create-agdf 0.13.8 → 0.14.2

package/lib/public-plugin/copilot-profile.js

@@ -0,0 +1,126 @@
+import { createHash } from "node:crypto";
+import { existsSync, readFileSync, readdirSync, statSync, writeFileSync } from "node:fs";
+import { join, relative } from "node:path";
+
+export const COPILOT_PROFILE_ID = "copilot-runtime-plugin";
+export const COPILOT_INVENTORY_FILE = ".agdf-payload-inventory.json";
+
+function sha256(content) {
+  return createHash("sha256").update(content).digest("hex");
+}
+
+function filesUnder(root) {
+  const files = [];
+  function visit(directory) {
+    for (const name of readdirSync(directory).sort()) {
+      const path = join(directory, name);
+      const stats = statSync(path);
+      if (stats.isDirectory()) visit(path);
+      else if (stats.isFile()) files.push(path);
+    }
+  }
+  visit(root);
+  return files;
+}
+
+export function payloadInventoryDigest(inventory) {
+  return sha256(`${JSON.stringify(inventory, null, 2)}\n`);
+}
+
+export function buildCopilotPayloadInventory({ profileRoot, mappings, version, baseline }) {
+  const files = filesUnder(profileRoot)
+    .map((path) => ({ path, relativePath: relative(profileRoot, path).replaceAll("\\", "/") }))
+    .filter(({ relativePath }) => relativePath !== COPILOT_INVENTORY_FILE);
+  const byDestination = new Map(mappings.map((entry) => [entry.destination, entry]));
+  const unmapped = files.filter(({ relativePath }) => !byDestination.has(relativePath));
+  if (unmapped.length) throw new Error(`AGDF_COPILOT_PAYLOAD_UNMAPPED: ${unmapped.map(({ relativePath }) => relativePath).join(", ")}`);
+  const missing = mappings.filter(({ destination }) => !files.some(({ relativePath }) => relativePath === destination));
+  if (missing.length) throw new Error(`AGDF_COPILOT_PAYLOAD_MISSING: ${missing.map(({ destination }) => destination).join(", ")}`);
+  if (new Set(mappings.map(({ destination }) => destination)).size !== mappings.length) {
+    throw new Error("AGDF_COPILOT_PAYLOAD_DUPLICATE_DESTINATION");
+  }
+  const entries = files.map(({ path, relativePath }) => {
+    const mapping = byDestination.get(relativePath);
+    const content = readFileSync(path);
+    return {
+      destination: relativePath,
+      component: mapping.component,
+      owner: mapping.owner,
+      rule: mapping.rule,
+      requirement: mapping.requirement,
+      ...(mapping.source ? { source: mapping.source } : {}),
+      ...(mapping.sourceDigest ? { source_digest: mapping.sourceDigest } : {}),
+      digest: sha256(content),
+      bytes: content.byteLength,
+    };
+  });
+  const totalBytes = entries.reduce((sum, entry) => sum + entry.bytes, 0);
+  const inventory = {
+    schema_version: 1,
+    profile_id: COPILOT_PROFILE_ID,
+    version,
+    baseline,
+    stats: { files: entries.length, bytes: totalBytes },
+    entries,
+  };
+  writeFileSync(join(profileRoot, COPILOT_INVENTORY_FILE), `${JSON.stringify(inventory, null, 2)}\n`, "utf8");
+  return inventory;
+}
+
+export function validateCopilotPayload({ profileRoot, repoRoot, expectedVersion, expectedSkills, baseline }) {
+  const inventoryPath = join(profileRoot, COPILOT_INVENTORY_FILE);
+  if (!existsSync(inventoryPath)) throw new Error("AGDF_COPILOT_PAYLOAD_INVENTORY_MISSING");
+  let inventory;
+  try { inventory = JSON.parse(readFileSync(inventoryPath, "utf8")); } catch {
+    throw new Error("AGDF_COPILOT_PAYLOAD_INVENTORY_INVALID");
+  }
+  if (inventory.schema_version !== 1 || inventory.profile_id !== COPILOT_PROFILE_ID || inventory.version !== expectedVersion) {
+    throw new Error("AGDF_COPILOT_PAYLOAD_INVENTORY_INVALID");
+  }
+  const actualFiles = filesUnder(profileRoot)
+    .map((path) => relative(profileRoot, path).replaceAll("\\", "/"))
+    .filter((path) => path !== COPILOT_INVENTORY_FILE);
+  const entries = Array.isArray(inventory.entries) ? inventory.entries : [];
+  if (new Set(entries.map(({ destination }) => destination)).size !== entries.length) {
+    throw new Error("AGDF_COPILOT_PAYLOAD_DUPLICATE_DESTINATION");
+  }
+  const mapped = new Set(entries.map(({ destination }) => destination));
+  const unmapped = actualFiles.filter((path) => !mapped.has(path));
+  if (unmapped.length) throw new Error(`AGDF_COPILOT_PAYLOAD_UNMAPPED: ${unmapped.join(", ")}`);
+  const missing = entries.filter(({ destination }) => !actualFiles.includes(destination));
+  if (missing.length) throw new Error(`AGDF_COPILOT_PAYLOAD_MISSING: ${missing.map(({ destination }) => destination).join(", ")}`);
+  for (const entry of entries) {
+    const content = readFileSync(join(profileRoot, entry.destination));
+    if (sha256(content) !== entry.digest || content.byteLength !== entry.bytes) {
+      throw new Error(`AGDF_COPILOT_PAYLOAD_DIGEST_MISMATCH: ${entry.destination}`);
+    }
+    if (repoRoot && entry.source) {
+      const source = readFileSync(join(repoRoot, entry.source));
+      if (sha256(source) !== entry.source_digest) {
+        throw new Error(`AGDF_COPILOT_PAYLOAD_STALE_SOURCE: ${entry.destination}`);
+      }
+    }
+  }
+  const excluded = actualFiles.filter((path) => path === "skills" || path.startsWith("skills/")
+    || path.startsWith(".codex-plugin/") || path.startsWith(".claude-plugin/")
+    || path === "hooks/hooks.json" || path === "hooks/session-start.sh"
+    || path.startsWith("submission/"));
+  if (excluded.length) throw new Error(`AGDF_COPILOT_PAYLOAD_EXCLUDED_SURFACE: ${excluded.join(", ")}`);
+  const skillFiles = actualFiles.filter((path) => /^copilot-skills\/agdf-[^/]+\/SKILL\.md$/.test(path));
+  const expectedSkillFiles = expectedSkills.map((slug) => `copilot-skills/agdf-${slug}/SKILL.md`).sort();
+  if (JSON.stringify(skillFiles.sort()) !== JSON.stringify(expectedSkillFiles)) {
+    throw new Error("AGDF_COPILOT_PAYLOAD_SKILL_SET_MISMATCH");
+  }
+  const stats = {
+    files: entries.length,
+    bytes: entries.reduce((sum, entry) => sum + entry.bytes, 0),
+  };
+  if (stats.files > baseline.max_files || stats.bytes > baseline.max_bytes) {
+    throw new Error(`AGDF_COPILOT_PAYLOAD_GROWTH: observed ${stats.files} files/${stats.bytes} bytes; baseline ${baseline.max_files}/${baseline.max_bytes}`);
+  }
+  if (inventory.stats?.files !== stats.files || inventory.stats?.bytes !== stats.bytes
+      || inventory.baseline?.max_files !== baseline.max_files || inventory.baseline?.max_bytes !== baseline.max_bytes) {
+    throw new Error("AGDF_COPILOT_PAYLOAD_BASELINE_MISMATCH");
+  }
+  return { inventory, inventoryDigest: payloadInventoryDigest(inventory), stats };
+}

package/lib/public-plugin/manifest.js

@@ -39,14 +39,12 @@ export function createCodexPluginManifest(definition, { publicCandidate = false
       websiteURL: distribution.urls.website,
       privacyPolicyURL: distribution.urls.privacy,
       termsOfServiceURL: distribution.urls.terms,
-      supportURL: distribution.urls.support,
       composerIcon: definition.codex.composerIcon,
       logo: definition.codex.logo,
       defaultPrompt: pluginInterface.defaultPrompt,
       brandColor: definition.brandColor,
     },
   };
-  if (!publicCandidate) manifest.hooks = `./${definition.codex.hooks}`;
   return manifest;
 }
 
@@ -70,3 +68,37 @@ export function createClaudePluginManifest(definition) {
 export function renderClaudePluginManifest(definition) {
   return `${JSON.stringify(createClaudePluginManifest(definition), null, 2)}\n`;
 }
+
+function requireCopilotPath(value, field) {
+  if (typeof value !== "string" || !value || value.startsWith("/") || value.includes("..") || value.includes("\\")) {
+    throw new Error(`AGDF_COPILOT_PLUGIN_CONTRACT_INVALID: ${field} must be a relative POSIX path`);
+  }
+  return value;
+}
+
+export function createCopilotPluginManifest(definition) {
+  if (!/^[a-z0-9]+(?:-[a-z0-9]+)*$/.test(definition.id ?? "") || definition.id.length > 64) {
+    throw new Error("AGDF_COPILOT_PLUGIN_CONTRACT_INVALID: kebab-case name is required");
+  }
+  if (!/^\d+\.\d+\.\d+(?:-[0-9A-Za-z.-]+)?$/.test(definition.version ?? "")) {
+    throw new Error("AGDF_COPILOT_PLUGIN_CONTRACT_INVALID: semantic version is required");
+  }
+  const copilot = definition.copilot ?? {};
+  return {
+    name: definition.id,
+    version: definition.version,
+    description: definition.description,
+    author: definition.author,
+    homepage: definition.homepage,
+    repository: definition.repository,
+    license: definition.license,
+    keywords: definition.keywords,
+    category: definition.category,
+    skills: requireCopilotPath(copilot.skills, "skills"),
+    hooks: requireCopilotPath(copilot.hooks, "hooks"),
+  };
+}
+
+export function renderCopilotPluginManifest(definition) {
+  return `${JSON.stringify(createCopilotPluginManifest(definition), null, 2)}\n`;
+}

package/lib/public-plugin/validator.js

@@ -80,7 +80,7 @@ export function validateCandidate(root) {
   if (unicodeLength(manifest.interface?.developerName) > LISTING_LIMITS.developerName) throw new Error("AGDF_PUBLIC_PLUGIN_LISTING_LIMIT_EXCEEDED: developerName");
   const prompts = manifest.interface?.defaultPrompt ?? [];
   if (prompts.length !== LISTING_LIMITS.promptCount || prompts.some((prompt) => unicodeLength(prompt) > LISTING_LIMITS.promptLength)) throw new Error("AGDF_PUBLIC_PLUGIN_LISTING_LIMIT_EXCEEDED: defaultPrompt");
-  for (const field of ["websiteURL", "privacyPolicyURL", "termsOfServiceURL", "supportURL"]) {
+  for (const field of ["websiteURL", "privacyPolicyURL", "termsOfServiceURL"]) {
     let url;
     try { url = new URL(manifest.interface?.[field]); } catch { throw new Error(`AGDF_PUBLIC_PLUGIN_CONTRACT_INVALID: ${field}`); }
     if (url.protocol !== "https:") throw new Error(`AGDF_PUBLIC_PLUGIN_CONTRACT_INVALID: ${field} must use HTTPS`);

package/lib/release/version-coherence.js

@@ -34,6 +34,10 @@ const VERSION_SURFACES = [
   jsonVersion("create-agdf/generated/plugins/agdf/.claude-plugin/plugin.json"),
   jsonVersion("create-agdf/generated/plugins/agdf/runtime/runtime-manifest.json"),
   jsonVersion("create-agdf/generated/plugins/agdf/runtime/create-agdf/package.json"),
+  jsonVersion("create-agdf/generated/plugins/copilot/agdf/meta/agdf-plugin.definition.json"),
+  jsonVersion("create-agdf/generated/plugins/copilot/agdf/plugin.json"),
+  jsonVersion("create-agdf/generated/plugins/copilot/agdf/runtime/runtime-manifest.json"),
+  jsonVersion("create-agdf/generated/plugins/copilot/agdf/runtime/create-agdf/package.json"),
   jsonVersion("create-agdf/generated/submissions/openai/agdf/meta/agdf-plugin.definition.json"),
   jsonVersion("create-agdf/generated/submissions/openai/agdf/.codex-plugin/plugin.json"),
   jsonVersion("create-agdf/generated/submissions/openai/agdf/submission/openai/capability-matrix.json", (value) => value.releaseVersion),

package/lib/runtime/local-validator.js

@@ -5,6 +5,7 @@ import process from "node:process";
 import {
   INSTALLATION_PROVENANCE_FILE,
   digestDirectory,
+  inspectCopilotPayloadInventory,
   inspectGeneratedRepositoryMarketplace,
   inspectInstallationProvenance,
   validateDistributionProfiles,
@@ -83,41 +84,52 @@ export function resolveLocalValidator(options) {
     }
     const codexManifest = readJson(join(pluginRoot, ".codex-plugin", "plugin.json"));
     const claudeManifest = readJson(join(pluginRoot, ".claude-plugin", "plugin.json"));
-    const pluginVersion = codexManifest?.version ?? null;
-    if (!codexManifest || !claudeManifest || claudeManifest.version !== definition.version) {
-      return { envelope: envelope("version_mismatch", options, { source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, distributionProfile: "runtime-plugin", provenanceStatus: "invalid", reason: "manifest_invalid" }) };
+    const copilotManifest = readJson(join(pluginRoot, "plugin.json"));
+    const copilotProfile = Boolean(copilotManifest && !codexManifest && !claudeManifest);
+    const distributionProfile = copilotProfile ? "copilot-runtime-plugin" : "runtime-plugin";
+    const pluginVersion = copilotProfile ? copilotManifest?.version ?? null : codexManifest?.version ?? null;
+    if (copilotProfile
+      ? copilotManifest.version !== definition.version
+      : (!codexManifest || !claudeManifest || claudeManifest.version !== definition.version)) {
+      return { envelope: envelope("version_mismatch", options, { source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, distributionProfile, provenanceStatus: "invalid", reason: "manifest_invalid" }) };
+    }
+    const copilotInventory = copilotProfile ? inspectCopilotPayloadInventory(pluginRoot, definition.version) : null;
+    if (copilotProfile && copilotInventory.status !== "matched") {
+      return { envelope: envelope("version_mismatch", options, { source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, distributionProfile, provenanceStatus: "invalid", reason: copilotInventory.reason }) };
     }
     const packageRoot = join(options.runtimeRoot, "create-agdf");
     if (!existsSync(packageRoot)) {
-      return { envelope: envelope("unavailable", options, { source: "plugin_bundle", pluginRoot, pluginVersion, distributionProfile: "runtime-plugin", reason: "runtime_missing" }) };
+      return { envelope: envelope("unavailable", options, { source: "plugin_bundle", pluginRoot, pluginVersion, distributionProfile, reason: "runtime_missing" }) };
     }
     const packageManifest = readJson(join(packageRoot, "package.json"));
     const observedVersion = packageManifest?.version ?? manifest.version ?? null;
     if (observedVersion !== options.expectedVersion || manifest.version !== options.expectedVersion) {
-      return { envelope: envelope("version_mismatch", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, distributionProfile: "runtime-plugin" }) };
+      return { envelope: envelope("version_mismatch", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, distributionProfile }) };
     }
     let observedDigest = null;
     try { observedDigest = digestDirectory(packageRoot); } catch {}
     if (!observedDigest || manifest.digest !== observedDigest) {
-      return { envelope: envelope("version_mismatch", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, runtimeDigest: observedDigest, distributionProfile: "runtime-plugin", reason: "runtime_digest_mismatch" }) };
+      return { envelope: envelope("version_mismatch", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, runtimeDigest: observedDigest, distributionProfile, reason: "runtime_digest_mismatch" }) };
     }
     const entrypoint = resolve(options.runtimeRoot, manifest.entrypoint ?? "");
     const entrypointRelative = relative(options.runtimeRoot, entrypoint);
     if (!manifest.entrypoint || entrypointRelative === ".." || entrypointRelative.startsWith(`..${sep}`) || isAbsolute(entrypointRelative)) {
-      return { envelope: envelope("version_mismatch", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, runtimeDigest: observedDigest, distributionProfile: "runtime-plugin", reason: "invalid_entrypoint" }) };
+      return { envelope: envelope("version_mismatch", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, runtimeDigest: observedDigest, distributionProfile, reason: "invalid_entrypoint" }) };
     }
     if (!existsSync(entrypoint)) {
-      return { envelope: envelope("unavailable", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, runtimeDigest: observedDigest, distributionProfile: "runtime-plugin", reason: "entrypoint_missing" }) };
+      return { envelope: envelope("unavailable", options, { observedVersion, source: "plugin_bundle", pluginRoot, pluginVersion, canonicalVersion: definition.version, runtimeDigest: observedDigest, distributionProfile, reason: "entrypoint_missing" }) };
     }
     const installed = existsSync(join(pluginRoot, INSTALLATION_PROVENANCE_FILE));
     let provenanceStatus = "not_applicable";
     let sourceDigest = null;
-    let evidencePlane = "loaded_session";
+    let evidencePlane = options.expectedPluginRoot ? "loaded_session" : "installed_plugin_root";
     if (installed) {
       const provenance = inspectInstallationProvenance(pluginRoot, {
         definition,
         runtimeManifest: manifest,
         pluginVersion,
+        profileId: distributionProfile,
+        inventoryDigest: copilotInventory?.inventoryDigest ?? null,
       });
       provenanceStatus = provenance.status;
       sourceDigest = provenance.marker?.source_digest ?? null;
@@ -130,8 +142,8 @@ export function resolveLocalValidator(options) {
           canonicalVersion: definition.version,
           runtimeDigest: observedDigest,
           sourceDigest,
-          distributionProfile: "runtime-plugin",
-          evidencePlane: "loaded_session",
+          distributionProfile,
+          evidencePlane,
           provenanceStatus,
           reason: provenance.reason,
         }) };
@@ -144,16 +156,16 @@ export function resolveLocalValidator(options) {
         pluginVersion,
         canonicalVersion: definition.version,
         runtimeDigest: observedDigest,
-        distributionProfile: "runtime-plugin",
+        distributionProfile,
         evidencePlane: "loaded_session",
         provenanceStatus: "missing",
         reason: "installation_provenance_missing",
       }) };
     } else {
-      const generatedRepository = inspectGeneratedRepositoryMarketplace(resolve(pluginRoot, "..", ".."));
+      const generatedRepository = copilotProfile ? null : inspectGeneratedRepositoryMarketplace(resolve(pluginRoot, "..", ".."));
       if (pluginVersion !== definition.version
-          || generatedRepository.status !== "matched"
-          || canonicalPath(generatedRepository.pluginRoot) !== pluginRoot) {
+          || (!copilotProfile && (generatedRepository.status !== "matched"
+            || canonicalPath(generatedRepository.pluginRoot) !== pluginRoot))) {
         return { envelope: envelope("unavailable", options, {
           observedVersion,
           source: "plugin_bundle",
@@ -161,7 +173,7 @@ export function resolveLocalValidator(options) {
           pluginVersion,
           canonicalVersion: definition.version,
           runtimeDigest: observedDigest,
-          distributionProfile: "runtime-plugin",
+          distributionProfile,
           evidencePlane: "installed_plugin_root",
           provenanceStatus: "missing",
           reason: "installation_provenance_missing",
@@ -178,7 +190,7 @@ export function resolveLocalValidator(options) {
         canonicalVersion: definition.version,
         runtimeDigest: observedDigest,
         sourceDigest,
-        distributionProfile: "runtime-plugin",
+        distributionProfile,
         evidencePlane,
         provenanceStatus,
       }),

package/lib/runtime/plugin-provenance.js

@@ -4,10 +4,12 @@ import { isAbsolute, join, relative, resolve, sep } from "node:path";
 
 export const INSTALLATION_PROVENANCE_FILE = ".agdf-installation.json";
 export const LEGACY_LOCAL_INSTALL_FILE = ".agdf-local-install.json";
+export const COPILOT_PAYLOAD_INVENTORY_FILE = ".agdf-payload-inventory.json";
 
 const EXPECTED_PROFILES = Object.freeze({
   "source-development": Object.freeze({ runtime: "absent", installable: false, machineValidation: "unavailable" }),
   "runtime-plugin": Object.freeze({ runtime: "required", installable: true, machineValidation: "local_exact_version_digest" }),
+  "copilot-runtime-plugin": Object.freeze({ runtime: "required", installable: true, machineValidation: "local_exact_version_digest_inventory" }),
   "opencode-config-local": Object.freeze({ runtime: "config_local_package", installable: true, machineValidation: "local_exact_version" }),
   "portable-skills": Object.freeze({ runtime: "absent", installable: true, machineValidation: "unavailable_or_external_required" }),
 });
@@ -41,6 +43,50 @@ export function digestDirectory(root) {
   return hash.digest("hex");
 }
 
+export function digestFile(path) {
+  return createHash("sha256").update(readFileSync(path)).digest("hex");
+}
+
+export function inspectCopilotPayloadInventory(pluginRoot, expectedVersion) {
+  const inventoryPath = join(pluginRoot, COPILOT_PAYLOAD_INVENTORY_FILE);
+  const inventory = readJson(inventoryPath);
+  if (!inventory || inventory.schema_version !== 1 || inventory.profile_id !== "copilot-runtime-plugin"
+      || inventory.version !== expectedVersion || !Array.isArray(inventory.entries)) {
+    return { status: "invalid", reason: "copilot_payload_inventory_invalid" };
+  }
+  const destinations = inventory.entries.map((entry) => entry.destination);
+  if (new Set(destinations).size !== destinations.length) {
+    return { status: "invalid", reason: "copilot_payload_inventory_duplicate" };
+  }
+  const actual = [];
+  function visit(directory) {
+    for (const name of readdirSync(directory).sort()) {
+      const path = join(directory, name);
+      const stats = statSync(path);
+      if (stats.isDirectory()) visit(path);
+      else if (stats.isFile()) {
+        const normalized = relative(pluginRoot, path).replaceAll("\\", "/");
+        if (![COPILOT_PAYLOAD_INVENTORY_FILE, INSTALLATION_PROVENANCE_FILE, LEGACY_LOCAL_INSTALL_FILE].includes(normalized)) actual.push(normalized);
+      }
+    }
+  }
+  try { visit(pluginRoot); } catch { return { status: "invalid", reason: "copilot_payload_incomplete" }; }
+  if (JSON.stringify(actual.sort()) !== JSON.stringify([...destinations].sort())) {
+    return { status: "invalid", reason: "copilot_payload_inventory_mismatch" };
+  }
+  for (const entry of inventory.entries) {
+    const path = join(pluginRoot, entry.destination);
+    if (!existsSync(path) || digestFile(path) !== entry.digest || statSync(path).size !== entry.bytes) {
+      return { status: "invalid", reason: "copilot_payload_digest_mismatch", entry: entry.destination };
+    }
+  }
+  const excluded = actual.some((path) => path.startsWith("skills/") || path.startsWith(".codex-plugin/")
+    || path.startsWith(".claude-plugin/") || path.startsWith("submission/")
+    || path === "hooks/hooks.json" || path === "hooks/session-start.sh");
+  if (excluded) return { status: "invalid", reason: "copilot_payload_excluded_surface" };
+  return { status: "matched", inventory, inventoryDigest: digestFile(inventoryPath) };
+}
+
 export function digestNormalizedPluginSource(root, canonicalVersion) {
   const files = [];
   function visit(directory) {
@@ -148,6 +194,8 @@ export function inspectInstallationProvenance(pluginRoot, {
   runtimeManifest,
   pluginVersion,
   allowLegacy = false,
+  profileId = "runtime-plugin",
+  inventoryDigest = null,
 } = {}) {
   const markerPath = join(pluginRoot, INSTALLATION_PROVENANCE_FILE);
   const legacyPath = join(pluginRoot, LEGACY_LOCAL_INSTALL_FILE);
@@ -181,11 +229,12 @@ export function inspectInstallationProvenance(pluginRoot, {
   if (!marker
       || marker.schema_version !== 1
       || marker.owner !== "create-agdf"
-      || marker.profile_id !== "runtime-plugin"
+      || marker.profile_id !== profileId
       || marker.marketplace_id !== profile.contract.marketplaceIdentities.durable
       || marker.canonical_version !== definition.version
       || marker.codex_install_version !== pluginVersion
       || marker.runtime_digest !== runtimeManifest?.digest
+      || (profileId === "copilot-runtime-plugin" && marker.inventory_digest !== inventoryDigest)
       || !/^[a-f0-9]{64}$/.test(marker.source_digest ?? "")) {
     return { status: "invalid", reason: "installation_provenance_invalid", marker };
   }

package/lib/runtime-check-consent/contract.js

@@ -32,6 +32,7 @@ export function validateRuntimeCheckCapability(capability) {
   }
   const surfaces = capability.surfaces ?? {};
   if (surfaces.codex !== "native-hook-review" || surfaces.claude !== "exact-command-rule"
+      || surfaces.copilot !== "plugin-hook-review"
       || surfaces.opencode !== "plugin-internal"
       || surfaces["portable-skills"] !== "manual-external-required") {
     throw new Error("AGDF_RUNTIME_CHECK_CAPABILITY_INVALID: surface contract");
@@ -41,7 +42,7 @@ export function validateRuntimeCheckCapability(capability) {
 
 export function runtimeCheckCapabilityIdentity({ capability, surface, runtimeDigest, sourceDigest, command }) {
   validateRuntimeCheckCapability(capability);
-  if (!["codex", "claude", "opencode"].includes(surface)) throw new Error("AGDF_RUNTIME_CHECK_SURFACE_INVALID");
+  if (!["codex", "claude", "copilot", "opencode"].includes(surface)) throw new Error("AGDF_RUNTIME_CHECK_SURFACE_INVALID");
   for (const [name, value] of Object.entries({ runtimeDigest, sourceDigest })) {
     if (typeof value !== "string" || !/^[a-f0-9]{64}$/.test(value)) throw new Error(`AGDF_RUNTIME_CHECK_IDENTITY_INVALID: ${name}`);
   }
@@ -59,6 +60,7 @@ export function runtimeCheckCapabilityIdentity({ capability, surface, runtimeDig
 
 export function fixedRuntimeCheckCommand(surface, pluginRoot, platform = process.platform) {
   if (surface === "opencode") return "plugin:agdf:automatic-runtime-checks";
+  if (surface === "copilot") return 'node "${PLUGIN_ROOT}/runtime/agdf-session-check.js"';
   if (surface === "codex" || surface === "claude") {
     return platform === "win32"
       ? "node \"$([Environment]::GetEnvironmentVariable('PLUGIN_ROOT') + [Environment]::GetEnvironmentVariable('CLAUDE_PLUGIN_ROOT'))\\runtime\\agdf-session-check.js\""

package/lib/runtime-check-consent/coordinator.js

@@ -18,6 +18,7 @@ export function resolveRuntimeCheckDecision({ explicitValue, interactive = false
 export function consentDisclosure(surface) {
   const permissionOwner = surface === "codex" ? "Codex native hook trust"
     : surface === "claude" ? "Claude Code user permission settings"
+    : surface === "copilot" ? "GitHub Copilot plugin hook review"
     : "OpenCode plugin and explicit permission configuration";
   return Object.freeze({
     surface,

package/lib/runtime-check-consent/service.js

@@ -35,7 +35,7 @@ function prospectiveRuntimeCheckIdentity(surface, platform = process.platform) {
       command: fixedRuntimeCheckCommand(surface, installed.root, platform),
     });
   }
-  if (!["codex", "claude"].includes(surface)) return null;
+  if (!["codex", "claude", "copilot"].includes(surface)) return null;
   const pluginRoot = join(generatedRoot, "plugins", "agdf");
   let runtimeManifest;
   try { runtimeManifest = JSON.parse(readFileSync(join(pluginRoot, "runtime", "runtime-manifest.json"), "utf8")); } catch { return null; }

package/lib/runtime-check-consent/state.js

@@ -4,12 +4,12 @@ import { dirname, join, resolve } from "node:path";
 import { renameSyncWithRetry } from "../fs-swap.js";
 
 export function runtimeCheckReceiptPath(dataRoot, surface) {
-  if (!["codex", "claude", "opencode"].includes(surface)) throw new Error("AGDF_RUNTIME_CHECK_RECEIPT_SURFACE_INVALID");
+  if (!["codex", "claude", "copilot", "opencode"].includes(surface)) throw new Error("AGDF_RUNTIME_CHECK_RECEIPT_SURFACE_INVALID");
   return join(resolve(dataRoot), "runtime-checks", `${surface}.json`);
 }
 
 export function createRuntimeCheckReceipt({ surface, decision, capabilityIdentity, command }) {
-  if (!["codex", "claude", "opencode"].includes(surface)) throw new Error("AGDF_RUNTIME_CHECK_RECEIPT_SURFACE_INVALID");
+  if (!["codex", "claude", "copilot", "opencode"].includes(surface)) throw new Error("AGDF_RUNTIME_CHECK_RECEIPT_SURFACE_INVALID");
   if (!["enable", "manual"].includes(decision)) throw new Error("AGDF_RUNTIME_CHECK_RECEIPT_DECISION_INVALID");
   if (!/^[a-f0-9]{64}$/.test(capabilityIdentity)) throw new Error("AGDF_RUNTIME_CHECK_RECEIPT_IDENTITY_INVALID");
   return Object.freeze({
@@ -26,7 +26,7 @@ export function createRuntimeCheckReceipt({ surface, decision, capabilityIdentit
 export function validateRuntimeCheckReceipt(receipt) {
   if (receipt?.schema_version !== 1 || receipt.owner !== "create-agdf"
       || receipt.capability_id !== "automatic-runtime-checks") return { status: "receipt_unowned", receipt: null };
-  if (!["codex", "claude", "opencode"].includes(receipt.surface)
+  if (!["codex", "claude", "copilot", "opencode"].includes(receipt.surface)
       || !["enabled", "manual"].includes(receipt.requested_state)
       || !/^[a-f0-9]{64}$/.test(receipt.capability_identity)
       || typeof receipt.command !== "string" || !receipt.command.trim()) {

package/lib/scaffold/plan.js

@@ -1,11 +1,9 @@
-import { existsSync, readFileSync } from "node:fs";
+import { readFileSync } from "node:fs";
 import { join } from "node:path";
 import { generatedRoot, languageConfigContent, pluginDefinition } from "../cli/runtime-context.js";
 export { doctorRequiredFiles } from "../control-evaluation/required-files.js";
 
-export const agdfFragmentPath = "AGENTS.agdf.md";
 const codexSkillNames = pluginDefinition.skillSet.map((skill) => `${pluginDefinition.codex.skillPrefix}${skill.slug}`);
-const copilotSkillNames = pluginDefinition.skillSet.map((skill) => `${pluginDefinition.copilot.skillPrefix}${skill.slug}`);
 const globalOpenCodeSkillNames = pluginDefinition.skillSet.map((skill) => `${pluginDefinition.opencode.globalSkillPrefix}${skill.slug}`);
 const contractModules = [
   "gate-transition.md",
@@ -96,63 +94,11 @@ const artefactTemplateFiles = [
   join(".agdf", "control", "templates", "artefacts", "QA_REPORT.md"),
   join(".agdf", "control", "templates", "artefacts", "OR.md"),
 ];
-const copilotInstructionFiles = [
-  join(".github", "copilot-instructions.md"),
-  join(".github", "instructions", "agdf-governance.instructions.md"),
-];
-const copilotSkillFiles = [
-  join(".github", "skills", "README.md"),
-  join(".github", "skills", pluginDefinition.copilot.runtimeContractFileName),
-  ...contractModules.map((moduleName) => join(".github", "skills", "contracts", moduleName)),
-  ...copilotSkillNames.map((skillName) => join(".github", "skills", skillName, "SKILL.md")),
-];
 
 function loadAsset(relativePath) {
   return readFileSync(join(generatedRoot, relativePath), "utf8");
 }
 
-function isAgdfOwnedAgentsFile(content) {
-  return content.includes("## Surface Convention")
-    && content.includes("GitHub Copilot repository skills do not have a plugin namespace")
-    && content.includes("AGDF is agent-native first and CLI-verifiable by design");
-}
-
-function addCopilotAgentsFile(files, targetDir, force) {
-  const agentsPath = join(targetDir, "AGENTS.md");
-  if (!existsSync(agentsPath) || force) {
-    files.push({
-      path: "AGENTS.md",
-      content: loadAsset("AGENTS.md"),
-    });
-    return;
-  }
-
-  const existingAgents = readFileSync(agentsPath, "utf8");
-  if (isAgdfOwnedAgentsFile(existingAgents)) {
-    files.push({
-      path: "AGENTS.md",
-      content: loadAsset("AGENTS.md"),
-      allowOverwrite: true,
-      action: "refreshed",
-    });
-    return;
-  }
-
-  files.push({
-    path: agdfFragmentPath,
-    content: loadAsset("AGENTS.md"),
-    allowOverwrite: true,
-    action: "refreshed",
-    preserved: "AGENTS.md",
-  });
-}
-
-function shouldWriteLanguageConfig(target, targetDir, force) {
-  if (force) return true;
-  if ((target === "copilot" || target === "both") && existsSync(join(targetDir, ".agdf", "control", "config.json"))) return false;
-  return true;
-}
-
 function addLanguageConfig(files, languagePreference) {
   files.push({
     path: join(".agdf", "control", "config.json"),
@@ -196,8 +142,8 @@ export function generatedFilesForTarget(target, targetDir, force, languagePrefer
     return files;
   }
 
-  if (target === "codex-repo" || target === "both") {
-    if (shouldWriteLanguageConfig(target, targetDir, force)) addLanguageConfig(files, languagePreference);
+  if (target === "codex-repo") {
+    addLanguageConfig(files, languagePreference);
     for (const codexPath of codexPluginFiles) {
       files.push({
         path: codexPath,
@@ -206,38 +152,6 @@ export function generatedFilesForTarget(target, targetDir, force, languagePrefer
     }
   }
 
-  if (target === "copilot" || target === "both") {
-    if (target !== "both" && shouldWriteLanguageConfig(target, targetDir, force)) addLanguageConfig(files, languagePreference);
-    addCopilotAgentsFile(files, targetDir, force);
-
-    for (const controlPath of controlFiles) {
-      files.push({
-        path: controlPath,
-        content: loadAsset(controlPath),
-        allowOverwrite: true,
-        action: "refreshed",
-      });
-    }
-
-    for (const instructionPath of copilotInstructionFiles) {
-      files.push({
-        path: instructionPath,
-        content: loadAsset(instructionPath),
-        allowOverwrite: true,
-        action: "refreshed",
-      });
-    }
-
-    for (const skillPath of copilotSkillFiles) {
-      files.push({
-        path: skillPath,
-        content: loadAsset(skillPath),
-        allowOverwrite: true,
-        action: "refreshed",
-      });
-    }
-  }
-
   if (target === "opencode-repo") {
     addLanguageConfig(files, languagePreference);
     for (const controlPath of controlFiles) {