ruvnet-brain 4.7.20 → 4.7.22

package/scripts/release-projection.mjs

@@ -24,6 +24,7 @@ import { PUBLIC_GENERATIONS_FILE, generationLedgerBytes, projectPublicGeneration
   releaseCoverageGenerationFor, validateCoverageDirectory } from '../plugin/scripts/coverage-integrity.mjs';
 import { validatePublicInventory } from './public-inventory.mjs';
 import { readRvfGenerations } from './rvf-generation.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const sha256 = (bytes) => crypto.createHash('sha256').update(bytes).digest('hex');
@@ -238,7 +239,7 @@ export function projectReleaseFromAssets({ corpusCoverage, assetsDir, version, s
   return releaseBase;
 }
 
-if (((() => { try { return process.argv[1] && fs.realpathSync(process.argv[1]) === fs.realpathSync(fileURLToPath(import.meta.url)); } catch { return false; } })())) {
+if (isDirectInvocation(import.meta.url)) {
   const arg = (name, fallback = null) => { const i = process.argv.indexOf(name); return i >= 0 ? process.argv[i + 1] : fallback; };
   try {
     const corpusFile = path.resolve(arg('--corpus', path.join(ROOT, 'data', 'source-coverage.json')));

package/scripts/release-proof.mjs

@@ -3,7 +3,8 @@ export * from '../plugin/skills/release-proof/scripts/release-proof.mjs';
 import { main } from '../plugin/skills/release-proof/scripts/release-proof.mjs';
 import path from 'node:path';
 import { pathToFileURL } from 'node:url';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
-if (process.argv[1] && pathToFileURL(path.resolve(process.argv[1])).href === import.meta.url) {
+if (isDirectInvocation(import.meta.url)) {
   process.exitCode = main(process.argv.slice(2));
 }

package/scripts/release-qualification-contract.mjs

@@ -11,8 +11,8 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
       "reason": "Allowed channels and immutable Claude artifact paths reject downgrades, ambiguous registry records, changed bytes, extra active resources and escape paths; Console success requires the exact launched source closure. POSIX owner fixtures additionally enforce original-prefix installs, existing-tool-only policy, shared locks and source-bound scheduler receipts",
       "files": ["tests/unit/developer-update-policy-portable.test.mjs", "tests/unit/plugin-artifact-proof.test.mjs", "tests/unit/console-suite-update.test.mjs", "tests/unit/developer-update-scheduled-receipt.test.mjs"],
       "platformFiles": {
-        "linux": ["tests/unit/developer-update.test.mjs", "tests/unit/developer-update-codex-launcher.test.mjs"],
-        "macos": ["tests/unit/developer-update.test.mjs", "tests/unit/developer-update-codex-launcher.test.mjs"]
+        "linux": ["tests/unit/developer-update.test.mjs", "tests/unit/developer-update-codex-launcher.test.mjs", "tests/unit/developer-update-lock-reclaim.test.mjs", "tests/unit/developer-update-lock-release-race.test.mjs", "tests/unit/developer-update-stage-isolation.test.mjs"],
+        "macos": ["tests/unit/developer-update.test.mjs", "tests/unit/developer-update-codex-launcher.test.mjs", "tests/unit/developer-update-lock-reclaim.test.mjs", "tests/unit/developer-update-lock-release-race.test.mjs", "tests/unit/developer-update-stage-isolation.test.mjs"]
       }
     },
     {
@@ -22,16 +22,20 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
     },
     {
       "id": "honest-currency-lesson-and-metrics-evidence",
-      "reason": "Foreign KB roots remain isolated; panel currency derives from measured completion rather than checkout time; exact lesson readback binds this shell-free write; public metrics never fabricate performance or a competing product score",
-      "files": ["tests/unit/forge-currency-selected-root.test.mjs", "tests/unit/brain-score-producer.test.mjs", "tests/unit/brain-grade-groundtruth-timestamp.test.mjs", "tests/unit/record-lesson.test.mjs", "tests/unit/lesson-presentation-budget.test.mjs", "tests/unit/metrics-truth.test.mjs", "tests/unit/issue-watch-retry.test.mjs"]
+      "reason": "Foreign KB roots remain isolated; panel currency derives from measured completion rather than checkout time; exact lesson readback binds this shell-free write; public metrics never fabricate performance or a competing product score; SessionStart reports a host-sync-only failure after a passed knowledge update separately from knowledge currency",
+      "files": ["tests/unit/forge-currency-selected-root.test.mjs", "tests/unit/brain-score-producer.test.mjs", "tests/unit/brain-grade-groundtruth-timestamp.test.mjs", "tests/unit/record-lesson.test.mjs", "tests/unit/lesson-presentation-budget.test.mjs", "tests/unit/metrics-truth.test.mjs", "tests/unit/issue-watch-retry.test.mjs", "tests/unit/session-start-knowledge-currency.test.mjs"],
+      "platformFiles": {
+        "linux": ["tests/unit/session-start-knowledge-auto-update.test.mjs", "tests/unit/claims-verify.test.mjs", "tests/unit/capability-registry.test.mjs"],
+        "macos": ["tests/unit/session-start-knowledge-auto-update.test.mjs", "tests/unit/claims-verify.test.mjs", "tests/unit/capability-registry.test.mjs"]
+      }
     },
     {
       "id": "owner-alerting-volume-and-trust",
       "reason": "Alerts page on change, not repeat; an undelivered page is retried; overrunning jobs and their whole process tree stop; people's issues page once at SLA with one daily summary; the ntfy inbox never turns message text into instructions",
       "files": ["tests/unit/issue-watch-paging.test.mjs"],
       "platformFiles": {
-        "linux": ["tests/unit/job-heartbeat-alerting.test.mjs", "tests/unit/ntfy-inbox.test.mjs"],
-        "macos": ["tests/unit/job-heartbeat-alerting.test.mjs", "tests/unit/ntfy-inbox.test.mjs"]
+        "linux": ["tests/unit/job-heartbeat-alerting.test.mjs", "tests/unit/ntfy-inbox.test.mjs", "tests/unit/brain-alarm-paging.test.mjs", "tests/unit/ntfy-alerts-filter.test.mjs", "tests/unit/api-spend-watchdog-transition.test.mjs", "tests/unit/issue-watch-unreadable-exit.test.mjs", "tests/unit/nightly-watchdog.test.mjs", "tests/unit/ntfy-delivery.test.mjs"],
+        "macos": ["tests/unit/job-heartbeat-alerting.test.mjs", "tests/unit/ntfy-inbox.test.mjs", "tests/unit/brain-alarm-paging.test.mjs", "tests/unit/ntfy-alerts-filter.test.mjs", "tests/unit/api-spend-watchdog-transition.test.mjs", "tests/unit/issue-watch-unreadable-exit.test.mjs", "tests/unit/nightly-watchdog.test.mjs", "tests/unit/ntfy-delivery.test.mjs"]
       }
     },
     {
@@ -39,8 +43,8 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
       "reason": "Captured owner policy never falls back on read failures; installed-only automation avoids npx; transient GET and body failures retry without weakening trust; POSIX executable aliases retain interpreter identity",
       "files": ["tests/unit/automatic-update.test.mjs", "tests/unit/download-retry.test.mjs"],
       "platformFiles": {
-        "linux": ["tests/unit/automatic-update-node-alias.test.mjs"],
-        "macos": ["tests/unit/automatic-update-node-alias.test.mjs"]
+        "linux": ["tests/unit/automatic-update-node-alias.test.mjs", "tests/unit/host-update-knowledge-exit.test.mjs"],
+        "macos": ["tests/unit/automatic-update-node-alias.test.mjs", "tests/unit/host-update-knowledge-exit.test.mjs"]
       }
     },
     {
@@ -57,8 +61,8 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
       "reason": "Explicit document meaning requests retain corroboration; literal searches stay silent; POSIX complete-write exemptions preserve executable and managed-store grounding",
       "files": ["tests/unit/advocacy-route.test.mjs", "tests/unit/advocacy-catalog.test.mjs", "tests/unit/card-lane.test.mjs"],
       "platformFiles": {
-        "linux": ["tests/unit/advocacy-route-budget.test.mjs", "tests/unit/ground-before-write.test.mjs", "tests/unit/grounding-code-projection.test.mjs"],
-        "macos": ["tests/unit/advocacy-route-budget.test.mjs", "tests/unit/ground-before-write.test.mjs", "tests/unit/grounding-code-projection.test.mjs"]
+        "linux": ["tests/unit/advocacy-route-budget.test.mjs", "tests/unit/ground-before-write.test.mjs", "tests/unit/grounding-code-projection.test.mjs", "tests/unit/package-recommender.test.mjs", "tests/unit/write-gate-policy.test.mjs"],
+        "macos": ["tests/unit/advocacy-route-budget.test.mjs", "tests/unit/ground-before-write.test.mjs", "tests/unit/grounding-code-projection.test.mjs", "tests/unit/package-recommender.test.mjs"]
       }
     },
     {
@@ -68,11 +72,12 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
     },
     {
       "id": "canonical-learning-capture",
-      "reason": "Fixed metadata capture, canonical scope, consent, exact readback and loud refusal retain privacy; learning is handed straight to ruflo memory store with no local queue",
+      "reason": "Fixed metadata capture, canonical scope, consent, exact readback and loud refusal retain privacy; learning is handed straight to ruflo memory store with no local queue; the SessionEnd checkpoint plans for Claude Code's real 1.5 s budget and detaches instead of being cancelled",
       "files": [
         "tests/unit/learn-capture-project-root.test.mjs",
         "tests/unit/learn-capture-redaction.test.mjs",
-        "tests/unit/learner-scope-agreement.test.mjs"
+        "tests/unit/learner-scope-agreement.test.mjs",
+        "tests/unit/claude-session-end-budget.test.mjs"
       ]
     },
     {
@@ -111,7 +116,11 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
         "tests/unit/protected-release-workflow.test.mjs",
         "tests/unit/agentic-qe-early-public.test.mjs",
         "tests/unit/release-evidence-dag.test.mjs"
-      ]
+      ],
+      "platformFiles": {
+        "linux": ["tests/unit/self-update-publish-branch-guard.test.mjs", "tests/unit/pre-push-worktree-root.test.mjs", "tests/unit/wired-baseline-classification.test.mjs"],
+        "macos": ["tests/unit/self-update-publish-branch-guard.test.mjs", "tests/unit/pre-push-worktree-root.test.mjs", "tests/unit/wired-baseline-classification.test.mjs"]
+      }
     },
     {
       "id": "public-verification",
@@ -127,7 +136,7 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
     },
     {
       "id": "safe-install-update",
-      "reason": "Installation and update preserve prior and private state and reject invalid dependencies; the Codex hook bridge a retained Brain generation shipped upgrades reversibly while edited, linked, shared or foreign-owned bridges stay preserved",
+      "reason": "Installation and update preserve prior and private state and reject invalid dependencies; the Codex hook bridge a retained Brain generation shipped upgrades reversibly while edited, linked, shared or foreign-owned bridges stay preserved; a failed host sync rolls the Console runtime back and records its reason",
       "files": [
         "tests/unit/automatic-hook-retirement.test.mjs",
         "tests/unit/codex-wrapper-upgrade-ownership.test.mjs",
@@ -136,11 +145,13 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
         "tests/unit/forge-update-archive-digest.test.mjs",
         "tests/unit/kb-copy-proof-legacy-sidecars.test.mjs",
         "tests/unit/kb-copy-proof-unknown-content.test.mjs",
-        "tests/unit/user-model-hook-install.test.mjs"
+        "tests/unit/user-model-hook-install.test.mjs",
+        "tests/unit/console-runtime-transaction.test.mjs",
+        "tests/unit/install-update-exit-semantics.test.mjs"
       ],
       "platformFiles": {
-        "linux": ["tests/unit/codex-wrapper-upgrade-ownership-links.test.mjs"],
-        "macos": ["tests/unit/codex-wrapper-upgrade-ownership-links.test.mjs"]
+        "linux": ["tests/unit/codex-wrapper-upgrade-ownership-links.test.mjs", "tests/unit/forge-update-signal.test.mjs", "tests/unit/console-runtime-replacement-posix.test.mjs", "tests/unit/update-apply-lock-identity.test.mjs", "tests/unit/update-apply-lock-takeover-race.test.mjs", "tests/integration/install-update-signals.test.mjs", "tests/unit/forge-guard-injection-log-location.test.mjs", "tests/unit/installer-sibling-imports-packaged.test.mjs", "tests/unit/npm-pack-json.test.mjs", "tests/unit/npm-tarball-codex.test.mjs", "tests/integration/pack-completeness.test.mjs"],
+        "macos": ["tests/unit/codex-wrapper-upgrade-ownership-links.test.mjs", "tests/unit/forge-update-signal.test.mjs", "tests/unit/console-runtime-replacement-posix.test.mjs", "tests/unit/update-apply-lock-identity.test.mjs", "tests/unit/update-apply-lock-takeover-race.test.mjs", "tests/integration/install-update-signals.test.mjs", "tests/unit/forge-guard-injection-log-location.test.mjs", "tests/unit/installer-sibling-imports-packaged.test.mjs", "tests/unit/npm-pack-json.test.mjs", "tests/unit/npm-tarball-codex.test.mjs", "tests/integration/pack-completeness.test.mjs", "tests/unit/spend-guard-install.test.mjs"]
       }
     },
     {
@@ -196,11 +207,12 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
         "tests/unit/model-native-catalog.test.mjs",
         "tests/unit/user-model-prompt-hook.test.mjs",
         "tests/unit/model-routing-policy-promotion.test.mjs",
-        "tests/unit/codex-hook-trust.test.mjs"
+        "tests/unit/codex-hook-trust.test.mjs",
+        "tests/unit/model-catalog-refresh-workflow.test.mjs"
       ],
       "platformFiles": {
-        "linux": ["tests/unit/model-weekly-cycle-native-stub.test.mjs", "tests/unit/goldie-weekly-path.test.mjs"],
-        "macos": ["tests/unit/model-weekly-cycle-native-stub.test.mjs", "tests/unit/goldie-weekly-path.test.mjs"]
+        "linux": ["tests/unit/model-weekly-cycle-native-stub.test.mjs", "tests/unit/goldie-weekly-path.test.mjs", "tests/unit/model-currency-live-capture.test.mjs"],
+        "macos": ["tests/unit/model-weekly-cycle-native-stub.test.mjs", "tests/unit/goldie-weekly-path.test.mjs", "tests/unit/model-currency-live-capture.test.mjs"]
       }
     },
     {
@@ -240,25 +252,45 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
     },
     {
       "id": "lossless-lifecycle-retention",
-      "reason": "Evidence compaction preserves tokens, private state and atomic transaction recovery",
+      "reason": "Evidence compaction preserves tokens, private state and atomic transaction recovery; an abandoned atomic receipt temporary is reclaimed or preserved, never a permanent blocker",
       "files": [
         "tests/unit/lifecycle-evidence-retention.test.mjs",
+        "tests/unit/refresh-run.test.mjs",
+        "tests/unit/refresh-run-stale-reclaim.test.mjs",
         "tests/unit/update-storage-transaction.test.mjs"
-      ]
+      ],
+      "platformFiles": {
+        "linux": ["tests/unit/refresh-run-takeover-race.test.mjs"],
+        "macos": ["tests/unit/refresh-run-takeover-race.test.mjs"]
+      }
+    },
+    {
+      "id": "nightly-knowledge-jobs",
+      "reason": "The gists nightly re-embeds over a stale store, scales its stall budget with the slowest batch and reports its error paths; a stalled shard is detected; a reader never deadlocks the refresh",
+      "files": ["tests/unit/forge-big-stall.test.mjs"],
+      "platformFiles": {
+        "linux": ["tests/integration/ingest-gists.test.mjs", "tests/integration/nightly-gists-error-paths.test.mjs"],
+        "macos": ["tests/integration/ingest-gists.test.mjs", "tests/integration/nightly-gists-error-paths.test.mjs"]
+      }
     },
     {
       "id": "causal-learning-proof",
       "reason": "Recorded learning evidence rejects forged, absent and mismatched causal transcripts",
       "files": [
         "tests/unit/learning-replay-proof.test.mjs"
-      ]
+      ],
+      "platformFiles": {
+        "linux": ["tests/unit/learning-replay-workflow-step.test.mjs"],
+        "macos": ["tests/unit/learning-replay-workflow-step.test.mjs"]
+      }
     },
     {
       "id": "qualification-topology",
       "reason": "Release promotion consumes qualified exact-source receipts and preserves required contexts",
       "files": [
         "tests/unit/qualify-once-workflow.test.mjs",
-        "tests/unit/architecture-review-lock.test.mjs"
+        "tests/unit/architecture-review-lock.test.mjs",
+        "tests/unit/canonical-qa-preflight-parity.test.mjs"
       ]
     },
     {
@@ -291,10 +323,13 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
   ],
   "platformFiles": {
     "linux": [
-      "tests/unit/hook-shim.test.mjs"
+      "tests/unit/hook-shim.test.mjs",
+      "tests/unit/continuation-gate-quiet-default.test.mjs"
     ],
     "macos": [
-      "tests/unit/hook-shim.test.mjs"
+      "tests/unit/hook-shim.test.mjs",
+      "tests/unit/continuation-gate-quiet-default.test.mjs",
+      "tests/unit/hook-qualify.test.mjs"
     ]
   }
 },
@@ -310,6 +345,15 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
       "reason": "Complete outbox tails replay and accepted pending journal events survive capacity pressure without silent deletion",
       "files": [
       ]
+    },
+    {
+      "id": "open-issue-fixes-4-7-22",
+      "reason": "Reporter-filed defects stay fixed: completion evidence never binds a masked or negated check and a masked check is an advisory, not a false 'no check ran' stop; the boot surface of a recovered Codex host is proven per changed path; Console fleet and lesson counts match by store identity and never show unknown as zero; one project-scope rule is shared by the lesson gate and the Console; a refused or unreadable memory restore is reported as such and an aborted Ruflo call leaves no child process",
+      "files": [],
+      "platformFiles": {
+        "linux": ["tests/unit/continuation-gate-codex-transcript.test.mjs", "tests/unit/codex-boot-surface-proof.test.mjs", "tests/unit/console-activity-fleet-dedupe.test.mjs", "tests/unit/console-activity-identity.test.mjs", "tests/unit/console-activity-lessons.test.mjs", "tests/unit/lesson-gate.test.mjs", "tests/unit/ruflo-memory-session.test.mjs"],
+        "macos": ["tests/unit/continuation-gate-codex-transcript.test.mjs", "tests/unit/codex-boot-surface-proof.test.mjs", "tests/unit/console-activity-fleet-dedupe.test.mjs", "tests/unit/console-activity-identity.test.mjs", "tests/unit/console-activity-lessons.test.mjs", "tests/unit/lesson-gate.test.mjs", "tests/unit/ruflo-memory-session.test.mjs"]
+      }
     }
   ],
   "integration": [
@@ -358,10 +402,11 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
     },
     {
       "id": "installed-routing-and-hook-trust",
-      "reason": "Actual installer update converges managed routing while preserving private overrides; POSIX archive and native metadata subprocess probes bind authorized hook trust to verified released bytes and preserve concurrent or disabled owner state",
+      "reason": "Actual installer update converges managed routing while preserving private overrides; POSIX archive and native metadata subprocess probes bind authorized hook trust to verified released bytes and preserve concurrent or disabled owner state; a running shared Codex app-server is reloaded after a plugin or trust change without granting approval (#492)",
       "files": [
         "tests/unit/model-router-update-convergence.test.mjs",
-        "tests/unit/codex-hook-trust-reconcile.test.mjs"
+        "tests/unit/codex-hook-trust-reconcile.test.mjs",
+        "tests/unit/codex-shared-host-refresh.test.mjs"
       ]
     },
     {
@@ -405,6 +450,15 @@ export const RELEASE_REQUIREMENTS = Object.freeze({
       "reason": "POSIX non-root permission refusal, capacity-pressure reporting and recovery preserve all accepted pending continuity events",
       "files": [
       ]
+    },
+    {
+      "id": "open-issue-fixes-4-7-22-integration",
+      "reason": "A named release over an existing install moves, skips truthfully or warns on a downgrade instead of reporting a false lookup failure; the Ruflo memory hooks honour the absolute deadline and abort, kill the whole child process group, and never report a refused or partly unreadable restore as restored",
+      "files": [],
+      "platformFiles": {
+        "linux": ["tests/integration/stale-install-trap.test.mjs", "tests/integration/ruflo-memory-hooks.test.mjs"],
+        "macos": ["tests/integration/stale-install-trap.test.mjs", "tests/integration/ruflo-memory-hooks.test.mjs"]
+      }
     }
   ]
 });

package/scripts/release-qualification.mjs

@@ -7,6 +7,7 @@ import { fileURLToPath } from 'node:url';
 import { digest } from './coverage-integrity.mjs';
 import { sourceIdentity } from './qa-contract.mjs';
 import { RELEASE_REQUIREMENTS } from './release-qualification-contract.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const PLATFORM = { linux: 'linux', darwin: 'macos', win32: 'windows' }[process.platform];
@@ -124,6 +125,12 @@ export function runQualification({ suite = 'source', platform = PLATFORM, report
   }
   const sourceAfter = sourceIdentity(root);
   const sourceStable = source.digest === sourceAfter.digest;
+  if (!sourceStable && !failure) {
+    // Name what the run changed: "source changed" with no file is undiagnosable on a runner we cannot open.
+    const git = (args) => spawnSync('git', args, { cwd: root, encoding: 'utf8' }).stdout.split('\n').filter(Boolean);
+    const changed = [...git(['ls-files', '--others', '--exclude-standard']), ...git(['diff', '--name-only'])].slice(0, 20);
+    failure = `qualification changed the checkout: ${changed.join(', ') || 'unknown files'}`;
+  }
   const receipt = { schemaVersion: 1, kind: 'ruvnet-brain-release-qualification', suite, platform, checkoutRoot: path.resolve(root),
     source, sourceAfter, sourceStable, status: !failure && sourceStable ? 'PASS' : 'FAIL',
     requirements: plan.requirements.map((entry) => entry.id), contractSha256: plan.contractSha256,
@@ -135,7 +142,7 @@ export function runQualification({ suite = 'source', platform = PLATFORM, report
   return receipt;
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (isDirectInvocation(import.meta.url)) {
   const args = process.argv.slice(2);
   const value = (flag, fallback) => { const i = args.indexOf(flag); return i < 0 ? fallback : args[i + 1]; };
   try {

package/scripts/release-vector.mjs

@@ -22,6 +22,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';
 import { performance } from 'node:perf_hooks';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 export const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 
@@ -319,7 +320,7 @@ export function formatVectorOutput(result, { json = false } = {}) {
   return `${lines.join('\n')}\n`;
 }
 
-if (process.argv[1] && fileURLToPath(import.meta.url) === path.resolve(process.argv[1])) {
+if (isDirectInvocation(import.meta.url)) {
   const timings = process.argv.includes('--timings');
   const emitTiming = (phase, data) => process.stderr.write(`${JSON.stringify({
     schema: 'ruvnet-brain.release-vector.timing', phase, ...data,

package/scripts/restore-local-ingests.mjs

@@ -43,6 +43,7 @@ import path from 'node:path';
 import { execFileSync } from 'node:child_process';
 import { fileURLToPath } from 'node:url';
 import { storeRoot, storesAt, rootNeverMaterialized } from '../kb/store-root.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.dirname(path.dirname(fileURLToPath(import.meta.url)));
 const LEDGER = path.join(ROOT, 'kb', 'local-ingests.json');
@@ -76,7 +77,7 @@ export function classify({ ledgerFile = LEDGER, root = storeRoot() } = {}) {
 }
 
 const isMain = (() => {
-  try { return process.argv[1] && fs.realpathSync(process.argv[1]) === fileURLToPath(import.meta.url); }
+  try { return isDirectInvocation(import.meta.url); }
   catch { return false; }
 })();
 

package/scripts/retrieval-canary.mjs

@@ -8,6 +8,7 @@ import { fileURLToPath } from 'node:url';
 import { canonicalJson, digest, eligibleRepositoryStanding, validateCoverageLedger } from './coverage-integrity.mjs';
 import { fixtureDenominator } from './fixture-denominator.mjs';
 import { passageMatches } from './retrieval-passage-identity.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 // Both release phases resolve against an explicit installed context, never the checkout.
 export async function resolveInstalledCanaryCitation({ kbDir, matched, expected, passageFileDigests = new Map(), contentMap }) {
@@ -740,7 +741,7 @@ export function auditOracleCoverageFromFiles({ coverageFile, oracleFile, exempti
   return { ...inventory, oracleSourceCommit: queryEvidence.sourceCommit, strictAncestor };
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (isDirectInvocation(import.meta.url)) {
   try {
     const argv = process.argv.slice(2);
     if (argv.includes('--audit')) {

package/scripts/route-cheap.mjs

@@ -28,6 +28,7 @@ import os from 'node:os';
 import { spawnSync } from 'node:child_process';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { loadRuntimePreferences, runtimeChildEnv } from '../plugin/scripts/runtime-preferences.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const __dirname = path.dirname(fileURLToPath(import.meta.url));
 
@@ -207,4 +208,4 @@ function main() {
   console.log(receiptLine(args.model, costs));
 }
 
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) main();
+if (isDirectInvocation(import.meta.url)) main();

package/scripts/route-gold-rank.mjs

@@ -29,6 +29,7 @@ import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { wilson, repoMatchesExpected } from './eval-brain.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 
@@ -151,6 +152,6 @@ async function main() {
   console.log(JSON.stringify(brief, null, 1));
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (isDirectInvocation(import.meta.url)) {
   await main();
 }

package/scripts/route-index-memory.mjs

@@ -13,6 +13,7 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 const arg = (name) => { const i = process.argv.indexOf(name); return i >= 0 ? process.argv[i + 1] : undefined; };
@@ -48,4 +49,4 @@ async function main() {
   console.log(JSON.stringify({ impl: rel.startsWith('..') ? '<impl>' : rel, kbBuild, stores: repos.length, coldMs, warmMs, retained: retained(before, after) }));
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) await main();
+if (isDirectInvocation(import.meta.url)) await main();

package/scripts/route-latency-warm.mjs

@@ -22,6 +22,7 @@ import fs from 'node:fs';
 import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath, pathToFileURL } from 'node:url';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 export const percentile = (xs, p) => {
   const s = [...xs].sort((a, b) => a - b);
@@ -120,4 +121,4 @@ async function main() {
   process.exit(0);
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) await main();
+if (isDirectInvocation(import.meta.url)) await main();

package/scripts/router-utilization.mjs

@@ -179,4 +179,5 @@ export function mainUtil() {
 
 import { fileURLToPath } from 'node:url';
 import path from 'node:path';
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) mainUtil();
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
+if (isDirectInvocation(import.meta.url)) mainUtil();

package/scripts/routing-flywheel.mjs

@@ -55,6 +55,7 @@ import {
 import { effectivePrices, loadLabelledRows, OUTCOMES } from './metaharness-router.mjs';
 import { assertEvolutionAllowed } from './metaharness-gate.mjs';
 import { loadCatalog, applyProfile, loadProfile } from './model-router-engine.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 // ─── HARD CAPS — the self-DDoS fence. Clamped, never raised by flags. ─────────────────────────────
 export const HARD_MAX_GENERATIONS = 6;
@@ -599,7 +600,7 @@ async function main() {
   }
 }
 
-if (process.argv[1] && import.meta.url === pathToFileURL(process.argv[1]).href) {
+if (isDirectInvocation(import.meta.url)) {
   main().catch((e) => {
     process.stderr.write(`routing-flywheel: ${e.stack || e.message}\n`);
     process.exit(1);

package/scripts/run-operational-benchmark.mjs

@@ -14,6 +14,7 @@ import {
   latencyDistribution,
   verifyFixtureSourceSupport,
 } from '../evals/operational-benchmark.v2.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const execFileAsync = promisify(execFile);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
@@ -146,6 +147,6 @@ async function main() {
   if (report.passed !== report.total || report.unavailable.length) process.exitCode = 1;
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (isDirectInvocation(import.meta.url)) {
   main().catch((error) => { console.error(error.stack || error.message); process.exitCode = 2; });
 }

package/scripts/run-operational-benchmark.v3.mjs

@@ -16,6 +16,7 @@ import {
   preflightOperationalOracle,
 } from '../evals/operational-benchmark.v3.mjs';
 import { verifyGrounding as evaluatorVerifyGrounding } from '../kb/verify-citation.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const execFileAsync = promisify(execFile);
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
@@ -189,6 +190,6 @@ async function main() {
   if (!report.qualificationPass) process.exitCode = 1;
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (isDirectInvocation(import.meta.url)) {
   main().catch((error) => { console.error(error.stack || error.message); process.exitCode = 2; });
 }

package/scripts/rvf-index-audit.mjs

@@ -37,6 +37,7 @@ import {
   writeRvfGeneration,
 } from './rvf-generation.mjs';
 import { metricFromId, readRvfStoredVectors } from './rvf-wire.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const ROOT = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..');
 export const RVF_HNSW_THRESHOLD = 1024;
@@ -675,22 +676,7 @@ async function main() {
   if (failed.length) process.exitCode = 1;
 }
 
-// Entry-point guard. Compares REALPATHS on both sides: path.resolve() normalizes a path but does
-// NOT follow symlinks, while import.meta.url IS symlink-resolved by Node. Through a symlink (npm bin
-// shims, wrapper scripts, and every os.tmpdir() path on macOS) the two sides disagree, so main()
-// never runs -- and because nothing throws, the process exits 0. A silent exit 0 is indistinguishable
-// from "ran, found nothing", which is how prepareCorpusCandidate once reported SUCCESS with no
-// archive on disk. Reproduced live 2026-07-27; pinned by tests/unit/entrypoint-symlink.test.mjs.
-function isDirectInvocation() {
-  try {
-    if (!process.argv[1]) return false;
-    return fs.realpathSync(process.argv[1]) === fs.realpathSync(fileURLToPath(import.meta.url));
-  } catch {
-    return false;
-  }
-}
-
-if (isDirectInvocation()) {
+if (isDirectInvocation(import.meta.url)) {
   main().catch((error) => {
     console.error(error.stack || error.message);
     process.exitCode = 1;

package/scripts/seal-gist-receipt.mjs

@@ -13,6 +13,7 @@ import fs from 'node:fs';
 import { fileURLToPath } from 'node:url';
 import { observeSourceUniverse } from './source-coverage.mjs';
 import { buildGistAggregate } from './gist-receipts.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 export const REPO_KB = path.join(path.dirname(fileURLToPath(import.meta.url)), '..', 'kb');
 
@@ -57,7 +58,7 @@ async function main(argv = process.argv.slice(2)) {
   return 0;
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (isDirectInvocation(import.meta.url)) {
   main().then((code) => { process.exitCode = code; }).catch((error) => {
     console.error(`[seal-gist-receipt] ${error.message}`);
     process.exitCode = 1;

package/scripts/security-guidance-codex-compat.mjs

@@ -14,6 +14,7 @@ import path from 'node:path';
 import os from 'node:os';
 import crypto from 'node:crypto';
 import { fileURLToPath } from 'node:url';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 export const COMPATIBILITY = Object.freeze({
   version: '2.0.9', nativeContract: 'Codex 0.160.0 PostToolUse',
@@ -128,7 +129,7 @@ export function repairSecurityGuidance({ codexHome = process.env.CODEX_HOME || p
   return { ...receipt, status: 'patched', backup, patchedSha256: sha256(readRegular(target).bytes) };
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (isDirectInvocation(import.meta.url)) {
   try {
     const args = process.argv.slice(2);
     let codexHome; let apply = false;

package/scripts/selfcheck.mjs

@@ -67,6 +67,7 @@ import { fileURLToPath } from 'node:url';
 // THE canonical continuity policy — the same module bin/install.mjs and scripts/hook-retirement-check.mjs
 // import. Never re-implement this predicate locally; see the note below the imports.
 import { isAllowedContinuityRegistration } from '../plugin/scripts/continuity-hook-policy.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 // ── contract constants (ADR-053 §2.5 / §2.3) ────────────────────────────────────────────────────
 export const STDOUT_CAP_BYTES = 4096; // it lands in the user's context window
@@ -739,7 +740,7 @@ export function formatVerdict(result, { color = null } = {}) {
 }
 
 // ── CLI ─────────────────────────────────────────────────────────────────────────────────────────
-if (process.argv[1] && (() => { try { return fs.realpathSync(process.argv[1]) === fs.realpathSync(fileURLToPath(import.meta.url)); } catch { return false; } })()) {
+if (isDirectInvocation(import.meta.url)) {
   const noSecurity = process.argv.includes('--no-security');
   const json = process.argv.includes('--json');
   const result = await selfCheck({ security: !noSecurity });

package/scripts/signal-watch.mjs

@@ -47,6 +47,7 @@ import os from 'node:os';
 import { spawnSync } from 'node:child_process';
 import { fileURLToPath, pathToFileURL } from 'node:url';
 import { assessCiGate } from './ci-verdict.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const BRAIN_HOME = process.env.RUVNET_BRAIN_HOME || path.join(os.homedir(), '.cache', 'ruvnet-brain');
 const SIGNAL_DIR = process.env.RUVNET_SIGNAL_DIR || path.join(BRAIN_HOME, 'external-signals');
@@ -164,7 +165,7 @@ function main() {
 }
 
 function isMain() {
-  try { return process.argv[1] && import.meta.url === pathToFileURL(path.resolve(process.argv[1])).href; }
+  try { return isDirectInvocation(import.meta.url); }
   catch { return false; }
 }
 

package/scripts/source-coverage.mjs

@@ -10,6 +10,7 @@ import { canonicalJson, coverageGenerationFor, digest, validateGistAggregateRece
 import { repositoryNames } from '../kb/card-lane.mjs';
 import { rootNeverMaterialized, storeRoot } from '../kb/store-root.mjs';
 import { isTransientText, retryTransient, sleepSync } from './transient-gh.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 export { canonicalJson, digest } from './coverage-integrity.mjs';
 
@@ -759,6 +760,6 @@ export async function main(argv = process.argv.slice(2)) {
   return 0;
 }
 
-if (process.argv[1] && path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)) {
+if (isDirectInvocation(import.meta.url)) {
   process.exitCode = await main();
 }

package/scripts/stabilization-receipt.mjs

@@ -8,6 +8,7 @@ import path from 'node:path';
 import { spawnSync } from 'node:child_process';
 import { pathToFileURL } from 'node:url';
 import { evaluateStabilizationCandidateReceipt } from './release-proof.mjs';
+import { isDirectInvocation } from '../plugin/scripts/entrypoint.mjs';
 
 const readJson = (file) => JSON.parse(fs.readFileSync(file, 'utf8'));
 const sha256 = (file) => crypto.createHash('sha256').update(fs.readFileSync(file)).digest('hex');
@@ -115,4 +116,4 @@ export function main(args = process.argv.slice(2)) {
   }
 }
 
-if (process.argv[1] && pathToFileURL(path.resolve(process.argv[1])).href === import.meta.url) process.exitCode = main();
+if (isDirectInvocation(import.meta.url)) process.exitCode = main();