@passioncode-ai/passioncode 0.2.43 → 0.2.44

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # Changelog
 
+## 0.2.44 - 2026-10-27
+
+### Changed
+
+- **Fabric Agent Adapter is pinned at `v0.54.0`** (it was `v0.53.1`): the contract pin `v0.1.0+2026-10-27.1` (DEC-0141
+  MJ-1). A job's step under the operator's mandate is read under the job's own capability; a step no mandate can read
+  is answered `operator-decision-required` (`mandate-capability-missing`) and waits for the operator. working-with-fabric
+  names the job's capability without `actions` when it covers a job's steps.
+
 ## 0.2.43 - 2026-10-27
 
 ### Changed

package/family.json

@@ -8,7 +8,7 @@
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.53.1",
+      "ref": "v0.54.0",
       "kind": "plugin",
       "path": "plugins/fabric-agent-adapter",
       "legacyPluginIds": [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/passioncode",
-  "version": "0.2.43",
+  "version": "0.2.44",
   "description": "Set up PassionCode.ai on a computer with one command — the apps from their verified releases, their MCP servers for every coding agent and the PassionCode.ai skills — and check and repair it with the same command or `doctor`.",
   "bin": {
     "passioncode": "bin/passioncode.js"

package/payload/.claude-plugin/marketplace.json

@@ -11,7 +11,7 @@
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "source": "./plugins/fabric-agent-adapter",
-      "version": "0.53.1",
+      "version": "0.54.0",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks.",
       "author": {
         "name": "PassionCode.ai",
@@ -35,7 +35,7 @@
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "source": "./plugins/passioncode",
-      "version": "0.2.43",
+      "version": "0.2.44",
       "description": "Set up and check PassionCode.ai on a computer with one command (setting-up-passioncode), the organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",

package/payload/manifest.json

@@ -1,15 +1,15 @@
 {
   "family": "passioncode",
-  "version": "0.2.43",
+  "version": "0.2.44",
   "release": true,
   "members": [
     {
       "name": "fabric-agent-adapter",
       "displayName": "Fabric Agent Adapter",
       "repo": "passioncode-ai/fabric-agent-adapter",
-      "ref": "v0.53.1",
-      "commit": "e000c21642bf97b60b06eff0037053abc8e6ab3b",
-      "version": "0.53.1",
+      "ref": "v0.54.0",
+      "commit": "5575cc6e9ea8087deb650d26c5827be94574619d",
+      "version": "0.54.0",
       "via": "clone of https://***@github.com/passioncode-ai/fabric-agent-adapter.git",
       "skills": [
         "adapting-projects-to-fabric",
@@ -23,7 +23,7 @@
       "legacyMarketplaces": [
         "fabric-agent-adapter"
       ],
-      "contentHash": "sha256:ee61e19829b4d7d78eb2928bb9d0a000efc03562e2abccb7ee408cfd3f18ca65",
+      "contentHash": "sha256:c548471c7b5f632d7d19d2b88111caea380ef59397dea574386079fce945c2be",
       "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks.",
       "author": {
         "name": "PassionCode.ai",
@@ -62,9 +62,9 @@
       "name": "passioncode",
       "displayName": "PassionCode.ai",
       "repo": "passioncode-ai/passioncode",
-      "ref": "v0.2.43",
+      "ref": "v0.2.44",
       "commit": null,
-      "version": "0.2.43",
+      "version": "0.2.44",
       "via": "this repository",
       "skills": [
         "setting-up-passioncode",
@@ -72,7 +72,7 @@
       ],
       "legacyPluginIds": [],
       "legacyMarketplaces": [],
-      "contentHash": "sha256:175685fc4f5d6e92164bd883d9f774172cf9b184429f1fe7418e984165035cfd",
+      "contentHash": "sha256:f69bc17e5720c2097191aeb7442471232525710ba62e422c259214c828745583",
       "description": "Set up and check PassionCode.ai on a computer with one command (setting-up-passioncode), the organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check that keeps the PassionCode.ai set current.",
       "author": {
         "name": "PassionCode.ai",

package/payload/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks.",
-  "version": "0.53.1",
+  "version": "0.54.0",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -5,9 +5,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.53.1"
+  version: "0.54.0"
   contract-version: "0.1.0"
-  contract-commit: "1197a90dc4b57152cabcc71ad17db7559f35a27f"
+  contract-commit: "00e050ba7429c0c60261cec871779e0fd6aeeb28"
 ---
 
 # Adapting projects to Fabric
@@ -76,7 +76,7 @@ Use exactly:
 
 - contract version `0.1.0`;
 - repository `https://github.com/passioncode-ai/fabric-agent-contract`;
-- commit `1197a90dc4b57152cabcc71ad17db7559f35a27f`.
+- commit `00e050ba7429c0c60261cec871779e0fd6aeeb28`.
 
 This is the default for new bundles. When checking an issued legacy bundle, preserve its
 explicit supported lock and use that exact clean checkout. Never silently upgrade or

package/payload/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/adapt_project.py

@@ -22,10 +22,10 @@ import fabric_secrets as _secrets  # noqa: E402 - the contract's credential dete
 
 CONTRACT_VERSION = "0.1.0"
 CONTRACT_REPOSITORY = "https://github.com/passioncode-ai/fabric-agent-contract"
-CONTRACT_COMMIT = "1197a90dc4b57152cabcc71ad17db7559f35a27f"
+CONTRACT_COMMIT = "00e050ba7429c0c60261cec871779e0fd6aeeb28"
 # #region supported-contract-revisions — docs: README.md#contract-pin
 # Only this declaration may name a legacy revision in live files.
-SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "e6c4fc16b415eec3190dd34d924d269405359dc9", "a3a66eb0052043847f6556348e37d34ca873a629", "52c7d798b9f4eb784eb4e29e717038a8912c759d", "2f020a696453ae299b123517f14957f6a1354379", "87d384ffce2757081b7ab227e5dad3dddd08328f", "0a4ce773c4b9e6bec40c6387eb3f988af7152c0e", "e742016dc396aa31e5a13a893489e43f15786c69", "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0", "c55f2d5a11c9a0197e958e87212fca7ae1154769", "07042181bfae2a481aa0da1a5651f24c76669c48", "d8146cfb0a1c74fc6432284c4356bb0c864b37b5", "82e163665e156a08aa3b92e4711015582c06162c", "1636fa97262f4a26e2086572d540c2ee701e0010", "f00a7685e3861c27f7899c033fb850a145a1708f", "a046f57cf46ea9e3da57ff8ce6a3ed4d26d8774b", "fe55fc67cba1a9e34a736da7d148d4fe2a8fbfa0", "b291bf09e0a9f9fd3c16cf540832cd021203b7d1", "0cacd08b0e95b6abf131eae1206b60792138bc3c", "2eb91c00e852d9c31d804310d38fad91589fcbac", "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
+SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "1197a90dc4b57152cabcc71ad17db7559f35a27f", "e6c4fc16b415eec3190dd34d924d269405359dc9", "a3a66eb0052043847f6556348e37d34ca873a629", "52c7d798b9f4eb784eb4e29e717038a8912c759d", "2f020a696453ae299b123517f14957f6a1354379", "87d384ffce2757081b7ab227e5dad3dddd08328f", "0a4ce773c4b9e6bec40c6387eb3f988af7152c0e", "e742016dc396aa31e5a13a893489e43f15786c69", "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0", "c55f2d5a11c9a0197e958e87212fca7ae1154769", "07042181bfae2a481aa0da1a5651f24c76669c48", "d8146cfb0a1c74fc6432284c4356bb0c864b37b5", "82e163665e156a08aa3b92e4711015582c06162c", "1636fa97262f4a26e2086572d540c2ee701e0010", "f00a7685e3861c27f7899c033fb850a145a1708f", "a046f57cf46ea9e3da57ff8ce6a3ed4d26d8774b", "fe55fc67cba1a9e34a736da7d148d4fe2a8fbfa0", "b291bf09e0a9f9fd3c16cf540832cd021203b7d1", "0cacd08b0e95b6abf131eae1206b60792138bc3c", "2eb91c00e852d9c31d804310d38fad91589fcbac", "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
 # #endregion supported-contract-revisions
 INTEROP_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/interop/0.1"
 MCP_REVISION = "2026-07-28"

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -14,10 +14,10 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Python 3.9+ or Node.js 20+ for the kits (Node.js 22+ for a Linux service's instance lock); the probe needs Python 3.9+. launchd steps are macOS-only; Linux services install a systemd user unit and Windows ones a per-user Scheduled Task with the kits' writers. Dashboard handoff optionally uses Fabric Dashboards MCP link/host_status/open; without it, report unresolved host capability. The contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.53.1"
+  version: "0.54.0"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
-  extension-commit: "1197a90dc4b57152cabcc71ad17db7559f35a27f"
+  extension-commit: "00e050ba7429c0c60261cec871779e0fd6aeeb28"
 ---
 
 # Building Fabric services

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/delegation.md

@@ -112,7 +112,8 @@ operator's decision), `decision-invalid` (a decision for another action or objec
 and `human-step-required`, which carries `data.humanStep` (`sign-in`, `consent`, `payment`, `secret`,
 `spend-above-limit`, `passkey`) and `data.url` (an https URL or a path on the service's origin) beside `detail`.
 `refusal_from_action` / `refusalFromAction` turn an action decision into that refusal; a service's own fault never
-reaches the caller and reads as `unknown-state`. Since 0.51.0 the `operator-decision-required` message (free text in
+reaches the caller and reads as `unknown-state`, but for `mandate-capability-missing` (DEC-0141 MJ-1): the caller
+reads `operator-decision-required` with that `data.detail`, since no mandate covers the step and only a decision does. Since 0.51.0 the `operator-decision-required` message (free text in
 DL-19, at most 500 characters) also names, in order, the routes for a client that cannot set `_meta`: Fabric's
 `agent.call` with `call.decision` once the hub forwards it (CT-125), the service's own elicitation, else the action's
 page as Fabric Dashboards' `open_link`; both kits carry the same sentence. The gate that answers them is in

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/interop.md

@@ -199,7 +199,10 @@ well_known = fs.build_well_known(..., surfaces=surfaces, actions=server.action_t
   `unknown-state` (`approval-outcome-unreadable` when `approve` answers a refusal whose code or detail DL-18 does not know; an answer
   that is neither `None` nor a dict is read as no approval, which fails closed; or
   `caller-missing`: an action-gated server must pass `tier`, `identify` or `authorize`,
-  since `handle` defaults to T2 and a T2 call names nobody without them).
+  since `handle` defaults to T2 and a T2 call names nobody without them). One fault reaches the caller by name:
+  `mandate-capability-missing` (DEC-0141 MJ-1), read as `operator-decision-required` with that `data.detail`.
+  `on_fault` hears it from `ctx.approval_step` at a job's start under the job's tool, and at the answer under
+  `fabric.job.get`; at the start it hears any fault `job_step` answers (also `now-unreadable` from the server's clock).
 - **Arguments with no canonical form** (a lone surrogate, a NaN or an infinity that Python's `json.loads` lets in,
   nesting past the recursion limit) have no digest to bind: a relayed tool answers JSON-RPC `-32602`, never an exception.
 - **The handler** reads `ctx.record` (`"caller"`, or `{by, via, caller}`) and writes it into the service's audit
@@ -286,10 +289,14 @@ server.add_tool(approve_tool, approve_reply, action=reply_action, target="reply_
   when it reads `source`; a caller that sees no such entry sends the call without `source`, and it is taken as before.
 - `action_gate(..., self_id=, effect=, caller_agent=, spend_usd=, project=)` / `actionGate({..., self, effect,
   callerAgent, spendUsd, project})` is the same gate for a server of your own; `action_decision` / `actionDecision`
-  take `mandate`, `self`, `callerAgent`, `effect`, `spendUsd` and `project` as the contract's function does
-  (`effect-missing`, `self-missing` are the service's own faults), and the kit's own `mandateCapability` (a job's kept
-  step: the capability the mandate is read under), which the contract's function does not take; like `effect`, it is
-  the service's own input, never the caller's.
+  take `mandate`, `self`, `callerAgent`, `effect`, `spendUsd`, `project` and `mandateCapability` as the contract's
+  function does (DEC-0141 MJ-1): for an action whose tool is `fabric.job.get` (a job's input request) the mandate is
+  read under `mandateCapability`, the job's own capability, with the request key as the action; any other action reads
+  its own tool. `effect-missing`, `self-missing` and `mandate-capability-missing` (a job's step with no usable
+  capability: absent, empty, blank, not a capability name, or `fabric.job.get` itself) are the service's own faults;
+  like `effect`, `mandateCapability` is the service's own input, never the caller's. The gate answers
+  `mandate-capability-missing` to the caller as `operator-decision-required` (`data.detail` names it), the fault kept
+  beside it for the service's log, and nothing is applied, so the job stays `input_required`.
 - **A job's approval step (interop C3.3).** A job reads the mandate its start call carried at its own approval step:
   `ctx.approval_step(job_id, key, request, effect=, spend_usd=, project=, message=)` on the start call's context (a
   server with `agent_id`) answers the record when the mandate covers the step `{capability: the job's, action: key,
@@ -302,10 +309,18 @@ server.add_tool(approve_tool, approve_reply, action=reply_action, target="reply_
   replaces the kept steps, and an answer clears them: pass `steps=` again on every question whose answer a mandate may
   cover. The answer's mandate is read under the job's own capability, as at the start (`action_gate(...,
   mandate_capability=)` / `actionGate({mandateCapability})`), so the start and the answer agree whatever the tool is
-  named; a mandate can name only capability names, so one that names capabilities never covers a tool named otherwise.
+  named: a job whose tool is not a capability name has no capability a mandate can read its step under, and both its
+  start and its answer wait for the operator (`mandate-capability-missing` in the message). A mandate whose
+  `capabilities` name `fabric.job.get` covers no step of another capability.
   Node has no tool server: a Node service reads `store.load(jobId).private.steps` and `.private.capability` BEFORE
   `store.answer` (which clears the steps), gates the answer with `actionGate({..., mandateCapability:
-  private.capability})`, then answers. Without a string capability the answer is read under `fabric.job.get`.
+  private.capability})`, then answers. It logs the `fault` that `jobStep` and `actionGate` return beside their
+  answer, as `on_fault` does in Python: `mandate-capability-missing` at the start means the job's tool is not a
+  capability name; at the answer it also means `mandateCapability` was not passed. Any service that gates a job's
+  answer itself (Node `actionGate`, or Python `action_gate(..., mandate_capability=)` outside `McpToolServer`, whose
+  own gate passes it) passes the job's capability; without it every answer a mandate used to cover now waits for the
+  operator. `refusal_from_action` / `refusalFromAction` and so `actionRefusalToolResult` answer that fault as
+  `operator-decision-required` too.
 
 **As a caller.** The agent leading a task states the mandate from the operator's own words with
 `operator_mandate(task, instruction, scope, lead, at=, expires_at=)` / `operatorMandate({task, instruction, scope,

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/references/protocol.md

@@ -1,6 +1,6 @@
 # fabric-service/0.1: wire reference
 
-Pinned to `fabric-agent-contract` commit `1197a90dc4b57152cabcc71ad17db7559f35a27f`
+Pinned to `fabric-agent-contract` commit `00e050ba7429c0c60261cec871779e0fd6aeeb28`
 (`docs/specification/service.md`, DEC-0015; the usage report DEC-0021; Windows and Linux supervision
 DEC-0032 and DEC-0033; the operator channel DEC-0034 and DEC-0035; the embedded dashboard DEC-0036;
 delegation and the operator session's lifetime DEC-0039; the meter's call window DEC-0041; session handoff DEC-0042;
@@ -23,7 +23,7 @@ DEC-0124; the operator's mandate `mandate/1`, handed on narrowed with a task DEC
 operator's agents, its `source` on a mandate and a decision DEC-0126; context hub keys and the organizations an estate
 record pins DEC-0127 and DEC-0128; the family and the agent network named DEC-0130 and DEC-0137; a reply delivered to
 the sender it answers, or to whom it names DEC-0135; a hand-over adds no naming list the scope in force leaves out
-DEC-0136. The organization's member list, draft exchange, relay and the machines' report, DEC-0129, DEC-0131 to DEC-0134,
+DEC-0136; a job's step under the mandate read under the job's own capability DEC-0141. The organization's member list, draft exchange, relay and the machines' report, DEC-0129, DEC-0131 to DEC-0134,
 reach the kit only as protocol register entries). The contract's schemas are normative;
 this page is the working summary. Extension key:
 `https://fabric.passioncode.ai/agent-contract/extensions/service/0.1`.

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-actions.mjs

@@ -3,7 +3,10 @@
 //
 // - actionDecision(inputs): whether a service takes a call of one declared action and as whose act it records it,
 //   exactly as the contract's actionDecision answers (AP-2, AP-4; DL-17, DL-18, DL-25). A `fault` is the service's
-//   own and is never sent to a caller.
+//   own and is never sent to a caller as such; actionGate answers mandate-capability-missing as
+//   operator-decision-required (DEC-0141 MJ-1).
+// - JOB_STEP_TOOL, jobCapability(value): the tool a job's answer comes through, and whether a job's capability can
+//   read its step under a mandate (a capability name other than fabric.job.get).
 // - decisionShape(value): a decision as decision.schema.json reads it, `at` read strictly (the contract's strictTime).
 // - actionsView(wellKnown): the host reader of the declaration, as the contract's actionsView.
 // - actionsExtensionRules(wellKnown), actionRules(kind, value): FAC-SEM-142.
@@ -125,12 +128,12 @@ const refuse = (code) => ({ ok: false, code });
  * (DEC-0126 OA-6). DEC-0125: a call with no decision that carries
  * `mandate` (its `_meta.mandate`) is answered as mandateCovers answers, given `self` (the service's own agent id),
  * `callerAgent` (only an agent id the service authenticated), `effect` (the action's effect class, the service's own
- * knowledge), `spendUsd` and `project`: covered, {by: 'operator', via: 'mandate', task, chain, source?, caller}. `{fault}`
- * (action-invalid, caller-missing, now-unreadable, digest-missing, url-missing, effect-missing, self-missing) is the
- * service's own and is never sent to a caller.
- *
- * Kit input beside the contract's: mandateCapability, a job's kept step's capability, read by the mandate in place of
- * the action's tool (the contract's actionDecision does not take it; the service's own input, never a caller's).
+ * knowledge), `spendUsd` and `project`: covered, {by: 'operator', via: 'mandate', task, chain, source?, caller}.
+ * DEC-0141 MJ-1: a job's input request (tool fabric.job.get) under a mandate is read under `mandateCapability`, the
+ * job's own capability (the tool its start call named), its action the request key; any other action reads its own
+ * tool. `{fault}` (action-invalid, caller-missing, now-unreadable, digest-missing, url-missing, effect-missing,
+ * self-missing, mandate-capability-missing) is the service's own and is never sent to a caller (actionGate answers
+ * mandate-capability-missing as operator-decision-required).
  */
 export function actionDecision(inputs) {
   const field = (key) => member(inputs, key);
@@ -166,6 +169,14 @@ export function actionDecision(inputs) {
   return { ok: true, recordAs: { by: 'operator', via: 'relayed-instruction', caller, ...(has(decision, 'source') ? { source: { ...decision.source } } : {}) } };
 }
 
+/** The tool of a job's input request (interop C3.3, AP-2): the call that answers it is fabric.job.get (DEC-0141 MJ-1). */
+export const JOB_STEP_TOOL = 'fabric.job.get';
+
+/** A job's capability a mandate can read a step under (MJ-1): a capability name, never fabric.job.get itself. */
+export function jobCapability(value) {
+  return typeof value === 'string' && CAPABILITY.test(value) && value !== JOB_STEP_TOOL;
+}
+
 /**
  * A relayed action's call that carries a mandate and no decision (DEC-0125 MD-3): the mandate decides, as the contract's
  * byMandate reads it: the service's own `effect` and agent id `self` are required (else a fault), its estimate
@@ -176,13 +187,15 @@ function byMandate(field, action, caller) {
   const self = field('self');
   if (typeof effect !== 'string') return { fault: 'effect-missing' };
   if (typeof self !== 'string') return { fault: 'self-missing' };
+  // MJ-1: a job's step is read under the job's capability, never under the transport fabric.job.get itself.
+  const capability = action.tool === JOB_STEP_TOOL ? field('mandateCapability') : action.tool;
+  if (!jobCapability(capability)) return { fault: 'mandate-capability-missing' };
   const spendUsd = field('spendUsd');
   const project = field('project');
   const answer = mandateCovers({
     mandate: field('mandate'), tier: field('tier'), now: field('now'), self,
     ...(field('callerAgent') === undefined ? {} : { callerAgent: field('callerAgent') }),
-    // A job's kept step is read under the job's own capability (mandateCapability), as jobStep read it at the start.
-    call: { capability: typeof field('mandateCapability') === 'string' ? field('mandateCapability') : action.tool, action: action.id, effect, ...(typeof spendUsd === 'number' ? { spendUsd } : {}), ...(typeof project === 'string' ? { project } : {}) },
+    call: { capability, action: action.id, effect, ...(typeof spendUsd === 'number' ? { spendUsd } : {}), ...(typeof project === 'string' ? { project } : {}) },
   });
   if ('recordAs' in answer) return { ok: true, recordAs: { ...answer.recordAs, caller } };
   return answer; // never `ignored`: the tier was read first, so a T2 call answered approval-required before (MD-5)

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-delegation.mjs

@@ -506,11 +506,16 @@ export function refusalFromDenial(denial) {
  * DL-19 (DEC-0121): the refusal a service answers for an action call that fabric-actions.mjs's actionDecision refused,
  * or undefined when it took the call. operator-decision-required, decision-invalid and approval-required carry their
  * detail; human-step-required carries humanStep and url (AP-4). A `fault` is the service's own and is never sent: the
- * caller reads unknown-state with the detail service-fault, as for anything else that is not an answer.
+ * caller reads unknown-state with the detail service-fault, as for anything else that is not an answer; but
+ * mandate-capability-missing (DEC-0141 MJ-1), a job's step no mandate can be read for, is answered as
+ * operator-decision-required with that detail, so the job stays input_required.
  */
 export function refusalFromAction(answer) {
   const isRecord = answer !== null && typeof answer === 'object' && !Array.isArray(answer);
   if (isRecord && answer.ok === true) return undefined;
+  if (isRecord && answer.fault === 'mandate-capability-missing') {
+    return refuse('operator-decision-required', ACTION_DETAILS.get('operator-decision-required'), { detail: 'mandate-capability-missing' });
+  }
   const code = isRecord && answer.ok === false && typeof answer.code === 'string' ? answer.code : undefined;
   if (code === undefined || !ACTION_DETAILS.has(code)) return refuse('unknown-state', 'service-fault');
   const data = answer.data !== null && typeof answer.data === 'object' && !Array.isArray(answer.data) && Object.keys(answer.data).length ? { ...answer.data } : undefined;

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-interop-rules.mjs

@@ -6,7 +6,7 @@
 import crypto from 'node:crypto';
 import { ServiceError } from './fabric-base.mjs';
 import { jcs, refusalFromAction, refusalToolResult } from './fabric-delegation.mjs';
-import { actionDecision, decisionShape } from './fabric-actions.mjs'; // DEC-0121
+import { actionDecision, decisionShape, jobCapability } from './fabric-actions.mjs'; // DEC-0121
 import { EFFECT_CLASSES, OPERATOR_SOURCE_PROTOCOL, mandateCovers, mandateProblem, withoutSource } from './fabric-mandate.mjs'; // DEC-0125, DEC-0126
 import { isString } from './fabric-jsvalue.mjs'; // the core's (FAA-65)
 import { isObject } from './fabric-jsvalue.mjs'; // the core's (FAA-65)
@@ -218,6 +218,8 @@ export function requestMeta(traceparent, { decision, mandate, targetProtocols }
   return meta;
 }
 
+const UNREADABLE_JOB_CAPABILITY = "The operator's mandate cannot be read for this step (mandate-capability-missing): answer it, or call fabric.job.get with a decision in _meta.decision.";
+
 /**
  * A job's own approval step under the mandate its start call carried (interop C3.3, DEC-0125 MD-3, MD-4; conformance:
  * "a job's approval step included"): the step is the call {capability: the job's, action: the input request's `key`,
@@ -225,7 +227,8 @@ export function requestMeta(traceparent, { decision, mandate, targetProtocols }
  * agent id it authenticated for the start call. Answers {covered: true, record} (the step goes on as the operator's
  * decision, no input request; `record` is mandateCovers' recordAs, `source` included when the mandate carries one);
  * {covered: false, message, detail} (the step waits input_required, `message` its statusMessage naming the part not
- * covered, or saying the mandate expired or cannot be read; never the operator's words or `source`); or {covered: false,
+ * covered, or saying the mandate expired or cannot be read; never the operator's words or `source`; with `fault`
+ * mandate-capability-missing beside it when the job's capability cannot read the step, MJ-1); or {covered: false,
  * message: null} with no mandate or a T2 caller's (MD-5), with `fault` when the service's own clock does not read.
  */
 export function jobStep({ mandate, tier, now, self, capability, key, effect, callerAgent, spendUsd, project } = {}) {
@@ -237,8 +240,10 @@ export function jobStep({ mandate, tier, now, self, capability, key, effect, cal
   const covers = { mandate, tier, now, self, call };
   if (typeof callerAgent === 'string' && callerAgent.length > 0) covers.callerAgent = callerAgent;
   const answer = mandateCovers(covers);
-  if (answer.ok === true) return { covered: true, record: answer.recordAs };
+  // A T2 caller's mandate changes nothing (MD-5), first; then MJ-1: read alike at the start and at the answer (actionGate).
   if ('ignored' in answer || 'fault' in answer) return { covered: false, message: null, ...('fault' in answer ? { fault: answer.fault } : {}) };
+  if (!jobCapability(capability)) return { covered: false, detail: 'mandate-capability-missing', fault: 'mandate-capability-missing', message: UNREADABLE_JOB_CAPABILITY };
+  if (answer.ok === true) return { covered: true, record: answer.recordAs };
   const { detail } = answer.data;
   const said = detail === 'mandate-expired' ? "The operator's mandate for this task expired before this step"
     : detail.startsWith('outside-mandate') ? `The operator's mandate does not cover this step (${detail})`
@@ -253,7 +258,8 @@ export function jobStep({ mandate, tier, now, self, capability, key, effect, cal
  * elicitation), `approval` (verifyApproval's accepted outcome), `actionDigest`, `humanStepUrl` and `now` (RFC 3339).
  * Answers {ok: true, record, decision}, `decision` being the one taken as the operator's (null otherwise), or {ok: false,
  * refusal} in the DL-19 form (refusalToolResult sends it); a service's own fault is the refusal unknown-state with
- * `fault` beside it for the service's log.
+ * `fault` beside it for the service's log, but for mandate-capability-missing (MJ-1): operator-decision-required naming
+ * it in data.detail, `fault` still beside it.
  *
  * DEC-0125: a service that names its own agent id (`self`) reads the call's `_meta.mandate` when it carries no
  * decision, given `effect` (the action's effect class, required: without it the call is the service's fault
@@ -262,8 +268,8 @@ export function jobStep({ mandate, tier, now, self, capability, key, effect, cal
  * {ok: true, record: {by: 'operator', via: 'mandate', task, chain, caller}, decision: null, mandate}; without `self` the
  * mandate is not read and the call is answered as before it existed.
  *
- * mandateCapability: a job's kept step's capability the mandate is read under, not the action's tool (the kit's
- * input; the service's own, never a caller's).
+ * mandateCapability: a job's kept step's capability the mandate is read under (DEC-0141 MJ-1; the service's own input,
+ * never a caller's); unusable, the refusal is operator-decision-required.
  */
 export function actionGate({ action, tier, caller, meta, target, elicited = false, approval, actionDigest, humanStepUrl, now, self, effect, callerAgent, spendUsd, project, mandateCapability } = {}) {
   const inputs = { action, tier, caller, elicited: elicited === true, now };
@@ -285,6 +291,8 @@ export function actionGate({ action, tier, caller, meta, target, elicited = fals
     if (isObject(record) && record.via === 'mandate') out.mandate = inputs.mandate;
     return out;
   }
+  // MJ-1 (DEC-0141): refusalFromAction answers mandate-capability-missing as operator-decision-required; nothing is
+  // applied, so the job stays input_required.
   const out = { ok: false, refusal: refusalFromAction(answer) };
   if ('fault' in answer) out.fault = answer.fault;
   return out;

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_actions.py

@@ -3,7 +3,10 @@ extensions/actions/0.1 (DEC-0121, FAC-SEM-142). Part of the service kit (layer L
 
 - ``action_decision(inputs)``: whether a service takes a call of one declared action and as whose act it records it,
   exactly as the contract's ``actionDecision`` answers (AP-2, AP-4; DL-17, DL-18, DL-25). A ``fault`` is the
-  service's own and is never sent to a caller.
+  service's own and is never sent to a caller as such; ``action_gate`` answers ``mandate-capability-missing`` as
+  operator-decision-required (DEC-0141 MJ-1).
+- ``JOB_STEP_TOOL`` and ``job_capability(value)``: the tool a job's answer comes through, and whether a job's
+  capability can read its step under a mandate (a capability name other than ``fabric.job.get``).
 - ``decision_shape(value)``: a decision as ``decision.schema.json`` reads it, ``at`` read strictly (the contract's
   ``strictTime``).
 - ``actions_view(well_known)``: the host reader of the declaration, as the contract's ``actionsView``.
@@ -166,14 +169,12 @@ def action_decision(inputs: Any) -> Dict[str, Any]:
       the service authenticated), `effect` (the action's effect class, the service's own knowledge), `spendUsd` (its
       own estimate) and `project`: covered, `{by: operator, via: mandate, task, chain, source?, caller}`; otherwise
       `operator-decision-required` or `decision-invalid` with `data.detail`.
+    - DEC-0141 MJ-1: a job's input request (tool `fabric.job.get`) under a mandate is read under `mandateCapability`,
+      the job's own capability (the tool its start call named), its action the request key; any other action reads
+      its own tool.
     - `{"fault": ...}` (action-invalid, caller-missing, now-unreadable, digest-missing, url-missing, effect-missing,
-      self-missing) is the service's
-      own: an input it owes is missing or unreadable. It is never sent to a caller.
-    
-
-    Kit input beside the contract's: `mandateCapability`, a job's kept step's capability, read by the mandate in
-    place of the action's tool (the contract's actionDecision does not take it; the service's own input, never a
-    caller's)."""
+      self-missing, mandate-capability-missing) is the service's own: an input it owes is missing or unreadable. It is
+      never sent to a caller (action_gate answers mandate-capability-missing as operator-decision-required)."""
     action = get(inputs, "action")
     if not readable_action(action):
         return {"fault": "action-invalid"}
@@ -219,6 +220,15 @@ def action_decision(inputs: Any) -> Dict[str, Any]:
     return {"ok": True, "recordAs": record}
 
 
+#: The tool of a job's input request (interop C3.3, AP-2): the call that answers it is fabric.job.get (DEC-0141 MJ-1).
+JOB_STEP_TOOL = "fabric.job.get"
+
+
+def job_capability(value: Any) -> bool:
+    """A job's capability a mandate can read a step under (MJ-1): a capability name, never fabric.job.get itself."""
+    return isinstance(value, str) and _CAPABILITY.fullmatch(value) is not None and value != JOB_STEP_TOOL
+
+
 def _by_mandate(inputs: Any, action: Dict[str, Any], caller: str) -> Dict[str, Any]:
     """A relayed action's call that carries a mandate and no decision (DEC-0125 MD-3): the mandate decides, as the
     contract's byMandate reads it: the service's own `effect` and agent id `self` are required (else a fault), its
@@ -228,11 +238,11 @@ def _by_mandate(inputs: Any, action: Dict[str, Any], caller: str) -> Dict[str, A
         return {"fault": "effect-missing"}
     if not isinstance(me, str):
         return {"fault": "self-missing"}
-    # A job's kept step is read under the job's own capability, as job_step read it at the start (`mandateCapability`,
-    # the kit's input; the action itself stays fabric.job.get).
-    capability = get(inputs, "mandateCapability")
-    call: Dict[str, Any] = {"capability": capability if isinstance(capability, str) else action["tool"],
-                            "action": action["id"], "effect": effect}
+    # MJ-1: a job's step is read under the job's capability, never under the transport fabric.job.get itself.
+    capability = get(inputs, "mandateCapability") if action["tool"] == JOB_STEP_TOOL else action["tool"]
+    if not job_capability(capability):
+        return {"fault": "mandate-capability-missing"}
+    call: Dict[str, Any] = {"capability": capability, "action": action["id"], "effect": effect}
     spend, project = get(inputs, "spendUsd"), get(inputs, "project")
     if is_number(spend):
         call["spendUsd"] = spend

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_delegation.py

@@ -818,9 +818,14 @@ def refusal_from_action(answer: Any) -> Optional[Dict[str, Any]]:
     """DL-19 (DEC-0121): the refusal a service answers for an action call that fabric_actions.action_decision refused,
     or None when it took the call. operator-decision-required, decision-invalid and approval-required carry their
     detail; human-step-required carries `humanStep` and `url` (AP-4). A `fault` is the service's own and is never
-    sent: the caller reads unknown-state with the detail `service-fault`, as for anything else that is not an answer."""
+    sent: the caller reads unknown-state with the detail `service-fault`, as for anything else that is not an answer;
+    but `mandate-capability-missing` (DEC-0141 MJ-1), a job's step no mandate can be read for, is answered as
+    operator-decision-required with that detail, so the job stays input_required."""
     if isinstance(answer, dict) and answer.get("ok") is True:
         return None
+    if isinstance(answer, dict) and answer.get("fault") == "mandate-capability-missing":
+        return _refuse("operator-decision-required", _ACTION_DETAILS["operator-decision-required"],
+                       {"detail": "mandate-capability-missing"})
     code = answer.get("code") if isinstance(answer, dict) and answer.get("ok") is False else None
     if not isinstance(code, str) or code not in _ACTION_DETAILS:
         return _refuse("unknown-state", "service-fault")

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_interop.py

@@ -510,7 +510,8 @@ class CallContext:
         carried (`_meta.mandate`) is read for it (job_step). Covered: answers the record (`via: mandate`, `source` when
         the mandate carries one) and asks nothing; the job goes on as the operator's decision. Otherwise the job waits
         input_required on `request`, its message naming the part not covered (or `message`), and answers None; the step
-        is kept so an answer's `_meta.mandate` that covers it is read when input_actions is on."""
+        is kept so an answer's `_meta.mandate` that covers it is read when input_actions is on. Any fault job_step answers
+        (mandate-capability-missing, MJ-1, or the server clock's now-unreadable) goes to on_fault under the job's tool."""
         if self.server.jobs is None:
             raise InteropError("This server has no job store.")
         step: Dict[str, Any] = {"message": None}
@@ -521,6 +522,7 @@ class CallContext:
                             spend_usd=spend_usd, project=project)
             if step["covered"]:
                 return step["record"]
+            self.server._fault(self.tool, step)  # the start hears it as the answer does (MJ-1)
         kept = {"effect": effect, **({"spendUsd": spend_usd} if spend_usd is not None else {}),
                 **({"project": project} if project is not None else {})}
         self.server.jobs.request_input(job_id, {key: request}, step["message"] or message, steps={key: kept})
@@ -644,7 +646,8 @@ class McpToolServer:
         # approval the call presented, or None; elicited(tool, arguments, caller) is True only on the service's own
         # record of an accepted elicitation. input_actions=True gates each answered input request as an action (D8).
         # on_fault(tool, fault) hears a service fault the caller only sees as unknown-state (e.g. caller-missing: an
-        # action-gated server needs a tier, identify or authorize that names who calls).
+        # action-gated server needs a tier, identify or authorize that names who calls), but for mandate-capability-missing
+        # (MJ-1), which the caller reads as operator-decision-required naming it in data.detail.
         # DEC-0125: agent_id is this service's own agent id; with it the server reads a call's _meta.mandate for a
         # relayed action added with its effect (the chain must end in agent_id, and in the delegation's caller before
         # it when authorize accepted a token); without it a mandate is not read, as before.
@@ -796,8 +799,8 @@ class McpToolServer:
             action = {"id": key, "title": "Answer %s" % key, "tool": "fabric.job.get", "gate": "relayed"}
             step, mandate = steps.get(key), {}
             if self.agent_id is not None and isinstance(step, dict):
-                # A kept step's mandate is read as approval_step read it, under the job's own capability; the action
-                # itself stays fabric.job.get, so it is readable whatever the tool is named.
+                # A kept step's mandate is read as approval_step read it, under the job's own capability, which must
+                # be a capability name (MJ-1); the action itself stays fabric.job.get, so it is a readable action.
                 capability = self.jobs.private(job_id).get("capability")
                 agent = (verdict or {}).get("caller")
                 mandate = {"self_id": self.agent_id, "effect": step.get("effect"), "spend_usd": step.get("spendUsd"),
@@ -811,7 +814,8 @@ class McpToolServer:
         return {"ok": True, "records": records}
 
     def _fault(self, tool: str, gated: Dict[str, Any]) -> None:
-        """Hand a service fault to on_fault; the caller saw only unknown-state. A hook that raises is the service's."""
+        """Hand a service fault to on_fault; the caller saw unknown-state (operator-decision-required naming it for
+        mandate-capability-missing, MJ-1). A hook that raises is the service's."""
         if gated.get("fault") and self._on_fault is not None:
             try:
                 self._on_fault(tool, str(gated["fault"]))

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_interop_rules.py

@@ -17,7 +17,7 @@ if str(_Path(__file__).resolve().parent) not in _sys.path:  # the kit loads from
     _sys.path.insert(0, str(_Path(__file__).resolve().parent))
 
 from fabric_base import ServiceError  # noqa: E402
-from fabric_actions import action_decision, decision_shape  # noqa: E402 - DEC-0121
+from fabric_actions import action_decision, decision_shape, job_capability  # noqa: E402 - DEC-0121
 from fabric_mandate import (  # noqa: E402 - DEC-0125, DEC-0126
     EFFECT_CLASSES, OPERATOR_SOURCE_PROTOCOL, mandate_covers, mandate_problem, without_source)
 
@@ -319,6 +319,10 @@ def request_meta(traceparent: Optional[str] = None, decision: Any = None, mandat
     return meta
 
 
+_UNREADABLE_JOB_CAPABILITY = ("The operator's mandate cannot be read for this step (mandate-capability-missing): answer it, "
+                              "or call fabric.job.get with a decision in _meta.decision.")
+
+
 def job_step(mandate: Any, *, tier: Any, now: Any, self_id: Any, capability: Any, key: Any, effect: Any,
              caller_agent: Any = None, spend_usd: Any = None, project: Any = None) -> Dict[str, Any]:
     """A job's own approval step under the mandate its start call carried (interop C3.3, DEC-0125 MD-3, MD-4;
@@ -330,6 +334,7 @@ def job_step(mandate: Any, *, tier: Any, now: Any, self_id: Any, capability: Any
       mandate_covers' recordAs (`via: mandate`, the task, the chain and `source` when the mandate carries one).
     - {"covered": False, "message", "detail"}: the step waits input_required, `message` its statusMessage naming the
       part not covered, or saying the mandate expired or cannot be read; never the operator's words or `source`.
+      With `fault` mandate-capability-missing beside it when the job's capability cannot read the step (MJ-1).
     - {"covered": False, "message": None}: no mandate, or a T2 caller's (MD-5): ask as before; with `fault` when the
       service's own clock does not read."""
     if mandate is None:
@@ -345,10 +350,13 @@ def job_step(mandate: Any, *, tier: Any, now: Any, self_id: Any, capability: Any
     if isinstance(caller_agent, str) and caller_agent:
         covers["callerAgent"] = caller_agent
     answer = mandate_covers(covers)
+    if "ignored" in answer or "fault" in answer:  # a T2 caller's mandate changes nothing (MD-5), first
+        return dict({"covered": False, "message": None}, **({"fault": answer["fault"]} if "fault" in answer else {}))
+    if not job_capability(capability):  # MJ-1: read alike at the start and at the answer (action_gate)
+        return {"covered": False, "detail": "mandate-capability-missing", "fault": "mandate-capability-missing",
+                "message": _UNREADABLE_JOB_CAPABILITY}
     if answer.get("ok") is True:
         return {"covered": True, "record": answer["recordAs"]}
-    if "ignored" in answer or "fault" in answer:
-        return dict({"covered": False, "message": None}, **({"fault": answer["fault"]} if "fault" in answer else {}))
     detail = answer["data"]["detail"]
     if detail == "mandate-expired":
         said = "The operator's mandate for this task expired before this step"
@@ -371,13 +379,14 @@ def action_gate(action: Any, *, tier: Any, caller: Any, meta: Any = None, target
     record of an accepted elicitation), `approval` (verify_approval's accepted outcome), `action_digest`,
     `human_step_url` and `now` (RFC 3339). Answers {ok: True, record, decision}, `decision` being the one taken as the
     operator's (None otherwise), or {ok: False, refusal} in the DL-19 form (fabric_delegation.refusal_tool_result
-    sends it); a service's own fault is the refusal unknown-state with `fault` beside it for the service's log.
+    sends it); a service's own fault is the refusal unknown-state with `fault` beside it for the service's log, but for
+    mandate-capability-missing (MJ-1): operator-decision-required naming it in data.detail, `fault` still beside it.
 
     DEC-0125: a service that names its own agent id (`self_id`) reads the call's `_meta.mandate` when it carries no
     decision, given `effect` (the action's effect class, required: without it the call is the service's fault
     effect-missing), `caller_agent` (only an agent id the service authenticated: a delegation's caller, its own
     per-agent credential; never a name the call carries), `spend_usd` (its own estimate), `project`, and `mandate_capability` (a job's kept step: the job's capability
-    the mandate is read under, not the action's tool). A covered call
+    the mandate is read under, DEC-0141 MJ-1; unusable, the refusal is operator-decision-required). A covered call
     answers {ok: True, record: {by: operator, via: mandate, task, chain, caller}, decision: None, mandate}; without
     `self_id` the mandate is not read and the call is answered as before it existed."""
     import fabric_delegation as _fd  # noqa: E402 - beside this file: DL-19
@@ -401,6 +410,8 @@ def action_gate(action: Any, *, tier: Any, caller: Any, meta: Any = None, target
         if isinstance(record, dict) and record.get("via") == "mandate":
             out["mandate"] = inputs["mandate"]
         return out
+    # MJ-1 (DEC-0141): refusal_from_action answers mandate-capability-missing as operator-decision-required; nothing is
+    # applied, so the job stays input_required.
     out: Dict[str, Any] = {"ok": False, "refusal": _fd.refusal_from_action(answer)}
     if "fault" in answer:
         out["fault"] = answer["fault"]

package/payload/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/kit.json

@@ -1,6 +1,6 @@
 {
  "name": "fabric-service-kit",
- "version": "0.53.1",
+ "version": "0.54.0",
  "about": "The service kit's modules in dependency order: a module imports only modules listed before it. Written by fabric_kit.py build; edit the order and layers by hand, never the digests.",
  "python": [
   {
@@ -113,7 +113,7 @@
     "fabric_mandate",
     "fabric_paths"
    ],
-   "sha256": "650b8bb0827f2e56c7f6dc98bd975acff19627491fd713d6897e14f59f107eaa"
+   "sha256": "212ab88df02d52c433793acb0cd7a24527a87d770b831d542f467c176b49b4c5"
   },
   {
    "module": "fabric_share",
@@ -186,7 +186,7 @@
     "fabric_mandate",
     "fabric_time"
    ],
-   "sha256": "6f7c4110b755e31f948645fba8d15823f350b7e7a3a973b01606702d0f0a0d94"
+   "sha256": "0efe81c7b73c63963348fb4936a3816a961d3424416abd5823fbeb1aa2cb0bbf"
   },
   {
    "module": "fabric_connections",
@@ -380,7 +380,7 @@
     "fabric_mandate",
     "fabric_time"
    ],
-   "sha256": "adbc61f490f142092cd27847aa7e2560fc81e5dc892f5cec423c802eca0e99d5"
+   "sha256": "42e88f4b3f22890022baa8cb999ee953978ab2a9a029e89e951767a4eabfd090"
   },
   {
    "module": "fabric_interop",
@@ -396,7 +396,7 @@
     "fabric_service",
     "fabric_time"
    ],
-   "sha256": "e467cee268c1202f86214149004b58718cb587d32650861e456414002493b9e6"
+   "sha256": "42e3f73a673f13775fbbdf476bfd5a96e4553fa3d0141e8ad223c8f88b0dd0b3"
   },
   {
    "module": "fabric_hub",
@@ -592,7 +592,7 @@
     "fabric-mandate",
     "fabric-paths"
    ],
-   "sha256": "ddef0956002a3ce7eded792d6aebb1c6515f1a70e88efd603f9dfb6c4db92adb"
+   "sha256": "04eaf6cd1786d4309a253a27dbdb05e27b408cb511aa41b1633a96634b775e65"
   },
   {
    "module": "fabric-share",
@@ -663,7 +663,7 @@
     "fabric-mandate",
     "fabric-time"
    ],
-   "sha256": "42e7b6261a886444b74a3cd5694ab5d5cf46c54d8c9540b090e617e7a93ebd21"
+   "sha256": "35f34dccb6c4feb482b0b169f53682f9690b32012481bef3869e487e9637af09"
   },
   {
    "module": "fabric-connections",
@@ -855,7 +855,7 @@
     "fabric-jsvalue",
     "fabric-mandate"
    ],
-   "sha256": "8a55a794c9055e381c761c6f5b4df9fa93d705526fa0bce5dba978aed1b4a804"
+   "sha256": "0933a8cd9567cd39f05575167d92dfef0745aaa591779419e84f94be18b01177"
   },
   {
    "module": "fabric-interop",
@@ -3942,6 +3942,94 @@
    "fabric-openrouter.mjs": "ab6c4c7251d563980d895061ee19976bde2f364c21b6354efdd9a9027b1ea139",
    "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
    "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
+  },
+  "0.54.0": {
+   "fabric_jsvalue.py": "12888a2c934a885d35999ac9782eaedc8d04946d9775213344a235a8814d3d28",
+   "fabric_time.py": "588f383da4ac6a243ea95b6ffc3a0aa99ca94245732dc4937734f190b7af4ae9",
+   "fabric_identifiers.py": "0fd814d521ac3aa39907458265870753046a73f48af3d8581ab864b93b211607",
+   "fabric_secrets.py": "68a0b5e9e90c468ec9ac67b2f0fd1848e08813d6ec1ec14a2a47337eb1a98911",
+   "fabric_crypto.py": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa",
+   "fabric_base.py": "f62bcc2ed9912660fa875d27a09f60867260cc4925f79873501fd9620be59611",
+   "fabric_platform.py": "a9350dff55ef0fb3a23cdb4d0320a15868b15a8deb10d2eb74d72c58740c284b",
+   "fabric_paths.py": "8a1ee742f80f436e9f28c61b4f049a9545de2a9e0d66bfc61faa6ee5d1ba3734",
+   "fabric_estate_rules.py": "8b36a7f4108d9c2b1fb38c8bff344778c807bed631a99b4a563ecb0a49c10b1c",
+   "fabric_estate.py": "b3cd56dcb86e04d252980322ac8054da1aaef24ac64690f7aa80e7c765ee6f60",
+   "fabric_mandate.py": "050c43d0166a7dfba82e29c4e978f05c364cf6da06d0a781bd023a566777c17b",
+   "fabric_delegation.py": "212ab88df02d52c433793acb0cd7a24527a87d770b831d542f467c176b49b4c5",
+   "fabric_share.py": "da36a466426fc29dd7dd40013167f3959a18375f8fedd228bf64f298cec1040c",
+   "fabric_ceremonies.py": "a59e83cf4adb2669a9b98008e3d3a0cba991a35cbff97bc604fc82fe81cfd49f",
+   "fabric_package_schema.py": "e623f0408d38e3343ed66222fb812907c6c52e1a286eb1c1176ab2e64640c9ad",
+   "fabric_package.py": "ff533f1b3f92b4ea0f532fcec50b68c610d47549930eef8ad5247692a64dfb3c",
+   "fabric_protocols.py": "54ff0f26a8bda640c7edd826cf59151b6ff0483fe72e9c0626c0ba1b79738cd4",
+   "fabric_actions.py": "0efe81c7b73c63963348fb4936a3816a961d3424416abd5823fbeb1aa2cb0bbf",
+   "fabric_connections.py": "77d3ccf863c70e9209d21ef45c46a6db9c06237019bc20d54f8d3946873f3f11",
+   "fabric_a2a.py": "8b01502131215bb4de1c01866187c56e99b791543923ed8577535573db33b919",
+   "fabric_page_links.py": "1b57ea573c550e2f90d1ec3edcc655917ceaa0db9dd1635fccf422ec3024d25e",
+   "fabric_lock.py": "ba2399d2137c7a7791b7133b9db9cca36693f4eb7e30955b25a75ade814e95ba",
+   "fabric_usage.py": "b1f335cab4625171a616cf68cf3fd892b18bdadcf4baec3a3a0fdcf12785c170",
+   "fabric_backups.py": "1f3f0d7ecf361b29e9101e07f1c53e5dc304d598bf26fd59ec89f16b9fed2420",
+   "fabric_descriptor.py": "c973def06b68dce7ef369da77186542ce3afe357d4579a7d409604f06e4bf131",
+   "fabric_context.py": "6ae311ddc7217a4aff915e7ce2646486931acd128462b7bebe4a52bbb5fbb6c7",
+   "fabric_auth.py": "71115d18c67b7b806cb57b64b77e01ad97fc0e63e6f49ee850f778123617d905",
+   "fabric_events.py": "0086886c2c29dbd5c9d152be9d375c5bdf4a29f89b8095baff8490c2bcd64e47",
+   "fabric_logs.py": "86dc55bfafa2a57264722e2403510a249b95de0e4a722b2e4bc3948e3bd93da9",
+   "fabric_supervisors.py": "3c5b2e8c310738720b1c1b779be4710e90251013d9be4c68f9952edc0bf55d5f",
+   "fabric_service.py": "a2e813469a47d4d3eea996628635c8903007498bdb6a1ae032a7a5ce6f49fe2f",
+   "fabric_profiles.py": "26e21ec29c016000f8ca8053b7b489184854a73be1b7fdc0a18d12990203db9b",
+   "fabric_interop_rules.py": "42e88f4b3f22890022baa8cb999ee953978ab2a9a029e89e951767a4eabfd090",
+   "fabric_interop.py": "42e3f73a673f13775fbbdf476bfd5a96e4553fa3d0141e8ad223c8f88b0dd0b3",
+   "fabric_hub.py": "b9ac852e601b1d54cf61351677a628afc69faeed7d1fc74ebe541c1cf38e0c2a",
+   "fabric_board_shapes.py": "0a0e8d3d40e33dfd8c457aedb85330b2ff25f8c49a33eb6cbd5a5cc8a5007f7e",
+   "fabric_board_link.py": "55b552354deb60e50268c672912647bca57951fd6a3a27fb5d6dae11ec5a4fd7",
+   "fabric_board_session.py": "e2b45c274e6eadcb020ec075950750a4f88d6293149b19b6b78a8d41ab669918",
+   "fabric_board_fixture.py": "69761ce205ec640762ec9b591c6903e5a87f844e8d423b041681924027e39d1e",
+   "fabric_board.py": "0f075894b3e352194fcaf3fc7d08dee4e9f1c215e859769ed85fa5010e4a1599",
+   "fabric_http.py": "5d7f72af3a73fdbe8c1f487ecf60cef23a7c46289eba542b03aff4706b8218d4",
+   "fabric_openrouter.py": "309f588f9c976b1061323f3161e35d86248afd5b59b16391afbfc4e1099ecd65",
+   "fabric-jsvalue.mjs": "dfbdb8c41584972c9389750a41719374a1cfc5652ed438dd1623025190b0106e",
+   "fabric-time.mjs": "3ff932069038a720df1c68c6492976906737b2e67e5c12d9c81c418597f661de",
+   "fabric-identifiers.mjs": "a18c2a501a4aa170bfd3d99e571ad6b7662649b4d3b9d2a540c002ea42811bbf",
+   "fabric-secrets.mjs": "6ad8ab18ac899ecc2384e8ec6a3fb689b92be3b9a5ce3a59b92a37d52da5d766",
+   "fabric-crypto.mjs": "038e03689701e3c9721a1e7f8e0a4d02a52d6a5d1661b0dc84035edc3ebbfcf6",
+   "fabric-base.mjs": "7804b2df7715dbbf9702a9b61b6b8cef2110f9a52b04cabd8fb0a66458d87512",
+   "fabric-platform.mjs": "a8119d95ebba4d589a9e401f5d6fc8dda62d59d44e4c1ff811d97fac3771ac0c",
+   "fabric-paths.mjs": "aa630d611e748a899e7043480f4a4e46b444f2e15ff945f30c2fbef21c1ceea5",
+   "fabric-estate-rules.mjs": "7476be71174aa5b1026134f2b335abf647feaa55584e2f9de8618e3054aa8e1e",
+   "fabric-estate.mjs": "e8a2e62d2313121e6cb502f6e6abad94d1d546a44b4d9b3ce2be29e7808e8cf3",
+   "fabric-mandate.mjs": "deaab2bfb929d1bd35ae1bad71e7b9ad9902cc23b8eb51819ed592fd80eddf95",
+   "fabric-delegation.mjs": "04eaf6cd1786d4309a253a27dbdb05e27b408cb511aa41b1633a96634b775e65",
+   "fabric-share.mjs": "bfb26581c21ad984c2a337da02429f9f3a165cc582f8ba48de4d3dfb7d163a59",
+   "fabric-ceremonies.mjs": "117d4374c9e95c930a38de7adbd4323774798f4fe6ec6f24afcd6f2c7298ca44",
+   "fabric-package-schema.mjs": "cd28092375db0fc21ffab1f0bb7794f7f8979ee08c64d3b9faf4b3845357caa6",
+   "fabric-package.mjs": "13913ea6d12056c3a31b8222b6c4aab8395941fe519913692e1a06d8672e1c88",
+   "fabric-protocols.mjs": "7da65440a7a08bf27d90a06e9158b1c4ee6d7f9204eecb712d452406bfe59962",
+   "fabric-actions.mjs": "35f34dccb6c4feb482b0b169f53682f9690b32012481bef3869e487e9637af09",
+   "fabric-connections.mjs": "303432e547ce563e90ca9ffcd827f5612f51d3582929834e1add0fdaf6485dcc",
+   "fabric-a2a.mjs": "51b72fe1d80649d659fcad3a8f96370db3476c4a7b30cbabd8522c138be69346",
+   "fabric-page-links.mjs": "a8834926e9d4bbf7c4857f551451d2ebf6ac8873bbccaaf89c5e30cf45b17ee6",
+   "fabric-lock.mjs": "ac219ab0a326d5c43c7c4c255e0c3843d4794de795a60e3af661e7d5350ea052",
+   "fabric-usage.mjs": "1c4d18004639409624ac3516a02f2b60bbf55abdb612e9a96c37e83666eb87a7",
+   "fabric-backups.mjs": "cfd8c9085e3d597a783099c2bd2ffe2f3faa0daaadab46dedd30523894cfeb06",
+   "fabric-descriptor.mjs": "84c35c7ba0ae09fde1dc3f6ab796cd578d008707e77815a0f7b7a80306fa4cce",
+   "fabric-context.mjs": "1112d695e872f9825cbc94f08484974bff3880087bc29b8be59f885f03e8f7be",
+   "fabric-auth.mjs": "782c2aa732f8320f604194660117640a7ea145e12b8155c04e88cef7c516a5b3",
+   "fabric-events.mjs": "c463d6ffcae24229a5c608d8fcea4268d2ccc5024b19fa10e5a452284068fa71",
+   "fabric-logs.mjs": "58467e5719c16e099d05bbedec47a95712506ab03c33f3cd4be1252e8498a946",
+   "fabric-supervisors.mjs": "d45c38de0cb3ed85e083496c2d3c51dab004454accdd87f4762a512a6d442573",
+   "fabric-service.mjs": "6aa673657427211b491a9b63f94b9847a7e6aa3ee1b7353e1af11f46469803a3",
+   "fabric-profiles.mjs": "314376cf2deb87f235fb18b11d3b532e211f585b9af0a9302b5f4cc39971b532",
+   "fabric-interop-rules.mjs": "0933a8cd9567cd39f05575167d92dfef0745aaa591779419e84f94be18b01177",
+   "fabric-interop.mjs": "b66fccf4edc1448b3cda31cf036a789574cf07b5044d8433e4a5bf12a9c9aa7a",
+   "fabric-hub.mjs": "c005115a864cfd67daa4862097bb14acfe5a60bf653897e5bf8a570dd80f1070",
+   "fabric-board-shapes.mjs": "c1db7b7bd0d58d82bb6d8dfbc3cd1547a256a333052d367e82ff1b3edf2804d7",
+   "fabric-board-link.mjs": "ed93ad15e0f48627e545b561c4a562007d1b256c55f650126333aa6566876b12",
+   "fabric-board-session.mjs": "9a70016543dded33bbbfe9dc7705e684387abd1d889598b579f1ca26927023cb",
+   "fabric-board-fixture.mjs": "83c4b7e33ee47b68385faf2569d38d5c8a0c5cb0f8656090f41e1b0eed2f436e",
+   "fabric-board.mjs": "9e7bfe4d412521982224ef12bebfc2ff255eeeaf8d96cf40234ac18de68e7a59",
+   "fabric-http.mjs": "f886bcb49c4353d039387ac9568738dda26697a94dd07fc6a6204500f0bc27bf",
+   "fabric-openrouter.mjs": "ab6c4c7251d563980d895061ee19976bde2f364c21b6354efdd9a9027b1ea139",
+   "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
+   "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
   }
  },
  "data": {

package/payload/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -5,9 +5,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.53.1"
+  version: "0.54.0"
   contract-version: "0.1.0"
-  contract-commit: "1197a90dc4b57152cabcc71ad17db7559f35a27f"
+  contract-commit: "00e050ba7429c0c60261cec871779e0fd6aeeb28"
 ---
 
 # Creating Fabric-compatible agents
@@ -136,7 +136,7 @@ python3 <plugin-dir>/skills/adapting-projects-to-fabric/scripts/adapt_project.py
 The effect class is declared, never defaulted: ask the author what the agent does outside itself when the request
 does not say. Cost presets are only for a run whose cost varies; their amounts come from the author or measured runs.
 
-Pin exactly contract `0.1.0` at commit `1197a90dc4b57152cabcc71ad17db7559f35a27f` and
+Pin exactly contract `0.1.0` at commit `00e050ba7429c0c60261cec871779e0fd6aeeb28` and
 read the pinned guide before implementing protocol details. If this skill is installed
 without its sibling, the scaffolder is absent: create the bundle by hand from the pinned
 contract's `docs/guides/connecting-compatible-agents.md` and mark the structural check

package/payload/plugins/fabric-agent-adapter/skills/working-with-fabric/SKILL.md

@@ -18,7 +18,7 @@ compatibility: >-
   this plugin; Codex/Kimi use command hooks; Hermes/OpenCode/OpenClaw/Pi use native context plugins after opt-in.
 metadata:
   author: PassionCode.ai
-  version: "0.53.1"
+  version: "0.54.0"
 ---
 
 # Working with Fabric
@@ -238,7 +238,9 @@ already approved.
   `{kind: "mandate/1", by: "operator", task, instruction, at, source?, expiresAt, scope, chain}`, `instruction` his
   words verbatim (at most 500 characters), `at` when he said them, `source` where he said them when they reached you
   relayed, `expiresAt` at most seven days on, `scope` no wider than his words (`capabilities` or `actions`, `effects`,
-  `perCallMaxUsd`, `projects`), `chain` starting with you. Each hand-over appends the agent you call to `chain`, with a
+  `perCallMaxUsd`, `projects`), `chain` starting with you. For a job asking the operator at a step, name the job's capability in
+  `capabilities` without `actions`: the step is read with its request key as the action, unknown ahead
+  (DEC-0141 MJ-1). Each hand-over appends the agent you call to `chain`, with a
   narrower `scope` when you hand on less, never wider; at most four agents; `source` never changes down the chain. It
   travels in the call's `_meta.mandate` or as `call.mandate` of Fabric's `agent.call` once Fabric's hub forwards it
   (CT-125), never in a tool's arguments; the service kits state and hand it on (`operator_mandate(source=)`,
@@ -259,7 +261,7 @@ already approved.
   covers the part, else pass the refusal to the agent that called you; only the agent leading the task asks him, once,
   about that part alone (MD-4). A
   caller outside the machine's trust (T2) gets nothing from a mandate.
-- The contract's decision for request `519d7b21` is DEC-0126 (OA-1 to OA-7), pinned since 0.52.0 (FAA-134), with
+- The contract's decision for request `519d7b21` is DEC-0126 (OA-1 to OA-7), with
   `mandate/1` (DEC-0125) its machine form and `source` the place it names.
 
 ### A lane stopped on a limit: restart it at once
@@ -311,7 +313,7 @@ stuck work to the operator.
 | denied | the operator said no | stop; it stands until cleared in Agent access |
 | failed in the client before its answer arrived; outcome unknown | the call may have run | check its effect first (`fabric_work_list`, `fabric_tasks_list`); repeat only with the same idempotency key |
 | Fabric restarted or closed this session; nothing was done | refused before the call ran | call it again once `fabric_whoami` answers |
-| `operator-decision-required` | a service's action needs the operator's decision and none travelled; with `data.detail` `outside-mandate: <part>`, the mandate does not cover that part | ask the operator about this action, then relay their answer by the first route of Step 5 that carries it, the page only when none does; under a mandate, call again within your own mandate if it covers the part, else pass the refusal to the agent that called you, and only the lead asks him, once, about that part alone |
+| `operator-decision-required` | a service's action needs the operator's decision and none travelled; with `data.detail` `outside-mandate: <part>`, the mandate does not cover that part | ask the operator about this action, then relay their answer by the first route of Step 5 that carries it, the page only when none does; under a mandate, call again within your own mandate if it covers the part, else pass the refusal to the agent that called you, and only the lead asks him, once, about that part alone; `mandate-capability-missing`: no mandate covers that step, only his decision |
 | `decision-invalid` | the decision names another action or object, is older than 24 hours, lies over 60 s ahead of the service's clock, or is malformed; or the mandate is (`data.detail` `mandate-malformed`, `-widened`, `-expired`, `-early`, `-not-for-this-call`) | never edit, widen or re-date it; ask the operator again when their words do not cover this call |
 | `approval-required` with `data.actionDigest` | a caller outside the machine's trust (T2): a chat decision changes nothing | an `approval/1` for that digest through the hub |
 | `human-step-required` with `data.humanStep` and `data.url` | a sign-in, a one-time code, consent, payment or top-up, typed secret, spend above a limit or passkey stays the person's | hand the person `data.url`: a path on the service's origin as Fabric Dashboards' `open_link` (`fallback=never`), an https URL as it is; never take the step or ask for the secret; continue other work |

package/payload/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session_env.py

@@ -58,7 +58,7 @@ SESSION_ID = re.compile(r"[A-Za-z0-9._:-]{1,128}")
 LOOPBACK_ORIGIN = re.compile(r"http://127\.0\.0\.1:(\d{1,5})")
 
 
-VERSION = "0.53.1"
+VERSION = "0.54.0"
 
 
 HOSTS = {"claude": "Claude Code", "codex": "Codex", "kimi": "Kimi Code",

package/payload/plugins/passioncode/.claude-plugin/plugin.json

@@ -2,7 +2,7 @@
   "$schema": "https://json.schemastore.org/claude-code-plugin-manifest.json",
   "name": "passioncode",
   "displayName": "PassionCode.ai",
-  "version": "0.2.43",
+  "version": "0.2.44",
   "description": "Set up and check PassionCode.ai on a computer with one command (setting-up-passioncode), the organisation's working rules for every contributor's agent (working-in-passioncode), and a once-a-day check at session start that keeps the PassionCode.ai skill set current.",
   "author": {
     "name": "PassionCode.ai",