@danmoisan/drm-copilot-mcp 1.1.18 → 1.1.19

package/resources/claude-customizations/.claude/hooks/enforce-prd-feature-before-planner-helpers.ps1

@@ -10,13 +10,16 @@
     cap as target resolution grows.
 
     The file declares no file-scope parameter block, no requires directive, and no
-    entrypoint. Apart from its function declarations,
-    its only file-scope statement is the resolution-module import
-    that follows this block, which brings in issue #669's path normalisation and
-    ambiguity reason code. That import is deliberately unguarded, for the same
-    reason the parent hook's is: a resolution module that cannot be loaded is
-    itself the target-not-resolvable state, so letting the failure surface fails
-    the gate closed rather than degrading it to a permissive path.
+    entrypoint. Apart from its function declarations, its file-scope statements are
+    the resolution-module import that follows this block, which brings in issue
+    #669's path normalisation and ambiguity reason code, and the guarded dot-source
+    of the pure shared resolver feature-folder-resolution.ps1 (issue #565), which
+    owns the single work-mode parser. The module import is deliberately unguarded,
+    for the same reason the parent hook's is: a resolution module that cannot be
+    loaded is itself the target-not-resolvable state, so letting the failure surface
+    fails the gate closed rather than degrading it to a permissive path. A failed
+    dot-source of the shared resolver makes Resolve-PrdFeatureWorkMode return $null,
+    which the planner gate's deny-on-unknown branch treats as an unreadable marker.
 .NOTES
     Compatible with PowerShell 7+. Read-only resolution logic.
 #>
@@ -24,7 +27,17 @@
 # Issue #669 owns path normalisation and the ambiguity reason code. The import is
 # unguarded for the same reason the parent's is: a resolution module that cannot be
 # loaded is itself the target-not-resolvable state.
-Import-Module (Join-Path $PSScriptRoot '../lib/worktree-resolution/WorktreeResolution.psm1') -Force
+Import-Module (Join-Path $PSScriptRoot '../lib/worktree-resolution/WorktreeResolution.psm1') -Force -ErrorAction Stop
+
+# Shared work-mode parser (issue #565). Guarded so a failed dot-source fails closed
+# through the planner gate's deny-on-unknown branch.
+$script:PrdFeatureFolderResolutionImportFailure = $null
+try {
+    . (Join-Path $PSScriptRoot 'feature-folder-resolution.ps1')
+}
+catch {
+    $script:PrdFeatureFolderResolutionImportFailure = 'feature-folder-resolution.ps1'
+}
 
 function Resolve-PrdFeatureWorkMode {
     <#
@@ -36,7 +49,10 @@ function Resolve-PrdFeatureWorkMode {
         Recognizes minor-audit, full-feature, full-bug, and the legacy full
         marker (normalized to full-feature), mirroring the regex convention
         used by scripts/dev_tools/prompt_mode_contract.py so both runtimes
-        agree on what counts as a valid marker line.
+        agree on what counts as a valid marker line. Delegates to the single
+        shared parser, Resolve-FeatureFolderWorkMode (issue #565), with an empty
+        -UnresolvedMode so an unresolved marker still returns $null here; a
+        failed dot-source of the shared resolver also returns $null.
     #>
     [CmdletBinding()]
     [OutputType([string])]
@@ -45,20 +61,15 @@ function Resolve-PrdFeatureWorkMode {
         [string] $IssueContent
     )
 
-    if ([string]::IsNullOrWhiteSpace($IssueContent)) {
+    if ($script:PrdFeatureFolderResolutionImportFailure) {
         return $null
     }
 
-    $match = [regex]::Match($IssueContent, '(?im)^-\s*Work Mode:\s*(minor-audit|full-feature|full-bug|full)\s*$')
-    if (-not $match.Success) {
+    $mode = Resolve-FeatureFolderWorkMode -IssueContent $IssueContent -UnresolvedMode ''
+    if (-not $mode) {
         return $null
     }
-
-    $rawMode = $match.Groups[1].Value
-    if ($rawMode -eq 'full') {
-        return 'full-feature'
-    }
-    return $rawMode
+    return $mode
 }
 
 function Get-PrdFeatureRequiredFile {

package/resources/claude-customizations/.claude/hooks/enforce-prd-feature-before-planner.ps1

@@ -98,9 +98,10 @@
 #>
 [CmdletBinding()]
 param()
+$script:HookDependencyGuardLoadFailed = $false; try { . (Join-Path $PSScriptRoot 'hook-dependency-guard.ps1') } catch { $script:HookDependencyGuardLoadFailed = $true }
 
 
-Import-Module (Join-Path $PSScriptRoot '../lib/hook-payload/HookPayload.psm1') -Force
+try { Import-Module (Join-Path $PSScriptRoot '../lib/hook-payload/HookPayload.psm1') -Force -ErrorAction Stop } catch { Add-HookDependencyFailure -Name 'HookPayload.psm1' -ErrorRecord $_ }
 # Issue #669 owns worktree location and path normalisation; issue #673 owns the
 # portable-identity resolution this gate now selects a worktree with. Both imports are
 # unguarded on purpose: a resolution module that cannot be loaded is itself the
@@ -108,9 +109,9 @@ Import-Module (Join-Path $PSScriptRoot '../lib/hook-payload/HookPayload.psm1') -
 # a permissive path. Both are required rather than one: the absolute-path join the probe
 # step below calls is exported only by the first, because a module whose exports are pinned
 # by an explicit list does not re-export a sibling's functions to its own importer.
-Import-Module (Join-Path $PSScriptRoot '../lib/worktree-resolution/WorktreeTargetResolution.psm1') -Force
-Import-Module (Join-Path $PSScriptRoot '../lib/worktree-resolution/WorktreeItemResolution.psm1') -Force
-. (Join-Path $PSScriptRoot 'enforce-prd-feature-before-planner-helpers.ps1')
+try { Import-Module (Join-Path $PSScriptRoot '../lib/worktree-resolution/WorktreeTargetResolution.psm1') -Force -ErrorAction Stop } catch { Add-HookDependencyFailure -Name 'WorktreeTargetResolution.psm1' -ErrorRecord $_ }
+try { Import-Module (Join-Path $PSScriptRoot '../lib/worktree-resolution/WorktreeItemResolution.psm1') -Force -ErrorAction Stop } catch { Add-HookDependencyFailure -Name 'WorktreeItemResolution.psm1' -ErrorRecord $_ }
+try { . (Join-Path $PSScriptRoot 'enforce-prd-feature-before-planner-helpers.ps1') } catch { Add-HookDependencyFailure -Name 'enforce-prd-feature-before-planner-helpers.ps1' -ErrorRecord $_ }
 function Get-PrdFeatureFileExistence {
     <#
     .SYNOPSIS
@@ -316,6 +317,8 @@ function Invoke-PrdFeatureBeforePlannerDecision {
         [AllowNull()]
         [object] $ResolvedTarget
     )
+    $dependencyDecision = Get-HookDependencyFailureDecision -HookEvent PreToolUse -ReasonPrefix 'PRD_FEATURE_BLOCKED:'
+    if ($null -ne $dependencyDecision) { return $dependencyDecision }
 
     $envelope = Resolve-ClaudeHookToolInput -Raw $ToolInputRaw
     if (-not $envelope.IsValid) {
@@ -469,6 +472,9 @@ function Invoke-PrdFeatureBeforePlannerDecision {
 if ($MyInvocation.InvocationName -eq '.') {
     return
 }
+if ($script:HookDependencyGuardLoadFailed) { [Console]::Error.WriteLine('PRD_FEATURE_BLOCKED: hook-dependency-guard.ps1 failed to load; the gate fails closed.'); exit 2 }
+$dependencyDecision = Get-HookDependencyFailureDecision -HookEvent PreToolUse -ReasonPrefix 'PRD_FEATURE_BLOCKED:'
+if ($null -ne $dependencyDecision) { $dependencyDecision | ConvertTo-Json -Compress -Depth 5 | Write-Output; exit 0 }
 
 $decision = Invoke-PrdFeatureBeforePlannerDecision -ToolInputRaw (Read-ClaudeHookRawPayload)
 

package/resources/claude-customizations/.claude/hooks/enforce-promotion-mcp-only.ps1

@@ -28,15 +28,16 @@
 #>
 [CmdletBinding()]
 param()
+$script:HookDependencyGuardLoadFailed = $false; try { . (Join-Path $PSScriptRoot 'hook-dependency-guard.ps1') } catch { $script:HookDependencyGuardLoadFailed = $true }
 
 
-Import-Module (Join-Path $PSScriptRoot '../lib/hook-payload/HookPayload.psm1') -Force
+try { Import-Module (Join-Path $PSScriptRoot '../lib/hook-payload/HookPayload.psm1') -Force -ErrorAction Stop } catch { Add-HookDependencyFailure -Name 'HookPayload.psm1' -ErrorRecord $_ }
 
 # Shared command-line parser (issue #545). Every forbidden-token scan and both `gh`
 # expressions below run against each segment's clause-ordered scan text, and the
 # structural matcher reaches the relocating `gh` spellings adjacency cannot.
-. (Join-Path $PSScriptRoot 'hook-command-scanner.ps1')
-. (Join-Path $PSScriptRoot 'hook-command-invocation.ps1')
+try { . (Join-Path $PSScriptRoot 'hook-command-scanner.ps1') } catch { Add-HookDependencyFailure -Name 'hook-command-scanner.ps1' -ErrorRecord $_ }
+try { . (Join-Path $PSScriptRoot 'hook-command-invocation.ps1') } catch { Add-HookDependencyFailure -Name 'hook-command-invocation.ps1' -ErrorRecord $_ }
 
 $script:PromotionMcpOnlyBlockedReason = 'PROMOTION_MCP_ONLY_BLOCKED: Direct Bash promotion-script execution is not allowed in agent sessions. Use the drm-copilot MCP promotion tools instead.'
 
@@ -112,9 +113,12 @@ function Get-PromotionBypassReason {
     }
 
     # `gh issue create` and `gh issue new` are direct bypasses of the MCP
-    # promotion path. Tolerate any flags after the subcommand.
+    # promotion path. Tolerate any flags after the subcommand. The adjacency
+    # expression reads the masked text, so a quoted mention is not a match; wrapper
+    # payloads and substitution bodies are covered by the structural check below
+    # (issue #824).
     foreach ($segment in $segments) {
-        if ($segment.ScanText -match '(?i)\bgh\s+issue\s+(?:create|new)\b') {
+        if ($segment.MaskedText -match '(?i)\bgh\s+issue\s+(?:create|new)\b') {
             return (Get-PromotionMcpOnlyGhIssueBlockedReason)
         }
     }
@@ -227,6 +231,8 @@ function Invoke-PromotionMcpOnlyDecision {
     param(
         [string] $ToolInputRaw
     )
+    $dependencyDecision = Get-HookDependencyFailureDecision -HookEvent PreToolUse -ReasonPrefix 'PROMOTION_MCP_ONLY_BLOCKED:'
+    if ($null -ne $dependencyDecision) { return $dependencyDecision }
 
     $payload = Resolve-ClaudeHookToolInput -Raw $ToolInputRaw
     if (-not $payload.IsValid) {
@@ -291,6 +297,9 @@ function Invoke-PromotionMcpOnlyEntryPoint {
 if ($MyInvocation.InvocationName -eq '.') {
     return
 }
+if ($script:HookDependencyGuardLoadFailed) { [Console]::Error.WriteLine('PROMOTION_MCP_ONLY_BLOCKED: hook-dependency-guard.ps1 failed to load; the gate fails closed.'); exit 2 }
+$dependencyDecision = Get-HookDependencyFailureDecision -HookEvent PreToolUse -ReasonPrefix 'PROMOTION_MCP_ONLY_BLOCKED:'
+if ($null -ne $dependencyDecision) { $dependencyDecision | ConvertTo-Json -Compress -Depth 5 | Write-Output; exit 0 }
 
 # The entry point returns its [int] exit code as the last pipeline element and the
 # decision JSON before it. `exit (<call>)` would capture BOTH into the exit

package/resources/claude-customizations/.claude/hooks/enforce-python-batch-budget.ps1

@@ -57,10 +57,11 @@
 #>
 [CmdletBinding()]
 param()
+$script:HookDependencyGuardLoadFailed = $false; try { . (Join-Path $PSScriptRoot 'hook-dependency-guard.ps1') } catch { $script:HookDependencyGuardLoadFailed = $true }
 
 
-Import-Module (Join-Path $PSScriptRoot '../lib/hook-payload/HookPayload.psm1') -Force
-. (Join-Path $PSScriptRoot 'enforce-batch-budget-route.ps1')
+try { Import-Module (Join-Path $PSScriptRoot '../lib/hook-payload/HookPayload.psm1') -Force -ErrorAction Stop } catch { Add-HookDependencyFailure -Name 'HookPayload.psm1' -ErrorRecord $_ }
+try { . (Join-Path $PSScriptRoot 'enforce-batch-budget-route.ps1') } catch { Add-HookDependencyFailure -Name 'enforce-batch-budget-route.ps1' -ErrorRecord $_ }
 
 function Test-PythonBatchBudgetPathInRoot {
     <#
@@ -280,6 +281,8 @@ function Invoke-PythonBatchBudgetDecision {
         [AllowEmptyString()]
         [string] $ObservedRoute = ''
     )
+    $dependencyDecision = Get-HookDependencyFailureDecision -HookEvent PreToolUse -ReasonPrefix 'PYTHON_LARGE_PATH_REQUIRED:'
+    if ($null -ne $dependencyDecision) { return $dependencyDecision }
 
     $normalized = $FilePath -replace '\\', '/'
     if ($normalized -notmatch '\.py$') {
@@ -477,6 +480,9 @@ function Invoke-PythonBatchBudgetEntryPoint {
 if ($MyInvocation.InvocationName -eq '.') {
     return
 }
+if ($script:HookDependencyGuardLoadFailed) { [Console]::Error.WriteLine('PYTHON_LARGE_PATH_REQUIRED: hook-dependency-guard.ps1 failed to load; the gate fails closed.'); exit 2 }
+$dependencyDecision = Get-HookDependencyFailureDecision -HookEvent PreToolUse -ReasonPrefix 'PYTHON_LARGE_PATH_REQUIRED:'
+if ($null -ne $dependencyDecision) { $dependencyDecision | ConvertTo-Json -Compress -Depth 5 | Write-Output; exit 0 }
 
 # The entry point returns its [int] exit code as the last pipeline element and the
 # decision JSON before it. `exit (<call>)` would capture BOTH into the exit

package/resources/claude-customizations/.claude/hooks/feature-folder-resolution.ps1

@@ -0,0 +1,373 @@
+<#
+.SYNOPSIS
+    Pure feature-folder target resolution shared by the Claude and Codex enforcement hooks
+    (issue #565).
+
+.DESCRIPTION
+    One resolution rule, implemented once and parameterized per gate. A feature folder is
+    identified structurally, as the single path segment immediately below
+    docs/features/active/, and never by string length or prompt position.
+
+      - Find-FeatureFolderCandidate extracts the distinct cited folder basenames (R1).
+      - ConvertTo-FeatureFolderBasename normalizes a record value or token (R2).
+      - Find-FeatureFolderRecord is the union-index record lookup (issue_num or folder).
+      - Select-FeatureFolderTarget applies dependency pruning, the declared-issue-number
+        tie-break, and the fallback issue number, and reports Resolved, NoTarget, or
+        Ambiguous (R3-R6).
+      - Resolve-FeatureFolderWorkMode parses the persisted work-mode marker of issue.md.
+      - Get-FeatureFolderPlanPrerequisite maps a work mode to its plan prerequisites.
+
+    The file is byte-identical in .claude/hooks/ and .codex/hooks/ and is dot-sourced by its
+    callers, each of which guards the dot-source and fails closed when it cannot be loaded.
+
+.NOTES
+    Compatible with PowerShell 7+. PURITY: every function is pure string and object logic.
+    The file opens no file, probes no path, reads no environment value, launches no process,
+    issues no web request, and loads no module. It declares functions only.
+#>
+
+function Find-FeatureFolderCandidate {
+    <#
+    .SYNOPSIS
+        Returns the distinct feature-folder basenames cited in a text, in first-occurrence
+        order (R1).
+    .DESCRIPTION
+        Scans for docs/features/active/ path tokens with any prefix and either separator.
+        Each token is normalized to forward slashes and split into segments; empty and '.'
+        segments are dropped. A token with fewer than four segments yields no candidate.
+        The fourth segment is the folder, with trailing '.', ',', ';', ':', ')', ']', '>', '*', and '_' trimmed.
+        Duplicates are removed ordinally, keeping the first occurrence.
+    .PARAMETER Text
+        The prompt or other text to scan. Null or empty text yields no output.
+    .OUTPUTS
+        System.String[] (no output when no qualifying token is present)
+    #>
+    [CmdletBinding()]
+    [OutputType([string[]])]
+    param(
+        [AllowNull()]
+        [AllowEmptyString()]
+        [string] $Text
+    )
+
+    if ([string]::IsNullOrEmpty($Text)) {
+        return
+    }
+
+    $found = [System.Collections.Generic.List[string]]::new()
+    foreach ($match in [regex]::Matches($Text, 'docs[\\/]+features[\\/]+active[\\/]+[^\s"''`]+')) {
+        $segments = @(($match.Value -replace '\\', '/') -split '/' | Where-Object { $_ -and $_ -ne '.' })
+        if ($segments.Count -lt 4) {
+            continue
+        }
+        $folder = $segments[3].TrimEnd('.', ',', ';', ':', ')', ']', '>', '*', '_')
+        if (-not $folder -or $found.Contains($folder)) {
+            continue
+        }
+        $found.Add($folder)
+    }
+    return $found.ToArray()
+}
+
+function ConvertTo-FeatureFolderBasename {
+    <#
+    .SYNOPSIS
+        Normalizes a feature-folder record value or token to its basename (R2).
+    .DESCRIPTION
+        Separators are normalized to forward slashes, surrounding whitespace and trailing
+        slashes are trimmed, and one leading docs/features/<lifecycle>/, active/, or
+        completed/ prefix is stripped. The last remaining segment is returned.
+    .PARAMETER Value
+        The record value or token to normalize.
+    .OUTPUTS
+        System.String, or $null when no folder segment remains.
+    #>
+    [CmdletBinding()]
+    [OutputType([string])]
+    param(
+        [AllowNull()]
+        [AllowEmptyString()]
+        [string] $Value
+    )
+
+    if ([string]::IsNullOrWhiteSpace($Value)) {
+        return $null
+    }
+    $normalized = ($Value -replace '\\', '/').Trim().TrimEnd('/')
+    $normalized = $normalized -replace '^(docs/features/[^/]+(/|$)|active/|completed/)', ''
+    $segment = ($normalized -split '/')[-1]
+    if (-not $segment -or $segment -eq '.') {
+        return $null
+    }
+    return $segment
+}
+
+function Find-FeatureFolderRecord {
+    <#
+    .SYNOPSIS
+        Finds the single record a reference identifies, through a union index of issue_num
+        and normalized feature_folder.
+    .DESCRIPTION
+        A non-string reference, or a string of digits only, matches records whose issue_num
+        string form equals it. Any other string matches records whose normalized
+        feature_folder basename ordinally equals the reference's normalized basename.
+    .PARAMETER Records
+        The checkpoint records (features[] or items[]).
+    .PARAMETER Reference
+        An issue number, a folder basename, or a folder path.
+    .OUTPUTS
+        The matching record, or $null when zero or several records match.
+    #>
+    [CmdletBinding()]
+    [OutputType([object])]
+    param(
+        [AllowNull()]
+        [AllowEmptyCollection()]
+        [object[]] $Records,
+
+        [AllowNull()]
+        [object] $Reference
+    )
+
+    if ($null -eq $Records -or $null -eq $Reference) {
+        return $null
+    }
+
+    $byIssue = (-not ($Reference -is [string])) -or ($Reference -match '^\d+$')
+    $key = if ($byIssue) { [string]$Reference } else { ConvertTo-FeatureFolderBasename -Value $Reference }
+    if (-not $key) {
+        return $null
+    }
+    $field = if ($byIssue) { 'issue_num' } else { 'feature_folder' }
+
+    $matched = @(foreach ($record in $Records) {
+            if ($null -eq $record) {
+                continue
+            }
+            $property = $record.PSObject.Properties[$field]
+            if ($null -eq $property -or $null -eq $property.Value) {
+                continue
+            }
+            $value = if ($byIssue) { [string]$property.Value } else { ConvertTo-FeatureFolderBasename -Value ([string]$property.Value) }
+            if ($value -ceq $key) {
+                $record
+            }
+        })
+    if ($matched.Count -ne 1) {
+        return $null
+    }
+    return $matched[0]
+}
+
+function Select-FeatureFolderTarget {
+    <#
+    .SYNOPSIS
+        Selects the target feature folder from the cited candidates and the run records
+        (R2-R6).
+    .DESCRIPTION
+        Each candidate maps to at most one record. Unmatched candidates stay in the set.
+        With -DependencyAware, a matched candidate is removed when its record lies in the
+        transitive depends_on closure of another cited candidate's record and that record
+        does not lie in its own closure, so a cycle removes neither. One remaining candidate
+        is Resolved. Several remaining candidates are Resolved only when
+        -DeclaredIssueNumber names exactly one remaining record. Zero candidates resolve
+        through -FallbackIssueNumber when it names a record. Otherwise the result is
+        NoTarget for zero and Ambiguous for several. Neither string length nor candidate
+        position affects the status.
+    .PARAMETER Records
+        The checkpoint records (features[] or items[]).
+    .PARAMETER Candidate
+        The cited folder basenames, in first-occurrence order.
+    .PARAMETER DeclaredIssueNumber
+        Optional tie-break from the canonical issue-number line.
+    .PARAMETER FallbackIssueNumber
+        Optional issue number used only when no candidate is cited.
+    .PARAMETER DependencyAware
+        Removes cited candidates that are dependencies of another cited candidate.
+    .OUTPUTS
+        System.Management.Automation.PSCustomObject with Status, Record, Basename,
+        Remaining, and Detail.
+    #>
+    [CmdletBinding()]
+    [OutputType([pscustomobject])]
+    param(
+        [AllowNull()]
+        [AllowEmptyCollection()]
+        [object[]] $Records,
+
+        [AllowNull()]
+        [AllowEmptyCollection()]
+        [string[]] $Candidate,
+
+        [int] $DeclaredIssueNumber,
+
+        [int] $FallbackIssueNumber,
+
+        [switch] $DependencyAware
+    )
+
+    $recordList = @($Records | Where-Object { $null -ne $_ })
+    $entries = @(foreach ($name in @($Candidate | Where-Object { -not [string]::IsNullOrWhiteSpace($_) })) {
+            [pscustomobject]@{ Basename = $name; Record = Find-FeatureFolderRecord -Records $recordList -Reference $name }
+        })
+
+    if ($DependencyAware -and $entries.Count -gt 1) {
+        # Transitive depends_on closure of each matched candidate's record.
+        $closures = @(foreach ($entry in $entries) {
+                $closure = [System.Collections.Generic.List[object]]::new()
+                $pending = [System.Collections.Generic.Stack[object]]::new()
+                if ($null -ne $entry.Record) {
+                    $pending.Push($entry.Record)
+                }
+                while ($pending.Count -gt 0) {
+                    $dependsOn = $pending.Pop().PSObject.Properties['depends_on']
+                    if ($null -eq $dependsOn) {
+                        continue
+                    }
+                    foreach ($reference in @($dependsOn.Value)) {
+                        $dependency = Find-FeatureFolderRecord -Records $recordList -Reference $reference
+                        if ($null -ne $dependency -and -not $closure.Contains($dependency)) {
+                            $closure.Add($dependency)
+                            $pending.Push($dependency)
+                        }
+                    }
+                }
+                , $closure
+            })
+
+        $kept = for ($i = 0; $i -lt $entries.Count; $i++) {
+            $pruned = $false
+            for ($j = 0; $j -lt $entries.Count -and $null -ne $entries[$i].Record; $j++) {
+                if ($i -eq $j -or $null -eq $entries[$j].Record) {
+                    continue
+                }
+                if ($closures[$j].Contains($entries[$i].Record) -and -not $closures[$i].Contains($entries[$j].Record)) {
+                    $pruned = $true
+                    break
+                }
+            }
+            if (-not $pruned) {
+                $entries[$i]
+            }
+        }
+        $entries = @($kept)
+    }
+
+    $remaining = [string[]]@($entries | ForEach-Object { $_.Basename })
+    $selected = $null
+    if ($entries.Count -eq 1) {
+        $selected = $entries[0]
+    }
+    elseif ($entries.Count -gt 1 -and $PSBoundParameters.ContainsKey('DeclaredIssueNumber')) {
+        $declared = [string]$DeclaredIssueNumber
+        $byIssue = @($entries | Where-Object {
+                $null -ne $_.Record -and $null -ne $_.Record.PSObject.Properties['issue_num'] -and
+                ([string]$_.Record.issue_num) -ceq $declared
+            })
+        if ($byIssue.Count -eq 1) {
+            $selected = $byIssue[0]
+        }
+    }
+    elseif ($entries.Count -eq 0 -and $PSBoundParameters.ContainsKey('FallbackIssueNumber')) {
+        $fallback = Find-FeatureFolderRecord -Records $recordList -Reference $FallbackIssueNumber
+        if ($null -ne $fallback) {
+            $folder = $fallback.PSObject.Properties['feature_folder']
+            $basename = if ($null -ne $folder) { ConvertTo-FeatureFolderBasename -Value ([string]$folder.Value) } else { $null }
+            $selected = [pscustomobject]@{ Basename = $basename; Record = $fallback }
+        }
+    }
+
+    if ($null -ne $selected) {
+        return [pscustomobject]@{
+            Status    = 'Resolved'
+            Record    = $selected.Record
+            Basename  = $selected.Basename
+            Remaining = $remaining
+            Detail    = "resolved target feature folder '$($selected.Basename)'"
+        }
+    }
+    if ($entries.Count -eq 0) {
+        return [pscustomobject]@{
+            Status    = 'NoTarget'
+            Record    = $null
+            Basename  = $null
+            Remaining = $remaining
+            Detail    = 'no target feature folder is cited'
+        }
+    }
+    return [pscustomobject]@{
+        Status    = 'Ambiguous'
+        Record    = $null
+        Basename  = $null
+        Remaining = $remaining
+        Detail    = 'ambiguous target feature folder; remaining candidates: ' + ($remaining -join ', ')
+    }
+}
+
+function Resolve-FeatureFolderWorkMode {
+    <#
+    .SYNOPSIS
+        Parses the persisted '- Work Mode:' marker out of issue.md content.
+    .DESCRIPTION
+        Returns minor-audit, full-bug, or full-feature. The legacy full marker normalizes to
+        full-feature. Missing, empty, malformed, or unrecognized content returns
+        -UnresolvedMode.
+    .PARAMETER IssueContent
+        The raw issue.md text, or $null when it could not be read.
+    .PARAMETER UnresolvedMode
+        The value returned when no recognized marker is present. Defaults to full-feature.
+    .OUTPUTS
+        System.String
+    #>
+    [CmdletBinding()]
+    [OutputType([string])]
+    param(
+        [AllowNull()]
+        [AllowEmptyString()]
+        [string] $IssueContent,
+
+        [AllowNull()]
+        [AllowEmptyString()]
+        [string] $UnresolvedMode = 'full-feature'
+    )
+
+    if ([string]::IsNullOrWhiteSpace($IssueContent)) {
+        return $UnresolvedMode
+    }
+    $match = [regex]::Match($IssueContent, '(?im)^-\s*Work Mode:\s*(minor-audit|full-feature|full-bug|full)\s*$')
+    if (-not $match.Success) {
+        return $UnresolvedMode
+    }
+    $rawMode = $match.Groups[1].Value
+    if ($rawMode -eq 'full') {
+        return 'full-feature'
+    }
+    return $rawMode
+}
+
+function Get-FeatureFolderPlanPrerequisite {
+    <#
+    .SYNOPSIS
+        Maps a work mode to the files a feature folder must contain before a plan is written.
+    .DESCRIPTION
+        minor-audit requires issue.md; full-bug requires issue.md and spec.md; full-feature
+        and every other value require issue.md, spec.md, and user-story.md.
+    .PARAMETER WorkMode
+        The resolved work mode.
+    .OUTPUTS
+        System.String[]
+    #>
+    [CmdletBinding()]
+    [OutputType([string[]])]
+    param(
+        [AllowNull()]
+        [AllowEmptyString()]
+        [string] $WorkMode
+    )
+
+    switch ($WorkMode) {
+        'minor-audit' { return [string[]]@('issue.md') }
+        'full-bug' { return [string[]]@('issue.md', 'spec.md') }
+        default { return [string[]]@('issue.md', 'spec.md', 'user-story.md') }
+    }
+}

package/resources/claude-customizations/.claude/hooks/feature-review-coverage-thresholds.ps1

@@ -0,0 +1,85 @@
+<#
+.SYNOPSIS
+    Resolve the coverage thresholds that govern the feature-review coverage validation.
+.DESCRIPTION
+    Implements the threshold precedence of the pushed quality-tiers rule for the
+    feature-review SubagentStop hook (issue #824, follow-up FU-823-1). When the
+    repository's root CLAUDE.md states a line or branch coverage threshold, that threshold
+    governs; otherwise the default governs (85 percent line, 75 percent branch). Each
+    metric is resolved on its own, so a root CLAUDE.md that states only a line threshold
+    leaves the branch default in force.
+
+    Pure string logic only: the caller supplies the CLAUDE.md text. No disk, process,
+    network, clock, or environment access. It is dot-sourced by
+    validate-feature-review-coverage.ps1 as:
+    . (Join-Path $PSScriptRoot 'feature-review-coverage-thresholds.ps1')
+#>
+
+
+function Get-FeatureReviewCoverageThreshold {
+    <#
+    .SYNOPSIS
+        Return the governing line and branch coverage thresholds for a root CLAUDE.md text.
+    .DESCRIPTION
+        For each metric M in 'line' and 'branch', a figure is read only when a comparator
+        or floor phrase links it to the metric on the same line as 'M coverage'. Two forms
+        are accepted, and any text without a percent sign may sit between 'M coverage' and
+        the comparator or the figure:
+
+          - Comparator before the figure: one of '>=', the U+2265 sign, 'at least',
+            'minimum', 'minimum of', or 'no less than', an optional colon, and the figure
+            followed by a percent sign (for example 'line coverage >= 85%').
+          - Trailing floor phrase after the figure: the figure followed by a percent sign,
+            then one of 'minimum', 'at least', 'or more', 'or higher', 'or above', or
+            'or greater' (for example 'line coverage: 70% minimum').
+
+        Prose such as 'line coverage was 62% last release' is not read. The first match in
+        text order across both forms whose value parses (invariant culture) to a number
+        from 0 to 100 sets that metric and its source to 'claude-md'. Otherwise the metric
+        keeps its default (line 85, branch 75) and its source is 'default'.
+
+        Known limitation: a combined statement such as 'line and branch coverage >= 70%'
+        matches neither metric, because the metric name must be followed directly by
+        'coverage' and must not be joined to the other metric name by 'and', 'or', '&',
+        or '/'. Both metrics then keep their defaults, which is the stricter direction.
+    .PARAMETER ClaudeMdText
+        The text of the repository's root CLAUDE.md; $null or empty when it is absent.
+    .OUTPUTS
+        System.Management.Automation.PSCustomObject - Line, Branch, LineSource, BranchSource.
+    #>
+    [CmdletBinding()]
+    [OutputType([pscustomobject])]
+    param(
+        [Parameter(Mandatory)][AllowNull()][AllowEmptyString()][string] $ClaudeMdText
+    )
+
+    $defaults = [ordered]@{ line = 85.0; branch = 75.0 }
+    $resolved = @{}
+    $culture = [System.Globalization.CultureInfo]::InvariantCulture
+    $style = [System.Globalization.NumberStyles]::Float
+
+    foreach ($metric in $defaults.Keys) {
+        $value = [double]$defaults[$metric]
+        $source = 'default'
+        if (-not [string]::IsNullOrEmpty($ClaudeMdText)) {
+            $pattern = '(?im)(?<!\b(?:line|branch)\s*(?:and|or|&|/)\s*)\b' + $metric + '\s+coverage\b[^\r\n%]*?(?:(?:>=|' + [char]0x2265 + '|\bat\s+least\b|\bminimum(?:\s+of)?\b|\bno\s+less\s+than\b)\s*:?\s*(?<![\d.])(?<pct>\d{1,3}(?:\.\d+)?)\s*%|(?<![\d.])(?<pct>\d{1,3}(?:\.\d+)?)\s*%\s*(?:minimum|at\s+least|or\s+(?:more|higher|above|greater))\b)'
+            foreach ($match in [regex]::Matches($ClaudeMdText, $pattern)) {
+                $parsed = 0.0
+                $isNumber = [double]::TryParse($match.Groups['pct'].Value, $style, $culture, [ref]$parsed)
+                if ($isNumber -and $parsed -ge 0 -and $parsed -le 100) {
+                    $value = $parsed
+                    $source = 'claude-md'
+                    break
+                }
+            }
+        }
+        $resolved[$metric] = [pscustomobject]@{ Value = $value; Source = $source }
+    }
+
+    return [pscustomobject]@{
+        Line         = $resolved['line'].Value
+        Branch       = $resolved['branch'].Value
+        LineSource   = $resolved['line'].Source
+        BranchSource = $resolved['branch'].Source
+    }
+}