feat: wardline install — one-command agent enablement + sibling bindings

CHANGELOG.md

@@ -7,6 +7,19 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [0.3.0] - 2026-05-31
+
+### Added
+
+- **`wardline install`** — one-command agent enablement. Injects a hash-fenced
+  instruction block into `CLAUDE.md`/`AGENTS.md`, installs the `wardline-gate`
+  skill into `.claude/`/`.agents/`, merges a `wardline` entry into `.mcp.json`,
+  and detects Clarion/Filigree to record bindings in `wardline.yaml`.
+  `clarion.url`/`filigree.url` are now runtime-read config fields (precedence:
+  CLI flag > env var > `wardline.yaml`). Opt-out flags `--no-claude-md`,
+  `--no-agents-md`, `--no-skill`, `--no-mcp`, `--no-bindings`; no SessionStart
+  hook (re-run to refresh).
+
 ## [0.2.1] - 2026-05-31
 
 ### Added
@@ -167,7 +180,8 @@ for Python — enterprise-class trust-boundary analysis at small-team weight.
 - **Packaging** — MIT-licensed; optional extras `scanner` (config + CLI) and
   `loom` (HTTP integrations).
 
-[Unreleased]: https://github.com/foundryside-dev/wardline/compare/v0.2.1...HEAD
+[Unreleased]: https://github.com/foundryside-dev/wardline/compare/v0.3.0...HEAD
+[0.3.0]: https://github.com/foundryside-dev/wardline/compare/v0.2.1...v0.3.0
 [0.2.1]: https://github.com/foundryside-dev/wardline/compare/v0.2.0...v0.2.1
 [0.2.0]: https://github.com/foundryside-dev/wardline/compare/v0.1.0...v0.2.0
 [0.1.0]: https://github.com/foundryside-dev/wardline/releases/tag/v0.1.0

docs/agents.md

@@ -23,6 +23,39 @@ asks you to look.
 If you have not installed Wardline yet, start with
 [Getting Started](getting-started.md).
 
+## One-command setup: `wardline install`
+
+`wardline install` wires wardline into a project's agent context in one step:
+
+- injects a small, hash-fenced block into `CLAUDE.md` and `AGENTS.md` pointing
+  the agent at the gate and the loop;
+- installs the `wardline-gate` skill into `.claude/skills/` and `.agents/skills/`;
+- merges a `wardline` entry into `.mcp.json` (preserving any existing servers);
+- detects a Clarion taint store (`clarion` on `PATH` or `WARDLINE_CLARION_URL`)
+  and a Filigree project (`.filigree.conf`), recording a `clarion:`/`filigree:`
+  binding in `wardline.yaml` — live when a URL env var is set, otherwise a
+  commented stanza for you to fill.
+
+```console
+$ wardline install
+wardline install:
+  CLAUDE.md: created
+  AGENTS.md: created
+  skill .claude/skills/wardline-gate: created
+  skill .agents/skills/wardline-gate: created
+  .mcp.json (wardline entry): created
+  clarion: detected (commented)
+  filigree: detected (commented)
+```
+
+It is idempotent (re-run to refresh after upgrading wardline) and non-interactive
+(safe in CI). Opt out of any piece with `--no-claude-md`, `--no-agents-md`,
+`--no-skill`, `--no-mcp`, or `--no-bindings`. There is no SessionStart hook —
+freshness is enforced only when you re-run `wardline install`.
+
+Once installed, the MCP server resolves the Clarion URL from `wardline.yaml`, so
+the `.mcp.json` entry stays a bare `wardline mcp --root .` with no URL in its args.
+
 ## Gate the agent's work with `wardline scan`
 
 Wardline marks trust boundaries with two decorators from `wardline.decorators`: