@danmoisan/drm-copilot-mcp 1.0.18 → 1.0.20

package/out/mcp-server.js

@@ -25867,6 +25867,26 @@ var STEP_STATUS_KEYS = [
   "step9_status",
   "step10_status"
 ];
+var STEP_SPECIFIC_EXTRA_STATUS = /* @__PURE__ */ new Map([
+  ["step6_status", /* @__PURE__ */ new Set(["blocked_remediation_loop_limit"])],
+  [
+    "step9_status",
+    /* @__PURE__ */ new Set(["passed", "failed_remediation_required", "blocked_ci_loop_limit"])
+  ]
+]);
+var COMPLETION_BLOCKING_STEP_STATUS = /* @__PURE__ */ new Set([
+  "pending",
+  "blocked",
+  "failed_remediation_required",
+  "blocked_ci_loop_limit",
+  "blocked_remediation_loop_limit"
+]);
+function isValidStepStatus(key, value) {
+  if (VALID_STEP_STATUS.has(value)) {
+    return true;
+  }
+  return STEP_SPECIFIC_EXTRA_STATUS.get(key)?.has(value) === true;
+}
 function isObject13(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -25951,7 +25971,7 @@ function validateOrchestratorStateText(text, options = {}) {
   }
   for (const key of STEP_STATUS_KEYS) {
     const value = stateMap[key];
-    if (value !== void 0 && value !== null && !(typeof value === "string" && VALID_STEP_STATUS.has(value))) {
+    if (value !== void 0 && value !== null && !(typeof value === "string" && isValidStepStatus(key, value))) {
       errors.push(`Checkpoint has invalid ${key}: ${String(value)}`);
     }
   }
@@ -25982,7 +26002,7 @@ function validateOrchestratorStateText(text, options = {}) {
   if (options.requireComplete === true) {
     for (const key of STEP_STATUS_KEYS) {
       const value = stateMap[key];
-      if (value === "pending" || value === "blocked") {
+      if (COMPLETION_BLOCKING_STEP_STATUS.has(value)) {
         errors.push(
           `Checkpoint completion validation failed: ${key} is ${String(value)}.`
         );

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danmoisan/drm-copilot-mcp",
-  "version": "1.0.18",
+  "version": "1.0.20",
   "description": "Stdio MCP server exposing drm-copilot repo-automation tools.",
   "license": "MIT",
   "type": "commonjs",

package/resources/claude-customizations/.claude/agents/atomic-executor.md

@@ -15,7 +15,7 @@ tools:
   - "Bash(npx prettier *)"
   - "Bash(npx eslint *)"
   - "Bash(npx tsc *)"
-  - "Bash(npx vitest *)"
+  - "Bash(npx jest *)"
   - "Bash(pwsh *)"
   - "Bash(git *)"
   - "mcp__drm-copilot__run_poshqc_format"
@@ -76,7 +76,7 @@ For each task:
 Use the scoped tool patterns for quality gates:
 
 - **Python**: `poetry run black`, `poetry run ruff`, `poetry run pyright`, `poetry run pytest`
-- **TypeScript**: `npx prettier`, `npx eslint`, `npx tsc`, `npx vitest`
+- **TypeScript**: `npx prettier`, `npx eslint`, `npx tsc`, `npx jest`
 - **PowerShell**: MCP server functions (`mcp__drm-copilot__run_poshqc_format`, `mcp__drm-copilot__run_poshqc_analyze`, `mcp__drm-copilot__run_poshqc_test`, `mcp__drm-copilot__run_poshqc_analyze_autofix`)
 - **Git**: `git diff`, `git status`, `git log`
 

package/resources/claude-customizations/.claude/hooks/validate-orchestrator-output.ps1

@@ -165,9 +165,15 @@ function Invoke-RoutingContractValidation {
         string is unchanged for every existing caller of this hook.
 
         Returns a hashtable with keys:
-          - HasErrors:  $true when the validator reported a non-zero exit or
-                        produced any error text; $false when clean.
-          - ErrorText:  the validator's combined output text (empty on success).
+          - HasErrors:  $true only when the validator reported a non-zero exit
+                        code; $false when it exited 0. The exit code is the sole
+                        discriminator, because the validator prints its success
+                        line to stdout on a clean pass and the default Invoker
+                        captures with 2>&1, so output text is present on success.
+          - ErrorText:  the validator's combined captured output text, carried
+                        through unchanged: the error lines on a failure, and the
+                        success line (Python CLI) or empty (portable fallback)
+                        on a clean pass.
     #>
     [CmdletBinding()]
     [OutputType([hashtable])]
@@ -219,9 +225,11 @@ function Invoke-RoutingContractValidation {
         $outputText = ([string]$result.Output).Trim()
     }
 
-    # The validator signals a routing-contract failure either through a non-zero
-    # exit code or through emitted error text; either condition blocks DONE.
-    $hasErrors = ($exitCode -ne 0) -or (-not [string]::IsNullOrWhiteSpace($outputText))
+    # The exit code is the complete failure discriminator: the validator prints every
+    # error to stderr and returns non-zero, and prints its success line to stdout and
+    # returns 0. Because the default invoker captures with 2>&1, the success line lands
+    # in $outputText on a clean pass, so output text must not influence this decision.
+    $hasErrors = ($exitCode -ne 0)
     return @{ HasErrors = $hasErrors; ErrorText = $outputText }
 }
 

package/resources/claude-customizations/.claude/lib/model-routing/ModelRouting.psm1

@@ -11,8 +11,9 @@
       - Resolve-DelegationModel port of scripts/dev_tools/resolve_delegation_model.py
 
     Both functions are pure and deterministic: they read no file at runtime and
-    encode only the fixed band ordering, the base complexity-to-model table, the
-    preferred overlay, and the disabled-mode clamp as module-scope constants.
+    encode only the fixed band ordering, the floor-signal name set, the base
+    complexity-to-model table, the preferred overlay, and the disabled-mode clamp
+    as module-scope constants.
     Those literals are pinned to config/orchestration-routing.json (model_policy /
     model_budget) by a static config-parity Pester test, and the Python modules
     remain the validator's authoritative reference. This module is one half of a
@@ -29,6 +30,20 @@ $script:BAND_ORDER = @('C1', 'C2', 'C3', 'C4')
 # The lowest band, returned when no floor signal is present (LOWEST_BAND).
 $script:LOWEST_BAND = 'C1'
 
+# The catalog signal names flagged "floor": true in model_policy.complexity. Only
+# a signal named here contributes a floor candidate; a "floor": false name and an
+# unknown name each contribute nothing. Hard-coded (never read from disk) because
+# this module is pushed down to consumer repositories that do not ship
+# config/orchestration-routing.json; a static parity Pester test pins this set to
+# the config's "floor": true entries. Mirrors FLOOR_SIGNAL_NAMES in
+# scripts/dev_tools/compute_complexity_floor.py.
+$script:FLOOR_SIGNAL_NAMES = @(
+    'classifier_or_model_logic',
+    'auth_or_token_handling',
+    'concurrency_or_ordering',
+    'cross_module_contract_change'
+)
+
 # Every present floor signal contributes this uniform candidate band, per the
 # model_policy.complexity contract (each [floor] signal contributes C3).
 $script:FLOOR_CANDIDATE_BAND = 'C3'
@@ -78,21 +93,22 @@ function Get-ComplexityFloor {
     .DESCRIPTION
         Faithful PowerShell port of compute_complexity_floor
         (scripts/dev_tools/compute_complexity_floor.py). Returns the deterministic
-        lower-bound complexity band implied by the set of present floor signals:
-        each present floor signal contributes a candidate band of C3, the floor is
-        the maximum triggered candidate band, and the floor never exceeds C3
-        (C4 is never floor-forced). With no floor signal present the floor is the
-        lowest band C1. The function is pure: it reads no file and does not mutate
-        its input, and the result is independent of input ordering.
+        lower-bound complexity band implied by the recorded signal names: the
+        function intersects the input with FLOOR_SIGNAL_NAMES, each surviving
+        [floor] signal contributes a candidate band of C3, the floor is the maximum
+        triggered candidate band, and the floor never exceeds C3 (C4 is never
+        floor-forced). With no floor signal present the floor is the lowest band C1.
+        The function is pure: it reads no file and does not mutate its input, and
+        the result is independent of input ordering.
 
     .PARAMETER SignalsPresent
-        The names of the present signals flagged [floor] in the
-        model_policy.complexity catalog. Every element is treated as a triggered
-        floor signal contributing the candidate band C3. An empty collection means
-        no floor signal is present.
+        The full set of recorded signal names, as written to the checkpoint's
+        signals_present[] array. The caller does not pre-filter: names outside
+        FLOOR_SIGNAL_NAMES ("floor": false catalog names and unknown names alike)
+        contribute nothing. An empty collection means no floor signal is present.
 
     .OUTPUTS
-        System.String. The floor band: C1 when no floor signal is present,
+        System.String. The floor band: C1 when no recorded name is a floor signal,
         otherwise the maximum triggered candidate band clamped to at most C3.
         C4 is never returned.
     #>
@@ -104,9 +120,13 @@ function Get-ComplexityFloor {
         [string[]] $SignalsPresent
     )
 
+    # Keep only the recorded names that are floor signals. A "floor": false catalog
+    # name and an unknown name both drop out here and contribute no candidate band.
+    $triggered = @($SignalsPresent | Where-Object { $script:FLOOR_SIGNAL_NAMES -contains $_ })
+
     # With no present floor signal there is no candidate band to raise the floor
     # above the lowest band, so the floor is C1 (mirrors the empty-input guard).
-    if (-not $SignalsPresent -or $SignalsPresent.Count -eq 0) {
+    if ($triggered.Count -eq 0) {
         return $script:LOWEST_BAND
     }
 

package/resources/claude-customizations/.claude/lib/orchestrator-state/OrchestratorState.psm1

@@ -14,7 +14,7 @@
     checkpoint-presence checks (required keys, step-status validity, blocked_reason
     validity) from `scripts/dev_tools/validate_orchestrator_state.py`. The base
     constants below are pinned to `REQUIRED_STATE_KEYS`, `STEP_STATUS_KEYS`,
-    `VALID_STEP_STATUS`, and `VALID_BLOCKED_REASONS` in that validator.
+    `VALID_STEP_STATUS`, `VALID_BLOCKED_REASONS`, and `STEP_SPECIFIC_EXTRA_STATUS`.
 
     Every public function FAILS CLOSED: a missing checkpoint file, invalid JSON, a
     missing required key, an invalid step status, or an unmet readiness condition all
@@ -83,6 +83,15 @@ $script:VALID_STEP_STATUS = @(
     'completed'
 )
 
+# Per-key additive step-status vocabulary layered on VALID_STEP_STATUS: each value
+# below is valid only on its owning key and is still rejected on every other step
+# key. Pinned to STEP_SPECIFIC_EXTRA_STATUS in
+# scripts/dev_tools/_orchestrator_state_step_status.py.
+$script:STEP_SPECIFIC_EXTRA_STATUS = @{
+    step6_status = @('blocked_remediation_loop_limit')
+    step9_status = @('passed', 'failed_remediation_required', 'blocked_ci_loop_limit')
+}
+
 # The allowed blocked_reason vocabulary. Pinned to VALID_BLOCKED_REASONS in the
 # primary validator.
 $script:VALID_BLOCKED_REASONS = @(
@@ -226,11 +235,11 @@ function Get-OrchestratorStateBasePresenceError {
         Return the base checkpoint-presence errors, mirroring the primary validator.
     .DESCRIPTION
         Private base check. Emits one error string per missing required key, one per
-        step5_status..step10_status value outside VALID_STEP_STATUS, and one when
-        blocked_reason is present with a value outside VALID_BLOCKED_REASONS. This
-        mirrors the base block of scripts/dev_tools/validate_orchestrator_state.py
-        (required keys, step-status validity, blocked_reason validity) that runs
-        before any mode-specific gate.
+        step5_status..step10_status value outside VALID_STEP_STATUS and that key's
+        STEP_SPECIFIC_EXTRA_STATUS set, and one when blocked_reason is present with a
+        value outside VALID_BLOCKED_REASONS. This mirrors the base block of
+        scripts/dev_tools/validate_orchestrator_state.py (required keys, step-status
+        validity, blocked_reason validity) that runs before any mode-specific gate.
     .PARAMETER State
         The parsed checkpoint PSCustomObject.
     .OUTPUTS
@@ -254,12 +263,16 @@ function Get-OrchestratorStateBasePresenceError {
         }
     }
 
-    # Every present step status must be a member of the allowed vocabulary; an absent
-    # step key contributes no error (mirrors the primary validator's None guard).
+    # Every present step status must be a member of the shared vocabulary or of that
+    # key's additive extra set; an absent step key contributes no error (mirrors the
+    # primary validator's None guard).
     foreach ($key in $script:STEP_STATUS_KEYS) {
         $field = Get-OrchestratorStateField -State $State -Name $key
+        $extra = @()
+        if ($script:STEP_SPECIFIC_EXTRA_STATUS.ContainsKey($key)) { $extra = @($script:STEP_SPECIFIC_EXTRA_STATUS[$key]) }
         if ($field.Present -and $null -ne $field.Value -and
-            ($script:VALID_STEP_STATUS -notcontains [string]$field.Value)) {
+            ($script:VALID_STEP_STATUS -notcontains [string]$field.Value) -and
+            ($extra -notcontains [string]$field.Value)) {
             $errors.Add("Checkpoint has invalid $key`: $($field.Value)")
         }
     }
@@ -279,12 +292,11 @@ function Get-OrchestratorStatePrCreationReadinessError {
     .SYNOPSIS
         Return the PR-creation-readiness errors, parity with the Python reference.
     .DESCRIPTION
-        Private readiness check mirroring
-        validate_orchestrator_state_pr_creation_readiness in
-        _orchestrator_state_pr_creation_readiness.py: steps 5-8 must not be
-        pending/blocked; blocked_reason must be `none` or absent; and the
-        local_execution_overrides / delegation_bypasses lists must be empty when
-        present. It does not enforce completion, CI, PR, or routing-contract gates.
+        Private readiness check mirroring validate_orchestrator_state_pr_creation_readiness in
+        _orchestrator_state_pr_creation_readiness.py: steps 5-8 must not be pending, blocked, or
+        blocked_remediation_loop_limit; blocked_reason must be `none` or absent; and the
+        local_execution_overrides / delegation_bypasses lists must be empty when present. It does
+        not enforce completion, CI, PR, or routing-contract gates.
     .PARAMETER State
         The parsed checkpoint PSCustomObject.
     .OUTPUTS
@@ -299,11 +311,11 @@ function Get-OrchestratorStatePrCreationReadinessError {
 
     $errors = [System.Collections.Generic.List[string]]::new()
 
-    # Reject an upstream step recorded as pending or blocked; steps 5-8 must have
-    # finished before the first PR of a branch is created.
+    # Reject an upstream step recorded as pending, blocked, or blocked_remediation_loop_limit; steps
+    # 5-8 must have finished before the first PR of a branch is created.
     foreach ($key in $script:PR_CREATION_READY_STEP_KEYS) {
         $field = Get-OrchestratorStateField -State $State -Name $key
-        if ($field.Present -and ($field.Value -eq 'pending' -or $field.Value -eq 'blocked')) {
+        if ($field.Present -and (@('pending', 'blocked', 'blocked_remediation_loop_limit') -contains $field.Value)) {
             $errors.Add("Checkpoint PR-creation readiness validation failed: $key is $($field.Value).")
         }
     }

package/resources/claude-customizations/.claude/rules/general-code-change.md

@@ -36,7 +36,7 @@ Run the full seven-stage toolchain in this exact order and repeat until all stag
 2. **Linting** (e.g., Ruff, ESLint, PSScriptAnalyzer, .NET analyzers)
 3. **Type checking** (e.g., Pyright, TSC, nullable analysis; skip for PowerShell)
 4. **Architecture-boundary tests** (e.g., dependency-cruiser, NetArchTest.Rules)
-5. **Unit tests** (e.g., Pytest, Vitest, MSTest, Pester) including property-based tests where applicable per `quality-tiers.md`
+5. **Unit tests** (e.g., Pytest, Jest, MSTest, Pester) including property-based tests where applicable per `quality-tiers.md`
 6. **Contract / schema compatibility checks** (e.g., oasdiff, schema-snapshot diff)
 7. **Integration tests**
 

package/resources/claude-customizations/.claude/rules/general-unit-test.md

@@ -37,7 +37,7 @@ The correct response to a file that contains untestable lines is to refactor it
 **Permitted `exclude` entries** (non-production paths only):
 - Build output directories: `dist/**`, `lib/**`, `lib-amd/**`.
 - Test files and test infrastructure: `**/*.test.ts`, `tests/**`, `src/test-support/**`.
-- Config files that are not production code: `vitest.config.ts`, `eslint.config.mjs`, `.dependency-cruiser.cjs`, `webpack.config.js`.
+- Config files that are not production code: `jest.config.cjs`, `eslint.config.mjs`, `.dependency-cruiser.cjs`, `webpack.config.js`.
 - `node_modules/**`.
 
 **Prohibited `exclude` entries:**
@@ -102,4 +102,4 @@ All test code must be deterministic. The following infrastructure requirements a
 - **Controllable clock** — use a `Clock` interface (TypeScript) or `TimeProvider` (.NET) injected into code under test. Do not read wall-clock time directly in production code under test.
 - **Seeded RNG** — randomness must be supplied via a seedable interface; on test failure the seed must be printed so the failure is reproducible.
 - **Banned APIs in test code** — `setTimeout`, `Thread.Sleep`, `Task.Delay`, real wall-clock waits, and `Date.now()` outside the clock interface are prohibited in tests.
-- **Virtual scheduler / fake timers / `FakeTimeProvider`** — async tests must use the framework's fake-timer facility (`vi.useFakeTimers()` for Vitest, `FakeTimeProvider` for .NET) to advance simulated time deterministically.
+- **Virtual scheduler / fake timers / `FakeTimeProvider`** — async tests must use the framework's fake-timer facility (`jest.useFakeTimers()` for Jest, `FakeTimeProvider` for .NET) to advance simulated time deterministically.

package/resources/claude-customizations/.claude/rules/typescript.md

@@ -13,7 +13,7 @@ This rule file summarizes the TypeScript-specific policies for this repository.
 1. **Formatting — Prettier**: All TypeScript must be formatted with the repository Prettier configuration. Command: `npm run format`
 2. **Linting — ESLint**: TypeScript must pass ESLint using the repository configuration. Command: `npm run lint`
 3. **Type Checking — TSC**: TypeScript must pass the compiler type-check. Avoid `any`; prefer `unknown` plus narrowing. Command: `npm run typecheck`
-4. **Testing — Vitest**: All TypeScript unit tests must use Vitest. Command: `npm run test`
+4. **Testing — Jest**: All TypeScript unit tests must use Jest. Command: `npm run test:unit`
 
 Run the toolchain in order: format → lint → type-check → test. Restart from step 1 if any step fails or changes files.
 
@@ -39,16 +39,16 @@ Run the toolchain in order: format → lint → type-check → test. Restart fro
 
 ## Testing Standards
 
-- Use **Vitest** as the test framework.
+- Use **Jest** as the test framework.
 - Name test files `*.test.ts`.
 - Unit tests must not require the Outlook host runtime.
 - Follow Arrange–Act–Assert structure.
 - Each test targets one behavior.
-- Use `vi.spyOn` or `vi.mock` for targeted mocking; reset mocks with `afterEach(() => { vi.resetAllMocks(); })`.
+- Use `jest.spyOn` or `jest.mock` for targeted mocking; reset mocks with `afterEach(() => { jest.resetAllMocks(); })`.
 - No external dependencies (network, filesystem temp files, external processes) in unit tests.
 - Avoid snapshot tests unless stable and intentional.
 - Coverage thresholds follow the uniform tier rule defined in `.claude/rules/quality-tiers.md`: line coverage >= 85% and branch coverage >= 75% across all tiers (T1–T4).
-- Coverage command: `npm run test:coverage` (the script is wired in Prompt B1 alongside the Vitest dependency).
+- Coverage command: `npm run test:unit:coverage` (the root `package.json` script runs `node run-jest.cjs --coverage`).
 - Coverage regression on changed lines is a blocking finding.
 - Interface/type-only files with no executable behavior — files consisting solely of `interface` or `type` declarations — may be omitted from coverage measurement. Such files legitimately report 0% executable coverage. This is a clarification only; it does not lower any coverage threshold.
 
@@ -70,5 +70,5 @@ Layer rules and the No-COM architecture assertions are defined in `.claude/rules
 ## Runtime Determinism
 
 - `Date`, `Math.random`, and `setTimeout` access must flow through an injected `Clock` / `Random` interface.
-- Tests use Vitest fake timers (`vi.useFakeTimers()`).
+- Tests use Jest fake timers (`jest.useFakeTimers()`).
 - Prefer `await flushPromises()` over `setTimeout(0)` for awaiting micro-tasks.

package/resources/codex-and-agents-customizations/.agents/skills/general-code-change/SKILL.md

@@ -41,7 +41,7 @@ Run the full seven-stage toolchain in this exact order and repeat until all stag
 2. **Linting** (e.g., Ruff, ESLint, PSScriptAnalyzer, .NET analyzers)
 3. **Type checking** (e.g., Pyright, TSC, nullable analysis; skip for PowerShell)
 4. **Architecture-boundary tests** (e.g., dependency-cruiser, NetArchTest.Rules)
-5. **Unit tests** (e.g., Pytest, Vitest, MSTest, Pester) including property-based tests where applicable per `quality-tiers.md`
+5. **Unit tests** (e.g., Pytest, Jest, MSTest, Pester) including property-based tests where applicable per `quality-tiers.md`
 6. **Contract / schema compatibility checks** (e.g., oasdiff, schema-snapshot diff)
 7. **Integration tests**
 

package/resources/codex-and-agents-customizations/.agents/skills/general-unit-test/SKILL.md

@@ -42,7 +42,7 @@ The correct response to a file that contains untestable lines is to refactor it
 **Permitted `exclude` entries** (non-production paths only):
 - Build output directories: `dist/**`, `lib/**`, `lib-amd/**`.
 - Test files and test infrastructure: `**/*.test.ts`, `tests/**`, `src/test-support/**`.
-- Config files that are not production code: `vitest.config.ts`, `eslint.config.mjs`, `.dependency-cruiser.cjs`, `webpack.config.js`.
+- Config files that are not production code: `jest.config.cjs`, `eslint.config.mjs`, `.dependency-cruiser.cjs`, `webpack.config.js`.
 - `node_modules/**`.
 
 **Prohibited `exclude` entries:**
@@ -107,4 +107,4 @@ All test code must be deterministic. The following infrastructure requirements a
 - **Controllable clock** — use a `Clock` interface (TypeScript) or `TimeProvider` (.NET) injected into code under test. Do not read wall-clock time directly in production code under test.
 - **Seeded RNG** — randomness must be supplied via a seedable interface; on test failure the seed must be printed so the failure is reproducible.
 - **Banned APIs in test code** — `setTimeout`, `Thread.Sleep`, `Task.Delay`, real wall-clock waits, and `Date.now()` outside the clock interface are prohibited in tests.
-- **Virtual scheduler / fake timers / `FakeTimeProvider`** — async tests must use the framework's fake-timer facility (`vi.useFakeTimers()` for Vitest, `FakeTimeProvider` for .NET) to advance simulated time deterministically.
+- **Virtual scheduler / fake timers / `FakeTimeProvider`** — async tests must use the framework's fake-timer facility (`jest.useFakeTimers()` for Jest, `FakeTimeProvider` for .NET) to advance simulated time deterministically.

package/resources/codex-and-agents-customizations/.codex/config.toml

@@ -2,7 +2,7 @@ default_permissions = ":danger-full-access"
 
 [mcp_servers.drm-copilot]
 command = "npx"
-args = ["-y", "@danmoisan/drm-copilot-mcp@1.0.18"]
+args = ["-y", "@danmoisan/drm-copilot-mcp@1.0.20"]
 required = true
 enabled_tools = [
     "collect_commit_context",

package/resources/codex-and-agents-customizations/.codex/hooks/check-powershell-test-purity.ps1

@@ -33,6 +33,10 @@
 [CmdletBinding()]
 param()
 
+# Shared Codex PreToolUse transport: stdin payload parsing and tool_input-to-file
+# mapping for every tool name the ^(apply_patch|Edit|Write)$ matcher admits.
+. (Join-Path $PSScriptRoot 'codex-pretooluse-file-mapping.ps1')
+
 function Get-PowerShellTestPurityBlockDecision {
     [CmdletBinding()]
     [OutputType([System.Collections.Specialized.OrderedDictionary])]
@@ -138,76 +142,16 @@ function Invoke-PowerShellTestPurityDecision {
     return Get-PowerShellTestPurityBlockDecision -Reason $reason
 }
 
-function ConvertFrom-CodexPowerShellPurityPayload {
-    [CmdletBinding()]
-    param([Parameter(Mandatory)][string] $PayloadRaw)
-
-    if ([string]::IsNullOrWhiteSpace($PayloadRaw)) {
-        throw 'check-powershell-test-purity hook input is empty.'
-    }
-    try {
-        $payload = $PayloadRaw | ConvertFrom-Json -ErrorAction Stop
-    } catch {
-        throw "check-powershell-test-purity hook input is malformed JSON: $_"
-    }
-    if ($payload.PSObject.Properties.Name -notcontains 'tool_input' -or $null -eq $payload.tool_input) {
-        throw 'check-powershell-test-purity hook input is missing tool_input.'
-    }
-    if ([string]$payload.hook_event_name -ne 'PreToolUse' -or [string]$payload.tool_name -ne 'apply_patch') {
-        throw 'check-powershell-test-purity requires a PreToolUse apply_patch payload.'
-    }
-    return $payload
-}
-
-function ConvertTo-CodexPowerShellPurityInput {
-    [CmdletBinding()]
-    [OutputType([object[]])]
-    param([Parameter(Mandatory)] $Payload)
-
-    if ($Payload.tool_input.PSObject.Properties.Name -contains 'file_path') {
-        return , $Payload.tool_input
-    }
-
-    $command = [string]$Payload.tool_input.command
-    if ([string]::IsNullOrWhiteSpace($command)) {
-        throw 'check-powershell-test-purity cannot map tool_input to a file edit.'
-    }
-
-    $fileMatches = [regex]::Matches(
-        $command,
-        '(?ms)^\*\*\* (?:Add|Update|Delete) File:\s*(?<path>.+?)\r?\n(?<body>.*?)(?=^\*\*\* (?:(?:Add|Update|Delete) File:|End Patch)\s*|\z)'
-    )
-    if ($fileMatches.Count -eq 0) {
-        throw 'check-powershell-test-purity received an unrecognized apply_patch command.'
-    }
-
-    $inputs = [System.Collections.Generic.List[object]]::new()
-    foreach ($match in $fileMatches) {
-        $filePath = ([string]$match.Groups['path'].Value).Trim()
-        $moveMatch = [regex]::Match([string]$match.Groups['body'].Value, '(?m)^\*\*\* Move to:\s*(?<path>.+?)\s*$')
-        if ($moveMatch.Success) {
-            $filePath = ([string]$moveMatch.Groups['path'].Value).Trim()
-        }
-        $addedLines = foreach ($line in ([string]$match.Groups['body'].Value -split '\r?\n')) {
-            if ($line.StartsWith('+') -and -not $line.StartsWith('+++')) {
-                $line.Substring(1)
-            }
-        }
-        $inputs.Add([pscustomobject]@{
-                file_path = $filePath
-                content   = $addedLines -join [Environment]::NewLine
-            })
-    }
-    return $inputs.ToArray()
-}
-
 if ($MyInvocation.InvocationName -eq '.') {
     return
 }
 
 try {
-    $payload = ConvertFrom-CodexPowerShellPurityPayload -PayloadRaw ([Console]::In.ReadToEnd())
-    foreach ($toolInput in @(ConvertTo-CodexPowerShellPurityInput -Payload $payload)) {
+    # Transport and mapping come from the shared module. A well-formed payload
+    # that maps to no file edit produces an empty record set, so the loop body
+    # never runs and the hook allows silently.
+    $payload = ConvertFrom-CodexPreToolUsePayload -PayloadRaw ([Console]::In.ReadToEnd()) -HookName 'check-powershell-test-purity'
+    foreach ($toolInput in @(ConvertTo-CodexFileEditInput -Payload $payload)) {
         $toolInputRaw = $toolInput | ConvertTo-Json -Compress -Depth 20
         $decision = Invoke-PowerShellTestPurityDecision -ToolInputRaw $toolInputRaw
         if ($null -ne $decision -and $decision.hookSpecificOutput.permissionDecision -eq 'deny') {

package/resources/codex-and-agents-customizations/.codex/hooks/check-python-test-purity.ps1

@@ -30,6 +30,10 @@
 [CmdletBinding()]
 param()
 
+# Shared Codex PreToolUse transport: stdin payload parsing and tool_input-to-file
+# mapping for every tool name the ^(apply_patch|Edit|Write)$ matcher admits.
+. (Join-Path $PSScriptRoot 'codex-pretooluse-file-mapping.ps1')
+
 function Get-PythonTestPurityBlockDecision {
     [CmdletBinding()]
     [OutputType([System.Collections.Specialized.OrderedDictionary])]
@@ -138,76 +142,16 @@ function Invoke-PythonTestPurityDecision {
     return Get-PythonTestPurityBlockDecision -Reason $reason
 }
 
-function ConvertFrom-CodexPythonPurityPayload {
-    [CmdletBinding()]
-    param([Parameter(Mandatory)][string] $PayloadRaw)
-
-    if ([string]::IsNullOrWhiteSpace($PayloadRaw)) {
-        throw 'check-python-test-purity hook input is empty.'
-    }
-    try {
-        $payload = $PayloadRaw | ConvertFrom-Json -ErrorAction Stop
-    } catch {
-        throw "check-python-test-purity hook input is malformed JSON: $_"
-    }
-    if ($payload.PSObject.Properties.Name -notcontains 'tool_input' -or $null -eq $payload.tool_input) {
-        throw 'check-python-test-purity hook input is missing tool_input.'
-    }
-    if ([string]$payload.hook_event_name -ne 'PreToolUse' -or [string]$payload.tool_name -ne 'apply_patch') {
-        throw 'check-python-test-purity requires a PreToolUse apply_patch payload.'
-    }
-    return $payload
-}
-
-function ConvertTo-CodexPythonPurityInput {
-    [CmdletBinding()]
-    [OutputType([object[]])]
-    param([Parameter(Mandatory)] $Payload)
-
-    if ($Payload.tool_input.PSObject.Properties.Name -contains 'file_path') {
-        return , $Payload.tool_input
-    }
-
-    $command = [string]$Payload.tool_input.command
-    if ([string]::IsNullOrWhiteSpace($command)) {
-        throw 'check-python-test-purity cannot map tool_input to a file edit.'
-    }
-
-    $fileMatches = [regex]::Matches(
-        $command,
-        '(?ms)^\*\*\* (?:Add|Update|Delete) File:\s*(?<path>.+?)\r?\n(?<body>.*?)(?=^\*\*\* (?:(?:Add|Update|Delete) File:|End Patch)\s*|\z)'
-    )
-    if ($fileMatches.Count -eq 0) {
-        throw 'check-python-test-purity received an unrecognized apply_patch command.'
-    }
-
-    $inputs = [System.Collections.Generic.List[object]]::new()
-    foreach ($match in $fileMatches) {
-        $filePath = ([string]$match.Groups['path'].Value).Trim()
-        $moveMatch = [regex]::Match([string]$match.Groups['body'].Value, '(?m)^\*\*\* Move to:\s*(?<path>.+?)\s*$')
-        if ($moveMatch.Success) {
-            $filePath = ([string]$moveMatch.Groups['path'].Value).Trim()
-        }
-        $addedLines = foreach ($line in ([string]$match.Groups['body'].Value -split '\r?\n')) {
-            if ($line.StartsWith('+') -and -not $line.StartsWith('+++')) {
-                $line.Substring(1)
-            }
-        }
-        $inputs.Add([pscustomobject]@{
-                file_path = $filePath
-                content   = $addedLines -join [Environment]::NewLine
-            })
-    }
-    return $inputs.ToArray()
-}
-
 if ($MyInvocation.InvocationName -eq '.') {
     return
 }
 
 try {
-    $payload = ConvertFrom-CodexPythonPurityPayload -PayloadRaw ([Console]::In.ReadToEnd())
-    foreach ($toolInput in @(ConvertTo-CodexPythonPurityInput -Payload $payload)) {
+    # Transport and mapping come from the shared module. A well-formed payload
+    # that maps to no file edit produces an empty record set, so the loop body
+    # never runs and the hook allows silently.
+    $payload = ConvertFrom-CodexPreToolUsePayload -PayloadRaw ([Console]::In.ReadToEnd()) -HookName 'check-python-test-purity'
+    foreach ($toolInput in @(ConvertTo-CodexFileEditInput -Payload $payload)) {
         $toolInputRaw = $toolInput | ConvertTo-Json -Compress -Depth 20
         $decision = Invoke-PythonTestPurityDecision -ToolInputRaw $toolInputRaw
         if ($null -ne $decision -and $decision.hookSpecificOutput.permissionDecision -eq 'deny') {