@passioncode-ai/passioncode 0.1.13 → 0.1.14

package/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 0.1.14 - 2026-10-01
+
+### Changed
+
+- Fabric Agent Adapter 0.5.5 in the set (`family.json` pins `v0.5.5`, was `v0.5.4`): its shipped
+  docs no longer call the public Fabric Agent Contract private; no behaviour changes.
+- Observatory Log 0.13.0 in the set (`family.json` pins Project Observatory `v0.10.0`, was
+  `v0.8.2`, which shipped plugin 0.12.3): the plugin's licence metadata is `AGPL-3.0-only OR
+  LicenseRef-PassionCode-Commercial`, and `handling-secrets` documents the new Cloudflare presets.
+- The README, `--help`, `family.json` and `package.json` descriptions say what is true: the
+  launcher installs the set listed in `family.json`, not every PassionCode.ai skill and plugin.
+
 ## 0.1.13 - 2026-10-01
 
 ### Changed

package/README.md

@@ -1,8 +1,8 @@
 # PassionCode.ai launcher
 
-The **PassionCode.ai launcher** (`@passioncode-ai/passioncode` on npm) installs and updates every
-PassionCode.ai agent skill and plugin — the Fabric Agent Adapter, Observatory Log and the
-organization's working rules — for Claude Code and every other agent on your machine, as one set.
+The **PassionCode.ai launcher** (`@passioncode-ai/passioncode` on npm) installs and updates the
+PassionCode.ai skills and plugins listed in [`family.json`](family.json) — the Fabric Agent Adapter,
+Observatory Log and the organization's working rules — for Claude Code and every other agent on your machine, as one set.
 It is how a teammate's agent gets the tools that build for Fabric, PassionCode.ai's CEO AI agent,
 and it works on its own: no Fabric install, no account, no key.
 

package/bin/passioncode.js

@@ -2,7 +2,7 @@
 'use strict';
 const L = require('../lib/launcher');
 
-const HELP = `passioncode — every PassionCode.ai skill, for every agent on this machine
+const HELP = `passioncode — the PassionCode.ai skill set (family.json), for every agent on this machine
 
   npx @passioncode-ai/passioncode@latest update [--dry-run] [--json]     install or update the whole set
   npx @passioncode-ai/passioncode@latest status [--json]                 what is installed where

package/family.json

@@ -2,13 +2,13 @@
   "name": "passioncode",
   "owner": "passioncode-ai",
   "displayName": "PassionCode.ai",
-  "description": "Every PassionCode.ai agent skill, for Claude Code and every other agent on the machine, updated as one set.",
+  "description": "The PassionCode.ai agent skills listed in this set, for Claude Code and every other agent on the machine, updated as one set.",
   "members": [
     {
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.5.4",
+      "ref": "v0.5.5",
       "kind": "plugin",
       "path": "plugins/fabric-agent-adapter",
       "legacyPluginIds": [
@@ -22,7 +22,7 @@
       "name": "observatory-log",
       "displayName": "Observatory Log",
       "repo": "passioncode-ai/project-observatory-dashboard",
-      "ref": "v0.8.2",
+      "ref": "v0.10.0",
       "kind": "plugin",
       "path": "observatory/engine/skill/plugins/observatory-log",
       "legacyPluginIds": [

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@passioncode-ai/passioncode",
-  "version": "0.1.13",
-  "description": "Every PassionCode.ai agent skill — Fabric Agent Adapter, Observatory Log and the organisation's working rules — for Claude Code and every other agent on the machine, updated as one set.",
+  "version": "0.1.14",
+  "description": "The PassionCode.ai agent skill set — Fabric Agent Adapter, Observatory Log and the organisation's working rules — for Claude Code and every other agent on the machine, updated as one set.",
   "bin": {
     "passioncode": "bin/passioncode.js"
   },

package/payload/.claude-plugin/marketplace.json

@@ -5,13 +5,13 @@
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"
   },
-  "description": "Every PassionCode.ai agent skill, for Claude Code and every other agent on the machine, updated as one set.",
+  "description": "The PassionCode.ai agent skills listed in this set, for Claude Code and every other agent on the machine, updated as one set.",
   "plugins": [
     {
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "source": "./plugins/fabric-agent-adapter",
-      "version": "0.5.4",
+      "version": "0.5.5",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
       "author": {
         "name": "PassionCode.ai",
@@ -23,19 +23,19 @@
       "name": "observatory-log",
       "displayName": "Observatory Log",
       "source": "./plugins/observatory-log",
-      "version": "0.12.3",
+      "version": "0.13.0",
       "description": "Records what changed in a watched project at the end of every turn, and asks for the one thing a diff cannot contain: why.",
       "author": {
         "name": "PassionCode.ai",
         "url": "https://passioncode.ai/"
       },
-      "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
+      "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial"
     },
     {
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "source": "./plugins/passioncode",
-      "version": "0.1.13",
+      "version": "0.1.14",
       "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",

package/payload/manifest.json

@@ -1,15 +1,15 @@
 {
   "family": "passioncode",
-  "version": "0.1.13",
+  "version": "0.1.14",
   "release": true,
   "members": [
     {
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.5.4",
-      "commit": "358c5296d14c593760c73795fa17c77658f9286c",
-      "version": "0.5.4",
+      "ref": "v0.5.5",
+      "commit": "f302123b97b0c4aaf2b447f6054b583b62b3caf3",
+      "version": "0.5.5",
       "via": "clone of https://***@github.com/passioncode-ai/fabric-agent-adapter.git",
       "skills": [
         "adapting-projects-to-fabric",
@@ -22,7 +22,7 @@
       "legacyMarketplaces": [
         "fabric-agent-adapter"
       ],
-      "contentHash": "sha256:577bc17f08e963b7b3ddea55f1c50d9e4c5f0756180f59fe0f298ca055684a9d",
+      "contentHash": "sha256:6e4ba6f36e9d2f62a621a1dee0d0feb5532c7e959acdf4bfa5c8edfa82304711",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
       "author": {
         "name": "PassionCode.ai",
@@ -34,9 +34,9 @@
       "name": "observatory-log",
       "displayName": "Observatory Log",
       "repo": "passioncode-ai/project-observatory-dashboard",
-      "ref": "v0.8.2",
-      "commit": "4f3591de65cd9a28de18212d53da966405f46f22",
-      "version": "0.12.3",
+      "ref": "v0.10.0",
+      "commit": "e1e0110f6618b9541f3e204a548c283005cb6fa9",
+      "version": "0.13.0",
       "via": "clone of https://***@github.com/passioncode-ai/project-observatory-dashboard.git",
       "skills": [
         "explaining-changes",
@@ -49,28 +49,28 @@
       "legacyMarketplaces": [
         "observatory-log"
       ],
-      "contentHash": "sha256:0ddb7efdfd9977c55d65e58a3cd8dc9cb9da3b8eb9ab02c83e3a159ea233017b",
+      "contentHash": "sha256:1514d04e995ecd71df0e0518787d76c9320b02f8174824d08c958846b860fd42",
       "description": "Records what changed in a watched project at the end of every turn, and asks for the one thing a diff cannot contain: why.",
       "author": {
         "name": "PassionCode.ai",
         "url": "https://passioncode.ai/"
       },
-      "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
+      "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial"
     },
     {
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "repo": "passioncode-ai/passioncode",
-      "ref": "v0.1.13",
+      "ref": "v0.1.14",
       "commit": null,
-      "version": "0.1.13",
+      "version": "0.1.14",
       "via": "this repository",
       "skills": [
         "working-in-passioncode"
       ],
       "legacyPluginIds": [],
       "legacyMarketplaces": [],
-      "contentHash": "sha256:8ee5265a68efc3d68b92f2e4526b0d4280282bf08cae8ee55ed383b5b0fd4c10",
+      "contentHash": "sha256:a09752a2968ea3bd192898fe28642166548786a6396050f57e02f36ea9fe2742",
       "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",

package/payload/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
-  "version": "0.5.4",
+  "version": "0.5.5",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -2,10 +2,10 @@
 name: adapting-projects-to-fabric
 description: Use when adapting an existing agent, MCP server, A2A peer, HTTP service, or terminal CLI to the Fabric Agent Contract—choosing MCP/A2A/local-runner, scaffolding a provider bundle, or checking Fabric compatibility; also for «подключить проект к Fabric» or «сделать агента совместимым с Fabric». NOT for building the Fabric host/orchestrator, configuring an MCP client, or a brand-new agent — that is creating-fabric-agents.
 license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
-compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned private fabric-agent-contract checkout. Works without those tools in an explicitly degraded structural-check mode.
+compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.5.4"
+  version: "0.5.5"
   contract-version: "0.1.0"
   contract-commit: "74d3852f122f5ca5cbc4138a201483531dfa5006"
 ---
@@ -74,7 +74,7 @@ Use exactly:
 
 Read the pinned contract's guide
 `docs/guides/connecting-compatible-agents.md`, the selected profile specification, and
-the referenced JSON Schemas before implementing protocol details. If the private checkout
+the referenced JSON Schemas before implementing protocol details. If the contract checkout
 is unavailable, continue only through local structure and mark exact schema validation
 `NOT_RUN`; do not reconstruct missing normative rules from memory.
 

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -15,7 +15,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Python 3.9+ or Node.js 20+ for the kits; the probe needs Python 3.9+. launchd steps are macOS-only (Linux services use lifecycle manager none until a systemd adapter exists). No network or package install; the contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.5.4"
+  version: "0.5.5"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
   extension-commit: "74d3852f122f5ca5cbc4138a201483531dfa5006"

package/payload/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -2,10 +2,10 @@
 name: creating-fabric-agents
 description: Use when designing and building a NEW agent or provider that must be Fabric-compatible from its first commit — «создай агента, совместимого с фабрикой Passion Code», «новый агент под Fabric», "create a fabric-compatible agent", "build a new Fabric provider", "fabric-ready agent from scratch". Runs the intake grill (capability, named consumer, workflow-or-agent, MCP/A2A/local-runner profile, effect declarations), distils source projects into a knowledge pack whose recorded failures become planted eval fixtures, scaffolds the pinned contract bundle, and sets the two-clock eval expectation with the conformance report. NOT for adapting an existing project (use adapting-projects-to-fabric), building the Fabric host or orchestrator, or generic agent design where Fabric compatibility is not part of the request.
 license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
-compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned private fabric-agent-contract checkout. Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
+compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.5.4"
+  version: "0.5.5"
   contract-version: "0.1.0"
   contract-commit: "74d3852f122f5ca5cbc4138a201483531dfa5006"
 ---

package/payload/plugins/observatory-log/.claude-plugin/plugin.json

@@ -3,8 +3,8 @@
   "name": "observatory-log",
   "displayName": "Observatory Log",
   "description": "Records what changed in a watched project at the end of every turn, and asks for the one thing a diff cannot contain: why.",
-  "version": "0.12.3",
-  "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0",
+  "version": "0.13.0",
+  "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/payload/plugins/observatory-log/skills/explaining-changes/SKILL.md

@@ -13,9 +13,9 @@ description: >-
   message, a PR description or a changelog, and NOT for changing the typed
   registry — a registry change is `observatory_propose`, which is a different
   decision with different evidence.
-license: PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0
+license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 metadata:
-  version: "0.12.3"
+  version: "0.13.0"
 compatibility: >-
   Requires an initialized full Project Observatory installation to persist
   records. Uses its MCP server when available in the current host; the bundled

package/payload/plugins/observatory-log/skills/handling-secrets/SKILL.md

@@ -7,9 +7,9 @@ description: >-
   Keeps credential values out of prompts and command arguments, uses named slots,
   and records changes without copying values into reports. NOT for granting
   provider permissions or choosing a project's authentication architecture.
-license: PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0
+license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 metadata:
-  version: "0.12.3"
+  version: "0.13.0"
 compatibility: >-
   Requires an initialized full Project Observatory installation, Python 3.11+
   and local shell access on macOS or Linux. Provider operations additionally
@@ -29,7 +29,7 @@ names. Never ask the user to paste a credential into the conversation.
 2. Select the user's initialized `OBSERVATORY_HOME`. Run
    `python3 "$OBSERVATORY_ROOT/observatory.py" doctor`. A missing workspace
    needs the documented onboarding before secret operations.
-3. Run `python3 "$OBSERVATORY_ROOT/tools/skill_check.py" handling-secrets 0.12.3`.
+3. Run `python3 "$OBSERVATORY_ROOT/tools/skill_check.py" handling-secrets 0.13.0`.
    If stale, read the installed skill once and follow its compatible commands.
    Do not turn an unavailable version check into a retry loop.
 4. Inspect names using `tools/use_secret.py names PROJECT` or `tools/vault.py
@@ -90,6 +90,47 @@ Zone Read and DNS Write on that zone only, verified against its records and
 delivered to the vault slot on stdin; a second issue rolls the same token. Not
 an account-wide DNS token, and never the admin token in a script.
 
+A project whose Worker keeps data in D1 and must write it from a machine
+(`wrangler d1 execute --remote`) gets `cloudflare.py issue --preset d1-edit
+--account <slug> --vault <project>/<env>/<NAME>`: D1 Write on that one account,
+verified by listing its databases, delivered on stdin; a second issue rolls the
+same token. The result prints the account id — an account-owned token cannot
+find its account by itself, so pass it as `CLOUDFLARE_ACCOUNT_ID`.
+
+A project that must put and read objects in one R2 bucket (an off-site backup)
+gets `cloudflare.py issue --preset r2-bucket --account <slug> --bucket <name>
+[--jurisdiction eu] [--expire-days 30] --vault <project>/<env>/<PREFIX>`.
+The door creates the bucket if it is missing and sets its lifecycle through a
+setup token that it deletes before returning. It then grants Bucket Item Write on that
+bucket's resource only. Before anything is delivered, the S3 pair must prove a
+put, a get and a delete, and must be refused a bucket list. It lands in three
+slots on stdin: `<PREFIX>_ACCESS_KEY_ID`, `<PREFIX>_SECRET_ACCESS_KEY` and
+`<PREFIX>_ENDPOINT`. A second issue rolls the same token and keeps the key id.
+
+An application that sends transactional email through Cloudflare Email Service
+gets `cloudflare.py issue --preset email-send --account <slug> --vault
+<project>/<env>/<NAME>`: Email Sending Write and Read on that one account (the
+group exists at account level only), verified by listing its suppressions.
+Adding an Email Routing rule in one zone — one address to a Worker — is
+`--preset email-routing --zone <zone>`, and deploying that Worker with its KV
+namespace is `--preset workers-edit --account <slug>`. Each is its own token in
+its own slot. When a preset's groups are unknown, `cloudflare.py groups
+--account <slug> --match "<words>"` lists the catalogue's names and levels,
+read-only and without ids.
+
+A Fabric Inbox server's own token is `--preset fabric-inbox-server --account
+<slug> --vault <project>/<env>/<NAME>`; a token for one more account whose
+domains that server reads is `--preset fabric-inbox-account` issued from THAT
+account. Each carries the product's own permission list as two policies —
+account-level groups on the account, zone-level groups (Zone Read, Email
+Routing Rules, Zone Settings, DNS Write) on every zone of that account only —
+is verified by listing the account's Workers, and is named after its slot.
+The other-account token makes no storage and no sign-in there.
+
+Reading one account's Worker logs is `--preset workers-observability-read
+--account <slug> --vault <project>/<env>/<NAME>`: Workers Observability Read
+only, verified by the telemetry-keys query with the new value.
+
 By default, slots live under the private workspace's `secrets/projects/`.
 An explicitly configured `sources.secret_store` or `OBSERVATORY_VAULT_DIR`
 can select a separate private store. Such external stores are excluded from

package/payload/plugins/observatory-log/skills/tracking-resources/SKILL.md

@@ -13,9 +13,9 @@ description: >-
   figma-use), wiring analytics or pixels (ad-tracking), provisioning the resource
   with the provider's own tools, secrets (handling-secrets) or code changes inside
   the repository.
-license: PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0
+license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 metadata:
-  version: "0.12.3"
+  version: "0.13.0"
 compatibility: >-
   Requires a full Project Observatory installation with organizations.json
   configured; the observatory MCP server or its local CLI. Creating the resource

package/payload/plugins/passioncode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "passioncode",
   "displayName": "PassionCode.ai",
-  "version": "0.1.13",
+  "version": "0.1.14",
   "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check at session start that keeps the PassionCode.ai skill set current.",
   "author": {
     "name": "PassionCode.ai",