@danmoisan/drm-copilot-mcp 1.0.7 → 1.0.9

package/out/mcp-server.js

@@ -16208,6 +16208,10 @@ var REPO_AUTOMATION_TOOL_DEFINITIONS = [
         require_complete: {
           type: "boolean",
           description: "When true and artifact_type is 'orchestrator-state', require all phases to be complete."
+        },
+        require_model_routing: {
+          type: "boolean",
+          description: "When true and artifact_type is 'orchestrator-state', require a model_routing_receipts entry per delegated agent once a delegation is recorded. The TypeScript side performs the existence check only; the Python validator is authoritative for full per-receipt correctness."
         }
       },
       required: ["artifact_type", "artifact_path"],
@@ -16597,6 +16601,7 @@ function resolveValidateOrchestrationArtifactsToolInput(rawInput, fallbackWorksp
     );
   }
   const requireComplete = args["require_complete"];
+  const requireModelRouting = args["require_model_routing"];
   return {
     workspaceRoot: normalizeWorkspaceRoot(
       args["workspace_root"],
@@ -16604,7 +16609,8 @@ function resolveValidateOrchestrationArtifactsToolInput(rawInput, fallbackWorksp
     ),
     artifactType,
     artifactPath: normalizeRequiredText(args["artifact_path"], "artifact_path"),
-    ...requireComplete === true ? { requireComplete: true } : {}
+    ...requireComplete === true ? { requireComplete: true } : {},
+    ...requireModelRouting === true ? { requireModelRouting: true } : {}
   };
 }
 
@@ -22519,6 +22525,14 @@ var STEP_STATUS_KEYS = [
   "step9_status",
   "step10_status"
 ];
+var DELEGATING_AGENTS = /* @__PURE__ */ new Set([
+  "atomic-planner",
+  "atomic-executor",
+  "feature-review",
+  "task-researcher",
+  "prd-feature",
+  "pr-author"
+]);
 function isObject7(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
@@ -22582,6 +22596,53 @@ function resolveRoutingMatrix(options) {
   }
   return void 0;
 }
+function delegatedAgents(stateMap) {
+  const agents = /* @__PURE__ */ new Set();
+  const receipts = stateMap["delegation_receipts"];
+  if (Array.isArray(receipts)) {
+    receipts.forEach((receipt) => {
+      if (!isObject7(receipt)) {
+        return;
+      }
+      const agentName = receipt["agent_name"];
+      if (typeof agentName === "string" && agentName.trim() !== "") {
+        agents.add(agentName);
+      }
+    });
+  }
+  const nextStep = stateMap["next_step"];
+  if (typeof nextStep === "string" && DELEGATING_AGENTS.has(nextStep)) {
+    agents.add(nextStep);
+  }
+  return agents;
+}
+function validateModelRoutingExistence(stateMap) {
+  const errors = [];
+  const delegated = delegatedAgents(stateMap);
+  if (delegated.size === 0) {
+    return errors;
+  }
+  const receiptAgents2 = /* @__PURE__ */ new Set();
+  const receipts = stateMap["model_routing_receipts"];
+  if (Array.isArray(receipts)) {
+    receipts.forEach((receipt) => {
+      if (!isObject7(receipt)) {
+        return;
+      }
+      const agent = receipt["agent"];
+      if (typeof agent === "string" && agent.trim() !== "") {
+        receiptAgents2.add(agent);
+      }
+    });
+  }
+  const missing = [...delegated].filter((a) => !receiptAgents2.has(a)).sort();
+  for (const agent of missing) {
+    errors.push(
+      `Checkpoint model_routing_receipts is missing a receipt for delegated agent: ${agent}.`
+    );
+  }
+  return errors;
+}
 function validateOrchestratorStateText(text, options = {}) {
   const errors = [];
   let state;
@@ -22655,6 +22716,9 @@ function validateOrchestratorStateText(text, options = {}) {
       })
     );
   }
+  if (options.requireModelRouting === true) {
+    errors.push(...validateModelRoutingExistence(stateMap));
+  }
   return errors;
 }
 
@@ -23029,6 +23093,7 @@ function validateArtifact(input) {
     case "orchestrator-state": {
       const options = {
         ...input.requireComplete === void 0 ? {} : { requireComplete: input.requireComplete },
+        ...input.requireModelRouting === void 0 ? {} : { requireModelRouting: input.requireModelRouting },
         ...input.fs === void 0 ? {} : { fs: input.fs },
         ...input.root === void 0 ? {} : { root: input.root },
         ...input.routingMatrix === void 0 ? {} : { routingMatrix: input.routingMatrix }
@@ -23056,6 +23121,7 @@ function validateOrchestrationServiceCall(input) {
     artifactType: input.artifactType,
     text,
     ...input.requireComplete === void 0 ? {} : { requireComplete: input.requireComplete },
+    ...input.requireModelRouting === void 0 ? {} : { requireModelRouting: input.requireModelRouting },
     fs: input.fileSystem,
     root: input.workspaceRoot
   });
@@ -23072,6 +23138,18 @@ ${errors.join("\n")}`
   };
 }
 
+// ../../extensions/drm-copilot/src/lib/validate/build-validate-orchestration-service-call-input.ts
+function buildValidateOrchestrationServiceCallInput(fileSystem, input) {
+  return {
+    fileSystem,
+    workspaceRoot: input.workspaceRoot,
+    artifactType: input.artifactType,
+    artifactPath: input.artifactPath,
+    ...input.requireComplete === void 0 ? {} : { requireComplete: input.requireComplete },
+    ...input.requireModelRouting === void 0 ? {} : { requireModelRouting: input.requireModelRouting }
+  };
+}
+
 // ../../extensions/drm-copilot/src/lib/new-potential-bug-entry.ts
 var fs5 = __toESM(require("node:fs"));
 var nodePath4 = __toESM(require("node:path"));
@@ -27713,13 +27791,9 @@ var DefaultRepoAutomationService = class {
     });
   }
   async validateOrchestrationArtifacts(input) {
-    return validateOrchestrationServiceCall({
-      fileSystem: this.fileSystem,
-      workspaceRoot: input.workspaceRoot,
-      artifactType: input.artifactType,
-      artifactPath: input.artifactPath,
-      ...input.requireComplete === void 0 ? {} : { requireComplete: input.requireComplete }
-    });
+    return validateOrchestrationServiceCall(
+      buildValidateOrchestrationServiceCallInput(this.fileSystem, input)
+    );
   }
   async executeScript(options) {
     const execution = await executeBundledScriptFromExtensionRoot(this.output, {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@danmoisan/drm-copilot-mcp",
-  "version": "1.0.7",
+  "version": "1.0.9",
   "description": "Stdio MCP server exposing drm-copilot repo-automation tools.",
   "license": "MIT",
   "type": "commonjs",

package/resources/claude-customizations/.claude/agents/atomic-executor.md

@@ -1,5 +1,6 @@
 ---
 name: atomic-executor
+model: opus
 description: Plan execution agent that runs approved atomic plans task-by-task with explicit toolchain commands for Python, TypeScript, PowerShell, and C# quality gates.
 tools:
   - Read

package/resources/claude-customizations/.claude/agents/atomic-planner.md

@@ -1,5 +1,6 @@
 ---
 name: atomic-planner
+model: opus
 description: Planning-only agent that generates deterministic phased implementation plans with atomic P#-T# checkbox tasks, writing output to docs/ and artifacts/ paths only.
 tools:
   - Read

package/resources/claude-customizations/.claude/agents/csharp-typed-engineer.md

@@ -1,5 +1,6 @@
 ---
 name: csharp-typed-engineer
+model: sonnet
 description: Project-scoped worker that implements and verifies C# changes within typed repository boundaries. Applies the CSharpier -> .NET Analyzers -> Nullable Analysis -> xUnit toolchain, the 1-3 production-file small-path budget, and zero-regression quality gates.
 tools:
   - Read

package/resources/claude-customizations/.claude/agents/epic-orchestrator.md

@@ -1,5 +1,6 @@
 ---
 name: epic-orchestrator
+model: opus
 description: Deterministic epic-scale orchestrator that schedules a dependency graph of child features across parallel, isolated git worktrees, fans results back into a shared integration branch, and drives the final integration-to-main PR. Distinct from orchestrator; only this agent is authorized to delegate to Agent(orchestrator).
 tools:
   - "Agent(orchestrator)"

package/resources/claude-customizations/.claude/agents/epic-review.md

@@ -1,5 +1,6 @@
 ---
 name: epic-review
+model: opus
 description: Project-scoped worker that reviews epic folders and writes epic-audit artifacts.
 tools:
   - Read

package/resources/claude-customizations/.claude/agents/feature-review.md

@@ -1,5 +1,6 @@
 ---
 name: feature-review
+model: opus
 description: Feature branch review specialist that produces policy-audit, code-review, and feature-audit artifacts restricted to docs/features/active/ write path.
 tools:
   - Read

package/resources/claude-customizations/.claude/agents/orchestrator.md

@@ -1,5 +1,6 @@
 ---
 name: orchestrator
+model: opus
 description: Deterministic repository orchestrator that estimates change budget, selects small or large workflow path, delegates to specialist subagents, persists checkpoint state, and enforces completion gates proactively.
 tools:
   - "Agent(atomic-planner,atomic-executor,feature-review,task-researcher,prd-feature,staged-review,epic-review,status-updater,pr-author,commit-message,human-exception-runbook,python-typed-engineer,powershell-typed-engineer,csharp-typed-engineer,typescript-engineer)"
@@ -56,6 +57,18 @@ On every invocation:
 4. If a valid checkpoint exists with a matching objective, resume from the recorded `next_step`.
 5. If no checkpoint exists or the objective is new, begin from change-budget estimation.
 
+### Model-choice reconciliation on resume
+
+When the resumed `next_step` is a delegating step, repair a missing model choice deterministically before delegating (this mirrors `## Checkpoint Handling` in `.claude/skills/orchestrate/SKILL.md`):
+
+a. Run the orchestrator-state validator with `--require-model-routing` before the first delegation and record a `model_routing_preflight` block `{ status ("pass"|"fail"), checked_at, validator_command, output_summary }`.
+b. Recompute the upcoming phase's floor with `compute_complexity_floor(signals_present)` (no reimplementation).
+c. Record a `complexity_assessments[]` entry `{ phase, band, floor, signals_present[], rationale, assessed_at }` with `floor` equal to the recomputed value and `band >= floor`.
+d. Resolve the model with `resolve_delegation_model(agent, complexity_band, fable_policy)` and record a `model_routing_receipts[]` entry `{ agent, phase, complexity_band, fable_policy, table_model, clamped_from | null, model }`.
+e. Persist the checkpoint, then delegate with `model` equal to the receipt's `model`.
+
+The orchestrator MUST NOT delegate at a delegating `next_step` while `model_routing_preflight` status is `fail`; it repairs the missing choice (steps b-e) and re-preflights until the status is `pass`.
+
 ## Change Budget Routing
 
 The first action is always to estimate the change budget by identifying likely affected production files and tests:

package/resources/claude-customizations/.claude/agents/powershell-typed-engineer.md

@@ -1,5 +1,6 @@
 ---
 name: powershell-typed-engineer
+model: sonnet
 description: Project-scoped worker that implements and verifies PowerShell changes within typed repository boundaries. Applies PoshQC format -> PSScriptAnalyzer -> Pester toolchain, the 1-2 production-file direct-mode budget, the 3-production + 3-test per-batch cap, and zero-regression quality gates.
 tools:
   - Read

package/resources/claude-customizations/.claude/agents/prd-feature.md

@@ -1,5 +1,6 @@
 ---
 name: prd-feature
+model: opus
 description: Project-scoped worker that produces feature-document outputs from issue and research context.
 tools:
   - Read

package/resources/claude-customizations/.claude/agents/python-typed-engineer.md

@@ -1,5 +1,6 @@
 ---
 name: python-typed-engineer
+model: sonnet
 description: Project-scoped worker that implements and verifies Python changes within typed repository boundaries. Applies the Black -> Ruff -> Pyright -> Pytest toolchain, the 3-production + 3-test per-batch budget, and zero-regression quality gates.
 tools:
   - Read

package/resources/claude-customizations/.claude/agents/staged-review.md

@@ -1,5 +1,6 @@
 ---
 name: staged-review
+model: opus
 description: Project-scoped worker that reviews staged diffs and writes staged-review artifacts.
 tools:
   - Read

package/resources/claude-customizations/.claude/agents/status-updater.md

@@ -1,5 +1,6 @@
 ---
 name: status-updater
+model: haiku
 description: Project-scoped worker that reconciles plan and issue status and writes status-sync artifacts.
 tools:
   - Read

package/resources/claude-customizations/.claude/agents/typescript-engineer.md

@@ -1,5 +1,6 @@
 ---
 name: typescript-engineer
+model: sonnet
 description: Project-scoped worker that implements and verifies TypeScript changes within typed repository boundaries.
 tools:
   - Read

package/resources/claude-customizations/.claude/hooks/enforce-model-routing-receipt.ps1

@@ -0,0 +1,182 @@
+<#
+.SYNOPSIS
+    Pre-tool-use hook that blocks a delegation to a gated subagent when the
+    orchestrator checkpoint records no model-routing receipt for that agent.
+
+.DESCRIPTION
+    Invoked by the Claude Code PreToolUse hook on the Agent (Task) tool. Reads
+    tool input JSON from the CLAUDE_TOOL_INPUT environment variable and the
+    orchestrator checkpoint from artifacts/orchestration/orchestrator-state.json.
+
+    The hook enforces presence only: it cannot read the delegate's chosen
+    `model` (no `model` field is exposed in the tool input), so it verifies that
+    a `model_routing_receipts[]` entry already exists for the target
+    `subagent_type`. Correctness of the recorded model stays with the
+    authoritative Python validator.
+
+    Gated subagent types are the Agent-tool delegates that participate in model
+    selection: atomic-planner, atomic-executor, feature-review, task-researcher,
+    prd-feature, pr-author. The `orchestrator` type is deliberately excluded: it
+    is the calling agent, not a subagent delegated via the Agent tool, so it is
+    never a receipt-gated `subagent_type`.
+
+    Allow-through (graceful allow) applies to a non-delegating `subagent_type`,
+    empty or absent tool input, and malformed tool-input JSON.
+
+    The checkpoint read goes through Get-ModelRoutingCheckpoint so tests can
+    inject a synthetic checkpoint without touching disk.
+
+.NOTES
+    Compatible with PowerShell 7+. Read-only presence-gating deterrent.
+#>
+[CmdletBinding()]
+param()
+
+function Get-ModelRoutingCheckpoint {
+    <#
+    .SYNOPSIS
+        Returns the parsed orchestrator checkpoint object, or $null when the
+        file is missing or not valid JSON. Tests mock this seam.
+    #>
+    [CmdletBinding()]
+    [OutputType([object])]
+    param(
+        [string] $CheckpointPath = 'artifacts/orchestration/orchestrator-state.json'
+    )
+
+    if (-not (Test-Path -LiteralPath $CheckpointPath -PathType Leaf)) {
+        return $null
+    }
+
+    try {
+        $raw = Get-Content -LiteralPath $CheckpointPath -Raw -ErrorAction Stop
+        return $raw | ConvertFrom-Json -ErrorAction Stop
+    }
+    catch {
+        return $null
+    }
+}
+
+function Get-ModelRoutingGatedAgent {
+    <#
+    .SYNOPSIS
+        Returns the set of subagent types that are receipt-gated: the Agent-tool
+        delegates that participate in model selection. `orchestrator` is
+        excluded because it is the caller, not a delegated subagent.
+    #>
+    [CmdletBinding()]
+    [OutputType([string[]])]
+    param()
+
+    return [string[]] @(
+        'atomic-planner',
+        'atomic-executor',
+        'feature-review',
+        'task-researcher',
+        'prd-feature',
+        'pr-author'
+    )
+}
+
+function Test-ModelRoutingReceiptPresent {
+    <#
+    .SYNOPSIS
+        Returns $true when the checkpoint carries a model_routing_receipts entry
+        whose agent equals the target subagent type.
+    #>
+    [CmdletBinding()]
+    [OutputType([bool])]
+    param(
+        [Parameter(Mandatory)]
+        [AllowNull()]
+        $Checkpoint,
+
+        [Parameter(Mandatory)]
+        [string] $Subagent
+    )
+
+    if ($null -eq $Checkpoint) {
+        return $false
+    }
+    if ($Checkpoint.PSObject.Properties.Name -notcontains 'model_routing_receipts') {
+        return $false
+    }
+
+    # Scan every receipt for one whose agent matches the delegated subagent type.
+    foreach ($receipt in @($Checkpoint.model_routing_receipts)) {
+        if ($null -eq $receipt) {
+            continue
+        }
+        if ($receipt.PSObject.Properties.Name -contains 'agent' -and
+            [string]$receipt.agent -eq $Subagent) {
+            return $true
+        }
+    }
+    return $false
+}
+
+function Invoke-ModelRoutingReceiptDecision {
+    <#
+    .SYNOPSIS
+        Parses CLAUDE_TOOL_INPUT and returns an allow-or-block decision object.
+    #>
+    [CmdletBinding()]
+    [OutputType([System.Collections.Specialized.OrderedDictionary])]
+    param(
+        [string] $ToolInputRaw
+    )
+
+    $allow = [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
+
+    # Empty or absent tool input is not a delegation this hook can gate.
+    if (-not $ToolInputRaw) {
+        return $allow
+    }
+
+    # Malformed tool-input JSON is allowed through gracefully; this hook is a
+    # deterrent, not the authoritative validator.
+    try {
+        $toolInput = $ToolInputRaw | ConvertFrom-Json -ErrorAction Stop
+    }
+    catch {
+        return $allow
+    }
+
+    $subagent = [string]$toolInput.subagent_type
+
+    # Only the gated Agent-tool delegates are receipt-checked; any other
+    # subagent_type (including orchestrator) passes through.
+    if (-not $subagent -or ((Get-ModelRoutingGatedAgent) -notcontains $subagent)) {
+        return $allow
+    }
+
+    $checkpoint = Get-ModelRoutingCheckpoint
+    if (Test-ModelRoutingReceiptPresent -Checkpoint $checkpoint -Subagent $subagent) {
+        return $allow
+    }
+
+    return [ordered]@{
+        hookSpecificOutput = [ordered]@{
+            hookEventName            = 'PreToolUse'
+            permissionDecision       = 'deny'
+            permissionDecisionReason = "MODEL_ROUTING_RECEIPT_BLOCKED: cannot delegate to '$subagent' before a model_routing_receipts entry for it is recorded in the orchestrator checkpoint. Perform Model Selection (record the complexity assessment and routing receipt) before delegating."
+        }
+    }
+}
+
+# Guard allows dot-sourcing in tests without executing the entrypoint.
+if ($MyInvocation.InvocationName -eq '.') {
+    return
+}
+
+try {
+    $decision = Invoke-ModelRoutingReceiptDecision -ToolInputRaw $env:CLAUDE_TOOL_INPUT
+}
+catch {
+    Write-Error $_
+    exit 1
+}
+
+$decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
+
+exit 0

package/resources/claude-customizations/.claude/hooks/validate-orchestrator-output.ps1

@@ -180,7 +180,7 @@ function Invoke-RoutingContractValidation {
         [scriptblock] $Invoker = {
             param($Path, $Type)
             $output = & python -m scripts.dev_tools.validate_orchestration_artifacts `
-                $Type $Path --require-complete 2>&1
+                $Type $Path --require-complete --require-model-routing 2>&1
             [pscustomobject]@{
                 ExitCode = $LASTEXITCODE
                 Output   = ($output | Out-String)
@@ -293,6 +293,14 @@ function Invoke-OrchestratorOutputValidation {
     }
     $routingResult = Invoke-RoutingContractValidation @routingArgs
     if ($routingResult.HasErrors) {
+        # One subprocess call now covers both --require-complete and
+        # --require-model-routing. Surface a model-routing gate failure under its
+        # own block reason (its errors name model_routing_receipts or
+        # complexity_assessments); otherwise fall back to the routing-contract
+        # block reason for a generic completion/routing failure.
+        if ($routingResult.ErrorText -match 'model_routing_receipts|complexity_assessments') {
+            return @{ Ok = $false; Message = "MODEL_ROUTING_BLOCKED: $($routingResult.ErrorText)" }
+        }
         return @{ Ok = $false; Message = "ROUTING_CONTRACT_BLOCKED: $($routingResult.ErrorText)" }
     }