@passioncode-ai/passioncode 0.1.16 → 0.1.18

package/CHANGELOG.md

@@ -1,5 +1,22 @@
 # Changelog
 
+## 0.1.18 - 2026-10-01
+
+### Changed
+
+- Pin Fabric Agent Adapter v0.5.7: services are scheduled as standard processes (`ProcessType
+  Standard`; the probe's `lifecycle.priority` rule fails `Background`), `notify: true` is reserved
+  for a decision, a failure or a blocking warning once per episode, a service raises no banners of
+  its own, and a preview instance is uninstalled once checked
+  ([adapter changelog](https://github.com/passioncode-ai/fabric-agent-adapter/blob/v0.5.7/CHANGELOG.md)).
+
+## 0.1.17 - 2026-10-01
+
+### Changed
+
+- Pin Fabric Agent Adapter v0.5.6 so the installed set carries its dashboard deep-link procedure and portable handoff checker. The Observatory Log and working-in-passioncode members keep their existing behavior.
+- Dashboard routing evidence belongs to the [adapter handoff](https://github.com/passioncode-ai/fabric-agent-adapter/blob/v0.5.6/docs/handoffs/2026-10-01-dashboard-links.md); the launcher installs these bytes through its existing plugin and agents-hub channels.
+
 ## 0.1.16 - 2026-10-01
 
 ### Fixed

package/family.json

@@ -8,7 +8,7 @@
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.5.5",
+      "ref": "v0.5.7",
       "kind": "plugin",
       "path": "plugins/fabric-agent-adapter",
       "legacyPluginIds": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/passioncode",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "description": "The PassionCode.ai agent skill set \u2014 Fabric Agent Adapter, Observatory Log and the organisation's working rules \u2014 for Claude Code and every other agent on the machine, updated as one set.",
   "bin": {
     "passioncode": "bin/passioncode.js"

package/payload/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "source": "./plugins/fabric-agent-adapter",
-      "version": "0.5.5",
+      "version": "0.5.7",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
       "author": {
         "name": "PassionCode.ai",
@@ -35,7 +35,7 @@
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "source": "./plugins/passioncode",
-      "version": "0.1.16",
+      "version": "0.1.18",
       "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",

package/payload/manifest.json

@@ -1,15 +1,15 @@
 {
   "family": "passioncode",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "release": true,
   "members": [
     {
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.5.5",
-      "commit": "f302123b97b0c4aaf2b447f6054b583b62b3caf3",
-      "version": "0.5.5",
+      "ref": "v0.5.7",
+      "commit": "de21d9548bc836fe09ca6049afb647b11450dda8",
+      "version": "0.5.7",
       "via": "clone of https://***@github.com/passioncode-ai/fabric-agent-adapter.git",
       "skills": [
         "adapting-projects-to-fabric",
@@ -22,7 +22,7 @@
       "legacyMarketplaces": [
         "fabric-agent-adapter"
       ],
-      "contentHash": "sha256:6e4ba6f36e9d2f62a621a1dee0d0feb5532c7e959acdf4bfa5c8edfa82304711",
+      "contentHash": "sha256:bebf6fe75b96b059558f0ad4f771db6784b07f429f88db2b5e285f3420284d5a",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
       "author": {
         "name": "PassionCode.ai",
@@ -61,16 +61,16 @@
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "repo": "passioncode-ai/passioncode",
-      "ref": "v0.1.16",
+      "ref": "v0.1.18",
       "commit": null,
-      "version": "0.1.16",
+      "version": "0.1.18",
       "via": "this repository",
       "skills": [
         "working-in-passioncode"
       ],
       "legacyPluginIds": [],
       "legacyMarketplaces": [],
-      "contentHash": "sha256:15d7a746ecf165e574f87a28af46bd0ea04255b86cc3351ee0d96778bb741447",
+      "contentHash": "sha256:26d450262adad29363047bc7a6df496d8a0ecd6fd82d8c1e771944248db8eb8e",
       "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",

package/payload/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
-  "version": "0.5.5",
+  "version": "0.5.7",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -5,7 +5,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.5.5"
+  version: "0.5.7"
   contract-version: "0.1.0"
   contract-commit: "74d3852f122f5ca5cbc4138a201483531dfa5006"
 ---
@@ -213,3 +213,15 @@ Report:
 
 Never summarize the outcome as “Fabric-compatible” unless all required admission gates
 passed against a real provider and the project binding is valid.
+
+## Dashboard handoff — also for consumers
+
+When handing a registered service dashboard to a person, or writing the generated
+agent's completion/notification instructions, read and apply
+[dashboard links](references/dashboard-links.md): use the host's `open_link`,
+check the target device and host, and run the bundled output gate before delivery.
+An installed host failure never means browser fallback. This applies in Claude
+Code, Codex and other providers; it needs no host-specific hook. MCP unavailable:
+report the unresolved capability or use an approved project resolver; no automatic
+client configuration. Python unavailable: perform the reference's manual checks
+and report the executable gate NOT_RUN. Headless agents need no dashboard.

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/references/dashboard-links.md

@@ -0,0 +1,92 @@
+# Dashboard links — producer and consumer rule
+
+Read when an agent creates a dashboard, implements `<tool> dashboard`, or hands
+an existing Fabric service dashboard to a person. This also applies to generated
+agent instructions and completion messages. Headless agents need no dashboard;
+API origins, external docs and OAuth links are not dashboard actions.
+
+## Resolve, then hand over
+
+1. Discover the target computer and exact registered `service.id.instance`.
+   Never guess a key from a project name or port. `default` and `preview` differ.
+2. Discover Fabric Dashboards tools by their descriptions; provider tool prefixes
+   differ. Use `link` with service + path (including the page's query/fragment),
+   or pass a known local service URL to it. For a root, `list_services.open_link`
+   is also authoritative. Hand back **the returned `open_link` as the primary
+   dashboard action**. Do not rebuild its URI or double-encode `path`.
+3. Use `host_status`, where offered, to distinguish available, not_installed,
+   unknown, incompatible and handler_mismatch. It is a read, not a GUI launch.
+   With an older server lacking that tool, host readiness is unverified: use a
+   compatible host resolver or report the limitation, not presumed absence.
+4. A request for a link opens nothing. A request to open uses the host `open`
+   tool/approved opener, which starts or focuses the existing Fabric Dashboards
+   and reuses the service view. `fallback=never` forbids a browser; `if_absent`
+   permits one only for confirmed absence. Discover schema support first: older
+   `open` implementations may silently fall back on failure and are not strict.
+5. An installed host that failed to open is **not absent**. Report the failure;
+   do not silently launch HTTP in a browser, a second server, `npm run dev`, or
+   another standalone dashboard. A stopped backend stays on its host status/Start
+   surface; automatic wake-up follows the host's lifecycle grant and held-off state.
+6. Preserve an unavailable/error result. `accepted_by_os` proves dispatch only,
+   not page readiness, a successful login, or a completed job. Links carry no
+   bearer tokens or login codes. The host handles dashboard authentication.
+
+## Device and channel
+
+A custom scheme opens on the device receiving it. A phone's localhost is not the
+computer. For a remote chat use a supported, authorized action addressed to the
+computer (device + service + page) and wait for its receipt. If no such transport
+exists, say so; a skill is not a relay. If a client strips custom schemes, provide
+a copyable URI with its target computer or the supported remote action; do not
+silently replace it with HTTP or promise that Markdown is clickable.
+
+## Portable output gate
+
+Before emitting an executable dashboard action in a managed renderer, run
+`scripts/check_dashboard_link.py` **from this skill's own directory** with one
+JSON object on stdin. It exits 0 for an allowed action, 1 for a refused/malformed
+one; it opens nothing and performs no network, discovery or authentication.
+Its trusted context is supplied by the host, not by untrusted model output:
+
+```json
+{
+  "resolved": {
+    "service": "example-agent.default",
+    "open_link": "fabric-dashboards://service/example-agent.default?path=%2Fdashboard",
+    "http_url": "http://127.0.0.1:47195/dashboard"
+  },
+  "host": {"state": "available"},
+  "target_device": "workstation",
+  "viewer_device": "workstation",
+  "fallback": "never",
+  "action": {"kind": "native_link", "url": "fabric-dashboards://service/example-agent.default?path=%2Fdashboard"}
+}
+```
+
+`native_link` must equal the resolved open_link, with an available host on the
+viewer's device. `browser_link` must equal http_url, with confirmed not_installed,
+if_absent policy and the same device. `remote_open` instead contains `device_id`,
+`service` and optional `path`, exactly matching the target and resolved page;
+its acceptance does not authorize or deliver it. Enforce grants/dedup/expiry in
+the transport. Unknown or failed host status produces no executable local action.
+A separately labelled copyable link for diagnosis is not an open action.
+
+Add this check to the generated project's dashboard completion/notification
+renderer before delivery. A raw-HTTP primary action with an available host is the
+negative fixture; a valid native action is the positive one. Keep diagnostics
+separate. This gate checks structured actions, not arbitrary prose: a CLI invocation
+or instructions alone do not prove all final answers from every agent are filtered.
+
+## Degradation
+
+- Claude Code, Codex and other hosts use this same procedure; no hook or plugin-only
+  path is required. Skills must be activated/loaded; install does not intercept every answer.
+- MCP absent: report unresolved host capability once, use the project's approved
+  resolver/CLI if available. Do not write machine or agent MCP config automatically.
+- Python absent: perform the comparisons above manually; mark the executable gate
+  NOT_RUN. Do not label the output mechanically validated.
+
+Syntax is owned by Fabric Dashboards and `@passioncode-ai/fabric-service-host`:
+[ADR-0005](https://github.com/passioncode-ai/fabric-dashboards/blob/51a7a80acf42781d7bec304cc87c655d48cc309b/docs/adr/0005-service-links.md).
+The gate accepts canonical links and the legacy `open?service=` form returned by
+older hosts; it does not generate either dialect or redefine the Fabric wire contract.

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/check_dashboard_link.py

@@ -0,0 +1,86 @@
+#!/usr/bin/env python3
+"""Check one structured dashboard handoff from stdin. No I/O effects; exit 0/1.
+
+The caller supplies a trusted host resolver result and observed device/host context.
+This is an output correctness gate, not authentication, discovery, or a relay.
+"""
+import json
+import re
+import sys
+from urllib.parse import parse_qs, urlsplit
+
+
+def require(condition, reason):
+    if not condition:
+        raise ValueError(reason)
+
+
+def safe_path(path):
+    return (isinstance(path, str) and path.startswith('/') and not path.startswith('//')
+            and len(path) <= 2048 and not re.search(r'[\\\x00-\x1f\x7f]', path))
+
+
+def check(data):
+    require(isinstance(data, dict), 'invalid_input')
+    resolved, host, action = (data.get(k) for k in ('resolved', 'host', 'action'))
+    require(all(isinstance(v, dict) for v in (resolved, host, action)), 'missing_context')
+    service, native, http = (resolved.get(k) for k in ('service', 'open_link', 'http_url'))
+    require(isinstance(service, str) and re.fullmatch(r'[a-z0-9][a-z0-9-]*\.[a-z0-9][a-z0-9-]*', service), 'invalid_service')
+    require(isinstance(native, str) and isinstance(http, str), 'missing_resolved_links')
+    require(not re.search(r'[\\\x00-\x20\x7f]', native + http), 'unsafe_url')
+    deep, plain = urlsplit(native), urlsplit(http)
+    require(deep.scheme == 'fabric-dashboards' and not deep.username and not deep.password and not deep.port and not deep.fragment, 'invalid_deep_link')
+    query = parse_qs(deep.query, keep_blank_values=True, strict_parsing=True)
+    if deep.netloc == 'service':
+        require(deep.path in ('/' + service, '/' + service + '/') and set(query) <= {'path'}, 'wrong_service_or_parameter')
+    else:
+        require(deep.netloc == 'open' and deep.path in ('', '/') and query.get('service') == [service] and set(query) <= {'service', 'path'}, 'invalid_legacy_link')
+    require('path' not in query or len(query['path']) == 1, 'duplicate_path')
+    page = query.get('path', [None])[0]
+    require(page is None or safe_path(page), 'unsafe_path')
+    require(plain.scheme == 'http' and plain.hostname in ('127.0.0.1', 'localhost', '::1') and plain.port is not None
+            and not plain.username and not plain.password, 'invalid_http_fallback')
+    http_page = plain.path + ('?' + plain.query if plain.query else '') + ('#' + plain.fragment if plain.fragment else '')
+    require(safe_path(http_page) and http_page == (page or '/'), 'mismatched_page')
+    sensitive = {'token', 'access_token', 'refresh_token', 'password', 'secret', 'login_code'}
+    page_query = parse_qs(urlsplit(http_page).query)
+    require(not sensitive.intersection(k.lower() for k in page_query), 'credential_query')
+    require(urlsplit(http_page).path != '/fabric/v1/login', 'login_link_is_not_dashboard')
+    state = host.get('state')
+    require(state in ('available', 'not_installed', 'unknown', 'incompatible', 'handler_mismatch', 'unsupported'), 'unknown_host_state')
+    target, viewer = data.get('target_device'), data.get('viewer_device')
+    require(all(isinstance(v, str) and 0 < len(v) <= 200 for v in (target, viewer)), 'missing_device')
+    fallback = data.get('fallback', 'if_absent')
+    require(fallback in ('if_absent', 'never'), 'invalid_fallback')
+    kind = action.get('kind')
+    if kind == 'remote_open':
+        require(set(action) <= {'kind', 'device_id', 'service', 'path'}, 'unexpected_action_field')
+        require(action.get('device_id') == target and action.get('service') == service and action.get('path') == page, 'wrong_remote_target')
+        require(viewer != target, 'remote_action_on_local_device')
+    elif kind == 'native_link':
+        require(set(action) == {'kind', 'url'} and action.get('url') == native, 'not_host_provided_link')
+        require(viewer == target, 'wrong_viewer_device')
+        require(state == 'available', 'host_unavailable')
+    elif kind == 'browser_link':
+        require(set(action) == {'kind', 'url'} and action.get('url') == http, 'not_resolved_http_url')
+        require(viewer == target, 'wrong_viewer_device')
+        require(state == 'not_installed' and fallback == 'if_absent', 'browser_fallback_forbidden')
+    else:
+        raise ValueError('unsupported_dashboard_action')
+    return {'ok': True, 'kind': kind}
+
+
+def main():
+    try:
+        raw = sys.stdin.read(65537)
+        require(len(raw) <= 65536, 'input_too_large')
+        result = check(json.loads(raw))
+    except (ValueError, TypeError, KeyError, AttributeError):
+        # Fixed reasons only: never echo a submitted URL, token or JSON blob.
+        result = {'ok': False, 'reason': 'dashboard_handoff_refused'}
+    print(json.dumps(result))
+    return 0 if result['ok'] else 1
+
+
+if __name__ == '__main__':
+    sys.exit(main())

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -1,7 +1,7 @@
 ---
 name: building-fabric-services
 description: >-
-  Use when building or running an agent as a long-lived local service with a dashboard on
+  Use when handing out or opening a Fabric service dashboard, or building a local agent service on
   a macOS machine — «сделай агенту дашборд», «локальный сервис агента», «дашборд должен всегда
   работать и не плодить копии», «где агенту хранить настройки», «подключи агента к Fabric
   Dashboards», "make this agent a local service", "always-on dashboard", "fabric-service
@@ -12,10 +12,10 @@ description: >-
   reference kits and a live conformance probe. NOT for a one-off script or cron job, a hosted
   SaaS, the provider manifest itself (adapting-projects-to-fabric), or building Fabric Dashboards.
 license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
-compatibility: Python 3.9+ or Node.js 20+ for the kits; the probe needs Python 3.9+. launchd steps are macOS-only (Linux services use lifecycle manager none until a systemd adapter exists). No network or package install; the contract checkout is optional.
+compatibility: Python 3.9+ or Node.js 20+ for the kits; the probe needs Python 3.9+. launchd steps are macOS-only (Linux services use lifecycle manager none until a systemd adapter exists). Dashboard handoff optionally uses Fabric Dashboards MCP link/host_status/open; without it, report unresolved host capability. The contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.5.5"
+  version: "0.5.7"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
   extension-commit: "74d3852f122f5ca5cbc4138a201483531dfa5006"
@@ -163,7 +163,10 @@ descriptor's `fabricManifest` at a manifest whose service key names this
 The installer, not the service, owns the plist and the descriptor. Sequence:
 
 1. `write_descriptor(descriptor)` — refuses a port or `id.instance` another descriptor
-   claims. A preview or branch copy is a second **instance**, never a second id.
+   claims. A preview or branch copy is a second **instance**, never a second id — and it is
+   one more service the operator sees, probes and gets notified by. Verify a release with its
+   own doctor or self-check before it replaces `default`; a temporary instance is uninstalled
+   (`launchd_uninstall`, `remove_descriptor`) as soon as its check is done, not left running.
 2. `launchd_plist(...)` then `launchd_install(...)` — writes and lints the plist,
    `bootout` and waits for the unload, `bootstrap` with retries on the transient I/O
    error, then polls the well-known document until it answers with **this** identity.
@@ -183,8 +186,10 @@ others, and every error is a sentence with the next action. Read
 
 The events feed is a **view over the log you already keep** — a jobs table, a JSONL
 journal — not a second store. Each event is one sentence a person reads; set
-`notify: true` only for what the operator must act on or would want to hear about
-unprompted, with a `link` to the page that resolves it. Read
+`notify: true` only when the operator must decide, or something failed or degrades their
+work — once per episode, with a `subject` and a `link` to the page that resolves it. A
+question's kind says so (`*.awaiting_*`, `*.approval_*`, `human_step.opened`). The service
+raises no banners of its own: the host is the one channel. Read
 [the events reference](references/events-and-notifications.md) for mapping an existing
 log, retention and notification policy.
 
@@ -275,3 +280,15 @@ Report: the `id`, port and surfaces with the Step 0 answers; files created or ch
 the probe table verbatim with every `NOT_RUN` explained; the lock and kill-9 results
 with pids; and the one next command. Never call a service conformant while the probe
 reports a `FAIL`.
+
+## Dashboard handoff — also for consumers
+
+When handing a registered service dashboard to a person, or writing the generated
+agent's completion/notification instructions, read and apply
+[dashboard links](references/dashboard-links.md): use the host's `open_link`,
+check the target device and host, and run the bundled output gate before delivery.
+An installed host failure never means browser fallback. This applies in Claude
+Code, Codex and other providers; it needs no host-specific hook. MCP unavailable:
+report the unresolved capability or use an approved project resolver; no automatic
+client configuration. Python unavailable: perform the reference's manual checks
+and report the executable gate NOT_RUN. Headless agents need no dashboard.

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/dashboard-links.md

@@ -0,0 +1,92 @@
+# Dashboard links — producer and consumer rule
+
+Read when an agent creates a dashboard, implements `<tool> dashboard`, or hands
+an existing Fabric service dashboard to a person. This also applies to generated
+agent instructions and completion messages. Headless agents need no dashboard;
+API origins, external docs and OAuth links are not dashboard actions.
+
+## Resolve, then hand over
+
+1. Discover the target computer and exact registered `service.id.instance`.
+   Never guess a key from a project name or port. `default` and `preview` differ.
+2. Discover Fabric Dashboards tools by their descriptions; provider tool prefixes
+   differ. Use `link` with service + path (including the page's query/fragment),
+   or pass a known local service URL to it. For a root, `list_services.open_link`
+   is also authoritative. Hand back **the returned `open_link` as the primary
+   dashboard action**. Do not rebuild its URI or double-encode `path`.
+3. Use `host_status`, where offered, to distinguish available, not_installed,
+   unknown, incompatible and handler_mismatch. It is a read, not a GUI launch.
+   With an older server lacking that tool, host readiness is unverified: use a
+   compatible host resolver or report the limitation, not presumed absence.
+4. A request for a link opens nothing. A request to open uses the host `open`
+   tool/approved opener, which starts or focuses the existing Fabric Dashboards
+   and reuses the service view. `fallback=never` forbids a browser; `if_absent`
+   permits one only for confirmed absence. Discover schema support first: older
+   `open` implementations may silently fall back on failure and are not strict.
+5. An installed host that failed to open is **not absent**. Report the failure;
+   do not silently launch HTTP in a browser, a second server, `npm run dev`, or
+   another standalone dashboard. A stopped backend stays on its host status/Start
+   surface; automatic wake-up follows the host's lifecycle grant and held-off state.
+6. Preserve an unavailable/error result. `accepted_by_os` proves dispatch only,
+   not page readiness, a successful login, or a completed job. Links carry no
+   bearer tokens or login codes. The host handles dashboard authentication.
+
+## Device and channel
+
+A custom scheme opens on the device receiving it. A phone's localhost is not the
+computer. For a remote chat use a supported, authorized action addressed to the
+computer (device + service + page) and wait for its receipt. If no such transport
+exists, say so; a skill is not a relay. If a client strips custom schemes, provide
+a copyable URI with its target computer or the supported remote action; do not
+silently replace it with HTTP or promise that Markdown is clickable.
+
+## Portable output gate
+
+Before emitting an executable dashboard action in a managed renderer, run
+`scripts/check_dashboard_link.py` **from this skill's own directory** with one
+JSON object on stdin. It exits 0 for an allowed action, 1 for a refused/malformed
+one; it opens nothing and performs no network, discovery or authentication.
+Its trusted context is supplied by the host, not by untrusted model output:
+
+```json
+{
+  "resolved": {
+    "service": "example-agent.default",
+    "open_link": "fabric-dashboards://service/example-agent.default?path=%2Fdashboard",
+    "http_url": "http://127.0.0.1:47195/dashboard"
+  },
+  "host": {"state": "available"},
+  "target_device": "workstation",
+  "viewer_device": "workstation",
+  "fallback": "never",
+  "action": {"kind": "native_link", "url": "fabric-dashboards://service/example-agent.default?path=%2Fdashboard"}
+}
+```
+
+`native_link` must equal the resolved open_link, with an available host on the
+viewer's device. `browser_link` must equal http_url, with confirmed not_installed,
+if_absent policy and the same device. `remote_open` instead contains `device_id`,
+`service` and optional `path`, exactly matching the target and resolved page;
+its acceptance does not authorize or deliver it. Enforce grants/dedup/expiry in
+the transport. Unknown or failed host status produces no executable local action.
+A separately labelled copyable link for diagnosis is not an open action.
+
+Add this check to the generated project's dashboard completion/notification
+renderer before delivery. A raw-HTTP primary action with an available host is the
+negative fixture; a valid native action is the positive one. Keep diagnostics
+separate. This gate checks structured actions, not arbitrary prose: a CLI invocation
+or instructions alone do not prove all final answers from every agent are filtered.
+
+## Degradation
+
+- Claude Code, Codex and other hosts use this same procedure; no hook or plugin-only
+  path is required. Skills must be activated/loaded; install does not intercept every answer.
+- MCP absent: report unresolved host capability once, use the project's approved
+  resolver/CLI if available. Do not write machine or agent MCP config automatically.
+- Python absent: perform the comparisons above manually; mark the executable gate
+  NOT_RUN. Do not label the output mechanically validated.
+
+Syntax is owned by Fabric Dashboards and `@passioncode-ai/fabric-service-host`:
+[ADR-0005](https://github.com/passioncode-ai/fabric-dashboards/blob/51a7a80acf42781d7bec304cc87c655d48cc309b/docs/adr/0005-service-links.md).
+The gate accepts canonical links and the legacy `open?service=` form returned by
+older hosts; it does not generate either dialect or redefine the Fabric wire contract.

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/events-and-notifications.md

@@ -26,11 +26,32 @@ The feed is a view: never copy rows into a second store that can drift from the
 
 ## When to set `notify: true`
 
-Notify when the operator must act (an approval is waiting, a key expired, a job failed
-after retries) or asked to be told (a long job finished). Do not notify for routine
-progress, retries that will succeed, or anything that fires more than a few times an
-hour. The host decides whether to show it — quiet hours, per-service settings — and
-debounces; the service decides only what is notification-worthy.
+`notify: true` asks the host to interrupt the operator. Hosts treat it as a request, not an
+order: Fabric Dashboards shows a banner only for a **decision**, a **failure** or a **warning**,
+once per episode, and puts everything else in Activity (its ADR-0010). Write events so that rule
+lands on what matters:
+
+| The operator… | Event | `notify` |
+|---|---|---|
+| must decide or act — a choice, an approval, a key to enter | kind says it: `job.awaiting_choice`, `plan.awaiting_approval`, `human_step.opened`; level `notice` | `true` |
+| lost work — a job failed after its retries, a key expired | level `error`; kind `*.failed`, `*.expired` | `true` |
+| will lose work soon — a degraded source that blocks orders | level `warning`, `service.degraded`, **once when it starts** | `true` |
+| asked to be told when a long job finishes | `job.delivered`, level `notice` | `true` only if that person asked; a host may still keep it in Activity |
+| only needs the record — progress, retries, recoveries, syncs | `job.started`, `service.recovered`, `*.cleared`, level `info` or `notice` | `false` |
+
+- **One episode, one request.** Notify on the transition, never on each poll: a source that
+  flaps between degraded and healthy sends `service.degraded` with `notify: true` once, and later
+  repeats with `notify: false` until it has stayed healthy for a while. Asking the same question
+  about the same subject again is not news.
+- **Say who wants what.** `subject` names the thing (`{type: "job", id: "…", label: "Q3 report"}`)
+  so a host can tell episodes apart and group; `text` names the object and what the operator
+  should do ("The storyboard of the Q3 launch video waits for your decision."); `link` opens the
+  page where they do it. The host adds the agent's name and instance.
+- **One channel.** A service with a descriptor raises no banners of its own (AppleScript
+  `display notification`, a notifier binary, its own notification-centre entries): the operator
+  would get each one twice, from a sender that is not the host. Publish the event; the host
+  delivers it, honouring quiet hours and per-service settings.
+- Anything that would fire more than a few times an hour is not a notification.
 
 ## Lifecycle events every service emits
 

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/lifecycle.md

@@ -10,7 +10,7 @@
 | `KeepAlive` | `true` | `{SuccessfulExit:false}` leaves a cleanly exited service down |
 | `ThrottleInterval` | `10` | bounds a crash loop |
 | `ExitTimeOut` | drain time + margin (40 s default) | SIGKILL arrives after it |
-| `ProcessType` | `Background` | scheduler hint |
+| `ProcessType` | `Standard` — never `Background`, and no `Nice` > 0 or `LowPriorityIO` | a host probes the service and agents call it while the Mac is busy; a background job is starved for tens of seconds under load and every host reports an outage that never happened (the probe's `lifecycle.priority` rule fails it) |
 | `EnvironmentVariables` | `PATH` set explicitly; `*_FILE` paths to secrets | never a secret value — the plist is world-readable in backups |
 | `StandardOutPath`/`StandardErrorPath` | `~/Library/Logs/<id>/service.log` | one place the host tails |
 

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/surfaces-and-auth.md

@@ -17,8 +17,9 @@
 ## CLI for people and scripts
 
 `<tool> service status|start|stop|restart` (launchctl on the label, then the
-well-known document), `<tool> dashboard` (asks for a login code and opens it; with
-Fabric Dashboards installed it opens the service there instead), `<tool> doctor --json`
+well-known document), `<tool> dashboard` (resolve the exact service and use the Fabric Dashboards host
+opener first; installed-but-failed never falls back to a browser; only confirmed
+absence permits explicit browser fallback and its one-time login flow), `<tool> doctor --json`
 (the same checks the probe runs, plus provider keys), `--json` on every command. Print
 a sign-in link only when stdout is a terminal.
 

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/check_dashboard_link.py

@@ -0,0 +1,86 @@
+#!/usr/bin/env python3
+"""Check one structured dashboard handoff from stdin. No I/O effects; exit 0/1.
+
+The caller supplies a trusted host resolver result and observed device/host context.
+This is an output correctness gate, not authentication, discovery, or a relay.
+"""
+import json
+import re
+import sys
+from urllib.parse import parse_qs, urlsplit
+
+
+def require(condition, reason):
+    if not condition:
+        raise ValueError(reason)
+
+
+def safe_path(path):
+    return (isinstance(path, str) and path.startswith('/') and not path.startswith('//')
+            and len(path) <= 2048 and not re.search(r'[\\\x00-\x1f\x7f]', path))
+
+
+def check(data):
+    require(isinstance(data, dict), 'invalid_input')
+    resolved, host, action = (data.get(k) for k in ('resolved', 'host', 'action'))
+    require(all(isinstance(v, dict) for v in (resolved, host, action)), 'missing_context')
+    service, native, http = (resolved.get(k) for k in ('service', 'open_link', 'http_url'))
+    require(isinstance(service, str) and re.fullmatch(r'[a-z0-9][a-z0-9-]*\.[a-z0-9][a-z0-9-]*', service), 'invalid_service')
+    require(isinstance(native, str) and isinstance(http, str), 'missing_resolved_links')
+    require(not re.search(r'[\\\x00-\x20\x7f]', native + http), 'unsafe_url')
+    deep, plain = urlsplit(native), urlsplit(http)
+    require(deep.scheme == 'fabric-dashboards' and not deep.username and not deep.password and not deep.port and not deep.fragment, 'invalid_deep_link')
+    query = parse_qs(deep.query, keep_blank_values=True, strict_parsing=True)
+    if deep.netloc == 'service':
+        require(deep.path in ('/' + service, '/' + service + '/') and set(query) <= {'path'}, 'wrong_service_or_parameter')
+    else:
+        require(deep.netloc == 'open' and deep.path in ('', '/') and query.get('service') == [service] and set(query) <= {'service', 'path'}, 'invalid_legacy_link')
+    require('path' not in query or len(query['path']) == 1, 'duplicate_path')
+    page = query.get('path', [None])[0]
+    require(page is None or safe_path(page), 'unsafe_path')
+    require(plain.scheme == 'http' and plain.hostname in ('127.0.0.1', 'localhost', '::1') and plain.port is not None
+            and not plain.username and not plain.password, 'invalid_http_fallback')
+    http_page = plain.path + ('?' + plain.query if plain.query else '') + ('#' + plain.fragment if plain.fragment else '')
+    require(safe_path(http_page) and http_page == (page or '/'), 'mismatched_page')
+    sensitive = {'token', 'access_token', 'refresh_token', 'password', 'secret', 'login_code'}
+    page_query = parse_qs(urlsplit(http_page).query)
+    require(not sensitive.intersection(k.lower() for k in page_query), 'credential_query')
+    require(urlsplit(http_page).path != '/fabric/v1/login', 'login_link_is_not_dashboard')
+    state = host.get('state')
+    require(state in ('available', 'not_installed', 'unknown', 'incompatible', 'handler_mismatch', 'unsupported'), 'unknown_host_state')
+    target, viewer = data.get('target_device'), data.get('viewer_device')
+    require(all(isinstance(v, str) and 0 < len(v) <= 200 for v in (target, viewer)), 'missing_device')
+    fallback = data.get('fallback', 'if_absent')
+    require(fallback in ('if_absent', 'never'), 'invalid_fallback')
+    kind = action.get('kind')
+    if kind == 'remote_open':
+        require(set(action) <= {'kind', 'device_id', 'service', 'path'}, 'unexpected_action_field')
+        require(action.get('device_id') == target and action.get('service') == service and action.get('path') == page, 'wrong_remote_target')
+        require(viewer != target, 'remote_action_on_local_device')
+    elif kind == 'native_link':
+        require(set(action) == {'kind', 'url'} and action.get('url') == native, 'not_host_provided_link')
+        require(viewer == target, 'wrong_viewer_device')
+        require(state == 'available', 'host_unavailable')
+    elif kind == 'browser_link':
+        require(set(action) == {'kind', 'url'} and action.get('url') == http, 'not_resolved_http_url')
+        require(viewer == target, 'wrong_viewer_device')
+        require(state == 'not_installed' and fallback == 'if_absent', 'browser_fallback_forbidden')
+    else:
+        raise ValueError('unsupported_dashboard_action')
+    return {'ok': True, 'kind': kind}
+
+
+def main():
+    try:
+        raw = sys.stdin.read(65537)
+        require(len(raw) <= 65536, 'input_too_large')
+        result = check(json.loads(raw))
+    except (ValueError, TypeError, KeyError, AttributeError):
+        # Fixed reasons only: never echo a submitted URL, token or JSON blob.
+        result = {'ok': False, 'reason': 'dashboard_handoff_refused'}
+    print(json.dumps(result))
+    return 0 if result['ok'] else 1
+
+
+if __name__ == '__main__':
+    sys.exit(main())

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/check_service.py

@@ -39,6 +39,36 @@ import fabric_interop as fi  # noqa: E402
 Result = Dict[str, str]
 
 
+
+def plist_problems(plist: dict, label: object, token: object = None) -> list:
+    """What makes a service's launchd job unfit to stay up: identity, restart, secrets."""
+    problems = []
+    if plist.get("Label") != label:
+        problems.append("Label %r" % plist.get("Label"))
+    if plist.get("RunAtLoad") is not True:
+        problems.append("RunAtLoad is not true")
+    if plist.get("KeepAlive") is not True:
+        problems.append("KeepAlive is %r, not true" % plist.get("KeepAlive"))
+    for key, value in (plist.get("EnvironmentVariables") or {}).items():
+        if re.search(r"(TOKEN|SECRET|PASSWORD|KEY)$", key) and not key.endswith("_FILE"):
+            problems.append("secret-like variable %s in the plist" % key)
+        if token and token in str(value):
+            problems.append("the service token itself is in the plist")
+    return problems
+
+
+def priority_problems(plist: dict) -> list:
+    """A service that answers hosts and agents must not be scheduled as background work."""
+    out = []
+    if plist.get("ProcessType", "Standard") in ("Background", "Adaptive"):
+        out.append("ProcessType is %s" % plist.get("ProcessType"))
+    if isinstance(plist.get("Nice"), int) and plist["Nice"] > 0:
+        out.append("Nice is %d" % plist["Nice"])
+    if plist.get("LowPriorityIO") is True or plist.get("LowPriorityBackgroundIO") is True:
+        out.append("low-priority I/O")
+    return out
+
+
 class Probe:
     def __init__(self, descriptor_path: Path, descriptor: Dict[str, Any], services_dir: Path, skip_login: bool):
         self.path = descriptor_path
@@ -416,19 +446,12 @@ class Probe:
         except (OSError, ValueError) as exc:
             self.add("lifecycle.plist", "FAIL", "cannot read %s: %s" % (plist_path, exc))
             return
-        problems = []
-        if plist.get("Label") != life.get("label"):
-            problems.append("Label %r" % plist.get("Label"))
-        if plist.get("RunAtLoad") is not True:
-            problems.append("RunAtLoad is not true")
-        if plist.get("KeepAlive") is not True:
-            problems.append("KeepAlive is %r, not true" % plist.get("KeepAlive"))
-        for key, value in (plist.get("EnvironmentVariables") or {}).items():
-            if re.search(r"(TOKEN|SECRET|PASSWORD|KEY)$", key) and not key.endswith("_FILE"):
-                problems.append("secret-like variable %s in the plist" % key)
-            if self.token and self.token in str(value):
-                problems.append("the service token itself is in the plist")
+        problems = plist_problems(plist, life.get("label"), self.token)
         self.add("lifecycle.plist", "FAIL" if problems else "PASS", "; ".join(problems) or "%s: RunAtLoad, KeepAlive, no secrets" % plist_path.name)
+        slow = priority_problems(plist)
+        self.add("lifecycle.priority", "FAIL" if slow else "PASS",
+                 "; ".join(slow) + " — macOS may starve the service under load and hosts then see an outage; use ProcessType Standard"
+                 if slow else "%s: scheduled as a standard process" % plist_path.name)
         if not shutil.which("launchctl"):
             self.add("lifecycle.one-copy", "NOT_RUN", "launchctl is not available")
             return

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_service.py

@@ -596,7 +596,10 @@ def launchd_plist(label: str, program_arguments: Sequence[str], *, working_direc
         "KeepAlive": True,
         "ThrottleInterval": 10,
         "ExitTimeOut": exit_timeout,
-        "ProcessType": "Background",
+        # Standard, never Background: a host probes the service and agents call it while the Mac
+        # is busy; Background (and Nice/LowPriorityIO) lets macOS starve it for tens of seconds
+        # under load, and every host then reports an outage that never happened.
+        "ProcessType": "Standard",
         "StandardOutPath": str(stdout_path),
         "StandardErrorPath": str(stdout_path),
         "EnvironmentVariables": env,

package/payload/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -5,7 +5,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.5.5"
+  version: "0.5.7"
   contract-version: "0.1.0"
   contract-commit: "74d3852f122f5ca5cbc4138a201483531dfa5006"
 ---
@@ -160,3 +160,15 @@ and which traps became fixtures; created files; contract version and commit; the
 table with `PASS`, `FAIL`, `NOT_RUN`, or `NOT_VERIFIED`; remaining placeholders; and the
 exact next command. Never summarize the outcome as "Fabric-compatible" unless every
 required admission gate passed against the real provider.
+
+## Dashboard handoff — also for consumers
+
+When handing a registered service dashboard to a person, or writing the generated
+agent's completion/notification instructions, read and apply
+[dashboard links](references/dashboard-links.md): use the host's `open_link`,
+check the target device and host, and run the bundled output gate before delivery.
+An installed host failure never means browser fallback. This applies in Claude
+Code, Codex and other providers; it needs no host-specific hook. MCP unavailable:
+report the unresolved capability or use an approved project resolver; no automatic
+client configuration. Python unavailable: perform the reference's manual checks
+and report the executable gate NOT_RUN. Headless agents need no dashboard.

package/payload/plugins/fabric-agent-adapter/skills/creating-fabric-agents/references/dashboard-links.md

@@ -0,0 +1,92 @@
+# Dashboard links — producer and consumer rule
+
+Read when an agent creates a dashboard, implements `<tool> dashboard`, or hands
+an existing Fabric service dashboard to a person. This also applies to generated
+agent instructions and completion messages. Headless agents need no dashboard;
+API origins, external docs and OAuth links are not dashboard actions.
+
+## Resolve, then hand over
+
+1. Discover the target computer and exact registered `service.id.instance`.
+   Never guess a key from a project name or port. `default` and `preview` differ.
+2. Discover Fabric Dashboards tools by their descriptions; provider tool prefixes
+   differ. Use `link` with service + path (including the page's query/fragment),
+   or pass a known local service URL to it. For a root, `list_services.open_link`
+   is also authoritative. Hand back **the returned `open_link` as the primary
+   dashboard action**. Do not rebuild its URI or double-encode `path`.
+3. Use `host_status`, where offered, to distinguish available, not_installed,
+   unknown, incompatible and handler_mismatch. It is a read, not a GUI launch.
+   With an older server lacking that tool, host readiness is unverified: use a
+   compatible host resolver or report the limitation, not presumed absence.
+4. A request for a link opens nothing. A request to open uses the host `open`
+   tool/approved opener, which starts or focuses the existing Fabric Dashboards
+   and reuses the service view. `fallback=never` forbids a browser; `if_absent`
+   permits one only for confirmed absence. Discover schema support first: older
+   `open` implementations may silently fall back on failure and are not strict.
+5. An installed host that failed to open is **not absent**. Report the failure;
+   do not silently launch HTTP in a browser, a second server, `npm run dev`, or
+   another standalone dashboard. A stopped backend stays on its host status/Start
+   surface; automatic wake-up follows the host's lifecycle grant and held-off state.
+6. Preserve an unavailable/error result. `accepted_by_os` proves dispatch only,
+   not page readiness, a successful login, or a completed job. Links carry no
+   bearer tokens or login codes. The host handles dashboard authentication.
+
+## Device and channel
+
+A custom scheme opens on the device receiving it. A phone's localhost is not the
+computer. For a remote chat use a supported, authorized action addressed to the
+computer (device + service + page) and wait for its receipt. If no such transport
+exists, say so; a skill is not a relay. If a client strips custom schemes, provide
+a copyable URI with its target computer or the supported remote action; do not
+silently replace it with HTTP or promise that Markdown is clickable.
+
+## Portable output gate
+
+Before emitting an executable dashboard action in a managed renderer, run
+`scripts/check_dashboard_link.py` **from this skill's own directory** with one
+JSON object on stdin. It exits 0 for an allowed action, 1 for a refused/malformed
+one; it opens nothing and performs no network, discovery or authentication.
+Its trusted context is supplied by the host, not by untrusted model output:
+
+```json
+{
+  "resolved": {
+    "service": "example-agent.default",
+    "open_link": "fabric-dashboards://service/example-agent.default?path=%2Fdashboard",
+    "http_url": "http://127.0.0.1:47195/dashboard"
+  },
+  "host": {"state": "available"},
+  "target_device": "workstation",
+  "viewer_device": "workstation",
+  "fallback": "never",
+  "action": {"kind": "native_link", "url": "fabric-dashboards://service/example-agent.default?path=%2Fdashboard"}
+}
+```
+
+`native_link` must equal the resolved open_link, with an available host on the
+viewer's device. `browser_link` must equal http_url, with confirmed not_installed,
+if_absent policy and the same device. `remote_open` instead contains `device_id`,
+`service` and optional `path`, exactly matching the target and resolved page;
+its acceptance does not authorize or deliver it. Enforce grants/dedup/expiry in
+the transport. Unknown or failed host status produces no executable local action.
+A separately labelled copyable link for diagnosis is not an open action.
+
+Add this check to the generated project's dashboard completion/notification
+renderer before delivery. A raw-HTTP primary action with an available host is the
+negative fixture; a valid native action is the positive one. Keep diagnostics
+separate. This gate checks structured actions, not arbitrary prose: a CLI invocation
+or instructions alone do not prove all final answers from every agent are filtered.
+
+## Degradation
+
+- Claude Code, Codex and other hosts use this same procedure; no hook or plugin-only
+  path is required. Skills must be activated/loaded; install does not intercept every answer.
+- MCP absent: report unresolved host capability once, use the project's approved
+  resolver/CLI if available. Do not write machine or agent MCP config automatically.
+- Python absent: perform the comparisons above manually; mark the executable gate
+  NOT_RUN. Do not label the output mechanically validated.
+
+Syntax is owned by Fabric Dashboards and `@passioncode-ai/fabric-service-host`:
+[ADR-0005](https://github.com/passioncode-ai/fabric-dashboards/blob/51a7a80acf42781d7bec304cc87c655d48cc309b/docs/adr/0005-service-links.md).
+The gate accepts canonical links and the legacy `open?service=` form returned by
+older hosts; it does not generate either dialect or redefine the Fabric wire contract.

package/payload/plugins/fabric-agent-adapter/skills/creating-fabric-agents/scripts/check_dashboard_link.py

@@ -0,0 +1,86 @@
+#!/usr/bin/env python3
+"""Check one structured dashboard handoff from stdin. No I/O effects; exit 0/1.
+
+The caller supplies a trusted host resolver result and observed device/host context.
+This is an output correctness gate, not authentication, discovery, or a relay.
+"""
+import json
+import re
+import sys
+from urllib.parse import parse_qs, urlsplit
+
+
+def require(condition, reason):
+    if not condition:
+        raise ValueError(reason)
+
+
+def safe_path(path):
+    return (isinstance(path, str) and path.startswith('/') and not path.startswith('//')
+            and len(path) <= 2048 and not re.search(r'[\\\x00-\x1f\x7f]', path))
+
+
+def check(data):
+    require(isinstance(data, dict), 'invalid_input')
+    resolved, host, action = (data.get(k) for k in ('resolved', 'host', 'action'))
+    require(all(isinstance(v, dict) for v in (resolved, host, action)), 'missing_context')
+    service, native, http = (resolved.get(k) for k in ('service', 'open_link', 'http_url'))
+    require(isinstance(service, str) and re.fullmatch(r'[a-z0-9][a-z0-9-]*\.[a-z0-9][a-z0-9-]*', service), 'invalid_service')
+    require(isinstance(native, str) and isinstance(http, str), 'missing_resolved_links')
+    require(not re.search(r'[\\\x00-\x20\x7f]', native + http), 'unsafe_url')
+    deep, plain = urlsplit(native), urlsplit(http)
+    require(deep.scheme == 'fabric-dashboards' and not deep.username and not deep.password and not deep.port and not deep.fragment, 'invalid_deep_link')
+    query = parse_qs(deep.query, keep_blank_values=True, strict_parsing=True)
+    if deep.netloc == 'service':
+        require(deep.path in ('/' + service, '/' + service + '/') and set(query) <= {'path'}, 'wrong_service_or_parameter')
+    else:
+        require(deep.netloc == 'open' and deep.path in ('', '/') and query.get('service') == [service] and set(query) <= {'service', 'path'}, 'invalid_legacy_link')
+    require('path' not in query or len(query['path']) == 1, 'duplicate_path')
+    page = query.get('path', [None])[0]
+    require(page is None or safe_path(page), 'unsafe_path')
+    require(plain.scheme == 'http' and plain.hostname in ('127.0.0.1', 'localhost', '::1') and plain.port is not None
+            and not plain.username and not plain.password, 'invalid_http_fallback')
+    http_page = plain.path + ('?' + plain.query if plain.query else '') + ('#' + plain.fragment if plain.fragment else '')
+    require(safe_path(http_page) and http_page == (page or '/'), 'mismatched_page')
+    sensitive = {'token', 'access_token', 'refresh_token', 'password', 'secret', 'login_code'}
+    page_query = parse_qs(urlsplit(http_page).query)
+    require(not sensitive.intersection(k.lower() for k in page_query), 'credential_query')
+    require(urlsplit(http_page).path != '/fabric/v1/login', 'login_link_is_not_dashboard')
+    state = host.get('state')
+    require(state in ('available', 'not_installed', 'unknown', 'incompatible', 'handler_mismatch', 'unsupported'), 'unknown_host_state')
+    target, viewer = data.get('target_device'), data.get('viewer_device')
+    require(all(isinstance(v, str) and 0 < len(v) <= 200 for v in (target, viewer)), 'missing_device')
+    fallback = data.get('fallback', 'if_absent')
+    require(fallback in ('if_absent', 'never'), 'invalid_fallback')
+    kind = action.get('kind')
+    if kind == 'remote_open':
+        require(set(action) <= {'kind', 'device_id', 'service', 'path'}, 'unexpected_action_field')
+        require(action.get('device_id') == target and action.get('service') == service and action.get('path') == page, 'wrong_remote_target')
+        require(viewer != target, 'remote_action_on_local_device')
+    elif kind == 'native_link':
+        require(set(action) == {'kind', 'url'} and action.get('url') == native, 'not_host_provided_link')
+        require(viewer == target, 'wrong_viewer_device')
+        require(state == 'available', 'host_unavailable')
+    elif kind == 'browser_link':
+        require(set(action) == {'kind', 'url'} and action.get('url') == http, 'not_resolved_http_url')
+        require(viewer == target, 'wrong_viewer_device')
+        require(state == 'not_installed' and fallback == 'if_absent', 'browser_fallback_forbidden')
+    else:
+        raise ValueError('unsupported_dashboard_action')
+    return {'ok': True, 'kind': kind}
+
+
+def main():
+    try:
+        raw = sys.stdin.read(65537)
+        require(len(raw) <= 65536, 'input_too_large')
+        result = check(json.loads(raw))
+    except (ValueError, TypeError, KeyError, AttributeError):
+        # Fixed reasons only: never echo a submitted URL, token or JSON blob.
+        result = {'ok': False, 'reason': 'dashboard_handoff_refused'}
+    print(json.dumps(result))
+    return 0 if result['ok'] else 1
+
+
+if __name__ == '__main__':
+    sys.exit(main())

package/payload/plugins/passioncode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "passioncode",
   "displayName": "PassionCode.ai",
-  "version": "0.1.16",
+  "version": "0.1.18",
   "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check at session start that keeps the PassionCode.ai skill set current.",
   "author": {
     "name": "PassionCode.ai",