@danmoisan/drm-copilot-mcp 1.1.16 → 1.1.18

package/resources/codex-and-agents-customizations/.codex/agents/feature-reviewer-c4.toml

@@ -46,6 +46,7 @@ Review constraints:
 
 Acceptance and remediation rules:
 - Trigger remediation if policy audit has FAIL or meaningful PARTIAL findings, toolchain checks fail, blockers exist in code review, or required acceptance criteria are not fully met.
+- When every blocking finding is non-remediable (remediability external_dependency, policy_hold, awaiting_ci, or human_decision_required, with no autonomous finding), report REVIEW_STATUS: HALT_NON_REMEDIABLE or REVIEW_STATUS: AWAITING_CI with REMEDIATION_PLAN: NONE, create no remediation plan target, and do not delegate to atomic-planner.
 - When remediation is triggered, generate remediation-inputs first.
 - Then automatically delegate remediation planning to the atomic-planner agent; do not leave remediation as a manual follow-up.
 - Create the remediation plan target file on disk before the planning handoff.

package/resources/codex-and-agents-customizations/.codex/agents/feature-reviewer.toml

@@ -46,6 +46,7 @@ Review constraints:
 
 Acceptance and remediation rules:
 - Trigger remediation if policy audit has FAIL or meaningful PARTIAL findings, toolchain checks fail, blockers exist in code review, or required acceptance criteria are not fully met.
+- When every blocking finding is non-remediable (remediability external_dependency, policy_hold, awaiting_ci, or human_decision_required, with no autonomous finding), report REVIEW_STATUS: HALT_NON_REMEDIABLE or REVIEW_STATUS: AWAITING_CI with REMEDIATION_PLAN: NONE, create no remediation plan target, and do not delegate to atomic-planner.
 - When remediation is triggered, generate remediation-inputs first.
 - Then automatically delegate remediation planning to the atomic-planner agent; do not leave remediation as a manual follow-up.
 - Create the remediation plan target file on disk before the planning handoff.

package/resources/codex-and-agents-customizations/.codex/agents/orchestrator-c1.toml

@@ -157,7 +157,7 @@ Update it after every completed step with:
 - `local_execution_overrides`, `delegation_bypasses`, `lifecycle_operations`
 - raw promotion MCP receipts under `delegation_receipts.promotion.potential_entry`, `delegation_receipts.promotion.issue`, and `delegation_receipts.promotion.feature_folder`
 
-Each required skill in the selected route must have a `skill_receipts[]` entry with `required = true` and non-empty `evidence`. Each required MCP tool must have an `mcp_call_receipts[]` entry with `ok = true` and non-empty `evidence`. `local_execution_overrides` and `delegation_bypasses` must remain empty at completion. Any lifecycle operation recorded in `lifecycle_operations[]` must use `surface = "mcp"`.
+Each required skill in the selected route must have a `skill_receipts[]` entry with `required = true` and non-empty `evidence`. Each required MCP tool must have an `mcp_call_receipts[]` entry with `ok = true` and non-empty `evidence` unless a valid `issue_adoption` record waives it. `local_execution_overrides` and `delegation_bypasses` must remain empty at completion. Any lifecycle operation recorded in `lifecycle_operations[]` must use `surface = "mcp"`.
 
 ## Native Automation Surface
 

package/resources/codex-and-agents-customizations/.codex/agents/orchestrator-c2.toml

@@ -157,7 +157,7 @@ Update it after every completed step with:
 - `local_execution_overrides`, `delegation_bypasses`, `lifecycle_operations`
 - raw promotion MCP receipts under `delegation_receipts.promotion.potential_entry`, `delegation_receipts.promotion.issue`, and `delegation_receipts.promotion.feature_folder`
 
-Each required skill in the selected route must have a `skill_receipts[]` entry with `required = true` and non-empty `evidence`. Each required MCP tool must have an `mcp_call_receipts[]` entry with `ok = true` and non-empty `evidence`. `local_execution_overrides` and `delegation_bypasses` must remain empty at completion. Any lifecycle operation recorded in `lifecycle_operations[]` must use `surface = "mcp"`.
+Each required skill in the selected route must have a `skill_receipts[]` entry with `required = true` and non-empty `evidence`. Each required MCP tool must have an `mcp_call_receipts[]` entry with `ok = true` and non-empty `evidence` unless a valid `issue_adoption` record waives it. `local_execution_overrides` and `delegation_bypasses` must remain empty at completion. Any lifecycle operation recorded in `lifecycle_operations[]` must use `surface = "mcp"`.
 
 ## Native Automation Surface
 

package/resources/codex-and-agents-customizations/.codex/agents/orchestrator-c3-elevated.toml

@@ -157,7 +157,7 @@ Update it after every completed step with:
 - `local_execution_overrides`, `delegation_bypasses`, `lifecycle_operations`
 - raw promotion MCP receipts under `delegation_receipts.promotion.potential_entry`, `delegation_receipts.promotion.issue`, and `delegation_receipts.promotion.feature_folder`
 
-Each required skill in the selected route must have a `skill_receipts[]` entry with `required = true` and non-empty `evidence`. Each required MCP tool must have an `mcp_call_receipts[]` entry with `ok = true` and non-empty `evidence`. `local_execution_overrides` and `delegation_bypasses` must remain empty at completion. Any lifecycle operation recorded in `lifecycle_operations[]` must use `surface = "mcp"`.
+Each required skill in the selected route must have a `skill_receipts[]` entry with `required = true` and non-empty `evidence`. Each required MCP tool must have an `mcp_call_receipts[]` entry with `ok = true` and non-empty `evidence` unless a valid `issue_adoption` record waives it. `local_execution_overrides` and `delegation_bypasses` must remain empty at completion. Any lifecycle operation recorded in `lifecycle_operations[]` must use `surface = "mcp"`.
 
 ## Native Automation Surface
 

package/resources/codex-and-agents-customizations/.codex/agents/orchestrator-c3.toml

@@ -157,7 +157,7 @@ Update it after every completed step with:
 - `local_execution_overrides`, `delegation_bypasses`, `lifecycle_operations`
 - raw promotion MCP receipts under `delegation_receipts.promotion.potential_entry`, `delegation_receipts.promotion.issue`, and `delegation_receipts.promotion.feature_folder`
 
-Each required skill in the selected route must have a `skill_receipts[]` entry with `required = true` and non-empty `evidence`. Each required MCP tool must have an `mcp_call_receipts[]` entry with `ok = true` and non-empty `evidence`. `local_execution_overrides` and `delegation_bypasses` must remain empty at completion. Any lifecycle operation recorded in `lifecycle_operations[]` must use `surface = "mcp"`.
+Each required skill in the selected route must have a `skill_receipts[]` entry with `required = true` and non-empty `evidence`. Each required MCP tool must have an `mcp_call_receipts[]` entry with `ok = true` and non-empty `evidence` unless a valid `issue_adoption` record waives it. `local_execution_overrides` and `delegation_bypasses` must remain empty at completion. Any lifecycle operation recorded in `lifecycle_operations[]` must use `surface = "mcp"`.
 
 ## Native Automation Surface
 

package/resources/codex-and-agents-customizations/.codex/agents/orchestrator-c4.toml

@@ -157,7 +157,7 @@ Update it after every completed step with:
 - `local_execution_overrides`, `delegation_bypasses`, `lifecycle_operations`
 - raw promotion MCP receipts under `delegation_receipts.promotion.potential_entry`, `delegation_receipts.promotion.issue`, and `delegation_receipts.promotion.feature_folder`
 
-Each required skill in the selected route must have a `skill_receipts[]` entry with `required = true` and non-empty `evidence`. Each required MCP tool must have an `mcp_call_receipts[]` entry with `ok = true` and non-empty `evidence`. `local_execution_overrides` and `delegation_bypasses` must remain empty at completion. Any lifecycle operation recorded in `lifecycle_operations[]` must use `surface = "mcp"`.
+Each required skill in the selected route must have a `skill_receipts[]` entry with `required = true` and non-empty `evidence`. Each required MCP tool must have an `mcp_call_receipts[]` entry with `ok = true` and non-empty `evidence` unless a valid `issue_adoption` record waives it. `local_execution_overrides` and `delegation_bypasses` must remain empty at completion. Any lifecycle operation recorded in `lifecycle_operations[]` must use `surface = "mcp"`.
 
 ## Native Automation Surface
 

package/resources/codex-and-agents-customizations/.codex/agents/orchestrator.toml

@@ -157,7 +157,7 @@ Update it after every completed step with:
 - `local_execution_overrides`, `delegation_bypasses`, `lifecycle_operations`
 - raw promotion MCP receipts under `delegation_receipts.promotion.potential_entry`, `delegation_receipts.promotion.issue`, and `delegation_receipts.promotion.feature_folder`
 
-Each required skill in the selected route must have a `skill_receipts[]` entry with `required = true` and non-empty `evidence`. Each required MCP tool must have an `mcp_call_receipts[]` entry with `ok = true` and non-empty `evidence`. `local_execution_overrides` and `delegation_bypasses` must remain empty at completion. Any lifecycle operation recorded in `lifecycle_operations[]` must use `surface = "mcp"`.
+Each required skill in the selected route must have a `skill_receipts[]` entry with `required = true` and non-empty `evidence`. Each required MCP tool must have an `mcp_call_receipts[]` entry with `ok = true` and non-empty `evidence` unless a valid `issue_adoption` record waives it. `local_execution_overrides` and `delegation_bypasses` must remain empty at completion. Any lifecycle operation recorded in `lifecycle_operations[]` must use `surface = "mcp"`.
 
 ## Native Automation Surface
 

package/resources/codex-and-agents-customizations/.codex/agents/python-orchestrator.toml

@@ -15,7 +15,7 @@ Use the following repo-local skills as the canonical workflow source:
 
 Primary role:
 - Route Python delivery work through the correct small or large orchestration path.
-- Estimate change budget from likely affected Python production files and tests before selecting a path.
+- Estimate change budget from likely affected Python production files before selecting a path; test files are not counted toward the routing threshold.
 - Coordinate planning, execution, validation, and review until the mission is complete.
 
 Required delegated specialists:
@@ -28,7 +28,7 @@ Required delegated specialists:
 
 Routing and lifecycle rules:
 - Small path is allowed only for `1-3` production Python files plus corresponding tests.
-- Large path is required for `>3` production Python files or `>3` test files.
+- Large path is required for more than 3 (`>3`) production Python files. The large path has no production-file cap.
 - Treat `spawn_agent` availability as the mechanical availability signal for required delegated specialists.
 - If any required delegated handoff cannot be started, resumed, or completed with a receipt, stop and report blocked state; do not perform that delegated step locally.
 - If the canonical checkpoint belongs to an unrelated in-progress mission, stop with `checkpoint_conflict`.

package/resources/codex-and-agents-customizations/.codex/agents/python-typed-engineer-c1.toml

@@ -29,7 +29,7 @@ Migration contract:
 
 ---
 name: python-typed-engineer
-description: Project-scoped worker that implements and verifies Python changes within typed repository boundaries. Applies the Black -> Ruff -> Pyright -> Pytest toolchain, the 3-production + 3-test per-batch budget, and zero-regression quality gates.
+description: Project-scoped worker that implements and verifies Python changes within typed repository boundaries. Applies the Black -> Ruff -> Pyright -> Pytest toolchain, the 1-3 production-file direct-mode budget with routing to the orchestrated large path above it, and zero-regression quality gates.
 tools:
   - Read
   - Write
@@ -65,7 +65,7 @@ Language standards and toolchain are defined in `.agents/skills/python/SKILL.md`
 Follow the phased workflow defined by the preloaded skills:
 
 1. **Policy compliance** — apply `policy-compliance-order` to load mandatory repo policies before any change.
-2. **Routing and scope** — apply `python-change-budget-router` to estimate scope, select small vs large path, and enforce the 3 production + 3 test per-batch cap.
+2. **Routing and scope** — apply `python-change-budget-router` to estimate scope and select direct mode (1-3 production files) or, for more than 3 production files, large-path escalation through `.codex/prompts/orchestrate-work.md`. The large path has no production-file cap, and test files are not counted toward the routing threshold.
 3. **Plan and baseline** — apply `atomic-plan-contract` for Phase 0 baseline capture and atomic plan structure. Delegate plan authoring to `atomic_planner` when no plan is supplied.
 4. **Implement in batches** — apply the approved plan. After each batch, run targeted Ruff and Pyright on touched files plus targeted Pytest, and confirm per-file coverage.
 5. **Final QA gate** — apply `python-qa-gate` to run the full toolchain, enforce zero-regression deltas against the baseline, and produce the required reporting block before declaring completion.
@@ -86,7 +86,7 @@ If the marker is missing or malformed, fail closed to `full-feature`.
 
 Stop implementation and return to the user when:
 
-- the scope estimate or an in-flight batch would exceed the 3-production-file cap,
+- the scope estimate exceeds 3 production files in direct mode,
 - a file is near or would exceed the 500-line limit,
 - any QA gate delta is non-zero after self-correction,
 - the toolchain cannot be executed in the current environment (mark the change **unverified**),

package/resources/codex-and-agents-customizations/.codex/agents/python-typed-engineer-c2.toml

@@ -29,7 +29,7 @@ Migration contract:
 
 ---
 name: python-typed-engineer
-description: Project-scoped worker that implements and verifies Python changes within typed repository boundaries. Applies the Black -> Ruff -> Pyright -> Pytest toolchain, the 3-production + 3-test per-batch budget, and zero-regression quality gates.
+description: Project-scoped worker that implements and verifies Python changes within typed repository boundaries. Applies the Black -> Ruff -> Pyright -> Pytest toolchain, the 1-3 production-file direct-mode budget with routing to the orchestrated large path above it, and zero-regression quality gates.
 tools:
   - Read
   - Write
@@ -65,7 +65,7 @@ Language standards and toolchain are defined in `.agents/skills/python/SKILL.md`
 Follow the phased workflow defined by the preloaded skills:
 
 1. **Policy compliance** — apply `policy-compliance-order` to load mandatory repo policies before any change.
-2. **Routing and scope** — apply `python-change-budget-router` to estimate scope, select small vs large path, and enforce the 3 production + 3 test per-batch cap.
+2. **Routing and scope** — apply `python-change-budget-router` to estimate scope and select direct mode (1-3 production files) or, for more than 3 production files, large-path escalation through `.codex/prompts/orchestrate-work.md`. The large path has no production-file cap, and test files are not counted toward the routing threshold.
 3. **Plan and baseline** — apply `atomic-plan-contract` for Phase 0 baseline capture and atomic plan structure. Delegate plan authoring to `atomic_planner` when no plan is supplied.
 4. **Implement in batches** — apply the approved plan. After each batch, run targeted Ruff and Pyright on touched files plus targeted Pytest, and confirm per-file coverage.
 5. **Final QA gate** — apply `python-qa-gate` to run the full toolchain, enforce zero-regression deltas against the baseline, and produce the required reporting block before declaring completion.
@@ -86,7 +86,7 @@ If the marker is missing or malformed, fail closed to `full-feature`.
 
 Stop implementation and return to the user when:
 
-- the scope estimate or an in-flight batch would exceed the 3-production-file cap,
+- the scope estimate exceeds 3 production files in direct mode,
 - a file is near or would exceed the 500-line limit,
 - any QA gate delta is non-zero after self-correction,
 - the toolchain cannot be executed in the current environment (mark the change **unverified**),

package/resources/codex-and-agents-customizations/.codex/agents/python-typed-engineer-c3-elevated.toml

@@ -29,7 +29,7 @@ Migration contract:
 
 ---
 name: python-typed-engineer
-description: Project-scoped worker that implements and verifies Python changes within typed repository boundaries. Applies the Black -> Ruff -> Pyright -> Pytest toolchain, the 3-production + 3-test per-batch budget, and zero-regression quality gates.
+description: Project-scoped worker that implements and verifies Python changes within typed repository boundaries. Applies the Black -> Ruff -> Pyright -> Pytest toolchain, the 1-3 production-file direct-mode budget with routing to the orchestrated large path above it, and zero-regression quality gates.
 tools:
   - Read
   - Write
@@ -65,7 +65,7 @@ Language standards and toolchain are defined in `.agents/skills/python/SKILL.md`
 Follow the phased workflow defined by the preloaded skills:
 
 1. **Policy compliance** — apply `policy-compliance-order` to load mandatory repo policies before any change.
-2. **Routing and scope** — apply `python-change-budget-router` to estimate scope, select small vs large path, and enforce the 3 production + 3 test per-batch cap.
+2. **Routing and scope** — apply `python-change-budget-router` to estimate scope and select direct mode (1-3 production files) or, for more than 3 production files, large-path escalation through `.codex/prompts/orchestrate-work.md`. The large path has no production-file cap, and test files are not counted toward the routing threshold.
 3. **Plan and baseline** — apply `atomic-plan-contract` for Phase 0 baseline capture and atomic plan structure. Delegate plan authoring to `atomic_planner` when no plan is supplied.
 4. **Implement in batches** — apply the approved plan. After each batch, run targeted Ruff and Pyright on touched files plus targeted Pytest, and confirm per-file coverage.
 5. **Final QA gate** — apply `python-qa-gate` to run the full toolchain, enforce zero-regression deltas against the baseline, and produce the required reporting block before declaring completion.
@@ -86,7 +86,7 @@ If the marker is missing or malformed, fail closed to `full-feature`.
 
 Stop implementation and return to the user when:
 
-- the scope estimate or an in-flight batch would exceed the 3-production-file cap,
+- the scope estimate exceeds 3 production files in direct mode,
 - a file is near or would exceed the 500-line limit,
 - any QA gate delta is non-zero after self-correction,
 - the toolchain cannot be executed in the current environment (mark the change **unverified**),

package/resources/codex-and-agents-customizations/.codex/agents/python-typed-engineer-c3.toml

@@ -29,7 +29,7 @@ Migration contract:
 
 ---
 name: python-typed-engineer
-description: Project-scoped worker that implements and verifies Python changes within typed repository boundaries. Applies the Black -> Ruff -> Pyright -> Pytest toolchain, the 3-production + 3-test per-batch budget, and zero-regression quality gates.
+description: Project-scoped worker that implements and verifies Python changes within typed repository boundaries. Applies the Black -> Ruff -> Pyright -> Pytest toolchain, the 1-3 production-file direct-mode budget with routing to the orchestrated large path above it, and zero-regression quality gates.
 tools:
   - Read
   - Write
@@ -65,7 +65,7 @@ Language standards and toolchain are defined in `.agents/skills/python/SKILL.md`
 Follow the phased workflow defined by the preloaded skills:
 
 1. **Policy compliance** — apply `policy-compliance-order` to load mandatory repo policies before any change.
-2. **Routing and scope** — apply `python-change-budget-router` to estimate scope, select small vs large path, and enforce the 3 production + 3 test per-batch cap.
+2. **Routing and scope** — apply `python-change-budget-router` to estimate scope and select direct mode (1-3 production files) or, for more than 3 production files, large-path escalation through `.codex/prompts/orchestrate-work.md`. The large path has no production-file cap, and test files are not counted toward the routing threshold.
 3. **Plan and baseline** — apply `atomic-plan-contract` for Phase 0 baseline capture and atomic plan structure. Delegate plan authoring to `atomic_planner` when no plan is supplied.
 4. **Implement in batches** — apply the approved plan. After each batch, run targeted Ruff and Pyright on touched files plus targeted Pytest, and confirm per-file coverage.
 5. **Final QA gate** — apply `python-qa-gate` to run the full toolchain, enforce zero-regression deltas against the baseline, and produce the required reporting block before declaring completion.
@@ -86,7 +86,7 @@ If the marker is missing or malformed, fail closed to `full-feature`.
 
 Stop implementation and return to the user when:
 
-- the scope estimate or an in-flight batch would exceed the 3-production-file cap,
+- the scope estimate exceeds 3 production files in direct mode,
 - a file is near or would exceed the 500-line limit,
 - any QA gate delta is non-zero after self-correction,
 - the toolchain cannot be executed in the current environment (mark the change **unverified**),

package/resources/codex-and-agents-customizations/.codex/agents/python-typed-engineer-c4.toml

@@ -29,7 +29,7 @@ Migration contract:
 
 ---
 name: python-typed-engineer
-description: Project-scoped worker that implements and verifies Python changes within typed repository boundaries. Applies the Black -> Ruff -> Pyright -> Pytest toolchain, the 3-production + 3-test per-batch budget, and zero-regression quality gates.
+description: Project-scoped worker that implements and verifies Python changes within typed repository boundaries. Applies the Black -> Ruff -> Pyright -> Pytest toolchain, the 1-3 production-file direct-mode budget with routing to the orchestrated large path above it, and zero-regression quality gates.
 tools:
   - Read
   - Write
@@ -65,7 +65,7 @@ Language standards and toolchain are defined in `.agents/skills/python/SKILL.md`
 Follow the phased workflow defined by the preloaded skills:
 
 1. **Policy compliance** — apply `policy-compliance-order` to load mandatory repo policies before any change.
-2. **Routing and scope** — apply `python-change-budget-router` to estimate scope, select small vs large path, and enforce the 3 production + 3 test per-batch cap.
+2. **Routing and scope** — apply `python-change-budget-router` to estimate scope and select direct mode (1-3 production files) or, for more than 3 production files, large-path escalation through `.codex/prompts/orchestrate-work.md`. The large path has no production-file cap, and test files are not counted toward the routing threshold.
 3. **Plan and baseline** — apply `atomic-plan-contract` for Phase 0 baseline capture and atomic plan structure. Delegate plan authoring to `atomic_planner` when no plan is supplied.
 4. **Implement in batches** — apply the approved plan. After each batch, run targeted Ruff and Pyright on touched files plus targeted Pytest, and confirm per-file coverage.
 5. **Final QA gate** — apply `python-qa-gate` to run the full toolchain, enforce zero-regression deltas against the baseline, and produce the required reporting block before declaring completion.
@@ -86,7 +86,7 @@ If the marker is missing or malformed, fail closed to `full-feature`.
 
 Stop implementation and return to the user when:
 
-- the scope estimate or an in-flight batch would exceed the 3-production-file cap,
+- the scope estimate exceeds 3 production files in direct mode,
 - a file is near or would exceed the 500-line limit,
 - any QA gate delta is non-zero after self-correction,
 - the toolchain cannot be executed in the current environment (mark the change **unverified**),

package/resources/codex-and-agents-customizations/.codex/agents/python-typed-engineer.toml

@@ -29,7 +29,7 @@ Migration contract:
 
 ---
 name: python-typed-engineer
-description: Project-scoped worker that implements and verifies Python changes within typed repository boundaries. Applies the Black -> Ruff -> Pyright -> Pytest toolchain, the 3-production + 3-test per-batch budget, and zero-regression quality gates.
+description: Project-scoped worker that implements and verifies Python changes within typed repository boundaries. Applies the Black -> Ruff -> Pyright -> Pytest toolchain, the 1-3 production-file direct-mode budget with routing to the orchestrated large path above it, and zero-regression quality gates.
 tools:
   - Read
   - Write
@@ -65,7 +65,7 @@ Language standards and toolchain are defined in `.agents/skills/python/SKILL.md`
 Follow the phased workflow defined by the preloaded skills:
 
 1. **Policy compliance** — apply `policy-compliance-order` to load mandatory repo policies before any change.
-2. **Routing and scope** — apply `python-change-budget-router` to estimate scope, select small vs large path, and enforce the 3 production + 3 test per-batch cap.
+2. **Routing and scope** — apply `python-change-budget-router` to estimate scope and select direct mode (1-3 production files) or, for more than 3 production files, large-path escalation through `.codex/prompts/orchestrate-work.md`. The large path has no production-file cap, and test files are not counted toward the routing threshold.
 3. **Plan and baseline** — apply `atomic-plan-contract` for Phase 0 baseline capture and atomic plan structure. Delegate plan authoring to `atomic_planner` when no plan is supplied.
 4. **Implement in batches** — apply the approved plan. After each batch, run targeted Ruff and Pyright on touched files plus targeted Pytest, and confirm per-file coverage.
 5. **Final QA gate** — apply `python-qa-gate` to run the full toolchain, enforce zero-regression deltas against the baseline, and produce the required reporting block before declaring completion.
@@ -86,7 +86,7 @@ If the marker is missing or malformed, fail closed to `full-feature`.
 
 Stop implementation and return to the user when:
 
-- the scope estimate or an in-flight batch would exceed the 3-production-file cap,
+- the scope estimate exceeds 3 production files in direct mode,
 - a file is near or would exceed the 500-line limit,
 - any QA gate delta is non-zero after self-correction,
 - the toolchain cannot be executed in the current environment (mark the change **unverified**),

package/resources/codex-and-agents-customizations/.codex/config.toml

@@ -2,7 +2,7 @@ default_permissions = ":danger-full-access"
 
 [mcp_servers.drm-copilot]
 command = "npx"
-args = ["-y", "@danmoisan/drm-copilot-mcp@1.1.16"]
+args = ["-y", "@danmoisan/drm-copilot-mcp@1.1.18"]
 required = true
 enabled_tools = [
     "collect_commit_context",

package/resources/codex-and-agents-customizations/.codex/hooks/enforce-batch-budget-route.ps1

@@ -0,0 +1,139 @@
+<#
+.SYNOPSIS
+    Pure route helpers shared by the batch-budget hooks.
+
+.DESCRIPTION
+    Defines the functions that read the selected route from orchestrator checkpoint
+    text and decide whether that checkpoint selects the uncapped orchestrated large
+    path. The file is dot-sourced by the PowerShell and Python batch-budget hooks and
+    has no entry point. The Claude and Codex runtime copies of this file are
+    byte-identical, and a parity test holds them identical. None of the functions
+    reads a file or an environment variable; the checkpoint text is supplied by the
+    caller.
+
+.NOTES
+    Compatible with PowerShell 7+.
+#>
+
+function ConvertFrom-BatchBudgetCheckpoint {
+    <#
+    .SYNOPSIS
+        Parses orchestrator checkpoint text into a checkpoint object.
+    .DESCRIPTION
+        Returns the parsed object only when the text is a JSON object. Null or
+        whitespace text, text that is not parseable JSON, and JSON whose root is not
+        an object all return $null. Performs no file or environment access.
+    .PARAMETER CheckpointText
+        Raw text of the orchestrator checkpoint file.
+    #>
+    [CmdletBinding()]
+    [OutputType([psobject])]
+    param(
+        [AllowNull()]
+        [AllowEmptyString()]
+        [string] $CheckpointText
+    )
+
+    if ([string]::IsNullOrWhiteSpace($CheckpointText)) {
+        return $null
+    }
+
+    try {
+        $parsed = ConvertFrom-Json -InputObject $CheckpointText -ErrorAction Stop
+    } catch {
+        Write-Verbose "Ignoring unparseable orchestrator checkpoint text: $($_.Exception.Message)"
+        return $null
+    }
+
+    if ($parsed -is [System.Management.Automation.PSCustomObject]) {
+        return $parsed
+    }
+
+    return $null
+}
+
+function Get-BatchBudgetSelectedRoute {
+    <#
+    .SYNOPSIS
+        Returns the route selected by an orchestrator checkpoint.
+    .DESCRIPTION
+        Uses route_id when the checkpoint has that key, otherwise path_selected. The
+        value is returned only when it is a non-blank string; every other case,
+        including unparseable text, returns an empty string.
+    .PARAMETER CheckpointText
+        Raw text of the orchestrator checkpoint file.
+    #>
+    [CmdletBinding()]
+    [OutputType([string])]
+    param(
+        [AllowNull()]
+        [AllowEmptyString()]
+        [string] $CheckpointText
+    )
+
+    $checkpoint = ConvertFrom-BatchBudgetCheckpoint -CheckpointText $CheckpointText
+    if ($null -eq $checkpoint) {
+        return ''
+    }
+
+    $propertyNames = @($checkpoint.PSObject.Properties.Name)
+    $rawRoute = $null
+    if ($propertyNames -contains 'route_id') {
+        $rawRoute = $checkpoint.route_id
+    } elseif ($propertyNames -contains 'path_selected') {
+        $rawRoute = $checkpoint.path_selected
+    }
+
+    if ($rawRoute -is [string] -and -not [string]::IsNullOrWhiteSpace($rawRoute)) {
+        return $rawRoute
+    }
+
+    return ''
+}
+
+function Test-BatchBudgetLargePathRoute {
+    <#
+    .SYNOPSIS
+        Reports whether an orchestrator checkpoint selects the uncapped large path.
+    .DESCRIPTION
+        Returns $true only when the checkpoint parses to an object, its selected route
+        is large, remediation, or preparation (case-sensitive), next_step is not
+        complete, and completed_steps does not contain S12_complete. No input causes
+        an exception; any failure returns $false.
+    .PARAMETER CheckpointText
+        Raw text of the orchestrator checkpoint file.
+    #>
+    [CmdletBinding()]
+    [OutputType([bool])]
+    param(
+        [AllowNull()]
+        [AllowEmptyString()]
+        [string] $CheckpointText
+    )
+
+    try {
+        $checkpoint = ConvertFrom-BatchBudgetCheckpoint -CheckpointText $CheckpointText
+        if ($null -eq $checkpoint) {
+            return $false
+        }
+
+        $route = Get-BatchBudgetSelectedRoute -CheckpointText $CheckpointText
+        if (-not (@('large', 'remediation', 'preparation') -ccontains $route)) {
+            return $false
+        }
+
+        $propertyNames = @($checkpoint.PSObject.Properties.Name)
+        if ($propertyNames -contains 'next_step' -and $checkpoint.next_step -is [string] -and $checkpoint.next_step -ceq 'complete') {
+            return $false
+        }
+
+        if ($propertyNames -contains 'completed_steps' -and (@($checkpoint.completed_steps) -ccontains 'S12_complete')) {
+            return $false
+        }
+
+        return $true
+    } catch {
+        Write-Verbose "Treating the orchestrator checkpoint as direct mode: $($_.Exception.Message)"
+        return $false
+    }
+}

package/resources/codex-and-agents-customizations/.codex/hooks/enforce-powershell-batch-budget.ps1

@@ -50,128 +50,8 @@ param()
 # mapping for every tool name the ^(apply_patch|Edit|Write)$ matcher admits.
 . (Join-Path $PSScriptRoot 'codex-pretooluse-file-mapping.ps1')
 
-function ConvertFrom-PowerShellBatchBudgetCheckpoint {
-    <#
-    .SYNOPSIS
-        Parses orchestrator checkpoint text into a checkpoint object.
-    .DESCRIPTION
-        Returns the parsed object only when the text is a JSON object. Null or
-        whitespace text, text that is not parseable JSON, and JSON whose root is not
-        an object all return $null. Performs no file or environment access.
-    .PARAMETER CheckpointText
-        Raw text of the orchestrator checkpoint file.
-    #>
-    [CmdletBinding()]
-    [OutputType([psobject])]
-    param(
-        [AllowNull()]
-        [AllowEmptyString()]
-        [string] $CheckpointText
-    )
-
-    if ([string]::IsNullOrWhiteSpace($CheckpointText)) {
-        return $null
-    }
-
-    try {
-        $parsed = ConvertFrom-Json -InputObject $CheckpointText -ErrorAction Stop
-    } catch {
-        Write-Verbose "Ignoring unparseable orchestrator checkpoint text: $($_.Exception.Message)"
-        return $null
-    }
-
-    if ($parsed -is [System.Management.Automation.PSCustomObject]) {
-        return $parsed
-    }
-
-    return $null
-}
-
-function Get-PowerShellBatchBudgetSelectedRoute {
-    <#
-    .SYNOPSIS
-        Returns the route selected by an orchestrator checkpoint.
-    .DESCRIPTION
-        Uses route_id when the checkpoint has that key, otherwise path_selected. The
-        value is returned only when it is a non-blank string; every other case,
-        including unparseable text, returns an empty string.
-    .PARAMETER CheckpointText
-        Raw text of the orchestrator checkpoint file.
-    #>
-    [CmdletBinding()]
-    [OutputType([string])]
-    param(
-        [AllowNull()]
-        [AllowEmptyString()]
-        [string] $CheckpointText
-    )
-
-    $checkpoint = ConvertFrom-PowerShellBatchBudgetCheckpoint -CheckpointText $CheckpointText
-    if ($null -eq $checkpoint) {
-        return ''
-    }
-
-    $propertyNames = @($checkpoint.PSObject.Properties.Name)
-    $rawRoute = $null
-    if ($propertyNames -contains 'route_id') {
-        $rawRoute = $checkpoint.route_id
-    } elseif ($propertyNames -contains 'path_selected') {
-        $rawRoute = $checkpoint.path_selected
-    }
-
-    if ($rawRoute -is [string] -and -not [string]::IsNullOrWhiteSpace($rawRoute)) {
-        return $rawRoute
-    }
-
-    return ''
-}
-
-function Test-PowerShellBatchBudgetLargePathRoute {
-    <#
-    .SYNOPSIS
-        Reports whether an orchestrator checkpoint selects the uncapped large path.
-    .DESCRIPTION
-        Returns $true only when the checkpoint parses to an object, its selected route
-        is large, remediation, or preparation (case-sensitive), next_step is not
-        complete, and completed_steps does not contain S12_complete. No input causes
-        an exception; any failure returns $false.
-    .PARAMETER CheckpointText
-        Raw text of the orchestrator checkpoint file.
-    #>
-    [CmdletBinding()]
-    [OutputType([bool])]
-    param(
-        [AllowNull()]
-        [AllowEmptyString()]
-        [string] $CheckpointText
-    )
-
-    try {
-        $checkpoint = ConvertFrom-PowerShellBatchBudgetCheckpoint -CheckpointText $CheckpointText
-        if ($null -eq $checkpoint) {
-            return $false
-        }
-
-        $route = Get-PowerShellBatchBudgetSelectedRoute -CheckpointText $CheckpointText
-        if (-not (@('large', 'remediation', 'preparation') -ccontains $route)) {
-            return $false
-        }
-
-        $propertyNames = @($checkpoint.PSObject.Properties.Name)
-        if ($propertyNames -contains 'next_step' -and $checkpoint.next_step -is [string] -and $checkpoint.next_step -ceq 'complete') {
-            return $false
-        }
-
-        if ($propertyNames -contains 'completed_steps' -and (@($checkpoint.completed_steps) -ccontains 'S12_complete')) {
-            return $false
-        }
-
-        return $true
-    } catch {
-        Write-Verbose "Treating the orchestrator checkpoint as direct mode: $($_.Exception.Message)"
-        return $false
-    }
-}
+# Shared route helpers; this file is byte-identical to the Claude runtime copy.
+. (Join-Path $PSScriptRoot 'enforce-batch-budget-route.ps1')
 
 function Get-PowerShellBatchBudgetState {
     [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSReviewUnusedParameter', 'TestCap', Justification = 'Accepted and ignored for callers written against the removed test-file cap.')]
@@ -348,8 +228,8 @@ function Invoke-PowerShellBatchBudgetHook {
         $checkpointText = ''
     }
 
-    $isLargePath = Test-PowerShellBatchBudgetLargePathRoute -CheckpointText $checkpointText
-    $observedRoute = Get-PowerShellBatchBudgetSelectedRoute -CheckpointText $checkpointText
+    $isLargePath = Test-BatchBudgetLargePathRoute -CheckpointText $checkpointText
+    $observedRoute = Get-BatchBudgetSelectedRoute -CheckpointText $checkpointText
     if ($isLargePath) {
         return Invoke-PowerShellBatchBudgetDecision -FilePath $filePath -State (Get-PowerShellBatchBudgetState -ProdCap $ProdCap) -StateFile $stateFile -LargePathRoute
     }