fix(devx): give check-release-page-status.mjs a main() so its verdict stops running inside importers

The file exports eleven predicates, and check-release-section-coverage.mjs is a
real reader of that surface — it inherits this gate's scope floor and pins the
two equal in its own self-test. Unguarded, importing any one of those predicates
ran the entire release-page gate and printed its verdict, so a caller's output
carried another gate's OK line above its own.

The run block becomes main(); it and the self-test dispatch now sit behind
isEntrypoint(import.meta.url).

Byte-for-byte against the pristine base tree on both paths, plus both paths of
check-release-section-coverage.mjs — the sibling that reads this module — all
cmp-clean on stdout, stderr and exit code. Import probe with clean argv: sentinel
only, empty stderr, exit 0. check:entry-guard named it STALE first; ledger 8 -> 7.

Author: claude

scripts/check-entry-guard.mjs

@@ -462,7 +462,6 @@ const KNOWN_IMPORT_UNSAFE = new Set([
   'scripts/check-empty-changeset.mjs',
   'scripts/check-error-status-conformance.mjs',
   'scripts/check-query-options-erasure-ratchet.mjs',
-  'scripts/check-release-page-status.mjs',
   'scripts/objectui-range.mjs',
   'scripts/qa/qa-rollup.mjs',
   'scripts/ts-parse.mjs',

scripts/check-release-page-status.mjs

@@ -99,6 +99,7 @@
 // shipped, and the two corrected ones that replaced them.
 import { execFileSync } from 'node:child_process';
 import { readFileSync, existsSync } from 'node:fs';
+import { isEntrypoint } from './invoked-as.mjs';
 
 const SPEC_CHANGELOG = 'packages/spec/CHANGELOG.md';
 const SPEC_PKG = 'packages/spec/package.json';
@@ -837,51 +838,61 @@ function renderOk(checked, tagCorroborations) {
 
 // ── Run ──────────────────────────────────────────────────────────────────────
 
-if (process.argv.includes('--self-test')) selfTest();
+function main() {
 
-const changelogText = readFileSync(SPEC_CHANGELOG, 'utf8');
-const gaMajorList = gaMajors(changelogText);
-const specVersion = JSON.parse(readFileSync(SPEC_PKG, 'utf8')).version;
-const tagMajorList = readGaTagMajors();
+  const changelogText = readFileSync(SPEC_CHANGELOG, 'utf8');
+  const gaMajorList = gaMajors(changelogText);
+  const specVersion = JSON.parse(readFileSync(SPEC_PKG, 'utf8')).version;
+  const tagMajorList = readGaTagMajors();
 
-const problems = instrumentProblems({ gaMajorList, specVersion, tagMajorList });
+  const problems = instrumentProblems({ gaMajorList, specVersion, tagMajorList });
 
-const checked = gaMajorList.filter(inScope);
-if (problems.length === 0 && checked.length === 0) {
-  problems.push(
-    `no GA major at or above v${SCOPE_FLOOR_MAJOR} was found in ${SPEC_CHANGELOG}, so this gate `
-    + 'checked ZERO pages. v16 and v17 have both shipped and majors only go up, so this cannot be a '
-    + 'true reading — a gate that silently checks nothing is worse than no gate. Fix the parse.',
-  );
-}
-
-if (problems.length === 0) {
-  const indexText = existsSync(INDEX_PATH) ? readFileSync(INDEX_PATH, 'utf8') : null;
-  if (indexText === null) {
-    problems.push(`${INDEX_PATH} is missing — there is no releases index to check entries against.`);
+  const checked = gaMajorList.filter(inScope);
+  if (problems.length === 0 && checked.length === 0) {
+    problems.push(
+      `no GA major at or above v${SCOPE_FLOOR_MAJOR} was found in ${SPEC_CHANGELOG}, so this gate `
+      + 'checked ZERO pages. v16 and v17 have both shipped and majors only go up, so this cannot be a '
+      + 'true reading — a gate that silently checks nothing is worse than no gate. Fix the parse.',
+    );
   }
-  for (const major of checked) {
-    const pagePath = `${RELEASES_DIR}/v${major}.mdx`;
-    if (!existsSync(pagePath)) {
+
+  if (problems.length === 0) {
+    const indexText = existsSync(INDEX_PATH) ? readFileSync(INDEX_PATH, 'utf8') : null;
+    if (indexText === null) {
+      problems.push(`${INDEX_PATH} is missing — there is no releases index to check entries against.`);
+    }
+    for (const major of checked) {
+      const pagePath = `${RELEASES_DIR}/v${major}.mdx`;
+      if (!existsSync(pagePath)) {
+        problems.push(
+          `${pagePath} is missing — @objectstack/spec ${major}.x is GA but there is no release page to `
+          + 'check. (check:release-notes is the gate that owns page existence; this one owns what the '
+          + 'page SAYS.)',
+        );
+        continue;
+      }
       problems.push(
-        `${pagePath} is missing — @objectstack/spec ${major}.x is GA but there is no release page to `
-        + 'check. (check:release-notes is the gate that owns page existence; this one owns what the '
-        + 'page SAYS.)',
+        ...pageStatusProblems(major, pagePath, statusBlockquote(readFileSync(pagePath, 'utf8'))),
       );
-      continue;
-    }
-    problems.push(
-      ...pageStatusProblems(major, pagePath, statusBlockquote(readFileSync(pagePath, 'utf8'))),
-    );
-    if (indexText !== null) {
-      problems.push(...indexStatusProblems(major, indexEntryLine(indexText, major)));
+      if (indexText !== null) {
+        problems.push(...indexStatusProblems(major, indexEntryLine(indexText, major)));
+      }
     }
   }
-}
 
-if (problems.length > 0) {
-  console.error(renderFailure(problems));
-  process.exit(1);
+  if (problems.length > 0) {
+    console.error(renderFailure(problems));
+    process.exit(1);
+  }
+
+  console.log(renderOk(checked, tagMajorList.filter(inScope).length));
 }
 
-console.log(renderOk(checked, tagMajorList.filter(inScope).length));
+// Guarded: this module exports its predicates (`gaMajors`, `pageStatusProblems`,
+// `indexStatusProblems` — check-release-section-coverage.mjs inherits the same
+// scope floor from it), and unguarded the whole gate ran inside any importer,
+// printing its verdict over theirs.
+if (isEntrypoint(import.meta.url)) {
+  if (process.argv.includes('--self-test')) selfTest();
+  main();
+}