@danmoisan/drm-copilot-mcp 1.0.13 → 1.0.15

package/resources/codex-and-agents-customizations/pack-manifests/python.json

@@ -10,6 +10,11 @@
     ".codex/agents/python-typed-engineer.toml",
     ".codex/agents/python-orchestrator.toml",
     ".codex/agents/python-atomic-executor.toml",
-    ".codex/agents/python-atomic-planning.toml"
+    ".codex/agents/python-atomic-planning.toml",
+    ".codex/agents/python-typed-engineer-c1.toml",
+    ".codex/agents/python-typed-engineer-c2.toml",
+    ".codex/agents/python-typed-engineer-c3.toml",
+    ".codex/agents/python-typed-engineer-c3-elevated.toml",
+    ".codex/agents/python-typed-engineer-c4.toml"
   ]
 }

package/resources/codex-and-agents-customizations/pack-manifests/typescript.json

@@ -4,6 +4,11 @@
   "paths": [
     ".agents/skills/typescript/SKILL.md",
     ".agents/skills/typescript-suppressions/SKILL.md",
-    ".codex/agents/typescript-engineer.toml"
+    ".codex/agents/typescript-engineer.toml",
+    ".codex/agents/typescript-engineer-c1.toml",
+    ".codex/agents/typescript-engineer-c2.toml",
+    ".codex/agents/typescript-engineer-c3.toml",
+    ".codex/agents/typescript-engineer-c3-elevated.toml",
+    ".codex/agents/typescript-engineer-c4.toml"
   ]
 }

package/resources/config/orchestration-routing.json

@@ -4,6 +4,12 @@
   "routes": {
     "small": {
       "description": "Minor-audit path for work inside the applicable language budget.",
+      "codex_topology_requirement": {
+        "receipt_key": "codex_topology_receipts",
+        "required_execution_context": "standalone",
+        "required_route": "small",
+        "delegation_agent_source": "resolved_language_typed_engineer"
+      },
       "required_agents": [
         "atomic-planner",
         "atomic-executor",
@@ -72,6 +78,27 @@
         "validate_orchestration_artifacts"
       ]
     },
+    "preparation": {
+      "description": "Epic preparation path driven by epic-planner: promotion, research, feature documents, atomic planning, and preflight clearance only. Atomic execution, PR authoring, and CI monitoring are out of scope and deferred to the epic execution phase, so this route requires no CI gate at completion.",
+      "requires_ci_gate": false,
+      "required_agents": [
+        "task-researcher",
+        "prd-feature",
+        "atomic-planner",
+        "atomic-executor"
+      ],
+      "required_skills": [
+        "orchestrate",
+        "feature-promotion-lifecycle",
+        "atomic-plan-contract"
+      ],
+      "required_mcp_tools": [
+        "new_potential_entry",
+        "potential_to_issue",
+        "new_active_feature_folder",
+        "validate_orchestration_artifacts"
+      ]
+    },
     "epic": {
       "description": "Epic path for scheduling a dependency graph of child features across parallel worktrees with fan-in via a shared integration branch.",
       "requires_pr_gate": true,
@@ -164,5 +191,145 @@
   "model_budget": {
     "description": "Session-level model budget. fable_policy is a three-way switch controlling whether the fable tier is disabled (removed and clamped to opus), available (used as-is), or preferred (applies the preferred_overlay).",
     "fable_policy": "preferred"
+  },
+  "codex_topology_policy": {
+    "description": "Codex-native production-file-count routing. This axis selects the initial implementation topology independently from C1-C4 model selection.",
+    "execution_contexts": [
+      "standalone",
+      "epic_preparation_child",
+      "epic_execution_child"
+    ],
+    "language_budgets": {
+      "python": {
+        "direct_mode_enabled": true,
+        "max_production_files": 3,
+        "max_test_files": 3,
+        "logical_agent": "python-typed-engineer"
+      },
+      "powershell": {
+        "direct_mode_enabled": true,
+        "max_production_files": 2,
+        "max_test_files": 3,
+        "logical_agent": "powershell-typed-engineer"
+      },
+      "csharp": {
+        "direct_mode_enabled": true,
+        "max_production_files": 3,
+        "max_test_files": 3,
+        "logical_agent": "csharp-typed-engineer"
+      },
+      "typescript": {
+        "direct_mode_enabled": false,
+        "max_production_files": 0,
+        "max_test_files": 0,
+        "logical_agent": "typescript-engineer"
+      }
+    },
+    "orchestrator_logical_agent": "orchestrator",
+    "epic_child_contexts": [
+      "epic_preparation_child",
+      "epic_execution_child"
+    ],
+      "forced_root_personas": [
+        "epic-planner",
+        "epic-orchestrator"
+      ],
+      "parallelism": {
+        "default_max_parallel_features": 4,
+        "hard_max_parallel_features": 8
+      },
+      "escalation_precedence": [
+      "epic_child_context",
+      "invalid_estimate",
+      "cross_language",
+      "unsupported_language",
+      "cross_cutting",
+        "direct_mode_disabled",
+        "production_budget_exceeded"
+    ],
+    "receipt_key": "codex_topology_receipts"
+  },
+  "codex_model_policy": {
+    "description": "Codex-native deployment profiles. Complexity selects model and reasoning independently from the file-count route; exact model slugs are mandatory and unavailable profiles do not fall back silently.",
+    "profile_order": [
+      "c1",
+      "c2",
+      "c3",
+      "c3-elevated",
+      "c4"
+    ],
+    "execution_contexts": [
+      "standalone",
+      "epic_preparation_child",
+      "epic_execution_child"
+    ],
+    "logical_agent_aliases": {
+      "feature-review": "feature-reviewer"
+    },
+    "complexity_to_profile": {
+      "C1": {
+        "suffix": "c1",
+        "model": "gpt-5.6-luna",
+        "model_reasoning_effort": "low"
+      },
+      "C2": {
+        "suffix": "c2",
+        "model": "gpt-5.6-terra",
+        "model_reasoning_effort": "medium"
+      },
+      "C3": {
+        "suffix": "c3",
+        "model": "gpt-5.6-terra",
+        "model_reasoning_effort": "high"
+      },
+      "C4": {
+        "suffix": "c4",
+        "model": "gpt-5.6-sol",
+        "model_reasoning_effort": "max"
+      }
+    },
+      "c3_elevated_profile": {
+      "suffix": "c3-elevated",
+      "model": "gpt-5.6-sol",
+      "model_reasoning_effort": "high",
+      "activation": {
+        "operator": "any",
+        "execution_contexts": [
+          "epic_execution_child",
+          "epic_preparation_child"
+        ],
+        "orchestration_complexity_ceiling": "C4"
+      }
+      },
+      "ceiling_transition_policy": {
+        "monotonic": true,
+        "receipt_key": "ceiling_transition",
+        "affected_delegation_ids_required_on_increase": true
+      },
+      "forced_personas": {
+      "epic-planner": {
+        "suffix": "",
+        "model": "gpt-5.6-sol",
+        "model_reasoning_effort": "ultra"
+      },
+      "epic-orchestrator": {
+        "suffix": "",
+        "model": "gpt-5.6-sol",
+        "model_reasoning_effort": "ultra"
+      }
+    },
+    "generated_agent_families": [
+      "orchestrator",
+      "atomic-planner",
+      "atomic-executor",
+      "feature-reviewer",
+      "task-researcher",
+      "prd-feature",
+      "pr-author",
+      "python-typed-engineer",
+      "powershell-typed-engineer",
+      "csharp-typed-engineer",
+      "typescript-engineer"
+    ]
   }
 }

package/resources/powershell/PoshQC/PoshQC.Analyzer.psm1

@@ -27,7 +27,7 @@ function Invoke-PoshQCFormat {
         [scriptblock] $TestPathExists = { param([string] $Path) Test-Path $Path },
         [scriptblock] $GetFileList = { param([string] $RootPath, [string[]] $ScanFoldersPath, [string[]] $Excluded) Get-PoshQCFileList -Root $RootPath -ScanFolders $ScanFoldersPath -ExcludeDirs $Excluded },
         [scriptblock] $ReadFile = { param([string] $Path) Get-Content -Raw -Path $Path },
-        [scriptblock] $WriteFile = { param([string] $Path, [string] $Content) Set-Content -Path $Path -Value $Content -Encoding UTF8 },
+        [scriptblock] $WriteFile = { param([string] $Path, [string] $Content) Set-Content -Path $Path -Value $Content -Encoding UTF8 -NoNewline },
         [scriptblock] $FormatContent = { param([string] $Content, [string] $Settings) Invoke-Formatter -ScriptDefinition $Content -Settings $Settings },
         [scriptblock] $Logger = {
             param([string] $Message)

package/resources/powershell/PoshQC/PoshQC.ScanConfig.psm1

@@ -0,0 +1,125 @@
+<#
+.SYNOPSIS
+Resolves the persisted PoshQC test scan-folder configuration.
+.DESCRIPTION
+Reads and validates the repo-local scan configuration file (default
+'config/poshqc-scan.json') and returns the validated, workspace-relative
+folder list from 'test.scanFolders'. Returns an empty array when the file is
+absent or when 'test.scanFolders' is absent or empty, so that an absent
+configuration preserves the settings 'Run.Path' defaults downstream.
+
+Validation is fail-fast and names the configuration file: malformed JSON, a
+'version' value other than 1, blank entries, absolute-path entries, and
+entries containing '..' segments are errors. Config-sourced folders that do
+not exist are skipped with a logged warning; if a non-empty configuration
+lists only folders that do not exist, the function fails fast with a clear
+error. This function never weakens Resolve-PoshQCScanFolder; the throw-on-missing
+behavior for explicitly supplied folders is unaffected because it is not used
+on this path.
+.PARAMETER Root
+Workspace root the relative configuration path and folder entries resolve against.
+.PARAMETER ConfigRelativePath
+Workspace-relative path to the configuration file. Defaults to
+'config/poshqc-scan.json'.
+.PARAMETER TestPathExists
+Injectable existence-check seam (config file and folder existence). Defaults to Test-Path.
+.PARAMETER ReadContent
+Injectable read seam returning the raw file text. Defaults to Get-Content -Raw.
+.PARAMETER Logger
+Injectable warning seam for skip-with-warning messages. Defaults to Write-Warning.
+#>
+function Get-PoshQCScanConfigFolder {
+    [CmdletBinding()]
+    [OutputType([System.Object[]])]
+    param(
+        [Parameter(Mandatory = $true)]
+        [string] $Root,
+        [string] $ConfigRelativePath = 'config/poshqc-scan.json',
+        [scriptblock] $TestPathExists = { param([string] $Path) Test-Path $Path },
+        [scriptblock] $ReadContent = { param([string] $Path) Get-Content -Path $Path -Raw },
+        [scriptblock] $Logger = { param([string] $Message) Write-Warning $Message }
+    )
+
+    $ErrorActionPreference = 'Stop'
+
+    # Resolve the configuration path against the workspace root unless it is already absolute.
+    $configPath = if ([IO.Path]::IsPathRooted($ConfigRelativePath)) {
+        $ConfigRelativePath
+    } else {
+        Join-Path -Path $Root -ChildPath $ConfigRelativePath
+    }
+
+    # Absent configuration file means defaults apply (empty result, no error).
+    if (-not (& $TestPathExists $configPath)) {
+        return @()
+    }
+
+    $raw = & $ReadContent $configPath
+    # Absent or whitespace-only content is treated the same as an absent file.
+    if ([string]::IsNullOrWhiteSpace([string] $raw)) {
+        return @()
+    }
+
+    try {
+        $parsed = $raw | ConvertFrom-Json -ErrorAction Stop
+    } catch {
+        throw "Invalid JSON in scan configuration '$ConfigRelativePath': $($_.Exception.Message)"
+    }
+
+    # StrictMode-safe property access: read properties through PSObject so a
+    # missing property yields $null rather than a strict-mode failure.
+    $versionProperty = $parsed.PSObject.Properties['version']
+    if (-not $versionProperty -or $versionProperty.Value -ne 1) {
+        throw "Scan configuration '$ConfigRelativePath' must declare 'version' equal to 1."
+    }
+
+    # Absent 'test' section, or absent/empty 'test.scanFolders', means defaults apply.
+    $testProperty = $parsed.PSObject.Properties['test']
+    if (-not $testProperty -or $null -eq $testProperty.Value) {
+        return @()
+    }
+    $scanFoldersProperty = $testProperty.Value.PSObject.Properties['scanFolders']
+    if (-not $scanFoldersProperty -or $null -eq $scanFoldersProperty.Value) {
+        return @()
+    }
+    $scanFolders = @($scanFoldersProperty.Value)
+    if ($scanFolders.Count -eq 0) {
+        return @()
+    }
+
+    # Validate every entry; each failure is fail-fast and names the configuration file.
+    $validated = foreach ($folder in $scanFolders) {
+        $folderText = [string] $folder
+        if ([string]::IsNullOrWhiteSpace($folderText)) {
+            throw "Scan configuration '$ConfigRelativePath' contains a blank 'test.scanFolders' entry."
+        }
+        if ([IO.Path]::IsPathRooted($folderText)) {
+            throw "Scan configuration '$ConfigRelativePath' entry '$folderText' must be a workspace-relative path, not an absolute path."
+        }
+        # Reject parent-directory traversal in any path segment.
+        $segments = $folderText -split '[\\/]+'
+        if ($segments -contains '..') {
+            throw "Scan configuration '$ConfigRelativePath' entry '$folderText' must not contain '..' segments."
+        }
+        $folderText
+    }
+    $validated = @($validated)
+
+    # Filter out config-sourced folders that do not exist, skipping each with a warning.
+    $existing = foreach ($folder in $validated) {
+        $candidate = Join-Path -Path $Root -ChildPath $folder
+        if (& $TestPathExists $candidate) {
+            $folder
+        } else {
+            & $Logger "Scan configuration '$ConfigRelativePath' folder '$folder' does not exist under root '$Root'; skipping."
+        }
+    }
+    $existing = @($existing)
+
+    # A non-empty configuration whose folders were all filtered out is a hard error.
+    if ($existing.Count -eq 0) {
+        throw "Scan configuration '$ConfigRelativePath' lists only folders that do not exist under root '$Root'."
+    }
+
+    return @($existing)
+}

package/resources/powershell/PoshQC/PoshQC.Testing.psm1

@@ -206,6 +206,10 @@ function Invoke-PoshQCTest {
             param([string] $RootPath, [string[]] $Folders)
             Resolve-PoshQCScanFolder -Root $RootPath -ScanFolders $Folders
         },
+        [scriptblock] $ResolveScanConfig = {
+            param([string] $RootPath)
+            Get-PoshQCScanConfigFolder -Root $RootPath
+        },
         [scriptblock] $ExpandCoveragePaths = {
             param($Config, [string] $RootPath)
             if (-not $Config.CodeCoverage) { return $Config }
@@ -276,8 +280,16 @@ function Invoke-PoshQCTest {
     $config = & $ExpandRunPaths $config $Root $ExcludeDirs
     $config = & $EnsureResultPath $config $Root
     $config = & $ExpandCoveragePaths $config $Root
-    if ($ScanFolders -and $ScanFolders.Count -gt 0) {
-        $resolvedScanFolders = @(& $ResolveScanFolders $Root $ScanFolders)
+    # Scan-folder precedence: explicit -ScanFolders always wins; otherwise the
+    # persisted scan configuration is consulted; an absent or empty configuration
+    # leaves the settings Run.Path defaults in place.
+    $effectiveScanFolders = if ($ScanFolders -and $ScanFolders.Count -gt 0) {
+        @($ScanFolders)
+    } else {
+        @(& $ResolveScanConfig $Root)
+    }
+    if ($effectiveScanFolders -and $effectiveScanFolders.Count -gt 0) {
+        $resolvedScanFolders = @(& $ResolveScanFolders $Root $effectiveScanFolders)
         if ($resolvedScanFolders.Count -gt 0) {
             $config.Run.Path = $resolvedScanFolders
         }

package/resources/powershell/PoshQC/PoshQC.psd1

@@ -8,10 +8,6 @@
     Description          = 'Reusable PowerShell QC helpers (format, analyze, test) using Invoke-Formatter, PSScriptAnalyzer, and Pester.'
     PowerShellVersion    = '5.1'
     CompatiblePSEditions = @('Desktop', 'Core')
-    RequiredModules      = @(
-        @{ ModuleName = 'PSScriptAnalyzer'; ModuleVersion = '1.22.0' },
-        @{ ModuleName = 'Pester'; ModuleVersion = '5.6.1' }
-    )
     FunctionsToExport    = @(
         'Convert-PoshQCCoverageToRelative',
         'Get-PoshQCFileList',

package/resources/powershell/PoshQC/PoshQC.psm1

@@ -80,11 +80,30 @@ function Install-PoshQCTool {
 }
 
 # PowerShell 7.6+ treats dot-sourced .psm1 files as isolated modules, so
-# functions defined in them do not enter the parent module scope.  Loading the
-# file content as a scriptblock bypasses that behaviour.
-. ([scriptblock]::Create((Get-Content (Join-Path $script:ModuleRoot 'PoshQC.FileDiscovery.psm1') -Raw)))
-. ([scriptblock]::Create((Get-Content (Join-Path $script:ModuleRoot 'PoshQC.Analyzer.psm1') -Raw)))
-. ([scriptblock]::Create((Get-Content (Join-Path $script:ModuleRoot 'PoshQC.Testing.psm1') -Raw)))
+# functions defined in them do not enter the parent module scope.  A scriptblock
+# obtained from [Parser]::ParseFile(...).GetScriptBlock() still executes in the
+# caller's (module) scope when dot-sourced, preserving that workaround, while
+# also retaining the on-disk file association.  The file association is required
+# so Pester code-coverage breakpoints can bind to the sub-module source files
+# (issue #344 remediation cycle 1, R2); the previous fileless
+# [scriptblock]::Create((Get-Content -Raw)) approach produced scriptblocks with
+# no source file, so breakpoints never bound and PoshQC.ScanConfig.psm1 fell
+# outside the coverage denominator.  Parse errors fail module import fast.
+foreach ($subModuleName in @(
+        'PoshQC.FileDiscovery.psm1',
+        'PoshQC.ScanConfig.psm1',
+        'PoshQC.Analyzer.psm1',
+        'PoshQC.Testing.psm1'
+    )) {
+    $subModulePath = Join-Path $script:ModuleRoot $subModuleName
+    $parseErrors = $null
+    $ast = [System.Management.Automation.Language.Parser]::ParseFile(
+        $subModulePath, [ref]$null, [ref]$parseErrors)
+    if ($parseErrors) {
+        throw "Failed to parse sub-module '$subModuleName': $($parseErrors -join '; ')"
+    }
+    . ($ast.GetScriptBlock())
+}
 
 Set-Alias -Name Install-PoshQCTools -Value Install-PoshQCTool
 
@@ -96,6 +115,7 @@ Export-ModuleMember -Function @(
     'Invoke-PoshQCAnalyzeAutofix',
     'Invoke-PoshQCSuite',
     'Invoke-PoshQCTest',
-    'Convert-PoshQCCoverageToRelative'
+    'Convert-PoshQCCoverageToRelative',
+    'Get-PoshQCScanConfigFolder'
 ) -Alias @('Install-PoshQCTools')
 

package/resources/powershell/PoshQC/settings/pester.runsettings.psd1

@@ -21,6 +21,9 @@
         OutputFormat          = 'CoverageGutters'
         OutputPath            = 'artifacts/pester/powershell-coverage.xml'
         Path                  = @(
+            # Scope coverage to hook files with deterministic Pester coverage in this branch.
+            # Broader script/module globs include bootstrap and one-shot automation paths that
+            # are validated by their own suites but not meaningfully covered by this hook batch.
             '.claude/hooks/validate-bash.ps1'
             '.claude/hooks/check-python-test-purity.ps1'
             '.claude/hooks/check-powershell-test-purity.ps1'
@@ -44,27 +47,41 @@
             '.claude/hooks/enforce-pr-author-skill.ps1'
             '.claude/hooks/validate-orchestrator-output.ps1'
             '.claude/hooks/enforce-pr-author-skill.epic-base-branch.ps1'
+            # Issue #301 remediation cycle 1 (fix #1): measure the completion-consistency
+            # hook set (Claude and Codex variants) so their Pester coverage is captured.
+            '.claude/hooks/enforce-completion-consistency.ps1'
+            '.claude/hooks/enforce-completion-helpers.ps1'
+            '.codex/hooks/enforce-completion-consistency.ps1'
+            '.codex/hooks/enforce-completion-helpers.ps1'
+            # Issue #298 fixed ConvertTo-CommandResult's handling of an empty array Output
+            # parameter in this script; measured here so the change produces real per-file
+            # coverage evidence going forward.
+            'scripts/dev-tools/Invoke-FullReleaseFlow.ps1'
+            # Issue #305 added this PreToolUse model-routing-receipt deterrent hook; measured
+            # here so the new production hook is not excluded from coverage.
+            '.claude/hooks/enforce-model-routing-receipt.ps1'
+            # Issue #312 added the .claude-resident PowerShell model-routing library so the
+            # push-down bundle no longer cites missing scripts/dev_tools references; measured
+            # here so the new production module is not excluded from coverage.
+            '.claude/lib/model-routing/ModelRouting.psm1'
+            # The portable orchestrator-state modules make the pushed-down enforcement hooks
+            # work in consumer repos without scripts/dev_tools; measured here so the new
+            # production modules are not excluded from coverage.
+            '.claude/lib/orchestrator-state/OrchestratorState.psm1'
+            '.claude/lib/orchestrator-state/OrchestratorStateCompletion.psm1'
+            # Issue #328 added this dev-tools worktree launcher script; measured here so the
+            # changed production file is in the coverage denominator (R1). The test suite
+            # dot-sources the file (guarded body) so line attribution is valid.
+            'scripts/dev-tools/new-claude-worktree-session.ps1'
             # Issue #334 added this SessionStart hook that persists the current session id;
             # measured here so the new production hook is not excluded from coverage. The
             # test suite dot-sources the file (guarded body) so line attribution is valid.
             '.claude/hooks/persist-session-id.ps1'
-        )
-        ExcludedPath          = @(
-            '.claude/hooks/validate-feature-review-coverage.ps1' # Feature-review wrapper around repository evidence; not deterministic in normal unit-test execution.
-            'scripts/dev-tools/bootstrap-host.ps1' # Host bootstrap entrypoint for external setup; not deterministic in normal unit-test execution.
-            'scripts/dev-tools/bootstrap-host.helpers.ps1' # Bootstrap helper for host setup; not deterministic in normal unit-test execution.
-            'scripts/dev-tools/format-powershell.ps1' # Thin formatter wrapper around external tooling; not deterministic in normal unit-test execution.
-            'scripts/dev-tools/load-openai-key.ps1' # Local secret-loading wrapper; not deterministic in normal unit-test execution.
-            'scripts/dev-tools/publish-sideloaded-extension.ps1' # VS Code extension publication wrapper; not deterministic in normal unit-test execution.
-            'scripts/dev-tools/run-actionlint.ps1' # External actionlint wrapper; not deterministic in normal unit-test execution.
-            'scripts/dev-tools/run-pester.ps1' # Pester CLI wrapper; not deterministic in normal unit-test execution.
-            'scripts/dev-tools/run-poshqc-suite.ps1' # PoshQC CLI wrapper; not deterministic in normal unit-test execution.
-            'scripts/dev-tools/run-psscriptanalyzer.ps1' # PSScriptAnalyzer CLI wrapper; not deterministic in normal unit-test execution.
-            'scripts/dev-tools/verify-host.ps1' # Host verification wrapper for local tools; not deterministic in normal unit-test execution.
-            'scripts/dev-tools/vscode-cli.helpers.ps1' # VS Code CLI helper around external processes; not deterministic in normal unit-test execution.
-            'scripts/powershell/PoshQC/PoshQC.Analyzer.psm1' # Analyzer orchestration module over external tooling; not deterministic in normal unit-test execution.
-            'scripts/powershell/PoshQC/PoshQC.FileDiscovery.psm1' # File-discovery module coupled to workspace traversal; not deterministic in normal unit-test execution.
-            'scripts/powershell/PoshQC/PoshQC.Testing.psm1' # Pester orchestration module over external tooling; not deterministic in normal unit-test execution.
+            # Issue #344 remediation cycle 1 (R2): measure the new production ScanConfig module
+            # so it is not excluded from coverage; PoshQC.psm1 sub-module loading was refactored
+            # to AST-based scriptblocks (Parser::ParseFile(...).GetScriptBlock()) so Pester
+            # coverage breakpoints bind to the on-disk source file.
+            'scripts/powershell/PoshQC/PoshQC.ScanConfig.psm1'
         )
         # Optional: don't fail the run on coverage percentage
         CoveragePercentTarget = 0
@@ -78,4 +95,3 @@
 
 
 
-