@danmoisan/drm-copilot-mcp 1.0.27 → 1.1.0

package/out/mcp-server.js

@@ -19004,7 +19004,6 @@ var EXCLUDED_DIR_NAMES = /* @__PURE__ */ new Set([
 ]);
 var SCAN_DEPTH_LIMIT = 3;
 var PAYLOAD_MODULES = {
-  "claude-runtime": [".claude/**"],
   config: ["config/**"]
 };
 var FORBIDDEN_GLOBS = [

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danmoisan/drm-copilot-mcp",
-  "version": "1.0.27",
+  "version": "1.1.0",
   "description": "Stdio MCP server exposing drm-copilot repo-automation tools.",
   "license": "MIT",
   "type": "commonjs",

package/resources/claude-customizations/.claude/hooks/check-powershell-test-purity.ps1

@@ -5,10 +5,10 @@
 .DESCRIPTION
     This script is invoked by the Claude Code PreToolUse hook before any Write or Edit
     operation on a file path matching a Pester test file (*.Tests.ps1 or tests/**/*.ps1).
-    It reads the tool input from the CLAUDE_TOOL_INPUT environment variable (JSON with
-    'file_path' and a content field: 'content' for Write, 'new_string' for Edit) and
-    rejects the operation when the proposed content introduces forbidden runtime
-    dependencies or violates the mocking rules.
+    It acquires the hook payload through the shared reader and reads the envelope's
+    nested tool_input ('file_path' plus a content field: 'content' for Write,
+    'new_string' for Edit), then rejects the operation when the proposed content
+    introduces forbidden runtime dependencies or violates the mocking rules.
 
     Forbidden patterns in Pester unit tests include:
       - direct external-executable mocking (Mock git, Mock gh, Mock actionlint, etc.)
@@ -32,6 +32,8 @@
 [CmdletBinding()]
 param()
 
+
+Import-Module (Join-Path $PSScriptRoot '../lib/hook-payload/HookPayload.psm1') -Force
 function Get-PowerShellTestPurityBlockDecision {
     [CmdletBinding()]
     [OutputType([System.Collections.Specialized.OrderedDictionary])]
@@ -68,18 +70,15 @@ function Invoke-PowerShellTestPurityDecision {
         [string] $ToolInputRaw
     )
 
-    if (-not $ToolInputRaw) {
-        return $null
-    }
-
-    try {
-        $toolInput = $ToolInputRaw | ConvertFrom-Json -ErrorAction Stop
-    }
-    catch {
-        return $null
+    $payload = Resolve-ClaudeHookToolInput -Raw $ToolInputRaw
+    if (-not $payload.IsValid) {
+        return Get-PowerShellTestPurityBlockDecision -Reason (
+            'PowerShell unit test purity hook received an unreadable PreToolUse envelope: ' +
+            (Get-ClaudeHookPayloadAnomalyReason -Anomaly $payload.Anomaly) +
+            '. The gate fails closed on an envelope it cannot read.')
     }
 
-    $filePath = $toolInput.file_path
+    $filePath = Get-ClaudeHookToolInputString -ToolInput $payload.Value -Name 'file_path'
     if (-not $filePath) {
         return $null
     }
@@ -88,12 +87,9 @@ function Invoke-PowerShellTestPurityDecision {
         return $null
     }
 
-    $content = $null
-    if ($null -ne $toolInput.content) {
-        $content = [string]$toolInput.content
-    }
-    elseif ($null -ne $toolInput.new_string) {
-        $content = [string]$toolInput.new_string
+    $content = Get-ClaudeHookToolInputString -ToolInput $payload.Value -Name 'content'
+    if (-not $content) {
+        $content = Get-ClaudeHookToolInputString -ToolInput $payload.Value -Name 'new_string'
     }
 
     if (-not $content) {
@@ -141,7 +137,7 @@ if ($MyInvocation.InvocationName -eq '.') {
     return
 }
 
-$decision = Invoke-PowerShellTestPurityDecision -ToolInputRaw $env:CLAUDE_TOOL_INPUT
+$decision = Invoke-PowerShellTestPurityDecision -ToolInputRaw (Read-ClaudeHookRawPayload)
 if ($null -ne $decision -and $decision.hookSpecificOutput.permissionDecision -eq 'deny') {
     $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
 }

package/resources/claude-customizations/.claude/hooks/check-python-test-purity.ps1

@@ -4,10 +4,10 @@
 
 .DESCRIPTION
     This script is invoked by the Claude Code PreToolUse hook before any Write or Edit
-    operation on a file path matching tests/**/*.py. It reads the tool input from the
-    CLAUDE_TOOL_INPUT environment variable (JSON with 'file_path' and a content field:
-    'content' for Write, 'new_string' for Edit) and rejects the operation when the
-    proposed content introduces forbidden runtime dependencies.
+    operation on a file path matching tests/**/*.py. It acquires the hook payload
+    through the shared reader and reads the envelope's nested tool_input ('file_path'
+    plus a content field: 'content' for Write, 'new_string' for Edit), then rejects the
+    operation when the proposed content introduces forbidden runtime dependencies.
 
     Forbidden patterns in unit tests include:
       - temporary filesystem usage (tempfile, NamedTemporaryFile, TemporaryDirectory,
@@ -29,6 +29,8 @@
 [CmdletBinding()]
 param()
 
+
+Import-Module (Join-Path $PSScriptRoot '../lib/hook-payload/HookPayload.psm1') -Force
 function Get-PythonTestPurityBlockDecision {
     [CmdletBinding()]
     [OutputType([System.Collections.Specialized.OrderedDictionary])]
@@ -65,17 +67,15 @@ function Invoke-PythonTestPurityDecision {
         [string] $ToolInputRaw
     )
 
-    if (-not $ToolInputRaw) {
-        return $null
+    $payload = Resolve-ClaudeHookToolInput -Raw $ToolInputRaw
+    if (-not $payload.IsValid) {
+        return Get-PythonTestPurityBlockDecision -Reason (
+            'Python unit test purity hook received an unreadable PreToolUse envelope: ' +
+            (Get-ClaudeHookPayloadAnomalyReason -Anomaly $payload.Anomaly) +
+            '. The gate fails closed on an envelope it cannot read.')
     }
 
-    try {
-        $toolInput = $ToolInputRaw | ConvertFrom-Json -ErrorAction Stop
-    } catch {
-        return Get-PythonTestPurityBlockDecision -Reason 'Python unit test purity hook received malformed JSON in CLAUDE_TOOL_INPUT.'
-    }
-
-    $filePath = $toolInput.file_path
+    $filePath = Get-ClaudeHookToolInputString -ToolInput $payload.Value -Name 'file_path'
     if (-not $filePath) {
         return $null
     }
@@ -84,11 +84,9 @@ function Invoke-PythonTestPurityDecision {
         return $null
     }
 
-    $content = $null
-    if ($null -ne $toolInput.content) {
-        $content = [string]$toolInput.content
-    } elseif ($null -ne $toolInput.new_string) {
-        $content = [string]$toolInput.new_string
+    $content = Get-ClaudeHookToolInputString -ToolInput $payload.Value -Name 'content'
+    if (-not $content) {
+        $content = Get-ClaudeHookToolInputString -ToolInput $payload.Value -Name 'new_string'
     }
 
     if (-not $content) {
@@ -141,7 +139,7 @@ if ($MyInvocation.InvocationName -eq '.') {
     return
 }
 
-$decision = Invoke-PythonTestPurityDecision -ToolInputRaw $env:CLAUDE_TOOL_INPUT
+$decision = Invoke-PythonTestPurityDecision -ToolInputRaw (Read-ClaudeHookRawPayload)
 if ($null -ne $decision -and $decision.hookSpecificOutput.permissionDecision -eq 'deny') {
     $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
 }

package/resources/claude-customizations/.claude/hooks/enforce-checkpoint-monotonic.ps1

@@ -43,6 +43,8 @@
 [CmdletBinding()]
 param()
 
+
+Import-Module (Join-Path $PSScriptRoot '../lib/hook-payload/HookPayload.psm1') -Force
 $script:CanonicalStepPrefixes = @(
     'S0_startup_checks',
     'S1_change_budget_estimation',
@@ -197,7 +199,7 @@ function Test-IsCheckpointPath {
 function Invoke-CheckpointMonotonicDecision {
     <#
     .SYNOPSIS
-        Parses CLAUDE_TOOL_INPUT and returns an allow-or-block decision.
+        Parses the PreToolUse envelope and returns an allow-or-block decision.
     #>
     [CmdletBinding()]
     [OutputType([System.Collections.Specialized.OrderedDictionary])]
@@ -205,18 +207,20 @@ function Invoke-CheckpointMonotonicDecision {
         [string] $ToolInputRaw
     )
 
-    if (-not $ToolInputRaw) {
-        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
-    }
-
-    try {
-        $toolInput = $ToolInputRaw | ConvertFrom-Json -ErrorAction Stop
-    }
-    catch {
-        throw "enforce-checkpoint-monotonic hook received malformed JSON in CLAUDE_TOOL_INPUT: $_"
+    $envelope = Resolve-ClaudeHookToolInput -Raw $ToolInputRaw
+    if (-not $envelope.IsValid) {
+        return [ordered]@{
+            hookSpecificOutput = [ordered]@{
+                hookEventName            = 'PreToolUse'
+                permissionDecision       = 'deny'
+                permissionDecisionReason = 'CHECKPOINT_MONOTONIC_BLOCKED: payload anomaly - ' +
+                (Get-ClaudeHookPayloadAnomalyReason -Anomaly $envelope.Anomaly) +
+                '. The gate fails closed on an envelope it cannot read.'
+            }
+        }
     }
 
-    $filePath = $toolInput.file_path
+    $filePath = Get-ClaudeHookToolInputString -ToolInput $envelope.Value -Name 'file_path'
     if (-not $filePath) {
         return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
     }
@@ -228,7 +232,7 @@ function Invoke-CheckpointMonotonicDecision {
 
     # Write tool: validate the content payload. Edit tool: partial new_string is
     # not reliable without the full target file content, so allow.
-    $content = $toolInput.content
+    $content = Get-ClaudeHookToolInputString -ToolInput $envelope.Value -Name 'content'
     if (-not $content) {
         return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
     }
@@ -298,13 +302,7 @@ if ($MyInvocation.InvocationName -eq '.') {
     return
 }
 
-try {
-    $decision = Invoke-CheckpointMonotonicDecision -ToolInputRaw $env:CLAUDE_TOOL_INPUT
-}
-catch {
-    Write-Error $_
-    exit 1
-}
+$decision = Invoke-CheckpointMonotonicDecision -ToolInputRaw (Read-ClaudeHookRawPayload)
 
 $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
 

package/resources/claude-customizations/.claude/hooks/enforce-completion-consistency.ps1

@@ -41,6 +41,8 @@
 [CmdletBinding()]
 param()
 
+
+Import-Module (Join-Path $PSScriptRoot '../lib/hook-payload/HookPayload.psm1') -Force
 # Dot-source the shared validation helpers. Guarded so a missing file produces a
 # clear error and so dot-sourcing this hook in tests loads the helpers too.
 $script:CompletionHelpersPath = Join-Path $PSScriptRoot 'enforce-completion-helpers.ps1'
@@ -314,7 +316,7 @@ function Resolve-EditedCheckpointContent {
 function Invoke-CompletionConsistencyDecision {
     <#
     .SYNOPSIS
-        Parses CLAUDE_TOOL_INPUT and returns an allow-or-block decision based on
+        Parses the PreToolUse envelope and returns an allow-or-block decision based on
         completion-evidence consistency.
     #>
     [CmdletBinding()]
@@ -332,18 +334,21 @@ function Invoke-CompletionConsistencyDecision {
         [scriptblock] $RoutingMatrixReader
     )
 
-    if (-not $ToolInputRaw) {
-        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
-    }
-
-    try {
-        $toolInput = $ToolInputRaw | ConvertFrom-Json -ErrorAction Stop
-    }
-    catch {
-        throw "enforce-completion-consistency hook received malformed JSON in CLAUDE_TOOL_INPUT: $_"
+    $envelope = Resolve-ClaudeHookToolInput -Raw $ToolInputRaw
+    if (-not $envelope.IsValid) {
+        return [ordered]@{
+            hookSpecificOutput = [ordered]@{
+                hookEventName            = 'PreToolUse'
+                permissionDecision       = 'deny'
+                permissionDecisionReason = 'COMPLETION_CONSISTENCY_BLOCKED: payload anomaly - ' +
+                (Get-ClaudeHookPayloadAnomalyReason -Anomaly $envelope.Anomaly) +
+                '. The gate fails closed on an envelope it cannot read.'
+            }
+        }
     }
 
-    $filePath = $toolInput.file_path
+    $toolInput = $envelope.Value
+    $filePath = Get-ClaudeHookToolInputString -ToolInput $toolInput -Name 'file_path'
     if (-not $filePath) {
         return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
     }
@@ -356,7 +361,7 @@ function Invoke-CompletionConsistencyDecision {
     # Write tool: validate the content payload directly. Edit tool: no content is
     # supplied, so read the on-disk checkpoint through the injectable seam and
     # apply the old_string -> new_string patch in memory (read-then-validate).
-    $content = $toolInput.content
+    $content = Get-ClaudeHookToolInputString -ToolInput $toolInput -Name 'content'
     if (-not $content) {
         $content = Resolve-EditedCheckpointContent -ToolInput $toolInput -CheckpointReader $CheckpointReader
         if (-not $content) {
@@ -403,13 +408,7 @@ if ($MyInvocation.InvocationName -eq '.') {
     return
 }
 
-try {
-    $decision = Invoke-CompletionConsistencyDecision -ToolInputRaw $env:CLAUDE_TOOL_INPUT
-}
-catch {
-    Write-Error $_
-    exit 1
-}
+$decision = Invoke-CompletionConsistencyDecision -ToolInputRaw (Read-ClaudeHookRawPayload)
 
 $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
 

package/resources/claude-customizations/.claude/hooks/enforce-discovery-artifact-gate.ps1

@@ -5,7 +5,7 @@
 
 .DESCRIPTION
     Invoked by the Claude Code PreToolUse hook on Write or Edit operations
-    (matcher "Write|Edit"). The hook reads $env:CLAUDE_TOOL_INPUT JSON
+    (matcher "Write|Edit"). The hook reads the PreToolUse envelope JSON
     containing file_path, and either content (Write) or old_string/new_string
     (Edit).
 
@@ -33,6 +33,8 @@
 [CmdletBinding()]
 param()
 
+
+Import-Module (Join-Path $PSScriptRoot '../lib/hook-payload/HookPayload.psm1') -Force
 function Invoke-DiscoveryValidatorExe {
     <#
     .SYNOPSIS
@@ -151,7 +153,7 @@ function Get-RequiredDiscoveryArtifactDeclaration {
 function Invoke-DiscoveryArtifactGateDecision {
     <#
     .SYNOPSIS
-        Parses CLAUDE_TOOL_INPUT and returns an allow-or-deny decision for a
+        Parses the PreToolUse envelope and returns an allow-or-deny decision for a
         discovery-artifact completion gate.
     #>
     [CmdletBinding()]
@@ -163,18 +165,21 @@ function Invoke-DiscoveryArtifactGateDecision {
         [scriptblock] $RequiredArtifactReader = { Get-RequiredDiscoveryArtifactDeclaration }
     )
 
-    if (-not $ToolInputRaw) {
-        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
-    }
-
-    try {
-        $toolInput = $ToolInputRaw | ConvertFrom-Json -ErrorAction Stop
-    }
-    catch {
-        throw "enforce-discovery-artifact-gate hook received malformed JSON in CLAUDE_TOOL_INPUT: $_"
+    $envelope = Resolve-ClaudeHookToolInput -Raw $ToolInputRaw
+    if (-not $envelope.IsValid) {
+        return [ordered]@{
+            hookSpecificOutput = [ordered]@{
+                hookEventName            = 'PreToolUse'
+                permissionDecision       = 'deny'
+                permissionDecisionReason = 'DISCOVERY_ARTIFACT_GATE_BLOCKED: payload anomaly - ' +
+                (Get-ClaudeHookPayloadAnomalyReason -Anomaly $envelope.Anomaly) +
+                '. The gate fails closed on an envelope it cannot read.'
+            }
+        }
     }
 
-    $filePath = $toolInput.file_path
+    $toolInput = $envelope.Value
+    $filePath = Get-ClaudeHookToolInputString -ToolInput $toolInput -Name 'file_path'
     if (-not $filePath) {
         return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
     }
@@ -220,13 +225,7 @@ if ($MyInvocation.InvocationName -eq '.') {
     return
 }
 
-try {
-    $decision = Invoke-DiscoveryArtifactGateDecision -ToolInputRaw $env:CLAUDE_TOOL_INPUT
-}
-catch {
-    Write-Error $_
-    exit 1
-}
+$decision = Invoke-DiscoveryArtifactGateDecision -ToolInputRaw (Read-ClaudeHookRawPayload)
 
 $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
 

package/resources/claude-customizations/.claude/hooks/enforce-epic-invocation-origin.ps1

@@ -10,16 +10,22 @@
     subagent_type is 'epic-planner', 'epic-orchestrator', 'parallel-planner',
     or 'parallel-orchestrator'.
 
+    The payload is acquired through the shared reader
+    (.claude/lib/hook-payload/HookPayload.psm1: stdin first, then the two
+    environment-variable fallbacks).
+
     Caller identity resolution:
-      - The full PreToolUse payload (CLAUDE_HOOK_INPUT) carries a top-level
-        'agent_type' field only when the tool call is made from inside a
-        subagent context. A main-thread call carries no 'agent_type'.
-      - The Agent tool input (CLAUDE_TOOL_INPUT, or the payload's 'tool_input'
-        object) carries the delegation target 'subagent_type'.
+      - The PreToolUse envelope carries a top-level 'agent_type' field only when
+        the tool call is made from inside a subagent context. A main-thread call
+        carries no 'agent_type'.
+      - The envelope's nested 'tool_input' object carries the delegation target
+        'subagent_type'.
 
     Decision procedure:
-      1. Resolve the target subagent_type from CLAUDE_TOOL_INPUT, falling back
-         to the payload's tool_input object. A non-gated target allows.
+      0. An envelope this hook cannot read at all -- empty on every transport,
+         unparseable, or carrying no usable tool_input -- denies (fail closed).
+      1. Resolve the target subagent_type from the nested tool_input. A non-gated
+         target allows.
       2. Resolve the calling agent_type from the payload. An absent or empty
          agent_type indicates a main-thread invocation, which allows.
       3. Deny when the calling agent_type is exactly 'orchestrator', with the
@@ -37,9 +43,12 @@
 [CmdletBinding()]
 param()
 
+
+Import-Module (Join-Path $PSScriptRoot '../lib/hook-payload/HookPayload.psm1') -Force
 $script:GatedSubagentTypes = @('epic-planner', 'epic-orchestrator', 'parallel-planner', 'parallel-orchestrator')
 $script:ParallelSubagentTypes = @('parallel-planner', 'parallel-orchestrator')
 $script:ProhibitedCallerAgentType = 'orchestrator'
+$script:EmptyPayloadAnomaly = 'EmptyPayload'
 
 function Get-EpicInvocationOriginAllowDecision {
     [CmdletBinding()]
@@ -110,9 +119,9 @@ function Get-EpicInvocationOriginTargetSubagent {
         Resolves the delegation target subagent_type from the tool input,
         falling back to the full payload's tool_input object.
     .PARAMETER ToolInput
-        Parsed CLAUDE_TOOL_INPUT object, or $null when absent.
+        Parsed legacy tool-input object, or $null when absent.
     .PARAMETER HookInput
-        Parsed CLAUDE_HOOK_INPUT object, or $null when absent.
+        Parsed PreToolUse envelope object, or $null when absent.
     .OUTPUTS
         System.String or $null
     #>
@@ -151,7 +160,7 @@ function Get-EpicInvocationOriginCallerAgentType {
         Resolves the calling agent_type from the full hook payload. Returns
         $null for a main-thread invocation (no agent_type field).
     .PARAMETER HookInput
-        Parsed CLAUDE_HOOK_INPUT object, or $null when absent.
+        Parsed PreToolUse envelope object, or $null when absent.
     .OUTPUTS
         System.String or $null
     #>
@@ -180,10 +189,17 @@ function Invoke-EpicInvocationOriginDecision {
     <#
     .SYNOPSIS
         Parses the hook payloads and returns an allow-or-block decision.
+    .DESCRIPTION
+        The caller's agent_type is read off the envelope root and the delegation
+        target's subagent_type off the nested tool_input. An envelope this hook cannot
+        read at all -- empty on every transport, unparseable, or carrying no usable
+        tool_input -- is a fail-closed deny, because an unreadable envelope means the
+        PreToolUse contract drifted (issue #501).
     .PARAMETER HookInputRaw
-        The raw full PreToolUse payload JSON supplied via CLAUDE_HOOK_INPUT.
+        The raw PreToolUse envelope JSON acquired by Read-ClaudeHookRawPayload.
     .PARAMETER ToolInputRaw
-        The raw Agent tool input JSON supplied via CLAUDE_TOOL_INPUT.
+        Optional legacy direct tool-input payload, retained so an undocumented wrapper
+        that supplies the bare tool input keeps working.
     .OUTPUTS
         System.Collections.Specialized.OrderedDictionary
     #>
@@ -199,29 +215,40 @@ function Invoke-EpicInvocationOriginDecision {
         [string] $ToolInputRaw
     )
 
-    # The tool input identifies the delegation target; a non-gated target is
-    # outside this hook's scope, so the hook input is not parsed for it.
-    $toolInput = ConvertFrom-EpicInvocationOriginPayload -RawPayload $ToolInputRaw -PayloadName 'CLAUDE_TOOL_INPUT'
-    $hookInputParsed = $false
+    # The envelope carries both halves: the caller's agent_type at the root and the
+    # delegation target's subagent_type inside tool_input.
+    $anomaly = $script:EmptyPayloadAnomaly
     $hookInput = $null
+    if (-not [string]::IsNullOrWhiteSpace($HookInputRaw)) {
+        $resolved = Resolve-ClaudeHookToolInput -Raw $HookInputRaw
+        $hookInput = $resolved.Envelope
+        $anomaly = if ($resolved.IsValid) { $null } else { $resolved.Anomaly }
+    }
+
+    # Legacy direct tool-input payload, retained for an undocumented wrapper that
+    # supplies the bare tool input rather than the documented envelope.
+    $toolInput = $null
+    if (-not [string]::IsNullOrWhiteSpace($ToolInputRaw)) {
+        $legacy = ConvertFrom-ClaudeHookEnvelope -Raw $ToolInputRaw
+        if ($legacy.IsValid) {
+            $toolInput = $legacy.Value
+            $anomaly = $null
+        }
+    }
 
     $target = Get-EpicInvocationOriginTargetSubagent -ToolInput $toolInput -HookInput $hookInput
-    if (-not $target -and -not [string]::IsNullOrWhiteSpace($HookInputRaw)) {
-        # Fallback: some harness surfaces supply only the full payload, whose
-        # tool_input object carries the target subagent_type.
-        $hookInput = ConvertFrom-EpicInvocationOriginPayload -RawPayload $HookInputRaw -PayloadName 'CLAUDE_HOOK_INPUT'
-        $hookInputParsed = $true
-        $target = Get-EpicInvocationOriginTargetSubagent -ToolInput $toolInput -HookInput $hookInput
+
+    if (-not $target -and $anomaly) {
+        return Get-EpicInvocationOriginBlockDecision -Reason (
+            'EPIC_INVOCATION_ORIGIN_BLOCKED: payload anomaly - ' +
+            (Get-ClaudeHookPayloadAnomalyReason -Anomaly $anomaly) +
+            '. The gate fails closed on an envelope it cannot read.')
     }
 
     if (-not $target -or $script:GatedSubagentTypes -notcontains $target) {
         return Get-EpicInvocationOriginAllowDecision
     }
 
-    if (-not $hookInputParsed) {
-        $hookInput = ConvertFrom-EpicInvocationOriginPayload -RawPayload $HookInputRaw -PayloadName 'CLAUDE_HOOK_INPUT'
-    }
-
     # An absent agent_type marks a main-thread invocation, which is the
     # intended entry point for every gated agent; only an orchestrator-context
     # invocation is prohibited.
@@ -246,12 +273,7 @@ if ($MyInvocation.InvocationName -eq '.') {
     return
 }
 
-try {
-    $decision = Invoke-EpicInvocationOriginDecision -HookInputRaw $env:CLAUDE_HOOK_INPUT -ToolInputRaw $env:CLAUDE_TOOL_INPUT
-} catch {
-    Write-Error $_
-    exit 1
-}
+$decision = Invoke-EpicInvocationOriginDecision -HookInputRaw (Read-ClaudeHookRawPayload)
 
 $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output