@passioncode-ai/passioncode 0.1.10 → 0.1.12

package/README.md

@@ -1,9 +1,10 @@
-# passioncode
+# PassionCode.ai launcher
 
-> **PassionCode.ai — The agent-agnostic operating system for AI-native teams.**
-
-Every PassionCode.ai agent skill, for Claude Code and every other agent on your machine,
-installed and updated as one set:
+The **PassionCode.ai launcher** (`@passioncode-ai/passioncode` on npm) installs and updates every
+PassionCode.ai agent skill and plugin — the Fabric Agent Adapter, Observatory Log and the
+organization's working rules — for Claude Code and every other agent on your machine, as one set.
+It is how a teammate's agent gets the tools that build for Fabric, PassionCode.ai's CEO AI agent,
+and it works on its own: no Fabric install, no account, no key.
 
 ```bash
 npx @passioncode-ai/passioncode@latest update
@@ -27,8 +28,11 @@ out of it, even when they implement Fabric protocols.
    no unscoped `passioncode` package on npm.
 2. **Configure:** nothing to set, no account and no key. Background updates are on by default;
    `npx @passioncode-ai/passioncode@latest config set update.auto off` turns them off.
-3. **MCP:** none. The launcher installs skills and session hooks; it neither serves nor calls an
-   MCP server. The tools that do (Fabric Switchboard, Fabric Inbox) document their own.
+3. **MCP:** none today, and not planned. The launcher installs skills and session hooks and is
+   driven by its CLI (`update`, `status`, `restore`, `uninstall`, `config`); it neither serves nor
+   calls an MCP server. The products it installs for, and the ones that serve MCP (Fabric
+   Switchboard, Fabric Inbox, Fabric Dashboards), document their own registration and proving
+   call; the Fabric Agent Adapter's quick start builds and calls one.
 4. **Develop:** clone, then `npm test` — there are no dependencies and no lockfile, so there is
    nothing to install (`npm ci` refuses to run here). `npm run vendor` builds `payload/` from the
    members pinned in `family.json`; `claude plugin validate ./payload --strict` checks it. Start
@@ -93,9 +97,8 @@ reads a member from `<dir>/<repository name>`, and `PASSIONCODE_CHECKOUT_<MEMBER
 
 ## License
 
-Source-available under PolyForm Noncommercial or Internal Use; commercial license on
-request (contact@passioncode.ai). SPDX:
-`PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0` — see
-[LICENSE](LICENSE). Versions up to and including v0.1.4 were released under the MIT
-License and remain available under it. Contributions are accepted under [CLA.md](CLA.md)
-([CONTRIBUTING.md](CONTRIBUTING.md)).
+Open source under the [GNU AGPL-3.0](LICENSE). A [commercial license](COMMERCIAL-LICENSE.md) is
+available for use that does not meet the AGPL's terms — contact@passioncode.ai.
+Versions before 0.1.12 were released under PolyForm Noncommercial or Internal Use (v0.1.5 to
+v0.1.11) and MIT (v0.1.4 and earlier); each keeps the licence it was released under.
+Contributions are accepted under [CLA.md](CLA.md) ([CONTRIBUTING.md](CONTRIBUTING.md)).

package/family.json

@@ -8,7 +8,7 @@
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.5.1",
+      "ref": "v0.5.3",
       "kind": "plugin",
       "path": "plugins/fabric-agent-adapter",
       "legacyPluginIds": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/passioncode",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "description": "Every PassionCode.ai agent skill — Fabric Agent Adapter, Observatory Log and the organisation's working rules — for Claude Code and every other agent on the machine, updated as one set.",
   "bin": {
     "passioncode": "bin/passioncode.js"
@@ -12,6 +12,8 @@
     "family.json",
     "README.md",
     "LICENSE",
+    "COMMERCIAL-LICENSE.md",
+    "CLA.md",
     "CHANGELOG.md",
     "SECURITY.md"
   ],
@@ -32,7 +34,7 @@
     "url": "git+https://github.com/passioncode-ai/passioncode.git"
   },
   "homepage": "https://github.com/passioncode-ai/passioncode",
-  "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0",
+  "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/payload/.claude-plugin/marketplace.json

@@ -11,13 +11,13 @@
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "source": "./plugins/fabric-agent-adapter",
-      "version": "0.5.1",
+      "version": "0.5.3",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
       "author": {
         "name": "PassionCode.ai",
         "url": "https://passioncode.ai/"
       },
-      "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
+      "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial"
     },
     {
       "name": "observatory-log",
@@ -35,13 +35,13 @@
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "source": "./plugins/passioncode",
-      "version": "0.1.10",
+      "version": "0.1.12",
       "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",
         "url": "https://passioncode.ai/"
       },
-      "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
+      "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial"
     }
   ]
 }

package/payload/manifest.json

@@ -1,15 +1,15 @@
 {
   "family": "passioncode",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "release": true,
   "members": [
     {
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.5.1",
-      "commit": "761be46e5047879f65630cbb05a82344220f0175",
-      "version": "0.5.1",
+      "ref": "v0.5.3",
+      "commit": "951b2910e450c491078486ddf022489d4742bbaf",
+      "version": "0.5.3",
       "via": "clone of https://***@github.com/passioncode-ai/fabric-agent-adapter.git",
       "skills": [
         "adapting-projects-to-fabric",
@@ -22,13 +22,13 @@
       "legacyMarketplaces": [
         "fabric-agent-adapter"
       ],
-      "contentHash": "sha256:b3dd5a474a99f51fefa353134f47f23730251ccec7b9052327be0e338ceffef2",
+      "contentHash": "sha256:1b9d3028d72947aa3dc99f2cc979ffb9a6710a99ab0a89773f7de9ce673be210",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
       "author": {
         "name": "PassionCode.ai",
         "url": "https://passioncode.ai/"
       },
-      "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
+      "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial"
     },
     {
       "name": "observatory-log",
@@ -61,22 +61,22 @@
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "repo": "passioncode-ai/passioncode",
-      "ref": "v0.1.10",
+      "ref": "v0.1.12",
       "commit": null,
-      "version": "0.1.10",
+      "version": "0.1.12",
       "via": "this repository",
       "skills": [
         "working-in-passioncode"
       ],
       "legacyPluginIds": [],
       "legacyMarketplaces": [],
-      "contentHash": "sha256:57360b29ce3e8dcd3e846ed94c1798385400bc68c43e40c398869e459dd3f9cc",
+      "contentHash": "sha256:f0be91c0c114b6b5af7e9ae74459eb1c60a433ee0515b11468917f44fe4d6af0",
       "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",
         "url": "https://passioncode.ai/"
       },
-      "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
+      "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial"
     }
   ]
 }

package/payload/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,14 +3,14 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
-  "version": "0.5.1",
+  "version": "0.5.3",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"
   },
   "homepage": "https://github.com/passioncode-ai/fabric-agent-adapter",
   "repository": "https://github.com/passioncode-ai/fabric-agent-adapter",
-  "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0",
+  "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial",
   "keywords": [
     "fabric",
     "agent",

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: adapting-projects-to-fabric
 description: Use when adapting an existing agent, MCP server, A2A peer, HTTP service, or terminal CLI to the Fabric Agent Contract—choosing MCP/A2A/local-runner, scaffolding a provider bundle, or checking Fabric compatibility; also for «подключить проект к Fabric» or «сделать агента совместимым с Fabric». NOT for building the Fabric host/orchestrator, configuring an MCP client, or a brand-new agent — that is creating-fabric-agents.
-license: PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0
+license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned private fabric-agent-contract checkout. Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.5.1"
+  version: "0.5.3"
   contract-version: "0.1.0"
-  contract-commit: "9cd778eb6f14b977f9a5b4930826f62dc95c5619"
+  contract-commit: "2ea54f70c161c8b3bf7ec3c567735c7a2d4ce12f"
 ---
 
 # Adapting projects to Fabric
@@ -70,7 +70,7 @@ Use exactly:
 
 - contract version `0.1.0`;
 - repository `https://github.com/passioncode-ai/fabric-agent-contract`;
-- commit `9cd778eb6f14b977f9a5b4930826f62dc95c5619`.
+- commit `2ea54f70c161c8b3bf7ec3c567735c7a2d4ce12f`.
 
 Read the pinned contract's guide
 `docs/guides/connecting-compatible-agents.md`, the selected profile specification, and
@@ -179,6 +179,27 @@ unverified surfaces. If live Fabric admission/runtime does not yet exist, the la
 remain `NOT VERIFIED`; the completed deliverable is an adaptation-ready provider bundle,
 not a connected provider.
 
+## The repository around the provider
+
+**For a PassionCode.ai repository**, the adapted project's repository follows the organization's
+[repository standard](https://github.com/passioncode-ai/fabric-workspace/blob/main/knowledge/repository-standard.md) (`knowledge/repository-standard.md`
+in the organization's knowledge base; a clone has it at `fabric-workspace/knowledge/`) from its
+first commit:
+
+- `LICENSE`, `COMMERCIAL-LICENSE.md` and `CLA.md` copied byte for byte from the knowledge base's
+  `templates/`, and `AGPL-3.0-only OR LicenseRef-PassionCode-Commercial` in every manifest and
+  every SKILL.md `license:`; `SECURITY.md` when the repository is public;
+- a README whose first heading is the full name, with `## Quick start for a new teammate`
+  (Install; Configure, key names only; MCP, the registration command and one proving tool call,
+  verified with a real client in a temporary config; Develop) and `## License`;
+- an `AGENTS.md` that opens with the template's *Read first* block and closes with *After work*,
+  and a `CLAUDE.md` whose first line is `@AGENTS.md`.
+
+org-index `scripts/check_format.py` reports 0 findings for it before it is called done. **An agent
+someone builds for themselves is not a PassionCode.ai repository:** its licence is its owner's
+choice, nothing about it is published or listed by the organization, and none of these files is
+required of it — though the verified MCP quick start is still how anyone learns to drive it.
+
 ## Completion format
 
 Report:

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/adapt_project.py

@@ -16,7 +16,7 @@ from urllib.parse import urlparse
 
 CONTRACT_VERSION = "0.1.0"
 CONTRACT_REPOSITORY = "https://github.com/passioncode-ai/fabric-agent-contract"
-CONTRACT_COMMIT = "9cd778eb6f14b977f9a5b4930826f62dc95c5619"
+CONTRACT_COMMIT = "2ea54f70c161c8b3bf7ec3c567735c7a2d4ce12f"
 INTEROP_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/interop/0.1"
 MCP_REVISION = "2026-07-28"
 A2A_VERSION = "1.0"

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -11,14 +11,14 @@ description: >-
   descriptor, the well-known document, the events feed and notifications; ships Python and Node
   reference kits and a live conformance probe. NOT for a one-off script or cron job, a hosted
   SaaS, the provider manifest itself (adapting-projects-to-fabric), or building Fabric Dashboards.
-license: PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0
+license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Python 3.9+ or Node.js 20+ for the kits; the probe needs Python 3.9+. launchd steps are macOS-only (Linux services use lifecycle manager none until a systemd adapter exists). No network or package install; the contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.5.1"
+  version: "0.5.3"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
-  extension-commit: "9cd778eb6f14b977f9a5b4930826f62dc95c5619"
+  extension-commit: "2ea54f70c161c8b3bf7ec3c567735c7a2d4ce12f"
 ---
 
 # Building Fabric services
@@ -209,6 +209,27 @@ Then prove the lock: start a second copy by hand against the same data directory
 must exit 75 while the first keeps serving. Prove recovery: `kill -9` the launchd pid;
 the well-known document must answer again with a new pid within about 15 seconds.
 
+## The repository around the service
+
+**For a PassionCode.ai repository**, the service's repository follows the organization's
+[repository standard](https://github.com/passioncode-ai/fabric-workspace/blob/main/knowledge/repository-standard.md) (`knowledge/repository-standard.md`
+in the organization's knowledge base; a clone has it at `fabric-workspace/knowledge/`) from its
+first commit:
+
+- `LICENSE`, `COMMERCIAL-LICENSE.md` and `CLA.md` copied byte for byte from the knowledge base's
+  `templates/`, and `AGPL-3.0-only OR LicenseRef-PassionCode-Commercial` in every manifest and
+  every SKILL.md `license:`; `SECURITY.md` when the repository is public;
+- a README whose first heading is the full name, with `## Quick start for a new teammate`
+  (Install; Configure, key names only; MCP, the registration command and one proving tool call,
+  verified with a real client in a temporary config; Develop) and `## License`;
+- an `AGENTS.md` that opens with the template's *Read first* block and closes with *After work*,
+  and a `CLAUDE.md` whose first line is `@AGENTS.md`.
+
+org-index `scripts/check_format.py` reports 0 findings for it before it is called done. **An agent
+someone builds for themselves is not a PassionCode.ai repository:** its licence is its owner's
+choice, nothing about it is published or listed by the organization, and none of these files is
+required of it — though the verified MCP quick start is still how anyone learns to drive it.
+
 ## Migrating an existing service
 
 Read [the migration reference](references/migrating-a-service.md) — the order of

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/interop.md

@@ -1,6 +1,6 @@
 # Being called: `fabric-interop/0.1`
 
-Normative source: the Fabric Agent Contract's `docs/specification/interop.md` (DEC-0016, rulings DEC-0017)
+Normative source: the Fabric Agent Contract's `docs/specification/interop.md` (DEC-0016, rulings DEC-0017 and DEC-0018)
 at the commit this plugin pins. This page says how the kit implements it; where the two
 differ, the contract is right.
 
@@ -50,15 +50,32 @@ response = server.handle(json_rpc_message)          # POST /mcp body in, JSON re
 - Log events about the work with `**fi.trace_ids(ctx.traceparent)` so the pair lands on
   the event.
 
-`McpToolServer` answers `server/discover`, `tools/list` and `tools/call` with JSON
-responses — enough for Fabric and for the probe. A service already on an MCP SDK keeps
+`McpToolServer` answers `initialize` and `ping` (clients such as Claude Code 2.1.285 still
+open with a handshake, and a server that refuses it is marked failed), `server/discover`,
+`tools/list` and `tools/call` with JSON responses. Every tool's `outputSchema` must be
+rooted at `type: object` (DEC-0018): `add_tool` refuses any other root, because a client may
+drop the whole tool list over one bad schema — an SDK-level test will not show it, so check
+with the real client (below). A service already on an MCP SDK keeps
 the SDK and uses only the helpers. The Node kit has the helpers and the same job file
 format, without the dispatcher. `scripts/sample_service.py` is the worked example:
 `sample.echo` answers at once, `sample.draft` is a job that stops for a title choice.
 
-The contract owner's rulings (DEC-0017) the kit follows: a job tool's `outputSchema` is the
-self-contained union `oneOf[result envelope, job handle]` (`job_tool_output_schema`), so
-its `structuredContent` always conforms; an event about untraced work carries no trace pair.
+The contract owner's rulings the kit follows: a job tool's `outputSchema` is the
+self-contained `{type: object, oneOf: [result envelope, job handle]}` (`job_tool_output_schema`,
+DEC-0017 amended by DEC-0018), so its `structuredContent` always conforms; an event about
+untraced work carries no trace pair.
+
+**Check with a real client**, never only an SDK: `FABRIC_REAL_CLIENT=1 python3 -m unittest
+test.test_real_client` in the adapter repository, or by hand — a throwaway directory, a
+temporary `--mcp-config` (mode 600, the token in a header) and `--strict-mcp-config`, so
+the operator's own configuration is not touched:
+
+```bash
+claude -p "Reply with the single word OK." --strict-mcp-config --mcp-config "$TMP/mcp.json" \
+  --output-format stream-json --verbose --max-turns 1
+```
+
+The first `system/init` event lists `mcp_servers` (`connected`) and the `mcp__<server>__*` tools.
 
 ## What the probe checks
 
@@ -66,6 +83,7 @@ its `structuredContent` always conforms; an event about untraced work carries no
 
 | Rule | PASS when | NOT_RUN when |
 |---|---|---|
+| `interop.output-schema-object` | every listed tool's `outputSchema`, when present, has root `type: object` (FAC-SEM-023) | no MCP surface |
 | `interop.manifest-link` | the manifest `fabricManifest` names carries the service key with this `<id>.<instance>` (G-07) | the descriptor names no manifest |
 | `interop.well-known-capabilities` | every name in `surfaces.mcp.capabilities` is a manifest capability | the surface lists none |
 | `interop.tools-match` | every `mcp` capability is served as its tool, schemas equal to the files beside the manifest (matched by `$id`; a job's output wrapped in the DEC-0017 union), annotations derived | no manifest, no MCP surface, or a schema is not beside the manifest |

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/protocol.md

@@ -1,6 +1,6 @@
 # fabric-service/0.1 — wire reference
 
-Pinned to `fabric-agent-contract` commit `9cd778eb6f14b977f9a5b4930826f62dc95c5619`
+Pinned to `fabric-agent-contract` commit `2ea54f70c161c8b3bf7ec3c567735c7a2d4ce12f`
 (`docs/specification/service.md`, DEC-0015). The contract's schemas are normative;
 this page is the working summary. Extension key:
 `https://fabric.passioncode.ai/agent-contract/extensions/service/0.1`.

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/check_service.py

@@ -287,7 +287,7 @@ class Probe:
             self.add("interop.well-known-capabilities", "FAIL" if extra else "PASS",
                      ("listed but not in the manifest: " + ", ".join(extra)) if extra else "%d listed, all in the manifest" % len(listed))
         if not mcp_surface or not self.token:
-            for rule in ("interop.tools-match", "interop.job-tools", "interop.unknown-job", "interop.trace-propagation"):
+            for rule in ("interop.output-schema-object", "interop.tools-match", "interop.job-tools", "interop.unknown-job", "interop.trace-propagation"):
                 self.add(rule, "NOT_RUN", "no MCP surface" if not mcp_surface else "no readable token")
         else:
             try:
@@ -298,12 +298,21 @@ class Probe:
             if listing is not None:
                 sent = self.sent_traceparent
                 tools = {t.get("name"): t for t in (listing.get("result") or {}).get("tools", []) if isinstance(t, dict)}
+                self.object_root_rule(tools)
                 self.tools_match_rule(capabilities, manifest_path, tools)
                 self.job_tools_rule(capabilities, tools)
                 self.unknown_job_rule(list(tools))
                 self.trace_rule(listing, sent)
         self.events_trace_rule(self.events)
 
+    def object_root_rule(self, tools: Dict[str, Any]) -> None:
+        """FAC-SEM-023 (DEC-0018): every listed tool's outputSchema, when present, has root type object —
+        a client may refuse the whole tools/list otherwise, whatever the SDK in the tests accepted."""
+        bad = sorted(n for n, t in tools.items() if "outputSchema" in t and (t.get("outputSchema") or {}).get("type") != "object")
+        with_schema = sum(1 for t in tools.values() if "outputSchema" in t)
+        self.add("interop.output-schema-object", "FAIL" if bad else "PASS",
+                 ("outputSchema root is not type object: " + ", ".join(bad)) if bad else "%d outputSchemas, every root type object" % with_schema)
+
     def tools_match_rule(self, capabilities: List[Dict[str, Any]], manifest_path: Optional[Path], tools: Dict[str, Any]) -> None:
         """FAC-SEM-017: each mcp capability is served as the tool of its name, with its schemas and derived annotations."""
         served = [c for c in capabilities if (c.get("profile") or {}).get("kind") == "mcp"]

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-interop.mjs

@@ -66,10 +66,17 @@ export function expectedAnnotations(effect, idempotency) {
 }
 
 // DEC-0017: a job-backed tool serves oneOf[result envelope, job handle]; the manifest keeps the pure output schema.
-export const jobToolOutputSchema = (outputSchema) => ({ oneOf: [{ type: 'object', required: [...ENVELOPE_REQUIRED], properties: { output: outputSchema } }, JOB_HANDLE_SCHEMA] });
+export const jobToolOutputSchema = (outputSchema) => ({ type: 'object', oneOf: [{ type: 'object', required: [...ENVELOPE_REQUIRED], properties: { output: outputSchema } }, JOB_HANDLE_SCHEMA] });
 export const isJobCapability = (capability) => capability.job === true || capability.extensions?.[EXTENSION_KEY]?.job === true;
 
+// DEC-0018 (FAC-SEM-023): an outputSchema is rooted at type object; a client may reject the whole
+// tools/list when one tool's outputSchema is, say, a bare oneOf.
+export function requireObjectRoot(name, outputSchema) {
+  if (!outputSchema || typeof outputSchema !== 'object' || outputSchema.type !== 'object') throw new InteropError(`Tool ${name}: an outputSchema must have root type "object".`);
+}
+
 export function toolForCapability(capability, inputSchema, outputSchema, title) {
+  requireObjectRoot(capability.name, outputSchema);
   const served = isJobCapability(capability) ? jobToolOutputSchema(outputSchema) : outputSchema;
   const tool = { name: capability.name, inputSchema, outputSchema: served, annotations: expectedAnnotations(capability.effect, capability.idempotency) };
   if (capability.description) tool.description = capability.description;

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_interop.py

@@ -30,6 +30,10 @@ import fabric_service as _fs  # noqa: E402
 PROTOCOL = "fabric-interop/0.1"
 EXTENSION_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/interop/0.1"
 MCP_REVISION = "2026-07-28"
+# Revisions a client may name in `initialize`. MCP 2026-07-28 needs no handshake, but clients
+# built on earlier revisions (Claude Code 2.1.285 among them) still open with one, and a server
+# that refuses it is marked failed before tools/list is ever called.
+HANDSHAKE_REVISIONS = ("2025-03-26", "2025-06-18", "2025-11-25", "2026-07-28")
 CONTRACT_VERSION = "0.1.0"
 JOB_STATES = ("working", "input_required", "completed", "failed", "cancelled")
 OUTCOMES = ("succeeded", "partial", "failed", "cancelled", "blocked")
@@ -112,10 +116,18 @@ def expected_annotations(effect: str, idempotency: str) -> Dict[str, bool]:
 def job_tool_output_schema(output_schema: Dict[str, Any]) -> Dict[str, Any]:
     """DEC-0017: a job-backed tool's outputSchema is oneOf[result envelope, job handle], self-contained,
     so structuredContent always conforms; the manifest's capability keeps the pure output schema."""
-    return {"oneOf": [{"type": "object", "required": list(ENVELOPE_REQUIRED), "properties": {"output": output_schema}},
+    return {"type": "object",
+            "oneOf": [{"type": "object", "required": list(ENVELOPE_REQUIRED), "properties": {"output": output_schema}},
                       JOB_HANDLE_SCHEMA]}
 
 
+def require_object_root(name: str, output_schema: Any) -> None:
+    """DEC-0018 (FAC-SEM-023): an outputSchema is rooted at type object. MCP requires it, and a client
+    may reject the WHOLE tools/list when one tool's outputSchema is, say, a bare oneOf."""
+    if not isinstance(output_schema, dict) or output_schema.get("type") != "object":
+        raise InteropError("Tool %s: an outputSchema must have root type \"object\"." % name)
+
+
 def is_job_capability(capability: Dict[str, Any]) -> bool:
     block = (capability.get("extensions") or {}).get(EXTENSION_KEY) or {}
     return capability.get("job") is True or block.get("job") is True
@@ -125,6 +137,7 @@ def tool_for_capability(capability: Dict[str, Any], input_schema: Dict[str, Any]
                         title: Optional[str] = None) -> Dict[str, Any]:
     """The MCP tool for one manifest capability: its name, its input schema as it is, derived annotations,
     and its output schema — wrapped in the job union when the capability is a job (DEC-0017)."""
+    require_object_root(capability["name"], output_schema)
     tool: Dict[str, Any] = {
         "name": capability["name"],
         "inputSchema": input_schema,
@@ -391,6 +404,8 @@ class McpToolServer:
     def add_tool(self, tool: Dict[str, Any], handler: Handler) -> None:
         if tool["name"] in self.handlers:
             raise InteropError("Tool %s is served twice." % tool["name"])
+        if "outputSchema" in tool:
+            require_object_root(tool["name"], tool["outputSchema"])
         self.tools.append(tool)
         self.handlers[tool["name"]] = handler
 
@@ -423,6 +438,13 @@ class McpToolServer:
         meta = params.get("_meta") or {}
         span = child_traceparent(meta.get("traceparent"))
         method = message["method"]
+        if method == "initialize":
+            asked = params.get("protocolVersion")
+            return {"jsonrpc": "2.0", "id": rid, "result": {
+                "protocolVersion": asked if asked in HANDSHAKE_REVISIONS else MCP_REVISION,
+                "capabilities": {"tools": {"listChanged": False}}, "serverInfo": self.info}}
+        if method == "ping":
+            return {"jsonrpc": "2.0", "id": rid, "result": {}}
         if method == "server/discover":
             return {"jsonrpc": "2.0", "id": rid, "result": {"resultType": "complete", "capabilities": {"tools": {}},
                                                              "serverInfo": self.info, "_meta": {"traceparent": span}}}

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/sample_service.py

@@ -187,6 +187,9 @@ def make_handler(svc: Service):
                 except fs.ServiceError as exc:
                     return self._send(400, {"error": str(exc)})
                 return self._send(200, page)
+            if url.path == "/mcp":
+                # No server-to-client stream here: Streamable HTTP says 405 for a GET.
+                return self._send(405, {"error": "POST JSON-RPC to /mcp."}, {"Allow": "POST"})
             if url.path == "/fabric/v1/login":
                 cookie = svc.codes.redeem((query.get("code") or [None])[0])
                 if not cookie:

package/payload/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -1,13 +1,13 @@
 ---
 name: creating-fabric-agents
 description: Use when designing and building a NEW agent or provider that must be Fabric-compatible from its first commit — «создай агента, совместимого с фабрикой Passion Code», «новый агент под Fabric», "create a fabric-compatible agent", "build a new Fabric provider", "fabric-ready agent from scratch". Runs the intake grill (capability, named consumer, workflow-or-agent, MCP/A2A/local-runner profile, effect declarations), distils source projects into a knowledge pack whose recorded failures become planted eval fixtures, scaffolds the pinned contract bundle, and sets the two-clock eval expectation with the conformance report. NOT for adapting an existing project (use adapting-projects-to-fabric), building the Fabric host or orchestrator, or generic agent design where Fabric compatibility is not part of the request.
-license: PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0
+license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned private fabric-agent-contract checkout. Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.5.1"
+  version: "0.5.3"
   contract-version: "0.1.0"
-  contract-commit: "9cd778eb6f14b977f9a5b4930826f62dc95c5619"
+  contract-commit: "2ea54f70c161c8b3bf7ec3c567735c7a2d4ce12f"
 ---
 
 # Creating Fabric-compatible agents
@@ -80,6 +80,25 @@ that would show it met, written now, before the implementation. The input corpus
 authored now: it grows from real traces once the provider runs, and the step-1 fixtures
 are its seed because a source project's recorded failures count as production.
 
+**For a PassionCode.ai repository**, the new agent's repository follows the organization's
+[repository standard](https://github.com/passioncode-ai/fabric-workspace/blob/main/knowledge/repository-standard.md) (`knowledge/repository-standard.md`
+in the organization's knowledge base; a clone has it at `fabric-workspace/knowledge/`) from its
+first commit:
+
+- `LICENSE`, `COMMERCIAL-LICENSE.md` and `CLA.md` copied byte for byte from the knowledge base's
+  `templates/`, and `AGPL-3.0-only OR LicenseRef-PassionCode-Commercial` in every manifest and
+  every SKILL.md `license:`; `SECURITY.md` when the repository is public;
+- a README whose first heading is the full name, with `## Quick start for a new teammate`
+  (Install; Configure, key names only; MCP, the registration command and one proving tool call,
+  verified with a real client in a temporary config; Develop) and `## License`;
+- an `AGENTS.md` that opens with the template's *Read first* block and closes with *After work*,
+  and a `CLAUDE.md` whose first line is `@AGENTS.md`.
+
+org-index `scripts/check_format.py` reports 0 findings for it before it is called done. **An agent
+someone builds for themselves is not a PassionCode.ai repository:** its licence is its owner's
+choice, nothing about it is published or listed by the organization, and none of these files is
+required of it — though the verified MCP quick start is still how anyone learns to drive it.
+
 ## Step 3 — scaffold the provider bundle
 
 Reuse the sibling skill's scaffolder against the new skeleton with the profile chosen at
@@ -93,7 +112,7 @@ python3 <plugin-dir>/skills/adapting-projects-to-fabric/scripts/adapt_project.py
   --schema-base <immutable-base-uri>
 ```
 
-Pin exactly contract `0.1.0` at commit `9cd778eb6f14b977f9a5b4930826f62dc95c5619` and
+Pin exactly contract `0.1.0` at commit `2ea54f70c161c8b3bf7ec3c567735c7a2d4ce12f` and
 read the pinned guide before implementing protocol details. If this skill is installed
 without its sibling, the scaffolder is absent: create the bundle by hand from the pinned
 contract's `docs/guides/connecting-compatible-agents.md` and mark the structural check

package/payload/plugins/passioncode/.claude-plugin/plugin.json

@@ -2,12 +2,12 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "passioncode",
   "displayName": "PassionCode.ai",
-  "version": "0.1.10",
+  "version": "0.1.12",
   "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check at session start that keeps the PassionCode.ai skill set current.",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"
   },
   "homepage": "https://github.com/passioncode-ai/passioncode",
-  "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
+  "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial"
 }

package/payload/plugins/passioncode/hooks/repo-rules.js

@@ -1,15 +1,17 @@
 'use strict';
 /**
- * The read-first reminder. In a passioncode-ai repository an agent reads the repository's
- * AGENTS.md and the organization's CONTRIBUTING.md before its first edit — names, landing
- * rules, code region markers, the shared tools. A rule an agent has to remember is a rule it
- * forgets in the one repository where it mattered, so the session start says it, in one line,
- * and only where it applies. Anything unexpected (no git, no origin, a slow git) prints nothing:
- * a reminder must never cost a session.
+ * The read-first reminder: the protocol of Fabric ADR-0093. In a passioncode-ai repository an
+ * agent reads the organization's knowledge base (fabric-workspace/knowledge/, published at
+ * wiki.passioncode.ai/knowledge) and the repository's AGENTS.md before its first edit, and after
+ * the work updates the knowledge base page that owns any cross-repository fact it changed. A rule
+ * an agent has to remember is a rule it forgets in the one repository where it mattered, so the
+ * session start says it, in one line, and only where it applies. Anything unexpected (no git, no
+ * origin, a slow git) prints nothing: a reminder must never cost a session.
  */
 const { execFileSync } = require('child_process');
 
-const CONTRIBUTING = 'https://github.com/passioncode-ai/.github/blob/main/CONTRIBUTING.md';
+const KNOWLEDGE = 'fabric-workspace/knowledge/';
+const KNOWLEDGE_WEB = 'https://wiki.passioncode.ai/knowledge';
 
 /** The GitHub organization an origin URL belongs to, when it is passioncode-ai; else null. */
 function orgOf(url) {
@@ -30,7 +32,7 @@ function originOf(dir) {
 /** The one line to print at session start in `dir`, or null. */
 function rulesLine(dir) {
   if (!orgOf(originOf(dir))) return null;
-  return `[passioncode] passioncode-ai repository: read AGENTS.md and the organization's CONTRIBUTING.md (${CONTRIBUTING}) before the first edit — names, landing rules, code region markers.`;
+  return `[passioncode] passioncode-ai repository: read the knowledge base (${KNOWLEDGE} or ${KNOWLEDGE_WEB}), then this repository's AGENTS.md, before the first edit; after the work, update the knowledge base page that owns any cross-repository fact you changed.`;
 }
 
-module.exports = { CONTRIBUTING, orgOf, rulesLine };
+module.exports = { KNOWLEDGE, KNOWLEDGE_WEB, orgOf, rulesLine };