@danmoisan/drm-copilot-mcp 1.1.12 → 1.1.14

package/resources/codex-and-agents-customizations/.codex/hooks/enforce-orchestration-preimplementation-gate-helpers.ps1

@@ -28,12 +28,12 @@ $script:OrchestrationBookkeepingTrees = @(
 )
 
 # Characters that make a command line statically unresolvable (D4 row 12, as narrowed by
-# issue #663). Interpolation characters are unresolvable in every quote state, because a
-# double-quoted span still expands them. Redirection characters are unresolvable only
-# outside a quoted span: inside single or double quotes the shell treats `<` and `>` as
-# literal text, so a quoted Co-Authored-By trailer is not a redirection.
+# issues #663 and #713): interpolation characters outside single quotes; outside-quote
+# characters (`<`, `>`, and the `#` comment introducer) outside any quote; and typographic
+# quotes (U+2018 to U+201E) anywhere, because a PowerShell host reads them as quotes.
 $script:InterpolationCommandCharacters = [char[]]@('$', '`')
-$script:RedirectionCommandCharacters = [char[]]@('>', '<')
+$script:OutsideQuoteCommandCharacters = [char[]]@('>', '<', '#')
+$script:TypographicQuoteCharacters = [char[]]@(0x2018, 0x2019, 0x201A, 0x201B, 0x201C, 0x201D, 0x201E)
 
 # Wildcards that make an operand a glob (D4 row 15). Only the literal prefix before the
 # first of these is prefix-tested.
@@ -60,10 +60,9 @@ function Split-OrchestrationCommandLine {
     .SYNOPSIS
         Splits a command line into segments on chain operators outside quotes.
     .DESCRIPTION
-        Realizes D4 row 13. Quote state is tracked while scanning so a chain operator
-        inside a quoted span does not split. The returned `Balanced` flag reports whether
-        the scan ended outside every quote; unbalanced text is not splittable and the
-        caller denies (D4 rows 11 and 13). Empty and whitespace-only segments are dropped.
+        Realizes D4 row 13. Quote state and POSIX backslash escapes (issue #710) are tracked, so a quoted or
+        escaped chain operator does not split. `Balanced` reports whether the scan ended outside every quote;
+        the caller denies unbalanced text (D4 rows 11 and 13). Empty and whitespace-only segments are dropped.
     .OUTPUTS
         System.Collections.Hashtable with keys `Balanced` (bool) and `Segments` (string[]).
     #>
@@ -74,8 +73,9 @@ function Split-OrchestrationCommandLine {
     $segments = [System.Collections.Generic.List[string]]::new()
     $current = [System.Text.StringBuilder]::new()
     $openQuote = [char]0
-
+    $escaped = $false
     foreach ($character in $CommandText.ToCharArray()) {
+        if ($escaped -or ($character -eq '\' -and $openQuote -ne "'")) { $escaped = -not $escaped; [void]$current.Append($character); continue }
         if ($openQuote -ne [char]0) {
             if ($character -eq $openQuote) {
                 $openQuote = [char]0
@@ -112,12 +112,12 @@ function Test-OrchestrationCommandTextUnresolvable {
     .SYNOPSIS
         Reports whether a command line carries a statically unresolvable character.
     .DESCRIPTION
-        Realizes D4 row 12 as narrowed by issue #663. Quote state is tracked with the same
-        state machine as Split-OrchestrationCommandLine. An interpolation character (`$` or
-        backtick) answers true in any quote state; a redirection character (`<` or `>`)
-        answers true only outside a quoted span. Backslash escapes are not modelled, so a
-        backslash before any quote character, or anywhere inside a double-quoted span,
-        answers true: the shell may end the span where this scan does not (fail closed).
+        Realizes D4 row 12 as narrowed by issues #663 and #713, with quote state tracked as in
+        Split-OrchestrationCommandLine. `$` or backtick answers true outside quotes or inside
+        double quotes (single quotes keep it literal); `<`, `>`, or a `#` comment answers true
+        only outside a quoted span. A typographic quote (U+2018 to U+201E), a backslash before
+        any quote character, or a backslash inside a double-quoted span answers true anywhere:
+        a shell may end the span where this scan does not (fail closed).
     .PARAMETER CommandText
         The full command line as the shell would receive it.
     .OUTPUTS
@@ -127,17 +127,17 @@ function Test-OrchestrationCommandTextUnresolvable {
     [OutputType([bool])]
     param([Parameter(Mandatory)][AllowEmptyString()][string] $CommandText)
 
-    # An escaped quote moves a span boundary the scan cannot model (issue #663 remediation CR-1).
-    if ($CommandText.Contains('\"') -or $CommandText.Contains("\'")) {
+    # An escaped or typographic quote moves a span boundary the scan cannot model (#663, #713).
+    if ($CommandText.Contains('\"') -or $CommandText.Contains("\'") -or $CommandText.IndexOfAny($script:TypographicQuoteCharacters) -ge 0) {
         return $true
     }
 
     $openQuote = [char]0
 
     # Scan every character once, tracking whether it sits inside a quoted span so that
-    # redirection characters are judged only where the shell would honour them.
+    # outside-quote characters are judged only where the shell would honour them.
     foreach ($character in $CommandText.ToCharArray()) {
-        if ($script:InterpolationCommandCharacters -contains $character) {
+        if ($openQuote -ne "'" -and $script:InterpolationCommandCharacters -contains $character) {
             return $true
         }
 
@@ -153,7 +153,7 @@ function Test-OrchestrationCommandTextUnresolvable {
             }
         } elseif ($character -eq '"' -or $character -eq "'") {
             $openQuote = $character
-        } elseif ($script:RedirectionCommandCharacters -contains $character) {
+        } elseif ($script:OutsideQuoteCommandCharacters -contains $character) {
             return $true
         }
     }
@@ -393,21 +393,21 @@ function Test-ExemptOrchestrationSegmentToken {
             }
 
             if ($candidate.StartsWith('-')) {
-                # The message option is the only modelled option on either subcommand. Rows
+                # Only the message and trailer options of commit are modelled (issue #713). Rows
                 # 2, 5, 6, 8, and 10 all land here and deny, including a dash-leading
                 # operand supplied without a preceding separator.
                 if ($subcommand -cne 'commit') {
                     return $false
                 }
-                if ($candidate -ceq '-m' -or $candidate -ceq '--message') {
-                    # The message value is the following token and is not a pathspec.
+                if ($candidate -ceq '-m' -or $candidate -ceq '--message' -or $candidate -ceq '--trailer') {
+                    # The message or trailer value is the following token and is not a pathspec.
                     $index += 2
                     if ($index -gt $Token.Count) {
                         return $false
                     }
                     continue
                 }
-                if ($candidate.StartsWith('--message=') -or
+                if ($candidate.StartsWith('--message=') -or $candidate.StartsWith('--trailer=') -or
                     ($candidate.Length -gt 2 -and $candidate.StartsWith('-m'))) {
                     $index++
                     continue
@@ -464,8 +464,8 @@ function Test-ExemptOrchestrationStagingCommand {
         return $false
     }
 
-    # Row 12: interpolation anywhere, redirection outside quotes, and unmodelled backslash
-    # escapes are not statically resolvable, so the operand list cannot be trusted.
+    # Row 12: `$` or backtick outside single quotes, `<`, `>`, or `#` outside quotes, any
+    # typographic quote, and unmodelled backslash escapes make the operand list untrustworthy.
     if (Test-OrchestrationCommandTextUnresolvable -CommandText $CommandText) {
         return $false
     }

package/resources/codex-and-agents-customizations/.codex/hooks/enforce-orchestration-preimplementation-gate.ps1

@@ -20,6 +20,9 @@ param()
 # normative contract and which lacks headroom; leaving that file byte-untouched is the
 # proof the issue #539 exemption is behaviourally unchanged.
 . (Join-Path $PSScriptRoot 'enforce-orchestration-preimplementation-gate-modes.ps1')
+# Epic-scope command and path legs (issue #707, porting issue #663 decision D2), plus the
+# two per-mode read seams relocated from this file to keep it inside the 500-line cap.
+. (Join-Path $PSScriptRoot 'enforce-orchestration-preimplementation-gate-epic-scope.ps1')
 # Shared command-line parser (issue #545): per-segment scan text and structural matching.
 . (Join-Path $PSScriptRoot 'hook-command-scanner.ps1')
 . (Join-Path $PSScriptRoot 'hook-command-invocation.ps1')
@@ -286,33 +289,6 @@ function Get-CheckpointContent {
     return Get-Content -Raw -LiteralPath $script:CheckpointPath
 }
 
-# The two per-mode read seams (issue #554). Each takes its path from the fixed mode
-# table and never from a delegation's own text; an absent file returns an empty
-# string, which the readiness predicate then treats as a deny.
-function Get-EpicCheckpointContent {
-    [CmdletBinding()]
-    [OutputType([string])]
-    param()
-
-    $path = Get-OrchestrationDelegationCheckpointPath -Mode 'epic'
-    if (-not (Test-Path -LiteralPath $path)) {
-        return ''
-    }
-    return Get-Content -Raw -LiteralPath $path
-}
-
-function Get-ParallelCheckpointContent {
-    [CmdletBinding()]
-    [OutputType([string])]
-    param()
-
-    $path = Get-OrchestrationDelegationCheckpointPath -Mode 'parallel'
-    if (-not (Test-Path -LiteralPath $path)) {
-        return ''
-    }
-    return Get-Content -Raw -LiteralPath $path
-}
-
 function Get-OrchestrationPreimplementationGateAllowDecision {
     [CmdletBinding()]
     [OutputType([System.Collections.Specialized.OrderedDictionary])]
@@ -398,6 +374,7 @@ function Invoke-OrchestrationPreimplementationGateDecision {
     # default wording they have today.
     $mode = $script:OrchestrationDelegationDefaultMode
     $prompt = ''
+    $command = ''
     $filePath = Get-StringProperty -Value $toolInput -Name 'file_path'
     if ($filePath) {
         $normalized = ([string]$filePath) -replace '\\', '/'
@@ -427,6 +404,16 @@ function Invoke-OrchestrationPreimplementationGateDecision {
             Get-OrchestrationModeDenyReason -Mode $mode -Failure 'declared-checkpoint-path')
     }
 
+    # The command, apply_patch, and path legs consult the epic checkpoint first (issue #707,
+    # porting issue #663). A call that is not epic scope yields $null and continues to the
+    # unchanged single-feature path.
+    if ($filePath -or $command) {
+        $epicDecision = Get-OrchestrationEpicScopeDecision -Command $command -FilePath $filePath
+        if ($null -ne $epicDecision) {
+            return $epicDecision
+        }
+    }
+
     if ($mode -eq 'epic' -or $mode -eq 'parallel') {
         $isEpic = ($mode -eq 'epic')
         $injected = if ($isEpic) { 'EpicCheckpointRaw' } else { 'ParallelCheckpointRaw' }

package/resources/codex-and-agents-customizations/pack-manifests/core.json

@@ -38,6 +38,8 @@
     ".codex/hooks/enforce-epic-root-invocation.ps1",
     ".codex/hooks/enforce-epic-wave-barrier.ps1",
     ".codex/hooks/enforce-epic-worktree-removal-gate.ps1",
+    ".codex/hooks/enforce-orchestration-preimplementation-gate-epic-resolution.ps1",
+    ".codex/hooks/enforce-orchestration-preimplementation-gate-epic-scope.ps1",
     ".codex/hooks/enforce-orchestration-preimplementation-gate-helpers.ps1",
     ".codex/hooks/enforce-orchestration-preimplementation-gate-modes.ps1",
     ".codex/hooks/hook-command-invocation.ps1",

package/resources/powershell/PoshQC/settings/pester.runsettings.psd1

@@ -145,6 +145,9 @@
             # table and the epic and parallel readiness predicates; registered so the new
             # production file stays in the coverage denominator per the Coverage Exclusion Policy.
             '.codex/hooks/enforce-orchestration-preimplementation-gate-modes.ps1'
+            # Issue #707 added these two dot-sourced siblings for the Codex epic-scope command and path legs.
+            '.codex/hooks/enforce-orchestration-preimplementation-gate-epic-scope.ps1'
+            '.codex/hooks/enforce-orchestration-preimplementation-gate-epic-resolution.ps1'
             # Issue #415 remediation cycle 2 (R-COV): the detached-HEAD null-guard fix changed
             # these two Codex PreToolUse hooks. Both were absent from this list, so the changed
             # production surface was outside the coverage denominator. Measured here so the
@@ -180,6 +183,14 @@
             # BlastRadius.psm1. CodeCoverage.Path is an explicit per-file allow-list, so
             # the new module must be named here to be measured.
             '.claude/lib/blast-radius/BlastRadiusConflict.psm1'
+            # Issue #722 added the ninth file below, the integration-cost scheduling
+            # layer over the unchanged contention relation. CodeCoverage.Path is an
+            # explicit per-file allow-list, so the new module is named here to keep
+            # it in the coverage denominator.
+            '.claude/lib/blast-radius/BlastRadiusScheduling.psm1'
+            # Issue #722 also added the tenth file below, the write-intent
+            # extraction layer the facade and validation module delegate to.
+            '.claude/lib/blast-radius/BlastRadiusWriteIntent.psm1'
             # Issue #643 also added the merge library below: the line grammar, the
             # keyed-union merge, and the entry script. The entry script is measured
             # like the two modules because its Pester suite dot-sources it behind a