@danmoisan/drm-copilot-mcp 1.1.16 → 1.1.17

package/resources/codex-and-agents-customizations/.codex/hooks/enforce-batch-budget-route.ps1

@@ -0,0 +1,139 @@
+<#
+.SYNOPSIS
+    Pure route helpers shared by the batch-budget hooks.
+
+.DESCRIPTION
+    Defines the functions that read the selected route from orchestrator checkpoint
+    text and decide whether that checkpoint selects the uncapped orchestrated large
+    path. The file is dot-sourced by the PowerShell and Python batch-budget hooks and
+    has no entry point. The Claude and Codex runtime copies of this file are
+    byte-identical, and a parity test holds them identical. None of the functions
+    reads a file or an environment variable; the checkpoint text is supplied by the
+    caller.
+
+.NOTES
+    Compatible with PowerShell 7+.
+#>
+
+function ConvertFrom-BatchBudgetCheckpoint {
+    <#
+    .SYNOPSIS
+        Parses orchestrator checkpoint text into a checkpoint object.
+    .DESCRIPTION
+        Returns the parsed object only when the text is a JSON object. Null or
+        whitespace text, text that is not parseable JSON, and JSON whose root is not
+        an object all return $null. Performs no file or environment access.
+    .PARAMETER CheckpointText
+        Raw text of the orchestrator checkpoint file.
+    #>
+    [CmdletBinding()]
+    [OutputType([psobject])]
+    param(
+        [AllowNull()]
+        [AllowEmptyString()]
+        [string] $CheckpointText
+    )
+
+    if ([string]::IsNullOrWhiteSpace($CheckpointText)) {
+        return $null
+    }
+
+    try {
+        $parsed = ConvertFrom-Json -InputObject $CheckpointText -ErrorAction Stop
+    } catch {
+        Write-Verbose "Ignoring unparseable orchestrator checkpoint text: $($_.Exception.Message)"
+        return $null
+    }
+
+    if ($parsed -is [System.Management.Automation.PSCustomObject]) {
+        return $parsed
+    }
+
+    return $null
+}
+
+function Get-BatchBudgetSelectedRoute {
+    <#
+    .SYNOPSIS
+        Returns the route selected by an orchestrator checkpoint.
+    .DESCRIPTION
+        Uses route_id when the checkpoint has that key, otherwise path_selected. The
+        value is returned only when it is a non-blank string; every other case,
+        including unparseable text, returns an empty string.
+    .PARAMETER CheckpointText
+        Raw text of the orchestrator checkpoint file.
+    #>
+    [CmdletBinding()]
+    [OutputType([string])]
+    param(
+        [AllowNull()]
+        [AllowEmptyString()]
+        [string] $CheckpointText
+    )
+
+    $checkpoint = ConvertFrom-BatchBudgetCheckpoint -CheckpointText $CheckpointText
+    if ($null -eq $checkpoint) {
+        return ''
+    }
+
+    $propertyNames = @($checkpoint.PSObject.Properties.Name)
+    $rawRoute = $null
+    if ($propertyNames -contains 'route_id') {
+        $rawRoute = $checkpoint.route_id
+    } elseif ($propertyNames -contains 'path_selected') {
+        $rawRoute = $checkpoint.path_selected
+    }
+
+    if ($rawRoute -is [string] -and -not [string]::IsNullOrWhiteSpace($rawRoute)) {
+        return $rawRoute
+    }
+
+    return ''
+}
+
+function Test-BatchBudgetLargePathRoute {
+    <#
+    .SYNOPSIS
+        Reports whether an orchestrator checkpoint selects the uncapped large path.
+    .DESCRIPTION
+        Returns $true only when the checkpoint parses to an object, its selected route
+        is large, remediation, or preparation (case-sensitive), next_step is not
+        complete, and completed_steps does not contain S12_complete. No input causes
+        an exception; any failure returns $false.
+    .PARAMETER CheckpointText
+        Raw text of the orchestrator checkpoint file.
+    #>
+    [CmdletBinding()]
+    [OutputType([bool])]
+    param(
+        [AllowNull()]
+        [AllowEmptyString()]
+        [string] $CheckpointText
+    )
+
+    try {
+        $checkpoint = ConvertFrom-BatchBudgetCheckpoint -CheckpointText $CheckpointText
+        if ($null -eq $checkpoint) {
+            return $false
+        }
+
+        $route = Get-BatchBudgetSelectedRoute -CheckpointText $CheckpointText
+        if (-not (@('large', 'remediation', 'preparation') -ccontains $route)) {
+            return $false
+        }
+
+        $propertyNames = @($checkpoint.PSObject.Properties.Name)
+        if ($propertyNames -contains 'next_step' -and $checkpoint.next_step -is [string] -and $checkpoint.next_step -ceq 'complete') {
+            return $false
+        }
+
+        if ($propertyNames -contains 'completed_steps' -and (@($checkpoint.completed_steps) -ccontains 'S12_complete')) {
+            return $false
+        }
+
+        return $true
+    } catch {
+        Write-Verbose "Treating the orchestrator checkpoint as direct mode: $($_.Exception.Message)"
+        return $false
+    }
+}

package/resources/codex-and-agents-customizations/.codex/hooks/enforce-powershell-batch-budget.ps1

@@ -50,128 +50,8 @@ param()
 # mapping for every tool name the ^(apply_patch|Edit|Write)$ matcher admits.
 . (Join-Path $PSScriptRoot 'codex-pretooluse-file-mapping.ps1')
 
-function ConvertFrom-PowerShellBatchBudgetCheckpoint {
-    <#
-    .SYNOPSIS
-        Parses orchestrator checkpoint text into a checkpoint object.
-    .DESCRIPTION
-        Returns the parsed object only when the text is a JSON object. Null or
-        whitespace text, text that is not parseable JSON, and JSON whose root is not
-        an object all return $null. Performs no file or environment access.
-    .PARAMETER CheckpointText
-        Raw text of the orchestrator checkpoint file.
-    #>
-    [CmdletBinding()]
-    [OutputType([psobject])]
-    param(
-        [AllowNull()]
-        [AllowEmptyString()]
-        [string] $CheckpointText
-    )
-
-    if ([string]::IsNullOrWhiteSpace($CheckpointText)) {
-        return $null
-    }
-
-    try {
-        $parsed = ConvertFrom-Json -InputObject $CheckpointText -ErrorAction Stop
-    } catch {
-        Write-Verbose "Ignoring unparseable orchestrator checkpoint text: $($_.Exception.Message)"
-        return $null
-    }
-
-    if ($parsed -is [System.Management.Automation.PSCustomObject]) {
-        return $parsed
-    }
-
-    return $null
-}
-
-function Get-PowerShellBatchBudgetSelectedRoute {
-    <#
-    .SYNOPSIS
-        Returns the route selected by an orchestrator checkpoint.
-    .DESCRIPTION
-        Uses route_id when the checkpoint has that key, otherwise path_selected. The
-        value is returned only when it is a non-blank string; every other case,
-        including unparseable text, returns an empty string.
-    .PARAMETER CheckpointText
-        Raw text of the orchestrator checkpoint file.
-    #>
-    [CmdletBinding()]
-    [OutputType([string])]
-    param(
-        [AllowNull()]
-        [AllowEmptyString()]
-        [string] $CheckpointText
-    )
-
-    $checkpoint = ConvertFrom-PowerShellBatchBudgetCheckpoint -CheckpointText $CheckpointText
-    if ($null -eq $checkpoint) {
-        return ''
-    }
-
-    $propertyNames = @($checkpoint.PSObject.Properties.Name)
-    $rawRoute = $null
-    if ($propertyNames -contains 'route_id') {
-        $rawRoute = $checkpoint.route_id
-    } elseif ($propertyNames -contains 'path_selected') {
-        $rawRoute = $checkpoint.path_selected
-    }
-
-    if ($rawRoute -is [string] -and -not [string]::IsNullOrWhiteSpace($rawRoute)) {
-        return $rawRoute
-    }
-
-    return ''
-}
-
-function Test-PowerShellBatchBudgetLargePathRoute {
-    <#
-    .SYNOPSIS
-        Reports whether an orchestrator checkpoint selects the uncapped large path.
-    .DESCRIPTION
-        Returns $true only when the checkpoint parses to an object, its selected route
-        is large, remediation, or preparation (case-sensitive), next_step is not
-        complete, and completed_steps does not contain S12_complete. No input causes
-        an exception; any failure returns $false.
-    .PARAMETER CheckpointText
-        Raw text of the orchestrator checkpoint file.
-    #>
-    [CmdletBinding()]
-    [OutputType([bool])]
-    param(
-        [AllowNull()]
-        [AllowEmptyString()]
-        [string] $CheckpointText
-    )
-
-    try {
-        $checkpoint = ConvertFrom-PowerShellBatchBudgetCheckpoint -CheckpointText $CheckpointText
-        if ($null -eq $checkpoint) {
-            return $false
-        }
-
-        $route = Get-PowerShellBatchBudgetSelectedRoute -CheckpointText $CheckpointText
-        if (-not (@('large', 'remediation', 'preparation') -ccontains $route)) {
-            return $false
-        }
-
-        $propertyNames = @($checkpoint.PSObject.Properties.Name)
-        if ($propertyNames -contains 'next_step' -and $checkpoint.next_step -is [string] -and $checkpoint.next_step -ceq 'complete') {
-            return $false
-        }
-
-        if ($propertyNames -contains 'completed_steps' -and (@($checkpoint.completed_steps) -ccontains 'S12_complete')) {
-            return $false
-        }
-
-        return $true
-    } catch {
-        Write-Verbose "Treating the orchestrator checkpoint as direct mode: $($_.Exception.Message)"
-        return $false
-    }
-}
+# Shared route helpers; this file is byte-identical to the Claude runtime copy.
+. (Join-Path $PSScriptRoot 'enforce-batch-budget-route.ps1')
 
 function Get-PowerShellBatchBudgetState {
     [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSReviewUnusedParameter', 'TestCap', Justification = 'Accepted and ignored for callers written against the removed test-file cap.')]
@@ -348,8 +228,8 @@ function Invoke-PowerShellBatchBudgetHook {
         $checkpointText = ''
     }
 
-    $isLargePath = Test-PowerShellBatchBudgetLargePathRoute -CheckpointText $checkpointText
-    $observedRoute = Get-PowerShellBatchBudgetSelectedRoute -CheckpointText $checkpointText
+    $isLargePath = Test-BatchBudgetLargePathRoute -CheckpointText $checkpointText
+    $observedRoute = Get-BatchBudgetSelectedRoute -CheckpointText $checkpointText
     if ($isLargePath) {
         return Invoke-PowerShellBatchBudgetDecision -FilePath $filePath -State (Get-PowerShellBatchBudgetState -ProdCap $ProdCap) -StateFile $stateFile -LargePathRoute
     }

package/resources/codex-and-agents-customizations/.codex/hooks/enforce-python-batch-budget.ps1

@@ -1,32 +1,44 @@
 
 <#
 .SYNOPSIS
-    Pre-tool-use hook that enforces the Python per-batch change budget.
+    Pre-tool-use hook that routes Python changes of more than three production files to the orchestrated large path.
 
 .DESCRIPTION
     This script is invoked by the Codex PreToolUse hook before any Write or Edit
-    operation. When the target file is a Python file, it classifies the file as either
-    production or test and checks the running count against the per-batch cap:
-      - 3 production .py files per batch
-      - 3 test .py files per batch
-
-    A "batch" is scoped to the current Codex session. The running count is
-    persisted under .codex/state/python-batch-budget.<session_id>.json. Only distinct
-    file paths are counted; repeated edits to the same file consume one slot.
-
-    Test files are those matching:
+    operation. When the target file is a Python file (.py), it decides whether the
+    change may proceed in direct mode.
+
+    Direct mode counts distinct production Python paths per Codex session. The running
+    set is persisted under .codex/state/python-batch-budget.<session_id>.json, and
+    repeated edits to the same file are counted once. The 4th distinct production path
+    is denied with a PYTHON_LARGE_PATH_REQUIRED reason that instructs the caller to
+    route the change through .codex/prompts/orchestrate-work.md.
+
+    The orchestrated large path is detected from
+    <root>/artifacts/orchestration/orchestrator-state.json. The selected route is the
+    route_id value when that key is present, otherwise the path_selected value, and it
+    is usable only as a non-blank string. When the selected route is large,
+    remediation, or preparation and the checkpoint is not terminal (next_step is not
+    complete and completed_steps does not contain S12_complete), no path is denied for
+    count and no state is read or written. Every other checkpoint outcome, including
+    an absent, unreadable, or malformed checkpoint, enforces direct mode.
+
+    Test files are never counted. They are those matching:
       - tests/**/*.py
       - test_*.py
 
-    All other .py files are treated as production files. Non-Python paths pass through.
+    All other .py files are production files. Non-Python paths pass through. The
+    threshold of three production files is a routing constant and is not configurable
+    at runtime. Legacy prodCap, testCap, and testFiles keys in a persisted state file
+    are ignored when the state is loaded.
 
-    An approved per-session override is recorded by writing
-    {"prodCap": N, "testCap": M} into the Codex state file.
+    When a production path is denied, the script emits a PreToolUse JSON response with
+    hookSpecificOutput.permissionDecision = 'deny' and exits 0. Files already counted
+    are always allowed through.
 
-    When the cap would be exceeded by a new file, the script emits a PreToolUse JSON
-    response with hookSpecificOutput.permissionDecision = 'deny' and exits 0. The session
-    must explicitly reset the counter by deleting the state file before starting a new
-    batch. Files already counted are always allowed through.
+    Known limitation: a stale non-terminal large-path checkpoint left at the root
+    exempts a later direct-mode session at that root. Orchestrator checkpoint hygiene
+    (issue #673) moves foreign checkpoints aside before a new run.
 
 .NOTES
     Compatible with PowerShell 7+.
@@ -38,26 +50,28 @@ param()
 # mapping for every tool name the ^(apply_patch|Edit|Write)$ matcher admits.
 . (Join-Path $PSScriptRoot 'codex-pretooluse-file-mapping.ps1')
 
+# Shared route helpers; this file is byte-identical to the Claude runtime copy.
+. (Join-Path $PSScriptRoot 'enforce-batch-budget-route.ps1')
+
 function Get-PythonBatchBudgetState {
+    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSReviewUnusedParameter', 'TestCap', Justification = 'Accepted and ignored for callers written against the removed test-file cap.')]
     [CmdletBinding()]
     [OutputType([System.Collections.Specialized.OrderedDictionary])]
     param(
         [Parameter(Mandatory)]
         [int] $ProdCap,
 
-        [Parameter(Mandatory)]
-        [int] $TestCap
+        [int] $TestCap = 0
     )
 
     [ordered]@{
         prodCap   = $ProdCap
-        testCap   = $TestCap
         prodFiles = @()
-        testFiles = @()
     }
 }
 
 function ConvertTo-PythonBatchBudgetState {
+    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSReviewUnusedParameter', 'TestCap', Justification = 'Accepted and ignored for callers written against the removed test-file cap.')]
     [CmdletBinding()]
     [OutputType([System.Collections.Specialized.OrderedDictionary])]
     param(
@@ -67,15 +81,13 @@ function ConvertTo-PythonBatchBudgetState {
         [Parameter(Mandatory)]
         [int] $ProdCap,
 
-        [Parameter(Mandatory)]
-        [int] $TestCap
+        [int] $TestCap = 0
     )
 
-    $state = Get-PythonBatchBudgetState -ProdCap $ProdCap -TestCap $TestCap
-    if ($null -ne $InputObject.prodCap) { $state.prodCap = [int]$InputObject.prodCap }
-    if ($null -ne $InputObject.testCap) { $state.testCap = [int]$InputObject.testCap }
+    # Only prodFiles is carried over. Persisted prodCap, testCap, and testFiles keys
+    # come from the removed test-file cap and recorded overrides and are ignored.
+    $state = Get-PythonBatchBudgetState -ProdCap $ProdCap
     if ($null -ne $InputObject.prodFiles) { $state.prodFiles = @($InputObject.prodFiles) }
-    if ($null -ne $InputObject.testFiles) { $state.testFiles = @($InputObject.testFiles) }
 
     return $state
 }
@@ -105,6 +117,7 @@ function Get-PythonBatchBudgetBlockDecision {
 }
 
 function Invoke-PythonBatchBudgetDecision {
+    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSReviewUnusedParameter', 'TestCap', Justification = 'Accepted and ignored for callers written against the removed test-file cap.')]
     [CmdletBinding()]
     [OutputType([System.Collections.Specialized.OrderedDictionary])]
     param(
@@ -114,8 +127,15 @@ function Invoke-PythonBatchBudgetDecision {
         [Parameter(Mandatory)]
         [System.Collections.IDictionary] $State,
 
-        [Parameter(Mandatory)]
-        [string] $StateFile
+        [AllowEmptyString()]
+        [string] $StateFile = '',
+
+        [int] $TestCap = 0,
+
+        [switch] $LargePathRoute,
+
+        [AllowEmptyString()]
+        [string] $ObservedRoute = ''
     )
 
     $normalized = $FilePath -replace '\\', '/'
@@ -123,26 +143,32 @@ function Invoke-PythonBatchBudgetDecision {
         return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $false }
     }
 
+    # The orchestrated large path has no production-file cap, so nothing is counted.
+    if ($LargePathRoute) {
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $false }
+    }
+
+    # Test files never count toward the routing threshold.
     $isTestFile = ($normalized -match '(^|/)tests/.*\.py$') -or ($normalized -match '(^|/)test_[^/]+\.py$')
-    $targetList = if ($isTestFile) { @($State.testFiles) } else { @($State.prodFiles) }
-    $cap = if ($isTestFile) { [int]$State.testCap } else { [int]$State.prodCap }
-    $kind = if ($isTestFile) { 'test' } else { 'production' }
+    if ($isTestFile) {
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $false }
+    }
 
-    if ($targetList -contains $normalized) {
+    $countedFiles = @($State.prodFiles)
+    if ($countedFiles -contains $normalized) {
         return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $false }
     }
 
-    if ($targetList.Count -ge $cap) {
-        $currentFiles = ($targetList -join ', ')
-        $reason = "Python per-batch budget exceeded: $kind file cap is $cap and is already full ($currentFiles). Requested new file: $normalized. Split the work into a new batch, record an approved cap in $StateFile, or reset the batch by deleting that state file."
+    $cap = [int]$State.prodCap
+    if ($countedFiles.Count -ge $cap) {
+        Write-Verbose "Denying production Python path '$normalized' in direct mode; counted paths are recorded in '$StateFile'."
+        $counted = $countedFiles -join ', '
+        $route = if ([string]::IsNullOrWhiteSpace($ObservedRoute)) { 'none' } else { $ObservedRoute }
+        $reason = "PYTHON_LARGE_PATH_REQUIRED: this change touches more than $cap production Python files (already counted: $counted; requested: $normalized). A change of this size belongs on the orchestrated large path, which has no production-file cap. Route the change through .codex/prompts/orchestrate-work.md. Checkpoint route observed: $route."
         return Get-PythonBatchBudgetBlockDecision -Reason $reason -State $State
     }
 
-    if ($isTestFile) {
-        $State.testFiles = @($State.testFiles) + @($normalized)
-    } else {
-        $State.prodFiles = @($State.prodFiles) + @($normalized)
-    }
+    $State.prodFiles = $countedFiles + @($normalized)
 
     return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $true }
 }
@@ -155,7 +181,13 @@ function Invoke-PythonBatchBudgetHook {
         [string] $SessionId = 'default',
         [string] $Root = (Get-Location).Path,
         [int] $ProdCap = 3,
-        [int] $TestCap = 3,
+        [scriptblock] $ReadCheckpoint = {
+            param([string] $Path)
+            if (Test-Path -LiteralPath $Path -PathType Leaf) {
+                return (Get-Content -LiteralPath $Path -Raw)
+            }
+            return ''
+        },
         [scriptblock] $TestPathExists = { param([string] $Path) Test-Path -Path $Path },
         [scriptblock] $EnsureDirectory = { param([string] $Path) New-Item -ItemType Directory -Path $Path -Force | Out-Null },
         [scriptblock] $ReadState = { param([string] $Path) Get-Content -Path $Path -Raw },
@@ -186,23 +218,41 @@ function Invoke-PythonBatchBudgetHook {
     }
 
     $stateDir = Join-Path -Path $Root -ChildPath '.codex/state'
+    $stateFile = Join-Path -Path $stateDir -ChildPath ("python-batch-budget.$SessionId.json")
+
+    # The checkpoint is read before any state operation, so the large path neither
+    # creates the state directory nor reads or writes the state file.
+    $checkpointPath = Join-Path -Path $Root -ChildPath 'artifacts/orchestration/orchestrator-state.json'
+    $checkpointText = ''
+    try {
+        $checkpointText = [string](& $ReadCheckpoint $checkpointPath)
+    } catch {
+        Write-Verbose "Treating unreadable orchestrator checkpoint '$checkpointPath' as direct mode: $($_.Exception.Message)"
+        $checkpointText = ''
+    }
+
+    $isLargePath = Test-BatchBudgetLargePathRoute -CheckpointText $checkpointText
+    $observedRoute = Get-BatchBudgetSelectedRoute -CheckpointText $checkpointText
+    if ($isLargePath) {
+        return Invoke-PythonBatchBudgetDecision -FilePath $filePath -State (Get-PythonBatchBudgetState -ProdCap $ProdCap) -StateFile $stateFile -LargePathRoute
+    }
+
     if (-not (& $TestPathExists $stateDir)) {
         & $EnsureDirectory $stateDir
     }
 
-    $stateFile = Join-Path -Path $stateDir -ChildPath ("python-batch-budget.$SessionId.json")
-    $state = Get-PythonBatchBudgetState -ProdCap $ProdCap -TestCap $TestCap
+    $state = Get-PythonBatchBudgetState -ProdCap $ProdCap
 
     if (& $TestPathExists $stateFile) {
         try {
             $loaded = & $ReadState $stateFile | ConvertFrom-Json -ErrorAction Stop
-            $state = ConvertTo-PythonBatchBudgetState -InputObject $loaded -ProdCap $ProdCap -TestCap $TestCap
+            $state = ConvertTo-PythonBatchBudgetState -InputObject $loaded -ProdCap $ProdCap
         } catch {
             Write-Verbose "Ignoring unreadable Python batch-budget state file '$stateFile': $($_.Exception.Message)"
         }
     }
 
-    $decision = Invoke-PythonBatchBudgetDecision -FilePath $filePath -State $state -StateFile $stateFile
+    $decision = Invoke-PythonBatchBudgetDecision -FilePath $filePath -State $state -StateFile $stateFile -ObservedRoute $observedRoute
     if ($decision.shouldWriteState) {
         try {
             & $WriteState $stateFile $decision.state
@@ -214,41 +264,81 @@ function Invoke-PythonBatchBudgetHook {
     return $decision
 }
 
-if ($MyInvocation.InvocationName -eq '.') {
-    return
-}
+function Invoke-PythonBatchBudgetCodexEntryPoint {
+    <#
+    .SYNOPSIS
+        Runs the Codex Python batch-budget decision and returns the process exit code.
+    .DESCRIPTION
+        Parses the Codex PreToolUse payload through the shared transport, collects both
+        sides of every mapped file edit, and evaluates each path with the Python hook.
+        The first deny is written to the output stream as compact JSON without its state
+        property, followed by exit code 0. When nothing is denied the function returns
+        0 and writes nothing else. Any failure writes the error text to standard error
+        and returns 2. The function does not call exit.
+    .PARAMETER PayloadRaw
+        Raw PreToolUse payload text.
+    .PARAMETER RepositoryRoot
+        Root used to locate the Codex state directory and the orchestrator checkpoint.
+    .PARAMETER HookSeams
+        Optional seam overrides splatted into Invoke-PythonBatchBudgetHook.
+    #>
+    [CmdletBinding()]
+    [OutputType([int])]
+    param(
+        [Parameter(Mandatory)]
+        [AllowNull()]
+        [AllowEmptyString()]
+        [string] $PayloadRaw,
+
+        [Parameter(Mandatory)]
+        [string] $RepositoryRoot,
 
-try {
-    # Transport and mapping come from the shared module. session_id is still
-    # required because the batch counter is keyed by it.
-    $payload = ConvertFrom-CodexPreToolUsePayload -PayloadRaw ([Console]::In.ReadToEnd()) -HookName 'enforce-python-batch-budget' -RequireSessionId
-    $sessionId = ([string]$payload.session_id) -replace '[^A-Za-z0-9._-]', '_'
-    $repositoryRoot = Split-Path (Split-Path $PSScriptRoot -Parent) -Parent
-    $prodCap = 3
-    $testCap = 3
-
-    # Both sides of a rename consume budget, matching the pre-fix path scan that
-    # collected Add/Update/Delete targets and Move destinations alike. Ordering
-    # and de-duplication are preserved. A well-formed payload that maps to no
-    # file yields no paths, so no state is written and the hook allows silently.
-    $budgetPaths = @(
-        @(ConvertTo-CodexFileEditInput -Payload $payload) |
-            ForEach-Object { $_.source_path; $_.file_path } |
-                Where-Object { -not [string]::IsNullOrWhiteSpace($_) } |
-                    Select-Object -Unique
+        [hashtable] $HookSeams = @{}
     )
 
-    foreach ($path in $budgetPaths) {
-        $toolInputRaw = @{ file_path = $path } | ConvertTo-Json -Compress
-        $decision = Invoke-PythonBatchBudgetHook -ToolInputRaw $toolInputRaw -SessionId $sessionId -Root $repositoryRoot -ProdCap $prodCap -TestCap $testCap
-        if ($decision.hookSpecificOutput.permissionDecision -eq 'deny') {
-            $decision.Remove('state')
-            $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
-            exit 0
+    try {
+        # Transport and mapping come from the shared module. session_id is still
+        # required because the direct-mode counter is keyed by it.
+        $payload = ConvertFrom-CodexPreToolUsePayload -PayloadRaw $PayloadRaw -HookName 'enforce-python-batch-budget' -RequireSessionId
+        $sessionId = ([string]$payload.session_id) -replace '[^A-Za-z0-9._-]', '_'
+
+        # Both sides of a rename are evaluated, matching the path scan that collected
+        # Add/Update/Delete targets and Move destinations alike. Ordering and
+        # de-duplication are preserved. A well-formed payload that maps to no file
+        # yields no paths, so no state is written and the hook allows silently.
+        $budgetPaths = @(
+            @(ConvertTo-CodexFileEditInput -Payload $payload) |
+                ForEach-Object { $_.source_path; $_.file_path } |
+                    Where-Object { -not [string]::IsNullOrWhiteSpace($_) } |
+                        Select-Object -Unique
+        )
+
+        foreach ($path in $budgetPaths) {
+            $toolInputRaw = @{ file_path = $path } | ConvertTo-Json -Compress
+            $decision = Invoke-PythonBatchBudgetHook -ToolInputRaw $toolInputRaw -SessionId $sessionId -Root $RepositoryRoot @HookSeams
+            if ($decision.hookSpecificOutput.permissionDecision -eq 'deny') {
+                $decision.Remove('state')
+                $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
+                return 0
+            }
         }
+
+        return 0
+    } catch {
+        [Console]::Error.WriteLine([string]$_)
+        return 2
     }
-    exit 0
-} catch {
-    [Console]::Error.WriteLine([string]$_)
-    exit 2
 }
+
+if ($MyInvocation.InvocationName -eq '.') {
+    return
+}
+
+# The entry point returns its [int] exit code as the last pipeline element and any
+# deny JSON before it, so the JSON is written explicitly before the process exits.
+$entryPointResult = @(Invoke-PythonBatchBudgetCodexEntryPoint -PayloadRaw ([Console]::In.ReadToEnd()) -RepositoryRoot (Split-Path (Split-Path $PSScriptRoot -Parent) -Parent))
+if ($entryPointResult.Count -gt 1) {
+    $entryPointResult[0..($entryPointResult.Count - 2)] | Write-Output
+}
+
+exit ([int]$entryPointResult[-1])

package/resources/codex-and-agents-customizations/pack-manifests/core.json

@@ -48,6 +48,7 @@
     ".codex/hooks/validate-codex-subagent-routing.ps1",
     ".codex/hooks/check-powershell-test-purity.ps1",
     ".codex/hooks/check-python-test-purity.ps1",
+    ".codex/hooks/enforce-batch-budget-route.ps1",
     ".codex/hooks/enforce-checkpoint-monotonic.ps1",
     ".codex/hooks/enforce-completion-consistency.ps1",
     ".codex/hooks/enforce-completion-helpers.ps1",