paperlint 2.0.0

package/dist/domain/result.d.ts

@@ -0,0 +1,23 @@
+/**
+ * The outcome of something that can fail, as a value: the shape paperlint already spoke in plain unions
+ * (`{ ok: true, … } | { ok: false, … }`), made generic. No classes and no fluent API — a `switch`
+ * on `ok` reads the same as every other union in the package.
+ */
+export type Result<T, E> = {
+    readonly ok: true;
+    readonly value: T;
+} | {
+    readonly ok: false;
+    readonly error: E;
+};
+export declare const ok: <T>(value: T) => Result<T, never>;
+export declare const err: <E>(error: E) => Result<never, E>;
+export declare const map: <T, U, E>(r: Result<T, E>, f: (t: T) => U) => Result<U, E>;
+export declare const andThen: <T, U, E, F>(r: Result<T, E>, f: (t: T) => Result<U, F>) => Result<U, E | F>;
+export declare const match: <T, E, R>(r: Result<T, E>, on: {
+    readonly ok: (t: T) => R;
+    readonly err: (e: E) => R;
+}) => R;
+/** The `default` of an exhaustive `switch`: a new variant is a compile error, not a silent fall-through. */
+export declare function assertNever(x: never): never;
+//# sourceMappingURL=result.d.ts.map

package/dist/domain/result.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.d.ts","sourceRoot":"","sources":["../../src/domain/result.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,MAAM,MAAM,CAAC,CAAC,EAAE,CAAC,IACnB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACxC;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,CAAC;AAE9C,eAAO,MAAM,EAAE,GAAI,CAAC,EAAE,OAAO,CAAC,KAAG,MAAM,CAAC,CAAC,EAAE,KAAK,CAA0B,CAAC;AAC3E,eAAO,MAAM,GAAG,GAAI,CAAC,EAAE,OAAO,CAAC,KAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAA2B,CAAC;AAE7E,eAAO,MAAM,GAAG,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAC/C,CAAC;AAE5B,eAAO,MAAM,OAAO,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAChC,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EACf,GAAG,CAAC,CAAC,EAAE,CAAC,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,KACxB,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAA4B,CAAC;AAE/C,eAAO,MAAM,KAAK,GAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAC3B,GAAG,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,EACf,IAAI;IAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAA;CAAE,KAC1D,CAA8C,CAAC;AAElD,4GAA4G;AAC5G,wBAAgB,WAAW,CAAC,CAAC,EAAE,KAAK,GAAG,KAAK,CAE3C"}

package/dist/domain/result.js

@@ -0,0 +1,10 @@
+export const ok = (value) => ({ ok: true, value });
+export const err = (error) => ({ ok: false, error });
+export const map = (r, f) => r.ok ? ok(f(r.value)) : r;
+export const andThen = (r, f) => (r.ok ? f(r.value) : r);
+export const match = (r, on) => (r.ok ? on.ok(r.value) : on.err(r.error));
+/** The `default` of an exhaustive `switch`: a new variant is a compile error, not a silent fall-through. */
+export function assertNever(x) {
+    throw new Error(`unhandled variant: ${JSON.stringify(x)}`);
+}
+//# sourceMappingURL=result.js.map

package/dist/domain/result.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"result.js","sourceRoot":"","sources":["../../src/domain/result.ts"],"names":[],"mappings":"AASA,MAAM,CAAC,MAAM,EAAE,GAAG,CAAI,KAAQ,EAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3E,MAAM,CAAC,MAAM,GAAG,GAAG,CAAI,KAAQ,EAAoB,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;AAE7E,MAAM,CAAC,MAAM,GAAG,GAAG,CAAU,CAAe,EAAE,CAAc,EAAgB,EAAE,CAC5E,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE5B,MAAM,CAAC,MAAM,OAAO,GAAG,CACrB,CAAe,EACf,CAAyB,EACP,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAE/C,MAAM,CAAC,MAAM,KAAK,GAAG,CACnB,CAAe,EACf,EAA2D,EACxD,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;AAElD,4GAA4G;AAC5G,MAAM,UAAU,WAAW,CAAC,CAAQ;IAClC,MAAM,IAAI,KAAK,CAAC,sBAAsB,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;AAC7D,CAAC"}

package/dist/domain/sha256.d.ts

@@ -0,0 +1,7 @@
+import type { Opaque } from "ts-essentials";
+/** 64 lowercase hex digits. Minted by `parseSha256` (a literal) or `sha256Hex` (bytes) only. */
+export type Sha256 = Opaque<string, "Sha256">;
+/** A sha256 written down as text — a pin, an option — checked where it is written, not where it is used. */
+export declare function parseSha256(s: string): Sha256;
+export declare const sha256Hex: (bytes: Uint8Array) => Sha256;
+//# sourceMappingURL=sha256.d.ts.map

package/dist/domain/sha256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.d.ts","sourceRoot":"","sources":["../../src/domain/sha256.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAE5C,gGAAgG;AAChG,MAAM,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAI9C,4GAA4G;AAC5G,wBAAgB,WAAW,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAI7C;AAED,eAAO,MAAM,SAAS,GAAI,OAAO,UAAU,KAAG,MACc,CAAC"}

package/dist/domain/sha256.js

@@ -0,0 +1,14 @@
+/**
+ * A sha256 as a value: bytes hashed, or a digest written down as text and checked where it is
+ * written. Tool-free — a pinned download, a facts file's `pdf_sha256` and a cache key all use it.
+ */
+import { createHash } from "node:crypto";
+const SHA256 = /^[0-9a-f]{64}$/;
+/** A sha256 written down as text — a pin, an option — checked where it is written, not where it is used. */
+export function parseSha256(s) {
+    if (!SHA256.test(s))
+        throw new Error(`not a sha256 (64 lowercase hex digits): ${s}`);
+    return s;
+}
+export const sha256Hex = (bytes) => createHash("sha256").update(bytes).digest("hex");
+//# sourceMappingURL=sha256.js.map

package/dist/domain/sha256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sha256.js","sourceRoot":"","sources":["../../src/domain/sha256.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAMzC,MAAM,MAAM,GAAG,gBAAgB,CAAC;AAEhC,4GAA4G;AAC5G,MAAM,UAAU,WAAW,CAAC,CAAS;IACnC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,EAAE,CAAC,CAAC;IAClE,OAAO,CAAW,CAAC;AACrB,CAAC;AAED,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,KAAiB,EAAU,EAAE,CACrD,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,KAAK,CAAW,CAAC"}

package/dist/domain/text.d.ts

@@ -0,0 +1,6 @@
+/** Text shapes every layer speaks: a message of one or more lines, and the line a failure shows. */
+/** A message: the first line says what happened, any further lines are detail. Never empty. */
+export type Lines = readonly [string, ...string[]];
+/** The first non-blank line of a stream — what a failure shows. */
+export declare const firstLine: (s: string) => string;
+//# sourceMappingURL=text.d.ts.map

package/dist/domain/text.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.d.ts","sourceRoot":"","sources":["../../src/domain/text.ts"],"names":[],"mappings":"AAAA,oGAAoG;AAEpG,+FAA+F;AAC/F,MAAM,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,EAAE,GAAG,MAAM,EAAE,CAAC,CAAC;AAEnD,mEAAmE;AACnE,eAAO,MAAM,SAAS,GAAI,GAAG,MAAM,KAAG,MAId,CAAC"}

package/dist/domain/text.js

@@ -0,0 +1,7 @@
+/** Text shapes every layer speaks: a message of one or more lines, and the line a failure shows. */
+/** The first non-blank line of a stream — what a failure shows. */
+export const firstLine = (s) => s
+    .split("\n")
+    .map((l) => l.trim())
+    .find(Boolean) ?? "";
+//# sourceMappingURL=text.js.map

package/dist/domain/text.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"text.js","sourceRoot":"","sources":["../../src/domain/text.ts"],"names":[],"mappings":"AAAA,oGAAoG;AAKpG,mEAAmE;AACnE,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,CAAS,EAAU,EAAE,CAC7C,CAAC;KACE,KAAK,CAAC,IAAI,CAAC;KACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;KACpB,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC"}

package/dist/engine.d.ts

@@ -0,0 +1,93 @@
+/**
+ * WHICH TeX LIVE `paperlint build` COMPILES WITH — decided from facts, and never a TeX Live that lacks a
+ * package the paper's venue declares.
+ *
+ * 🔴 WHY "HAS pdflatex" IS NOT THE QUESTION. A TeX Live without `libertine.sty` builds an acmart
+ * paper GREEN: the class notices the missing font, falls back to Computer Modern, and the PDF looks
+ * fine in the wrong typeface with another pagination. That is how a submitted paper went out. So a
+ * TeX Live qualifies only when `kpsewhich` finds every file the venue declares (issue #26).
+ *
+ * The order (the Playwright pattern, decided 2026-09-24):
+ *   1. rpp's own cache (`paperlint toolchain` installs it) — when it has everything;
+ *   2. a TeX Live already on PATH — when IT has everything;
+ *   3. neither: on a terminal, ask once and install; without one (CI, an agent), refuse in one line
+ *      that names `npx paperlint toolchain` and the missing packages. Never a silent install without a
+ *      human, never a build on a TeX Live that would typeset the wrong font.
+ *
+ * `resolveEngine` is that order as a PURE function over `EngineFacts`, table-tested. The rest of
+ * this file gathers the facts (probing a tree runs `kpsewhich` through the injected `run`, the port
+ * `build.ts` already uses) and acts on the decision.
+ */
+import { spawnSync } from "node:child_process";
+import type { TexRequirements } from "./tex-requirements.ts";
+/** A process runner with `spawnSync`'s shape — the port the harness replaces. */
+export type Runner = typeof spawnSync;
+/** One TeX Live and what it lacks for the papers at hand. */
+export interface TreeProbe {
+    /** How to name it to a human: `paperlint cache, TeX Live 2026` / `/usr/bin/pdflatex`. */
+    readonly label: string;
+    /** The directory holding `pdflatex` and `kpsewhich`. */
+    readonly bin: string;
+    /** Declared packages whose proof files `kpsewhich` did not find, sorted. */
+    readonly missing: readonly string[];
+}
+export interface EngineFacts {
+    /** install-tl-unx runs here (Linux, macOS). */
+    readonly supported: boolean;
+    /** rpp's cached TeX Live, probed — or null when there is none. */
+    readonly cache: TreeProbe | null;
+    /** The `pdflatex` on PATH, probed — or null when there is none. */
+    readonly system: TreeProbe | null;
+    /** A human can answer a question (a terminal on both ends, CI unset). */
+    readonly interactive: boolean;
+    /** Every package the papers need — what an install into an EMPTY cache would add. */
+    readonly required: readonly string[];
+}
+export type EngineDecision = {
+    readonly kind: "use-cache";
+    readonly tree: TreeProbe;
+} | {
+    readonly kind: "use-system";
+    readonly tree: TreeProbe;
+} | {
+    readonly kind: "ask";
+    readonly missing: readonly string[];
+} | {
+    readonly kind: "refuse";
+    readonly reason: "unsupported" | "not-installed";
+    readonly missing: readonly string[];
+};
+/**
+ * The decision. `missing` in `ask` and `refuse` is what `paperlint toolchain` would install: the cache's
+ * gaps when a cache exists, every required package when it does not.
+ */
+export declare function resolveEngine(f: EngineFacts): EngineDecision;
+/** install-tl-unx covers Linux and macOS; Windows needs install-tl-windows and is not supported. */
+export declare const supportedPlatform: (platform: NodeJS.Platform) => boolean;
+/**
+ * The declared packages whose proofs are NOT in `found` (the paths `kpsewhich` printed). kpsewhich
+ * given several names prints one line per name it found and nothing for the rest, so the match is
+ * by the file name of each printed path.
+ */
+export declare function missingPackages(packages: TexRequirements["packages"], found: string): string[];
+/**
+ * `path` is a program that can be started: a REGULAR FILE, and on POSIX one this process may
+ * execute. `existsSync` is not the question — it says yes to a directory and to a file without
+ * the execute bit, and `paperlint toolchain --check` then reported a verified tree whose `texcount`
+ * could not run.
+ *
+ * On win32 `X_OK` means nothing (Node documents it as behaving like `F_OK` there): whether a file
+ * runs is decided by its extension, not a permission bit. So on win32 the check is "exists and is
+ * a regular file", which is all the platform can answer.
+ */
+export declare function isExecutable(path: string, platform?: NodeJS.Platform): boolean;
+/** The declared tools (programs) that have no executable in `bin`. */
+export declare function missingTools(tools: TexRequirements["tools"], bin: string, exists?: (path: string) => boolean): string[];
+/**
+ * Ask the `kpsewhich` in `bin` for every proof file. A kpsewhich that cannot be started finds
+ * nothing, so every package counts as missing — "could not ask" must never read as "all present".
+ */
+export declare function probeTree(bin: string, packages: TexRequirements["packages"], run?: Runner): string[];
+/** The first directory on `path` holding a runnable `name` — what a shell would run. */
+export declare function whichOnPath(name: string, path: string | undefined, exists?: (p: string) => boolean): string | null;
+//# sourceMappingURL=engine.d.ts.map

package/dist/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAI/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAE7D,iFAAiF;AACjF,MAAM,MAAM,MAAM,GAAG,OAAO,SAAS,CAAC;AAEtC,6DAA6D;AAC7D,MAAM,WAAW,SAAS;IACxB,yFAAyF;IACzF,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,wDAAwD;IACxD,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,WAAW;IAC1B,+CAA+C;IAC/C,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,kEAAkE;IAClE,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAAC;IACjC,mEAAmE;IACnE,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAAC;IAClC,yEAAyE;IACzE,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,qFAAqF;IACrF,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GACxD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;CAAE,GACzD;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAC7D;IACE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,eAAe,CAAC;IACjD,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC,CAAC;AAEN;;;GAGG;AACH,wBAAgB,aAAa,CAAC,CAAC,EAAE,WAAW,GAAG,cAAc,CAS5D;AAID,oGAAoG;AACpG,eAAO,MAAM,iBAAiB,GAAI,UAAU,MAAM,CAAC,QAAQ,KAAG,OACf,CAAC;AAEhD;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,eAAe,CAAC,UAAU,CAAC,EACrC,KAAK,EAAE,MAAM,GACZ,MAAM,EAAE,CAYV;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EAEZ,QAAQ,GAAE,MAAM,CAAC,QAA2B,GAC3C,OAAO,CAQT;AAED,sEAAsE;AACtE,wBAAgB,YAAY,CAC1B,KAAK,EAAE,eAAe,CAAC,OAAO,CAAC,EAC/B,GAAG,EAAE,MAAM,EACX,MAAM,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAsB,GAC/C,MAAM,EAAE,CAKV;AAOD;;;GAGG;AACH,wBAAgB,SAAS,CACvB,GAAG,EAAE,MAAM,EACX,QAAQ,EAAE,eAAe,CAAC,UAAU,CAAC,EACrC,GAAG,GAAE,MAAkB,GACtB,MAAM,EAAE,CASV;AAED,wFAAwF;AACxF,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,MAAM,GAAG,SAAS,EACxB,MAAM,GAAE,CAAC,CAAC,EAAE,MAAM,KAAK,OAAsB,GAC5C,MAAM,GAAG,IAAI,CAIf"}

package/dist/engine.js

@@ -0,0 +1,119 @@
+/**
+ * WHICH TeX LIVE `paperlint build` COMPILES WITH — decided from facts, and never a TeX Live that lacks a
+ * package the paper's venue declares.
+ *
+ * 🔴 WHY "HAS pdflatex" IS NOT THE QUESTION. A TeX Live without `libertine.sty` builds an acmart
+ * paper GREEN: the class notices the missing font, falls back to Computer Modern, and the PDF looks
+ * fine in the wrong typeface with another pagination. That is how a submitted paper went out. So a
+ * TeX Live qualifies only when `kpsewhich` finds every file the venue declares (issue #26).
+ *
+ * The order (the Playwright pattern, decided 2026-09-24):
+ *   1. rpp's own cache (`paperlint toolchain` installs it) — when it has everything;
+ *   2. a TeX Live already on PATH — when IT has everything;
+ *   3. neither: on a terminal, ask once and install; without one (CI, an agent), refuse in one line
+ *      that names `npx paperlint toolchain` and the missing packages. Never a silent install without a
+ *      human, never a build on a TeX Live that would typeset the wrong font.
+ *
+ * `resolveEngine` is that order as a PURE function over `EngineFacts`, table-tested. The rest of
+ * this file gathers the facts (probing a tree runs `kpsewhich` through the injected `run`, the port
+ * `build.ts` already uses) and acts on the decision.
+ */
+// eslint-disable-next-line boundaries/dependencies -- legacy I/O, moves behind a port in #76
+import { spawnSync } from "node:child_process";
+// eslint-disable-next-line boundaries/dependencies -- legacy I/O, moves behind a port in #76
+import { accessSync, constants, statSync } from "node:fs";
+import { basename, delimiter, join } from "node:path";
+/**
+ * The decision. `missing` in `ask` and `refuse` is what `paperlint toolchain` would install: the cache's
+ * gaps when a cache exists, every required package when it does not.
+ */
+export function resolveEngine(f) {
+    if (f.cache && f.cache.missing.length === 0)
+        return { kind: "use-cache", tree: f.cache };
+    if (f.system && f.system.missing.length === 0)
+        return { kind: "use-system", tree: f.system };
+    const missing = f.cache ? f.cache.missing : f.required;
+    if (!f.supported)
+        return { kind: "refuse", reason: "unsupported", missing };
+    if (f.interactive)
+        return { kind: "ask", missing };
+    return { kind: "refuse", reason: "not-installed", missing };
+}
+// ── facts ───────────────────────────────────────────────────────────────────────────────
+/** install-tl-unx covers Linux and macOS; Windows needs install-tl-windows and is not supported. */
+export const supportedPlatform = (platform) => platform === "linux" || platform === "darwin";
+/**
+ * The declared packages whose proofs are NOT in `found` (the paths `kpsewhich` printed). kpsewhich
+ * given several names prints one line per name it found and nothing for the rest, so the match is
+ * by the file name of each printed path.
+ */
+export function missingPackages(packages, found) {
+    const have = new Set(found
+        .split("\n")
+        .map((l) => l.trim())
+        .filter(Boolean)
+        .map((p) => basename(p)));
+    return Object.entries(packages)
+        .filter(([, proofs]) => proofs.some((f) => !have.has(f)))
+        .map(([name]) => name)
+        .sort();
+}
+/**
+ * `path` is a program that can be started: a REGULAR FILE, and on POSIX one this process may
+ * execute. `existsSync` is not the question — it says yes to a directory and to a file without
+ * the execute bit, and `paperlint toolchain --check` then reported a verified tree whose `texcount`
+ * could not run.
+ *
+ * On win32 `X_OK` means nothing (Node documents it as behaving like `F_OK` there): whether a file
+ * runs is decided by its extension, not a permission bit. So on win32 the check is "exists and is
+ * a regular file", which is all the platform can answer.
+ */
+export function isExecutable(path, 
+// eslint-disable-next-line no-restricted-globals -- legacy I/O, moves behind a port in #76
+platform = process.platform) {
+    try {
+        if (!statSync(path).isFile())
+            return false;
+        if (platform !== "win32")
+            accessSync(path, constants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** The declared tools (programs) that have no executable in `bin`. */
+export function missingTools(tools, bin, exists = isExecutable) {
+    return Object.entries(tools)
+        .filter(([, bins]) => bins.some((b) => !exists(join(bin, b))))
+        .map(([name]) => name)
+        .sort();
+}
+/** Every proof file, once — the arguments of one `kpsewhich` call. */
+const proofFiles = (packages) => [
+    ...new Set(Object.values(packages).flat()),
+];
+/**
+ * Ask the `kpsewhich` in `bin` for every proof file. A kpsewhich that cannot be started finds
+ * nothing, so every package counts as missing — "could not ask" must never read as "all present".
+ */
+export function probeTree(bin, packages, run = spawnSync) {
+    const files = proofFiles(packages);
+    if (files.length === 0)
+        return [];
+    const r = run(join(bin, "kpsewhich"), files, {
+        encoding: "utf8",
+        stdio: ["ignore", "pipe", "pipe"],
+    });
+    if (r.error)
+        return Object.keys(packages).sort();
+    return missingPackages(packages, String(r.stdout ?? ""));
+}
+/** The first directory on `path` holding a runnable `name` — what a shell would run. */
+export function whichOnPath(name, path, exists = isExecutable) {
+    for (const dir of (path ?? "").split(delimiter))
+        if (dir && exists(join(dir, name)))
+            return dir;
+    return null;
+}
+//# sourceMappingURL=engine.js.map

package/dist/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,6FAA6F;AAC7F,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC/C,6FAA6F;AAC7F,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1D,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAuCtD;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,CAAc;IAC1C,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QACzC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IAC9C,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC;IAChD,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IACvD,IAAI,CAAC,CAAC,CAAC,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;IAC5E,IAAI,CAAC,CAAC,WAAW;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IACnD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,eAAe,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC;AAED,2FAA2F;AAE3F,oGAAoG;AACpG,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,QAAyB,EAAW,EAAE,CACtE,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,CAAC;AAEhD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,QAAqC,EACrC,KAAa;IAEb,MAAM,IAAI,GAAG,IAAI,GAAG,CAClB,KAAK;SACF,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAC3B,CAAC;IACF,OAAO,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC;SAC5B,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;SACrB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,YAAY,CAC1B,IAAY;AACZ,2FAA2F;AAC3F,WAA4B,OAAO,CAAC,QAAQ;IAE5C,IAAI,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE;YAAE,OAAO,KAAK,CAAC;QAC3C,IAAI,QAAQ,KAAK,OAAO;YAAE,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;QAC3D,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,YAAY,CAC1B,KAA+B,EAC/B,GAAW,EACX,SAAoC,YAAY;IAEhD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC;SACzB,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;SAC7D,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC;SACrB,IAAI,EAAE,CAAC;AACZ,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,GAAG,CAAC,QAAqC,EAAY,EAAE,CAAC;IACtE,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;CAC3C,CAAC;AAEF;;;GAGG;AACH,MAAM,UAAU,SAAS,CACvB,GAAW,EACX,QAAqC,EACrC,MAAc,SAAS;IAEvB,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC;IACnC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,EAAE,KAAK,EAAE;QAC3C,QAAQ,EAAE,MAAM;QAChB,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;KAClC,CAAC,CAAC;IACH,IAAI,CAAC,CAAC,KAAK;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,EAAE,CAAC;IACjD,OAAO,eAAe,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,CAAC;AAC3D,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,WAAW,CACzB,IAAY,EACZ,IAAwB,EACxB,SAAiC,YAAY;IAE7C,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC;QAC7C,IAAI,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAAE,OAAO,GAAG,CAAC;IACjD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/exit-code.d.ts

@@ -0,0 +1,22 @@
+/**
+ * The exit-code contract of `skills/render-paper/extract-pdf-facts.mjs`, as a total function. CI
+ * steps branch on these codes, so the mapping lives in one table instead of in five `process.exit`
+ * calls, and `--strict` changes exactly the rows it names.
+ *
+ *   0  facts written — or, without `--strict`, not taken and said so (a local run may lack banal)
+ *   1  no such path; or, with `--strict`, the facts could not be taken (unreadable PDF, no geometry)
+ *   2  usage
+ *   3  the paper declares an artifact that is not built
+ */
+export type ShimOutcome = "written"
+/** Measured, but banal gave no geometry (not found, no perl, failed). */
+ | "no-geometry"
+/** pdf.js could not read the PDF. */
+ | "unreadable" | "no-such-path" | "no-artifact" | "usage";
+export interface ShimMode {
+    /** CI: a missing tool is an ENVIRONMENT error, and a skipped step must not look like a passed one. */
+    readonly strict: boolean;
+}
+export type ExitCode = 0 | 1 | 2 | 3;
+export declare const exitCodeFor: (o: ShimOutcome, m: ShimMode) => ExitCode;
+//# sourceMappingURL=exit-code.d.ts.map

package/dist/exit-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-code.d.ts","sourceRoot":"","sources":["../src/exit-code.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GACnB,SAAS;AACX,yEAAyE;GACvE,aAAa;AACf,qCAAqC;GACnC,YAAY,GACZ,cAAc,GACd,aAAa,GACb,OAAO,CAAC;AAEZ,MAAM,WAAW,QAAQ;IACvB,sGAAsG;IACtG,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,MAAM,QAAQ,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AAWrC,eAAO,MAAM,WAAW,GAAI,GAAG,WAAW,EAAE,GAAG,QAAQ,KAAG,QAC7C,CAAC"}

package/dist/exit-code.js

@@ -0,0 +1,10 @@
+const CODES = {
+    written: () => 0,
+    "no-geometry": (m) => (m.strict ? 1 : 0),
+    unreadable: (m) => (m.strict ? 1 : 0),
+    "no-such-path": () => 1,
+    "no-artifact": () => 3,
+    usage: () => 2,
+};
+export const exitCodeFor = (o, m) => CODES[o](m);
+//# sourceMappingURL=exit-code.js.map

package/dist/exit-code.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exit-code.js","sourceRoot":"","sources":["../src/exit-code.ts"],"names":[],"mappings":"AA2BA,MAAM,KAAK,GAA+D;IACxE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAChB,aAAa,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxC,UAAU,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACrC,cAAc,EAAE,GAAG,EAAE,CAAC,CAAC;IACvB,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IACtB,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;CACf,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAc,EAAE,CAAW,EAAY,EAAE,CACnE,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC"}

package/dist/facts-file.d.ts

@@ -0,0 +1,96 @@
+import { type FontFact, type LastPage } from "./pdf-geometry.ts";
+import { type PdfFacts, type PdfReader } from "./pdf-facts.ts";
+import { type FactsGeometryFields, type Geometry } from "./domain/geometry.ts";
+import type { MeasureGeometry } from "./ports/measure-geometry.ts";
+import type { Files } from "./ports/files.ts";
+import { type Result } from "./domain/result.ts";
+export declare const FACTS_SCHEMA = 2;
+export declare const FACTS_DIR = "_build";
+export declare const FACTS_FILE = "paper.facts.json";
+/** Where a paper's facts live. */
+export declare const factsPath: (paperDir: string) => string;
+/** The `venue.json` a paper declares: where it is submitted, as which kind, and where its PDF is. */
+export interface VenueDecl {
+    readonly venue: string;
+    readonly kind: string | null;
+    readonly pdf: string | null;
+}
+/** A parsed `venue.json`, or null when it names no venue. */
+export declare function parseVenueDecl(json: unknown): VenueDecl | null;
+/**
+ * The paper's `venue.json`, or null when there is none or it names no venue. The one reader of
+ * that file: the build, the facts writer and the shim all read it here.
+ */
+export declare function declaredVenue(files: Files, paperDir: string): VenueDecl | null;
+/** One font as the facts file spells it. `type` keeps poppler's spelling (`Type 3`). */
+export interface FontEntry {
+    readonly name: string;
+    readonly type: string;
+    readonly embedded: boolean;
+    readonly program: string;
+}
+export type LastPageEntry = {
+    readonly kind: "measured";
+    readonly columns_pt: readonly [number, number];
+} | {
+    readonly kind: "stub";
+    readonly words: number;
+} | {
+    readonly kind: "review";
+    readonly line_numbers: number;
+};
+/** The facts file's content. */
+export type FactsDocument = {
+    readonly schema: typeof FACTS_SCHEMA;
+    readonly pdf: string;
+    readonly pdf_sha256: string;
+    readonly venue: string | null;
+    readonly kind: string | null;
+    readonly npages: number;
+    readonly fonts_source: "pdfjs-drawn";
+    readonly fonts: readonly FontEntry[];
+    readonly last_page: LastPageEntry;
+    /** Schema 1's field, kept: the two heights, or null when the last page is a stub or a review build. */
+    readonly last_page_cols_pt: readonly [number, number] | null;
+} & FactsGeometryFields;
+export declare function fontEntry(f: FontFact): FontEntry;
+export declare function lastPageEntry(p: LastPage): LastPageEntry;
+/** Everything the document is assembled from. */
+export interface FactsInput {
+    /** The PDF's path relative to the paper directory, with forward slashes. */
+    readonly pdf: string;
+    readonly sha: string;
+    readonly venue: string | null;
+    readonly kind: string | null;
+    readonly read: PdfFacts;
+    readonly geometry: Geometry;
+}
+/** Assemble the document. Pure. */
+export declare function factsDocument(i: FactsInput): FactsDocument;
+/** What `measurePaper` needs besides the paper and its PDF. */
+export interface MeasureOptions {
+    readonly readPdf: PdfReader;
+    readonly venue?: string | null;
+    readonly kind?: string | null;
+    /** The page-geometry measurer (banal, as the composition root wired it). */
+    readonly measure: MeasureGeometry;
+    /** Where the PDF and `venue.json` are read from. */
+    readonly files: Files;
+}
+/** The document, and the geometry it was projected from — a caller decides what "no geometry" means. */
+export interface Measured {
+    readonly facts: FactsDocument;
+    readonly geometry: Geometry;
+}
+/**
+ * Measure `pdf`: pdf.js always, banal when one is found. Writes nothing. The error is one line: the
+ * PDF could not be read. Whether a missing geometry is a failure is the CALLER's policy — the build
+ * writes the facts anyway, the shim's `--strict` refuses them.
+ */
+export declare function measurePaper(paperDir: string, pdf: string, o: MeasureOptions): Promise<Result<Measured, string>>;
+/**
+ * Write `<paperDir>/_build/paper.facts.json`, atomically. A caller that decides not to write leaves
+ * an earlier file as it was — its `pdf_sha256` no longer matches the PDF, so a rule refuses it.
+ */
+export declare function writeFactsFile(files: Files, paperDir: string, facts: FactsDocument): string;
+//# sourceMappingURL=facts-file.d.ts.map

package/dist/facts-file.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facts-file.d.ts","sourceRoot":"","sources":["../src/facts-file.ts"],"names":[],"mappings":"AAgCA,OAAO,EAGL,KAAK,QAAQ,EACb,KAAK,QAAQ,EACd,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAmB,KAAK,QAAQ,EAAE,KAAK,SAAS,EAAE,MAAM,gBAAgB,CAAC;AAChF,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAE9B,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,6BAA6B,CAAC;AAEnE,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAW,KAAK,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE1D,eAAO,MAAM,YAAY,IAAI,CAAC;AAC9B,eAAO,MAAM,SAAS,WAAW,CAAC;AAClC,eAAO,MAAM,UAAU,qBAAqB,CAAC;AAE7C,kCAAkC;AAClC,eAAO,MAAM,SAAS,GAAI,UAAU,MAAM,KAAG,MACN,CAAC;AAExC,qGAAqG;AACrG,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAUD,6DAA6D;AAC7D,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAK9D;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAC3B,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,MAAM,GACf,SAAS,GAAG,IAAI,CAKlB;AAID,wFAAwF;AACxF,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,aAAa,GACrB;IACE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChD,GACD;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjD;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;CAAE,CAAC;AAE/D,gCAAgC;AAChC,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,YAAY,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,YAAY,EAAE,aAAa,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,SAAS,SAAS,EAAE,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,uGAAuG;IACvG,QAAQ,CAAC,iBAAiB,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CAC9D,GAAG,mBAAmB,CAAC;AAExB,wBAAgB,SAAS,CAAC,CAAC,EAAE,QAAQ,GAAG,SAAS,CAShD;AAED,wBAAgB,aAAa,CAAC,CAAC,EAAE,QAAQ,GAAG,aAAa,CAMxD;AAED,iDAAiD;AACjD,MAAM,WAAW,UAAU;IACzB,4EAA4E;IAC5E,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;CAC7B;AAED,mCAAmC;AACnC,wBAAgB,aAAa,CAAC,CAAC,EAAE,UAAU,GAAG,aAAa,CAgB1D;AAID,+DAA+D;AAC/D,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAC5B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;IAClC,oDAAoD;IACpD,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;CACvB;AAED,wGAAwG;AACxG,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;CAC7B;AAID;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,QAAQ,EAAE,MAAM,EAChB,GAAG,EAAE,MAAM,EACX,CAAC,EAAE,cAAc,GAChB,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAgBnC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,KAAK,EACZ,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,aAAa,GACnB,MAAM,CAOR"}

package/dist/facts-file.js

@@ -0,0 +1,134 @@
+/**
+ * THE ONE WRITER of `<paper>/_build/paper.facts.json` — what a finished PDF measures, as data a lint
+ * rule can judge. It judges nothing itself.
+ *
+ * Two callers, one function: `paperlint build` writes the facts right after a successful compile, and
+ * `skills/render-paper/extract-pdf-facts.mjs` is a thin command-line shim over the same
+ * `measurePaper` + `writeFactsFile` for PDFs paperlint did not build and for CI steps that name that script by path. Two
+ * writers would drift — one would learn a field the other does not — and the rules reading the file
+ * cannot tell which wrote it.
+ *
+ * ── WHERE THE FACTS COME FROM ──────────────────────────────────────────────────
+ * - pdf.js (`pdf-facts.ts`) — page count, the fonts the pages draw text with, the last page. Always.
+ * - a page-geometry measurer, through the `MeasureGeometry` port (`ports/measure-geometry.ts`) —
+ *   today banal (Eddie Kohler's page-geometry tool, the one HotCRP's format checker runs) — paper size,
+ *   columns, body and reference font sizes, page types. It runs on pdftohtml-style XML that paperlint
+ *   writes from the same pdf.js read (`adapters/banal/xml.ts`), so poppler is not needed (`adapters/banal/`).
+ *   OPTIONAL: banal is GPL and paperlint does not ship it — `paperlint toolchain` fetches it. Found ⇒ its fields
+ *   are filled and `geometry_source` says `banal`; not found ⇒ they are null and `geometry_source`
+ *   is null, so a rule can tell "not measured" from "measured as zero". Whether that is a failure is
+ *   the caller's policy: `extract-pdf-facts.mjs --strict` refuses to write such facts.
+ *
+ * ── SCHEMA 2 (2026-09-24) ───────────────────────────────────────────────────────
+ * Every schema-1 field keeps its name. The number changed because three meanings did, and a
+ * consumer that pins the schema must hear about it rather than read new meanings under the old
+ * number: fonts are the ones pages DRAW (pdf.js), not every font in a resource dictionary; Type 3
+ * fonts are all named `Type3`; `embedded` means a usable program is present, so a corrupted one is
+ * false. `pdf` is now relative to the PAPER directory, not to wherever the command ran.
+ *
+ * 🔴 STALENESS. The PDF is not committed, so neither are these facts: they live in `_build/` and
+ * carry `pdf_sha256`. A rule compares it with the PDF on disk and refuses facts about another build.
+ */
+import { join, relative, sep } from "node:path";
+import { classifyLastPage, popplerType, } from "./pdf-geometry.js";
+import { describeFailure } from "./pdf-facts.js";
+import { flatGeometry, } from "./domain/geometry.js";
+import { sha256Hex } from "./domain/sha256.js";
+import { err, ok } from "./domain/result.js";
+export const FACTS_SCHEMA = 2;
+export const FACTS_DIR = "_build";
+export const FACTS_FILE = "paper.facts.json";
+/** Where a paper's facts live. */
+export const factsPath = (paperDir) => join(paperDir, FACTS_DIR, FACTS_FILE);
+/**
+ * A path as the caller gave it. The `Files` adapter resolves a relative one against the process's
+ * cwd, which is what these callers have always meant; the brand is not a claim this code checked it.
+ */
+const at = (p) => p;
+const str = (v) => (typeof v === "string" ? v : null);
+/** A parsed `venue.json`, or null when it names no venue. */
+export function parseVenueDecl(json) {
+    const d = typeof json === "object" && json !== null ? json : {};
+    const field = (k) => str(d[k]);
+    const venue = field("venue");
+    return venue ? { venue, kind: field("kind"), pdf: field("pdf") } : null;
+}
+/**
+ * The paper's `venue.json`, or null when there is none or it names no venue. The one reader of
+ * that file: the build, the facts writer and the shim all read it here.
+ */
+export function declaredVenue(files, paperDir) {
+    const bytes = files.readBytes(at(join(paperDir, "venue.json")));
+    return bytes === null
+        ? null
+        : parseVenueDecl(JSON.parse(new TextDecoder().decode(bytes)));
+}
+export function fontEntry(f) {
+    return {
+        name: f.name,
+        type: popplerType(f),
+        // A Type 3 font's glyphs are procedures inside the PDF: nothing is substituted, so it IS
+        // embedded (poppler says so too). Its defect is being Type 3, which `type` already names.
+        embedded: f.kind !== "not-embedded",
+        program: f.kind === "type3" ? "Type3" : f.program,
+    };
+}
+export function lastPageEntry(p) {
+    if (p.kind === "measured")
+        return { kind: "measured", columns_pt: [p.columns[0], p.columns[1]] };
+    if (p.kind === "review")
+        return { kind: "review", line_numbers: p.lineNumbers };
+    return { kind: "stub", words: p.words };
+}
+/** Assemble the document. Pure. */
+export function factsDocument(i) {
+    const last = lastPageEntry(classifyLastPage(i.read.last));
+    return {
+        schema: FACTS_SCHEMA,
+        pdf: i.pdf,
+        pdf_sha256: i.sha,
+        venue: i.venue,
+        kind: i.kind,
+        npages: i.read.pages,
+        fonts_source: "pdfjs-drawn",
+        fonts: i.read.fonts.kind === "drawn" ? i.read.fonts.list.map(fontEntry) : [],
+        last_page: last,
+        last_page_cols_pt: last.kind === "measured" ? last.columns_pt : null,
+        ...flatGeometry(i.geometry),
+    };
+}
+const posix = (p) => p.split(sep).join("/");
+/**
+ * Measure `pdf`: pdf.js always, banal when one is found. Writes nothing. The error is one line: the
+ * PDF could not be read. Whether a missing geometry is a failure is the CALLER's policy — the build
+ * writes the facts anyway, the shim's `--strict` refuses them.
+ */
+export async function measurePaper(paperDir, pdf, o) {
+    const r = await o.readPdf(pdf);
+    if (!r.ok)
+        return err(describeFailure(r, pdf));
+    const bytes = o.files.readBytes(at(pdf));
+    if (bytes === null)
+        return err(`${pdf}: gone after pdf.js read it`);
+    const geometry = o.measure.measure(r.facts.layout);
+    const decl = declaredVenue(o.files, paperDir);
+    const facts = factsDocument({
+        pdf: posix(relative(paperDir, pdf)),
+        sha: sha256Hex(bytes),
+        venue: o.venue ?? decl?.venue ?? null,
+        kind: o.kind ?? decl?.kind ?? null,
+        read: r.facts,
+        geometry,
+    });
+    return ok({ facts, geometry });
+}
+/**
+ * Write `<paperDir>/_build/paper.facts.json`, atomically. A caller that decides not to write leaves
+ * an earlier file as it was — its `pdf_sha256` no longer matches the PDF, so a rule refuses it.
+ */
+export function writeFactsFile(files, paperDir, facts) {
+    const out = factsPath(paperDir);
+    files.writeAtomic(at(out), new TextEncoder().encode(`${JSON.stringify(facts, null, 2)}\n`));
+    return out;
+}
+//# sourceMappingURL=facts-file.js.map

package/dist/facts-file.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facts-file.js","sourceRoot":"","sources":["../src/facts-file.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,WAAW,CAAC;AAChD,OAAO,EACL,gBAAgB,EAChB,WAAW,GAGZ,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,eAAe,EAAiC,MAAM,gBAAgB,CAAC;AAChF,OAAO,EACL,YAAY,GAGb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAI/C,OAAO,EAAE,GAAG,EAAE,EAAE,EAAe,MAAM,oBAAoB,CAAC;AAE1D,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,CAAC;AAC9B,MAAM,CAAC,MAAM,SAAS,GAAG,QAAQ,CAAC;AAClC,MAAM,CAAC,MAAM,UAAU,GAAG,kBAAkB,CAAC;AAE7C,kCAAkC;AAClC,MAAM,CAAC,MAAM,SAAS,GAAG,CAAC,QAAgB,EAAU,EAAE,CACpD,IAAI,CAAC,QAAQ,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AASxC;;;GAGG;AACH,MAAM,EAAE,GAAG,CAAC,CAAS,EAAgB,EAAE,CAAC,CAAiB,CAAC;AAE1D,MAAM,GAAG,GAAG,CAAC,CAAU,EAAiB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;AAE9E,6DAA6D;AAC7D,MAAM,UAAU,cAAc,CAAC,IAAa;IAC1C,MAAM,CAAC,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAChE,MAAM,KAAK,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,GAAG,CAAE,CAA6B,CAAC,CAAC,CAAC,CAAC,CAAC;IACpE,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC1E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,KAAY,EACZ,QAAgB;IAEhB,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC;IAChE,OAAO,KAAK,KAAK,IAAI;QACnB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAClE,CAAC;AAmCD,MAAM,UAAU,SAAS,CAAC,CAAW;IACnC,OAAO;QACL,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC;QACpB,yFAAyF;QACzF,0FAA0F;QAC1F,QAAQ,EAAE,CAAC,CAAC,IAAI,KAAK,cAAc;QACnC,OAAO,EAAE,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;KAClD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,CAAW;IACvC,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU;QACvB,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxE,IAAI,CAAC,CAAC,IAAI,KAAK,QAAQ;QACrB,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;AAC1C,CAAC;AAaD,mCAAmC;AACnC,MAAM,UAAU,aAAa,CAAC,CAAa;IACzC,MAAM,IAAI,GAAG,aAAa,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;IAC1D,OAAO;QACL,MAAM,EAAE,YAAY;QACpB,GAAG,EAAE,CAAC,CAAC,GAAG;QACV,UAAU,EAAE,CAAC,CAAC,GAAG;QACjB,KAAK,EAAE,CAAC,CAAC,KAAK;QACd,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK;QACpB,YAAY,EAAE,aAAa;QAC3B,KAAK,EACH,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE;QACvE,SAAS,EAAE,IAAI;QACf,iBAAiB,EAAE,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI;QACpE,GAAG,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;KAC5B,CAAC;AACJ,CAAC;AAqBD,MAAM,KAAK,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAE5D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,QAAgB,EAChB,GAAW,EACX,CAAiB;IAEjB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,GAAG,CAAC,eAAe,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;IAC/C,MAAM,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,GAAG,GAAG,6BAA6B,CAAC,CAAC;IACpE,MAAM,QAAQ,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,aAAa,CAAC,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC9C,MAAM,KAAK,GAAG,aAAa,CAAC;QAC1B,GAAG,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;QACnC,GAAG,EAAE,SAAS,CAAC,KAAK,CAAC;QACrB,KAAK,EAAE,CAAC,CAAC,KAAK,IAAI,IAAI,EAAE,KAAK,IAAI,IAAI;QACrC,IAAI,EAAE,CAAC,CAAC,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI,IAAI;QAClC,IAAI,EAAE,CAAC,CAAC,KAAK;QACb,QAAQ;KACT,CAAC,CAAC;IACH,OAAO,EAAE,CAAC,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,KAAY,EACZ,QAAgB,EAChB,KAAoB;IAEpB,MAAM,GAAG,GAAG,SAAS,CAAC,QAAQ,CAAC,CAAC;IAChC,KAAK,CAAC,WAAW,CACf,EAAE,CAAC,GAAG,CAAC,EACP,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAChE,CAAC;IACF,OAAO,GAAG,CAAC;AACb,CAAC"}