@windyroad/risk-scorer 0.19.10 → 0.19.11

package/.claude-plugin/plugin.json

@@ -310,5 +310,5 @@
     }
   },
   "name": "wr-risk-scorer",
-  "version": "0.19.10"
+  "version": "0.19.11"
 }

package/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "wr-risk-scorer",
-  "version": "0.19.10",
+  "version": "0.19.11",
   "description": "Pipeline risk scoring, commit/push gates, and secret leak detection",
   "author": {
     "name": "Windy Road Technology",

package/hooks/codex-agent-completion.mjs

@@ -8,6 +8,7 @@ import { fileURLToPath } from "node:url";
 import { CLOSE_TOOLS, SPAWN_TOOLS, WAIT_TOOLS, response } from "./lib/codex-completion-input.mjs";
 
 const hookDir = dirname(fileURLToPath(import.meta.url));
+const markedPipelineRoots = new Set();
 const riskAgentRoles = new Set([
   "wr-risk-scorer:pipeline",
   "wr-risk-scorer:plan",
@@ -291,6 +292,7 @@ function markTarget(input, target, output) {
     renameSync(claim.claim, claim.done);
     rmSync(state, { force: true });
     rmSync(transportRegistrationPath(input.session_id, role, normalizeTarget(target)), { force: true });
+    if (assessment) markedPipelineRoots.add(assessment.root);
   } else {
     rmSync(claim.claim, { force: true });
     process.exitCode = 1;
@@ -556,3 +558,9 @@ try {
   diagnoseSubagentStop(input, "rejected", "transport-error");
   process.exitCode = 0;
 }
+
+if (markedPipelineRoots.size && !process.argv.includes("--subagent-stop") && !process.argv.includes("--consume-pending")) {
+  const prefixes = [...markedPipelineRoots].map((root) => `cd '${root.replaceAll("'", "'\\''")}' &&`);
+  console.log(JSON.stringify({ hookSpecificOutput: { hookEventName: "PostToolUse",
+    additionalContext: `Risk score recorded. Begin the next governed commit, push, release, or changeset command with ${prefixes.join(" or ")} inside the shell command; set the tool workdir to the same checkout. Codex may hide a nested workdir from checkout-binding hooks.` } }));
+}

package/hooks/risk-score-commit-gate.sh

@@ -112,7 +112,11 @@ fi
 
 # Gate check: existence, TTL, drift, threshold
 if ! check_risk_gate "$SESSION_ID" "commit"; then
-    risk_gate_deny "Commit blocked: ${RISK_GATE_REASON} To proceed: (1) stage files with git add, (2) delegate to wr-risk-scorer:pipeline (subagent_type: 'wr-risk-scorer:pipeline') to assess cumulative pipeline risk. If the commit is risk-neutral or risk-reducing, the scorer will create a bypass marker."
+    if [[ "$RISK_GATE_REASON" == *"checkout binding does not match"* ]]; then
+        risk_gate_deny "Commit blocked: ${RISK_GATE_REASON}"
+    else
+        risk_gate_deny "Commit blocked: ${RISK_GATE_REASON} To proceed: (1) stage files with git add, (2) delegate to wr-risk-scorer:pipeline (subagent_type: 'wr-risk-scorer:pipeline') to assess cumulative pipeline risk. If the commit is risk-neutral or risk-reducing, the scorer will create a bypass marker."
+    fi
     exit 0
 fi
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@windyroad/risk-scorer",
-  "version": "0.19.10",
+  "version": "0.19.11",
   "description": "Pipeline risk scoring, commit/push gates, and secret leak detection",
   "scripts": {
     "prepack": "node scripts/sync-codex-skills.mjs --pack",