@passioncode-ai/passioncode 0.1.29 → 0.1.31

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/sample_service.py

@@ -20,9 +20,7 @@ import json
 import os
 from http.server import BaseHTTPRequestHandler
 from pathlib import Path
-import signal
 import sys
-import threading
 from typing import Any, Dict, Optional
 from urllib.parse import parse_qs, urlparse
 
@@ -66,12 +64,15 @@ class Service:
         self.degraded = [{"source": "demo", "reason": args.degraded}] if args.degraded else []
         self.started_at = fs.now_iso()
         self.build = {"commit": os.environ.get("FABRIC_BUILD_COMMIT", "0000000"), "builtAt": self.started_at}
+        self.drain = fs.Drain()  # LC-01: SIGTERM drains in-flight calls, then the server stops
 
     def start(self) -> None:
         # Rule: the lock comes before ANY side effect, including creating the token.
         self.lock = fs.hold_single_instance(self.data)
         self.token = fs.ensure_token(self.token_file)
         self.log = fs.JsonlEventLog(self.data / "events.jsonl")
+        self.usage = fs.JsonlUsageLedger(self.data / "usage.jsonl")  # DEC-0021
+        self.usage.prune()
         self.codes = fs.LoginCodes(self.data / "auth")
         self.jobs = fi.JobStore(self.data / "jobs")
         self.mcp = fi.McpToolServer(self.id, VERSION, jobs=self.jobs, on_job_started=self.draft_started, on_input=self.draft_answered)
@@ -117,6 +118,8 @@ class Service:
                    "binding": {"id": "urn:fabric:binding:sample.draft", "revision": 1, "contentHash": "sha256:" + "0" * 64}, "writeScopes": []},
             not_verified=[{"claim": "NOTE", "reason": "no checker has read the note"}],
             output={"title": title, "body": body}, usage={"inputTokens": 0, "outputTokens": 0, "wallMs": 1}))
+        # The sample writes from a template: one call that costs a known $0 (DEC-0021 usage report).
+        self.usage.record(fs.make_usage_receipt("local", "sample-template", input_tokens=0, output_tokens=0, cost_usd=0.0, cost_basis="price-list"))
         self.log.append("job.completed", "info", "The note %s is drafted." % title, **fi.trace_ids(ctx.traceparent))
 
     def well_known(self) -> Dict[str, Any]:
@@ -125,7 +128,8 @@ class Service:
             started_at=self.started_at, status="ready", degraded=self.degraded,
             summary=[{"label": "Events", "value": len(self.log.fetch(None, fs.EVENTS_MAX_LIMIT))}],
             surfaces={"dashboard": {"path": "/", "login": True}, "events": {"path": "/fabric/v1/events"},
-                      "mcp": {"path": "/mcp", "transport": "streamable-http", "capabilities": [c["name"] for c in CAPABILITIES]}},
+                      "mcp": {"path": "/mcp", "transport": "streamable-http", "capabilities": [c["name"] for c in CAPABILITIES]},
+                      "usage": {"path": fs.USAGE_PATH}},
         )
 
 
@@ -187,6 +191,10 @@ def make_handler(svc: Service):
                 except fs.ServiceError as exc:
                     return self._send(400, {"error": str(exc)})
                 return self._send(200, page)
+            if url.path == fs.USAGE_PATH:
+                if not self._token_ok():
+                    return
+                return self._send(200, svc.usage.report(service_id=svc.id, instance=svc.instance))
             if url.path == "/mcp":
                 # No server-to-client stream here: Streamable HTTP says 405 for a GET.
                 return self._send(405, {"error": "POST JSON-RPC to /mcp."}, {"Allow": "POST"})
@@ -216,7 +224,14 @@ def make_handler(svc: Service):
                     message = json.loads(self.rfile.read(length) or b"null")
                 except ValueError:
                     return self._send(400, {"jsonrpc": "2.0", "id": None, "error": {"code": -32700, "message": "Parse error."}})
-                response = svc.mcp.handle(message)
+                try:
+                    with svc.drain.work():
+                        response = svc.mcp.handle(message, self.headers)
+                except fs.Stopping as exc:
+                    return self._send(503, {"jsonrpc": "2.0", "id": None, "error": {"code": -32000, "message": str(exc)}},
+                                      {"Retry-After": "5"})
+                if response is not None and (response.get("error") or {}).get("code") == fi.HEADER_MISMATCH:
+                    return self._send(400, response)
                 return self._send(202) if response is None else self._send(200, response)
             if url.path == "/fabric/v1/login-code":
                 if not self._token_ok():
@@ -247,12 +262,10 @@ def serve(args: argparse.Namespace) -> int:
     svc.start()
     server = make_server(svc)
 
-    def stop(signum: int, _frame: Any) -> None:
-        svc.log.append("service.stopping", "info", "%s is stopping." % svc.name)
-        threading.Thread(target=server.shutdown, daemon=True).start()
-
-    signal.signal(signal.SIGTERM, stop)
-    signal.signal(signal.SIGINT, stop)
+    # Stop taking calls, let in-flight ones finish (8 s at most), then end serve_forever; a
+    # hand-over that hangs is cut by the kit's hard exit, inside launchd's ExitTimeOut.
+    svc.drain.install(lambda drained: server.shutdown(),
+                      on_stopping=lambda: svc.log.append("service.stopping", "info", "%s is stopping." % svc.name))
     try:
         server.serve_forever(poll_interval=0.2)
     finally:

package/payload/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -5,9 +5,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.6.3"
+  version: "0.8.1"
   contract-version: "0.1.0"
-  contract-commit: "2ce392291c6668598d12cd38327e24696b5ca15c"
+  contract-commit: "623bf61358c339cb10297807b3f024b5d9f1f327"
 ---
 
 # Creating Fabric-compatible agents
@@ -119,12 +119,16 @@ python3 <plugin-dir>/skills/adapting-projects-to-fabric/scripts/adapt_project.py
   --schema-base <immutable-base-uri>
 ```
 
-Pin exactly contract `0.1.0` at commit `2ce392291c6668598d12cd38327e24696b5ca15c` and
+Pin exactly contract `0.1.0` at commit `623bf61358c339cb10297807b3f024b5d9f1f327` and
 read the pinned guide before implementing protocol details. If this skill is installed
 without its sibling, the scaffolder is absent: create the bundle by hand from the pinned
 contract's `docs/guides/connecting-compatible-agents.md` and mark the structural check
 `NOT_RUN` — do not reconstruct normative rules from memory.
 
+This default accepts underscore capability names; a declared communications name does
+not grant COM access or prove runtime admission. Existing bundles retain their explicit
+supported revision and require its exact checkout; never silently migrate their lock.
+
 The generated placeholders are deliberate blockers; a bundle still containing one is not
 ready for admission.
 

package/payload/plugins/observatory-log/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "observatory-log",
   "displayName": "Observatory Log",
   "description": "Records what changed in a watched project at the end of every turn, and asks for the one thing a diff cannot contain: why.",
-  "version": "0.17.3",
+  "version": "0.18.0",
   "license": "AGPL-3.0-only OR LicenseRef-PassionCode-Commercial",
   "author": {
     "name": "PassionCode.ai",

package/payload/plugins/observatory-log/hooks/session-start.sh

@@ -47,17 +47,28 @@ fi
 # rate-limited, so a session never waits for it and never fails because of it.
 stamps="${XDG_STATE_HOME:-$HOME/.local/state}/project-observatory"
 mkdir -p "$stamps" 2>/dev/null && chmod 700 "$stamps" 2>/dev/null
-# claim NAME SECONDS: true for exactly one caller per window. `mkdir` is atomic, so twenty
-# sessions starting at once start one job, not twenty (review F6).
+# claim NAME SECONDS: true for exactly one caller per window. The check and the stamp happen
+# under one exclusive lock, so twenty sessions starting at once start one job, not twenty —
+# also when the previous window has just expired (audit A20).
 claim() {
-  local lock="$stamps/$1.claim" then now
-  if ! mkdir "$lock" 2>/dev/null; then
-    then="$(stat -c %Y "$lock" 2>/dev/null || stat -f %m "$lock" 2>/dev/null || echo 0)"
-    now="$(date +%s)"
-    [ $((now - then)) -ge "$2" ] || return 1
-    rmdir "$lock" 2>/dev/null; mkdir "$lock" 2>/dev/null || return 1
-  fi
-  return 0
+  "$py" - "$stamps/$1.at" "$2" <<'PYCLAIM' 2>/dev/null
+import fcntl, os, sys, time
+path, window = sys.argv[1], int(sys.argv[2])
+fd = os.open(path + ".lock", os.O_CREAT | os.O_RDWR, 0o600)
+try:
+    fcntl.flock(fd, fcntl.LOCK_EX | fcntl.LOCK_NB)
+except BlockingIOError:
+    sys.exit(1)
+try:
+    last = os.stat(path).st_mtime
+except OSError:
+    last = 0
+if time.time() - last < window:
+    sys.exit(1)
+with open(path, "a"):
+    pass
+os.utime(path, None)
+PYCLAIM
 }
 # detach LOG CMD...: a new session of its own, so ending this session or its process group
 # cannot stop an install half-way (review F8).
@@ -93,7 +104,10 @@ print(1 if (d.get(\"updates\") or {}).get(\"auto\") is False else 0)" "$home/con
       "$po" full update --check >/dev/null 2>&1; rc=$?
       echo "$(date -u +%FT%TZ) check exit $rc"
       [ "$rc" = "10" ] || exit 0
-      "$po" full update --apply; echo "$(date -u +%FT%TZ) apply exit $?"
+      # No launchd (Linux): nothing for the update to stop, and saying so lets it run (A02).
+      if command -v launchctl >/dev/null 2>&1; then "$po" full update --apply
+      else "$po" full update --apply --writers-stopped; fi
+      echo "$(date -u +%FT%TZ) apply exit $?"
     ' _ "$po" "$py"
   fi
 fi

package/payload/plugins/observatory-log/skills/explaining-changes/SKILL.md

@@ -15,7 +15,7 @@ description: >-
   decision with different evidence.
 license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 metadata:
-  version: "0.17.3"
+  version: "0.18.0"
 compatibility: >-
   Requires an initialized full Project Observatory installation to persist
   records. Uses its MCP server when available in the current host; the bundled

package/payload/plugins/observatory-log/skills/handling-secrets/SKILL.md

@@ -10,7 +10,7 @@ description: >-
   provider permissions or choosing a project's authentication architecture.
 license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 metadata:
-  version: "0.17.3"
+  version: "0.18.0"
 compatibility: >-
   Requires an initialized full Project Observatory installation, Python 3.11+
   and local shell access on macOS or Linux. Provider operations additionally
@@ -30,7 +30,7 @@ names. Never ask the user to paste a credential into the conversation.
 2. Select the user's initialized `OBSERVATORY_HOME`. Run
    `project-observatory full doctor`. A missing workspace
    needs the documented onboarding before secret operations.
-3. Run `"$OBSERVATORY_PYTHON" "$OBSERVATORY_ROOT/tools/skill_check.py" handling-secrets 0.17.3`
+3. Run `"$OBSERVATORY_PYTHON" "$OBSERVATORY_ROOT/tools/skill_check.py" handling-secrets 0.18.0`
    (`full agent install` records that interpreter; the stock macOS `python3` is too old).
    If stale, read the installed skill once and follow its compatible commands.
    Do not turn an unavailable version check into a retry loop.

package/payload/plugins/observatory-log/skills/tracking-resources/SKILL.md

@@ -15,7 +15,7 @@ description: >-
   the repository.
 license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 metadata:
-  version: "0.17.3"
+  version: "0.18.0"
 compatibility: >-
   Requires a full Project Observatory installation with organizations.json
   configured; the observatory MCP server or its local CLI. Creating the resource

package/payload/plugins/passioncode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "passioncode",
   "displayName": "PassionCode.ai",
-  "version": "0.1.29",
+  "version": "0.1.31",
   "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check at session start that keeps the PassionCode.ai skill set current.",
   "author": {
     "name": "PassionCode.ai",