agentsmd-lint-argv

name	agentsmd-lint-argv
description	Detect silent-fallback argv parsing in agentsmd bin/ and scripts/. Use when adding or reviewing a CLI flag/parser. Not for runtime hook command parsing or general linting; static read-only gate.

agentsmd-lint-argv

Resolve the script root first. Set SKILL_MD to the selected SKILL.md absolute path from the live skills list; never infer it from the process cwd.

SKILL_MD="<selected SKILL.md absolute path from the live skills list>"
CANDIDATE_ROOT="$(cd "$(dirname "$SKILL_MD")/../.." && pwd)"
if [ -f "$CANDIDATE_ROOT/scripts/lint-argv.js" ]; then AGENTSMD_ROOT="$CANDIDATE_ROOT"; else AGENTSMD_ROOT="${CODEX_HOME:-$HOME/.codex}/agentsmd"; fi

The bug class: a CLI that reads a flag with args.includes('--x') or args[args.indexOf('--x')+1] silently ignores a mis-shaped flag (--days 30 instead of --days=30) or a bare value flag that swallows the next token — the failure is invisible, the wrong default wins. This gate locks it out:

node "$AGENTSMD_ROOT/scripts/lint-argv.js"
node "$AGENTSMD_ROOT/scripts/lint-argv.js" --json

• Antipattern scan — .includes('-- / .find(a=>a.startsWith('--')) / .indexOf('-- on a code line. Suppress a deliberate one with an inline // argv-lint:allow.
• Main-block scan — a require.main === module block that never calls a real parser (parseStrict / parseArgs / parseDaysArg / parseNoArgs / printHelpAndExit) → a new CLI can't silently skip arg validation. No-arg CLIs (install / uninstall) are allowlisted.
• 0 hits + exit 0 = clean; a hit → exit 1 naming file:line [pattern]. Fix: parse through scripts/lib/argv.js (parseStrict demands --key=value, rejects unknown flags loudly; parsePositiveInt rejects the Number()/parseInt coercion footguns).

Wired into npm test as a regression gate — a CLI that reintroduces the antipattern fails CI. From the repo instead of an install: node scripts/lint-argv.js.