@danmoisan/drm-copilot-mcp 0.0.1 → 0.0.5

package/resources/codex-and-agents-customizations/.agents/skills/orchestrator-workflow/SKILL.md

@@ -30,11 +30,22 @@ Use as needed:
 - Required delegated specialists:
   - `atomic-planner`
   - `atomic-executor`
+  - `feature-review`
   - `feature-reviewer`
+  - `task-researcher`
+  - `prd-feature`
+  - `staged-review`
+  - `epic-review`
+  - `status-updater`
+  - `python-typed-engineer`
+  - `powershell-typed-engineer`
+  - `csharp-typed-engineer`
+  - `typescript-engineer`
   - `commit-steward`
 - Deterministic availability rule:
-  - if the host exposes `spawn_agent`, treat all four required delegated specialists as available,
+  - if the host exposes `spawn_agent` and the required `.codex/agents/<name>.toml` file exists, treat that delegated specialist as available,
   - do not infer unavailability from missing nicknames, missing prior agent instances, or lack of a dedicated launcher alias.
+- Every required delegated specialist must exist as a native Codex agent under `.codex/agents/`. If a required agent file is missing, set `blocked_reason` to `spawn_agent_unavailable` and stop.
 - Required delegated steps MUST delegate or stop execution.
 - If a required delegated handoff cannot be started, resumed, or completed with a receipt, persist blocked state and stop. Do not perform that step directly.
 - Direct local execution is allowed only for workflow steps that are not designated below as required delegated handoffs.
@@ -44,6 +55,9 @@ Use as needed:
 Canonical checkpoint path:
 - `artifacts/orchestration/orchestrator-state.json`
 
+Canonical route matrix:
+- `config/orchestration-routing.json`
+
 Persist and reuse these fields exactly:
 - `objective`
 - `change_budget_estimate`
@@ -73,6 +87,15 @@ Persist and reuse these fields exactly:
 - `step10_status`
 - `delegation_receipts`
 - `blocked_reason`
+- `route_id`
+- `required_agents`
+- `required_skills`
+- `required_mcp_tools`
+- `skill_receipts`
+- `mcp_call_receipts`
+- `local_execution_overrides`
+- `delegation_bypasses`
+- `lifecycle_operations`
 
 For small-path runs, also persist:
 - `bootstrap_mode`
@@ -115,6 +138,32 @@ Delegation receipt schema:
   - `result_signal`
   - `artifact_paths`
 
+Skill receipt schema:
+- `skill_receipts` MUST be a list of objects with:
+  - `skill`
+  - `required`
+  - `acknowledged_at_phase`
+  - `evidence`
+
+MCP receipt schema:
+- `mcp_call_receipts` MUST be a list of objects with:
+  - `tool`
+  - `ok`
+  - `evidence`
+
+Completion-state invariants:
+- `route_id` MUST identify an entry in `config/orchestration-routing.json`.
+- `required_agents`, `required_skills`, and `required_mcp_tools` MUST exactly
+  match the selected route matrix entry.
+- every required agent MUST have a matching `delegation_receipts[].agent_name`.
+- every required skill MUST have a matching required `skill_receipts[].skill`
+  with non-empty evidence.
+- every required MCP tool MUST have a successful `mcp_call_receipts[].tool`
+  receipt with non-empty evidence.
+- `local_execution_overrides` and `delegation_bypasses` MUST be empty lists at
+  completion.
+- every recorded `lifecycle_operations[]` item MUST use `surface: "mcp"`.
+
 Required-delegation step map:
 - small path:
   - Step 5 -> `atomic-planner`
@@ -170,6 +219,9 @@ If an exact signal or required path field is missing, set the relevant step to `
 4. If the scope is primarily PowerShell, use `powershell-change-budget-router`.
 5. If the scope is mixed-language, ambiguous, or unsupported by an existing change-budget router, fail closed to the large path.
 6. Treat any request outside the applicable small-path budget as large path.
+7. Select `route_id` from `config/orchestration-routing.json` and persist the
+   exact required agent, skill, and MCP lists from the matrix before starting
+   lifecycle automation.
 
 ## Small Path
 
@@ -199,7 +251,8 @@ Required behavior:
 7. Spawn `atomic-executor` to execute Phase 0 only.
    - Record a delegation receipt and set `step6_status` to `verified` before branching
    - If the handoff cannot be started or does not return a receipt, set `step6_status` to `blocked`, set `blocked_reason`, and stop
-8. If the request is manual bootstrap, persist the resume checkpoint and stop after Phase 0.
+8. If and only if the initial user request explicitly opted into manual orchestration from the beginning, persist the resume checkpoint and stop after Phase 0.
+   - Otherwise manual bootstrap is prohibited; continue automated execution.
 9. Otherwise continue with constrained implementation:
    - steps that are not modeled as required delegated handoffs may execute directly while staying within the approved plan and applicable repo policy
 10. Validate the delivered work against `${feature-folder}/issue.md` and persist plan or acceptance-criteria checkoffs before review.
@@ -287,6 +340,9 @@ Do not claim mission completion until all of the following are true:
 
 - the selected path completed end to end
 - all required delegations completed with receipts
+- all required skills have `skill_receipts` with evidence
+- all required MCP tools have successful `mcp_call_receipts`
+- no local execution override or delegation bypass is recorded
 - the checkpoint is updated with the final state
 - the canonical checkpoint path was used without sidecar replacement or backup substitution
 - `${relativeFile}` is a real promoted-input path and `${issue-num}` is numeric when lifecycle setup was required
@@ -299,6 +355,8 @@ Do not claim mission completion until all of the following are true:
 - any required remediation artifacts exist on disk and the latest re-review is clean
 - any required remediation loop run also includes a remediation execution receipt, a remediation commit receipt, and a final `REVIEW_STATUS: PASS`
 - validator-backed checks for the approved plan, policy audit, code review, feature audit, and checkpoint state pass
+- the canonical checkpoint passes `validate_orchestration_artifacts` with `artifact_type: "orchestrator-state"` and `require_complete: true`
+- required GitHub checks pass for the current PR head SHA before PR/DONE completion
 
 ## Hard Constraints
 
@@ -314,4 +372,5 @@ Do not claim mission completion until all of the following are true:
 - Do not create replacement audit artifacts yourself for any required delegated review step.
 - Do not execute required delegated steps locally as a fallback.
 - Do not accept stale PR-context artifacts, unsupported checklist checkoffs, or missing required evidence as PASS outcomes.
+- Do not treat Codex lifecycle hooks as the hard completion boundary; use deterministic validator and CI gates for completion enforcement.
 - Do not claim completion without reporting the checkpoint path and the created or updated artifact paths.

package/resources/codex-and-agents-customizations/.agents/skills/policy-audit-template-usage/SKILL.md

@@ -1,8 +1,3 @@
-# Converted skill
-
-Applied rewrites:
-- None
-
 ---
 name: policy-audit-template-usage
 description: 'Policy audit template usage and output requirements. Use when creating policy-audit.<timestamp>.md artifacts from the repo templates.'
@@ -20,13 +15,13 @@ Use this skill when:
 
 ## Template Source
 
-- Required template source: the MCP server tool `mcp__drmCopilotExtension__resolve_policy_audit_template_asset` with asset selector `template`.
+- Required template source: the MCP server tool `mcp__drm-copilot__resolve_policy_audit_template_asset` with asset selector `template`.
 - The resolved MCP asset is authoritative even when a matching repo file also exists.
 - If MCP asset resolution fails, create a minimal policy audit artifact marked BLOCKED and document the missing template resolution.
 
 ## Required Steps
 
-1) Resolve the policy-audit template through the MCP server tool `mcp__drmCopilotExtension__resolve_policy_audit_template_asset` with asset `template`, then copy the resolved asset to the target location using an ISO-8601 timestamp.
+1) Resolve the policy-audit template through the MCP server tool `mcp__drm-copilot__resolve_policy_audit_template_asset` with asset `template`, then copy the resolved asset to the target location using an ISO-8601 timestamp.
 2) Replace placeholders with actual values (component, date, files under test, commits).
 3) Remove any template usage instructions per template guidance.
 4) Mark each section PASS/FAIL/N/A using the template’s expected conventions.
@@ -44,7 +39,7 @@ Use this skill when:
    - `## 10. Compliance Verdict`
    - `## Appendix A: Test Inventory`
    - `## Appendix B: Toolchain Commands Reference`
-6) Run the `mcp__drmCopilotExtension__validate_orchestration_artifacts` MCP tool with `artifact_type: "policy-audit"` and `artifact_path: <path>` and fail closed on any non-zero result.
+6) Run the `mcp__drm-copilot__validate_orchestration_artifacts` MCP tool with `artifact_type: "policy-audit"` and `artifact_path: <path>` and fail closed on any non-zero result.
 
 ## Invalid Outputs
 

package/resources/codex-and-agents-customizations/.agents/skills/policy-compliance-order/SKILL.md

@@ -1,13 +1,3 @@
-# Converted skill
-
-Applied rewrites:
-- Rewrite merged standing-guidance source paths to the native AGENTS.md target.
-- Rewrite merged standing-guidance source paths to the native AGENTS.md target.
-- Rewrite merged standing-guidance source paths to the native AGENTS.md target.
-- Rewrite GitHub Copilot instruction-directory references to the native skill root.
-- Rewrite Claude rule paths to shared skill paths.
-- Rewrite Claude rules-directory references to the native skill root.
-
 ---
 name: policy-compliance-order
 description: 'Repository policy compliance order and hard constraints. Use when an agent must read mandatory policy files, apply repo-wide constraints, or restate policy precedence without duplicating blocks across agents.'

package/resources/codex-and-agents-customizations/.agents/skills/powershell/SKILL.md

@@ -1,9 +1,5 @@
-# Converted skill
-
-Applied rewrites:
-- None
-
 ---
+name: powershell
 paths:
   - "**/*.ps1"
   - "**/*.psm1"
@@ -17,10 +13,10 @@ This rule file summarizes the PowerShell-specific policies for this repository.
 
 ## Toolchain
 
-1. **Formatting — Invoke-Formatter**: Format all PowerShell files via PoshQC. MCP command: `mcp__drmCopilotExtension__run_poshqc_format`
-2. **Linting — PSScriptAnalyzer**: Run PoshQC analyzer with repo settings. MCP command: `mcp__drmCopilotExtension__run_poshqc_analyze`. Optional autofix: `mcp__drmCopilotExtension__run_poshqc_analyze_autofix`
+1. **Formatting — Invoke-Formatter**: Format all PowerShell files via PoshQC. MCP command: `mcp__drm-copilot__run_poshqc_format`
+2. **Linting — PSScriptAnalyzer**: Run PoshQC analyzer with repo settings. MCP command: `mcp__drm-copilot__run_poshqc_analyze`. Optional autofix: `mcp__drm-copilot__run_poshqc_analyze_autofix`
 3. **Type checking**: Not applicable for PowerShell; skip to testing.
-4. **Testing — Pester (v5.x)**: Run tests via MCP. MCP command: `mcp__drmCopilotExtension__run_poshqc_test`. Use repo config at `scripts/powershell/PoshQC/settings/pester.runsettings.psd1`.
+4. **Testing — Pester (v5.x)**: Run tests via MCP. MCP command: `mcp__drm-copilot__run_poshqc_test`. Use repo config at `scripts/powershell/PoshQC/settings/pester.runsettings.psd1`.
 
 Run the toolchain in order: format → analyze → test. Restart from step 1 if any step fails or changes files. Use the MCP server functions; do not substitute VS Code task wrappers.
 

package/resources/codex-and-agents-customizations/.agents/skills/powershell-change-budget-router/SKILL.md

@@ -1,8 +1,3 @@
-# Converted skill
-
-Applied rewrites:
-- None
-
 ---
 name: powershell-change-budget-router
 description: Budget-first routing contract for PowerShell work: estimate production-file scope, choose small vs large path, enforce direct-mode escalation to orchestrator, and use the VS Code extension command surface for promotion lifecycle steps when available.
@@ -29,7 +24,7 @@ Use this skill when:
 ## Orchestrated Small-Path Requirements
 
 When routed through `powershell-orchestrator`, small path still requires lifecycle scaffolding before implementation:
-- invoke promotion/folder lifecycle steps through `vscode/runCommand` + extension access per `feature-promotion-lifecycle` when available; use script/CLI fallback only when direct extension command execution is unavailable,
+- invoke promotion/folder lifecycle steps through the `drm-copilot` MCP tools required by `repo-automation-adapter`. If the MCP server or required tool is unavailable, stop before promotion,
 - promote potential item to GitHub issue with `--work-mode minor-audit`,
 - create active feature folder with `--work-mode minor-audit`,
 - delegate minimal-audit plan creation to `atomic_planner` with `DIRECTIVE: MINIMAL-AUDIT PLAN REQUIRED`,

package/resources/codex-and-agents-customizations/.agents/skills/powershell-orchestration-state-machine/SKILL.md

@@ -1,8 +1,3 @@
-# Converted skill
-
-Applied rewrites:
-- None
-
 ---
 name: powershell-orchestration-state-machine
 description: Checkpoint schema and resume protocol for long-running PowerShell orchestration workflows.

package/resources/codex-and-agents-customizations/.agents/skills/powershell-qa-gate/SKILL.md

@@ -1,9 +1,3 @@
-# Converted skill
-
-Applied rewrites:
-- Rewrite Claude skill paths to shared skill paths.
-- Rewrite Claude rule paths to shared skill paths.
-
 ---
 name: powershell-qa-gate
 description: Final QA gate for PowerShell changes. Executes the full PoshQC format -> analyze -> test toolchain (with coverage where enforced), compares against a captured baseline, enforces zero-regression deltas, and produces the required reporting block before the agent declares the change complete.
@@ -33,9 +27,9 @@ Before invoking this gate, the agent must have:
 
 Run the full toolchain in this exact order. If any step fails or modifies files, fix the issue and restart from step 1. Do not stop the loop until all steps complete without errors in a single pass.
 
-1. `mcp__drmCopilotExtension__run_poshqc_format`
-2. `mcp__drmCopilotExtension__run_poshqc_analyze`
-3. `mcp__drmCopilotExtension__run_poshqc_test`
+1. `mcp__drm-copilot__run_poshqc_format`
+2. `mcp__drm-copilot__run_poshqc_analyze`
+3. `mcp__drm-copilot__run_poshqc_test`
 4. Coverage check (when enforced by task/repo flow) — use the Pester coverage output from step 3 or the repo coverage task.
 
 If the environment prevents running any tool, stop and report the change as **unverified**. Do not declare completion.

package/resources/codex-and-agents-customizations/.agents/skills/pr-author/SKILL.md

@@ -1,14 +1,6 @@
-# Converted skill
-
-Applied rewrites:
-- None
-
 ---
 name: pr-author
 description: Write a GitHub-ready pull request body from the canonical PR-context bundle with strict verification and auto-close rules.
-allowed-tools:
-  - Read
-  - "Bash(git log *)"
 ---
 
 # PR Author Skill
@@ -52,4 +44,4 @@ Use these sections in this order:
 - Only mention an issue/PR number if it appears verbatim in the provided context.
 - Do not treat PR numbers as issues.
 - Auto-close bullets must use exactly `- Closes #NNN` format, sourced only from "Issues to autoclose" or "Author-asserted autoclose issues."
-- If GitHub validation is unavailable/unverified, do not emit `Closes`; use the fallback `None` bullet.
+- If GitHub validation is unavailable or unverified, do not emit `Closes`; use the `None` bullet.

package/resources/codex-and-agents-customizations/.agents/skills/pr-base-branch-merge-base/SKILL.md

@@ -1,11 +1,6 @@
-# Converted skill
-
-Applied rewrites:
-- None
-
 ---
 name: pr-base-branch-merge-base
-description: 'Resolve PRBaseBranch for mcp__drmCopilotExtension__collect_pr_context using merge-base ancestry. Use when orchestrators or review workflows need the correct comparison base branch and must select the branch with the most recent common ancestor commit with HEAD.'
+description: 'Resolve PRBaseBranch for mcp__drm-copilot__collect_pr_context using merge-base ancestry. Use when orchestrators or review workflows need the correct comparison base branch and must select the branch with the most recent common ancestor commit with HEAD.'
 ---
 
 # PR Base Branch (Merge-Base)
@@ -15,7 +10,7 @@ Deterministic branch-selection rules for PR context collection.
 ## When to Use This Skill
 
 Use this skill when:
-- running `mcp__drmCopilotExtension__collect_pr_context`,
+- running `mcp__drm-copilot__collect_pr_context`,
 - delegating post-implementation review that depends on `PRBaseBranch`,
 - constructing PR context artifacts where the base must not be hard-coded.
 
@@ -42,14 +37,14 @@ Definition of correct base:
 ## Guardrails
 
 - Do not default to `main` unless merge-base resolution fails for all candidates.
-- If all candidates fail, surface explicit error context and use repository default branch only as last-resort fallback.
+- If all candidates fail, surface explicit error context and stop unless repository metadata directly identifies the default branch.
 - Persist chosen `PRBaseBranch` in orchestration state and reuse it within the same run.
 
 ## Collector Invocation Rule
 
 When invoking PR context collection, pass the resolved base explicitly:
 
-- `mcp__drmCopilotExtension__collect_pr_context` with `base=<resolved-PRBaseBranch>`
+- `mcp__drm-copilot__collect_pr_context` with `base=<resolved-PRBaseBranch>`
 
 ## Evidence Recommendation
 

package/resources/codex-and-agents-customizations/.agents/skills/pr-context-artifacts/SKILL.md

@@ -1,8 +1,3 @@
-# Converted skill
-
-Applied rewrites:
-- None
-
 ---
 name: pr-context-artifacts
 description: 'PR context artifact locations and refresh rules. Use when generating, reading, or inlining pr_context summary/appendix artifacts.'

package/resources/codex-and-agents-customizations/.agents/skills/python/SKILL.md

@@ -1,9 +1,5 @@
-# Converted skill
-
-Applied rewrites:
-- None
-
 ---
+name: python
 paths:
   - "**/*.py"
 description: Python-specific toolchain and coding standards.

package/resources/codex-and-agents-customizations/.agents/skills/python-change-budget-router/SKILL.md

@@ -1,8 +1,3 @@
-# Converted skill
-
-Applied rewrites:
-- None
-
 ---
 name: python-change-budget-router
 description: Budget-first routing and batch-scope contract for Python work. Estimate production-file scope, choose small vs large path, enforce the 3 production + 3 test per-batch cap, and halt the agent for scope expansion approval when the estimate exceeds the budget.
@@ -64,7 +59,7 @@ If `python-typed-engineer` is invoked directly and estimated scope is `>3` produ
 
 When routed through the orchestrator, the small path still requires lifecycle scaffolding before implementation:
 
-- invoke promotion and folder lifecycle steps through `vscode/runCommand` and extension access per `feature-promotion-lifecycle` when available. Use script or CLI fallback only when direct extension command execution is unavailable.
+- invoke promotion and folder lifecycle steps through the `drm-copilot` MCP tools required by `repo-automation-adapter`. If the MCP server or required tool is unavailable, stop before promotion.
 - promote the potential item to a GitHub issue with `--work-mode minor-audit`,
 - create the active feature folder with `--work-mode minor-audit`,
 - delegate minimal-audit plan creation to `atomic_planner` with `DIRECTIVE: MINIMAL-AUDIT PLAN REQUIRED`,

package/resources/codex-and-agents-customizations/.agents/skills/python-qa-gate/SKILL.md

@@ -1,8 +1,3 @@
-# Converted skill
-
-Applied rewrites:
-- Rewrite Claude skill paths to shared skill paths.
-
 ---
 name: python-qa-gate
 description: Final QA gate for Python changes. Executes the full Black -> Ruff -> Pyright -> Pytest toolchain, compares against a captured baseline, enforces zero-regression deltas, and produces the required reporting block before the agent declares the change complete.

package/resources/codex-and-agents-customizations/.agents/skills/python-suppressions/SKILL.md

@@ -1,12 +1,8 @@
-# Converted skill
-
-Applied rewrites:
-- None
-
 ---
+name: python-suppressions
 paths:
   - "**/*.py"
-description: Pre-authorized Python Ruff and Pyright suppression patterns. Applies to Python files.
+description: Python suppression policy for linting and type-checking exceptions.
 ---
 
 # Python Suppression Policy

package/resources/codex-and-agents-customizations/.agents/skills/quality-tiers/SKILL.md

@@ -0,0 +1,57 @@
+---
+name: quality-tiers
+description: Module rigor tier system and uniform coverage thresholds.
+paths:
+  - "**"
+description: Module rigor tier system and uniform coverage thresholds.
+---
+
+# Converted rule
+
+Source: legacy Claude rule `quality-tiers`.
+
+# Module Rigor Tiers
+
+This rule defines the T1–T4 module rigor tier system used by all CI gates in this repository. The tier system source of truth is `docs/ci.research.md` section 1; the file `quality-tiers.yml` at the repository root maps every project to a tier. Adding a project without a tier classification fails CI.
+
+## Tiers
+
+- **T1 — Critical.** Behavior bugs cause silent data loss, model drift, or security holes. Examples (No-COM architecture): classifier engines (SpamBayes, Triage), ToDo ID allocator and hierarchy operations, Graph extended-properties adapter, auth/token handling, host-agnostic command bus.
+- **T2 — Core.** Bugs cause feature regressions but not data loss. Examples: `TaskMaster.Domain`, `TaskMaster.Application`, mail-item DTOs, settings store abstraction, schema definitions.
+- **T3 — Adapters & UI.** Glue around APIs the team does not own. Examples: Outlook task pane UI, Office.js wrappers, Microsoft Graph SDK wrappers, persistence I/O.
+- **T4 — Scaffolding.** Examples: DI wiring, bootstrap, build scripts, dev tooling, generated code, manifests.
+
+## Source of Truth
+
+- `quality-tiers.yml` at repo root maps every project to one tier.
+- The CI pipeline's `tier-classification` stage validates that every project entry has a tier and that no unclassified project exists. Adding a project without a tier classification fails CI.
+
+## Uniform-vs-Tier-Dependent Gate Matrix
+
+Per Authoritative Decision #2, line and branch coverage thresholds are uniform across all tiers. Other gates remain tier-dependent.
+
+### Uniform across all tiers (T1–T4)
+
+- Format check: 100% pass.
+- Lint errors: 0.
+- Type errors: 0.
+- Architecture violations: 0.
+- Line coverage: >= 85%.
+- Branch coverage: >= 75%.
+- No regression on changed lines.
+
+### Tier-dependent
+
+| Gate | T1 | T2 | T3 | T4 |
+|---|---|---|---|---|
+| Untyped escape hatches (`any`/`dynamic`) | 0 | 0 | <= 5 per file, justified | unlimited |
+| Property test density | >= 1 per pure function | >= 1 per pure function | none | none |
+| Mutation score | >= 75% | trend-only | none | none |
+| Contract breaking changes | major bump required | major bump required | n/a | n/a |
+| Determinism (retry rate) | < 0.5% | < 1% | < 2% | n/a |
+| Golden tests | required for classifier-output modules | optional | none | none |
+| Full E2E suite scope | all critical paths | core paths | adapter smoke | none |
+
+## Rationale (uniform coverage thresholds)
+
+High test coverage is a fundamental quality-control design choice that enables autonomous agentic development and trust in the work product. For that reason, line coverage >= 85% and branch coverage >= 75% apply uniformly across T1–T4; tier-specific lower coverage floors are not used in this repository.

package/resources/codex-and-agents-customizations/.agents/skills/remediation-handoff-atomic-planner/SKILL.md

@@ -1,8 +1,3 @@
-# Converted skill
-
-Applied rewrites:
-- None
-
 ---
 name: remediation-handoff-atomic-planner
 description: 'Reusable remediation trigger and atomic_planner handoff steps. Use when audits require remediation inputs and a delegated remediation plan.'