tor-to-proposal 2.0.0

package/bin/lib.mjs

@@ -0,0 +1,109 @@
+// Shared helpers for tor-to-proposal CLI tools.
+// Deterministic only: no network, no LLM, no guessing. Same input -> same output.
+import fs from 'node:fs';
+import path from 'node:path';
+
+export function fail(msg, code = 1) {
+  process.stderr.write(`ERROR: ${msg}\n`);
+  process.exit(code);
+}
+
+export function readText(file, what = 'input file') {
+  if (!file) fail(`${what} missing. Use --help for usage.`, 2);
+  try {
+    return fs.readFileSync(file, 'utf8');
+  } catch {
+    fail(`cannot read ${what}: ${file}`, 2);
+  }
+}
+
+export function writeOut(file, content) {
+  if (file) {
+    fs.mkdirSync(path.dirname(path.resolve(file)), { recursive: true });
+    fs.writeFileSync(file, content);
+    process.stderr.write(`written: ${file}\n`);
+  } else {
+    process.stdout.write(content);
+  }
+}
+
+// Parse ["--key", "value", "--flag", "positional", "--n=3"] into
+// { _: [positional], key: "value", flag: true, n: "3" } (values stay strings).
+export function parseArgs(argv) {
+  const out = { _: [] };
+  for (let i = 0; i < argv.length; i++) {
+    const a = argv[i];
+    if (a === '--help' || a === '-h') { out.__help = true; return out; }
+    if (a.startsWith('--')) {
+      let key = a.slice(2);
+      let val = true;
+      const eq = key.indexOf('=');
+      if (eq !== -1) { val = key.slice(eq + 1); key = key.slice(0, eq); }
+      else if (i + 1 < argv.length && !argv[i + 1].startsWith('--')) { val = argv[++i]; }
+      // repeated flags collect into arrays (e.g. audit --extras a --extras b)
+      out[key] = out[key] === undefined ? val : [].concat(out[key], val);
+    } else {
+      out._.push(a);
+    }
+  }
+  return out;
+}
+
+export function num(v, name, { min = -Infinity, max = Infinity } = {}) {
+  const n = typeof v === 'string' ? Number(v.replace(/[, ]/g, '')) : Number(v);
+  if (!Number.isFinite(n)) fail(`${name} must be a number (got: ${v})`, 2);
+  if (n < min || n > max) fail(`${name} must be between ${min} and ${max} (got: ${n})`, 2);
+  return n;
+}
+
+export function fmt(n) {
+  return n.toLocaleString('en-US', { minimumFractionDigits: 2, maximumFractionDigits: 2 });
+}
+
+// Optional-dependency loader with an actionable message (skill users may not
+// have run npm install yet).
+export async function loadDep(spec) {
+  try {
+    const mod = await import(spec);
+    // CJS-only packages (adm-zip, mammoth) arrive as { default: exports,
+    // 'module.exports': exports } — unwrap so callers always get the module.
+    const hasNamed = Object.keys(mod).some((k) => k !== 'default' && k !== 'module.exports');
+    return !hasNamed && mod.default !== undefined ? mod.default : mod;
+  } catch {
+    fail(
+      `missing dependency "${spec}". Run:  npm install  inside the tor-to-proposal skill directory (one-time, local only).`,
+      3
+    );
+  }
+}
+
+// Page attribution: index of a match -> nearest preceding [[PAGE n]] tag.
+export const PAGE_TAG = /\[\[PAGE (\d+)\]\]/g;
+
+export function pageOf(text, index) {
+  let page = null;
+  PAGE_TAG.lastIndex = 0;
+  let m;
+  while ((m = PAGE_TAG.exec(text)) && m.index < index) page = Number(m[1]);
+  return page;
+}
+
+export function helpText(name, lines) {
+  return `tor-to-proposal :: ${name}\n\n${lines.join('\n')}\n`;
+}
+
+export function extractWindow(text, startRe, endRe, maxLen = 4000) {
+  const sm = text.match(startRe);
+  if (!sm) return null;
+  const start = sm.index;
+  const rest = text.slice(start + 1, start + maxLen);
+  const em = rest.match(endRe);
+  return text.slice(start, start + 1 + (em ? em.index + 1 : maxLen));
+}
+
+export function mdTable(headers, rows) {
+  const head = `| ${headers.join(' | ')} |`;
+  const sep = `| ${headers.map(() => '---').join(' | ')} |`;
+  const body = rows.map((r) => `| ${r.join(' | ')} |`).join('\n');
+  return [head, sep, body].join('\n');
+}

package/bin/market-rates.mjs

@@ -0,0 +1,54 @@
+#!/usr/bin/env node
+// market-rates: benchmark RESEARCH scaffolder + rate position calculator.
+// The scaffold never contains numbers — you research and cite every rate.
+import { parseArgs, writeOut, helpText, num, fmt } from './lib.mjs';
+
+const HELP = helpText('market-rates', [
+  'Commands:',
+  '  scaffold  [--title "..."] [--currency USD] [--out market-rates-research.md]',
+  '  position  --your-rate N --benchmark-low N --benchmark-high N [--currency USD]',
+  '',
+  'position: BELOW/WITHIN/ABOVE the cited band + advisory. Rejects low > high (exit 2).',
+  'Every band you use must be citable (source + date). No gut-feel numbers, ever.',
+]);
+
+const args = parseArgs(process.argv.slice(2));
+const cmd = args._[0];
+if (args.__help || !cmd) {
+  process.stdout.write(HELP);
+  process.exit(args.__help ? 0 : 1);
+}
+
+if (cmd === 'scaffold') {
+  const title = args.title || '[FILL: assignment title + ref no.]';
+  const cur = (args.currency || 'USD').toUpperCase();
+  const md = `# Market rates research — ${title}\n\n> Fill every row from a real source. No number without a source + access date.\n> Drop this file's band into: market-rates.mjs position --benchmark-low X --benchmark-high Y\n\n## Benchmark sources\n\n| # | Source | Type | Rate/band (${cur}) | Unit | Date accessed | Link |\n| --- | --- | --- | --- | --- | --- | --- |\n| 1 | UNDP/UNICEF/UNOPS consultant fee schedule or SSA guidance | fee grid | [FILL] | day | [FILL] | [FILL] |\n| 2 | UNGM contract award notices (search: client + sector + year) | awarded contract | [FILL] | day/lump | [FILL] | ungm.org\n| 3 | National procurement portal award notices | awarded contract | [FILL] | [FILL] | [FILL] | [FILL] |\n| 4 | Sector salary/rate survey (e.g. aid worker salary reports) | survey | [FILL] | month | [FILL] | [FILL] |\n| 5 | Live job postings with disclosed bands (client + sector) | posting | [FILL] | month | [FILL] | [FILL] |\n| 6 | 2–3 peer consultants (ask directly; record consent) | peer | [FILL] | day | [FILL] | n/a |\n\n## Context factors (write 1 line each — they move your band)\n- Cost-reimbursable vs lump-sum: lump-sum shifts risk to you -> floor up.\n- Payment delay reputation of this client (feeds from dossier.mjs): [FILL]\n- Currency + inflation of the contract currency: [FILL]\n- Your overhead (insurance, software, unpaid pipeline time): [FILL]%\n- Scope-creep exposure of the deliverables: [FILL]\n\n## Decision rule (printed, never skipped)\nfloor = (minimum acceptable net income for the period ÷ realistic billable days in it) + overhead.\nYour quote must trace to this floor or to a cited benchmark row above. If it traces to neither, it is a gut-feel number — not allowed.\n`;
+  writeOut(args.out || 'market-rates-research.md', md);
+  process.stderr.write('scaffold written. Research the rows, then run: position\n');
+} else if (cmd === 'position') {
+  const need = ['your-rate', 'benchmark-low', 'benchmark-high'];
+  for (const k of need) if (args[k] === undefined || args[k] === true) {
+    process.stderr.write(`ERROR: --${k} missing\n\n${HELP}`);
+    process.exit(1);
+  }
+  const rate = num(args['your-rate'], '--your-rate', { min: 0 });
+  const low = num(args['benchmark-low'], '--benchmark-low', { min: 0 });
+  const high = num(args['benchmark-high'], '--benchmark-high', { min: 0 });
+  if (low >= high) {
+    process.stderr.write(`ERROR: --benchmark-low (${fmt(low)}) must be BELOW --benchmark-high (${fmt(high)}). Fix your research band.\n`);
+    process.exit(2);
+  }
+  const cur = (args.currency || 'USD').toUpperCase();
+  const posPct = ((rate - low) / (high - low)) * 100;
+  const where = rate < low ? 'BELOW band' : rate > high ? 'ABOVE band' : 'WITHIN band';
+  let advisory;
+  if (rate < low) advisory = 'Below band: verify your floor (market-rates scaffold §Decision rule). Sustainable underpricing signals low quality to evaluators and burns the pipeline. If the floor genuinely fits, quote it with confidence.';
+  else if (rate > high) advisory = 'Above band: you must justify the premium with cited evidence — scarce expertise, faster delivery, lower client risk. Otherwise reposition within the band.';
+  else advisory = `Within band at ${posPct.toFixed(0)}% of the range. If >70%, prepare a one-line premium justification anyway.`;
+  process.stdout.write(
+    `Rate position (${cur})\n  Your rate:        ${fmt(rate)}\n  Cited band:       ${fmt(low)} – ${fmt(high)}\n  Position:         ${where} (${posPct.toFixed(0)}% of range)\n  Advisory:         ${advisory}\n  Source required:  benchmark-low/high must each trace to a row in market-rates-research.md (source + date). [FILL if not yet cited]\n`
+  );
+} else {
+  process.stderr.write(`unknown command: ${cmd}\n\n${HELP}`);
+  process.exit(1);
+}

package/bin/package.mjs

@@ -0,0 +1,234 @@
+#!/usr/bin/env node
+// package: the finisher. Builds the submittable bid pack from the working dir:
+//   1. inventories the four documents (cover letter, CV, technical, financial)
+//   2. renders any md-only doc via the fallback renderer (--fallback-pdf)
+//   3. RE-EXTRACTS the text from every rendered PDF/docx/xlsx and re-runs the
+//      full audit on those bytes — the gate applies to what the client reads,
+//      not the markdown source
+//   4. writes submission-checklist.md + deadline.ics, assembles pack/ + zip
+// Exit 0 = pack built. 1 = verification failed (do not submit). 2 = inputs missing.
+import fs from 'node:fs';
+import path from 'node:path';
+import { spawnSync } from 'node:child_process';
+import { fileURLToPath } from 'node:url';
+import { fail, parseArgs, readText, writeOut, helpText, mdTable, loadDep } from './lib.mjs';
+
+const HELP = helpText('package', [
+  'Usage: node bin/package.mjs --dir <bid-dir> [--fallback-pdf] [--no-zip] [--profile profile.json]',
+  '',
+  'Expects in <bid-dir>/ or <bid-dir>/out/: tor-extract.json, compliance-matrix.md and',
+  'cover-letter / cv-tailored / technical-proposal / financial-proposal as .pdf, .docx,',
+  '.xlsx or .md. --fallback-pdf renders md-only docs with the built-in renderer.',
+  'Outputs: <dir>/pack/ + <dir>/pack-report.md + <ref>-bid-pack.zip + <dir>/out/audit-final.md.',
+]);
+
+const DOCS = [
+  { key: 'cover-letter', name: 'Cover-Letter', exts: ['pdf', 'docx', 'md'] },
+  { key: 'cv-tailored', name: 'CV', exts: ['pdf', 'docx', 'md'] },
+  { key: 'technical-proposal', name: 'Technical-Proposal', exts: ['pdf', 'docx', 'md'] },
+  { key: 'financial-proposal', name: 'Financial-Proposal', exts: ['pdf', 'xlsx', 'md'] },
+];
+
+const args = parseArgs(process.argv.slice(2));
+if (args.__help || !args.dir) {
+  process.stdout.write(HELP);
+  process.exit(args.__help ? 0 : 1);
+}
+const dir = path.resolve(String(args.dir));
+const outDir = path.join(dir, 'out');
+if (!fs.existsSync(dir)) fail(`bid dir not found: ${dir}`, 2);
+fs.mkdirSync(outDir, { recursive: true });
+const HERE = path.dirname(fileURLToPath(import.meta.url));
+
+const find = (name) => [path.join(dir, name), path.join(outDir, name)].find((p) => fs.existsSync(p)) || null;
+const extractPath = find('tor-extract.json');
+if (!extractPath) fail(`no tor-extract.json in ${dir} or ${dir}/out — run: tor-to-proposal start --tor <file> --dir ${dir}`, 2);
+const extract = JSON.parse(fs.readFileSync(extractPath, 'utf8'));
+let context = {};
+try { context = JSON.parse(fs.readFileSync(find('bid-context.json'), 'utf8')); } catch { /* optional */ }
+const val = (x) => (x && x.value ? x.value : '[FILL]');
+const refNo = val(extract.referenceNumber);
+const refSlug = (refNo.match(/[A-Za-z0-9-]+/g) || ['bid']).join('-').slice(0, 60);
+
+// ---------- 1. inventory ----------
+function inventory() {
+  const found = {};
+  for (const doc of DOCS) {
+    let best = null;
+    for (const ext of doc.exts) {
+      const p = find(`${doc.key}.${ext}`);
+      if (p) { best = { ext, path: p }; break; } // exts are listed best-first
+    }
+    found[doc.key] = best;
+  }
+  return found;
+}
+let inv = inventory();
+const missing = DOCS.filter((d) => !inv[d.key]);
+
+// ---------- 2. fallback render ----------
+if (args['fallback-pdf']) {
+  for (const doc of DOCS) {
+    const a = inv[doc.key];
+    if (!a || a.ext !== 'md') continue;
+    const outPdf = path.join(outDir, `${doc.key}.pdf`);
+    const r = spawnSync(process.execPath, [path.join(HERE, 'render.mjs'), a.path, '--out', outPdf, '--footer', refNo], { encoding: 'utf8' });
+    if (r.status !== 0) fail(`fallback render failed for ${doc.key}: ${r.stderr}`, 1);
+    process.stderr.write(`fallback-rendered: ${doc.key}.pdf from markdown\n`);
+  }
+  inv = inventory();
+}
+
+// ---------- 3. verify artifacts by reading them back ----------
+const FILL_RE = /\[FILL|\{\{|\blorem ipsum\b/i;
+const checks = [];
+let hard = 0;
+const verifyDir = path.join(outDir, '.pack-verify');
+fs.rmSync(verifyDir, { recursive: true, force: true });
+fs.mkdirSync(verifyDir, { recursive: true });
+
+async function verifyPdf(file, key) {
+  const { extractText, getDocumentProxy } = await loadDep('unpdf');
+  const pdf = await getDocumentProxy(new Uint8Array(fs.readFileSync(file)));
+  const { totalPages, text } = await extractText(pdf, { mergePages: false });
+  const joined = Array.from(text).join('\n');
+  fs.writeFileSync(path.join(verifyDir, `${key}.txt`), joined);
+  return { kind: 'PDF', pages: totalPages, text: joined };
+}
+async function verifyDocx(file, key) {
+  const mammoth = await loadDep('mammoth');
+  const { value } = await mammoth.extractRawText({ path: file });
+  fs.writeFileSync(path.join(verifyDir, `${key}.txt`), value);
+  return { kind: 'DOCX', pages: null, text: value };
+}
+async function verifyXlsx(file, key) {
+  const mod = await loadDep('exceljs');
+  const ExcelJS = mod.default ?? mod;
+  const wb = new ExcelJS.Workbook();
+  await wb.xlsx.readFile(file);
+  const parts = [];
+  wb.eachSheet((ws) => {
+    parts.push(`[${ws.name}]`);
+    for (let r = 1; r <= Math.min(ws.rowCount || 0, 300); r++) {
+      const row = ws.getRow(r);
+      for (let c = 1; c <= Math.min(row.cellCount || 0, 30); c++) {
+        const v = row.getCell(c).value;
+        if (typeof v === 'string') parts.push(v);
+        else if (v && typeof v === 'object' && v.formula) parts.push(String(v.result ?? ''));
+      }
+    }
+  });
+  const text = parts.join('\n');
+  fs.writeFileSync(path.join(verifyDir, `${key}.txt`), text);
+  return { kind: 'XLSX', pages: null, text };
+}
+const verifyMd = (file, key) => {
+  const text = fs.readFileSync(file, 'utf8');
+  fs.writeFileSync(path.join(verifyDir, `${key}.txt`), text);
+  return { kind: 'MD', pages: null, text };
+};
+
+for (const doc of DOCS) {
+  const a = inv[doc.key];
+  if (!a) { checks.push([doc.name, 'MISSING', '—', `produce ${doc.key}.(pdf|docx|xlsx|md) in ${dir} or ${dir}/out`]); hard++; continue; }
+  let v;
+  try {
+    v = a.ext === 'pdf' ? await verifyPdf(a.path, doc.key) : a.ext === 'docx' ? await verifyDocx(a.path, doc.key) : a.ext === 'xlsx' ? await verifyXlsx(a.path, doc.key) : verifyMd(a.path, doc.key);
+  } catch (e) {
+    checks.push([doc.name, a.ext.toUpperCase(), '—', `unreadable: ${String(e.message || e).slice(0, 80)}`]); hard++; continue;
+  }
+  const hits = v.text.match(FILL_RE);
+  if (hits) { checks.push([doc.name, v.kind, v.pages ?? '—', `contains "${hits[0]}" — a placeholder survived rendering`]); hard++; continue; }
+  if (v.kind === 'MD') { checks.push([doc.name, 'MD', '—', 'markdown is not a submittable format — re-run with --fallback-pdf or render a real PDF/docx']); hard++; continue; }
+  if (v.text.trim().length < 60) { checks.push([doc.name, v.kind, v.pages ?? '—', 'nearly no extractable text (scanned or empty?)']); hard++; continue; }
+  checks.push([doc.name, v.kind, v.pages ?? '—', 'verified: text round-trips, no placeholders']);
+}
+
+// client-filled forms, if any, ride along unmodified (verified for [FILL] only)
+const extras = ['financial-filled.xlsx', 'filled.docx', 'compliance-matrix.md'].map(find).filter(Boolean);
+
+// ---------- 4. re-run the audit on the extracted bytes ----------
+let auditOk = false;
+const matrixPath = find('compliance-matrix.md');
+const tp = fs.existsSync(path.join(verifyDir, 'technical-proposal.txt')) ? path.join(verifyDir, 'technical-proposal.txt') : null;
+if (tp) {
+  const extrasArgs = ['cover-letter', 'cv-tailored', 'financial-proposal'].filter((k) => fs.existsSync(path.join(verifyDir, `${k}.txt`))).flatMap((k) => ['--extras', path.join(verifyDir, `${k}.txt`)]);
+  const auditArgs = ['--proposal', tp, ...(matrixPath ? ['--matrix', matrixPath] : []), ...extrasArgs, '--report', path.join(outDir, 'audit-final.md')];
+  const r = spawnSync(process.execPath, [path.join(HERE, 'audit.mjs'), ...auditArgs], { encoding: 'utf8' });
+  auditOk = r.status === 0;
+  if (!auditOk) hard++;
+}
+
+// ---------- 5. deadline math ----------
+const MONTHS = { jan: 0, feb: 1, mar: 2, apr: 3, may: 4, jun: 5, jul: 6, aug: 7, sep: 8, oct: 9, nov: 10, dec: 11 };
+function parseDeadline(s) {
+  if (!s) return null;
+  const t = String(s).trim();
+  let m = t.match(/(\d{4})-(\d{2})-(\d{2})/);
+  if (m) return new Date(+m[1], +m[2] - 1, +m[3]);
+  m = t.match(/(\d{1,2})\s+([A-Za-z]{3,9}),?\s+(\d{4})/);
+  if (m) return new Date(+m[3], MONTHS[m[2].slice(0, 3).toLowerCase()] ?? 0, +m[1]);
+  m = t.match(/([A-Za-z]{3,9})\s+(\d{1,2}),?\s+(\d{4})/);
+  if (m) return new Date(+m[3], MONTHS[m[1].slice(0, 3).toLowerCase()] ?? 0, +m[2]);
+  m = t.match(/(\d{1,2})[\/-](\d{1,2})[\/-](\d{2,4})/);
+  if (m) { const y = +m[3] < 100 ? +m[3] + 2000 : +m[3]; return new Date(y, +m[2] - 1, +m[1]); } // D/M/Y assumption (non-US ToRs)
+  return null;
+}
+const deadlineStr = val(extract.deadline);
+const deadline = parseDeadline(deadlineStr);
+const daysLeft = deadline ? Math.ceil((deadline - new Date()) / 86400000) : null;
+
+// ---------- 6. submission checklist ----------
+const fmtDate = (d) => (d ? `${String(d.getDate()).padStart(2, '0')} ${['Jan', 'Feb', 'Mar', 'Apr', 'May', 'Jun', 'Jul', 'Aug', 'Sep', 'Oct', 'Nov', 'Dec'][d.getMonth()]} ${d.getFullYear()}` : '[FILL]');
+const deadlineLine = deadline ? `${fmtDate(deadline)} — **${daysLeft >= 0 ? `${daysLeft} day${daysLeft === 1 ? '' : 's'} remaining` : `PASSED ${-daysLeft} day(s) ago`}** (parsed from "${deadlineStr}"; confirm the ToR's time zone before relying on the hour)` : `**${deadlineStr}** — could not parse to a date; confirm manually`;
+
+const checklistRows = checks.map((c) => [c[0], c[1], String(c[2]), c[3]]);
+let report = `# Bid pack report — ${refNo}\n\n## Assignment\n- Title: ${val(extract.title)}\n- Reference: ${refNo}\n- Consultant: ${context.consultantLine || '[FILL]'}\n- Deadline: ${deadlineLine}\n- Submission channel: ${val(extract.submissionChannel)}${extract.submissionChannel?.page ? ` (p.${extract.submissionChannel.page})` : ''}\n\n` +
+  `## Document verification\n\n${mdTable(['Document', 'Format', 'Pages', 'Verdict'], checklistRows)}\n\n` +
+  `## Audit on rendered bytes\n\n${auditOk ? 'PASS — audit.mjs re-run on the extracted text of every document: no hard fails.' : `FAIL — audit.mjs found hard fails on the final documents. See ${path.join(outDir, 'audit-final.md')}. Do not submit.`}\n`;
+
+let zipWritten = null;
+if (hard === 0) {
+  const packDir = path.join(dir, 'pack');
+  fs.rmSync(packDir, { recursive: true, force: true });
+  fs.mkdirSync(packDir, { recursive: true });
+  for (const doc of DOCS) {
+    const a = inv[doc.key];
+    if (a) fs.copyFileSync(a.path, path.join(packDir, `${doc.name}.${a.ext}`));
+  }
+  for (const e of extras) fs.copyFileSync(e, path.join(packDir, path.basename(e)));
+
+    const checklist = `# Submission checklist — ${refNo}\n\n**Assignment:** ${val(extract.title)}\n**Deadline:** ${deadlineLine}\n**Channel:** ${val(extract.submissionChannel)}${extract.submissionChannel?.page ? ` (p.${extract.submissionChannel.page})` : ''}\n\n` +
+    `## Files in this pack\n\n${mdTable(['File', 'What it is'], DOCS.filter((d) => inv[d.key]).map((d) => [`${d.name}.${inv[d.key].ext}`, d.key]).concat(extras.map((e) => [path.basename(e), 'client form / compliance matrix (verified)'])))}\n\n` +
+    `## Before you hit submit\n\n1. Every document verified: no [FILL], no placeholders, audit passed on the final bytes.\n2. File names/formats: confirm the ToR's naming and format rules (some portals rename or reject files).\n3. Deadline: submit well before close — portals slow down near deadlines. Confirm the ToR's time zone.\n4. Registration: verify any portal registration the ToR requires is done **before** award stage.\n5. Keep pricing.md and pricing.json PRIVATE — they contain your floor math and are not in this pack.\n6. After submission: tell your assistant "record this bid" (win/loss library, opt-in).\n`;
+  fs.writeFileSync(path.join(packDir, 'submission-checklist.md'), checklist);
+
+  if (deadline) {
+    const y = (d) => `${d.getFullYear()}${String(d.getMonth() + 1).padStart(2, '0')}${String(d.getDate()).padStart(2, '0')}`;
+    const dayAfter = new Date(deadline); dayAfter.setDate(dayAfter.getDate() + 1);
+    const stamp = new Date().toISOString().replace(/[-:]/g, '').replace(/\.\d+/, '');
+    const ics = ['BEGIN:VCALENDAR', 'VERSION:2.0', 'PRODID:-//tor-to-proposal//bid pack//EN', 'BEGIN:VEVENT', `UID:${refSlug}-${y(deadline)}@tor-to-proposal`, `DTSTAMP:${stamp}`, `DTSTART;VALUE=DATE:${y(deadline)}`, `DTEND;VALUE=DATE:${y(dayAfter)}`, `SUMMARY:SUBMIT: ${refNo} ${val(extract.title).replace(/[,\;]/g, ' ')}`, `DESCRIPTION:Deadline per ToR ${extract.deadline?.page ? '(p.' + extract.deadline.page + ')' : ''}. Channel: ${val(extract.submissionChannel).replace(/[,\;]/g, ' ')}`, 'BEGIN:VALARM', 'TRIGGER:-P2D', 'ACTION:DISPLAY', `DESCRIPTION:Bid deadline in 2 days: ${refNo}`, 'END:VALARM', 'END:VEVENT', 'END:VCALENDAR', ''].join('\n');
+    fs.writeFileSync(path.join(packDir, 'deadline.ics'), ics);
+  }
+  report += `\n## Pack\n\n${packDir}/ — final files with canonical names.\n`;
+  if (!args['no-zip']) {
+    const zipMod = await loadDep('adm-zip');
+    const AdmZip = zipMod.default ?? zipMod;
+    const zip = new AdmZip();
+    zip.addLocalFolder(packDir, `${refSlug}-bid-pack`);
+    zipWritten = path.join(dir, `${refSlug}-bid-pack.zip`);
+    zip.writeZip(zipWritten);
+    report += `${zipWritten}\n`;
+  }
+} else {
+  // a previous successful run may have left a pack — a stale pack that LOOKS
+  // ready to submit is worse than no pack. Remove it and any zip.
+  const stalePack = path.join(dir, 'pack');
+  if (fs.existsSync(stalePack)) fs.rmSync(stalePack, { recursive: true, force: true });
+  for (const f of fs.readdirSync(dir)) if (f.endsWith('-bid-pack.zip')) fs.rmSync(path.join(dir, f), { force: true });
+  report += `\n## Pack NOT built — ${hard} verification failure(s) above. Fix and re-run. (Any previous pack/ and zip were removed so a stale pack cannot be submitted by mistake.)\n`;
+}
+writeOut(path.join(dir, 'pack-report.md'), report);
+process.stdout.write(report);
+process.stderr.write(`package: ${hard === 0 ? 'PACK READY' : `${hard} hard failure(s) — pack withheld`}\n`);
+process.exit(hard === 0 ? 0 : 1);

package/bin/pdf-extract.mjs

@@ -0,0 +1,135 @@
+#!/usr/bin/env node
+// pdf-extract: PDF/docx/xlsx -> page/sheet-tagged plain text + extraction signals.
+// Deterministic. Never invents content; on failure it explains and exits non-zero.
+import fs from 'node:fs';
+import { execFileSync } from 'node:child_process';
+import { fail, parseArgs, writeOut, helpText, loadDep } from './lib.mjs';
+
+const HELP = helpText('pdf-extract', [
+  'Usage: node bin/pdf-extract.mjs <input.(pdf|docx|xlsx|txt)> [--out text.txt] [--signals signals.json]',
+  '',
+  'Output: full text with [[PAGE n]] (PDF/docx) or [[SHEET n: Name]] (xlsx) tags.',
+  'Signals: totalPages, charCount, charsPerPage, scannedLikely, hasEvaluationTable,',
+  '         hasAnnexes, hasFinancialForm.',
+  'Exit codes: 0 ok | 1 error | 2 cannot extract (scanned PDF / OCR needed / parse failed) | 3 deps missing',
+]);
+
+const args = parseArgs(process.argv.slice(2));
+if (args.__help || args._.length === 0) {
+  process.stdout.write(HELP);
+  process.exit(args.__help ? 0 : 1);
+}
+const file = args._[0];
+if (!fs.existsSync(file)) fail(`file not found: ${file}`, 2);
+
+const ext = (file.split('.').pop() || '').toLowerCase();
+
+async function extractPdf() {
+  const buf = fs.readFileSync(file);
+  // Primary: unpdf (bundled pdf.js). Fallback: poppler pdftotext if installed.
+  let pages = null;
+  try {
+    const { extractText, getDocumentProxy } = await loadDep('unpdf');
+    const pdf = await getDocumentProxy(new Uint8Array(buf));
+    const { totalPages, text } = await extractText(pdf, { mergePages: false });
+    pages = Array.from(text);
+    if (pages.length !== totalPages) pages.length = totalPages;
+  } catch (e) {
+    if (String(e?.message || e).startsWith('ERROR:')) throw e; // loadDep already handled
+    try {
+      const out = execFileSync('pdftotext', [file, '-'], { encoding: 'utf8', stdio: ['ignore', 'pipe', 'ignore'] });
+      pages = out.split('\f');
+    } catch {
+      fail(
+        `could not parse PDF "${file}". If it is a scanned document, run OCR first:\n` +
+          '  tesseract input.pdf output_txt  (or: pdftotext input.pdf output.txt if poppler is installed)',
+        2
+      );
+    }
+  }
+  return pages.map((t, i) => `[[PAGE ${i + 1}]]\n${(t || '').trim()}`).join('\n\n');
+}
+
+async function extractDocx() {
+  try {
+    const mammoth = await loadDep('mammoth'); // mammoth or its CJS default, both expose extractRawText
+    const { value } = await mammoth.extractRawText({ path: file });
+    // docx has no fixed pages; one tag block so downstream page attribution still works.
+    return `[[PAGE 1]]\n${value.trim()}\n\n<!-- note: source is .docx; it has no fixed pagination -->`;
+  } catch (e) {
+    if (String(e?.message || e).startsWith('ERROR:')) throw e;
+    try {
+      const xml = execFileSync('unzip', ['-p', file, 'word/document.xml'], { encoding: 'utf8' });
+      const text = xml
+        .replace(/<\/w:p>/g, '\n')
+        .replace(/<[^>]+>/g, '')
+        .replace(/&amp;/g, '&').replace(/&lt;/g, '<').replace(/&gt;/g, '>').trim();
+      return `[[PAGE 1]]\n${text}\n\n<!-- note: docx extracted via unzip fallback -->`;
+    } catch {
+      fail(`could not extract docx "${file}" (mammoth and unzip fallback both failed)`, 2);
+    }
+  }
+}
+
+async function extractXlsx() {
+  const mod = await loadDep('exceljs');
+  const ExcelJS = mod.default ?? mod;
+  const wb = new ExcelJS.Workbook();
+  await wb.xlsx.readFile(file);
+  const parts = [];
+  let sheetIdx = 0; // eachSheet's 2nd arg is the sheet id, not the position — count manually
+  wb.eachSheet((ws) => {
+    sheetIdx += 1;
+    parts.push(`[[SHEET ${sheetIdx}: ${ws.name}]]`);
+    const maxRow = Math.min(ws.rowCount || 0, 500);
+    for (let r = 1; r <= maxRow; r++) {
+      const row = ws.getRow(r);
+      const cells = [];
+      const maxCol = Math.min(row.cellCount || 0, 40);
+      for (let c = 1; c <= maxCol; c++) {
+        const v = row.getCell(c).value;
+        if (v !== null && v !== undefined && v !== '') cells.push(String(v));
+      }
+      if (cells.length) parts.push(`R${r}: ` + cells.join(' | '));
+    }
+  });
+  return parts.join('\n');
+}
+
+let text;
+if (ext === 'pdf') text = await extractPdf();
+else if (ext === 'docx') text = await extractDocx();
+else if (ext === 'xlsx' || ext === 'xlsm') text = await extractXlsx();
+else text = fs.readFileSync(file, 'utf8'); // already-extracted or pasted text: pass through
+
+const pageTags = [...text.matchAll(/\[\[PAGE (\d+)\]\]/g)].length;
+const sheetTags = [...text.matchAll(/\[\[SHEET \d+/g)].length;
+const totalPages = pageTags || sheetTags || 1;
+const charCount = text.length;
+const charsPerPage = totalPages ? charCount / totalPages : 0;
+
+const signals = {
+  file,
+  kind: ext === 'pdf' || ext === 'docx' ? 'paged' : ext.startsWith('xls') ? 'sheeted' : 'text',
+  totalPages,
+  charCount,
+  charsPerPage: Math.round(charsPerPage),
+  scannedLikely: (ext === 'pdf' && charsPerPage < 200),
+  hasEvaluationTable: /evaluation criteri|technical evaluation|scoring (?:grid|table)|award criteria/i.test(text),
+  hasAnnexes: /\bannex\b/i.test(text),
+  hasFinancialForm: /financial (?:proposal|offer|submission)|price schedule|breakdown of costs/i.test(text),
+};
+
+if (signals.scannedLikely) {
+  process.stderr.write(
+    `WARNING: thin text layer (${signals.charsPerPage} chars/page) -> likely scanned PDF.\n` +
+      'OCR required before extraction:  tesseract input.pdf outbase txt\n'
+  );
+  if (args['allow-scanned'] !== true) {
+    writeOut(args.signals, JSON.stringify(signals, null, 2));
+    fail('refusing to extract a likely-scanned PDF without real text (use OCR first)', 2);
+  }
+}
+
+writeOut(args.out, text);
+writeOut(args.signals, JSON.stringify(signals, null, 2));

package/bin/pricing-model.mjs

@@ -0,0 +1,73 @@
+#!/usr/bin/env node
+// pricing-model: transparent multi-format rate calculator.
+// Every number printed with its formula. Emits pricing.json (input to template-filler).
+import fs from 'node:fs';
+import path from 'node:path';
+import { fail, parseArgs, writeOut, helpText, num, fmt } from './lib.mjs';
+
+const HELP = helpText('pricing-model', [
+  'Usage: node bin/pricing-model.mjs --base 400 --basis day --currency USD',
+  '            [--loading 0.25] [--contingency 0.10] [--effort 20] [--weeks 6] [--out-dir out]',
+  '',
+  'Constants, always shown: 8h/day, 5d/week, 4.33 weeks/month.',
+  'Outputs: <out-dir>/pricing.json + pricing.md (each line shows its formula).',
+  'GATE: inputs are yours. This tool computes; it never suggests a base rate.',
+]);
+
+const args = parseArgs(process.argv.slice(2));
+if (args.__help || args.base === undefined || !args.basis) {
+  process.stdout.write(HELP);
+  process.exit(args.__help ? 0 : 1);
+}
+const basis = String(args.basis).toLowerCase();
+if (!['hour', 'day', 'week', 'month'].includes(basis)) fail(`--basis must be hour|day|week|month (got ${basis})`, 2);
+const base = num(args.base, '--base', { min: 0 });
+const currency = (args.currency || 'USD').toUpperCase();
+const loading = args.loading !== undefined ? num(args.loading, '--loading', { min: 0, max: 2 }) : 0;
+const contingency = args.contingency !== undefined ? num(args.contingency, '--contingency', { min: 0, max: 1 }) : 0;
+const effortDays = args.effort !== undefined ? num(args.effort, '--effort', { min: 0 }) : null;
+const weeks = args.weeks !== undefined ? num(args.weeks, '--weeks', { min: 0 }) : null;
+
+// Canonical: everything derives from the hourly rate.
+const perHour = { hour: base, day: base / 8, week: base / (8 * 5), month: base / (8 * 5 * 4.33) }[basis];
+const r = (x) => Math.round(x * 100) / 100;
+const conv = [
+  ['hour', perHour, `= ${fmt(base)} / ${basis === 'hour' ? '1' : { day: '8 (h/day)', week: '40 (8×5)', month: '173.3 (8×5×4.33)' }[basis]}`],
+  ['day', perHour * 8, `= hourly ${fmt(r(perHour))} × 8`],
+  ['week', perHour * 8 * 5, `= hourly ${fmt(r(perHour))} × 40`],
+  ['month', perHour * 8 * 5 * 4.33, `= hourly ${fmt(r(perHour))} × 173.3`],
+];
+const baseDay = perHour * 8;
+const loaded = baseDay * (1 + loading);
+const floor = loaded * (1 + contingency);
+const lumpSum = effortDays !== null ? floor * effortDays : null;
+const total = weeks !== null ? floor * 5 * weeks : null;
+
+const pricing = {
+  inputs: { base, basis, currency, loading, contingency, effortDays, weeks, userSupplied: true },
+  constants: { hoursPerDay: 8, daysPerWeek: 5, weeksPerMonth: 4.33 },
+  rates: { hour: r(perHour), day: r(baseDay), week: r(perHour * 40), month: r(perHour * 173.3) },
+  loadedDay: r(loaded),
+  quoteFloorDay: r(floor),
+  lumpSum: lumpSum !== null ? r(lumpSum) : null,
+  assignmentTotal: total !== null ? r(total) : null,
+};
+
+const outDir = args['out-dir'] || 'out';
+fs.mkdirSync(path.resolve(outDir), { recursive: true });
+fs.writeFileSync(path.join(outDir, 'pricing.json'), JSON.stringify(pricing, null, 2));
+
+let md = `# Pricing model (${currency})\n\nInputs (all user-supplied): base ${fmt(base)}/${basis}` +
+  (loading ? `, loading ${(loading * 100).toFixed(0)}%` : '') +
+  (contingency ? `, contingency ${(contingency * 100).toFixed(0)}%` : '') +
+  (effortDays !== null ? `, effort ${effortDays} person-days` : '') +
+  (weeks !== null ? `, ${weeks} weeks` : '') + `\n\nConstants (open): 8h/day, 5d/week, 4.33 weeks/month.\n\n## Billing formats\n\n| Basis | Rate (${currency}) | Formula |\n| --- | --- | --- |\n` +
+  conv.map(([k, v, f]) => `| per ${k} | ${fmt(r(v))} | ${f} |`).join('\n') +
+  `\n\n## Load & floor\n` +
+  `- Loaded day rate: **${fmt(r(loaded))}** = base day ${fmt(r(baseDay))} × (1 + loading ${(loading * 100).toFixed(0)}%)\n` +
+  (contingency ? `- Quote floor: **${fmt(r(floor))}** = loaded ${fmt(r(loaded))} × (1 + contingency ${(contingency * 100).toFixed(0)}%)\n` : `- Quote floor = loaded rate (no contingency set)\n`) +
+  (lumpSum !== null ? `- Lump-sum for ${effortDays} days: **${fmt(r(lumpSum))}** = floor ${fmt(r(floor))} × ${effortDays}\n` : '') +
+  (total !== null ? `- Assignment total (${weeks} weeks): **${fmt(r(total))}** = floor ${fmt(r(floor))} × 5 × ${weeks}\n` : '') +
+  `\n> ⚠️ CLIENT TEMPLATE GOVERNS: many financial forms forbid loading/contingency lines or require\n> per-deliverable or per-team-member breakdown. Restructure INTO their template with\n> template-filler.mjs — never the other way around. If the template has no rows for loading,\n> present the loaded figure only.\n`;
+writeOut(path.join(outDir, 'pricing.md'), md);
+process.stdout.write(md);