create-agdf 0.2.6 → 0.2.8

package/NOTICE

@@ -0,0 +1,10 @@
+AI Governance & Delivery Framework (AGDF)
+
+Copyright 2024-2026 Arndt Gold.
+
+The create-agdf package is licensed under the Apache License, Version 2.0.
+
+AGDF(TM) and AI Governance & Delivery Framework(TM) are marks of Arndt Gold.
+The package license does not grant permission to use project names, trademarks,
+service marks or logos except as required for reasonable and customary
+description of the origin of the project.

package/README.md

@@ -5,12 +5,13 @@ Bootstrap AGDF repository instructions and a machine-checkable control loop for
 ## Usage
 
 ```bash
-npm create agdf@latest codex
-npm create agdf@latest copilot
-npm create agdf@latest both
-npm create agdf@latest init
-npm create agdf@latest doctor
-npm create agdf@latest gate-check
+npm create agdf@latest -- codex
+npm create agdf@latest -- copilot
+npm create agdf@latest -- both
+npm create agdf@latest -- init
+npm create agdf@latest -- config --language en
+npm create agdf@latest -- doctor
+npm create agdf@latest -- gate-check
 ```
 
 Optional flags:
@@ -26,12 +27,13 @@ If no language is provided, `create-agdf` derives the preference from the local
 - `codex` writes a repository-local Codex marketplace under `.agents/plugins/` and a local AGDF plugin copy under `plugins/agdf/`
 - `copilot` writes `AGENTS.md`, Copilot custom instructions under `.github/`, visible repository skills under `.github/skills/`, and AGDF control templates under `.agdf/control/`
 - `both` writes the Codex repository-local marketplace plus the Copilot-facing repository files
+- `config` writes or updates only `.agdf/control/config.json` for an already installed plugin or an existing repository
 
 If the target repository already has an `AGENTS.md`, `create-agdf` preserves it and writes `AGENTS.agdf.md` instead of replacing your existing instructions. Merge the AGDF fragment into your current `AGENTS.md` when you want Copilot to load both instruction sets. The generated `.github/copilot-instructions.md` keeps Copilot pointed at `AGENTS.md`, `.github/skills/` and `.agdf/control/` without duplicating the full AGDF rule model. Use `--force` only when you explicitly want to overwrite generated files.
 
 Use the `codex` target when AGDF should be available only inside one repository instead of being installed as a personal/global Codex plugin.
 
-After `npm create agdf@latest codex`, restart Codex in that repository, open `/plugins`, select `This repository` and install `agdf`.
+After `npm create agdf@latest -- codex`, restart Codex in that repository, open `/plugins`, select `This repository` and install `agdf`.
 
 ## Control scaffold
 
@@ -44,10 +46,10 @@ The generated `.agdf/control/templates/` files are reusable starting points for
 - `CONTEXT_GRAPH.md` for durable Brownfield findings, decisions, risks, evidence and exit criteria
 - `AGENT_QUALITY_CONTRACTS.json` for reusable block, revise and warning conditions
 
-Use `init` to promote those templates into live control files:
+Use `init` to promote those templates into live control files when the repository should own durable AGDF control state:
 
 ```bash
-npm create agdf@latest init
+npm create agdf@latest -- init
 ```
 
 This writes:
@@ -66,11 +68,17 @@ This writes:
 
 `config.json` stores `artifact_language` and `chat_language` for governed work in the target repository. Runtime rules stay English so all AGDF surfaces share the same control contract.
 
+For an existing repository where the plugin is already installed and only the language preference is missing or wrong, use the lighter config target:
+
+```bash
+npm create agdf@latest -- config --language en
+```
+
 Use `doctor` to check whether the live control state is actionable:
 
 ```bash
-npm create agdf@latest doctor
-npm create agdf@latest doctor --json
+npm create agdf@latest -- doctor
+npx --yes create-agdf@latest doctor --json
 ```
 
 The doctor reports missing live control files, missing current gate, missing next allowed action, empty evidence, empty backlog pointer, empty source-of-truth registry, duplicate active SoT rows and invalid quality contracts. It exits non-zero only for blocking control failures.
@@ -78,13 +86,13 @@ The doctor reports missing live control files, missing current gate, missing nex
 Use `gate-check` to derive the next process decision from the doctor result and `AGDF_RUN.md`:
 
 ```bash
-npm create agdf@latest gate-check
-npm create agdf@latest gate-check --json
+npm create agdf@latest -- gate-check
+npx --yes create-agdf@latest gate-check --json
 ```
 
 The gate check reports `open | blocked`, the current gate, blocking reason, missing exact approval, allowed outputs, forbidden outputs, next allowed action, evidence references and the embedded doctor report.
 
-Together, `init`, `doctor` and `gate-check --json` turn AGDF from an instruction layer into a repository control system: the agent can be guided by rules, and the repository state can be checked before the next governed step.
+Together, `init`, `doctor` and `gate-check --json` turn AGDF from an instruction layer into a repository control system when durable control state is needed. For normal fresh requests, the agent-native path can stay lighter: draft the minimal UR in the response, request `Approval: UR`, and use CLI validators only when machine-readable proof is useful.
 
 ## Single source of truth
 
@@ -119,3 +127,8 @@ The repository publishes this package from `create-agdf/` via the GitHub Actions
 - Create or update the version in `create-agdf/package.json`
 - Push a matching git tag in the form `create-agdf-v<version>`
 - Ensure the repository secret `NPM_TOKEN` exists with publish rights for `create-agdf`
+
+## Trademark Notice
+
+AGDF(TM) and AI Governance & Delivery Framework(TM) are marks of Arndt Gold.
+Use of the AGDF name and marks is governed by the project trademark guidelines.

package/bin/create-agdf.js

@@ -11,7 +11,7 @@ const generatedRoot = join(packageRoot, "generated");
 const pluginDefinitionPath = join(generatedRoot, "plugins", "agdf", "meta", "agdf-plugin.definition.json");
 const pluginDefinition = JSON.parse(readFileSync(pluginDefinitionPath, "utf8"));
 const pluginInstallCommand = "claude plugin add arndtgold/ai-native-governance-delivery-framework";
-const allowedTargets = new Set(["codex", "copilot", "both", "init", "doctor", "gate-check", "delivery-map"]);
+const allowedTargets = new Set(["codex", "copilot", "both", "init", "config", "doctor", "gate-check", "delivery-map"]);
 const agdfFragmentPath = "AGENTS.agdf.md";
 const userGateOrder = ["UR", "PRD", "SD", "TP", "QA", "UAT"];
 const durableGateArtefacts = new Set(["UR", "PRD", "SD", "TP", "QA"]);
@@ -117,13 +117,14 @@ function printUsage() {
   console.log(`create-agdf
 
 Usage:
-  npm create agdf@latest codex
-  npm create agdf@latest copilot
-  npm create agdf@latest both
-  npm create agdf@latest init
-  npm create agdf@latest doctor
-  npm create agdf@latest gate-check
-  npm create agdf@latest delivery-map
+  npm create agdf@latest -- codex
+  npm create agdf@latest -- copilot
+  npm create agdf@latest -- both
+  npm create agdf@latest -- init
+  npm create agdf@latest -- config --language de
+  npm create agdf@latest -- doctor
+  npm create agdf@latest -- gate-check
+  npm create agdf@latest -- delivery-map
 
 Options:
   --dir <path>   Write files into a specific directory
@@ -262,7 +263,7 @@ function parseArgs(argv) {
   }
 
   if (!target || !allowedTargets.has(target)) {
-    console.error("Please choose one target: codex, copilot, both, init, doctor, gate-check or delivery-map.");
+    console.error("Please choose one target: codex, copilot, both, init, config, doctor, gate-check or delivery-map.");
     printUsage();
     process.exit(1);
   }
@@ -280,11 +281,11 @@ function loadAsset(relativePath) {
   return readFileSync(join(generatedRoot, relativePath), "utf8");
 }
 
-function writeGeneratedFile(targetDir, relativePath, content, force) {
+function writeGeneratedFile(targetDir, relativePath, content, force, allowOverwrite = false) {
   const outputPath = join(targetDir, relativePath);
   mkdirSync(dirname(outputPath), { recursive: true });
 
-  if (existsSync(outputPath) && !force) {
+  if (existsSync(outputPath) && !force && !allowOverwrite) {
     throw new Error(`Refusing to overwrite existing file: ${relativePath}. Re-run with --force if you want to replace it.`);
   }
 
@@ -301,6 +302,15 @@ function addLanguageConfig(files, languagePreference) {
 function generatedFilesForTarget(target, targetDir, force, languagePreference) {
   const files = [];
 
+  if (target === "config") {
+    files.push({
+      path: join(".agdf", "control", "config.json"),
+      content: languageConfigContent(languagePreference),
+      allowOverwrite: true,
+    });
+    return files;
+  }
+
   if (target === "init") {
     addLanguageConfig(files, languagePreference);
     files.push({
@@ -386,10 +396,15 @@ function printNextSteps(target, destination, files, wroteAgentsFragment) {
   }
   if (target === "init") {
     console.log("- Fill .agdf/control/AGDF_RUN.md with the current gate, evidence and next allowed action.");
-    console.log("- Run npm create agdf@latest doctor to check the control state before the next agent run.");
+    console.log("- Run npm create agdf@latest -- doctor to check the control state before the next agent run.");
     console.log("- Commit the live control files once they represent the repository's current delivery state.");
     return;
   }
+  if (target === "config") {
+    console.log("- Restart or start a new agent session so the AGDF SessionStart hook reads the updated project language config.");
+    console.log("- Run npm create agdf@latest -- doctor when this repository also uses durable AGDF control state.");
+    return;
+  }
   if (wroteAgentsFragment) {
     console.log(`- Existing AGENTS.md detected. Merge ${agdfFragmentPath} into your current AGENTS.md before using Copilot with AGDF.`);
   }
@@ -402,7 +417,7 @@ function printNextSteps(target, destination, files, wroteAgentsFragment) {
   }
   if (target === "copilot" || target === "both") {
     console.log("- In GitHub Copilot CLI, run /instructions after the AGENTS.md step is complete to confirm that AGDF instructions and the repository skills are visible.");
-    console.log("- Run npm create agdf@latest init when the repository needs live AGDF control files.");
+    console.log("- Run npm create agdf@latest -- init when the repository needs live AGDF control files.");
   }
   console.log("- Commit the generated files so the repository becomes the source of truth.");
 }
@@ -506,7 +521,7 @@ function evaluateDoctor(targetDir) {
         ? "Live control file is missing; only the template exists."
         : "Required live control file is missing.",
       relativePath,
-      "Run npm create agdf@latest init, then fill the live control files with the current repository state.",
+      "Run npm create agdf@latest -- init only when the repository should own durable AGDF control state or deterministic setup is explicitly needed.",
     );
   }
 
@@ -1119,13 +1134,12 @@ function evaluateGateCheck(targetDir) {
     currentGate = "UR";
     missingApproval = "Approval: UR";
     allowed = [
-      "initialize the AGDF control scaffold with npm create agdf@latest init",
-      "draft and persist the minimal UR for the requested change",
-      "link the UR from AGDF_RUN.md and MASTER_BACKLOG.md",
+      "draft the minimal UR for the requested change in the response",
       "request exact approval: Approval: UR",
+      "run npm create agdf@latest -- init only when durable control state or deterministic setup is explicitly needed",
     ];
     forbidden = ["create PRD", "create SD", "create TP", "run Brownfield Analysis", "implement code", "claim QA or release readiness"];
-    nextAllowedAction = "Initialize .agdf/control, draft the minimal UR for the request, then ask for exact approval: Approval: UR.";
+    nextAllowedAction = "Draft the minimal UR for the request in the response, then ask for exact approval: Approval: UR. Do not write a full .agdf/control scaffold unless durable control state or deterministic setup is explicitly needed.";
   } else if (doctorBlocker) {
     status = "blocked";
     blockingReason = doctorBlocker.code;
@@ -1290,7 +1304,7 @@ function main() {
 
   try {
     for (const file of files) {
-      writeGeneratedFile(options.dir, file.path, file.content, options.force);
+      writeGeneratedFile(options.dir, file.path, file.content, options.force, file.allowOverwrite);
     }
   } catch (error) {
     console.error(error.message);

package/generated/.agdf/control/README.md

@@ -49,15 +49,21 @@ Keep these files small and reviewable. They are control artefacts, not a second
 Create the live files with:
 
 ```bash
-npm create agdf@latest init
+npm create agdf@latest -- init
+```
+
+If only the project language preference is missing or should change after plugin installation, write just the config file:
+
+```bash
+npm create agdf@latest -- config --language en
 ```
 
 Then check whether the live state is actionable:
 
 ```bash
-npm create agdf@latest doctor
-npm create agdf@latest doctor --json
-npm create agdf@latest gate-check --json
+npm create agdf@latest -- doctor
+npx --yes create-agdf@latest doctor --json
+npx --yes create-agdf@latest gate-check --json
 ```
 
 `doctor` does not replace agent judgment. It catches basic control failures: missing live files, missing current gate, missing next allowed action, empty evidence, empty backlog pointer, empty source-of-truth registry, duplicate active SoT rows and invalid quality contracts.

package/generated/.github/copilot-instructions.md

@@ -5,9 +5,11 @@ AGDF is active in this repository.
 - Treat `AGENTS.md` as the primary repository instruction source.
 - Use `.github/skills/` for AGDF task workflows instead of inventing parallel process rules.
 - Use `.agdf/control/` for durable run state, backlog pointers, source-of-truth ownership, Context Graph knowledge and quality contracts.
+- AGDF is agent-native first and CLI-verifiable by design.
 - Apply AGDF natively from `AGENTS.md`, repository skills and live `.agdf/control/` state before reaching for helper commands.
 - Before non-trivial implementation or formal delivery work, determine whether the request is a Quick Task or Structured Delivery.
 - If approval, evidence, ownership or the next allowed action is unclear, run the AGDF gate-check workflow before creating later artefacts or code.
-- Use machine-readable checks such as `doctor --json`, `gate-check --json` or `delivery-map --json` as validators, not as the primary workflow.
+- Use `doctor --json`, `gate-check --json` or `delivery-map --json` as deterministic validators for CI, PR evidence, regression checks and audit trails, not as the primary workflow.
 - Do not infer gate approval from generic consent such as "ok", "go ahead", "do it", "continue", "leg los" or "approved".
 - Do not treat chat history as the source of truth for gate state, approvals, evidence or delivery status.
+- Do not paste full control files, templates or artefact bodies into chat unless the user explicitly asks for the full content; summarize and link paths instead.

package/generated/.github/skills/agdf-gate-check/SKILL.md

@@ -21,9 +21,10 @@ This skill must not create later artefacts such as PRD, SD, TP, CD, CR, QA, or U
 Use `../agdf-runtime-contract.md` for gate terms, closeout discipline, and non-duplication rules.
 The canonical gate order and transition model live only in the Runtime Contract. This skill evaluates the current state against that model; it must not maintain a second complete gate table.
 
-## Native Control Path
+## Agent-Native Control Path
 
-AGDF is applied natively through this skill, the agent router, and live `.agdf/control/` state.
+AGDF is agent-native first and CLI-verifiable by design.
+This skill is the primary operating path for gate judgement.
 
 First inspect the durable control state directly:
 
@@ -33,18 +34,23 @@ First inspect the durable control state directly:
 - `.agdf/control/CONTEXT_GRAPH.md`
 - `.agdf/control/AGENT_QUALITY_CONTRACTS.json`
 
-Use the executable control path when a machine-readable check is requested, when the gate state is ambiguous, or when a repository-local automation needs JSON evidence:
+If required control files are missing, do not automatically create a full `.agdf/control/` scaffold for a fresh small request.
+The default first action is to draft the minimal UR in the response and request `Approval: UR`.
+Use `init` only when the user explicitly asks for durable AGDF control state, the repository already uses `.agdf/control/` as its live working state, or a deterministic CLI/CI setup path is being executed.
+
+Use the executable control path when a machine-readable check is requested, when the gate state is ambiguous, when CI or PR evidence is needed, or when a repository-local automation needs JSON output:
 
 ```bash
-npm create agdf@latest doctor --json
-npm create agdf@latest gate-check --json
-npm create agdf@latest delivery-map --json
+npm create agdf@latest -- init
+npx --yes create-agdf@latest doctor --json
+npx --yes create-agdf@latest gate-check --json
+npx --yes create-agdf@latest delivery-map --json
 ```
 
-`doctor` checks whether `.agdf/control/` is actionable. `agdf-gate-check` consumes that result and `AGDF_RUN.md` to report the operative process decision: `open | blocked`, current gate, blocking reason, missing approval, allowed outputs, forbidden outputs, next allowed action and evidence references.
+`init` creates the control scaffold. `doctor` checks whether `.agdf/control/` is actionable. `agdf-gate-check` consumes that result and `AGDF_RUN.md` to report the operative process decision: `open | blocked`, current gate, blocking reason, missing approval, allowed outputs, forbidden outputs, next allowed action and evidence references.
 `delivery-map` reports the durable delivery picture: active artefacts, approvals, Artefact Chain relationships, evidence refs, missing evidence, risks, Context Graph gate effect and machine-readable findings.
 
-The CLI reports are validators and JSON evidence, not the primary user experience and not a second rule system. If a report says `blocked`, do not continue with later-gate artefacts until the reported blocker is resolved.
+The CLI reports are validators and JSON evidence, not the primary user experience, not a required ritual for normal work and not a second rule system. If a report says `blocked`, do not continue with later-gate artefacts until the reported blocker is resolved.
 
 ## Rules
 1. Fail closed when a required approval or artefact status is missing.
@@ -61,7 +67,7 @@ The CLI reports are validators and JSON evidence, not the primary user experienc
 12. Approval text and durable artefact presence are separate requirements for UR, PRD, SD, TP and QA report decisions. Approval text without the corresponding persisted or linked artefact keeps the current gate at that gate.
 13. After Brownfield Review, decide the process size before drafting PRD or implementing: `quick_task | structured_slice | structured_delivery | block`.
 14. The Mode/Slice Decision must be visible and evidenced before any Quick Task execution, PRD shortcut or implementation. A decision value without scope reason and evidence is still missing.
-15. Missing or incomplete control state must not push work back to the user. If the next allowed step is an artefact draft, the agent may initialize the scaffold, draft the current allowed artefact, link it, and then request the exact approval. Implementation remains forbidden.
+15. Missing or incomplete control state must not push setup work back to the user. For a fresh request, draft the current minimal artefact in the response and request the exact approval. Initialize or write `.agdf/control/` only when durable control state is explicitly requested, already live for the repository, or required for a deterministic CLI/CI setup path. Implementation remains forbidden.
 
 ## Gate Evaluation
 
@@ -108,7 +114,7 @@ If a status is not explicit, do not assume it is satisfied.
 8. Treat a generic "start", "continue" or "leg los" request as a request to perform only the current next allowed action.
 9. After Brownfield Review, choose the smallest safe process path before creating later artefacts.
 10. If the selected path is not visibly recorded with scope reason and evidence, keep the run at `Mode/Slice Decision`.
-11. When `.agdf/control/` is missing or incomplete, make the next allowed artefact action explicit. For a fresh request, that means initialize control state, draft the minimal UR, then request `Approval: UR`.
+11. When `.agdf/control/` is missing or incomplete, make the next allowed artefact action explicit. For a fresh request, that means draft the minimal UR in the response, then request `Approval: UR`. Do not write a full control scaffold unless durable control state was explicitly requested or is already the repository's live AGDF working state.
 
 ## Output
 Keep the result short and operational:
@@ -120,6 +126,9 @@ Keep the result short and operational:
 - **Missing approval:** `Approval: <GateName> | none`
 - **Next step:** `<single permissible next step>`
 
+If this skill creates or updates control artefacts, do not paste full file bodies into the chat.
+List paths, summarize the decision, name the blocker or approval needed, and keep the durable content in the files.
+
 ## Forbidden
 This skill must not:
 
@@ -135,5 +144,6 @@ This skill must not:
 - treat "ok", "leg los", "go ahead", "approved" or similar wording as gate approval
 - perform full Brownfield Analysis unless explicitly requested
 - provide implementation snippets while implementation is gated
+- paste full `.agdf/control/` files, templates or artefact bodies into the chat unless the user explicitly asks for the full content
 - present QA or UAT as passed without evidence
 - present release as allowed without QA pass and UAT approval where required

package/generated/.github/skills/agdf-runtime-contract.md

@@ -27,6 +27,19 @@ Use this compact output shape when no formal gate artefact is required:
 
 Do not add a separate `Quality outlook` line for pure Quick Tasks unless the task became a relevant run.
 
+## Chat Output Discipline
+
+Durable artefacts are for the repository, not for flooding the chat.
+When a skill creates or updates `.agdf/control/` files, gate artefacts, reviews, QA reports or OR reports, the chat response must stay compact:
+
+- name the artefact path and status
+- summarize the decision or content in a few lines
+- state the current gate, forbidden work and next permissible step
+- mention validation evidence when available
+
+Do not paste full control files, full artefact bodies, full templates or full generated reports into the chat unless the user explicitly asks to see the full content.
+For larger or more formal work, create or update the durable artefacts fully, then reference them by path and summarize what changed.
+
 ## Relevant Run
 
 A relevant run is any run that changes durable state, creates or updates an AGDF artefact, changes code or runtime behaviour, performs a gate decision, blocks on a governance condition, produces QA/UAT/release evidence, or closes a delivery slice.
@@ -45,7 +58,7 @@ When in doubt, use a short OR-lite only if it clarifies gate state, evidence, ri
 - For UR, PRD, SD, TP and QA, approval and durable artefact presence are separate requirements. A gate is not satisfied by approval text alone when its artefact is missing from `.agdf/control/` or not linked to the authoritative repository SoT.
 - Approval of one user gate permits work on the next allowed gate artefact or required internal step only. It does not permit implementation unless the approved gate is `TP` and required internal implementation prerequisites are satisfied.
 - Gates must never be skipped or inferred from urgency, tone, chat history, task wording or an instruction to "start". The next allowed action is always the next unsatisfied gate or internal mandatory step.
-- Missing control files or missing current-state fields do not forbid the agent from preparing the current allowed artefact. They forbid later-gate work and implementation. For a fresh request, the allowed work is to initialize `.agdf/control/`, draft the minimal UR, link it, and request `Approval: UR`.
+- Missing control files or missing current-state fields do not forbid the agent from preparing the current allowed artefact. They forbid later-gate work and implementation. For a fresh request, the default allowed work is to draft a minimal UR in the response and request `Approval: UR`. Initialize or write `.agdf/control/` only when the user explicitly asks for durable AGDF control state, the repository already uses `.agdf/control/` as its live working state, or a deterministic CLI/CI setup path is being executed.
 - `Approval: UR` permits Brownfield Review after G-00 first, then a Mode/Slice Decision. It never permits implementation by itself.
 - PRD, SD and TP depth is chosen after Brownfield Review through the Mode/Slice Decision, not before existing-system impact is understood.
 - The Mode/Slice Decision must be visible before any PRD shortcut, Quick Task execution or implementation: record the decision, required next gate, scope reason and evidence in `AGDF_RUN.md` or an equivalent linked control artefact.
@@ -151,12 +164,23 @@ When a repository needs durable AGDF state, use the plugin-local `control/` scaf
 
 The scaffold is not a second documentation site. Link to authoritative artefacts instead of copying them.
 
-## Native Runtime
+## Agent-Native Runtime And CLI Verification
+
+AGDF is agent-native first and CLI-verifiable by design.
+
+The primary operating path is the active skill plus the live `.agdf/control/` artefacts.
+Agents should read the repository state, apply this Runtime Contract, create or update only the currently allowed artefact, and make the next permissible step explicit.
+When control state is missing for a fresh request, keep the first step lightweight: draft the minimal UR in the response and request `Approval: UR`.
+Initialize a control scaffold only when durable AGDF control state is explicitly requested, already used by the repository, or required by a deterministic CLI/CI setup path.
+
+Helper commands are deterministic proof and automation interfaces, not the normal-work ritual:
 
-AGDF must work natively through the plugin router, skills and live `.agdf/control/` artefacts.
-Agents should read the live control state and apply the gate model directly before reaching for helper commands.
+- `init` creates the machine-readable control scaffold.
+- `doctor --json` checks whether `.agdf/control/` is consistent and actionable; it is not the reviewer.
+- `gate-check --json` reports reproducible gate state; it does not replace the gate-check skill judgement.
+- `delivery-map --json` reports the delivery picture for CI, PRs, regression checks and audit trails.
 
-Machine-readable commands such as `doctor --json`, `gate-check --json` and `delivery-map --json` are validators and automation interfaces.
+Machine-readable outputs should stay agent-friendly: stable decisions, blocking gate or current gate, missing approval, allowed outputs, forbidden outputs, next step, evidence and findings.
 They make the repository state checkable, but they do not replace the native skill workflow or the durable control artefacts.
 
 ## Delivery Map

package/generated/AGENTS.md

@@ -72,8 +72,9 @@ Use templates as starting points only.
 
 Do not let chat history become the source of truth for gate state, approvals, evidence, backlog status or durable Brownfield knowledge.
 
-AGDF is a native agent workflow first: read the live control state, apply the active skill and make the next allowed step explicit.
-Use `doctor`, `gate-check --json` or `delivery-map --json` as validators when a machine-readable proof is useful, not as a substitute for the router or skills.
+AGDF is agent-native first and CLI-verifiable by design: read the live control state, apply the active skill and make the next allowed step explicit.
+Use `init` only when durable control state is explicitly requested, the repository already uses `.agdf/control/` as its live AGDF working state, or a deterministic CLI/CI setup path is being executed.
+Use `doctor --json`, `gate-check --json` or `delivery-map --json` as deterministic validators for CI, PR evidence, regression checks or audit trails, not as a substitute for the router or skills.
 
 ## Closeout
 For Quick Task Mode, close with the Runtime Contract mini-output only:

package/generated/plugins/agdf/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agdf",
-  "version": "0.2.6",
+  "version": "0.2.8",
   "description": "Codex-first workflow skills for gated, auditable AI-assisted software delivery.",
   "author": {
     "name": "AI-native Governance & Delivery Framework",

package/generated/plugins/agdf/control/README.md

@@ -49,15 +49,21 @@ Keep these files small and reviewable. They are control artefacts, not a second
 Create the live files with:
 
 ```bash
-npm create agdf@latest init
+npm create agdf@latest -- init
+```
+
+If only the project language preference is missing or should change after plugin installation, write just the config file:
+
+```bash
+npm create agdf@latest -- config --language en
 ```
 
 Then check whether the live state is actionable:
 
 ```bash
-npm create agdf@latest doctor
-npm create agdf@latest doctor --json
-npm create agdf@latest gate-check --json
+npm create agdf@latest -- doctor
+npx --yes create-agdf@latest doctor --json
+npx --yes create-agdf@latest gate-check --json
 ```
 
 `doctor` does not replace agent judgment. It catches basic control failures: missing live files, missing current gate, missing next allowed action, empty evidence, empty backlog pointer, empty source-of-truth registry, duplicate active SoT rows and invalid quality contracts.

package/generated/plugins/agdf/hooks/session-start.sh

@@ -1,16 +1,40 @@
 #!/usr/bin/env bash
 # AGDF Session Start Hook
-# Loads the AGDF plugin router and constitution into the agent session.
+# Activates a compact AGDF runtime reminder for the agent session.
 
 SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-ROUTER="${SCRIPT_DIR}/../meta/agdf-agent-router.md"
-CONSTITUTION="${SCRIPT_DIR}/../meta/agdf-constitution.md"
+META_DIR="$(cd "${SCRIPT_DIR}/../meta" && pwd)"
+ROUTER="${META_DIR}/agdf-agent-router.md"
+CONSTITUTION="${META_DIR}/agdf-constitution.md"
+CONFIG_PATH="${PWD}/.agdf/control/config.json"
 
-if [ -f "$ROUTER" ]; then
-    cat "$ROUTER"
-    printf "\n\n"
+CONFIG_HINT="Project config: .agdf/control/config.json not found. Use npm create agdf@latest -- config --language de|en to persist the project language."
+if [[ -f "${CONFIG_PATH}" ]]; then
+  CONFIG_HINT="$(CONFIG_PATH="${CONFIG_PATH}" node <<'NODE' 2>/dev/null || true
+const fs = require("node:fs");
+const path = process.env.CONFIG_PATH;
+try {
+  const config = JSON.parse(fs.readFileSync(path, "utf8"));
+  const artefacts = config.artifact_language || "unset";
+  const chat = config.chat_language || "unset";
+  const runtime = config.runtime_language || "en";
+  console.log(`Project config: .agdf/control/config.json (artefacts=${artefacts}, chat=${chat}, runtime=${runtime}).`);
+} catch {
+  console.log("Project config: .agdf/control/config.json exists but is not valid JSON. Run npm create agdf@latest -- doctor.");
+}
+NODE
+)"
 fi
 
-if [ -f "$CONSTITUTION" ]; then
-    cat "$CONSTITUTION"
-fi
+cat <<EOF
+AGDF active.
+
+Use the installed AGDF skills as workflow controls.
+For a new build, change, extension, refactor, CLI, app, fix with product semantics, unclear approval, or unclear next step, use gate-check before implementation or later-gate artefacts.
+${CONFIG_HINT}
+
+Do not print the full router or constitution unless the user asks for them.
+Source of truth:
+- ${ROUTER}
+- ${CONSTITUTION}
+EOF

package/generated/plugins/agdf/meta/agdf-agent-router.md

@@ -73,8 +73,9 @@ Use templates as starting points only.
 
 Do not let chat history become the source of truth for gate state, approvals, evidence, backlog status or durable Brownfield knowledge.
 
-AGDF is a native agent workflow first: read the live control state, apply the active skill and make the next allowed step explicit.
-Use `doctor`, `gate-check --json` or `delivery-map --json` as validators when a machine-readable proof is useful, not as a substitute for the router or skills.
+AGDF is agent-native first and CLI-verifiable by design: read the live control state, apply the active skill and make the next allowed step explicit.
+Use `init` only when durable control state is explicitly requested, the repository already uses `.agdf/control/` as its live AGDF working state, or a deterministic CLI/CI setup path is being executed.
+Use `doctor --json`, `gate-check --json` or `delivery-map --json` as deterministic validators for CI, PR evidence, regression checks or audit trails, not as a substitute for the router or skills.
 
 ## Closeout
 For Quick Task Mode, close with the Runtime Contract mini-output only:

package/generated/plugins/agdf/meta/agdf-plugin.definition.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "id": "agdf",
-  "version": "0.2.6",
+  "version": "0.2.8",
   "displayName": "AI Governance & Delivery Framework",
   "developerName": "AI-native Governance & Delivery Framework",
   "description": "Codex-first workflow skills for gated, auditable AI-assisted software delivery.",

package/generated/plugins/agdf/meta/agdf-runtime-contract.md

@@ -27,6 +27,19 @@ Use this compact output shape when no formal gate artefact is required:
 
 Do not add a separate `Quality outlook` line for pure Quick Tasks unless the task became a relevant run.
 
+## Chat Output Discipline
+
+Durable artefacts are for the repository, not for flooding the chat.
+When a skill creates or updates `.agdf/control/` files, gate artefacts, reviews, QA reports or OR reports, the chat response must stay compact:
+
+- name the artefact path and status
+- summarize the decision or content in a few lines
+- state the current gate, forbidden work and next permissible step
+- mention validation evidence when available
+
+Do not paste full control files, full artefact bodies, full templates or full generated reports into the chat unless the user explicitly asks to see the full content.
+For larger or more formal work, create or update the durable artefacts fully, then reference them by path and summarize what changed.
+
 ## Relevant Run
 
 A relevant run is any run that changes durable state, creates or updates an AGDF artefact, changes code or runtime behaviour, performs a gate decision, blocks on a governance condition, produces QA/UAT/release evidence, or closes a delivery slice.
@@ -45,7 +58,7 @@ When in doubt, use a short OR-lite only if it clarifies gate state, evidence, ri
 - For UR, PRD, SD, TP and QA, approval and durable artefact presence are separate requirements. A gate is not satisfied by approval text alone when its artefact is missing from `.agdf/control/` or not linked to the authoritative repository SoT.
 - Approval of one user gate permits work on the next allowed gate artefact or required internal step only. It does not permit implementation unless the approved gate is `TP` and required internal implementation prerequisites are satisfied.
 - Gates must never be skipped or inferred from urgency, tone, chat history, task wording or an instruction to "start". The next allowed action is always the next unsatisfied gate or internal mandatory step.
-- Missing control files or missing current-state fields do not forbid the agent from preparing the current allowed artefact. They forbid later-gate work and implementation. For a fresh request, the allowed work is to initialize `.agdf/control/`, draft the minimal UR, link it, and request `Approval: UR`.
+- Missing control files or missing current-state fields do not forbid the agent from preparing the current allowed artefact. They forbid later-gate work and implementation. For a fresh request, the default allowed work is to draft a minimal UR in the response and request `Approval: UR`. Initialize or write `.agdf/control/` only when the user explicitly asks for durable AGDF control state, the repository already uses `.agdf/control/` as its live working state, or a deterministic CLI/CI setup path is being executed.
 - `Approval: UR` permits Brownfield Review after G-00 first, then a Mode/Slice Decision. It never permits implementation by itself.
 - PRD, SD and TP depth is chosen after Brownfield Review through the Mode/Slice Decision, not before existing-system impact is understood.
 - The Mode/Slice Decision must be visible before any PRD shortcut, Quick Task execution or implementation: record the decision, required next gate, scope reason and evidence in `AGDF_RUN.md` or an equivalent linked control artefact.
@@ -151,12 +164,23 @@ When a repository needs durable AGDF state, use the plugin-local `control/` scaf
 
 The scaffold is not a second documentation site. Link to authoritative artefacts instead of copying them.
 
-## Native Runtime
+## Agent-Native Runtime And CLI Verification
+
+AGDF is agent-native first and CLI-verifiable by design.
+
+The primary operating path is the active skill plus the live `.agdf/control/` artefacts.
+Agents should read the repository state, apply this Runtime Contract, create or update only the currently allowed artefact, and make the next permissible step explicit.
+When control state is missing for a fresh request, keep the first step lightweight: draft the minimal UR in the response and request `Approval: UR`.
+Initialize a control scaffold only when durable AGDF control state is explicitly requested, already used by the repository, or required by a deterministic CLI/CI setup path.
+
+Helper commands are deterministic proof and automation interfaces, not the normal-work ritual:
 
-AGDF must work natively through the plugin router, skills and live `.agdf/control/` artefacts.
-Agents should read the live control state and apply the gate model directly before reaching for helper commands.
+- `init` creates the machine-readable control scaffold.
+- `doctor --json` checks whether `.agdf/control/` is consistent and actionable; it is not the reviewer.
+- `gate-check --json` reports reproducible gate state; it does not replace the gate-check skill judgement.
+- `delivery-map --json` reports the delivery picture for CI, PRs, regression checks and audit trails.
 
-Machine-readable commands such as `doctor --json`, `gate-check --json` and `delivery-map --json` are validators and automation interfaces.
+Machine-readable outputs should stay agent-friendly: stable decisions, blocking gate or current gate, missing approval, allowed outputs, forbidden outputs, next step, evidence and findings.
 They make the repository state checkable, but they do not replace the native skill workflow or the durable control artefacts.
 
 ## Delivery Map

package/generated/plugins/agdf/skills/gate-check/SKILL.md

@@ -21,9 +21,10 @@ This skill must not create later artefacts such as PRD, SD, TP, CD, CR, QA, or U
 Use `../../meta/agdf-runtime-contract.md` for gate terms, closeout discipline, and non-duplication rules.
 The canonical gate order and transition model live only in the Runtime Contract. This skill evaluates the current state against that model; it must not maintain a second complete gate table.
 
-## Native Control Path
+## Agent-Native Control Path
 
-AGDF is applied natively through this skill, the agent router, and live `.agdf/control/` state.
+AGDF is agent-native first and CLI-verifiable by design.
+This skill is the primary operating path for gate judgement.
 
 First inspect the durable control state directly:
 
@@ -33,18 +34,23 @@ First inspect the durable control state directly:
 - `.agdf/control/CONTEXT_GRAPH.md`
 - `.agdf/control/AGENT_QUALITY_CONTRACTS.json`
 
-Use the executable control path when a machine-readable check is requested, when the gate state is ambiguous, or when a repository-local automation needs JSON evidence:
+If required control files are missing, do not automatically create a full `.agdf/control/` scaffold for a fresh small request.
+The default first action is to draft the minimal UR in the response and request `Approval: UR`.
+Use `init` only when the user explicitly asks for durable AGDF control state, the repository already uses `.agdf/control/` as its live working state, or a deterministic CLI/CI setup path is being executed.
+
+Use the executable control path when a machine-readable check is requested, when the gate state is ambiguous, when CI or PR evidence is needed, or when a repository-local automation needs JSON output:
 
 ```bash
-npm create agdf@latest doctor --json
-npm create agdf@latest gate-check --json
-npm create agdf@latest delivery-map --json
+npm create agdf@latest -- init
+npx --yes create-agdf@latest doctor --json
+npx --yes create-agdf@latest gate-check --json
+npx --yes create-agdf@latest delivery-map --json
 ```
 
-`doctor` checks whether `.agdf/control/` is actionable. `gate-check` consumes that result and `AGDF_RUN.md` to report the operative process decision: `open | blocked`, current gate, blocking reason, missing approval, allowed outputs, forbidden outputs, next allowed action and evidence references.
+`init` creates the control scaffold. `doctor` checks whether `.agdf/control/` is actionable. `gate-check` consumes that result and `AGDF_RUN.md` to report the operative process decision: `open | blocked`, current gate, blocking reason, missing approval, allowed outputs, forbidden outputs, next allowed action and evidence references.
 `delivery-map` reports the durable delivery picture: active artefacts, approvals, Artefact Chain relationships, evidence refs, missing evidence, risks, Context Graph gate effect and machine-readable findings.
 
-The CLI reports are validators and JSON evidence, not the primary user experience and not a second rule system. If a report says `blocked`, do not continue with later-gate artefacts until the reported blocker is resolved.
+The CLI reports are validators and JSON evidence, not the primary user experience, not a required ritual for normal work and not a second rule system. If a report says `blocked`, do not continue with later-gate artefacts until the reported blocker is resolved.
 
 ## Rules
 1. Fail closed when a required approval or artefact status is missing.
@@ -61,7 +67,7 @@ The CLI reports are validators and JSON evidence, not the primary user experienc
 12. Approval text and durable artefact presence are separate requirements for UR, PRD, SD, TP and QA report decisions. Approval text without the corresponding persisted or linked artefact keeps the current gate at that gate.
 13. After Brownfield Review, decide the process size before drafting PRD or implementing: `quick_task | structured_slice | structured_delivery | block`.
 14. The Mode/Slice Decision must be visible and evidenced before any Quick Task execution, PRD shortcut or implementation. A decision value without scope reason and evidence is still missing.
-15. Missing or incomplete control state must not push work back to the user. If the next allowed step is an artefact draft, the agent may initialize the scaffold, draft the current allowed artefact, link it, and then request the exact approval. Implementation remains forbidden.
+15. Missing or incomplete control state must not push setup work back to the user. For a fresh request, draft the current minimal artefact in the response and request the exact approval. Initialize or write `.agdf/control/` only when durable control state is explicitly requested, already live for the repository, or required for a deterministic CLI/CI setup path. Implementation remains forbidden.
 
 ## Gate Evaluation
 
@@ -108,7 +114,7 @@ If a status is not explicit, do not assume it is satisfied.
 8. Treat a generic "start", "continue" or "leg los" request as a request to perform only the current next allowed action.
 9. After Brownfield Review, choose the smallest safe process path before creating later artefacts.
 10. If the selected path is not visibly recorded with scope reason and evidence, keep the run at `Mode/Slice Decision`.
-11. When `.agdf/control/` is missing or incomplete, make the next allowed artefact action explicit. For a fresh request, that means initialize control state, draft the minimal UR, then request `Approval: UR`.
+11. When `.agdf/control/` is missing or incomplete, make the next allowed artefact action explicit. For a fresh request, that means draft the minimal UR in the response, then request `Approval: UR`. Do not write a full control scaffold unless durable control state was explicitly requested or is already the repository's live AGDF working state.
 
 ## Output
 Keep the result short and operational:
@@ -120,6 +126,9 @@ Keep the result short and operational:
 - **Missing approval:** `Approval: <GateName> | none`
 - **Next step:** `<single permissible next step>`
 
+If this skill creates or updates control artefacts, do not paste full file bodies into the chat.
+List paths, summarize the decision, name the blocker or approval needed, and keep the durable content in the files.
+
 ## Forbidden
 This skill must not:
 
@@ -135,5 +144,6 @@ This skill must not:
 - treat "ok", "leg los", "go ahead", "approved" or similar wording as gate approval
 - perform full Brownfield Analysis unless explicitly requested
 - provide implementation snippets while implementation is gated
+- paste full `.agdf/control/` files, templates or artefact bodies into the chat unless the user explicitly asks for the full content
 - present QA or UAT as passed without evidence
 - present release as allowed without QA pass and UAT approval where required

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "create-agdf",
-  "version": "0.2.6",
+  "version": "0.2.8",
   "description": "Bootstrap AGDF repository-local plugin files, Copilot instructions, skills, control files and machine-readable checks.",
   "type": "module",
   "files": [
     "bin",
     "generated",
-    "README.md"
+    "README.md",
+    "NOTICE"
   ],
   "bin": {
     "create-agdf": "./bin/create-agdf.js"