@passioncode-ai/fabric-agent-adapter 0.66.0 → 0.67.0

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # Changelog
 
+## 0.67.0 (2026-11-05)
+
+### Fixed
+
+- working-with-fabric: a run Fabric started on a board request whose work outlasts it completes the request
+  `failed_known` with the state it observed once it called `com.effect_begin` (FAA-210; the same choice as a responder's
+  run, board thread `1add3c03`). Before, the exit contract and `references/on-demand-session.md` step 4 left such a request
+  for the next run, but after `com.effect_begin` it is `in_progress`, which a next run could only settle as
+  `outcome_unknown` with `com.reconcile`. A request still accepted, with no effect begun, is still left for the next
+  run. The contract says "if it called `com.effect_begin`" and leaves "no run starts that close to it" to the reference to stay under Hermes' 4000 characters
+  (3998 at its longest).
+- The session hooks read their input as UTF-8 with a byte order mark dropped, and read up to 4 MiB of bytes: since
+  0.64.0 they counted 1 MiB of bytes, so a prompt of about 600,000 Cyrillic characters was read as nothing where 0.63.0
+  read it, and a payload starting with a BOM was read as nothing on every hook (FAA-210). More than 4 MiB is still
+  read as nothing.
+- The dashboard-kit notice reads its input as UTF-8 bytes too, and more than 64 KiB as nothing, so a repository under a folder named in Cyrillic gets
+  its line on Windows before Python 3.15 (FAA-210).
+- The retro line after a release of finished work and the session-start preamble say where insight/1 lines go: `insights/`,
+  as Observatory named it for its reader (OBS-331, board thread `f7758225`), in the project's data folder when it has
+  one or the repository is public (the folder its AGENTS.md names, else `<name>-data/` beside the main checkout), else
+  in the repository, never inside a public repository;
+  `references/session-hooks.md`, `references/on-demand-session.md` step 7 and the service guidance
+  (creating-fabric-agents practices, adapting-projects-to-fabric) say the same; without Project Observatory only the
+  lessons go to an agent's own retrospective file.
+- `references/on-demand-session.md` step 3 says what a run does with an `in_progress` request an earlier run left.
+- `hooks.json`'s description, AGENTS.md's hook list, README.md, the skill and `references/session-hooks.md` name every exception to "silent in a session Fabric launched":
+  the exit contract and the prompt hook's verdict on it in a session started on a board request, and the retro line;
+  the dashboard-kit notice speaks there too, and is silent only in a session started on a board request.
+
 ## 0.66.0 (2026-11-05)
 
 ### Fixed

package/README.md

@@ -46,7 +46,7 @@ reads the last 512 KB of the session transcript (message text and tool output in
 local path or text); UserPromptSubmit adds one line only when that count rose, and each reminder Fabric gave on a turn once (a turn `watch-mail` delivered prints there instead); SessionEnd releases what the
 session left claimed. After a call to Fabric's release tools that releases a claim as done, PostToolUse adds one
 line naming the retro (FAA-206; Fabric's `retro-after-work`, since Fabric 0.3.16). Stop, UserPromptSubmit and SessionEnd spool and call Fabric only when the running Fabric
-advertises `session-hooks/1`; Stop and SessionEnd always prune their own stale spool folders. All are silent in a session Fabric launched (except the retro line after a release of finished work, and the exit contract in one started on a board request, where the prompt hook prints no unread line or reminder), never block the session, read no Fabric token (an `origin` URL's embedded credential is dropped in memory, never
+advertises `session-hooks/1`; Stop and SessionEnd always prune their own stale spool folders. All are silent in a session Fabric launched (except the retro line after a release of finished work and, in one started on a board request, the exit contract and the prompt hook's verdict on its dispatch line, but no unread line or reminder), never block the session, read no Fabric token (an `origin` URL's embedded credential is dropped in memory, never
 kept or sent) and always
 exit 0 once `python3` starts (on Windows, Claude Code runs hooks in Git Bash, or PowerShell without it, where `python3`
 must name Python 3.9 or later; FAA-183). `fabric_session.py watch-mail` waits for board mail under a background watcher, and `install-host-hooks

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/fabric-agent-adapter",
-  "version": "0.66.0",
+  "version": "0.67.0",
   "description": "Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.",
   "scripts": {
     "test": "python3 test/validate.py && python3 -m unittest discover -s test -q && node --test 'test/*.test.mjs'"

package/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks.",
-  "version": "0.66.0",
+  "version": "0.67.0",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/plugins/fabric-agent-adapter/hooks/hooks.json

@@ -1,5 +1,5 @@
 {
-  "description": "Two silent-unless-relevant hook sets. The dashboard-kit notice: one line at session start or /clear in a repository that owns a Fabric service whose dashboard has no kit or an older one (fabric-dashboard/0.1, DEC-0036), phrased as an upgrade the agent may make itself. The Fabric session hooks (working-with-fabric, COM-04, FAA-12a): at session start or /clear, the preamble when Claude Code has the MCP server `fabric` and Fabric runs (fabric_whoami, then the project board through com.status and com.list, claim and release); when Fabric is down, one line, only in a project that uses Fabric (a Fabric contract file, a project-bound registration or a service descriptor naming the repository); nothing on compact or resume; each turn's facts (HEAD, files changed, lines added and removed, never content), the board's unread count, and, once the running Fabric's fabric_session_observe takes them (unless FABRIC_SESSION_NO_REPOSITORIES=1), the other repositories the turn touched (the last 512 KB of the session transcript, message text and tool output included (a secret the session displayed can be there; read in memory only), is then read and only the current turn's tool names and path arguments are used; host/owner/name leave the machine, never a local path or text) and the session's end through Fabric, only when the running Fabric advertises session-hooks/1; at each prompt one line only when the unread count rose, then each nudge a turn's answer carried, once (watch-mail prints those of turns it delivered). All silent in a session Fabric launched but the retro line below. Every hook reads no Fabric token (a credential embedded in an origin URL is read by git config and dropped in memory, never spooled or sent), prints at most one block, always exits 0 once python3 starts (on Windows it must name Python in Git Bash, FAA-183), and hands any Fabric call to a detached worker with a 10 s deadline. In a session Fabric started on a board request (FABRIC_DISPATCH_WORKFLOW), session start prints the exit contract instead of the preamble on the condition that the session's own prompt starts with the dispatch line naming the same three, launched or not, and the prompt hook, which sees that line, confirms the run or says it is none, launched or not, with no unread line or nudge, and the dashboard-kit notice says nothing (FAA-201). After a call to Fabric's fabric_work_release or fabric_task_release that releases a claim as done, PostToolUse adds one line naming the retro (FAA-206); after any other call, or a release Fabric's answer refuses (released: false, already-released) or that released nothing, nothing.",
+  "description": "Two silent-unless-relevant hook sets. The dashboard-kit notice: one line at session start or /clear in a repository that owns a Fabric service whose dashboard has no kit or an older one (fabric-dashboard/0.1, DEC-0036), phrased as an upgrade the agent may make itself. The Fabric session hooks (working-with-fabric, COM-04, FAA-12a): at session start or /clear, the preamble when Claude Code has the MCP server `fabric` and Fabric runs (fabric_whoami, then the project board through com.status and com.list, claim and release); when Fabric is down, one line, only in a project that uses Fabric (a Fabric contract file, a project-bound registration or a service descriptor naming the repository); nothing on compact or resume; each turn's facts (HEAD, files changed, lines added and removed, never content), the board's unread count, and, once the running Fabric's fabric_session_observe takes them (unless FABRIC_SESSION_NO_REPOSITORIES=1), the other repositories the turn touched (the last 512 KB of the session transcript, message text and tool output included (a secret the session displayed can be there; read in memory only), is then read and only the current turn's tool names and path arguments are used; host/owner/name leave the machine, never a local path or text) and the session's end through Fabric, only when the running Fabric advertises session-hooks/1; at each prompt one line only when the unread count rose, then each nudge a turn's answer carried, once (watch-mail prints those of turns it delivered). The session hooks are all silent in a session Fabric launched but the exit contract and the prompt hook's verdict on it and the retro line below; the dashboard-kit notice is silent only in a session started on a board request. Every hook reads no Fabric token (a credential embedded in an origin URL is read by git config and dropped in memory, never spooled or sent), prints at most one block, always exits 0 once python3 starts (on Windows it must name Python in Git Bash, FAA-183), and hands any Fabric call to a detached worker with a 10 s deadline. In a session Fabric started on a board request (FABRIC_DISPATCH_WORKFLOW), session start prints the exit contract instead of the preamble on the condition that the session's own prompt starts with the dispatch line naming the same three, launched or not, and the prompt hook, which sees that line, confirms the run or says it is none, launched or not, with no unread line or nudge, and the dashboard-kit notice says nothing (FAA-201). After a call to Fabric's fabric_work_release or fabric_task_release that releases a claim as done, PostToolUse adds one line naming the retro (FAA-206); after any other call, or a release Fabric's answer refuses (released: false, already-released) or that released nothing, nothing.",
   "hooks": {
     "SessionStart": [
       {

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -5,7 +5,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.66.0"
+  version: "0.67.0"
   contract-version: "0.1.0"
   contract-commit: "3830a3353923e20f826d466610e1c479f120bec0"
 ---
@@ -250,8 +250,8 @@ creating-fabric-agents carries a `LICENSE` naming its holder; an existing one ke
 
 **An adapted agent closes each piece of work with a retro**, as Fabric's `retro-after-work` (since Fabric 0.3.16) asks every session:
 `observatory_lesson` for what went wrong (one class key per lesson), insight/1 lines for what it learned about the
-product, or one line that there is nothing; a resident service does it when a job ends, and without Project
-Observatory it writes the lines to its own retrospective file (creating-fabric-agents practices, *Reliability*).
+product (in `insights/`: the project's data folder when it has one or the repository is public, else the repository; the data folder is the one its AGENTS.md names, else `<name>-data/` beside the main checkout), or one line that there is nothing; a resident service does it when a
+job ends, and without Project Observatory it writes its lessons to its own retrospective file (creating-fabric-agents practices, *Reliability*).
 
 ## Completion format
 

package/plugins/fabric-agent-adapter/skills/building-fabric-services/SKILL.md

@@ -14,7 +14,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Python 3.9+ or Node.js 20+ for the kits (Node.js 22+ for a Linux service's instance lock); the probe needs Python 3.9+. launchd steps are macOS-only; Linux services install a systemd user unit and Windows ones a per-user Scheduled Task with the kits' writers. Dashboard handoff optionally uses Fabric Dashboards MCP link/host_status/open; without it, report unresolved host capability. The contract checkout is optional.
 metadata:
   author: PassionCode.ai
-  version: "0.66.0"
+  version: "0.67.0"
   contract-version: "0.1.0"
   extension: "fabric-service/0.1"
   extension-commit: "3830a3353923e20f826d466610e1c479f120bec0"

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/dashboard_kit.py

@@ -390,6 +390,16 @@ def hook_cwd(stdin_text: str) -> Path:
     return Path(cwd or os.getcwd())
 
 
+def read_stdin_text(stream, limit: int = 65536) -> str:
+    """The hook's input as UTF-8 bytes (a byte order mark dropped, a stray byte read as U+FFFD): a host writes its JSON
+    in UTF-8, and a Windows text stream before Python 3.15 decodes it with the locale's code page (FAA-210). More than
+    `limit` is read as nothing, as the session hooks read theirs."""
+    raw = stream.buffer.read(limit + 1) if hasattr(stream, "buffer") else stream.read(limit + 1)
+    if len(raw) > limit:
+        return ""
+    return raw.decode("utf-8-sig", errors="replace") if isinstance(raw, bytes) else raw.lstrip("\ufeff")
+
+
 def notice() -> int:
     """The SessionStart hook. Asks first whether the repository owns a service and says nothing, having looked at
     nothing else, when it owns none; every git call and the tree walk share NOTICE_BUDGET_S, and a notice that runs
@@ -398,7 +408,7 @@ def notice() -> int:
     if re.fullmatch(r"wf_[0-9a-f]{16}", os.environ.get("FABRIC_DISPATCH_WORKFLOW") or ""):
         return 0  # a session started on a board request does that request only (FAA-201): no invitation to upgrade
     try:
-        stdin_text = "" if sys.stdin is None or sys.stdin.isatty() else sys.stdin.read(65536)
+        stdin_text = "" if sys.stdin is None or sys.stdin.isatty() else read_stdin_text(sys.stdin)
         root = repo_root(hook_cwd(stdin_text), until=until)
         if root is None:
             return 0

package/plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/kit.json

@@ -1,6 +1,6 @@
 {
  "name": "fabric-service-kit",
- "version": "0.66.0",
+ "version": "0.67.0",
  "about": "The service kit's modules in dependency order: a module imports only modules listed before it. Written by fabric_kit.py build; edit the order and layers by hand, never the digests.",
  "python": [
   {
@@ -5136,6 +5136,96 @@
    "fabric-openrouter.mjs": "6041f3ab30f516658e1dbab4897a651cc8509b2136cfa8e769802c6b40ec2f35",
    "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
    "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
+  },
+  "0.67.0": {
+   "fabric_jsvalue.py": "052f1b40bab18600b3731dbdca27cbff17588c21d9458fa6241efd1340d0e09a",
+   "fabric_time.py": "588f383da4ac6a243ea95b6ffc3a0aa99ca94245732dc4937734f190b7af4ae9",
+   "fabric_identifiers.py": "0fd814d521ac3aa39907458265870753046a73f48af3d8581ab864b93b211607",
+   "fabric_secrets.py": "53c5df8d6f2c87433c288853bfaad9a43f544789bdf1e39bda8d3ff14485c89d",
+   "fabric_crypto.py": "9c34aee20dbe4d6742e4fdbaab68ceb934bbe7dbd3a904c0010824ace16cdeaa",
+   "fabric_base.py": "f62bcc2ed9912660fa875d27a09f60867260cc4925f79873501fd9620be59611",
+   "fabric_platform.py": "a9350dff55ef0fb3a23cdb4d0320a15868b15a8deb10d2eb74d72c58740c284b",
+   "fabric_paths.py": "8a1ee742f80f436e9f28c61b4f049a9545de2a9e0d66bfc61faa6ee5d1ba3734",
+   "fabric_estate_rules.py": "8b36a7f4108d9c2b1fb38c8bff344778c807bed631a99b4a563ecb0a49c10b1c",
+   "fabric_estate.py": "0737ae1d1bb12586bae49de1f15ef1348bc207b5007cced9dad4c55bb5870874",
+   "fabric_mandate.py": "fb19ce5359606bd6e3352ab02b2a12f49605ec6e5c49b55cce1f79c831325044",
+   "fabric_delegation.py": "716f0ff7ac01095f54b24970beac1962128e8ff33026b243fc0467876142ab03",
+   "fabric_share.py": "da36a466426fc29dd7dd40013167f3959a18375f8fedd228bf64f298cec1040c",
+   "fabric_ceremonies.py": "a59e83cf4adb2669a9b98008e3d3a0cba991a35cbff97bc604fc82fe81cfd49f",
+   "fabric_package_schema.py": "e623f0408d38e3343ed66222fb812907c6c52e1a286eb1c1176ab2e64640c9ad",
+   "fabric_package.py": "1f2b9e73b2b32a7e1e887d4b69f87c6e21b4d1227ad924a235334223e6dd51ca",
+   "fabric_protocols.py": "42529a7df4d753544d2e37a18ec81266d6e1e80477cb8558a3ab521416d45791",
+   "fabric_actions.py": "ae21d1199614c4f74d1dcd1e0a87107a9d52434cd9e2d64aa24a7b1e196fb723",
+   "fabric_connections.py": "7de55cb7d808f756d650effabfaa12027d40a5bd5d2f6d448c32969d47529ecb",
+   "fabric_a2a.py": "8b01502131215bb4de1c01866187c56e99b791543923ed8577535573db33b919",
+   "fabric_page_links.py": "1b57ea573c550e2f90d1ec3edcc655917ceaa0db9dd1635fccf422ec3024d25e",
+   "fabric_lock.py": "dfaf92a7086cbb097d832a305869b7964e2d2a9da0e3365c8ec1685a7bb4fef9",
+   "fabric_usage.py": "5cc2e03ccc5b06e81987ed7bc3eead7a7e6cbf1a7cb8e05c6c64315eed9d91b6",
+   "fabric_backups.py": "1f3f0d7ecf361b29e9101e07f1c53e5dc304d598bf26fd59ec89f16b9fed2420",
+   "fabric_descriptor.py": "c08c91ca0960c694ed7677e7e9247d6307c7b63f37a7e614db022c080cd92ccc",
+   "fabric_context.py": "6ae311ddc7217a4aff915e7ce2646486931acd128462b7bebe4a52bbb5fbb6c7",
+   "fabric_auth.py": "74ccc10239b65a3567cec5213a7b344cbd88d6eee1fd1c5f7be1d6daf985993c",
+   "fabric_events.py": "cd94b186e2a8f8cb4ad2b6bd44d83ec5021933075e28c5d655f387f16dff42b8",
+   "fabric_logs.py": "86dc55bfafa2a57264722e2403510a249b95de0e4a722b2e4bc3948e3bd93da9",
+   "fabric_supervisors.py": "3c5b2e8c310738720b1c1b779be4710e90251013d9be4c68f9952edc0bf55d5f",
+   "fabric_service.py": "4b13f90aa26881fbfe0d9f3077fbb3552f3ce0a3c59279d6baa92df872867d8d",
+   "fabric_profiles.py": "26e21ec29c016000f8ca8053b7b489184854a73be1b7fdc0a18d12990203db9b",
+   "fabric_interop_rules.py": "9bdb7989e57b9d0b0d15eb9982d396499823a5e2c528230b71c67866c736e0f5",
+   "fabric_interop.py": "d27e31834611a37cf2a117746f2f60fc187ccc48718eb546ff923c5d0fce7dea",
+   "fabric_hub.py": "b9ac852e601b1d54cf61351677a628afc69faeed7d1fc74ebe541c1cf38e0c2a",
+   "fabric_board_shapes.py": "0a0e8d3d40e33dfd8c457aedb85330b2ff25f8c49a33eb6cbd5a5cc8a5007f7e",
+   "fabric_board_link.py": "052bc3c474ece835bb428c37ca864810d04e394d991ddb9c93989a7a825073a5",
+   "fabric_board_slots.py": "92b065e3df935547cf46653245f1129e4a1f8b59b0a41e8fa9ffdc41596ee592",
+   "fabric_board_session.py": "1fd3c3884f3044b56a40f78b33ff88dcac9272284f6681ea359c662879826f7e",
+   "fabric_board_fixture.py": "69761ce205ec640762ec9b591c6903e5a87f844e8d423b041681924027e39d1e",
+   "fabric_board.py": "f86c40b8291f8c818f6924910f4022b013d5fd107abaf8825dd0aa6c5e418638",
+   "fabric_http.py": "8b443477dc29d5a1fe908b9dccaf68f05fab837eae0670074051a1dd2dfb71ad",
+   "fabric_openrouter.py": "d06a40f83f2fb8bd441ab3485ae882f1fbdd9cd7a9c1ec175eb47cb8ae2cce81",
+   "fabric-jsvalue.mjs": "dfbdb8c41584972c9389750a41719374a1cfc5652ed438dd1623025190b0106e",
+   "fabric-time.mjs": "3ff932069038a720df1c68c6492976906737b2e67e5c12d9c81c418597f661de",
+   "fabric-identifiers.mjs": "a18c2a501a4aa170bfd3d99e571ad6b7662649b4d3b9d2a540c002ea42811bbf",
+   "fabric-secrets.mjs": "5822a7e25ecf2e87b5bab4f99c1074af7379d8b49e2784283b5d7d8c25022cde",
+   "fabric-crypto.mjs": "038e03689701e3c9721a1e7f8e0a4d02a52d6a5d1661b0dc84035edc3ebbfcf6",
+   "fabric-base.mjs": "7804b2df7715dbbf9702a9b61b6b8cef2110f9a52b04cabd8fb0a66458d87512",
+   "fabric-platform.mjs": "a8119d95ebba4d589a9e401f5d6fc8dda62d59d44e4c1ff811d97fac3771ac0c",
+   "fabric-paths.mjs": "aa630d611e748a899e7043480f4a4e46b444f2e15ff945f30c2fbef21c1ceea5",
+   "fabric-estate-rules.mjs": "7476be71174aa5b1026134f2b335abf647feaa55584e2f9de8618e3054aa8e1e",
+   "fabric-estate.mjs": "e8a2e62d2313121e6cb502f6e6abad94d1d546a44b4d9b3ce2be29e7808e8cf3",
+   "fabric-mandate.mjs": "b70f3de03a659e60bba7b5a0580b3582825cd7b8a8e30a28c79621919ec5b7bb",
+   "fabric-delegation.mjs": "8f63a63aab9a8746b7f664720b87e9398137d01b8d50880974d5070038e414a0",
+   "fabric-share.mjs": "bfb26581c21ad984c2a337da02429f9f3a165cc582f8ba48de4d3dfb7d163a59",
+   "fabric-ceremonies.mjs": "117d4374c9e95c930a38de7adbd4323774798f4fe6ec6f24afcd6f2c7298ca44",
+   "fabric-package-schema.mjs": "cd28092375db0fc21ffab1f0bb7794f7f8979ee08c64d3b9faf4b3845357caa6",
+   "fabric-package.mjs": "8cfb32eebbd4e1bcf28a6e4437344ae2dd54479b0e7c820f002e9f94ab9ecaad",
+   "fabric-protocols.mjs": "5fd8765fdd3e507cc85c108492682bf5cbb4ae08873245c50374fb01d33c75e4",
+   "fabric-actions.mjs": "06e42f5e24c96311d5417d0d1effa93479ef7128a7ab139903b2bcf59253f6be",
+   "fabric-connections.mjs": "303432e547ce563e90ca9ffcd827f5612f51d3582929834e1add0fdaf6485dcc",
+   "fabric-a2a.mjs": "51b72fe1d80649d659fcad3a8f96370db3476c4a7b30cbabd8522c138be69346",
+   "fabric-page-links.mjs": "a8834926e9d4bbf7c4857f551451d2ebf6ac8873bbccaaf89c5e30cf45b17ee6",
+   "fabric-lock.mjs": "02cf833c97a07a8b3c788f9c93f70c4b9c9066efa25318dccf0038e0fc79717f",
+   "fabric-usage.mjs": "1c4d18004639409624ac3516a02f2b60bbf55abdb612e9a96c37e83666eb87a7",
+   "fabric-backups.mjs": "cfd8c9085e3d597a783099c2bd2ffe2f3faa0daaadab46dedd30523894cfeb06",
+   "fabric-descriptor.mjs": "7c0ef7d245c037eb9e859ab481f6e66fb3e5ef2cf6d1e0a8d32b6d303097ca43",
+   "fabric-context.mjs": "1112d695e872f9825cbc94f08484974bff3880087bc29b8be59f885f03e8f7be",
+   "fabric-auth.mjs": "10ff37a39f9e3adb4d0f05db66c45f49b10eef582e9220c213907964109d7e52",
+   "fabric-events.mjs": "c463d6ffcae24229a5c608d8fcea4268d2ccc5024b19fa10e5a452284068fa71",
+   "fabric-logs.mjs": "58467e5719c16e099d05bbedec47a95712506ab03c33f3cd4be1252e8498a946",
+   "fabric-supervisors.mjs": "d45c38de0cb3ed85e083496c2d3c51dab004454accdd87f4762a512a6d442573",
+   "fabric-service.mjs": "297fef11ac76dc831d12d24c5581b7a93587c300c20664db703b3f924c0f9f1a",
+   "fabric-profiles.mjs": "314376cf2deb87f235fb18b11d3b532e211f585b9af0a9302b5f4cc39971b532",
+   "fabric-interop-rules.mjs": "b4e386c359a48e49ffff8a842215760c18a7c98a0af4754a808a35fb2820d458",
+   "fabric-interop.mjs": "989040aed33b2712a258244192bdf70e811a51076aa1b62f2adc2a6db051dbed",
+   "fabric-hub.mjs": "c005115a864cfd67daa4862097bb14acfe5a60bf653897e5bf8a570dd80f1070",
+   "fabric-board-shapes.mjs": "c1db7b7bd0d58d82bb6d8dfbc3cd1547a256a333052d367e82ff1b3edf2804d7",
+   "fabric-board-link.mjs": "6e7d51f4fd9730d93455f50dd30e97907b8b9e1ca65a1d69f036f2e8ec05cc0d",
+   "fabric-board-slots.mjs": "fc77a3c6e62aa18575568bef4f703cce2edaba8cef648813ebcdbb21bdc27a11",
+   "fabric-board-session.mjs": "18555962e5f6d18080a3e7971c4c6640452542f6042d07917e7ebc073721c415",
+   "fabric-board-fixture.mjs": "83c4b7e33ee47b68385faf2569d38d5c8a0c5cb0f8656090f41e1b0eed2f436e",
+   "fabric-board.mjs": "15fbb4441fcf7d2f285375b75de64ad6cffea129c515084c110245376b07775f",
+   "fabric-http.mjs": "317d7668c291570d4d93bc73295312f2853eb93940f4cf754a4a4619cb87ace9",
+   "fabric-openrouter.mjs": "6041f3ab30f516658e1dbab4897a651cc8509b2136cfa8e769802c6b40ec2f35",
+   "fabric-package.schema.json": "2ba799f576fad0f608029223c4ccccd122152f1c5dbfa8ce8b31cd63ac92ad44",
+   "share-registration.schema.json": "34b3997eeaf936ebc861342a23045634a7c18c19f01d7ed4198310d81989f5b0"
   }
  },
  "data": {

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/SKILL.md

@@ -5,7 +5,7 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode. Ships in one plugin with adapting-projects-to-fabric, whose scripts it reuses.
 metadata:
   author: PassionCode.ai
-  version: "0.66.0"
+  version: "0.67.0"
   contract-version: "0.1.0"
   contract-commit: "3830a3353923e20f826d466610e1c479f120bec0"
 ---

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/references/practices.md

@@ -100,8 +100,10 @@ finished. Organization members have the full page with every receipt: the Passio
 - **Close each piece of work with a retro** (Fabric's `retro-after-work`, ADR-0188 §5): when a claim is released as
   done or the session is about to end (for a resident service, when a job ends), write in the same turn what went
   wrong and what would have prevented it (`observatory_lesson`, one class key per lesson) and what was learned about
-  the product (insight/1 lines), or one line that there is nothing; no values in either. Where Project Observatory is
-  not installed, write the same lines to the agent's own retrospective file. Fabric and Observatory are to count them
+  the product (insight/1 lines in `insights/`, one JSONL file a month: the project's data folder when it has one or the
+  repository is public, else the repository; the data folder is the one its AGENTS.md names, else `<name>-data/` beside
+  the main checkout; where Observatory's reader is to look, OBS-331), or one line that there is nothing; no values in either. Where Project Observatory is not installed, write
+  the lessons to the agent's own retrospective file; the insight/1 lines stay in `insights/`. Fabric and Observatory are to count them
   (ADR-0188 §§4-5; Observatory's daily reading is OBS-331, not shipped on 2026-11-05).
 
 ## Shipping

package/plugins/fabric-agent-adapter/skills/creating-fabric-agents/references/resilience-and-autonomy.md

@@ -267,5 +267,5 @@ and idempotency keys live; what happens to an unknown outcome; which waits are d
 run lock; what the next start sweeps; how a cancel reaches paid inner work; which outputs are
 capped; how a secret reaches a child; which test was seen failing for each fix; and, for an agent
 that writes text for people, where its prompt says no em dash and which test fails on U+2014 in its
-output; and where each piece of work's retro is written (`observatory_lesson`, or the agent's own retrospective file
-without Project Observatory) and which test shows it.
+output; and where each piece of work's retro is written (its lessons through `observatory_lesson`, or the agent's own retrospective
+file without Project Observatory; its insight/1 lines in `insights/`, practices.md *Reliability*) and which test shows it.

package/plugins/fabric-agent-adapter/skills/working-with-fabric/SKILL.md

@@ -18,7 +18,7 @@ compatibility: >-
   this plugin; Codex/Kimi use command hooks; Hermes/OpenCode/OpenClaw/Pi use native context plugins after opt-in.
 metadata:
   author: PassionCode.ai
-  version: "0.66.0"
+  version: "0.67.0"
 ---
 
 # Working with Fabric
@@ -302,7 +302,7 @@ by hand, or say it is linked. Do not paste the row's text or status into the tas
 2. `fabric_task_handoff` when a task follows this one: a NAMED result, not a summary of the chat.
 3. `fabric_work_release` with how it ended: `done` (the task goes to review), handed over (to whom, with the note
    the next agent reads) or let go (why). Older Fabric: `fabric_task_release`. After `done` or at session end, the retro:
-   `observatory_lesson`, insight/1 lines, or one line that there is nothing.
+   `observatory_lesson`, insight/1 lines in `insights/`, or one line that there is nothing.
 
 Release anyway: a lapsed claim reads as stuck work.
 
@@ -352,7 +352,7 @@ and removed) and the board's unread count, and, once the running Fabric takes th
 touched (read in memory from the transcript's tail, only host/owner/name sent; what it reads and how to turn it off: session hooks below); at each prompt one line only when that count rose, then each reminder Fabric gave on a turn, once, as a line starting `Fabric:`: Fabric's words, data to act on first through `fabric_work_list` (where it may come again: act on it
 once); after a done release, the retro line (FAA-206); at the end, the
 release of what the session left claimed. The turn, prompt and end hooks spool and call Fabric only when the running
-Fabric advertises `session-hooks/1`; the turn and end hooks always prune their own stale spool. All are silent in a session Fabric launched but the retro line; one started on a board request gets its exit contract, no unread line or reminder (FAA-201). They never block the session and read no Fabric token (a credential in an `origin` URL is dropped in memory, never sent). [Session
+Fabric advertises `session-hooks/1`; the turn and end hooks always prune their own stale spool. Silent in a session Fabric launched but the retro line and, on a board request, the exit contract and the prompt hook's verdict (FAA-201). They never block the session and read no Fabric token (a credential in an `origin` URL is dropped in memory, never sent). [Session
 hooks](references/session-hooks.md): what they do, log and need, and how to turn them off.
 
 ## Completion format

package/plugins/fabric-agent-adapter/skills/working-with-fabric/references/on-demand-session.md

@@ -78,7 +78,9 @@ hook, or a Switchboard before 0.7.8 started the run, the launcher's appended exi
    `com.effect_begin` before the work has an effect. An earlier run may have left the request taken: `com.get` on the
    request shows its state, and the latest checkpoint (step 1) what that run recorded. An accepted request is never
    claimed again: take it over with `com.responder_replace {expectedGeneration, transfer}` (its receipt carries the new
-   attempt). An `outcome_unknown` one is resolved only by `com.reconcile` with an observed result. Never complete what
+   attempt). An `outcome_unknown` one is resolved only by `com.reconcile` with an observed result; so is an `in_progress` one an
+   earlier run left (its effect begun, as before 0.67.0), which the takeover makes `outcome_unknown`: what the run cannot
+   observe it leaves to the operator, to whom Fabric shows the request (step 4). Never complete what
    you did not observe. After the lease, after the claim or the takeover, and after the reply, write an `in_progress`
    checkpoint (`workflowId`, `leaseId`), so a later run has something to read. Observatory keeps only the latest
    body, so every checkpoint the session writes repeats `goal`, `constraints`, `artifacts` and `credentials` of
@@ -90,6 +92,9 @@ hook, or a Switchboard before 0.7.8 started the run, the launcher's appended exi
    stops the run. Work that cannot end by then gives its state (what is done, where it lies, what is left), before
    `run-ends-at`, as the note of a `com.progress` on the request's thread (the slot holder's state, DEC-0152 SA-6,
    proposed). Then:
+   - after `com.effect_begin` the request is `in_progress`, which a next run could only settle as `outcome_unknown`
+     with `com.reconcile`: `com.complete` `failed_known` with the state it observed, and steps 6 and 7 (FAA-210; the
+     same choice as a responder's run, board thread `1add3c03`);
    - when the request's `deadline` (the packet's `deadline:` artifact) is not after `run-ends-at` plus 10 minutes, no
      run comes before the deadline and an accepted request does not expire by itself: `com.complete` `failed_known`
      saying the deadline came first, and steps 6 and 7. Fabric decides on a next run no later than 120 s of the
@@ -97,7 +102,7 @@ hook, or a Switchboard before 0.7.8 started the run, the launcher's appended exi
      deadline (`LAUNCH_MARGIN_MS`): 8 minutes, 10 with room for a slow launch (`RUN_END_TO_DEADLINE_MS` and spec 3.6 on
      Fabric's main since `afe28a60`); an accepted or in-progress request with no live holder past its deadline goes
      to the operator, with its workflow closed `blocked`;
-   - otherwise the request is left accepted for the next run: an `in_progress` checkpoint without `close`, steps 5 and
+   - otherwise (accepted, no effect begun) the request is left accepted for the next run: an `in_progress` checkpoint without `close`, steps 5 and
      6 skipped. Fabric's dispatcher starts that run for an accepted request whose holder is gone, which takes it over
      with `com.responder_replace` (step 3), and after two runs with no answer shows it to the operator (Fabric's main
      decides to dispatch an accepted request since `fff4b6d9`; a Fabric before it dispatches none). The open workflow is Fabric's
@@ -122,7 +127,7 @@ hook, or a Switchboard before 0.7.8 started the run, the launcher's appended exi
    `failed_known` it is `failed` once Observatory takes it (OBS-323; Observatory takes `in_progress`, `done` and
    `blocked` today), and until then `blocked` with the reason in `notes`.
 7. **End the run.** The one write left is the retro after work
-   (`observatory_lesson` and insight/1 lines, or one line that there is nothing; no values; ADR-0188's
+   (`observatory_lesson` and insight/1 lines in `insights/` (the project's data folder when it has one or the repository is public, else the repository; the data folder is the one its AGENTS.md names, else `<name>-data/` beside the main checkout), or one line that there is nothing; no values; ADR-0188's
    `retro-after-work`); nothing more: no board sweep, no work claim, no
    `watch-mail`, no question to the operator.
 

package/plugins/fabric-agent-adapter/skills/working-with-fabric/references/session-hooks.md

@@ -27,18 +27,26 @@ session start and turn; FAA-183 tracks making the plugin find the interpreter it
 
 | Event | When it acts | What it does |
 |---|---|---|
-| SessionStart (`startup`, `clear`; the plugin's matcher, and the script ignores `compact` and `resume` for every host) | Claude Code has an MCP server named `fabric` (local, project or user scope) | Fabric running, in a project that uses Fabric (below): adds the preamble: `fabric_whoami` first; `com.status` and `com.list`, `com.read_ack` only what was read, and what waits on the Project answered in the same turn with its state, the result later (FAA-205); `fabric_work_list`, then `fabric_work_claim`; `fabric_work_release` at the end, and, when a piece of work or the session ends, its retro (`observatory_lesson`, insight/1 lines, or one line that there is nothing; FAA-206); ask another Project only through `com.submit`. Fabric running in a folder with no such sign (a user-scope registration reaches every folder): one line pointing at `fabric_whoami`, which names the project when Fabric serves the folder anyway (FAA-60). Fabric down, in a project that uses Fabric: one line, skip `fabric_whoami` and the board, start Fabric through the lifecycle broker only if the task needs it. Fabric down anywhere else, or not registered: nothing. |
+| SessionStart (`startup`, `clear`; the plugin's matcher, and the script ignores `compact` and `resume` for every host) | Claude Code has an MCP server named `fabric` (local, project or user scope) | Fabric running, in a project that uses Fabric (below): adds the preamble: `fabric_whoami` first; `com.status` and `com.list`, `com.read_ack` only what was read, and what waits on the Project answered in the same turn with its state, the result later (FAA-205); `fabric_work_list`, then `fabric_work_claim`; `fabric_work_release` at the end, and, when a piece of work or the session ends, its retro (`observatory_lesson`, insight/1 lines in `insights/` (below), or one line that there is nothing; FAA-206); ask another Project only through `com.submit`. Fabric running in a folder with no such sign (a user-scope registration reaches every folder): one line pointing at `fabric_whoami`, which names the project when Fabric serves the folder anyway (FAA-60). Fabric down, in a project that uses Fabric: one line, skip `fabric_whoami` and the board, start Fabric through the lifecycle broker only if the task needs it. Fabric down anywhere else, or not registered: nothing. |
 | Stop (each turn) | as for SessionStart, and the running Fabric's `hub.json` lists `"session-hooks/1"` in `features` | measures the turn's facts (HEAD, files changed, lines added and removed: counts and ids only, git sharing 1.5 s) and names the other Git repositories the turn touched (FAA-140, below: only once Fabric takes them), spools them in one entry and starts a detached worker that sends `fabric_session_observe {event: "turn", head, filesChanged, linesAdded, linesRemoved, …}` as stored (with `repositories` only where that tool's input schema lists the field as an array of items with host, owner and name requiring nothing else, at most its `maxItems`, each item meeting what the schema says of its fields or left out; a turn spooled with the mark and delivered to a Fabric whose schema no longer takes them goes without them, and the log says so once per session; with a Fabric that never took them nothing is read and nothing is logged), keeps the `nudges` its answer carries (Fabric 0.3.14: each `{kind, says, task_id?, request_id?}`, shown on a turn once, at most five; it stays for `fabric_work_list` and `fabric_heartbeat`, so it may come again there) in `nudges.json`, then reads `com.status` and keeps the unread count in the session's spool (`board.json`) |
 | UserPromptSubmit | the session's spool holds a count or nudges, and the session was not started on a board request (nor runs inside such a run) | adds ONE line, `N unread on the project board: com.list; answer what waits on you in this turn: ...` (FAA-205: its state now, the result later), only when the count rose since the last line (a fall or the same count says nothing), then each nudge's `says` once, as Fabric writes it (Fabric 0.3.14 starts each with `Fabric:`; any other line gets the tag `Fabric reminder: `), one line each, at most five lines of at most 400 characters; the nudges file is taken by renaming it away before they are printed (FAA-142). It reads, renames and writes small files in the session's folder and never calls Fabric. |
 | SessionEnd | as for Stop | spools the end; the worker sends `fabric_work_release {claims: "session", outcome: "let-go", …}` (with `observedAt`, the time the hook fired, where the tool's input schema names it: Fabric 0.3.9 then refuses an end from before the session enrolled), then `fabric_session_observe {event: "end", reason}`, and removes the session's spool. Reason `clear` ends nothing: `/clear` keeps the agent process and its fabric-mcp, so no claim is released and no end observed; turns already spooled still go out (since 0.42.0). Their nudges stay in the old id's folder and are not printed here; Fabric 0.3.14 only shows a nudge on a turn's answer and keeps it for `fabric_work_list` and `fabric_heartbeat`, so the new session gets it there (board `b605a636`; decision of 0.51.2, FAA-142) |
-| PostToolUse (the plugin's matcher: Fabric's `fabric_work_release` and `fabric_task_release` only) | the call released a claim as done (`how`, or `outcome` when `how` is absent, done; the older tool's `outcome` succeeded) and Fabric's answer did not refuse it or release nothing (`released: false`, Fabric's refusal; `already-released`; a `claims: "session"` release with no live claim, `claims: []`; a repeat, which Fabric answers with the first release's `at`; a claim the operator released first, `released-by-operator`; a repeat after a first answer the agent never saw (lost in the client, or `unconfirmed`), and a session release answered `partial` or `unconfirmed`; in each the session-end retro still stands; a payload over 1 MiB is read as nothing and gets no line; or `isError`; an answer the hook cannot read keeps the line) | adds ONE line naming the retro in this turn (`observatory_lesson`, or the turn's answer without it; insight/1 lines; or one line that there is nothing; FAA-206, Fabric's `retro-after-work`, since Fabric 0.3.16, `e1eecec0`); reads no file, calls nothing, also in a session Fabric launched |
+| PostToolUse (the plugin's matcher: Fabric's `fabric_work_release` and `fabric_task_release` only) | the call released a claim as done (`how`, or `outcome` when `how` is absent, done; the older tool's `outcome` succeeded) and Fabric's answer did not refuse it or release nothing (`released: false`, Fabric's refusal; `already-released`; a `claims: "session"` release with no live claim, `claims: []`; a repeat, which Fabric answers with the first release's `at`; a claim the operator released first, `released-by-operator`; a repeat after a first answer the agent never saw (lost in the client, or `unconfirmed`), and a session release answered `partial` or `unconfirmed`; in each the session-end retro still stands; a payload over 4 MiB is read as nothing and gets no line, as on every hook (below); or `isError`; an answer the hook cannot read keeps the line) | adds ONE line naming the retro in this turn (`observatory_lesson`, or the turn's answer without it; insight/1 lines in `insights/` (below); or one line that there is nothing; FAA-206, Fabric's `retro-after-work`, since Fabric 0.3.16, `e1eecec0`); reads no file, calls nothing, also in a session Fabric launched |
+
+Every hook reads at most 4 MiB of its input (`HOOK_INPUT_CAP`) as UTF-8 bytes: a byte order mark is dropped, a byte
+that is no UTF-8 reads as U+FFFD, and a payload over the cap is read as nothing (FAA-210, since 0.67.0; 0.64.0 to
+0.66.0 counted 1 MiB of bytes and read a BOM as nothing).
 
 An insight/1 line is one JSON object per line with seven required fields, `schema` `"insight/1"`, `id`, `at` (UTC),
 `agent`, `kind` (in use: `lesson`, `finding`, `metric`, `pattern`, `tool`), `title` and `body`, and usually
 `evidence` (a list), `tags`, `audience`, `numbers` and `next`; it never holds a value. Fabric's ADR-0188 §5 names
 insight/1 without a shape; this is the shape in use across the estate's insight files (one JSONL file a month),
-stated here provisionally until ADR-0188's owner fixes it. Where a session writes them is not named yet either: with the session's own project data, until Observatory's
-reader (OBS-331) names the place it reads.
+stated here provisionally until ADR-0188's owner fixes it. A session writes them in the project's `insights/` folder,
+one JSONL file a month, the place Observatory named for its reader (OBS-331, board thread `f7758225`): in the
+project's data folder when it has one or the repository is public, else in the repository, never inside a public one
+(Observatory's own copy rule keeps `insights/` out of a public copy): a public repository with no data folder yet gets
+one. The data folder is the one the project's AGENTS.md names, else `<name>-data/` beside the main checkout (not beside a
+worktree), as the estate keeps them. The retro line and the preamble say so since 0.67.0.
 
 **A resumed session and a session Fabric does not hold** (since 0.42.0, board thread `02bf19c5`). `claude --resume`
 keeps the session id, so an end that was kept for a retry (its release got no answer) would be delivered to the resumed
@@ -145,8 +153,9 @@ registration.
 
 ## A session Fabric launched
 
-Every hook, and `watch-mail`, is silent there: Fabric briefed that session itself. Two exceptions: a session
-started on a board request gets its exit contract (below), and the PostToolUse retro line after a release of finished
+Every hook, and `watch-mail`, is silent there: Fabric briefed that session itself. Three exceptions: a session
+started on a board request gets its exit contract and, at its prompt, the prompt hook's verdict on the dispatch line
+(the run, none, or nested; below), and the PostToolUse retro line after a release of finished
 work is said there too, since Fabric gives no such line at that moment (FAA-206). The signals, cheapest first;
 only variable names are looked at, never a value (two of them carry the session's credential):
 

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session.py

@@ -144,6 +144,7 @@ from fabric_session_cli import (  # noqa: F401
     POINTER,
     DOWN_NOTICE,
     QUIET_SOURCES,
+    HOOK_INPUT_CAP,
     read_hook_input,
     hook_session_start,
     _read_count,

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session_cli.py

@@ -73,7 +73,8 @@ PREAMBLE = (
     "Before you start work, call `fabric_work_list` (who is working on what here) and "
     "claim your task with `fabric_work_claim`; release it with `fabric_work_release` when you stop. When a piece of "
     "work ends (released as done, or the session about to end), write its retro in the same turn: `observatory_lesson` "
-    "for what went wrong (or your answer without it), insight/1 lines for what you learned, or one line that there "
+    "for what went wrong (or your answer without it), insight/1 lines in `insights/` (the project's data folder when it has one or the repository is public, else the repository; the data folder is the one its AGENTS.md names, else `<name>-data/` beside the main checkout) for what you "
+    "learned, or one line that there "
     "is nothing. A Fabric older "
     "than v0.3.5 has `fabric_tasks_list`, `fabric_task_claim` and `fabric_task_release` instead. Link a backlog row "
     "as `source: {{repository, path, id}}`, never copy it. Ask another Project only through `com.submit`, addressed "
@@ -131,7 +132,7 @@ DISPATCH_IF = (
     "request nor the workflow. That line with other values: no run; say so in the request's thread and stop. The run:")
 #: The conditional contract at its longest (a 64-character handoff and a session id) is held under Hermes' 4000
 #: characters by test_a_native_bridge_is_always_told_the_contract_and_writes_no_record; measure before adding words
-#: (3995 in 0.66.0: almost none left, so a new rule takes its characters back from the text around it).
+#: (3998 in 0.67.0: almost none left, so a new rule takes its characters back from the text around it).
 DISPATCH_CONTRACT = (
     " Do that "
     "request and end: nobody watches, so never wait for a person. 1. `fabric_whoami`, then read the packet "
@@ -151,7 +152,7 @@ DISPATCH_CONTRACT = (
     "`checkpoint.body` (not the answer's top-level `credentials` or the accept's "
     "`pack`) unchanged and adds `open`, `done` or `notes`, never a value. 4. Do the work; renew with `com.renew` or `com.progress` about every 20 s in a long step "
     "and finish before run-ends-at; work that cannot end by then posts its state with `com.progress`, "
-    "then: when the request's deadline is not after run-ends-at plus 10 minutes (no run starts that close to it), `com.complete` failed_known saying so and steps 6 and 7; "
+    "then: if it called `com.effect_begin`, or when the request's deadline is not after run-ends-at plus 10 minutes, `com.complete` failed_known saying so and steps 6 and 7; "
     "otherwise it is left accepted for the next run, an in_progress checkpoint without `close`, steps 5 and 6 "
     "skipped. Money, deletion and publication go through `fabric_effect_request`; a sign-in, a one-time code, a typed "
     "secret or a payment is a person's (none is in this chat), and so is a production step unless the operator's "
@@ -409,7 +410,7 @@ def dispatch_held_elsewhere(dispatch: Dict[str, str], session_id: Any, env: Opti
 #: released as done is the moment the obligation names; the PostToolUse hook says it then, once per release.
 RETRO_LINE = ("[fabric-agent-adapter] You released this work as done: write its retro in this turn. What went wrong "
               "and what would have prevented it go to `observatory_lesson`, one class key per lesson; what you learned "
-              "about the product goes in insight/1 lines; with nothing worth saying, one line that says so. Without "
+              "about the product goes in insight/1 lines in `insights/` (the project's data folder when it has one or the repository is public, else the repository; the data folder is the one its AGENTS.md names, else `<name>-data/` beside the main checkout); with nothing worth saying, one line that says so. Without "
               "`observatory_lesson`, say it in this turn's answer. No values in either.")
 #: The release tools and the field that says done: Fabric's `fabric_work_release` (how, or its alias outcome when how is
 #: absent, as Fabric reads `how ?? outcome`) and the older `fabric_task_release` (outcome succeeded).
@@ -491,15 +492,22 @@ def _host_output(host: str, event: str, context: str) -> str:
     return json.dumps({"hookSpecificOutput": {"hookEventName": event, "additionalContext": context}})
 
 
+#: A hook reads at most this many bytes of its input; more is read as nothing. 4 MiB holds a million characters in any
+#: script (0.63.0 read a million characters as text; 0.64.0 counted bytes and lost a long Cyrillic prompt, FAA-210).
+HOOK_INPUT_CAP = 4 * 1024 * 1024
+
+
 def read_hook_input() -> Dict[str, Any]:
     try:
         if sys.stdin is None or sys.stdin.isatty():
             return {}
         # the bytes, decoded as UTF-8: a host writes its JSON in UTF-8, and on Windows before Python 3.15 the text
         # stream decodes with the locale's code page, which drops a release whose note is in Cyrillic (0.64.0 seam
-        # reading 5)
-        raw = sys.stdin.buffer.read(1024 * 1024) if hasattr(sys.stdin, "buffer") else sys.stdin.read(1024 * 1024)
-        text = raw.decode("utf-8", errors="replace") if isinstance(raw, bytes) else raw
+        # reading 5); a byte order mark is dropped and a byte that is no UTF-8 reads as U+FFFD (FAA-210)
+        raw = sys.stdin.buffer.read(HOOK_INPUT_CAP + 1) if hasattr(sys.stdin, "buffer") else sys.stdin.read(HOOK_INPUT_CAP + 1)
+        if len(raw) > HOOK_INPUT_CAP:
+            return {}
+        text = raw.decode("utf-8-sig", errors="replace") if isinstance(raw, bytes) else raw.lstrip("\ufeff")
         payload = json.loads(text) if text.strip() else {}
         return payload if isinstance(payload, dict) else {}
     except Exception:  # noqa: BLE001

package/plugins/fabric-agent-adapter/skills/working-with-fabric/scripts/fabric_session_env.py

@@ -58,7 +58,7 @@ SESSION_ID = re.compile(r"[A-Za-z0-9._:-]{1,128}")
 LOOPBACK_ORIGIN = re.compile(r"http://127\.0\.0\.1:(\d{1,5})")
 
 
-VERSION = "0.66.0"
+VERSION = "0.67.0"
 
 
 HOSTS = {"claude": "Claude Code", "codex": "Codex", "kimi": "Kimi Code",