@passioncode-ai/passioncode 0.1.11 → 0.1.12

package/README.md

@@ -1,9 +1,10 @@
-# passioncode
+# PassionCode.ai launcher
 
-> **PassionCode.ai — The agent-agnostic operating system for AI-native teams.**
-
-Every PassionCode.ai agent skill, for Claude Code and every other agent on your machine,
-installed and updated as one set:
+The **PassionCode.ai launcher** (`@passioncode-ai/passioncode` on npm) installs and updates every
+PassionCode.ai agent skill and plugin — the Fabric Agent Adapter, Observatory Log and the
+organization's working rules — for Claude Code and every other agent on your machine, as one set.
+It is how a teammate's agent gets the tools that build for Fabric, PassionCode.ai's CEO AI agent,
+and it works on its own: no Fabric install, no account, no key.
 
 ```bash
 npx @passioncode-ai/passioncode@latest update
@@ -27,8 +28,11 @@ out of it, even when they implement Fabric protocols.
    no unscoped `passioncode` package on npm.
 2. **Configure:** nothing to set, no account and no key. Background updates are on by default;
    `npx @passioncode-ai/passioncode@latest config set update.auto off` turns them off.
-3. **MCP:** none. The launcher installs skills and session hooks; it neither serves nor calls an
-   MCP server. The tools that do (Fabric Switchboard, Fabric Inbox) document their own.
+3. **MCP:** none today, and not planned. The launcher installs skills and session hooks and is
+   driven by its CLI (`update`, `status`, `restore`, `uninstall`, `config`); it neither serves nor
+   calls an MCP server. The products it installs for, and the ones that serve MCP (Fabric
+   Switchboard, Fabric Inbox, Fabric Dashboards), document their own registration and proving
+   call; the Fabric Agent Adapter's quick start builds and calls one.
 4. **Develop:** clone, then `npm test` — there are no dependencies and no lockfile, so there is
    nothing to install (`npm ci` refuses to run here). `npm run vendor` builds `payload/` from the
    members pinned in `family.json`; `claude plugin validate ./payload --strict` checks it. Start
@@ -93,9 +97,8 @@ reads a member from `<dir>/<repository name>`, and `PASSIONCODE_CHECKOUT_<MEMBER
 
 ## License
 
-Source-available under PolyForm Noncommercial or Internal Use; commercial license on
-request (contact@passioncode.ai). SPDX:
-`PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0` — see
-[LICENSE](LICENSE). Versions up to and including v0.1.4 were released under the MIT
-License and remain available under it. Contributions are accepted under [CLA.md](CLA.md)
-([CONTRIBUTING.md](CONTRIBUTING.md)).
+Open source under the [GNU AGPL-3.0](LICENSE). A [commercial license](COMMERCIAL-LICENSE.md) is
+available for use that does not meet the AGPL's terms — contact@passioncode.ai.
+Versions before 0.1.12 were released under PolyForm Noncommercial or Internal Use (v0.1.5 to
+v0.1.11) and MIT (v0.1.4 and earlier); each keeps the licence it was released under.
+Contributions are accepted under [CLA.md](CLA.md) ([CONTRIBUTING.md](CONTRIBUTING.md)).

package/family.json

@@ -8,7 +8,7 @@
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.5.2",
+      "ref": "v0.5.3",
       "kind": "plugin",
       "path": "plugins/fabric-agent-adapter",
       "legacyPluginIds": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/passioncode",
-  "version": "0.1.11",
+  "version": "0.1.12",
   "description": "Every PassionCode.ai agent skill — Fabric Agent Adapter, Observatory Log and the organisation's working rules — for Claude Code and every other agent on the machine, updated as one set.",
   "bin": {
     "passioncode": "bin/passioncode.js"
@@ -12,6 +12,8 @@
     "family.json",
     "README.md",
     "LICENSE",
+    "COMMERCIAL-LICENSE.md",
+    "CLA.md",
     "CHANGELOG.md",
     "SECURITY.md"
   ],
@@ -32,7 +34,7 @@
     "url": "git+https://github.com/passioncode-ai/passioncode.git"
   },
   "homepage": "https://github.com/passioncode-ai/passioncode",
-  "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0",
+  "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/payload/.claude-plugin/marketplace.json

@@ -11,13 +11,13 @@
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "source": "./plugins/fabric-agent-adapter",
-      "version": "0.5.2",
+      "version": "0.5.3",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
       "author": {
         "name": "PassionCode.ai",
         "url": "https://passioncode.ai/"
       },
-      "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
+      "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial"
     },
     {
       "name": "observatory-log",
@@ -35,13 +35,13 @@
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "source": "./plugins/passioncode",
-      "version": "0.1.11",
+      "version": "0.1.12",
       "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",
         "url": "https://passioncode.ai/"
       },
-      "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
+      "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial"
     }
   ]
 }

package/payload/manifest.json

@@ -1,15 +1,15 @@
 {
   "family": "passioncode",
-  "version": "0.1.11",
+  "version": "0.1.12",
   "release": true,
   "members": [
     {
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.5.2",
-      "commit": "b7a6b8ea081894ea8c0d3765879721c17f6a3655",
-      "version": "0.5.2",
+      "ref": "v0.5.3",
+      "commit": "951b2910e450c491078486ddf022489d4742bbaf",
+      "version": "0.5.3",
       "via": "clone of https://***@github.com/passioncode-ai/fabric-agent-adapter.git",
       "skills": [
         "adapting-projects-to-fabric",
@@ -22,13 +22,13 @@
       "legacyMarketplaces": [
         "fabric-agent-adapter"
       ],
-      "contentHash": "sha256:8d2a7d2795b1ab1e0dd3a1fc9a073c70e6085f160fa125bd5ada5a5f3d8d4c0b",
+      "contentHash": "sha256:1b9d3028d72947aa3dc99f2cc979ffb9a6710a99ab0a89773f7de9ce673be210",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
       "author": {
         "name": "PassionCode.ai",
         "url": "https://passioncode.ai/"
       },
-      "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
+      "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial"
     },
     {
       "name": "observatory-log",
@@ -61,22 +61,22 @@
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "repo": "passioncode-ai/passioncode",
-      "ref": "v0.1.11",
+      "ref": "v0.1.12",
       "commit": null,
-      "version": "0.1.11",
+      "version": "0.1.12",
       "via": "this repository",
       "skills": [
         "working-in-passioncode"
       ],
       "legacyPluginIds": [],
       "legacyMarketplaces": [],
-      "contentHash": "sha256:917c5c1429a60a70666f1f8c7b2ee73d2e50bb8db56f64104f418ab0b7a46816",
+      "contentHash": "sha256:f0be91c0c114b6b5af7e9ae74459eb1c60a433ee0515b11468917f44fe4d6af0",
       "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",
         "url": "https://passioncode.ai/"
       },
-      "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
+      "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial"
     }
   ]
 }

package/payload/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,14 +3,14 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
-  "version": "0.5.2",
+  "version": "0.5.3",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"
   },
   "homepage": "https://github.com/passioncode-ai/fabric-agent-adapter",
   "repository": "https://github.com/passioncode-ai/fabric-agent-adapter",
-  "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0",
+  "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial",
   "keywords": [
     "fabric",
     "agent",

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: adapting-projects-to-fabric
 description: Use when adapting an existing agent, MCP server, A2A peer, HTTP service, or terminal CLI to the Fabric Agent Contract—choosing MCP/A2A/local-runner, scaffolding a provider bundle, or checking Fabric compatibility; also for «подключить проект к Fabric» or «сделать агента совместимым с Fabric». NOT for building the Fabric host/orchestrator, configuring an MCP client, or a brand-new agent — that is creating-fabric-agents.
-license: PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0
+license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned private fabric-agent-contract checkout. Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.5.2"
+  version: "0.5.3"
   contract-version: "0.1.0"
   contract-commit: "2ea54f70c161c8b3bf7ec3c567735c7a2d4ce12f"
 ---
@@ -179,6 +179,27 @@ unverified surfaces. If live Fabric admission/runtime does not yet exist, the la
 remain `NOT VERIFIED`; the completed deliverable is an adaptation-ready provider bundle,
 not a connected provider.
 
+## The repository around the provider
+
+**For a PassionCode.ai repository**, the adapted project's repository follows the organization's
+[repository standard](https://github.com/passioncode-ai/fabric-workspace/blob/main/knowledge/repository-standard.md) (`knowledge/repository-standard.md`
+in the organization's knowledge base; a clone has it at `fabric-workspace/knowledge/`) from its
+first commit:
+
+- `LICENSE`, `COMMERCIAL-LICENSE.md` and `CLA.md` copied byte for byte from the knowledge base's
+  `templates/`, and `AGPL-3.0-only OR LicenseRef-PassionCode-Commercial` in every manifest and
+  every SKILL.md `license:`; `SECURITY.md` when the repository is public;
+- a README whose first heading is the full name, with `## Quick start for a new teammate`
+  (Install; Configure, key names only; MCP, the registration command and one proving tool call,
+  verified with a real client in a temporary config; Develop) and `## License`;
+- an `AGENTS.md` that opens with the template's *Read first* block and closes with *After work*,
+  and a `CLAUDE.md` whose first line is `@AGENTS.md`.
+
+org-index `scripts/check_format.py` reports 0 findings for it before it is called done. **An agent
+someone builds for themselves is not a PassionCode.ai repository:** its licence is its owner's
+choice, nothing about it is published or listed by the organization, and none of these files is
+required of it — though the verified MCP quick start is still how anyone learns to drive it.
+
 ## Completion format
 
 Report:

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -11,11 +11,11 @@ description: >-
   descriptor, the well-known document, the events feed and notifications; ships Python and Node
   reference kits and a live conformance probe. NOT for a one-off script or cron job, a hosted
   SaaS, the provider manifest itself (adapting-projects-to-fabric), or building Fabric Dashboards.
-license: PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0
+license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Python 3.9+ or Node.js 20+ for the kits; the probe needs Python 3.9+. launchd steps are macOS-only (Linux services use lifecycle manager none until a systemd adapter exists). No network or package install; the contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.5.2"
+  version: "0.5.3"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
   extension-commit: "2ea54f70c161c8b3bf7ec3c567735c7a2d4ce12f"
@@ -209,6 +209,27 @@ Then prove the lock: start a second copy by hand against the same data directory
 must exit 75 while the first keeps serving. Prove recovery: `kill -9` the launchd pid;
 the well-known document must answer again with a new pid within about 15 seconds.
 
+## The repository around the service
+
+**For a PassionCode.ai repository**, the service's repository follows the organization's
+[repository standard](https://github.com/passioncode-ai/fabric-workspace/blob/main/knowledge/repository-standard.md) (`knowledge/repository-standard.md`
+in the organization's knowledge base; a clone has it at `fabric-workspace/knowledge/`) from its
+first commit:
+
+- `LICENSE`, `COMMERCIAL-LICENSE.md` and `CLA.md` copied byte for byte from the knowledge base's
+  `templates/`, and `AGPL-3.0-only OR LicenseRef-PassionCode-Commercial` in every manifest and
+  every SKILL.md `license:`; `SECURITY.md` when the repository is public;
+- a README whose first heading is the full name, with `## Quick start for a new teammate`
+  (Install; Configure, key names only; MCP, the registration command and one proving tool call,
+  verified with a real client in a temporary config; Develop) and `## License`;
+- an `AGENTS.md` that opens with the template's *Read first* block and closes with *After work*,
+  and a `CLAUDE.md` whose first line is `@AGENTS.md`.
+
+org-index `scripts/check_format.py` reports 0 findings for it before it is called done. **An agent
+someone builds for themselves is not a PassionCode.ai repository:** its licence is its owner's
+choice, nothing about it is published or listed by the organization, and none of these files is
+required of it — though the verified MCP quick start is still how anyone learns to drive it.
+
 ## Migrating an existing service
 
 Read [the migration reference](references/migrating-a-service.md) — the order of

package/payload/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -1,11 +1,11 @@
 ---
 name: creating-fabric-agents
 description: Use when designing and building a NEW agent or provider that must be Fabric-compatible from its first commit — «создай агента, совместимого с фабрикой Passion Code», «новый агент под Fabric», "create a fabric-compatible agent", "build a new Fabric provider", "fabric-ready agent from scratch". Runs the intake grill (capability, named consumer, workflow-or-agent, MCP/A2A/local-runner profile, effect declarations), distils source projects into a knowledge pack whose recorded failures become planted eval fixtures, scaffolds the pinned contract bundle, and sets the two-clock eval expectation with the conformance report. NOT for adapting an existing project (use adapting-projects-to-fabric), building the Fabric host or orchestrator, or generic agent design where Fabric compatibility is not part of the request.
-license: PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0
+license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned private fabric-agent-contract checkout. Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.5.2"
+  version: "0.5.3"
   contract-version: "0.1.0"
   contract-commit: "2ea54f70c161c8b3bf7ec3c567735c7a2d4ce12f"
 ---
@@ -80,6 +80,25 @@ that would show it met, written now, before the implementation. The input corpus
 authored now: it grows from real traces once the provider runs, and the step-1 fixtures
 are its seed because a source project's recorded failures count as production.
 
+**For a PassionCode.ai repository**, the new agent's repository follows the organization's
+[repository standard](https://github.com/passioncode-ai/fabric-workspace/blob/main/knowledge/repository-standard.md) (`knowledge/repository-standard.md`
+in the organization's knowledge base; a clone has it at `fabric-workspace/knowledge/`) from its
+first commit:
+
+- `LICENSE`, `COMMERCIAL-LICENSE.md` and `CLA.md` copied byte for byte from the knowledge base's
+  `templates/`, and `AGPL-3.0-only OR LicenseRef-PassionCode-Commercial` in every manifest and
+  every SKILL.md `license:`; `SECURITY.md` when the repository is public;
+- a README whose first heading is the full name, with `## Quick start for a new teammate`
+  (Install; Configure, key names only; MCP, the registration command and one proving tool call,
+  verified with a real client in a temporary config; Develop) and `## License`;
+- an `AGENTS.md` that opens with the template's *Read first* block and closes with *After work*,
+  and a `CLAUDE.md` whose first line is `@AGENTS.md`.
+
+org-index `scripts/check_format.py` reports 0 findings for it before it is called done. **An agent
+someone builds for themselves is not a PassionCode.ai repository:** its licence is its owner's
+choice, nothing about it is published or listed by the organization, and none of these files is
+required of it — though the verified MCP quick start is still how anyone learns to drive it.
+
 ## Step 3 — scaffold the provider bundle
 
 Reuse the sibling skill's scaffolder against the new skeleton with the profile chosen at

package/payload/plugins/passioncode/.claude-plugin/plugin.json

@@ -2,12 +2,12 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "passioncode",
   "displayName": "PassionCode.ai",
-  "version": "0.1.11",
+  "version": "0.1.12",
   "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check at session start that keeps the PassionCode.ai skill set current.",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"
   },
   "homepage": "https://github.com/passioncode-ai/passioncode",
-  "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
+  "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial"
 }

package/payload/plugins/passioncode/hooks/repo-rules.js

@@ -1,15 +1,17 @@
 'use strict';
 /**
- * The read-first reminder. In a passioncode-ai repository an agent reads the repository's
- * AGENTS.md and the organization's CONTRIBUTING.md before its first edit — names, landing
- * rules, code region markers, the shared tools. A rule an agent has to remember is a rule it
- * forgets in the one repository where it mattered, so the session start says it, in one line,
- * and only where it applies. Anything unexpected (no git, no origin, a slow git) prints nothing:
- * a reminder must never cost a session.
+ * The read-first reminder: the protocol of Fabric ADR-0093. In a passioncode-ai repository an
+ * agent reads the organization's knowledge base (fabric-workspace/knowledge/, published at
+ * wiki.passioncode.ai/knowledge) and the repository's AGENTS.md before its first edit, and after
+ * the work updates the knowledge base page that owns any cross-repository fact it changed. A rule
+ * an agent has to remember is a rule it forgets in the one repository where it mattered, so the
+ * session start says it, in one line, and only where it applies. Anything unexpected (no git, no
+ * origin, a slow git) prints nothing: a reminder must never cost a session.
  */
 const { execFileSync } = require('child_process');
 
-const CONTRIBUTING = 'https://github.com/passioncode-ai/.github/blob/main/CONTRIBUTING.md';
+const KNOWLEDGE = 'fabric-workspace/knowledge/';
+const KNOWLEDGE_WEB = 'https://wiki.passioncode.ai/knowledge';
 
 /** The GitHub organization an origin URL belongs to, when it is passioncode-ai; else null. */
 function orgOf(url) {
@@ -30,7 +32,7 @@ function originOf(dir) {
 /** The one line to print at session start in `dir`, or null. */
 function rulesLine(dir) {
   if (!orgOf(originOf(dir))) return null;
-  return `[passioncode] passioncode-ai repository: read AGENTS.md and the organization's CONTRIBUTING.md (${CONTRIBUTING}) before the first edit — names, landing rules, code region markers.`;
+  return `[passioncode] passioncode-ai repository: read the knowledge base (${KNOWLEDGE} or ${KNOWLEDGE_WEB}), then this repository's AGENTS.md, before the first edit; after the work, update the knowledge base page that owns any cross-repository fact you changed.`;
 }
 
-module.exports = { CONTRIBUTING, orgOf, rulesLine };
+module.exports = { KNOWLEDGE, KNOWLEDGE_WEB, orgOf, rulesLine };

package/payload/plugins/passioncode/skills/working-in-passioncode/SKILL.md

@@ -7,12 +7,12 @@ description: >-
   PassionCode», «как тут принято», «где записать решение», «как выпустить релиз». Covers the org
   map, landing (protected and unprotected main, fast-forward, never force-push shared work,
   never touch another session's work), nightly CI and why a blocked run is not green,
-  handoffs, decisions, ids and leases, secrets, licensing (source-available, CLA, MIT
-  schemas), the privacy gate before anything goes public, and releases, versions and pins;
-  org-index stays the source of truth. NOT for product UX, visual design or copy (super-ux,
+  handoffs, decisions, ids and leases, secrets, licensing (AGPL-3.0 or commercial, CLA), the
+  repository standard, the privacy gate, and releases, versions and pins; the knowledge base
+  stays the source of truth. NOT for product UX, visual design or copy (super-ux,
   sheleg-design, copywriting), building Fabric agents or services (the fabric-agent-adapter
   skills), or repositories outside passioncode-ai.
-license: PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0
+license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Any agent that can read files and run git. The gh CLI and a clone of passioncode-ai/org-index make the checks exact; without them follow the fallbacks in the body.
 metadata:
   author: PassionCode.ai
@@ -20,17 +20,33 @@ metadata:
 
 # Working in PassionCode repositories
 
-The rules of the `passioncode-ai` organisation live in one place:
-[org-index](https://github.com/passioncode-ai/org-index) (private; every member can
-read it) — `README.md` for the map, `RULES.md` for the rules, `ONBOARDING.md` for a new
-machine. This skill is the checklist that makes those rules reach you while you work.
-It summarises; it does not replace. Where it and org-index disagree, **org-index wins**;
-where a repository's own `AGENTS.md` is stricter, **that file wins**.
+What belongs to no single repository — the vision, the principles, how to work, the rules, the
+repository standard, the products and the licence — lives in one place: the organization's
+**knowledge base**, `fabric-workspace/knowledge/` in a clone (org-index
+`scripts/clone_all.sh` makes it), published at https://wiki.passioncode.ai/knowledge (sign-in
+required; Fabric ADR-0093). [org-index](https://github.com/passioncode-ai/org-index) (private;
+every member can read it) keeps the map (`repositories.json`), `ONBOARDING.md` and the checks
+(`check_index.py`, `check_names.py`, `check_format.py`). This skill is the checklist that makes
+those rules reach you while you work. It summarises; it does not replace. Where it and the
+knowledge base disagree, **the knowledge base wins**; where a repository's own `AGENTS.md` is
+stricter, **that file wins**.
+
+## 0. The protocol — before and after every piece of work
+
+**Before the first edit**, read the knowledge base (at least its `README.md`, `vision.md`,
+`principles.md` and `how-to-work.md`), then the repository's `AGENTS.md`. The session-start hook
+of this plugin prints that line in every passioncode-ai repository.
+
+**After the work**, in the same run: update the repository's own docs in the change that changes
+the behaviour; if a fact that crosses repositories changed — a product, a version, a plan row, a
+principle, a rule — update the knowledge base page that owns it (`products.md`, `plans.md`, …);
+land both; then publish (`node scripts/workspace.mjs sync` from a Fabric checkout) or leave it to
+the scheduled sync. A page there is read as true: every claim carries its receipt.
 
 ## 1. Before the first edit
 
-1. Read the repository's `AGENTS.md` (its `CLAUDE.md` imports it). It names the role,
-   the test command and any local rule.
+1. Read the knowledge base, then the repository's `AGENTS.md` (its `CLAUDE.md` imports
+   it). `AGENTS.md` names the role, the test command and any local rule.
 2. Find who owns what you are about to change: the table in org-index `README.md`,
    generated from `repositories.json`. Do not guess an owner from a directory name.
 3. `git fetch origin`, then work in a worktree from `origin/main` on your own branch
@@ -41,13 +57,14 @@ where a repository's own `AGENTS.md` is stricter, **that file wins**.
 4. An unmerged branch or a dirty tree you did not create is someone's work in
    progress. Leave it; ask before touching it.
 
-No org-index clone: `gh repo clone passioncode-ai/org-index`. No access at all: say so,
-follow the repository's `AGENTS.md`, and name that you worked from it alone.
+No clone: `gh repo clone passioncode-ai/org-index`, then its `scripts/clone_all.sh` for the
+knowledge base. No access at all: say so, follow the repository's `AGENTS.md`, and name that you
+worked from it alone.
 
 Also, before the first edit:
 
 - **Read the organization's [CONTRIBUTING.md](https://github.com/passioncode-ai/.github/blob/main/CONTRIBUTING.md)**
-  — the session-start hook of this plugin prints that line in every passioncode-ai repository.
+  — the repository's `AGENTS.md` sends you there in its *Read first* block.
 - **Names** (Fabric ADR-0090): PassionCode.ai is the organization; **Fabric** is the product,
   the CEO AI agent; Fabric's tools carry its full name before any short form (Fabric Inbox,
   Fabric Dashboards, Fabric Switchboard); the Fabric Agent Contract and Adapter make any agent
@@ -121,21 +138,31 @@ not edit a guarded file — say which file and why you stopped.
   enough. With the Observatory plugin installed, its `handling-secrets` skill does this
   by slot name without printing the value.
 
-## 6. Licensing — say it exactly
-
-| Products | License |
-|---|---|
-| `fabric-switchboard`, `project-observatory-dashboard`, `fabric-dashboards`, and the contributor tools (`passioncode`, `fabric-agent-adapter`) | `PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0`; a commercial license on request (contact@passioncode.ai) |
-| `project-observatory-contract` (the schemas) | MIT, so anyone can implement them |
-
-- Call these products **source-available**, never "open source", "open-source" or
-  "MIT". The short line: "Source-available under PolyForm Noncommercial or Internal
-  Use; commercial license on request."
-- Versions already released under MIT stay MIT, and each `LICENSE` names the last one.
-  Never claim otherwise.
-- Contributions are accepted under the repository's `CLA.md`; the PR template carries
-  the "I agree to CLA.md" box.
-- The PolyForm texts are verbatim; never edit them.
+## 6. Licensing and the repository standard
+
+- **Every repository** is open source under the GNU AGPL-3.0, or available under a commercial
+  license from PassionCode.ai (contact@passioncode.ai):
+  `AGPL-3.0-only OR LicenseRef-PassionCode-Commercial` (Fabric ADR-0092; the knowledge base
+  `licensing.md` owns it). Copyright: Siarhei Sheleh. No price or term is stated anywhere.
+- `LICENSE`, `COMMERCIAL-LICENSE.md` and `CLA.md` are copied **byte for byte** from the knowledge
+  base's `templates/`; every manifest and SKILL.md `license:` carries the expression.
+- A version released earlier keeps its licence — MIT or PolyForm Noncommercial or Internal Use —
+  and the README may say which. Never write that a released version changed.
+- The README's `## License` section uses the knowledge base wording and names the earlier
+  licences: "Open source under the GNU AGPL-3.0. A commercial license is available for use that
+  does not meet the AGPL's terms — contact@passioncode.ai."
+- Contributions are accepted under the repository's `CLA.md`; the PR template carries the
+  "I agree to CLA.md" box.
+- **The repository standard** (the knowledge base `repository-standard.md`): README first heading
+  `# <Full name>`, `## Quick start for a new teammate` (Install, Configure, MCP — the registration
+  command and one proving call verified with a real client in a temporary config — and Develop)
+  and `## License`; `AGENTS.md` opens with the template's *Read first* block and ends with
+  *After work*; `CLAUDE.md` starts with `@AGENTS.md`; `SECURITY.md` in public repositories.
+  org-index `python3 scripts/check_format.py` checks it (offline: siblings `org-index`,
+  `fabric-workspace` and the repository, then `--offline --repo <repo>`); it reports 0 before
+  you call a repository done.
+- The operator's own agents are outside the organization and this licence: their licence is the
+  operator's choice, and nothing about them is published.
 
 Read [publishing](references/publishing.md) when adding or changing a license, a
 manifest's `license` field, `CLA.md` or a PR template.
@@ -209,4 +236,5 @@ skill's: `super-ux`, `sheleg-design` and `copywriting`.
 
 Report: the repository and branch; the landed commit or the PR URL; each gate command
 with its exit code; the hosted CI state (ran, blocked, or nightly pending); the handoff
-path; and the one next task.
+path; the knowledge base page you updated, or that no cross-repository fact changed; and the
+one next task.

package/payload/plugins/passioncode/skills/working-in-passioncode/references/publishing.md

@@ -13,41 +13,50 @@ change to a license, a manifest's `license` field, `CLA.md` or a PR template.
 
 ## The license, file by file
 
-The source-available expression is
-`PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0`; a commercial
-license is offered on request at contact@passioncode.ai. The schemas in
-`project-observatory-contract` are MIT instead. To relicense a repository, copy the
-`LICENSE` of one already relicensed (this launcher's, for instance) and change only the
-MIT-history sentence — the copyright line and the Required Notice stay as they are.
+Every repository is open source under the GNU AGPL-3.0, or available under a commercial
+license from PassionCode.ai (contact@passioncode.ai): SPDX
+`AGPL-3.0-only OR LicenseRef-PassionCode-Commercial` (Fabric ADR-0092). The owning page is the
+knowledge base's `licensing.md`; the file list is its `repository-standard.md`, and org-index
+`scripts/check_format.py` (rules F7–F11) checks it. The three licence files are **copied byte
+for byte** from the knowledge base's `templates/` — never retyped, reflowed or "fixed".
 
 | File | What it carries |
 |---|---|
-| `LICENSE` | the copyright line, the two licenses, a one-paragraph summary marked as not part of either license, one sentence naming which earlier releases stay MIT, the Required Notice, then both PolyForm texts verbatim |
-| `CLA.md` | the contributor license agreement, at the repository root |
-| `CONTRIBUTING.md` | says contributions are accepted under `CLA.md` |
+| `LICENSE` | `templates/LICENSE-AGPL-3.0.txt`, the unmodified AGPL-3.0 text (SHA-256 `0d96a4ff…abcb0`) |
+| `COMMERCIAL-LICENSE.md` | `templates/COMMERCIAL-LICENSE.md` |
+| `CLA.md` | `templates/CLA.md`, in every repository, private ones included |
+| `SECURITY.md` | every public repository: report privately to contact@passioncode.ai |
+| `CONTRIBUTING.md` | only when the repository adds rules; says contributions are accepted under `CLA.md` |
 | `.github/pull_request_template.md` | a checkbox "I agree to CLA.md"; any existing template content is kept |
-| `package.json` | `"license"` set to the SPDX expression |
+| `package.json` | `"license"` set to the SPDX expression; `files` ships `LICENSE` and `COMMERCIAL-LICENSE.md` |
 | `.claude-plugin/plugin.json`, marketplace entries | `"license"` set to the SPDX expression |
 | SKILL.md front matter | `license:` set to the SPDX expression |
-| `pyproject.toml` | `license` as an SPDX expression (PEP 639), which needs `setuptools>=77` in `build-system` |
-| `Cargo.toml` | `license-file = "LICENSE"` instead of `license`, and `publish = false` |
+| `pyproject.toml`, `Cargo.toml` | `license = "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial"` |
 
-- The PolyForm texts are copied verbatim. Never edit, abridge or "fix" them.
-- The MIT sentence names the real last MIT release — for example "Versions up to and
-  including v0.8.1 of this repository were released under the MIT License; those
-  releases remain available under MIT." For a repository with no release: "Commits
-  before <sha> …".
-- A published MIT release stays MIT. Never write that it changed.
+- A version released earlier keeps the licence it was released under — MIT or PolyForm
+  Noncommercial or Internal Use. Never write that it changed; the README may say which.
+- Third-party code keeps its own licence and notice (vendored dependencies, imported templates).
+- The operator's own agents are outside the organization and outside this licence: their
+  licence is the operator's choice, and nothing about them is published.
 
 ## Wording
 
-- The products are **source-available**. Never "open source", "open-source" or "MIT"
-  for them — in a README, the site, the profile, a description or JSON-LD.
-- The short line: "Source-available under PolyForm Noncommercial or Internal Use;
-  commercial license on request."
-- The tagline is "The agent-agnostic operating system for AI-native teams." and "A
-  toolkit for AI-native teams."; the category line is "From vibe coding to passion
-  coding."
+- The README section, word for word apart from the versions:
+
+  ```markdown
+  ## License
+
+  Open source under the [GNU AGPL-3.0](LICENSE). A [commercial license](COMMERCIAL-LICENSE.md) is
+  available for use that does not meet the AGPL's terms — contact@passioncode.ai.
+  Versions before <first AGPL version> were released under <MIT | PolyForm Noncommercial or Internal Use>.
+  ```
+
+- "Source-available" and the PolyForm expression describe past releases only; never state
+  them as the current licence.
+- No price or term for the commercial licence is stated anywhere; point to
+  contact@passioncode.ai.
+- Positioning and names come from the knowledge base (`vision.md`, `principles.md` §2); do not
+  restate a tagline from memory.
 
 ## The privacy gate
 
@@ -70,7 +79,8 @@ MIT-history sentence — the copyright line and the Required Notice stay as they
 - Product metadata: author and owner **PassionCode.ai**, URL `https://passioncode.ai/`.
   The site names the author by first name only; do not add full names or biographies to
   product surfaces.
-- Public documents do not link private repositories. org-index may be linked for the
-  map and the rules only.
+- Public documents do not link private repositories. org-index and the knowledge base
+  (fabric-workspace `knowledge/`, published at wiki.passioncode.ai/knowledge) may be linked for
+  the map and the rules only.
 - Security and conduct contact: contact@passioncode.ai, plus GitHub private
   vulnerability reporting on a public repository.