@danmoisan/drm-copilot-mcp 1.0.13 → 1.0.15

package/resources/codex-and-agents-customizations/.codex/hooks/check-powershell-test-purity.ps1

@@ -1,14 +1,12 @@
-# Converted hook
-# Review the generated hook behavior before enabling it.
 
 <#
 .SYNOPSIS
-    Pre-tool-use hook for Claude Code that blocks forbidden patterns in PowerShell unit tests.
+    Pre-tool-use hook for Codex that blocks forbidden patterns in PowerShell unit tests.
 
 .DESCRIPTION
-    This script is invoked by the Claude Code PreToolUse hook before any Write or Edit
+    This script is invoked by the Codex PreToolUse hook before any Write or Edit
     operation on a file path matching a Pester test file (*.Tests.ps1 or tests/**/*.ps1).
-    It reads the tool input from the CLAUDE_TOOL_INPUT environment variable (JSON with
+    It reads the tool input from the Codex tool_input environment variable (JSON with
     'file_path' and a content field: 'content' for Write, 'new_string' for Edit) and
     rejects the operation when the proposed content introduces forbidden runtime
     dependencies or violates the mocking rules.
@@ -23,9 +21,9 @@
       - subprocess execution (Start-Process with raw executables)
       - time-based flakiness (Start-Sleep)
 
-    If the content contains any forbidden pattern, the script writes a JSON response
-    to stdout with 'decision': 'block' and exits with code 0 to let Claude Code surface
-    the reason.
+    If the content contains any forbidden pattern, the script writes a PreToolUse JSON
+    response to stdout with hookSpecificOutput.permissionDecision = 'deny' and exits with
+    code 0 to let Codex surface the reason.
 
 .NOTES
     Compatible with PowerShell 7+.
@@ -35,79 +33,190 @@
 [CmdletBinding()]
 param()
 
-$toolInputRaw = $env:CLAUDE_TOOL_INPUT
-if (-not $toolInputRaw) {
-    exit 0
+function Get-PowerShellTestPurityBlockDecision {
+    [CmdletBinding()]
+    [OutputType([System.Collections.Specialized.OrderedDictionary])]
+    param(
+        [Parameter(Mandatory)]
+        [string] $Reason
+    )
+
+    [ordered]@{
+        hookSpecificOutput = [ordered]@{
+            hookEventName            = 'PreToolUse'
+            permissionDecision       = 'deny'
+            permissionDecisionReason = $Reason
+        }
+    }
 }
 
-try {
-    $toolInput = $toolInputRaw | ConvertFrom-Json -ErrorAction Stop
-}
-catch {
-    exit 0
-}
+function Test-PowerShellTestFilePath {
+    [CmdletBinding()]
+    [OutputType([bool])]
+    param(
+        [Parameter(Mandatory)]
+        [string] $FilePath
+    )
 
-$filePath = $toolInput.file_path
-if (-not $filePath) {
-    exit 0
+    $normalized = $FilePath -replace '\\', '/'
+    return (($normalized -match '(^|/)tests/.*\.ps1$') -or ($normalized -match '\.Tests\.ps1$'))
 }
 
-$normalized = $filePath -replace '\\', '/'
-$isPowerShellTestFile = ($normalized -match '(^|/)tests/.*\.ps1$') -or ($normalized -match '\.Tests\.ps1$')
-if (-not $isPowerShellTestFile) {
-    exit 0
-}
+function Invoke-PowerShellTestPurityDecision {
+    [CmdletBinding()]
+    [OutputType([System.Collections.Specialized.OrderedDictionary])]
+    param(
+        [string] $ToolInputRaw
+    )
 
-$content = $null
-if ($null -ne $toolInput.content) {
-    $content = [string]$toolInput.content
-}
-elseif ($null -ne $toolInput.new_string) {
-    $content = [string]$toolInput.new_string
-}
+    if (-not $ToolInputRaw) {
+        return $null
+    }
 
-if (-not $content) {
-    exit 0
-}
+    try {
+        $toolInput = $ToolInputRaw | ConvertFrom-Json -ErrorAction Stop
+    }
+    catch {
+        return $null
+    }
+
+    $filePath = $toolInput.file_path
+    if (-not $filePath) {
+        return $null
+    }
+
+    if (-not (Test-PowerShellTestFilePath -FilePath $filePath)) {
+        return $null
+    }
+
+    $content = $null
+    if ($null -ne $toolInput.content) {
+        $content = [string]$toolInput.content
+    }
+    elseif ($null -ne $toolInput.new_string) {
+        $content = [string]$toolInput.new_string
+    }
+
+    if (-not $content) {
+        return $null
+    }
 
-$forbiddenPatterns = @(
-    @{ Pattern = '(?m)^\s*Mock\s+git\b'; Reason = 'direct Mock git forbidden in Pester tests; mock the Invoke-GitExe wrapper instead' },
-    @{ Pattern = '(?m)^\s*Mock\s+gh\b'; Reason = 'direct Mock gh forbidden in Pester tests; mock the Invoke-GhExe wrapper instead' },
-    @{ Pattern = '(?m)^\s*Mock\s+actionlint\b'; Reason = 'direct Mock actionlint forbidden in Pester tests; mock the Invoke-ActionlintExe wrapper instead' },
-    @{ Pattern = "(?m)^\s*Mock\s+['""]git['""]"; Reason = 'direct Mock ''git'' forbidden in Pester tests; mock the Invoke-GitExe wrapper instead' },
-    @{ Pattern = "(?m)^\s*Mock\s+['""]gh['""]"; Reason = 'direct Mock ''gh'' forbidden in Pester tests; mock the Invoke-GhExe wrapper instead' },
-    @{ Pattern = '\bNew-TemporaryFile\b'; Reason = 'New-TemporaryFile forbidden in Pester unit tests' },
-    @{ Pattern = '\[System\.IO\.Path\]::GetTempFileName'; Reason = 'temporary files forbidden in Pester unit tests' },
-    @{ Pattern = '\[System\.IO\.Path\]::GetTempPath'; Reason = 'temp path usage forbidden in Pester unit tests' },
-    @{ Pattern = '\$env:TEMP\b'; Reason = '$env:TEMP usage forbidden in Pester unit tests' },
-    @{ Pattern = '\$env:TMP\b'; Reason = '$env:TMP usage forbidden in Pester unit tests' },
-    @{ Pattern = '\bInvoke-WebRequest\b'; Reason = 'network access (Invoke-WebRequest) forbidden in Pester unit tests' },
-    @{ Pattern = '\bInvoke-RestMethod\b'; Reason = 'network access (Invoke-RestMethod) forbidden in Pester unit tests' },
-    @{ Pattern = '\[System\.Net\.Http\.'; Reason = 'System.Net.Http usage forbidden in Pester unit tests' },
-    @{ Pattern = '\[System\.Net\.WebRequest\]'; Reason = 'System.Net.WebRequest usage forbidden in Pester unit tests' },
-    @{ Pattern = '\[System\.Net\.Sockets\.'; Reason = 'raw socket access forbidden in Pester unit tests' },
-    @{ Pattern = '\bStart-Process\b'; Reason = 'Start-Process forbidden in Pester unit tests; mock the wrapper seam instead' },
-    @{ Pattern = '\bStart-Sleep\b'; Reason = 'Start-Sleep forbidden in Pester unit tests; avoid timing hacks' }
-)
-
-$violations = @()
-foreach ($entry in $forbiddenPatterns) {
-    if ($content -match $entry.Pattern) {
-        $violations += $entry.Reason
+    $forbiddenPatterns = @(
+        @{ Pattern = '(?m)^\s*Mock\s+git\b'; Reason = 'direct Mock git forbidden in Pester tests; mock the Invoke-GitExe wrapper instead' },
+        @{ Pattern = '(?m)^\s*Mock\s+gh\b'; Reason = 'direct Mock gh forbidden in Pester tests; mock the Invoke-GhExe wrapper instead' },
+        @{ Pattern = '(?m)^\s*Mock\s+actionlint\b'; Reason = 'direct Mock actionlint forbidden in Pester tests; mock the Invoke-ActionlintExe wrapper instead' },
+        @{ Pattern = "(?m)^\s*Mock\s+['""]git['""]"; Reason = 'direct Mock ''git'' forbidden in Pester tests; mock the Invoke-GitExe wrapper instead' },
+        @{ Pattern = "(?m)^\s*Mock\s+['""]gh['""]"; Reason = 'direct Mock ''gh'' forbidden in Pester tests; mock the Invoke-GhExe wrapper instead' },
+        @{ Pattern = '\bNew-TemporaryFile\b'; Reason = 'New-TemporaryFile forbidden in Pester unit tests' },
+        @{ Pattern = '\[System\.IO\.Path\]::GetTempFileName'; Reason = 'temporary files forbidden in Pester unit tests' },
+        @{ Pattern = '\[System\.IO\.Path\]::GetTempPath'; Reason = 'temp path usage forbidden in Pester unit tests' },
+        @{ Pattern = '\$env:TEMP\b'; Reason = '$env:TEMP usage forbidden in Pester unit tests' },
+        @{ Pattern = '\$env:TMP\b'; Reason = '$env:TMP usage forbidden in Pester unit tests' },
+        @{ Pattern = '\bInvoke-WebRequest\b'; Reason = 'network access (Invoke-WebRequest) forbidden in Pester unit tests' },
+        @{ Pattern = '\bInvoke-RestMethod\b'; Reason = 'network access (Invoke-RestMethod) forbidden in Pester unit tests' },
+        @{ Pattern = '\[System\.Net\.Http\.'; Reason = 'System.Net.Http usage forbidden in Pester unit tests' },
+        @{ Pattern = '\[System\.Net\.WebRequest\]'; Reason = 'System.Net.WebRequest usage forbidden in Pester unit tests' },
+        @{ Pattern = '\[System\.Net\.Sockets\.'; Reason = 'raw socket access forbidden in Pester unit tests' },
+        @{ Pattern = '\bStart-Process\b'; Reason = 'Start-Process forbidden in Pester unit tests; mock the wrapper seam instead' },
+        @{ Pattern = '\bStart-Sleep\b'; Reason = 'Start-Sleep forbidden in Pester unit tests; avoid timing hacks' }
+    )
+
+    $violations = @()
+    foreach ($entry in $forbiddenPatterns) {
+        if ($content -match $entry.Pattern) {
+            $violations += $entry.Reason
+        }
     }
+
+    if ($violations.Count -eq 0) {
+        return $null
+    }
+
+    $uniqueViolations = $violations | Select-Object -Unique
+    $reason = "PowerShell unit test purity violations in '$filePath': " + ($uniqueViolations -join '; ') + ". Replace with wrapper-seam mocks, in-memory fakes, or pure code paths per .agents/skills/powershell/SKILL.md."
+
+    return Get-PowerShellTestPurityBlockDecision -Reason $reason
 }
 
-if ($violations.Count -eq 0) {
-    exit 0
+function ConvertFrom-CodexPowerShellPurityPayload {
+    [CmdletBinding()]
+    param([Parameter(Mandatory)][string] $PayloadRaw)
+
+    if ([string]::IsNullOrWhiteSpace($PayloadRaw)) {
+        throw 'check-powershell-test-purity hook input is empty.'
+    }
+    try {
+        $payload = $PayloadRaw | ConvertFrom-Json -ErrorAction Stop
+    } catch {
+        throw "check-powershell-test-purity hook input is malformed JSON: $_"
+    }
+    if ($payload.PSObject.Properties.Name -notcontains 'tool_input' -or $null -eq $payload.tool_input) {
+        throw 'check-powershell-test-purity hook input is missing tool_input.'
+    }
+    if ([string]$payload.hook_event_name -ne 'PreToolUse' -or [string]$payload.tool_name -ne 'apply_patch') {
+        throw 'check-powershell-test-purity requires a PreToolUse apply_patch payload.'
+    }
+    return $payload
 }
 
-$uniqueViolations = $violations | Select-Object -Unique
-$reason = "PowerShell unit test purity violations in '$filePath': " + ($uniqueViolations -join '; ') + ". Replace with wrapper-seam mocks, in-memory fakes, or pure code paths per .agents/skills/powershell/SKILL.md."
+function ConvertTo-CodexPowerShellPurityInput {
+    [CmdletBinding()]
+    [OutputType([object[]])]
+    param([Parameter(Mandatory)] $Payload)
+
+    if ($Payload.tool_input.PSObject.Properties.Name -contains 'file_path') {
+        return , $Payload.tool_input
+    }
+
+    $command = [string]$Payload.tool_input.command
+    if ([string]::IsNullOrWhiteSpace($command)) {
+        throw 'check-powershell-test-purity cannot map tool_input to a file edit.'
+    }
+
+    $fileMatches = [regex]::Matches(
+        $command,
+        '(?ms)^\*\*\* (?:Add|Update|Delete) File:\s*(?<path>.+?)\r?\n(?<body>.*?)(?=^\*\*\* (?:(?:Add|Update|Delete) File:|End Patch)\s*|\z)'
+    )
+    if ($fileMatches.Count -eq 0) {
+        throw 'check-powershell-test-purity received an unrecognized apply_patch command.'
+    }
+
+    $inputs = [System.Collections.Generic.List[object]]::new()
+    foreach ($match in $fileMatches) {
+        $filePath = ([string]$match.Groups['path'].Value).Trim()
+        $moveMatch = [regex]::Match([string]$match.Groups['body'].Value, '(?m)^\*\*\* Move to:\s*(?<path>.+?)\s*$')
+        if ($moveMatch.Success) {
+            $filePath = ([string]$moveMatch.Groups['path'].Value).Trim()
+        }
+        $addedLines = foreach ($line in ([string]$match.Groups['body'].Value -split '\r?\n')) {
+            if ($line.StartsWith('+') -and -not $line.StartsWith('+++')) {
+                $line.Substring(1)
+            }
+        }
+        $inputs.Add([pscustomobject]@{
+                file_path = $filePath
+                content   = $addedLines -join [Environment]::NewLine
+            })
+    }
+    return $inputs.ToArray()
+}
 
-$response = @{
-    decision = 'block'
-    reason   = $reason
-} | ConvertTo-Json -Compress
+if ($MyInvocation.InvocationName -eq '.') {
+    return
+}
 
-Write-Output $response
-exit 0
+try {
+    $payload = ConvertFrom-CodexPowerShellPurityPayload -PayloadRaw ([Console]::In.ReadToEnd())
+    foreach ($toolInput in @(ConvertTo-CodexPowerShellPurityInput -Payload $payload)) {
+        $toolInputRaw = $toolInput | ConvertTo-Json -Compress -Depth 20
+        $decision = Invoke-PowerShellTestPurityDecision -ToolInputRaw $toolInputRaw
+        if ($null -ne $decision -and $decision.hookSpecificOutput.permissionDecision -eq 'deny') {
+            $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
+            exit 0
+        }
+    }
+    exit 0
+} catch {
+    [Console]::Error.WriteLine([string]$_)
+    exit 2
+}

package/resources/codex-and-agents-customizations/.codex/hooks/check-python-test-purity.ps1

@@ -1,14 +1,12 @@
-# Converted hook
-# Review the generated hook behavior before enabling it.
 
 <#
 .SYNOPSIS
-    Pre-tool-use hook for Claude Code that blocks forbidden patterns in Python unit tests.
+    Pre-tool-use hook for Codex that blocks forbidden patterns in Python unit tests.
 
 .DESCRIPTION
-    This script is invoked by the Claude Code PreToolUse hook before any Write or Edit
+    This script is invoked by the Codex PreToolUse hook before any Write or Edit
     operation on a file path matching tests/**/*.py. It reads the tool input from the
-    CLAUDE_TOOL_INPUT environment variable (JSON with 'file_path' and a content field:
+    Codex tool_input environment variable (JSON with 'file_path' and a content field:
     'content' for Write, 'new_string' for Edit) and rejects the operation when the
     proposed content introduces forbidden runtime dependencies.
 
@@ -21,7 +19,7 @@
       - real database drivers (psycopg2, pymysql, sqlite3.connect on real files)
 
     If the content contains any forbidden pattern, the script writes a JSON response
-    to stdout with 'decision': 'block' and exits with code 0 to let Claude Code surface
+    to stdout with 'decision': 'block' and exits with code 0 to let Codex surface
     the reason.
 
 .NOTES
@@ -41,8 +39,11 @@ function Get-PythonTestPurityBlockDecision {
     )
 
     [ordered]@{
-        decision = 'block'
-        reason   = $Reason
+        hookSpecificOutput = [ordered]@{
+            hookEventName            = 'PreToolUse'
+            permissionDecision       = 'deny'
+            permissionDecisionReason = $Reason
+        }
     }
 }
 
@@ -66,22 +67,22 @@ function Invoke-PythonTestPurityDecision {
     )
 
     if (-not $ToolInputRaw) {
-        return [ordered]@{ decision = 'allow' }
+        return $null
     }
 
     try {
         $toolInput = $ToolInputRaw | ConvertFrom-Json -ErrorAction Stop
     } catch {
-        return Get-PythonTestPurityBlockDecision -Reason 'Python unit test purity hook received malformed JSON in CLAUDE_TOOL_INPUT.'
+        return Get-PythonTestPurityBlockDecision -Reason 'Python unit test purity hook received malformed JSON in Codex tool_input.'
     }
 
     $filePath = $toolInput.file_path
     if (-not $filePath) {
-        return [ordered]@{ decision = 'allow' }
+        return $null
     }
 
     if (-not (Test-PythonTestFilePath -FilePath $filePath)) {
-        return [ordered]@{ decision = 'allow' }
+        return $null
     }
 
     $content = $null
@@ -92,7 +93,7 @@ function Invoke-PythonTestPurityDecision {
     }
 
     if (-not $content) {
-        return [ordered]@{ decision = 'allow' }
+        return $null
     }
 
     $forbiddenPatterns = @(
@@ -128,7 +129,7 @@ function Invoke-PythonTestPurityDecision {
     }
 
     if ($violations.Count -eq 0) {
-        return [ordered]@{ decision = 'allow' }
+        return $null
     }
 
     $uniqueViolations = $violations | Select-Object -Unique
@@ -137,13 +138,85 @@ function Invoke-PythonTestPurityDecision {
     return Get-PythonTestPurityBlockDecision -Reason $reason
 }
 
+function ConvertFrom-CodexPythonPurityPayload {
+    [CmdletBinding()]
+    param([Parameter(Mandatory)][string] $PayloadRaw)
+
+    if ([string]::IsNullOrWhiteSpace($PayloadRaw)) {
+        throw 'check-python-test-purity hook input is empty.'
+    }
+    try {
+        $payload = $PayloadRaw | ConvertFrom-Json -ErrorAction Stop
+    } catch {
+        throw "check-python-test-purity hook input is malformed JSON: $_"
+    }
+    if ($payload.PSObject.Properties.Name -notcontains 'tool_input' -or $null -eq $payload.tool_input) {
+        throw 'check-python-test-purity hook input is missing tool_input.'
+    }
+    if ([string]$payload.hook_event_name -ne 'PreToolUse' -or [string]$payload.tool_name -ne 'apply_patch') {
+        throw 'check-python-test-purity requires a PreToolUse apply_patch payload.'
+    }
+    return $payload
+}
+
+function ConvertTo-CodexPythonPurityInput {
+    [CmdletBinding()]
+    [OutputType([object[]])]
+    param([Parameter(Mandatory)] $Payload)
+
+    if ($Payload.tool_input.PSObject.Properties.Name -contains 'file_path') {
+        return , $Payload.tool_input
+    }
+
+    $command = [string]$Payload.tool_input.command
+    if ([string]::IsNullOrWhiteSpace($command)) {
+        throw 'check-python-test-purity cannot map tool_input to a file edit.'
+    }
+
+    $fileMatches = [regex]::Matches(
+        $command,
+        '(?ms)^\*\*\* (?:Add|Update|Delete) File:\s*(?<path>.+?)\r?\n(?<body>.*?)(?=^\*\*\* (?:(?:Add|Update|Delete) File:|End Patch)\s*|\z)'
+    )
+    if ($fileMatches.Count -eq 0) {
+        throw 'check-python-test-purity received an unrecognized apply_patch command.'
+    }
+
+    $inputs = [System.Collections.Generic.List[object]]::new()
+    foreach ($match in $fileMatches) {
+        $filePath = ([string]$match.Groups['path'].Value).Trim()
+        $moveMatch = [regex]::Match([string]$match.Groups['body'].Value, '(?m)^\*\*\* Move to:\s*(?<path>.+?)\s*$')
+        if ($moveMatch.Success) {
+            $filePath = ([string]$moveMatch.Groups['path'].Value).Trim()
+        }
+        $addedLines = foreach ($line in ([string]$match.Groups['body'].Value -split '\r?\n')) {
+            if ($line.StartsWith('+') -and -not $line.StartsWith('+++')) {
+                $line.Substring(1)
+            }
+        }
+        $inputs.Add([pscustomobject]@{
+                file_path = $filePath
+                content   = $addedLines -join [Environment]::NewLine
+            })
+    }
+    return $inputs.ToArray()
+}
+
 if ($MyInvocation.InvocationName -eq '.') {
     return
 }
 
-$decision = Invoke-PythonTestPurityDecision -ToolInputRaw $env:CLAUDE_TOOL_INPUT
-if ($decision.decision -eq 'block') {
-    $decision | ConvertTo-Json -Compress | Write-Output
+try {
+    $payload = ConvertFrom-CodexPythonPurityPayload -PayloadRaw ([Console]::In.ReadToEnd())
+    foreach ($toolInput in @(ConvertTo-CodexPythonPurityInput -Payload $payload)) {
+        $toolInputRaw = $toolInput | ConvertTo-Json -Compress -Depth 20
+        $decision = Invoke-PythonTestPurityDecision -ToolInputRaw $toolInputRaw
+        if ($null -ne $decision -and $decision.hookSpecificOutput.permissionDecision -eq 'deny') {
+            $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
+            exit 0
+        }
+    }
+    exit 0
+} catch {
+    [Console]::Error.WriteLine([string]$_)
+    exit 2
 }
-
-exit 0

package/resources/codex-and-agents-customizations/.codex/hooks/codex-agent-profile-attestation.ps1

@@ -0,0 +1,199 @@
+<#
+.SYNOPSIS
+    Reads and validates the immutable identity fields of a Codex agent profile.
+#>
+[CmdletBinding()]
+param()
+
+function Get-CodexAgentProfileAttestation {
+    [CmdletBinding()]
+    [OutputType([System.Collections.Specialized.OrderedDictionary])]
+    param(
+        [Parameter(Mandatory)][string] $RepositoryRoot,
+        [Parameter(Mandatory)][string] $AgentType
+    )
+
+    if ($AgentType -notmatch '^[A-Za-z0-9][A-Za-z0-9._-]*$') {
+        throw "MODEL_ROUTING_ATTESTATION_BLOCKED: invalid agent profile name '$AgentType'."
+    }
+    $relativePath = ".codex/agents/$AgentType.toml"
+    $profilePath = Join-Path $RepositoryRoot ($relativePath -replace '/', [IO.Path]::DirectorySeparatorChar)
+    if (-not (Test-Path -LiteralPath $profilePath -PathType Leaf)) {
+        throw "MODEL_ROUTING_ATTESTATION_BLOCKED: agent profile '$relativePath' does not exist."
+    }
+
+    $bytes = [IO.File]::ReadAllBytes($profilePath)
+    $sha256 = [Convert]::ToHexString(
+        [Security.Cryptography.SHA256]::HashData($bytes)
+    ).ToLowerInvariant()
+    try {
+        $content = [Text.UTF8Encoding]::new($false, $true).GetString($bytes)
+    } catch {
+        throw "MODEL_ROUTING_ATTESTATION_BLOCKED: agent profile '$relativePath' is not valid UTF-8."
+    }
+
+    $values = @{}
+    $inMultilineString = $false
+    $multilineDelimiter = ''
+    $insideTable = $false
+    foreach ($line in ($content -split "`r?`n")) {
+        if ($inMultilineString) {
+            if ($line.Contains($multilineDelimiter)) {
+                $inMultilineString = $false
+                $multilineDelimiter = ''
+            }
+            continue
+        }
+        if ($line -match '^\s*\[') {
+            $insideTable = $true
+            continue
+        }
+        if ($insideTable -or $line -match '^\s*(?:#|$)') {
+            continue
+        }
+        if ($line -match '^\s*[A-Za-z0-9_.-]+\s*=\s*' -and
+            ($line.Contains("'''") -or $line.Contains('"""'))) {
+            $delimiter = if ($line.Contains("'''")) { "'''" } else { '"""' }
+            $remainder = $line.Substring($line.IndexOf($delimiter) + 3)
+            if (-not $remainder.Contains($delimiter)) {
+                $inMultilineString = $true
+                $multilineDelimiter = $delimiter
+            }
+            continue
+        }
+        if ($line -notmatch '^\s*(?<key>name|model|model_reasoning_effort)\s*=\s*"(?<value>[A-Za-z0-9._-]+)"\s*(?:#.*)?$') {
+            continue
+        }
+        $key = [string]$Matches.key
+        if ($values.ContainsKey($key)) {
+            throw "MODEL_ROUTING_ATTESTATION_BLOCKED: agent profile '$relativePath' repeats '$key'."
+        }
+        $values[$key] = [string]$Matches.value
+    }
+
+    foreach ($requiredKey in @('name', 'model', 'model_reasoning_effort')) {
+        if (-not $values.ContainsKey($requiredKey)) {
+            throw "MODEL_ROUTING_ATTESTATION_BLOCKED: agent profile '$relativePath' has no valid '$requiredKey'."
+        }
+    }
+    return [ordered]@{
+        profile_path             = $relativePath
+        profile_sha256           = $sha256
+        profile_name             = [string]$values.name
+        profile_model            = [string]$values.model
+        profile_reasoning_effort = [string]$values.model_reasoning_effort
+    }
+}
+
+function Test-CodexAgentProfileBinding {
+    [CmdletBinding()]
+    [OutputType([bool])]
+    param(
+        [Parameter(Mandatory)] $AgentProfile,
+        [Parameter(Mandatory)][string] $AgentType,
+        [Parameter(Mandatory)][string] $ActualModel,
+        [Parameter(Mandatory)][string] $ExpectedModel,
+        [Parameter(Mandatory)][string] $ExpectedReasoningEffort,
+        [AllowNull()][AllowEmptyString()][string] $ExpectedProfilePath,
+        [AllowNull()][AllowEmptyString()][string] $ExpectedProfileSha256
+    )
+
+    if ([string]::IsNullOrWhiteSpace($ExpectedModel) -or
+        [string]::IsNullOrWhiteSpace($ExpectedReasoningEffort)) {
+        return $false
+    }
+    if ([string]$AgentProfile.profile_name -cne $AgentType -or
+        [string]$AgentProfile.profile_model -cne $ExpectedModel -or
+        $ActualModel -cne $ExpectedModel -or
+        [string]$AgentProfile.profile_reasoning_effort -cne $ExpectedReasoningEffort) {
+        return $false
+    }
+    if (-not [string]::IsNullOrWhiteSpace($ExpectedProfilePath) -and
+        [string]$AgentProfile.profile_path -cne $ExpectedProfilePath) {
+        return $false
+    }
+    if (-not [string]::IsNullOrWhiteSpace($ExpectedProfileSha256) -and
+        [string]$AgentProfile.profile_sha256 -cne $ExpectedProfileSha256) {
+        return $false
+    }
+    return $true
+}
+
+function Test-CodexRoutedAgentType {
+    [CmdletBinding()]
+    [OutputType([bool])]
+    param([Parameter(Mandatory)][string] $AgentType)
+
+    if ($AgentType -match '-c(?:1|2|3|4|3-elevated)$') {
+        return $true
+    }
+    return @(
+        'orchestrator', 'atomic-planner', 'atomic-executor', 'feature-review',
+        'feature-reviewer', 'task-researcher', 'prd-feature', 'pr-author',
+        'python-typed-engineer', 'powershell-typed-engineer',
+        'csharp-typed-engineer', 'typescript-engineer'
+    ) -contains $AgentType
+}
+
+function Test-CodexRoutingReceiptAgentType {
+    [CmdletBinding()]
+    [OutputType([bool])]
+    param(
+        [AllowNull()] $Receipt,
+        [Parameter(Mandatory)][string] $AgentType
+    )
+
+    if ($null -eq $Receipt) {
+        return $false
+    }
+    $properties = @($Receipt.PSObject.Properties.Name)
+    return $properties -contains 'deployment_agent' -and
+    -not [string]::IsNullOrWhiteSpace([string]$Receipt.deployment_agent) -and
+    [string]$Receipt.deployment_agent -ceq $AgentType
+}
+
+function Find-CodexModelRoutingReceipt {
+    [CmdletBinding()]
+    param(
+        [Parameter(Mandatory)][string] $AgentType,
+        [Parameter(Mandatory)][AllowEmptyCollection()][object[]] $Checkpoints
+    )
+
+    $matchingReceipts = [Collections.Generic.List[object]]::new()
+    foreach ($checkpoint in $Checkpoints) {
+        if ($null -eq $checkpoint) {
+            continue
+        }
+        $checkpointProperties = @($checkpoint.PSObject.Properties.Name)
+        foreach ($receiptKey in @('codex_model_routing_receipts', 'model_routing_receipts')) {
+            if ($checkpointProperties -notcontains $receiptKey) {
+                continue
+            }
+            foreach ($receipt in @($checkpoint.$receiptKey)) {
+                if (Test-CodexRoutingReceiptAgentType -Receipt $receipt -AgentType $AgentType) {
+                    $matchingReceipts.Add($receipt)
+                }
+            }
+        }
+        if ($checkpointProperties -contains 'features') {
+            foreach ($feature in @($checkpoint.features)) {
+                if ($null -eq $feature -or
+                    @($feature.PSObject.Properties.Name) -notcontains 'model_routing_receipt') {
+                    continue
+                }
+                $receipt = $feature.model_routing_receipt
+                if (Test-CodexRoutingReceiptAgentType -Receipt $receipt -AgentType $AgentType) {
+                    $matchingReceipts.Add($receipt)
+                }
+            }
+        }
+    }
+    if ($matchingReceipts.Count -eq 0) {
+        return $null
+    }
+    return $matchingReceipts[$matchingReceipts.Count - 1]
+}
+
+if ($MyInvocation.InvocationName -eq '.') {
+    return
+}