@passioncode-ai/passioncode 0.1.6 → 0.1.8

package/CHANGELOG.md

@@ -1,5 +1,19 @@
 # Changelog
 
+## 0.1.8 - 2026-09-29
+
+### Added
+
+- **Read the rules first.** In a passioncode-ai repository the session-start hook now prints one
+  line sending the agent to the repository's `AGENTS.md` and the organization's `CONTRIBUTING.md`
+  before its first edit; anywhere else it prints nothing, and a missing or slow git prints
+  nothing (`hooks/repo-rules.js`).
+- `working-in-passioncode` carries the names of Fabric ADR-0090 and the code region marker rule.
+
+## 0.1.7 - 2026-09-29
+
+- Observatory Log 0.12.3 (Observatory v0.8.2) in the set: source-available license and PassionCode.ai metadata; no behaviour change.
+
 ## 0.1.6 - 2026-09-29
 
 ### Fixed

package/family.json

@@ -22,7 +22,7 @@
       "name": "observatory-log",
       "displayName": "Observatory Log",
       "repo": "passioncode-ai/project-observatory-dashboard",
-      "ref": "v0.8.1",
+      "ref": "v0.8.2",
       "kind": "plugin",
       "path": "observatory/engine/skill/plugins/observatory-log",
       "legacyPluginIds": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/passioncode",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "Every PassionCode.ai agent skill — Fabric Agent Adapter, Observatory Log and the organisation's working rules — for Claude Code and every other agent on the machine, updated as one set.",
   "bin": {
     "passioncode": "bin/passioncode.js"

package/payload/.claude-plugin/marketplace.json

@@ -23,19 +23,19 @@
       "name": "observatory-log",
       "displayName": "Observatory Log",
       "source": "./plugins/observatory-log",
-      "version": "0.12.2",
+      "version": "0.12.3",
       "description": "Records what changed in a watched project at the end of every turn, and asks for the one thing a diff cannot contain: why.",
       "author": {
-        "name": "Sergey Sheleg",
-        "url": "https://sshlg.me/"
+        "name": "PassionCode.ai",
+        "url": "https://passioncode.ai/"
       },
-      "license": "MIT"
+      "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
     },
     {
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "source": "./plugins/passioncode",
-      "version": "0.1.6",
+      "version": "0.1.8",
       "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",

package/payload/manifest.json

@@ -1,6 +1,6 @@
 {
   "family": "passioncode",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "release": true,
   "members": [
     {
@@ -34,9 +34,9 @@
       "name": "observatory-log",
       "displayName": "Observatory Log",
       "repo": "passioncode-ai/project-observatory-dashboard",
-      "ref": "v0.8.1",
-      "commit": "c6410a2706e6f2e3fc1e2b7b929bf8c5e116c71b",
-      "version": "0.12.2",
+      "ref": "v0.8.2",
+      "commit": "4f3591de65cd9a28de18212d53da966405f46f22",
+      "version": "0.12.3",
       "via": "clone of https://***@github.com/passioncode-ai/project-observatory-dashboard.git",
       "skills": [
         "explaining-changes",
@@ -49,28 +49,28 @@
       "legacyMarketplaces": [
         "observatory-log"
       ],
-      "contentHash": "sha256:6884e0c97f0c5da4030c5104905d8d42fed113981f8b9d4254f96000597c2159",
+      "contentHash": "sha256:0ddb7efdfd9977c55d65e58a3cd8dc9cb9da3b8eb9ab02c83e3a159ea233017b",
       "description": "Records what changed in a watched project at the end of every turn, and asks for the one thing a diff cannot contain: why.",
       "author": {
-        "name": "Sergey Sheleg",
-        "url": "https://sshlg.me/"
+        "name": "PassionCode.ai",
+        "url": "https://passioncode.ai/"
       },
-      "license": "MIT"
+      "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0"
     },
     {
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "repo": "passioncode-ai/passioncode",
-      "ref": "v0.1.6",
+      "ref": "v0.1.8",
       "commit": null,
-      "version": "0.1.6",
+      "version": "0.1.8",
       "via": "this repository",
       "skills": [
         "working-in-passioncode"
       ],
       "legacyPluginIds": [],
       "legacyMarketplaces": [],
-      "contentHash": "sha256:3d48fb23d2ae54e6283e056116103c8331c4320094d97618677b990266e6ed1c",
+      "contentHash": "sha256:e233f0c95abb4f060aa8428c4a1509e4ef1a3777b5597a6771d7abd2a3a439ef",
       "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",

package/payload/plugins/observatory-log/.claude-plugin/plugin.json

@@ -3,11 +3,11 @@
   "name": "observatory-log",
   "displayName": "Observatory Log",
   "description": "Records what changed in a watched project at the end of every turn, and asks for the one thing a diff cannot contain: why.",
-  "version": "0.12.2",
-  "license": "MIT",
+  "version": "0.12.3",
+  "license": "PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0",
   "author": {
-    "name": "Sergey Sheleg",
-    "url": "https://sshlg.me/"
+    "name": "PassionCode.ai",
+    "url": "https://passioncode.ai/"
   },
   "homepage": "https://github.com/passioncode-ai/project-observatory-dashboard",
   "keywords": [

package/payload/plugins/observatory-log/skills/explaining-changes/SKILL.md

@@ -13,9 +13,9 @@ description: >-
   message, a PR description or a changelog, and NOT for changing the typed
   registry — a registry change is `observatory_propose`, which is a different
   decision with different evidence.
-license: MIT
+license: PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0
 metadata:
-  version: "0.12.2"
+  version: "0.12.3"
 compatibility: >-
   Requires an initialized full Project Observatory installation to persist
   records. Uses its MCP server when available in the current host; the bundled

package/payload/plugins/observatory-log/skills/handling-secrets/SKILL.md

@@ -7,9 +7,9 @@ description: >-
   Keeps credential values out of prompts and command arguments, uses named slots,
   and records changes without copying values into reports. NOT for granting
   provider permissions or choosing a project's authentication architecture.
-license: MIT
+license: PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0
 metadata:
-  version: "0.12.2"
+  version: "0.12.3"
 compatibility: >-
   Requires an initialized full Project Observatory installation, Python 3.11+
   and local shell access on macOS or Linux. Provider operations additionally
@@ -29,7 +29,7 @@ names. Never ask the user to paste a credential into the conversation.
 2. Select the user's initialized `OBSERVATORY_HOME`. Run
    `python3 "$OBSERVATORY_ROOT/observatory.py" doctor`. A missing workspace
    needs the documented onboarding before secret operations.
-3. Run `python3 "$OBSERVATORY_ROOT/tools/skill_check.py" handling-secrets 0.12.2`.
+3. Run `python3 "$OBSERVATORY_ROOT/tools/skill_check.py" handling-secrets 0.12.3`.
    If stale, read the installed skill once and follow its compatible commands.
    Do not turn an unavailable version check into a retry loop.
 4. Inspect names using `tools/use_secret.py names PROJECT` or `tools/vault.py

package/payload/plugins/observatory-log/skills/tracking-resources/SKILL.md

@@ -13,9 +13,9 @@ description: >-
   figma-use), wiring analytics or pixels (ad-tracking), provisioning the resource
   with the provider's own tools, secrets (handling-secrets) or code changes inside
   the repository.
-license: MIT
+license: PolyForm-Noncommercial-1.0.0 OR LicenseRef-PolyForm-Internal-Use-1.0.0
 metadata:
-  version: "0.12.2"
+  version: "0.12.3"
 compatibility: >-
   Requires a full Project Observatory installation with organizations.json
   configured; the observatory MCP server or its local CLI. Creating the resource

package/payload/plugins/passioncode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "passioncode",
   "displayName": "PassionCode.ai",
-  "version": "0.1.6",
+  "version": "0.1.8",
   "description": "The organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check at session start that keeps the PassionCode.ai skill set current.",
   "author": {
     "name": "PassionCode.ai",

package/payload/plugins/passioncode/hooks/repo-rules.js

@@ -0,0 +1,36 @@
+'use strict';
+/**
+ * The read-first reminder. In a passioncode-ai repository an agent reads the repository's
+ * AGENTS.md and the organization's CONTRIBUTING.md before its first edit — names, landing
+ * rules, code region markers, the shared tools. A rule an agent has to remember is a rule it
+ * forgets in the one repository where it mattered, so the session start says it, in one line,
+ * and only where it applies. Anything unexpected (no git, no origin, a slow git) prints nothing:
+ * a reminder must never cost a session.
+ */
+const { execFileSync } = require('child_process');
+
+const CONTRIBUTING = 'https://github.com/passioncode-ai/.github/blob/main/CONTRIBUTING.md';
+
+/** The GitHub organization an origin URL belongs to, when it is passioncode-ai; else null. */
+function orgOf(url) {
+  const m = String(url || '').trim().match(/^(?:git@github\.com:|ssh:\/\/git@github\.com\/|https:\/\/github\.com\/)([^/]+)\//);
+  return m && m[1] === 'passioncode-ai' ? 'passioncode-ai' : null;
+}
+
+function originOf(dir) {
+  try {
+    return execFileSync('git', ['-C', dir, 'remote', 'get-url', 'origin'], {
+      encoding: 'utf8', timeout: 2000, stdio: ['ignore', 'pipe', 'ignore'],
+    }).trim();
+  } catch (_) {
+    return '';
+  }
+}
+
+/** The one line to print at session start in `dir`, or null. */
+function rulesLine(dir) {
+  if (!orgOf(originOf(dir))) return null;
+  return `[passioncode] passioncode-ai repository: read AGENTS.md and the organization's CONTRIBUTING.md (${CONTRIBUTING}) before the first edit — names, landing rules, code region markers.`;
+}
+
+module.exports = { CONTRIBUTING, orgOf, rulesLine };

package/payload/plugins/passioncode/hooks/session-start.js

@@ -10,6 +10,7 @@ const fs = require('fs');
 const os = require('os');
 const path = require('path');
 const { decide, loadTrust } = require('./update-check');
+const { rulesLine } = require('./repo-rules');
 
 const DIR = process.env.PASSIONCODE_HOME || path.join(os.homedir(), '.passioncode');
 const STATE = path.join(DIR, 'state.json');
@@ -41,5 +42,10 @@ try {
     fs.writeFileSync(tmp, JSON.stringify(fresh, null, 2));
     fs.renameSync(tmp, STATE);
   }
+  // Claude Code passes the session's directory on stdin; the process cwd is the fallback.
+  let cwd = process.cwd();
+  try { const input = JSON.parse(fs.readFileSync(0, 'utf8') || '{}'); if (input && typeof input.cwd === 'string') cwd = input.cwd; } catch (_) { /* no stdin */ }
+  const rules = rulesLine(cwd);
+  if (rules) lines.unshift(rules);
   if (lines.length) process.stdout.write(lines.join('\n') + '\n');
 } catch (_) { /* never fail a session start */ }

package/payload/plugins/passioncode/skills/working-in-passioncode/SKILL.md

@@ -44,6 +44,18 @@ where a repository's own `AGENTS.md` is stricter, **that file wins**.
 No org-index clone: `gh repo clone passioncode-ai/org-index`. No access at all: say so,
 follow the repository's `AGENTS.md`, and name that you worked from it alone.
 
+Also, before the first edit:
+
+- **Read the organization's [CONTRIBUTING.md](https://github.com/passioncode-ai/.github/blob/main/CONTRIBUTING.md)**
+  — the session-start hook of this plugin prints that line in every passioncode-ai repository.
+- **Names** (Fabric ADR-0090): PassionCode.ai is the organization; **Fabric** is the product,
+  the CEO AI agent; Fabric's tools carry its full name before any short form (Fabric Inbox,
+  Fabric Dashboards, Fabric Switchboard); the Fabric Agent Contract and Adapter make any agent
+  Fabric-compatible; Project Observatory keeps its own name. Never "PassionCode app".
+- **Code region markers**: fence a feature, module or special condition with
+  `#region <slug> — docs: <path>#<anchor>` … `#endregion <slug>` in the file's comment syntax;
+  the reference must resolve. Repositories that ship `check-regions` fail a broken one.
+
 ## 2. Landing on main
 
 | `main` is | Land by |