@passioncode-ai/passioncode 0.2.17 → 0.2.18

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/protocol.md

@@ -1,4 +1,4 @@
-# fabric-service/0.1 — wire reference
+# fabric-service/0.1: wire reference
 
 Pinned to `fabric-agent-contract` commit `c55f2d5a11c9a0197e958e87212fca7ae1154769`
 (`docs/specification/service.md`, DEC-0015; the usage report DEC-0021; Windows and Linux supervision
@@ -14,13 +14,13 @@ this page is the working summary. Extension key:
 
 ## Contents
 
-- Descriptor — written by the installer
+- Descriptor: written by the installer
 - Well-known document
 - Events page
 - Login code and the operator session
 - Semantic rules a host applies
 
-## Descriptor — written by the installer
+## Descriptor: written by the installer
 
 Directory: macOS `~/Library/Application Support/ai.passioncode.fabric/services/`,
 Linux `${XDG_DATA_HOME:-~/.local/share}/passioncode-fabric/services/`, Windows
@@ -33,13 +33,13 @@ File `<id>.<instance>.json`, mode 0600 (on Windows a protected ACL), atomic.
 | `id`, `instance` | `^[a-z][a-z0-9-]{1,62}$`, `^[a-z][a-z0-9-]{0,31}$` (default `default`); the pair is unique per machine |
 | `name`, `summary` | ≤ 80 and ≤ 200 characters |
 | `origin` | `http://127.0.0.1:<port>`; the port is a machine-wide claim. Optional for an app's descriptor only (`manager: "person"`, DEC-0069): its live origin and process id are in the app's own liveness file, and a descriptor without an origin claims no port (`FAC-SEM-010`) |
-| `auth` | `tokenFile` (0600; on Windows a protected ACL — owner and every granting entry the current user, SYSTEM or Administrators: service.md *Windows token files*, DEC-0032, DEC-0033); `header` default `Authorization` with `scheme` `Bearer`; any other header carries the raw token with `scheme: "none"` |
+| `auth` | `tokenFile` (0600; on Windows a protected ACL: owner and every granting entry the current user, SYSTEM or Administrators: service.md *Windows token files*, DEC-0032, DEC-0033); `header` default `Authorization` with `scheme` `Bearer`; any other header carries the raw token with `scheme: "none"` |
 | `lifecycle` | `manager` `launchd` (then `label` and `plist`), `systemd` (then `unit`, a `systemctl --user` unit), `task-scheduler` (then `task`, a per-user Scheduled Task), `node` (Project Observatory's node supervises it as its child, with no supervisor file, DEC-0061), `person` (an app a person installs and starts, then `app`, the installed app, DEC-0069) or `none`; `unit` and `task` are refused beside any other manager (DEC-0032), `label` and `plist` beside any but `launchd` (DEC-0057), `app` beside any but `person`. Both kits and the probe accept all six; both kits write the unit and the task (`systemd_unit`, `task_xml` / `systemdUnit`, `taskXml`). An app's descriptor says it is installed, never that it runs: the probe checks `app` is still there (`descriptor.app-installed`) and reads no well-known document; a reader that finds the app gone treats the descriptor as stale (`app_descriptor_stale` / `appDescriptorStale`), and an app that writes its own descriptor rewrites it only when `app_descriptor_action` / `appDescriptorAction` says `write` |
 | `paths` | `data` (required), `logs[]`, optional `config`, `cache` |
-| `commands` | only `doctor` and `update`, argument arrays whose first item is an absolute or `~/` path (Windows: also `C:\…`, `C:/…` or `~\…`, never a network share — DEC-0032) |
+| `commands` | only `doctor` and `update`, argument arrays whose first item is an absolute or `~/` path (Windows: also `C:\…`, `C:/…` or `~\…`, never a network share; DEC-0032) |
 | `source.repository`, `fabricManifest` | optional |
-| `installedAt`, `installedBy` | when, and who installed it: the installer and its version as a string, or `{by, role?, tool}` (DEC-0061) — `by` `person` (with `role` `operator` or `administrator`), `node` or `organization`; `role` for a person only; `tool` the installer and its version. It names a role, never a person. An app's descriptor uses the object form with `by: "person"`. `register_remote` / `registerRemote` and the sample write the object form |
-| `runner` | optional `{kind?, credentialKind}` (DEC-0061): `credentialKind` `subscription`, `key`, `platform-metered` or `none` — a kind, never a credential (`FAC-SEM-086` refuses a credential-shaped value here or in `installedBy`); a subscription names its vendor's runner (`claude-code`, `kimi-code`, `codex`) |
+| `installedAt`, `installedBy` | when, and who installed it: the installer and its version as a string, or `{by, role?, tool}` (DEC-0061): `by` `person` (with `role` `operator` or `administrator`), `node` or `organization`; `role` for a person only; `tool` the installer and its version. It names a role, never a person. An app's descriptor uses the object form with `by: "person"`. `register_remote` / `registerRemote` and the sample write the object form |
+| `runner` | optional `{kind?, credentialKind}` (DEC-0061): `credentialKind` `subscription`, `key`, `platform-metered` or `none`: a kind, never a credential (`FAC-SEM-086` refuses a credential-shaped value here or in `installedBy`); a subscription names its vendor's runner (`claude-code`, `kimi-code`, `codex`) |
 | `peer` | optional `{endpoint, custody, residency, maxDataClass}` (DEC-0061): the service is offered to others. `endpoint` `https://<dns-name>[:<port>][/<path>]`, never a reserved name (`FAC-SEM-085`); `custody` `organization-managed` or `personal`; `residency` 1–32 ISO 3166-1 alpha-2 codes, `EU` admitted, user-assigned codes refused; `maxDataClass` `public` < `internal` < `confidential` < `restricted`. An offer needs `runner` and never runs on a subscription. A host sends a request from anyone but the operator only when `peer_refusal` / `peerRefusal` answers null (`FAC-SEM-088`); usage rows may take `route: "platform-metered"` |
 
 ## Identifier equality (DEC-0076)
@@ -53,7 +53,7 @@ and a value that is not a string is compared as it is. The kits compare by it in
 events), FAC-SEM-076 (estate grants and their revocations) and FAC-SEM-014 (a provider entry's `providerId`), and they
 write the identifiers they scaffold in normal form.
 
-## Well-known document — `GET /.well-known/fabric-service`
+## Well-known document: `GET /.well-known/fabric-service`
 
 No auth; the Host/Origin guard applies; answered from memory in under 100 ms.
 
@@ -83,8 +83,8 @@ No auth; the Host/Origin guard applies; answered from memory in under 100 ms.
 - `build` needs `commit` or `digest` (`sha256:<64 hex>`).
 - `summary`: at most six tiles; `attention: true` counts toward the host's badge.
 - `surfaces.events` is required; `dashboard` and `mcp` when the service has them; `usage`
-  (DEC-0021) when the service reports its spend — see [the usage reference](usage.md);
-  `operatorChannel.path` (DEC-0034) when the service has an operator channel — its status
+  (DEC-0021) when the service reports its spend (see [the usage reference](usage.md));
+  `operatorChannel.path` (DEC-0034) when the service has an operator channel; its status
   document follows the contract's `operator-channel-status.schema.json` and is token-protected
   like the events feed. The kits do not serve it yet.
 - `extensions` MAY carry the embedded dashboard declaration under
@@ -98,7 +98,7 @@ No auth; the Host/Origin guard applies; answered from memory in under 100 ms.
   token is not an MCP credential: a host and the probe never call `/mcp` with it as a caller.
   The kits verify them with `fabric_delegation` / `fabric-delegation.mjs` ([delegation](delegation.md)).
 
-## Events page — `GET /fabric/v1/events?after=<cursor>&limit=<n>`
+## Events page: `GET /fabric/v1/events?after=<cursor>&limit=<n>`
 
 Token required. `limit` default 50, maximum 200. Without `after`: the newest `limit`,
 ascending. `cursor` is the last id returned, or the `after` you sent when the page is
@@ -134,7 +134,7 @@ reading it further (HTTP 400, or an MCP `isError` result's `structuredContent`);
 own fault `no-accepted-revisions`. `PROTOCOL_REVISIONS` is the contract's register; `check_service.py` reads
 `well-known.protocols`.
 
-## Login code and the operator session — `POST /fabric/v1/login-code`
+## Login code and the operator session: `POST /fabric/v1/login-code`
 
 Token required → `{ "url": "/fabric/v1/login?code=<16–256 url-safe chars>", "expiresAt": "…" }`,
 single use, at most 120 s, recorded as used before it is honoured. `GET` that URL →
@@ -151,4 +151,4 @@ ended session answers `401` on the dashboard page.
 | `FAC-SEM-010` | no two descriptors claim one port or one `id.instance` |
 | `FAC-SEM-011` | `ready` carries no degraded source |
 | `FAC-SEM-012` | commands start with an absolute or `~/` executable |
-| `FAC-SEM-025` | a usage report adds up; an all-unpriced row costs `null`, not `0` (DEC-0021) |
+| `FAC-SEM-025` | a usage report adds up; an all-unpriced row costs `null`, not `0` (DEC-0021); unmeasured calls are within calls and a day's are its models' sum (DEC-0091) |

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/remote-placement.md

@@ -1,4 +1,4 @@
-# The remote placement — online agents and dashboards
+# The remote placement: online agents and dashboards
 
 Normative source: `fabric-agent-contract` `docs/specification/service.md` → *Remote placement*,
 DEC-0019, at the commit this skill pins. This page is the how-to.
@@ -7,7 +7,7 @@ DEC-0019, at the commit this skill pins. This page is the how-to.
 
 It is, when it runs outside the operator's computer and the operator wants it in Fabric beside
 the local services: a hosted dashboard, an agent on a server, a bot's web console. It keeps the
-same objects — well-known document, events feed, login code — at the same paths.
+same objects (well-known document, events feed, login code) at the same paths.
 
 ## The descriptor
 
@@ -47,7 +47,7 @@ watch the gate fail.
   the same value is written on the operator's computer by `registerRemote`. Compare in constant
   time (`tokenMatches`).
 - **Session key**: 32 random bytes, a separate secret; rotating it signs every operator out.
-- **Codes and sessions**: `MemoryCodeStore` — a restart forgets every outstanding code, so none
+- **Codes and sessions**: `MemoryCodeStore`: a restart forgets every outstanding code, so none
   can be replayed, and every session record, so a deploy signs the operator out (DEC-0039: the
   server keeps each session's last use and logout). The host signs in again on the page's `401`.
   To keep sessions across a deploy, pass a durable store (any object with `load()` and `save()`).
@@ -68,7 +68,7 @@ reach the service, and still need its own `403`.
 
 | Situation | Host |
 |---|---|
-| `401` on the well-known document | `down` — the service refused the token; never `foreign` |
+| `401` on the well-known document | `down`: the service refused the token; never `foreign` |
 | answer names another `id.instance` | `foreign`; the token is not sent again until the descriptor changes |
 | certificate invalid or for another name | `down`, the reason names TLS |
 | redirect | not followed; `down` |

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/settings-backups.md

@@ -1,8 +1,8 @@
-# Settings backups — what the operator decided survives the data directory (DEC-0025)
+# Settings backups: what the operator decided survives the data directory (DEC-0025)
 
 Fabric Agent Contract DEC-0025, `docs/specification/service.md` → *Settings backup*, schema
 `schemas/settings-backup.schema.json`, rule `FAC-SEM-035`. A service whose store holds what the operator
-decided — which projects it serves, how each is bound, which secret slot each binding uses, their overrides —
+decided (which projects it serves, how each is bound, which secret slot each binding uses, their overrides)
 SHOULD keep settings backups, so a lost, purged or wrongly migrated data directory costs the operator nothing.
 
 ## Where
@@ -61,7 +61,7 @@ plan = fs.restore_plan(doc, {"projects": {"columns": [...], "key": ["id"], "requ
 # plan["tables"]["projects"]: insert, present, droppedColumns, defaultedColumns, missingRequired, refused
 ```
 
-- **Automatic restore** only on a *fresh* database — no domain records **and** the service has never started —
+- **Automatic restore** only on a *fresh* database (no domain records **and** the service has never started),
   so a restart never undoes a deletion. Insert `plan[...]["insert"]` and add every row the database refuses to
   `refused` with its key and reason.
 - **Manual restore** shows the plan first; applying it is the operator's act, never an agent's.

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/surfaces-and-auth.md

@@ -16,13 +16,13 @@
   the estate's delegation tokens; declare `auth.delegation {issuer, jwks}` in the well-known
   document. The probe treats it like `own` and checks the declaration
   (`auth.delegation-declared`). The kits verify the tokens: put `delegation_gate` /
-  `delegationGate` in front of the tools — see [the delegation reference](delegation.md).
+  `delegationGate` in front of the tools (see [the delegation reference](delegation.md)).
 - Register it into a client config with the service's own command
   (`<tool> mcp-register`), which writes `{"type":"http","url":"http://127.0.0.1:<port>/mcp","headers":{...}}`
   atomically, aborts if the file changed meanwhile, and keeps one 0600 backup. The token
-  goes in `headers`, never in the URL — every log that records a URL prints its query
+  goes in `headers`, never in the URL: every log that records a URL prints its query
   string. An HTTP registration starts nothing per session: every client session talks to the
-  one resident service (LC-19). A stdio server, by contrast, is a process per session — keep
+  one resident service (LC-19). A stdio server, by contrast, is a process per session; keep
   one only at project scope.
 - Ship server `instructions` that tell a caller where to start and that every answer
   carries `degraded`.
@@ -39,7 +39,7 @@ a sign-in link only when stdout is a terminal.
 ## A2A for remote agents
 
 Remote reach goes through A2A `1.0` over HTTPS or an authenticated gateway in front of
-MCP — never by binding a LAN address. A tunnel (Tailscale Serve and the like) is an
+MCP, never by binding a LAN address. A tunnel (Tailscale Serve and the like) is an
 outward surface with its own token lifetime; watch it like a service, because nothing
 else will notice it expire.
 
@@ -50,7 +50,7 @@ else will notice it expire.
 - Compared in constant time (`token_matches`).
 - Rotation is an operator act: write a new file, restart, re-run `mcp-register`.
 - Same-user processes can read it. The protocol defends against web pages and
-  mistakes, not against hostile code running as the operator — say so in SECURITY.md.
+  mistakes, not against hostile code running as the operator; say so in SECURITY.md.
 
 ## Dashboard session
 

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/usage.md

@@ -1,4 +1,4 @@
-# Usage report — what the agent spent (DEC-0021)
+# Usage report: what the agent spent (DEC-0021)
 
 Fabric Agent Contract DEC-0021, `docs/specification/service.md` → *Usage report*, schema
 `schemas/service-usage.schema.json`. Optional. A service that calls paid models or tools should
@@ -39,7 +39,8 @@ ledger.record(k.makeUsageReceipt('openrouter', model, { inputTokens, outputToken
 - **Unknown tokens are named too** (DEC-0091). When the provider gave no token count (a stream cut off, a local
   model without a counter), pass `tokens_measured=False` / `tokensMeasured: false` with the tokens you have (often 0).
   The receipt carries `tokensMeasured: false`, and the report counts the call in `unmeasuredCalls` on its day and model
-  row, never more than `calls`; a host then shows the token totals as a lower bound.
+  row, never more than `calls`; a host then shows the token totals as a lower bound. A job whose usage you send as
+  `null` or `partial` ([interop](interop.md)) is such a call.
 - **No content.** A receipt carries no prompt, output, caller or user id. The kits accept only the
   fields above.
 - If the service already keeps a ledger (a jobs table with token counts), build the receipts from
@@ -63,7 +64,7 @@ left out.
 it, and the host only shows it.
 
 **Every limit (DEC-0027).** Pass `budgets` to list every spending limit the service applies,
-enforced or not, so the spend view shows all of them — the operator asked for that on 2026-10-07:
+enforced or not, so the spend view shows all of them; the operator asked for that on 2026-10-07:
 
 ```python
 ledger.report(service_id=ID, budget={"period": "month", "limitUsd": 100}, budgets=[
@@ -78,7 +79,7 @@ ledger.report(service_id=ID, budget={"period": "month", "limitUsd": 100}, budget
   way `budget` is, so `budget` and its twin in `budgets` never disagree. A per-order limit
   (`per_job`, `approval`) gets `spentUsd: null`. Every other limit states its own spend.
 - `scope` is `machine`, `project`, `pool` or `job`; a `project` or `pool` limit names its
-  `subject`. A limit has at most one window — `period`, `windowSeconds` or `since` — and it agrees
+  `subject`. A limit has at most one window (`period`, `windowSeconds` or `since`), and it agrees
   with the kind (`daily`: the day or 86400 s; `monthly`: the month or 28–31 days; `velocity`: a
   rolling window). `tripped: true` (work stopped by it now) needs `enforced: true`. An unknown
   kind is shown generically, never refused.

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/check_service.py

@@ -90,12 +90,12 @@ def marker_problem(plist: dict) -> Optional[str]:
     fix = ("a copy that finds the lock held exits 75 at once and KeepAlive respawns it every ThrottleInterval; "
            "regenerate the plist with launchd_plist / launchdPlist and reinstall")
     if marker["kind"] == "conflict":
-        return "%s — %s" % (fs.marker_conflict_message(marker), fix)
+        return "%s: %s" % (fs.marker_conflict_message(marker), fix)
     if marker["kind"] == "supervised":
-        return "the marker names %s, not launchd — %s" % (marker["manager"], fix)
+        return "the marker names %s, not launchd: %s" % (marker["manager"], fix)
     if marker.get("unreadable") is not None:
-        return "the marker %r names no supervisor — %s" % (marker["unreadable"], fix)
-    return "no %s=launchd — %s" % (fs.SUPERVISOR_ENV, fix)
+        return "the marker %r names no supervisor: %s" % (marker["unreadable"], fix)
+    return "no %s=launchd: %s" % (fs.SUPERVISOR_ENV, fix)
 
 
 def priority_problems(plist: dict) -> list:
@@ -729,7 +729,7 @@ class Probe:
                  marker or "%s: %s=launchd, so a copy that finds the lock held backs off" % (plist_path.name, fs.SUPERVISOR_ENV))
         slow = priority_problems(plist)
         self.add("lifecycle.priority", "FAIL" if slow else "PASS",
-                 "; ".join(slow) + " — macOS may starve the service under load and hosts then see an outage; use ProcessType Standard"
+                 "; ".join(slow) + ". macOS may starve the service under load and hosts then see an outage; use ProcessType Standard"
                  if slow else "%s: scheduled as a standard process" % plist_path.name)
         if sys.platform != "darwin" or not shutil.which("launchctl"):
             self.add("lifecycle.one-copy", "NOT_RUN", "launchctl is not available")
@@ -920,51 +920,26 @@ def usage_problems(report: Any, service_id: str, instance: str) -> List[str]:
     days = report.get("days")
     if not isinstance(days, list) or len(days) > fs.USAGE_DAYS:
         return out + ["days is not a list of at most 31"]
-    fields = ("calls", "unpricedCalls", "unmeasuredCalls", "inputTokens", "outputTokens", "cacheReadTokens", "cacheWriteTokens")
-
-    def priced(row: Dict[str, Any], at: str) -> None:
-        calls, unpriced, cost = row.get("calls", 0), row.get("unpricedCalls", 0), row.get("costUsd")
-        if unpriced > calls:
-            out.append("%s: more unpriced calls than calls" % at)
-        if row.get("unmeasuredCalls", 0) > calls:
-            out.append("%s: more calls with unknown tokens than calls (DEC-0091)" % at)
-        if calls and unpriced == calls and cost is not None:
-            out.append("%s: every call is unpriced, so the cost must be null, not %r" % (at, cost))
-        if unpriced < calls and cost is None:
-            out.append("%s: priced calls carry a cost" % at)
-        if cost is not None and (not isinstance(cost, (int, float)) or cost < 0):
-            out.append("%s: costUsd is not a non-negative number" % at)
-
-    previous = ""
+    # The arithmetic of FAC-SEM-025 is the kit's `usage_findings`, the contract's `usageRules` held to its vectors: one
+    # implementation, so the probe never disagrees with the kit and never throws on a count that is not a number.
     for i, day in enumerate(days):
-        at = "days[%d]" % i
-        date = str(day.get("date", "")) if isinstance(day, dict) else ""
-        if not re.match(r"^\d{4}-\d{2}-\d{2}$", date) or date <= previous:
-            out.append("%s: dates must run forward" % at)
-        previous = date
-        priced(day, at)
-        models = day.get("byModel") if isinstance(day, dict) else None
-        if not isinstance(models, list):
-            out.append("%s: byModel missing" % at)
+        if not isinstance(day, dict):
+            out.append("days[%d]: not an object" % i)
             continue
-        for j, m in enumerate(models):
-            priced(m, "%s.byModel[%d]" % (at, j))
-        for f in fields:
-            if day.get(f, 0) != sum(m.get(f, 0) for m in models):
-                out.append("%s: %s is not the sum of its models" % (at, f))
-        known = sum(m["costUsd"] for m in models if isinstance(m.get("costUsd"), (int, float)))
-        if isinstance(day.get("costUsd"), (int, float)) and abs(day["costUsd"] - known) > 1e-6:
-            out.append("%s: costUsd is not the sum of its models' known costs" % at)
-        for j, m in enumerate(models):
+        if not isinstance(day.get("byModel"), list):
+            out.append("days[%d]: byModel missing" % i)
+            continue
+        for row, at in [(day, "days[%d]" % i)] + [(m, "days[%d].byModel[%d]" % (i, j)) for j, m in enumerate(day["byModel"]) if isinstance(m, dict)]:
+            cost = row.get("costUsd")
+            if cost is not None and (isinstance(cost, bool) or not isinstance(cost, (int, float)) or cost < 0):
+                out.append("%s: costUsd is not a non-negative number" % at)
+        for j, m in enumerate(day["byModel"]):
             # DEC-0046, DEC-0061: a row's route is a login in its vendor's runner, an issued key, or the platform's
             # own metered models (a listing in the cloud).
-            if "route" in m and m["route"] not in fs.USAGE_ROUTES:
-                out.append("%s.byModel[%d]: route %r is not subscription, key or platform-metered" % (at, j, m["route"]))
-    # DEC-0065: the window and the project attribution, as the contract's usageRules reads them (FAC-SEM-025).
+            if isinstance(m, dict) and "route" in m and m["route"] not in fs.USAGE_ROUTES:
+                out.append("days[%d].byModel[%d]: route %r is not subscription, key or platform-metered" % (i, j, m["route"]))
     for finding in fs.usage_findings(report):
-        path, message = finding["instancePath"], finding["message"]
-        if path.startswith(("/byProject", "/generatedAt")) or "generatedAt" in message or "exists in its month" in message:
-            out.append("%s: %s" % (path or "/", message))
+        out.append("%s: %s" % (finding["instancePath"] or "/", finding["message"]))
     return out
 
 

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/dashboard_kit.py

@@ -408,7 +408,7 @@ def main(argv: Optional[Sequence[str]] = None) -> int:
             for c in report["copies"]:
                 print("  %-8s %s (%s)" % (c["state"], c["path"], c["version"] or "no version marker"))
             if not report["copies"]:
-                print("  no kit copy" + (" — services %s declare a dashboard" % ", ".join(report["services"])
+                print("  no kit copy" + (" (services %s declare a dashboard)" % ", ".join(report["services"])
                                          if report["dashboard"] and report["services"] else ""))
             if report["services"]:
                 print("  services from this repository: %s" % ", ".join(report["services"]))

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-board.mjs

@@ -362,7 +362,7 @@ export class BoardSession {
     try {
       return await this.post(this.grant.origin, body, this.grant.bearer(), { session: this.mcpSession, timeout: this.timeout, method, protocolVersion: this.mcpSession ? this.protocolVersion : undefined });
     } catch (e) {
-      if (e instanceof HubError) throw new BoardError('unreachable', 'Fabric\'s hub did not answer; a write may have been stored — send it again with the same idempotency key.', true);
+      if (e instanceof HubError) throw new BoardError('unreachable', 'Fabric\'s hub did not answer; a write may have been stored, so send it again with the same idempotency key.', true);
       throw e;
     }
   }

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-delegation.mjs

@@ -178,11 +178,12 @@ function authentic(token, jwks, typ) {
   return { compact, kid, x: found.x };
 }
 
-/** Depth of an actor chain; Infinity for a chain that is not one (a missing or non-string sub at any level). */
 const ORG_CONTEXT = /^org:[A-Za-z0-9][A-Za-z0-9_-]{0,127}$/;
 /** DEC-0090: a partner actor is exactly {partner: org:<id>}, never with a sub, a session or an act. */
 export const isPartnerActor = (node) => isObject(node) && typeof node.partner === 'string' && ORG_CONTEXT.test(node.partner) && Object.keys(node).length === 1;
 
+/** Depth of an actor chain; Infinity for a chain that is not one (a missing or non-string sub at any level). A partner
+ * actor ends the chain and counts, never begins it (DEC-0090). */
 export function chainDepth(act) {
   let depth = 0;
   let node = act;

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-package.mjs

@@ -420,7 +420,7 @@ export function readFolder(folder) {
     }
   };
   walk(folder, '');
-  if (refused.length) throw new PackageError(`Not packed: remove these or pack a clean copy — ${refused.sort().join('; ')}`);
+  if (refused.length) throw new PackageError(`Not packed: remove these or pack a clean copy: ${refused.sort().join('; ')}`);
   return files;
 }
 

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-service.mjs

@@ -17,7 +17,7 @@ export const EXTENSION_KEY = 'https://fabric.passioncode.ai/agent-contract/exten
 // The embedded dashboard declaration (fabric-dashboard/0.1, DEC-0036 ED-9), under the well-known
 // document's `extensions`. The kit is assets/dashboard-kit; its version is the one in kit.json.
 export const DASHBOARD_EXTENSION_KEY = 'https://fabric.passioncode.ai/agent-contract/extensions/dashboard/0.1';
-export const DASHBOARD_KIT = 'fabric-dashboard-kit@1.1.0';
+export const DASHBOARD_KIT = 'fabric-dashboard-kit@1.1.1';
 export const REFERENCE_THEMES = ['graphite', 'fabric', 'paper', 'forest', 'ocean', 'ember', 'contrast'];
 export const EXIT_ALREADY_RUNNING = 75;
 // Lifecycle rules: references/lifecycle.md (the rule for this kit's users; it implements the public
@@ -1119,6 +1119,25 @@ function pricedRow(row, at) {
  * date exists, not after `generatedAt`'s UTC date, at most 30 days before it) and the project attribution (each project
  * once by its normal form, each task run once; calls, priced calls and known costs bounded). Never throws.
  */
+/** The contract's `toNumber` (src/findings.ts): `Number()` without its throw on an object such as {"toString": 1}. */
+function toNumber(value) {
+  try {
+    return Number(value);
+  } catch {
+    return Number.NaN;
+  }
+}
+
+/** The contract's `show`: `String()`, or the value's JSON where `String()` would throw. */
+function show(value) {
+  if (typeof value === 'string') return value;
+  try {
+    return String(value);
+  } catch {
+    return JSON.stringify(value) ?? typeof value;
+  }
+}
+
 export function usageFindings(report) {
   const value = typeof report === 'object' && report !== null && !Array.isArray(report) ? report : {};
   const findings = [];
@@ -1127,23 +1146,24 @@ export function usageFindings(report) {
   let previous = '';
   days.forEach((day, i) => {
     const at = `/days/${i}`;
-    const date = String(day.date ?? '');
+    const date = show(day.date ?? '');
     if (date <= previous) flag(`${at}/date`, `days must run forward without a repeat (${date} after ${previous})`);
     previous = date;
     findings.push(...pricedRow(day, at));
     const models = usageList(day.byModel);
     models.forEach((m, j) => findings.push(...pricedRow(m, `${at}/byModel/${j}`)));
     if (!models.length) {
-      const spent = ['calls', 'inputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens'].some((f) => Number(day[f] ?? 0) > 0) || Number(day.costUsd ?? 0) > 0;
+      const spent = ['calls', 'inputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens'].some((f) => toNumber(day[f] ?? 0) > 0) || toNumber(day.costUsd ?? 0) > 0;
       if (spent) flag(`${at}/byModel`, 'a day with calls, tokens or cost names the models they belong to');
       return;
     }
     for (const field of ['calls', 'unpricedCalls', 'unmeasuredCalls', 'inputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens']) {
-      const sum = models.reduce((n, m) => n + Number(m[field] ?? 0), 0);
-      if (Number(day[field] ?? 0) !== sum) flag(`${at}/${field}`, `the day's ${field} is not the sum of its models (${String(day[field] ?? 0)} ≠ ${sum})`);
+      const sum = models.reduce((n, m) => n + toNumber(m[field] ?? 0), 0);
+      if (toNumber(day[field] ?? 0) !== sum) flag(`${at}/${field}`, `the day's ${field} is not the sum of its models (${show(day[field] ?? 0)} ≠ ${sum})`);
     }
     const known = models.map((m) => (typeof m.costUsd === 'number' ? m.costUsd : null)).filter((x) => x !== null).reduce((n, x) => n + x, 0);
-    if (typeof day.costUsd === 'number' && Math.abs(day.costUsd - known) > 0.000001 + 1e-9 * Math.max(Math.abs(day.costUsd), Math.abs(known))) flag(`${at}/costUsd`, "the day's cost is not the sum of its models' known costs");
+    // The contract's !close(day, known): Infinity or NaN is never close, so it is a finding.
+    if (typeof day.costUsd === 'number' && !(Math.abs(day.costUsd - known) <= 0.000001 + 1e-9 * Math.max(Math.abs(day.costUsd), Math.abs(known)))) flag(`${at}/costUsd`, "the day's cost is not the sum of its models' known costs");
   });
   if (days.length) {
     const generated = strictTime(value.generatedAt);
@@ -1167,8 +1187,8 @@ export function usageFindings(report) {
       const at = `/byProject/${p}`;
       const normal = normalIdentifier(project.projectId);
       if (normal !== undefined) {
-        if (seen.has(normal)) flag(`${at}/projectId`, `each project is one row: ${String(project.projectId)} names the project ${seen.get(normal)} already names`);
-        else seen.set(normal, String(project.projectId));
+        if (seen.has(normal)) flag(`${at}/projectId`, `each project is one row: ${show(project.projectId)} names the project ${seen.get(normal)} already names`);
+        else seen.set(normal, show(project.projectId));
       }
       projectCalls += usageCount(project.calls);
       projectCost += usageCost(project.costUsd);

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_board.py

@@ -483,7 +483,7 @@ class BoardSession:
             return self.post(self.grant.origin, body, self.grant.bearer(), session=self.mcp_session, timeout=self.timeout,
                              method=method, protocol_version=self.protocol_version if self.mcp_session else None)
         except _hub.HubError as exc:
-            raise BoardError("unreachable", "Fabric's hub did not answer; a write may have been stored — send it again with "
+            raise BoardError("unreachable", "Fabric's hub did not answer; a write may have been stored, so send it again with "
                              "the same idempotency key.", True) from exc
 
     def open(self) -> None:

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_delegation.py

@@ -364,7 +364,7 @@ def _chain_of(act: Dict[str, Any]) -> List[str]:
     node: Any = act
     while isinstance(node, dict):
         chain.append(node["partner"] if "partner" in node else node["sub"])  # the contract's chainOf, partner first
-        node = node.get("act") if "act" in node else None
+        node = node.get("act")
     return chain
 
 

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_package.py

@@ -648,7 +648,7 @@ def read_folder(folder: Any) -> Dict[str, bytes]:
                 continue
             files[rel] = full.read_bytes()
     if refused:
-        raise PackageError("Not packed: remove these or pack a clean copy — " + "; ".join(sorted(refused)))
+        raise PackageError("Not packed: remove these or pack a clean copy: " + "; ".join(sorted(refused)))
     return files
 
 

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_service.py

@@ -18,6 +18,7 @@ import hashlib
 import hmac
 import http.server
 import json
+import math
 import ntpath
 import os
 from pathlib import Path, PurePath
@@ -46,7 +47,7 @@ EXTENSION_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/service
 # The embedded dashboard declaration (fabric-dashboard/0.1, DEC-0036 ED-9), under the well-known
 # document's `extensions`. The kit is assets/dashboard-kit; its version is the one in kit.json.
 DASHBOARD_EXTENSION_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/dashboard/0.1"
-DASHBOARD_KIT = "fabric-dashboard-kit@1.1.0"
+DASHBOARD_KIT = "fabric-dashboard-kit@1.1.1"
 REFERENCE_THEMES = ("graphite", "fabric", "paper", "forest", "ocean", "ember", "contrast")
 EXIT_ALREADY_RUNNING = 75
 # Lifecycle rules: references/lifecycle.md, the rule for this kit's users, which implements the public
@@ -1734,11 +1735,21 @@ _DAY_MS = 86_400_000
 
 
 def _usage_count(value: Any) -> int:
-    return value if isinstance(value, int) and not isinstance(value, bool) and 0 <= value <= 2 ** 53 - 1 else 0
+    """The contract's `count`: Number.isSafeInteger and not negative, so 5.0 (which JavaScript reads as 5) counts."""
+    import fabric_estate  # noqa: E402
+    return int(value) if not isinstance(value, bool) and fabric_estate._safe_integer(value) and value >= 0 else 0
+
+
+def _usage_money(value: Any) -> Optional[float]:
+    """A JSON number as JavaScript holds it (an integer beyond a double is Infinity), or None for anything else."""
+    import fabric_estate  # noqa: E402
+    return fabric_estate._double(value) if isinstance(value, (int, float)) and not isinstance(value, bool) else None
 
 
 def _usage_cost(value: Any) -> float:
-    return float(value) if isinstance(value, (int, float)) and not isinstance(value, bool) and value == value and value >= 0 and value != float("inf") else 0.0
+    """The contract's `cost`: a known, finite, non-negative cost, or 0."""
+    money = _usage_money(value)
+    return money if money is not None and math.isfinite(money) and money >= 0 else 0.0
 
 
 def _exceeds(a: float, b: float) -> bool:
@@ -1797,8 +1808,7 @@ def usage_findings(report: Any) -> List[Dict[str, str]]:
     previous = ""
     for i, day in enumerate(days):
         at = "/days/%d" % i
-        date = day.get("date")
-        date = "" if date is None else (date if isinstance(date, str) else json.dumps(date))
+        date = fabric_estate._show("" if day.get("date") is None else day["date"])  # the contract's show(day.date ?? "")
         if date <= previous:
             flag(at + "/date", "days must run forward without a repeat (%s after %s)" % (date, previous))
         previous = date
@@ -1806,19 +1816,29 @@ def usage_findings(report: Any) -> List[Dict[str, str]]:
         models = _usage_list(day.get("byModel"))
         for j, m in enumerate(models):
             findings.extend(_priced_row(m, "%s/byModel/%d" % (at, j)))
+        # The contract reads every count as `toNumber(x ?? 0)` and writes it with `show`: a string count is read as a
+        # number, and what is no number (an object, "abc") is NaN, which equals no sum, so it is a finding.
+        number = lambda row, f: fabric_estate._js_to_number(row.get(f))  # noqa: E731 - None and absent read as 0
         if not models:
-            spent = any((day.get(f) or 0) > 0 for f in ("calls", "inputTokens", "outputTokens", "cacheReadTokens", "cacheWriteTokens")
-                        if isinstance(day.get(f) or 0, (int, float))) or (isinstance(day.get("costUsd"), (int, float)) and day["costUsd"] > 0)
+            spent = any(number(day, f) > 0 for f in ("calls", "inputTokens", "outputTokens", "cacheReadTokens", "cacheWriteTokens")) \
+                or number(day, "costUsd") > 0
             if spent:
                 flag(at + "/byModel", "a day with calls, tokens or cost names the models they belong to")
             continue
         for field in ("calls", "unpricedCalls", "unmeasuredCalls", "inputTokens", "outputTokens", "cacheReadTokens", "cacheWriteTokens"):
-            total = sum(m.get(field) or 0 for m in models if isinstance(m.get(field) or 0, (int, float)))
-            if (day.get(field) or 0) != total:
-                flag("%s/%s" % (at, field), "the day's %s is not the sum of its models (%s ≠ %s)" % (field, day.get(field) or 0, total))
-        known = sum(m["costUsd"] for m in models if isinstance(m.get("costUsd"), (int, float)) and not isinstance(m.get("costUsd"), bool))
-        day_cost = day.get("costUsd")
-        if isinstance(day_cost, (int, float)) and not isinstance(day_cost, bool) and abs(day_cost - known) > 0.000001 + 1e-9 * max(abs(day_cost), abs(known)):
+            total = 0.0
+            for m in models:
+                total += number(m, field)  # in order, in doubles, as JavaScript adds
+            if number(day, field) != total:
+                shown = fabric_estate._show(0 if day.get(field) is None else day[field])
+                flag("%s/%s" % (at, field), "the day's %s is not the sum of its models (%s ≠ %s)" % (field, shown, fabric_estate._js_string(total)))
+        known = 0.0
+        for m in models:
+            money = _usage_money(m.get("costUsd"))
+            known += money if money is not None else 0.0
+        day_cost = _usage_money(day.get("costUsd"))
+        # The contract's !close(day, known): Infinity or NaN is never close, so it is a finding.
+        if day_cost is not None and not abs(day_cost - known) <= 0.000001 + 1e-9 * max(abs(day_cost), abs(known)):
             flag(at + "/costUsd", "the day's cost is not the sum of its models' known costs")
     # The window.
     if days:
@@ -1865,7 +1885,7 @@ def usage_findings(report: Any) -> List[Dict[str, str]]:
                 run_priced += max(0, _usage_count(run.get("calls")) - _usage_count(run.get("unpricedCalls")))
                 findings.extend(_priced_row(run, "%s/taskRuns/%d" % (at, r)))
             project_priced = max(0, _usage_count(project.get("calls")) - _usage_count(project.get("unpricedCalls")))
-            known_cost = isinstance(project.get("costUsd"), (int, float)) and not isinstance(project.get("costUsd"), bool) and _usage_cost(project.get("costUsd")) == project.get("costUsd")
+            known_cost = _usage_cost(project.get("costUsd")) == _usage_money(project.get("costUsd"))  # as JavaScript holds it
             if run_calls > _usage_count(project.get("calls")):
                 flag(at + "/taskRuns", "a project's task runs hold more calls than the project (%d > %d)" % (run_calls, _usage_count(project.get("calls"))))
             elif run_priced > project_priced:

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/sample_service.py

@@ -258,7 +258,7 @@ def make_handler(svc: Service):
             if url.path == "/":
                 if not self._session_ok():
                     return self._send(401, "Open this dashboard from Fabric Dashboards.", content_type="text/plain")
-                rows = "".join("<li>%s — %s</li>" % (html.escape(e["at"]), html.escape(e["text"]))
+                rows = "".join("<li>%s: %s</li>" % (html.escape(e["at"]), html.escape(e["text"]))
                                for e in reversed(svc.log.fetch(None, 20)))
                 return self._send(200, PAGE.format(name=html.escape(svc.name), agent=html.escape("%s.%s" % (svc.id, svc.instance)), status="ready", rows=rows),
                                   content_type="text/html; charset=utf-8")