@windyroad/risk-scorer 0.18.17 → 0.18.18

package/.claude-plugin/plugin.json

@@ -310,5 +310,5 @@
     }
   },
   "name": "wr-risk-scorer",
-  "version": "0.18.17"
+  "version": "0.18.18"
 }

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "wr-risk-scorer",
-  "version": "0.18.17",
+  "version": "0.18.18",
   "description": "Pipeline risk scoring, commit/push gates, and secret leak detection",
   "author": {
     "name": "Windy Road Technology",

package/lib/install-utils.mjs

@@ -4,11 +4,17 @@
  */
 
 import { execSync } from "node:child_process";
+import { createHash } from "node:crypto";
+import { cpSync, existsSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { dirname, join, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
 
 const MARKETPLACE_REPO = "windyroad/agent-plugins";
 const MARKETPLACE_NAME = "windyroad";
 const CODEX_MARKETPLACE_PATH = ".";
 const CODEX_MARKETPLACE_NAME = "windyroad-local";
+const PACKAGE_ROOT = resolve(dirname(fileURLToPath(import.meta.url)), "..");
 
 let _dryRun = false;
 
@@ -82,6 +88,132 @@ export function addCodexMarketplace() {
   );
 }
 
+function codexMarketplace(pluginName) {
+  return `windyroad-${pluginName.replace(/^wr-/, "")}-local`;
+}
+
+function codexMarketplaceRoot(pluginName) {
+  const version = JSON.parse(readFileSync(join(PACKAGE_ROOT, "package.json"), "utf8")).version;
+  return join(process.env.CODEX_HOME || join(homedir(), ".codex"), ".tmp", "marketplaces", `${pluginName}-${version}`);
+}
+
+function codexAgentDir(scope) {
+  return scope === "user"
+    ? join(process.env.CODEX_HOME || join(homedir(), ".codex"), "agents")
+    : join(process.cwd(), ".codex", "agents");
+}
+
+function codexTerms(text) {
+  return text
+    .replaceAll("AskUserQuestion", "request_user_input")
+    .replaceAll("Agent tool", "native Codex subagent tool")
+    .replaceAll("Skill tool", "installed skill invocation")
+    .replaceAll("Claude Code", "Codex")
+    .replace(/\bClaude\b/g, "Codex")
+    .replaceAll(".claude", ".codex");
+}
+
+function splitFrontmatter(markdown) {
+  const end = markdown.indexOf("\n---\n", 4);
+  return markdown.startsWith("---\n") && end !== -1
+    ? { frontmatter: markdown.slice(4, end), body: markdown.slice(end + 5) }
+    : { frontmatter: "", body: markdown };
+}
+
+function frontmatterDescription(frontmatter) {
+  const lines = frontmatter.split(/\r?\n/);
+  const start = lines.findIndex((line) => line.startsWith("description:"));
+  if (start === -1) return "Windy Road reviewer.";
+  const value = [lines[start].slice("description:".length).trim()];
+  for (let index = start + 1; index < lines.length && /^\s+/.test(lines[index]); index += 1) {
+    value.push(lines[index].trim());
+  }
+  return value.filter(Boolean).join(" ");
+}
+
+function renderCodexAgent(pluginName, agent) {
+  const source = join(PACKAGE_ROOT, agent.source);
+  const { frontmatter, body } = splitFrontmatter(readFileSync(source, "utf8"));
+  const codexInstructions = agent.name === "wr-voice-tone:external-comms"
+    ? `\n\n## Codex completion marker compatibility\n\nOn PASS, compute the lowercase SHA-256 marker key using the normalization specified above and append \`EXTERNAL_COMMS_VOICE_TONE_KEY: <64 lowercase hex characters>\`. Codex may hide the spawn prompt from PostToolUse hooks, so this emitted key is required. On FAIL, do not emit a key.`
+    : "";
+  const payload = [
+    `# Do not edit by hand; update ${agent.source} and reinstall.`,
+    `name = ${JSON.stringify(agent.name)}`,
+    `description = ${JSON.stringify(frontmatterDescription(frontmatter))}`,
+    'sandbox_mode = "read-only"',
+    'developer_instructions = """',
+    codexTerms(`${body.trimEnd()}${codexInstructions}`).replace(/\\/g, "\\\\").replace(/"""/g, '\\"\\"\\"').trimEnd(),
+    '"""',
+    "",
+  ].join("\n");
+  const owner = `# Generated by @windyroad/${pluginName.replace(/^wr-/, "")} from ${agent.source}.`;
+  const hash = createHash("sha256").update(payload).digest("hex");
+  return `${owner}\n# Generated content SHA-256: ${hash}\n${payload}`;
+}
+
+function isOwnedCodexAgent(content, pluginName, agent) {
+  const owner = `# Generated by @windyroad/${pluginName.replace(/^wr-/, "")} from ${agent.source}.`;
+  const lines = content.split("\n");
+  const hash = lines[1]?.match(/^# Generated content SHA-256: ([0-9a-f]{64})$/)?.[1];
+  return content.startsWith(`${owner}\n`) && Boolean(hash)
+    && createHash("sha256").update(lines.slice(2).join("\n")).digest("hex") === hash;
+}
+
+function installCodexAgents(pluginName, agents, scope) {
+  if (agents.length === 0 || _dryRun) return;
+  const targetDir = codexAgentDir(scope);
+  mkdirSync(targetDir, { recursive: true });
+  for (const agent of agents) {
+    const target = join(targetDir, agent.filename);
+    const expected = renderCodexAgent(pluginName, agent);
+    if (existsSync(target)) {
+      const current = readFileSync(target, "utf8");
+      if (current === expected) continue;
+      if (!isOwnedCodexAgent(current, pluginName, agent)) {
+        console.log(`Preserved user-managed Codex agent at ${target}.`);
+        continue;
+      }
+    }
+    writeFileSync(target, expected, "utf8");
+  }
+}
+
+function uninstallCodexAgents(pluginName, agents, scope) {
+  if (_dryRun) return;
+  for (const targetDir of new Set([codexAgentDir(scope), codexAgentDir("user")])) {
+    for (const agent of agents) {
+      const target = join(targetDir, agent.filename);
+      if (existsSync(target) && isOwnedCodexAgent(readFileSync(target, "utf8"), pluginName, agent)) rmSync(target);
+    }
+  }
+}
+
+function installPackedCodexPlugin(pluginName, { agents = [], scope = "project" } = {}) {
+  const marketplace = codexMarketplace(pluginName);
+  const root = codexMarketplaceRoot(pluginName);
+  if (!_dryRun) {
+    rmSync(root, { recursive: true, force: true });
+    mkdirSync(dirname(root), { recursive: true });
+    cpSync(PACKAGE_ROOT, root, { recursive: true });
+    const hooks = join(root, "hooks-codex", "hooks.json");
+    if (existsSync(hooks)) cpSync(hooks, join(root, "hooks", "hooks.json"));
+  }
+  if (!run(`codex plugin marketplace add ${JSON.stringify(root)}`, `Codex marketplace: ${marketplace}`)) return false;
+  if (!run(`codex plugin add ${pluginName}@${marketplace}`, pluginName)) return false;
+  installCodexAgents(pluginName, agents, scope);
+  return true;
+}
+
+function uninstallPackedCodexPlugin(pluginName, { agents = [], scope = "project" } = {}) {
+  const marketplace = codexMarketplace(pluginName);
+  const removed = run(`codex plugin remove ${pluginName}@${marketplace}`, `Removing ${pluginName}`);
+  run(`codex plugin marketplace remove ${marketplace}`, `Removing ${marketplace}`);
+  uninstallCodexAgents(pluginName, agents, scope);
+  if (!_dryRun) rmSync(codexMarketplaceRoot(pluginName), { recursive: true, force: true });
+  return removed;
+}
+
 export function installPlugin(pluginName, { scope = "project" } = {}) {
   return run(
     `claude plugin install ${pluginName}@${MARKETPLACE_NAME} --scope ${scope}`,
@@ -121,7 +253,7 @@ export function uninstallCodexPlugin(pluginName) {
 /**
  * Install a single package: marketplace add + plugin install.
  */
-export function installPackage(pluginName, { deps = [], scope = "project", runtime = "claude" } = {}) {
+export function installPackage(pluginName, { agents = [], deps = [], scope = "project", runtime = "claude" } = {}) {
   console.log(`\nInstalling @windyroad/${pluginName.replace("wr-", "")} (${scope} scope)...\n`);
 
   if (runtime === "claude" || runtime === "both") {
@@ -130,8 +262,7 @@ export function installPackage(pluginName, { deps = [], scope = "project", runti
   }
 
   if (runtime === "codex" || runtime === "both") {
-    addCodexMarketplace();
-    installCodexPlugin(pluginName);
+    if (!installPackedCodexPlugin(pluginName, { agents, scope })) process.exitCode = 1;
   }
 
   if (deps.length > 0) {
@@ -149,7 +280,7 @@ export function installPackage(pluginName, { deps = [], scope = "project", runti
 /**
  * Update a single package.
  */
-export function updatePackage(pluginName, { scope = "project", runtime = "claude" } = {}) {
+export function updatePackage(pluginName, { agents = [], scope = "project", runtime = "claude" } = {}) {
   console.log(`\nUpdating @windyroad/${pluginName.replace("wr-", "")}...\n`);
 
   if (runtime === "claude" || runtime === "both") {
@@ -161,8 +292,7 @@ export function updatePackage(pluginName, { scope = "project", runtime = "claude
   }
 
   if (runtime === "codex" || runtime === "both") {
-    updateCodexMarketplace();
-    installCodexPlugin(pluginName);
+    if (!installPackedCodexPlugin(pluginName, { agents, scope })) process.exitCode = 1;
   }
 
   console.log(`\nDone! Restart ${runtime === "codex" ? "Codex" : runtime === "both" ? "Claude Code and Codex" : "Claude Code"} to apply updates.\n`);
@@ -171,7 +301,7 @@ export function updatePackage(pluginName, { scope = "project", runtime = "claude
 /**
  * Uninstall a single package.
  */
-export function uninstallPackage(pluginName, { runtime = "claude" } = {}) {
+export function uninstallPackage(pluginName, { agents = [], scope = "project", runtime = "claude" } = {}) {
   console.log(`\nUninstalling @windyroad/${pluginName.replace("wr-", "")}...\n`);
 
   if (runtime === "claude" || runtime === "both") {
@@ -179,7 +309,7 @@ export function uninstallPackage(pluginName, { runtime = "claude" } = {}) {
   }
 
   if (runtime === "codex" || runtime === "both") {
-    uninstallCodexPlugin(pluginName);
+    if (!uninstallPackedCodexPlugin(pluginName, { agents, scope })) process.exitCode = 1;
   }
 
   console.log(`\nDone. Restart ${runtime === "codex" ? "Codex" : runtime === "both" ? "Claude Code and Codex" : "Claude Code"} to apply changes.\n`);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@windyroad/risk-scorer",
-  "version": "0.18.17",
+  "version": "0.18.18",
   "description": "Pipeline risk scoring, commit/push gates, and secret leak detection",
   "scripts": {
     "prepack": "node scripts/sync-codex-skills.mjs --pack",

package/scripts/sync-codex-skills.mjs

@@ -36,8 +36,19 @@ const updatePolicyCodexAgentStep = `Run the Codex policy reviewer with this prom
 
 Use a native Codex subagent workflow with the installed custom agent named \`wr-risk-scorer:policy\`. If it is not visible in the current session, restart Codex; do not substitute a different agent identity because the policy marker hook consumes it.`;
 
-function transform(text) {
-  const transformed = text
+// Codex namespaces every skill by the plugin manifest `name`, so a skill's own
+// frontmatter `name:` must be BARE or the prefix lands twice and the advertised
+// invocation cannot be typed (P527). Scoped to the frontmatter block so a body
+// line starting `name:` is never rewritten.
+function bareName(skill, text) {
+  if (!text.startsWith("---\n")) return text;
+  const end = text.indexOf("\n---\n", 4);
+  if (end === -1) return text;
+  return text.slice(0, end).replace(/^name:.*$/m, `name: ${skill}`) + text.slice(end);
+}
+
+function transform(skill, text) {
+  const transformed = bareName(skill, text)
     .replaceAll("AskUserQuestion", "request_user_input")
     .replaceAll("`.claude/agents/risk-scorer-pipeline.md`", "`agents/pipeline.md`")
     .replace(
@@ -69,7 +80,7 @@ function generatedFiles(sourceRoot, targetRoot) {
     }
     generated.push({
       path: join(targetRoot, entry, "SKILL.md"),
-      text: transform(readFileSync(source, "utf8")),
+      text: transform(entry, readFileSync(source, "utf8")),
     });
   }
   return generated;

package/skills/assess-external-comms/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: wr-risk-scorer:assess-external-comms
+name: assess-external-comms
 description: On-demand external-comms risk review. Reviews a draft of an outbound prose tool call (gh issue/pr body, security advisory, npm publish content, or .changeset/*.md body) for confidential-information leaks per RISK-POLICY.md. Delegates to wr-risk-scorer:external-comms and pre-satisfies the external-comms-gate marker for the current session.
 allowed-tools: Read, Glob, Grep, Bash, request_user_input, Skill
 ---

package/skills/assess-inbound-report/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: wr-risk-scorer:assess-inbound-report
+name: assess-inbound-report
 description: On-demand inbound-report risk review. Reviews a third-party submission against this repo's intake (problem-report issue body, Q&A discussion, security-advisory body) for Request-risk (info-extraction / backdoor request / malicious-code injection) and Fix-risk (privilege escalation / removal of load-bearing safety check / adopter-attack-surface expansion) per RISK-POLICY.md. Delegates to wr-risk-scorer:inbound-report and emits the structured verdict consumed by ADR-062's assessment-pipeline branch routing.
 allowed-tools: Read, Glob, Grep, Bash, request_user_input, Skill
 ---

package/skills/assess-release/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: wr-risk-scorer:assess-release
+name: assess-release
 description: On-demand release risk assessment. Scores commit, push, and release risk for the current unpushed changes. Delegates to wr-risk-scorer:pipeline and satisfies the commit gate for the current session.
 allowed-tools: Read, Glob, Grep, Bash, request_user_input, Skill
 ---

package/skills/assess-wip/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: wr-risk-scorer:assess-wip
+name: assess-wip
 description: On-demand WIP risk nudge. Scores the current uncommitted diff for pipeline risk. Use during development to catch high-risk changes before committing.
 allowed-tools: Read, Glob, Grep, Bash, request_user_input, Skill
 ---

package/skills/bootstrap-catalog/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: wr-risk-scorer:bootstrap-catalog
+name: bootstrap-catalog
 description: Bootstrap docs/risks/ standing-risk catalog from existing .risk-reports/ corpus. Walks reports, dedupes by ADR-056 slug, emits one R<NNN>-<slug>.active.md per unique slug with ## Source Evidence block citing originating reports. Idempotent — re-runs are no-ops by file-existence per slug. One-shot per project lifetime; install-updates Step 6.5 auto-triggers when catalog is empty AND .risk-reports/ is non-empty AND RISK-POLICY.md is present.
 allowed-tools: Read, Write, Edit, Bash, Glob, Grep
 maturity: proposed

package/skills/create-risk/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: wr-risk-scorer:create-risk
+name: create-risk
 description: Create a new standing-risk entry in docs/risks/. Examines existing risks, gathers impact/likelihood/controls from the user, writes a file using the entry shape inlined in this skill (no TEMPLATE.md dependency — the entry shape is owned by this skill per user direction 2026-05-04), and updates the register index.
 allowed-tools: Read, Write, Edit, Bash, Glob, Grep, request_user_input
 ---

package/skills/external-comms/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: wr-risk-scorer:external-comms
+name: external-comms
 description: Invokable SKILL wrapper around the wr-risk-scorer:external-comms leak-review agent. Delegates to the agent via the Agent tool and returns the agent's structured EXTERNAL_COMMS_RISK_VERDICT. Internal-use plumbing used by `/wr-risk-scorer:assess-external-comms` per ADR-015's Confirmation literal phrasing. End users should invoke `/wr-risk-scorer:assess-external-comms` instead.
 allowed-tools: Read, Glob, Grep, Bash, Agent
 ---

package/skills/pipeline/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: wr-risk-scorer:pipeline
+name: pipeline
 description: Invokable SKILL wrapper around the wr-risk-scorer:pipeline scoring agent. Delegates to the agent via the Agent tool and returns the agent's structured RISK_SCORES output. Internal-use plumbing used by `/wr-risk-scorer:assess-release` and any other consumer SKILL that needs Skill-tool-shaped invocation of the pipeline scorer per ADR-015's Confirmation literal phrasing. End users should invoke `/wr-risk-scorer:assess-release` instead.
 allowed-tools: Read, Glob, Bash, Agent
 ---

package/skills/update-policy/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: wr-risk-scorer:update-policy
+name: update-policy
 description: Create or update the project's RISK-POLICY.md per ISO 31000 and the risk-scorer agent. Examines the project to derive business-specific impact levels.
 allowed-tools: Read, Write, Edit, Bash, Glob, Grep, request_user_input, Agent
 ---

package/skills/wip/SKILL.md

@@ -1,5 +1,5 @@
 ---
-name: wr-risk-scorer:wip
+name: wip
 description: Invokable SKILL wrapper around the wr-risk-scorer:wip nudge agent. Delegates to the agent via the Agent tool and returns the agent's structured WIP risk verdict. Internal-use plumbing used by `/wr-risk-scorer:assess-wip` per ADR-015's Confirmation literal phrasing. End users should invoke `/wr-risk-scorer:assess-wip` instead.
 allowed-tools: Read, Glob, Bash, Agent
 ---