@passioncode-ai/fabric-agent-adapter 0.20.0 → 0.21.0

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric_service.py

@@ -1364,7 +1364,12 @@ _MAX_ROW_VALUES = 512
 
 
 def _canonical_check(value: Any, at: str = "") -> None:
-    if value is None or isinstance(value, (bool, str)):
+    if value is None or isinstance(value, bool):
+        return
+    if isinstance(value, str):
+        # CT-25 (DEC-0052): Python cannot encode a lone surrogate as UTF-8, so no two languages agree on its bytes.
+        if _SURROGATE.search(value):
+            raise ServiceError("%s: a lone surrogate has no canonical form" % (at or "/"))
         return
     if isinstance(value, int):
         if abs(value) > _SAFE_INTEGER:
@@ -1380,6 +1385,7 @@ def _canonical_check(value: Any, at: str = "") -> None:
         for key, item in value.items():
             if not isinstance(key, str):
                 raise ServiceError("%s: object keys are strings" % (at or "/"))
+            _canonical_check(key, "%s (a key)" % (at or "/"))
             _canonical_check(item, "%s/%s" % (at, key))
         return
     raise ServiceError("%s: %s is not a JSON value" % (at or "/", type(value).__name__))

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -5,9 +5,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.20.0"
+  version: "0.21.0"
   contract-version: "0.1.0"
-  contract-commit: "0cacd08b0e95b6abf131eae1206b60792138bc3c"
+  contract-commit: "b291bf09e0a9f9fd3c16cf540832cd021203b7d1"
 ---
 
 # Creating Fabric-compatible agents
@@ -123,7 +123,7 @@ python3 <plugin-dir>/skills/adapting-projects-to-fabric/scripts/adapt_project.py
 The effect class is declared, never defaulted: ask the author what the agent does outside itself when the request
 does not say. Cost presets are only for a run whose cost varies; their amounts come from the author or measured runs.
 
-Pin exactly contract `0.1.0` at commit `0cacd08b0e95b6abf131eae1206b60792138bc3c` and
+Pin exactly contract `0.1.0` at commit `b291bf09e0a9f9fd3c16cf540832cd021203b7d1` and
 read the pinned guide before implementing protocol details. If this skill is installed
 without its sibling, the scaffolder is absent: create the bundle by hand from the pinned
 contract's `docs/guides/connecting-compatible-agents.md` and mark the structural check