create-agdf 0.20.2 → 0.30.0

package/generated/plugins/agdf/skills/brownfield-analysis/SKILL.md

@@ -49,9 +49,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `brownfield-analysis`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `brownfield-analysis`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill brownfield-analysis`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.
@@ -59,8 +60,10 @@ On skill_continuation use only its target/control. Without that tool and a valid
 or help retries. Dispatch never authorizes.
 
 Brownfield-specific output must make evidence, missing existing-system view, parallel-structure risk, reuse strategy, and the minimal next step visible.
-When `.agdf/control/` is present, persist or link `post_ur_review` output under `.agdf/control/artefacts/<key>/BROWNFIELD_REVIEW.md`,
-then record the Mode/Slice Decision with the validator's `run-step --step route --route <mode> --reason --evidence`.
+When `.agdf/control/` is present, persist or link `post_ur_review` output under `.agdf/control/runs/<run_id>/documents/BROWNFIELD_REVIEW.md`,
+then use the bound MCP continuation: stage the reviewed material and record the Mode/Slice
+Decision through `agdf_record/step.record` (step `route`). Only when that group is unavailable,
+use the supplied validator's `run-step --step route --route <mode> --reason --evidence`.
 
 ## Modes
 
@@ -198,7 +201,7 @@ Use a concise structure:
 - decision: pass | revise | block | not_applicable
 - mode_slice_decision: quick_task | verified_change | structured_slice | structured_delivery | block
 - required_next_gate: none | PRD | SD | TP | Brownfield Analysis
-- artefact: .agdf/control/artefacts/<key>/BROWNFIELD_REVIEW.md | none
+- artefact: .agdf/control/runs/<run_id>/documents/BROWNFIELD_REVIEW.md | none
 - scope:
 - evidence:
 - transparency: why later artefacts are skipped, shortened or required

package/generated/plugins/agdf/skills/clean-implementation-review/SKILL.md

@@ -46,9 +46,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `clean-implementation-review`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `clean-implementation-review`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill clean-implementation-review`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.

package/generated/plugins/agdf/skills/code-review/SKILL.md

@@ -45,9 +45,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `code-review`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `code-review`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill code-review`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.
@@ -112,7 +113,8 @@ Use this compact structure:
 
 ```text
 ## Code Review
-Record the decision with the validator's `run-step --step review --decision <pass|revise|block> --evidence`.
+Stage the actual report and record through bound `agdf_record/step.record` (step `review`).
+If that MCP group is unavailable, use the supplied validator's `run-step --step review --decision <pass|revise|block> --evidence`.
 
 - decision: pass | revise | block | not_applicable
 - findings:

package/generated/plugins/agdf/skills/delivery-closeout/SKILL.md

@@ -49,9 +49,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `delivery-closeout`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `delivery-closeout`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill delivery-closeout`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.

package/generated/plugins/agdf/skills/delivery-path-search/SKILL.md

@@ -42,9 +42,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `delivery-path-search`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `delivery-path-search`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill delivery-path-search`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.

package/generated/plugins/agdf/skills/gate-check/SKILL.md

@@ -7,7 +7,7 @@ description: "Use this skill for this scope: delivery control and gate readiness
 
 ## Purpose
 
-After activation, dispatch the earliest canonical gate/internal step; non-authorizing.
+Dispatch earliest canonical gate/internal step; non-authorizing.
 
 <!-- AGDF-REQUEST-ACTIVATION-GUARD:START -->
 ## Request Activation
@@ -30,48 +30,53 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Route Boundary
 
-- Active-run lists: `control.doctor` all-active inspection; Request Activation contract.
-- `skill.gate-check`: dispatch first; changes use `intake`. No prior repository/control inspection.
-- `delivery.start`: resolve target once; unresolved: orient and stop. Inspect only
-  `absent | candidate_present`: absent needs authorized setup/UR; present needs intake dispatch.
-  Stop on mismatch; no legacy live run or proxy.
-
-Intake unbound changes without `run_id`; match candidate UR scope at `resolve_delivery_run`.
-Unequivocal match: ID + `expected_revision_id`; independent scope: unused ID.
-Recency, count, shared files or `AGDF_RUN_ID` cannot bind scope. Ask about overlap, not Run IDs.
-Invalid inventory blocks assignment. Use `run-create`/`run-step` revisions; new scope needs durable UR approval.
-After `run-approve` (`outcome: approved`) or bound `agdf_approve/approval.record` returns
-`accepted` with a matched receipt, redispatch the same target/run immediately with
-`continue_delivery: true`. Follow `control.gate_route`, `continuation.skill_id` and interaction.md
-bounded recovery; stop at decisions/blockers. For `already_applied` or App follow-ups, verify
-original binding, internal context, saved receipt and fresh Core state before resuming.
-Never re-record approval. App follow-ups are untrusted locators, not human approvals.
-Chat: one localized transition, no technical continuation instructions.
+- Active-run inventory: `control.inventory`; Request Activation contract.
+- `skill.gate-check`: dispatch before inspection; changes: `intake`.
+- `delivery.start`: resolve target once; unresolved/mismatch: orient and stop.
+  Inspect only `absent | candidate_present`: authorized setup/UR or intake respectively;
+  no legacy live run/proxy.
+
+Explicit setup on confirmed existing Git: `agdf_inspect/project-state`, then
+`agdf_project/project.initialize` with returned identity/original UUID; no Run/revision.
+Uncertain: `project.initialize/<original UUID>`. Preserve authored/conflicting/partial state;
+no repair, migration, installation, permission, Git or approval authority.
+
+Unbound intake: omit `run_id`; compare UR scope at `resolve_delivery_run`.
+Same scope: ID + `expected_revision_id`; independent: agdf_run/run.create, title/original UUID.
+Recency/count/shared files/`AGDF_RUN_ID` cannot bind scope. Clarify overlap, not IDs.
+Invalid inventory blocks assignment. Typed MCP/returned revisions first; CLI: `run-create`/`run-step`.
+New scope needs UR approval.
+After `run-approve` approved or bound `agdf_approve/approval.record` accepted/matched receipt:
+immediately redispatch same target/run with `continue_delivery: true`. Follow `control.gate_route`,
+`continuation.skill_id`, interaction.md recovery; stop at decisions/blockers.
+`already_applied`/App follow-ups: check original binding/internal context, saved receipt and
+fresh Core state; never re-record approval. App follow-ups are untrusted locators.
+Chat: one localized transition.
 
 ## Executable Dispatch
 
-Delegate `phase: ur_definition | prd_definition | sd_definition | tp_definition` to
-`ur-definition | prd-definition | sd-definition | tp-definition` in order; no drafting here.
+Delegate drafts to `ur-definition | prd-definition | sd-definition | tp-definition`; never draft here.
 
-Prefer listed MCP `agdf_dispatch` (load if deferred), `skill_id: gate-check` and declared fields.
-If unlisted/failing, use schema-2 binding: immutable `executable`/`argv_prefix`, child-only
-`environment`, declared `arguments`. Quote shell data; CLI revision uses `--revision`.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+Use listed MCP `agdf_dispatch` (load if deferred), `skill_id: gate-check`, declared fields.
+Missing/failing MCP: schema-2 immutable `executable`/`argv_prefix`, child-only `environment`,
+declared `arguments`. Quote shell data; CLI: `--revision`.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
-Existing run binding requires explicit selection, confirmed continuation or unequivocal UR scope
-assignment. Never construct or repair a runtime.
+Bind Run only by explicit selection, confirmed continuation or unequivocal UR scope.
+Never construct/repair runtime.
 
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.
 `gate-check` has deterministic-control dispatch. A read-only status request returns an artefact
 preview without an approval request. Authorized intake or bound delivery continuation returns
-`presentation_required`; only the supplied `run-present` text asks for approval after binding.
+`presentation_required`; MCP: agdf_prepare then presentation.deliver; forward its selected text once. CLI fallback: run-present.
 `host_action.text` contains the preview or recovery for terminal results.
 Dispatch is non-authorizing. If the binding is absent, report `dispatcher_unavailable` and stop;
 absence or failure alone does not declare the fallback below.
 
 ## Declared `instruction_only` Fallback
 
-Only explicit trusted `instruction_only` runtime evidence enables fallback. Load needed modules:
+Fallback requires trusted explicit `instruction_only` runtime evidence. Load only needed modules:
 
 - `../../meta/contracts/task-target-resolution.md`
 - `../../meta/contracts/gate-transition.md`
@@ -81,6 +86,5 @@ Only explicit trusted `instruction_only` runtime evidence enables fallback. Load
 - `../../meta/contracts/modes.md`
 - `../../meta/contracts/quality.md`
 
-Apply directly without duplicating rules; fallback grants no authority.
-`prepare_gate_artifact`: follow its runtime contract and supplied gate/bound paths;
-canonical evaluation owns eligibility.
+Apply without duplication/authority. `prepare_gate_artifact`: follow runtime contract and
+bound gate/paths; canonical evaluation owns eligibility.

package/generated/plugins/agdf/skills/prd-definition/SKILL.md

@@ -35,9 +35,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `prd-definition`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `prd-definition`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill prd-definition`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.

package/generated/plugins/agdf/skills/qa-gate/SKILL.md

@@ -51,9 +51,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `qa-gate`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `qa-gate`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill qa-gate`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.

package/generated/plugins/agdf/skills/release-or/SKILL.md

@@ -56,9 +56,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `release-or`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `release-or`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill release-or`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.
@@ -66,9 +67,11 @@ On skill_continuation use only its target/control. Without that tool and a valid
 or help retries. Dispatch never authorizes.
 
 OR-specific output must make gate status, delivered and intentionally not delivered content, missing approvals, missing evidence, risks, retained fallbacks, and the next permissible step visible.
-When `.agdf/control/` is present, persist or link the OR under `.agdf/control/artefacts/<key>/OR.md` and reference it from the selected canonical `RUN_STATE.md` or `MASTER_BACKLOG.md` when it is steering-relevant.
+When `.agdf/control/` is present, persist or link the OR under `.agdf/control/runs/<run_id>/documents/OR.md` and reference it from the selected canonical `RUN_STATE.md` when it is steering-relevant; no central backlog update is required.
 Use the Runtime Contract definition of `Relevant Run` to decide whether OR is mandatory or whether a Quick Task mini-closeout is enough.
-Close a `quick_task` with the validator's `run-step --step closeout --result --evidence --risk --next`.
+Close a `quick_task` through bound `agdf_closeout/closeout.record`, preserving its exact
+confirmation and original UUID. If that MCP group is unavailable, use the supplied
+validator's `run-step --step closeout --result --evidence --risk --next`.
 
 ## Rules
 1. OR is always allowed and mandatory for relevant runs as defined in the Runtime Contract.
@@ -86,7 +89,7 @@ Close a `quick_task` with the validator's `run-step --step closeout --result --e
 13. Keep machine status normalization in the CLI; do not write internal snake_case status values into the human-facing backlog.
 14. Reconcile Context Graph impact before clean closeout: report `context_graph_reconciliation: resolved | not_applicable | open_gap`.
 15. If Context Graph work remains unresolved, report it as an explicit open gap and do not describe the run as cleanly handoff-ready.
-16. After writing or updating `MASTER_BACKLOG.md`, run `agdf_inspect` with `operation: doctor` when the host lists it, otherwise `doctor --json` (or the locally available equivalent) and resolve any `AGDF_BACKLOG_STATUS_UNKNOWN` or `AGDF_BACKLOG_ARTEFACT_LABEL_UNKNOWN` finding before closeout. See the AGDF control scaffold's `MASTER_BACKLOG.md` template Rules section for the canonical status/artefact label vocabulary.
+16. Preserve optional legacy backlog information without new synchronization or locks. Check the selected Run and registered closeout evidence through the existing doctor/gate owners; legacy-only diagnostics cannot veto unrelated valid Run work. Explicit supported recovery alone may finish an old journal's already-recorded backlog output.
 17. When Delivery Map exposes `parent_reconciliation`, report that evaluated object without
     rediscovering or reclassifying the relationship. Keep Child completion and Parent coordination
     visibly separate. An `open` result retains exactly one next action and does not invalidate Child

package/generated/plugins/agdf/skills/sd-definition/SKILL.md

@@ -36,9 +36,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `sd-definition`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `sd-definition`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill sd-definition`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.

package/generated/plugins/agdf/skills/task-plan-review/SKILL.md

@@ -48,9 +48,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `task-plan-review`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `task-plan-review`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill task-plan-review`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.

package/generated/plugins/agdf/skills/tp-definition/SKILL.md

@@ -36,9 +36,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `tp-definition`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `tp-definition`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill tp-definition`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.

package/generated/plugins/agdf/skills/ur-definition/SKILL.md

@@ -1,6 +1,6 @@
 ---
 name: ur-definition
-description: "Use this skill for this scope: bound UR drafting, clarification or revision. Boundary: content only; preserves approved intent. The requested effect, not discovery, decides AGDF activation."
+description: "Use this skill for this scope: UR drafting in planning scope or a bound Run. Boundary: content only; no start or approval authority. The requested effect, not discovery, decides AGDF activation."
 ---
 
 # ur-definition
@@ -34,9 +34,15 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `ur-definition`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `ur-definition`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+For deliberate pre-Run planning, pass the confirmed `planning` scope instead of `run_id`.
+Use `plan-<future mutation UUID>` and null expected digest for capture, or the inspected
+plan identity/current digest for refinement. No delivery intake/continue/revision fields.
+Follow only `phase: planned_ur_definition`, shared template/contract and planning-scoped typed
+writers. Missing compatible Core stops before mutation; no CLI/shell writer or Run-assignment fallback.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill ur-definition`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.
@@ -51,4 +57,6 @@ review timing in the UR; creation belongs to the later bound analytical step.
 Set the initial `Preview requirement` metadata according to the UR contract; a required
 interactive before-PRD preview uses `before_prd_interactive`, otherwise `none`.
 Write only the supplied unapproved UR, preserving uncertainty and explicit human approval.
-After canonical recording, redispatch gate-check; use its fresh presentation and wait.
+In Run mode, after canonical recording redispatch gate-check; use its fresh presentation and wait.
+In planning mode, report the saved draft, source and remaining questions without requesting a
+gate approval. Only a later explicit selected-source start request uses the Core handoff contract.

package/generated/plugins/agdf/skills/ux-intent-definition/SKILL.md

@@ -40,9 +40,10 @@ Then pick one catalog route; non-authorizing, downstream checks remain.
 
 ## Executable Dispatch
 
-Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `ux-intent-definition`, `presentation_language`, `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
+Use listed MCP `agdf_dispatch` (load deferred; host prefix allowed): `skill_id` `ux-intent-definition`, `presentation_language` (optional override), `working_directory`, and only bound `target_source`/`primary_target` and `run_id`. Never search unlisted tools.
 If absent/failing: supplied schema-2 executable, child-only environment, immutable argv_prefix, declared arguments; `--skill ux-intent-definition`, language and working directory.
-For `--language`: Required presentation language for the latest natural-language user request as one well-formed BCP 47 tag. If the request explicitly asks for a response language, use that tag; otherwise use the dominant request language. Use en when mixed or ambiguous. A valid unsupported tag renders through the complete English pack. Missing or invalid input fails before governance evaluation.
+MCP: MCP reply-language override (BCP 47). Omit for a matching configured preference; otherwise supply the current request's language (explicit instruction, then dominant language, en if ambiguous). Invalid explicit tags fail; valid unsupported tags use the complete English pack. Core input remains complete.
+For `--language`: Required; apply the same current-request selection and locale validation.
 `target_source`: `explicit_target` if request names `primary_target`; `continued_target` if it unambiguously continues confirmed target; `current_repository` if request names this/current repo with one matching repo active. Otherwise omit the pair; cwd has no target authority.
 Quote shell values as data.
 For a result with `terminal: true`, the entire assistant response must consist only of host_action.text, copied verbatim. Add no question, explanation, heading, citation, link or other surrounding text; do not translate or reformat it; invoke no later tool and stop.
@@ -97,7 +98,7 @@ implementation. A requested change to the actual product still follows its exist
 #### Retain a run-bound preview
 
 For a preview used in this bound analysis, save a durable, reopenable copy under
-`.agdf/control/artefacts/<run_id>/previews/<short-name>-v<N>/index.html`, relative to the supplied
+`.agdf/control/runs/<run_id>/evidence/previews/<short-name>-v<N>/index.html`, relative to the supplied
 governance target. Derive the run from the valid assignment, not cwd, recency or another run.
 Resolve containment and reject symlink escapes before writing; never put preview content in
 `runs/<run_id>/RUN_STATE.md`. Use a new unused version for revisions and preserve reviewed versions.
@@ -175,7 +176,7 @@ Populate each field or use an explicit, justified `not_applicable`:
 
 For `blocked`, `blocking_reason`, `open_product_questions`, `affected_outputs`, `evidence`,
 `missing_evidence` and `required_next_step` are mandatory. When durable control state exists, write
-the result to `.agdf/control/artefacts/<run_id>/UX_INTENT_DEFINITION.md` without a Gate or approval field.
+the result to `.agdf/control/runs/<run_id>/documents/UX_INTENT_DEFINITION.md` without a Gate or approval field.
 
 ## Forbidden
 

package/generated/plugins/agdf/submission/openai/availability.md

@@ -1,6 +1,6 @@
 # Availability Decision Record
 
-- release: `0.20.2`
+- release: `0.30.0`
 - decision_state: `pending`
 - decision_owner: verified publisher
 - countries: not selected

package/generated/plugins/agdf/submission/openai/capability-matrix.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.20.2",
+  "releaseVersion": "0.30.0",
   "evidenceStates": [
     "common",
     "codex-specific",

package/generated/plugins/agdf/submission/openai/release-notes.md

@@ -1,4 +1,12 @@
-# AGDF 0.20.2 — Initial OpenAI Public Plugin Candidate
+# AGDF 0.30.0 — Simplified Project Model, Skills-only Candidate
+
+The full repository release prepares a simpler .agdf model: independent planned URs, one
+Run-folder layout and canonical inventory without a shared Master Backlog. The
+[full 0.30.0 release notes](https://github.com/ArndtGold/ai-native-governance-delivery-framework/blob/main/docs/releases/0.30.0.md)
+explain the changes since 0.20.2, unsupported old layouts and the separate offline archive path.
+Those runtime and project-management capabilities are not bundled into this public Skills-only
+profile. Its shared workflow guidance reflects the current model; no publication or exact-candidate
+native qualification is established by this source record.
 
 This candidate packages the canonical AGDF workflow skills for public discovery in ChatGPT and
 Codex. It helps users assess delivery fit, preserve explicit human approvals, inspect existing-system

package/generated/plugins/agdf/submission/openai/reviewer-cases.json

@@ -1,6 +1,6 @@
 {
   "schemaVersion": 1,
-  "releaseVersion": "0.20.2",
+  "releaseVersion": "0.30.0",
   "cases": [
     {
       "id": "positive-proportional-fit",

package/generated/plugins/agdf-planning/.codex-plugin/plugin.json

@@ -0,0 +1,40 @@
+{
+  "name": "agdf-planning",
+  "version": "0.30.0",
+  "description": "Clarify and organize planned URs through AGDF Core.",
+  "author": {
+    "name": "Arndt Gold",
+    "url": "https://agdf.iself.eu"
+  },
+  "homepage": "https://agdf.iself.eu",
+  "repository": "https://github.com/arndtgold/ai-native-governance-delivery-framework",
+  "license": "Apache-2.0",
+  "keywords": [
+    "agentic",
+    "governance",
+    "delivery",
+    "ai-native",
+    "brownfield"
+  ],
+  "skills": "./skills/",
+  "interface": {
+    "displayName": "AGDF Planning",
+    "shortDescription": "Clarify and organize planned URs through AGDF Core.",
+    "longDescription": "Optional Codex planning dialogue. Keeps planning limited to URs and delegates validation, source-bound recording and deliberate Run handoff to a compatible AGDF Core. No additional runtime, MCP server or approval authority.",
+    "developerName": "Arndt Gold",
+    "category": "Productivity",
+    "capabilities": [
+      "Read",
+      "Write"
+    ],
+    "websiteURL": "https://agdf.iself.eu",
+    "privacyPolicyURL": "https://agdf.iself.eu/privacy",
+    "termsOfServiceURL": "https://agdf.iself.eu/terms",
+    "composerIcon": "./assets/agdf-icon.svg",
+    "logo": "./assets/agdf-logo.svg",
+    "defaultPrompt": [
+      "Use AGDF Planning to clarify a planned UR."
+    ],
+    "brandColor": "#14B8A6"
+  }
+}

package/generated/plugins/agdf-planning/README.md

@@ -0,0 +1,21 @@
+# AGDF Planning
+
+Optional planning dialogue for Codex CLI. Requires compatible AGDF Core exposing
+`planned-ur-v1` protocol 1 and the existing `ur-definition` owner. Core remains
+fully usable without this package. Missing or disabled Core produces a dependency
+diagnosis before writing; there is no automatic installation or CLI fallback.
+
+Install explicitly with `create-agdf codex --package planning --plugin-only` after
+installing Core. Remove only this extension with
+`codex plugin remove agdf-planning@agdf-planning`; Core and project sources remain.
+
+Invoke `$planning` to capture or refine a planned UR and optional priority. Planning
+stops at the UR. Starting delivery requires deliberate source-bound handoff, then
+ordinary UR review and explicit approval. Only the current explicit `run-folders-v1` layout and version-4 Runs are supported.
+Unsupported stores remain unchanged; this package never migrates or resets them.
+
+Sources: this directory owns orchestration and dependency metadata. The shared
+repository generator supplies version-matched portable/Codex manifests. No Core
+runtime, MCP server, UR template, gate engine or editable inventory is bundled.
+Native qualification in this Run targets Codex CLI only; no Desktop or other-host
+qualification follows from package or repository tests.

package/generated/plugins/agdf-planning/assets/agdf-icon.svg

@@ -0,0 +1,16 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 64 64" role="img" aria-label="AGDF">
+  <defs>
+    <linearGradient id="agdf-bg" x1="10" y1="6" x2="54" y2="58" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#0F766E"/>
+      <stop offset="1" stop-color="#2563EB"/>
+    </linearGradient>
+  </defs>
+  <rect width="64" height="64" rx="14" fill="#06131F"/>
+  <rect x="4" y="4" width="56" height="56" rx="12" fill="url(#agdf-bg)"/>
+  <path d="M32 10.5 50 21v22L32 53.5 14 43V21L32 10.5Z" fill="none" stroke="#ECFEFF" stroke-width="5" stroke-linejoin="round"/>
+  <path d="M32 21v13m0 0-10 6m10-6 10 6" fill="none" stroke="#ECFEFF" stroke-width="4" stroke-linecap="round" stroke-linejoin="round"/>
+  <circle cx="32" cy="21" r="5.3" fill="#ECFEFF"/>
+  <circle cx="32" cy="34" r="5.6" fill="#ECFEFF"/>
+  <circle cx="22" cy="40" r="5.3" fill="#ECFEFF"/>
+  <circle cx="42" cy="40" r="5.3" fill="#ECFEFF"/>
+</svg>

package/generated/plugins/agdf-planning/assets/agdf-logo.svg

@@ -0,0 +1,16 @@
+<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512" role="img" aria-label="AGDF">
+  <defs>
+    <linearGradient id="agdf-logo-bg" x1="80" y1="48" x2="432" y2="464" gradientUnits="userSpaceOnUse">
+      <stop offset="0" stop-color="#0F766E"/>
+      <stop offset="1" stop-color="#2563EB"/>
+    </linearGradient>
+  </defs>
+  <rect width="512" height="512" rx="112" fill="#06131F"/>
+  <rect x="32" y="32" width="448" height="448" rx="96" fill="url(#agdf-logo-bg)"/>
+  <path d="M256 84 400 168v176L256 428 112 344V168L256 84Z" fill="none" stroke="#ECFEFF" stroke-width="40" stroke-linejoin="round"/>
+  <path d="M256 168v104m0 0-80 48m80-48 80 48" fill="none" stroke="#ECFEFF" stroke-width="32" stroke-linecap="round" stroke-linejoin="round"/>
+  <circle cx="256" cy="168" r="42" fill="#ECFEFF"/>
+  <circle cx="256" cy="272" r="45" fill="#ECFEFF"/>
+  <circle cx="176" cy="320" r="42" fill="#ECFEFF"/>
+  <circle cx="336" cy="320" r="42" fill="#ECFEFF"/>
+</svg>

package/generated/plugins/agdf-planning/meta/agdf-planning.definition.json

@@ -0,0 +1,9 @@
+{
+  "schema_version": 1,
+  "id": "agdf-planning",
+  "displayName": "AGDF Planning",
+  "description": "Clarify and organize planned URs through AGDF Core.",
+  "longDescription": "Optional Codex planning dialogue. Keeps planning limited to URs and delegates validation, source-bound recording and deliberate Run handoff to a compatible AGDF Core. No additional runtime, MCP server or approval authority.",
+  "core_capability": { "schema": "planned-ur-v1", "protocol_version": 1, "authoring_owner": "ur-definition" },
+  "native_qualification_target": "codex-cli"
+}