@danmoisan/drm-copilot-mcp 1.0.13 → 1.0.15

package/resources/codex-and-agents-customizations/.codex/hooks/enforce-orchestration-preimplementation-gate.ps1

@@ -1,12 +1,12 @@
+
 <#
 .SYNOPSIS
-    Blocks implementation writes before Issue #232 orchestration readiness exists.
+    Blocks implementation operations before orchestration readiness exists.
 #>
 [CmdletBinding()]
 param()
 
 $script:CheckpointPath = 'artifacts/orchestration/orchestrator-state.json'
-$script:Issue232FeatureFolder = 'docs/features/active/2026-06-24-harden-orchestrate-skill-232'
 
 function ConvertFrom-CheckpointJson {
     [CmdletBinding()]
@@ -29,12 +29,12 @@ function Get-StringProperty {
     return ([string]$Value.$Name).Trim()
 }
 
-function Test-DocumentationOrEvidencePath {
+function Test-FeatureDocumentationOrEvidencePath {
     [CmdletBinding()]
     [OutputType([bool])]
     param([Parameter(Mandatory)][string] $NormalizedPath)
 
-    return $NormalizedPath.StartsWith($script:Issue232FeatureFolder + '/')
+    return $NormalizedPath.StartsWith('docs/features/active/')
 }
 
 function Test-ImplementationPath {
@@ -42,7 +42,7 @@ function Test-ImplementationPath {
     [OutputType([bool])]
     param([Parameter(Mandatory)][string] $NormalizedPath)
 
-    if (Test-DocumentationOrEvidencePath -NormalizedPath $NormalizedPath) {
+    if (Test-FeatureDocumentationOrEvidencePath -NormalizedPath $NormalizedPath) {
         return $false
     }
     if ($NormalizedPath -eq $script:CheckpointPath) {
@@ -51,7 +51,59 @@ function Test-ImplementationPath {
     return $NormalizedPath -match '\.(py|ps1|psm1|ts|tsx|js|jsx|cs|json|yml|yaml)$'
 }
 
-function Test-Issue232OrchestrationReady {
+function Test-ImplementationCommand {
+    [CmdletBinding()]
+    [OutputType([bool])]
+    param([Parameter(Mandatory)][string] $Command)
+
+    $normalizedCommand = $Command.Trim()
+    if (-not $normalizedCommand) {
+        return $false
+    }
+
+    foreach ($match in [regex]::Matches($normalizedCommand, '(?m)^\*\*\* (?:Add|Update|Delete) File:\s*(?<path>.+?)\s*$')) {
+        $path = (([string]$match.Groups['path'].Value).Trim()) -replace '\\', '/'
+        if (Test-ImplementationPath -NormalizedPath $path) {
+            return $true
+        }
+    }
+    foreach ($match in [regex]::Matches($normalizedCommand, '(?m)^\*\*\* Move to:\s*(?<path>.+?)\s*$')) {
+        $path = (([string]$match.Groups['path'].Value).Trim()) -replace '\\', '/'
+        if (Test-ImplementationPath -NormalizedPath $path) {
+            return $true
+        }
+    }
+
+    $implementationCommandPatterns = @(
+        '(^|\s)git\s+(add|commit)\b',
+        '(^|\s)(poetry\s+run\s+)?(black|ruff|pyright|pytest)\b',
+        '(^|\s)npm\s+.*\s+(prettier|lint|typecheck|test:unit)\b',
+        '(^|\s)npx\s+(prettier|eslint|tsc|jest)\b',
+        '(^|\s)pwsh\s+.*(Invoke-Pester|tests/scripts/)'
+    )
+
+    foreach ($pattern in $implementationCommandPatterns) {
+        if ($normalizedCommand -match $pattern) {
+            return $true
+        }
+    }
+    return $false
+}
+
+function Test-ImplementationDelegation {
+    [CmdletBinding()]
+    [OutputType([bool])]
+    param([Parameter(Mandatory)][AllowNull()] $ToolInput)
+
+    if ($null -eq $ToolInput) {
+        return $false
+    }
+
+    $payloadText = ($ToolInput | ConvertTo-Json -Depth 20 -Compress)
+    return $payloadText -match '(python-typed-engineer|powershell-typed-engineer|typescript-engineer|csharp-typed-engineer|atomic-executor|implementation|execute)'
+}
+
+function Test-OrchestrationReady {
     [CmdletBinding()]
     [OutputType([bool])]
     param([Parameter(Mandatory)][AllowNull()] $Payload)
@@ -70,9 +122,12 @@ function Test-Issue232OrchestrationReady {
         $lifecycleReady = [bool]$Payload.lifecycle_ready
     }
 
+    if (-not $issueNum -or -not $featureFolder -or -not $routeId -or -not $lifecycleReady) {
+        return $false
+    }
+
     return (
-        $issueNum -eq '232' -and
-        $featureFolder -eq $script:Issue232FeatureFolder -and
+        $featureFolder.StartsWith('docs/features/active/') -and
         $routeId -and
         $lifecycleReady
     )
@@ -89,6 +144,36 @@ function Get-CheckpointContent {
     return Get-Content -Raw -LiteralPath $script:CheckpointPath
 }
 
+function Get-OrchestrationPreimplementationGateAllowDecision {
+    [CmdletBinding()]
+    [OutputType([System.Collections.Specialized.OrderedDictionary])]
+    param()
+
+    return [ordered]@{
+        hookSpecificOutput = [ordered]@{
+            hookEventName      = 'PreToolUse'
+            permissionDecision = 'allow'
+        }
+    }
+}
+
+function Get-OrchestrationPreimplementationGateBlockDecision {
+    [CmdletBinding()]
+    [OutputType([System.Collections.Specialized.OrderedDictionary])]
+    param(
+        [Parameter(Mandatory)]
+        [string] $Reason
+    )
+
+    return [ordered]@{
+        hookSpecificOutput = [ordered]@{
+            hookEventName            = 'PreToolUse'
+            permissionDecision       = 'deny'
+            permissionDecisionReason = $Reason
+        }
+    }
+}
+
 function Invoke-OrchestrationPreimplementationGateDecision {
     [CmdletBinding()]
     [OutputType([System.Collections.Specialized.OrderedDictionary])]
@@ -98,21 +183,30 @@ function Invoke-OrchestrationPreimplementationGateDecision {
     )
 
     if (-not $ToolInputRaw) {
-        return [ordered]@{ decision = 'allow' }
+        return Get-OrchestrationPreimplementationGateAllowDecision
     }
     try {
         $toolInput = $ToolInputRaw | ConvertFrom-Json -ErrorAction Stop
     } catch {
-        throw "enforce-orchestration-preimplementation-gate hook received malformed JSON in CLAUDE_TOOL_INPUT: $_"
+        throw "enforce-orchestration-preimplementation-gate received malformed mapped tool_input JSON: $_"
     }
 
-    $filePath = $toolInput.file_path
-    if (-not $filePath) {
-        return [ordered]@{ decision = 'allow' }
+    $requiresReadyCheckpoint = $false
+    $filePath = Get-StringProperty -Value $toolInput -Name 'file_path'
+    if ($filePath) {
+        $normalized = ([string]$filePath) -replace '\\', '/'
+        $requiresReadyCheckpoint = Test-ImplementationPath -NormalizedPath $normalized
+    } else {
+        $command = Get-StringProperty -Value $toolInput -Name 'command'
+        if ($command) {
+            $requiresReadyCheckpoint = Test-ImplementationCommand -Command $command
+        } else {
+            $requiresReadyCheckpoint = Test-ImplementationDelegation -ToolInput $toolInput
+        }
     }
-    $normalized = ([string]$filePath) -replace '\\', '/'
-    if (-not (Test-ImplementationPath -NormalizedPath $normalized)) {
-        return [ordered]@{ decision = 'allow' }
+
+    if (-not $requiresReadyCheckpoint) {
+        return Get-OrchestrationPreimplementationGateAllowDecision
     }
 
     if (-not $CheckpointRaw) {
@@ -124,13 +218,32 @@ function Invoke-OrchestrationPreimplementationGateDecision {
         $checkpoint = $null
     }
 
-    if (Test-Issue232OrchestrationReady -Payload $checkpoint) {
-        return [ordered]@{ decision = 'allow' }
+    if (Test-OrchestrationReady -Payload $checkpoint) {
+        return Get-OrchestrationPreimplementationGateAllowDecision
     }
-    return [ordered]@{
-        decision = 'block'
-        reason   = 'PREIMPLEMENTATION_GATE_BLOCKED: Issue #232 implementation writes require artifacts/orchestration/orchestrator-state.json to contain route metadata, lifecycle readiness, and checkpoint state before implementation begins.'
+    return Get-OrchestrationPreimplementationGateBlockDecision -Reason 'PREIMPLEMENTATION_GATE_BLOCKED: Implementation operations require artifacts/orchestration/orchestrator-state.json to contain issue number, feature folder, route metadata, lifecycle readiness, and checkpoint state before implementation begins.'
+}
+
+function ConvertFrom-CodexPreimplementationHookPayload {
+    [CmdletBinding()]
+    param([Parameter(Mandatory)][string] $PayloadRaw)
+
+    if ([string]::IsNullOrWhiteSpace($PayloadRaw)) {
+        throw 'enforce-orchestration-preimplementation-gate hook input is empty.'
     }
+    try {
+        $payload = $PayloadRaw | ConvertFrom-Json -ErrorAction Stop
+    } catch {
+        throw "enforce-orchestration-preimplementation-gate hook input is malformed JSON: $_"
+    }
+    if ($payload.PSObject.Properties.Name -notcontains 'tool_input' -or $null -eq $payload.tool_input) {
+        throw 'enforce-orchestration-preimplementation-gate hook input is missing tool_input.'
+    }
+    if ([string]$payload.hook_event_name -ne 'PreToolUse' -or
+        @('Bash', 'apply_patch') -notcontains [string]$payload.tool_name) {
+        throw 'enforce-orchestration-preimplementation-gate requires a supported PreToolUse payload.'
+    }
+    return $payload
 }
 
 if ($MyInvocation.InvocationName -eq '.') {
@@ -138,11 +251,14 @@ if ($MyInvocation.InvocationName -eq '.') {
 }
 
 try {
-    $decision = Invoke-OrchestrationPreimplementationGateDecision -ToolInputRaw $env:CLAUDE_TOOL_INPUT
+    $payload = ConvertFrom-CodexPreimplementationHookPayload -PayloadRaw ([Console]::In.ReadToEnd())
+    $toolInputRaw = $payload.tool_input | ConvertTo-Json -Compress -Depth 20
+    $decision = Invoke-OrchestrationPreimplementationGateDecision -ToolInputRaw $toolInputRaw
+    if ($decision.hookSpecificOutput.permissionDecision -eq 'deny') {
+        $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
+    }
+    exit 0
 } catch {
-    Write-Error $_
-    exit 1
+    [Console]::Error.WriteLine([string]$_)
+    exit 2
 }
-
-$decision | ConvertTo-Json -Compress | Write-Output
-exit 0

package/resources/codex-and-agents-customizations/.codex/hooks/enforce-powershell-batch-budget.ps1

@@ -1,20 +1,18 @@
-# Converted hook
-# Review the generated hook behavior before enabling it.
 
 <#
 .SYNOPSIS
     Pre-tool-use hook that enforces the PowerShell per-batch change budget.
 
 .DESCRIPTION
-    This script is invoked by the Claude Code PreToolUse hook before any Write or Edit
+    This script is invoked by the Codex PreToolUse hook before any Write or Edit
     operation. When the target file is a PowerShell source file (.ps1, .psm1, .psd1),
     it classifies the file as either production or test and checks the running count
     against the per-batch cap:
       - 3 production PowerShell files per batch
       - 3 test PowerShell files per batch
 
-    A "batch" is scoped to the current Claude Code session. The running count is
-    persisted under .claude/state/powershell-batch-budget.<session_id>.json. Only
+    A "batch" is scoped to the current Codex session. The running count is
+    persisted under .codex/state/powershell-batch-budget.<session_id>.json. Only
     distinct file paths are counted; repeated edits to the same file consume one slot.
 
     Test files are those matching:
@@ -24,15 +22,13 @@
     All other .ps1/.psm1/.psd1 files are treated as production files. Non-PowerShell
     paths pass through.
 
-    The cap may be overridden per session by setting the environment variable
-    CLAUDE_POWERSHELL_BUDGET_PROD or CLAUDE_POWERSHELL_BUDGET_TEST to a positive integer
-    before the session starts, or by writing {"prodCap": N, "testCap": M} into the
-    state file.
+    An approved per-session override is recorded by writing
+    {"prodCap": N, "testCap": M} into the Codex state file.
 
-    When the cap would be exceeded by a new file, the script emits a JSON response with
-    'decision': 'block' and exits 0. The session must explicitly reset the counter by
-    deleting the state file before starting a new batch. Files already counted are
-    always allowed through.
+    When the cap would be exceeded by a new file, the script emits a PreToolUse JSON
+    response with hookSpecificOutput.permissionDecision = 'deny' and exits 0. The session
+    must explicitly reset the counter by deleting the state file before starting a new
+    batch. Files already counted are always allowed through.
 
 .NOTES
     Compatible with PowerShell 7+.
@@ -93,8 +89,11 @@ function Get-PowerShellBatchBudgetBlockDecision {
     )
 
     $decision = [ordered]@{
-        decision = 'block'
-        reason   = $Reason
+        hookSpecificOutput = [ordered]@{
+            hookEventName            = 'PreToolUse'
+            permissionDecision       = 'deny'
+            permissionDecisionReason = $Reason
+        }
     }
     if ($State) {
         $decision.state = $State
@@ -119,7 +118,7 @@ function Invoke-PowerShellBatchBudgetDecision {
 
     $normalized = $FilePath -replace '\\', '/'
     if ($normalized -notmatch '\.(ps1|psm1|psd1)$') {
-        return [ordered]@{ decision = 'allow'; state = $State; shouldWriteState = $false }
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $false }
     }
 
     $isTestFile = ($normalized -match '(^|/)tests/.*\.ps1$') -or ($normalized -match '\.Tests\.ps1$')
@@ -128,13 +127,12 @@ function Invoke-PowerShellBatchBudgetDecision {
     $kind = if ($isTestFile) { 'test' } else { 'production' }
 
     if ($targetList -contains $normalized) {
-        return [ordered]@{ decision = 'allow'; state = $State; shouldWriteState = $false }
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $false }
     }
 
     if ($targetList.Count -ge $cap) {
         $currentFiles = ($targetList -join ', ')
-        $kindUpper = $kind.ToUpperInvariant()
-        $reason = "PowerShell per-batch budget exceeded: $kind file cap is $cap and is already full ($currentFiles). Requested new file: $normalized. Split the work into a new batch, raise the cap via CLAUDE_POWERSHELL_BUDGET_$kindUpper environment variable with approved scope, or reset the batch by deleting $StateFile."
+        $reason = "PowerShell per-batch budget exceeded: $kind file cap is $cap and is already full ($currentFiles). Requested new file: $normalized. Split the work into a new batch, record an approved cap in $StateFile, or reset the batch by deleting that state file."
         return Get-PowerShellBatchBudgetBlockDecision -Reason $reason -State $State
     }
 
@@ -144,7 +142,7 @@ function Invoke-PowerShellBatchBudgetDecision {
         $State.prodFiles = @($State.prodFiles) + @($normalized)
     }
 
-    return [ordered]@{ decision = 'allow'; state = $State; shouldWriteState = $true }
+    return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' }; state = $State; shouldWriteState = $true }
 }
 
 function Invoke-PowerShellBatchBudgetHook {
@@ -166,26 +164,26 @@ function Invoke-PowerShellBatchBudgetHook {
     )
 
     if (-not $ToolInputRaw) {
-        return [ordered]@{ decision = 'allow' }
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
     }
 
     try {
         $toolInput = $ToolInputRaw | ConvertFrom-Json -ErrorAction Stop
     } catch {
-        return Get-PowerShellBatchBudgetBlockDecision -Reason 'PowerShell batch-budget hook received malformed JSON in CLAUDE_TOOL_INPUT.'
+        return Get-PowerShellBatchBudgetBlockDecision -Reason 'PowerShell batch-budget hook received malformed JSON in Codex tool_input.'
     }
 
     $filePath = $toolInput.file_path
     if (-not $filePath) {
-        return [ordered]@{ decision = 'allow' }
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
     }
 
     $normalized = $filePath -replace '\\', '/'
     if ($normalized -notmatch '\.(ps1|psm1|psd1)$') {
-        return [ordered]@{ decision = 'allow' }
+        return [ordered]@{ hookSpecificOutput = [ordered]@{ hookEventName = 'PreToolUse'; permissionDecision = 'allow' } }
     }
 
-    $stateDir = Join-Path -Path $Root -ChildPath '.claude/state'
+    $stateDir = Join-Path -Path $Root -ChildPath '.codex/state'
     if (-not (& $TestPathExists $stateDir)) {
         & $EnsureDirectory $stateDir
     }
@@ -214,28 +212,75 @@ function Invoke-PowerShellBatchBudgetHook {
     return $decision
 }
 
-if ($MyInvocation.InvocationName -eq '.') {
-    return
-}
+function ConvertFrom-CodexPowerShellBudgetPayload {
+    [CmdletBinding()]
+    param([Parameter(Mandatory)][string] $PayloadRaw)
 
-$sessionId = $env:CLAUDE_SESSION_ID
-if (-not $sessionId) {
-    $sessionId = 'default'
+    if ([string]::IsNullOrWhiteSpace($PayloadRaw)) {
+        throw 'enforce-powershell-batch-budget hook input is empty.'
+    }
+    try {
+        $payload = $PayloadRaw | ConvertFrom-Json -ErrorAction Stop
+    } catch {
+        throw "enforce-powershell-batch-budget hook input is malformed JSON: $_"
+    }
+    if ($payload.PSObject.Properties.Name -notcontains 'tool_input' -or $null -eq $payload.tool_input) {
+        throw 'enforce-powershell-batch-budget hook input is missing tool_input.'
+    }
+    if ([string]$payload.hook_event_name -ne 'PreToolUse' -or [string]$payload.tool_name -ne 'apply_patch') {
+        throw 'enforce-powershell-batch-budget requires a PreToolUse apply_patch payload.'
+    }
+    if ([string]::IsNullOrWhiteSpace([string]$payload.session_id)) {
+        throw 'enforce-powershell-batch-budget hook input is missing session_id.'
+    }
+    return $payload
 }
 
-$prodCap = 3
-$testCap = 3
-if ($env:CLAUDE_POWERSHELL_BUDGET_PROD -match '^\d+$') {
-    $prodCap = [int]$env:CLAUDE_POWERSHELL_BUDGET_PROD
-}
-if ($env:CLAUDE_POWERSHELL_BUDGET_TEST -match '^\d+$') {
-    $testCap = [int]$env:CLAUDE_POWERSHELL_BUDGET_TEST
+function Get-CodexPowerShellBudgetPath {
+    [CmdletBinding()]
+    [OutputType([string])]
+    param([Parameter(Mandatory)] $Payload)
+
+    if ($Payload.tool_input.PSObject.Properties.Name -contains 'file_path') {
+        return [string]$Payload.tool_input.file_path
+    }
+    $command = [string]$Payload.tool_input.command
+    if ([string]::IsNullOrWhiteSpace($command)) {
+        throw 'enforce-powershell-batch-budget cannot map tool_input to a file edit.'
+    }
+    [string[]] $paths = @(
+        [regex]::Matches($command, '(?m)^\*\*\* (?:(?:Add|Update|Delete) File|Move to):\s*(?<path>.+?)\s*$') |
+            ForEach-Object { ([string]$_.Groups['path'].Value).Trim() }
+    )
+    $paths = @($paths | Select-Object -Unique)
+    if ($paths.Count -eq 0) {
+        throw 'enforce-powershell-batch-budget received an unrecognized apply_patch command.'
+    }
+    return $paths
 }
 
-$decision = Invoke-PowerShellBatchBudgetHook -ToolInputRaw $env:CLAUDE_TOOL_INPUT -SessionId $sessionId -ProdCap $prodCap -TestCap $testCap
-if ($decision.decision -eq 'block') {
-    $decision.Remove('state')
-    $decision | ConvertTo-Json -Compress | Write-Output
+if ($MyInvocation.InvocationName -eq '.') {
+    return
 }
 
-exit 0
+try {
+    $payload = ConvertFrom-CodexPowerShellBudgetPayload -PayloadRaw ([Console]::In.ReadToEnd())
+    $sessionId = ([string]$payload.session_id) -replace '[^A-Za-z0-9._-]', '_'
+    $repositoryRoot = Split-Path (Split-Path $PSScriptRoot -Parent) -Parent
+    $prodCap = 3
+    $testCap = 3
+
+    foreach ($path in @(Get-CodexPowerShellBudgetPath -Payload $payload)) {
+        $toolInputRaw = @{ file_path = $path } | ConvertTo-Json -Compress
+        $decision = Invoke-PowerShellBatchBudgetHook -ToolInputRaw $toolInputRaw -SessionId $sessionId -Root $repositoryRoot -ProdCap $prodCap -TestCap $testCap
+        if ($decision.hookSpecificOutput.permissionDecision -eq 'deny') {
+            $decision.Remove('state')
+            $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
+            exit 0
+        }
+    }
+    exit 0
+} catch {
+    [Console]::Error.WriteLine([string]$_)
+    exit 2
+}

package/resources/codex-and-agents-customizations/.codex/hooks/enforce-promotion-mcp-only.ps1

@@ -1,11 +1,11 @@
+
 <#
 .SYNOPSIS
     Pre-tool-use hook that blocks Bash promotion-script bypass attempts.
 
 .DESCRIPTION
-    This script is invoked by the Claude Code PreToolUse hook before any Bash
-    command runs. It reads the tool input from the CLAUDE_TOOL_INPUT environment
-    variable, inspects the attempted command text, and blocks direct promotion
+    This script is invoked by the Codex PreToolUse hook before a shell command runs.
+    It reads one Codex JSON object from stdin, inspects tool_input.command, and blocks direct promotion
     script execution that would bypass the repository's MCP-only promotion path.
 
     Forbidden command tokens (legacy promotion-script bypass):
@@ -70,7 +70,7 @@ function Get-PromotionBypassReason {
         Returns the gh-CLI issue creation reason when a forbidden gh pattern is matched.
         Returns $null when the command is allowed.
     .PARAMETER CommandText
-        The Bash command text extracted from CLAUDE_TOOL_INPUT.
+        The shell command text extracted from the Codex tool_input object.
     .OUTPUTS
         System.String or $null.
     #>
@@ -118,7 +118,7 @@ function Test-PromotionBypassToken {
     .SYNOPSIS
         Return $true when a Bash command contains a forbidden promotion bypass pattern.
     .PARAMETER CommandText
-        The Bash command text extracted from CLAUDE_TOOL_INPUT.
+        The shell command text extracted from the Codex tool_input object.
     .OUTPUTS
         System.Boolean
     #>
@@ -153,17 +153,39 @@ function Get-PromotionMcpOnlyBlockDecision {
     }
 
     return [ordered]@{
-        decision = 'block'
-        reason   = $Reason
+        hookSpecificOutput = [ordered]@{
+            hookEventName            = 'PreToolUse'
+            permissionDecision       = 'deny'
+            permissionDecisionReason = $Reason
+        }
+    }
+}
+
+function Get-PromotionMcpOnlyAllowDecision {
+    <#
+    .SYNOPSIS
+        Construct the structured allow decision for a permitted Bash command.
+    .OUTPUTS
+        System.Collections.Specialized.OrderedDictionary
+    #>
+    [CmdletBinding()]
+    [OutputType([System.Collections.Specialized.OrderedDictionary])]
+    param()
+
+    return [ordered]@{
+        hookSpecificOutput = [ordered]@{
+            hookEventName      = 'PreToolUse'
+            permissionDecision = 'allow'
+        }
     }
 }
 
 function Invoke-PromotionMcpOnlyDecision {
     <#
     .SYNOPSIS
-        Parse CLAUDE_TOOL_INPUT and return an allow-or-block decision.
+        Parse the mapped Codex tool_input JSON and return an allow-or-deny decision.
     .PARAMETER ToolInputRaw
-        The raw JSON tool payload supplied by Claude Code.
+        The mapped tool_input JSON supplied by Codex.
     .OUTPUTS
         System.Collections.Specialized.OrderedDictionary
     .NOTES
@@ -177,18 +199,18 @@ function Invoke-PromotionMcpOnlyDecision {
     )
 
     if (-not $ToolInputRaw) {
-        return [ordered]@{ decision = 'allow' }
+        return Get-PromotionMcpOnlyAllowDecision
     }
 
     try {
         $toolInput = $ToolInputRaw | ConvertFrom-Json -ErrorAction Stop
     } catch {
-        throw "enforce-promotion-mcp-only hook received malformed JSON in CLAUDE_TOOL_INPUT: $_"
+        throw "enforce-promotion-mcp-only received malformed mapped tool_input JSON: $_"
     }
 
     $commandText = $toolInput.command
     if (-not $commandText) {
-        return [ordered]@{ decision = 'allow' }
+        return Get-PromotionMcpOnlyAllowDecision
     }
 
     $reason = Get-PromotionBypassReason -CommandText $commandText
@@ -196,7 +218,28 @@ function Invoke-PromotionMcpOnlyDecision {
         return Get-PromotionMcpOnlyBlockDecision -Reason $reason
     }
 
-    return [ordered]@{ decision = 'allow' }
+    return Get-PromotionMcpOnlyAllowDecision
+}
+
+function ConvertFrom-CodexPromotionHookPayload {
+    [CmdletBinding()]
+    param([Parameter(Mandatory)][string] $PayloadRaw)
+
+    if ([string]::IsNullOrWhiteSpace($PayloadRaw)) {
+        throw 'enforce-promotion-mcp-only hook input is empty.'
+    }
+    try {
+        $payload = $PayloadRaw | ConvertFrom-Json -ErrorAction Stop
+    } catch {
+        throw "enforce-promotion-mcp-only hook input is malformed JSON: $_"
+    }
+    if ($payload.PSObject.Properties.Name -notcontains 'tool_input' -or $null -eq $payload.tool_input) {
+        throw 'enforce-promotion-mcp-only hook input is missing tool_input.'
+    }
+    if ([string]$payload.hook_event_name -ne 'PreToolUse' -or [string]$payload.tool_name -ne 'Bash') {
+        throw 'enforce-promotion-mcp-only requires a PreToolUse Bash payload.'
+    }
+    return $payload
 }
 
 # Allow dot-sourcing in tests without executing the entrypoint.
@@ -205,12 +248,14 @@ if ($MyInvocation.InvocationName -eq '.') {
 }
 
 try {
-    $decision = Invoke-PromotionMcpOnlyDecision -ToolInputRaw $env:CLAUDE_TOOL_INPUT
+    $payload = ConvertFrom-CodexPromotionHookPayload -PayloadRaw ([Console]::In.ReadToEnd())
+    $toolInputRaw = $payload.tool_input | ConvertTo-Json -Compress -Depth 20
+    $decision = Invoke-PromotionMcpOnlyDecision -ToolInputRaw $toolInputRaw
+    if ($decision.hookSpecificOutput.permissionDecision -eq 'deny') {
+        $decision | ConvertTo-Json -Compress -Depth 5 | Write-Output
+    }
+    exit 0
 } catch {
-    Write-Error $_
-    exit 1
+    [Console]::Error.WriteLine([string]$_)
+    exit 2
 }
-
-$decision | ConvertTo-Json -Compress | Write-Output
-
-exit 0