@passioncode-ai/fabric-agent-adapter 0.80.2 → 0.81.0

package/CHANGELOG.md

@@ -1,5 +1,84 @@
 # Changelog
 
+## 0.81.0 (2026-11-12)
+
+Wave 3 of the backlog sweep of 2026-11-12. **The contract pin moves to `93e7db16` (`v0.1.0+2026-11-08.1`)**: DEC-0149
+(`fabric-source/1`), CT-254 (HA-2's Linux source, the hybrid the kit already read), DEC-0151, DEC-0152, DEC-0155.
+Bundles pinned at `18f8d487` stay valid (FAA-258; impact map `docs/evidence/specs/2026-11-12-faa-258-repin-93e7db16-impact-map.md`).
+New kit modules: `fabric_holds` and `fabric-holds.mjs`. Kit modules change: `fabric_secrets`, `fabric_protocols`,
+`fabric_peer_owner` (`1.2.0+kit.5`), `fabric_package`, `fabric_descriptor`, `fabric_http`, `fabric_supervisors`, the
+facade `fabric_service`, and their Node twins.
+
+### Added
+
+- **`npx @passioncode-ai/fabric-agent-adapter new <folder> --id <agent-id> [--profile ...] [--service]`** (North Star G21,
+  FAA-270), and `new_agent.py` behind it: one command creates an agent project with the contract built in: the bundle
+  pinned at the contract, `fabric.source.json`, a placement guard reading Observatory's `observatory-placement/1` record
+  with its tests, and with `--service` the service kit's sample (its modules copied by `fabric_kit.py install`).
+  Idempotent, refuses a folder holding other files without `--force`, JSON last. It needs Python 3.9 or later on the
+  machine. Turning a sentence into an agent (`new "<sentence>"`, `test`) stays FAA-26, waiting on Fabric's
+  `fabric.agent.create`.
+- **`fabric.source.json` (DEC-0149, `fabric-source/1`)** (FAA-261): `fabric_source_tree.py` ports the contract's source
+  rules and matches all 140 of its vendored vectors; `fabric_source_check.py check` reads the source a manifest names,
+  by path, line and column, never the value; `adapt_project.py source` lays the manifest down with the kit's slots
+  (`PUBLISHER_URI` behind the `createdBy` sentinel, `PLACEMENT_RECORD`, and for a service `SUPERVISOR_LABEL` and
+  `SERVICE_PORT`; FAA-188's part 2); `pack` writes `secrets[]` and `state[]` from the slots, and FAC-SEM-160 refuses a
+  package that differs.
+- **Work held by a service's own limits** (FAA-298): new kit modules `fabric_holds` and `fabric-holds.mjs` (L3). A held
+  job says why it waits in `statusMessage` with the contract's pause grammar (the job schema is closed); the operator gets
+  one push per hold, and the answer is recorded as a scoped lift that falls back when its window ends; a new probe rule
+  `limits.holds`.
+- **Agent template folders** (FAA-265): five JSON Schemas and `template_check.py` in creating-fabric-agents; the
+  communication agent template moved into `templates/communication-agent/` with its manifest, connections, access, data
+  rooms, checks, assembly and changelog; `validate.py` checks every shipped template folder.
+
+### Changed
+
+- The probe's `limits.holds` reads a service that declares limits but does not use `fabric_holds` as NOT_RUN with a
+  migration note, not FAIL, and counts only code files (a vendored `check_service_rules.py` and docs naming `HoldBook`
+  no longer pass it). `LoopbackHTTPServer` and `loopbackServer` read the socket table only for a loopback peer: a peer
+  at another address (a `0.0.0.0` bind) is served with no owner under `refuse` and `strict` (the 0.81.0 seam reading).
+- **A kit service refuses a loopback peer of another OS account before it reads the request** (DEC-0154 HA-2 and HA-3,
+  FAA-227): `LoopbackHTTPServer` takes `peer_check` and Node's new `loopbackServer(httpServer, {peerCheck})` holds each
+  connection paused until the check passes; `refuse` (the default) closes another account's peer and serves the rest,
+  `strict` also refuses an owner it cannot tell, `off` reads nothing.
+- `fabric_http` and `fabric-http.mjs` check plain http that reaches loopback by its connected address, `insecure=True` and
+  a loopback proxy included (FAA-260). The probe times the well-known answer after the owner check, fails a deeply
+  nested body cleanly, compares port claims as ports (`:08080` is `:8080`), names the listener on a failed connect, and
+  no longer stops on a well-known body that is not an object; the layout probe opens a loopback page only after its
+  listener is this account's (FAA-260).
+- The dashboard link gate opens a raw loopback address in a browser only when `listener_owner` is `this-account` as
+  well as the host `not_installed` (FAA-251).
+- LaunchDaemon installs and uninstalls refuse contradicting domains, leftover LaunchAgents, another label's plist and an
+  unparseable or binary plist, and remove a plist a failed bootstrap wrote; the probe fails a LaunchDaemon without
+  `UserName`, with a `~` command, or loaded in both domains (FAA-286).
+- **The kit's credential detector is the contract's DEC-0151 `SECRET_VALUE`**, in both twins and the three dashboard
+  link checkers: a provider prefix counts only in its canonical case and after a boundary; an `sk-` key needs a digit and
+  an upper-case letter (16 characters or more) or a digit (32 or more), so `SK-...`, `sk-learn-...` and an `sk-` inside a
+  word are no longer keys. Repository names keep their own boundary-free key shapes, as DEC-0151 asks (FAA-258).
+- `fabric_protocols` lists `fabric-source/1`; `fabric_peer_owner` is `1.2.0+kit.5`, one version line with Observatory's
+  1.2.0, the Linux reading unchanged (FAA-258).
+- Every vendored contract vector is regenerated at the new pin with the contract's own generators;
+  `make_load_vectors.mjs` reads the pin from the lock file. SECURITY.md, lifecycle.md and protocol.md name DEC-0155 RT-3
+  for the vouch; SA-6 (DEC-0152) is the accepted board rule (FAA-258).
+
+### Fixed
+
+- `fabric_source_check.py` refuses a copy without `fabric_source_tree.py` with exit 2 and the file's name, not a
+  traceback and exit 1; `pack` (both kits) refuses by name a hand-written `secrets[]` naming a secret `fabric.source.json`
+  has no slot for, instead of dropping it (the 0.81.0 seam reading). The Windows job runs the loopback peer check.
+
+### Upgrading
+
+- A door that gave T0 because `strict` served the peer must also check that the peer's owner is named
+  (`peer_owner()` / `connectionOwner`): a peer off loopback has none and is T2. A folder whose `fabric.package.json`
+  names secrets its `fabric.source.json` lacks fails `pack` until they are added as `secret` slots.
+- A service that serves loopback HTTP keeps serving its own account's callers; pass `peer_check="strict"` to refuse an
+  owner the table cannot tell. A caller of the dashboard link gate passes `listener_owner`. An outside test that runs
+  this checkout's probe needs a readable socket table.
+- A service that vendors the kit takes the changed `fabric_secrets`, `fabric_protocols` and `fabric_peer_owner` with
+  `fabric_kit.py install`. A string the 0.80 detector called a key may no longer be one (see Changed).
+
 ## 0.80.2 (2026-11-12)
 
 0.80.1 was tagged and never published: its `windows` job (run 43212508702) failed one test, so `release` and `publish`

package/README.md

@@ -152,7 +152,9 @@ For provider bundles the adapting skill helps an agent author:
   admission, and project binding;
 - keep the agent's source apart from its instance data, with `scripts/fabric_source_check.py check`, which reports a
   home path, a credential-shaped value or a string from the owner's list by path, line and kind and never repeats it
-  (FAA-188).
+  (FAA-188); under the source manifest `fabric.source.json` (contract DEC-0149, `fabric-source/1`, which
+  `scripts/adapt_project.py source` proposes) it reads the source the manifest names with the contract's tree check
+  (FAA-261), and `pack` writes the package's `secrets[]` and `state[]` from its slots.
 
 The skill never treats generated files as admission. Fabric contract `0.1.0` does not
 yet ship the host registry/runtime needed to connect and authorize a live provider.
@@ -169,6 +171,7 @@ then restart your agents. Alone, without any account:
 npx @passioncode-ai/fabric-agent-adapter        # installs every skill into the agents hub ~/.agents/skills
 npx @passioncode-ai/fabric-agent-adapter --prune-shadow   # remove ~/.claude/skills copies that shadow the plugin
 npx @passioncode-ai/fabric-agent-adapter --force          # update a copy already in the hub (a launcher link is never replaced)
+npx @passioncode-ai/fabric-agent-adapter new ./example-agent --id example-agent [--service]   # a new agent project, contract built in
 ```
 
 A copy already in the hub is left alone unless `--force` is given; with it, the new copy is built beside the old one
@@ -300,8 +303,16 @@ python3 "$SKILL_DIR/scripts/adapt_project.py" scaffold /path/to/project \
   --effect none
 python3 "$SKILL_DIR/scripts/adapt_project.py" check /path/to/project \
   --contract /path/to/fabric-agent-contract --json
+python3 "$SKILL_DIR/scripts/adapt_project.py" source /path/to/project --dry-run   # propose fabric.source.json
+python3 "$SKILL_DIR/scripts/new_agent.py" ./example-agent --id example-agent      # what `npx ... new` runs
 ```
 
+`new` (FAA-270) writes a new agent project from the kit's template: the provider bundle pinned to the contract,
+`fabric.source.json`, the placement guard with its tests, and with `--service` the service kit's sample; a repeat
+changes nothing, a folder holding other files is refused without `--force`, and the last line is JSON
+([new-agent.md](plugins/fabric-agent-adapter/skills/creating-fabric-agents/references/new-agent.md)). Inferring the agent
+from a sentence and running its evals (`new "<sentence>"`, `test`) stay with FAA-26.
+
 Pack, sign and verify an agent as a `fabric-package/1` folder (contract DEC-0050, DEC-0051; nothing is written without
 `--apply`, and the key file is the person's, never made or kept here). First check the checkout, then make the clean
 copy [the package reference](plugins/fabric-agent-adapter/skills/building-fabric-services/references/package.md)
@@ -330,7 +341,7 @@ Scaffolding is non-destructive by default. It writes only the paths declared in
 The default pin for new bundles is [`fabric-contract.lock.json`](fabric-contract.lock.json):
 
 - version: `0.1.0`
-- commit: `18f8d48762edc5bfb1433657cbfe1c16196df1a6`
+- commit: `93e7db164c7829e2783b4b7705c4113bb5201131`
 
 Every other mention of the default contract revision (this section, the skills' metadata, the
 skill card, `adapt_project.py`) must equal it; `python3 test/validate.py` fails a tree

package/SECURITY.md

@@ -31,7 +31,7 @@ bounded and non-publishing until explicit scoped grants exist in a project bindi
   there with an explicit `domain="gui"`, not refused yet, FAA-286 item 21); the job runs as the account its `UserName`
   names. The installer accepts the job's answer only on a connection launchd's own job accepted
   (its pid from `launchctl print system/<label>`) or, where the socket table is restricted, on a port that pid listens
-  on (`lsof -p`, the weaker vouch below, CT-261). The
+  on (`lsof -p`, the weaker vouch below, DEC-0155 RT-3). The
   token is readable by any process of the same user; the protocol defends against web pages
   and mistakes, not against hostile local code.
 - The kits' connectors (`fabric_http`, `fabric_openrouter` and their Node twins) reach the
@@ -48,25 +48,40 @@ bounded and non-publishing until explicit scoped grants exist in a project bindi
   restricted table, to a port that pid listens on there (the weaker vouch below): a departure from the pinned HA-2 and
   the contract's later RT-3, accepted in principle by the contract owner as DEC-0161 (proposed; the restricted-table vouch
   included) and kept as a departure until the next repin (FAA-288). They read, never change:
-  macOS `sysctl net.inet.tcp.pcblist_n` in the process, or the programs `/usr/sbin/netstat
+  macOS `sysctl net.inet.tcp.pcblist_n` in the process (the TCP table in the record layout `netstat -anv` reads;
+  the pinned HA-2 table names `netstat -anv` and `pcblist64`, an older layout of the same table), or the programs `/usr/sbin/netstat
   -anv -p tcp` and `/bin/ps -o uid= -p <pid>` (the Node twin always); Linux
   `/proc/net/tcp` and `/proc/net/tcp6`; Windows `GetExtendedTcpTable` and the process
-  token (Python), or `netstat -ano`, `whoami /user` and one PowerShell `GetOwnerSid` query
-  per new connection (Node). On macOS the Python reader calibrates once per process with a
+  token (Python), or `netstat -ano` and one PowerShell `GetOwnerSid` query per new connection,
+  with `whoami /user` once a process (Node). On macOS the Python reader calibrates once per process with a
   short-lived child of its own interpreter listening on a random `127.0.0.1` port; when the
   table is restricted (macOS 27.2, FAA-267) the launchd installers also run `/usr/sbin/lsof
   -nP -a -p <pid> -i4TCP -sTCP:LISTEN -Fn` on their own job's pid. That vouch shows the job listens on the port, not that it accepted
-  the connection (a more specific bind by root over a wildcard job would pass; contract CT-261). A LaunchDaemon's root
+  the connection (a more specific bind by root over a wildcard job would pass; the pin's DEC-0155 RT-3 vouches only for exactly `127.0.0.1`, a departure FAA-258 filed). A LaunchDaemon's root
   installer runs that `lsof` and `ps -o uid=` on its job's pid before it accepts an answer, and reads, never changes, every other
   plist in `/Library/LaunchDaemons` (to find another holder of its label, `plutil -convert xml1` for a binary one in
-  Node), `launchctl print system/<label>` and the `UserName`'s uid (`pwd`, or `id -u` in Node). A token-free loopback door is not yet protected against
-  another account's process (HA-3, FAA-227). An MCP client (Claude Code, Codex) sends the
+  Node), `launchctl print system/<label>` and the `UserName`'s uid (`pwd`, or `id -u` in Node). The kit's loopback server reads the table once per accepted
+  connection and closes a peer of another account before reading it (HA-3, FAA-227); a token-free door counts as
+  protected only under `peer_check="strict"`, which also refuses an owner it cannot tell. An MCP client (Claude Code, Codex) sends the
   token it was registered with on every later connection without this check (the contract's
   residue "a coding agent's bearer"): when the port may have changed hands, rotate the token
   and re-run `mcp-register` (one written as `references/surfaces-and-auth.md` says checks the
   listener first; the kit ships none). On Linux `/proc` names a socket's creator and
   no pid, so a listening socket root created and handed to another account (systemd
-  socket activation with `User=`) reads as root's: a client running as root sends to it.
+  socket activation with `User=`) reads as root's: a client running as root sends to it. Such a system unit's
+  connection reads as root's until the service accepts it and as the service's account after, so two runs of the
+  probe can disagree on it (0.74.0 product reading 10).
+- Credential-free loopback http is checked too (FAA-260 item 16, deliberate): `fabric_http` / `fabric-http.mjs` refuse
+  plain http to a loopback listener of another OS account or root (another account's Ollama, a `docker-proxy`) with
+  kind `foreign-user` whether or not the request carries a credential, because HA-2 reads nothing such a listener
+  answers as the service's, and an answer from another account's process is not this account's data. A caller that
+  means to read such a daemon says so with its own connection. With `insecure=True` a URL not spelled as loopback
+  (a hosts-file name, `0.0.0.0`, `[::ffff:127.0.0.1]`) and a request through a loopback `http_proxy` are checked by the
+  connected peer's address, so the Authorization header never reaches another account's proxy (FAA-260 items 1, 8).
+- The layout probe (`check_dashboard_layout.mjs`) reads a raw loopback page's listener from the socket table just
+  before its headless browser opens it, the one-time login URL included, and opens nothing on another account's,
+  root's or an untellable listener (FAA-260 items 2, 14). The browser then connects on its own: a listener swapped
+  between the read and the browser's connect is a residue, bounded by the login code's 120 s and single use.
 - The agents database (FAA-275): creating-fabric-agents, adapting-projects-to-fabric, building-fabric-services and
   working-with-fabric may send board requests to whichever Project the board lists under an `agents-db.*` capability
   (on an organization's board, any member Project may list it), carrying only what `references/agents-database.md`

package/bin/fabric-agent-adapter.js

@@ -43,6 +43,11 @@ Packages (fabric-package/1):
   npx @passioncode-ai/fabric-agent-adapter verify <folder> --trust <trust.json> [--countersigned]
       check the folder and its signatures against the keys you pin
 
+A new agent (FAA-270; needs Python 3.9 or later):
+  npx @passioncode-ai/fabric-agent-adapter new <folder> --id <agent-id> [--profile mcp|a2a|local-runner] [--service] [--force] [--json]
+      create an agent project with the contract built in: the provider bundle, fabric.source.json, the placement
+      guard and, with --service, the service kit's sample; the last line is JSON
+
 Claude Code (recommended):
   claude plugin marketplace add ${REPO}
   claude plugin install ${PLUGIN_ID}
@@ -257,8 +262,26 @@ function main(argv) {
   return 0;
 }
 
+// `new` runs the skill's own script (adapting-projects-to-fabric/scripts/new_agent.py), one implementation for the
+// skill and this CLI, under the first Python 3 found on PATH; its output and exit code pass through unchanged.
+function newAgent(args) {
+  const { spawnSync } = require('child_process');
+  const script = path.join(ROOT, 'plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/new_agent.py');
+  const candidates = process.platform === 'win32' ? [['py', ['-3']], ['python', []], ['python3', []]] : [['python3', []], ['python', []]];
+  for (const [command, prefix] of candidates) {
+    const probe = spawnSync(command, [...prefix, '-c', 'import sys; sys.exit(0 if sys.version_info >= (3, 9) else 1)'], { stdio: 'ignore' });
+    if (probe.status !== 0) continue;
+    const run = spawnSync(command, [...prefix, script, ...args], { stdio: 'inherit' });
+    return run.status === null ? 1 : run.status;
+  }
+  console.error('error: `new` needs Python 3.9 or later on PATH (python3, or py -3 on Windows)');
+  return 2;
+}
+
 const PACKAGE_COMMANDS = ['pack', 'sign', 'verify'];
-if (PACKAGE_COMMANDS.includes(process.argv[2])) {
+if (process.argv[2] === 'new') {
+  process.exitCode = newAgent(process.argv.slice(3));
+} else if (PACKAGE_COMMANDS.includes(process.argv[2])) {
   // The package commands live in the kit (fabric-package.mjs), one implementation for the skill and this CLI.
   const kit = path.join(ROOT, 'plugins/fabric-agent-adapter/skills/building-fabric-services/scripts/fabric-package.mjs');
   import(require('url').pathToFileURL(kit).href).then((m) => { process.exitCode = m.main(process.argv.slice(2)); });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@passioncode-ai/fabric-agent-adapter",
-  "version": "0.80.2",
+  "version": "0.81.0",
   "description": "Create Fabric-compatible agents, run them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract. This package is the installer CLI.",
   "scripts": {
     "test": "python3 test/validate.py && python3 -m unittest discover -s test -q && node --test 'test/*.test.mjs'"

package/plugins/fabric-agent-adapter/.claude-plugin/plugin.json

@@ -3,7 +3,7 @@
   "name": "fabric-agent-adapter",
   "displayName": "Fabric Agent Adapter",
   "description": "Create new Fabric-compatible agents, build them as always-alive local services with dashboards (fabric-service/0.1), and adapt existing projects to the Fabric Agent Contract through evidence-backed MCP, A2A, or local-runner provider bundles; and teach a coding agent to work in a project through Fabric (fabric-mcp, fabric_whoami, claim and release), with Claude Code session hooks; and put an agent on a standing watch over a product (observer mode).",
-  "version": "0.80.2",
+  "version": "0.81.0",
   "author": {
     "name": "PassionCode.ai",
     "url": "https://passioncode.ai/"

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/SKILL.md

@@ -9,9 +9,9 @@ license: AGPL-3.0-only OR LicenseRef-PassionCode-Commercial
 compatibility: Requires filesystem access and Python 3.9+. Exact schema checks additionally need git, Node.js, pnpm, and the pinned fabric-agent-contract checkout (a public repository). Works without those tools in an explicitly degraded structural-check mode.
 metadata:
   author: PassionCode.ai
-  version: "0.80.2"
+  version: "0.81.0"
   contract-version: "0.1.0"
-  contract-commit: "18f8d48762edc5bfb1433657cbfe1c16196df1a6"
+  contract-commit: "93e7db164c7829e2783b4b7705c4113bb5201131"
 ---
 
 # Adapting projects to Fabric
@@ -84,7 +84,7 @@ Use exactly:
 
 - contract version `0.1.0`;
 - repository `https://github.com/passioncode-ai/fabric-agent-contract`;
-- commit `18f8d48762edc5bfb1433657cbfe1c16196df1a6`.
+- commit `93e7db164c7829e2783b4b7705c4113bb5201131`.
 
 This is the default for new bundles. When checking an issued legacy bundle, preserve its
 explicit supported lock and use that exact clean checkout. Never silently upgrade or
@@ -184,7 +184,9 @@ path, line and kind, never repeating a value, and changes nothing. Then move eac
 instance value into the instance configuration outside the repository, read through a named variable with a neutral
 default and a committed `*.example`; a key into the secret store, named only. Run the check again until it exits 0; it is a floor under the owner's review, not a secret scanner.
 A value already committed stays in Git history: say so; a fresh history is the owner's act (no history rewrite, no
-force-push).
+force-push). Then lay down the source manifest, `fabric.source.json` (DEC-0149): `scripts/adapt_project.py source
+<project-root> --dry-run` proposes it, the author narrows `include` and names each key and store as a slot, and the
+check reads the source under it (the reference, *The source manifest*).
 
 ### 5. Make probes safe and meaningful
 

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/references/dashboard-links.md

@@ -65,8 +65,8 @@ host's `open` with `fallback=never`. Never `open <url>`, `open -a Safari`,
 agent's pages. A browser only when `host_status` confirms `not_installed`, and
 a raw `http://127.0.0.1:<port>` address only after the listener on that port is
 this OS account's (DEC-0154 PL-3 and HA-2; the adapter's `building-fabric-services/scripts/fabric_peer_owner.py`: `server_end` of a connection it opens and sends nothing on; `check_service.py <id>.<instance>` prints it as `listener.owner`): a
-`foreign-user` listener is reported, never opened (the link gate below does not
-read the owner yet, FAA-251). An installed host that failed
+`foreign-user` listener is reported, never opened (the link gate below takes
+that owner as `listener_owner`). An installed host that failed
 to open is reported, not replaced by HTTP. Links
 carry no token or login code. Every completion and notification action passes
 the Fabric Agent Adapter's link gate before delivery: `check_dashboard_link.py`
@@ -119,7 +119,12 @@ Its trusted context is supplied by the host, not by untrusted model output:
 
 `native_link` must equal the resolved open_link, with an available host on the
 viewer's device. `browser_link` must equal http_url, with confirmed not_installed,
-if_absent policy and the same device. Contract DEC-0123 PL-3 also allows a browser
+if_absent policy, the same device and `"listener_owner": "this-account"`: the kind
+the host read for the listener on http_url's port (`fabric_peer_owner`'s
+`this-account`, `another-account`, `system`, `unknown`, `none`, or
+`check_service.py`'s `foreign-user`); any other, or none given, refuses the
+browser (DEC-0154 PL-3, FAA-251). The native link does not take it: Fabric
+Dashboards checks its own listener. Contract DEC-0123 PL-3 also allows a browser
 on `unsupported` (a system the host does not ship for); the gate treats
 `unsupported` as no fallback, by the operator's rule that a browser opens only on a
 confirmed `not_installed`, and macOS never reports it (FAA-137). `remote_open` instead contains `device_id`,

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/references/source-and-instance.md

@@ -7,13 +7,15 @@ first commit, so that its owner can hand the source over later without rewriting
 by itself: handing over, a new remote, a push or a change of visibility stays the owner's act, each time (a personal
 agent stays private until its owner says so about that act).
 
-The format of a source manifest, export and import is the contract's to decide (CT-194). What follows does not depend
-on it.
+The format of a source manifest, export and import is the contract's: DEC-0149 (`fabric-source/1`, its `source.md`) at
+the pin. The kit lays down `fabric.source.json` ([the source manifest](#the-source-manifest)), and the check reads the
+source under it.
 
 ## Contents
 
 - [The layout](#the-layout)
 - [The data home and its kind](#the-data-home-and-its-kind)
+- [The source manifest](#the-source-manifest)
 - [The check](#the-check)
 
 ## The layout
@@ -42,11 +44,11 @@ on it.
 - **Fixtures on neutral ids.** A test that needs a home folder, an owner or an account uses `example`, `example-agent`,
   `owner@example.com` or a one-letter home, and a credential-shaped test value says it is synthetic
   (`sk-test-not-a-key`) or is assembled at run time.
-- **Two names stay in the source until the contract decides (CT-194).** A service's supervisor label is the agent's
-  own name, reverse-DNS on the publisher's domain (`com.example.example-agent`), and `AGENTS.md` names it (LC-09):
-  never the owner's account or name. A provider's `createdBy` names the publisher; until one is chosen it
-  keeps the scaffold's sentinel, and a person's name or account is never written there. The adapter moves both when the
-  contract decides how an instance renames them (FAA-188 part 2).
+- **Two names are slots, never values (DEC-0149, FAA-188 part 2).** A service's supervisor label is the agent's own
+  name, reverse-DNS on the publisher's domain (`com.example.example-agent`), and `AGENTS.md` names it (LC-09): never the
+  owner's account or name; the label an installation runs under is its `SUPERVISOR_LABEL` slot, with its port in
+  `SERVICE_PORT`. A provider's `createdBy` names the publisher; the source keeps the scaffold's sentinel, and the
+  publisher's URI is the installation's `PUBLISHER_URI` slot, so a person's name or account is never written there.
 
 ## The data home and its kind
 
@@ -69,6 +71,41 @@ on it.
   configuration and dependency folders `--every-file` reads too), each exit 0, with the owner's list or its absence recorded, until the contract's export (CT-194)
   replaces it.
 
+## The source manifest
+
+`fabric.source.json` at the source's root says what is source and which slots an installation fills, never a value
+(DEC-0149, `fabric-source/1`):
+
+| Member | What |
+|---|---|
+| `include` | the source, default deny: a file outside every entry is not source; an entry ending in `/` is a folder, no globs |
+| `exclude` | holes in `include`, read in any letter case and Unicode form (a file an entry names only in another spelling is left out, and the check says `excluded-by-fold`) |
+| `binaries` | the binary files that are source (an icon, a font); another binary blocks |
+| `unchecked` | source paths that travel unread, each with its reason (synthetic test vectors, a licence naming a holder on the owner's list) |
+| `publicAddresses` | the e-mail addresses the source may carry (a support address); another one warns |
+| `slots` | what an installation fills, by name: `secret` (a key), `config` (a setting: a repository URL, a folder, the supervisor label, the publisher's identity), `store` (a data store, with its path in the data folder), `endpoint` (the operator's infrastructure by role) |
+
+- **Laying it down.** A new agent gets it from `new_agent.py` (creating-fabric-agents' `references/new-agent.md`); an
+  existing project from `adapt_project.py source <project-root>` (adapting-projects-to-fabric's scripts), which proposes `include` from the
+  project's top-level entries (what Git would commit, instance data by its name left out) and names the kit's slots
+  (`PUBLISHER_URI` where a provider manifest is there, `PLACEMENT_RECORD`, and with `--service` `SUPERVISOR_LABEL` and
+  `SERVICE_PORT`); `--secret NAME:PURPOSE` and `--store NAME:PATH:PURPOSE` add the agent's own. `--dry-run` prints the
+  proposal and writes nothing; an existing manifest is the owner's and is replaced only with `--force`. The author then
+  narrows `include` to what is source.
+- **The check under it.** When the folder it checks holds `fabric.source.json`, `fabric_source_check.py check` reads
+  the source the manifest names and reports the contract's kinds (`fabric_source_tree.py`, held to the contract's
+  vectors): blocking `home-path`, `credential`, `binary`, `nested-repository`, `instance-string`, `missing`,
+  `no-include` and the manifest's own findings (FAC-SEM-156, FAC-SEM-157); warnings `email`, `link-outside`,
+  `no-license`, `unused-exclude`, `excluded-by-fold`, each by path, line and column (UTF-16 units), never by the text
+  found. Exit 1 on a blocking finding, 0 when only warnings remain and every source file was read, 2 when one was not.
+  `.fabric-source-ignore` and `--exclude` are not read there: `exclude` and `unchecked` say it. A declared home
+  (`home: <name>`) is still found in every source file.
+- **Packing it.** `pack` (building-fabric-services' `references/package.md`) writes the package's `secrets[]` from the secret slots and `state[]` from the store slots' paths, and refuses a
+  package whose members differ (FAC-SEM-160); an empty `state[]` is a copy packed without state, and stays so. A
+  hand-written `secrets[]` naming a secret the manifest has no slot for is refused by name, never dropped.
+- **Handing it over** stays the owner's act, each time, on their word for that act (the contract's `source.md`,
+  Handing over).
+
 ## The check
 
 `fabric_source_check.py check` reads the files the source would carry (what Git would commit: tracked files and

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/adapt_project.py

@@ -22,10 +22,10 @@ import fabric_secrets as _secrets  # noqa: E402 - the contract's credential dete
 
 CONTRACT_VERSION = "0.1.0"
 CONTRACT_REPOSITORY = "https://github.com/passioncode-ai/fabric-agent-contract"
-CONTRACT_COMMIT = "18f8d48762edc5bfb1433657cbfe1c16196df1a6"
+CONTRACT_COMMIT = "93e7db164c7829e2783b4b7705c4113bb5201131"
 # #region supported-contract-revisions — docs: README.md#contract-pin
 # Only this declaration may name a legacy revision in live files.
-SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "eac1a594aa131851f079da8bb7b2149e1951f35f", "3830a3353923e20f826d466610e1c479f120bec0", "00e050ba7429c0c60261cec871779e0fd6aeeb28", "1197a90dc4b57152cabcc71ad17db7559f35a27f", "e6c4fc16b415eec3190dd34d924d269405359dc9", "a3a66eb0052043847f6556348e37d34ca873a629", "52c7d798b9f4eb784eb4e29e717038a8912c759d", "2f020a696453ae299b123517f14957f6a1354379", "87d384ffce2757081b7ab227e5dad3dddd08328f", "0a4ce773c4b9e6bec40c6387eb3f988af7152c0e", "e742016dc396aa31e5a13a893489e43f15786c69", "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0", "c55f2d5a11c9a0197e958e87212fca7ae1154769", "07042181bfae2a481aa0da1a5651f24c76669c48", "d8146cfb0a1c74fc6432284c4356bb0c864b37b5", "82e163665e156a08aa3b92e4711015582c06162c", "1636fa97262f4a26e2086572d540c2ee701e0010", "f00a7685e3861c27f7899c033fb850a145a1708f", "a046f57cf46ea9e3da57ff8ce6a3ed4d26d8774b", "fe55fc67cba1a9e34a736da7d148d4fe2a8fbfa0", "b291bf09e0a9f9fd3c16cf540832cd021203b7d1", "0cacd08b0e95b6abf131eae1206b60792138bc3c", "2eb91c00e852d9c31d804310d38fad91589fcbac", "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
+SUPPORTED_CONTRACT_COMMITS = (CONTRACT_COMMIT, "18f8d48762edc5bfb1433657cbfe1c16196df1a6", "eac1a594aa131851f079da8bb7b2149e1951f35f", "3830a3353923e20f826d466610e1c479f120bec0", "00e050ba7429c0c60261cec871779e0fd6aeeb28", "1197a90dc4b57152cabcc71ad17db7559f35a27f", "e6c4fc16b415eec3190dd34d924d269405359dc9", "a3a66eb0052043847f6556348e37d34ca873a629", "52c7d798b9f4eb784eb4e29e717038a8912c759d", "2f020a696453ae299b123517f14957f6a1354379", "87d384ffce2757081b7ab227e5dad3dddd08328f", "0a4ce773c4b9e6bec40c6387eb3f988af7152c0e", "e742016dc396aa31e5a13a893489e43f15786c69", "bfa9a67aa3c6cb808c093e7d83cd59799f1ee7d0", "c55f2d5a11c9a0197e958e87212fca7ae1154769", "07042181bfae2a481aa0da1a5651f24c76669c48", "d8146cfb0a1c74fc6432284c4356bb0c864b37b5", "82e163665e156a08aa3b92e4711015582c06162c", "1636fa97262f4a26e2086572d540c2ee701e0010", "f00a7685e3861c27f7899c033fb850a145a1708f", "a046f57cf46ea9e3da57ff8ce6a3ed4d26d8774b", "fe55fc67cba1a9e34a736da7d148d4fe2a8fbfa0", "b291bf09e0a9f9fd3c16cf540832cd021203b7d1", "0cacd08b0e95b6abf131eae1206b60792138bc3c", "2eb91c00e852d9c31d804310d38fad91589fcbac", "8e49fbd5fbbf230e32c1969cd24ac3c22422f0a5", "a83bec6b47776af688402c18efec507143061f68", "52da526d7cc1e063d74c5b520dbc03d0ace15246", "78b2da018d2c4bd9ac1bde1dc3b7f1a110a175f5", "623bf61358c339cb10297807b3f024b5d9f1f327", "23f9fda4c05f8a3852246ee98d4f2adf74ed0875", "9091d3d6606b0c4b5591a38c3674356a01fd7f55", "df55c8c54a23251342a7ee57ba95642b7eb39e61", "2ce392291c6668598d12cd38327e24696b5ca15c")
 # #endregion supported-contract-revisions
 INTEROP_KEY = "https://fabric.passioncode.ai/agent-contract/extensions/interop/0.1"
 MCP_REVISION = "2026-07-28"
@@ -488,6 +488,98 @@ def scaffold_project(root: Path, args: argparse.Namespace) -> Dict[str, Any]:
     }
 
 
+# #region source-manifest: fabric.source.json (contract DEC-0149, fabric-source/1; FAA-261)
+SOURCE_FILE = "fabric.source.json"
+_SLOT_NAME = re.compile(r"[A-Z][A-Z0-9_]{0,63}\Z")
+#: Instance data never named in include: the repository, credentials by their name, dependency and build folders.
+_NOT_SOURCE = re.compile(r"\.git|\.env(\..*)?|.*\.(pem|key|p12|pfx|jks|keystore|token|credential)|node_modules|\.venv|venv|"
+                         r"__pycache__|dist|build|\.DS_Store|" + re.escape(SOURCE_FILE), re.IGNORECASE)
+#: The slots the kit names for every agent: the provider's createdBy and, for a service, its supervisor label and port
+#: are instance data (FAA-188 part 2); the placement record is the operator's infrastructure, read at start.
+PUBLISHER_SLOT = {"name": "PUBLISHER_URI", "kind": "config",
+                  "purpose": "provider.createdBy: the publisher's URI; the source keeps the scaffold's sentinel"}
+PLACEMENT_SLOT = {"name": "PLACEMENT_RECORD", "kind": "endpoint", "optional": True,
+                  "purpose": "Project Observatory's placement record (observatory-placement/1), read at start"}
+SERVICE_SLOTS = (
+    {"name": "SUPERVISOR_LABEL", "kind": "config",
+     "purpose": "the launchd label, systemd unit or Scheduled Task this installation runs under (LC-09)"},
+    {"name": "SERVICE_PORT", "kind": "config", "purpose": "the loopback port recorded for this OS account (DEC-0154 HA-1)"},
+)
+
+
+def _parse_slot(text: str, kind: str) -> Dict[str, Any]:
+    parts = text.split(":", 2 if kind == "store" else 1)
+    if len(parts) != (3 if kind == "store" else 2) or not _SLOT_NAME.match(parts[0]) or not parts[-1].strip():
+        raise AdaptationError("--%s takes %s" % (kind, "NAME:PATH:PURPOSE" if kind == "store" else "NAME:PURPOSE"))
+    slot = {"name": parts[0], "kind": kind, "purpose": parts[-1].strip()}
+    if kind == "store":
+        slot["path"] = parts[1]
+    if _secrets.secret_value(slot["purpose"]):
+        raise AdaptationError("a slot is named, never filled: --%s %s holds a value shaped like a credential" % (kind, parts[0]))
+    return slot
+
+
+def source_manifest(include: Sequence[str], description: Optional[str] = None, secrets: Sequence[str] = (),
+                    stores: Sequence[str] = (), service: bool = False, provider: bool = True) -> Dict[str, Any]:
+    """A fabric-source/1 manifest: include as given (sorted, default deny), the kit's slots, the slots named."""
+    manifest: Dict[str, Any] = {"format": "fabric-source/1"}
+    if description:
+        manifest["description"] = description
+    manifest["include"] = sorted(dict.fromkeys(include))
+    slots = [_parse_slot(t, "secret") for t in secrets] + [_parse_slot(t, "store") for t in stores]
+    slots += ([dict(PUBLISHER_SLOT)] if provider else []) + [dict(PLACEMENT_SLOT)]
+    slots += [dict(s) for s in SERVICE_SLOTS] if service else []
+    names = [s["name"] for s in slots]
+    if len(set(names)) != len(names):
+        raise AdaptationError("a slot is named twice")
+    manifest["slots"] = slots
+    return manifest
+
+
+def _top_level(root: Path) -> List[str]:
+    """The project's top-level entries as include paths: what Git would commit, else what a walk finds; a folder with
+    a trailing /. Instance data by its name is left out."""
+    names: List[str] = []
+    try:
+        listed = subprocess.run(["git", "-C", str(root), "ls-files", "-z", "--cached", "--others", "--exclude-standard"],
+                                capture_output=True, timeout=60)
+        if listed.returncode == 0:
+            names = [os.fsdecode(n) for n in listed.stdout.split(b"\0") if n]
+    except (OSError, subprocess.SubprocessError):
+        names = []
+    if not names:
+        names = [_relative(path, root) for path in _files(root)]
+    tops = []
+    for name in names:
+        head, _, rest = name.partition("/")
+        if not _NOT_SOURCE.fullmatch(head):
+            tops.append(head + "/" if rest else head)
+    return sorted(dict.fromkeys(tops))
+
+
+def write_source_manifest(root: Path, args: argparse.Namespace) -> Dict[str, Any]:
+    """`source`: lay down fabric.source.json from the project's top-level entries. An existing one is the owner's and
+    is kept unless --force; --dry-run writes nothing."""
+    if not root.is_dir():
+        raise AdaptationError("project path is not a directory: %s" % root)
+    provider = (root / "fabric-agent.json").is_file()
+    manifest = source_manifest(_top_level(root), args.description, args.secret, args.store, args.service, provider)
+    target = root / SOURCE_FILE
+    exists = os.path.lexists(str(target))
+    result = {"project": str(root.resolve()), "manifest": manifest, "exists": exists}
+    if args.dry_run:
+        result["dryRun"] = True
+        return result
+    if exists and not args.force:
+        raise AdaptationError("%s exists: it is the owner's; --dry-run shows the proposal, --force replaces it" % SOURCE_FILE)
+    target.write_text(_json_text(manifest), encoding="utf-8")
+    result["written"] = SOURCE_FILE
+    result["next"] = ("Review include (default deny), name every key and store as a slot, then run "
+                      "fabric_source_check.py check on the project (exit 0).")
+    return result
+# #endregion
+
+
 def _load_json(path: Path, errors: List[str]) -> Optional[Any]:
     try:
         return json.loads(path.read_text(encoding="utf-8"))
@@ -834,6 +926,17 @@ def build_parser() -> argparse.ArgumentParser:
     scaffold.add_argument("--dry-run", action="store_true", help="print the planned writes and a unified diff of each existing path; write nothing")
     scaffold.add_argument("--json", action="store_true")
 
+    source = sub.add_parser("source", help="lay down fabric.source.json, the agent's source manifest (DEC-0149)")
+    source.add_argument("project", type=Path)
+    source.add_argument("--description", help="what the agent is, in plain words")
+    source.add_argument("--secret", action="append", default=[], metavar="NAME:PURPOSE", help="a key the agent reads by name; repeat")
+    source.add_argument("--store", action="append", default=[], metavar="NAME:PATH:PURPOSE",
+                        help="a data store relative to the data folder (it becomes the package's state[]); repeat")
+    source.add_argument("--service", action="store_true", help="a kit service: its supervisor label and port are slots")
+    source.add_argument("--force", action="store_true", help="replace an existing fabric.source.json")
+    source.add_argument("--dry-run", action="store_true", help="print the proposal; write nothing")
+    source.add_argument("--json", action="store_true")
+
     check = sub.add_parser("check", help="check generated structure and optional pinned schema")
     check.add_argument("project", type=Path)
     check.add_argument("--contract", type=Path)
@@ -848,6 +951,8 @@ def main(argv: Optional[Sequence[str]] = None) -> int:
             result = inspect_project(args.project)
         elif args.command == "scaffold":
             result = scaffold_project(args.project, args)
+        elif args.command == "source":
+            result = write_source_manifest(args.project, args)
         else:
             result = check_project(args.project, args.contract)
         if result.get("dryRun") and not args.json:

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/check_dashboard_link.py

@@ -28,8 +28,14 @@ CREDENTIAL_PAIRS = {
     'session': {'token', 'id'},
     'code': {'login', 'auth', 'access', 'session'}}
 JWT_SHAPE = re.compile(r'eyJ[A-Za-z0-9_-]{2,}\.[A-Za-z0-9_-]{2,}\.[A-Za-z0-9_-]*')
-SECRET_VALUE = re.compile(r'(^bearer\s.+|sk-[A-Za-z0-9_-]{16,}|gh[pousr]_[A-Za-z0-9]{20,}|xox[abposr]-[A-Za-z0-9-]{10,}'
-                          r'|AKIA[0-9A-Z]{16}|glpat-[A-Za-z0-9_-]{20,})', re.I | re.S)
+# The contract's SECRET_VALUE at the pin (DEC-0151): `Bearer ` at a value's start in any case, or a provider key with its
+# prefix in its canonical case after a boundary (the start, a character that is no ASCII letter or digit, or an escape);
+# an `sk-` key holds a digit and an upper-case letter with 16 or more characters, or a digit with 32 or more.
+SECRET_VALUE = re.compile(r'(^[Bb][Ee][Aa][Rr][Ee][Rr]\s.+|(?:^|[^A-Za-z0-9]|%[0-9A-Fa-f]{2}|\\[nrt"\']|\\u[0-9A-Fa-f]{4}'
+                          r'|\\x[0-9A-Fa-f]{2}|\\[bfv0ae]|\\[0-7]{1,3}|%25[0-9A-Fa-f]{2}|\x1b\[[0-9;:]*m'
+                          r'|(?:\\u001[bB]|\\x1[bB]|\\e|\\033|\\33)\[[0-9;:]*m)'
+                          r'(?:sk-(?=[A-Za-z0-9_-]{0,255}?[0-9])(?:(?=[A-Za-z0-9_-]{0,255}?[A-Z])[A-Za-z0-9_-]{16,}|[A-Za-z0-9_-]{32,})'
+                          r'|gh[pousr]_[A-Za-z0-9]{20,}|xox[abposr]-[A-Za-z0-9-]{10,}|AKIA[0-9A-Z]{16}|glpat-[A-Za-z0-9_-]{20,}))', re.S)
 LONG_RUN = re.compile(r'[A-Za-z0-9+/=_-]{40,}')
 
 
@@ -115,6 +121,11 @@ def check(data):
     require(all(isinstance(v, str) and 0 < len(v) <= 200 for v in (target, viewer)), 'missing_device')
     fallback = data.get('fallback', 'if_absent')
     require(fallback in ('if_absent', 'never'), 'invalid_fallback')
+    # DEC-0154 PL-3 and HA-2 (FAA-251): who listens on http_url's port, as the host read it from the socket table
+    # (fabric_peer_owner's kinds, or check_service.py's foreign-user). A browser opens a raw loopback address only
+    # after that listener is this OS account's; absent, it is unknown.
+    owner = data.get('listener_owner', 'unknown')
+    require(owner in ('this-account', 'another-account', 'system', 'unknown', 'none', 'foreign-user'), 'invalid_listener_owner')
     kind = action.get('kind')
     if kind == 'remote_open':
         require(set(action) <= {'kind', 'device_id', 'service', 'path'}, 'unexpected_action_field')
@@ -128,6 +139,7 @@ def check(data):
         require(set(action) == {'kind', 'url'} and action.get('url') == http, 'not_resolved_http_url')
         require(viewer == target, 'wrong_viewer_device')
         require(state == 'not_installed' and fallback == 'if_absent', 'browser_fallback_forbidden')
+        require(owner == 'this-account', 'listener_not_this_account')
     else:
         raise ValueError('unsupported_dashboard_action')
     return {'ok': True, 'kind': kind}

package/plugins/fabric-agent-adapter/skills/adapting-projects-to-fabric/scripts/fabric_secrets.py

@@ -30,8 +30,20 @@ CREDENTIAL_PAIRS: Dict[str, tuple] = {
 JS_SPACE = "\t\n\x0b\x0c\r \xa0\u1680\u2000-\u200a\u2028\u2029\u202f\u205f\u3000\ufeff"
 _NOT_LINE_END = "[^\n\r\u2028\u2029]"  # ECMAScript's `.` without the s flag
 JWT_SHAPE = re.compile(r"eyJ[A-Za-z0-9_-]{2,}\.[A-Za-z0-9_-]{2,}\.[A-Za-z0-9_-]*")
-SECRET_VALUE = re.compile(r"(^bearer[%s]%s+|sk-[A-Za-z0-9_-]{16,}|gh[pousr]_[A-Za-z0-9]{20,}|xox[abposr]-[A-Za-z0-9-]{10,}"
-                          r"|AKIA[0-9A-Z]{16}|glpat-[A-Za-z0-9_-]{20,})" % (JS_SPACE, _NOT_LINE_END), re.IGNORECASE | re.ASCII)
+#: Where a provider key's prefix may start (DEC-0151): the start of a value, a character that is no ASCII letter or
+#: digit, or an escape (a percent-escape, single or double, a backslash escape, an octal, `\\x` with two hex digits,
+#: `\\u` with four, an ESC colour sequence, raw or escaped). A consuming group, as the contract writes it.
+_KEY_BOUNDARY = (r"(?:^|[^A-Za-z0-9]|%[0-9A-Fa-f]{2}|\\[nrt\"']|\\u[0-9A-Fa-f]{4}|\\x[0-9A-Fa-f]{2}|\\[bfv0ae]|\\[0-7]{1,3}"
+                 r"|%25[0-9A-Fa-f]{2}|\x1b\[[0-9;:]*m|(?:\\u001[bB]|\\x1[bB]|\\e|\\033|\\33)\[[0-9;:]*m)")
+#: The provider keys' shapes, prefixes in their canonical case only (DEC-0151 item 7: `SK-` or `GHP_` is no key). An
+#: `sk-` key holds, within 256 characters, a digit and an upper-case letter with 16 or more characters, or a digit with
+#: 32 or more; the look-aheads are bounded to 255 characters and lazy, so a long run of prefixes reads in linear time.
+_PROVIDER_KEYS = (r"(?:sk-(?=[A-Za-z0-9_-]{0,255}?[0-9])(?:(?=[A-Za-z0-9_-]{0,255}?[A-Z])[A-Za-z0-9_-]{16,}|[A-Za-z0-9_-]{32,})"
+                  r"|gh[pousr]_[A-Za-z0-9]{20,}|xox[abposr]-[A-Za-z0-9-]{10,}|AKIA[0-9A-Z]{16}|glpat-[A-Za-z0-9_-]{20,})")
+#: The contract's SECRET_VALUE at the pin (DEC-0151): `Bearer ` at a value's start in any case, or a provider key after a
+#: boundary. No case-insensitive flag; digits are ASCII. A match includes its boundary character: callers test, never
+#: read the matched text or its index.
+SECRET_VALUE = re.compile("(^[Bb][Ee][Aa][Rr][Ee][Rr][" + JS_SPACE + "]" + _NOT_LINE_END + "+|" + _KEY_BOUNDARY + _PROVIDER_KEYS + ")")
 _LONG_RUN = re.compile(r"[A-Za-z0-9+/=_-]{40,}")
 _BEARER_INSIDE = re.compile(r"(?<![A-Za-z0-9_])bearer[%s]+(?=[A-Za-z0-9._~+/-]*[0-9])[A-Za-z0-9._~+/-]{12,}=*" % JS_SPACE,
                             re.IGNORECASE | re.ASCII)
@@ -194,7 +206,10 @@ def secret_url(value: str) -> bool:
 _REPOSITORY_URI = re.compile(r"\A([A-Za-z][A-Za-z0-9+.-]*:(?://[^/?#]*)?)([^?#]*)(.*)\Z", re.S)
 _REPOSITORY_NAME = re.compile(r"(?:[a-z0-9._-]+|[A-Za-z._-]+)\Z")  # lower case, or letters with no digit (readings 8)
 _REPOSITORY_AUTHORITY = re.compile(r"[A-Za-z][A-Za-z0-9+.-]*://")
-_KEY_AT_A_WORD = re.compile(r"(?:\A|(?<=[._-]))(?:%s)" % SECRET_VALUE.pattern, re.IGNORECASE | re.ASCII)
+#: A repository name's own key shapes, boundary-free and case-sensitive (DEC-0151): SECRET_VALUE takes a consuming
+#: boundary, so composed after a separator look-behind it would miss a key after `-`, `.` or `_`.
+_REPOSITORY_KEYS = r"sk-[A-Za-z0-9_-]{16,}|gh[pousr]_[A-Za-z0-9]{20,}|xox[abposr]-[A-Za-z0-9-]{10,}|AKIA[0-9A-Z]{16}|glpat-[A-Za-z0-9_-]{20,}"
+_KEY_AT_A_WORD = re.compile(r"(?:\A|(?<=[._-]))(?:%s)" % _REPOSITORY_KEYS)
 _JWT_AT_A_WORD = re.compile(r"(?:\A|(?<=[._-]))%s" % JWT_SHAPE.pattern)