@passioncode-ai/passioncode 0.1.16 → 0.1.17

package/CHANGELOG.md

@@ -1,5 +1,12 @@
 # Changelog
 
+## 0.1.17 - 2026-10-01
+
+### Changed
+
+- Pin Fabric Agent Adapter v0.5.6 so the installed set carries its dashboard deep-link procedure and portable handoff checker. The Observatory Log and working-in-passioncode members keep their existing behavior.
+- Dashboard routing evidence belongs to the [adapter handoff](https://github.com/passioncode-ai/fabric-agent-adapter/blob/v0.5.6/docs/handoffs/2026-10-01-dashboard-links.md); the launcher installs these bytes through its existing plugin and agents-hub channels.
+
 ## 0.1.16 - 2026-10-01
 
 ### Fixed

package/family.json

@@ -8,7 +8,7 @@
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.5.5",
+      "ref": "v0.5.6",
       "kind": "plugin",
       "path": "plugins/fabric-agent-adapter",
       "legacyPluginIds": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/passioncode",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "description": "The PassionCode.ai agent skill set \u2014 Fabric Agent Adapter, Observatory Log and the organisation's working rules \u2014 for Claude Code and every other agent on the machine, updated as one set.",
   "bin": {
     "passioncode": "bin/passioncode.js"

package/payload/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "source": "./plugins/fabric-agent-adapter",
-      "version": "0.5.5",
+      "version": "0.5.6",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
       "author": {
         "name": "PassionCode.ai",
@@ -35,7 +35,7 @@
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "source": "./plugins/passioncode",
-      "version": "0.1.16",
+      "version": "0.1.17",
       "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",

package/payload/manifest.json

@@ -1,15 +1,15 @@
 {
   "family": "passioncode",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "release": true,
   "members": [
     {
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.5.5",
-      "commit": "f302123b97b0c4aaf2b447f6054b583b62b3caf3",
-      "version": "0.5.5",
+      "ref": "v0.5.6",
+      "commit": "1b473987feeeb04ee67a1122d6baadc83bc03816",
+      "version": "0.5.6",
       "via": "clone of https://***@github.com/passioncode-ai/fabric-agent-adapter.git",
       "skills": [
         "adapting-projects-to-fabric",
@@ -22,7 +22,7 @@
       "legacyMarketplaces": [
         "fabric-agent-adapter"
       ],
-      "contentHash": "sha256:6e4ba6f36e9d2f62a621a1dee0d0feb5532c7e959acdf4bfa5c8edfa82304711",
+      "contentHash": "sha256:bf48b5d4c4163d43485e85c73e393a71b31842ae70bbd7133c1d5a769f8bc9eb",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
       "author": {
         "name": "PassionCode.ai",
@@ -61,16 +61,16 @@
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "repo": "passioncode-ai/passioncode",
-      "ref": "v0.1.16",
+      "ref": "v0.1.17",
       "commit": null,
-      "version": "0.1.16",
+      "version": "0.1.17",
       "via": "this repository",
       "skills": [
         "working-in-passioncode"
       ],
       "legacyPluginIds": [],
       "legacyMarketplaces": [],
-      "contentHash": "sha256:15d7a746ecf165e574f87a28af46bd0ea04255b86cc3351ee0d96778bb741447",
+      "contentHash": "sha256:b8f988dc498dbd00ef9e1d0e3fb93fe9069d8d8758623ff47bd225d3a63fffa4",
       "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",

package/payload/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
-  "version": "0.5.5",
+  "version": "0.5.6",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -5,7 +5,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.5.5"
+  version: "0.5.6"
   contract-version: "0.1.0"
   contract-commit: "74d3852f122f5ca5cbc4138a201483531dfa5006"
 ---
@@ -213,3 +213,15 @@ Report:
 
 Never summarize the outcome as “Fabric-compatible” unless all required admission gates
 passed against a real provider and the project binding is valid.
+
+## Dashboard handoff — also for consumers
+
+When handing a registered service dashboard to a person, or writing the generated
+agent's completion/notification instructions, read and apply
+[dashboard links](references/dashboard-links.md): use the host's `open_link`,
+check the target device and host, and run the bundled output gate before delivery.
+An installed host failure never means browser fallback. This applies in Claude
+Code, Codex and other providers; it needs no host-specific hook. MCP unavailable:
+report the unresolved capability or use an approved project resolver; no automatic
+client configuration. Python unavailable: perform the reference's manual checks
+and report the executable gate NOT_RUN. Headless agents need no dashboard.

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/references/dashboard-links.md

@@ -0,0 +1,92 @@
+# Dashboard links — producer and consumer rule
+
+Read when an agent creates a dashboard, implements `<tool> dashboard`, or hands
+an existing Fabric service dashboard to a person. This also applies to generated
+agent instructions and completion messages. Headless agents need no dashboard;
+API origins, external docs and OAuth links are not dashboard actions.
+
+## Resolve, then hand over
+
+1. Discover the target computer and exact registered `service.id.instance`.
+   Never guess a key from a project name or port. `default` and `preview` differ.
+2. Discover Fabric Dashboards tools by their descriptions; provider tool prefixes
+   differ. Use `link` with service + path (including the page's query/fragment),
+   or pass a known local service URL to it. For a root, `list_services.open_link`
+   is also authoritative. Hand back **the returned `open_link` as the primary
+   dashboard action**. Do not rebuild its URI or double-encode `path`.
+3. Use `host_status`, where offered, to distinguish available, not_installed,
+   unknown, incompatible and handler_mismatch. It is a read, not a GUI launch.
+   With an older server lacking that tool, host readiness is unverified: use a
+   compatible host resolver or report the limitation, not presumed absence.
+4. A request for a link opens nothing. A request to open uses the host `open`
+   tool/approved opener, which starts or focuses the existing Fabric Dashboards
+   and reuses the service view. `fallback=never` forbids a browser; `if_absent`
+   permits one only for confirmed absence. Discover schema support first: older
+   `open` implementations may silently fall back on failure and are not strict.
+5. An installed host that failed to open is **not absent**. Report the failure;
+   do not silently launch HTTP in a browser, a second server, `npm run dev`, or
+   another standalone dashboard. A stopped backend stays on its host status/Start
+   surface; automatic wake-up follows the host's lifecycle grant and held-off state.
+6. Preserve an unavailable/error result. `accepted_by_os` proves dispatch only,
+   not page readiness, a successful login, or a completed job. Links carry no
+   bearer tokens or login codes. The host handles dashboard authentication.
+
+## Device and channel
+
+A custom scheme opens on the device receiving it. A phone's localhost is not the
+computer. For a remote chat use a supported, authorized action addressed to the
+computer (device + service + page) and wait for its receipt. If no such transport
+exists, say so; a skill is not a relay. If a client strips custom schemes, provide
+a copyable URI with its target computer or the supported remote action; do not
+silently replace it with HTTP or promise that Markdown is clickable.
+
+## Portable output gate
+
+Before emitting an executable dashboard action in a managed renderer, run
+`scripts/check_dashboard_link.py` **from this skill's own directory** with one
+JSON object on stdin. It exits 0 for an allowed action, 1 for a refused/malformed
+one; it opens nothing and performs no network, discovery or authentication.
+Its trusted context is supplied by the host, not by untrusted model output:
+
+```json
+{
+  "resolved": {
+    "service": "example-agent.default",
+    "open_link": "fabric-dashboards://service/example-agent.default?path=%2Fdashboard",
+    "http_url": "http://127.0.0.1:47195/dashboard"
+  },
+  "host": {"state": "available"},
+  "target_device": "workstation",
+  "viewer_device": "workstation",
+  "fallback": "never",
+  "action": {"kind": "native_link", "url": "fabric-dashboards://service/example-agent.default?path=%2Fdashboard"}
+}
+```
+
+`native_link` must equal the resolved open_link, with an available host on the
+viewer's device. `browser_link` must equal http_url, with confirmed not_installed,
+if_absent policy and the same device. `remote_open` instead contains `device_id`,
+`service` and optional `path`, exactly matching the target and resolved page;
+its acceptance does not authorize or deliver it. Enforce grants/dedup/expiry in
+the transport. Unknown or failed host status produces no executable local action.
+A separately labelled copyable link for diagnosis is not an open action.
+
+Add this check to the generated project's dashboard completion/notification
+renderer before delivery. A raw-HTTP primary action with an available host is the
+negative fixture; a valid native action is the positive one. Keep diagnostics
+separate. This gate checks structured actions, not arbitrary prose: a CLI invocation
+or instructions alone do not prove all final answers from every agent are filtered.
+
+## Degradation
+
+- Claude Code, Codex and other hosts use this same procedure; no hook or plugin-only
+  path is required. Skills must be activated/loaded; install does not intercept every answer.
+- MCP absent: report unresolved host capability once, use the project's approved
+  resolver/CLI if available. Do not write machine or agent MCP config automatically.
+- Python absent: perform the comparisons above manually; mark the executable gate
+  NOT_RUN. Do not label the output mechanically validated.
+
+Syntax is owned by Fabric Dashboards and `@passioncode-ai/fabric-service-host`:
+[ADR-0005](https://github.com/passioncode-ai/fabric-dashboards/blob/51a7a80acf42781d7bec304cc87c655d48cc309b/docs/adr/0005-service-links.md).
+The gate accepts canonical links and the legacy `open?service=` form returned by
+older hosts; it does not generate either dialect or redefine the Fabric wire contract.

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/check_dashboard_link.py

@@ -0,0 +1,86 @@
+#!/usr/bin/env python3
+"""Check one structured dashboard handoff from stdin. No I/O effects; exit 0/1.
+
+The caller supplies a trusted host resolver result and observed device/host context.
+This is an output correctness gate, not authentication, discovery, or a relay.
+"""
+import json
+import re
+import sys
+from urllib.parse import parse_qs, urlsplit
+
+
+def require(condition, reason):
+    if not condition:
+        raise ValueError(reason)
+
+
+def safe_path(path):
+    return (isinstance(path, str) and path.startswith('/') and not path.startswith('//')
+            and len(path) <= 2048 and not re.search(r'[\\\x00-\x1f\x7f]', path))
+
+
+def check(data):
+    require(isinstance(data, dict), 'invalid_input')
+    resolved, host, action = (data.get(k) for k in ('resolved', 'host', 'action'))
+    require(all(isinstance(v, dict) for v in (resolved, host, action)), 'missing_context')
+    service, native, http = (resolved.get(k) for k in ('service', 'open_link', 'http_url'))
+    require(isinstance(service, str) and re.fullmatch(r'[a-z0-9][a-z0-9-]*\.[a-z0-9][a-z0-9-]*', service), 'invalid_service')
+    require(isinstance(native, str) and isinstance(http, str), 'missing_resolved_links')
+    require(not re.search(r'[\\\x00-\x20\x7f]', native + http), 'unsafe_url')
+    deep, plain = urlsplit(native), urlsplit(http)
+    require(deep.scheme == 'fabric-dashboards' and not deep.username and not deep.password and not deep.port and not deep.fragment, 'invalid_deep_link')
+    query = parse_qs(deep.query, keep_blank_values=True, strict_parsing=True)
+    if deep.netloc == 'service':
+        require(deep.path in ('/' + service, '/' + service + '/') and set(query) <= {'path'}, 'wrong_service_or_parameter')
+    else:
+        require(deep.netloc == 'open' and deep.path in ('', '/') and query.get('service') == [service] and set(query) <= {'service', 'path'}, 'invalid_legacy_link')
+    require('path' not in query or len(query['path']) == 1, 'duplicate_path')
+    page = query.get('path', [None])[0]
+    require(page is None or safe_path(page), 'unsafe_path')
+    require(plain.scheme == 'http' and plain.hostname in ('127.0.0.1', 'localhost', '::1') and plain.port is not None
+            and not plain.username and not plain.password, 'invalid_http_fallback')
+    http_page = plain.path + ('?' + plain.query if plain.query else '') + ('#' + plain.fragment if plain.fragment else '')
+    require(safe_path(http_page) and http_page == (page or '/'), 'mismatched_page')
+    sensitive = {'token', 'access_token', 'refresh_token', 'password', 'secret', 'login_code'}
+    page_query = parse_qs(urlsplit(http_page).query)
+    require(not sensitive.intersection(k.lower() for k in page_query), 'credential_query')
+    require(urlsplit(http_page).path != '/fabric/v1/login', 'login_link_is_not_dashboard')
+    state = host.get('state')
+    require(state in ('available', 'not_installed', 'unknown', 'incompatible', 'handler_mismatch', 'unsupported'), 'unknown_host_state')
+    target, viewer = data.get('target_device'), data.get('viewer_device')
+    require(all(isinstance(v, str) and 0 < len(v) <= 200 for v in (target, viewer)), 'missing_device')
+    fallback = data.get('fallback', 'if_absent')
+    require(fallback in ('if_absent', 'never'), 'invalid_fallback')
+    kind = action.get('kind')
+    if kind == 'remote_open':
+        require(set(action) <= {'kind', 'device_id', 'service', 'path'}, 'unexpected_action_field')
+        require(action.get('device_id') == target and action.get('service') == service and action.get('path') == page, 'wrong_remote_target')
+        require(viewer != target, 'remote_action_on_local_device')
+    elif kind == 'native_link':
+        require(set(action) == {'kind', 'url'} and action.get('url') == native, 'not_host_provided_link')
+        require(viewer == target, 'wrong_viewer_device')
+        require(state == 'available', 'host_unavailable')
+    elif kind == 'browser_link':
+        require(set(action) == {'kind', 'url'} and action.get('url') == http, 'not_resolved_http_url')
+        require(viewer == target, 'wrong_viewer_device')
+        require(state == 'not_installed' and fallback == 'if_absent', 'browser_fallback_forbidden')
+    else:
+        raise ValueError('unsupported_dashboard_action')
+    return {'ok': True, 'kind': kind}
+
+
+def main():
+    try:
+        raw = sys.stdin.read(65537)
+        require(len(raw) <= 65536, 'input_too_large')
+        result = check(json.loads(raw))
+    except (ValueError, TypeError, KeyError, AttributeError):
+        # Fixed reasons only: never echo a submitted URL, token or JSON blob.
+        result = {'ok': False, 'reason': 'dashboard_handoff_refused'}
+    print(json.dumps(result))
+    return 0 if result['ok'] else 1
+
+
+if __name__ == '__main__':
+    sys.exit(main())

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: building-fabric-services
 description: >-
-  Use when building or running an agent as a long-lived local service with a dashboard on
+  Use when handing out or opening a Fabric service dashboard, or building a local agent service on
   a macOS machine — «сделай агенту дашборд», «локальный сервис агента», «дашборд должен всегда
   работать и не плодить копии», «где агенту хранить настройки», «подключи агента к Fabric
   Dashboards», "make this agent a local service", "always-on dashboard", "fabric-service
@@ -12,10 +12,10 @@ description: >-
   reference kits and a live conformance probe. NOT for a one-off script or cron job, a hosted
   SaaS, the provider manifest itself (adapting-projects-to-fabric), or building Fabric Dashboards.
 license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
-compatibility: Python 3.9+ or Node.js 20+ for the kits; the probe needs Python 3.9+. launchd steps are macOS-only (Linux services use lifecycle manager none until a systemd adapter exists). No network or package install; the contract checkout is optional.
+compatibility: Python 3.9+ or Node.js 20+ for the kits; the probe needs Python 3.9+. launchd steps are macOS-only (Linux services use lifecycle manager none until a systemd adapter exists). Dashboard handoff optionally uses Fabric Dashboards MCP link/host_status/open; without it, report unresolved host capability. The contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.5.5"
+  version: "0.5.6"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
   extension-commit: "74d3852f122f5ca5cbc4138a201483531dfa5006"
@@ -275,3 +275,15 @@ Report: the `id`, port and surfaces with the Step 0 answers; files created or ch
 the probe table verbatim with every `NOT_RUN` explained; the lock and kill-9 results
 with pids; and the one next command. Never call a service conformant while the probe
 reports a `FAIL`.
+
+## Dashboard handoff — also for consumers
+
+When handing a registered service dashboard to a person, or writing the generated
+agent's completion/notification instructions, read and apply
+[dashboard links](references/dashboard-links.md): use the host's `open_link`,
+check the target device and host, and run the bundled output gate before delivery.
+An installed host failure never means browser fallback. This applies in Claude
+Code, Codex and other providers; it needs no host-specific hook. MCP unavailable:
+report the unresolved capability or use an approved project resolver; no automatic
+client configuration. Python unavailable: perform the reference's manual checks
+and report the executable gate NOT_RUN. Headless agents need no dashboard.

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/dashboard-links.md

@@ -0,0 +1,92 @@
+# Dashboard links — producer and consumer rule
+
+Read when an agent creates a dashboard, implements `<tool> dashboard`, or hands
+an existing Fabric service dashboard to a person. This also applies to generated
+agent instructions and completion messages. Headless agents need no dashboard;
+API origins, external docs and OAuth links are not dashboard actions.
+
+## Resolve, then hand over
+
+1. Discover the target computer and exact registered `service.id.instance`.
+   Never guess a key from a project name or port. `default` and `preview` differ.
+2. Discover Fabric Dashboards tools by their descriptions; provider tool prefixes
+   differ. Use `link` with service + path (including the page's query/fragment),
+   or pass a known local service URL to it. For a root, `list_services.open_link`
+   is also authoritative. Hand back **the returned `open_link` as the primary
+   dashboard action**. Do not rebuild its URI or double-encode `path`.
+3. Use `host_status`, where offered, to distinguish available, not_installed,
+   unknown, incompatible and handler_mismatch. It is a read, not a GUI launch.
+   With an older server lacking that tool, host readiness is unverified: use a
+   compatible host resolver or report the limitation, not presumed absence.
+4. A request for a link opens nothing. A request to open uses the host `open`
+   tool/approved opener, which starts or focuses the existing Fabric Dashboards
+   and reuses the service view. `fallback=never` forbids a browser; `if_absent`
+   permits one only for confirmed absence. Discover schema support first: older
+   `open` implementations may silently fall back on failure and are not strict.
+5. An installed host that failed to open is **not absent**. Report the failure;
+   do not silently launch HTTP in a browser, a second server, `npm run dev`, or
+   another standalone dashboard. A stopped backend stays on its host status/Start
+   surface; automatic wake-up follows the host's lifecycle grant and held-off state.
+6. Preserve an unavailable/error result. `accepted_by_os` proves dispatch only,
+   not page readiness, a successful login, or a completed job. Links carry no
+   bearer tokens or login codes. The host handles dashboard authentication.
+
+## Device and channel
+
+A custom scheme opens on the device receiving it. A phone's localhost is not the
+computer. For a remote chat use a supported, authorized action addressed to the
+computer (device + service + page) and wait for its receipt. If no such transport
+exists, say so; a skill is not a relay. If a client strips custom schemes, provide
+a copyable URI with its target computer or the supported remote action; do not
+silently replace it with HTTP or promise that Markdown is clickable.
+
+## Portable output gate
+
+Before emitting an executable dashboard action in a managed renderer, run
+`scripts/check_dashboard_link.py` **from this skill's own directory** with one
+JSON object on stdin. It exits 0 for an allowed action, 1 for a refused/malformed
+one; it opens nothing and performs no network, discovery or authentication.
+Its trusted context is supplied by the host, not by untrusted model output:
+
+```json
+{
+  "resolved": {
+    "service": "example-agent.default",
+    "open_link": "fabric-dashboards://service/example-agent.default?path=%2Fdashboard",
+    "http_url": "http://127.0.0.1:47195/dashboard"
+  },
+  "host": {"state": "available"},
+  "target_device": "workstation",
+  "viewer_device": "workstation",
+  "fallback": "never",
+  "action": {"kind": "native_link", "url": "fabric-dashboards://service/example-agent.default?path=%2Fdashboard"}
+}
+```
+
+`native_link` must equal the resolved open_link, with an available host on the
+viewer's device. `browser_link` must equal http_url, with confirmed not_installed,
+if_absent policy and the same device. `remote_open` instead contains `device_id`,
+`service` and optional `path`, exactly matching the target and resolved page;
+its acceptance does not authorize or deliver it. Enforce grants/dedup/expiry in
+the transport. Unknown or failed host status produces no executable local action.
+A separately labelled copyable link for diagnosis is not an open action.
+
+Add this check to the generated project's dashboard completion/notification
+renderer before delivery. A raw-HTTP primary action with an available host is the
+negative fixture; a valid native action is the positive one. Keep diagnostics
+separate. This gate checks structured actions, not arbitrary prose: a CLI invocation
+or instructions alone do not prove all final answers from every agent are filtered.
+
+## Degradation
+
+- Claude Code, Codex and other hosts use this same procedure; no hook or plugin-only
+  path is required. Skills must be activated/loaded; install does not intercept every answer.
+- MCP absent: report unresolved host capability once, use the project's approved
+  resolver/CLI if available. Do not write machine or agent MCP config automatically.
+- Python absent: perform the comparisons above manually; mark the executable gate
+  NOT_RUN. Do not label the output mechanically validated.
+
+Syntax is owned by Fabric Dashboards and `@passioncode-ai/fabric-service-host`:
+[ADR-0005](https://github.com/passioncode-ai/fabric-dashboards/blob/51a7a80acf42781d7bec304cc87c655d48cc309b/docs/adr/0005-service-links.md).
+The gate accepts canonical links and the legacy `open?service=` form returned by
+older hosts; it does not generate either dialect or redefine the Fabric wire contract.

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/surfaces-and-auth.md

@@ -17,8 +17,9 @@
 ## CLI for people and scripts
 
 `<tool> service status|start|stop|restart` (launchctl on the label, then the
-well-known document), `<tool> dashboard` (asks for a login code and opens it; with
-Fabric Dashboards installed it opens the service there instead), `<tool> doctor --json`
+well-known document), `<tool> dashboard` (resolve the exact service and use the Fabric Dashboards host
+opener first; installed-but-failed never falls back to a browser; only confirmed
+absence permits explicit browser fallback and its one-time login flow), `<tool> doctor --json`
 (the same checks the probe runs, plus provider keys), `--json` on every command. Print
 a sign-in link only when stdout is a terminal.
 

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/check_dashboard_link.py

@@ -0,0 +1,86 @@
+#!/usr/bin/env python3
+"""Check one structured dashboard handoff from stdin. No I/O effects; exit 0/1.
+
+The caller supplies a trusted host resolver result and observed device/host context.
+This is an output correctness gate, not authentication, discovery, or a relay.
+"""
+import json
+import re
+import sys
+from urllib.parse import parse_qs, urlsplit
+
+
+def require(condition, reason):
+    if not condition:
+        raise ValueError(reason)
+
+
+def safe_path(path):
+    return (isinstance(path, str) and path.startswith('/') and not path.startswith('//')
+            and len(path) <= 2048 and not re.search(r'[\\\x00-\x1f\x7f]', path))
+
+
+def check(data):
+    require(isinstance(data, dict), 'invalid_input')
+    resolved, host, action = (data.get(k) for k in ('resolved', 'host', 'action'))
+    require(all(isinstance(v, dict) for v in (resolved, host, action)), 'missing_context')
+    service, native, http = (resolved.get(k) for k in ('service', 'open_link', 'http_url'))
+    require(isinstance(service, str) and re.fullmatch(r'[a-z0-9][a-z0-9-]*\.[a-z0-9][a-z0-9-]*', service), 'invalid_service')
+    require(isinstance(native, str) and isinstance(http, str), 'missing_resolved_links')
+    require(not re.search(r'[\\\x00-\x20\x7f]', native + http), 'unsafe_url')
+    deep, plain = urlsplit(native), urlsplit(http)
+    require(deep.scheme == 'fabric-dashboards' and not deep.username and not deep.password and not deep.port and not deep.fragment, 'invalid_deep_link')
+    query = parse_qs(deep.query, keep_blank_values=True, strict_parsing=True)
+    if deep.netloc == 'service':
+        require(deep.path in ('/' + service, '/' + service + '/') and set(query) <= {'path'}, 'wrong_service_or_parameter')
+    else:
+        require(deep.netloc == 'open' and deep.path in ('', '/') and query.get('service') == [service] and set(query) <= {'service', 'path'}, 'invalid_legacy_link')
+    require('path' not in query or len(query['path']) == 1, 'duplicate_path')
+    page = query.get('path', [None])[0]
+    require(page is None or safe_path(page), 'unsafe_path')
+    require(plain.scheme == 'http' and plain.hostname in ('127.0.0.1', 'localhost', '::1') and plain.port is not None
+            and not plain.username and not plain.password, 'invalid_http_fallback')
+    http_page = plain.path + ('?' + plain.query if plain.query else '') + ('#' + plain.fragment if plain.fragment else '')
+    require(safe_path(http_page) and http_page == (page or '/'), 'mismatched_page')
+    sensitive = {'token', 'access_token', 'refresh_token', 'password', 'secret', 'login_code'}
+    page_query = parse_qs(urlsplit(http_page).query)
+    require(not sensitive.intersection(k.lower() for k in page_query), 'credential_query')
+    require(urlsplit(http_page).path != '/fabric/v1/login', 'login_link_is_not_dashboard')
+    state = host.get('state')
+    require(state in ('available', 'not_installed', 'unknown', 'incompatible', 'handler_mismatch', 'unsupported'), 'unknown_host_state')
+    target, viewer = data.get('target_device'), data.get('viewer_device')
+    require(all(isinstance(v, str) and 0 < len(v) <= 200 for v in (target, viewer)), 'missing_device')
+    fallback = data.get('fallback', 'if_absent')
+    require(fallback in ('if_absent', 'never'), 'invalid_fallback')
+    kind = action.get('kind')
+    if kind == 'remote_open':
+        require(set(action) <= {'kind', 'device_id', 'service', 'path'}, 'unexpected_action_field')
+        require(action.get('device_id') == target and action.get('service') == service and action.get('path') == page, 'wrong_remote_target')
+        require(viewer != target, 'remote_action_on_local_device')
+    elif kind == 'native_link':
+        require(set(action) == {'kind', 'url'} and action.get('url') == native, 'not_host_provided_link')
+        require(viewer == target, 'wrong_viewer_device')
+        require(state == 'available', 'host_unavailable')
+    elif kind == 'browser_link':
+        require(set(action) == {'kind', 'url'} and action.get('url') == http, 'not_resolved_http_url')
+        require(viewer == target, 'wrong_viewer_device')
+        require(state == 'not_installed' and fallback == 'if_absent', 'browser_fallback_forbidden')
+    else:
+        raise ValueError('unsupported_dashboard_action')
+    return {'ok': True, 'kind': kind}
+
+
+def main():
+    try:
+        raw = sys.stdin.read(65537)
+        require(len(raw) <= 65536, 'input_too_large')
+        result = check(json.loads(raw))
+    except (ValueError, TypeError, KeyError, AttributeError):
+        # Fixed reasons only: never echo a submitted URL, token or JSON blob.
+        result = {'ok': False, 'reason': 'dashboard_handoff_refused'}
+    print(json.dumps(result))
+    return 0 if result['ok'] else 1
+
+
+if __name__ == '__main__':
+    sys.exit(main())

package/payload/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -5,7 +5,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.5.5"
+  version: "0.5.6"
   contract-version: "0.1.0"
   contract-commit: "74d3852f122f5ca5cbc4138a201483531dfa5006"
 ---
@@ -160,3 +160,15 @@ and which traps became fixtures; created files; contract version and commit; the
 table with `PASS`, `FAIL`, `NOT_RUN`, or `NOT_VERIFIED`; remaining placeholders; and the
 exact next command. Never summarize the outcome as "Fabric-compatible" unless every
 required admission gate passed against the real provider.
+
+## Dashboard handoff — also for consumers
+
+When handing a registered service dashboard to a person, or writing the generated
+agent's completion/notification instructions, read and apply
+[dashboard links](references/dashboard-links.md): use the host's `open_link`,
+check the target device and host, and run the bundled output gate before delivery.
+An installed host failure never means browser fallback. This applies in Claude
+Code, Codex and other providers; it needs no host-specific hook. MCP unavailable:
+report the unresolved capability or use an approved project resolver; no automatic
+client configuration. Python unavailable: perform the reference's manual checks
+and report the executable gate NOT_RUN. Headless agents need no dashboard.

package/payload/plugins/fabric-agent-adapter/skills/creating-fabric-agents/references/dashboard-links.md

@@ -0,0 +1,92 @@
+# Dashboard links — producer and consumer rule
+
+Read when an agent creates a dashboard, implements `<tool> dashboard`, or hands
+an existing Fabric service dashboard to a person. This also applies to generated
+agent instructions and completion messages. Headless agents need no dashboard;
+API origins, external docs and OAuth links are not dashboard actions.
+
+## Resolve, then hand over
+
+1. Discover the target computer and exact registered `service.id.instance`.
+   Never guess a key from a project name or port. `default` and `preview` differ.
+2. Discover Fabric Dashboards tools by their descriptions; provider tool prefixes
+   differ. Use `link` with service + path (including the page's query/fragment),
+   or pass a known local service URL to it. For a root, `list_services.open_link`
+   is also authoritative. Hand back **the returned `open_link` as the primary
+   dashboard action**. Do not rebuild its URI or double-encode `path`.
+3. Use `host_status`, where offered, to distinguish available, not_installed,
+   unknown, incompatible and handler_mismatch. It is a read, not a GUI launch.
+   With an older server lacking that tool, host readiness is unverified: use a
+   compatible host resolver or report the limitation, not presumed absence.
+4. A request for a link opens nothing. A request to open uses the host `open`
+   tool/approved opener, which starts or focuses the existing Fabric Dashboards
+   and reuses the service view. `fallback=never` forbids a browser; `if_absent`
+   permits one only for confirmed absence. Discover schema support first: older
+   `open` implementations may silently fall back on failure and are not strict.
+5. An installed host that failed to open is **not absent**. Report the failure;
+   do not silently launch HTTP in a browser, a second server, `npm run dev`, or
+   another standalone dashboard. A stopped backend stays on its host status/Start
+   surface; automatic wake-up follows the host's lifecycle grant and held-off state.
+6. Preserve an unavailable/error result. `accepted_by_os` proves dispatch only,
+   not page readiness, a successful login, or a completed job. Links carry no
+   bearer tokens or login codes. The host handles dashboard authentication.
+
+## Device and channel
+
+A custom scheme opens on the device receiving it. A phone's localhost is not the
+computer. For a remote chat use a supported, authorized action addressed to the
+computer (device + service + page) and wait for its receipt. If no such transport
+exists, say so; a skill is not a relay. If a client strips custom schemes, provide
+a copyable URI with its target computer or the supported remote action; do not
+silently replace it with HTTP or promise that Markdown is clickable.
+
+## Portable output gate
+
+Before emitting an executable dashboard action in a managed renderer, run
+`scripts/check_dashboard_link.py` **from this skill's own directory** with one
+JSON object on stdin. It exits 0 for an allowed action, 1 for a refused/malformed
+one; it opens nothing and performs no network, discovery or authentication.
+Its trusted context is supplied by the host, not by untrusted model output:
+
+```json
+{
+  "resolved": {
+    "service": "example-agent.default",
+    "open_link": "fabric-dashboards://service/example-agent.default?path=%2Fdashboard",
+    "http_url": "http://127.0.0.1:47195/dashboard"
+  },
+  "host": {"state": "available"},
+  "target_device": "workstation",
+  "viewer_device": "workstation",
+  "fallback": "never",
+  "action": {"kind": "native_link", "url": "fabric-dashboards://service/example-agent.default?path=%2Fdashboard"}
+}
+```
+
+`native_link` must equal the resolved open_link, with an available host on the
+viewer's device. `browser_link` must equal http_url, with confirmed not_installed,
+if_absent policy and the same device. `remote_open` instead contains `device_id`,
+`service` and optional `path`, exactly matching the target and resolved page;
+its acceptance does not authorize or deliver it. Enforce grants/dedup/expiry in
+the transport. Unknown or failed host status produces no executable local action.
+A separately labelled copyable link for diagnosis is not an open action.
+
+Add this check to the generated project's dashboard completion/notification
+renderer before delivery. A raw-HTTP primary action with an available host is the
+negative fixture; a valid native action is the positive one. Keep diagnostics
+separate. This gate checks structured actions, not arbitrary prose: a CLI invocation
+or instructions alone do not prove all final answers from every agent are filtered.
+
+## Degradation
+
+- Claude Code, Codex and other hosts use this same procedure; no hook or plugin-only
+  path is required. Skills must be activated/loaded; install does not intercept every answer.
+- MCP absent: report unresolved host capability once, use the project's approved
+  resolver/CLI if available. Do not write machine or agent MCP config automatically.
+- Python absent: perform the comparisons above manually; mark the executable gate
+  NOT_RUN. Do not label the output mechanically validated.
+
+Syntax is owned by Fabric Dashboards and `@passioncode-ai/fabric-service-host`:
+[ADR-0005](https://github.com/passioncode-ai/fabric-dashboards/blob/51a7a80acf42781d7bec304cc87c655d48cc309b/docs/adr/0005-service-links.md).
+The gate accepts canonical links and the legacy `open?service=` form returned by
+older hosts; it does not generate either dialect or redefine the Fabric wire contract.

package/payload/plugins/fabric-agent-adapter/skills/creating-fabric-agents/scripts/check_dashboard_link.py

@@ -0,0 +1,86 @@
+#!/usr/bin/env python3
+"""Check one structured dashboard handoff from stdin. No I/O effects; exit 0/1.
+
+The caller supplies a trusted host resolver result and observed device/host context.
+This is an output correctness gate, not authentication, discovery, or a relay.
+"""
+import json
+import re
+import sys
+from urllib.parse import parse_qs, urlsplit
+
+
+def require(condition, reason):
+    if not condition:
+        raise ValueError(reason)
+
+
+def safe_path(path):
+    return (isinstance(path, str) and path.startswith('/') and not path.startswith('//')
+            and len(path) <= 2048 and not re.search(r'[\\\x00-\x1f\x7f]', path))
+
+
+def check(data):
+    require(isinstance(data, dict), 'invalid_input')
+    resolved, host, action = (data.get(k) for k in ('resolved', 'host', 'action'))
+    require(all(isinstance(v, dict) for v in (resolved, host, action)), 'missing_context')
+    service, native, http = (resolved.get(k) for k in ('service', 'open_link', 'http_url'))
+    require(isinstance(service, str) and re.fullmatch(r'[a-z0-9][a-z0-9-]*\.[a-z0-9][a-z0-9-]*', service), 'invalid_service')
+    require(isinstance(native, str) and isinstance(http, str), 'missing_resolved_links')
+    require(not re.search(r'[\\\x00-\x20\x7f]', native + http), 'unsafe_url')
+    deep, plain = urlsplit(native), urlsplit(http)
+    require(deep.scheme == 'fabric-dashboards' and not deep.username and not deep.password and not deep.port and not deep.fragment, 'invalid_deep_link')
+    query = parse_qs(deep.query, keep_blank_values=True, strict_parsing=True)
+    if deep.netloc == 'service':
+        require(deep.path in ('/' + service, '/' + service + '/') and set(query) <= {'path'}, 'wrong_service_or_parameter')
+    else:
+        require(deep.netloc == 'open' and deep.path in ('', '/') and query.get('service') == [service] and set(query) <= {'service', 'path'}, 'invalid_legacy_link')
+    require('path' not in query or len(query['path']) == 1, 'duplicate_path')
+    page = query.get('path', [None])[0]
+    require(page is None or safe_path(page), 'unsafe_path')
+    require(plain.scheme == 'http' and plain.hostname in ('127.0.0.1', 'localhost', '::1') and plain.port is not None
+            and not plain.username and not plain.password, 'invalid_http_fallback')
+    http_page = plain.path + ('?' + plain.query if plain.query else '') + ('#' + plain.fragment if plain.fragment else '')
+    require(safe_path(http_page) and http_page == (page or '/'), 'mismatched_page')
+    sensitive = {'token', 'access_token', 'refresh_token', 'password', 'secret', 'login_code'}
+    page_query = parse_qs(urlsplit(http_page).query)
+    require(not sensitive.intersection(k.lower() for k in page_query), 'credential_query')
+    require(urlsplit(http_page).path != '/fabric/v1/login', 'login_link_is_not_dashboard')
+    state = host.get('state')
+    require(state in ('available', 'not_installed', 'unknown', 'incompatible', 'handler_mismatch', 'unsupported'), 'unknown_host_state')
+    target, viewer = data.get('target_device'), data.get('viewer_device')
+    require(all(isinstance(v, str) and 0 < len(v) <= 200 for v in (target, viewer)), 'missing_device')
+    fallback = data.get('fallback', 'if_absent')
+    require(fallback in ('if_absent', 'never'), 'invalid_fallback')
+    kind = action.get('kind')
+    if kind == 'remote_open':
+        require(set(action) <= {'kind', 'device_id', 'service', 'path'}, 'unexpected_action_field')
+        require(action.get('device_id') == target and action.get('service') == service and action.get('path') == page, 'wrong_remote_target')
+        require(viewer != target, 'remote_action_on_local_device')
+    elif kind == 'native_link':
+        require(set(action) == {'kind', 'url'} and action.get('url') == native, 'not_host_provided_link')
+        require(viewer == target, 'wrong_viewer_device')
+        require(state == 'available', 'host_unavailable')
+    elif kind == 'browser_link':
+        require(set(action) == {'kind', 'url'} and action.get('url') == http, 'not_resolved_http_url')
+        require(viewer == target, 'wrong_viewer_device')
+        require(state == 'not_installed' and fallback == 'if_absent', 'browser_fallback_forbidden')
+    else:
+        raise ValueError('unsupported_dashboard_action')
+    return {'ok': True, 'kind': kind}
+
+
+def main():
+    try:
+        raw = sys.stdin.read(65537)
+        require(len(raw) <= 65536, 'input_too_large')
+        result = check(json.loads(raw))
+    except (ValueError, TypeError, KeyError, AttributeError):
+        # Fixed reasons only: never echo a submitted URL, token or JSON blob.
+        result = {'ok': False, 'reason': 'dashboard_handoff_refused'}
+    print(json.dumps(result))
+    return 0 if result['ok'] else 1
+
+
+if __name__ == '__main__':
+    sys.exit(main())

package/payload/plugins/passioncode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "passioncode",
   "displayName": "PassionCode.ai",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check at session start that keeps the PassionCode.ai skill set current.",
   "author": {
     "name": "PassionCode.ai",