claudemd-cli 0.75.0 → 0.76.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "claudemd-cli",
-  "version": "0.75.0",
+  "version": "0.76.1",
   "description": "Standalone CLI for §10-V banned-vocab + transcript scanning. Companion to the claudemd Claude Code plugin (github.com/sdsrss/claudemd) for use in git pre-commit hooks, GitHub Actions, and other agents.",
   "type": "module",
   "bin": {

package/scripts/lib/argv.js

@@ -11,6 +11,9 @@
 // Caller catches `ArgvError` and exits 2 (distinct from numeric-validation
 // exit 1) so wrappers can tell parsing-shape errors from validation errors.
 
+import fs from 'node:fs';
+import { fileURLToPath } from 'node:url';
+
 export class ArgvError extends Error {
   constructor(message) {
     super(message);
@@ -18,6 +21,31 @@ export class ArgvError extends Error {
   }
 }
 
+// invokedAsMain(import.meta.url) — "did node start the program at THIS file?"
+//
+// The obvious spelling compares `import.meta.url` against a `file://` string
+// built from process.argv[1]. Both halves of that comparison lie:
+//   - node resolves import.meta.url through symlinks, argv[1] stays as typed,
+//     so a plugin dir reached through a link (a dotfiles ~/.claude, a
+//     `git worktree`, macOS /var -> /private/var) compares unequal;
+//   - a URL percent-encodes what a path spells literally, so one space in the
+//     path is `%20` on one side and ` ` on the other.
+// Either way the main block does not run: the CLI exits 0 having printed
+// nothing, which every caller reads as success. install.js failing this way
+// returns "ok" while writing no manifest, so SessionStart re-enters the
+// fresh-install branch forever (2026-09-05 audit P0-1).
+//
+// realpath BOTH sides and the two failure modes collapse into one comparison.
+// Throwing inputs (argv[1] undefined under `node -e`, a path that no longer
+// exists) mean "not the program" — false, never a crash.
+export function invokedAsMain(importMetaUrl) {
+  try {
+    return fs.realpathSync(fileURLToPath(importMetaUrl)) === fs.realpathSync(process.argv[1]);
+  } catch {
+    return false;
+  }
+}
+
 // Discoverability helper: when `--help` or `-h` is the first non-empty arg
 // (or anywhere in argv for scripts with no flags), print usage to stdout and
 // exit 0. Caller invokes BEFORE parseStrict so unknown-arg rejection doesn't
@@ -122,6 +150,23 @@ export function parseStrict(argv, { bools = [], values = [] } = {}) {
   }
   return out;
 }
+// parseStrictOrExit — parseStrict with the exit contract every CLI in this repo
+// repeated verbatim: an ArgvError is a usage error, so print the one-line reason
+// and exit 2; anything else is a bug and keeps its stack. Seventeen main blocks
+// spelled this out by hand (jscpd's nine largest non-test clones were all this
+// block), which is seventeen chances for one of them to swallow the rethrow or
+// exit with a different code than its own USAGE documents.
+export function parseStrictOrExit(argv, spec = {}) {
+  try {
+    return parseStrict(argv, spec);
+  } catch (e) {
+    if (e instanceof ArgvError) {
+      console.error(e.message);
+      process.exit(2);
+    }
+    throw e;
+  }
+}
 
 // Space-form argv validator for the published `claudemd-cli` binary.
 //