create-agdf 0.13.8 → 0.14.1

package/README.md

@@ -24,10 +24,12 @@ Use a different target when Codex is not your agent surface:
 | Surface or goal | Start with | What it gives you |
 |---|---|---|
 | Claude Code | `npx --yes @agdf/cli@latest claude` | The AGDF plugin for Claude Code. |
+| GitHub Copilot | `npx --yes @agdf/cli@latest copilot` | The AGDF plugin with prefixed skills and a consent-bound session hook. |
 | OpenCode, user-wide discovery | `npx --yes @agdf/cli@latest opencode` | The npm plugin and global native skills; repository governance remains opt-in. |
 | OpenCode, one repository | `npx --yes @agdf/cli@latest opencode-repo` | Durable control configuration that activates the once-installed global runtime. |
+| Durable control state in an existing setup | `npx --yes @agdf/cli@latest init` | Live `.agdf/control/` state when the repository explicitly needs it. |
 
-The runtime-bearing `codex`, `claude` and `opencode` installers ask before enabling narrow automatic
+The runtime-bearing `codex`, `claude`, `copilot` and `opencode` installers ask before enabling narrow automatic
 local checks on an interactive terminal. The choices are `enable`, `manual` and `cancel`; enablement
 is never preselected. Every interactive installation or update asks again. A previous choice is
 shown only as intent, never as proof of effective host permission. The prompt shows the target AGDF
@@ -51,8 +53,6 @@ from AGDF gate approval. A receipt alone never proves effective host permission.
 Claude deny/ask precedence and all explicit OpenCode permissions remain authoritative. The public
 Skills-only OpenAI candidate has no runtime or hooks and therefore remains manual/external for this
 capability.
-| GitHub Copilot | `npx --yes @agdf/cli@latest copilot` | Repository instructions, visible skills and control templates. |
-| Durable control state in an existing setup | `npx --yes @agdf/cli@latest init` | Live `.agdf/control/` state when the repository explicitly needs it. |
 
 For prerequisites, all surface-specific flows and operational boundaries, use the authoritative [installation guide](../INSTALL.md). Do not run `init` merely to ask a fresh question: an agent can first clarify the request and ask for `Approval: UR` when durable control state is needed.
 
@@ -66,6 +66,7 @@ Installation, activation and explicit lifecycle changes:
 npx --yes @agdf/cli@latest codex
 npx --yes @agdf/cli@latest codex-repo
 npx --yes @agdf/cli@latest claude
+npx --yes @agdf/cli@latest copilot
 npx --yes @agdf/cli@latest opencode
 npx --yes @agdf/cli@latest opencode-status
 npx --yes @agdf/cli@latest opencode-repo
@@ -104,11 +105,9 @@ Backward-compatible scaffold usage:
 npm create agdf@latest -- codex
 npm create agdf@latest -- codex-repo
 npm create agdf@latest -- claude
-npm create agdf@latest -- copilot
 npm create agdf@latest -- opencode
 npm create agdf@latest -- opencode-status
 npm create agdf@latest -- opencode-repo
-npm create agdf@latest -- both
 npm create agdf@latest -- init
 npm create agdf@latest -- config --language en
 npm create agdf@latest -- doctor
@@ -138,7 +137,7 @@ it does not localize the CLI lifecycle card.
 - `codex` installs the AGDF plugin globally for Codex
 - `codex-repo` writes a repository-local Codex marketplace under `.agents/plugins/` and a local AGDF plugin copy under `plugins/agdf/`
 - `claude` installs the AGDF plugin globally for Claude Code
-- `copilot` writes `AGENTS.md`, Copilot custom instructions under `.github/`, visible repository skills under `.github/skills/`, and AGDF control templates under `.agdf/control/`
+- `copilot` registers the AGDF-owned local Marketplace and installs `agdf@agdf` through Copilot CLI; when `copilot` is not on `PATH`, it runs the pinned official `@github/copilot` CLI package through npm, then verifies AGDF in Copilot's own plugin list
 - `opencode` installs the AGDF npm plugin and ten native skills as a user-wide OpenCode surface
 - `opencode-status` reports OpenCode global config, package loadability, global native-skill completeness, installed host/plugin-SDK versions, declaration-level support for AGDF's two experimental hooks, durable repository activation, legacy compatibility and observable session signals
 - `status` reports installation, repository activation and delivery separately without mutating state
@@ -146,10 +145,9 @@ it does not localize the CLI lifecycle card.
 - `disable` writes a supported repository-local opt-out while retaining global capability and durable control state
 - `uninstall` previews and, only with `--confirm`, applies a selected global removal through supported native/owned operations
 - `opencode-repo` writes durable AGDF control configuration and templates under `.agdf/control/`; it does not copy a second OpenCode runtime surface
-- `both` writes the Codex repository-local marketplace plus the Copilot-facing repository files
 - `config` writes or updates only `.agdf/control/config.json` for an already installed plugin or an existing repository
 
-The `codex` and `claude` commands install from the complete plugin built into the released
+The `codex`, `claude` and `copilot` commands install from the complete plugin built into the released
 `create-agdf` package. They atomically stage it under an AGDF-owned user-data marketplace, register
 that stable local path through the host CLI and verify the exposed version. Source `plugin/` therefore
 contains no generated runtime bytes and the source checkout exposes no installable root marketplace.
@@ -159,7 +157,7 @@ checkout, npm cache, PATH or registry. Rerunning either command performs the exp
 migrates only the exact known legacy AGDF GitHub marketplace; foreign same-name registrations fail
 closed and failed host operations restore the prior owned stage.
 
-If the target repository already has an `AGENTS.md`, `create-agdf` preserves it and writes `AGENTS.agdf.md` instead of replacing your existing instructions. Merge the AGDF fragment into your current `AGENTS.md` when you want Copilot to load both instruction sets. The generated `.github/copilot-instructions.md` keeps Copilot pointed at `AGENTS.md`, `.github/skills/` and `.agdf/control/` without duplicating the full AGDF rule model. Use `--force` only when you explicitly want to overwrite generated files.
+The Copilot installer does not create, rewrite or remove repository files. Existing `AGENTS.md`, `.github/` and `.agdf/control/` content remains untouched. Use `init` separately when a repository should own surface-neutral durable AGDF control state.
 
 Use the `codex-repo` target when AGDF should be available only inside one repository instead of being installed as a personal/global Codex plugin.
 

package/generated/plugins/agdf/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agdf",
-  "version": "0.13.8",
+  "version": "0.14.1",
   "description": "AI Governance & Delivery Framework (AGDF) is a governance framework for agentic work. Its first implementation provides a control layer for governed AI-assisted software delivery. It combines workflow skills, explicit gates, control templates and machine-readable repository checks to keep work aligned with approved scope and make evidence a prerequisite for consequential gate transitions. Supported workflows include brownfield analysis, task-plan review, QA decisions, durable run state and auditable delivery closeout. AGDF is an independent open-source project, not a security sandbox, compliance certification or autonomous release system.",
   "keywords": [
     "agentic",

package/generated/plugins/agdf/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agdf",
-  "version": "0.13.8",
+  "version": "0.14.1",
   "description": "Control layer for governed AI-assisted delivery.",
   "author": {
     "name": "Arndt Gold",
@@ -30,7 +30,6 @@
     "websiteURL": "https://agdf.iself.eu",
     "privacyPolicyURL": "https://agdf.iself.eu/privacy",
     "termsOfServiceURL": "https://agdf.iself.eu/terms",
-    "supportURL": "https://agdf.iself.eu/support",
     "composerIcon": "./assets/agdf-icon.svg",
     "logo": "./assets/agdf-logo.svg",
     "defaultPrompt": [
@@ -39,6 +38,5 @@
       "Close this delivery run with an auditable AGDF report."
     ],
     "brandColor": "#14B8A6"
-  },
-  "hooks": "./hooks/hooks.json"
+  }
 }

package/generated/plugins/agdf/hooks/copilot-hooks.json

@@ -0,0 +1,15 @@
+{
+  "version": 1,
+  "hooks": {
+    "sessionStart": [
+      {
+        "type": "command",
+        "command": "node \"${PLUGIN_ROOT}/runtime/agdf-session-check.js\"",
+        "env": {
+          "AGDF_SURFACE": "copilot"
+        },
+        "timeoutSec": 10
+      }
+    ]
+  }
+}

package/generated/plugins/agdf/meta/agdf-plugin.definition.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "id": "agdf",
-  "version": "0.13.8",
+  "version": "0.14.1",
   "displayName": "AI Governance & Delivery Framework",
   "developerName": "Arndt Gold",
   "description": "Control layer for governed AI-assisted delivery.",
@@ -50,7 +50,10 @@
   },
   "copilot": {
     "skillPrefix": "agdf-",
-    "runtimeContractFileName": "agdf-runtime-contract.md"
+    "runtimeContractFileName": "agdf-runtime-contract.md",
+    "pluginManifest": "plugin.json",
+    "skills": "copilot-skills/",
+    "hooks": "hooks/copilot-hooks.json"
   },
   "opencode": {
     "skillPrefix": "agdf-",
@@ -87,6 +90,7 @@
     "surfaces": {
       "codex": "native-hook-review",
       "claude": "exact-command-rule",
+      "copilot": "plugin-hook-review",
       "opencode": "plugin-internal",
       "portable-skills": "manual-external-required"
     }
@@ -143,6 +147,21 @@
         "authorizationPath": "exact_text",
         "technicalPermissionOwner": "claude_host"
       },
+      "copilot": {
+        "questionAdapter": "exact_text",
+        "availability": "always",
+        "gateSafety": "wait_for_deliberate_user_input",
+        "explicitOutcomes": [
+          "approve",
+          "revise",
+          "decline",
+          "cancel"
+        ],
+        "approvalValueTransport": "exact_option_value",
+        "waitSafety": "deliberate_no_auto_resolution",
+        "authorizationPath": "exact_text",
+        "technicalPermissionOwner": "copilot_host"
+      },
       "opencode": {
         "questionAdapter": "question",
         "availability": "when_permission_question_allows",

package/generated/plugins/agdf/plugin.json

@@ -0,0 +1,22 @@
+{
+  "name": "agdf",
+  "version": "0.14.1",
+  "description": "Control layer for governed AI-assisted delivery.",
+  "author": {
+    "name": "Arndt Gold",
+    "url": "https://agdf.iself.eu"
+  },
+  "homepage": "https://agdf.iself.eu",
+  "repository": "https://github.com/arndtgold/ai-native-governance-delivery-framework",
+  "license": "Apache-2.0",
+  "keywords": [
+    "agentic",
+    "governance",
+    "delivery",
+    "ai-native",
+    "brownfield"
+  ],
+  "category": "Productivity",
+  "skills": "copilot-skills/",
+  "hooks": "hooks/copilot-hooks.json"
+}

package/generated/plugins/agdf/runtime/agdf-local.js

@@ -12,7 +12,7 @@ const manifest = JSON.parse(readFileSync(new URL("./runtime-manifest.json", impo
 process.exitCode = runLocalValidator({
   runtimeRoot,
   pluginRoot,
-  expectedPluginRoot: process.env.CLAUDE_PLUGIN_ROOT || undefined,
+  expectedPluginRoot: process.env.CLAUDE_PLUGIN_ROOT || process.env.PLUGIN_ROOT || undefined,
   expectedVersion: manifest.version,
   surface: process.env.AGDF_SURFACE || "plugin",
 }, process.argv.slice(2));

package/generated/plugins/agdf/runtime/agdf-session-check.js

@@ -15,7 +15,7 @@ if (process.argv.length !== 2) {
   process.exitCode = 2;
 } else {
   const surface = process.env.AGDF_SURFACE
-    || (process.env.CLAUDE_PLUGIN_ROOT ? "claude" : process.env.PLUGIN_ROOT ? "codex" : "");
+    || (process.env.CLAUDE_PLUGIN_ROOT ? "claude" : process.env.COPILOT_PLUGIN_DATA ? "copilot" : process.env.PLUGIN_ROOT ? "codex" : "");
   const dataRoot = process.env.AGDF_DATA_DIR
     || (process.platform === "darwin"
       ? join(homedir(), "Library", "Application Support", "agdf")
@@ -23,7 +23,7 @@ if (process.argv.length !== 2) {
         ? join(process.env.LOCALAPPDATA || process.env.APPDATA || join(homedir(), "AppData", "Local"), "agdf")
         : join(process.env.XDG_DATA_HOME || join(homedir(), ".local", "share"), "agdf"));
   let consentEnabled = false;
-  if (["codex", "claude", "opencode"].includes(surface)) {
+  if (["codex", "claude", "copilot", "opencode"].includes(surface)) {
     try {
       const receipt = JSON.parse(readFileSync(join(dataRoot, "runtime-checks", `${surface}.json`), "utf8"));
       consentEnabled = receipt?.schema_version === 1
@@ -31,7 +31,7 @@ if (process.argv.length !== 2) {
         && receipt?.capability_id === "automatic-runtime-checks"
         && receipt?.surface === surface
         && receipt?.requested_state === "enabled";
-      if (consentEnabled && ["codex", "claude"].includes(surface)) {
+      if (consentEnabled && ["codex", "claude", "copilot"].includes(surface)) {
         const pluginRoot = fileURLToPath(new URL("../", import.meta.url));
         const manifest = JSON.parse(readFileSync(new URL("./runtime-manifest.json", import.meta.url), "utf8"));
         const definition = JSON.parse(readFileSync(new URL("../meta/agdf-plugin.definition.json", import.meta.url), "utf8"));
@@ -74,7 +74,7 @@ if (process.argv.length !== 2) {
       configHint = "Project config: .agdf/control/config.json is invalid. Run the surface-local doctor command manually.";
     }
   }
-  console.log([
+  const additionalContext = [
     "AGDF active.",
     "",
     message,
@@ -87,6 +87,11 @@ if (process.argv.length !== 2) {
     `- ${join(pluginRoot, "meta", "agdf-agent-router.md")}`,
     `- ${join(pluginRoot, "meta", "agdf-constitution.md")}`,
     `- ${join(pluginRoot, "meta", "agdf-runtime-contract.md")}`,
-  ].join("\n"));
+  ].join("\n");
+  if (surface === "copilot") {
+    console.log(JSON.stringify({ additionalContext }));
+  } else {
+    console.log(additionalContext);
+  }
   process.exitCode = 0;
 }

package/generated/plugins/agdf/runtime/create-agdf/generated/plugins/agdf/meta/agdf-plugin.definition.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "id": "agdf",
-  "version": "0.13.8",
+  "version": "0.14.1",
   "displayName": "AI Governance & Delivery Framework",
   "developerName": "Arndt Gold",
   "description": "Control layer for governed AI-assisted delivery.",
@@ -50,7 +50,10 @@
   },
   "copilot": {
     "skillPrefix": "agdf-",
-    "runtimeContractFileName": "agdf-runtime-contract.md"
+    "runtimeContractFileName": "agdf-runtime-contract.md",
+    "pluginManifest": "plugin.json",
+    "skills": "copilot-skills/",
+    "hooks": "hooks/copilot-hooks.json"
   },
   "opencode": {
     "skillPrefix": "agdf-",
@@ -87,6 +90,7 @@
     "surfaces": {
       "codex": "native-hook-review",
       "claude": "exact-command-rule",
+      "copilot": "plugin-hook-review",
       "opencode": "plugin-internal",
       "portable-skills": "manual-external-required"
     }
@@ -143,6 +147,21 @@
         "authorizationPath": "exact_text",
         "technicalPermissionOwner": "claude_host"
       },
+      "copilot": {
+        "questionAdapter": "exact_text",
+        "availability": "always",
+        "gateSafety": "wait_for_deliberate_user_input",
+        "explicitOutcomes": [
+          "approve",
+          "revise",
+          "decline",
+          "cancel"
+        ],
+        "approvalValueTransport": "exact_option_value",
+        "waitSafety": "deliberate_no_auto_resolution",
+        "authorizationPath": "exact_text",
+        "technicalPermissionOwner": "copilot_host"
+      },
       "opencode": {
         "questionAdapter": "question",
         "availability": "when_permission_question_allows",

package/generated/plugins/agdf/runtime/create-agdf/lib/cli/command-registry.js

@@ -13,15 +13,14 @@ export const commandRegistry = Object.freeze([
   command("codex", { preferred: [""], scaffold: [""] }),
   command("codex-repo", { preferred: [""], scaffold: [""] }),
   command("claude", { preferred: [""], scaffold: [""] }),
-  command("copilot", { preferred: [""], scaffold: [""] }),
+  command("copilot", { preferred: [""] }),
   command("opencode", { preferred: [""], scaffold: [""] }),
   command("opencode-status", { preferred: [""], scaffold: [""] }),
   command("status", { preferred: [" [--surface <surface>] [--run <run_id>] [--json]"] }),
-  command("runtime-checks", { preferred: [" <status|enable|manual> --surface <codex|claude|opencode> [--json]"] }),
+  command("runtime-checks", { preferred: [" <status|enable|manual> --surface <codex|claude|copilot|opencode> [--json]"] }),
   command("disable", { preferred: [" --surface <surface> [--scope repository] [--dir <path>]"] }),
   command("uninstall", { preferred: [" --surface <surface> --scope global [--confirm]"] }),
   command("opencode-repo", { preferred: [""], scaffold: [""] }),
-  command("both", { scaffold: [""] }),
   command("init", { preferred: [""], scaffold: [""] }),
   command("config", { scaffold: [" --language de"] }),
   command("doctor", { local: [""], scaffold: [""], legacy: [" --json"] }),
@@ -66,11 +65,11 @@ export function validateCommandOptions(options) {
     throw new Error("uninstall requires explicit --scope global");
   }
   if (options.confirm && options.target !== "uninstall") throw new Error("--confirm is supported only by uninstall");
-  if (options.runtimeChecksDecision && !["codex", "claude", "opencode"].includes(options.target)) {
-    throw new Error("--runtime-checks is supported only by codex, claude and opencode installation commands");
+  if (options.runtimeChecksDecision && !["codex", "claude", "copilot", "opencode"].includes(options.target)) {
+    throw new Error("--runtime-checks is supported only by codex, claude, copilot and opencode installation commands");
   }
-  if (options.target === "runtime-checks" && !["codex", "claude", "opencode"].includes(options.surface)) {
-    throw new Error("runtime-checks requires --surface codex, claude or opencode");
+  if (options.target === "runtime-checks" && !["codex", "claude", "copilot", "opencode"].includes(options.surface)) {
+    throw new Error("runtime-checks requires --surface codex, claude, copilot or opencode");
   }
   if (options.approvalEnvelope && options.target !== "gate-check") throw new Error("--approval-envelope is supported only by gate-check");
   if (options.approvalEnvelope && (options.json || options.statusCard || options.allActive)) {

package/generated/plugins/agdf/runtime/create-agdf/lib/runtime-check-consent/contract.js

@@ -32,6 +32,7 @@ export function validateRuntimeCheckCapability(capability) {
   }
   const surfaces = capability.surfaces ?? {};
   if (surfaces.codex !== "native-hook-review" || surfaces.claude !== "exact-command-rule"
+      || surfaces.copilot !== "plugin-hook-review"
       || surfaces.opencode !== "plugin-internal"
       || surfaces["portable-skills"] !== "manual-external-required") {
     throw new Error("AGDF_RUNTIME_CHECK_CAPABILITY_INVALID: surface contract");
@@ -41,7 +42,7 @@ export function validateRuntimeCheckCapability(capability) {
 
 export function runtimeCheckCapabilityIdentity({ capability, surface, runtimeDigest, sourceDigest, command }) {
   validateRuntimeCheckCapability(capability);
-  if (!["codex", "claude", "opencode"].includes(surface)) throw new Error("AGDF_RUNTIME_CHECK_SURFACE_INVALID");
+  if (!["codex", "claude", "copilot", "opencode"].includes(surface)) throw new Error("AGDF_RUNTIME_CHECK_SURFACE_INVALID");
   for (const [name, value] of Object.entries({ runtimeDigest, sourceDigest })) {
     if (typeof value !== "string" || !/^[a-f0-9]{64}$/.test(value)) throw new Error(`AGDF_RUNTIME_CHECK_IDENTITY_INVALID: ${name}`);
   }
@@ -59,6 +60,7 @@ export function runtimeCheckCapabilityIdentity({ capability, surface, runtimeDig
 
 export function fixedRuntimeCheckCommand(surface, pluginRoot, platform = process.platform) {
   if (surface === "opencode") return "plugin:agdf:automatic-runtime-checks";
+  if (surface === "copilot") return 'node "${PLUGIN_ROOT}/runtime/agdf-session-check.js"';
   if (surface === "codex" || surface === "claude") {
     return platform === "win32"
       ? "node \"$([Environment]::GetEnvironmentVariable('PLUGIN_ROOT') + [Environment]::GetEnvironmentVariable('CLAUDE_PLUGIN_ROOT'))\\runtime\\agdf-session-check.js\""

package/generated/plugins/agdf/runtime/create-agdf/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agdf/local-validator-runtime",
-  "version": "0.13.8",
+  "version": "0.14.1",
   "private": true,
   "type": "module"
 }

package/generated/plugins/agdf/runtime/runtime-manifest.json

@@ -2,7 +2,7 @@
   "schema_version": "1",
   "generated": true,
   "source": "create-agdf/cli",
-  "version": "0.13.8",
+  "version": "0.14.1",
   "entrypoint": "create-agdf/bin/agdf-validator.js",
-  "digest": "bd47fd63c45977fe2dfa4ab6d25e003d930ebf4b68c76836d478869c5bcc13da"
+  "digest": "724174653ad423b30654aa64a34e1699a18cc67037172c10aa249d1d61087116"
 }

package/generated/plugins/agdf/scripts/check-runtime-integrity.mjs

@@ -96,6 +96,8 @@ const codexSourceMarketplacePath = sourceMode ? join(repoRoot, ".agents", "plugi
 const claudeSourceMarketplacePath = sourceMode ? join(repoRoot, ".claude-plugin", "marketplace.json") : null;
 const codexPluginPath = join(pluginRoot, ".codex-plugin", "plugin.json");
 const claudePluginPath = join(pluginRoot, ".claude-plugin", "plugin.json");
+const copilotPluginPath = join(pluginRoot, "plugin.json");
+const copilotHooksPath = join(pluginRoot, "hooks", "copilot-hooks.json");
 const installationProvenancePath = join(pluginRoot, ".agdf-installation.json");
 const legacyLocalInstallMarkerPath = join(pluginRoot, ".agdf-local-install.json");
 const pluginDefinitionPath = join(pluginRoot, "meta", "agdf-plugin.definition.json");
@@ -632,6 +634,9 @@ if (pluginDefinition) {
   if (pluginDefinition.codex?.logo !== "./assets/agdf-logo.svg") failures.push("canonical AGDF plugin definition Codex logo must point to ./assets/agdf-logo.svg");
   if (pluginDefinition.claude?.agentRouter !== "meta/agdf-agent-router.md") failures.push("canonical AGDF plugin definition Claude agent router must point to meta/agdf-agent-router.md");
   if (pluginDefinition.copilot?.skillPrefix !== "agdf-") failures.push("canonical AGDF plugin definition Copilot skill prefix must be agdf-");
+  if (pluginDefinition.copilot?.pluginManifest !== "plugin.json" || pluginDefinition.copilot?.skills !== "copilot-skills/" || pluginDefinition.copilot?.hooks !== "hooks/copilot-hooks.json") {
+    failures.push("canonical AGDF plugin definition Copilot paths must point to the generated root manifest, prefixed skills and hook config");
+  }
   if (pluginDefinition.opencode?.skillPrefix !== "agdf-") failures.push("canonical AGDF plugin definition OpenCode skill prefix must be agdf-");
   if (pluginDefinition.opencode?.globalSkillPrefix !== "agdf-global-") failures.push("canonical AGDF plugin definition OpenCode global skill prefix must be agdf-global-");
   if (pluginDefinition.opencode?.runtimeContractFileName !== "agdf-runtime-contract.md") failures.push("canonical AGDF plugin definition OpenCode runtime contract filename must be agdf-runtime-contract.md");
@@ -651,6 +656,7 @@ if (pluginDefinition) {
   for (const [surface, adapter, safety] of [
     ["codex", "request_user_input", "omit_auto_resolution"],
     ["claude", "AskUserQuestion", "no_timeout_or_hook_supplied_answer"],
+    ["copilot", "exact_text", "wait_for_deliberate_user_input"],
     ["opencode", "question", "preserve_explicit_deny"],
     ["fallback", "exact_text", "wait_for_deliberate_user_input"],
   ]) {
@@ -658,7 +664,7 @@ if (pluginDefinition) {
     if (interaction?.questionAdapter !== adapter || interaction?.gateSafety !== safety || !interaction?.technicalPermissionOwner) {
       failures.push(`canonical AGDF plugin definition ${surface} interaction mapping must declare adapter, gate safety and technical permission owner`);
     }
-    const expectedOutcomes = surface === "fallback" ? ["approve", "revise", "decline", "cancel"] : ["approve", "revise", "decline"];
+    const expectedOutcomes = ["copilot", "fallback"].includes(surface) ? ["approve", "revise", "decline", "cancel"] : ["approve", "revise", "decline"];
     if (JSON.stringify(interaction?.explicitOutcomes) !== JSON.stringify(expectedOutcomes)) {
       failures.push(`canonical AGDF plugin definition ${surface} interaction mapping must preserve stable explicit outcome order`);
     }
@@ -784,13 +790,13 @@ if (codexPlugin && pluginDefinition) {
   if (codexPlugin.interface?.websiteURL !== pluginDefinition.homepage) failures.push("Codex plugin website URL must match canonical AGDF plugin definition");
   if (codexPlugin.interface?.privacyPolicyURL !== pluginDefinition.publicDistribution?.urls?.privacy) failures.push("Codex plugin privacy URL must match canonical public distribution definition");
   if (codexPlugin.interface?.termsOfServiceURL !== pluginDefinition.publicDistribution?.urls?.terms) failures.push("Codex plugin terms URL must match canonical public distribution definition");
-  if (codexPlugin.interface?.supportURL !== pluginDefinition.publicDistribution?.urls?.support) failures.push("Codex plugin support URL must match canonical public distribution definition");
+  if (Object.hasOwn(codexPlugin.interface ?? {}, "supportURL")) failures.push("Codex plugin manifest must omit unsupported interface.supportURL metadata");
   if (codexPlugin.interface?.composerIcon !== pluginDefinition.codex?.composerIcon) failures.push("Codex plugin composer icon must match canonical AGDF plugin definition");
   if (codexPlugin.interface?.logo !== pluginDefinition.codex?.logo) failures.push("Codex plugin logo must match canonical AGDF plugin definition");
   if (codexPlugin.interface?.brandColor !== pluginDefinition.brandColor) failures.push("Codex plugin brand color must match canonical AGDF plugin definition");
   if (JSON.stringify(codexPlugin.interface?.capabilities) !== JSON.stringify(pluginDefinition.codex?.capabilities)) failures.push("Codex plugin capabilities must match canonical AGDF plugin definition");
   if (JSON.stringify(codexPlugin.interface?.defaultPrompt) !== JSON.stringify(pluginDefinition.codex?.defaultPrompt)) failures.push("Codex plugin default prompts must match canonical AGDF plugin definition");
-  if (codexPlugin.hooks !== `./${pluginDefinition.codex?.hooks}`) failures.push("Codex plugin manifest hooks must explicitly point to ./hooks/hooks.json");
+  if (Object.hasOwn(codexPlugin, "hooks")) failures.push("Codex plugin manifest must rely on default hooks/hooks.json discovery");
 }
 
 if (claudePlugin && pluginDefinition) {
@@ -877,6 +883,28 @@ if (pluginDefinition) {
   if (capability?.surfaces?.["portable-skills"] !== "manual-external-required") {
     failures.push("Portable public Skills profile must not claim automatic runtime checks");
   }
+  if (capability?.surfaces?.copilot !== "plugin-hook-review") {
+    failures.push("Copilot automatic runtime checks must remain subject to plugin hook review");
+  }
+}
+
+if (!sourceMode) {
+  const copilotPlugin = isFile(copilotPluginPath) ? readJson(copilotPluginPath, "Copilot plugin manifest") : null;
+  const copilotHooks = isFile(copilotHooksPath) ? readJson(copilotHooksPath, "Copilot plugin hooks") : null;
+  if (!copilotPlugin) failures.push("installed runtime plugin must include root plugin.json for GitHub Copilot");
+  if (copilotPlugin && (copilotPlugin.name !== "agdf" || copilotPlugin.version !== pluginDefinition?.version
+      || copilotPlugin.skills !== "copilot-skills/" || copilotPlugin.hooks !== "hooks/copilot-hooks.json")) {
+    failures.push("Copilot root plugin manifest must preserve AGDF identity, version and generated component paths");
+  }
+  const copilotSessionStart = copilotHooks?.hooks?.sessionStart;
+  if (!Array.isArray(copilotSessionStart) || !copilotSessionStart.some((hook) => hook?.type === "command"
+      && hook?.command === 'node "${PLUGIN_ROOT}/runtime/agdf-session-check.js"'
+      && hook?.env?.AGDF_SURFACE === "copilot")) {
+    failures.push("Copilot hooks must declare the fixed consent-bound AGDF sessionStart command");
+  }
+  for (const skill of pluginDefinition?.skillSet ?? []) {
+    assertFile(join(pluginRoot, "copilot-skills", `agdf-${skill.slug}`, "SKILL.md"), `Copilot prefixed plugin skill agdf-${skill.slug}`);
+  }
 }
 
 if (isFile(sessionStartHookPath)) {

package/generated/plugins/agdf/submission/openai/availability.md

@@ -1,6 +1,6 @@
 # Availability Decision Record
 
-- release: `0.13.8`
+- release: `0.14.1`
 - decision_state: `pending`
 - decision_owner: verified publisher
 - countries: not selected

package/generated/plugins/agdf/submission/openai/capability-matrix.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.13.8",
+  "releaseVersion": "0.14.1",
   "evidenceStates": [
     "common",
     "codex-specific",

package/generated/plugins/agdf/submission/openai/release-notes.md

@@ -1,4 +1,4 @@
-# AGDF 0.13.8 — Initial OpenAI Public Plugin Candidate
+# AGDF 0.14.1 — Initial OpenAI Public Plugin Candidate
 
 This candidate packages the canonical AGDF workflow skills for public discovery in ChatGPT and
 Codex. It helps users assess delivery fit, preserve explicit human approvals, inspect existing-system

package/generated/plugins/agdf/submission/openai/reviewer-cases.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.13.8",
+  "releaseVersion": "0.14.1",
   "cases": [
     {
       "id": "positive-proportional-fit",

package/generated/submissions/openai/agdf/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agdf",
-  "version": "0.13.8",
+  "version": "0.14.1",
   "description": "Control layer for governed AI-assisted delivery.",
   "author": {
     "name": "Arndt Gold",
@@ -30,7 +30,6 @@
     "websiteURL": "https://agdf.iself.eu",
     "privacyPolicyURL": "https://agdf.iself.eu/privacy",
     "termsOfServiceURL": "https://agdf.iself.eu/terms",
-    "supportURL": "https://agdf.iself.eu/support",
     "composerIcon": "./assets/agdf-icon.svg",
     "logo": "./assets/agdf-logo.svg",
     "defaultPrompt": [

package/generated/submissions/openai/agdf/meta/agdf-plugin.definition.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "id": "agdf",
-  "version": "0.13.8",
+  "version": "0.14.1",
   "displayName": "AI Governance & Delivery Framework",
   "developerName": "Arndt Gold",
   "description": "Control layer for governed AI-assisted delivery.",
@@ -50,7 +50,10 @@
   },
   "copilot": {
     "skillPrefix": "agdf-",
-    "runtimeContractFileName": "agdf-runtime-contract.md"
+    "runtimeContractFileName": "agdf-runtime-contract.md",
+    "pluginManifest": "plugin.json",
+    "skills": "copilot-skills/",
+    "hooks": "hooks/copilot-hooks.json"
   },
   "opencode": {
     "skillPrefix": "agdf-",
@@ -87,6 +90,7 @@
     "surfaces": {
       "codex": "native-hook-review",
       "claude": "exact-command-rule",
+      "copilot": "plugin-hook-review",
       "opencode": "plugin-internal",
       "portable-skills": "manual-external-required"
     }
@@ -143,6 +147,21 @@
         "authorizationPath": "exact_text",
         "technicalPermissionOwner": "claude_host"
       },
+      "copilot": {
+        "questionAdapter": "exact_text",
+        "availability": "always",
+        "gateSafety": "wait_for_deliberate_user_input",
+        "explicitOutcomes": [
+          "approve",
+          "revise",
+          "decline",
+          "cancel"
+        ],
+        "approvalValueTransport": "exact_option_value",
+        "waitSafety": "deliberate_no_auto_resolution",
+        "authorizationPath": "exact_text",
+        "technicalPermissionOwner": "copilot_host"
+      },
       "opencode": {
         "questionAdapter": "question",
         "availability": "when_permission_question_allows",

package/generated/submissions/openai/agdf/submission/openai/availability.md

@@ -1,6 +1,6 @@
 # Availability Decision Record
 
-- release: `0.13.8`
+- release: `0.14.1`
 - decision_state: `pending`
 - decision_owner: verified publisher
 - countries: not selected

package/generated/submissions/openai/agdf/submission/openai/capability-matrix.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.13.8",
+  "releaseVersion": "0.14.1",
   "evidenceStates": [
     "common",
     "codex-specific",