@danmoisan/drm-copilot-mcp 1.1.18 → 1.1.20

package/resources/claude-customizations/.claude/hooks/validate-feature-review-coverage-metrics.ps1

@@ -0,0 +1,180 @@
+<#
+.SYNOPSIS
+    Artifact reader and coverage-report parsers for the feature-review coverage hook.
+
+.DESCRIPTION
+    Dot-sourced by validate-feature-review-coverage.ps1. Defines the review-artifact file reader
+    (Get-ArtifactFileContent), the LCOV and JaCoCo line and branch coverage parsers, and the
+    per-language dispatchers that select a coverage report for a changed language.
+
+    The file has no param() block, writes nothing to the output stream, and runs no top-level
+    statement other than function definitions.
+
+.NOTES
+    Requires PowerShell 7+.
+#>
+
+function Get-ArtifactFileContent {
+    [CmdletBinding()]
+    [OutputType([hashtable])]
+    param(
+        [Parameter(Mandatory = $true)]
+        [string] $Path
+    )
+
+    if (-not (Test-Path -LiteralPath $Path -PathType Leaf)) {
+        return @{ Exists = $false; Text = $null; Lines = @() }
+    }
+
+    $text = Get-Content -LiteralPath $Path -Raw -ErrorAction Stop
+    $lines = Get-Content -LiteralPath $Path -ErrorAction Stop
+    if ($null -eq $lines) {
+        $lines = @()
+    }
+    elseif ($lines -isnot [array]) {
+        $lines = @($lines)
+    }
+
+    return @{ Exists = $true; Text = $text; Lines = $lines }
+}
+
+function Get-FeatureReviewClaudeMdText {
+    <#
+    .SYNOPSIS
+        Reads the repository's root CLAUDE.md for the coverage-floor lookup (CR-4).
+    .DESCRIPTION
+        Returns a hashtable with Text and ReadError. An absent file yields Text = $null and
+        ReadError = $null, so the caller applies the default floors. A file that exists but
+        cannot be read yields Text = $null and ReadError set to the first line of the
+        exception message, so the caller fails closed. The function never throws.
+    #>
+    [CmdletBinding()]
+    [OutputType([hashtable])]
+    param()
+
+    try {
+        $file = Get-ArtifactFileContent -Path 'CLAUDE.md'
+        return @{ Text = $file.Text; ReadError = $null }
+    }
+    catch {
+        return @{ Text = $null; ReadError = ([string]$_.Exception.Message -split "`r?`n")[0] }
+    }
+}
+
+function Get-LcovRepoCoverage {
+    [OutputType([Nullable[double]])]
+    param([string]$Path)
+
+    $file = Get-ArtifactFileContent -Path $Path
+    if (-not $file.Exists) { return $null }
+
+    $totalFound = 0
+    $totalHit = 0
+    foreach ($line in $file.Lines) {
+        if ($line.StartsWith('LF:')) {
+            $totalFound += [int]($line.Substring(3))
+        }
+        elseif ($line.StartsWith('LH:')) {
+            $totalHit += [int]($line.Substring(3))
+        }
+    }
+    if ($totalFound -le 0) { return $null }
+    return [math]::Round(($totalHit * 100.0) / $totalFound, 2)
+}
+
+function Get-LcovBranchCoverage {
+    # Parses LCOV branch counters (BRF: branches found, BRH: branches hit) and returns a percent.
+    # LCOV emits one BRF/BRH line per source file in the report; we sum across the file to compute
+    # repo-wide branch coverage. Returns $null when the artifact is absent or when no branch
+    # information is recorded (BRF total = 0).
+    [OutputType([Nullable[double]])]
+    param([string]$Path)
+
+    $file = Get-ArtifactFileContent -Path $Path
+    if (-not $file.Exists) { return $null }
+
+    $totalFound = 0
+    $totalHit = 0
+    foreach ($line in $file.Lines) {
+        if ($line.StartsWith('BRF:')) {
+            $totalFound += [int]($line.Substring(4))
+        }
+        elseif ($line.StartsWith('BRH:')) {
+            $totalHit += [int]($line.Substring(4))
+        }
+    }
+    if ($totalFound -le 0) { return $null }
+    return [math]::Round(($totalHit * 100.0) / $totalFound, 2)
+}
+
+function Get-JacocoBranchCoverage {
+    [OutputType([Nullable[double]])]
+    param([string]$Path)
+
+    $file = Get-ArtifactFileContent -Path $Path
+    if (-not $file.Exists) { return $null }
+
+    [xml]$doc = $file.Text
+    $counters = $doc.SelectNodes('//counter[@type="BRANCH"]')
+    if (-not $counters -or $counters.Count -eq 0) { return $null }
+
+    $missed = 0
+    $covered = 0
+    foreach ($counter in $counters) {
+        $missed += [int]$counter.missed
+        $covered += [int]$counter.covered
+    }
+    $total = $missed + $covered
+    if ($total -le 0) { return $null }
+    return [math]::Round(($covered * 100.0) / $total, 2)
+}
+
+function Get-LanguageBranchCoverage {
+    [OutputType([Nullable[double]])]
+    param([string]$Language)
+
+    switch ($Language) {
+        'TypeScript' { return Get-LcovBranchCoverage -Path 'coverage/lcov.info' }
+        'Python' { return Get-LcovBranchCoverage -Path 'artifacts/python/lcov.info' }
+        'PowerShell' { return Get-JacocoBranchCoverage -Path 'artifacts/pester/powershell-coverage.xml' }
+        'CSharp' { return Get-JacocoBranchCoverage -Path 'artifacts/csharp/coverage.xml' }
+    }
+    return $null
+}
+
+function Get-JacocoRepoCoverage {
+    [OutputType([Nullable[double]])]
+    param([string]$Path)
+
+    $file = Get-ArtifactFileContent -Path $Path
+    if (-not $file.Exists) { return $null }
+
+    [xml]$doc = $file.Text
+    $counters = $doc.SelectNodes('//counter[@type="LINE"]')
+    if (-not $counters -or $counters.Count -eq 0) { return $null }
+
+    $missed = 0
+    $covered = 0
+    foreach ($counter in $counters) {
+        $missed += [int]$counter.missed
+        $covered += [int]$counter.covered
+    }
+    $total = $missed + $covered
+    if ($total -le 0) { return $null }
+    return [math]::Round(($covered * 100.0) / $total, 2)
+}
+
+function Get-LanguageRepoCoverage {
+    [OutputType([Nullable[double]])]
+    param(
+        [string]$Language
+    )
+
+    switch ($Language) {
+        'TypeScript' { return Get-LcovRepoCoverage -Path 'coverage/lcov.info' }
+        'Python' { return Get-LcovRepoCoverage -Path 'artifacts/python/lcov.info' }
+        'PowerShell' { return Get-JacocoRepoCoverage -Path 'artifacts/pester/powershell-coverage.xml' }
+        'CSharp' { return Get-JacocoRepoCoverage -Path 'artifacts/csharp/coverage.xml' }
+    }
+    return $null
+}

package/resources/claude-customizations/.claude/hooks/validate-feature-review-coverage-rules.ps1

@@ -0,0 +1,195 @@
+<#
+.SYNOPSIS
+    Artifact-path rules, changed-language set, and coverage-row rule for the feature-review coverage hook.
+
+.DESCRIPTION
+    Dot-sourced by validate-feature-review-coverage.ps1. Defines the advertised-path reader
+    (Get-ReviewArtifactPathFromOutput), the active-feature location rule (Get-ReviewArtifactInfo),
+    the changed-language reader for the PR context summary (Get-ChangedLanguageSet), and the
+    per-language coverage-row rule (Test-LanguageCoverageRow).
+
+    The file has no param() block, writes nothing to the output stream, and runs no top-level
+    statement other than function definitions.
+
+.NOTES
+    Requires PowerShell 7+.
+#>
+
+function Get-ReviewArtifactPathFromOutput {
+    [CmdletBinding()]
+    [OutputType([string])]
+    param(
+        [Parameter(Mandatory = $true)]
+        [string] $AgentOutput,
+
+        [Parameter(Mandatory = $true)]
+        [string] $Token
+    )
+
+    $escapedToken = [regex]::Escape($Token)
+    $pattern = "$escapedToken\s*[:=]\s*[""']?([^\s""'\)`]+)|\[$escapedToken\]\(([^)]+)\)"
+    $match = [regex]::Match(
+        $AgentOutput,
+        $pattern,
+        [System.Text.RegularExpressions.RegexOptions]::IgnoreCase
+    )
+    if (-not $match.Success) {
+        return $null
+    }
+
+    $value = if ($match.Groups[1].Success) { $match.Groups[1].Value } else { $match.Groups[2].Value }
+    $value = $value.Trim()
+    if ([string]::IsNullOrWhiteSpace($value)) {
+        return $null
+    }
+
+    return $value
+}
+
+function Get-ReviewArtifactInfo {
+    [CmdletBinding()]
+    [OutputType([hashtable])]
+    param(
+        [Parameter(Mandatory = $true)]
+        [string] $Path,
+
+        [Parameter(Mandatory = $true)]
+        [string] $Stem
+    )
+
+    $normalized = $Path -replace '\\', '/'
+    $pattern = "^docs/features/active/(?<Folder>.+)/$Stem\.(?<Timestamp>\d{4}-\d{2}-\d{2}T\d{2}-\d{2})\.md$"
+    $match = [regex]::Match($normalized, $pattern, [System.Text.RegularExpressions.RegexOptions]::IgnoreCase)
+    if (-not $match.Success) {
+        # Remediation-handoff layout: <slug>/audit/<timestamp>/<stem>.md (timestamp on the folder).
+        $auditPattern = "^docs/features/active/(?<Folder>[^/]+)/audit/(?<Timestamp>\d{4}-\d{2}-\d{2}T\d{2}-\d{2})/$Stem\.md$"
+        $match = [regex]::Match($normalized, $auditPattern, [System.Text.RegularExpressions.RegexOptions]::IgnoreCase)
+    }
+    if (-not $match.Success) {
+        return $null
+    }
+
+    return @{
+        Folder    = $match.Groups['Folder'].Value
+        Timestamp = $match.Groups['Timestamp'].Value
+        Path      = $normalized
+    }
+}
+
+function Get-ChangedLanguageSet {
+    [OutputType([System.Collections.Hashtable])]
+    param([string[]]$Lines)
+
+    $langs = [ordered]@{}
+    foreach ($line in $Lines) {
+        if ($line -notmatch '^\s*-\s+(\S+)\s+\(\+\d+/-\d+\)\s*$') { continue }
+        $path = $matches[1]
+        $ext = [IO.Path]::GetExtension($path).ToLowerInvariant()
+        switch -Regex ($ext) {
+            '^\.(ts|tsx)$' { $langs['TypeScript'] = $true }
+            '^\.py$' { $langs['Python'] = $true }
+            '^\.(ps1|psm1)$' { $langs['PowerShell'] = $true }
+            '^\.cs$' { $langs['CSharp'] = $true }
+        }
+    }
+    return $langs
+}
+
+function Test-LanguageCoverageRow {
+    [OutputType([System.Collections.Hashtable])]
+    param(
+        [string]$AuditText,
+        [string]$Language,
+        [Nullable[double]]$RepoWidePct,
+        [Nullable[double]]$BranchPct,
+        [double]$LineFloor = 85.0,
+        [double]$BranchFloor = 75.0,
+        [string] $LineSource = 'default',
+        [string] $BranchSource = 'default'
+    )
+
+    $lineSourceLabel = if ($LineSource -eq 'claude-md') { '(root CLAUDE.md)' } else { '(default)' }
+    $branchSourceLabel = if ($BranchSource -eq 'claude-md') { '(root CLAUDE.md)' } else { '(default)' }
+
+    $languageLabelMap = @{
+        'TypeScript' = @('TypeScript', 'typescript')
+        'Python'     = @('Python', 'python', 'pytest')
+        'PowerShell' = @('PowerShell', 'powershell', 'pester')
+        'CSharp'     = @('C#', 'CSharp', 'csharp', '.NET', 'dotnet')
+    }
+
+    $labels = $languageLabelMap[$Language]
+    $labelPattern = '(?i)(' + (($labels | ForEach-Object { [regex]::Escape($_) }) -join '|') + ')'
+
+    $lines = $AuditText -split "`r?`n"
+    $languageLines = $lines | Where-Object { $_ -match $labelPattern }
+
+    if (-not $languageLines -or $languageLines.Count -eq 0) {
+        return @{
+            Ok         = $false
+            Reason     = "$Language has changed files on the branch but the policy-audit does not mention $Language."
+            Repairable = $true
+        }
+    }
+
+    $coverageLines = $languageLines | Where-Object { $_ -match '(?i)(coverage|lcov|line[s]?\s+hit|pester)' }
+    if (-not $coverageLines -or $coverageLines.Count -eq 0) {
+        return @{
+            Ok         = $false
+            Reason     = "$Language has changed files on the branch but no coverage-scoped row in the policy-audit mentions $Language."
+            Repairable = $true
+        }
+    }
+
+    # Sanctioned narrowing text is not a scope narrowing by the audit: a line inside a
+    # '## Rejected Scope Narrowing' section (caller text recorded verbatim), and a PowerShell
+    # line naming branch coverage but not line coverage (Pester measures no branch coverage).
+    $narrowingPattern = '(?i)(informational only|context only|out of plan scope|out of scope|not applicable|\bN/A\b|\bUNVERIFIED\b)'
+    $insideRejectedSection = $false
+    $narrowing = foreach ($line in $lines) {
+        if ($line -match '^##\s') { $insideRejectedSection = $line -match '^##\s+Rejected Scope Narrowing\b' }
+        elseif ($insideRejectedSection) { continue }
+        if ($line -notmatch $labelPattern -or $line -notmatch '(?i)(coverage|lcov|line[s]?\s+hit|pester)' -or $line -notmatch $narrowingPattern) { continue }
+        if ($Language -eq 'PowerShell' -and $line -match '(?i)\bbranch\b' -and $line -notmatch '(?i)\bline\s+coverage\b') { continue }
+        $line
+    }
+    $narrowing = @($narrowing)
+    if ($narrowing.Count -gt 0) {
+        $first = ($narrowing | Select-Object -First 1).ToString().Trim()
+        return @{
+            Ok         = $false
+            Reason     = "$Language has changed files on the branch but a coverage-scoped row narrows scope: '$first'. Scope narrowing is not permitted for languages with changed files."
+            Repairable = $true
+        }
+    }
+
+    $verdictLines = $coverageLines | Where-Object { $_ -match '\b(PASS|FAIL)\b' }
+    if (-not $verdictLines -or $verdictLines.Count -eq 0) {
+        return @{
+            Ok         = $false
+            Reason     = "$Language coverage rows contain neither a PASS nor a FAIL verdict."
+            Repairable = $true
+        }
+    }
+
+    if ($null -ne $RepoWidePct -and $RepoWidePct -lt $LineFloor) {
+        $failLines = $coverageLines | Where-Object { $_ -match '\bFAIL\b' }
+        if (-not $failLines -or $failLines.Count -eq 0) {
+            return @{
+                Ok         = $false
+                Reason     = ("{0} repo-wide coverage is {1}% (below the {2}% line coverage floor {3}) but the policy-audit contains no FAIL verdict on a coverage row for {0}." -f $Language, $RepoWidePct, $LineFloor, $lineSourceLabel)
+                Repairable = $true
+            }
+        }
+    }
+
+    if ($null -ne $BranchPct -and $BranchPct -lt $BranchFloor) {
+        return @{
+            Ok         = $false
+            Reason     = ("{0} branch coverage is {1}% (below the {2}% branch coverage floor {3}); policy-audit must record FAIL on the corresponding coverage row." -f $Language, $BranchPct, $BranchFloor, $branchSourceLabel)
+            Repairable = $false
+        }
+    }
+
+    return @{ Ok = $true; Reason = $null }
+}