paperlint 3.2.0 → 4.1.0

package/eslint.config.mjs

@@ -19,6 +19,8 @@ import portRules from "#eslint-rules/install-path-literals";
 import n from "eslint-plugin-n";
 import tseslint from "typescript-eslint";
 import boundaries from "eslint-plugin-boundaries";
+import functional from "eslint-plugin-functional";
+import sonarjs from "eslint-plugin-sonarjs";
 import { dirname } from "node:path";
 import { fileURLToPath } from "node:url";
 
@@ -27,6 +29,21 @@ import { fileURLToPath } from "node:url";
 // or pinned at its current maximum in RATCHET.
 const TS_FILES = ["**/*.ts", "**/*.mts"];
 
+/** Collection helpers come from Remeda; these would be a second library for the same job. */
+const ONE_COLLECTION_LIBRARY = ["lodash", "lodash-es", "ramda"].map((name) => ({
+  name,
+  message: "use remeda (see CLAUDE.md)",
+}));
+
+/** An import of a skill's file, from code of the package itself (#133). */
+const NO_SKILLS = [
+  {
+    regex: "(^|/)skills/",
+    message:
+      "The package's own code does not import from skills/: a skill is a consumer, not storage (#133). Move what you need into src/ or lib/.",
+  },
+];
+
 /** `x as unknown as T` tells the checker to look away (#76). Shared: a block REPLACES a rule's options. */
 const AS_UNKNOWN_AS = {
   selector:
@@ -54,33 +71,99 @@ const GIT_IN_A_RULE = [
     "A rule may not run git: a sha is deleted by routine maintenance and absent from a shallow CI checkout. Read the file content ESLint passes the rule.",
 }));
 
-const MAX_LINES = { max: 60, skipComments: true, skipBlankLines: true };
+/** Source code: a function is one job, and thirty lines is where a second job starts to hide. */
+const MAX_LINES = { max: 30, skipComments: true, skipBlankLines: true };
+/**
+ * Tests keep sixty: a `describe`/`it` callback is a list of cases, not a function to split, and
+ * cutting it by line count scatters one scenario across helpers nobody reads twice.
+ */
+const MAX_LINES_TESTS = { ...MAX_LINES, max: 60 };
+const TEST_FILES = [
+  "**/*.test.{ts,mts}",
+  "**/*.harness.{ts,mts}",
+  "**/*.e2e.{ts,mts}",
+  "test/**/*.{ts,mts}",
+];
 
-// 🔴 A CEILING, NOT A PERMISSION: each number is the file's measured maximum on 2026-09-24, so a
-// function in these files can get simpler and cannot get worse. Lower a number when a refactor
-// lowers the maximum; never raise one. Paying the debt down is issue #72. A file leaves this table
-// when it passes the shared limits.
+// 🔴 A CEILING, NOT A PERMISSION: each number is the file's measured maximum on the day its limit
+// arrived (complexity and depth on 2026-09-24, the files #78 moved to TypeScript on 2026-09-27,
+// cognitive complexity and the 30-line source limit on 2026-09-28), so a function in these files
+// can get simpler and cannot get worse. Lower a number when a refactor lowers the maximum; never
+// raise one. Paying the debt down is issue #137. A file leaves this table when it passes the
+// shared limits.
 const RATCHET = {
-  "src/init.ts": { complexity: 59, "max-lines-per-function": 219 },
-  "src/cli.ts": { complexity: 43, "max-lines-per-function": 152 },
-  "src/doctor.ts": { complexity: 38, "max-lines-per-function": 125 },
-  "src/hooks-settings.ts": { complexity: 12, "max-depth": 4 },
-  "src/structure.ts": { complexity: 12, "max-depth": 4 },
-  "src/new-paper.ts": { complexity: 11 },
-  // Moved from JavaScript on 2026-09-27 (#78) and measured that day: the move changed their
-  // language, not their shape, so their debt is pinned here like the rest rather than paid in it.
   "eslint-rules/latex-language.ts": {
     complexity: 68,
+    "sonarjs/cognitive-complexity": 98,
     "max-lines-per-function": 314,
     "max-depth": 4,
   },
-  "eslint-rules/paper-typography.ts": { complexity: 29, "max-depth": 5 },
   "eslint-rules/paper-stages.ts": {
     complexity: 15,
+    "sonarjs/cognitive-complexity": 21,
     "max-lines-per-function": 105,
   },
+  "eslint-rules/paper-typography.ts": {
+    complexity: 29,
+    "sonarjs/cognitive-complexity": 41,
+    "max-lines-per-function": 50,
+    "max-depth": 5,
+  },
+  "eslint-rules/pdf-last-page-balance.ts": { "max-lines-per-function": 31 },
+  "eslint-rules/review-frontmatter.ts": { "max-lines-per-function": 46 },
   "eslint-rules/temp-root-realpath.ts": { complexity: 13 },
+  "eslint-rules/tex-build.ts": { "max-lines-per-function": 34 },
+  "lib/agent-cli-version.ts": { "max-lines-per-function": 42 },
   "lib/markdown.ts": { complexity: 12 },
+  "scripts/check.ts": {
+    "sonarjs/cognitive-complexity": 13,
+    "max-lines-per-function": 39,
+  },
+  "skills/plan-paper-timeline/fixtures/fake-google-calendar.ts": {
+    "max-lines-per-function": 31,
+  },
+  "src/adapters/curl/download.io.ts": { "max-lines-per-function": 39 },
+  "src/adapters/references/index.ts": { "max-lines-per-function": 36 },
+  "src/build-engine.ts": { "max-lines-per-function": 33 },
+  "src/build.ts": {
+    "sonarjs/cognitive-complexity": 13,
+    "max-lines-per-function": 41,
+  },
+  "src/cli.ts": {
+    complexity: 43,
+    "sonarjs/cognitive-complexity": 30,
+    "max-lines-per-function": 152,
+  },
+  "src/doctor.ts": {
+    complexity: 38,
+    "sonarjs/cognitive-complexity": 20,
+    "max-lines-per-function": 125,
+  },
+  "src/domain/lookup-cache.ts": { "max-lines-per-function": 31 },
+  "src/hooks-settings.ts": {
+    complexity: 12,
+    "max-lines-per-function": 42,
+    "max-depth": 4,
+  },
+  "src/init.ts": {
+    complexity: 59,
+    "sonarjs/cognitive-complexity": 44,
+    "max-lines-per-function": 219,
+  },
+  "src/latex-log.ts": { "sonarjs/cognitive-complexity": 12 },
+  "src/link-skills.ts": { "max-lines-per-function": 32 },
+  "src/new-paper.ts": { complexity: 11, "max-lines-per-function": 38 },
+  "src/pdf-facts.ts": { "max-lines-per-function": 33 },
+  "src/presets.ts": { "max-lines-per-function": 50 },
+  "src/reference-rules.ts": { "max-lines-per-function": 36 },
+  "src/references.ts": { "max-lines-per-function": 43 },
+  "src/structure.ts": {
+    complexity: 12,
+    "sonarjs/cognitive-complexity": 24,
+    "max-lines-per-function": 39,
+    "max-depth": 4,
+  },
+  "src/toolchain.ts": { "max-lines-per-function": 50 },
 };
 
 // ── Hexagonal layers (src/CLAUDE.md, issue #76) ─────────────────────────────────────────
@@ -407,13 +490,24 @@ export default [
         tsconfigRootDir: dirname(fileURLToPath(import.meta.url)),
       },
     },
-    plugins: { "@typescript-eslint": tseslint.plugin, local: localRules },
+    plugins: {
+      "@typescript-eslint": tseslint.plugin,
+      local: localRules,
+      sonarjs,
+    },
     rules: {
       // The same macOS-only defect as in the `.mjs` block; clean here, so it opens at `error`.
       "local/temp-root-realpath": "error",
       // `any` switches the checker off for everything it flows into. The preset has it too; named
       // here so that dropping the preset cannot drop it.
       "@typescript-eslint/no-explicit-any": "error",
+      // A type assertion (`x as T`, `<T>x`) is a claim the checker takes on trust (#126). A value
+      // from outside is parsed or guarded where it enters; a brand is minted by its own checked
+      // constructor. `as const` asserts nothing about the value and stays allowed.
+      "@typescript-eslint/consistent-type-assertions": [
+        "error",
+        { assertionStyle: "never" },
+      ],
       // The behaviour rules of the `.mjs` block, for the same reasons: each changes what the code
       // DOES, not how it looks, and a regex that escapes the wrong thing searches for the wrong thing.
       "no-empty": "error",
@@ -430,6 +524,10 @@ export default [
       // Branches per function. Ten is the rule's long-standing default; the worst function
       // measured was 59, and one that size cannot be read, only re-run.
       complexity: ["error", 10],
+      // `complexity` counts branches; cognitive complexity also charges NESTING, which is what makes
+      // a function hard to read. Only this one rule of the plugin: its recommended set is a style
+      // guide of its own, and each rule here is a decision.
+      "sonarjs/cognitive-complexity": ["error", 10],
       // `x as unknown as T` tells the checker to look away: two spellings of one port were once
       // reconciled that way (#76). A real conversion is a function; a real subset needs no cast.
       "no-restricted-syntax": ["error", AS_UNKNOWN_AS],
@@ -441,8 +539,15 @@ export default [
       "max-lines-per-function": ["error", MAX_LINES],
       // Three levels of callbacks is the ceiling before a promise chain or a named step is due.
       "max-nested-callbacks": ["error", 3],
+      // A `switch` over a union names every member (or says `default:` on purpose): a state added
+      // to the type is then a compile-time finding at every place that must handle it.
+      "@typescript-eslint/switch-exhaustiveness-check": "error",
     },
   },
+  {
+    files: TEST_FILES,
+    rules: { "max-lines-per-function": ["error", MAX_LINES_TESTS] },
+  },
   // Hexagonal layers, both axes (src/CLAUDE.md): knowledge by element, purity by file category.
   IO_GLOBALS,
   layerBoundaries(dirname(fileURLToPath(import.meta.url))),
@@ -594,6 +699,48 @@ export default [
     // one whose firing path nothing exercises, which is rule 4 wearing a different hat. The
     // pass/fail signal lives in `npm test`, not in the warning count of `npm run lint`.
   },
+  {
+    files: ["**/*.{ts,mts,mjs,js,cjs}"],
+    rules: {
+      "no-restricted-imports": ["error", { paths: ONE_COLLECTION_LIBRARY }],
+    },
+  },
+  // 🔴 THE LINTER DOES NOT READ A SKILL. Skills are consumers of the package, not its storage: the
+  // venue presets once lived in a skill and were located through a skill's script, so renaming the
+  // skill broke `paperlint lint` (#133). The package's own code — src/, eslint-rules/, lib/ — may
+  // not import from skills/. Tests and harnesses may: they check the skills.
+  {
+    files: [
+      "src/**/*.{ts,mts,mjs,js}",
+      "eslint-rules/**/*.{ts,mts,mjs,js}",
+      "lib/**/*.{ts,mts,mjs,js}",
+    ],
+    ignores: ["**/*.test.*", "**/*.harness.*"],
+    rules: {
+      "no-restricted-imports": [
+        "error",
+        { paths: ONE_COLLECTION_LIBRARY, patterns: NO_SKILLS },
+      ],
+    },
+  },
+  // 🔴 NEW CODE IS FUNCTIONAL: no `let`, no mutation, no loops, readonly types. Old code is listed
+  // in eslint-suppressions.json (ESLint's own bulk suppressions), which may only shrink: a fixed
+  // site that is not pruned fails `npm run lint`, and #134 burns the list down. Tests may mutate
+  // their fixtures.
+  {
+    files: ["src/**/*.ts", "eslint-rules/**/*.ts", "lib/**/*.ts"],
+    ignores: ["**/*.test.*", "**/*.harness.*"],
+    plugins: { functional },
+    rules: {
+      "functional/no-let": "error",
+      "functional/immutable-data": "error",
+      "functional/no-loop-statements": "error",
+      "functional/prefer-immutable-types": [
+        "error",
+        { enforcement: "ReadonlyShallow", ignoreInferredTypes: true },
+      ],
+    },
+  },
   // Rule sources, whatever their extension; tests and harnesses plant git calls on purpose.
   {
     files: ["eslint-rules/*.ts", "eslint-rules/*.mjs"],

package/fixtures/build-e2e/acmart/expect.json

@@ -0,0 +1,26 @@
+{
+  "$comment": "acmart in its own fonts: the class silently falls back to Computer Modern when one of its font packages is missing, and that is what this fixture exists to catch. Only the rules whose answer does not depend on banal's page classification are named: the paper is one sentence long, banal calls such a page a one-column cover, and pdf/geometry rightly reports that — so neither it nor the exit code is part of the claim.",
+  "build": {
+    "outcome": "pdf"
+  },
+  "fonts": {
+    "all": "^(LinLibertine|LinBiolinum)",
+    "none": "^(CMR|CMBX|CMTI|CMTT|CMSS|LMRoman)",
+    "matchLog": true
+  },
+  "lint": {
+    "paperlintJson": {
+      "extends": "paperlint:agenticdev",
+      "kind": "short",
+      "rules": {
+        "pdf/last-page-balance": "error"
+      }
+    },
+    "rules": {
+      "pdf/last-page-balance": [],
+      "pdf/profile": [],
+      "pdf/fresh": [],
+      "pdf/fonts": []
+    }
+  }
+}

package/fixtures/build-e2e/aidc/PIPELINE-STATUS.md

@@ -0,0 +1,3 @@
+# Fixture
+
+Stage: draft

package/fixtures/build-e2e/aidc/expect.json

@@ -0,0 +1,14 @@
+{
+  "$comment": "A real IEEEtran [conference,compsoc] paper for AIDC, built on paperlint's TeX Live: IEEE's Times, and not one finding from any rule — which is what judges pdf/limits, pdf/body-size and the rest against a real PDF of the class.",
+  "build": {
+    "outcome": "pdf"
+  },
+  "fonts": {
+    "some": "NimbusRomNo9L",
+    "none": "^(CMR|CMBX|CMTI|CMTT|CMSS|LMRoman)"
+  },
+  "lint": {
+    "exit": 0,
+    "findings": []
+  }
+}

package/fixtures/build-e2e/aidc/paper.tex

@@ -0,0 +1,46 @@
+% A small real paper in the class AIDC requires, built by the e2e on paperlint's own TeX Live, so
+% `paperlint toolchain` is proved to install what the ieee-conference preset declares, and every
+% rule is judged against what a real build of the class measures. It conforms: the LLM Usage
+% Statement closes it, and not one rule has anything to say.
+\documentclass[conference,compsoc]{IEEEtran}
+\begin{filecontents*}{refs.bib}
+@article{knuth84,
+  title   = {Literate Programming},
+  author  = {Knuth, Donald E.},
+  journal = {The Computer Journal},
+  volume  = {27},
+  number  = {2},
+  pages   = {97--111},
+  year    = {1984},
+  doi     = {10.1093/comjnl/27.2.97}
+}
+\end{filecontents*}
+% banal calls a page with a few lines on it a one-column "cover", and pdf/geometry would rightly
+% report that. So the body fills two columns of a page: one paragraph, set several times.
+\newcommand{\filler}{This paragraph is ordinary prose, set in the two columns of the conference
+format so that the page geometry is measured on a real body of text. It says nothing new, and it
+does not need to: the fixture is about the class, the fonts and the page, not about its content.
+A reviewer would find it dull, which is exactly what a measurement fixture should be.\par}
+\begin{document}
+\title{A Fixture Typeset in the Class the Venue Requires}
+\author{\IEEEauthorblockN{A. Author}
+\IEEEauthorblockA{Anonymous for double-blind review}}
+\maketitle
+\begin{abstract}
+The abstract exists so the build has the front matter an IEEE paper carries.
+\end{abstract}
+\section{Introduction}
+This paper has a body of ordinary prose, set in the two columns of the conference format, and
+it cites one article~\cite{knuth84}.
+\filler\filler\filler\filler
+\section{Method}
+The method is to build this file with pdflatex and bibtex, then read the facts of the PDF.
+\filler\filler\filler\filler\filler\filler
+\section{Conclusion}
+The conclusion restates that the fixture builds.
+\filler\filler\filler\filler
+\bibliographystyle{IEEEtran}
+\bibliography{refs}
+\section*{LLM Usage Statement}
+No LLMs were used in writing this fixture.
+\end{document}

package/fixtures/build-e2e/aidc/paperlint.json

@@ -0,0 +1 @@
+{ "extends": "paperlint:aidc", "kind": "short" }

package/fixtures/build-e2e/broken/expect.json

@@ -0,0 +1,11 @@
+{
+  "$comment": "Does not compile: an undefined control sequence on line 6. The build names pdflatex and quotes the log.",
+  "build": {
+    "outcome": "failed"
+  },
+  "says": [
+    "✗ compile: pdflatex exited with 1",
+    "./paper.tex:6: Undefined control sequence.",
+    "l.6 Text before, then \\undefinedmacro"
+  ]
+}

package/fixtures/build-e2e/cite/expect.json

@@ -0,0 +1,27 @@
+{
+  "$comment": "The bibtex path: the citation and the \\ref resolve, and the leftover build.sh is ignored, not run.",
+  "build": {
+    "outcome": "pdf",
+    "pages": 1
+  },
+  "says": [
+    "build.sh is ignored — paperlint builds the paper itself"
+  ],
+  "text": {
+    "contains": [
+      "[1]"
+    ],
+    "lacks": [
+      "[?]",
+      "??"
+    ]
+  },
+  "files": {
+    "exist": [
+      "paper.bbl"
+    ],
+    "absent": [
+      "RAN"
+    ]
+  }
+}

package/fixtures/build-e2e/empty/expect.json

@@ -0,0 +1,12 @@
+{
+  "$comment": "No pages: pdflatex exits 0 and writes no PDF, which is a failure, not a green paper.pdf.",
+  "build": {
+    "outcome": "failed"
+  },
+  "says": [
+    "✗ compile: pdflatex exited 0 but wrote no paper.pdf — does the document have any pages?"
+  ],
+  "saysNot": [
+    "✓"
+  ]
+}

package/fixtures/build-e2e/fallback/expect.json

@@ -0,0 +1,53 @@
+{
+  "$comment": "Computer Modern standing in for acmart's silent fallback. It builds green; declared an agenticdev paper afterwards, the venue rules reject it.",
+  "build": {
+    "outcome": "pdf"
+  },
+  "fonts": {
+    "some": "^(CMR|CMBX|CMTI|CMTT|CMSS|LMRoman)",
+    "matchLog": true
+  },
+  "lint": {
+    "paperlintJson": {
+      "extends": "paperlint:agenticdev",
+      "kind": "short"
+    },
+    "exit": 1,
+    "rules": {
+      "pdf/fonts": [
+        {
+          "severity": 2,
+          "says": [
+            "LinLibertine"
+          ]
+        },
+        {
+          "severity": 2,
+          "says": [
+            "LinBiolinum"
+          ]
+        }
+      ],
+      "pdf/geometry": [
+        {
+          "severity": 2,
+          "says": [
+            "page width is 8.264 in, agenticdev requires 8.5 in"
+          ]
+        },
+        {
+          "severity": 2,
+          "says": [
+            "page height is 11.694 in, agenticdev requires 11 in"
+          ]
+        },
+        {
+          "severity": 2,
+          "says": [
+            "column(s), agenticdev requires 2"
+          ]
+        }
+      ]
+    }
+  }
+}

package/fixtures/build-e2e/guards/expect.json

@@ -0,0 +1,6 @@
+{
+  "$comment": "\\input{paper-guards} resolves with no configuration: paperlint's venues directory is on TEXINPUTS.",
+  "build": {
+    "outcome": "pdf"
+  }
+}

package/fixtures/build-e2e/no-source/expect.json

@@ -0,0 +1,10 @@
+{
+  "$comment": "No paper.tex: a refusal, named separately, and a stale paper.pdf is removed.",
+  "build": {
+    "outcome": "failed"
+  },
+  "says": [
+    "✗ nothing to compile: no paper.tex",
+    "paper.pdf removed — a stale PDF must not pass for this build"
+  ]
+}

package/fixtures/build-e2e/unbalanced/expect.json

@@ -0,0 +1,60 @@
+{
+  "$comment": "A two-column acmart paper whose last page ends unbalanced. The build measures it without judging; the optional lint rule reports it.",
+  "build": {
+    "outcome": "pdf"
+  },
+  "says": [
+    "✓ paper.pdf",
+    "facts: _build/paper.facts.json, last page 621.5 / 264.8 pt"
+  ],
+  "saysNot": [
+    "  balance:"
+  ],
+  "files": {
+    "lacks": {
+      "paper.bbl": [
+        "\\balance"
+      ]
+    }
+  },
+  "facts": {
+    "schema": 2,
+    "lastPageColumnsPt": [
+      621.5,
+      264.8
+    ]
+  },
+  "lint": {
+    "paperlintJson": {
+      "rules": {
+        "pdf/last-page-balance": "error"
+      }
+    },
+    "exit": 1,
+    "rules": {
+      "pdf/last-page-balance": [
+        {
+          "severity": 2,
+          "says": [
+            "621.5 and 264.8 pt",
+            "pbalance"
+          ]
+        }
+      ],
+      "pdf/fresh": [],
+      "pdf/profile": [],
+      "pdf/fonts": [],
+      "pdf/geometry": [],
+      "pdf/limits": [],
+      "pdf/body-size": [],
+      "pdf/measured": [
+        {
+          "severity": 1,
+          "says": [
+            "names no venue preset yet"
+          ]
+        }
+      ]
+    }
+  }
+}

package/fixtures/install-path-literals/clean.fixture.mjs

@@ -1,3 +1,3 @@
 // Clean: every answer to *where* comes from the port.
 import { consumerRoot } from "../../skills/paper-pipeline/scripts/consumer.mjs";
-export const LEDGER = (env, cwd) => `${consumerRoot({ env, cwd })}/runs.jsonl`;
+export const CACHE = (env, cwd) => `${consumerRoot({ env, cwd })}/cache.json`;

package/fixtures/install-path-literals/clean.md

@@ -1,6 +1,6 @@
 ---
 name: planted-clean
-allowed-tools: [Bash(node ${CLAUDE_SKILL_DIR}/../paper-pipeline/scripts/ledger.mjs:*)]
+allowed-tools: [Bash(node ${CLAUDE_SKILL_DIR}/../paper-pipeline/scripts/extract-ref-facts.mjs:*)]
 ---
 
 # A skill that asks the port where it is
@@ -8,7 +8,7 @@ allowed-tools: [Bash(node ${CLAUDE_SKILL_DIR}/../paper-pipeline/scripts/ledger.m
 Record the verdict:
 
 ```
-node ${CLAUDE_SKILL_DIR}/../paper-pipeline/scripts/ledger.mjs record planted . FINDING 1 report.md
+node ${CLAUDE_SKILL_DIR}/../paper-pipeline/scripts/extract-ref-facts.mjs planted
 ```
 
 Paths inside the repository, such as `skills/paper-pipeline/scripts/consumer.mjs`, are not

package/fixtures/install-path-literals/defect.fixture.mjs

@@ -1,3 +1,3 @@
 // Planted: a shipped module betting on one channel, in both literal forms.
-export const LEDGER = "node_modules/research-paper-pipeline/runs.jsonl";
+export const CACHE = "node_modules/research-paper-pipeline/cache.json";
 export const skill = (n) => `.claude/skills/${n}/SKILL.md`;

package/fixtures/install-path-literals/defect.md

@@ -1,6 +1,6 @@
 ---
 name: planted-defect
-allowed-tools: [Bash(node .claude/skills/paper-pipeline/scripts/ledger.mjs:*)]
+allowed-tools: [Bash(node .claude/skills/paper-pipeline/scripts/extract-ref-facts.mjs:*)]
 ---
 
 # A skill that bets on one delivery channel
@@ -8,7 +8,7 @@ allowed-tools: [Bash(node .claude/skills/paper-pipeline/scripts/ledger.mjs:*)]
 Record the verdict:
 
 ```
-node .claude/skills/paper-pipeline/scripts/ledger.mjs record planted . FINDING 1 report.md
+node .claude/skills/paper-pipeline/scripts/extract-ref-facts.mjs planted
 ```
 
 The module lives at `node_modules/research-paper-pipeline/skills/paper-pipeline/scripts/consumer.mjs`.

package/fixtures/pdf-facts/README.md

@@ -13,7 +13,7 @@ poppler's numbers, so a pass means agreement with the tool pdf.js replaced.
 | `encrypted.pdf`    | `t3-all.pdf` saved with an AES-256 user password (PyMuPDF)          | pdf.js refuses it with `PasswordException`; the reader reports `encrypted`                                                        |
 | `hidden-text.pdf`  | `hidden-text.tex`, pdflatex                                         | two-column body text beside near-white, rotated and render-mode-3 text; page 2 holds only hidden text, so banal calls it blank    |
 
-`test/e2e/banal.ts` also reads these files, with the real banal: it pins what banal 1.2 printed for
+`test/e2e/tex/banal.e2e.ts` also reads these files, with the real banal: it pins what banal 1.2 printed for
 each one on poppler's `pdftohtml` 24.02.0 (2026-09-25), so a pass there means paperlint's pdf.js-written
 XML measures the same as poppler's. `hidden-text.pdf` exists for that test: each kind of hidden text
 changes banal's answer if it is counted.

package/fixtures/real-markdown-paper/baseline.ts

@@ -1,6 +1,6 @@
 /**
  * ONE reader of `baseline.json`, shared by the two runs that compare against it: the harness
- * beside this file (the repository's own `bin/paperlint.mjs`) and `test/e2e/install.ts` (the binary
+ * beside this file (the repository's own `bin/paperlint.mjs`) and `test/e2e/install/install.e2e.ts` (the binary
  * a consumer actually got). Two copies of "growth fails, a drop never does" would drift the first
  * time one of them is tightened, and the two runs would then disagree about the same article.
  */

package/fixtures/render-paper/build-clean.sh

@@ -5,18 +5,16 @@
 # A paper's own build script must not hard-code a path into the agent's skills directory:
 # once the skills move into a package that address points at nothing, and LaTeX's reaction to
 # a missing \input is SILENCE, not an error. So the script resolves the venues directory
-# through the package first, falls back to the in-repo copy, and then VERIFIES that kpsewhich
+# through the installed package, and then VERIFIES that kpsewhich
 # can actually see the file before handing anything to pdflatex.
 set -euo pipefail
 ROOT=$(git rev-parse --show-toplevel)
 
-VENUES_PKG=$(node -e 'try{process.stdout.write(require.resolve("paperlint/venues/paper-guards.tex"))}catch{}' 2>/dev/null || true)
+VENUES_PKG=$(cd "$ROOT" && node -e 'try{process.stdout.write(require.resolve("paperlint/presets/tex/paper-guards.tex"))}catch{}' 2>/dev/null || true)
 if [ -n "$VENUES_PKG" ] && [ -f "$VENUES_PKG" ]; then
   VENUES_DIR=$(dirname "$VENUES_PKG")
-elif [ -f "$ROOT/.claude/skills/submit-paper/references/venues/paper-guards.tex" ]; then
-  VENUES_DIR="$ROOT/.claude/skills/submit-paper/references/venues"
 else
-  echo "✗ paper-guards.tex found neither in the package nor in the repository" >&2
+  echo "✗ paper-guards.tex not found in the installed paperlint package" >&2
   exit 1
 fi
 export TEXINPUTS="$VENUES_DIR:"