@danmoisan/drm-copilot-mcp 1.1.23 → 1.1.25

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusScheduling.psm1

@@ -38,6 +38,7 @@ Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusGlob.psm1')
 Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusConfig.psm1') -Force -ErrorAction Stop
 Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusConflict.psm1') -Force -ErrorAction Stop
 Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusValidation.psm1') -Force -ErrorAction Stop
+Import-Module (Join-Path -Path $PSScriptRoot -ChildPath 'BlastRadiusAggregate.psm1') -Force -ErrorAction Stop
 
 # Truth-table key and the label every reader error carries.
 $script:ToleranceKey = 'conflict_tolerance'
@@ -46,9 +47,15 @@ $script:ToleranceLabel = 'config["conflict_tolerance"]'
 # Member names of the key and of its two nested maps. Each must be carried
 # exactly, so a misspelled name fails fast instead of reading as absent.
 $script:MemberName = @('tolerance_percent', 'weights', 'band_durations', 'default_band', 'append_only_paths')
-$script:WeightName = @('same_file', 'possible_overlap', 'append_only', 'module')
+$script:WeightName = @('same_file', 'possible_overlap', 'append_only', 'module', 'contract')
 $script:BandName = @('C1', 'C2', 'C3', 'C4')
 
+# The one optional member (issue #1013): the issue-combination threshold, read
+# as this default when absent. Pinned to COMBINATION_THRESHOLD_DEFAULT in the
+# Python reference by a Pester parity row.
+$script:CombinationThresholdName = 'combination_threshold_percent'
+$script:CombinationThresholdDefault = 400
+
 # Reason kinds that make a conflict an edge at every tolerance: a shared surface
 # or a contract dependency cannot be reconciled by a merge step.
 $script:HardReasonKind = @('shared_surface_overlap', 'contract_dependency')
@@ -140,15 +147,18 @@ function Get-ConfigConflictTolerance {
     .DESCRIPTION
         Port of config_conflict_tolerance. An absent or null key returns the
         strict semantics: tolerance 0, every weight 1, every band duration 1,
-        default_band C1, and no append-only paths.
+        default_band C1, no append-only paths, and the default combination
+        threshold. combination_threshold_percent is optional: when present it
+        must be an integer of at least 0, and when absent it reads as 400.
 
     .PARAMETER Config
         Parsed config/blast-radius.json.
 
     .OUTPUTS
         System.Collections.Hashtable. Keys tolerance_percent, weights,
-        band_durations, default_band, and append_only_paths. Every error message
-        names the conflict_tolerance key.
+        band_durations, default_band, append_only_paths, and
+        combination_threshold_percent. Every error message names the
+        conflict_tolerance key.
     #>
     [CmdletBinding()]
     [OutputType([hashtable])]
@@ -165,22 +175,32 @@ function Get-ConfigConflictTolerance {
         foreach ($entry in $script:WeightName) { $unit[$entry] = [long]1 }
         $band = @{}
         foreach ($entry in $script:BandName) { $band[$entry] = [long]1 }
-        return @{ tolerance_percent = [long]0; weights = $unit; band_durations = $band; default_band = $script:BandName[0]; append_only_paths = [string[]]@() }
+        return @{ tolerance_percent = [long]0; weights = $unit; band_durations = $band; default_band = $script:BandName[0]; append_only_paths = [string[]]@(); combination_threshold_percent = [long]$script:CombinationThresholdDefault }
     }
 
     $member = Get-RequiredMapping -Value $value -FieldName $script:ToleranceLabel
-    Assert-ExactMemberName -Mapping $member -Name $script:MemberName -FieldName $script:ToleranceLabel
+    # The optional member joins the exact name set only when it is present, so
+    # every other unknown name is still rejected.
+    $hasThreshold = $member.ContainsKey($script:CombinationThresholdName)
+    $names = if ($hasThreshold) { @($script:MemberName) + $script:CombinationThresholdName } else { $script:MemberName }
+    Assert-ExactMemberName -Mapping $member -Name $names -FieldName $script:ToleranceLabel
     $defaultBand = $member['default_band']
     if ($defaultBand -isnot [string] -or $script:BandName -cnotcontains $defaultBand) {
         throw "$script:ToleranceLabel[""default_band""] must be one of $($script:BandName -join ', ')."
     }
 
+    $threshold = [long]$script:CombinationThresholdDefault
+    if ($hasThreshold) {
+        $threshold = Get-RequiredInteger -Value $member[$script:CombinationThresholdName] -FieldName "$script:ToleranceLabel[""$script:CombinationThresholdName""]" -Minimum 0
+    }
+
     return @{
-        tolerance_percent = Get-RequiredInteger -Value $member['tolerance_percent'] -FieldName "$script:ToleranceLabel[""tolerance_percent""]" -Minimum 0
-        weights           = Get-RequiredIntegerMap -Value $member['weights'] -Name $script:WeightName -Member 'weights'
-        band_durations    = Get-RequiredIntegerMap -Value $member['band_durations'] -Name $script:BandName -Member 'band_durations'
-        default_band      = [string]$defaultBand
-        append_only_paths = [string[]]@(Get-RequiredStringList -Value $member['append_only_paths'] -FieldName "$script:ToleranceLabel[""append_only_paths""]")
+        tolerance_percent             = Get-RequiredInteger -Value $member['tolerance_percent'] -FieldName "$script:ToleranceLabel[""tolerance_percent""]" -Minimum 0
+        weights                       = Get-RequiredIntegerMap -Value $member['weights'] -Name $script:WeightName -Member 'weights'
+        band_durations                = Get-RequiredIntegerMap -Value $member['band_durations'] -Name $script:BandName -Member 'band_durations'
+        default_band                  = [string]$defaultBand
+        append_only_paths             = [string[]]@(Get-RequiredStringList -Value $member['append_only_paths'] -FieldName "$script:ToleranceLabel[""append_only_paths""]")
+        combination_threshold_percent = $threshold
     }
 }
 
@@ -221,7 +241,10 @@ function Get-BlastRadiusPairCost {
     .DESCRIPTION
         Port of pair_cost. Sums the weight of every overlapping path pair left
         after the mergeable exclusion, then adds the module weight times the
-        number of shared modules. Mergeable paths therefore contribute 0.
+        number of shared modules and the contract weight times the number of
+        distinct shared contract identifiers (the ordinal intersection the
+        relation reads for contract_dependency, each identifier counted once).
+        Mergeable paths therefore contribute 0.
 
     .PARAMETER RadiusA
         First radius record.
@@ -269,7 +292,10 @@ function Get-BlastRadiusPairCost {
         $cost += Get-PathPairWeight -EntryA $pair['EntryA'] -EntryB $pair['EntryB'] -Tolerance $Tolerance
     }
     $sharedModule = @(@($left['modules']) | Where-Object { @($right['modules']) -ccontains $_ })
-    return $cost + ([long]$Tolerance['weights']['module'] * $sharedModule.Count)
+    # Distinct shared contract identifiers, compared ordinally like the relation.
+    $sharedContract = [System.Collections.Generic.HashSet[string]]::new([string[]]@($left['contracts']), [StringComparer]::Ordinal)
+    $sharedContract.IntersectWith([string[]]@($right['contracts']))
+    return $cost + ([long]$Tolerance['weights']['module'] * $sharedModule.Count) + ([long]$Tolerance['weights']['contract'] * $sharedContract.Count)
 }
 
 function Get-BlastRadiusPairBenefit {
@@ -423,7 +449,9 @@ function Get-BlastRadiusConflictEdge {
         Port of schedule_conflict_edges. Visits every unordered pair once in
         ascending key order. A pair whose decision is an edge is recorded as an
         edge; a conflict within tolerance is recorded as a tolerated overlap; a
-        pair that does not conflict appears in neither list.
+        pair that does not conflict appears in neither list. The aggregate cap
+        of BlastRadiusAggregate.psm1 (issue #1013) then promotes tolerated
+        overlaps until every item is within its cap.
 
     .PARAMETER Item
         The run's items: records carrying key (an integer issue number), radius,
@@ -454,7 +482,7 @@ function Get-BlastRadiusConflictEdge {
     )
 
     if ($null -eq $Relation) { throw $script:RelationRequired }
-    [void](Get-ConfigConflictTolerance -Config $Config)
+    $tolerance = Get-ConfigConflictTolerance -Config $Config
     $ordered = @(Get-OrderedSchedulingItem -Item $Item)
 
     $edge = [System.Collections.Generic.List[object]]::new()
@@ -472,7 +500,26 @@ function Get-BlastRadiusConflictEdge {
         }
     }
 
-    return @{ edges = @($edge.ToArray()); tolerated_overlaps = @($tolerated.ToArray()) }
+    # Aggregate cap post-pass (issue #1013, D-2): promote each cap-selected
+    # tolerated overlap to a non-hard edge carrying its first reason, then
+    # re-sort both lists by (a, b). At tolerance 0 nothing is tolerated.
+    $band = @{}
+    foreach ($entry in $ordered) { $band[$entry['key']] = $entry['band'] }
+    $promoted = [System.Collections.Generic.HashSet[string]]::new()
+    foreach ($pair in @(Get-AggregateCappedPair -ToleratedOverlap @($tolerated.ToArray()) -Band $band -Tolerance $tolerance)) {
+        [void]$promoted.Add(('{0}-{1}' -f $pair['a'], $pair['b']))
+    }
+    $kept = [System.Collections.Generic.List[object]]::new()
+    foreach ($overlap in $tolerated) {
+        if ($promoted.Contains(('{0}-{1}' -f $overlap['a'], $overlap['b']))) {
+            $edge.Add([ordered]@{ a = $overlap['a']; b = $overlap['b']; reason = @($overlap['reasons'])[0]; hard = $false; cost = $overlap['cost']; benefit = $overlap['benefit'] })
+        } else {
+            $kept.Add($overlap)
+        }
+    }
+    $sortedEdge = @($edge.ToArray() | Sort-Object -Property { $_['a'] }, { $_['b'] })
+
+    return @{ edges = $sortedEdge; tolerated_overlaps = @($kept.ToArray()) }
 }
 
 Export-ModuleMember -Function `

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusTokenShape.psm1

@@ -55,6 +55,12 @@
         from the Python source and pins them equal. A non-ASCII extension is
         rejected before lower-casing (issue #903); ToLowerInvariant then matches
         Python's str.lower on ASCII input, and known-name membership is ordinal.
+      - Test-GenericContractToken (issue #1006) ports is_generic_contract_token.
+        Its stem array equals GENERIC_CONTRACT_STEMS; a Pester parity test reads
+        the Python constant from the source and pins $script:GenericContractStem
+        equal to it. A token is first checked ordinally to be ASCII, because a
+        .NET case-insensitive match folds the Kelvin sign and the long s to
+        ASCII letters while Python re.ASCII does not (the issue #903 precedent).
     CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
 #>
 
@@ -114,6 +120,20 @@ $script:KnownFileName = [System.Collections.Generic.HashSet[string]]::new(
     ),
     [StringComparer]::Ordinal)
 
+# Default spreadsheet sheet-tab stems (issue #1006). A spreadsheet application
+# names a new worksheet or chart sheet with one of these stems followed by a
+# number, so a spec that mentions Sheet1 names a worksheet, not a contract. The
+# array is closed and is pinned equal to GENERIC_CONTRACT_STEMS in the Python
+# reference by a Pester parity test, so edit both files together. The pattern is
+# anchored with \A and \z to match Python's re.fullmatch, and the ASCII pattern
+# is applied first with -cmatch so the comparison is ordinal.
+$script:GenericContractStem = [string[]]@('Sheet', 'Chart')
+$script:GenericContractPattern = [regex]::new(
+    '\A(?:' + ($script:GenericContractStem -join '|') + ')[0-9]+\z',
+    [System.Text.RegularExpressions.RegexOptions]::IgnoreCase -bor
+    [System.Text.RegularExpressions.RegexOptions]::CultureInvariant)
+$script:AsciiOnlyPattern = '\A[\x00-\x7F]*\z'
+
 function Test-PlaceholderMarker {
     <#
     .SYNOPSIS
@@ -263,7 +283,42 @@ function Test-FileShapedComponent {
     return $script:FileExtensionPattern.IsMatch($extension.ToLowerInvariant())
 }
 
+function Test-GenericContractToken {
+    <#
+    .SYNOPSIS
+        Report whether a contract token is a default sheet-tab name (issue #1006).
+
+    .DESCRIPTION
+        Port of is_generic_contract_token. Two unrelated work items whose specs
+        both named the worksheet Sheet1 in an interface section were given a
+        hard contract_dependency edge, because the contract harvest accepts any
+        separator-free token carrying a letter. A default sheet-tab name
+        identifies no exported symbol, schema, or CLI identifier, so every
+        contract-filtering site rejects it with this predicate.
+
+    .PARAMETER Token
+        One candidate contract identifier. The empty string is accepted and
+        reports false.
+
+    .OUTPUTS
+        System.Boolean. True only when the token is ASCII and fully matches a
+        stem of $script:GenericContractStem followed by one or more ASCII
+        digits, compared case-insensitively; otherwise false.
+    #>
+    [CmdletBinding()]
+    [OutputType([bool])]
+    param(
+        [Parameter(Mandatory = $true)]
+        [AllowEmptyString()]
+        [string] $Token
+    )
+
+    if ($Token -cnotmatch $script:AsciiOnlyPattern) { return $false }
+    return $script:GenericContractPattern.IsMatch($Token)
+}
+
 Export-ModuleMember -Function `
     Test-PlaceholderMarker, `
     Test-MultipleFeatureFolderSpan, `
-    Test-FileShapedComponent
+    Test-FileShapedComponent, `
+    Test-GenericContractToken

package/resources/claude-customizations/.claude/lib/blast-radius/BlastRadiusWriteIntent.psm1

@@ -343,9 +343,12 @@ function Get-WriteIntentSpecContract {
             continue
         }
 
+        # A default spreadsheet sheet-tab name such as Sheet1 is not a contract
+        # (issue #1006).
         foreach ($token in @(Get-SingleWordToken -Line $line)) {
             if ($token.IndexOf('/') -lt 0 -and $token.IndexOf('*') -lt 0 -and
-                $token.IndexOf('?') -lt 0 -and $script:ContractLetterPattern.IsMatch($token)) {
+                $token.IndexOf('?') -lt 0 -and $script:ContractLetterPattern.IsMatch($token) -and
+                -not (Test-GenericContractToken -Token $token)) {
                 $identifier.Add($token)
             }
         }

package/resources/claude-customizations/.claude/lib/codex-routing/CodexDeployment.psm1

@@ -75,7 +75,11 @@ $script:GENERATED_AGENT_FAMILIES = @(
     'python-typed-engineer',
     'powershell-typed-engineer',
     'csharp-typed-engineer',
-    'typescript-engineer'
+    'typescript-engineer',
+    'legacy-parity-analyst',
+    'runtime-characterization-analyst',
+    'requirements-reconciler',
+    'migration-coverage-reviewer'
 )
 $script:LOGICAL_AGENT_ALIASES = @{ 'feature-review' = 'feature-reviewer' }
 

package/resources/claude-customizations/.claude/lib/codex-routing/CodexDiscoveryRouting.psm1

@@ -0,0 +1,161 @@
+<#
+.SYNOPSIS
+    Constrain direct discovery routing to the fixed operation contracts.
+.DESCRIPTION
+    Pure companion to CodexTopology. Constants mirror discovery_operations in
+    config/orchestration-routing.json so published consumers need no config or
+    interpreter. Receipts describe a specialist and allowed output kinds; they
+    grant no writes, approvals, installation rights, or native tool authority.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
+#>
+Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
+
+# Keep each exact operation independent: sharing a role never broadens its kinds.
+$script:DISCOVERY_OPERATIONS = @{
+    'inventory-legacy-system'         = @{
+        role  = 'legacy-parity-analyst'
+        kinds = @('coverage-ledger', 'evidence-reference', 'inventory-snapshot',
+            'required-output-manifest', 'unspecified-behavior', 'unspecified-behavior-collection')
+    }
+    'extract-feature-contract'        = @{
+        role  = 'legacy-parity-analyst'
+        kinds = @('coverage-ledger', 'evidence-reference', 'feature-contract',
+            'required-output-manifest', 'unspecified-behavior', 'unspecified-behavior-collection')
+    }
+    'characterize-runtime-behavior'   = @{
+        role  = 'runtime-characterization-analyst'
+        kinds = @('evidence-payload', 'evidence-reference', 'required-output-manifest',
+            'runtime-characterization-scenario', 'unspecified-behavior', 'unspecified-behavior-collection')
+    }
+    'reconcile-parity-matrix'         = @{
+        role  = 'requirements-reconciler'
+        kinds = @('parity-matrix', 'required-output-manifest',
+            'unspecified-behavior', 'unspecified-behavior-collection')
+    }
+    'review-discovery-coverage'       = @{
+        role  = 'migration-coverage-reviewer'
+        kinds = @('completion-report', 'coverage-report', 'parity-report',
+            'required-output-manifest', 'validation-report')
+    }
+    'adjudicate-unspecified-behavior' = @{
+        role  = 'requirements-reconciler'
+        kinds = @('acceptance-specification', 'acceptance-view', 'product-decision',
+            'product-decision-collection', 'required-output-manifest',
+            'unspecified-behavior', 'unspecified-behavior-collection')
+    }
+    'generate-acceptance-scenarios'   = @{
+        role  = 'requirements-reconciler'
+        kinds = @('acceptance-specification', 'acceptance-view', 'required-output-manifest')
+    }
+    'initialize-discovery-workspace'  = @{
+        role  = 'migration-coverage-reviewer'
+        kinds = @('coverage-report', 'required-output-manifest', 'validation-report')
+    }
+    'validate-discovery-artifacts'    = @{
+        role  = 'migration-coverage-reviewer'
+        kinds = @('coverage-report', 'required-output-manifest', 'validation-report')
+    }
+}
+
+function Resolve-CodexDiscoveryTopology {
+    <#
+    .SYNOPSIS
+        Select a fixed discovery role or allow the unchanged ordinary route.
+    .DESCRIPTION
+        Called after topology validates context, languages, counts and boolean
+        type. Validates selectors without coercion, rejects nonzero code/test
+        scope and root overrides, then returns a new seventeen-key receipt.
+        Ordinary requests with no skill return null. Invalid selectors or
+        combinations throw ArgumentException in the shared contract order.
+        No I/O or native authority is created; returned arrays are fresh copies.
+    .PARAMETER InvocationKind
+        Exact ordinary or discovery string; all other values are rejected.
+    .PARAMETER SkillId
+        Exact canonical skill string for discovery, null for ordinary requests.
+    .PARAMETER Context
+        Execution context already validated by the topology resolver; retained
+        unchanged. Named Context because ExecutionContext is a readonly
+        automatic variable.
+    .PARAMETER Language
+        Already normalized languages. Discovery requires an empty collection.
+    .PARAMETER ProductionFileCount
+        Already validated integer count. Discovery requires zero.
+    .PARAMETER TestFileCount
+        Already validated integer count. Discovery requires zero.
+    .PARAMETER CrossCutting
+        Already validated boolean. Discovery requires false.
+    .PARAMETER RootPersona
+        Raw optional root override. Discovery requires null.
+    .OUTPUTS
+        System.Collections.Hashtable for discovery, or null for ordinary routing.
+    #>
+    [CmdletBinding()]
+    [OutputType([hashtable])]
+    param(
+        [Parameter(Mandatory)][AllowNull()][object] $InvocationKind,
+        [Parameter(Mandatory)][AllowNull()][object] $SkillId,
+        [Parameter(Mandatory)][string] $Context,
+        [Parameter(Mandatory)][AllowEmptyCollection()][string[]] $Language,
+        [Parameter(Mandatory)][int] $ProductionFileCount,
+        [Parameter(Mandatory)][int] $TestFileCount,
+        [Parameter(Mandatory)][bool] $CrossCutting,
+        [Parameter(Mandatory)][AllowNull()][object] $RootPersona
+    )
+
+    # Object selectors retain their actual types; case-insensitive coercion
+    # would otherwise admit unsupported operations at this authority boundary.
+    if ($InvocationKind -isnot [string] -or @('ordinary', 'discovery') -cnotcontains $InvocationKind) {
+        throw [System.ArgumentException]::new('invocation_kind must be ordinary or discovery.')
+    }
+    if ($InvocationKind -ceq 'ordinary') {
+        if ($null -ne $SkillId) {
+            throw [System.ArgumentException]::new('skill_id is only valid for discovery invocations.')
+        }
+        return $null
+    }
+
+    # Reject discovery scope before looking up a role, preserving guard order
+    # even when several fields are malformed in the same invocation.
+    if ($null -ne $RootPersona) {
+        throw [System.ArgumentException]::new('Discovery invocations do not accept root_persona.')
+    }
+    if ($ProductionFileCount -ne 0) {
+        throw [System.ArgumentException]::new('Discovery invocations require production_file_count=0.')
+    }
+    if ($TestFileCount -ne 0) {
+        throw [System.ArgumentException]::new('Discovery invocations require test_file_count=0.')
+    }
+    if ($Language.Count -ne 0) {
+        throw [System.ArgumentException]::new('Discovery invocations do not accept languages.')
+    }
+    if ($CrossCutting) {
+        throw [System.ArgumentException]::new('Discovery invocations do not accept cross_cutting.')
+    }
+    if ($SkillId -isnot [string] -or $script:DISCOVERY_OPERATIONS.Keys -cnotcontains $SkillId) {
+        throw [System.ArgumentException]::new('Discovery invocations require a supported skill_id.')
+    }
+
+    $operation = $script:DISCOVERY_OPERATIONS[$SkillId]
+    return @{
+        execution_context          = $Context
+        languages                  = [string[]]@()
+        production_file_count      = 0
+        test_file_count            = 0
+        cross_cutting              = $false
+        root_persona               = $null
+        route                      = 'discovery'
+        topology                   = 'discovery_specialist'
+        logical_agent              = $operation.role
+        routing_reason             = 'fixed_discovery_operation'
+        max_production_files       = 0
+        max_test_files             = 0
+        invocation_kind            = 'discovery'
+        skill_id                   = $SkillId
+        output_contract_version    = '2.0.0'
+        permissible_artifact_kinds = [string[]]@($operation.kinds)
+        gate_mode                  = 'agent-output'
+    }
+}
+
+Export-ModuleMember -Function Resolve-CodexDiscoveryTopology

package/resources/claude-customizations/.claude/lib/codex-routing/CodexTopology.psm1

@@ -53,6 +53,8 @@
 Set-StrictMode -Version Latest
 $ErrorActionPreference = 'Stop'
 
+Import-Module (Join-Path $PSScriptRoot 'CodexDiscoveryRouting.psm1') -ErrorAction Stop
+
 # The three permitted execution contexts, the sorted tuple rendering the Python
 # message interpolates, and the two contexts that mark epic child work.
 $script:VALID_EXECUTION_CONTEXTS = @('standalone', 'epic_preparation_child', 'epic_execution_child')
@@ -249,11 +251,17 @@ function Resolve-CodexTopology {
         Whether the change is cross-cutting. Must be a boolean.
     .PARAMETER RootPersona
         An optional forced root persona, which requires a standalone context.
+    .PARAMETER InvocationKind
+        Exact ordinary or discovery selector. Defaults to ordinary routing.
+    .PARAMETER SkillId
+        Exact canonical discovery operation. Must be absent for ordinary routing.
     .OUTPUTS
         System.Collections.Hashtable with the twelve resolved keys:
         execution_context, languages, production_file_count, test_file_count,
         cross_cutting, root_persona, route, topology, logical_agent,
-        routing_reason, max_production_files, max_test_files.
+        routing_reason, max_production_files, max_test_files. Discovery adds
+        invocation_kind, skill_id, output_contract_version,
+        permissible_artifact_kinds, and gate_mode; it grants no write authority.
     #>
     [CmdletBinding()]
     [OutputType([hashtable])]
@@ -281,7 +289,15 @@ function Resolve-CodexTopology {
 
         [Parameter(Mandatory = $false)]
         [AllowNull()]
-        [object] $RootPersona = $null
+        [object] $RootPersona = $null,
+
+        [Parameter(Mandatory = $false)]
+        [AllowNull()]
+        [object] $InvocationKind = 'ordinary',
+
+        [Parameter(Mandatory = $false)]
+        [AllowNull()]
+        [object] $SkillId = $null
     )
 
     if ($script:VALID_EXECUTION_CONTEXTS -cnotcontains $ExecutionContext) {
@@ -307,6 +323,13 @@ function Resolve-CodexTopology {
     $testCount = [int]$TestFileCount
     $isCrossCutting = [bool]$CrossCutting
 
+    # Discovery validates its closed selector before ordinary root/epic/count
+    # dispatch. A fixed specialist receipt conveys routing, never tool grants.
+    $discovery = Resolve-CodexDiscoveryTopology -InvocationKind $InvocationKind -SkillId $SkillId `
+        -Context $context -Language $languages -ProductionFileCount $productionCount `
+        -TestFileCount $testCount -CrossCutting $isCrossCutting -RootPersona $RootPersona
+    if ($null -ne $discovery) { return $discovery }
+
     # A forced root persona short-circuits all escalation logic and selects
     # itself, but only from a standalone context.
     if ($null -ne $RootPersona) {

package/resources/claude-customizations/.claude/lib/discovery-validation/DiscoveryAuthority.psd1

@@ -0,0 +1,90 @@
+@{
+    # Module manifest for the shared native discovery authority primitives (issue #980).
+    # Importing this manifest loads the authority, manifest and payload modules together
+    # so a hook can take every narrow primitive from one import.
+    RootModule        = 'DiscoveryAuthority.psm1'
+    ModuleVersion     = '2.0.0'
+    GUID              = '5d0b8e5e-3b7f-4a2a-9f8e-2f9f0b9a7c11'
+    Author            = 'drm-copilot'
+    CompanyName       = 'drm-copilot'
+    Copyright         = '(c) drm-copilot. All rights reserved.'
+    Description       = 'Protected discovery authority location, activation decoding, input-manifest freshness and host envelope normalization for native discovery hooks.'
+    PowerShellVersion = '7.0'
+    NestedModules     = @('DiscoveryEncoding.psm1', 'DiscoveryManifest.psm1', 'DiscoveryPayload.psm1', 'DiscoveryAuthorization.psm1', 'DiscoveryStartRecord.psm1', 'DiscoveryStart.psm1', 'DiscoveryStop.psm1', 'DiscoveryPlanning.psm1', 'DiscoveryCapability.psm1')
+    FunctionsToExport = @(
+        'Get-DiscoverySha256Hex',
+        'Get-DiscoveryBytesSha256Hex',
+        'ConvertTo-DiscoveryCanonicalJson',
+        'Invoke-DiscoveryStoreSeam',
+        'Resolve-DiscoveryAuthorityLocation',
+        'Get-DiscoveryTrustedHostEnvironment',
+        'Get-DiscoveryPartitionName',
+        'Get-DiscoverySessionDirectory',
+        'Get-DiscoveryInvocationDirectory',
+        'Get-DiscoveryActivationRecordPath',
+        'Test-DiscoveryProtectedPath',
+        'Test-DiscoveryRelativePath',
+        'ConvertFrom-DiscoveryActivationRecord',
+        'Read-DiscoveryActivationState',
+        'ConvertFrom-DiscoveryInputManifest',
+        'Get-DiscoveryInputManifestDigest',
+        'Get-DiscoveryWorkspacePath',
+        'Compare-DiscoveryInputManifest',
+        'Assert-DiscoveryInputsFresh',
+        'Test-DiscoverySupportedHost',
+        'ConvertFrom-DiscoveryHostEnvelope',
+        'ConvertFrom-DiscoveryHostPayloadText',
+        'Get-DiscoveryTrustedPrincipal',
+        'Get-DiscoveryHostEnvironmentValueTable',
+        'Get-DiscoveryPayloadAnomalyReason',
+        'Resolve-DiscoveryToolName',
+        'Get-DiscoveryToolOperation',
+        'Get-DiscoveryInputDigest',
+        'Find-DiscoveryAgentInvocation',
+        'ConvertTo-DiscoveryToolAuthorizationRecord',
+        'Get-DiscoveryDefaultStore',
+        'Get-DiscoveryAuthorizationNonce',
+        'Get-DiscoveryPreToolDecision',
+        'ConvertTo-DiscoveryPreToolHookOutput',
+        'Get-DiscoveryAgentRole',
+        'Get-DiscoveryAgentProfilePath',
+        'ConvertFrom-DiscoveryMarkdownProfile',
+        'Read-DiscoveryAgentProfile',
+        'ConvertTo-DiscoveryUtcInstant',
+        'ConvertTo-DiscoveryStartedInvocationText',
+        'ConvertTo-DiscoveryStartAttestationRecord',
+        'Get-DiscoveryStartStore',
+        'Get-DiscoveryStartAttestationFileName',
+        'Find-DiscoveryPreparedInvocation',
+        'Get-DiscoveryDeploymentMismatch',
+        'Get-DiscoveryCapabilityMismatch',
+        'Get-DiscoveryStartDecision',
+        'Get-DiscoveryAuthorizationNonceText',
+        'ConvertTo-DiscoveryStartHookOutput',
+        'Find-DiscoveryAgentInvocationForStop',
+        'Get-DiscoveryReceiptMismatch',
+        'Get-DiscoveryStopDecision',
+        'Get-DiscoveryStopVerdict',
+        'Get-DiscoveryPlanningTarget',
+        'Get-DiscoveryPlanningPrerequisite',
+        'Get-DiscoveryPlanningReceiptMismatch',
+        'Get-DiscoveryPlanningDecision',
+        'ConvertTo-DiscoveryPlanningHookOutput',
+        'Get-DiscoverySentinelRequest',
+        'Get-DiscoverySentinelEnvelope',
+        'Get-DiscoverySessionObservation',
+        'Get-DiscoveryObservationEvidence',
+        'Get-DiscoveryHostRegistration',
+        'Test-DiscoveryHandlerRegistered',
+        'Get-DiscoveryCapabilityObservation',
+        'Write-DiscoveryCapabilityAttestation'
+    )
+    CmdletsToExport   = @()
+    VariablesToExport = @()
+    AliasesToExport   = @()
+    PrivateData       = @{
+        PSData = @{
+            Tags = @('drm-copilot', 'discovery', 'hooks')
+        }
+    }
+}