paperlint 4.0.0 → 4.1.0

package/presets/aidc.jsonc

@@ -0,0 +1,73 @@
+// AIDC @ IEEE ACSAC 2026 (Workshop on Agentic AI in Offensive and Defensive Cyber Operations) — a
+// VENUE preset over the IEEE conference family. Everything the IEEEtran template decides (page
+// size, columns, fonts, body size, TeX packages) comes from ieee-conference.jsonc; this file adds
+// what AIDC's call for papers sets.
+//
+// Verbatim from https://aidcworkshop.github.io/ (fetched 2026-09-27):
+//   «All submitted papers must be prepared in US Letter size, not A4, using the double-column IEEE
+//    conference format. This requirement will be strictly enforced.»
+//   «LaTeX submissions must use the IEEEtran.cls version 1.8b template with the
+//    \documentclass[conference,compsoc]{IEEEtran} document class option.»
+//   «Regular technical papers: Up to 12 pages excluding references and appendices.»
+//   «Short position papers or work-in-progress (WIP) papers: Up to 6 pages, excluding references
+//    and appendices.»
+//   «Submissions must be properly anonymized for double-blind review.»
+//
+// THE DEADLINE PEOPLE GET WRONG (not a lint fact): the HotCRP portal closes 2026-10-02 11:59:59 UTC
+// (`"sub":1790942399` on https://aidc.submit.acsac.org/deadlines, recorded in paperlint#90), while
+// the workshop page says «October 2, 2026 (Anywhere-on-Earth, AoE)» — a day later. The portal is
+// what refuses the upload.
+//
+// THE REVIEW IS DOUBLE-BLIND: `"blind":true` in the same portal data, and the call above.
+{
+  "extends": "paperlint:ieee-conference",
+
+  // What the venue is called in a paper's text (tex/venue-leftover): the workshop, and the
+  // conference it is held at.
+  "aliases": ["AIDC", "ACSAC"],
+
+  "template": "\\documentclass[conference,compsoc]{IEEEtran}",
+
+  // «Authors must follow the ACSAC AI Usage Policy for all workshop submissions.» (the call above).
+  // Verbatim from https://www.acsac.org/2026/submissions/ai/ (fetched 2026-09-27):
+  //   «If LLMs are used, authors must include a separate, clearly marked section titled "LLM Usage
+  //    Statement" at the end of the paper. This section does not count towards the page limit.»
+  //   «Failure to comply with these requirements is grounds for desk rejection without further
+  //    review.»
+  // tex/required-section cannot know whether LLMs were used, so it requires the section always: an
+  // author who used none says so in it. A bold paragraph («Use of Generative AI.», what AISec asked
+  // for) is not a section with this title and does not count.
+  "required_sections": [{ "title": "LLM Usage Statement", "position": "last" }],
+
+  "format": {
+    // \textwidth and \textheight of [conference,compsoc], measured (ieee-conference.jsonc).
+    "textblock_w_in": 7.0,
+    "textblock_h_in": 9.02,
+
+    // 🔴 PAGE LIMITS ARE NOT GATED HERE, AND THAT IS A MEASUREMENT. banal splits pages into body
+    // and references by what is on them, and a page that holds ANY non-bibliography text counts as
+    // body. Measured 2026-09-27 on a [conference,compsoc] paper whose body ends at the foot of
+    // page 12:
+    //   LLM Usage Statement before the references → body 13, references 0
+    //   an appendix before the references         → body 13, references 2
+    //   both placed after the references          → body right, the tail counted as references
+    // AIDC counts neither in the limit («excluding references and appendices»; the ACSAC AI policy:
+    // the LLM Usage Statement «does not count towards the page limit»), and tex/required-section
+    // accepts the statement before or after the bibliography. A gate on banal's body count would
+    // therefore fail a correct 12-page paper — the realm.jsonc case again. The numbers below are
+    // data for humans, not an input to pdf/limits.
+    "page_limits_not_gated": {
+      "_": "Body pages, excluding references, appendices and the LLM Usage Statement. banal counts a page holding an appendix or the statement before the bibliography as body, so its body count is not this number.",
+      "regular": 12,
+      "short": 6,
+      "references_and_appendices": "unlimited",
+      "llm_usage_statement": "not counted (ACSAC AI policy)",
+    },
+
+    // «Short position papers or work-in-progress (WIP) papers» share one limit, so one kind.
+    "kinds": {
+      "regular": {},
+      "short": {},
+    },
+  },
+}

package/{skills/submit-paper/references/venues → presets}/aisec.jsonc

@@ -25,6 +25,10 @@
 {
   "extends": "paperlint:acm-sigconf",
 
+  // What the venue is called in a paper's text (tex/venue-leftover): the workshop, and the
+  // conference it is held at.
+  "aliases": ["AISec", "ACM CCS"],
+
   "format": {
     // Four tracks (original research · position/open-problem · SoK · benchmark) — the limits are
     // the SAME for all of them, the venue doesn't split them. The keys are kept separate so a

package/presets/ieee-conference.jsonc

@@ -0,0 +1,66 @@
+// IEEE `IEEEtran` conference — the TEMPLATE FAMILY: everything IEEE's conference template decides,
+// whatever the venue. A venue preset extends it ("extends": "paperlint:ieee-conference") and adds
+// what its call for papers sets: the class options it names, the page limit of each kind of paper,
+// the sections it requires.
+//
+// 🔴 THE NUMBERS ARE MEASURED, NOT COPIED. Built on 2026-09-27 from IEEE's own template files
+// (`bare_conf.tex` and `bare_conf_compsoc.tex`, V1.4b 2015/08/26, from CTAN), and from a 13-page
+// paper of generated prose on each, with IEEEtran.cls V1.8b 2015/08/26, pdflatex, TeX Live 2026
+// (`paperlint toolchain`) and TeX Live 2023 (Debian) — the same fonts on both. What banal and
+// pdf.js reported, and what the class sets, the two option sets side by side:
+//
+//                         [conference]         [conference,compsoc]
+//   page                  8.5 x 11 in          8.5 x 11 in
+//   columns               2                    2
+//   body size (banal)     10.3                 10.3            (declared 10pt)
+//   fonts (pdf.js)        NimbusRomNo9L-Regu / -Medi / -ReguItal / -MediItal, Type 1, embedded
+//   \textwidth            516pt = 7.14 in      505.89pt = 7.00 in
+//   \textheight           672pt = 9.30 in      652.04pt = 9.02 in
+//   section headings      I. SMALL CAPS        1. Title Case
+//
+// So `compsoc` changes the text block and the headings, and nothing the `pdf/*` rules judge: page
+// size, columns, body size and fonts are identical. One family is enough; a venue that requires
+// `compsoc` names it in its own `template` (tex/template checks it) and its own text block (see
+// aidc.jsonc). The planted defects fail as they should, measured on the same compsoc paper:
+//   `a4paper` added to the options        → page 8.264 x 11.694 in: pdf/geometry
+//   Computer Modern (`\rmdefault{cmr}`)   → fonts CMR10, CMBX12, …: pdf/fonts, no NimbusRomNo9L
+{
+  "template": "\\documentclass[conference]{IEEEtran}",
+
+  // TeX Live packages the IEEEtran template needs ON TOP OF tex-base.jsonc, each with the files that
+  // prove it is present (kpsewhich, after every install). Found 2026-09-27 by the loop build →
+  // missing file → tlmgr search --file → install, on the two template files above.
+  //   ieeetran — the class and its bibliography style.
+  //   cite — `bare_conf_compsoc.tex` loads it (`\usepackage[nocompress]{cite}` under compsoc) and
+  //     stops with "File `cite.sty' not found" without it.
+  //   psnfss · times — IEEEtran sets the body in Times (`ot1ptm.fd`, `ptmr7t.tfm`), drawn from the
+  //     URW clone (`utmr8a.pfb`), which is what the PDF names NimbusRomNo9L.
+  "tex": {
+    "packages": {
+      "ieeetran": ["IEEEtran.cls", "IEEEtran.bst"],
+      "cite": ["cite.sty"],
+      "psnfss": ["ot1ptm.fd"],
+      "times": ["ptmr7t.tfm", "utmr8a.pfb"],
+    },
+  },
+
+  "format": {
+    "page_size": "letter",
+    "page_w_in": 8.5,
+    "page_h_in": 11.0,
+
+    // \textwidth and \textheight of [conference], as the class sets them.
+    "textblock_w_in": 7.14,
+    "textblock_h_in": 9.3,
+
+    "columns": 2,
+
+    // IEEEtran's conference default is 10pt; banal measures the rendered mode, 10.3.
+    "body_pt": 10,
+    "body_pt_tol": 0.5,
+
+    // The Times clone. Headings and the title are set in the same family, so a `fonts_title` would
+    // repeat this check and report a Computer Modern build twice.
+    "fonts_text": "NimbusRomNo9L",
+  },
+}

package/{skills/submit-paper/references/venues → presets}/realm.jsonc

@@ -8,7 +8,14 @@
 // acmart (letter 8.5x11, size 9, Libertine) shares NOTHING with this — copying the numbers from
 // `agenticdev.jsonc` would give a gate that reddens on a correct paper.
 {
-  "template": "acl",
+  // ACL's template is not a class: `acl_latex.tex` opens with `\documentclass[11pt]{article}` and
+  // loads `acl.sty` as a package (https://github.com/acl-org/acl-style-files, checked 2026-09-27).
+  // So the class `tex/template` compares against is article, at 11pt.
+  "template": "\\documentclass[11pt]{article}",
+
+  // What the venue is called in a paper's text (tex/venue-leftover): the workshop, and the
+  // conference it is held at.
+  "aliases": ["REALM", "EMNLP"],
 
   // TeX Live packages the ACL template needs ON TOP OF tex-base.jsonc (the shape is
   // venue-profile.schema.json). acl.sty itself travels with the paper; these are what it loads.

package/{skills/submit-paper/references/venues → presets/tex}/paper-guards.tex

@@ -1,7 +1,7 @@
 % paper-guards.tex — guards that turn a paper defect into a BUILD FAILURE.
 %
 % Included from the paper's preamble: \input{paper-guards}
-% Found via TEXINPUTS, which check-render.sh sets (the `references/venues/` directory).
+% Found via TEXINPUTS, which check-render.sh sets (the package's `presets/tex/` directory).
 %
 % WHY A SEPARATE FILE, NOT A COPY IN EVERY PAPER. The first edition of the guard (08-26) lived
 % inline in `agenticdev-2026/paper.tex`, and a measurement that same evening showed the cost: of

package/{skills/submit-paper/references/venues → presets}/venue-profile.schema.json

@@ -2,7 +2,7 @@
   "$schema": "http://json-schema.org/draft-07/schema#",
   "$id": "https://github.com/zernie/paperlint/venue-profile.schema.json",
   "title": "Venue preset",
-  "description": "One venue preset or template family (venues/<name>.jsonc), and the TeX base set (venues/tex-base.jsonc). A paper's paperlint.json names one with \"extends\"; a preset may extend another. `format` and `rules` are read by paperlint's pdf/* venue rules and its lint config (src/venue-rules.ts, src/presets.ts); `tex` by `paperlint toolchain` and `paperlint build`.",
+  "description": "One venue preset or template family (presets/<name>.jsonc), and the TeX base set (presets/tex-base.jsonc). A paper's paperlint.json names one with \"extends\"; a preset may extend another. `format` and `rules` are read by paperlint's pdf/* venue rules and its lint config (src/venue-rules.ts, src/presets.ts); `tex` by `paperlint toolchain` and `paperlint build`.",
   "type": "object",
   "additionalProperties": false,
   "properties": {
@@ -20,10 +20,38 @@
       "$ref": "#/definitions/tex"
     },
     "template": {
-      "description": "The \\documentclass the venue's template uses.",
+      "description": "The \\documentclass the venue's template uses: a whole line, `\\documentclass[conference,compsoc]{IEEEtran}`, or a bare class name. `tex/template` requires a paper's class to be this one and to carry every option named here.",
       "type": "string",
       "minLength": 1
     },
+    "aliases": {
+      "description": "Other names the venue goes by in a paper's text — its acronym, its parent conference (`[\"AISec\", \"ACM CCS\"]`). Read by `tex/venue-leftover`: a paper that extends another venue and says one of these is flagged. Matched as whole words, case-sensitive. Collected along the `extends` chain, with `name`.",
+      "type": "array",
+      "uniqueItems": true,
+      "items": {
+        "type": "string",
+        "minLength": 1
+      }
+    },
+    "required_sections": {
+      "description": "Sections the venue requires, read by `tex/required-section`. Each is a `\\section` or `\\section*` whose title equals `title` once whitespace is collapsed. `position: \"last\"`: after every section of the body (the ones before the appendix and the bibliography); it may stand after the bibliography. A child preset's list replaces its parent's.",
+      "type": "array",
+      "items": {
+        "type": "object",
+        "additionalProperties": false,
+        "required": ["title"],
+        "properties": {
+          "title": {
+            "type": "string",
+            "minLength": 1
+          },
+          "position": {
+            "type": "string",
+            "enum": ["last"]
+          }
+        }
+      }
+    },
     "format": {
       "description": "What the venue's call for papers sets. Every key is optional; a child preset's key replaces its parent's, and a child's kind replaces that kind.",
       "type": "object",

package/scripts/check.harness.ts

@@ -60,29 +60,51 @@ const PackageJson = z.looseObject({
 const HERE = dirname(fileURLToPath(import.meta.url));
 const ROOT = dirname(HERE);
 
-const { GATES, NOT_COVERED, outcome, SKIP_EXIT, commandOf } =
+const { GATES, NOT_COVERED, outcome, skippedIn, commandOf } =
   await import("./check.ts");
 
 const check = createChecker();
 
 // ── the workflow is the ORACLE, not a copy of it ───────────────────────────────────────────
-// A declared skip is a THIRD outcome. Folding it into "pass" printed "all gates passed" on a
-// machine where the e2e never ran (Codex review on #45); folding it into "fail" would make the
-// command red for anyone without pnpm or TeX, and it would be ignored.
-check("exit 0 is a pass", outcome(0) === "pass");
+// A skip is a THIRD outcome. Folding it into "pass" printed "all gates passed" on a machine where
+// the e2e never ran (Codex review on #45); folding it into "fail" would make the command red for
+// anyone without pnpm or TeX, and it would be ignored. The count is vitest's own, from its report.
+check("exit 0 of a plain gate is a pass", outcome(0) === "pass");
 check(
-  `exit ${String(SKIP_EXIT)} is a skip — neither a pass nor a failure`,
-  outcome(SKIP_EXIT) === "skip",
+  "exit 0 of a vitest gate whose report counts no skip is a pass",
+  outcome(0, { skipped: 0 }) === "pass",
 );
-check("the skip code is the one vigiles' runner uses (77)", SKIP_EXIT === 77);
 check(
-  "any other nonzero exit is a failure",
-  outcome(1) === "fail" && outcome(2) === "fail",
+  "exit 0 of a vitest gate whose report counts skipped tests is a SKIP — neither a pass nor a failure",
+  outcome(0, { skipped: 2 }) === "skip",
+);
+check(
+  "🔴 exit 0 of a vitest gate with no readable report is a FAILURE — an unread count cannot be a pass",
+  outcome(0, { skipped: null }) === "fail",
+);
+check(
+  "any nonzero exit is a failure, skips or not",
+  outcome(1) === "fail" &&
+    outcome(2, { skipped: 0 }) === "fail" &&
+    outcome(1, { skipped: 3 }) === "fail",
 );
 check(
   "a process killed by a signal (status null) is a failure, not a skip",
   outcome(null) === "fail",
 );
+check(
+  "skippedIn counts skipped and todo tests from vitest's JSON report",
+  skippedIn(
+    JSON.stringify({ numTotalTests: 9, numPendingTests: 3, numTodoTests: 1 }),
+  ) === 4 &&
+    skippedIn(JSON.stringify({ numPendingTests: 0, numTodoTests: 0 })) === 0,
+);
+check(
+  "skippedIn: no report, not JSON, or not vitest's shape is null — never zero",
+  skippedIn(null) === null &&
+    skippedIn("not json") === null &&
+    skippedIn("{}") === null,
+);
 
 // Every workflow, not just ci.yml: a harness reading one file would stop seeing a job added to
 // another without a sound. (macOS lived in platform.yml from 2026-09-23 to 2026-09-24; it is now
@@ -188,6 +210,13 @@ for (const g of GATES) {
     ),
   );
 }
+for (const g of GATES.filter((x) => x.vitest)) {
+  // Guards: the skip count is read from vitest's JSON report, so the script must BE a vitest run.
+  check(
+    `gate «${g.name}» is marked vitest, and its script is a vitest run (npm run ${String(g.script)})`,
+    (scripts[g.script ?? ""] ?? "").startsWith("vitest run"),
+  );
+}
 check(
   "`check` itself is wired as a script, or nobody can run any of this",
   typeof scripts.check === "string",
@@ -260,6 +289,31 @@ for (const g of GATES) {
   );
 }
 
+// ── the e2e runs are found by vitest's projects, never listed ──────────────────────────────
+// A list of e2e files is a second copy of the directory, and the three copies that existed
+// (package.json, this script, CI) disagreed: two of four, four of four, a step per file (#132).
+const namesE2eFile = (run: string | undefined): string[] =>
+  commandsIn(run)
+    .flat()
+    .filter((t) => /(^|\/)test\/e2e\//.test(t));
+check(
+  "no npm script names a file under test/e2e/ — the vitest projects find them",
+  Object.values(scripts).flatMap(namesE2eFile).length === 0,
+  JSON.stringify(scripts),
+);
+check(
+  "no workflow step names a file under test/e2e/",
+  Object.values(workflows)
+    .flatMap((wf) => Object.values(wf.jobs ?? {}))
+    .flatMap((j) => j.steps ?? [])
+    .flatMap((st) => namesE2eFile(st.run)).length === 0,
+);
+check(
+  "no gate names a file under test/e2e/",
+  GATES.flatMap((g) => commandOf(g).filter((t) => t.includes("test/e2e/")))
+    .length === 0,
+);
+
 // ── and the tail is not optional ───────────────────────────────────────────────────────────
 check(
   "NOT_COVERED is non-empty — if it ever is, either CI shrank or someone silenced the tail",

package/scripts/check.test.ts

@@ -1,12 +1,19 @@
 /**
  * check.ts's runGates — the one command run before a push — on every outcome, with an injected
- * spawn: a pass, a declared skip (77) and a failure, and THE TAIL that names what it does not cover.
+ * spawn: a pass, a skip (counted in a vitest gate's JSON report) and a failure, and THE TAIL that
+ * names what it does not cover.
  */
 import assert from "node:assert/strict";
 import { spawnSync } from "node:child_process";
 import { fileURLToPath } from "node:url";
 import { test } from "vitest";
-import { GATES, NOT_COVERED, runGates, type Gate } from "./check.ts";
+import {
+  GATES,
+  NOT_COVERED,
+  reportArgs,
+  runGates,
+  type Gate,
+} from "./check.ts";
 
 const capture = () => {
   const out: string[] = [];
@@ -17,10 +24,12 @@ const capture = () => {
   return { out, io };
 };
 
-test("runGates: a pass, a declared skip (77) and a failure, then the tail naming what is not covered", () => {
+const SKIPPED_2 = JSON.stringify({ numPendingTests: 2, numTodoTests: 0 });
+
+test("runGates: a pass, a vitest gate that skipped tests, and a failure, then the tail naming what is not covered", () => {
   const gates: Gate[] = [
     { name: "passes", job: "gates", run: ["true"] },
-    { name: "skips", job: "gates", run: ["skipper", "--x"] },
+    { name: "skips", job: "gates", script: "test:e2e:x", vitest: true },
     {
       name: "fails",
       job: null,
@@ -28,15 +37,30 @@ test("runGates: a pass, a declared skip (77) and a failure, then the tail naming
       run: ["false"],
     },
   ];
-  const status: Record<string, number> = { true: 0, skipper: 77, false: 3 };
+  const status: Record<string, number> = { true: 0, npm: 0, false: 3 };
+  const calls: string[][] = [];
   const written: string[] = [];
   const { out, io } = capture();
   const code = runGates({
     gates,
-    spawn: (cmd) => ({ status: status[cmd] ?? null }),
+    spawn: (cmd, args) => {
+      calls.push([cmd, ...args]);
+      return { status: status[cmd] ?? null };
+    },
     write: (s) => written.push(s),
+    reportOf: () => SKIPPED_2,
     ...io,
   });
+  // The vitest gate is asked for its JSON report, beside its usual output.
+  const vitestCall = calls[1] ?? [];
+  const file = (vitestCall.at(-1) ?? "").replace("--outputFile.json=", "");
+  assert.deepEqual(vitestCall, [
+    "npm",
+    "run",
+    "-s",
+    "test:e2e:x",
+    ...reportArgs(file),
+  ]);
   assert.deepEqual(
     { code, written, out },
     {
@@ -46,7 +70,7 @@ test("runGates: a pass, a declared skip (77) and a failure, then the tail naming
         "",
         "E 🔴 gates failed:",
         "E    fails  (false → 3)",
-        "⏳ skipped: skips  (skipper --x → 77)",
+        "⏳ skipped: skips  (npm run -s test:e2e:x → 2 test(s) skipped)",
         "\nWhat this command does NOT cover:",
         ...Object.entries(NOT_COVERED).map(
           ([job, why]) => `  CI job «${job}» — ${why}`,
@@ -62,12 +86,11 @@ test("runGates: all passing, with a skip, says how many passed and that the skip
   const code = runGates({
     gates: [
       { name: "a", job: "gates", script: "build" },
-      { name: "b", job: "gates", run: ["skipper"] },
+      { name: "b", job: "gates", script: "test:e2e:x", vitest: true },
     ],
-    spawn: (cmd, args) => ({
-      status: cmd === "npm" && args[2] === "build" ? 0 : 77,
-    }),
+    spawn: () => ({ status: 0 }),
     write: () => {},
+    reportOf: () => SKIPPED_2,
     ...io,
   });
   assert.deepEqual(
@@ -75,19 +98,43 @@ test("runGates: all passing, with a skip, says how many passed and that the skip
     [
       0,
       "✓ 1 gate(s) passed, 1 SKIPPED — not run, not passed",
-      "⏳ skipped: b  (skipper → 77)",
+      "⏳ skipped: b  (npm run -s test:e2e:x → 2 test(s) skipped)",
     ],
   );
   assert.ok(GATES.length > 0);
 });
 
+test("🔴 runGates: a vitest gate that exits 0 but leaves no report is a FAILURE, not a pass", () => {
+  const { out, io } = capture();
+  const code = runGates({
+    gates: [{ name: "v", job: "gates", script: "test:e2e:x", vitest: true }],
+    spawn: () => ({ status: 0 }),
+    write: () => {},
+    ...io,
+  });
+  assert.deepEqual(
+    [code, out[1], out[2]],
+    [
+      1,
+      "E 🔴 gates failed:",
+      "E    v  (npm run -s test:e2e:x → exit 0, but no vitest JSON report to read skips from)",
+    ],
+  );
+});
+
 test("run as a program with every gate passing: the plain verdict, exit 0", () => {
   // spawnSync is replaced before check.ts loads, so the real file runs end to end — every gate
   // "passes" in microseconds instead of the eleven real ones running.
   const allPass = [
     'import cp from "node:child_process";',
     'import { syncBuiltinESMExports } from "node:module";',
-    "cp.spawnSync = () => ({ status: 0 });",
+    'import fs from "node:fs";',
+    // A vitest gate writes its report where check.ts asked; a real run of none of them happens.
+    "cp.spawnSync = (cmd, args = []) => {",
+    '  const o = args.find((a) => a.startsWith("--outputFile.json="));',
+    "  if (o) fs.writeFileSync(o.slice(18), JSON.stringify({ numPendingTests: 0, numTodoTests: 0 }));",
+    "  return { status: 0 };",
+    "};",
     "syncBuiltinESMExports();",
   ].join("\n");
   const r = spawnSync(