@windyroad/risk-scorer 0.19.13 → 0.19.14-preview.1290

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -310,5 +310,5 @@
310
310
  }
311
311
  },
312
312
  "name": "wr-risk-scorer",
313
- "version": "0.19.13"
313
+ "version": "0.19.14"
314
314
  }
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "wr-risk-scorer",
3
- "version": "0.19.13",
3
+ "version": "0.19.14",
4
4
  "description": "Pipeline risk scoring, commit/push gates, and secret leak detection",
5
5
  "author": {
6
6
  "name": "Windy Road Technology",
@@ -1,6 +1,6 @@
1
1
  #!/bin/bash
2
2
  # PreToolUse hook for pipeline discipline:
3
- # - Blocks bare `git push` and directs to npm run push:watch.
3
+ # - Blocks bare/protected-branch `git push`; gives main and feature-branch paths.
4
4
  # - Gates `npm run push:watch` and `npm run merge:watch` on push risk score
5
5
  # (TTL + drift + threshold), while letting those watchers wait on pending CI.
6
6
  # - Gates `npx changeset` / `npm run changeset` on release + push risk (back-pressure).
@@ -43,7 +43,7 @@ if echo "$COMMAND" | grep -qE '(^|;|&&|\|\|)\s*git push(\s|$)'; then
43
43
  ! echo "$COMMAND" | grep -qE 'git push\s+\S+\s+(master|main|publish|changeset-release/)'; then
44
44
  exit 0
45
45
  fi
46
- risk_gate_deny "Use \`npm run push:watch\` instead of \`git push\`. It pushes, watches the pipeline, and then surfaces either the release PR URL (if there are pending changesets) or the test deploy URL so you can review before releasing. The publish and changeset-release/* branches are managed by the pipeline -- do not push to them directly."
46
+ risk_gate_deny "For main, run \`npm run push:watch\`. For a feature branch, run \`git push origin <branch>\`, open its PR, then \`gh pr checks <PR> --watch\`. Direct pushes to main, publish, and changeset-release/* are blocked."
47
47
  exit 0
48
48
  fi
49
49
 
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@windyroad/risk-scorer",
3
- "version": "0.19.13",
3
+ "version": "0.19.14-preview.1290",
4
4
  "description": "Pipeline risk scoring, commit/push gates, and secret leak detection",
5
5
  "scripts": {
6
6
  "prepack": "node scripts/sync-codex-skills.mjs --pack",