@danmoisan/drm-copilot-mcp 1.1.23 → 1.1.24

package/resources/lib/codex-routing/CodexDiscoveryRouting.psm1

@@ -0,0 +1,161 @@
+<#
+.SYNOPSIS
+    Constrain direct discovery routing to the fixed operation contracts.
+.DESCRIPTION
+    Pure companion to CodexTopology. Constants mirror discovery_operations in
+    config/orchestration-routing.json so published consumers need no config or
+    interpreter. Receipts describe a specialist and allowed output kinds; they
+    grant no writes, approvals, installation rights, or native tool authority.
+    CONVENTION: this module fails fast at module scope and imports its siblings with -ErrorAction Stop.
+#>
+Set-StrictMode -Version Latest
+$ErrorActionPreference = 'Stop'
+
+# Keep each exact operation independent: sharing a role never broadens its kinds.
+$script:DISCOVERY_OPERATIONS = @{
+    'inventory-legacy-system'         = @{
+        role  = 'legacy-parity-analyst'
+        kinds = @('coverage-ledger', 'evidence-reference', 'inventory-snapshot',
+            'required-output-manifest', 'unspecified-behavior', 'unspecified-behavior-collection')
+    }
+    'extract-feature-contract'        = @{
+        role  = 'legacy-parity-analyst'
+        kinds = @('coverage-ledger', 'evidence-reference', 'feature-contract',
+            'required-output-manifest', 'unspecified-behavior', 'unspecified-behavior-collection')
+    }
+    'characterize-runtime-behavior'   = @{
+        role  = 'runtime-characterization-analyst'
+        kinds = @('evidence-payload', 'evidence-reference', 'required-output-manifest',
+            'runtime-characterization-scenario', 'unspecified-behavior', 'unspecified-behavior-collection')
+    }
+    'reconcile-parity-matrix'         = @{
+        role  = 'requirements-reconciler'
+        kinds = @('parity-matrix', 'required-output-manifest',
+            'unspecified-behavior', 'unspecified-behavior-collection')
+    }
+    'review-discovery-coverage'       = @{
+        role  = 'migration-coverage-reviewer'
+        kinds = @('completion-report', 'coverage-report', 'parity-report',
+            'required-output-manifest', 'validation-report')
+    }
+    'adjudicate-unspecified-behavior' = @{
+        role  = 'requirements-reconciler'
+        kinds = @('acceptance-specification', 'acceptance-view', 'product-decision',
+            'product-decision-collection', 'required-output-manifest',
+            'unspecified-behavior', 'unspecified-behavior-collection')
+    }
+    'generate-acceptance-scenarios'   = @{
+        role  = 'requirements-reconciler'
+        kinds = @('acceptance-specification', 'acceptance-view', 'required-output-manifest')
+    }
+    'initialize-discovery-workspace'  = @{
+        role  = 'migration-coverage-reviewer'
+        kinds = @('coverage-report', 'required-output-manifest', 'validation-report')
+    }
+    'validate-discovery-artifacts'    = @{
+        role  = 'migration-coverage-reviewer'
+        kinds = @('coverage-report', 'required-output-manifest', 'validation-report')
+    }
+}
+
+function Resolve-CodexDiscoveryTopology {
+    <#
+    .SYNOPSIS
+        Select a fixed discovery role or allow the unchanged ordinary route.
+    .DESCRIPTION
+        Called after topology validates context, languages, counts and boolean
+        type. Validates selectors without coercion, rejects nonzero code/test
+        scope and root overrides, then returns a new seventeen-key receipt.
+        Ordinary requests with no skill return null. Invalid selectors or
+        combinations throw ArgumentException in the shared contract order.
+        No I/O or native authority is created; returned arrays are fresh copies.
+    .PARAMETER InvocationKind
+        Exact ordinary or discovery string; all other values are rejected.
+    .PARAMETER SkillId
+        Exact canonical skill string for discovery, null for ordinary requests.
+    .PARAMETER Context
+        Execution context already validated by the topology resolver; retained
+        unchanged. Named Context because ExecutionContext is a readonly
+        automatic variable.
+    .PARAMETER Language
+        Already normalized languages. Discovery requires an empty collection.
+    .PARAMETER ProductionFileCount
+        Already validated integer count. Discovery requires zero.
+    .PARAMETER TestFileCount
+        Already validated integer count. Discovery requires zero.
+    .PARAMETER CrossCutting
+        Already validated boolean. Discovery requires false.
+    .PARAMETER RootPersona
+        Raw optional root override. Discovery requires null.
+    .OUTPUTS
+        System.Collections.Hashtable for discovery, or null for ordinary routing.
+    #>
+    [CmdletBinding()]
+    [OutputType([hashtable])]
+    param(
+        [Parameter(Mandatory)][AllowNull()][object] $InvocationKind,
+        [Parameter(Mandatory)][AllowNull()][object] $SkillId,
+        [Parameter(Mandatory)][string] $Context,
+        [Parameter(Mandatory)][AllowEmptyCollection()][string[]] $Language,
+        [Parameter(Mandatory)][int] $ProductionFileCount,
+        [Parameter(Mandatory)][int] $TestFileCount,
+        [Parameter(Mandatory)][bool] $CrossCutting,
+        [Parameter(Mandatory)][AllowNull()][object] $RootPersona
+    )
+
+    # Object selectors retain their actual types; case-insensitive coercion
+    # would otherwise admit unsupported operations at this authority boundary.
+    if ($InvocationKind -isnot [string] -or @('ordinary', 'discovery') -cnotcontains $InvocationKind) {
+        throw [System.ArgumentException]::new('invocation_kind must be ordinary or discovery.')
+    }
+    if ($InvocationKind -ceq 'ordinary') {
+        if ($null -ne $SkillId) {
+            throw [System.ArgumentException]::new('skill_id is only valid for discovery invocations.')
+        }
+        return $null
+    }
+
+    # Reject discovery scope before looking up a role, preserving guard order
+    # even when several fields are malformed in the same invocation.
+    if ($null -ne $RootPersona) {
+        throw [System.ArgumentException]::new('Discovery invocations do not accept root_persona.')
+    }
+    if ($ProductionFileCount -ne 0) {
+        throw [System.ArgumentException]::new('Discovery invocations require production_file_count=0.')
+    }
+    if ($TestFileCount -ne 0) {
+        throw [System.ArgumentException]::new('Discovery invocations require test_file_count=0.')
+    }
+    if ($Language.Count -ne 0) {
+        throw [System.ArgumentException]::new('Discovery invocations do not accept languages.')
+    }
+    if ($CrossCutting) {
+        throw [System.ArgumentException]::new('Discovery invocations do not accept cross_cutting.')
+    }
+    if ($SkillId -isnot [string] -or $script:DISCOVERY_OPERATIONS.Keys -cnotcontains $SkillId) {
+        throw [System.ArgumentException]::new('Discovery invocations require a supported skill_id.')
+    }
+
+    $operation = $script:DISCOVERY_OPERATIONS[$SkillId]
+    return @{
+        execution_context          = $Context
+        languages                  = [string[]]@()
+        production_file_count      = 0
+        test_file_count            = 0
+        cross_cutting              = $false
+        root_persona               = $null
+        route                      = 'discovery'
+        topology                   = 'discovery_specialist'
+        logical_agent              = $operation.role
+        routing_reason             = 'fixed_discovery_operation'
+        max_production_files       = 0
+        max_test_files             = 0
+        invocation_kind            = 'discovery'
+        skill_id                   = $SkillId
+        output_contract_version    = '2.0.0'
+        permissible_artifact_kinds = [string[]]@($operation.kinds)
+        gate_mode                  = 'agent-output'
+    }
+}
+
+Export-ModuleMember -Function Resolve-CodexDiscoveryTopology

package/resources/lib/codex-routing/CodexTopology.psm1

@@ -53,6 +53,8 @@
 Set-StrictMode -Version Latest
 $ErrorActionPreference = 'Stop'
 
+Import-Module (Join-Path $PSScriptRoot 'CodexDiscoveryRouting.psm1') -ErrorAction Stop
+
 # The three permitted execution contexts, the sorted tuple rendering the Python
 # message interpolates, and the two contexts that mark epic child work.
 $script:VALID_EXECUTION_CONTEXTS = @('standalone', 'epic_preparation_child', 'epic_execution_child')
@@ -249,11 +251,17 @@ function Resolve-CodexTopology {
         Whether the change is cross-cutting. Must be a boolean.
     .PARAMETER RootPersona
         An optional forced root persona, which requires a standalone context.
+    .PARAMETER InvocationKind
+        Exact ordinary or discovery selector. Defaults to ordinary routing.
+    .PARAMETER SkillId
+        Exact canonical discovery operation. Must be absent for ordinary routing.
     .OUTPUTS
         System.Collections.Hashtable with the twelve resolved keys:
         execution_context, languages, production_file_count, test_file_count,
         cross_cutting, root_persona, route, topology, logical_agent,
-        routing_reason, max_production_files, max_test_files.
+        routing_reason, max_production_files, max_test_files. Discovery adds
+        invocation_kind, skill_id, output_contract_version,
+        permissible_artifact_kinds, and gate_mode; it grants no write authority.
     #>
     [CmdletBinding()]
     [OutputType([hashtable])]
@@ -281,7 +289,15 @@ function Resolve-CodexTopology {
 
         [Parameter(Mandatory = $false)]
         [AllowNull()]
-        [object] $RootPersona = $null
+        [object] $RootPersona = $null,
+
+        [Parameter(Mandatory = $false)]
+        [AllowNull()]
+        [object] $InvocationKind = 'ordinary',
+
+        [Parameter(Mandatory = $false)]
+        [AllowNull()]
+        [object] $SkillId = $null
     )
 
     if ($script:VALID_EXECUTION_CONTEXTS -cnotcontains $ExecutionContext) {
@@ -307,6 +323,13 @@ function Resolve-CodexTopology {
     $testCount = [int]$TestFileCount
     $isCrossCutting = [bool]$CrossCutting
 
+    # Discovery validates its closed selector before ordinary root/epic/count
+    # dispatch. A fixed specialist receipt conveys routing, never tool grants.
+    $discovery = Resolve-CodexDiscoveryTopology -InvocationKind $InvocationKind -SkillId $SkillId `
+        -Context $context -Language $languages -ProductionFileCount $productionCount `
+        -TestFileCount $testCount -CrossCutting $isCrossCutting -RootPersona $RootPersona
+    if ($null -ne $discovery) { return $discovery }
+
     # A forced root persona short-circuits all escalation logic and selects
     # itself, but only from a standalone context.
     if ($null -ne $RootPersona) {

package/resources/lib/discovery-validation/DiscoveryAuthority.psd1

@@ -0,0 +1,90 @@
+@{
+    # Module manifest for the shared native discovery authority primitives (issue #980).
+    # Importing this manifest loads the authority, manifest and payload modules together
+    # so a hook can take every narrow primitive from one import.
+    RootModule        = 'DiscoveryAuthority.psm1'
+    ModuleVersion     = '2.0.0'
+    GUID              = '5d0b8e5e-3b7f-4a2a-9f8e-2f9f0b9a7c11'
+    Author            = 'drm-copilot'
+    CompanyName       = 'drm-copilot'
+    Copyright         = '(c) drm-copilot. All rights reserved.'
+    Description       = 'Protected discovery authority location, activation decoding, input-manifest freshness and host envelope normalization for native discovery hooks.'
+    PowerShellVersion = '7.0'
+    NestedModules     = @('DiscoveryEncoding.psm1', 'DiscoveryManifest.psm1', 'DiscoveryPayload.psm1', 'DiscoveryAuthorization.psm1', 'DiscoveryStartRecord.psm1', 'DiscoveryStart.psm1', 'DiscoveryStop.psm1', 'DiscoveryPlanning.psm1', 'DiscoveryCapability.psm1')
+    FunctionsToExport = @(
+        'Get-DiscoverySha256Hex',
+        'Get-DiscoveryBytesSha256Hex',
+        'ConvertTo-DiscoveryCanonicalJson',
+        'Invoke-DiscoveryStoreSeam',
+        'Resolve-DiscoveryAuthorityLocation',
+        'Get-DiscoveryTrustedHostEnvironment',
+        'Get-DiscoveryPartitionName',
+        'Get-DiscoverySessionDirectory',
+        'Get-DiscoveryInvocationDirectory',
+        'Get-DiscoveryActivationRecordPath',
+        'Test-DiscoveryProtectedPath',
+        'Test-DiscoveryRelativePath',
+        'ConvertFrom-DiscoveryActivationRecord',
+        'Read-DiscoveryActivationState',
+        'ConvertFrom-DiscoveryInputManifest',
+        'Get-DiscoveryInputManifestDigest',
+        'Get-DiscoveryWorkspacePath',
+        'Compare-DiscoveryInputManifest',
+        'Assert-DiscoveryInputsFresh',
+        'Test-DiscoverySupportedHost',
+        'ConvertFrom-DiscoveryHostEnvelope',
+        'ConvertFrom-DiscoveryHostPayloadText',
+        'Get-DiscoveryTrustedPrincipal',
+        'Get-DiscoveryHostEnvironmentValueTable',
+        'Get-DiscoveryPayloadAnomalyReason',
+        'Resolve-DiscoveryToolName',
+        'Get-DiscoveryToolOperation',
+        'Get-DiscoveryInputDigest',
+        'Find-DiscoveryAgentInvocation',
+        'ConvertTo-DiscoveryToolAuthorizationRecord',
+        'Get-DiscoveryDefaultStore',
+        'Get-DiscoveryAuthorizationNonce',
+        'Get-DiscoveryPreToolDecision',
+        'ConvertTo-DiscoveryPreToolHookOutput',
+        'Get-DiscoveryAgentRole',
+        'Get-DiscoveryAgentProfilePath',
+        'ConvertFrom-DiscoveryMarkdownProfile',
+        'Read-DiscoveryAgentProfile',
+        'ConvertTo-DiscoveryUtcInstant',
+        'ConvertTo-DiscoveryStartedInvocationText',
+        'ConvertTo-DiscoveryStartAttestationRecord',
+        'Get-DiscoveryStartStore',
+        'Get-DiscoveryStartAttestationFileName',
+        'Find-DiscoveryPreparedInvocation',
+        'Get-DiscoveryDeploymentMismatch',
+        'Get-DiscoveryCapabilityMismatch',
+        'Get-DiscoveryStartDecision',
+        'Get-DiscoveryAuthorizationNonceText',
+        'ConvertTo-DiscoveryStartHookOutput',
+        'Find-DiscoveryAgentInvocationForStop',
+        'Get-DiscoveryReceiptMismatch',
+        'Get-DiscoveryStopDecision',
+        'Get-DiscoveryStopVerdict',
+        'Get-DiscoveryPlanningTarget',
+        'Get-DiscoveryPlanningPrerequisite',
+        'Get-DiscoveryPlanningReceiptMismatch',
+        'Get-DiscoveryPlanningDecision',
+        'ConvertTo-DiscoveryPlanningHookOutput',
+        'Get-DiscoverySentinelRequest',
+        'Get-DiscoverySentinelEnvelope',
+        'Get-DiscoverySessionObservation',
+        'Get-DiscoveryObservationEvidence',
+        'Get-DiscoveryHostRegistration',
+        'Test-DiscoveryHandlerRegistered',
+        'Get-DiscoveryCapabilityObservation',
+        'Write-DiscoveryCapabilityAttestation'
+    )
+    CmdletsToExport   = @()
+    VariablesToExport = @()
+    AliasesToExport   = @()
+    PrivateData       = @{
+        PSData = @{
+            Tags = @('drm-copilot', 'discovery', 'hooks')
+        }
+    }
+}