@danmoisan/drm-copilot-mcp 1.0.0 → 1.0.7

package/resources/claude-customizations/.claude/hooks/enforce-python-batch-budget.ps1

@@ -23,10 +23,10 @@
     CLAUDE_PYTHON_BUDGET_PROD or CLAUDE_PYTHON_BUDGET_TEST to a positive integer before
     the session starts, or by writing {"prodCap": N, "testCap": M} into the state file.
 
-    When the cap would be exceeded by a new file, the script emits a JSON response with
-    'decision': 'block' and exits 0. The session must explicitly reset the counter by
-    deleting the state file before starting a new batch. Files already counted are
-    always allowed through.
+    When the cap would be exceeded by a new file, the script emits a PreToolUse JSON
+    response with hookSpecificOutput.permissionDecision = 'deny' and exits 0. The session
+    must explicitly reset the counter by deleting the state file before starting a new
+    batch. Files already counted are always allowed through.
 
 .NOTES
     Compatible with PowerShell 7+.
@@ -87,8 +87,11 @@ function Get-PythonBatchBudgetBlockDecision {
     )
 
     $decision = [ordered]@{
-        decision = 'block'
-        reason   = $Reason
+        hookSpecificOutput = [ordered]@{
+            hookEventName            = 'PreToolUse'
+            permissionDecision       = 'deny'
+            permissionDecisionReason = $Reason
+        }
     }
     if ($State) {
         $decision.state = $State
@@ -113,7 +116,7 @@ function Invoke-PythonBatchBudgetDecision {
 
     $normalized = $FilePath -replace '\\', '/'
     if ($normalized -notmatch '\.py$') {
-        return [ordered]@{ decision = 'allow'; state = $State; shouldWriteState = $false }
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $false }
     }
 
     $isTestFile = ($normalized -match '(^|/)tests/.*\.py$') -or ($normalized -match '(^|/)test_[^/]+\.py$')
@@ -122,7 +125,7 @@ function Invoke-PythonBatchBudgetDecision {
     $kind = if ($isTestFile) { 'test' } else { 'production' }
 
     if ($targetList -contains $normalized) {
-        return [ordered]@{ decision = 'allow'; state = $State; shouldWriteState = $false }
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $false }
     }
 
     if ($targetList.Count -ge $cap) {
@@ -138,7 +141,7 @@ function Invoke-PythonBatchBudgetDecision {
         $State.prodFiles = @($State.prodFiles) + @($normalized)
     }
 
-    return [ordered]@{ decision = 'allow'; state = $State; shouldWriteState = $true }
+    return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $true }
 }
 
 function Invoke-PythonBatchBudgetHook {
@@ -160,7 +163,7 @@ function Invoke-PythonBatchBudgetHook {
     )
 
     if (-not $ToolInputRaw) {
-        return [ordered]@{ decision = 'allow' }
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
     }
 
     try {
@@ -171,12 +174,12 @@ function Invoke-PythonBatchBudgetHook {
 
     $filePath = $toolInput.file_path
     if (-not $filePath) {
-        return [ordered]@{ decision = 'allow' }
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
     }
 
     $normalized = $filePath -replace '\\', '/'
     if ($normalized -notmatch '\.py$') {
-        return [ordered]@{ decision = 'allow' }
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
     }
 
     $stateDir = Join-Path -Path $Root -ChildPath '.claude/state'
@@ -227,9 +230,9 @@ if ($env:CLAUDE_PYTHON_BUDGET_TEST -match '^\d+$') {
 }
 
 $decision = Invoke-PythonBatchBudgetHook -ToolInputRaw $env:CLAUDE_TOOL_INPUT -SessionId $sessionId -ProdCap $prodCap -TestCap $testCap
-if ($decision.decision -eq 'block') {
+if ($decision.hookSpecificOutput.permissionDecision -eq 'deny') {
     $decision.Remove('state')
-    $decision | ConvertTo-Json -Compress | Write-Output
+    $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
 }
 
 exit 0

package/resources/claude-customizations/.claude/hooks/validate-bash.ps1

@@ -5,11 +5,20 @@
 .DESCRIPTION
     This script is invoked by the Claude Code PreToolUse hook before any Bash
     command is executed. It reads the proposed command string from the
-    CLAUDE_TOOL_INPUT environment variable (JSON with a 'command' field) or
-    falls back to the first positional argument. If the command matches any
-    blocked pattern (destructive operations such as forced deletions, forced
-    pushes, or hard resets), the script exits with code 1 to prevent execution.
-    Safe commands exit with code 0.
+    CLAUDE_TOOL_INPUT (or CLAUDE_HOOK_INPUT) environment variable (JSON with a
+    'command' field) or falls back to the first positional argument. If the
+    command matches any blocked pattern (destructive operations such as forced
+    deletions, forced pushes, or hard resets), the script writes a PreToolUse
+    deny decision to stdout and exits with code 0. The deny decision uses the
+    Claude Code PreToolUse schema:
+
+        {"hookSpecificOutput":{"hookEventName":"PreToolUse",
+         "permissionDecision":"deny","permissionDecisionReason":"<reason>"}}
+
+    Safe commands emit no decision and exit with code 0 (an absent decision is a
+    valid allow at PreToolUse). The legacy top-level decision/block form and the
+    deny-path 'exit 1' are intentionally NOT used: PreToolUse fail-opens on both,
+    so they would silently fail to block.
 
 .NOTES
     Compatible with PowerShell 7+.
@@ -21,49 +30,150 @@ param(
     [string]$CommandInput
 )
 
-# Blocked patterns that represent destructive or irreversible operations.
-$blockedPatterns = @(
-    'rm -rf',
-    'git push --force',
-    'git push origin --force',
-    'Remove-Item -Recurse -Force',
-    'git reset --hard',
-    'git push -f'
-)
+function Get-BlockedBashPattern {
+    [CmdletBinding()]
+    [OutputType([string[]])]
+    param()
+
+    return [string[]]@(
+        'rm -rf',
+        'git push --force',
+        'git push origin --force',
+        'Remove-Item -Recurse -Force',
+        'git reset --hard',
+        'git push -f'
+    )
+}
+
+function Get-BlockedPatternMatch {
+    [CmdletBinding()]
+    [OutputType([string])]
+    param(
+        [Parameter(Mandatory = $false)]
+        [AllowEmptyString()]
+        [AllowNull()]
+        [string] $Command
+    )
 
-# Resolve the command string from CLAUDE_TOOL_INPUT JSON or positional argument.
-$commandToCheck = ''
+    if (-not $Command) {
+        return $null
+    }
 
-if ($env:CLAUDE_TOOL_INPUT) {
-    try {
-        $parsed = $env:CLAUDE_TOOL_INPUT | ConvertFrom-Json
-        if ($parsed.command) {
-            $commandToCheck = $parsed.command
+    foreach ($pattern in (Get-BlockedBashPattern)) {
+        if ($Command.Contains($pattern)) {
+            return $pattern
         }
     }
-    catch {
-        # If JSON parsing fails, treat the raw environment variable as the command.
-        $commandToCheck = $env:CLAUDE_TOOL_INPUT
+
+    return $null
+}
+
+function Get-BashBlockReason {
+    [CmdletBinding()]
+    [OutputType([string])]
+    param(
+        [Parameter(Mandatory = $false)]
+        [AllowEmptyString()]
+        [AllowNull()]
+        [string] $Command
+    )
+
+    $pattern = Get-BlockedPatternMatch -Command $Command
+    if (-not $pattern) {
+        return $null
     }
+
+    return "Blocked dangerous command pattern detected: '$pattern'"
 }
 
-# Fall back to positional argument when the environment variable is absent or empty.
-if (-not $commandToCheck -and $CommandInput) {
-    $commandToCheck = $CommandInput
+function Get-BashDenyDecision {
+    [CmdletBinding()]
+    [OutputType([System.Collections.Specialized.OrderedDictionary])]
+    param(
+        [Parameter(Mandatory)]
+        [string] $Reason
+    )
+
+    [ordered]@{
+        hookSpecificOutput = [ordered]@{
+            hookEventName            = 'PreToolUse'
+            permissionDecision       = 'deny'
+            permissionDecisionReason = $Reason
+        }
+    }
 }
 
-# When no command is provided, allow execution (nothing to validate).
-if (-not $commandToCheck) {
-    exit 0
+function Get-BashCommandToCheck {
+    [CmdletBinding()]
+    [OutputType([string])]
+    param(
+        [Parameter(Mandatory = $false)]
+        [AllowEmptyString()]
+        [AllowNull()]
+        [string] $ToolInputRaw,
+
+        [Parameter(Mandatory = $false)]
+        [AllowEmptyString()]
+        [AllowNull()]
+        [string] $PositionalInput
+    )
+
+    if ($ToolInputRaw) {
+        try {
+            $parsed = $ToolInputRaw | ConvertFrom-Json -ErrorAction Stop
+            if ($parsed.command) {
+                return [string]$parsed.command
+            }
+        } catch {
+            # If JSON parsing fails, treat the raw input as the command.
+            return $ToolInputRaw
+        }
+    }
+
+    if ($PositionalInput) {
+        return $PositionalInput
+    }
+
+    return ''
 }
 
-# Check the command against each blocked pattern.
-foreach ($pattern in $blockedPatterns) {
-    if ($commandToCheck.Contains($pattern)) {
-        Write-Error "Blocked dangerous command pattern detected: '$pattern'"
-        exit 1
+function Invoke-ValidateBashDecision {
+    [CmdletBinding()]
+    [OutputType([System.Collections.Specialized.OrderedDictionary])]
+    param(
+        [Parameter(Mandatory = $false)]
+        [AllowEmptyString()]
+        [AllowNull()]
+        [string] $ToolInputRaw,
+
+        [Parameter(Mandatory = $false)]
+        [AllowEmptyString()]
+        [AllowNull()]
+        [string] $PositionalInput
+    )
+
+    $commandToCheck = Get-BashCommandToCheck -ToolInputRaw $ToolInputRaw -PositionalInput $PositionalInput
+
+    $reason = Get-BashBlockReason -Command $commandToCheck
+    if ($reason) {
+        return Get-BashDenyDecision -Reason $reason
     }
+
+    return $null
+}
+
+if ($MyInvocation.InvocationName -eq '.') {
+    return
+}
+
+$toolInputRaw = $env:CLAUDE_TOOL_INPUT
+if (-not $toolInputRaw) {
+    $toolInputRaw = $env:CLAUDE_HOOK_INPUT
+}
+
+$decision = Invoke-ValidateBashDecision -ToolInputRaw $toolInputRaw -PositionalInput $CommandInput
+if ($null -ne $decision -and $decision.hookSpecificOutput.permissionDecision -eq 'deny') {
+    $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
 }
 
-# Command passed all checks.
 exit 0

package/resources/claude-customizations/.claude/hooks/validate-orchestrator-output.ps1

@@ -27,7 +27,13 @@
 #>
 
 [CmdletBinding()]
-param()
+param(
+    [Parameter(Mandatory = $false)]
+    [string] $CheckpointPath = 'artifacts/orchestration/orchestrator-state.json',
+
+    [Parameter(Mandatory = $false)]
+    [string] $ArtifactType = 'orchestrator-state'
+)
 
 Set-StrictMode -Version Latest
 $ErrorActionPreference = 'Stop'
@@ -150,9 +156,11 @@ function Invoke-RoutingContractValidation {
         Invokes the validator through an injectable subprocess scriptblock seam.
         The default Invoker runs the authoritative Python CLI:
           python -m scripts.dev_tools.validate_orchestration_artifacts \
-              orchestrator-state <CheckpointPath> --require-complete
+              <ArtifactType> <CheckpointPath> --require-complete
         Tests inject a mock scriptblock so no Python process runs. The function
         does not reimplement routing logic; it delegates to the Python validator.
+        ArtifactType defaults to 'orchestrator-state' so the default invocation
+        string is unchanged for every existing caller of this hook.
 
         Returns a hashtable with keys:
           - HasErrors:  $true when the validator reported a non-zero exit or
@@ -165,11 +173,14 @@ function Invoke-RoutingContractValidation {
         [Parameter(Mandatory = $true)]
         [string] $CheckpointPath,
 
+        [Parameter(Mandatory = $false)]
+        [string] $ArtifactType = 'orchestrator-state',
+
         [Parameter(Mandatory = $false)]
         [scriptblock] $Invoker = {
-            param($Path)
+            param($Path, $Type)
             $output = & python -m scripts.dev_tools.validate_orchestration_artifacts `
-                orchestrator-state $Path --require-complete 2>&1
+                $Type $Path --require-complete 2>&1
             [pscustomobject]@{
                 ExitCode = $LASTEXITCODE
                 Output   = ($output | Out-String)
@@ -177,7 +188,7 @@ function Invoke-RoutingContractValidation {
         }
     )
 
-    $result = & $Invoker $CheckpointPath
+    $result = & $Invoker $CheckpointPath $ArtifactType
     $exitCode = 0
     if ($null -ne $result -and ($result.PSObject.Properties.Name -contains 'ExitCode')) {
         $exitCode = [int]$result.ExitCode
@@ -207,6 +218,7 @@ function Invoke-OrchestratorOutputValidation {
     param(
         [string] $RawPayload,
         [string] $CheckpointPath = 'artifacts/orchestration/orchestrator-state.json',
+        [string] $ArtifactType = 'orchestrator-state',
 
         [Parameter(Mandatory = $false)]
         [scriptblock] $RoutingInvoker
@@ -275,7 +287,7 @@ function Invoke-OrchestratorOutputValidation {
     # Delegate to the authoritative Python routing-contract validator. The
     # optional RoutingInvoker seam lets tests inject a mock; the default seam
     # produces the real subprocess call.
-    $routingArgs = @{ CheckpointPath = $CheckpointPath }
+    $routingArgs = @{ CheckpointPath = $CheckpointPath; ArtifactType = $ArtifactType }
     if ($PSBoundParameters.ContainsKey('RoutingInvoker') -and $null -ne $RoutingInvoker) {
         $routingArgs['Invoker'] = $RoutingInvoker
     }
@@ -292,7 +304,7 @@ if ($MyInvocation.InvocationName -eq '.') {
     return
 }
 
-$result = Invoke-OrchestratorOutputValidation -RawPayload $env:CLAUDE_HOOK_INPUT
+$result = Invoke-OrchestratorOutputValidation -RawPayload $env:CLAUDE_HOOK_INPUT -CheckpointPath $CheckpointPath -ArtifactType $ArtifactType
 if (-not $result.Ok) {
     Write-Error $result.Message
     exit 1

package/resources/claude-customizations/.claude/rules/orchestrator-state.md

@@ -32,8 +32,44 @@ These invariants apply only when the checkpoint contains a top-level `human_inte
 
 3. **Exception requires `runbook_path`.** A requirement whose `response == "exception"` must carry a non-empty `runbook_path` string. A missing, non-string, or empty/whitespace-only `runbook_path` on an `exception` requirement is a malformed requirement.
 
+## Complexity-Assessment Scope and Backward Compatibility
+
+These invariants apply only when the checkpoint contains a top-level `complexity_assessments` array. A checkpoint with no `complexity_assessments` key (the existing checkpoint shape) is unaffected: it validates exactly as before and produces no new errors. The invariants are additive and support the two-axis model-selection mechanism documented in `.claude/skills/orchestrate/SKILL.md` (`## Model Selection`). Enforcement is the Python validator, not an imported schema.
+
+## Invariants (complexity_assessments array)
+
+Each entry records one assessed phase with the shape `{ phase, band, floor, signals_present[], rationale, assessed_at }`.
+
+1. **Band enum membership.** Each entry's `band` must be one of `C1`, `C2`, `C3`, `C4`. A missing or out-of-enum `band` is a malformed entry.
+
+2. **Band at or above floor.** Each entry must satisfy `band >= floor` using the band ordering `C1 < C2 < C3 < C4`. The floor constrains the lower bound only; a `band` below its `floor` is a malformed entry.
+
+3. **Floor equals the computed floor.** Each entry's `floor` must equal `compute_complexity_floor(signals_present)` (the reference implementation in `scripts/dev_tools/compute_complexity_floor.py`). A `floor` that does not equal the recomputed value is a malformed entry. C4 is never floor-forced; the floor never exceeds `C3`.
+
+4. **Non-empty `rationale`.** Each entry's `rationale` must be a non-empty string. A missing, non-string, or empty/whitespace-only `rationale` is a malformed entry.
+
+The validator never judges the merit of the assessed band; it checks shape, floor equality, and lower-bound ordering only.
+
+## Model-Routing-Receipt Scope and Backward Compatibility
+
+These invariants apply only when the checkpoint contains a top-level `model_routing_receipts` array. A checkpoint with no `model_routing_receipts` key (the existing checkpoint shape) is unaffected: it validates exactly as before and produces no new errors. The invariants are additive. Enforcement is the Python validator, not an imported schema.
+
+## Invariants (model_routing_receipts array)
+
+Each entry records one delegation with the shape `{ agent, phase, complexity_band, fable_policy, table_model, clamped_from | null, model }`.
+
+1. **Model equals the resolved model.** Each entry's `model` must equal `resolve_delegation_model(agent, complexity_band, fable_policy)["model"]` (the reference implementation in `scripts/dev_tools/resolve_delegation_model.py`). A `complexity_band` outside `C1`..`C4` is a malformed entry. A `model` that does not equal the resolved model is a malformed entry.
+
+2. **Disabled-mode clamp.** Under `fable_policy == "disabled"` no entry's `model` may equal `fable`; any entry whose `table_model == "fable"` must record `clamped_from == "fable"` and `model == "opus"`. A disabled-mode entry that resolves to `fable`, or a disabled-mode `fable` table cell that does not record the clamp, is a malformed entry.
+
+## Model-Budget Contract
+
+The session `model_budget.fable_policy` switch is a three-way enum `disabled | available | preferred` defined in `config/orchestration-routing.json`, defaulting to `disabled`. It governs only the delegation model tier and is not a route input. `disabled` removes `fable` from the consideration set and clamps `fable` cells to `opus`; `available` applies the base `complexity_to_model` table as-is; `preferred` applies the `preferred_overlay` (which redirects only the C3 cell to `fable` for the overlay agents `atomic-planner`, `prd-feature`, `feature-review`, `task-researcher`) and leaves `atomic-executor` and `pr-author` C3 cells at `opus`. `route` is never an input to model selection.
+
 ## Enforcement
 
 - `scripts/dev_tools/validate_orchestrator_state.py` appends one error per violated invariant when a `remediation_loop` is present, using the existing validator message style (literal, checkpoint-context prefixed). The validator returns a list of error strings and does not mutate its input.
 - `scripts/dev_tools/validate_orchestrator_state.py` likewise appends one error per violated `human_interaction` invariant when a `human_interaction` key is present, using the same literal, checkpoint-context-prefixed message style. The check does not import or read any schema file.
+- `scripts/dev_tools/validate_orchestrator_state.py` appends one error per violated `complexity_assessments` invariant when a `complexity_assessments` key is present, delegating to `scripts/dev_tools/_orchestrator_state_complexity.py`, which recomputes the floor via `compute_complexity_floor`. The check does not import or read any schema file.
+- `scripts/dev_tools/validate_orchestrator_state.py` appends one error per violated `model_routing_receipts` invariant when a `model_routing_receipts` key is present, delegating to `scripts/dev_tools/_orchestrator_state_model_routing.py`, which recomputes the resolved model via `resolve_delegation_model`. The check does not import or read any schema file.
 - The validator is consumed by the MCP tool `validate_orchestration_artifacts`; backward compatibility for existing step-based checkpoints is preserved.

package/resources/claude-customizations/.claude/settings.json

@@ -31,10 +31,13 @@
       "Agent(epic-review)",
       "Agent(status-updater)",
       "Agent(pr-author)",
+      "Agent(commit-message)",
+      "Agent(human-exception-runbook)",
       "Agent(python-typed-engineer)",
       "Agent(powershell-typed-engineer)",
       "Agent(csharp-typed-engineer)",
       "Agent(typescript-engineer)",
+      "Agent(epic-orchestrator)",
       "Skill(orchestrate *)",
       "Skill(commit-message *)",
       "Skill(pr-author *)",
@@ -87,6 +90,14 @@
           {
             "type": "command",
             "command": "pwsh -NoProfile -File .claude/hooks/enforce-orchestration-preimplementation-gate.ps1"
+          },
+          {
+            "type": "command",
+            "command": "pwsh -NoProfile -File .claude/hooks/enforce-epic-merge-gate.ps1"
+          },
+          {
+            "type": "command",
+            "command": "pwsh -NoProfile -File .claude/hooks/enforce-epic-worktree-removal-gate.ps1"
           }
         ]
       },
@@ -141,13 +152,17 @@
           {
             "type": "command",
             "command": "pwsh -NoProfile -File .claude/hooks/enforce-orchestration-preimplementation-gate.ps1"
+          },
+          {
+            "type": "command",
+            "command": "pwsh -NoProfile -File .claude/hooks/enforce-epic-wave-barrier.ps1"
           }
         ]
       }
     ],
     "SubagentStop": [
       {
-        "matcher": "atomic-planner|atomic-executor|feature-review|task-researcher|prd-feature|staged-review|epic-review|status-updater|python-typed-engineer|powershell-typed-engineer|csharp-typed-engineer|typescript-engineer",
+        "matcher": "atomic-planner|atomic-executor|feature-review|task-researcher|prd-feature|staged-review|epic-review|status-updater|python-typed-engineer|powershell-typed-engineer|csharp-typed-engineer|typescript-engineer|orchestrator|epic-orchestrator",
         "hooks": [
           {
             "type": "command",
@@ -181,6 +196,24 @@
             "command": "pwsh -NoProfile -File .claude/hooks/validate-pr-author-output.ps1"
           }
         ]
+      },
+      {
+        "matcher": "orchestrator",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "pwsh -NoProfile -File .claude/hooks/validate-orchestrator-output.ps1"
+          }
+        ]
+      },
+      {
+        "matcher": "epic-orchestrator",
+        "hooks": [
+          {
+            "type": "command",
+            "command": "pwsh -NoProfile -File .claude/hooks/validate-orchestrator-output.ps1 -CheckpointPath artifacts/orchestration/epic-orchestrator-state.json -ArtifactType epic-orchestrator-state"
+          }
+        ]
       }
     ]
   },