@passioncode-ai/passioncode 0.2.37 → 0.2.39

package/CHANGELOG.md

@@ -1,5 +1,21 @@
 # Changelog
 
+## 0.2.39 - 2026-10-26
+
+### Changed
+
+- **Fabric Agent Adapter is pinned at `v0.50.0`** (it was `v0.49.3`): the contract release `v0.1.0+2026-10-25` with
+  dashboard action parity (every dashboard button has an agent tool, and the operator's agent relays their decision),
+  agent pages that open only in Fabric Dashboards, and new probe rules. Notes are in the adapter's CHANGELOG.
+
+## 0.2.38 - 2026-10-26
+
+### Changed
+
+- **Fabric Agent Adapter is pinned at `v0.49.3`** (it was `v0.49.2`): Fabric's button in the dashboard kit shows
+  Russian on a Russian page and takes a page's own words, with no em dash, and a remote service registers the
+  repository of its code. Notes are in the adapter's CHANGELOG.
+
 ## 0.2.37 - 2026-10-24
 
 ### Changed

package/family.json

@@ -8,7 +8,7 @@
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.49.2",
+      "ref": "v0.50.0",
       "kind": "plugin",
       "path": "plugins/fabric-agent-adapter",
       "legacyPluginIds": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/passioncode",
-  "version": "0.2.37",
+  "version": "0.2.39",
   "description": "Set up PassionCode.ai on a computer with one command — the apps from their verified releases, their MCP servers for every coding agent and the PassionCode.ai skills — and check and repair it with the same command or `doctor`.",
   "bin": {
     "passioncode": "bin/passioncode.js"

package/payload/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "source": "./plugins/fabric-agent-adapter",
-      "version": "0.49.2",
+      "version": "0.50.0",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks.",
       "author": {
         "name": "PassionCode.ai",
@@ -35,7 +35,7 @@
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "source": "./plugins/passioncode",
-      "version": "0.2.37",
+      "version": "0.2.39",
       "description": "Set up and check PassionCode.ai on a computer with one command (setting-up-passioncode), the organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",

package/payload/manifest.json

@@ -1,15 +1,15 @@
 {
   "family": "passioncode",
-  "version": "0.2.37",
+  "version": "0.2.39",
   "release": true,
   "members": [
     {
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.49.2",
-      "commit": "ee2407257bcad04f2e135a59df7899d41453b7e8",
-      "version": "0.49.2",
+      "ref": "v0.50.0",
+      "commit": "d813a4e07a7b721619bd98b80f7dd9920d896ba0",
+      "version": "0.50.0",
       "via": "clone of https://***@github.com/passioncode-ai/fabric-agent-adapter.git",
       "skills": [
         "adapting-projects-to-fabric",
@@ -23,7 +23,7 @@
       "legacyMarketplaces": [
         "fabric-agent-adapter"
       ],
-      "contentHash": "sha256:dc2ff2c25f68f9698432cc08c563ee565138b770c6b34e1cf5a95ce37ca24cd7",
+      "contentHash": "sha256:d2577bec959c6231e91deb459bd70fbd613914bd1a08dd4c479c21bef516d2e9",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks.",
       "author": {
         "name": "PassionCode.ai",
@@ -62,9 +62,9 @@
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "repo": "passioncode-ai/passioncode",
-      "ref": "v0.2.37",
+      "ref": "v0.2.39",
       "commit": null,
-      "version": "0.2.37",
+      "version": "0.2.39",
       "via": "this repository",
       "skills": [
         "setting-up-passioncode",
@@ -72,7 +72,7 @@
       ],
       "legacyPluginIds": [],
       "legacyMarketplaces": [],
-      "contentHash": "sha256:bcae9796e81b691ef3c93f2d70aaec6863f7861adcf0c31a5e8f0570fc573572",
+      "contentHash": "sha256:9d3b6b75814363291607bf77221b1b5f0326cf65139f5ce68fef96d67df010cd",
       "description": "Set up and check PassionCode.ai on a computer with one command (setting-up-passioncode), the organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",

package/payload/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks.",
-  "version": "0.49.2",
+  "version": "0.50.0",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -5,9 +5,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.49.2"
+  version: "0.50.0"
   contract-version: "0.1.0"
-  contract-commit: "2f020a696453ae299b123517f14957f6a1354379"
+  contract-commit: "52c7d798b9f4eb784eb4e29e717038a8912c759d"
 ---
 
 # Adapting projects to Fabric
@@ -76,7 +76,7 @@ Use exactly:
 
 - contract version `0.1.0`;
 - repository `https://github.com/passioncode-ai/fabric-agent-contract`;
-- commit `2f020a696453ae299b123517f14957f6a1354379`.
+- commit `52c7d798b9f4eb784eb4e29e717038a8912c759d`.
 
 This is the default for new bundles. When checking an issued legacy bundle, preserve its
 explicit supported lock and use that exact clean checkout. Never silently upgrade or
@@ -218,9 +218,9 @@ not a connected provider.
 If the agent has a human stop (a choice, an approval, a confirmation) or emits `notify: true`
 events, propose its operator channel (`fabric-operator-channel/0.1`, OC-11) to the operator once,
 now, as [the operator channel and the repository standard](references/operator-channel-and-repository.md)
-describes: the operator's four steps, the answer recorded and never asked again, and the bot, the
-token and enabling the channel left to the operator. An agent with neither stops nor notify events
-skips this step.
+describes: the operator's four steps, the answer recorded and never asked again, the bot and the
+token left to the person, and enabling the channel to the operator's decision (on the page or
+relayed, DEC-0121). An agent with neither stops nor notify events skips this step.
 
 ## The repository around the provider
 
@@ -245,8 +245,26 @@ Report:
 Never summarize the outcome as “Fabric-compatible” unless all required admission gates
 passed against a real provider and the project binding is valid.
 
-## Dashboard handoff: also for consumers
-
-When handing a registered service dashboard to a person, or writing the generated agent's
-completion or notification instructions, read and apply [dashboard links](references/dashboard-links.md)
-and run its output gate before delivery, in any host. Headless agents need no dashboard.
+## Agent pages open only in Fabric Dashboards
+
+The operator's rule (2026-10-24) for every page of an agent or a local Fabric service, in any host: a
+link in an answer or a notification, `<tool> dashboard`, a completion message, a page the agent opens
+itself. Hand over the `open_link` the `fabric-dashboards` MCP's `link` tool returns for the exact
+registered service key (`list_services`, never guessed) and the page's path; open it only with the
+host's `open` and `fallback=never`. Never `open <url>`, `open -a Safari`, `xdg-open`,
+`webbrowser.open` or `shell.openExternal` aimed at the agent's pages. A browser only on a confirmed
+`not_installed` host; an installed host that failed to open is reported, never replaced by HTTP.
+Links carry no token or login code.
+
+The agent's `AGENTS.md` carries this as its dashboard rule block, and its checks run the adapter's link gate
+(`scripts/check_dashboard_link.py` from this skill's own directory; it is not copied into the project) on every
+completion and notification action before delivery:
+[dashboard links](references/dashboard-links.md) has the block, the gate's input and the remote case.
+Headless agents need no dashboard.
+
+## An agent with a page and no service descriptor
+
+A local page no service descriptor names cannot open in Fabric Dashboards. Never open it in a browser
+instead: make the agent a `fabric-service/0.1` service with `building-fabric-services` (the descriptor,
+the well-known document, the login-code routes and a declared dashboard), and until that lands file a
+board row for it and say the page waits on it.

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/references/dashboard-links.md

@@ -5,6 +5,19 @@ an existing Fabric service dashboard to a person. This also applies to generated
 agent instructions and completion messages. Headless agents need no dashboard;
 API origins, external docs and OAuth links are not dashboard actions.
 
+The rule (the operator's, 2026-10-24): every page of an agent or a local Fabric
+service opens only in Fabric Dashboards, never in Safari, Dia, Chrome or any
+other browser, unless Fabric Dashboards is confirmed not installed.
+
+## Contents
+
+- Resolve, then hand over
+- The block a generated AGENTS.md carries
+- An agent with a page and no service descriptor
+- Device and channel
+- Portable output gate
+- Degradation
+
 ## Resolve, then hand over
 
 1. Discover the target computer and exact registered `service.id.instance`.
@@ -20,9 +33,12 @@ API origins, external docs and OAuth links are not dashboard actions.
    compatible host resolver or report the limitation, not presumed absence.
 4. A request for a link opens nothing. A request to open uses the host `open`
    tool/approved opener, which starts or focuses the existing Fabric Dashboards
-   and reuses the service view. `fallback=never` forbids a browser; `if_absent`
-   permits one only for confirmed absence. Discover schema support first: older
-   `open` implementations may silently fall back on failure and are not strict.
+   and reuses the service view, with `fallback=never`: it forbids a browser.
+   `if_absent` permits one only for confirmed absence. Discover schema support
+   first: older `open` implementations may silently fall back on failure and are
+   not strict. Never
+   `open <url>`, `open -a Safari`, `xdg-open`, `start <url>`, `webbrowser.open`
+   or `shell.openExternal` aimed at the service's pages.
 5. An installed host that failed to open is **not absent**. Report the failure;
    do not silently launch HTTP in a browser, a second server, `npm run dev`, or
    another standalone dashboard. A stopped backend stays on its host status/Start
@@ -31,6 +47,40 @@ API origins, external docs and OAuth links are not dashboard actions.
    not page readiness, a successful login, or a completed job. Links carry no
    bearer tokens or login codes. The host handles dashboard authentication.
 
+## The block a generated AGENTS.md carries
+
+An agent with a page carries this block in its `AGENTS.md` (its `CLAUDE.md` reads
+it through `@AGENTS.md`), beside its browser rule, and its completion and
+notification renderers follow it:
+
+```markdown
+## Pages open only in Fabric Dashboards
+
+Every page of this agent (its dashboard, a job, an approval, a report) opens in
+Fabric Dashboards, never in a browser. Resolve the registered service key with
+the fabric-dashboards MCP (`list_services`, never guessed) and hand over the
+`open_link` its `link` tool returns for the page's path; to open it, call the
+host's `open` with `fallback=never`. Never `open <url>`, `open -a Safari`,
+`xdg-open`, `start <url>`, `webbrowser.open` or `shell.openExternal` on this
+agent's pages. A browser only when `host_status` confirms `not_installed`; an
+installed host that failed to open is reported, not replaced by HTTP. Links
+carry no token or login code. Every completion and notification action passes
+the Fabric Agent Adapter's link gate before delivery: `check_dashboard_link.py`
+in its `building-fabric-services/scripts`, run from that skill's directory;
+where it cannot run, the action is compared by hand and the check is NOT_RUN.
+```
+
+The project's checks run the gate below on each renderer's action, and a test
+holds a raw-HTTP primary action beside an available host refused.
+
+## An agent with a page and no service descriptor
+
+Fabric Dashboards opens only a page a service descriptor names. An agent that
+serves a local page without one cannot be opened there, and a browser is not the
+workaround. Make it a `fabric-service/0.1` service (`building-fabric-services`:
+the descriptor, the well-known document, the login-code routes and a declared
+dashboard); until that lands, file a board row for it and say the page waits on it.
+
 ## Device and channel
 
 A custom scheme opens on the device receiving it. A phone's localhost is not the

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/references/operator-channel-and-repository.md

@@ -26,9 +26,12 @@ bare `/command` in a group is not addressed), and a channel nobody receives on i
 
 Record the answer (`accepted`, `declined` or `later`) in the agent's state and in its conformance
 report, and do not ask again; an agent that serves `surfaces.operatorChannel` also shows it as
-`proposal` in its status document. Creating the bot, storing the token and enabling the channel
-are the operator's action: never create the bot, ask for or store the token's value, or enable the
-channel yourself. The default pin carries DEC-0034 and DEC-0035: a served status document is
+`proposal` in its status document. Creating the bot and putting its token into the secret store
+stay the person's (a `secret` step, contract DEC-0121 AP-4): never create the bot, or ask for or
+store the token's value. Enabling the channel, and removing a webhook found on its token, are the
+operator's decision, taken by them on the agent's page or relayed to its agent in their own words
+with `_meta.decision` (OC-1, OC-2, DEC-0121 AP-2); never enable it on your own account. The default
+pin carries DEC-0034 and DEC-0035: a served status document is
 checked against the pinned `schemas/operator-channel-status.schema.json`; the channel's runtime
 rules have no probe rule here yet, so report them `NOT_RUN`. An agent with neither stops nor notify
 events skips this.
@@ -49,6 +52,11 @@ For a PassionCode.ai repository, the agent's repository follows the organization
 - an `AGENTS.md` that opens with the template's *Read first* block and closes with *After work*,
   and a `CLAUDE.md` whose first line is `@AGENTS.md`.
 
+Whoever owns the repository, an agent with a page gets the dashboard rule block in its `AGENTS.md`
+(pages open only in Fabric Dashboards; the block is in `references/dashboard-links.md`), and its
+checks run the adapter's link gate (`scripts/check_dashboard_link.py` from the skill's own directory, not a copy in
+the project).
+
 org-index `scripts/check_format.py` reports 0 findings for it before it is called done. An agent
 someone builds for themselves is not a PassionCode.ai repository: its licence is its owner's
 choice, nothing about it is published or listed by the organization, and none of these files is

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/references/provider-entry.md

@@ -53,7 +53,9 @@ It refuses, with one sentence that never quotes a value:
   1024 characters), a shell-string command, more than 32 arguments or one over 1024 characters, more than 64 env
   names, a `source.repository` that is not an absolute URI, an `installedAt` that is not an RFC 3339 date-time,
   unknown fields. The patterns are the schema's, copied (`test_provider.SchemaParityTests` compares them with a
-  contract checkout at the pin when `FABRIC_CONTRACT_NEW` names one).
+  contract checkout at the pin when `FABRIC_CONTRACT_NEW` names one);
+- a `source.repository` with a `user:password@` or a value shaped like a credential: it names the repository, never
+  reaches it (since 0.49.3, as the service kit's descriptor check).
 
 `validate` also checks that the file is named `<id>.json` (FAC-SEM-014, slug half).
 From Python: `write_provider_entry(entry)`, `remove_provider_entry(id)`,

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/adapt_project.py

@@ -22,10 +22,10 @@ import fabric_secrets as _secrets  # noqa: E402 - the contract's credential dete
 
 CONTRACT_VERSION = "0.1.0"
 CONTRACT_REPOSITORY = "https://github.com/passioncode-ai/fabric-agent-contract"
-CONTRACT_COMMIT = "2f020a696453ae299b123517f14957f6a1354379"
+CONTRACT_COMMIT = "52c7d798b9f4eb784eb4e29e717038a8912c759d"
 # #region supported-contract-revisions — docs: README.md#contract-pin
 # Only this declaration may name a legacy revision in live files.
-SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "87d384ffce2757081b7ab227e5dad3dddd08328f", "0a4ce773c4b9e6bec40c6387eb3f988af7152c0e", "e742016dc396aa31e5a13a893489e43f15786c69", "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0", "c55f2d5a11c9a0197e958e87212fca7ae1154769", "07042181bfae2a481aa0da1a5651f24c76669c48", "d8146cfb0a1c74fc6432284c4356bb0c864b37b5", "82e163665e156a08aa3b92e4711015582c06162c", "1636fa97262f4a26e2086572d540c2ee701e0010", "f00a7685e3861c27f7899c033fb850a145a1708f", "a046f57cf46ea9e3da57ff8ce6a3ed4d26d8774b", "fe55fc67cba1a9e34a736da7d148d4fe2a8fbfa0", "b291bf09e0a9f9fd3c16cf540832cd021203b7d1", "0cacd08b0e95b6abf131eae1206b60792138bc3c", "2eb91c00e852d9c31d804310d38fad91589fcbac", "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
+SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "2f020a696453ae299b123517f14957f6a1354379", "87d384ffce2757081b7ab227e5dad3dddd08328f", "0a4ce773c4b9e6bec40c6387eb3f988af7152c0e", "e742016dc396aa31e5a13a893489e43f15786c69", "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0", "c55f2d5a11c9a0197e958e87212fca7ae1154769", "07042181bfae2a481aa0da1a5651f24c76669c48", "d8146cfb0a1c74fc6432284c4356bb0c864b37b5", "82e163665e156a08aa3b92e4711015582c06162c", "1636fa97262f4a26e2086572d540c2ee701e0010", "f00a7685e3861c27f7899c033fb850a145a1708f", "a046f57cf46ea9e3da57ff8ce6a3ed4d26d8774b", "fe55fc67cba1a9e34a736da7d148d4fe2a8fbfa0", "b291bf09e0a9f9fd3c16cf540832cd021203b7d1", "0cacd08b0e95b6abf131eae1206b60792138bc3c", "2eb91c00e852d9c31d804310d38fad91589fcbac", "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
 # #endregion supported-contract-revisions
 INTEROP_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/interop/0.1"
 MCP_REVISION = "2026-07-28"

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/fabric_provider.py

@@ -47,6 +47,7 @@ ENV_MAX = 64
 # Whole-value patterns end in \Z, never `$` (R1: `$` also matches before a trailing newline).
 _ID = re.compile(r"^[a-z][a-z0-9-]{1,62}\Z")
 _ENV_NAME = re.compile(r"^[A-Z_][A-Z0-9_]*\Z")
+_URI_PASSWORD = re.compile(r"^[A-Za-z][A-Za-z0-9+.-]*://[^/?#@]*:[^/?#@]*@")
 _SECRET_REF = re.compile(r"^secret-ref:([A-Za-z0-9][A-Za-z0-9._/:@-]{0,255})\Z")
 _LOCAL_PATH = re.compile(LOCAL_PATH_PATTERN)
 _URL = re.compile(URL_PATTERN)
@@ -131,6 +132,9 @@ def validate_provider_entry(entry: Any) -> List[str]:
             problems.append("source is {repository?}")
         elif "repository" in source and not _is_uri(source["repository"]):
             problems.append("source.repository is an absolute URI")
+        elif "repository" in source and (_URI_PASSWORD.match(source["repository"]) or _secrets.secret_argument(source["repository"])):
+            # FAA-120, as the service kit: a repository is named, never reached with a credential in its URI.
+            problems.append("source.repository carries no password or credential: it names the repository")
     if not isinstance(entry["installedAt"], str) or not _TIMESTAMP.fullmatch(entry["installedAt"]):
         problems.append("installedAt is an RFC 3339 date-time")
     if not isinstance(entry["installedBy"], str) or not 1 <= len(entry["installedBy"]) <= 200:

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -14,10 +14,10 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Python 3.9+ or Node.js 20+ for the kits (Node.js 22+ for a Linux service's instance lock); the probe needs Python 3.9+. launchd steps are macOS-only; Linux services install a systemd user unit and Windows ones a per-user Scheduled Task with the kits' writers. Dashboard handoff optionally uses Fabric Dashboards MCP link/host_status/open; without it, report unresolved host capability. The contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.49.2"
+  version: "0.50.0"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
-  extension-commit: "2f020a696453ae299b123517f14957f6a1354379"
+  extension-commit: "52c7d798b9f4eb784eb4e29e717038a8912c759d"
 ---
 
 # Building Fabric services
@@ -70,9 +70,9 @@ Answer before writing code, and record the answers in the project README:
 | Caller | Surface | Why |
 |---|---|---|
 | Another agent on this machine | MCP `2026-07-28`, `streamable-http`, at `/mcp` on the service origin, token in a header | one process serves every session; stdio-per-session once left twenty stray servers on this machine |
-| The operator or a script | a CLI: `<tool> service status\|start\|stop\|restart`, `<tool> dashboard`, `<tool> doctor --json` | every verb delegates to launchd and the well-known document, never to its own process table |
+| The operator or a script | a CLI: `<tool> service status\|start\|stop\|restart`, `<tool> dashboard` (opens only in Fabric Dashboards, below), `<tool> doctor --json` | every verb delegates to launchd and the well-known document, never to its own process table |
 | A remote agent | A2A `1.0` over HTTPS, or MCP behind an authenticated gateway | loopback reachability is not authorization |
-| The dashboard page | same-origin REST under `/api`, session cookie plus a custom request header | the CSRF defence all four existing dashboards use |
+| The dashboard page | same-origin REST under `/api`, session cookie plus a custom request header; every button on it also a tool on the MCP surface (Step 5) | the CSRF defence all four existing dashboards use |
 
 Read [the surfaces and auth reference](references/surfaces-and-auth.md) when wiring
 MCP registration into a client config, the login flow or the CSRF header.
@@ -248,6 +248,16 @@ and declare it with `extensions=fs.dashboard_extension()`. Read
 declaration and how to upgrade a dashboard built before the kit: an upgrade you may make yourself,
 which the plugin's session-start notice offers in a repository that owns the service.
 
+**Every button has a tool** (`fabric-actions/0.1`, contract DEC-0121 AP-1). Each action the page lets a
+person take is a tool on the MCP surface with the same effect, checks, audit record and an idempotency key,
+registered with `server.add_tool(tool, handler, action={id, title, tool, gate})` (`gate` is `none`, `relayed`
+or `human` with its `humanStep`) and declared with `build_well_known(actions=server.action_table())` under
+`extensions/actions/0.1`. A `relayed` action called by the operator's own agent with their decision in
+`_meta.decision` is the operator's act: never answer it "operator session required" or send them to the page.
+A service adopts the relayed gate once Fabric's hub forwards decisions (CT-125), as the contract says; until then its tools
+answer as today. Read the interop reference's *Actions* section for when to adopt, the gate, its hooks and its
+refusals.
+
 **Say what the agent uses** (`fabric-connections/0.1`, DEC-0096) so Fabric Dashboards draws its chain: the other
 agents, models, connectors, stores and channels, each with its state, from
 `connections_extension()` / `connectionsExtension()` in `fabric_connections`. Never a credential in it, never a call
@@ -283,10 +293,13 @@ python3 <skill-dir>/scripts/check_service.py <id>[.<instance>]
 It reports `PASS`, `FAIL` or `NOT_RUN` per rule (descriptor, port claim, well-known
 shape, identity, latency, Host/Origin/cross-site guards, loopback bind, token file,
 events auth and shape, single-use login, state outside code, instance lock, plist,
-launchd pid equals answering pid, `dashboard.declared` (ED-9), and the `interop.*` rules:
+launchd pid equals answering pid, `dashboard.declared` (ED-9), `well-known.actions` (DEC-0121),
+`dashboard.actions-declared` (`NOT_RUN` when a dashboard declares no actions), `dashboard.opens-in-host` (no browser
+opener aimed at the service's pages in its checkout; `--repo PATH` names the checkout, and a service installed
+from a release folder needs it), and the `interop.*` rules:
 manifest link, capability list, tools equal to the manifest, job tools, unknown job, trace
-propagation, event trace pairs, and `board.responder` for a service that declares the project board) and exits 1 on
-any `FAIL`. A `NOT_RUN` is not a pass;
+propagation, event trace pairs, `interop.action-tools` (every declared action's tool is served), and
+`board.responder` for a service that declares the project board) and exits 1 on any `FAIL`. A `NOT_RUN` is not a pass;
 name it in the report. A service with a dashboard also runs the layout probe,
 `node <skill-dir>/scripts/check_dashboard_layout.mjs --service <id>` (WebKit at 360, 480, 768
 and 1280 px; needs Playwright, else `NOT_RUN` and exit 3: nothing was measured).
@@ -328,7 +341,8 @@ first commit:
 - an `AGENTS.md` that opens with the template's *Read first* block and closes with *After work*,
   and a `CLAUDE.md` whose first line is `@AGENTS.md`.
 
-org-index `scripts/check_format.py` reports 0 findings for it before it is called done. **An agent
+Whoever owns the repository, an agent with a page gets the dashboard rule block in its `AGENTS.md`
+(below). org-index `scripts/check_format.py` reports 0 findings for it before it is called done. **An agent
 someone builds for themselves is not a PassionCode.ai repository:** its licence is its owner's
 choice, nothing about it is published or listed by the organization, and none of these files is
 required of it, though the verified MCP quick start is still how anyone learns to drive it.
@@ -357,8 +371,9 @@ things change and the kits implement each:
    so the platform's copy is known rather than invisible. Without Project Observatory, record
    where the key lives in the person's own secret manager.
 3. **Register it on the operator's computer**, the installer side, run there:
-   `registerRemote({ id, name, origin, token })` / `register_remote(...)` writes the token file
-   (0600) and the descriptor; pass the token from a file or stdin, never in argv. Public names
+   `registerRemote({ id, name, origin, token, source })` / `register_remote(...)` writes the token file
+   (0600) and the descriptor, with `source.repository` naming the code's repository; pass the token from a file or
+   stdin, never in argv. Public names
    only in public artifacts: a private service is registered by a local descriptor and nowhere
    else.
 4. **Verify** with the probe: `check_service.py <id>` checks TLS, the token-gated well-known
@@ -417,8 +432,29 @@ the probe table verbatim with every `NOT_RUN` explained; the lock and kill-9 res
 with pids; and the one next command. Never call a service conformant while the probe
 reports a `FAIL`.
 
-## Dashboard handoff: also for consumers
+## Agent pages open only in Fabric Dashboards
+
+The operator's rule (2026-10-24) for every page of an agent or a local Fabric service, in any host: a link in an
+answer or a notification, `<tool> dashboard`, a completion message, a page the agent opens itself.
+
+1. Resolve the exact registered service key (`id.instance`) with the `fabric-dashboards` MCP (`list_services`);
+   never guess it from a project name or a port.
+2. Hand over the `open_link` its `link` tool returns for the service and the page's path, as the primary action.
+3. To open it, use the host's `open` with `fallback=never`. Never `open <url>`, `open -a Safari`, `xdg-open`,
+   `start <url>`, `webbrowser.open` or `shell.openExternal` aimed at the service's pages.
+4. A browser only on a confirmed `not_installed` host (`host_status`); an installed host that failed to open is
+   reported, never replaced by HTTP.
+5. Links carry no token or login code: the host signs in.
+
+Run `scripts/check_dashboard_link.py` (from this skill's own directory; it is not copied into the project) on an
+action before it is printed or opened, and have the project's checks run it for every completion and notification
+renderer. The generated `AGENTS.md` carries the rule as its dashboard
+rule block; [dashboard links](references/dashboard-links.md) has the block, the gate's input and the remote case. The
+probe's `dashboard.opens-in-host` fails a tracked file that opens the dashboard with a browser opener. Headless agents
+need no dashboard.
+
+## An agent with a page and no service descriptor
 
-When handing a registered service dashboard to a person, or writing the generated agent's
-completion or notification instructions, read and apply [dashboard links](references/dashboard-links.md)
-and run its output gate before delivery, in any host. Headless agents need no dashboard.
+A local page no service descriptor names cannot open in Fabric Dashboards. Never open it in a browser instead:
+make the agent a `fabric-service/0.1` service (this skill: the descriptor, the well-known document, the login-code
+routes and a declared dashboard), and until that lands file a board row for it and say the page waits on it.

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/fabric-button.js

@@ -1,16 +1,17 @@
-/* fabric-dashboard-kit@1.1.3 · Fabric's button (Fabric Agent Contract DEC-0040, FB-1…FB-8, FL-1…FL-6)
+/* fabric-dashboard-kit@1.1.5 · Fabric's button (Fabric Agent Contract DEC-0040, FB-1…FB-8, FL-1…FL-6)
    Load it same-origin, after fabric-dashboard.css, with the service it opens Fabric on:
      <script src="fabric-button.js" defer data-service="example-agent.default" data-service-name="Example Agent"
              data-project="project-a" data-project-name="Project A"></script>
    One floating menu button: "Chat with Fabric about <service>" and, when the page knows its project, "Open a coding
-   session in <project>". Its links carry ids only and open a view in Fabric, nothing more (FB-8). It hides itself
+   session in <project>", in Russian on a page whose lang is ru; data-label-chat and data-label-session ({name} is the
+   service or the project), data-label-open and data-label-absent set the page's own words. Its links carry ids only and open a view in Fabric, nothing more (FB-8). It hides itself
    when the host draws its own (the fabric_button cookie, FB-6) and says how to get Fabric when Fabric is absent
    (FB-5). No inline script, no eval, nothing from a CDN; the only address it names is passioncode.ai/fabric.
    Do not edit in place; `dashboard_kit.py install` replaces it on an upgrade. */
 (function (root) {
   'use strict';
 
-  var VERSION = '1.1.3';
+  var VERSION = '1.1.5';
   var COOKIE = 'fabric_button';
   var GET_FABRIC = 'https://passioncode.ai/fabric';
   var ABSENT_AFTER_MS = 1500;
@@ -155,16 +156,39 @@
     return null;
   }
 
+  // The words a person reads (FAA-119): English, or Russian on a page whose lang is ru; the Russian is written as
+  // escapes so the file reads the same whatever charset it is served with. Checked with Copylot (en-US and ru-RU).
+  var LABELS = {
+    en: { chat: 'Chat with Fabric about {name}', session: 'Open a coding session in {name}', open: 'Open Fabric',
+      absent: 'Fabric is not installed. Get it at' },
+    ru: { chat: '\u0427\u0430\u0442 \u0441 Fabric \u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0435 {name}', session: '\u041e\u0442\u043a\u0440\u044b\u0442\u044c \u0441\u0435\u0441\u0441\u0438\u044e \u0432 \u043f\u0440\u043e\u0435\u043a\u0442\u0435 {name}', open: '\u041e\u0442\u043a\u0440\u044b\u0442\u044c Fabric',
+      absent: 'Fabric \u043d\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d. \u0421\u043a\u0430\u0447\u0430\u0439\u0442\u0435 \u0435\u0433\u043e \u043d\u0430' }
+  };
+
+  /** The labels for a page language, each one replaced by a non-blank string the page gives (data-label-*) that keeps
+      the word Fabric: the visible label stays inside the name and each item (DEC-0124, WCAG 2.2 SC 2.5.3). */
+  function labelsFor(lang, overrides) {
+    var base = LABELS[/^ru(-|$)/i.test(String(lang || '')) ? 'ru' : 'en'];
+    var out = {};
+    Object.keys(base).forEach(function (k) {
+      var own = overrides ? overrides[k] : undefined;
+      out[k] = typeof own === 'string' && own.trim() && own.indexOf('Fabric') >= 0 ? own.trim() : base[k];
+    });
+    return out;
+  }
+  function named(label, name) { return label.split('{name}').join(name); }
+
   /** The menu items for a page: the chat link always, the session link when the page knows its project. */
-  function menuItems(options) {
+  function menuItems(options, labels) {
+    var words = labels || labelsFor();
     var items = [];
     var chat = { action: 'chat', service: options.service };
     if (options.project) chat.project = options.project;
-    items.push({ label: 'Chat with Fabric about ' + (options.serviceName || options.service), href: buildFabricLink(chat) });
+    items.push({ label: named(words.chat, options.serviceName || options.service), href: buildFabricLink(chat) });
     if (options.project) {
       var session = { action: 'session.new', project: options.project };
       if (options.runner) session.runner = options.runner;
-      items.push({ label: 'Open a coding session in ' + (options.projectName || options.project), href: buildFabricLink(session) });
+      items.push({ label: named(words.session, options.projectName || options.project), href: buildFabricLink(session) });
     }
     return items;
   }
@@ -197,11 +221,12 @@
   function mount(doc, options) {
     var cookie = parseButtonCookie(doc.cookie);
     if (cookie && cookie.owner === 'host') return null;
-    var items = menuItems(options);
+    var words = labelsFor(options.lang !== undefined ? options.lang : doc.documentElement.getAttribute('lang'), options.labels);
+    var items = menuItems(options, words);
     var absent = options.fabric === 'absent' || (cookie && cookie.fabric === 'absent');
 
     var wrap = el(doc, 'div', { 'class': 'fd-fabric-button-wrap' });
-    var button = el(doc, 'button', { type: 'button', 'class': 'fd-fabric-button', 'aria-haspopup': 'menu', 'aria-expanded': 'false', 'aria-label': 'Open Fabric' });
+    var button = el(doc, 'button', { type: 'button', 'class': 'fd-fabric-button', 'aria-haspopup': 'menu', 'aria-expanded': 'false', 'aria-label': words.open });
     button.appendChild(mark(doc));
     button.appendChild(el(doc, 'span', { 'class': 'fd-fabric-button-label', 'aria-hidden': 'true' }, 'Fabric'));
     var menu = el(doc, 'div', { role: 'menu', 'class': 'fd-fabric-button-menu', 'aria-label': 'Fabric' });
@@ -212,7 +237,7 @@
       return a;
     });
     var note = el(doc, 'p', { 'class': 'fd-fabric-button-note', role: 'note' });
-    note.appendChild(doc.createTextNode('Fabric is not installed. Get it at '));
+    note.appendChild(doc.createTextNode(words.absent + ' '));
     // The way to get Fabric is a menu item too, so the arrows reach it whenever the note shows.
     var get = el(doc, 'a', { role: 'menuitem', href: GET_FABRIC, target: '_blank', rel: 'noopener', tabindex: '-1', 'class': 'fd-fabric-button-get' }, 'passioncode.ai/fabric');
     note.appendChild(get);
@@ -274,18 +299,19 @@
 
   function optionsFrom(script) {
     var d = script.dataset;
-    return { service: d.service, serviceName: d.serviceName, project: d.project, projectName: d.projectName, runner: d.runner, fabric: d.fabric };
+    return { service: d.service, serviceName: d.serviceName, project: d.project, projectName: d.projectName, runner: d.runner, fabric: d.fabric,
+      labels: { chat: d.labelChat, session: d.labelSession, open: d.labelOpen, absent: d.labelAbsent } };
   }
 
   var api = { version: VERSION, parseFabricLink: parseFabricLink, buildFabricLink: buildFabricLink, parseButtonCookie: parseButtonCookie,
-    menuItems: menuItems, credentialName: credentialName, secretValue: secretValue, nameWords: nameWords, mount: mount };
+    menuItems: menuItems, labelsFor: labelsFor, credentialName: credentialName, secretValue: secretValue, nameWords: nameWords, mount: mount };
   root.FabricButton = api;
 
   var doc = root.document;
   var script = doc && doc.currentScript;
   if (script && script.dataset && script.dataset.service) {
     var start = function () {
-      try { mount(doc, optionsFrom(script)); } catch (err) { if (root.console) root.console.warn('fabric-button: not shown — ' + err.message); }
+      try { mount(doc, optionsFrom(script)); } catch (err) { if (root.console) root.console.warn('fabric-button: not shown: ' + err.message); }
     };
     if (doc.readyState === 'loading') doc.addEventListener('DOMContentLoaded', start); else start();
   }

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/fabric-dashboard.css

@@ -1,4 +1,4 @@
-/* fabric-dashboard-kit@1.1.3 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
+/* fabric-dashboard-kit@1.1.5 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
    A Fabric service dashboard shown inside a host pane: usable from 360 CSS px up, navigation always
    reachable, wide content in its own scroll box, one vertical scroller, appearance from the host.
    Copy this file next to fabric-dashboard.js; do not edit it in place. Put the page's own rules in

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/fabric-dashboard.js

@@ -1,4 +1,4 @@
-/* fabric-dashboard-kit@1.1.3 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
+/* fabric-dashboard-kit@1.1.5 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
    Load it same-origin with <script src="fabric-dashboard.js" defer></script>: no inline script, no
    eval, nothing from a CDN. It applies the host's appearance (ED-6, ED-8), folds navigation that
    does not fit into a More menu (ED-3), makes wide boxes keyboard-reachable (ED-4) and keeps
@@ -8,7 +8,7 @@
   'use strict';
 
   var KIT = 'fabric-dashboard-kit';
-  var VERSION = '1.1.3';
+  var VERSION = '1.1.5';
   /* fabric-dashboard-kit:theme-ids:begin */
   var THEMES = ['graphite', 'fabric', 'paper', 'forest', 'ocean', 'ember', 'contrast'];
 /* fabric-dashboard-kit:theme-ids:end */