@danmoisan/drm-copilot-mcp 0.0.1 → 0.0.5

package/resources/codex-and-agents-customizations/.codex/config.toml

@@ -1,137 +1,52 @@
-# Review and merge native MCP, hook, and approval settings intentionally.
+default_permissions = "orchestrator-workspace"
 
-{
-  "$schema": "https://json.schemastore.org/claude-code-settings.json",
-  "agent": "orchestrator",
-  "permissions": {
-    "allow": [
-      "Bash(git *)",
-      "Bash(poetry run *)",
-      "Bash(pwsh *)",
-      "Read",
-      "Edit(/docs/**)",
-      "Write(/docs/**)",
-      "Write(/artifacts/**)",
-      "mcp__drmCopilotExtension__run_poshqc_format",
-      "mcp__drmCopilotExtension__run_poshqc_analyze",
-      "mcp__drmCopilotExtension__run_poshqc_test",
-      "mcp__drmCopilotExtension__run_poshqc_analyze_autofix",
-      "mcp__drmCopilotExtension__resolve_execute_hard_lock_prompt",
-      "mcp__drmCopilotExtension__collect_pr_context",
-      "mcp__drmCopilotExtension__new_potential_entry",
-      "mcp__drmCopilotExtension__new_potential_bug_entry",
-      "mcp__drmCopilotExtension__potential_to_issue",
-      "mcp__drmCopilotExtension__new_active_feature_folder",
-      "mcp__drmCopilotExtension__validate_orchestration_artifacts",
-      "mcp__drmCopilotExtension__resolve_atomic_plan_prompt",
-      "Agent(atomic-planner)",
-      "Agent(atomic-executor)",
-      "Agent(feature-review)",
-      "Agent(task-researcher)",
-      "Agent(prd-feature)",
-      "Agent(staged-review)",
-      "Agent(epic-review)",
-      "Agent(status-updater)",
-      "Agent(python-typed-engineer)",
-      "Agent(powershell-typed-engineer)",
-      "Agent(csharp-typed-engineer)",
-      "Agent(typescript-engineer)",
-      "Skill(orchestrate *)",
-      "Skill(commit-message *)",
-      "Skill(pr-author *)",
-      "Skill(research-issue *)",
-      "Skill(review-feature *)",
-      "Skill(review-staged *)",
-      "Skill(review-epic *)",
-      "Skill(update-status *)",
-      "Skill(fill-feature-docs *)",
-      "Skill(python-change-budget-router *)",
-      "Skill(python-qa-gate *)",
-      "Skill(invoke-python-engineer *)",
-      "Skill(powershell-change-budget-router *)",
-      "Skill(powershell-qa-gate *)",
-      "Skill(invoke-powershell-engineer *)",
-      "Skill(translate-copilot-to-claude *)",
-      "Skill(execute-hard-lock *)",
-      "Edit(/.agents/skills/execute-hard-lock/**)",
-      "Edit(/.agents/skills/feature-review-workflow/**)",
-      "Edit(/.agents/skills/csharp-qa-gate/**)"
-    ],
-    "deny": [
-      "Read(./.env)",
-      "Read(./.env.*)",
-      "Read(./secrets/**)",
-      "Edit(./secrets/**)",
-      "Write(./secrets/**)"
-    ],
-    "additionalDirectories": [
-      "c:\\Users\\DanMoisan\\repos\\drm-copilot\\.claude\\skills\\execute-hard-lock"
-    ]
-  },
-  "hooks": {
-    "PreToolUse": [
-      {
-        "matcher": "Bash",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "pwsh -NoProfile -File .codex/hooks/validate-bash.ps1"
-          },
-          {
-            "type": "command",
-            "command": "pwsh -NoProfile -File .codex/hooks/enforce-promotion-mcp-only.ps1"
-          }
-        ]
-      },
-      {
-        "matcher": "Write|Edit",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "pwsh -NoProfile -File .codex/hooks/check-python-test-purity.ps1"
-          },
-          {
-            "type": "command",
-            "command": "pwsh -NoProfile -File .codex/hooks/enforce-python-batch-budget.ps1"
-          },
-          {
-            "type": "command",
-            "command": "pwsh -NoProfile -File .codex/hooks/check-powershell-test-purity.ps1"
-          },
-          {
-            "type": "command",
-            "command": "pwsh -NoProfile -File .codex/hooks/enforce-powershell-batch-budget.ps1"
-          },
-          {
-            "type": "command",
-            "command": "pwsh -NoProfile -File .codex/hooks/enforce-evidence-locations.ps1"
-          }
-        ]
-      }
-    ],
-    "SubagentStop": [
-      {
-        "matcher": "atomic-planner|atomic-executor|feature-review|task-researcher|prd-feature|staged-review|epic-review|status-updater|python-typed-engineer|powershell-typed-engineer|csharp-typed-engineer|typescript-engineer",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "pwsh -NoProfile -Command \"$input = $env:CLAUDE_HOOK_INPUT | ConvertFrom-Json; $output = $input.output; if (-not ($output -match '(plan-path|research-path|review-artifact|PREFLIGHT|evidence/)')) { Write-Error 'Subagent stopped without required completion artifact path'; exit 1 }; exit 0\""
-          }
-        ]
-      },
-      {
-        "matcher": "feature-review",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "pwsh -NoProfile -File .codex/hooks/validate-feature-review-coverage.ps1"
-          }
-        ]
-      }
-    ]
-  },
-  "enabledPlugins": {
-    "skill-creator@claude-plugins-official": true
-  },
-  "defaultPermissionMode": "bypassPermissions"
-}
+[mcp_servers.drm-copilot]
+command = "npx"
+args = ["-y", "@danmoisan/drm-copilot-mcp"]
+required = true
+enabled_tools = [
+    "collect_commit_context",
+    "collect_pr_context",
+    "new_potential_entry",
+    "new_potential_bug_entry",
+    "potential_to_issue",
+    "new_active_feature_folder",
+    "validate_orchestration_artifacts",
+    "resolve_atomic_plan_prompt",
+    "resolve_execute_hard_lock_prompt",
+    "run_poshqc_format",
+    "run_poshqc_analyze",
+    "run_poshqc_analyze_autofix",
+    "run_poshqc_test",
+]
+default_tools_approval_mode = "prompt"
+
+[mcp_servers.drm-copilot.tools.validate_orchestration_artifacts]
+approval_mode = "approve"
+
+[features]
+multi_agent = true
+
+[permissions.orchestrator-workspace]
+description = "Workspace editing for deterministic orchestration with secret-path deny rules."
+extends = ":workspace"
+
+[permissions.orchestrator-workspace.filesystem]
+glob_scan_max_depth = 4
+
+[permissions.orchestrator-workspace.filesystem.":workspace_roots"]
+"**/.env" = "deny"
+"**/.env.*" = "deny"
+"secrets" = "deny"
+"secrets/**" = "deny"
+
+[permissions.orchestrator-workspace.network]
+enabled = true
+
+[permissions.orchestrator-workspace.network.domains]
+"github.com" = "allow"
+"api.github.com" = "allow"
+"objects.githubusercontent.com" = "allow"
+"registry.npmjs.org" = "allow"
+"pypi.org" = "allow"
+"files.pythonhosted.org" = "allow"

package/resources/codex-and-agents-customizations/.codex/hooks/enforce-promotion-mcp-only.ps1

@@ -26,7 +26,7 @@
 [CmdletBinding()]
 param()
 
-$script:PromotionMcpOnlyBlockedReason = 'PROMOTION_MCP_ONLY_BLOCKED: Direct Bash promotion-script execution is not allowed in agent sessions. Use the drmCopilotExtension MCP promotion tools instead.'
+$script:PromotionMcpOnlyBlockedReason = 'PROMOTION_MCP_ONLY_BLOCKED: Direct Bash promotion-script execution is not allowed in agent sessions. Use the drm-copilot MCP promotion tools instead.'
 
 function Get-PromotionMcpOnlyBlockedReason {
     <#

package/resources/codex-and-agents-customizations/.codex/prompts/orchestrate-work.md

@@ -1,6 +1,6 @@
 ---
 description: Route a request through budget-based orchestration and persist until the selected delivery path is complete
-argument-hint: Provide objective, likely files, feature-or-bug hint, constraints, and whether small-path execution should stop after Phase 0 for manual bootstrap
+argument-hint: Provide objective, likely files, feature-or-bug hint, constraints, and any explicit initial opt-in for manual bootstrap; otherwise orchestration must remain fully automated
 ---
 
 Spawn `orchestrator` to coordinate the current request from intake through completion.
@@ -10,13 +10,14 @@ Inputs to provide or infer:
 - likely affected production and test files, when known
 - initial classification hint: `feature` or `bug`, when known
 - constraints, preserved APIs, or forbidden changes
-- whether small-path execution should stop after Phase 0 for manual bootstrap
+- whether the initial user request explicitly opted into manual bootstrap from the beginning
 
 Required behavior:
 - estimate change budget first and choose the correct small or large path
 - maintain and resume from the canonical orchestration checkpoint
 - use migrated Codex subagents when available
 - route host-specific lifecycle automation through the shared adapter rules
-- continue until planning, execution, validation, and review are complete for the selected path, unless the request explicitly requires a manual-bootstrap pause
+- continue until planning, execution, validation, and review are complete for the selected path
+- do not introduce manual bootstrap, human-operator validation, or any other manual handoff unless the initial user request explicitly opted in from the beginning
 
 On completion, report the selected route, branch, key variables, `plan-path` when applicable, checkpoint path, created or updated artifact paths, and final readiness summary.

package/resources/codex-and-agents-customizations/.codex/scripts/post-codex-worktree-session.ps1

@@ -0,0 +1,5 @@
+[CmdletBinding()]
+param()
+
+Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'

package/resources/codex-and-agents-customizations/.github/workflows/_validate-orchestrator-state.yml

@@ -0,0 +1,68 @@
+name: Validate Orchestrator State
+
+on:
+  workflow_call:
+    inputs:
+      state-path:
+        description: Repository-relative orchestrator checkpoint path.
+        required: false
+        type: string
+        default: artifacts/orchestration/orchestrator-state.json
+      require-checkpoint:
+        description: Fail when the checkpoint file is absent.
+        required: false
+        type: boolean
+        default: true
+  workflow_dispatch:
+    inputs:
+      state-path:
+        description: Repository-relative orchestrator checkpoint path.
+        required: false
+        type: string
+        default: artifacts/orchestration/orchestrator-state.json
+      require-checkpoint:
+        description: Fail when the checkpoint file is absent.
+        required: false
+        type: boolean
+        default: true
+
+jobs:
+  validate-orchestrator-state:
+    name: Validate orchestrator checkpoint
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Check out repository
+        uses: actions/checkout@v4
+
+      - name: Set up Python
+        uses: actions/setup-python@v5
+        with:
+          python-version: "3.13"
+
+      - name: Install Poetry
+        uses: snok/install-poetry@v1
+        with:
+          version: latest
+          virtualenvs-create: true
+          virtualenvs-in-project: true
+
+      - name: Install dependencies
+        run: poetry install --no-interaction
+
+      - name: Validate checkpoint
+        env:
+          STATE_PATH: ${{ inputs.state-path }}
+          REQUIRE_CHECKPOINT: ${{ inputs.require-checkpoint }}
+        run: |
+          if [ ! -f "$STATE_PATH" ]; then
+            if [ "$REQUIRE_CHECKPOINT" = "true" ]; then
+              echo "ERROR: orchestrator checkpoint is required but was not found: $STATE_PATH" >&2
+              exit 1
+            fi
+            echo "No orchestrator checkpoint found at $STATE_PATH; validation skipped."
+            exit 0
+          fi
+
+          poetry run python -m scripts.dev_tools.validate_orchestration_artifacts \
+            orchestrator-state "$STATE_PATH" --require-complete

package/resources/codex-and-agents-customizations/.github/workflows/validate-orchestrator-state.yml

@@ -0,0 +1,15 @@
+name: Orchestrator State Gate
+
+on:
+  pull_request:
+    branches: [main, development]
+  push:
+    branches: [main, development]
+  workflow_dispatch:
+
+jobs:
+  validate-orchestrator-state:
+    uses: ./.github/workflows/_validate-orchestrator-state.yml
+    with:
+      state-path: artifacts/orchestration/orchestrator-state.json
+      require-checkpoint: false

package/resources/config/orchestration-routing.json

@@ -0,0 +1,84 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "version": 1,
+  "routes": {
+    "small": {
+      "description": "Minor-audit path for work inside the applicable language budget.",
+      "required_agents": [
+        "atomic-planner",
+        "atomic-executor",
+        "feature-reviewer",
+        "commit-steward"
+      ],
+      "required_skills": [
+        "orchestrate",
+        "orchestrator-workflow",
+        "feature-promotion-lifecycle",
+        "repo-automation-adapter",
+        "atomic-plan-contract",
+        "acceptance-criteria-tracking",
+        "pr-context-artifacts",
+        "pr-base-branch-merge-base"
+      ],
+      "required_mcp_tools": [
+        "new_potential_entry",
+        "potential_to_issue",
+        "new_active_feature_folder",
+        "collect_commit_context",
+        "collect_pr_context",
+        "validate_orchestration_artifacts"
+      ]
+    },
+    "large": {
+      "description": "Full feature or bug path for work outside small-path budget.",
+      "required_agents": [
+        "task-researcher",
+        "prd-feature",
+        "atomic-planner",
+        "atomic-executor",
+        "feature-reviewer",
+        "commit-steward"
+      ],
+      "required_skills": [
+        "orchestrate",
+        "orchestrator-workflow",
+        "feature-promotion-lifecycle",
+        "repo-automation-adapter",
+        "atomic-plan-contract",
+        "acceptance-criteria-tracking",
+        "pr-context-artifacts",
+        "pr-base-branch-merge-base"
+      ],
+      "required_mcp_tools": [
+        "new_potential_entry",
+        "potential_to_issue",
+        "new_active_feature_folder",
+        "collect_commit_context",
+        "collect_pr_context",
+        "validate_orchestration_artifacts"
+      ]
+    },
+    "remediation": {
+      "description": "Review-triggered remediation loop.",
+      "required_agents": [
+        "atomic-planner",
+        "atomic-executor",
+        "feature-reviewer",
+        "commit-steward"
+      ],
+      "required_skills": [
+        "orchestrate",
+        "orchestrator-workflow",
+        "repo-automation-adapter",
+        "atomic-plan-contract",
+        "acceptance-criteria-tracking",
+        "pr-context-artifacts"
+      ],
+      "required_mcp_tools": [
+        "collect_commit_context",
+        "collect_pr_context",
+        "validate_orchestration_artifacts"
+      ]
+    }
+  }
+}

package/resources/customizations/.github/agents/Powershell DI Unit Test Engineer.agent.md

@@ -91,7 +91,7 @@ If any gate fails:
 You must run the repo toolchain via `#tool:terminal`.
 
 ### Baseline runs (required before edits)
-- Analyzer baseline (repo standard): `mcp__drmCopilotExtension__run_poshqc_analyze`
+- Analyzer baseline (repo standard): `mcp__drm-copilot__run_poshqc_analyze`
 - Test baseline (targeted): run only the relevant Pester file(s) or tag/filter used by the repo
 - Coverage baseline: capture per-file coverage for the touched file(s), and overall if applicable
 

package/resources/customizations/.github/agents/atomic_executor.agent.md

@@ -242,7 +242,7 @@ If the user says “resume”, “continue”, or “try again”:
 - When completing a task or a plan, report the toolchain status explicitly: 
   - For python, this is Black, Ruff, Pyright, Pytest, and coverage.
   - For bash, this is shell QC and bats testing.
-  - For powershell, this is `mcp__drmCopilotExtension__run_poshqc_format`, `mcp__drmCopilotExtension__run_poshqc_analyze`, and `mcp_drmcopilotext_run_poshqc_test`.
+  - For powershell, this is `mcp__drm-copilot__run_poshqc_format`, `mcp__drm-copilot__run_poshqc_analyze`, and `mcp_drmcopilotext_run_poshqc_test`.
   - For json, this is json formatting and json linting.
 - Always end with the updated checklist so the user can see progress.
 

package/resources/customizations/.github/agents/atomic_planning.agent.md

@@ -361,13 +361,13 @@ When the work involves tests:
 
    **Bad:**
 
-   * [ ] [P3-T1] Implement tests for `mcp__drmCopilotExtension__run_poshqc_format`
-   * [ ] [P3-T2] Write unit tests for `mcp__drmCopilotExtension__run_poshqc_analyze`
+   * [ ] [P3-T1] Implement tests for `mcp__drm-copilot__run_poshqc_format`
+   * [ ] [P3-T2] Write unit tests for `mcp__drm-copilot__run_poshqc_analyze`
 
    **Good:**
 
-   * [ ] [P3-T1] Add regression test for `mcp__drmCopilotExtension__run_poshqc_format` forwarding selected `scan_folders`
-   * [ ] [P3-T2] Add regression test for `mcp__drmCopilotExtension__run_poshqc_analyze` rejecting invalid scan-folder input
+   * [ ] [P3-T1] Add regression test for `mcp__drm-copilot__run_poshqc_format` forwarding selected `scan_folders`
+   * [ ] [P3-T2] Add regression test for `mcp__drm-copilot__run_poshqc_analyze` rejecting invalid scan-folder input
    * [ ] [P3-T3] Add regression test for `mcp_drmcopilotext_run_poshqc_test` preserving the selected workspace scope
 
 ### 5.4.1 TDD Red regression tests must be tagged (MANDATORY)
@@ -422,15 +422,15 @@ When refactoring is required (e.g., to enable dependency injection, improve test
 
    **Bad:**
 
-   * [ ] [P1-T1] Refactor `mcp__drmCopilotExtension__run_poshqc_analyze_autofix` integration for testability
+   * [ ] [P1-T1] Refactor `mcp__drm-copilot__run_poshqc_analyze_autofix` integration for testability
 
    **Good:**
 
-   * [ ] [P1-T1] Identify external dependencies used by `mcp__drmCopilotExtension__run_poshqc_analyze_autofix` and list them in an internal note
-   * [ ] [P1-T2] Extract the autofix invocation seam behind `mcp__drmCopilotExtension__run_poshqc_analyze_autofix` into helper functions
-   * [ ] [P1-T3] Add an injectable execution seam for `mcp__drmCopilotExtension__run_poshqc_analyze_autofix` with a production default
-   * [ ] [P1-T4] Update all call sites of `mcp__drmCopilotExtension__run_poshqc_analyze_autofix` to use the default seam
-   * [ ] [P1-T5] Verify that `mcp__drmCopilotExtension__run_poshqc_analyze_autofix` is mockable via the new helper functions in tests
+   * [ ] [P1-T1] Identify external dependencies used by `mcp__drm-copilot__run_poshqc_analyze_autofix` and list them in an internal note
+   * [ ] [P1-T2] Extract the autofix invocation seam behind `mcp__drm-copilot__run_poshqc_analyze_autofix` into helper functions
+   * [ ] [P1-T3] Add an injectable execution seam for `mcp__drm-copilot__run_poshqc_analyze_autofix` with a production default
+   * [ ] [P1-T4] Update all call sites of `mcp__drm-copilot__run_poshqc_analyze_autofix` to use the default seam
+   * [ ] [P1-T5] Verify that `mcp__drm-copilot__run_poshqc_analyze_autofix` is mockable via the new helper functions in tests
 
 3. **No umbrella refactor tasks**
    You MUST NOT use a single task that says “Refactor X for testability.” Always decompose into multiple atomic slices as above.

package/resources/customizations/.github/agents/csharp-orchestrator.agent.md

@@ -111,6 +111,10 @@ Use these reusable skills to avoid duplicating shared operations:
   - `${feature-folder}`: created active feature folder path
   - `${plan-path}`: workspace-relative path to the single plan file that must be updated in-place across all planning/preflight iterations
 
+5) **No manual steps by default**
+- Do not introduce manual bootstrap, human-operator validation, user-performed repro steps, or any other manual handoff unless the initial user request explicitly asked for manual orchestration from the beginning.
+- If a delegated plan, review, or remediation flow proposes a new manual step without that explicit initial opt-in, reject it, request a revision, or record blocked automated state instead of asking the user to perform the step.
+
 # Workflow router
 
 ## Phase 0 — Intake and budget estimate (mandatory)
@@ -198,11 +202,11 @@ Hard enforcement for S4:
 
 ### Step S5 — Branch by bootstrap mode
 
-S5.1 If request is `manual bootstrap`:
+S5.1 Only if the initial user request explicitly requested `manual bootstrap` from the beginning:
 - Save checkpoint with `next_step` at Phase 1 resume point.
 - Stop execution and return resume instructions.
 
-S5.2 If request is small development (not manual bootstrap):
+S5.2 Otherwise continue automated small development:
 - Continue to Step S6.
 
 ### Step S6 — Delegate constrained small-path development

package/resources/customizations/.github/agents/feature-review.agent.md

@@ -1,7 +1,7 @@
 ---
 name: feature_code_review_agent
-description: Review an entire feature branch relative to a base branch (PR-style). Read pr_context.summary.txt thoroughly, use pr_context.appendix.txt for full baseline diff evidence, and produce PolicyAudit + CodeReview + FeatureAudit (Acceptance Criteria). If remediation is needed, generate remediation inputs and delegate plan creation to atomic_planner to write remediation-plan.md in the active feature folder. No user questions.
-argument-hint: "Checkout the feature branch. Provide PRBaseBranch (e.g., development). Run this agent to (re)generate the PR context artifacts (summary + appendix) per `pr-context-artifacts` via MCP server `drmCopilotExtension` tool `collect_pr_context` with `base: ${input:PRBaseBranch}` when needed, then produce: (1) docs/features/active/<feature>/policy-audit.<timestamp>.md, (2) docs/features/active/<feature>/code-review.<timestamp>.md, (3) docs/features/active/<feature>/feature-audit.<timestamp>.md (acceptance criteria), and (4) if needed, docs/features/active/<feature>/remediation-inputs.<timestamp>.md AND AUTOMATICALLY DELEGATE to atomic_planner to write docs/features/active/<feature>/remediation-plan.<timestamp>.md in the same folder. Timestamps use ISO-8601 format yyyy-MM-ddTHH-mm."
+description: Review an entire feature branch relative to a base branch (PR-style). Read pr_context.summary.txt thoroughly, use pr_context.appendix.txt for full baseline diff evidence, and produce PolicyAudit + CodeReview + FeatureAudit (Acceptance Criteria). If remediation is needed, generate remediation inputs and delegate plan creation to atomic_planner to write remediation-plan.md in the active feature folder. End with exact review-status and artifact-path lines so orchestration can gate deterministically. No user questions.
+argument-hint: "Checkout the feature branch. Provide PRBaseBranch (e.g., development). Run this agent to (re)generate the PR context artifacts (summary + appendix) per `pr-context-artifacts` via MCP server `drm-copilot` tool `collect_pr_context` with `base: ${input:PRBaseBranch}` when needed, then produce: (1) docs/features/active/<feature>/policy-audit.<timestamp>.md, (2) docs/features/active/<feature>/code-review.<timestamp>.md, (3) docs/features/active/<feature>/feature-audit.<timestamp>.md (acceptance criteria), and (4) if needed, docs/features/active/<feature>/remediation-inputs.<timestamp>.md AND AUTOMATICALLY DELEGATE to atomic_planner to write docs/features/active/<feature>/remediation-plan.<timestamp>.md in the same folder. Timestamps use ISO-8601 format yyyy-MM-ddTHH-mm. The final report MUST include exact `REVIEW_STATUS`, `FEATURE_FOLDER`, `POLICY_AUDIT`, `CODE_REVIEW`, `FEATURE_AUDIT`, `REMEDIATION_INPUTS`, and `REMEDIATION_PLAN` lines."
 tools:
   ['execute/getTerminalOutput', 'execute/runTask', 'execute/runTests', 'execute/runInTerminal', 'read/terminalSelection', 'read/terminalLastCommand', 'read/getTaskOutput', 'read/problems', 'read/readFile', 'agent', 'edit/createDirectory', 'edit/createFile', 'edit/editFiles', 'search', 'drmcopilotextension/*', 'web', 'todo']
 handoffs:

package/resources/customizations/.github/agents/orchestrator.agent.md

@@ -147,6 +147,10 @@ Use exact gate signals and exact path fields. Do not infer loop transitions from
 
 If any required signal or required path field is missing, stop and record blocked state instead of inferring success.
 
+5) **No manual steps by default**
+- Do not introduce manual bootstrap, human-operator validation, user-performed repro steps, or any other manual handoff unless the initial user request explicitly asked for manual orchestration from the beginning.
+- If a delegated plan, review, or remediation flow proposes a new manual step without that explicit initial opt-in, reject it, request a revision, or record blocked automated state instead of asking the user to perform the step.
+
 # Workflow router
 
 ## Phase 0 — Intake and budget estimate (mandatory)
@@ -234,11 +238,11 @@ Hard enforcement for S4:
 
 ### Step S5 — Branch by bootstrap mode
 
-S5.1 If request is `manual bootstrap`:
+S5.1 Only if the initial user request explicitly requested `manual bootstrap` from the beginning:
 - Save checkpoint with `next_step` at Phase 1 resume point.
 - Stop execution and return resume instructions.
 
-S5.2 If request is small development (not manual bootstrap):
+S5.2 Otherwise continue automated small development:
 - Continue to Step S6.
 
 ### Step S6 — Delegate constrained small-path development

package/resources/customizations/.github/agents/powershell-atomic-executor.agent.md

@@ -1,6 +1,6 @@
 ---
 name: powershell_atomic_executor
-description: Execute atomic_planner plans verbatim with atomic_executor rigor and PowerShell-specialized MCP quality gates (`mcp__drmCopilotExtension__run_poshqc_format`, `mcp__drmCopilotExtension__run_poshqc_analyze`, `mcp_drmcopilotext_run_poshqc_test`, `mcp__drmCopilotExtension__run_poshqc_analyze_autofix`), Pester, DI/mocking rules, and zero-regression deltas.
+description: Execute atomic_planner plans verbatim with atomic_executor rigor and PowerShell-specialized MCP quality gates (`mcp__drm-copilot__run_poshqc_format`, `mcp__drm-copilot__run_poshqc_analyze`, `mcp_drmcopilotext_run_poshqc_test`, `mcp__drm-copilot__run_poshqc_analyze_autofix`), Pester, DI/mocking rules, and zero-regression deltas.
 argument-hint: "Provide the approved atomic plan text or path. I will run preflight validation, then execute tasks in order with strict acceptance checks and PowerShell-specific QA gates."
 tools: [vscode, execute/testFailure, execute/getTerminalOutput, execute/killTerminal, execute/runTask, execute/createAndRunTask, execute/runInTerminal, execute/runTests, read/problems, read/readFile, read/terminalSelection, read/terminalLastCommand, agent, edit/createDirectory, edit/createFile, edit/editFiles, search, web, 'drmcopilotextension/*', todo]
 ---
@@ -239,7 +239,7 @@ If the user says "resume", "continue", or "try again":
 - Be concise but exact.
 - Do not paste large code blocks unless the user asks.
 - Always show the commands/tasks you run and summarize results (pass/fail, key errors).
-- When completing a task or a plan, report the toolchain status explicitly: `mcp__drmCopilotExtension__run_poshqc_format`, `mcp__drmCopilotExtension__run_poshqc_analyze`, and `mcp_drmcopilotext_run_poshqc_test`.
+- When completing a task or a plan, report the toolchain status explicitly: `mcp__drm-copilot__run_poshqc_format`, `mcp__drm-copilot__run_poshqc_analyze`, and `mcp_drmcopilotext_run_poshqc_test`.
 - Always end with the updated checklist so the user can see progress.
 
 ---
@@ -255,8 +255,8 @@ Always enforce repo policy order:
 5) `.github/instructions/powershell-unit-test.instructions.md`
 
 Required toolchain for PowerShell tasks:
-1) Format (`mcp__drmCopilotExtension__run_poshqc_format`)
-2) Analyze (`mcp__drmCopilotExtension__run_poshqc_analyze`)
+1) Format (`mcp__drm-copilot__run_poshqc_format`)
+2) Analyze (`mcp__drm-copilot__run_poshqc_analyze`)
 3) Test (`mcp_drmcopilotext_run_poshqc_test`)
 4) Coverage (when enforced)
 

package/resources/customizations/.github/agents/powershell-atomic-planning.agent.md

@@ -362,13 +362,13 @@ When the work involves tests:
 
   **Bad:**
 
-  * [ ] [P3-T1] Implement tests for `mcp__drmCopilotExtension__run_poshqc_format`
-  * [ ] [P3-T2] Write unit tests for `mcp__drmCopilotExtension__run_poshqc_analyze`
+  * [ ] [P3-T1] Implement tests for `mcp__drm-copilot__run_poshqc_format`
+  * [ ] [P3-T2] Write unit tests for `mcp__drm-copilot__run_poshqc_analyze`
 
   **Good:**
 
-  * [ ] [P3-T1] Add regression test for `mcp__drmCopilotExtension__run_poshqc_format` forwarding selected `scan_folders`
-  * [ ] [P3-T2] Add regression test for `mcp__drmCopilotExtension__run_poshqc_analyze` rejecting invalid scan-folder input
+  * [ ] [P3-T1] Add regression test for `mcp__drm-copilot__run_poshqc_format` forwarding selected `scan_folders`
+  * [ ] [P3-T2] Add regression test for `mcp__drm-copilot__run_poshqc_analyze` rejecting invalid scan-folder input
   * [ ] [P3-T3] Add regression test for `mcp_drmcopilotext_run_poshqc_test` preserving the selected workspace scope
 
 ### 5.4.1 TDD Red regression tests must be tagged (MANDATORY)
@@ -423,15 +423,15 @@ When refactoring is required (e.g., to enable dependency injection, improve test
 
   **Bad:**
 
-  * [ ] [P1-T1] Refactor `mcp__drmCopilotExtension__run_poshqc_analyze_autofix` integration for testability
+  * [ ] [P1-T1] Refactor `mcp__drm-copilot__run_poshqc_analyze_autofix` integration for testability
 
   **Good:**
 
-  * [ ] [P1-T1] Identify external dependencies used by `mcp__drmCopilotExtension__run_poshqc_analyze_autofix` and list them in an internal note
-  * [ ] [P1-T2] Extract the autofix invocation seam behind `mcp__drmCopilotExtension__run_poshqc_analyze_autofix` into helper functions
-  * [ ] [P1-T3] Add an injectable execution seam for `mcp__drmCopilotExtension__run_poshqc_analyze_autofix` with a production default
-  * [ ] [P1-T4] Update all call sites of `mcp__drmCopilotExtension__run_poshqc_analyze_autofix` to use the default seam
-  * [ ] [P1-T5] Verify that `mcp__drmCopilotExtension__run_poshqc_analyze_autofix` is mockable via the new helper functions in tests
+  * [ ] [P1-T1] Identify external dependencies used by `mcp__drm-copilot__run_poshqc_analyze_autofix` and list them in an internal note
+  * [ ] [P1-T2] Extract the autofix invocation seam behind `mcp__drm-copilot__run_poshqc_analyze_autofix` into helper functions
+  * [ ] [P1-T3] Add an injectable execution seam for `mcp__drm-copilot__run_poshqc_analyze_autofix` with a production default
+  * [ ] [P1-T4] Update all call sites of `mcp__drm-copilot__run_poshqc_analyze_autofix` to use the default seam
+  * [ ] [P1-T5] Verify that `mcp__drm-copilot__run_poshqc_analyze_autofix` is mockable via the new helper functions in tests
 
 3. **No umbrella refactor tasks**
   You MUST NOT use a single task that says “Refactor X for testability.” Always decompose into multiple atomic slices as above.

package/resources/customizations/.github/agents/powershell-orchestrator.agent.md

@@ -111,6 +111,10 @@ Use these reusable skills to avoid duplicating shared operations:
   - `${feature-folder}`: created active feature folder path
   - `${plan-path}`: workspace-relative path to the single plan file that must be updated in-place across all planning/preflight iterations
 
+5) **No manual steps by default**
+- Do not introduce manual bootstrap, human-operator validation, user-performed repro steps, or any other manual handoff unless the initial user request explicitly asked for manual orchestration from the beginning.
+- If a delegated plan, review, or remediation flow proposes a new manual step without that explicit initial opt-in, reject it, request a revision, or record blocked automated state instead of asking the user to perform the step.
+
 # Workflow router
 
 ## Phase 0 — Intake and budget estimate (mandatory)
@@ -198,11 +202,11 @@ Hard enforcement for S4:
 
 ### Step S5 — Branch by bootstrap mode
 
-S5.1 If request is `manual bootstrap`:
+S5.1 Only if the initial user request explicitly requested `manual bootstrap` from the beginning:
 - Save checkpoint with `next_step` at Phase 1 resume point.
 - Stop execution and return resume instructions.
 
-S5.2 If request is small development (not manual bootstrap):
+S5.2 Otherwise continue automated small development:
 - Continue to Step S6.
 
 ### Step S6 — Delegate constrained small-path development

package/resources/customizations/.github/agents/powershell-typed-engineer.agent.md

@@ -175,8 +175,8 @@ If any gate fails, revert/fix immediately before proceeding.
 
 Run the repo-standard PowerShell toolchain in this order:
 
-1) **Format** (`mcp__drmCopilotExtension__run_poshqc_format`)
-2) **Analyze** (`mcp__drmCopilotExtension__run_poshqc_analyze`)
+1) **Format** (`mcp__drm-copilot__run_poshqc_format`)
+2) **Analyze** (`mcp__drm-copilot__run_poshqc_analyze`)
 3) **Test** (`mcp_drmcopilotext_run_poshqc_test`)
 4) **Coverage** (when enforced by task/repo flow)