@passioncode-ai/fabric-agent-adapter 0.13.0 → 0.15.0

package/CHANGELOG.md

@@ -1,5 +1,67 @@
 # Changelog
 
+## 0.15.0 - 2026-10-12
+
+Fabric's button in the dashboard kit (contract DEC-0040, FB-7). With it, FAA-20 is complete. The contract pin is
+unchanged (`0cacd08`).
+
+### Added
+
+- **`assets/dashboard-kit/fabric-button.js`** (kit `fabric-dashboard-kit` 1.1.0) is one floating menu button that
+  opens Fabric on the service. It is driven by `data-service`, `data-service-name`, `data-project`,
+  `data-project-name` and `data-runner`, and implements FB-1 to FB-6:
+  - **Menu (FB-4):** "Chat with Fabric about …", plus "Open a coding session in …" when the page knows its project.
+    Arrow keys, Home, End and Escape work.
+  - **Placement (FB-2):** bottom-right, or bottom-left right-to-left, 16 px plus the safe area. The page keeps the
+    button's height plus 16 px free at the end of its scroll.
+  - **Look (FB-3):** the mark alone below 480 px. The accessible name is always "Open Fabric". Colours are `--ink`
+    on `--panel` with an `--edge` boundary, the pairs the themes are already measured on.
+  - **Host button (FB-6):** the page hides its own button under the host's `fabric_button` cookie `owner=host`.
+  - **Fabric absent (FB-5):** "Fabric is not installed — get it at passioncode.ai/fabric" shows when the cookie or
+    the server says Fabric is absent, or when the page is still visible and focused 1.5 s after a link was followed.
+
+  Links are built with a port of the contract's `buildFabricLink` and `parseFabricLink`, with the FL-4 credential
+  detector. A value the grammar refuses means no button, never a bad link. A press only opens a view (FB-8). The
+  script is CSP-clean, and the only address it names is passioncode.ai/fabric.
+- `test/fixtures/contract/fabric-links.json` holds 42 parse and 9 build cases. Every expected answer comes from the
+  contract's own functions at the pin, through `make_link_vectors.mjs`.
+- `test/fabric-button.test.mjs` covers:
+  - the grammar against those vectors;
+  - the cookie and the menu items;
+  - the CSP check;
+  - the behaviour in WebKit through Playwright: placement, size, scroll clearance, keyboard, right-to-left, the
+    host cookie, Fabric absent, and the 1.5 s test. These are skipped when Playwright is absent.
+
+  Eight planted defects were each caught.
+- The sample service's dashboard shows the button. The layout probe passes all 17 rules on it in WebKit.
+- `references/dashboard-kit.md` has a "Fabric's button" section. The scenario eval `fabric-button-on-a-dashboard`
+  came first.
+
+### Changed
+
+- The dashboard kit is 1.1.0. `dashboard_kit.py install` also copies `fabric-button.js`, and `build` digests every
+  copied file. `DASHBOARD_KIT` in both service kits names `fabric-dashboard-kit@1.1.0`.
+
+## 0.14.0 - 2026-10-12
+
+The contract pin moves to Fabric Agent Contract `main` `0cacd08`, which includes PR #46 (DEC-0046, runner and model
+profiles) and PR #47 (CT-31). Bundles issued under the DEC-0045 revision and every earlier supported one stay valid
+(FAA-30).
+
+### Changed
+
+- **Default contract pin `2eb91c0` → `0cacd08b0e95b6abf131eae1206b60792138bc3c`.** `2eb91c0` joins
+  `SUPPORTED_CONTRACT_COMMITS`. The revisions between add DEC-0046's model and runner profile schemas, a model
+  catalogue, an optional `configuration` on the well-known document and an optional `route` on usage receipts.
+  They also tighten `modelClasses` in a grant to the catalogue's closed vocabulary, which the kits do not write. Later
+  merges change fixtures and the contract's privacy check only. The provider manifest and the MCP, A2A and
+  local-runner profiles are unchanged. The compiled-schema arms at `2ce3922` and `0cacd08` agree.
+- **The shared delegation vectors are regenerated with the contract's verifier at the new pin.** The one case the
+  contract used to throw on, a signed token with no `act`, now carries the contract's own answer (`unauthenticated` /
+  `malformed-chain`), which is the answer the kits already gave. The other 81 delegation answers are unchanged. The
+  tests no longer have a `contractThrew` path; they require that the contract answers every case.
+- `references/protocol.md` names DEC-0046's `configuration` and `route`. The kits do not emit them yet (FAA-19).
+
 ## 0.13.0 - 2026-10-12
 
 The scaffolder writes what a capability does outside itself, and what a run may cost (FAA-25; target architecture v4,

package/README.md

@@ -203,7 +203,7 @@ Scaffolding is non-destructive by default. It writes only the paths declared in
 The default pin for new bundles is [`fabric-contract.lock.json`](fabric-contract.lock.json):
 
 - version: `0.1.0`
-- commit: `2eb91c00e852d9c31d804310d38fad91589fcbac`
+- commit: `0cacd08b0e95b6abf131eae1206b60792138bc3c`
 
 Every other mention of the default contract revision — this section, the skills' metadata, the
 skill card, `adapt_project.py` — must equal it; `python3 test/validate.py` fails a tree
@@ -230,8 +230,8 @@ FABRIC_CONTRACT_OLD=/path/to/legacy-contract FABRIC_CONTRACT_NEW=/path/to/curren
 ```
 
 Without both environment variables, those tests explicitly skip as `NOT_RUN`.
-This source checkout is 0.13.0. 0.12.0 is the latest published GitHub/npm release (2026-10-12; 0.7.0 and 0.11.0
-were never released); 0.13.0 is published by its `v0.13.0` tag. Source delivery does not update installed skills or live sessions.
+This source checkout is 0.15.0. 0.14.0 is the latest published GitHub/npm release (2026-10-12; 0.7.0 and 0.11.0
+were never released); 0.15.0 is published by its `v0.15.0` tag. Source delivery does not update installed skills or live sessions.
 
 ## License
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/fabric-agent-adapter",
-  "version": "0.13.0",
+  "version": "0.15.0",
   "description": "Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.",
   "scripts": {
     "test": "python3 test/validate.py && python3 -m unittest discover -s test -q && node --test 'test/*.test.mjs'"

package/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles.",
-  "version": "0.13.0",
+  "version": "0.15.0",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -5,9 +5,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.13.0"
+  version: "0.15.0"
   contract-version: "0.1.0"
-  contract-commit: "2eb91c00e852d9c31d804310d38fad91589fcbac"
+  contract-commit: "0cacd08b0e95b6abf131eae1206b60792138bc3c"
 ---
 
 # Adapting projects to Fabric
@@ -70,7 +70,7 @@ Use exactly:
 
 - contract version `0.1.0`;
 - repository `https://github.com/passioncode-ai/fabric-agent-contract`;
-- commit `2eb91c00e852d9c31d804310d38fad91589fcbac`.
+- commit `0cacd08b0e95b6abf131eae1206b60792138bc3c`.
 
 This is the default for new bundles. When checking an issued legacy bundle, preserve its
 explicit supported lock and use that exact clean checkout. Never silently upgrade or

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/adapt_project.py

@@ -18,10 +18,10 @@ from urllib.parse import urlparse
 
 CONTRACT_VERSION = "0.1.0"
 CONTRACT_REPOSITORY = "https://github.com/passioncode-ai/fabric-agent-contract"
-CONTRACT_COMMIT = "2eb91c00e852d9c31d804310d38fad91589fcbac"
+CONTRACT_COMMIT = "0cacd08b0e95b6abf131eae1206b60792138bc3c"
 # #region supported-contract-revisions — docs: README.md#contract-pin
 # Only this declaration may name a legacy revision in live files.
-SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
+SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "2eb91c00e852d9c31d804310d38fad91589fcbac", "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
 # #endregion supported-contract-revisions
 INTEROP_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/interop/0.1"
 MCP_REVISION = "2026-07-28"

package/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -16,10 +16,10 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Python 3.9+ or Node.js 20+ for the kits; the probe needs Python 3.9+. launchd steps are macOS-only (Linux services use lifecycle manager none until a systemd adapter exists). Dashboard handoff optionally uses Fabric Dashboards MCP link/host_status/open; without it, report unresolved host capability. The contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.13.0"
+  version: "0.15.0"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
-  extension-commit: "2eb91c00e852d9c31d804310d38fad91589fcbac"
+  extension-commit: "0cacd08b0e95b6abf131eae1206b60792138bc3c"
 ---
 
 # Building Fabric services

package/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/demo.html

@@ -7,6 +7,7 @@
   <title>Example agent · dashboard kit demo</title>
   <link rel="stylesheet" href="fabric-dashboard.css">
   <script src="fabric-dashboard.js" defer></script>
+  <script src="fabric-button.js" defer data-service="example-agent.default" data-service-name="Example Agent" data-project="project-a" data-project-name="Project A"></script>
 </head>
 <body>
   <a class="fd-skip" href="#overview">Skip to content</a>

package/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/fabric-button.js

@@ -0,0 +1,280 @@
+/* fabric-dashboard-kit@1.1.0 · Fabric's button (Fabric Agent Contract DEC-0040, FB-1…FB-8, FL-1…FL-6)
+   Load it same-origin, after fabric-dashboard.css, with the service it opens Fabric on:
+     <script src="fabric-button.js" defer data-service="example-agent.default" data-service-name="Example Agent"
+             data-project="project-a" data-project-name="Project A"></script>
+   One floating menu button: "Chat with Fabric about <service>" and, when the page knows its project, "Open a coding
+   session in <project>". Its links carry ids only and open a view in Fabric, nothing more (FB-8). It hides itself
+   when the host draws its own (the fabric_button cookie, FB-6) and says how to get Fabric when Fabric is absent
+   (FB-5). No inline script, no eval, nothing from a CDN; the only address it names is passioncode.ai/fabric.
+   Do not edit in place; `dashboard_kit.py install` replaces it on an upgrade. */
+(function (root) {
+  'use strict';
+
+  var VERSION = '1.1.0';
+  var COOKIE = 'fabric_button';
+  var GET_FABRIC = 'https://passioncode.ai/fabric';
+  var ABSENT_AFTER_MS = 1500;
+  var MAX_LINK_LENGTH = 2048;
+
+  // ---- fabric:// links: a port of the contract's src/fabric-links.ts and src/secret-shape.ts (FL-1…FL-6) ----
+
+  var AGENT_ID = /^[a-z][a-z0-9-]{1,62}(\.[a-z][a-z0-9-]{0,31})?$/;
+  var PROJECT_REF = /^[A-Za-z0-9][A-Za-z0-9._:-]{0,127}$/;
+  var RUNNER_KIND = /^[a-z][a-z0-9-]{1,62}$/;
+  var SHAPE = /^fabric:\/\/(chat|session\/new)\/?(?:\?([^#]*))?(?:#(.*))?$/;
+  var KNOWN = {
+    chat: { service: AGENT_ID, project: PROJECT_REF },
+    'session.new': { project: PROJECT_REF, runner: RUNNER_KIND }
+  };
+  var PROMPT_WORDS = ['prompt', 'message', 'msg', 'text', 'instruction', 'instructions'];
+  var CREDENTIAL_WORDS = ['token', 'secret', 'password', 'passwd', 'pass', 'passphrase', 'credential', 'credentials', 'cookie',
+    'authorization', 'bearer', 'jwt', 'otp', 'apikey', 'signature', 'sig', 'accesstoken', 'idtoken', 'authtoken',
+    'refreshtoken', 'sessionid', 'sessiontoken', 'logincode', 'authcode', 'privatekey', 'clientsecret', 'secretkey', 'accesskey'];
+  var CREDENTIAL_PAIRS = {
+    key: ['private', 'api', 'access', 'secret', 'session', 'auth', 'signing', 'encryption', 'master', 'client', 'login', 'refresh'],
+    auth: ['token', 'code', 'header'],
+    session: ['token', 'id'],
+    code: ['login', 'auth', 'access', 'session']
+  };
+  var JWT_SHAPE = /eyJ[A-Za-z0-9_-]{2,}\.[A-Za-z0-9_-]{2,}\.[A-Za-z0-9_-]*/;
+  var SECRET_VALUE = /(^bearer\s.+|sk-[A-Za-z0-9_-]{16,}|gh[pousr]_[A-Za-z0-9]{20,}|xox[abposr]-[A-Za-z0-9-]{10,}|AKIA[0-9A-Z]{16}|glpat-[A-Za-z0-9_-]{20,})/i;
+  var LONG_RUN = /[A-Za-z0-9+/=_-]{40,}/g;
+
+  function nameWords(name) {
+    return name.replace(/([a-z0-9])([A-Z])/g, '$1 $2').replace(/([A-Z]+)([A-Z][a-z])/g, '$1 $2')
+      .split(/[\s._-]+/).filter(Boolean).map(function (w) { return w.toLowerCase(); });
+  }
+  function withSingulars(words) {
+    return words.concat(words.filter(function (w) { return w.length > 2 && /s$/.test(w); }).map(function (w) { return w.slice(0, -1); }));
+  }
+  function credentialName(name) {
+    var split = nameWords(name);
+    var words = withSingulars(split);
+    if (words.some(function (w) { return CREDENTIAL_WORDS.indexOf(w) >= 0; })) return true;
+    if (split.length === 1 && words.some(function (w) { return Object.prototype.hasOwnProperty.call(CREDENTIAL_PAIRS, w); })) return true;
+    return Object.keys(CREDENTIAL_PAIRS).some(function (w) {
+      return words.indexOf(w) >= 0 && CREDENTIAL_PAIRS[w].some(function (p) { return words.indexOf(p) >= 0; });
+    });
+  }
+  function longSecret(value) {
+    return (value.match(LONG_RUN) || []).some(function (run) { return /[a-z]/.test(run) && /[A-Z]/.test(run) && /[0-9]/.test(run); });
+  }
+  function secretValue(value) { return JWT_SHAPE.test(value) || SECRET_VALUE.test(value) || longSecret(value); }
+  function decodeKeepingPlus(raw) { try { return decodeURIComponent(raw); } catch (e) { return raw; } }
+  function firstKey(text) { var it = new URLSearchParams(text).keys().next(); return it.done ? '' : it.value; }
+  function rawValues(query) {
+    var values = new Map();
+    query.split('&').forEach(function (piece) {
+      if (piece === '') return;
+      var at = piece.indexOf('=');
+      var name = firstKey(at < 0 ? piece : piece.slice(0, at));
+      values.set(name, (values.get(name) || []).concat(at < 0 ? '' : decodeKeepingPlus(piece.slice(at + 1))));
+    });
+    return values;
+  }
+  function promptName(name) { return nameWords(name).some(function (w) { return PROMPT_WORDS.indexOf(w) >= 0; }); }
+  function flat(lists) { return lists.reduce(function (a, b) { return a.concat(b); }, []); }
+
+  /** The contract's parseFabricLink: {ok: true, link, ignored} or {ok: false, problems}. */
+  function parseFabricLink(url) {
+    if (url.length > MAX_LINK_LENGTH) return { ok: false, problems: ['a link is at most ' + MAX_LINK_LENGTH + ' characters'] };
+    var match = SHAPE.exec(url.replace(/^fabric:/i, 'fabric:'));
+    if (!match) return { ok: false, problems: ['not fabric://chat or fabric://session/new'] };
+    var action = match[1] === 'chat' ? 'chat' : 'session.new';
+    var params = new URLSearchParams(match[2] || '');
+    var problems = [];
+    var fragment = match[3] || '';
+    if (fragment) {
+      var pieces = Array.from(new URLSearchParams(fragment));
+      var raw = flat(Array.from(rawValues(fragment).values()));
+      if (secretValue(fragment) || raw.some(secretValue) || pieces.some(function (p) { return (p[1] !== '' && credentialName(p[0])) || secretValue(p[1]) || secretValue(p[0]); })) {
+        problems.push('the fragment could carry a credential; a link never does');
+      }
+    }
+    var ignored = [];
+    var values = {};
+    var known = KNOWN[action];
+    var rawQuery = rawValues(match[2] || '');
+    Array.from(new Set(Array.from(params.keys()))).forEach(function (name) {
+      var all = params.getAll(name);
+      if (promptName(name)) { problems.push('the parameter ' + name + ' carries words to act on; a link carries ids only'); return; }
+      if (credentialName(name) || secretValue(name) || all.some(secretValue) || (rawQuery.get(name) || []).some(secretValue)) {
+        problems.push('the parameter ' + name + ' could carry a credential; a link never does'); return;
+      }
+      var grammar = Object.prototype.hasOwnProperty.call(known, name) ? known[name] : undefined;
+      if (!grammar) { ignored.push(name); return; }
+      if (all.length > 1) { problems.push(name + ' is given ' + all.length + ' times'); return; }
+      var value = all[0] || '';
+      if (!grammar.test(value)) {
+        problems.push(name + ' is not a valid ' + (name === 'service' ? 'agent id' : name === 'runner' ? 'runner kind' : 'project id or slug')); return;
+      }
+      values[name] = value;
+    });
+    var named = function (re) { return problems.some(function (p) { return re.test(p); }); };
+    if (action === 'chat' && values.service === undefined && values.project === undefined && !named(/^(service|project) /)) problems.push('a chat link names a service, a project or both');
+    if (action === 'session.new' && values.project === undefined && !named(/^project /)) problems.push('a session link names its project');
+    if (problems.length) return { ok: false, problems: problems };
+    var link = action === 'chat' ? { action: action } : { action: action, project: values.project };
+    if (action === 'chat') { if (values.service) link.service = values.service; if (values.project) link.project = values.project; }
+    else if (values.runner) link.runner = values.runner;
+    return { ok: true, link: link, ignored: ignored };
+  }
+
+  /** The contract's buildFabricLink: throws on a value the grammar refuses, so a page cannot emit a bad link. */
+  function buildFabricLink(link) {
+    var query = new URLSearchParams();
+    if (link.action === 'chat') {
+      if (link.service !== undefined) query.set('service', link.service);
+      if (link.project !== undefined) query.set('project', link.project);
+    } else {
+      query.set('project', link.project);
+      if (link.runner !== undefined) query.set('runner', link.runner);
+    }
+    var url = 'fabric://' + (link.action === 'chat' ? 'chat' : 'session/new') + '?' + query.toString();
+    var parsed = parseFabricLink(url);
+    if (!parsed.ok) throw new TypeError(parsed.problems.join('; '));
+    return url;
+  }
+
+  /** FB-6: the host's cookie as {owner, fabric}, or null when absent or of an unknown version. */
+  function parseButtonCookie(cookieHeader) {
+    if (typeof cookieHeader !== 'string' || !cookieHeader) return null;
+    var parts = cookieHeader.split(';');
+    for (var i = 0; i < parts.length; i++) {
+      var part = parts[i].replace(/^\s+/, '');
+      if (part.indexOf(COOKIE + '=') !== 0) continue;
+      var raw = part.slice(COOKIE.length + 1);
+      if (raw.charAt(0) === '"' && raw.charAt(raw.length - 1) === '"') raw = raw.slice(1, -1);
+      var fields = new URLSearchParams(decodeKeepingPlus(raw));
+      if (fields.get('v') !== '1') return null;
+      var out = {};
+      if (fields.get('owner') === 'host' || fields.get('owner') === 'page') out.owner = fields.get('owner');
+      if (fields.get('fabric') === 'present' || fields.get('fabric') === 'absent') out.fabric = fields.get('fabric');
+      return out;
+    }
+    return null;
+  }
+
+  /** The menu items for a page: the chat link always, the session link when the page knows its project. */
+  function menuItems(options) {
+    var items = [];
+    var chat = { action: 'chat', service: options.service };
+    if (options.project) chat.project = options.project;
+    items.push({ label: 'Chat with Fabric about ' + (options.serviceName || options.service), href: buildFabricLink(chat) });
+    if (options.project) {
+      var session = { action: 'session.new', project: options.project };
+      if (options.runner) session.runner = options.runner;
+      items.push({ label: 'Open a coding session in ' + (options.projectName || options.project), href: buildFabricLink(session) });
+    }
+    return items;
+  }
+
+  // ---- the button (FB-1…FB-6) ----
+
+  var SVG = 'http://www.w3.org/2000/svg';
+
+  function mark(doc) {
+    var svg = doc.createElementNS(SVG, 'svg');
+    svg.setAttribute('viewBox', '0 0 24 24');
+    svg.setAttribute('aria-hidden', 'true');
+    svg.setAttribute('focusable', 'false');
+    svg.setAttribute('class', 'fd-fabric-button-mark');
+    var path = doc.createElementNS(SVG, 'path');
+    path.setAttribute('d', 'M5 5h14v3H8v3h9v3H8v5H5z'); // the Fabric mark: an F
+    path.setAttribute('fill', 'currentColor');
+    svg.appendChild(path);
+    return svg;
+  }
+
+  function el(doc, tag, attrs, text) {
+    var node = doc.createElement(tag);
+    Object.keys(attrs || {}).forEach(function (k) { node.setAttribute(k, attrs[k]); });
+    if (text !== undefined) node.textContent = text;
+    return node;
+  }
+
+  /** Mount the button in `doc`. Returns the button, or null when the host draws its own (FB-1, FB-6). */
+  function mount(doc, options) {
+    var cookie = parseButtonCookie(doc.cookie);
+    if (cookie && cookie.owner === 'host') return null;
+    var items = menuItems(options);
+    var absent = options.fabric === 'absent' || (cookie && cookie.fabric === 'absent');
+
+    var wrap = el(doc, 'div', { 'class': 'fd-fabric-button-wrap' });
+    var button = el(doc, 'button', { type: 'button', 'class': 'fd-fabric-button', 'aria-haspopup': 'menu', 'aria-expanded': 'false', 'aria-label': 'Open Fabric' });
+    button.appendChild(mark(doc));
+    button.appendChild(el(doc, 'span', { 'class': 'fd-fabric-button-label', 'aria-hidden': 'true' }, 'Fabric'));
+    var menu = el(doc, 'div', { role: 'menu', 'class': 'fd-fabric-button-menu', 'aria-label': 'Fabric' });
+    menu.hidden = true;
+    var links = items.map(function (item) {
+      var a = el(doc, 'a', { role: 'menuitem', href: item.href, tabindex: '-1', 'class': 'fd-fabric-button-item' }, item.label);
+      menu.appendChild(a);
+      return a;
+    });
+    var note = el(doc, 'p', { 'class': 'fd-fabric-button-note', role: 'note' });
+    note.appendChild(doc.createTextNode('Fabric is not installed — get it at '));
+    note.appendChild(el(doc, 'a', { href: GET_FABRIC, target: '_blank', rel: 'noopener', 'class': 'fd-fabric-button-get' }, 'passioncode.ai/fabric'));
+    note.hidden = !absent;
+    menu.appendChild(note);
+    wrap.appendChild(menu);
+    wrap.appendChild(button);
+    doc.body.appendChild(wrap);
+    doc.documentElement.classList.add('fd-has-fabric-button');
+
+    function open(focusFirst) {
+      menu.hidden = false;
+      button.setAttribute('aria-expanded', 'true');
+      if (focusFirst && links.length) links[0].focus();
+    }
+    function close(refocus) {
+      menu.hidden = true;
+      button.setAttribute('aria-expanded', 'false');
+      if (refocus) button.focus();
+    }
+    function move(by) {
+      var at = links.indexOf(doc.activeElement);
+      links[(at + by + links.length) % links.length].focus();
+    }
+    button.addEventListener('click', function () { if (menu.hidden) open(true); else close(true); });
+    button.addEventListener('keydown', function (e) {
+      if (e.key === 'ArrowDown' || e.key === 'ArrowUp') { e.preventDefault(); open(false); (e.key === 'ArrowDown' ? links[0] : links[links.length - 1]).focus(); }
+    });
+    menu.addEventListener('keydown', function (e) {
+      if (e.key === 'Escape') { e.preventDefault(); close(true); }
+      else if (e.key === 'ArrowDown') { e.preventDefault(); move(1); }
+      else if (e.key === 'ArrowUp') { e.preventDefault(); move(-1); }
+      else if (e.key === 'Home') { e.preventDefault(); links[0].focus(); }
+      else if (e.key === 'End') { e.preventDefault(); links[links.length - 1].focus(); }
+      else if (e.key === 'Tab') { close(false); }
+    });
+    doc.addEventListener('click', function (e) { if (!menu.hidden && !wrap.contains(e.target)) close(false); });
+    // FB-5: a page cannot see which schemes this computer handles. If, after following a link, the page is still
+    // visible and focused 1.5 s later, Fabric did not take it: say how to get Fabric, once, and never retry.
+    links.forEach(function (a) {
+      a.addEventListener('click', function () {
+        root.setTimeout(function () {
+          if (doc.visibilityState === 'visible' && doc.hasFocus()) { note.hidden = false; open(false); }
+        }, ABSENT_AFTER_MS);
+      });
+    });
+    return button;
+  }
+
+  function optionsFrom(script) {
+    var d = script.dataset;
+    return { service: d.service, serviceName: d.serviceName, project: d.project, projectName: d.projectName, runner: d.runner, fabric: d.fabric };
+  }
+
+  var api = { version: VERSION, parseFabricLink: parseFabricLink, buildFabricLink: buildFabricLink, parseButtonCookie: parseButtonCookie,
+    menuItems: menuItems, credentialName: credentialName, secretValue: secretValue, nameWords: nameWords, mount: mount };
+  root.FabricButton = api;
+
+  var doc = root.document;
+  var script = doc && doc.currentScript;
+  if (script && script.dataset && script.dataset.service) {
+    var start = function () {
+      try { mount(doc, optionsFrom(script)); } catch (err) { if (root.console) root.console.warn('fabric-button: not shown — ' + err.message); }
+    };
+    if (doc.readyState === 'loading') doc.addEventListener('DOMContentLoaded', start); else start();
+  }
+})(typeof window !== 'undefined' ? window : globalThis);

package/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/fabric-dashboard.css

@@ -1,4 +1,4 @@
-/* fabric-dashboard-kit@1.0.0 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
+/* fabric-dashboard-kit@1.1.0 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
    A Fabric service dashboard shown inside a host pane: usable from 360 CSS px up, navigation always
    reachable, wide content in its own scroll box, one vertical scroller, appearance from the host.
    Copy this file next to fabric-dashboard.js; do not edit it in place. Put the page's own rules in
@@ -196,3 +196,32 @@ pre.fd-scroll, .fd-scroll pre { margin: 0; padding: var(--space-3); font: var(--
 
 /* ---- appearance owned by the host (ED-6) ---- */
 html[data-fd-host-appearance] [data-fd-appearance-control] { display: none !important; }
+
+/* ---- Fabric's button (DEC-0040, FB-1…FB-6; fabric-button.js) ---- */
+/* FB-2: fixed to the bottom-right (bottom-left right-to-left), 16 px plus the safe area; above the content and the
+   sticky chrome (z 10), below the page's dialogs. The page keeps the button's height plus 16 px free at the end. */
+:root { --fd-fb-size: 44px; }
+html.fd-has-fabric-button body { padding-bottom: calc(var(--fd-fb-size) + 2 * var(--space-4) + env(safe-area-inset-bottom, 0px)); }
+.fd-fabric-button-wrap { position: fixed; z-index: 15; bottom: calc(var(--space-4) + env(safe-area-inset-bottom, 0px));
+  right: calc(var(--space-4) + env(safe-area-inset-right, 0px)); display: flex; flex-direction: column; align-items: flex-end; gap: var(--space-2); }
+[dir="rtl"] .fd-fabric-button-wrap { right: auto; left: calc(var(--space-4) + env(safe-area-inset-left, 0px)); align-items: flex-start; }
+/* FB-3: the mark and the word, 44 × 44 at least; colours from the theme: --ink on --panel (AA), an --edge boundary (3:1). */
+.fd-fabric-button { display: inline-flex; align-items: center; justify-content: center; gap: var(--space-2); min-width: var(--fd-fb-size);
+  min-height: var(--fd-fb-size); padding: 0 var(--space-3); font: 600 var(--t-body) var(--font-ui); color: var(--ink); background: var(--panel);
+  border: 2px solid var(--edge); border-radius: var(--r-pill); cursor: pointer;
+  transition: background-color var(--dur-hover) var(--motion-ease); }
+.fd-fabric-button:hover { background: var(--panel-2); }
+.fd-fabric-button:focus-visible, .fd-fabric-button-item:focus-visible { outline: 3px solid var(--accent); outline-offset: 2px; }
+.fd-fabric-button-mark { width: 20px; height: 20px; flex: none; }
+@media (max-width: 479.98px) { .fd-fabric-button-label { display: none; } .fd-fabric-button { padding: 0; } }
+/* FB-4: the menu; FB-5: the note when Fabric is absent. */
+.fd-fabric-button-menu { min-width: 240px; max-width: min(360px, calc(100vw - 2 * var(--space-4))); padding: var(--space-1); background: var(--panel);
+  color: var(--ink); border: 1px solid var(--edge); border-radius: var(--r-card); }
+.fd-fabric-button-menu[hidden] { display: none; }
+.fd-fabric-button-item { display: block; padding: var(--space-2) var(--space-3); min-height: var(--fd-fb-size); box-sizing: border-box;
+  color: var(--ink); text-decoration: none; border-radius: var(--r-control); font: var(--t-body)/1.5 var(--font-ui); overflow-wrap: anywhere; }
+.fd-fabric-button-item:hover, .fd-fabric-button-item:focus { background: var(--panel-2); }
+.fd-fabric-button-note { margin: var(--space-1) 0 0; padding: var(--space-2) var(--space-3); border-top: 1px solid var(--border-strong);
+  font: var(--t-body)/1.5 var(--font-ui); color: var(--ink); }
+.fd-fabric-button-note[hidden] { display: none; }
+.fd-fabric-button-get { color: var(--ink); text-decoration: underline; }

package/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/fabric-dashboard.js

@@ -1,4 +1,4 @@
-/* fabric-dashboard-kit@1.0.0 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
+/* fabric-dashboard-kit@1.1.0 · fabric-dashboard/0.1 (Fabric Agent Contract DEC-0036)
    Load it same-origin with <script src="fabric-dashboard.js" defer></script>: no inline script, no
    eval, nothing from a CDN. It applies the host's appearance (ED-6, ED-8), folds navigation that
    does not fit into a More menu (ED-3), makes wide boxes keyboard-reachable (ED-4) and keeps
@@ -8,7 +8,7 @@
   'use strict';
 
   var KIT = 'fabric-dashboard-kit';
-  var VERSION = '1.0.0';
+  var VERSION = '1.1.0';
   /* fabric-dashboard-kit:theme-ids:begin */
   var THEMES = ['graphite', 'fabric', 'paper', 'forest', 'ocean', 'ember', 'contrast'];
 /* fabric-dashboard-kit:theme-ids:end */

package/plugins/fabric-agent-adapter/skills/building-fabric-services/assets/dashboard-kit/kit.json

@@ -1,6 +1,6 @@
 {
   "name": "fabric-dashboard-kit",
-  "version": "1.0.0",
+  "version": "1.1.0",
   "profile": "fabric-dashboard/0.1",
   "decision": "DEC-0036",
   "declarationKey": "https://fabric.passioncode.ai/agent-contract/extensions/dashboard/0.1",
@@ -15,14 +15,20 @@
     "contrast"
   ],
   "files": {
-    "fabric-dashboard.css": "3993e6ab5e58d5229bc4dc245aa634fcf88a4f59502e1de90d3d3cfef70528a2",
-    "fabric-dashboard.js": "bac615a40c85d8c668588528f9e21dac800aa01fefb56b8ee573c30520ce74a7",
+    "fabric-dashboard.css": "498571903fac6dfd2d6645283da2f703fa945f410f2fafa269a8c9c322735c3b",
+    "fabric-dashboard.js": "100f55d940d4ed60aa8511cee4c65219c93114eb7d7a66639b0e4e4d7aa05f22",
+    "fabric-button.js": "4f1e100936ae65af5539594681e66092ae1834a4952da547a67d0558c9fadbbe",
     "themes.json": "511839f1a1a83eb37fadfd132791474497d5c28c5091700b9aa31ad076e359b5"
   },
   "history": {
     "1.0.0": {
       "fabric-dashboard.css": "3993e6ab5e58d5229bc4dc245aa634fcf88a4f59502e1de90d3d3cfef70528a2",
       "fabric-dashboard.js": "bac615a40c85d8c668588528f9e21dac800aa01fefb56b8ee573c30520ce74a7"
+    },
+    "1.1.0": {
+      "fabric-dashboard.css": "498571903fac6dfd2d6645283da2f703fa945f410f2fafa269a8c9c322735c3b",
+      "fabric-dashboard.js": "100f55d940d4ed60aa8511cee4c65219c93114eb7d7a66639b0e4e4d7aa05f22",
+      "fabric-button.js": "4f1e100936ae65af5539594681e66092ae1834a4952da547a67d0558c9fadbbe"
     }
   }
 }

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/dashboard-kit.md

@@ -11,6 +11,7 @@ promises so a service does not re-derive them.
 - The rules the page keeps
 - Using the kit
 - Themes and the host's appearance
+- Fabric's button
 - Declaring it
 - Proving it
 - Upgrading an existing dashboard
@@ -79,6 +80,34 @@ controls while it is present; an unknown `theme` is `graphite`. `data-fd-appeara
 what the page applies (declare the same in `appearance`). The page re-reads the cookie when it
 changes (`cookieStore`) and when it becomes visible again.
 
+## Fabric's button
+
+The kit ships Fabric's button (contract DEC-0040, FB-7): one floating menu button that opens Fabric on this
+service. Load it after the stylesheet, with ids only:
+
+```html
+<script src="fabric-button.js" defer data-service="example-agent.default" data-service-name="Example Agent"
+        data-project="project-a" data-project-name="Project A"></script>
+```
+
+- **The menu (FB-4):** "Chat with Fabric about *Example Agent*" always; "Open a coding session in *Project A*" when
+  the page knows its project (`data-runner` picks the runner kind). Arrows move, Escape closes and returns focus.
+- **Placement and look (FB-2, FB-3):** bottom-right (bottom-left right-to-left), 16 px off and clear of the safe
+  area, above the sticky chrome and below dialogs; the page keeps its height plus 16 px free at the end of the
+  scroll. The mark and the word *Fabric*, the mark alone below 480 px; the accessible name is always *Open Fabric*;
+  `--ink` on `--panel` with an `--edge` boundary, the pairs the themes are measured on.
+- **Links (FL-1…FL-6):** built with the kit's port of the contract's `buildFabricLink`; a value outside the grammar
+  — or one shaped like a credential — means no button, never a bad link. A press opens a view in Fabric and starts
+  nothing (FB-8).
+- **The host (FB-6):** when the host's `fabric_button` cookie says `owner=host`, the page hides its own button.
+- **Fabric absent (FB-5):** when the cookie says `fabric=absent`, or `data-fabric="absent"` (a local service whose
+  server checked for Fabric's hub document), or when the page is still visible and focused 1.5 s after a link was
+  followed, the menu says "Fabric is not installed — get it at passioncode.ai/fabric". Nothing downloads, nothing
+  retries.
+
+`window.FabricButton` exposes `buildFabricLink`, `parseFabricLink` and `parseButtonCookie` for a page that needs
+them. The button is optional: a page without the script has no button.
+
 ## Declaring it
 
 When the page meets ED-1…ED-6, say so in the well-known document (ED-9):
@@ -125,9 +154,9 @@ operator and update only with their go-ahead** — the page is theirs and may be
 
 ## When something is missing
 
-- **No Python for the CLI:** copy the two files from `assets/dashboard-kit/` by hand and compare the
+- **No Python for the CLI:** copy the files from `assets/dashboard-kit/` by hand and compare the
   first line's version with `kit.json`.
-- **The page is built by a framework:** import the two files as static assets; keep them unbundled
+- **The page is built by a framework:** import the files as static assets; keep them unbundled
   or keep the version marker comment, so `status` can still read the version.
 - **The page needs a fixed width:** not decided by the profile; declare the `minWidth` it needs
   (up to 1280) and say why in the README.

package/plugins/fabric-agent-adapter/skills/building-fabric-services/references/protocol.md

@@ -1,11 +1,11 @@
 # fabric-service/0.1 — wire reference
 
-Pinned to `fabric-agent-contract` commit `2eb91c00e852d9c31d804310d38fad91589fcbac`
+Pinned to `fabric-agent-contract` commit `0cacd08b0e95b6abf131eae1206b60792138bc3c`
 (`docs/specification/service.md`, DEC-0015; the usage report DEC-0021; Windows and Linux supervision
 DEC-0032 and DEC-0033; the operator channel DEC-0034 and DEC-0035; the embedded dashboard DEC-0036;
 delegation and the operator session's lifetime DEC-0039; the meter's call window DEC-0041; session handoff DEC-0042;
 canonical forms DEC-0043; `degraded[].setup` and `run.mcp.stdio.scope` DEC-0044; delegation sealed and trust tiers
-DEC-0045). The contract's schemas are normative;
+DEC-0045; runner and model profiles DEC-0046). The contract's schemas are normative;
 this page is the working summary. Extension key:
 `https://fabric.passioncode.ai/agent-contract/extensions/service/0.1`.
 
@@ -61,6 +61,9 @@ No auth; the Host/Origin guard applies; answered from memory in under 100 ms.
 - A `degraded[]` entry may carry `setup: true` (DEC-0044): the source waits for a person to finish setting it up
   (a key not entered, a model not chosen). It is not an outage, and a watcher does not alert on it. The kits pass
   entries through unchanged.
+- `configuration` (DEC-0046) MAY say which runner and model profile the service resolved and from where
+  (`request`, `agent`, `binding`, `estate`); a usage receipt MAY carry the `route` (`subscription` or `key`). The kits
+  do not emit either yet (FAA-19).
 - `build` needs `commit` or `digest` (`sha256:<64 hex>`).
 - `summary`: at most six tiles; `attention: true` counts toward the host's badge.
 - `surfaces.events` is required; `dashboard` and `mcp` when the service has them; `usage`

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/dashboard_kit.py

@@ -27,7 +27,7 @@ from typing import Any, Dict, List, Optional, Sequence, Tuple
 
 KIT_DIR = Path(__file__).resolve().parent.parent / "assets" / "dashboard-kit"
 KIT_NAME = "fabric-dashboard-kit"
-COPIED = ("fabric-dashboard.css", "fabric-dashboard.js")
+COPIED = ("fabric-dashboard.css", "fabric-dashboard.js", "fabric-button.js")  # fabric-button.js: DEC-0040, FB-7
 MARKER = re.compile(r"fabric-dashboard-kit@(\d+)\.(\d+)\.(\d+)(?:-[0-9A-Za-z.-]+)?")
 CSS_BEGIN, CSS_END = "/* fabric-dashboard-kit:themes:begin */", "/* fabric-dashboard-kit:themes:end */"
 JS_BEGIN, JS_END = "/* fabric-dashboard-kit:theme-ids:begin */", "/* fabric-dashboard-kit:theme-ids:end */"
@@ -125,7 +125,10 @@ def build(kit_dir: Path = KIT_DIR, check: bool = False) -> List[str]:
     new_js = replace_between(js, JS_BEGIN, JS_END, "  var THEMES = %s;" % json.dumps(ids).replace('"', "'"), js_path.name)
     manifest = load_manifest(kit_dir)
     version = manifest["version"]
-    for text, name in ((new_css, css_path.name), (new_js, js_path.name)):
+    built = {css_path.name: new_css, js_path.name: new_js}
+    for name in COPIED:
+        built.setdefault(name, (kit_dir / name).read_text(encoding="utf-8"))
+    for name, text in built.items():
         if claimed_version_text(text) != version:
             raise KitError("%s says %s, kit.json says %s; raise them together." % (name, claimed_version_text(text), version))
     import hashlib
@@ -135,7 +138,7 @@ def build(kit_dir: Path = KIT_DIR, check: bool = False) -> List[str]:
             changed.append(path.name)
             if not check:
                 atomic_write(path, text)
-    digest = {name: hashlib.sha256((new_css if name.endswith(".css") else new_js).encode("utf-8")).hexdigest() for name in COPIED}
+    digest = {name: hashlib.sha256(built[name].encode("utf-8")).hexdigest() for name in COPIED}
     digest["themes.json"] = sha256(kit_dir / "themes.json")
     new_manifest = dict(manifest)
     new_manifest["themes"] = ids
@@ -199,7 +202,7 @@ def repo_root(start: Path) -> Optional[Path]:
 
 def find_copies(repo: Path) -> List[Path]:
     listed = git(repo, "ls-files", "-z", "--cached", "--others", "--exclude-standard", "--",
-                 "*fabric-dashboard.css", "*fabric-dashboard.js")
+                 "*fabric-dashboard.css", "*fabric-dashboard.js", "*fabric-button.js")
     if listed is not None:
         paths = [repo / p for p in listed.split("\0") if p]
     else:

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-service.mjs

@@ -14,7 +14,7 @@ export const EXTENSION_KEY = 'https://fabric.passioncode.ai/agent-contract/exten
 // The embedded dashboard declaration (fabric-dashboard/0.1, DEC-0036 ED-9), under the well-known
 // document's `extensions`. The kit is assets/dashboard-kit; its version is the one in kit.json.
 export const DASHBOARD_EXTENSION_KEY = 'https://fabric.passioncode.ai/agent-contract/extensions/dashboard/0.1';
-export const DASHBOARD_KIT = 'fabric-dashboard-kit@1.0.0';
+export const DASHBOARD_KIT = 'fabric-dashboard-kit@1.1.0';
 export const REFERENCE_THEMES = ['graphite', 'fabric', 'paper', 'forest', 'ocean', 'ember', 'contrast'];
 export const EXIT_ALREADY_RUNNING = 75;
 // Lifecycle contract (fabric-workspace knowledge/lifecycle.md), the same values as fabric_service.py.

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_service.py

@@ -43,7 +43,7 @@ EXTENSION_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/service
 # The embedded dashboard declaration (fabric-dashboard/0.1, DEC-0036 ED-9), under the well-known
 # document's `extensions`. The kit is assets/dashboard-kit; its version is the one in kit.json.
 DASHBOARD_EXTENSION_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/dashboard/0.1"
-DASHBOARD_KIT = "fabric-dashboard-kit@1.0.0"
+DASHBOARD_KIT = "fabric-dashboard-kit@1.1.0"
 REFERENCE_THEMES = ("graphite", "fabric", "paper", "forest", "ocean", "ember", "contrast")
 EXIT_ALREADY_RUNNING = 75
 # Lifecycle contract (fabric-workspace knowledge/lifecycle.md). A launchd-supervised copy that finds

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/sample_service.py

@@ -33,10 +33,12 @@ VERSION = "0.1.0"
 # in the well-known document only when the kit is there to serve.
 KIT_DIR = Path(__file__).resolve().parent.parent / "assets" / "dashboard-kit"
 KIT_FILES = {"/kit/fabric-dashboard.css": ("fabric-dashboard.css", "text/css; charset=utf-8"),
-             "/kit/fabric-dashboard.js": ("fabric-dashboard.js", "text/javascript; charset=utf-8")}
+             "/kit/fabric-dashboard.js": ("fabric-dashboard.js", "text/javascript; charset=utf-8"),
+             "/kit/fabric-button.js": ("fabric-button.js", "text/javascript; charset=utf-8")}  # DEC-0040, FB-7
 PAGE = """<!doctype html><html lang="en"><head><meta charset="utf-8">
 <meta name="viewport" content="width=device-width,initial-scale=1"><title>{name}</title>
 <link rel="stylesheet" href="/kit/fabric-dashboard.css"><script src="/kit/fabric-dashboard.js" defer></script>
+<script src="/kit/fabric-button.js" defer data-service="{agent}" data-service-name="{name}"></script>
 </head><body><div class="fd-chrome"><header class="fd-header"><p class="fd-title">{name}</p>
 <span class="fd-chip fd-s-ok"><span class="fd-dot"></span>Status: {status}</span></header>
 <nav class="fd-nav" aria-label="Sections"><ul class="fd-nav-list"><li><a href="#events" aria-current="page">Events</a></li>
@@ -227,7 +229,7 @@ def make_handler(svc: Service):
                     return self._send(401, "Open this dashboard from Fabric Dashboards.", content_type="text/plain")
                 rows = "".join("<li>%s — %s</li>" % (html.escape(e["at"]), html.escape(e["text"]))
                                for e in reversed(svc.log.fetch(None, 20)))
-                return self._send(200, PAGE.format(name=html.escape(svc.name), status="ready", rows=rows),
+                return self._send(200, PAGE.format(name=html.escape(svc.name), agent=html.escape("%s.%s" % (svc.id, svc.instance)), status="ready", rows=rows),
                                   content_type="text/html; charset=utf-8")
             self._send(404, {"error": "Not found."})
 

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -5,9 +5,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.13.0"
+  version: "0.15.0"
   contract-version: "0.1.0"
-  contract-commit: "2eb91c00e852d9c31d804310d38fad91589fcbac"
+  contract-commit: "0cacd08b0e95b6abf131eae1206b60792138bc3c"
 ---
 
 # Creating Fabric-compatible agents
@@ -123,7 +123,7 @@ python3 <plugin-dir>/skills/adapting-projects-to-fabric/scripts/adapt_project.py
 The effect class is declared, never defaulted: ask the author what the agent does outside itself when the request
 does not say. Cost presets are only for a run whose cost varies; their amounts come from the author or measured runs.
 
-Pin exactly contract `0.1.0` at commit `2eb91c00e852d9c31d804310d38fad91589fcbac` and
+Pin exactly contract `0.1.0` at commit `0cacd08b0e95b6abf131eae1206b60792138bc3c` and
 read the pinned guide before implementing protocol details. If this skill is installed
 without its sibling, the scaffolder is absent: create the bundle by hand from the pinned
 contract's `docs/guides/connecting-compatible-agents.md` and mark the structural check