@windyroad/risk-scorer 0.16.6 → 0.17.0-preview.945

package/.claude-plugin/plugin.json

@@ -310,5 +310,5 @@
     }
   },
   "name": "wr-risk-scorer",
-  "version": "0.16.6"
+  "version": "0.17.0"
 }

package/hooks/hooks.json

@@ -8,10 +8,6 @@
       { "hooks": [{ "type": "command", "command": "${CLAUDE_PLUGIN_ROOT}/hooks/staleness-check.sh" }] }
     ],
     "PreToolUse": [
-      {
-        "matcher": "Bash|Write|Edit|Read|Glob|Grep|Task|WebFetch|WebSearch",
-        "hooks": [{ "type": "command", "command": "${CLAUDE_PLUGIN_ROOT}/hooks/quota-pace-throttle.sh" }]
-      },
       { "matcher": "Edit|Write", "hooks": [{ "type": "command", "command": "${CLAUDE_PLUGIN_ROOT}/hooks/secret-leak-gate.sh" }, { "type": "command", "command": "${CLAUDE_PLUGIN_ROOT}/hooks/wip-risk-gate.sh" }] },
       { "matcher": "Bash", "hooks": [{ "type": "command", "command": "${CLAUDE_PLUGIN_ROOT}/hooks/git-push-gate.sh" }] },
       { "matcher": "Bash", "hooks": [{ "type": "command", "command": "${CLAUDE_PLUGIN_ROOT}/hooks/risk-score-commit-gate.sh" }] },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@windyroad/risk-scorer",
-  "version": "0.16.6",
+  "version": "0.17.0-preview.945",
   "description": "Pipeline risk scoring, commit/push gates, and secret leak detection",
   "bin": {
     "windyroad-risk-scorer": "./bin/install.mjs"

package/hooks/quota-pace-throttle.sh

@@ -1,104 +0,0 @@
-#!/usr/bin/env bash
-# quota-pace-throttle.sh — PreToolUse hook (P160 / ADR-093 / RFC-046).
-#
-# Fires before every tool call across ALL work (interactive + AFK). Mechanically
-# paces token burn so it never sprints into a mid-flight quota hard-stop: it
-# compares cumulative window usage% against elapsed% and, when AHEAD of pace,
-# sleeps the calculated catch-up time (capped per firing). When behind/on pace
-# it is a fast no-op. It NEVER blocks, NEVER asks, and fails OPEN on every
-# abnormal path — a broken throttle must not break the session.
-#
-# Data source: ~/.claude/quota-state.json, written by the statusline (the only
-# surface Claude Code passes `.rate_limits` to). Fields:
-#   { "five_used_pct": N, "five_resets_at": <unix>,
-#     "week_used_pct": N, "week_resets_at": <unix> }
-# If the cache is missing/stale/malformed, the hook no-ops (fail-open) — the
-# statusline-writer install is a separate, user-consented step.
-#
-# ponytail: pure arithmetic + one sleep; the 60s/firing cap + fail-open keep the
-# blast radius to "at worst a slightly-slower tool call", never a stall or block.
-
-set +e
-CACHE="${WR_QUOTA_CACHE:-${HOME}/.claude/quota-state.json}"
-MARKER="${WR_QUOTA_MARKER:-${TMPDIR:-/tmp}/wr-quota-throttle-last}"
-FIVE_WINDOW=18000      # 5h in seconds
-WEEK_WINDOW=604800     # 7d in seconds
-WEEK_HEADROOM_PP=5     # leave 5pp weekly headroom for non-Claude-Code surfaces
-CAP_SECONDS=60         # max sleep per firing
-
-emit_ok() { exit 0; }  # PreToolUse: silent allow, never a permissionDecision deny
-
-# Fail-open preconditions.
-command -v jq >/dev/null 2>&1 || emit_ok
-[ -r "$CACHE" ] || emit_ok
-
-now=$(date +%s 2>/dev/null) || emit_ok
-case "$now" in ''|*[!0-9]*) emit_ok;; esac
-
-# Recent-check no-op: if we checked <5s ago, skip recompute (keeps per-call
-# latency negligible when we're firing on every tool call).
-if [ -f "$MARKER" ]; then
-  last=$(cat "$MARKER" 2>/dev/null)
-  case "$last" in
-    ''|*[!0-9]*) : ;;
-    *) [ $(( now - last )) -lt 5 ] && emit_ok ;;
-  esac
-fi
-printf '%s' "$now" > "$MARKER" 2>/dev/null
-
-# Read the cache; fail-open on any parse miss.
-read -r five_used five_reset week_used week_reset < <(
-  jq -r '[.five_used_pct, .five_resets_at, .week_used_pct, .week_resets_at]
-         | map(tostring) | join(" ")' "$CACHE" 2>/dev/null
-) || emit_ok
-for v in "$five_used" "$five_reset" "$week_used" "$week_reset"; do
-  case "$v" in ''|null|*[!0-9.]*) emit_ok;; esac
-done
-
-# elapsed% of a window = (window - remaining) / window * 100, clamped [0,100].
-elapsed_pct() { # resets_at window_secs
-  local remaining=$(( $1 - now )) win="$2" e
-  [ "$remaining" -lt 0 ] && remaining=0
-  [ "$remaining" -gt "$win" ] && remaining="$win"
-  e=$(( (win - remaining) * 100 / win ))
-  printf '%s' "$e"
-}
-
-# integer-truncate the used% (cache may carry a decimal)
-five_used_i=${five_used%%.*}; week_used_i=${week_used%%.*}
-five_elapsed=$(elapsed_pct "$five_reset" "$FIVE_WINDOW")
-week_elapsed=$(elapsed_pct "$week_reset" "$WEEK_WINDOW")
-
-# Smart glide-path pacing (P160 refinement 2026-07-06). Rather than a fixed
-# catch-up sleep that snaps back to the ideal line, throttle PROPORTIONALLY to
-# how far over the glide-path to the window reset we are, easing off as we
-# converge — like a runner who is ahead of pace slowing down to drift back,
-# not stopping dead. The "safe rate" for the remainder of a window =
-# budget-left / time-left (x1000 fixed-point; 1000 = on pace, 0 = budget blown
-# with time still on the clock). When safe_rate < 1 we must burn slower, so we
-# sleep CAP*(1 - safe_rate). As we slow, wall-clock advances, time-left shrinks,
-# safe_rate climbs back toward 1, and the sleep eases to zero exactly as we
-# rejoin pace — converging BEFORE the quota is consumed, while still letting
-# work through the whole time (never a hard stop; at worst one call per CAP).
-safe_rate_x1000() { # used_i elapsed_pct headroom_pp
-  local budget=$(( 100 - $3 - $1 )) rem=$(( 100 - $2 ))
-  [ "$rem" -le 0 ] && { printf '1000'; return; }   # window reset → unconstrained
-  [ "$budget" -le 0 ] && { printf '0'; return; }    # budget blown → max throttle
-  printf '%s' $(( budget * 1000 / rem ))
-}
-
-s5=$(safe_rate_x1000 "$five_used_i" "$five_elapsed" 0)
-s7=$(safe_rate_x1000 "$week_used_i" "$week_elapsed" "$WEEK_HEADROOM_PP")
-
-# Tighter window governs = smaller safe_rate.
-safe="$s5"; [ "$s7" -lt "$safe" ] && safe="$s7"
-[ "$safe" -ge 1000 ] && emit_ok   # on/under pace on both windows → fast no-op
-
-# Proportional ease-back: far over → near CAP (slow, but still one call per CAP);
-# slightly over → a short sleep; on pace → zero. The smooth glide, not a stop.
-sleep_secs=$(( CAP_SECONDS * (1000 - safe) / 1000 ))
-[ "$sleep_secs" -le 0 ] && emit_ok
-[ "$sleep_secs" -gt "$CAP_SECONDS" ] && sleep_secs="$CAP_SECONDS"
-
-sleep "$sleep_secs" 2>/dev/null
-emit_ok