create-agdf 0.14.1 → 0.14.2

package/generated/submissions/openai/agdf/submission/openai/availability.md

@@ -1,6 +1,6 @@
 # Availability Decision Record
 
-- release: `0.14.1`
+- release: `0.14.2`
 - decision_state: `pending`
 - decision_owner: verified publisher
 - countries: not selected

package/generated/submissions/openai/agdf/submission/openai/capability-matrix.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.14.1",
+  "releaseVersion": "0.14.2",
   "evidenceStates": [
     "common",
     "codex-specific",

package/generated/submissions/openai/agdf/submission/openai/inventory.json

@@ -1,11 +1,11 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.14.1",
-  "digest": "915aec01d7b4ba084bef25b8e772c70e27c31c89c5be111f549e793ec00395ad",
+  "releaseVersion": "0.14.2",
+  "digest": "0c78d217817ca7cec6cd2e8638e3a4fa678a7dc4c954119606f5f954bd1a2ca2",
   "files": [
     {
       "path": ".codex-plugin/plugin.json",
-      "sha256": "235325cbcc2fff4e90d875df1e1fccb35c92e7c36cac2ded442983171376d7f8"
+      "sha256": "0eccc7ed08162a4f4437c7ccfbdd9145a9034b4ab6de44f5565ca608989d5c4a"
     },
     {
       "path": "assets/agdf-icon.svg",
@@ -29,7 +29,7 @@
     },
     {
       "path": "meta/agdf-plugin.definition.json",
-      "sha256": "6408fc6148f7c9579d5584924155402b98c2ffe68bd21c6048fb5b3169de671a"
+      "sha256": "ba636c3e224125df8f2dedde215b00473174b1a02fdeecbf91da1a262dcde778"
     },
     {
       "path": "meta/agdf-runtime-contract.md",
@@ -75,6 +75,10 @@
       "path": "meta/contracts/task-target-resolution.md",
       "sha256": "3d078596b02360c34e40a6529e063b9c89c62c490be374507fb2046543c380e8"
     },
+    {
+      "path": "meta/copilot-payload-baseline.json",
+      "sha256": "ab87e177288c36a056cccc583c78fd57b50fd82517a56276a009345e065ec1d6"
+    },
     {
       "path": "skills/brownfield-analysis/SKILL.md",
       "sha256": "4ca65f8efe0b50d6c7b625f6355ec2961fe91affa154b9d1e91dfe1334bcaf99"
@@ -157,23 +161,23 @@
     },
     {
       "path": "submission/openai/availability.md",
-      "sha256": "fffc251c0d221ca99e0ac26d7a999efa5f5d6b369f006af515840c2540696956"
+      "sha256": "57e428da0faf2a48f459796781b4f5b472dc10e1cea957f6078404bf6e7a184b"
     },
     {
       "path": "submission/openai/capability-matrix.json",
-      "sha256": "98c4efb49f8ec4adc253ba82617539b6a7cd60951cdc1fb0201537c64cb45f56"
+      "sha256": "203b63da20727ac116fe816893c669725d46ff67388a934fa17cda68ea97f09a"
     },
     {
       "path": "submission/openai/listing.json",
-      "sha256": "61caa4b27640afcaf1741af96f5693fb1c70db5d9544bd7131a01d93d573441c"
+      "sha256": "29c2a8865f69e227d746548b487422135b7165c4c5aa4f92ed414b220dd21151"
     },
     {
       "path": "submission/openai/release-notes.md",
-      "sha256": "f05001114ea205666b6333ceaae2f0bd1df8d0c5ad462ec7dd922029640954f3"
+      "sha256": "fcacfc5c8382ae589871359a3467dafac700822928999e680a106c484cc7044e"
     },
     {
       "path": "submission/openai/reviewer-cases.json",
-      "sha256": "f0a37d259eab3f2432ceb4a1f3d602f812f9b45bd063503679fa094de344046c"
+      "sha256": "e1ffc93e955edfab9a95cfaf0437badbf5f4741763cb0161f3de6b0e23c8bb27"
     }
   ]
 }

package/generated/submissions/openai/agdf/submission/openai/listing.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.14.1",
+  "releaseVersion": "0.14.2",
   "submissionType": "skills",
   "identity": {
     "technicalId": "agdf",

package/generated/submissions/openai/agdf/submission/openai/readiness.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.14.1",
+  "releaseVersion": "0.14.2",
   "candidateState": "repository_ready",
   "submissionReady": false,
   "submissionBlockers": [
@@ -16,7 +16,7 @@
     },
     "bundle": {
       "state": "pass",
-      "detail": "43 inventoried files; inventory digest 915aec01d7b4ba084bef25b8e772c70e27c31c89c5be111f549e793ec00395ad"
+      "detail": "44 inventoried files; inventory digest 0c78d217817ca7cec6cd2e8638e3a4fa678a7dc4c954119606f5f954bd1a2ca2"
     },
     "installed_host": {
       "state": "unverified",

package/generated/submissions/openai/agdf/submission/openai/readiness.md

@@ -1,6 +1,6 @@
 # AGDF Public Plugin Readiness
 
-- release: `0.14.1`
+- release: `0.14.2`
 - candidate_state: `repository_ready`
 - submission_ready: `false`
 
@@ -9,7 +9,7 @@
 | Class | State | Detail |
 |---|---|---|
 | repository | pass | canonical contract and deterministic source checks |
-| bundle | pass | 43 inventoried files; inventory digest 915aec01d7b4ba084bef25b8e772c70e27c31c89c5be111f549e793ec00395ad |
+| bundle | pass | 44 inventoried files; inventory digest 0c78d217817ca7cec6cd2e8638e3a4fa678a7dc4c954119606f5f954bd1a2ca2 |
 | installed_host | unverified | PPD-L02 and PPD-L03 not performed |
 | portal | unverified | unverified |
 | post_publication | unverified | not published |

package/generated/submissions/openai/agdf/submission/openai/release-notes.md

@@ -1,4 +1,4 @@
-# AGDF 0.14.1 — Initial OpenAI Public Plugin Candidate
+# AGDF 0.14.2 — Initial OpenAI Public Plugin Candidate
 
 This candidate packages the canonical AGDF workflow skills for public discovery in ChatGPT and
 Codex. It helps users assess delivery fit, preserve explicit human approvals, inspect existing-system

package/generated/submissions/openai/agdf/submission/openai/reviewer-cases.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.14.1",
+  "releaseVersion": "0.14.2",
   "cases": [
     {
       "id": "positive-proportional-fit",

package/lib/installers/local-marketplace.js

@@ -15,6 +15,7 @@ import {
   INSTALLATION_PROVENANCE_FILE,
   LEGACY_LOCAL_INSTALL_FILE,
   digestDirectory,
+  inspectCopilotPayloadInventory,
   digestNormalizedPluginSource,
   inspectInstallationProvenance,
   validateDistributionProfiles,
@@ -141,20 +142,39 @@ function claudeMarketplace(definition = pluginDefinition) {
   };
 }
 
+function copilotMarketplace(definition = pluginDefinition) {
+  return {
+    name: MARKETPLACE_ID,
+    owner: { name: definition.displayName, email: "" },
+    metadata: { description: definition.description, version: definition.version },
+    plugins: [{
+      name: definition.id,
+      description: definition.copilotDescription || definition.longDescription,
+      version: definition.version,
+      source: "./plugins/agdf",
+    }],
+  };
+}
+
 function validateBuiltPlugin(pluginRoot, expectedVersion, expectedCodexInstallVersion = expectedVersion, sourceDigest = "", {
   requireInstallationProvenance = false,
   allowLegacyProvenanceForMigration = false,
   allowPreProvenanceShape = false,
+  profileId = "runtime-plugin",
 } = {}) {
   const definition = readJson(join(pluginRoot, "meta", "agdf-plugin.definition.json"), "built plugin definition");
   const runtime = readJson(join(pluginRoot, "runtime", "runtime-manifest.json"), "built runtime manifest");
-  const codex = readJson(join(pluginRoot, ".codex-plugin", "plugin.json"), "built Codex plugin manifest");
-  const claude = readJson(join(pluginRoot, ".claude-plugin", "plugin.json"), "built Claude plugin manifest");
+  const copilotProfile = profileId === "copilot-runtime-plugin";
+  const codex = copilotProfile ? null : readJson(join(pluginRoot, ".codex-plugin", "plugin.json"), "built Codex plugin manifest");
+  const claude = copilotProfile ? null : readJson(join(pluginRoot, ".claude-plugin", "plugin.json"), "built Claude plugin manifest");
+  const copilot = copilotProfile ? readJson(join(pluginRoot, "plugin.json"), "built Copilot plugin manifest") : null;
   for (const required of [
-    join(pluginRoot, ".codex-plugin", "plugin.json"),
-    join(pluginRoot, ".claude-plugin", "plugin.json"),
+    ...(copilotProfile ? [join(pluginRoot, "plugin.json"), join(pluginRoot, ".agdf-payload-inventory.json")] : [
+      join(pluginRoot, ".codex-plugin", "plugin.json"),
+      join(pluginRoot, ".claude-plugin", "plugin.json"),
+      join(pluginRoot, "scripts", "check-runtime-integrity.mjs"),
+    ]),
     join(pluginRoot, "runtime", "agdf-local.js"),
-    join(pluginRoot, "scripts", "check-runtime-integrity.mjs"),
   ]) {
     if (!existsSync(required)) throw new Error(`Built plugin is incomplete: ${required}`);
   }
@@ -178,13 +198,20 @@ function validateBuiltPlugin(pluginRoot, expectedVersion, expectedCodexInstallVe
   if (profile.status !== "matched" && provenance?.status !== "legacy" && !isPreProvenanceShape) {
     throw new Error("Built plugin distribution profile contract is invalid.");
   }
-  if (codex.version !== expectedCodexInstallVersion) {
+  if (!copilotProfile && codex.version !== expectedCodexInstallVersion) {
     throw new Error(`Built Codex plugin version mismatch: expected ${expectedCodexInstallVersion}, observed ${codex.version}`);
   }
-  if (claude.version !== expectedVersion) {
+  if (!copilotProfile && claude.version !== expectedVersion) {
     throw new Error(`Built Claude plugin version mismatch: expected ${expectedVersion}, observed ${claude.version}`);
   }
-  if (expectedCodexInstallVersion !== expectedVersion) {
+  if (copilotProfile && copilot.version !== expectedVersion) {
+    throw new Error(`Built Copilot plugin version mismatch: expected ${expectedVersion}, observed ${copilot.version}`);
+  }
+  const copilotInventory = copilotProfile ? inspectCopilotPayloadInventory(pluginRoot, expectedVersion) : null;
+  if (copilotProfile && copilotInventory.status !== "matched") {
+    throw new Error(`Built Copilot plugin inventory is invalid: ${copilotInventory.reason}`);
+  }
+  if (!copilotProfile && expectedCodexInstallVersion !== expectedVersion) {
     if (!isCodexLocalInstallVersion(expectedVersion, expectedCodexInstallVersion, sourceDigest)) {
       throw new Error(`Invalid AGDF Codex local install version: ${expectedCodexInstallVersion}`);
     }
@@ -199,6 +226,8 @@ function validateBuiltPlugin(pluginRoot, expectedVersion, expectedCodexInstallVe
       runtimeManifest: runtime,
       pluginVersion: expectedCodexInstallVersion,
       allowLegacy: allowLegacyProvenanceForMigration,
+      profileId,
+      inventoryDigest: copilotInventory?.inventoryDigest ?? null,
     });
     if (provenance.status !== "matched"
         && !(allowLegacyProvenanceForMigration && provenance.status === "legacy")) {
@@ -208,11 +237,15 @@ function validateBuiltPlugin(pluginRoot, expectedVersion, expectedCodexInstallVe
   return definition;
 }
 
-function validateMarketplaceRoot(root, definition = pluginDefinition) {
-  const codex = readJson(join(root, ".agents", "plugins", "marketplace.json"), "Codex local marketplace manifest");
-  const claude = readJson(join(root, ".claude-plugin", "marketplace.json"), "Claude local marketplace manifest");
+function validateMarketplaceRoot(root, definition = pluginDefinition, { profileId = "runtime-plugin" } = {}) {
+  const copilotProfile = profileId === "copilot-runtime-plugin";
+  const codex = copilotProfile ? null : readJson(join(root, ".agents", "plugins", "marketplace.json"), "Codex local marketplace manifest");
+  const copilot = copilotProfile ? readJson(join(root, ".github", "plugin", "marketplace.json"), "Copilot local marketplace manifest") : null;
+  const claude = copilotProfile ? null : readJson(join(root, ".claude-plugin", "marketplace.json"), "Claude local marketplace manifest");
   const serializedCodex = JSON.stringify(codex);
-  const codexShape = serializedCodex === JSON.stringify(codexMarketplace(definition))
+  const codexShape = copilotProfile
+    ? "current"
+    : serializedCodex === JSON.stringify(codexMarketplace(definition))
     ? "current"
     : serializedCodex === JSON.stringify(legacyCodexMarketplace(definition))
       ? "legacy_full_product_label"
@@ -220,15 +253,19 @@ function validateMarketplaceRoot(root, definition = pluginDefinition) {
   if (codexShape === "invalid") {
     throw new Error(`Codex local marketplace manifest is not owned by ${MARKETPLACE_ID}: ${root}`);
   }
-  if (JSON.stringify(claude) !== JSON.stringify(claudeMarketplace(definition))) {
+  if (!copilotProfile && JSON.stringify(claude) !== JSON.stringify(claudeMarketplace(definition))) {
     throw new Error(`Claude local marketplace manifest is not owned by ${MARKETPLACE_ID}: ${root}`);
   }
+  if (copilotProfile && JSON.stringify(copilot) !== JSON.stringify(copilotMarketplace(definition))) {
+    throw new Error(`Copilot local marketplace manifest is not owned by ${MARKETPLACE_ID}: ${root}`);
+  }
   return Object.freeze({ codexShape });
 }
 
-function classifyExistingMarketplace(stableRoot, marker) {
+function classifyExistingMarketplace(stableRoot, marker, { profileId = "runtime-plugin" } = {}) {
   const existingPluginRoot = join(stableRoot, "plugins", MARKETPLACE_ID);
-  const existingCodexInstallVersion = marker.codex_install_version ?? marker.version;
+  const copilotProfile = profileId === "copilot-runtime-plugin";
+  const existingCodexInstallVersion = copilotProfile ? marker.version : marker.codex_install_version ?? marker.version;
   if (!isSemanticVersion(marker.version)
       || !/^[a-f0-9]{64}$/.test(marker.plugin_digest ?? "")) {
     throw new Error(`Refusing invalid AGDF marketplace ownership evidence: ${stableRoot}`);
@@ -238,7 +275,7 @@ function classifyExistingMarketplace(stableRoot, marker) {
     "built plugin definition",
   );
   const hasCurrentProvenance = existsSync(join(existingPluginRoot, INSTALLATION_PROVENANCE_FILE));
-  const hasLegacyProvenance = existsSync(join(existingPluginRoot, LEGACY_LOCAL_INSTALL_FILE));
+  const hasLegacyProvenance = !copilotProfile && existsSync(join(existingPluginRoot, LEGACY_LOCAL_INSTALL_FILE));
   const preProvenanceCandidate = !hasCurrentProvenance
     && !hasLegacyProvenance
     && !Object.hasOwn(definition, "distributionProfiles");
@@ -249,9 +286,9 @@ function classifyExistingMarketplace(stableRoot, marker) {
     marker.source_digest ?? "",
     preProvenanceCandidate
       ? { allowPreProvenanceShape: true }
-      : { requireInstallationProvenance: true, allowLegacyProvenanceForMigration: true },
+      : { requireInstallationProvenance: true, allowLegacyProvenanceForMigration: true, profileId },
   );
-  const marketplace = validateMarketplaceRoot(stableRoot, existingDefinition);
+  const marketplace = validateMarketplaceRoot(stableRoot, existingDefinition, { profileId });
   if (digestDirectory(existingPluginRoot) !== marker.plugin_digest) {
     throw new Error(`Refusing tampered AGDF marketplace root: ${stableRoot}`);
   }
@@ -287,25 +324,30 @@ function recoverInterruptedTransaction(stableRoot, stageRoot, backupRoot, failed
 
 export function prepareLocalMarketplace({
   dataRoot = defaultAgdfDataRoot(),
-  builtPluginRoot = join(generatedRoot, "plugins", "agdf"),
+  builtPluginRoot,
   expectedVersion = pluginDefinition.version,
   codexInstallVersion = expectedVersion,
   codexRegistrationRevision = null,
+  profileId = "runtime-plugin",
 } = {}) {
   dataRoot = resolve(dataRoot);
+  const copilotProfile = profileId === "copilot-runtime-plugin";
+  if (!builtPluginRoot) builtPluginRoot = copilotProfile
+    ? join(generatedRoot, "plugins", "copilot", "agdf")
+    : join(generatedRoot, "plugins", "agdf");
   builtPluginRoot = resolve(builtPluginRoot);
-  const stableRoot = join(dataRoot, "marketplaces", MARKETPLACE_ID);
+  const stableRoot = join(dataRoot, "marketplaces", copilotProfile ? "agdf-copilot" : MARKETPLACE_ID);
   const parent = dirname(stableRoot);
   const stageRoot = `${stableRoot}.stage`;
   const backupRoot = `${stableRoot}.backup`;
   const failedRoot = `${stableRoot}.failed`;
   if (!pathInside(dataRoot, stableRoot) || dirname(stableRoot) !== parent) throw new Error(`Unsafe AGDF marketplace root: ${stableRoot}`);
   const sourceDigest = digestPluginSource(builtPluginRoot, expectedVersion);
-  if (codexInstallVersion !== expectedVersion
+  if (!copilotProfile && codexInstallVersion !== expectedVersion
       && !isCodexLocalInstallVersion(expectedVersion, codexInstallVersion, sourceDigest)) {
     throw new Error(`Invalid AGDF Codex local install version: ${codexInstallVersion}`);
   }
-  const targetDefinition = validateBuiltPlugin(builtPluginRoot, expectedVersion);
+  const targetDefinition = validateBuiltPlugin(builtPluginRoot, expectedVersion, expectedVersion, "", { profileId });
   mkdirSync(parent, { recursive: true });
   recoverInterruptedTransaction(stableRoot, stageRoot, backupRoot, failedRoot);
 
@@ -313,6 +355,7 @@ export function prepareLocalMarketplace({
   if (existsSync(stableRoot)) {
     try {
       existing = ownership(stableRoot);
+      if ((existing.profile_id ?? "runtime-plugin") !== profileId) throw new Error(`AGDF marketplace profile mismatch: ${stableRoot}`);
     } catch (error) {
       throw invalidExistingMarketplace(error);
     }
@@ -325,7 +368,7 @@ export function prepareLocalMarketplace({
   if (existing) {
     let classified;
     try {
-      classified = classifyExistingMarketplace(stableRoot, existing);
+      classified = classifyExistingMarketplace(stableRoot, existing, { profileId });
     } catch (error) {
       throw invalidExistingMarketplace(error);
     }
@@ -338,6 +381,7 @@ export function prepareLocalMarketplace({
       schema_version: 1,
       owner: "create-agdf",
       marketplace_id: MARKETPLACE_ID,
+      profile_id: profileId,
       codex_registration_revision: targetCodexRegistrationRevision,
       version: expectedVersion,
       codex_install_version: codexInstallVersion,
@@ -348,8 +392,8 @@ export function prepareLocalMarketplace({
     });
     const stagedPluginRoot = join(stageRoot, "plugins", MARKETPLACE_ID);
     cpSync(builtPluginRoot, stagedPluginRoot, { recursive: true });
-    validateBuiltPlugin(stagedPluginRoot, expectedVersion);
-    if (codexInstallVersion !== expectedVersion) {
+    validateBuiltPlugin(stagedPluginRoot, expectedVersion, expectedVersion, "", { profileId });
+    if (!copilotProfile && codexInstallVersion !== expectedVersion) {
       const codexManifestPath = join(stagedPluginRoot, ".codex-plugin", "plugin.json");
       writeJson(codexManifestPath, { ...readJson(codexManifestPath, "built Codex plugin manifest"), version: codexInstallVersion });
     }
@@ -357,25 +401,31 @@ export function prepareLocalMarketplace({
     writeJson(join(stagedPluginRoot, INSTALLATION_PROVENANCE_FILE), {
       schema_version: 1,
       owner: "create-agdf",
-      profile_id: "runtime-plugin",
+      profile_id: profileId,
       marketplace_id: MARKETPLACE_ID,
       canonical_version: expectedVersion,
       codex_install_version: codexInstallVersion,
       source_digest: sourceDigest,
       runtime_digest: runtimeManifest.digest,
+      ...(copilotProfile ? { inventory_digest: inspectCopilotPayloadInventory(stagedPluginRoot, expectedVersion).inventoryDigest } : {}),
     });
     if (existsSync(join(stagedPluginRoot, LEGACY_LOCAL_INSTALL_FILE))) {
       rmSync(join(stagedPluginRoot, LEGACY_LOCAL_INSTALL_FILE));
     }
-    validateBuiltPlugin(stagedPluginRoot, expectedVersion, codexInstallVersion, sourceDigest, { requireInstallationProvenance: true });
-    writeJson(join(stageRoot, ".agents", "plugins", "marketplace.json"), codexMarketplace(targetDefinition));
-    writeJson(join(stageRoot, ".claude-plugin", "marketplace.json"), claudeMarketplace(targetDefinition));
-    validateMarketplaceRoot(stageRoot, targetDefinition);
+    validateBuiltPlugin(stagedPluginRoot, expectedVersion, copilotProfile ? expectedVersion : codexInstallVersion, sourceDigest, { requireInstallationProvenance: true, profileId });
+    if (copilotProfile) {
+      writeJson(join(stageRoot, ".github", "plugin", "marketplace.json"), copilotMarketplace(targetDefinition));
+    } else {
+      writeJson(join(stageRoot, ".agents", "plugins", "marketplace.json"), codexMarketplace(targetDefinition));
+      writeJson(join(stageRoot, ".claude-plugin", "marketplace.json"), claudeMarketplace(targetDefinition));
+    }
+    validateMarketplaceRoot(stageRoot, targetDefinition, { profileId });
     const pluginDigest = digestDirectory(stagedPluginRoot);
     const marker = {
       schema_version: 1,
       owner: "create-agdf",
       marketplace_id: MARKETPLACE_ID,
+      profile_id: profileId,
       codex_registration_revision: targetCodexRegistrationRevision,
       version: expectedVersion,
       codex_install_version: codexInstallVersion,
@@ -448,6 +498,10 @@ export function prepareLocalMarketplace({
   }
 }
 
+export function prepareCopilotMarketplace(options = {}) {
+  return prepareLocalMarketplace({ ...options, profileId: "copilot-runtime-plugin", codexInstallVersion: options.expectedVersion ?? pluginDefinition.version });
+}
+
 export function inspectLocalMarketplaceProjection({
   dataRoot = defaultAgdfDataRoot(),
   expectedVersion = pluginDefinition.version,
@@ -478,6 +532,34 @@ export function inspectLocalMarketplaceProjection({
   });
 }
 
+export function inspectOwnedSharedMarketplaceForCopilotMigration({
+  dataRoot = defaultAgdfDataRoot(),
+  expectedVersion = pluginDefinition.version,
+} = {}) {
+  const root = join(resolve(dataRoot), "marketplaces", MARKETPLACE_ID);
+  if (!existsSync(root)) return null;
+  const marker = ownership(root);
+  if ((marker.profile_id ?? "runtime-plugin") !== "runtime-plugin"
+      || marker.version !== expectedVersion
+      || !/^[a-f0-9]{64}$/.test(marker.plugin_digest ?? "")) {
+    throw new Error(`Refusing incompatible AGDF shared marketplace migration source: ${root}`);
+  }
+  const pluginRoot = join(root, "plugins", MARKETPLACE_ID);
+  const definition = readJson(join(pluginRoot, "meta", "agdf-plugin.definition.json"), "shared plugin definition");
+  const runtime = readJson(join(pluginRoot, "runtime", "runtime-manifest.json"), "shared runtime manifest");
+  const codex = readJson(join(pluginRoot, ".codex-plugin", "plugin.json"), "shared Codex manifest");
+  const claude = readJson(join(pluginRoot, ".claude-plugin", "plugin.json"), "shared Claude manifest");
+  if (definition.id !== MARKETPLACE_ID
+      || definition.version !== expectedVersion
+      || runtime.version !== expectedVersion
+      || claude.version !== expectedVersion
+      || (codex.version !== expectedVersion && !isCodexLocalInstallVersion(expectedVersion, codex.version))
+      || digestDirectory(pluginRoot) !== marker.plugin_digest) {
+    throw new Error(`Refusing stale or tampered AGDF shared marketplace migration source: ${root}`);
+  }
+  return Object.freeze({ root, pluginRoot, version: marker.version, digest: marker.plugin_digest });
+}
+
 function normalizedLegacySource(value) {
   if (typeof value !== "string") return "";
   return value.trim().toLowerCase()

package/lib/installers/plugin-installers.js

@@ -4,7 +4,7 @@ import { join, resolve } from "node:path";
 import process from "node:process";
 import { pluginDefinition } from "../cli/runtime-context.js";
 import { digestNormalizedPluginSource } from "../runtime/plugin-provenance.js";
-import { CODEX_REGISTRATION_REVISION, classifyMarketplaceList, inspectLocalMarketplaceProjection, isCodexLocalInstallVersion, prepareLocalMarketplace } from "./local-marketplace.js";
+import { CODEX_REGISTRATION_REVISION, classifyMarketplaceList, inspectLocalMarketplaceProjection, inspectOwnedSharedMarketplaceForCopilotMigration, isCodexLocalInstallVersion, prepareCopilotMarketplace, prepareLocalMarketplace } from "./local-marketplace.js";
 
 export const COPILOT_CLI_NPM_PACKAGE = "@github/copilot@1.0.80";
 
@@ -99,7 +99,7 @@ export function installClaudeGlobalPlugin({ exec = execFileSync, prepare = prepa
   }
 }
 
-export function installCopilotGlobalPlugin({ exec = execFileSync, packagedCopilotExec = execFileSync, prepare = prepareLocalMarketplace, dataRoot, pluginRoot } = {}) {
+export function installCopilotGlobalPlugin({ exec = execFileSync, packagedCopilotExec = execFileSync, prepare = prepareCopilotMarketplace, dataRoot, pluginRoot } = {}) {
   const expectedVersion = pluginDefinition.version;
   const transaction = pluginRoot ? null : prepare({ expectedVersion, ...(dataRoot ? { dataRoot } : {}) });
   const effectivePluginRoot = pluginRoot ?? transaction?.pluginRoot;
@@ -139,19 +139,41 @@ export function installCopilotGlobalPlugin({ exec = execFileSync, packagedCopilo
   }
   const directInstalled = pluginListHasPlugin(before, "agdf");
   const marketplaceInstalled = pluginListHasPlugin(before, "agdf@agdf");
+  let legacySharedProjection = null;
+  if (transaction) {
+    try { legacySharedProjection = inspectOwnedSharedMarketplaceForCopilotMigration({ ...(dataRoot ? { dataRoot } : {}), expectedVersion }); } catch {}
+  }
   let marketplaceAdded = false;
+  let legacyMarketplaceRemoved = false;
+  let marketplacePluginRemoved = false;
   let directRemoved = false;
   try {
     const nativeOutput = [];
     const marketplaceOutput = runPluginPhase(activeExec, "copilot", ["plugin", "marketplace", "list"], "marketplace", captureOptions());
-    const marketplace = classifyCopilotMarketplaceList(marketplaceOutput, transaction?.root ?? resolve(effectivePluginRoot, "..", ".."));
+    const marketplace = classifyCopilotMarketplaceList(
+      marketplaceOutput,
+      transaction?.root ?? resolve(effectivePluginRoot, "..", ".."),
+      { ownedLegacyRoots: legacySharedProjection ? [legacySharedProjection.root] : [] },
+    );
     if (marketplace.state === "conflict") {
       throw lifecycleAdapterError("marketplace", `Refusing to replace non-AGDF Copilot marketplace registration agdf (${marketplace.source || "unknown source"}).`);
     }
-    if (marketplace.state === "absent") {
+    if (marketplace.state === "owned_legacy_shared") {
+      if (marketplaceInstalled) {
+        nativeOutput.push(runPluginPhase(activeExec, "copilot", ["plugin", "uninstall", "agdf@agdf"], "plugin_operation", captureOptions()));
+        marketplacePluginRemoved = true;
+      }
+      nativeOutput.push(runPluginPhase(activeExec, "copilot", ["plugin", "marketplace", "remove", "agdf"], "marketplace", captureOptions()));
+      legacyMarketplaceRemoved = true;
+    }
+    if (["absent", "owned_legacy_shared"].includes(marketplace.state)) {
       nativeOutput.push(runPluginPhase(activeExec, "copilot", ["plugin", "marketplace", "add", transaction?.root ?? resolve(effectivePluginRoot, "..", "..")], "marketplace", captureOptions()));
       marketplaceAdded = true;
     }
+    if (marketplace.state === "owned_local_current" && marketplaceInstalled) {
+      nativeOutput.push(runPluginPhase(activeExec, "copilot", ["plugin", "uninstall", "agdf@agdf"], "plugin_operation", captureOptions()));
+      marketplacePluginRemoved = true;
+    }
     if (directInstalled) {
       nativeOutput.push(runPluginPhase(activeExec, "copilot", ["plugin", "uninstall", "agdf"], "plugin_operation", captureOptions()));
       directRemoved = true;
@@ -169,7 +191,7 @@ export function installCopilotGlobalPlugin({ exec = execFileSync, packagedCopilo
       surface: "copilot", operation: directInstalled || marketplaceInstalled ? "update" : "install", expectedVersion,
       installedVersion: installedVersion || null, verificationStatus: installedVersion ? "healthy" : "degraded",
       manualHandoff: false,
-      evidence: [...bootstrapEvidence, "durable_local_plugin_stage", "copilot plugin marketplace list", ...(marketplaceAdded ? ["copilot plugin marketplace add"] : ["marketplace:owned_local_current"]), ...(directRemoved ? ["direct_install_migrated"] : []), "copilot plugin install agdf@agdf", "copilot plugin list", `local_plugin_root:${effectivePluginRoot}`, `source_digest:${sourceDigest}`, ...(installedVersion ? [] : ["host_did_not_expose_version"])],
+      evidence: [...bootstrapEvidence, "durable_local_plugin_stage", "copilot plugin marketplace list", ...(marketplaceAdded ? ["copilot plugin marketplace add"] : ["marketplace:owned_local_current"]), ...(legacyMarketplaceRemoved ? ["shared_marketplace_registration_migrated"] : []), ...(directRemoved ? ["direct_install_migrated"] : []), "copilot plugin install agdf@agdf", "copilot plugin list", `local_plugin_root:${effectivePluginRoot}`, `source_digest:${sourceDigest}`, ...(installedVersion ? [] : ["host_did_not_expose_version"])],
       pluginRoot: effectivePluginRoot, runtimeDigest: runtimeManifest.digest, sourceDigest, nativeOutput: nativeOutput.filter(Boolean).map(String),
     };
   } catch (error) {
@@ -188,18 +210,32 @@ export function installCopilotGlobalPlugin({ exec = execFileSync, packagedCopilo
         error.evidence = { ...(error.evidence ?? {}), marketplace_recovery: commandErrorText(recoveryError) };
       }
     }
+    if (legacyMarketplaceRemoved && legacySharedProjection) {
+      try {
+        activeExec("copilot", ["plugin", "marketplace", "add", legacySharedProjection.root], captureOptions());
+        if (marketplacePluginRemoved) activeExec("copilot", ["plugin", "install", "agdf@agdf"], captureOptions());
+      } catch (recoveryError) {
+        error.evidence = { ...(error.evidence ?? {}), legacy_marketplace_recovery: commandErrorText(recoveryError) };
+      }
+    } else if (marketplacePluginRemoved) {
+      try {
+        activeExec("copilot", ["plugin", "install", "agdf@agdf"], captureOptions());
+      } catch (recoveryError) {
+        error.evidence = { ...(error.evidence ?? {}), marketplace_plugin_recovery: commandErrorText(recoveryError) };
+      }
+    }
     throw error;
   }
 }
 
-export function classifyCopilotMarketplaceList(output, expectedRoot) {
+export function classifyCopilotMarketplaceList(output, expectedRoot, { ownedLegacyRoots = [] } = {}) {
   const line = String(output || "").split(/\r?\n/).find((entry) => /^\s*[◆•]?\s*agdf\s+\(/.test(entry));
   if (!line) return { state: "absent", source: "" };
   const local = line.match(/\(Local:\s*(.+)\)\s*$/);
   if (!local) return { state: "conflict", source: line.trim() };
-  return resolve(local[1]) === resolve(expectedRoot)
-    ? { state: "owned_local_current", source: local[1] }
-    : { state: "conflict", source: local[1] };
+  if (resolve(local[1]) === resolve(expectedRoot)) return { state: "owned_local_current", source: local[1] };
+  if (ownedLegacyRoots.some((root) => resolve(root) === resolve(local[1]))) return { state: "owned_legacy_shared", source: local[1] };
+  return { state: "conflict", source: local[1] };
 }
 
 export function copilotNpmInvocation({ env = process.env, platform = process.platform, execPath = process.execPath } = {}) {