create-agdf 0.2.7 → 0.2.8

package/NOTICE

@@ -0,0 +1,10 @@
+AI Governance & Delivery Framework (AGDF)
+
+Copyright 2024-2026 Arndt Gold.
+
+The create-agdf package is licensed under the Apache License, Version 2.0.
+
+AGDF(TM) and AI Governance & Delivery Framework(TM) are marks of Arndt Gold.
+The package license does not grant permission to use project names, trademarks,
+service marks or logos except as required for reasonable and customary
+description of the origin of the project.

package/README.md

@@ -5,12 +5,13 @@ Bootstrap AGDF repository instructions and a machine-checkable control loop for
 ## Usage
 
 ```bash
-npm create agdf@latest codex
-npm create agdf@latest copilot
-npm create agdf@latest both
-npm create agdf@latest init
-npm create agdf@latest doctor
-npm create agdf@latest gate-check
+npm create agdf@latest -- codex
+npm create agdf@latest -- copilot
+npm create agdf@latest -- both
+npm create agdf@latest -- init
+npm create agdf@latest -- config --language en
+npm create agdf@latest -- doctor
+npm create agdf@latest -- gate-check
 ```
 
 Optional flags:
@@ -26,12 +27,13 @@ If no language is provided, `create-agdf` derives the preference from the local
 - `codex` writes a repository-local Codex marketplace under `.agents/plugins/` and a local AGDF plugin copy under `plugins/agdf/`
 - `copilot` writes `AGENTS.md`, Copilot custom instructions under `.github/`, visible repository skills under `.github/skills/`, and AGDF control templates under `.agdf/control/`
 - `both` writes the Codex repository-local marketplace plus the Copilot-facing repository files
+- `config` writes or updates only `.agdf/control/config.json` for an already installed plugin or an existing repository
 
 If the target repository already has an `AGENTS.md`, `create-agdf` preserves it and writes `AGENTS.agdf.md` instead of replacing your existing instructions. Merge the AGDF fragment into your current `AGENTS.md` when you want Copilot to load both instruction sets. The generated `.github/copilot-instructions.md` keeps Copilot pointed at `AGENTS.md`, `.github/skills/` and `.agdf/control/` without duplicating the full AGDF rule model. Use `--force` only when you explicitly want to overwrite generated files.
 
 Use the `codex` target when AGDF should be available only inside one repository instead of being installed as a personal/global Codex plugin.
 
-After `npm create agdf@latest codex`, restart Codex in that repository, open `/plugins`, select `This repository` and install `agdf`.
+After `npm create agdf@latest -- codex`, restart Codex in that repository, open `/plugins`, select `This repository` and install `agdf`.
 
 ## Control scaffold
 
@@ -47,7 +49,7 @@ The generated `.agdf/control/templates/` files are reusable starting points for
 Use `init` to promote those templates into live control files when the repository should own durable AGDF control state:
 
 ```bash
-npm create agdf@latest init
+npm create agdf@latest -- init
 ```
 
 This writes:
@@ -66,11 +68,17 @@ This writes:
 
 `config.json` stores `artifact_language` and `chat_language` for governed work in the target repository. Runtime rules stay English so all AGDF surfaces share the same control contract.
 
+For an existing repository where the plugin is already installed and only the language preference is missing or wrong, use the lighter config target:
+
+```bash
+npm create agdf@latest -- config --language en
+```
+
 Use `doctor` to check whether the live control state is actionable:
 
 ```bash
-npm create agdf@latest doctor
-npm create agdf@latest doctor --json
+npm create agdf@latest -- doctor
+npx --yes create-agdf@latest doctor --json
 ```
 
 The doctor reports missing live control files, missing current gate, missing next allowed action, empty evidence, empty backlog pointer, empty source-of-truth registry, duplicate active SoT rows and invalid quality contracts. It exits non-zero only for blocking control failures.
@@ -78,8 +86,8 @@ The doctor reports missing live control files, missing current gate, missing nex
 Use `gate-check` to derive the next process decision from the doctor result and `AGDF_RUN.md`:
 
 ```bash
-npm create agdf@latest gate-check
-npm create agdf@latest gate-check --json
+npm create agdf@latest -- gate-check
+npx --yes create-agdf@latest gate-check --json
 ```
 
 The gate check reports `open | blocked`, the current gate, blocking reason, missing exact approval, allowed outputs, forbidden outputs, next allowed action, evidence references and the embedded doctor report.
@@ -119,3 +127,8 @@ The repository publishes this package from `create-agdf/` via the GitHub Actions
 - Create or update the version in `create-agdf/package.json`
 - Push a matching git tag in the form `create-agdf-v<version>`
 - Ensure the repository secret `NPM_TOKEN` exists with publish rights for `create-agdf`
+
+## Trademark Notice
+
+AGDF(TM) and AI Governance & Delivery Framework(TM) are marks of Arndt Gold.
+Use of the AGDF name and marks is governed by the project trademark guidelines.

package/bin/create-agdf.js

@@ -11,7 +11,7 @@ const generatedRoot = join(packageRoot, "generated");
 const pluginDefinitionPath = join(generatedRoot, "plugins", "agdf", "meta", "agdf-plugin.definition.json");
 const pluginDefinition = JSON.parse(readFileSync(pluginDefinitionPath, "utf8"));
 const pluginInstallCommand = "claude plugin add arndtgold/ai-native-governance-delivery-framework";
-const allowedTargets = new Set(["codex", "copilot", "both", "init", "doctor", "gate-check", "delivery-map"]);
+const allowedTargets = new Set(["codex", "copilot", "both", "init", "config", "doctor", "gate-check", "delivery-map"]);
 const agdfFragmentPath = "AGENTS.agdf.md";
 const userGateOrder = ["UR", "PRD", "SD", "TP", "QA", "UAT"];
 const durableGateArtefacts = new Set(["UR", "PRD", "SD", "TP", "QA"]);
@@ -117,13 +117,14 @@ function printUsage() {
   console.log(`create-agdf
 
 Usage:
-  npm create agdf@latest codex
-  npm create agdf@latest copilot
-  npm create agdf@latest both
-  npm create agdf@latest init
-  npm create agdf@latest doctor
-  npm create agdf@latest gate-check
-  npm create agdf@latest delivery-map
+  npm create agdf@latest -- codex
+  npm create agdf@latest -- copilot
+  npm create agdf@latest -- both
+  npm create agdf@latest -- init
+  npm create agdf@latest -- config --language de
+  npm create agdf@latest -- doctor
+  npm create agdf@latest -- gate-check
+  npm create agdf@latest -- delivery-map
 
 Options:
   --dir <path>   Write files into a specific directory
@@ -262,7 +263,7 @@ function parseArgs(argv) {
   }
 
   if (!target || !allowedTargets.has(target)) {
-    console.error("Please choose one target: codex, copilot, both, init, doctor, gate-check or delivery-map.");
+    console.error("Please choose one target: codex, copilot, both, init, config, doctor, gate-check or delivery-map.");
     printUsage();
     process.exit(1);
   }
@@ -280,11 +281,11 @@ function loadAsset(relativePath) {
   return readFileSync(join(generatedRoot, relativePath), "utf8");
 }
 
-function writeGeneratedFile(targetDir, relativePath, content, force) {
+function writeGeneratedFile(targetDir, relativePath, content, force, allowOverwrite = false) {
   const outputPath = join(targetDir, relativePath);
   mkdirSync(dirname(outputPath), { recursive: true });
 
-  if (existsSync(outputPath) && !force) {
+  if (existsSync(outputPath) && !force && !allowOverwrite) {
     throw new Error(`Refusing to overwrite existing file: ${relativePath}. Re-run with --force if you want to replace it.`);
   }
 
@@ -301,6 +302,15 @@ function addLanguageConfig(files, languagePreference) {
 function generatedFilesForTarget(target, targetDir, force, languagePreference) {
   const files = [];
 
+  if (target === "config") {
+    files.push({
+      path: join(".agdf", "control", "config.json"),
+      content: languageConfigContent(languagePreference),
+      allowOverwrite: true,
+    });
+    return files;
+  }
+
   if (target === "init") {
     addLanguageConfig(files, languagePreference);
     files.push({
@@ -386,10 +396,15 @@ function printNextSteps(target, destination, files, wroteAgentsFragment) {
   }
   if (target === "init") {
     console.log("- Fill .agdf/control/AGDF_RUN.md with the current gate, evidence and next allowed action.");
-    console.log("- Run npm create agdf@latest doctor to check the control state before the next agent run.");
+    console.log("- Run npm create agdf@latest -- doctor to check the control state before the next agent run.");
     console.log("- Commit the live control files once they represent the repository's current delivery state.");
     return;
   }
+  if (target === "config") {
+    console.log("- Restart or start a new agent session so the AGDF SessionStart hook reads the updated project language config.");
+    console.log("- Run npm create agdf@latest -- doctor when this repository also uses durable AGDF control state.");
+    return;
+  }
   if (wroteAgentsFragment) {
     console.log(`- Existing AGENTS.md detected. Merge ${agdfFragmentPath} into your current AGENTS.md before using Copilot with AGDF.`);
   }
@@ -402,7 +417,7 @@ function printNextSteps(target, destination, files, wroteAgentsFragment) {
   }
   if (target === "copilot" || target === "both") {
     console.log("- In GitHub Copilot CLI, run /instructions after the AGENTS.md step is complete to confirm that AGDF instructions and the repository skills are visible.");
-    console.log("- Run npm create agdf@latest init when the repository needs live AGDF control files.");
+    console.log("- Run npm create agdf@latest -- init when the repository needs live AGDF control files.");
   }
   console.log("- Commit the generated files so the repository becomes the source of truth.");
 }
@@ -506,7 +521,7 @@ function evaluateDoctor(targetDir) {
         ? "Live control file is missing; only the template exists."
         : "Required live control file is missing.",
       relativePath,
-      "Run npm create agdf@latest init only when the repository should own durable AGDF control state or deterministic setup is explicitly needed.",
+      "Run npm create agdf@latest -- init only when the repository should own durable AGDF control state or deterministic setup is explicitly needed.",
     );
   }
 
@@ -1121,7 +1136,7 @@ function evaluateGateCheck(targetDir) {
     allowed = [
       "draft the minimal UR for the requested change in the response",
       "request exact approval: Approval: UR",
-      "run npm create agdf@latest init only when durable control state or deterministic setup is explicitly needed",
+      "run npm create agdf@latest -- init only when durable control state or deterministic setup is explicitly needed",
     ];
     forbidden = ["create PRD", "create SD", "create TP", "run Brownfield Analysis", "implement code", "claim QA or release readiness"];
     nextAllowedAction = "Draft the minimal UR for the request in the response, then ask for exact approval: Approval: UR. Do not write a full .agdf/control scaffold unless durable control state or deterministic setup is explicitly needed.";
@@ -1289,7 +1304,7 @@ function main() {
 
   try {
     for (const file of files) {
-      writeGeneratedFile(options.dir, file.path, file.content, options.force);
+      writeGeneratedFile(options.dir, file.path, file.content, options.force, file.allowOverwrite);
     }
   } catch (error) {
     console.error(error.message);

package/generated/.agdf/control/README.md

@@ -49,15 +49,21 @@ Keep these files small and reviewable. They are control artefacts, not a second
 Create the live files with:
 
 ```bash
-npm create agdf@latest init
+npm create agdf@latest -- init
+```
+
+If only the project language preference is missing or should change after plugin installation, write just the config file:
+
+```bash
+npm create agdf@latest -- config --language en
 ```
 
 Then check whether the live state is actionable:
 
 ```bash
-npm create agdf@latest doctor
-npm create agdf@latest doctor --json
-npm create agdf@latest gate-check --json
+npm create agdf@latest -- doctor
+npx --yes create-agdf@latest doctor --json
+npx --yes create-agdf@latest gate-check --json
 ```
 
 `doctor` does not replace agent judgment. It catches basic control failures: missing live files, missing current gate, missing next allowed action, empty evidence, empty backlog pointer, empty source-of-truth registry, duplicate active SoT rows and invalid quality contracts.

package/generated/.github/skills/agdf-gate-check/SKILL.md

@@ -41,10 +41,10 @@ Use `init` only when the user explicitly asks for durable AGDF control state, th
 Use the executable control path when a machine-readable check is requested, when the gate state is ambiguous, when CI or PR evidence is needed, or when a repository-local automation needs JSON output:
 
 ```bash
-npm create agdf@latest init
-npm create agdf@latest doctor --json
-npm create agdf@latest gate-check --json
-npm create agdf@latest delivery-map --json
+npm create agdf@latest -- init
+npx --yes create-agdf@latest doctor --json
+npx --yes create-agdf@latest gate-check --json
+npx --yes create-agdf@latest delivery-map --json
 ```
 
 `init` creates the control scaffold. `doctor` checks whether `.agdf/control/` is actionable. `agdf-gate-check` consumes that result and `AGDF_RUN.md` to report the operative process decision: `open | blocked`, current gate, blocking reason, missing approval, allowed outputs, forbidden outputs, next allowed action and evidence references.

package/generated/plugins/agdf/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "agdf",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "description": "Codex-first workflow skills for gated, auditable AI-assisted software delivery.",
   "author": {
     "name": "AI-native Governance & Delivery Framework",

package/generated/plugins/agdf/control/README.md

@@ -49,15 +49,21 @@ Keep these files small and reviewable. They are control artefacts, not a second
 Create the live files with:
 
 ```bash
-npm create agdf@latest init
+npm create agdf@latest -- init
+```
+
+If only the project language preference is missing or should change after plugin installation, write just the config file:
+
+```bash
+npm create agdf@latest -- config --language en
 ```
 
 Then check whether the live state is actionable:
 
 ```bash
-npm create agdf@latest doctor
-npm create agdf@latest doctor --json
-npm create agdf@latest gate-check --json
+npm create agdf@latest -- doctor
+npx --yes create-agdf@latest doctor --json
+npx --yes create-agdf@latest gate-check --json
 ```
 
 `doctor` does not replace agent judgment. It catches basic control failures: missing live files, missing current gate, missing next allowed action, empty evidence, empty backlog pointer, empty source-of-truth registry, duplicate active SoT rows and invalid quality contracts.

package/generated/plugins/agdf/hooks/session-start.sh

@@ -6,12 +6,32 @@ SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 META_DIR="$(cd "${SCRIPT_DIR}/../meta" && pwd)"
 ROUTER="${META_DIR}/agdf-agent-router.md"
 CONSTITUTION="${META_DIR}/agdf-constitution.md"
+CONFIG_PATH="${PWD}/.agdf/control/config.json"
+
+CONFIG_HINT="Project config: .agdf/control/config.json not found. Use npm create agdf@latest -- config --language de|en to persist the project language."
+if [[ -f "${CONFIG_PATH}" ]]; then
+  CONFIG_HINT="$(CONFIG_PATH="${CONFIG_PATH}" node <<'NODE' 2>/dev/null || true
+const fs = require("node:fs");
+const path = process.env.CONFIG_PATH;
+try {
+  const config = JSON.parse(fs.readFileSync(path, "utf8"));
+  const artefacts = config.artifact_language || "unset";
+  const chat = config.chat_language || "unset";
+  const runtime = config.runtime_language || "en";
+  console.log(`Project config: .agdf/control/config.json (artefacts=${artefacts}, chat=${chat}, runtime=${runtime}).`);
+} catch {
+  console.log("Project config: .agdf/control/config.json exists but is not valid JSON. Run npm create agdf@latest -- doctor.");
+}
+NODE
+)"
+fi
 
 cat <<EOF
 AGDF active.
 
 Use the installed AGDF skills as workflow controls.
 For a new build, change, extension, refactor, CLI, app, fix with product semantics, unclear approval, or unclear next step, use gate-check before implementation or later-gate artefacts.
+${CONFIG_HINT}
 
 Do not print the full router or constitution unless the user asks for them.
 Source of truth:

package/generated/plugins/agdf/meta/agdf-plugin.definition.json

@@ -1,7 +1,7 @@
 {
   "schemaVersion": 1,
   "id": "agdf",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "displayName": "AI Governance & Delivery Framework",
   "developerName": "AI-native Governance & Delivery Framework",
   "description": "Codex-first workflow skills for gated, auditable AI-assisted software delivery.",

package/generated/plugins/agdf/skills/gate-check/SKILL.md

@@ -41,10 +41,10 @@ Use `init` only when the user explicitly asks for durable AGDF control state, th
 Use the executable control path when a machine-readable check is requested, when the gate state is ambiguous, when CI or PR evidence is needed, or when a repository-local automation needs JSON output:
 
 ```bash
-npm create agdf@latest init
-npm create agdf@latest doctor --json
-npm create agdf@latest gate-check --json
-npm create agdf@latest delivery-map --json
+npm create agdf@latest -- init
+npx --yes create-agdf@latest doctor --json
+npx --yes create-agdf@latest gate-check --json
+npx --yes create-agdf@latest delivery-map --json
 ```
 
 `init` creates the control scaffold. `doctor` checks whether `.agdf/control/` is actionable. `gate-check` consumes that result and `AGDF_RUN.md` to report the operative process decision: `open | blocked`, current gate, blocking reason, missing approval, allowed outputs, forbidden outputs, next allowed action and evidence references.

package/package.json

@@ -1,12 +1,13 @@
 {
   "name": "create-agdf",
-  "version": "0.2.7",
+  "version": "0.2.8",
   "description": "Bootstrap AGDF repository-local plugin files, Copilot instructions, skills, control files and machine-readable checks.",
   "type": "module",
   "files": [
     "bin",
     "generated",
-    "README.md"
+    "README.md",
+    "NOTICE"
   ],
   "bin": {
     "create-agdf": "./bin/create-agdf.js"