npm - @rubytech/create-maxy-code - Versions diffs - 0.1.568 → 0.1.569 - Mend

@rubytech/create-maxy-code 0.1.568 → 0.1.569

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (37) hide show

package/payload/platform/plugins/admin/hooks/__tests__/quote-render-pdf-conformance.test.sh CHANGED Viewed

@@ -17,6 +17,18 @@
 #   G. empty stdin                                    → ALLOWED (fail-open)
 #   H. non-browser tool                               → ALLOWED (matcher defence-in-depth)
 #   I. a block emits the op=bypass fault line
+#
+# Per-physical-page running-header conformance (receipt-free, so it also covers
+# template-seeded documents that never pass through the quote renderer):
+#   J. header text on every checked physical page     → ALLOWED
+#   K. one physical page without it (a bleed page)    → BLOCKED
+#   L. source HTML declares no running header         → ALLOWED (never gated)
+#   M. no receipt and no sibling HTML                 → ALLOWED (fail-open)
+#   N. single-page document under @page :first        → ALLOWED (nothing to check)
+#   O. a clean run logs pagesChecked / pagesHeaderless
+#   P. a block names the headerless page numbers
+#   Q. a running footer repeating the ref does NOT count as a header
+#   R. @page :first declared before @page still yields the marker
 set -u
@@ -47,6 +59,42 @@ mk_job() { # jobId, html_body, pdf_uri_repeat
     > "$DOCS/quote-$job.pdf"
 }
+# A minimal, uncompressed, multi-page PDF. Each page argument is
+# "<top line>|<bottom line>"; the bottom line is optional and stands in for a
+# running footer. The /URI stubs above are not readable by pdftotext, and the
+# header check needs real per-page text at real positions, so the header
+# fixtures need a genuine PDF. Pure stdlib — no third-party generator, no
+# network, deterministic byte-for-byte.
+mk_pdf() { # out_path, then one "top|bottom" argument per page
+  local out="$1"; shift
+  python3 - "$out" "$@" <<'PY'
+import sys
+out, texts = sys.argv[1], sys.argv[2:]
+objs = []
+kids = " ".join("%d 0 R" % (4 + 2 * i) for i in range(len(texts)))
+objs.append("<< /Type /Catalog /Pages 2 0 R >>")
+objs.append("<< /Type /Pages /Kids [%s] /Count %d >>" % (kids, len(texts)))
+objs.append("<< /Type /Font /Subtype /Type1 /BaseFont /Helvetica >>")
+for i, t in enumerate(texts):
+    top, _, bottom = t.partition("|")
+    body = "BT /F1 11 Tf 72 760 Td (%s) Tj ET" % top
+    if bottom:
+        body += " BT /F1 8 Tf 72 40 Td (%s) Tj ET" % bottom
+    objs.append("<< /Type /Page /Parent 2 0 R /MediaBox [0 0 595 842] "
+                "/Resources << /Font << /F1 3 0 R >> >> /Contents %d 0 R >>" % (5 + 2 * i))
+    objs.append("<< /Length %d >>\nstream\n%s\nendstream" % (len(body), body))
+pdf, offsets = "%PDF-1.4\n", []
+for i, o in enumerate(objs, start=1):
+    offsets.append(len(pdf))
+    pdf += "%d 0 obj\n%s\nendobj\n" % (i, o)
+start = len(pdf)
+pdf += "xref\n0 %d\n0000000000 65535 f \n" % (len(objs) + 1)
+pdf += "".join("%010d 00000 n \n" % off for off in offsets)
+pdf += "trailer\n<< /Size %d /Root 1 0 R >>\nstartxref\n%d\n%%%%EOF\n" % (len(objs) + 1, start)
+open(out, "wb").write(pdf.encode("latin-1"))
+PY
+}
 # C: no absolute links, PDF has none → allow.
 mk_job "clean" '<html><body><a href="#top">top</a><p>no links</p></body></html>' 0
 # D: two https links, PDF dropped them (0 /URI) → block on count.
@@ -94,6 +142,72 @@ else
   echo "FAIL: I: op=bypass line absent (got: $STDERR)" >&2; FAIL=$((FAIL + 1))
 fi
+# ---- per-physical-page running-header conformance ----
+# A source document that declares its running header in @page top margin boxes,
+# with @page :first blanking them so page 1 keeps its own masthead.
+HDR_CSS='<style>@page{@top-left{content:url("data:image/png;base64,AA");}@top-center{content:"Quote 2468/1";}}@page :first{@top-center{content:"";}}</style>'
+NOHDR_CSS='<style>@page{@bottom-center{content:"footer only";}}</style>'
+mk_doc() { # basename, css, then one text line per physical page
+  local base="$1" css="$2"; shift 2
+  printf '<html><head>%s</head><body>doc</body></html>' "$css" > "$DOCS/$base.html"
+  mk_pdf "$DOCS/$base.pdf" "$@"
+}
+mk_doc "hdr-ok"     "$HDR_CSS"   "cover masthead" "Quote 2468/1 body two" "Quote 2468/1 body three"
+mk_doc "hdr-bleed"  "$HDR_CSS"   "cover masthead" "Quote 2468/1 body two" "orphaned bleed content"
+mk_doc "hdr-none"   "$NOHDR_CSS" "page one" "page two"
+mk_doc "hdr-single" "$HDR_CSS"   "cover only"
+mk_pdf "$DOCS/hdr-orphan.pdf" "page one" "page two"
+# R: the same document with @page :first declared BEFORE @page. CSS does not fix
+# the order of the two rules, and the suppression rule declares the same boxes
+# with empty content, so reading only the first declaration of a box would report
+# "no running header" and skip the check entirely.
+FIRST_LAST_CSS='<style>@page :first{@top-center{content:"";}}@page{@top-left{content:url("data:image/png;base64,AA");}@top-center{content:"Quote 2468/1";}}</style>'
+mk_doc "hdr-first-declared-first" "$FIRST_LAST_CSS" \
+  "cover masthead" "Quote 2468/1 body two" "orphaned bleed content"
+# Q: the footer repeats the header's reference on every page, and page 3 has no
+# header. A whole-page text match reports this document clean — measured on a
+# real 10-page print, where page 1 matched on its footer alone. The check must
+# look at the top band of the page, so this document is still blocked.
+mk_doc "hdr-footer-decoy" "$HDR_CSS" \
+  "cover masthead|GLS Ltd . Est 1987 . Quote 2468/1" \
+  "Quote 2468/1 body two|GLS Ltd . Est 1987 . Quote 2468/1" \
+  "orphaned bleed content|GLS Ltd . Est 1987 . Quote 2468/1"
+run_case "J: header on every checked physical page → ALLOWED" \
+  "$(envelope "$BROWSER" "$DOCS/hdr-ok.pdf")" 0
+run_case "K: a physical page with no header → BLOCKED" \
+  "$(envelope "$BROWSER" "$DOCS/hdr-bleed.pdf")" 2
+run_case "L: document declares no running header → ALLOWED" \
+  "$(envelope "$BROWSER" "$DOCS/hdr-none.pdf")" 0
+run_case "M: no receipt and no sibling HTML → ALLOWED" \
+  "$(envelope "$BROWSER" "$DOCS/hdr-orphan.pdf")" 0
+run_case "N: single-page document → ALLOWED" \
+  "$(envelope "$BROWSER" "$DOCS/hdr-single.pdf")" 0
+run_case "Q: footer repeats the ref, page 3 headerless → BLOCKED" \
+  "$(envelope "$BROWSER" "$DOCS/hdr-footer-decoy.pdf")" 2
+run_case "R: @page :first declared first, page 3 headerless → BLOCKED" \
+  "$(envelope "$BROWSER" "$DOCS/hdr-first-declared-first.pdf")" 2
+# O: a clean run is distinguishable from a check that never ran.
+STDERR=$( cd "$ACCT" && printf '%s' "$(envelope "$BROWSER" "$DOCS/hdr-ok.pdf")" | bash "$HOOK" 2>&1 >/dev/null )
+if printf '%s' "$STDERR" | grep -q 'op=pdf-header-conformance .*pagesChecked=2 pagesHeaderless=0'; then
+  echo "PASS: O: clean run logs pagesChecked=2 pagesHeaderless=0"; PASS=$((PASS + 1))
+else
+  echo "FAIL: O: conformance line absent or wrong (got: $STDERR)" >&2; FAIL=$((FAIL + 1))
+fi
+# P: a block names the offending physical page.
+STDERR=$( cd "$ACCT" && printf '%s' "$(envelope "$BROWSER" "$DOCS/hdr-bleed.pdf")" | bash "$HOOK" 2>&1 >/dev/null )
+if printf '%s' "$STDERR" | grep -q 'reason=pdf-header-conformance detail=pagesHeaderless=1 pages=3'; then
+  echo "PASS: P: block names the headerless page"; PASS=$((PASS + 1))
+else
+  echo "FAIL: P: block detail wrong (got: $STDERR)" >&2; FAIL=$((FAIL + 1))
+fi
 echo "──────── quote-render-pdf-conformance test summary ────────"
 echo "PASS=$PASS FAIL=$FAIL"
 [[ "$FAIL" -eq 0 ]]

package/payload/platform/plugins/admin/hooks/quote-path-write-gate.sh ADDED Viewed

@@ -0,0 +1,137 @@
+#!/usr/bin/env bash
+# quote-path-write-gate — PreToolUse gate on Write / Edit / MultiEdit.
+#
+# The client quote document has one owner, and that ownership is a capability:
+# the quote-render tool is granted to the quoter's card and to no other, so no
+# other agent can produce a receipt-bearing quote by any route. This gate
+# expresses the same rule at the write, refusing an agent that does not hold
+# quote-render from authoring a quote artefact or the account's quote
+# templates. It leaves untouched every other deliverable that agent owns —
+# works orders, heritage statements, survey sheets, drawing registers,
+# trial-pit records, invoice stamps.
+#
+# Scope: jobs/<jobId>/quote/, jobs/<jobId>/Quotations/, quoting/templates/.
+# jobs/<jobId>/pricing/ is excluded — the internal priced breakdown is not a
+# client quote artefact.
+#
+# Caller identity is `agent_type` from the hook envelope, which Claude Code
+# sets when a hook fires inside a subagent. The MAXY_SPECIALIST env is not
+# usable here: it is stamped only when a specialist is spawned as its own PTY
+# process, and the dispatches this gate exists to stop were native Agent-tool
+# subagents that inherit the admin process env, so it reads empty for them.
+#
+# Card lookup spans BOTH registration families. Bundled specialists reach a
+# session through the per-account registry; premium-bundle agents register
+# through plugin manifests and are never written to that registry, so a lookup
+# that skipped the premium root would block the quoter itself. Cards are
+# matched on frontmatter `name:` as well as filename, because the quoter's card
+# is filed as sitedesk--quoter.md and declares `name: quoter`.
+#
+# A write from the main conversation carries no agent_type and the admin seat
+# holds no quote-render, so it is refused: no part of a client quote document
+# is another agent's work, the admin's included.
+#
+# Exit codes: 0 = allow, 2 = block (stderr shown to the agent). Fail OPEN on an
+# uninspectable envelope. No task numbers or internal refs in operator-visible
+# text.
+set -uo pipefail
+# No envelope (tty or empty stdin) → allow: cannot inspect, must not brick writes.
+if [ -t 0 ]; then exit 0; fi
+INPUT=$(cat)
+[ -z "$INPUT" ] && exit 0
+DECISION=$(INPUT="$INPUT" python3 - <<'PY' 2>/dev/null || true
+import os, json, re, sys, glob
+try:
+    d = json.loads(os.environ["INPUT"])
+except Exception:
+    sys.exit(0)
+if (d.get("tool_name", "") or "") not in ("Write", "Edit", "MultiEdit"):
+    sys.exit(0)
+ti = d.get("tool_input", {}) or {}
+target = ti.get("file_path") or ti.get("path") or ""
+if not target:
+    sys.exit(0)
+norm = os.path.normpath(target)
+in_scope = bool(
+    re.search(r'(?:^|/)jobs/[^/]+/(?:quote|Quotations)/', norm)
+    or re.search(r'(?:^|/)quoting/templates/', norm)
+)
+if not in_scope:
+    sys.exit(0)
+agent = (d.get("agent_type") or "").strip()
+if not agent:
+    print("quote-path-write-without-render-tool")
+    sys.exit(0)
+name = agent.split(":")[-1]
+roots = [
+    os.path.join(os.getcwd(), ".claude", "agents"),
+    os.path.join(os.getcwd(), "specialists", "agents"),
+]
+ccd = os.environ.get("CLAUDE_CONFIG_DIR", "")
+if ccd:
+    roots.append(os.path.join(ccd, "agents"))
+pr = os.environ.get("PLATFORM_ROOT", "")
+if pr:
+    roots.extend(sorted(glob.glob(os.path.join(os.path.dirname(pr), "premium-plugins", "*", "agents"))))
+    roots.extend(sorted(glob.glob(os.path.join(pr, "plugins", "*", "agents"))))
+def card_fields(path):
+    """(name, tools) from a card frontmatter block, or None when there is none."""
+    try:
+        with open(path, encoding="utf-8") as fh:
+            lines = fh.read().split("\n")
+    except Exception:
+        return None
+    if not lines or lines[0].strip() != "---":
+        return None
+    cname = ctools = None
+    for line in lines[1:]:
+        if line.strip() == "---":
+            break
+        m = re.match(r'^name:\s*(.+?)\s*$', line)
+        if m:
+            cname = m.group(1).strip().strip("\x22").strip("\x27")
+        m = re.match(r'^tools:\s*(.+?)\s*$', line)
+        if m:
+            ctools = m.group(1)
+    return (cname, ctools)
+tools = None
+for root in roots:
+    if not os.path.isdir(root):
+        continue
+    for f in sorted(glob.glob(os.path.join(root, "*.md"))):
+        fields = card_fields(f)
+        if not fields:
+            continue
+        cname, ctools = fields
+        if cname == name or os.path.basename(f)[:-3] == name:
+            tools = ctools or ""
+            break
+    if tools is not None:
+        break
+if tools is None:
+    print("quote-path-write-unresolved-agent")
+    sys.exit(0)
+# Match the tool itself, not a substring of a longer name.
+if any(t.strip().endswith("quote-render") for t in tools.split(",")):
+    sys.exit(0)
+print("quote-path-write-without-render-tool")
+PY
+)
+[ -z "$DECISION" ] && exit 0
+echo "[quote-render] op=bypass reason=$DECISION" >&2
+echo "Blocked: quote documents and quote templates are the quoter's work. Dispatch the quoter for this change; it produces the document through the quote-render tool, which files it with its render receipt." >&2
+exit 2

package/payload/platform/plugins/admin/hooks/quote-pdf-bash-gate.sh ADDED Viewed

@@ -0,0 +1,70 @@
+#!/usr/bin/env bash
+# quote-pdf-bash-gate — PreToolUse gate on Bash.
+#
+# quote-render-gate refuses a hand-authored client quote at browser-pdf-save.
+# An agent holding Bash reaches the same outcome with any HTML-to-PDF converter
+# and meets no control at all — the specialist that produced the 2026-08-05
+# quote holds Bash, Write, Edit and browser-pdf-save, and quote-engine-gate
+# refuses only execution of the two persisted quoting scripts.
+#
+# This gate refuses a Bash command that produces a PDF from an HTML under a
+# gated quote path. It matches structurally on the paths in the command, never
+# on the converter's name, so the rule is binary-independent: wkhtmltopdf,
+# chromium --print-to-pdf, weasyprint and anything else are all covered by the
+# same two conditions.
+#
+# Scope mirrors quote-render-gate: the customer documents scope and a job's
+# quote / Quotations buckets. jobs/<jobId>/pricing/ is excluded — it holds the
+# internal priced breakdown.
+#
+# Exit codes: 0 = allow, 2 = block (stderr shown to the agent). Fail OPEN on an
+# uninspectable call (Bash is a general-purpose tool and the agent never
+# controls this hook's stdin, so failing open opens no bypass while never
+# bricking unrelated commands). No task numbers or internal refs in
+# operator-visible text.
+set -uo pipefail
+# No envelope (tty or empty stdin) → allow: cannot inspect, must not brick Bash.
+if [ -t 0 ]; then exit 0; fi
+INPUT=$(cat)
+[ -z "$INPUT" ] && exit 0
+DECISION=$(INPUT="$INPUT" python3 - <<'PY' 2>/dev/null || true
+import os, json, re, sys
+try:
+    d = json.loads(os.environ["INPUT"])
+except Exception:
+    sys.exit(0)
+if (d.get("tool_name", "") or "") != "Bash":
+    sys.exit(0)
+cmd = (d.get("tool_input", {}) or {}).get("command", "") or ""
+if not cmd:
+    sys.exit(0)
+# A gated source: an .html under the customer documents scope or a job quote
+# bucket. The filename class admits spaces (the filed quotes carry them) but
+# stops at a quote character or a shell separator, so one command path cannot
+# swallow the next. Quote characters are written \x22 / \x27 because this block
+# sits inside a bash command substitution, which parses quotes even in a
+# quoted heredoc.
+GATED_HTML = re.compile(
+    r'(?:memory/users/[^/\x22\x27\s]+/documents/[^\x22\x27;|&]*\.html'
+    r'|jobs/[^/\x22\x27\s]+/(?:quote|Quotations)/[^\x22\x27;|&]*\.html)'
+)
+if not GATED_HTML.search(cmd):
+    sys.exit(0)
+# Naming a PDF anywhere in the same command is what turns a read into a
+# production. `cat q.html` names none and passes.
+if not re.search(r'\.pdf\b', cmd):
+    sys.exit(0)
+print("block")
+PY
+)
+[ "$DECISION" = "block" ] || exit 0
+echo "[quote-render] op=bypass reason=bash-pdf-production" >&2
+echo "Blocked: a client quote PDF must come from the quote-render tool, not from a converter run by hand. Run quote-render for this job — it files the document and its render receipt — then print the client HTML path it returns." >&2
+exit 2

package/payload/platform/plugins/admin/hooks/quote-render-gate.sh CHANGED Viewed

@@ -1,18 +1,30 @@
 #!/usr/bin/env bash
 # quote-render-gate — PreToolUse gate on browser-pdf-save.
 #
-# A customer only ever receives the two client-facing quote documents from the
-# customer documents scope (memory/users/<phone>/documents/). This gate refuses
-# to print one to PDF unless the deterministic quote-render tool actually
-# produced it — proven by the render receipt quote-render writes on success
-# (quoting/jobs/<jobId>/render-receipt.json). No receipt for the job means the
-# quote was hand-authored off the deterministic path, so the fixed-layout
-# guarantee and the reconcile/margin/link gates never ran; the PDF is refused and
-# the bypass is surfaced as [quote-render] op=bypass, not delivered.
+# A client-facing quote reaches a customer only when the deterministic
+# quote-render tool produced that exact document. The tool writes a render
+# receipt on success (quoting/jobs/<jobId>/render-receipt.json) naming the
+# documents it filed; this gate resolves the PDF's source HTML and requires its
+# content to match one of the client-facing documents that receipt names.
 #
-# Scope: only a .pdf under memory/users/<phone>/documents/ named
-# quote-<jobId>.pdf or quote-<jobId>-breakdown.pdf is gated. Every other PDF —
-# brochures, invoices, the admin-scope internal view — passes untouched.
+# Scope — three shapes, all resolved against the account dir:
+#   memory/users/<phone>/documents/quote-<jobId>[-breakdown].pdf
+#   jobs/<jobId>/quote/<anything>.pdf
+#   jobs/<jobId>/Quotations/<anything>.pdf
+# jobs/<jobId>/pricing/ is deliberately absent: it holds the internal priced
+# breakdown, always excluded with the admin-scope internal view. Every other PDF
+# — brochures, works orders, invoices — passes untouched.
+#
+# Why identity rather than existence. A receipt proves a render happened for the
+# job, not that this file is its output. On the 2026-08-05 bypass the job's
+# figures were rewritten after the render and the delivered document was written
+# later still, so an existence check would have authorised the print. Comparing
+# content, not paths, keeps an operator copy of a rendered document passing while
+# hand-authored content fails. filed.internal is not client-facing and is never a
+# permitted match.
+#
+# A missing source HTML blocks: the pipeline files the PDF beside the HTML it
+# printed from, so no local source means no proof of renderer origin.
 #
 # Exit codes: 0 = allow, 2 = block (stderr shown to the agent). Fail OPEN on an
 # uninspectable call (browser-pdf-save is a general-purpose tool; the bypass we
@@ -27,48 +39,104 @@ if [ -t 0 ]; then exit 0; fi
 INPUT=$(cat)
 [ -z "$INPUT" ] && exit 0
-# Print the jobId of a gated client-quote artefact, or nothing for any other
-# call. The customer documents scope is a path convention, so match on it
-# structurally rather than resolving symlinks.
-JOBID=$(INPUT="$INPUT" python3 - <<'PY' 2>/dev/null || true
-import os, json, re, sys
+# Prints nothing for an out-of-scope call, "allow" for a reconciling document,
+# or "block <reason> <jobId>".
+DECISION=$(INPUT="$INPUT" ACCT="$PWD" python3 - <<'PY' 2>/dev/null || true
+import os, json, re, sys, hashlib
 try:
     d = json.loads(os.environ["INPUT"])
 except Exception:
     sys.exit(0)
-tool = d.get("tool_name", "") or ""
-if not tool.endswith("browser-pdf-save"):
+if not (d.get("tool_name", "") or "").endswith("browser-pdf-save"):
     sys.exit(0)
 path = (d.get("tool_input", {}) or {}).get("path", "") or ""
 if not path:
     sys.exit(0)
 norm = os.path.normpath(path)
+# The customer documents scope and the jobs bucket are path conventions, so
+# match on them structurally rather than resolving symlinks.
+jobid = None
 m = re.search(r'(?:^|/)memory/users/[^/]+/documents/quote-(.+?)(?:-breakdown)?\.pdf$', norm)
-if not m:
+if m:
+    jobid = m.group(1)
+else:
+    # `.+` rather than `[^/]+`: the bucket is matched recursively, so one mkdir
+    # cannot walk a hand-authored quote out of scope. The write gate and the
+    # Bash gate match the same buckets recursively; all three must agree.
+    m = re.search(r'(?:^|/)jobs/([^/]+)/(?:quote|Quotations)/.+\.pdf$', norm)
+    if m:
+        jobid = m.group(1)
+if jobid is None:
+    sys.exit(0)
+# A jobId is a single path segment. A separator or traversal in it never keys a
+# legitimate receipt, so treat it as a bypass rather than resolving a stray file.
+if "/" in jobid or ".." in jobid:
+    print("block bad-jobid " + jobid)
     sys.exit(0)
-print(m.group(1))
+base = os.environ.get("ACCT") or os.getcwd()
+abs_pdf = norm if os.path.isabs(norm) else os.path.join(base, norm)
+sibling = abs_pdf[:-4] + ".html"
+if not os.path.isfile(sibling):
+    print("block no-source-html " + jobid)
+    sys.exit(0)
+def sha256(p):
+    h = hashlib.sha256()
+    with open(p, "rb") as fh:
+        for chunk in iter(lambda: fh.read(1 << 16), b""):
+            h.update(chunk)
+    return h.hexdigest()
+try:
+    with open(os.path.join(base, "quoting", "jobs", jobid, "render-receipt.json")) as fh:
+        filed = (json.load(fh) or {}).get("filed") or {}
+except Exception:
+    print("block not-receipt-filed " + jobid)
+    sys.exit(0)
+try:
+    want = sha256(sibling)
+except Exception:
+    print("block no-source-html " + jobid)
+    sys.exit(0)
+for key in ("quote", "breakdown"):
+    cand = filed.get(key)
+    if not isinstance(cand, str) or not cand:
+        continue
+    cpath = cand if os.path.isabs(cand) else os.path.join(base, cand)
+    try:
+        if sha256(cpath) == want:
+            print("allow")
+            sys.exit(0)
+    except Exception:
+        continue
+print("block not-receipt-filed " + jobid)
 PY
 )
-# Not a gated client-quote artefact → allow.
-[ -z "$JOBID" ] && exit 0
+case "$DECISION" in
+  ""|allow) exit 0 ;;
+esac
-# A jobId is a single path segment. A separator or traversal in it never keys a
-# legitimate receipt, so treat it as a bypass rather than resolving a stray file.
-case "$JOBID" in
-  */*|*..*)
-    echo "[quote-render] op=bypass jobId=$JOBID reason=bad-jobid" >&2
+REASON=$(printf '%s' "$DECISION" | cut -d' ' -f2)
+JOBID=$(printf '%s' "$DECISION" | cut -d' ' -f3-)
+echo "[quote-render] op=bypass jobId=$JOBID reason=$REASON" >&2
+case "$REASON" in
+  no-source-html)
+    echo "Blocked: this client quote PDF has no source document beside it, so there is nothing to check it against. Produce the quote with the quote-render tool, which files the document and its render receipt, then print the path it returns." >&2
+    ;;
+  bad-jobid)
     echo "Blocked: this looks like a client quote PDF but its name does not resolve to a job. Produce the quote with the quote-render tool, which files the document and its render receipt, then print the path it returns." >&2
-    exit 2
+    ;;
+  *)
+    echo "Blocked: this client quote was not produced by the quote-render tool, so its fixed layout and the reconcile, margin-leak and link-liveness gates never ran. Run quote-render for this job (it files the document and its receipt), then print the client HTML path it returns to PDF." >&2
     ;;
 esac
-# The receipt lives beside the job's figures, written by quote-render only after
-# every gate passed. Its presence is the proof the deterministic path ran.
-if [ -f "$PWD/quoting/jobs/$JOBID/render-receipt.json" ]; then
-  exit 0
-fi
-echo "[quote-render] op=bypass jobId=$JOBID detail=client quote PDF has no render receipt" >&2
-echo "Blocked: this client quote was not produced by the quote-render tool, so its fixed layout and the reconcile, margin-leak and link-liveness gates never ran. Run quote-render for this job (it files the document and its receipt), then print the client HTML path it returns to PDF." >&2
 exit 2