@deftai/directive-runtime 0.129.1 → 0.129.3

package/.githooks/_directive-run.sh

@@ -1,6 +1,7 @@
 #!/usr/bin/env sh
-# Package-relative Directive git-hook helper (AC9.9).
+# Package-relative Directive git-hook helper (AC9.9 / AC9.12 / #5994).
 # Sourced by pre-commit/pre-push; defines run_directive.
+# F1 order: disable → missing pin (project PM) → pin bin.js.
 if [ -z "${REPO_ROOT:-}" ]; then
   REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)"
 fi
@@ -8,23 +9,19 @@ if [ -z "$REPO_ROOT" ]; then
   echo "directive hooks: unable to resolve repo root." >&2
   exit 1
 fi
-RUNTIME_BIN="$REPO_ROOT/node_modules/@deftai/directive-runtime/dist/bin.js"
-if [ ! -f "$RUNTIME_BIN" ]; then
-  echo "directive hooks: missing $RUNTIME_BIN" >&2
-  echo "Recovery: npm i -g @deftai/directive, then directive install --repair" >&2
-  exit 1
-fi
 run_directive() {
-  # #3039 / #5543: root local kill-switch — skip CLI spawn when flag is present,
-  # not a symlink, and not tracked by git (tracked flag must not disable clones).
+  # #3039 / #5543 / #5994 F1: disable BEFORE requiring pin bin.js; quiet skip.
   _kill="$REPO_ROOT/.deft-directive-disable"
   if [ -f "$_kill" ] && [ ! -L "$_kill" ]; then
     if ! git -C "$REPO_ROOT" ls-files --error-unmatch -- .deft-directive-disable >/dev/null 2>&1; then
-      echo "Directive is DISABLED for this project via root .deft-directive-disable (test/local kill-switch)." >&2
-      echo "Git hooks skipping Directive CLI spawn (#5543 / #3039). Deposit may remain." >&2
-      echo "Recovery: rm .deft-directive-disable && start a new agent session." >&2
       return 0
     fi
   fi
+  RUNTIME_BIN="$REPO_ROOT/node_modules/@deftai/directive-runtime/dist/bin.js"
+  if [ ! -f "$RUNTIME_BIN" ]; then
+    echo "directive hooks: missing $RUNTIME_BIN" >&2
+    echo "Directive hooks: missing node_modules/@deftai/directive-runtime. Run npm install or pnpm install (or yarn) in this project." >&2
+    exit 1
+  fi
   node "$RUNTIME_BIN" "$@"
 }

package/.githooks/pre-push

@@ -5,8 +5,4 @@ REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)" || exit 1
 . "$REPO_ROOT/.githooks/_directive-run.sh"
 run_directive verify:branch --project-root "$REPO_ROOT" || exit $?
 # Enrolled bound pre-PR arm: sole-stdin (do not redirect shared run_directive to /dev/null)
-# Pins older than #5804 lack --push-admit: keep the pre-#5804 hook there (verify:branch only).
-_pre_pr_help="$(run_directive pre-pr:run --help </dev/null 2>&1)" || exit $?
-case "$_pre_pr_help" in
-  *--push-admit*) run_directive pre-pr:run --push-admit --project-root "$REPO_ROOT" || exit $? ;;
-esac
+run_directive pre-pr:run --push-admit --project-root "$REPO_ROOT" || exit $?

package/dist/doctor-diagnose.js

@@ -6,6 +6,7 @@
  */
 import { existsSync, readFileSync } from "node:fs";
 import { join } from "node:path";
+import { isHostHookOuterCommand } from "../vendor/directive-core/dist/init-deposit/host-hook-outer.js";
 import { checkFullInSync, DEFT_DOCTOR_HOOK_DIAGNOSTIC, INSTALLATION_RECOVERY_GUIDANCE, RUNTIME_PACKAGE_PATH_PREFIX, } from "../vendor/directive-core/dist/install-health/index.js";
 import { readProjectDataStatus } from "./data-status.js";
 export { DEFT_DOCTOR_HOOK_DIAGNOSTIC };
@@ -48,7 +49,7 @@ function schemaSurface(dataStatus) {
     return { ok: false, detail: "project data schema diagnosis failed" };
 }
 /**
- * Cheap read-only check that committed hook/skill wiring uses package-relative form.
+ * Cheap read-only check that committed hook/skill wiring uses host `.mjs` outer or package-relative form.
  * Does not spawn hooks; structural only (AC12.3 hook command form / skill pointers).
  */
 function inspectHookAndSkillForm(projectRoot) {
@@ -70,11 +71,13 @@ function inspectHookAndSkillForm(projectRoot) {
         sawHook = true;
         try {
             const text = readFileSync(abs, "utf8");
+            // #5994 / AC9.1: v261027 host `.mjs` outer is the registered form; pin hook-bin is spawned inside.
+            const hasOuter = isHostHookOuterCommand(text);
             const hasPkg = text.includes(prefix) && text.includes("hook-bin");
             const hasLegacy = text.includes(".deft/core/") || /(^|[\s"`'])deft-hook([\s"`']|$)/.test(text);
-            if (hasLegacy || !hasPkg) {
+            if (hasLegacy || !(hasOuter || hasPkg)) {
                 hookOk = false;
-                hookDetail = `${rel} does not use package-relative hook-bin form`;
+                hookDetail = `${rel} does not use host .mjs outer or package-relative hook-bin form`;
                 break;
             }
         }

package/dist/pre-pr-run.js

@@ -422,13 +422,15 @@ export function run(argv) {
                 return 2;
             }
             const spec = phaseSpec(phase);
+            // Same root rule as push-admit: one report path for observe and satisfy.
+            const projectRoot = args.projectRoot?.trim() || process.cwd();
             const d = observeCommandPhase(store, args.runId, {
                 phaseId: phase,
                 command: args.command.length > 0 ? args.command : (spec.command ?? ""),
                 exitCode: args.exitCode,
                 inputHash: args.inputHash ?? rec?.inputHash ?? "",
                 skipReason: args.skipReason,
-            });
+            }, { projectRoot });
             emit(args.json, d, d.message, !d.ok);
             return d.ok ? 0 : 1;
         }
@@ -508,7 +510,12 @@ export function run(argv) {
             process.stderr.write("pre_pr_run: --complete requires --run-id\n");
             return 2;
         }
-        const d = completeRun(store, controllerPublisher(), args.runId);
+        // #5804 / #5994: projectRoot is required so completeRun can stamp
+        // pushBinding.reviewedDeletedPaths from base..head.
+        const projectRoot = args.projectRoot?.trim() || process.cwd();
+        const d = completeRun(store, controllerPublisher(), args.runId, undefined, {
+            projectRoot,
+        });
         emit(args.json, d, d.message, !d.ok);
         return d.ok ? 0 : 1;
     }

package/dist/setup-wiring.js

@@ -8,7 +8,7 @@ import { dirname, join } from "node:path";
 import { fileURLToPath } from "node:url";
 import { containedChmod, containedRemove, containedWrite, } from "../vendor/directive-core/dist/fs/contained-write.js";
 import { DIRECT_WRITE_HOOK_MATCHER, KILL_HOOK_MATCHER, MCP_HOOK_MATCHER, SHELL_HOOK_MATCHER, SPAWN_HOOK_MATCHER, } from "../vendor/directive-core/dist/hooks/tools.js";
-import { GROK_PRETOOLUSE_WRAPPER_COMMAND, GROK_PRETOOLUSE_WRAPPER_REL_PATH, grokPretooluseWrapperScriptSource, isGrokWrapperCommand, } from "../vendor/directive-core/dist/init-deposit/agent-hooks.js";
+import { GROK_PRETOOLUSE_WRAPPER_REL_PATH, HOST_HOOK_MISSING_PIN_PROJECT_PM_GUIDANCE, hostHookOuterCommand, hostHookOuterRelPath, hostHookOuterSha8, hostHookOuterSource, isGrokWrapperCommand, isHostHookOuterCommand, } from "../vendor/directive-core/dist/init-deposit/agent-hooks.js";
 import { INSTALLATION_RECOVERY_GUIDANCE, RUNTIME_PACKAGE_PATH_PREFIX, } from "../vendor/directive-core/dist/install-health/constants.js";
 import { MANAGED_SECTION_CLOSE, MANAGED_SECTION_OPEN_PREFIX, } from "../vendor/directive-core/dist/install-health/index.js";
 import { applyAgentsRefresh } from "../vendor/directive-core/dist/platform/agents-md.js";
@@ -376,25 +376,45 @@ export function ensureOpenClawIntegrations(projectRoot) {
     }
 }
 function hookCommand(host, event) {
-    return `${HOOK_BIN_COMMAND} --host ${host} --event ${event}`;
+    const sha8 = hostHookOuterSha8();
+    return `${hostHookOuterCommand(host, sha8)} --host ${host} --event ${event}`;
 }
 /** Rewrite bare `deft-hook` / legacy `deft hook:dispatch` to package-relative (AC9.2). */
 export function rewriteBareDeftHookCommand(command) {
     const trimmed = command.trim();
-    if (trimmed.startsWith(HOOK_BIN_COMMAND))
+    if (isHostHookOuterCommand(trimmed))
         return command;
+    const hostMatch = trimmed.match(/--host\s+(\w+)/);
+    const eventMatch = trimmed.match(/--event\s+([\w.]+)/);
+    const host = hostMatch?.[1];
+    const event = eventMatch?.[1];
+    const sha8 = hostHookOuterSha8();
+    const toOuter = (h, e) => `${hostHookOuterCommand(h, sha8)} --host ${h} --event ${e}`;
+    // Legacy Grok .sh wrapper → outer
+    if (isGrokWrapperCommand(trimmed) && host && event) {
+        return toOuter(host, event);
+    }
+    if (isGrokWrapperCommand(trimmed)) {
+        return toOuter("grok", "tool.before");
+    }
+    // Direct hook-bin with host/event → outer
+    if (trimmed.includes(HOOK_BIN_COMMAND) && host && event) {
+        return toOuter(host, event);
+    }
     const bare = /^(?:deft-hook|deft\s+hook:dispatch)(\s+.*)?$/;
     const m = trimmed.match(bare);
     if (m) {
         const rest = (m[1] ?? "").trim();
+        if (host && event)
+            return toOuter(host, event);
+        // bare without host/event: leave as package-relative interim only if no host
         return rest.length > 0 ? `${HOOK_BIN_COMMAND} ${rest}` : HOOK_BIN_COMMAND;
     }
-    // Inline occurrences inside longer strings (rare)
-    if (/\bdeft-hook\b/.test(trimmed) && !trimmed.includes(RUNTIME_PREFIX)) {
-        return trimmed.replace(/\bdeft-hook\b/g, HOOK_BIN_COMMAND);
+    if (/\bdeft-hook\b/.test(trimmed) && !isHostHookOuterCommand(trimmed) && host && event) {
+        return toOuter(host, event);
     }
-    if (/\bdeft\s+hook:dispatch\b/.test(trimmed) && !trimmed.includes(RUNTIME_PREFIX)) {
-        return trimmed.replace(/\bdeft\s+hook:dispatch\b/g, HOOK_BIN_COMMAND);
+    if (/\bdeft\s+hook:dispatch\b/.test(trimmed) && host && event) {
+        return toOuter(host, event);
     }
     return command;
 }
@@ -428,7 +448,8 @@ function rewriteCommandsInValue(value) {
     return { value, changed: false };
 }
 function isManagedHookCommand(command) {
-    return (command.includes(HOOK_BIN_COMMAND) ||
+    return (isHostHookOuterCommand(command) ||
+        command.includes(HOOK_BIN_COMMAND) ||
         isGrokWrapperCommand(command) ||
         /(^|[\s"`'])deft-hook([\s"`']|$)/.test(command) ||
         command.includes("deft hook:dispatch"));
@@ -469,9 +490,7 @@ function cursorManagedEntry(value) {
     return typeof entry?.command === "string" && isManagedHookCommand(entry.command);
 }
 function nestedToolCommand(host, event) {
-    // Grok PreToolUse deposits the outer-deny wrapper (#5807 / #5656 / #5715).
-    if (host === "grok" && event === "tool.before")
-        return GROK_PRETOOLUSE_WRAPPER_COMMAND;
+    // #5994 / AC9.1: every host/event uses the content-hashed `.mjs` outer.
     return hookCommand(host, event);
 }
 function nestedGroup(host, event, matcher) {
@@ -690,30 +709,34 @@ export function ensureHostHooks(projectRoot, hostHooksPolicy = loadHostHooksPoli
         else
             modified.push(spec.rel);
     }
-    // #5807: rewrite/redeposit Grok outer-deny wrapper so leftover deft-hook deny
-    // bodies cannot sit beside a healthy PreToolUse registration.
-    const grokEnabled = isHostHookDepositEnabled("grok", hostHooksPolicy);
-    const wrapperRel = GROK_PRETOOLUSE_WRAPPER_REL_PATH;
-    if (grokEnabled) {
-        const wrapperBody = grokPretooluseWrapperScriptSource();
-        const wrapperPrior = readText(join(projectRoot, wrapperRel));
-        if (wrapperPrior !== wrapperBody) {
-            writeContained(projectRoot, wrapperRel, wrapperBody);
-            if (wrapperPrior === null)
-                created.push(wrapperRel);
-            else
-                modified.push(wrapperRel);
+    // #5994: deposit content-hashed `.mjs` outers; strip legacy Grok `.sh`.
+    const outerSource = hostHookOuterSource();
+    const outerSha8 = hostHookOuterSha8(outerSource);
+    for (const host of ["claude", "grok", "cursor", "codex"]) {
+        const rel = hostHookOuterRelPath(host, outerSha8);
+        const enabled = isHostHookDepositEnabled(host, hostHooksPolicy);
+        if (enabled) {
+            const prior = readText(join(projectRoot, rel));
+            if (prior !== outerSource) {
+                writeContained(projectRoot, rel, outerSource);
+                if (prior === null)
+                    created.push(rel);
+                else
+                    modified.push(rel);
+            }
         }
-        if (existsSync(join(projectRoot, wrapperRel))) {
+        else if (existsSync(join(projectRoot, rel))) {
             try {
-                containedChmod({ root: projectRoot, target: wrapperRel, mode: 0o755 });
+                containedRemove({ root: projectRoot, target: rel });
+                modified.push(rel);
             }
             catch {
-                /* best-effort on platforms without chmod */
+                /* best-effort strip */
             }
         }
     }
-    else if (existsSync(join(projectRoot, wrapperRel))) {
+    const wrapperRel = GROK_PRETOOLUSE_WRAPPER_REL_PATH;
+    if (existsSync(join(projectRoot, wrapperRel))) {
         try {
             containedRemove({ root: projectRoot, target: wrapperRel });
             modified.push(wrapperRel);
@@ -724,9 +747,13 @@ export function ensureHostHooks(projectRoot, hostHooksPolicy = loadHostHooksPoli
     }
     return { created, modified };
 }
+// Taskfile F1 disable-first + project-PM pin miss live in tasks/engine.yml +
+// tasks/engine-invoke.cjs (#5994) — disable-active runs BEFORE pin-bin / is-buildable-source;
+// pin-bin also quiet-exits when disable is active. This GITHOOK_HELPER is the .githooks twin.
 const GITHOOK_HELPER = `#!/usr/bin/env sh
-# Package-relative Directive git-hook helper (AC9.9).
+# Package-relative Directive git-hook helper (AC9.9 / AC9.12 / #5994).
 # Sourced by pre-commit/pre-push; defines run_directive.
+# F1 order: disable → missing pin (project PM) → pin bin.js.
 if [ -z "\${REPO_ROOT:-}" ]; then
   REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)"
 fi
@@ -734,24 +761,20 @@ if [ -z "$REPO_ROOT" ]; then
   echo "directive hooks: unable to resolve repo root." >&2
   exit 1
 fi
-RUNTIME_BIN="$REPO_ROOT/${RUNTIME_BIN_REL}"
-if [ ! -f "$RUNTIME_BIN" ]; then
-  echo "directive hooks: missing $RUNTIME_BIN" >&2
-  echo "Recovery: ${INSTALLATION_RECOVERY_GUIDANCE}" >&2
-  exit 1
-fi
 run_directive() {
-  # #3039 / #5543: root local kill-switch — skip CLI spawn when flag is present,
-  # not a symlink, and not tracked by git (tracked flag must not disable clones).
+  # #3039 / #5543 / #5994 F1: disable BEFORE requiring pin bin.js; quiet skip.
   _kill="$REPO_ROOT/.deft-directive-disable"
   if [ -f "$_kill" ] && [ ! -L "$_kill" ]; then
     if ! git -C "$REPO_ROOT" ls-files --error-unmatch -- .deft-directive-disable >/dev/null 2>&1; then
-      echo "Directive is DISABLED for this project via root .deft-directive-disable (test/local kill-switch)." >&2
-      echo "Git hooks skipping Directive CLI spawn (#5543 / #3039). Deposit may remain." >&2
-      echo "Recovery: rm .deft-directive-disable && start a new agent session." >&2
       return 0
     fi
   fi
+  RUNTIME_BIN="$REPO_ROOT/${RUNTIME_BIN_REL}"
+  if [ ! -f "$RUNTIME_BIN" ]; then
+    echo "directive hooks: missing $RUNTIME_BIN" >&2
+    echo "${HOST_HOOK_MISSING_PIN_PROJECT_PM_GUIDANCE}" >&2
+    exit 1
+  fi
   node "$RUNTIME_BIN" "$@"
 }
 `;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deftai/directive-runtime",
-  "version": "0.129.1",
+  "version": "0.129.3",
   "description": "Directive runtime — pinned product commands, hooks, content, and engine.",
   "license": "MIT",
   "homepage": "https://deftai.github.io/directive/",

package/tasks/engine-invoke.cjs

@@ -23,11 +23,15 @@ const CONTENT_PACKAGE_NAME = "@deftai/directive-content";
 /** Single remediation when a deposit has no global CLI (#3324 / #3265). */
 const DEPOSIT_REMEDIATION = "npm i -g @deftai/directive";
 const SOURCE_BUILD_REMEDIATION = "task build";
-/** Missing checkout pin remediation (#5805 Prefer-A Bound P1). */
+/** Missing checkout pin remediation (#5994 / AC9.12): project PM first.
+ * pin-bin path never recommends npm i -g (that is DEPOSIT_REMEDIATION only).
+ */
 const PIN_INSTALL_REMEDIATION =
-  "npm i -g @deftai/directive, then directive install --repair (or package-manager install of @deftai/directive-runtime)";
+  "Run npm install or pnpm install (or yarn) in this project (missing node_modules/@deftai/directive-runtime)";
+/** Tip dogfood secondary when project install is not enough (#5805). */
 const PIN_MATERIALIZE_REMEDIATION = "task materialize:runtime";
 const PIN_BIN_REL = path.join("node_modules", "@deftai", "directive-runtime", "dist", "bin.js");
+const DISABLE_FLAG = ".deft-directive-disable";
 
 /**
  * cmd.exe command separators / metacharacters. Free-text DEFT_ENGINE_CMD_JSON
@@ -178,6 +182,29 @@ function resolveFrameworkPinBin(projectRoot, opts = {}) {
  * @param {string} projectRoot
  * @param {{ fs?: typeof fs, path?: typeof path }} [opts]
  */
+/**
+ * AC9.12 / #5994: untracked root .deft-directive-disable → quiet skip before pin require.
+ * @param {string} projectRoot
+ * @param {{ fs?: typeof fs, path?: typeof path, spawnSync?: typeof spawnSync }} [opts]
+ */
+function isDirectiveDisableActive(projectRoot, opts = {}) {
+  const io = opts.fs || fs;
+  const pathMod = opts.path || path;
+  const spawn = opts.spawnSync || spawnSync;
+  if (!projectRoot) return false;
+  const killPath = pathMod.join(projectRoot, DISABLE_FLAG);
+  try {
+    if (!io.existsSync(killPath)) return false;
+    if (io.lstatSync(killPath).isSymbolicLink()) return false;
+  } catch {
+    return false;
+  }
+  const r = spawn("git", ["-C", projectRoot, "ls-files", "--error-unmatch", "--", DISABLE_FLAG], {
+    stdio: ["ignore", "ignore", "ignore"],
+  });
+  return r.status !== 0;
+}
+
 function hasFrameworkPinBin(projectRoot, opts = {}) {
   const io = opts.fs || fs;
   const pin = resolveFrameworkPinBin(projectRoot, opts);
@@ -399,8 +426,14 @@ if (require.main === module) {
   if (mode === "is-buildable-source") {
     process.exit(isBuildableSource(process.argv[3] || "") ? 0 : 1);
   }
+  if (mode === "disable-active") {
+    process.exit(isDirectiveDisableActive(process.argv[3] || "") ? 0 : 1);
+  }
   if (mode === "pin-bin") {
     const root = process.argv[3] || "";
+    if (isDirectiveDisableActive(root)) {
+      process.exit(0);
+    }
     const pin = resolveFrameworkPinBin(root);
     if (hasFrameworkPinBin(root)) {
       process.stdout.write(pin);
@@ -433,4 +466,6 @@ module.exports = {
   SOURCE_BUILD_REMEDIATION,
   PIN_INSTALL_REMEDIATION,
   PIN_MATERIALIZE_REMEDIATION,
+  isDirectiveDisableActive,
+  DISABLE_FLAG,
 };

package/tasks/engine-invoke.test.cjs

@@ -615,5 +615,19 @@ describe("framework pin exclusive invoke (#5805)", () => {
     const r = spawnSync(process.execPath, [script, "pin-bin", root], { encoding: "utf8" });
     assert.equal(r.status, 2);
     assert.match(r.stderr, /missing checkout pin/);
+    assert.match(r.stderr, /npm install or pnpm install/);
+  });
+
+  it("disable-active / pin-bin quiet-skip when untracked disable flag present (#5994)", () => {
+    const root = pinTempRoot();
+    const script = join(__dirname, "engine-invoke.cjs");
+    writeFileSync(join(root, ".deft-directive-disable"), "1\n");
+    // Ensure git repo so ls-files --error-unmatch can run (untracked → active).
+    spawnSync("git", ["init"], { cwd: root, stdio: "ignore" });
+    const d = spawnSync(process.execPath, [script, "disable-active", root], { encoding: "utf8" });
+    assert.equal(d.status, 0);
+    const r = spawnSync(process.execPath, [script, "pin-bin", root], { encoding: "utf8" });
+    assert.equal(r.status, 0);
+    assert.equal((r.stdout || "").trim(), "");
   });
 });

package/tasks/engine.yml

@@ -73,6 +73,11 @@ tasks:
     cmds:
       - |
         set -eu
+        # #5994 / AC9.12 / F1: disable BEFORE requiring pin bin.js; quiet skip.
+        # Untracked root .deft-directive-disable → exit 0 (no pin require, no global install).
+        if node "{{.TASKFILE_DIR}}/engine-invoke.cjs" disable-active "{{.DEFT_ROOT}}"; then
+          exit 0
+        fi
         # #3324: deposit marker forces is_buildable_source=0 (consumer / OVPR path).
         is_buildable_source=0
         if node "{{.TASKFILE_DIR}}/engine-invoke.cjs" is-buildable-source "{{.DEFT_ROOT}}"; then

package/vendor/directive-content/.githooks/_directive-run.sh

@@ -1,6 +1,7 @@
 #!/usr/bin/env sh
-# Package-relative Directive git-hook helper (AC9.9).
+# Package-relative Directive git-hook helper (AC9.9 / AC9.12 / #5994).
 # Sourced by pre-commit/pre-push; defines run_directive.
+# F1 order: disable → missing pin (project PM) → pin bin.js.
 if [ -z "${REPO_ROOT:-}" ]; then
   REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)"
 fi
@@ -8,23 +9,19 @@ if [ -z "$REPO_ROOT" ]; then
   echo "directive hooks: unable to resolve repo root." >&2
   exit 1
 fi
-RUNTIME_BIN="$REPO_ROOT/node_modules/@deftai/directive-runtime/dist/bin.js"
-if [ ! -f "$RUNTIME_BIN" ]; then
-  echo "directive hooks: missing $RUNTIME_BIN" >&2
-  echo "Recovery: npm i -g @deftai/directive, then directive install --repair" >&2
-  exit 1
-fi
 run_directive() {
-  # #3039 / #5543: root local kill-switch — skip CLI spawn when flag is present,
-  # not a symlink, and not tracked by git (tracked flag must not disable clones).
+  # #3039 / #5543 / #5994 F1: disable BEFORE requiring pin bin.js; quiet skip.
   _kill="$REPO_ROOT/.deft-directive-disable"
   if [ -f "$_kill" ] && [ ! -L "$_kill" ]; then
     if ! git -C "$REPO_ROOT" ls-files --error-unmatch -- .deft-directive-disable >/dev/null 2>&1; then
-      echo "Directive is DISABLED for this project via root .deft-directive-disable (test/local kill-switch)." >&2
-      echo "Git hooks skipping Directive CLI spawn (#5543 / #3039). Deposit may remain." >&2
-      echo "Recovery: rm .deft-directive-disable && start a new agent session." >&2
       return 0
     fi
   fi
+  RUNTIME_BIN="$REPO_ROOT/node_modules/@deftai/directive-runtime/dist/bin.js"
+  if [ ! -f "$RUNTIME_BIN" ]; then
+    echo "directive hooks: missing $RUNTIME_BIN" >&2
+    echo "Directive hooks: missing node_modules/@deftai/directive-runtime. Run npm install or pnpm install (or yarn) in this project." >&2
+    exit 1
+  fi
   node "$RUNTIME_BIN" "$@"
 }

package/vendor/directive-content/.githooks/pre-push

@@ -5,8 +5,4 @@ REPO_ROOT="$(git rev-parse --show-toplevel 2>/dev/null)" || exit 1
 . "$REPO_ROOT/.githooks/_directive-run.sh"
 run_directive verify:branch --project-root "$REPO_ROOT" || exit $?
 # Enrolled bound pre-PR arm: sole-stdin (do not redirect shared run_directive to /dev/null)
-# Pins older than #5804 lack --push-admit: keep the pre-#5804 hook there (verify:branch only).
-_pre_pr_help="$(run_directive pre-pr:run --help </dev/null 2>&1)" || exit $?
-case "$_pre_pr_help" in
-  *--push-admit*) run_directive pre-pr:run --push-admit --project-root "$REPO_ROOT" || exit $? ;;
-esac
+run_directive pre-pr:run --push-admit --project-root "$REPO_ROOT" || exit $?

package/vendor/directive-content/tasks/engine-invoke.cjs

@@ -23,11 +23,15 @@ const CONTENT_PACKAGE_NAME = "@deftai/directive-content";
 /** Single remediation when a deposit has no global CLI (#3324 / #3265). */
 const DEPOSIT_REMEDIATION = "npm i -g @deftai/directive";
 const SOURCE_BUILD_REMEDIATION = "task build";
-/** Missing checkout pin remediation (#5805 Prefer-A Bound P1). */
+/** Missing checkout pin remediation (#5994 / AC9.12): project PM first.
+ * pin-bin path never recommends npm i -g (that is DEPOSIT_REMEDIATION only).
+ */
 const PIN_INSTALL_REMEDIATION =
-  "npm i -g @deftai/directive, then directive install --repair (or package-manager install of @deftai/directive-runtime)";
+  "Run npm install or pnpm install (or yarn) in this project (missing node_modules/@deftai/directive-runtime)";
+/** Tip dogfood secondary when project install is not enough (#5805). */
 const PIN_MATERIALIZE_REMEDIATION = "task materialize:runtime";
 const PIN_BIN_REL = path.join("node_modules", "@deftai", "directive-runtime", "dist", "bin.js");
+const DISABLE_FLAG = ".deft-directive-disable";
 
 /**
  * cmd.exe command separators / metacharacters. Free-text DEFT_ENGINE_CMD_JSON
@@ -178,6 +182,29 @@ function resolveFrameworkPinBin(projectRoot, opts = {}) {
  * @param {string} projectRoot
  * @param {{ fs?: typeof fs, path?: typeof path }} [opts]
  */
+/**
+ * AC9.12 / #5994: untracked root .deft-directive-disable → quiet skip before pin require.
+ * @param {string} projectRoot
+ * @param {{ fs?: typeof fs, path?: typeof path, spawnSync?: typeof spawnSync }} [opts]
+ */
+function isDirectiveDisableActive(projectRoot, opts = {}) {
+  const io = opts.fs || fs;
+  const pathMod = opts.path || path;
+  const spawn = opts.spawnSync || spawnSync;
+  if (!projectRoot) return false;
+  const killPath = pathMod.join(projectRoot, DISABLE_FLAG);
+  try {
+    if (!io.existsSync(killPath)) return false;
+    if (io.lstatSync(killPath).isSymbolicLink()) return false;
+  } catch {
+    return false;
+  }
+  const r = spawn("git", ["-C", projectRoot, "ls-files", "--error-unmatch", "--", DISABLE_FLAG], {
+    stdio: ["ignore", "ignore", "ignore"],
+  });
+  return r.status !== 0;
+}
+
 function hasFrameworkPinBin(projectRoot, opts = {}) {
   const io = opts.fs || fs;
   const pin = resolveFrameworkPinBin(projectRoot, opts);
@@ -399,8 +426,14 @@ if (require.main === module) {
   if (mode === "is-buildable-source") {
     process.exit(isBuildableSource(process.argv[3] || "") ? 0 : 1);
   }
+  if (mode === "disable-active") {
+    process.exit(isDirectiveDisableActive(process.argv[3] || "") ? 0 : 1);
+  }
   if (mode === "pin-bin") {
     const root = process.argv[3] || "";
+    if (isDirectiveDisableActive(root)) {
+      process.exit(0);
+    }
     const pin = resolveFrameworkPinBin(root);
     if (hasFrameworkPinBin(root)) {
       process.stdout.write(pin);
@@ -433,4 +466,6 @@ module.exports = {
   SOURCE_BUILD_REMEDIATION,
   PIN_INSTALL_REMEDIATION,
   PIN_MATERIALIZE_REMEDIATION,
+  isDirectiveDisableActive,
+  DISABLE_FLAG,
 };

package/vendor/directive-content/tasks/engine-invoke.test.cjs

@@ -615,5 +615,19 @@ describe("framework pin exclusive invoke (#5805)", () => {
     const r = spawnSync(process.execPath, [script, "pin-bin", root], { encoding: "utf8" });
     assert.equal(r.status, 2);
     assert.match(r.stderr, /missing checkout pin/);
+    assert.match(r.stderr, /npm install or pnpm install/);
+  });
+
+  it("disable-active / pin-bin quiet-skip when untracked disable flag present (#5994)", () => {
+    const root = pinTempRoot();
+    const script = join(__dirname, "engine-invoke.cjs");
+    writeFileSync(join(root, ".deft-directive-disable"), "1\n");
+    // Ensure git repo so ls-files --error-unmatch can run (untracked → active).
+    spawnSync("git", ["init"], { cwd: root, stdio: "ignore" });
+    const d = spawnSync(process.execPath, [script, "disable-active", root], { encoding: "utf8" });
+    assert.equal(d.status, 0);
+    const r = spawnSync(process.execPath, [script, "pin-bin", root], { encoding: "utf8" });
+    assert.equal(r.status, 0);
+    assert.equal((r.stdout || "").trim(), "");
   });
 });

package/vendor/directive-content/tasks/engine.yml

@@ -73,6 +73,11 @@ tasks:
     cmds:
       - |
         set -eu
+        # #5994 / AC9.12 / F1: disable BEFORE requiring pin bin.js; quiet skip.
+        # Untracked root .deft-directive-disable → exit 0 (no pin require, no global install).
+        if node "{{.TASKFILE_DIR}}/engine-invoke.cjs" disable-active "{{.DEFT_ROOT}}"; then
+          exit 0
+        fi
         # #3324: deposit marker forces is_buildable_source=0 (consumer / OVPR path).
         is_buildable_source=0
         if node "{{.TASKFILE_DIR}}/engine-invoke.cjs" is-buildable-source "{{.DEFT_ROOT}}"; then