paperlint 11.1.2 → 12.0.0

package/dist/submission-confirm-hook.js

@@ -1,59 +1,77 @@
 /**
- * The `submission-confirm` hook — no send to a venue's portal without the person's own yes.
+ * The `submission-confirm` hook — no send to a venue's portal without the person's own yes to it.
  * PreToolUse on `Bash` (`plugin/hooks/hooks.json`): a command that sends a submission — `paperlint
- * submission new|update` with `--save` or `--submit`, or a request straight at a HotCRP site — gets
- * `"permissionDecision": "ask"`, and Claude Code puts the question to the person, with the reason
- * below, in its permission prompt. Anything else: no output.
+ * submission new|update` with `--save` or `--submit` — runs only when the person has said yes, in an
+ * `AskUserQuestion` asked since the last send, to a question naming the paper folder (its full path)
+ * and the sha256 of the PDF it sends.
+ * A command that names a portal's host runs only after a yes to a question naming that host and the
+ * command's first 60 characters. Without the yes the command is refused (`"permissionDecision":
+ * "deny"`), and the reason tells the agent exactly what to ask. Anything else: no output.
  *
- * ── WHY "ask", AND WHY NOTHING TURNS IT OFF ──────────────────────────────────────
- * The hooks reference (code.claude.com/docs/en/hooks): "`ask` prompts the user to confirm"; "A
- * hook's `ask` also forces a permission prompt in auto mode"; the reason is "shown to the user in
- * the permission prompt"; and decisions combine deny > defer > ask > allow, so an `allow` rule in
- * the settings does not outvote it. An agent cannot answer the prompt, and no flag or variable of
- * this package skips it — that is the point: the send is the person's decision, taken on the dry
- * run's venue check (paperlint#264). The hook never denies (the person may send over a limit) and
- * never allows (that would skip the person).
+ * ── WHY A QUESTION, NOT CLAUDE CODE'S PERMISSION PROMPT ──────────────────────────
+ * It used to answer `ask` (paperlint#283). The Claude mobile app's permission card shows only the
+ * command line, not the hook's reason, so the person approved a shell line without seeing which
+ * paper or PDF it sends (paperlint#291). `AskUserQuestion` shows the whole question on every
+ * client, and a yes to a question that names the folder and the sha256 is a yes to those bytes in that
+ * folder: a stale build or a wrong PDF has another sha, and identical bytes in another folder (the
+ * same manuscript for another venue) have another path, so their yes does not count.
+ *
+ * ── WHERE THE YES IS READ ─────────────────────────────────────────────────────────
+ * The session's transcript (`transcript_path` in the hook's input, one JSON entry per line). A
+ * question is the assistant's `tool_use` named `AskUserQuestion`; its answer is the user entry that
+ * carries the matching `tool_result`, whose `toolUseResult.answers` maps each question's text to the
+ * option chosen. An answer is a yes when its first word is "yes". Every earlier `Bash` call that
+ * sends or names a portal — refused or not, but not this one (`tool_use_id`) — uses up the questions
+ * before it, so one yes lets one command through. Within one command each send takes an answer of
+ * its own: a yes that names two shas, or the same PDF sent twice, covers one send. When several
+ * questions name the same thing, the latest decides.
  *
  * ── WHAT IT SEES, AND WHAT IT IS NOT ──────────────────────────────────────────────
  * A send is judged on the command as the shell reads it (`shellLeaves`: each simple command across
  * `&&`, `;`, `|`, words unquoted, the commands inside a `bash -c "…"` string too), never on the raw
- * text: `submission`, `new|update` and `--save|--submit` in one command's words, or a portal's host
- * in any word (a HotCRP-hosted site, or a host a venue preset declares), whatever program it runs.
- * A false ask costs one click; a missed send cannot be taken back. NOT SEEN: an upload from a script
- * file that names the host only inside the file, or words built at run time (`$(…)`).
- *
- * The hook catches an agent that runs a send without asking; it is not a security boundary against
- * an agent that deliberately disguises a send.
+ * text: `submission`, `new|update` and `--save|--submit` in one command's words; or a portal's host
+ * in any word (a HotCRP-hosted site, or a host a venue preset declares), whatever program it runs —
+ * such a command may send around paperlint's venue check, and has no PDF to name, so the question
+ * names the host and the command instead. When the presets cannot be read, only HotCRP-hosted sites
+ * and paperlint sends are recognised, and a refusal says so: one bad preset does not stop the shell.
+ * NOT SEEN: an upload from a script file that names the host only inside the file, or words built
+ * at run time (`$(…)`).
  *
- * The reason is built from the same parse and the CLI's own argument parser (`readSend`), one block
- * per send; a send whose PDF cannot be told for certain is still asked about, and says so.
+ * The agent writes the question, so a deliberately misleading question still passes. The hook
+ * catches an agent that sends without asking, or asks about other bytes; it is not a security
+ * boundary against an agent that deliberately disguises a send.
  *
- * ── IT FAILS TOWARD THE QUESTION ─────────────────────────────────────────────────
- * The reason is built from files (the PDF, the build's facts); whatever goes wrong there, the ask
- * still goes out, saying what could not be read. A payload that is not JSON is asked about.
+ * ── IT FAILS CLOSED ───────────────────────────────────────────────────────────────
+ * A send whose PDF cannot be told for certain, a PDF that is not there, no transcript, a payload
+ * that is not JSON, a crash: refused, with what went wrong. A transcript line that is not JSON is
+ * not a reason to refuse every send for the rest of the session — real transcripts have them (an
+ * entry cut short and run into the next, measured in a live one) — so it counts as a send when its
+ * text may hold one, and a yes before it no longer counts. Only lines that may hold a question, an
+ * answer or a send are parsed, and the shell parser runs only on commands that say `submission` or
+ * a portal's host:
+ * a transcript of hundreds of megabytes is read in seconds.
  *
  * ── WHY IN-PROCESS, NOT A VIGILES PROGRAM ────────────────────────────────────────
  * It reads the build's facts with this package's own parser and hashes the PDF; a shipped vigiles
  * hook may import nothing but `vigiles/hook` (`src/folder-layout-hook.ts` says the rest). So
  * `paperlint hook submission-confirm` runs it in-process (`runHook`, src/cli.ts).
  */
-import { basename, isAbsolute, join, relative, resolve } from "node:path";
+import { isAbsolute, join, relative, resolve } from "node:path";
 import { callerPath } from "./caller-path.js";
 import { bodyEnd } from "./domain/body-pages.js";
-import { fieldOf } from "./domain/record.js";
+import { fieldOf, isRecord } from "./domain/record.js";
 import { sha256Hex } from "./domain/sha256.js";
 import { messageOf } from "./domain/text.js";
 import { factsPath, parseFactsText } from "./facts-file.js";
 import { paperPreset } from "./presets.js";
 import { paperPdf } from "./submission.js";
-const ask = (reason) => ({
+const deny = (reason) => ({
     hookSpecificOutput: {
         hookEventName: "PreToolUse",
-        permissionDecision: "ask",
+        permissionDecision: "deny",
         permissionDecisionReason: reason,
     },
 });
-const LAST = "Allow only if you have read the dry run's venue check.";
 /** The domain of HotCRP's hosted sites; a self-hosted portal is known by the host its preset declares. */
 const HOTCRP_HOSTED = "hotcrp.com";
 /**
@@ -92,25 +110,21 @@ function sendsIn(leaves, readSend) {
         return [moved ? null : readSend(l.args.slice(at + 1))];
     });
 }
+/** The words of the commands that may name a host: those with a dot, lowercased. */
+const dottedWords = (leaves) => leaves
+    .flatMap((l) => [l.head, ...l.args])
+    .map((w) => w.toLowerCase())
+    .filter((w) => w.includes("."));
+/** The portal hosts known: HotCRP's hosted sites always, then those `hosts` names; lowercased. */
+const knownHosts = (hosts) => [HOTCRP_HOSTED, ...hosts].map((h) => h.toLowerCase()).filter((h) => h !== "");
 /**
- * What the commands send: a submission through paperlint, anything that names a venue's portal — a
- * HotCRP-hosted site, or a host a venue preset declares (`hosts`, read only when a word has a dot),
- * whatever program it runs, as a plain case-insensitive substring of a word — or nothing. Judged on
- * the shell's words only, never on the raw text.
+ * The portal host a command names — a HotCRP-hosted site, or a host a venue preset declares
+ * (`hosts`), whatever program it runs, as a plain case-insensitive substring of a word — or null.
+ * Judged on the shell's words only, never on the raw text.
  */
-export function sendKind(leaves, hosts) {
-    if (leaves.some(isSend))
-        return "paperlint";
-    const words = leaves
-        .flatMap((l) => [l.head, ...l.args])
-        .map((w) => w.toLowerCase())
-        .filter((w) => w.includes("."));
-    if (words.length === 0)
-        return null;
-    const known = [HOTCRP_HOSTED, ...hosts()]
-        .map((h) => h.toLowerCase())
-        .filter((h) => h !== "");
-    return words.some((w) => known.some((h) => w.includes(h))) ? "direct" : null;
+function portalHost(leaves, hosts) {
+    const words = dottedWords(leaves);
+    return (knownHosts(hosts).find((h) => words.some((w) => w.includes(h))) ?? null);
 }
 /** The body pages the build counted: up to the references or appendix, or banal's count. */
 function bodyPages(f) {
@@ -144,43 +158,238 @@ function factsLines(paperDir, sha, files) {
     return [...stale, bodyPages(f.value)];
 }
 /** One send, described: the paper, the PDF as the command resolves it, what the build saw. */
-function sendLines(send, cwd, deps) {
+function describe(send, cwd, deps) {
     const paperDir = resolve(cwd, send.paper ?? ".");
     const p = paperPreset(paperDir, deps);
     const own = paperPdf(paperDir, p.kind === "settings-problem" ? null : p.settings);
     const pdf = send.pdf === null ? own : resolve(cwd, send.pdf);
     const bytes = deps.files.readBytes(callerPath(pdf));
     const sha = bytes === null ? null : sha256Hex(bytes);
-    return [
-        `paper folder: ${send.paper ?? `${basename(paperDir)} (the current folder)`}`,
-        `PDF: ${send.pdf ?? join(send.paper ?? ".", relative(paperDir, own))}${sha === null ? " — NOT FOUND" : `, sha256 ${sha.slice(0, 12)}`}`,
-        ...factsLines(paperDir, sha, deps.files),
-    ];
+    return {
+        named: sha === null ? null : { folder: paperDir, sha: sha.slice(0, SHA_SHOWN) },
+        lines: [
+            `paper folder: ${paperDir}`,
+            `PDF: ${send.pdf ?? join(send.paper ?? ".", relative(paperDir, own))}${sha === null ? " — NOT FOUND" : `, sha256 ${sha.slice(0, SHA_SHOWN)}`}`,
+            ...factsLines(paperDir, sha, deps.files),
+        ],
+    };
 }
+/** How much of the sha256 the reason shows, and the question must contain. */
+const SHA_SHOWN = 12;
 /** A send whose PDF cannot be told for certain. */
 const UNRESOLVED = "could not resolve which PDF this send uploads — check the dry run";
+const NOT_SENT = "Not run: this sends the paper to the venue's portal";
+const NAMES_PORTAL = "Not run: this command names a venue's submission portal";
+/** What to ask, once every send's PDF is known. */
+const HOW_TO_ASK = [
+    "Ask the person with AskUserQuestion first, then run this command again. In the question, give:",
+    "- the paper folder (the full path, as written above), the PDF and its sha256 as written above (the folder path and the sha256 must both be in the question text),",
+    "- what the lines above say about the build (the body pages, or that it is stale or missing),",
+    "- the dry run's venue check, quoted word for word (its `venue rules at their default options` line and every error under it).",
+    'Options: "Yes, send it" and "No". One yes lets one send through: ask one question per send, each naming its own folder and sha256.',
+].join("\n");
+/** How much of a command naming a portal the question must quote. */
+const COMMAND_SHOWN = 60;
+/** What to ask before a command that names a portal. */
+const HOW_TO_ASK_PORTAL = [
+    "It may send to the portal around paperlint's venue check. Ask the person with AskUserQuestion first, then run this command again: the question must contain the portal host and the command start above, exactly as written, and say what the command does.",
+    'Options: "Yes, run it" and "No". One yes lets one command through. To send a paper, use `paperlint submission new|update --save` instead.',
+].join("\n");
+/** Each send's block: alone, or numbered when the command has several. */
+function blocks(described) {
+    return described.length === 1
+        ? described.flatMap((d) => d.lines)
+        : described.flatMap((d, n) => [
+            `send ${String(n + 1)} of ${String(described.length)}:`,
+            ...d.lines,
+        ]);
+}
+/** A transcript line that may hold a question, an answer or a send; no other line is parsed. */
+const MAY_MATTER = /"tool_use"|"toolUseResult"/u;
+/** Nothing asked or answered: the start, and the state right after a send. */
+const CLEARED = { asked: new Set(), answers: [] };
+/** A transcript line that is not JSON. */
+const BROKEN = Symbol("broken");
 /**
- * Why the person is asked, for `paperlint submission` sends: each send's paper, PDF and build — every
- * send in the command, one block each. Words the shell would expand (`$…`, backticks) are not
- * guessed at: such a command is described as unresolved.
+ * The person's answers to `AskUserQuestion` since the last send in the transcript, oldest first.
+ * A line that may matter and is not JSON (real transcripts have them: an entry cut short, run into
+ * the next) counts as a send when it may hold one, so a yes before it is used up — never wrongly
+ * kept; otherwise it is skipped, and a yes lost in it only means asking again.
  */
-export function paperlintReason(command, leaves, cwd, deps) {
-    const sends = /[`$]/u.test(command) ? [] : sendsIn(leaves, deps.readSend);
-    const one = (x) => x === null ? [UNRESOLVED] : sendLines(x, cwd, deps);
-    const blocks = sends.length === 0
-        ? [UNRESOLVED]
-        : sends.length === 1
-            ? sends.flatMap(one)
-            : sends.flatMap((x, n) => [
-                `send ${String(n + 1)} of ${String(sends.length)}:`,
-                ...one(x),
-            ]);
-    return [SENDS, ...blocks, LAST].join("\n");
-}
-/** The ask when the hook's input cannot be read at all: it cannot tell, so the person decides. */
-export const UNREADABLE_INPUT = ask(`paperlint could not read this command, so it cannot tell whether it sends a paper to a venue's portal. ${LAST}`);
-const SENDS = "This sends the paper to the venue's portal (paperlint submission with --save or --submit).";
-const DIRECT = `This command names a venue's submission portal, so it may send to it outside paperlint and its venue check. ${LAST}`;
+export function answersSinceLastSend(transcript, earlier) {
+    return transcript.split("\n").reduce((since, line) => {
+        if (!MAY_MATTER.test(line))
+            return since;
+        const entry = parsedLine(line);
+        if (entry === BROKEN)
+            return earlier.mayHold(line) ? CLEARED : since;
+        const content = fieldOf(fieldOf(entry, "message"), "content");
+        return (Array.isArray(content) ? content : []).reduce((s, block) => fieldOf(block, "type") === "tool_result"
+            ? toolResult(s, block, entry)
+            : toolUse(s, block, earlier), since);
+    }, CLEARED).answers;
+}
+/** One transcript line, parsed; BROKEN when it is not JSON. */
+function parsedLine(line) {
+    try {
+        return JSON.parse(line);
+    }
+    catch {
+        return BROKEN;
+    }
+}
+/** A block the assistant wrote: a question is noted; an earlier send clears what was asked before it. */
+function toolUse(s, block, earlier) {
+    const id = fieldOf(block, "id");
+    if (fieldOf(block, "type") !== "tool_use" || typeof id !== "string")
+        return s;
+    const name = fieldOf(block, "name");
+    if (name === "AskUserQuestion")
+        return { ...s, asked: new Set([...s.asked, id]) };
+    const command = fieldOf(fieldOf(block, "input"), "command");
+    const send = name === "Bash" &&
+        id !== earlier.current &&
+        typeof command === "string" &&
+        earlier.mayHold(command) &&
+        earlier.sends(command);
+    return send ? CLEARED : s;
+}
+/** The person's reply to a question asked since the last send: its answers, kept in order. */
+function toolResult(s, block, entry) {
+    const id = fieldOf(block, "tool_use_id");
+    if (typeof id !== "string" || !s.asked.has(id))
+        return s;
+    const answers = fieldOf(fieldOf(entry, "toolUseResult"), "answers");
+    const given = Object.entries(isRecord(answers) ? answers : {}).flatMap(([question, answer]) => typeof answer === "string" ? [{ question, answer }] : []);
+    return { ...s, answers: [...s.answers, ...given] };
+}
+/** Whether an answer is a yes: its first word, in any case. */
+const isYes = (a) => /^yes\b/iu.test(a.answer.trim());
+/** Whether `text` contains every one of `keys`, in any case. */
+const hasAll = (text, keys) => keys.every((k) => text.toLowerCase().includes(k.toLowerCase()));
+/** `text` as a literal inside a regular expression. */
+const literal = (text) => text.replace(/[.*+?^${}()|[\]\\]/gu, "\\$&");
+/**
+ * Whether a question names the folder `folder` and not a longer path that starts with it
+ * (`/w/paper` is not `/w/paper2` or `/w/paper.old`), nor one it ends: the whole path, case-sensitive.
+ */
+const namesFolder = (question, folder) => new RegExp(`(?<![\\w.-])${literal(folder)}(?![\\w.-])`, "u").test(question);
+/**
+ * The answers used up after one more need: it takes the latest answer not yet taken whose question
+ * `names` it, and that answer must be a yes; null when there is none, or it is not.
+ */
+function takeYes(answers, taken, names) {
+    if (taken === null)
+        return null;
+    const at = answers.findLastIndex((a, n) => !taken.has(n) && names(a.question));
+    const found = answers[at];
+    return found !== undefined && isYes(found) ? new Set([...taken, at]) : null;
+}
+/** What a yes to one send must name: its sha256 (any case) and its folder (the whole path, as written). */
+const namesSend = (s) => (question) => hasAll(question, [s.sha]) && namesFolder(question, s.folder);
+/** What a yes to a command that names a portal must name: the host (any case) and the command's start, literally. */
+const namesPortal = (host, start) => (question) => hasAll(question, [host]) && question.includes(start);
+/**
+ * Whether every send and the portal command (null for none) has a yes of its own. Each takes the
+ * latest answer not yet taken, in turn, from one shared set: a yes used up by a send cannot also
+ * approve the portal, one that names two shas covers one send, and the same PDF sent twice needs
+ * two. (A yes that two needs could share is given to the first; the second is refused and the
+ * person is asked again: it fails closed.)
+ */
+const everyNeedHasItsYes = (answers, sends, portal) => [...sends.map(namesSend), ...(portal === null ? [] : [portal])].reduce((taken, names) => takeYes(answers, taken, names), new Set()) !== null;
+/** Every send in the command, described; an unresolved one has no sha. */
+function describedSends(command, cwd, deps) {
+    const sends = /[`$]/u.test(command)
+        ? []
+        : sendsIn(deps.shellLeaves(command), deps.readSend);
+    return (sends.length === 0 ? [null] : sends).map((x) => x === null ? { named: null, lines: [UNRESOLVED] } : describe(x, cwd, deps));
+}
+/** The refusal of a send whose PDF is not known or not there: there is no sha256 to ask about. */
+const noPdf = (described) => [
+    `${NOT_SENT}, and paperlint cannot find the PDF it uploads, so there is no sha256 to ask the person about.`,
+    ...blocks(described),
+    "Name the paper folder and the PDF plainly (no cd, no $…), build the PDF, run the dry run, and ask then.",
+];
+/** The presets' hosts; when they cannot be read, none, and why. */
+function readHosts(cwd, deps) {
+    try {
+        return { hosts: deps.portalHosts(cwd), failed: null };
+    }
+    catch (e) {
+        return { hosts: [], failed: messageOf(e) };
+    }
+}
+/** The line a refusal ends with when the presets could not be read; none when they could. */
+const fallbackLines = (h) => h.failed === null
+    ? []
+    : [
+        `The venue presets could not be read (${h.failed}), so only HotCRP-hosted sites and paperlint sends are recognised until they are fixed.`,
+    ];
+/**
+ * A command that sends: let through (null) when the person said yes to it since the last send —
+ * each paperlint send by its paper folder and its PDF's sha256, a yes of its own for each, a portal
+ * named by its host and the command's start —
+ * else the lines of the refusal, with what to ask.
+ */
+function decide(c, payload, deps) {
+    const described = c.paperlint ? describedSends(c.text, c.cwd, deps) : [];
+    const named = described.flatMap((d) => (d.named === null ? [] : [d.named]));
+    if (named.length < described.length)
+        return noPdf(described);
+    const base = c.paperlint ? NOT_SENT : NAMES_PORTAL;
+    const read = transcriptOf(payload, deps.files);
+    if (typeof read !== "string")
+        return [
+            `${base}, and ${read.failed}, so paperlint cannot see the person's yes.`,
+        ];
+    const start = c.text.trim().slice(0, COMMAND_SHOWN);
+    const answers = answersSinceLastSend(read, earlierSend(c, payload, deps));
+    const portal = c.host === null ? null : namesPortal(c.host, start);
+    if (everyNeedHasItsYes(answers, named, portal))
+        return null;
+    return [
+        `${base}, and the person has not said yes to it since the last send.`,
+        ...blocks(described),
+        ...(c.paperlint ? [HOW_TO_ASK] : []),
+        ...portalLines(c.host, start),
+    ];
+}
+/** What a refusal says about a portal the command names: the host, the start, what to ask; none for none. */
+const portalLines = (host, start) => host === null
+    ? []
+    : [`portal host: ${host}`, `command start: ${start}`, HOW_TO_ASK_PORTAL];
+/** How an earlier send is told in the transcript: by the same matching as this command. */
+function earlierSend(c, payload, deps) {
+    const known = knownHosts(c.hosts.hosts);
+    return {
+        current: stringField(payload, "tool_use_id"),
+        mayHold: (text) => {
+            const plain = text.replace(/["'\\]/gu, "").toLowerCase();
+            return (plain.includes("submission") || known.some((h) => plain.includes(h)));
+        },
+        sends: (command) => {
+            const leaves = allLeaves(command, deps.shellLeaves);
+            return leaves.some(isSend) || portalHost(leaves, known) !== null;
+        },
+    };
+}
+/** A string field of the payload; null for none. */
+function stringField(payload, key) {
+    const v = fieldOf(payload, key);
+    return typeof v === "string" ? v : null;
+}
+/** The session's transcript as text, or why it could not be read. */
+function transcriptOf(payload, files) {
+    const path = stringField(payload, "transcript_path");
+    if (path === null || !isAbsolute(path))
+        return { failed: "the hook was given no transcript_path" };
+    const bytes = files.readBytes(callerPath(path));
+    return bytes === null
+        ? { failed: `the transcript ${path} could not be read` }
+        : new TextDecoder().decode(bytes);
+}
+/** The refusal when the hook's input cannot be read at all: it cannot tell, so it does not let it run. */
+export const UNREADABLE_INPUT = deny("Not run: paperlint could not read this command, so it cannot tell whether it sends a paper to a venue's portal.");
 /** The payload, parsed; null when it is not JSON. */
 function parsed(stdin) {
     try {
@@ -190,41 +399,39 @@ function parsed(stdin) {
         return null;
     }
 }
+/** One command, judged: null to let it run, or the refusal. */
+function judge(text, cwd, payload, deps) {
+    const leaves = allLeaves(text, deps.shellLeaves);
+    const paperlint = leaves.some(isSend);
+    // The presets are read only for a command that may send: anything else pays nothing.
+    if (!paperlint && dottedWords(leaves).length === 0)
+        return null;
+    const hosts = readHosts(cwd, deps);
+    const host = portalHost(leaves, hosts.hosts);
+    if (!paperlint && host === null)
+        return null;
+    const lines = decide({ text, cwd, paperlint, host, hosts }, payload, deps);
+    return lines === null
+        ? null
+        : deny([...lines, ...fallbackLines(hosts)].join("\n"));
+}
 /**
- * The hook on one payload, as Claude Code sends it on stdin: the ask, or null for a command that
- * sends nothing. Never throws: what it cannot read, it asks about.
+ * The hook on one payload, as Claude Code sends it on stdin: a refusal, or null to let the command
+ * run (it sends nothing, or every send in it has the person's yes). Never throws: a crash refuses.
  */
 export function submissionConfirm(stdin, deps) {
     const payload = parsed(stdin);
     if (payload === null)
         return UNREADABLE_INPUT;
     const raw = fieldOf(fieldOf(payload, "tool_input"), "command");
-    const command = typeof raw === "string" ? raw : "";
+    const text = typeof raw === "string" ? raw : "";
     const given = fieldOf(payload, "cwd");
     const cwd = typeof given === "string" && isAbsolute(given) ? given : resolve(".");
-    const kind = kindOf(command, cwd, deps);
-    if (kind === null)
-        return null;
-    if (kind !== "paperlint" && kind !== "direct")
-        return ask(kind.failed);
-    if (kind === "direct")
-        return ask(DIRECT);
-    try {
-        return ask(paperlintReason(command, deps.shellLeaves(command), cwd, deps));
-    }
-    catch (e) {
-        return ask(`${SENDS} paperlint could not say what will be sent: ${messageOf(e)}. ${LAST}`);
-    }
-}
-/** What the command sends, or — when reading it failed — the reason to ask anyway. */
-function kindOf(command, cwd, deps) {
     try {
-        return sendKind(allLeaves(command, deps.shellLeaves), () => deps.portalHosts(cwd));
+        return judge(text, cwd, payload, deps);
     }
     catch (e) {
-        return {
-            failed: `paperlint could not tell what this command sends (${messageOf(e)}). ${LAST}`,
-        };
+        return deny(`Not run: paperlint could not check whether this command sends a paper: ${messageOf(e)}.`);
     }
 }
 //# sourceMappingURL=submission-confirm-hook.js.map

package/dist/submission-confirm-hook.js.map

@@ -1 +1 @@
-{"version":3,"file":"submission-confirm-hook.js","sourceRoot":"","sources":["../src/submission-confirm-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,OAAO,EAAE,QAAQ,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC1E,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,cAAc,EAAkB,MAAM,iBAAiB,CAAC;AAE5E,OAAO,EAAE,WAAW,EAAmB,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAoC3C,MAAM,GAAG,GAAG,CAAC,MAAc,EAAa,EAAE,CAAC,CAAC;IAC1C,kBAAkB,EAAE;QAClB,aAAa,EAAE,YAAY;QAC3B,kBAAkB,EAAE,KAAK;QACzB,wBAAwB,EAAE,MAAM;KACjC;CACF,CAAC,CAAC;AAEH,MAAM,IAAI,GAAG,wDAAwD,CAAC;AAEtE,0GAA0G;AAC1G,MAAM,aAAa,GAAG,YAAY,CAAC;AAEnC;;;GAGG;AACH,SAAS,SAAS,CAChB,OAAe,EACf,KAAiC;IAEjC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG,GAAG;QACN,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACnB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CACxE;KACF,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,SAAS,MAAM,CAAC,CAAY;IAC1B,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACxC,OAAO,CACL,EAAE,IAAI,CAAC;QACP,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,QAAQ,CAAC;QAC/D,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAC5B,CAAC;AACJ,CAAC;AAQD,+EAA+E;AAC/E,MAAM,KAAK,GAAwB,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpE;;;;GAIG;AACH,SAAS,OAAO,CACd,MAA4B,EAC5B,QAAiC;IAEjC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CACzB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,KAAK,YAAY,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CACtE,CAAC;QACF,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM;aACjB,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;aACf,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;QACtD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,QAAQ,CACtB,MAA4B,EAC5B,KAA8B;IAE9B,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QAAE,OAAO,WAAW,CAAC;IAC5C,MAAM,KAAK,GAAG,MAAM;SACjB,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;SACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;IAClC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACpC,MAAM,KAAK,GAAG,CAAC,aAAa,EAAE,GAAG,KAAK,EAAE,CAAC;SACtC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;SAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;IAC3B,OAAO,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AAC/E,CAAC;AAED,4FAA4F;AAC5F,SAAS,SAAS,CAAC,CAAY;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;QAChC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa;QACzB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB;KACpC,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;QACtB,OAAO,eAAe,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,GAAG,CAAC,EAAE,YAAY,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;IAClG,OAAO,CAAC,CAAC,QAAQ,KAAK,IAAI;QACxB,CAAC,CAAC,0FAA0F;QAC5F,CAAC,CAAC,eAAe,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,yBAAyB,CAAC;AAC5E,CAAC;AAED,qEAAqE;AACrE,SAAS,UAAU,CACjB,QAAgB,EAChB,GAAkB,EAClB,KAAY;IAEZ,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,KAAK,IAAI;QAChB,OAAO;YACL,4GAA4G;SAC7G,CAAC;IACJ,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,CAAC,EAAE;QACP,OAAO;YACL,6DAA6D,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;SACjI,CAAC;IACJ,MAAM,KAAK,GACT,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG;QACjB,CAAC,CAAC;YACE,yHAAyH;SAC1H;QACH,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACxC,CAAC;AAED,8FAA8F;AAC9F,SAAS,SAAS,CAChB,IAAU,EACV,GAAW,EACX,IAAgB;IAEhB,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;IACjD,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,QAAQ,CAClB,QAAQ,EACR,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAClD,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO;QACL,iBAAiB,IAAI,CAAC,KAAK,IAAI,GAAG,QAAQ,CAAC,QAAQ,CAAC,uBAAuB,EAAE;QAC7E,QAAQ,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE;QACvI,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC;KACzC,CAAC;AACJ,CAAC;AAED,mDAAmD;AACnD,MAAM,UAAU,GACd,mEAAmE,CAAC;AAEtE;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,MAA4B,EAC5B,GAAW,EACX,IAAiB;IAEjB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC1E,MAAM,GAAG,GAAG,CAAC,CAAc,EAAqB,EAAE,CAChD,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACtD,MAAM,MAAM,GACV,KAAK,CAAC,MAAM,KAAK,CAAC;QAChB,CAAC,CAAC,CAAC,UAAU,CAAC;QACd,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAClB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;YACpB,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;gBACtB,QAAQ,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG;gBACnD,GAAG,GAAG,CAAC,CAAC,CAAC;aACV,CAAC,CAAC;IACX,OAAO,CAAC,KAAK,EAAE,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED,kGAAkG;AAClG,MAAM,CAAC,MAAM,gBAAgB,GAAc,GAAG,CAC5C,0GAA0G,IAAI,EAAE,CACjH,CAAC;AAEF,MAAM,KAAK,GACT,4FAA4F,CAAC;AAE/F,MAAM,MAAM,GAAG,+GAA+G,IAAI,EAAE,CAAC;AAErI,qDAAqD;AACrD,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,IAAiB;IAEjB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,gBAAgB,CAAC;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,OAAO,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACnD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,GAAG,GACP,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxE,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IACxC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvE,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1C,IAAI,CAAC;QACH,OAAO,GAAG,CAAC,eAAe,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,GAAG,CACR,GAAG,KAAK,+CAA+C,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAC/E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,SAAS,MAAM,CACb,OAAe,EACf,GAAW,EACX,IAAiB;IAEjB,IAAI,CAAC;QACH,OAAO,QAAQ,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,CACzD,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CACtB,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO;YACL,MAAM,EAAE,qDAAqD,SAAS,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE;SACtF,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"submission-confirm-hook.js","sourceRoot":"","sources":["../src/submission-confirm-hook.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAChE,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,wBAAwB,CAAC;AACjD,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AACvD,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,OAAO,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAC7C,OAAO,EAAE,SAAS,EAAE,cAAc,EAAkB,MAAM,iBAAiB,CAAC;AAE5E,OAAO,EAAE,WAAW,EAAmB,MAAM,cAAc,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAoC3C,MAAM,IAAI,GAAG,CAAC,MAAc,EAAc,EAAE,CAAC,CAAC;IAC5C,kBAAkB,EAAE;QAClB,aAAa,EAAE,YAAY;QAC3B,kBAAkB,EAAE,MAAM;QAC1B,wBAAwB,EAAE,MAAM;KACjC;CACF,CAAC,CAAC;AAEH,0GAA0G;AAC1G,MAAM,aAAa,GAAG,YAAY,CAAC;AAEnC;;;GAGG;AACH,SAAS,SAAS,CAChB,OAAe,EACf,KAAiC;IAEjC,MAAM,GAAG,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,OAAO;QACL,GAAG,GAAG;QACN,GAAG,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CACnB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CACxE;KACF,CAAC;AACJ,CAAC;AAED,oGAAoG;AACpG,SAAS,MAAM,CAAC,CAAY;IAC1B,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IACxC,OAAO,CACL,EAAE,IAAI,CAAC;QACP,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,QAAQ,CAAC;QAC/D,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC,CAC5B,CAAC;AACJ,CAAC;AAQD,+EAA+E;AAC/E,MAAM,KAAK,GAAwB,IAAI,GAAG,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC;AAEpE;;;;GAIG;AACH,SAAS,OAAO,CACd,MAA4B,EAC5B,QAAiC;IAEjC,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,SAAS,CACzB,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CACP,CAAC,KAAK,YAAY,IAAI,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CACtE,CAAC;QACF,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,QAAQ,CAAC;YAAE,OAAO,EAAE,CAAC;QACtD,MAAM,KAAK,GAAG,MAAM;aACjB,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;aACf,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC;QACtD,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;AACL,CAAC;AAED,oFAAoF;AACpF,MAAM,WAAW,GAAG,CAAC,MAA4B,EAAqB,EAAE,CACtE,MAAM;KACH,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC;KACnC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;KAC3B,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC;AAEpC,kGAAkG;AAClG,MAAM,UAAU,GAAG,CAAC,KAAwB,EAAqB,EAAE,CACjE,CAAC,aAAa,EAAE,GAAG,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAEhF;;;;GAIG;AACH,SAAS,UAAU,CACjB,MAA4B,EAC5B,KAAwB;IAExB,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,OAAO,CACL,UAAU,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CACxE,CAAC;AACJ,CAAC;AAED,4FAA4F;AAC5F,SAAS,SAAS,CAAC,CAAY;IAC7B,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE;QAChC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,aAAa;QACzB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,kBAAkB;KACpC,CAAC,CAAC;IACH,IAAI,GAAG,CAAC,IAAI,KAAK,OAAO;QACtB,OAAO,eAAe,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,eAAe,GAAG,CAAC,EAAE,YAAY,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC;IAClG,OAAO,CAAC,CAAC,QAAQ,KAAK,IAAI;QACxB,CAAC,CAAC,0FAA0F;QAC5F,CAAC,CAAC,eAAe,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,yBAAyB,CAAC;AAC5E,CAAC;AAED,qEAAqE;AACrE,SAAS,UAAU,CACjB,QAAgB,EAChB,GAAkB,EAClB,KAAY;IAEZ,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,KAAK,IAAI;QAChB,OAAO;YACL,4GAA4G;SAC7G,CAAC;IACJ,MAAM,CAAC,GAAG,cAAc,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;IAC1D,IAAI,CAAC,CAAC,CAAC,EAAE;QACP,OAAO;YACL,6DAA6D,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;SACjI,CAAC;IACJ,MAAM,KAAK,GACT,GAAG,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG;QACjB,CAAC,CAAC;YACE,yHAAyH;SAC1H;QACH,CAAC,CAAC,EAAE,CAAC;IACT,OAAO,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AACxC,CAAC;AAcD,8FAA8F;AAC9F,SAAS,QAAQ,CAAC,IAAU,EAAE,GAAW,EAAE,IAAgB;IACzD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC;IACjD,MAAM,CAAC,GAAG,WAAW,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,QAAQ,CAClB,QAAQ,EACR,CAAC,CAAC,IAAI,KAAK,kBAAkB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAClD,CAAC;IACF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACrD,OAAO;QACL,KAAK,EACH,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE;QAC1E,KAAK,EAAE;YACL,iBAAiB,QAAQ,EAAE;YAC3B,QAAQ,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,GAAG,EAAE,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,GAAG,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,YAAY,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,EAAE,EAAE;YAC9I,GAAG,UAAU,CAAC,QAAQ,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC;SACzC;KACF,CAAC;AACJ,CAAC;AAED,8EAA8E;AAC9E,MAAM,SAAS,GAAG,EAAE,CAAC;AAErB,mDAAmD;AACnD,MAAM,UAAU,GACd,mEAAmE,CAAC;AAEtE,MAAM,QAAQ,GAAG,qDAAqD,CAAC;AACvE,MAAM,YAAY,GAAG,yDAAyD,CAAC;AAE/E,mDAAmD;AACnD,MAAM,UAAU,GAAG;IACjB,gGAAgG;IAChG,mKAAmK;IACnK,8FAA8F;IAC9F,+HAA+H;IAC/H,oIAAoI;CACrI,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,qEAAqE;AACrE,MAAM,aAAa,GAAG,EAAE,CAAC;AAEzB,wDAAwD;AACxD,MAAM,iBAAiB,GAAG;IACxB,6PAA6P;IAC7P,2IAA2I;CAC5I,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,0EAA0E;AAC1E,SAAS,MAAM,CAAC,SAA+B;IAC7C,OAAO,SAAS,CAAC,MAAM,KAAK,CAAC;QAC3B,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;QACnC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;YAC1B,QAAQ,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,GAAG;YACvD,GAAG,CAAC,CAAC,KAAK;SACX,CAAC,CAAC;AACT,CAAC;AAcD,gGAAgG;AAChG,MAAM,UAAU,GAAG,6BAA6B,CAAC;AAYjD,8EAA8E;AAC9E,MAAM,OAAO,GAAU,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;AAEzD,0CAA0C;AAC1C,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;AAEhC;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAkB,EAClB,OAAoB;IAEpB,OAAO,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAY,EAAE,IAAI,EAAS,EAAE;QACjE,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;QAC/B,IAAI,KAAK,KAAK,MAAM;YAAE,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC;QACrE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,SAAS,CAAC,EAAE,SAAS,CAAC,CAAC;QAC9D,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CACnD,CAAC,CAAQ,EAAE,KAAc,EAAS,EAAE,CAClC,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,aAAa;YACtC,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC;YAC7B,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,EAChC,KAAK,CACN,CAAC;IACJ,CAAC,EAAE,OAAO,CAAC,CAAC,OAAO,CAAC;AACtB,CAAC;AAED,+DAA+D;AAC/D,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CAAC;IAChB,CAAC;AACH,CAAC;AAED,yGAAyG;AACzG,SAAS,OAAO,CAAC,CAAQ,EAAE,KAAc,EAAE,OAAoB;IAC7D,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAChC,IAAI,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,KAAK,UAAU,IAAI,OAAO,EAAE,KAAK,QAAQ;QAAE,OAAO,CAAC,CAAC;IAC9E,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,iBAAiB;QAC5B,OAAO,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC;IACpD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,EAAE,SAAS,CAAC,CAAC;IAC5D,MAAM,IAAI,GACR,IAAI,KAAK,MAAM;QACf,EAAE,KAAK,OAAO,CAAC,OAAO;QACtB,OAAO,OAAO,KAAK,QAAQ;QAC3B,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QACxB,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACzB,OAAO,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5B,CAAC;AAED,8FAA8F;AAC9F,SAAS,UAAU,CAAC,CAAQ,EAAE,KAAc,EAAE,KAAc;IAC1D,MAAM,EAAE,GAAG,OAAO,CAAC,KAAK,EAAE,aAAa,CAAC,CAAC;IACzC,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO,CAAC,CAAC;IACzD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,eAAe,CAAC,EAAE,SAAS,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CACpE,CAAC,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAqB,EAAE,CACxC,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAC3D,CAAC;IACF,OAAO,EAAE,GAAG,CAAC,EAAE,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;AACrD,CAAC;AAED,+DAA+D;AAC/D,MAAM,KAAK,GAAG,CAAC,CAAS,EAAW,EAAE,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;AAEvE,gEAAgE;AAChE,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,IAAuB,EAAW,EAAE,CAChE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AAElE,uDAAuD;AACvD,MAAM,OAAO,GAAG,CAAC,IAAY,EAAU,EAAE,CACvC,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;AAE/C;;;GAGG;AACH,MAAM,WAAW,GAAG,CAAC,QAAgB,EAAE,MAAc,EAAW,EAAE,CAChE,IAAI,MAAM,CAAC,eAAe,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;AAQ9E;;;GAGG;AACH,SAAS,OAAO,CACd,OAA0B,EAC1B,KAAY,EACZ,KAAY;IAEZ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,MAAM,EAAE,GAAG,OAAO,CAAC,aAAa,CAC9B,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,QAAQ,CAAC,CAC7C,CAAC;IACF,MAAM,KAAK,GAAG,OAAO,CAAC,EAAE,CAAC,CAAC;IAC1B,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9E,CAAC;AAED,2GAA2G;AAC3G,MAAM,SAAS,GACb,CAAC,CAAQ,EAAS,EAAE,CACpB,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;AAEjE,qHAAqH;AACrH,MAAM,WAAW,GACf,CAAC,IAAY,EAAE,KAAa,EAAS,EAAE,CACvC,CAAC,QAAQ,EAAE,EAAE,CACX,MAAM,CAAC,QAAQ,EAAE,CAAC,IAAI,CAAC,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAEzD;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,CACzB,OAA0B,EAC1B,KAAuB,EACvB,MAAoB,EACX,EAAE,CACX,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CACpE,CAAC,KAAY,EAAE,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,EACvD,IAAI,GAAG,EAAU,CAClB,KAAK,IAAI,CAAC;AAEb,0EAA0E;AAC1E,SAAS,cAAc,CACrB,OAAe,EACf,GAAW,EACX,IAAiB;IAEjB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;QACjC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtD,OAAO,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAa,EAAE,CAChE,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,CAC3E,CAAC;AACJ,CAAC;AAED,kGAAkG;AAClG,MAAM,KAAK,GAAG,CAAC,SAA+B,EAAqB,EAAE,CAAC;IACpE,GAAG,QAAQ,gGAAgG;IAC3G,GAAG,MAAM,CAAC,SAAS,CAAC;IACpB,yGAAyG;CAC1G,CAAC;AAQF,mEAAmE;AACnE,SAAS,SAAS,CAAC,GAAW,EAAE,IAAiB;IAC/C,IAAI,CAAC;QACH,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACxD,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,CAAC;AACH,CAAC;AAWD,6FAA6F;AAC7F,MAAM,aAAa,GAAG,CAAC,CAAQ,EAAqB,EAAE,CACpD,CAAC,CAAC,MAAM,KAAK,IAAI;IACf,CAAC,CAAC,EAAE;IACJ,CAAC,CAAC;QACE,wCAAwC,CAAC,CAAC,MAAM,yFAAyF;KAC1I,CAAC;AAER;;;;;GAKG;AACH,SAAS,MAAM,CACb,CAAU,EACV,OAAgB,EAChB,IAAiB;IAEjB,MAAM,SAAS,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,MAAM,KAAK,GAAG,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC5E,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC,SAAS,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC;IACnD,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,OAAO,IAAI,KAAK,QAAQ;QAC1B,OAAO;YACL,GAAG,IAAI,SAAS,IAAI,CAAC,MAAM,6CAA6C;SACzE,CAAC;IACJ,MAAM,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACpD,MAAM,OAAO,GAAG,oBAAoB,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACnE,IAAI,kBAAkB,CAAC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,OAAO;QACL,GAAG,IAAI,8DAA8D;QACrE,GAAG,MAAM,CAAC,SAAS,CAAC;QACpB,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACpC,GAAG,WAAW,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC;KAC9B,CAAC;AACJ,CAAC;AAED,6GAA6G;AAC7G,MAAM,WAAW,GAAG,CAAC,IAAmB,EAAE,KAAa,EAAqB,EAAE,CAC5E,IAAI,KAAK,IAAI;IACX,CAAC,CAAC,EAAE;IACJ,CAAC,CAAC,CAAC,gBAAgB,IAAI,EAAE,EAAE,kBAAkB,KAAK,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAE7E,2FAA2F;AAC3F,SAAS,WAAW,CAClB,CAAU,EACV,OAAgB,EAChB,IAAiB;IAEjB,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACxC,OAAO;QACL,OAAO,EAAE,WAAW,CAAC,OAAO,EAAE,aAAa,CAAC;QAC5C,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE;YAChB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YACzD,OAAO,CACL,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CACrE,CAAC;QACJ,CAAC;QACD,KAAK,EAAE,CAAC,OAAO,EAAE,EAAE;YACjB,MAAM,MAAM,GAAG,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;YACpD,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,IAAI,CAAC;QACnE,CAAC;KACF,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,SAAS,WAAW,CAAC,OAAgB,EAAE,GAAW;IAChD,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC;IAChC,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1C,CAAC;AAED,qEAAqE;AACrE,SAAS,YAAY,CACnB,OAAgB,EAChB,KAAY;IAEZ,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,iBAAiB,CAAC,CAAC;IACrD,IAAI,IAAI,KAAK,IAAI,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QACpC,OAAO,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAC;IAC7D,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,OAAO,KAAK,KAAK,IAAI;QACnB,CAAC,CAAC,EAAE,MAAM,EAAE,kBAAkB,IAAI,oBAAoB,EAAE;QACxD,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACtC,CAAC;AAED,0GAA0G;AAC1G,MAAM,CAAC,MAAM,gBAAgB,GAAe,IAAI,CAC9C,iHAAiH,CAClH,CAAC;AAEF,qDAAqD;AACrD,SAAS,MAAM,CAAC,KAAa;IAC3B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,+DAA+D;AAC/D,SAAS,KAAK,CACZ,IAAY,EACZ,GAAW,EACX,OAAgB,EAChB,IAAiB;IAEjB,MAAM,MAAM,GAAG,SAAS,CAAC,IAAI,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;IACjD,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACtC,qFAAqF;IACrF,IAAI,CAAC,SAAS,IAAI,WAAW,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAChE,MAAM,KAAK,GAAG,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACnC,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7C,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IAC3E,OAAO,KAAK,KAAK,IAAI;QACnB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,KAAK,EAAE,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAC/B,KAAa,EACb,IAAiB;IAEjB,MAAM,OAAO,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC9B,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,gBAAgB,CAAC;IAC9C,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,YAAY,CAAC,EAAE,SAAS,CAAC,CAAC;IAC/D,MAAM,IAAI,GAAG,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAChD,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,GAAG,GACP,OAAO,KAAK,KAAK,QAAQ,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACxE,IAAI,CAAC;QACH,OAAO,KAAK,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,IAAI,CACT,0EAA0E,SAAS,CAAC,CAAC,CAAC,GAAG,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC"}

package/docs/configuration.md

@@ -399,7 +399,8 @@ papers/my-paper
   keys or a `.bib` file changed. After that, one **final** pass defines `\finalpass`, which arms
   the reference guards in `paper-guards.tex`: an undefined `\ref` or `\cite` fails the build
   there instead of printing `??`. A document that still changes after five passes fails, naming
-  the file that kept changing. After a green compile the step also writes
+  the file that kept changing. The final pass's log is then read for the warnings that fail the
+  build (below). After a green compile the step also writes
   `_build/sources.json`, the record of what TeX read: every file of the paper directory its passes
   opened (from the `.fls` that `-recorder` makes), whether each came before or after
   `\begin{document}`, the `.bib` files TeX itself wrote, the databases and keys bibtex read, and a
@@ -452,6 +453,34 @@ without a new one:
       paper.pdf removed — a stale PDF must not pass for this build
 ```
 
+**Some warnings fail the build although pdflatex exits 0**, because the PDF it wrote is wrong. They
+are one list, `FAILING_WARNINGS` in [`src/latex-log.ts`](../src/latex-log.ts), and only the log of
+the **final** pass is read — before the rerun every reference is undefined by construction:
+
+| id                        | the log line                                              | why it fails                                                                      |
+| ------------------------- | --------------------------------------------------------- | --------------------------------------------------------------------------------- |
+| `lost-character`          | `Missing character: There is no <char> in font <font>!`   | the font has no glyph for the character, so the PDF lacks it (`10^-13` → `10^13`) |
+| `undefined-references`    | `LaTeX Warning: There were undefined references.`         | the PDF prints `??` for a `\ref`, or `[?]` for a `\cite` without natbib           |
+| `undefined-citations`     | `Package natbib Warning: There were undefined citations.` | the PDF prints `[?]` for a `\cite` (natbib)                                       |
+| `multiply-defined-labels` | `LaTeX Warning: There were multiply-defined labels.`      | a `\ref` may point at the wrong one of two labels                                 |
+
+Every other warning — overfull and underfull boxes, font substitutions, "Rerun to get …" — leaves
+the build as it was. The failure quotes each distinct line once, with how many times the log has it
+(here `\char"FF` in `cmr10`, measured on TeX Live 2026; TeX writes the character as one raw byte,
+which is no UTF-8 character, so it shows as `�`):
+
+```
+  ✗ compile: pdflatex exited 0, but its final log carries a warning that fails the build
+      lost-character — the font has no glyph for this character, so pdflatex left it out of the PDF:
+        Missing character: There is no � in font cmr10! (2 times)
+      full log: papers/my-paper/paper.log
+      paper.pdf removed — a stale PDF must not pass for this build
+```
+
+⚠️ TeX writes the `Missing character` line only while `\tracinglostchars` is above 0. LaTeX sets it
+to 2 (TeX Live 2026); a paper that sets it to 0 hides the line, and this check sees nothing. At 3
+and above TeX makes it an error, and the build fails on pdflatex's exit code instead.
+
 **A paper with no `paper.tex` is a FAILURE, not a skip.** "Nothing to build" and "built" must never
 look alike: the corpus this came from once let a paper reach its venue without a single paper job
 having run on it, because a missing build read as nothing to do.

package/docs/e2e.md

@@ -98,6 +98,7 @@ A new venue fixture is a new folder: its paper, its `paperlint.json`, its `expec
 | `broken`             | a failing build names pdflatex and its exit code, quotes the error line and its `l.NNN` context, and deletes the stale `paper.pdf` planted before the run                                                                                                                                                                                                                                                                                                                                              |
 | `no-source`          | a paper with no `paper.tex` is named separately, and the run as a whole is a failure                                                                                                                                                                                                                                                                                                                                                                                                                   |
 | `empty`              | a document with no pages: pdflatex exits 0 and writes no PDF, and that is a failure, not a green `paper.pdf`                                                                                                                                                                                                                                                                                                                                                                                           |
+| `lost-character`     | pdflatex exits 0 and writes a PDF without a character its font cannot draw (`\char"FF` in cmr10); the build fails, quotes the `Missing character` line from the log and leaves no `paper.pdf`                                                                                                                                                                                                                                                                                                          |
 | `aidc`               | a real `[conference,compsoc]{IEEEtran}` paper builds on paperlint's TeX Live in NimbusRomNo9L, `tex/template`, `tex/required-section` and the `pdf/*` rules find nothing, and `tex/venue-leftover` warns once, on its planted line. It declares `identity` and names nobody, so `anonymity/identity` is silent on a real build, and `format/page-limit` finds the IEEEtran «References» heading                                                                                                        |
 | `anon-*`             | six AIDC papers, each planting the declared (invented) name on ONE path, and `anonymity/identity` reports exactly one finding naming where: `author` the author block · `ack` an acknowledgments paragraph · `bib` a self-citation, printed by `IEEEtran.bst` as «A. Example» · `pdfauthor` `\hypersetup{pdfauthor=…}`, on no page · `href` a link whose target is the author's account while its text is not (the anonymous mirror beside it is not reported) · `macro` the name behind `\newcommand` |
 | `msr`                | a real `[10pt,conference]{IEEEtran}` paper whose ten pages of main text include an appendix before the references, then two pages of only references: `format/page-limit`, `tex/template` and `anonymity/identity` find nothing. banal's count of the same PDF (body 9, references 3) would have failed it                                                                                                                                                                                             |