create-agdf 0.13.8 → 0.14.2

package/README.md

@@ -24,10 +24,12 @@ Use a different target when Codex is not your agent surface:
 | Surface or goal | Start with | What it gives you |
 |---|---|---|
 | Claude Code | `npx --yes @agdf/cli@latest claude` | The AGDF plugin for Claude Code. |
+| GitHub Copilot | `npx --yes @agdf/cli@latest copilot` | The AGDF plugin with prefixed skills and a consent-bound session hook. |
 | OpenCode, user-wide discovery | `npx --yes @agdf/cli@latest opencode` | The npm plugin and global native skills; repository governance remains opt-in. |
 | OpenCode, one repository | `npx --yes @agdf/cli@latest opencode-repo` | Durable control configuration that activates the once-installed global runtime. |
+| Durable control state in an existing setup | `npx --yes @agdf/cli@latest init` | Live `.agdf/control/` state when the repository explicitly needs it. |
 
-The runtime-bearing `codex`, `claude` and `opencode` installers ask before enabling narrow automatic
+The runtime-bearing `codex`, `claude`, `copilot` and `opencode` installers ask before enabling narrow automatic
 local checks on an interactive terminal. The choices are `enable`, `manual` and `cancel`; enablement
 is never preselected. Every interactive installation or update asks again. A previous choice is
 shown only as intent, never as proof of effective host permission. The prompt shows the target AGDF
@@ -51,8 +53,6 @@ from AGDF gate approval. A receipt alone never proves effective host permission.
 Claude deny/ask precedence and all explicit OpenCode permissions remain authoritative. The public
 Skills-only OpenAI candidate has no runtime or hooks and therefore remains manual/external for this
 capability.
-| GitHub Copilot | `npx --yes @agdf/cli@latest copilot` | Repository instructions, visible skills and control templates. |
-| Durable control state in an existing setup | `npx --yes @agdf/cli@latest init` | Live `.agdf/control/` state when the repository explicitly needs it. |
 
 For prerequisites, all surface-specific flows and operational boundaries, use the authoritative [installation guide](../INSTALL.md). Do not run `init` merely to ask a fresh question: an agent can first clarify the request and ask for `Approval: UR` when durable control state is needed.
 
@@ -66,6 +66,7 @@ Installation, activation and explicit lifecycle changes:
 npx --yes @agdf/cli@latest codex
 npx --yes @agdf/cli@latest codex-repo
 npx --yes @agdf/cli@latest claude
+npx --yes @agdf/cli@latest copilot
 npx --yes @agdf/cli@latest opencode
 npx --yes @agdf/cli@latest opencode-status
 npx --yes @agdf/cli@latest opencode-repo
@@ -104,11 +105,9 @@ Backward-compatible scaffold usage:
 npm create agdf@latest -- codex
 npm create agdf@latest -- codex-repo
 npm create agdf@latest -- claude
-npm create agdf@latest -- copilot
 npm create agdf@latest -- opencode
 npm create agdf@latest -- opencode-status
 npm create agdf@latest -- opencode-repo
-npm create agdf@latest -- both
 npm create agdf@latest -- init
 npm create agdf@latest -- config --language en
 npm create agdf@latest -- doctor
@@ -138,7 +137,7 @@ it does not localize the CLI lifecycle card.
 - `codex` installs the AGDF plugin globally for Codex
 - `codex-repo` writes a repository-local Codex marketplace under `.agents/plugins/` and a local AGDF plugin copy under `plugins/agdf/`
 - `claude` installs the AGDF plugin globally for Claude Code
-- `copilot` writes `AGENTS.md`, Copilot custom instructions under `.github/`, visible repository skills under `.github/skills/`, and AGDF control templates under `.agdf/control/`
+- `copilot` registers the AGDF-owned local Marketplace and installs `agdf@agdf` through Copilot CLI; when `copilot` is not on `PATH`, it runs the pinned official `@github/copilot` CLI package through npm, then verifies AGDF in Copilot's own plugin list
 - `opencode` installs the AGDF npm plugin and ten native skills as a user-wide OpenCode surface
 - `opencode-status` reports OpenCode global config, package loadability, global native-skill completeness, installed host/plugin-SDK versions, declaration-level support for AGDF's two experimental hooks, durable repository activation, legacy compatibility and observable session signals
 - `status` reports installation, repository activation and delivery separately without mutating state
@@ -146,11 +145,12 @@ it does not localize the CLI lifecycle card.
 - `disable` writes a supported repository-local opt-out while retaining global capability and durable control state
 - `uninstall` previews and, only with `--confirm`, applies a selected global removal through supported native/owned operations
 - `opencode-repo` writes durable AGDF control configuration and templates under `.agdf/control/`; it does not copy a second OpenCode runtime surface
-- `both` writes the Codex repository-local marketplace plus the Copilot-facing repository files
 - `config` writes or updates only `.agdf/control/config.json` for an already installed plugin or an existing repository
 
-The `codex` and `claude` commands install from the complete plugin built into the released
-`create-agdf` package. They atomically stage it under an AGDF-owned user-data marketplace, register
+The `codex` and `claude` commands install the complete shared plugin built into the released
+`create-agdf` package. The `copilot` command installs a dedicated generated profile containing only
+the Copilot manifest, prefixed skills, hook, required contracts and exact-version runtime. Every profile
+is rendered from the same canonical sources. The installers atomically stage their profile under an AGDF-owned user-data marketplace, register
 that stable local path through the host CLI and verify the exposed version. Source `plugin/` therefore
 contains no generated runtime bytes and the source checkout exposes no installable root marketplace.
 The staged plugin contains one installation-provenance marker and the shared exact-version runtime;
@@ -159,7 +159,11 @@ checkout, npm cache, PATH or registry. Rerunning either command performs the exp
 migrates only the exact known legacy AGDF GitHub marketplace; foreign same-name registrations fail
 closed and failed host operations restore the prior owned stage.
 
-If the target repository already has an `AGENTS.md`, `create-agdf` preserves it and writes `AGENTS.agdf.md` instead of replacing your existing instructions. Merge the AGDF fragment into your current `AGENTS.md` when you want Copilot to load both instruction sets. The generated `.github/copilot-instructions.md` keeps Copilot pointed at `AGENTS.md`, `.github/skills/` and `.agdf/control/` without duplicating the full AGDF rule model. Use `--force` only when you explicitly want to overwrite generated files.
+Copilot staging uses the independent path `<AGDF data directory>/marketplaces/agdf-copilot`. This
+prevents Copilot updates and rollbacks from replacing the shared Codex and Claude payload while the
+host-facing Marketplace identity remains `agdf` and the install identity remains `agdf@agdf`.
+
+The Copilot installer does not create, rewrite or remove repository files. Existing `AGENTS.md`, `.github/` and `.agdf/control/` content remains untouched. Use `init` separately when a repository should own surface-neutral durable AGDF control state.
 
 Use the `codex-repo` target when AGDF should be available only inside one repository instead of being installed as a personal/global Codex plugin.
 

package/generated/plugins/agdf/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agdf",
-  "version": "0.13.8",
+  "version": "0.14.2",
   "description": "AI Governance & Delivery Framework (AGDF) is a governance framework for agentic work. Its first implementation provides a control layer for governed AI-assisted software delivery. It combines workflow skills, explicit gates, control templates and machine-readable repository checks to keep work aligned with approved scope and make evidence a prerequisite for consequential gate transitions. Supported workflows include brownfield analysis, task-plan review, QA decisions, durable run state and auditable delivery closeout. AGDF is an independent open-source project, not a security sandbox, compliance certification or autonomous release system.",
   "keywords": [
     "agentic",

package/generated/plugins/agdf/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agdf",
-  "version": "0.13.8",
+  "version": "0.14.2",
   "description": "Control layer for governed AI-assisted delivery.",
   "author": {
     "name": "Arndt Gold",
@@ -30,7 +30,6 @@
     "websiteURL": "https://agdf.iself.eu",
     "privacyPolicyURL": "https://agdf.iself.eu/privacy",
     "termsOfServiceURL": "https://agdf.iself.eu/terms",
-    "supportURL": "https://agdf.iself.eu/support",
     "composerIcon": "./assets/agdf-icon.svg",
     "logo": "./assets/agdf-logo.svg",
     "defaultPrompt": [
@@ -39,6 +38,5 @@
       "Close this delivery run with an auditable AGDF report."
     ],
     "brandColor": "#14B8A6"
-  },
-  "hooks": "./hooks/hooks.json"
+  }
 }

package/generated/plugins/agdf/meta/agdf-plugin.definition.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "id": "agdf",
-  "version": "0.13.8",
+  "version": "0.14.2",
   "displayName": "AI Governance & Delivery Framework",
   "developerName": "Arndt Gold",
   "description": "Control layer for governed AI-assisted delivery.",
@@ -50,7 +50,10 @@
   },
   "copilot": {
     "skillPrefix": "agdf-",
-    "runtimeContractFileName": "agdf-runtime-contract.md"
+    "runtimeContractFileName": "agdf-runtime-contract.md",
+    "pluginManifest": "plugin.json",
+    "skills": "copilot-skills/",
+    "hooks": "hooks/copilot-hooks.json"
   },
   "opencode": {
     "skillPrefix": "agdf-",
@@ -87,6 +90,7 @@
     "surfaces": {
       "codex": "native-hook-review",
       "claude": "exact-command-rule",
+      "copilot": "plugin-hook-review",
       "opencode": "plugin-internal",
       "portable-skills": "manual-external-required"
     }
@@ -143,6 +147,21 @@
         "authorizationPath": "exact_text",
         "technicalPermissionOwner": "claude_host"
       },
+      "copilot": {
+        "questionAdapter": "exact_text",
+        "availability": "always",
+        "gateSafety": "wait_for_deliberate_user_input",
+        "explicitOutcomes": [
+          "approve",
+          "revise",
+          "decline",
+          "cancel"
+        ],
+        "approvalValueTransport": "exact_option_value",
+        "waitSafety": "deliberate_no_auto_resolution",
+        "authorizationPath": "exact_text",
+        "technicalPermissionOwner": "copilot_host"
+      },
       "opencode": {
         "questionAdapter": "question",
         "availability": "when_permission_question_allows",
@@ -292,6 +311,11 @@
         "installable": true,
         "machineValidation": "local_exact_version_digest"
       },
+      "copilot-runtime-plugin": {
+        "runtime": "required",
+        "installable": true,
+        "machineValidation": "local_exact_version_digest_inventory"
+      },
       "opencode-config-local": {
         "runtime": "config_local_package",
         "installable": true,

package/generated/plugins/agdf/meta/copilot-payload-baseline.json

@@ -0,0 +1,7 @@
+{
+  "schema_version": 1,
+  "profile_id": "copilot-runtime-plugin",
+  "max_files": 78,
+  "max_bytes": 539607,
+  "rationale": "Reviewed Copilot-only manifest, ten prefixed skills, required contracts, exact-version runtime and evidence-plane separation. Any further increase requires review."
+}

package/generated/plugins/agdf/runtime/agdf-local.js

@@ -12,7 +12,7 @@ const manifest = JSON.parse(readFileSync(new URL("./runtime-manifest.json", impo
 process.exitCode = runLocalValidator({
   runtimeRoot,
   pluginRoot,
-  expectedPluginRoot: process.env.CLAUDE_PLUGIN_ROOT || undefined,
+  expectedPluginRoot: process.env.CLAUDE_PLUGIN_ROOT || process.env.PLUGIN_ROOT || undefined,
   expectedVersion: manifest.version,
   surface: process.env.AGDF_SURFACE || "plugin",
 }, process.argv.slice(2));

package/generated/plugins/agdf/runtime/agdf-session-check.js

@@ -15,7 +15,7 @@ if (process.argv.length !== 2) {
   process.exitCode = 2;
 } else {
   const surface = process.env.AGDF_SURFACE
-    || (process.env.CLAUDE_PLUGIN_ROOT ? "claude" : process.env.PLUGIN_ROOT ? "codex" : "");
+    || (process.env.CLAUDE_PLUGIN_ROOT ? "claude" : process.env.COPILOT_PLUGIN_DATA ? "copilot" : process.env.PLUGIN_ROOT ? "codex" : "");
   const dataRoot = process.env.AGDF_DATA_DIR
     || (process.platform === "darwin"
       ? join(homedir(), "Library", "Application Support", "agdf")
@@ -23,7 +23,7 @@ if (process.argv.length !== 2) {
         ? join(process.env.LOCALAPPDATA || process.env.APPDATA || join(homedir(), "AppData", "Local"), "agdf")
         : join(process.env.XDG_DATA_HOME || join(homedir(), ".local", "share"), "agdf"));
   let consentEnabled = false;
-  if (["codex", "claude", "opencode"].includes(surface)) {
+  if (["codex", "claude", "copilot", "opencode"].includes(surface)) {
     try {
       const receipt = JSON.parse(readFileSync(join(dataRoot, "runtime-checks", `${surface}.json`), "utf8"));
       consentEnabled = receipt?.schema_version === 1
@@ -31,7 +31,7 @@ if (process.argv.length !== 2) {
         && receipt?.capability_id === "automatic-runtime-checks"
         && receipt?.surface === surface
         && receipt?.requested_state === "enabled";
-      if (consentEnabled && ["codex", "claude"].includes(surface)) {
+      if (consentEnabled && ["codex", "claude", "copilot"].includes(surface)) {
         const pluginRoot = fileURLToPath(new URL("../", import.meta.url));
         const manifest = JSON.parse(readFileSync(new URL("./runtime-manifest.json", import.meta.url), "utf8"));
         const definition = JSON.parse(readFileSync(new URL("../meta/agdf-plugin.definition.json", import.meta.url), "utf8"));
@@ -74,7 +74,7 @@ if (process.argv.length !== 2) {
       configHint = "Project config: .agdf/control/config.json is invalid. Run the surface-local doctor command manually.";
     }
   }
-  console.log([
+  const additionalContext = [
     "AGDF active.",
     "",
     message,
@@ -87,6 +87,11 @@ if (process.argv.length !== 2) {
     `- ${join(pluginRoot, "meta", "agdf-agent-router.md")}`,
     `- ${join(pluginRoot, "meta", "agdf-constitution.md")}`,
     `- ${join(pluginRoot, "meta", "agdf-runtime-contract.md")}`,
-  ].join("\n"));
+  ].join("\n");
+  if (surface === "copilot") {
+    console.log(JSON.stringify({ additionalContext }));
+  } else {
+    console.log(additionalContext);
+  }
   process.exitCode = 0;
 }

package/generated/plugins/agdf/runtime/create-agdf/generated/plugins/agdf/meta/agdf-plugin.definition.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "id": "agdf",
-  "version": "0.13.8",
+  "version": "0.14.2",
   "displayName": "AI Governance & Delivery Framework",
   "developerName": "Arndt Gold",
   "description": "Control layer for governed AI-assisted delivery.",
@@ -50,7 +50,10 @@
   },
   "copilot": {
     "skillPrefix": "agdf-",
-    "runtimeContractFileName": "agdf-runtime-contract.md"
+    "runtimeContractFileName": "agdf-runtime-contract.md",
+    "pluginManifest": "plugin.json",
+    "skills": "copilot-skills/",
+    "hooks": "hooks/copilot-hooks.json"
   },
   "opencode": {
     "skillPrefix": "agdf-",
@@ -87,6 +90,7 @@
     "surfaces": {
       "codex": "native-hook-review",
       "claude": "exact-command-rule",
+      "copilot": "plugin-hook-review",
       "opencode": "plugin-internal",
       "portable-skills": "manual-external-required"
     }
@@ -143,6 +147,21 @@
         "authorizationPath": "exact_text",
         "technicalPermissionOwner": "claude_host"
       },
+      "copilot": {
+        "questionAdapter": "exact_text",
+        "availability": "always",
+        "gateSafety": "wait_for_deliberate_user_input",
+        "explicitOutcomes": [
+          "approve",
+          "revise",
+          "decline",
+          "cancel"
+        ],
+        "approvalValueTransport": "exact_option_value",
+        "waitSafety": "deliberate_no_auto_resolution",
+        "authorizationPath": "exact_text",
+        "technicalPermissionOwner": "copilot_host"
+      },
       "opencode": {
         "questionAdapter": "question",
         "availability": "when_permission_question_allows",
@@ -292,6 +311,11 @@
         "installable": true,
         "machineValidation": "local_exact_version_digest"
       },
+      "copilot-runtime-plugin": {
+        "runtime": "required",
+        "installable": true,
+        "machineValidation": "local_exact_version_digest_inventory"
+      },
       "opencode-config-local": {
         "runtime": "config_local_package",
         "installable": true,

package/generated/plugins/agdf/runtime/create-agdf/lib/cli/command-registry.js

@@ -13,15 +13,14 @@ export const commandRegistry = Object.freeze([
   command("codex", { preferred: [""], scaffold: [""] }),
   command("codex-repo", { preferred: [""], scaffold: [""] }),
   command("claude", { preferred: [""], scaffold: [""] }),
-  command("copilot", { preferred: [""], scaffold: [""] }),
+  command("copilot", { preferred: [""] }),
   command("opencode", { preferred: [""], scaffold: [""] }),
   command("opencode-status", { preferred: [""], scaffold: [""] }),
   command("status", { preferred: [" [--surface <surface>] [--run <run_id>] [--json]"] }),
-  command("runtime-checks", { preferred: [" <status|enable|manual> --surface <codex|claude|opencode> [--json]"] }),
+  command("runtime-checks", { preferred: [" <status|enable|manual> --surface <codex|claude|copilot|opencode> [--json]"] }),
   command("disable", { preferred: [" --surface <surface> [--scope repository] [--dir <path>]"] }),
   command("uninstall", { preferred: [" --surface <surface> --scope global [--confirm]"] }),
   command("opencode-repo", { preferred: [""], scaffold: [""] }),
-  command("both", { scaffold: [""] }),
   command("init", { preferred: [""], scaffold: [""] }),
   command("config", { scaffold: [" --language de"] }),
   command("doctor", { local: [""], scaffold: [""], legacy: [" --json"] }),
@@ -66,11 +65,11 @@ export function validateCommandOptions(options) {
     throw new Error("uninstall requires explicit --scope global");
   }
   if (options.confirm && options.target !== "uninstall") throw new Error("--confirm is supported only by uninstall");
-  if (options.runtimeChecksDecision && !["codex", "claude", "opencode"].includes(options.target)) {
-    throw new Error("--runtime-checks is supported only by codex, claude and opencode installation commands");
+  if (options.runtimeChecksDecision && !["codex", "claude", "copilot", "opencode"].includes(options.target)) {
+    throw new Error("--runtime-checks is supported only by codex, claude, copilot and opencode installation commands");
   }
-  if (options.target === "runtime-checks" && !["codex", "claude", "opencode"].includes(options.surface)) {
-    throw new Error("runtime-checks requires --surface codex, claude or opencode");
+  if (options.target === "runtime-checks" && !["codex", "claude", "copilot", "opencode"].includes(options.surface)) {
+    throw new Error("runtime-checks requires --surface codex, claude, copilot or opencode");
   }
   if (options.approvalEnvelope && options.target !== "gate-check") throw new Error("--approval-envelope is supported only by gate-check");
   if (options.approvalEnvelope && (options.json || options.statusCard || options.allActive)) {

package/generated/plugins/agdf/runtime/create-agdf/lib/runtime/local-validator.js

@@ -5,6 +5,7 @@ import process from "node:process";
 import {
   INSTALLATION_PROVENANCE_FILE,
   digestDirectory,
+  inspectCopilotPayloadInventory,
   inspectGeneratedRepositoryMarketplace,
   inspectInstallationProvenance,
   validateDistributionProfiles,
@@ -83,41 +84,52 @@ export function resolveLocalValidator(options) {
     }
     const codexManifest = readJson(join(pluginRoot, ".codex-plugin", "plugin.json"));
     const claudeManifest = readJson(join(pluginRoot, ".claude-plugin", "plugin.json"));
-    const pluginVersion = codexManifest?.version ?? null;
-    if (!codexManifest || !claudeManifest || claudeManifest.version !== definition.version) {
-      return { envelope: envelope("version_mismatch", options, { source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, distributionProfile: "runtime-plugin", provenanceStatus: "invalid", reason: "manifest_invalid" }) };
+    const copilotManifest = readJson(join(pluginRoot, "plugin.json"));
+    const copilotProfile = Boolean(copilotManifest && !codexManifest && !claudeManifest);
+    const distributionProfile = copilotProfile ? "copilot-runtime-plugin" : "runtime-plugin";
+    const pluginVersion = copilotProfile ? copilotManifest?.version ?? null : codexManifest?.version ?? null;
+    if (copilotProfile
+      ? copilotManifest.version !== definition.version
+      : (!codexManifest || !claudeManifest || claudeManifest.version !== definition.version)) {
+      return { envelope: envelope("version_mismatch", options, { source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, distributionProfile, provenanceStatus: "invalid", reason: "manifest_invalid" }) };
+    }
+    const copilotInventory = copilotProfile ? inspectCopilotPayloadInventory(pluginRoot, definition.version) : null;
+    if (copilotProfile && copilotInventory.status !== "matched") {
+      return { envelope: envelope("version_mismatch", options, { source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, distributionProfile, provenanceStatus: "invalid", reason: copilotInventory.reason }) };
     }
     const packageRoot = join(options.runtimeRoot, "create-agdf");
     if (!existsSync(packageRoot)) {
-      return { envelope: envelope("unavailable", options, { source: "plugin_bundle", pluginRoot, pluginVersion, distributionProfile: "runtime-plugin", reason: "runtime_missing" }) };
+      return { envelope: envelope("unavailable", options, { source: "plugin_bundle", pluginRoot, pluginVersion, distributionProfile, reason: "runtime_missing" }) };
     }
     const packageManifest = readJson(join(packageRoot, "package.json"));
     const observedVersion = packageManifest?.version ?? manifest.version ?? null;
     if (observedVersion !== options.expectedVersion || manifest.version !== options.expectedVersion) {
-      return { envelope: envelope("version_mismatch", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, distributionProfile: "runtime-plugin" }) };
+      return { envelope: envelope("version_mismatch", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, distributionProfile }) };
     }
     let observedDigest = null;
     try { observedDigest = digestDirectory(packageRoot); } catch {}
     if (!observedDigest || manifest.digest !== observedDigest) {
-      return { envelope: envelope("version_mismatch", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, runtimeDigest: observedDigest, distributionProfile: "runtime-plugin", reason: "runtime_digest_mismatch" }) };
+      return { envelope: envelope("version_mismatch", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, runtimeDigest: observedDigest, distributionProfile, reason: "runtime_digest_mismatch" }) };
     }
     const entrypoint = resolve(options.runtimeRoot, manifest.entrypoint ?? "");
     const entrypointRelative = relative(options.runtimeRoot, entrypoint);
     if (!manifest.entrypoint || entrypointRelative === ".." || entrypointRelative.startsWith(`..${sep}`) || isAbsolute(entrypointRelative)) {
-      return { envelope: envelope("version_mismatch", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, runtimeDigest: observedDigest, distributionProfile: "runtime-plugin", reason: "invalid_entrypoint" }) };
+      return { envelope: envelope("version_mismatch", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, runtimeDigest: observedDigest, distributionProfile, reason: "invalid_entrypoint" }) };
     }
     if (!existsSync(entrypoint)) {
-      return { envelope: envelope("unavailable", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, runtimeDigest: observedDigest, distributionProfile: "runtime-plugin", reason: "entrypoint_missing" }) };
+      return { envelope: envelope("unavailable", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, runtimeDigest: observedDigest, distributionProfile, reason: "entrypoint_missing" }) };
     }
     const installed = existsSync(join(pluginRoot, INSTALLATION_PROVENANCE_FILE));
     let provenanceStatus = "not_applicable";
     let sourceDigest = null;
-    let evidencePlane = "loaded_session";
+    let evidencePlane = options.expectedPluginRoot ? "loaded_session" : "installed_plugin_root";
     if (installed) {
       const provenance = inspectInstallationProvenance(pluginRoot, {
         definition,
         runtimeManifest: manifest,
         pluginVersion,
+        profileId: distributionProfile,
+        inventoryDigest: copilotInventory?.inventoryDigest ?? null,
       });
       provenanceStatus = provenance.status;
       sourceDigest = provenance.marker?.source_digest ?? null;
@@ -130,8 +142,8 @@ export function resolveLocalValidator(options) {
           canonicalVersion: definition.version,
           runtimeDigest: observedDigest,
           sourceDigest,
-          distributionProfile: "runtime-plugin",
-          evidencePlane: "loaded_session",
+          distributionProfile,
+          evidencePlane,
           provenanceStatus,
           reason: provenance.reason,
         }) };
@@ -144,16 +156,16 @@ export function resolveLocalValidator(options) {
         pluginVersion,
         canonicalVersion: definition.version,
         runtimeDigest: observedDigest,
-        distributionProfile: "runtime-plugin",
+        distributionProfile,
         evidencePlane: "loaded_session",
         provenanceStatus: "missing",
         reason: "installation_provenance_missing",
       }) };
     } else {
-      const generatedRepository = inspectGeneratedRepositoryMarketplace(resolve(pluginRoot, "..", ".."));
+      const generatedRepository = copilotProfile ? null : inspectGeneratedRepositoryMarketplace(resolve(pluginRoot, "..", ".."));
       if (pluginVersion !== definition.version
-          || generatedRepository.status !== "matched"
-          || canonicalPath(generatedRepository.pluginRoot) !== pluginRoot) {
+          || (!copilotProfile && (generatedRepository.status !== "matched"
+            || canonicalPath(generatedRepository.pluginRoot) !== pluginRoot))) {
         return { envelope: envelope("unavailable", options, {
           observedVersion,
           source: "plugin_bundle",
@@ -161,7 +173,7 @@ export function resolveLocalValidator(options) {
           pluginVersion,
           canonicalVersion: definition.version,
           runtimeDigest: observedDigest,
-          distributionProfile: "runtime-plugin",
+          distributionProfile,
           evidencePlane: "installed_plugin_root",
           provenanceStatus: "missing",
           reason: "installation_provenance_missing",
@@ -178,7 +190,7 @@ export function resolveLocalValidator(options) {
         canonicalVersion: definition.version,
         runtimeDigest: observedDigest,
         sourceDigest,
-        distributionProfile: "runtime-plugin",
+        distributionProfile,
         evidencePlane,
         provenanceStatus,
       }),

package/generated/plugins/agdf/runtime/create-agdf/lib/runtime/plugin-provenance.js

@@ -4,10 +4,12 @@ import { isAbsolute, join, relative, resolve, sep } from "node:path";
 
 export const INSTALLATION_PROVENANCE_FILE = ".agdf-installation.json";
 export const LEGACY_LOCAL_INSTALL_FILE = ".agdf-local-install.json";
+export const COPILOT_PAYLOAD_INVENTORY_FILE = ".agdf-payload-inventory.json";
 
 const EXPECTED_PROFILES = Object.freeze({
   "source-development": Object.freeze({ runtime: "absent", installable: false, machineValidation: "unavailable" }),
   "runtime-plugin": Object.freeze({ runtime: "required", installable: true, machineValidation: "local_exact_version_digest" }),
+  "copilot-runtime-plugin": Object.freeze({ runtime: "required", installable: true, machineValidation: "local_exact_version_digest_inventory" }),
   "opencode-config-local": Object.freeze({ runtime: "config_local_package", installable: true, machineValidation: "local_exact_version" }),
   "portable-skills": Object.freeze({ runtime: "absent", installable: true, machineValidation: "unavailable_or_external_required" }),
 });
@@ -41,6 +43,50 @@ export function digestDirectory(root) {
   return hash.digest("hex");
 }
 
+export function digestFile(path) {
+  return createHash("sha256").update(readFileSync(path)).digest("hex");
+}
+
+export function inspectCopilotPayloadInventory(pluginRoot, expectedVersion) {
+  const inventoryPath = join(pluginRoot, COPILOT_PAYLOAD_INVENTORY_FILE);
+  const inventory = readJson(inventoryPath);
+  if (!inventory || inventory.schema_version !== 1 || inventory.profile_id !== "copilot-runtime-plugin"
+      || inventory.version !== expectedVersion || !Array.isArray(inventory.entries)) {
+    return { status: "invalid", reason: "copilot_payload_inventory_invalid" };
+  }
+  const destinations = inventory.entries.map((entry) => entry.destination);
+  if (new Set(destinations).size !== destinations.length) {
+    return { status: "invalid", reason: "copilot_payload_inventory_duplicate" };
+  }
+  const actual = [];
+  function visit(directory) {
+    for (const name of readdirSync(directory).sort()) {
+      const path = join(directory, name);
+      const stats = statSync(path);
+      if (stats.isDirectory()) visit(path);
+      else if (stats.isFile()) {
+        const normalized = relative(pluginRoot, path).replaceAll("\\", "/");
+        if (![COPILOT_PAYLOAD_INVENTORY_FILE, INSTALLATION_PROVENANCE_FILE, LEGACY_LOCAL_INSTALL_FILE].includes(normalized)) actual.push(normalized);
+      }
+    }
+  }
+  try { visit(pluginRoot); } catch { return { status: "invalid", reason: "copilot_payload_incomplete" }; }
+  if (JSON.stringify(actual.sort()) !== JSON.stringify([...destinations].sort())) {
+    return { status: "invalid", reason: "copilot_payload_inventory_mismatch" };
+  }
+  for (const entry of inventory.entries) {
+    const path = join(pluginRoot, entry.destination);
+    if (!existsSync(path) || digestFile(path) !== entry.digest || statSync(path).size !== entry.bytes) {
+      return { status: "invalid", reason: "copilot_payload_digest_mismatch", entry: entry.destination };
+    }
+  }
+  const excluded = actual.some((path) => path.startsWith("skills/") || path.startsWith(".codex-plugin/")
+    || path.startsWith(".claude-plugin/") || path.startsWith("submission/")
+    || path === "hooks/hooks.json" || path === "hooks/session-start.sh");
+  if (excluded) return { status: "invalid", reason: "copilot_payload_excluded_surface" };
+  return { status: "matched", inventory, inventoryDigest: digestFile(inventoryPath) };
+}
+
 export function digestNormalizedPluginSource(root, canonicalVersion) {
   const files = [];
   function visit(directory) {
@@ -148,6 +194,8 @@ export function inspectInstallationProvenance(pluginRoot, {
   runtimeManifest,
   pluginVersion,
   allowLegacy = false,
+  profileId = "runtime-plugin",
+  inventoryDigest = null,
 } = {}) {
   const markerPath = join(pluginRoot, INSTALLATION_PROVENANCE_FILE);
   const legacyPath = join(pluginRoot, LEGACY_LOCAL_INSTALL_FILE);
@@ -181,11 +229,12 @@ export function inspectInstallationProvenance(pluginRoot, {
   if (!marker
       || marker.schema_version !== 1
       || marker.owner !== "create-agdf"
-      || marker.profile_id !== "runtime-plugin"
+      || marker.profile_id !== profileId
       || marker.marketplace_id !== profile.contract.marketplaceIdentities.durable
       || marker.canonical_version !== definition.version
       || marker.codex_install_version !== pluginVersion
       || marker.runtime_digest !== runtimeManifest?.digest
+      || (profileId === "copilot-runtime-plugin" && marker.inventory_digest !== inventoryDigest)
       || !/^[a-f0-9]{64}$/.test(marker.source_digest ?? "")) {
     return { status: "invalid", reason: "installation_provenance_invalid", marker };
   }

package/generated/plugins/agdf/runtime/create-agdf/lib/runtime-check-consent/contract.js

@@ -32,6 +32,7 @@ export function validateRuntimeCheckCapability(capability) {
   }
   const surfaces = capability.surfaces ?? {};
   if (surfaces.codex !== "native-hook-review" || surfaces.claude !== "exact-command-rule"
+      || surfaces.copilot !== "plugin-hook-review"
       || surfaces.opencode !== "plugin-internal"
       || surfaces["portable-skills"] !== "manual-external-required") {
     throw new Error("AGDF_RUNTIME_CHECK_CAPABILITY_INVALID: surface contract");
@@ -41,7 +42,7 @@ export function validateRuntimeCheckCapability(capability) {
 
 export function runtimeCheckCapabilityIdentity({ capability, surface, runtimeDigest, sourceDigest, command }) {
   validateRuntimeCheckCapability(capability);
-  if (!["codex", "claude", "opencode"].includes(surface)) throw new Error("AGDF_RUNTIME_CHECK_SURFACE_INVALID");
+  if (!["codex", "claude", "copilot", "opencode"].includes(surface)) throw new Error("AGDF_RUNTIME_CHECK_SURFACE_INVALID");
   for (const [name, value] of Object.entries({ runtimeDigest, sourceDigest })) {
     if (typeof value !== "string" || !/^[a-f0-9]{64}$/.test(value)) throw new Error(`AGDF_RUNTIME_CHECK_IDENTITY_INVALID: ${name}`);
   }
@@ -59,6 +60,7 @@ export function runtimeCheckCapabilityIdentity({ capability, surface, runtimeDig
 
 export function fixedRuntimeCheckCommand(surface, pluginRoot, platform = process.platform) {
   if (surface === "opencode") return "plugin:agdf:automatic-runtime-checks";
+  if (surface === "copilot") return 'node "${PLUGIN_ROOT}/runtime/agdf-session-check.js"';
   if (surface === "codex" || surface === "claude") {
     return platform === "win32"
       ? "node \"$([Environment]::GetEnvironmentVariable('PLUGIN_ROOT') + [Environment]::GetEnvironmentVariable('CLAUDE_PLUGIN_ROOT'))\\runtime\\agdf-session-check.js\""

package/generated/plugins/agdf/runtime/create-agdf/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agdf/local-validator-runtime",
-  "version": "0.13.8",
+  "version": "0.14.2",
   "private": true,
   "type": "module"
 }

package/generated/plugins/agdf/runtime/runtime-manifest.json

@@ -2,7 +2,7 @@
   "schema_version": "1",
   "generated": true,
   "source": "create-agdf/cli",
-  "version": "0.13.8",
+  "version": "0.14.2",
   "entrypoint": "create-agdf/bin/agdf-validator.js",
-  "digest": "bd47fd63c45977fe2dfa4ab6d25e003d930ebf4b68c76836d478869c5bcc13da"
+  "digest": "51035c8735d47aa727980d82709326071b372464ae077a1d269aadc0d30f2624"
 }