@danmoisan/drm-copilot-mcp 1.1.16 → 1.1.18

package/resources/codex-and-agents-customizations/.codex/hooks/enforce-python-batch-budget.ps1

@@ -1,32 +1,44 @@
 
 <#
 .SYNOPSIS
-    Pre-tool-use hook that enforces the Python per-batch change budget.
+    Pre-tool-use hook that routes Python changes of more than three production files to the orchestrated large path.
 
 .DESCRIPTION
     This script is invoked by the Codex PreToolUse hook before any Write or Edit
-    operation. When the target file is a Python file, it classifies the file as either
-    production or test and checks the running count against the per-batch cap:
-      - 3 production .py files per batch
-      - 3 test .py files per batch
-
-    A "batch" is scoped to the current Codex session. The running count is
-    persisted under .codex/state/python-batch-budget.<session_id>.json. Only distinct
-    file paths are counted; repeated edits to the same file consume one slot.
-
-    Test files are those matching:
+    operation. When the target file is a Python file (.py), it decides whether the
+    change may proceed in direct mode.
+
+    Direct mode counts distinct production Python paths per Codex session. The running
+    set is persisted under .codex/state/python-batch-budget.<session_id>.json, and
+    repeated edits to the same file are counted once. The 4th distinct production path
+    is denied with a PYTHON_LARGE_PATH_REQUIRED reason that instructs the caller to
+    route the change through .codex/prompts/orchestrate-work.md.
+
+    The orchestrated large path is detected from
+    <root>/artifacts/orchestration/orchestrator-state.json. The selected route is the
+    route_id value when that key is present, otherwise the path_selected value, and it
+    is usable only as a non-blank string. When the selected route is large,
+    remediation, or preparation and the checkpoint is not terminal (next_step is not
+    complete and completed_steps does not contain S12_complete), no path is denied for
+    count and no state is read or written. Every other checkpoint outcome, including
+    an absent, unreadable, or malformed checkpoint, enforces direct mode.
+
+    Test files are never counted. They are those matching:
       - tests/**/*.py
       - test_*.py
 
-    All other .py files are treated as production files. Non-Python paths pass through.
+    All other .py files are production files. Non-Python paths pass through. The
+    threshold of three production files is a routing constant and is not configurable
+    at runtime. Legacy prodCap, testCap, and testFiles keys in a persisted state file
+    are ignored when the state is loaded.
 
-    An approved per-session override is recorded by writing
-    {"prodCap": N, "testCap": M} into the Codex state file.
+    When a production path is denied, the script emits a PreToolUse JSON response with
+    hookSpecificOutput.permissionDecision = 'deny' and exits 0. Files already counted
+    are always allowed through.
 
-    When the cap would be exceeded by a new file, the script emits a PreToolUse JSON
-    response with hookSpecificOutput.permissionDecision = 'deny' and exits 0. The session
-    must explicitly reset the counter by deleting the state file before starting a new
-    batch. Files already counted are always allowed through.
+    Known limitation: a stale non-terminal large-path checkpoint left at the root
+    exempts a later direct-mode session at that root. Orchestrator checkpoint hygiene
+    (issue #673) moves foreign checkpoints aside before a new run.
 
 .NOTES
     Compatible with PowerShell 7+.
@@ -38,26 +50,28 @@ param()
 # mapping for every tool name the ^(apply_patch|Edit|Write)$ matcher admits.
 . (Join-Path $PSScriptRoot 'codex-pretooluse-file-mapping.ps1')
 
+# Shared route helpers; this file is byte-identical to the Claude runtime copy.
+. (Join-Path $PSScriptRoot 'enforce-batch-budget-route.ps1')
+
 function Get-PythonBatchBudgetState {
+    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSReviewUnusedParameter', 'TestCap', Justification = 'Accepted and ignored for callers written against the removed test-file cap.')]
     [CmdletBinding()]
     [OutputType([System.Collections.Specialized.OrderedDictionary])]
     param(
         [Parameter(Mandatory)]
         [int] $ProdCap,
 
-        [Parameter(Mandatory)]
-        [int] $TestCap
+        [int] $TestCap = 0
     )
 
     [ordered]@{
         prodCap   = $ProdCap
-        testCap   = $TestCap
         prodFiles = @()
-        testFiles = @()
     }
 }
 
 function ConvertTo-PythonBatchBudgetState {
+    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSReviewUnusedParameter', 'TestCap', Justification = 'Accepted and ignored for callers written against the removed test-file cap.')]
     [CmdletBinding()]
     [OutputType([System.Collections.Specialized.OrderedDictionary])]
     param(
@@ -67,15 +81,13 @@ function ConvertTo-PythonBatchBudgetState {
         [Parameter(Mandatory)]
         [int] $ProdCap,
 
-        [Parameter(Mandatory)]
-        [int] $TestCap
+        [int] $TestCap = 0
     )
 
-    $state = Get-PythonBatchBudgetState -ProdCap $ProdCap -TestCap $TestCap
-    if ($null -ne $InputObject.prodCap) { $state.prodCap = [int]$InputObject.prodCap }
-    if ($null -ne $InputObject.testCap) { $state.testCap = [int]$InputObject.testCap }
+    # Only prodFiles is carried over. Persisted prodCap, testCap, and testFiles keys
+    # come from the removed test-file cap and recorded overrides and are ignored.
+    $state = Get-PythonBatchBudgetState -ProdCap $ProdCap
     if ($null -ne $InputObject.prodFiles) { $state.prodFiles = @($InputObject.prodFiles) }
-    if ($null -ne $InputObject.testFiles) { $state.testFiles = @($InputObject.testFiles) }
 
     return $state
 }
@@ -105,6 +117,7 @@ function Get-PythonBatchBudgetBlockDecision {
 }
 
 function Invoke-PythonBatchBudgetDecision {
+    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSReviewUnusedParameter', 'TestCap', Justification = 'Accepted and ignored for callers written against the removed test-file cap.')]
     [CmdletBinding()]
     [OutputType([System.Collections.Specialized.OrderedDictionary])]
     param(
@@ -114,8 +127,15 @@ function Invoke-PythonBatchBudgetDecision {
         [Parameter(Mandatory)]
         [System.Collections.IDictionary] $State,
 
-        [Parameter(Mandatory)]
-        [string] $StateFile
+        [AllowEmptyString()]
+        [string] $StateFile = '',
+
+        [int] $TestCap = 0,
+
+        [switch] $LargePathRoute,
+
+        [AllowEmptyString()]
+        [string] $ObservedRoute = ''
     )
 
     $normalized = $FilePath -replace '\\', '/'
@@ -123,26 +143,32 @@ function Invoke-PythonBatchBudgetDecision {
         return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $false }
     }
 
+    # The orchestrated large path has no production-file cap, so nothing is counted.
+    if ($LargePathRoute) {
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $false }
+    }
+
+    # Test files never count toward the routing threshold.
     $isTestFile = ($normalized -match '(^|/)tests/.*\.py$') -or ($normalized -match '(^|/)test_[^/]+\.py$')
-    $targetList = if ($isTestFile) { @($State.testFiles) } else { @($State.prodFiles) }
-    $cap = if ($isTestFile) { [int]$State.testCap } else { [int]$State.prodCap }
-    $kind = if ($isTestFile) { 'test' } else { 'production' }
+    if ($isTestFile) {
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $false }
+    }
 
-    if ($targetList -contains $normalized) {
+    $countedFiles = @($State.prodFiles)
+    if ($countedFiles -contains $normalized) {
         return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $false }
     }
 
-    if ($targetList.Count -ge $cap) {
-        $currentFiles = ($targetList -join ', ')
-        $reason = "Python per-batch budget exceeded: $kind file cap is $cap and is already full ($currentFiles). Requested new file: $normalized. Split the work into a new batch, record an approved cap in $StateFile, or reset the batch by deleting that state file."
+    $cap = [int]$State.prodCap
+    if ($countedFiles.Count -ge $cap) {
+        Write-Verbose "Denying production Python path '$normalized' in direct mode; counted paths are recorded in '$StateFile'."
+        $counted = $countedFiles -join ', '
+        $route = if ([string]::IsNullOrWhiteSpace($ObservedRoute)) { 'none' } else { $ObservedRoute }
+        $reason = "PYTHON_LARGE_PATH_REQUIRED: this change touches more than $cap production Python files (already counted: $counted; requested: $normalized). A change of this size belongs on the orchestrated large path, which has no production-file cap. Route the change through .codex/prompts/orchestrate-work.md. Checkpoint route observed: $route."
         return Get-PythonBatchBudgetBlockDecision -Reason $reason -State $State
     }
 
-    if ($isTestFile) {
-        $State.testFiles = @($State.testFiles) + @($normalized)
-    } else {
-        $State.prodFiles = @($State.prodFiles) + @($normalized)
-    }
+    $State.prodFiles = $countedFiles + @($normalized)
 
     return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $true }
 }
@@ -155,7 +181,13 @@ function Invoke-PythonBatchBudgetHook {
         [string] $SessionId = 'default',
         [string] $Root = (Get-Location).Path,
         [int] $ProdCap = 3,
-        [int] $TestCap = 3,
+        [scriptblock] $ReadCheckpoint = {
+            param([string] $Path)
+            if (Test-Path -LiteralPath $Path -PathType Leaf) {
+                return (Get-Content -LiteralPath $Path -Raw)
+            }
+            return ''
+        },
         [scriptblock] $TestPathExists = { param([string] $Path) Test-Path -Path $Path },
         [scriptblock] $EnsureDirectory = { param([string] $Path) New-Item -ItemType Directory -Path $Path -Force | Out-Null },
         [scriptblock] $ReadState = { param([string] $Path) Get-Content -Path $Path -Raw },
@@ -186,23 +218,41 @@ function Invoke-PythonBatchBudgetHook {
     }
 
     $stateDir = Join-Path -Path $Root -ChildPath '.codex/state'
+    $stateFile = Join-Path -Path $stateDir -ChildPath ("python-batch-budget.$SessionId.json")
+
+    # The checkpoint is read before any state operation, so the large path neither
+    # creates the state directory nor reads or writes the state file.
+    $checkpointPath = Join-Path -Path $Root -ChildPath 'artifacts/orchestration/orchestrator-state.json'
+    $checkpointText = ''
+    try {
+        $checkpointText = [string](& $ReadCheckpoint $checkpointPath)
+    } catch {
+        Write-Verbose "Treating unreadable orchestrator checkpoint '$checkpointPath' as direct mode: $($_.Exception.Message)"
+        $checkpointText = ''
+    }
+
+    $isLargePath = Test-BatchBudgetLargePathRoute -CheckpointText $checkpointText
+    $observedRoute = Get-BatchBudgetSelectedRoute -CheckpointText $checkpointText
+    if ($isLargePath) {
+        return Invoke-PythonBatchBudgetDecision -FilePath $filePath -State (Get-PythonBatchBudgetState -ProdCap $ProdCap) -StateFile $stateFile -LargePathRoute
+    }
+
     if (-not (& $TestPathExists $stateDir)) {
         & $EnsureDirectory $stateDir
     }
 
-    $stateFile = Join-Path -Path $stateDir -ChildPath ("python-batch-budget.$SessionId.json")
-    $state = Get-PythonBatchBudgetState -ProdCap $ProdCap -TestCap $TestCap
+    $state = Get-PythonBatchBudgetState -ProdCap $ProdCap
 
     if (& $TestPathExists $stateFile) {
         try {
             $loaded = & $ReadState $stateFile | ConvertFrom-Json -ErrorAction Stop
-            $state = ConvertTo-PythonBatchBudgetState -InputObject $loaded -ProdCap $ProdCap -TestCap $TestCap
+            $state = ConvertTo-PythonBatchBudgetState -InputObject $loaded -ProdCap $ProdCap
         } catch {
             Write-Verbose "Ignoring unreadable Python batch-budget state file '$stateFile': $($_.Exception.Message)"
         }
     }
 
-    $decision = Invoke-PythonBatchBudgetDecision -FilePath $filePath -State $state -StateFile $stateFile
+    $decision = Invoke-PythonBatchBudgetDecision -FilePath $filePath -State $state -StateFile $stateFile -ObservedRoute $observedRoute
     if ($decision.shouldWriteState) {
         try {
             & $WriteState $stateFile $decision.state
@@ -214,41 +264,81 @@ function Invoke-PythonBatchBudgetHook {
     return $decision
 }
 
-if ($MyInvocation.InvocationName -eq '.') {
-    return
-}
+function Invoke-PythonBatchBudgetCodexEntryPoint {
+    <#
+    .SYNOPSIS
+        Runs the Codex Python batch-budget decision and returns the process exit code.
+    .DESCRIPTION
+        Parses the Codex PreToolUse payload through the shared transport, collects both
+        sides of every mapped file edit, and evaluates each path with the Python hook.
+        The first deny is written to the output stream as compact JSON without its state
+        property, followed by exit code 0. When nothing is denied the function returns
+        0 and writes nothing else. Any failure writes the error text to standard error
+        and returns 2. The function does not call exit.
+    .PARAMETER PayloadRaw
+        Raw PreToolUse payload text.
+    .PARAMETER RepositoryRoot
+        Root used to locate the Codex state directory and the orchestrator checkpoint.
+    .PARAMETER HookSeams
+        Optional seam overrides splatted into Invoke-PythonBatchBudgetHook.
+    #>
+    [CmdletBinding()]
+    [OutputType([int])]
+    param(
+        [Parameter(Mandatory)]
+        [AllowNull()]
+        [AllowEmptyString()]
+        [string] $PayloadRaw,
+
+        [Parameter(Mandatory)]
+        [string] $RepositoryRoot,
 
-try {
-    # Transport and mapping come from the shared module. session_id is still
-    # required because the batch counter is keyed by it.
-    $payload = ConvertFrom-CodexPreToolUsePayload -PayloadRaw ([Console]::In.ReadToEnd()) -HookName 'enforce-python-batch-budget' -RequireSessionId
-    $sessionId = ([string]$payload.session_id) -replace '[^A-Za-z0-9._-]', '_'
-    $repositoryRoot = Split-Path (Split-Path $PSScriptRoot -Parent) -Parent
-    $prodCap = 3
-    $testCap = 3
-
-    # Both sides of a rename consume budget, matching the pre-fix path scan that
-    # collected Add/Update/Delete targets and Move destinations alike. Ordering
-    # and de-duplication are preserved. A well-formed payload that maps to no
-    # file yields no paths, so no state is written and the hook allows silently.
-    $budgetPaths = @(
-        @(ConvertTo-CodexFileEditInput -Payload $payload) |
-            ForEach-Object { $_.source_path; $_.file_path } |
-                Where-Object { -not [string]::IsNullOrWhiteSpace($_) } |
-                    Select-Object -Unique
+        [hashtable] $HookSeams = @{}
     )
 
-    foreach ($path in $budgetPaths) {
-        $toolInputRaw = @{ file_path = $path } | ConvertTo-Json -Compress
-        $decision = Invoke-PythonBatchBudgetHook -ToolInputRaw $toolInputRaw -SessionId $sessionId -Root $repositoryRoot -ProdCap $prodCap -TestCap $testCap
-        if ($decision.hookSpecificOutput.permissionDecision -eq 'deny') {
-            $decision.Remove('state')
-            $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
-            exit 0
+    try {
+        # Transport and mapping come from the shared module. session_id is still
+        # required because the direct-mode counter is keyed by it.
+        $payload = ConvertFrom-CodexPreToolUsePayload -PayloadRaw $PayloadRaw -HookName 'enforce-python-batch-budget' -RequireSessionId
+        $sessionId = ([string]$payload.session_id) -replace '[^A-Za-z0-9._-]', '_'
+
+        # Both sides of a rename are evaluated, matching the path scan that collected
+        # Add/Update/Delete targets and Move destinations alike. Ordering and
+        # de-duplication are preserved. A well-formed payload that maps to no file
+        # yields no paths, so no state is written and the hook allows silently.
+        $budgetPaths = @(
+            @(ConvertTo-CodexFileEditInput -Payload $payload) |
+                ForEach-Object { $_.source_path; $_.file_path } |
+                    Where-Object { -not [string]::IsNullOrWhiteSpace($_) } |
+                        Select-Object -Unique
+        )
+
+        foreach ($path in $budgetPaths) {
+            $toolInputRaw = @{ file_path = $path } | ConvertTo-Json -Compress
+            $decision = Invoke-PythonBatchBudgetHook -ToolInputRaw $toolInputRaw -SessionId $sessionId -Root $RepositoryRoot @HookSeams
+            if ($decision.hookSpecificOutput.permissionDecision -eq 'deny') {
+                $decision.Remove('state')
+                $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
+                return 0
+            }
         }
+
+        return 0
+    } catch {
+        [Console]::Error.WriteLine([string]$_)
+        return 2
     }
-    exit 0
-} catch {
-    [Console]::Error.WriteLine([string]$_)
-    exit 2
 }
+
+if ($MyInvocation.InvocationName -eq '.') {
+    return
+}
+
+# The entry point returns its [int] exit code as the last pipeline element and any
+# deny JSON before it, so the JSON is written explicitly before the process exits.
+$entryPointResult = @(Invoke-PythonBatchBudgetCodexEntryPoint -PayloadRaw ([Console]::In.ReadToEnd()) -RepositoryRoot (Split-Path (Split-Path $PSScriptRoot -Parent) -Parent))
+if ($entryPointResult.Count -gt 1) {
+    $entryPointResult[0..($entryPointResult.Count - 2)] | Write-Output
+}
+
+exit ([int]$entryPointResult[-1])

package/resources/codex-and-agents-customizations/pack-manifests/core.json

@@ -48,6 +48,7 @@
     ".codex/hooks/validate-codex-subagent-routing.ps1",
     ".codex/hooks/check-powershell-test-purity.ps1",
     ".codex/hooks/check-python-test-purity.ps1",
+    ".codex/hooks/enforce-batch-budget-route.ps1",
     ".codex/hooks/enforce-checkpoint-monotonic.ps1",
     ".codex/hooks/enforce-completion-consistency.ps1",
     ".codex/hooks/enforce-completion-helpers.ps1",

package/resources/customizations/.github/agents/python-orchestrator.agent.md

@@ -97,7 +97,7 @@ Use these reusable skills to avoid duplicating shared operations:
 3) **Single source of routing truth = change budget**
 - First action is always to estimate rough change budget by identifying likely affected production Python files.
 - If estimate is `1-3` production Python files (+ corresponding tests), use **small path**.
-- If estimate is `>3` production Python files or `>3` test Python files, use **large path**.
+- If estimate is more than 3 (`>3`) production Python files, use **large path**. The large path has no production-file cap. Test files are not counted toward the routing threshold.
 
 4) **Deterministic variable handling**
 - Persist and reuse these variables exactly as names:
@@ -117,7 +117,7 @@ Use these reusable skills to avoid duplicating shared operations:
 
 ## Phase 0 — Intake and budget estimate (mandatory)
 
-1. Read user request and infer likely touched production Python files and/or test Python files.
+1. Read user request and infer likely touched production Python files.
 2. Estimate rough change budget.
 3. Write/update orchestration checkpoint.
 4. Route to one of two paths:
@@ -126,7 +126,7 @@ Use these reusable skills to avoid duplicating shared operations:
 
 ---
 
-## Small path (budget 1-3 production Python files and 1-3 test Python files)
+## Small path (budget 1-3 production Python files)
 
 Follow this exact sequence.
 
@@ -243,7 +243,7 @@ Hard enforcement for S8:
 
 ---
 
-## Large path (budget >3 production Python files or >3 test Python files)
+## Large path (budget >3 production Python files)
 
 Follow this exact sequence.
 

package/resources/customizations/.github/agents/python-typed-engineer.agent.md

@@ -58,12 +58,12 @@ If any instructions conflict, **halt and notify the user**.
 
 ## 1) Scope control (NO scope creep)
 
-- Default scope is **one feature slice** (typically **1–3 production files** within the same package) plus its corresponding test file(s).
-- You may touch up to **3 production files** without additional approval **only** when it is required to:
+- Default scope is **one feature slice** (typically **1-3 production files** within the same package) plus its corresponding test file(s).
+- Within the direct-mode budget, a slice may include production files beyond the primary module only when it is required to:
   - introduce a minimal seam for testability (I/O boundary isolation, dependency injection),
   - make typing changes required for Pyright cleanliness in the slice, or
   - update the smallest set of call sites needed to preserve a stable public API.
-- Any change beyond **3 production files** requires explicit user approval.
+- If the change requires more than 3 production files, stop and instruct the caller to use `python-orchestrator` (or `.github/prompts/orchestrate-python-work.prompt.md`). The orchestrated large path has no production-file cap.
 - You may not modify additional production files unless:
   - the user explicitly expands scope, OR
   - a shared helper is objectively broken and the minimal fix is required for the in-scope change.
@@ -73,11 +73,10 @@ If any instructions conflict, **halt and notify the user**.
   - the smallest alternative that avoids expanding scope
   Proceed only after user approval.
 
-## 2) Change budget (hard gate)
+## 2) Change budget (routing threshold)
 
-- Per batch you may change at most **3 production files** and **3 test files**. This is the default and the hard gate. A user-supplied override may be honored only if it complies with repo policy and approved scope; if the requested scope exceeds 3 production files overall, stop before execution and seek explicit approval.
-- Override by specifying ‘budget: prod=<N>, test=<M>’ in the user prompt before Phase C begins.
-- If no override is provided, the 3/3 limit applies; if an override is requested, comfirm compliance before Phase C. 
+- Direct mode budget: 1-3 production Python files (+ corresponding tests). A change of more than 3 production Python files belongs on the orchestrated large path (`python-orchestrator`).
+- Test files are not counted toward the routing threshold, and the orchestrated large path has no production-file cap.
 
 ## 3) Deterministic unit tests only (no temp files, no external systems)
 
@@ -135,7 +134,7 @@ If no plan is provided, delegate the creation of a plan to the `atomic_planner`.
 - Mocking plan (what is mocked, where patched, and why)
 - Exact files to change (must match scope guardrails)
 
-Before exiting Phase B, perform a quick line-count check on all in-scope files. If any file is near the 500-line limit or planned additions would push it over 500, decide upfront to split now (counting new files against the budget) or seek an override before Phase C. If uncertain, treat it as at-risk and plan for a split rather than discovering it mid-execution. If an approved plan would create a 500-line violation, halt and seek clarification before proceeding.
+Before exiting Phase B, perform a quick line-count check on all in-scope files. If any file is near the 500-line limit or planned additions would push it over 500, decide upfront to split now (counting new files against the budget) before Phase C. If uncertain, treat it as at-risk and plan for a split rather than discovering it mid-execution. If an approved plan would create a 500-line violation, halt and seek clarification before proceeding.
 
 Do not proceed to edits until the user explicitly approves (e.g., “Proceed.”).
 However, if a plan is provided in the initial prompt, it is already implicitly approved.

package/resources/customizations/.github/prompts/orchestrate-python-work.prompt.md

@@ -20,10 +20,10 @@ Coordinate the user request from intake to completion using the correct path bas
 
 ## Required orchestration behavior
 
-1. Estimate rough change budget first (production Python files and test Python files).
-2. If budget is **1–3 production Python files** (+ corresponding tests):
+1. Estimate rough change budget first (production Python files; test files are not counted toward the routing threshold).
+2. If budget is **1-3 production Python files** (+ corresponding tests):
    - Delegate directly to `python-typed-engineer` for plan + implementation + QA closure.
-3. If budget is **>3 production Python files** or **>3 test Python files**:
+3. If budget is **more than 3 production Python files**:
    - Execute full large-path lifecycle:
      1) Scope and create potential entry (`feature` vs `bug`, short-name creation)
      2) Promote to GitHub issue and capture issue metadata

package/resources/customizations/.github/skills/acceptance-criteria-tracking/SKILL.md

@@ -68,6 +68,14 @@ During plan execution, after completing a task whose work satisfies an acceptanc
 
 Timing: Check off AC items as soon as the corresponding plan task passes verification — do not defer all AC updates to the end of plan execution.
 
+### CI-Dependent Criteria
+
+A CI-dependent criterion is one whose verification requires the result of CI on the PR head. It cannot be verified before the pull request exists, so it stays unchecked and is listed as pending-CI in the AC verification artifact until CI has run.
+
+- Owner: the item's own orchestrator run owns the check-off and performs it at S9; this is the one case in which an orchestrator run checks off AC. A parent or coordinating session never commits the check-off from its own root.
+- Timing: after the CI green gate (S9) records `ci_gate.conclusion` as `success`, and before the run reports DONE.
+- Push and re-verify: the check-off is committed in the item's own worktree and pushed to the PR branch, and the CI green gate is re-run against the new head SHA so that `ci_gate.head_sha` equals the final PR head before DONE.
+
 ### When Reviewers Check Off AC
 
 During feature review (feature-audit phase):

package/resources/customizations/.github/skills/evidence-and-timestamp-conventions/SKILL.md

@@ -19,6 +19,8 @@ Use this skill when:
 Use `yyyy-MM-ddTHH-mm` for all audit, remediation, and evidence artifacts.
 Example: `2026-02-06T14-30`.
 
+The `Timestamp` value is local time read from the host system clock when the recorded command runs (for example `Get-Date -Format yyyy-MM-ddTHH-mm`); the agent never composes or estimates it.
+
 ## Canonical Evidence Locations
 
 - Baseline evidence: `evidence/baseline/`
@@ -83,6 +85,8 @@ When evidence artifacts are used for automated checking or plan reconciliation,
 - `Command: <exact command>`
 - `EXIT_CODE: <int>`
 
+The first occurrence of `Timestamp`, `Command`, `EXIT_CODE`, and `ExpectedExitCode` forms the record in both the Python and the TypeScript parser; later occurrences, including empty later values, are ignored. An artifact that records several gates therefore reports its first gate.
+
 One optional field may also be declared:
 - `ExpectedExitCode: <int>` — the exit code the gate is expected to produce.
 

package/resources/powershell/PoshQC/settings/pester.runsettings.psd1

@@ -29,7 +29,7 @@
             '.claude/hooks/check-powershell-test-purity.ps1'
             '.claude/hooks/enforce-python-batch-budget.ps1'
             '.claude/hooks/enforce-powershell-batch-budget.ps1'
-            '.claude/hooks/enforce-powershell-batch-budget-route.ps1'
+            '.claude/hooks/enforce-batch-budget-route.ps1'
             # Issue #272 hardened this PreToolUse hook with a new orchestrator-state preflight
             # check; measured here so the change produces real per-file coverage evidence.
             '.claude/hooks/enforce-pr-author-skill.ps1'
@@ -45,8 +45,10 @@
             '.claude/hooks/enforce-epic-merge-gate.ps1'
             # Issue #670: CodeCoverage.Path is an explicit per-file allow-list, so the dot-sourced helpers file is listed here.
             '.claude/hooks/enforce-epic-merge-gate-authorization.ps1'
+            '.claude/hooks/enforce-epic-merge-gate-resolution.ps1'
             '.claude/hooks/enforce-epic-wave-barrier.ps1'
             '.claude/hooks/enforce-epic-worktree-removal-gate.ps1'
+            '.claude/hooks/enforce-epic-worktree-removal-gate-resolution.ps1'
             '.claude/hooks/enforce-pr-author-skill.ps1'
             '.claude/hooks/validate-orchestrator-output.ps1'
             '.claude/hooks/enforce-pr-author-skill.epic-base-branch.ps1'
@@ -102,6 +104,8 @@
             # measured here so the new production modules are not excluded from coverage.
             '.claude/lib/orchestrator-state/OrchestratorStateCheckpointValue.psm1'
             '.claude/lib/orchestrator-state/OrchestratorStateReceipts.psm1'
+            # Issue #484 added the remediation-loop R5-R11 accounting module.
+            '.claude/lib/orchestrator-state/OrchestratorStateRemediationAccounting.psm1'
             '.claude/lib/orchestrator-state/OrchestratorStateModelReceipts.psm1'
             # Issue #475 added the portable Codex routing resolvers so the U6.X and U6.T
             # checkpoint checks resolve deployments and topologies without a Python
@@ -119,6 +123,8 @@
             '.claude/lib/orchestrator-state/OrchestratorStateRoutingMatrix.psm1'
             '.claude/lib/orchestrator-state/OrchestratorStateCompletionChecks.psm1'
             '.claude/lib/orchestrator-state/OrchestratorStateRoutingContract.psm1'
+            # Issue #509 added the issue-adoption resolver consumed by the routing contract.
+            '.claude/lib/orchestrator-state/OrchestratorStateIssueAdoption.psm1'
             '.claude/lib/orchestrator-state/OrchestratorStateUnconditional.psm1'
             # Issue #392 changed the Invoke-PoshQCTest default seams ($EnsureModule -Global
             # import and the global-session-state $InvokePester trampoline) so the bundled
@@ -135,6 +141,7 @@
             '.codex/hooks/check-powershell-test-purity.ps1'
             '.codex/hooks/enforce-python-batch-budget.ps1'
             '.codex/hooks/enforce-powershell-batch-budget.ps1'
+            '.codex/hooks/enforce-batch-budget-route.ps1'
             '.codex/hooks/enforce-evidence-locations.ps1'
             '.codex/hooks/enforce-checkpoint-monotonic.ps1'
             '.codex/hooks/enforce-orchestration-preimplementation-gate.ps1'
@@ -318,11 +325,19 @@
             # Issue #663 added the epic-scope resolver and its pure readiness predicates.
             '.claude/lib/worktree-resolution/EpicScopeResolution.psm1'
             '.claude/lib/worktree-resolution/EpicScopeReadiness.psm1'
+            # Issue #690 added the run-target resolver; registered so it stays in the coverage denominator.
+            '.claude/lib/worktree-resolution/WorktreeRunResolution.psm1'
             # Issue #762 relocated the CI gate parser into the bundled .claude/lib tree so
             # push-down carries it with the orchestrate and epic-orchestrate skills.
             # CodeCoverage.Path is an explicit per-file allow-list, so the relocated production
             # file is registered here to stay in the coverage denominator.
             '.claude/lib/ci-gate/Invoke-CiGateParser.ps1'
+            # Issue #763 ported radius drift detection to the destination runtime as two pure
+            # modules and an entry script under .claude/lib/parallel-drift. CodeCoverage.Path is an
+            # explicit per-file allow-list, so each new production file is registered here.
+            '.claude/lib/parallel-drift/ParallelDriftHalt.psm1'
+            '.claude/lib/parallel-drift/ParallelDrift.psm1'
+            '.claude/lib/parallel-drift/Invoke-ParallelDriftDetection.ps1'
         )
         # Optional: don't fail the run on coverage percentage
         CoveragePercentTarget = 0