that hosts a job-backed agent queues its jobs per (agentRef, context) with
 // these and reports its load as service-load/1 under extensions/load/0.1. Part of the Node service kit (FAA-289, layer

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-lock.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // One copy of a service, locked before any side effect (LC-01, DEC-0057): the instance lock and the supervisor marker.
 // Part of the Node service kit (FAA-65, layer L3); the twin of fabric_lock.py. Node 20+ (22+ for the Linux lock), no dependency.
 //

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-logs.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // Logs and stopping (LC-01, LC-12): a rotating log, a capped stdout log, the stop signal and the drain.
 // Part of the Node service kit (FAA-65, layer L3); the twin of fabric_logs.py. Node 20+, no dependency.
 import fs from 'node:fs';

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-mandate.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // The operator's mandate, mandate/1 (DEC-0125, FAC-SEM-144): the operator's instruction for one task travels with the
 // task, narrowed at each hand-over. Part of the Node service kit (layer L2); the twin of fabric_mandate.py.
 //

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-openrouter.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // OpenRouter chat completions for a service: its own key, a spend ceiling checked before every attempt, a usage receipt
 // for every answered call, and a fallback model of another vendor. The twin of fabric_openrouter.py: the same rules, the
 // same cases (test/fixtures/kit-openrouter-cases.json); the rules are written out in that file's docstring.

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-ops-digest.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // A service's operations digests (contract DEC-0153, docs/specification/ops-digest.md at the pin): every record of its
 // operations log counted by operation and outcome in the hour it happened, one ops.digest.hourly@1 line for each hour
 // the service observed itself running in (an empty one included), and one ops.digest.daily@1 line for each closed UTC

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-package-schema.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // fabric-package/1, the schema reading: the package schema bundled from the contract at the pin, read by a JSON
 // Schema 2020-12 subset with JavaScript's patterns, lengths in code points and the formats the contract uses.
 // fabric-package.mjs checks, packs, signs and verifies on it and re-exports schemaProblems. Part of the Node service

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-package.mjs

@@ -1,4 +1,5 @@
 #!/usr/bin/env node
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // fabric-package/1 (contract DEC-0050, DEC-0051, DEC-0071, DEC-0074; FAA-27a): pack an agent or a skill set as one folder
 // with fabric.package.json, sign it, and verify it. The twin of fabric_package.py; both write the same bytes.
 //

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-page-links.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // A service's pages as Fabric Dashboards' open_link (Fabric Agent Contract DEC-0123, PL-1 to PL-4, FAC-SEM-143;
 // `src/page-link-rules.ts` at the pin): build and read the open_link, tell a raw local address, and the findings on a
 // link a document hands a person and on a URL-mode input request. The twin of fabric_page_links.py, held to the

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-paths.mjs

@@ -1,3 +1,4 @@
+// SPDX-License-Identifier: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 // Where a service's things live (fabric-service/0.1): the services directory, its data, config, logs and run dirs per OS, private dirs, atomic writes.
 // Part of the Node service kit (FAA-65, layer L1); the twin of fabric_paths.py. Node 20+, no dependency.
 import crypto from 'node:crypto';