@oscharko-dev/keiko-contracts 0.2.0

package/dist/qualityIntelligence/bffWire.d.ts

@@ -0,0 +1,356 @@
+import type { QualityIntelligenceValidationFindingKind } from "./validationFinding.js";
+import type { QualityIntelligenceSeverity } from "./validationFinding.js";
+import type { QualityIntelligencePriority, QualityIntelligenceRiskClass, QualityIntelligenceTestCaseStatus } from "./testCaseCandidate.js";
+import type { QualityIntelligenceReviewState } from "./reviewRecord.js";
+import type { TestQualityRubricDimension } from "./testQualityRubric.js";
+/** Counts-only totals carried on both the list-view and the detail view. */
+export interface QualityIntelligenceUiRunTotals {
+    readonly candidates: number;
+    readonly findings: number;
+    readonly exports: number;
+}
+/** List-view projection — only what the run list needs. */
+export interface QualityIntelligenceUiRunSummary {
+    readonly id: string;
+    readonly status: "running" | "succeeded" | "failed" | "cancelled";
+    /** ISO 8601 timestamp. */
+    readonly requestedAt: string;
+    /** ISO 8601 timestamp, or null when the run has not yet completed. */
+    readonly completedAt: string | null;
+    readonly totals: QualityIntelligenceUiRunTotals;
+    /** Overall human-review state for the run (Issue #282); "open" until a reviewer acts. */
+    readonly reviewState: QualityIntelligenceReviewState;
+}
+/**
+ * Response envelope for `GET /api/quality-intelligence/runs` (issue #646).
+ *
+ * The list route bounds manifest loading by a default limit and reports how many run ids the
+ * underlying store knows about so the UI can render a "more available" indicator without doing
+ * a second pass. Producers MUST cap the `runs` array at `limit` and set `truncated = true` when
+ * `totalRunIds > limit`. Additive on the wire: legacy clients reading `runs` continue to work.
+ */
+export interface QualityIntelligenceUiRunListResponse {
+    readonly runs: readonly QualityIntelligenceUiRunSummary[];
+    /** Effective limit applied for this response (default or explicit, capped at the route max). */
+    readonly limit: number;
+    /** Total run ids the store reported (may exceed runs.length when truncated). */
+    readonly totalRunIds: number;
+    /** True when totalRunIds > limit; the response omits the tail of the run list. */
+    readonly truncated: boolean;
+}
+/**
+ * Per-finding row for the findings panel.
+ * `summaryRedacted` is a non-secret single-sentence description already passed through
+ * the QI redaction pipeline. Producers MUST NOT send raw validator output here.
+ */
+export interface QualityIntelligenceUiFindingSummary {
+    readonly id: string;
+    readonly kind: QualityIntelligenceValidationFindingKind;
+    readonly severity: QualityIntelligenceSeverity;
+    /** Already redacted by the QI redaction pipeline before reaching the BFF. */
+    readonly summaryRedacted: string;
+}
+/** Evidence reference row — envelope id and atom id only, no content. */
+export interface QualityIntelligenceUiEvidenceRef {
+    readonly envelopeId: string;
+    readonly atomId: string;
+}
+/**
+ * Per-atom coverage row for the UI. Refs plus an optional short REDACTED requirement excerpt
+ * (#790) so the Gap Radar can name the requirement, not just its opaque atom id. Never raw atom
+ * text — the excerpt is redacted+truncated at build time and redacted again at persist time.
+ * Absent on runs recorded before #790.
+ */
+export interface QualityIntelligenceUiAtomCoverage {
+    readonly atomId: string;
+    readonly status: "covered" | "weakly-covered" | "uncovered";
+    readonly confidence: number;
+    readonly requirementExcerptRedacted?: string;
+}
+/**
+ * Weak-test flag surfaced when the adversarial test-quality judge (Epic #736) classified a
+ * candidate as weak. Carries only the redacted judge rationale and the finding severity — never
+ * raw model output. Absent on a candidate that the judge rated strong or that was never judged.
+ */
+export interface QualityIntelligenceUiWeakTestFlag {
+    readonly severity: QualityIntelligenceSeverity;
+    /** Single-sentence reason, already passed through the QI redaction pipeline. */
+    readonly rationale: string;
+}
+export interface QualityIntelligenceUiCandidateQualityVerdict {
+    readonly verdict: "strong" | "weak";
+    readonly score: number;
+    readonly dimensions: readonly TestQualityRubricDimension[];
+    readonly overallRationale: string;
+}
+export interface QualityIntelligenceUiDriftMetadata {
+    /**
+     * GET run detail is read-only: it reports whether drift tracking metadata exists, but never
+     * re-reads local sources. Clients call re-check with current source handles to compute staleness.
+     */
+    readonly status: "not-checked" | "unavailable";
+    /** Count only; raw fingerprint hashes stay in evidence and are never sent to the browser. */
+    readonly sourceFingerprintCount: number;
+    /** Count only; raw atom hashes stay in evidence and are never sent to the browser. */
+    readonly atomFingerprintCount: number;
+    readonly reCheckSupported: boolean;
+    readonly regenerateStaleSupported: boolean;
+}
+/**
+ * Single-run detail projection.
+ * Adds full finding rows, candidate id refs, evidence refs, and the manifest schema
+ * version. Never carries raw prompts, model output, credentials, or provider URLs.
+ */
+export interface QualityIntelligenceUiRunDetail {
+    readonly id: string;
+    readonly status: "running" | "succeeded" | "failed" | "cancelled";
+    /** ISO 8601 timestamp. */
+    readonly requestedAt: string;
+    /** ISO 8601 timestamp, or null when the run has not yet completed. */
+    readonly completedAt: string | null;
+    readonly totals: QualityIntelligenceUiRunTotals;
+    readonly findingRefs: readonly QualityIntelligenceUiFindingSummary[];
+    readonly candidateIds: readonly string[];
+    /**
+     * Browser-safe projection of the generated test-case bodies (Issue #280). Empty when the run
+     * produced no candidate artifact (e.g. a failed run or a legacy run recorded before candidate
+     * persistence). Bodies are redacted by the producer before reaching this wire shape.
+     */
+    readonly candidates: readonly QualityIntelligenceUiCandidate[];
+    readonly evidenceRefs: readonly QualityIntelligenceUiEvidenceRef[];
+    /** Overall human-review state for the run (Issue #282); "open" until a reviewer acts. */
+    readonly reviewState: QualityIntelligenceReviewState;
+    /** The `qiEvidenceSchemaVersion` literal from the persisted manifest. */
+    readonly manifestSchemaVersion: number;
+    /** Coverage percentage: (covered atoms / total atoms) × 100. 0 when no matrix is available. */
+    readonly coveragePercentage: number;
+    /** Per-atom coverage classification (refs + status; empty when no matrix is available). */
+    readonly coverageByAtom: readonly QualityIntelligenceUiAtomCoverage[];
+    /**
+     * Run quality score: the percentage of candidates with a strong adversarial judge outcome [0-100]
+     * (Epic #736) — 100 = every judged test is strong, 0 = every judged test is weak. Null when the
+     * judge stage was skipped, unavailable, or there were no candidates to judge.
+     */
+    readonly qualityScore: number | null;
+    /** Browser-safe Living Tests drift metadata; never contains raw source text, paths, or hashes. */
+    readonly drift: QualityIntelligenceUiDriftMetadata;
+}
+/**
+ * Browser-safe projection of a single generated test-case candidate (Issue #280/#282). Carries the
+ * authored body for review + export. Never carries the raw model prompt or raw source content; the
+ * producer redacts every string before constructing this shape.
+ */
+export interface QualityIntelligenceUiCandidate {
+    readonly id: string;
+    readonly title: string;
+    readonly preconditions: readonly string[];
+    readonly steps: readonly string[];
+    readonly expectedResults: readonly string[];
+    readonly priority: QualityIntelligencePriority;
+    readonly riskClass: QualityIntelligenceRiskClass;
+    readonly tags: readonly string[];
+    /** Generation status from the candidate body. */
+    readonly status: QualityIntelligenceTestCaseStatus;
+    /** Per-candidate review decision (Issue #282); "open" until a reviewer acts. */
+    readonly reviewState: QualityIntelligenceReviewState;
+    readonly derivedFromAtomIds: readonly string[];
+    /**
+     * Present when the adversarial test-quality judge evaluated this candidate. Additive and absent
+     * on legacy runs or when the judge stage was skipped.
+     */
+    readonly qualityVerdict?: QualityIntelligenceUiCandidateQualityVerdict;
+    /**
+     * Present only when the adversarial test-quality judge (Epic #736) flagged this candidate as
+     * weak. Omitted entirely when the candidate was rated strong or the judge stage was skipped.
+     */
+    readonly weakTestFlag?: QualityIntelligenceUiWeakTestFlag;
+    /**
+     * Candidate body fields shortened only for the browser-facing BFF projection. Persisted evidence
+     * and export semantics remain full-fidelity.
+     */
+    readonly truncatedFields?: readonly ("title" | "preconditions" | "steps" | "expectedResults" | "tags")[];
+}
+/** Why a single candidate is stale: its source changed, or its source is gone. */
+export interface QualityIntelligenceUiStalenessEntry {
+    readonly candidateId: string;
+    readonly reason: "source-changed" | "source-removed";
+    readonly envelopeId: string;
+}
+/**
+ * Response of `POST /api/quality-intelligence/runs/:id/re-check`. Reports which generated tests
+ * are still fresh and which drifted because their source fingerprint changed (or vanished) since
+ * the run was recorded. Refs only — no raw source text.
+ */
+export interface QualityIntelligenceUiStalenessReport {
+    readonly runId: string;
+    /** changedStale.length + orphanedStale.length. */
+    readonly staleCount: number;
+    readonly fresh: readonly string[];
+    readonly changedStale: readonly QualityIntelligenceUiStalenessEntry[];
+    readonly orphanedStale: readonly QualityIntelligenceUiStalenessEntry[];
+}
+/**
+ * Response of `POST /api/quality-intelligence/runs/:id/regenerate-stale`. Targeted regeneration
+ * writes a NEW immutable run; `runId` is that new run's id. Fresh candidates + human edits are
+ * preserved (`preservedCount`); only the stale subset is regenerated (`regeneratedCount`).
+ */
+export interface QualityIntelligenceUiRegenerateResult {
+    readonly runId: string;
+    readonly regeneratedCount: number;
+    readonly preservedCount: number;
+}
+export type QualityIntelligenceInlineSourceKind = "requirements" | "workspace" | "file" | "capsule" | "capsule-set" | "figma-snapshot" | "image";
+/** A pasted free-text requirement blob the server splits into requirement atoms. */
+export interface QualityIntelligenceRequirementsSource {
+    readonly kind: "requirements";
+    readonly label: string;
+    readonly text: string;
+}
+/** A local workspace folder the server ingests through keiko-workspace (path containment applies). */
+export interface QualityIntelligenceWorkspaceSource {
+    readonly kind: "workspace";
+    readonly label: string;
+    readonly path: string;
+}
+/**
+ * A single local file — one Fachkonzept document (Markdown / plain text / source file) the server
+ * ingests through keiko-workspace as exactly one source atom. The same path containment, deny
+ * rules, size cap, and redaction that protect the folder path apply identically here; binary or
+ * unsupported files are rejected with a coded, user-actionable error rather than partially
+ * ingested. `path` is an absolute local path resolved server-side (Epic #709, Issue #713).
+ */
+export interface QualityIntelligenceFileSource {
+    readonly kind: "file";
+    readonly label: string;
+    readonly path: string;
+}
+/**
+ * A Local Knowledge capsule — an indexed knowledge capsule the server ingests by reading its full
+ * document corpus through keiko-local-knowledge. The capsuleId must match an existing indexed
+ * capsule; if the capsule is unavailable the server responds with QI_CAPSULE_UNAVAILABLE (Epic
+ * #710, Issue #717).
+ */
+export interface QualityIntelligenceCapsuleSource {
+    readonly kind: "capsule";
+    readonly label: string;
+    readonly capsuleId: string;
+}
+/**
+ * A Local Knowledge capsule-SET — a named composition of capsules the server expands into its
+ * member capsules and ingests as one combined corpus. The capsuleSetId must match an existing
+ * capsule-set; an unknown or empty set is rejected with QI_CAPSULE_UNAVAILABLE (Epic #710,
+ * Issue #716/#717). The contract mirrors the single-capsule source so the connector picker can bind
+ * either a capsule or a capsule-set to the QI hub (Issue #718).
+ */
+export interface QualityIntelligenceCapsuleSetSource {
+    readonly kind: "capsule-set";
+    readonly label: string;
+    readonly capsuleSetId: string;
+}
+/**
+ * A stored Figma Snapshot (Epic #750, Issue #753/#754) the server ingests by loading the immutable
+ * snapshot evidence record for `snapshotRunId` and deriving a deterministic, citation-ready
+ * structural test baseline per screen from its Screen-IR (fields/controls/screens/states), enriched
+ * by capability-routed vision only when a multimodal model is available. This source never contacts
+ * Figma — it reads ONLY the previously built snapshot. An unknown / unreadable snapshot is rejected
+ * with QI_FIGMA_SNAPSHOT_UNAVAILABLE. `screenIds`, when present, scopes ingestion to one or more
+ * specific masks from the snapshot so large boards do not flood QI with unrelated screens. The
+ * contract mirrors the capsule source so the connector picker can bind a snapshot to the QI hub.
+ */
+export interface QualityIntelligenceFigmaSnapshotSource {
+    readonly kind: "figma-snapshot";
+    readonly label: string;
+    readonly snapshotRunId: string;
+    /** Optional Screen-IR ids to ingest from the stored snapshot; absent means whole snapshot. */
+    readonly screenIds?: readonly string[];
+}
+/**
+ * A connected image source. The current producer is a stored Figma Snapshot screen render, but the
+ * source kind is intentionally generic: QI consumes it by generating a model-derived textual image
+ * description through an image-input-capable model, then treating that description as evidence.
+ * When no image-capable model is configured the source is rejected/skipped with a user-actionable
+ * code instead of pretending the image was understood.
+ */
+export interface QualityIntelligenceImageSource {
+    readonly kind: "image";
+    readonly label: string;
+    readonly sourceKind: "figma-snapshot-screen";
+    readonly snapshotRunId: string;
+    readonly screenId: string;
+}
+export type QualityIntelligenceInlineSource = QualityIntelligenceRequirementsSource | QualityIntelligenceWorkspaceSource | QualityIntelligenceFileSource | QualityIntelligenceCapsuleSource | QualityIntelligenceCapsuleSetSource | QualityIntelligenceFigmaSnapshotSource | QualityIntelligenceImageSource;
+/** Body of `POST /api/quality-intelligence/runs`. */
+export interface QualityIntelligenceStartRunRequest {
+    readonly sources: readonly QualityIntelligenceInlineSource[];
+    /** Policy profile id; defaults to the regression profile when omitted. */
+    readonly profileId?: string;
+    /** Preferred chat model id; the server may degrade to another compatible chat model or baseline. */
+    readonly modelId?: string;
+    /** Optional non-negative deterministic sampling seed for models that advertise seed support. */
+    readonly seed?: number;
+}
+/**
+ * A connected source that ingested to nothing usable (empty / denied / binary / unavailable capsule)
+ * and was skipped so the remaining sources still produced the run (Epic #729 N+1 resilience). Carries
+ * only a sanitised label, the source kind, and a safe coded reason — never source content.
+ */
+export interface QualityIntelligenceSkippedSource {
+    readonly label: string;
+    readonly kind: string;
+    readonly code: string;
+}
+export interface QualityIntelligenceRunStreamAccepted {
+    readonly type: "accepted";
+    readonly runId: string;
+    readonly requestedAt: string;
+    readonly sourceCount: number;
+    readonly atomCount: number;
+    /**
+     * Sources dropped because the request exceeded the 16-source cap (Epic #729). Present and > 0 only
+     * when sources were dropped; the UI surfaces a coverage notice. Additive on the wire.
+     */
+    readonly droppedSourceCount?: number;
+    /**
+     * Connected sources skipped because they ingested to nothing usable, while the healthy sources
+     * still produced the run (Epic #729 N+1 resilience). Present and non-empty only when a source was
+     * skipped; the UI surfaces a per-source coverage notice. Additive on the wire.
+     */
+    readonly skippedSources?: readonly QualityIntelligenceSkippedSource[];
+}
+export interface QualityIntelligenceRunStreamEvent {
+    readonly type: "event";
+    readonly kind: string;
+    readonly sequence: number;
+    readonly stageName?: string;
+    readonly candidateId?: string;
+    readonly findingId?: string;
+    readonly reasonSummary?: string;
+}
+export interface QualityIntelligenceRunStreamDone {
+    readonly type: "done";
+    readonly runId: string;
+    readonly status: "succeeded" | "failed" | "cancelled";
+    readonly totals: QualityIntelligenceUiRunTotals;
+    /**
+     * Redaction-safe reason for terminal failed runs AND for succeeded-but-degraded runs (see
+     * `degraded`). This mirrors the bounded reasonSummary emitted by stage/run failure events so
+     * clients that only inspect the terminal frame can still present an actionable message without
+     * exposing provider details.
+     */
+    readonly reasonSummary?: string;
+    /**
+     * True when the run completed (status "succeeded") but model generation/judging fell back to the
+     * deterministic baseline because the provider or parser failed. The run still produced usable
+     * baseline test cases, but the model output is absent — clients MUST surface this so a degraded
+     * run is never presented as an authoritative model-backed result (regulated-delivery audit). The
+     * redacted cause is carried in `reasonSummary`. Additive on the wire.
+     */
+    readonly degraded?: boolean;
+}
+export interface QualityIntelligenceRunStreamError {
+    readonly type: "error";
+    readonly code: string;
+    readonly message: string;
+}
+export type QualityIntelligenceRunStreamMessage = QualityIntelligenceRunStreamAccepted | QualityIntelligenceRunStreamEvent | QualityIntelligenceRunStreamDone | QualityIntelligenceRunStreamError;
+//# sourceMappingURL=bffWire.d.ts.map

package/dist/qualityIntelligence/bffWire.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bffWire.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/bffWire.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,wCAAwC,EAAE,MAAM,wBAAwB,CAAC;AACvF,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAC1E,OAAO,KAAK,EACV,2BAA2B,EAC3B,4BAA4B,EAC5B,iCAAiC,EAClC,MAAM,wBAAwB,CAAC;AAChC,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,mBAAmB,CAAC;AACxE,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,wBAAwB,CAAC;AAEzE,4EAA4E;AAC5E,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,2DAA2D;AAC3D,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAClE,0BAA0B;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,yFAAyF;IACzF,QAAQ,CAAC,WAAW,EAAE,8BAA8B,CAAC;CACtD;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,IAAI,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAC1D,gGAAgG;IAChG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,kFAAkF;IAClF,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,wCAAwC,CAAC;IACxD,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,6EAA6E;IAC7E,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;CAClC;AAED,yEAAyE;AACzE,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;GAKG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,gBAAgB,GAAG,WAAW,CAAC;IAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;CAC9C;AAED;;;;GAIG;AACH,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,gFAAgF;IAChF,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,4CAA4C;IAC3D,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,MAAM,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC3D,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,kCAAkC;IACjD;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,aAAa,GAAG,aAAa,CAAC;IAC/C,6FAA6F;IAC7F,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,sFAAsF;IACtF,QAAQ,CAAC,oBAAoB,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,wBAAwB,EAAE,OAAO,CAAC;CAC5C;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAClE,0BAA0B;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,sEAAsE;IACtE,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD,QAAQ,CAAC,WAAW,EAAE,SAAS,mCAAmC,EAAE,CAAC;IACrE,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IACzC;;;;OAIG;IACH,QAAQ,CAAC,UAAU,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAC/D,QAAQ,CAAC,YAAY,EAAE,SAAS,gCAAgC,EAAE,CAAC;IACnE,yFAAyF;IACzF,QAAQ,CAAC,WAAW,EAAE,8BAA8B,CAAC;IACrD,yEAAyE;IACzE,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,+FAA+F;IAC/F,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,2FAA2F;IAC3F,QAAQ,CAAC,cAAc,EAAE,SAAS,iCAAiC,EAAE,CAAC;IACtE;;;;OAIG;IACH,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,kGAAkG;IAClG,QAAQ,CAAC,KAAK,EAAE,kCAAkC,CAAC;CACpD;AAED;;;;GAIG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,SAAS,EAAE,4BAA4B,CAAC;IACjD,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,iDAAiD;IACjD,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC;IACnD,gFAAgF;IAChF,QAAQ,CAAC,WAAW,EAAE,8BAA8B,CAAC;IACrD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C;;;OAGG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,4CAA4C,CAAC;IACvE;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,iCAAiC,CAAC;IAC1D;;;OAGG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAChC,OAAO,GACP,eAAe,GACf,OAAO,GACP,iBAAiB,GACjB,MAAM,CACT,EAAE,CAAC;CACL;AAID,kFAAkF;AAClF,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,GAAG,gBAAgB,CAAC;IACrD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;GAIG;AACH,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,kDAAkD;IAClD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,SAAS,mCAAmC,EAAE,CAAC;IACtE,QAAQ,CAAC,aAAa,EAAE,SAAS,mCAAmC,EAAE,CAAC;CACxE;AAED;;;;GAIG;AACH,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAID,MAAM,MAAM,mCAAmC,GAC3C,cAAc,GACd,WAAW,GACX,MAAM,GACN,SAAS,GACT,aAAa,GACb,gBAAgB,GAChB,OAAO,CAAC;AAEZ,oFAAoF;AACpF,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,sGAAsG;AACtG,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,sCAAsC;IACrD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,8FAA8F;IAC9F,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,+BAA+B,GACvC,qCAAqC,GACrC,kCAAkC,GAClC,6BAA6B,GAC7B,gCAAgC,GAChC,mCAAmC,GACnC,sCAAsC,GACtC,8BAA8B,CAAC;AAEnC,qDAAqD;AACrD,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,OAAO,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAC7D,0EAA0E;IAC1E,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,oGAAoG;IACpG,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,gGAAgG;IAChG,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAOD;;;;GAIG;AACH,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC;;;;OAIG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,gCAAgC,EAAE,CAAC;CACvE;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IACtD,QAAQ,CAAC,MAAM,EAAE,8BAA8B,CAAC;IAChD;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC;;;;;;OAMG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,mCAAmC,GAC3C,oCAAoC,GACpC,iCAAiC,GACjC,gCAAgC,GAChC,iCAAiC,CAAC"}

package/dist/qualityIntelligence/bffWire.js

@@ -0,0 +1,22 @@
+// Quality Intelligence BFF wire shapes (Issue #280, Epic #270).
+//
+// Browser-safe, redacted projections of QI evidence manifests for the Keiko UI.
+// These types carry ONLY references and counts — never raw prompts, never raw source
+// content, never credentials, endpoint URLs, or unsafe markdown. Producers must redact
+// before constructing these shapes.
+//
+// Shape taxonomy:
+//   QualityIntelligenceUiRunSummary  — list-view projection (id, status, dates, totals)
+//   QualityIntelligenceUiFindingSummary — per-finding row for the detail panel
+//   QualityIntelligenceUiEvidenceRef — evidence reference for the detail panel
+//   QualityIntelligenceUiRunDetail   — single-run detail projection (adds finding refs,
+//                                      candidate ids, evidence refs, schema version, drift metadata)
+//
+// Invariants enforced by BFF producers:
+//   - No field that appears here derives from a raw prompt, API key, bearer token,
+//     or secret value.
+//   - `summaryRedacted` on finding rows has already been passed through the QI
+//     redaction pipeline before reaching this wire type.
+//   - completedAt is null (not undefined) when the run has not yet finished so JSON
+//     serialisation is deterministic.
+export {};

package/dist/qualityIntelligence/coverageMap.d.ts

@@ -0,0 +1,21 @@
+import type { QualityIntelligenceCoverageMapId, QualityIntelligenceEvidenceAtomId, QualityIntelligenceRunId, QualityIntelligenceTestCaseId } from "./ids.js";
+export type QualityIntelligenceCoverageKind = "derived" | "asserted" | "manual";
+export declare const QUALITY_INTELLIGENCE_COVERAGE_KINDS: readonly QualityIntelligenceCoverageKind[];
+export interface QualityIntelligenceCoverageMapping {
+    readonly atomId: QualityIntelligenceEvidenceAtomId;
+    readonly candidateIds: readonly QualityIntelligenceTestCaseId[];
+    readonly coverageKind: QualityIntelligenceCoverageKind;
+    /** Confidence in `[0, 1]`. NaN, ±Infinity, and out-of-range values are rejected. */
+    readonly confidence: number;
+}
+export interface QualityIntelligenceCoverageMap {
+    readonly id: QualityIntelligenceCoverageMapId;
+    readonly runId: QualityIntelligenceRunId;
+    readonly mappings: readonly QualityIntelligenceCoverageMapping[];
+}
+/**
+ * Throws `RangeError` on any out-of-range confidence (NaN, ±Infinity, < 0, > 1) and
+ * on a mapping with an empty `candidateIds` list. Returns `void` on success.
+ */
+export declare const assertCoverageMapInvariant: (map: QualityIntelligenceCoverageMap) => void;
+//# sourceMappingURL=coverageMap.d.ts.map

package/dist/qualityIntelligence/coverageMap.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"coverageMap.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/coverageMap.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EACV,gCAAgC,EAChC,iCAAiC,EACjC,wBAAwB,EACxB,6BAA6B,EAC9B,MAAM,UAAU,CAAC;AAElB,MAAM,MAAM,+BAA+B,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,CAAC;AAEhF,eAAO,MAAM,mCAAmC,EAAE,SAAS,+BAA+B,EAIhF,CAAC;AAEX,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC;IACnD,QAAQ,CAAC,YAAY,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAChE,QAAQ,CAAC,YAAY,EAAE,+BAA+B,CAAC;IACvD,oFAAoF;IACpF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,EAAE,EAAE,gCAAgC,CAAC;IAC9C,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACzC,QAAQ,CAAC,QAAQ,EAAE,SAAS,kCAAkC,EAAE,CAAC;CAClE;AAKD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,GAAI,KAAK,8BAA8B,KAAG,IAmBhF,CAAC"}

package/dist/qualityIntelligence/coverageMap.js

@@ -0,0 +1,29 @@
+// Quality Intelligence coverage map (Epic #270, Issue #277).
+//
+// A coverage map relates evidence atoms to the test-case candidates derived from
+// them, with a per-mapping confidence in the half-closed range [0, 1]. The runtime
+// helper `assertCoverageMapInvariant` enforces the float bound. Pure; no IO.
+export const QUALITY_INTELLIGENCE_COVERAGE_KINDS = [
+    "derived",
+    "asserted",
+    "manual",
+];
+const isValidConfidence = (value) => Number.isFinite(value) && value >= 0 && value <= 1;
+/**
+ * Throws `RangeError` on any out-of-range confidence (NaN, ±Infinity, < 0, > 1) and
+ * on a mapping with an empty `candidateIds` list. Returns `void` on success.
+ */
+export const assertCoverageMapInvariant = (map) => {
+    for (let index = 0; index < map.mappings.length; index += 1) {
+        const mapping = map.mappings[index];
+        if (mapping === undefined) {
+            throw new RangeError(`Coverage map mapping[${String(index)}] is missing`);
+        }
+        if (!isValidConfidence(mapping.confidence)) {
+            throw new RangeError(`Coverage map mapping[${String(index)}] has out-of-range confidence ${String(mapping.confidence)}`);
+        }
+        if (mapping.candidateIds.length === 0) {
+            throw new RangeError(`Coverage map mapping[${String(index)}] must reference at least one candidate`);
+        }
+    }
+};

package/dist/qualityIntelligence/editableRevision.d.ts

@@ -0,0 +1,21 @@
+import type { QualityIntelligencePriority, QualityIntelligenceRiskClass } from "./testCaseCandidate.js";
+export interface QualityIntelligenceCandidateEditProvenance {
+    readonly editedAt: string;
+    readonly editedBy: "human" | "api";
+    readonly editorLabel: string;
+}
+export interface QualityIntelligenceCandidateEditableFields {
+    readonly title?: string;
+    readonly preconditions?: readonly string[];
+    readonly steps?: readonly string[];
+    readonly expectedResults?: readonly string[];
+    readonly priority?: QualityIntelligencePriority;
+    readonly riskClass?: QualityIntelligenceRiskClass;
+    readonly tags?: readonly string[];
+}
+export interface QualityIntelligenceCandidateEditedRevision {
+    readonly candidateId: string;
+    readonly provenance: QualityIntelligenceCandidateEditProvenance;
+    readonly editedFields: QualityIntelligenceCandidateEditableFields;
+}
+//# sourceMappingURL=editableRevision.d.ts.map

package/dist/qualityIntelligence/editableRevision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"editableRevision.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/editableRevision.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EACV,2BAA2B,EAC3B,4BAA4B,EAC7B,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,GAAG,KAAK,CAAC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAID,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,QAAQ,CAAC,EAAE,2BAA2B,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,4BAA4B,CAAC;IAClD,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,0CAA0C,CAAC;IAChE,QAAQ,CAAC,YAAY,EAAE,0CAA0C,CAAC;CACnE"}

package/dist/qualityIntelligence/editableRevision.js

@@ -0,0 +1,8 @@
+// Quality Intelligence inline-edit revision contracts (Epic #712, Issue #725).
+//
+// A reviewer may edit a generated test-case body inline on the run card. An edit UPDATES the
+// candidate row in place inside the mutable `candidates[]` artifact AND appends a provenance
+// entry to a new `editedRevisions[]` array. Export/BFF read `candidates[]` unchanged and so
+// automatically reflect edited text; provenance/audit lives in `editedRevisions[]`. The
+// immutable run manifest (`<runId>.qi.json`) is never touched.
+export {};

package/dist/qualityIntelligence/evidenceAtom.d.ts

@@ -0,0 +1,35 @@
+import type { QualityIntelligenceEvidenceAtomId, QualityIntelligenceSourceEnvelopeId } from "./ids.js";
+export type QualityIntelligenceEvidenceAtomKind = "requirement" | "design-fragment" | "code-fragment" | "document-excerpt" | "human-statement";
+export declare const QUALITY_INTELLIGENCE_EVIDENCE_ATOM_KINDS: readonly QualityIntelligenceEvidenceAtomKind[];
+export type QualityIntelligenceRedactionStatus = "redacted" | "not-required";
+export declare const QUALITY_INTELLIGENCE_REDACTION_STATUSES: readonly QualityIntelligenceRedactionStatus[];
+export type QualityIntelligenceLifecycleStatus = "draft" | "finalised" | "archived";
+export declare const QUALITY_INTELLIGENCE_LIFECYCLE_STATUSES: readonly QualityIntelligenceLifecycleStatus[];
+interface QualityIntelligenceEvidenceAtomCommon {
+    readonly id: QualityIntelligenceEvidenceAtomId;
+    readonly sourceEnvelopeId: QualityIntelligenceSourceEnvelopeId;
+    /** Lowercase hex sha256 of the canonical text of the atom. */
+    readonly canonicalHashSha256Hex: string;
+    readonly redactionStatus: QualityIntelligenceRedactionStatus;
+    readonly lifecycleStatus: QualityIntelligenceLifecycleStatus;
+}
+export interface QualityIntelligenceRequirementAtom extends QualityIntelligenceEvidenceAtomCommon {
+    readonly kind: "requirement";
+}
+export interface QualityIntelligenceDesignFragmentAtom extends QualityIntelligenceEvidenceAtomCommon {
+    readonly kind: "design-fragment";
+}
+export interface QualityIntelligenceCodeFragmentAtom extends QualityIntelligenceEvidenceAtomCommon {
+    readonly kind: "code-fragment";
+}
+export interface QualityIntelligenceDocumentExcerptAtom extends QualityIntelligenceEvidenceAtomCommon {
+    readonly kind: "document-excerpt";
+}
+export interface QualityIntelligenceHumanStatementAtom extends QualityIntelligenceEvidenceAtomCommon {
+    readonly kind: "human-statement";
+}
+export type QualityIntelligenceEvidenceAtom = QualityIntelligenceRequirementAtom | QualityIntelligenceDesignFragmentAtom | QualityIntelligenceCodeFragmentAtom | QualityIntelligenceDocumentExcerptAtom | QualityIntelligenceHumanStatementAtom;
+/** Pure structural guard: returns true if the atom's hash field looks like sha256 hex. */
+export declare const hasCanonicalSha256Hash: (atom: QualityIntelligenceEvidenceAtom) => boolean;
+export {};
+//# sourceMappingURL=evidenceAtom.d.ts.map

package/dist/qualityIntelligence/evidenceAtom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evidenceAtom.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/evidenceAtom.ts"],"names":[],"mappings":"AAmBA,OAAO,KAAK,EACV,iCAAiC,EACjC,mCAAmC,EACpC,MAAM,UAAU,CAAC;AAElB,MAAM,MAAM,mCAAmC,GAC3C,aAAa,GACb,iBAAiB,GACjB,eAAe,GACf,kBAAkB,GAClB,iBAAiB,CAAC;AAEtB,eAAO,MAAM,wCAAwC,EAAE,SAAS,mCAAmC,EAOvF,CAAC;AAEb,MAAM,MAAM,kCAAkC,GAAG,UAAU,GAAG,cAAc,CAAC;AAE7E,eAAO,MAAM,uCAAuC,EAAE,SAAS,kCAAkC,EAC1D,CAAC;AAExC,MAAM,MAAM,kCAAkC,GAAG,OAAO,GAAG,WAAW,GAAG,UAAU,CAAC;AAEpF,eAAO,MAAM,uCAAuC,EAAE,SAAS,kCAAkC,EACpD,CAAC;AAE9C,UAAU,qCAAqC;IAC7C,QAAQ,CAAC,EAAE,EAAE,iCAAiC,CAAC;IAC/C,QAAQ,CAAC,gBAAgB,EAAE,mCAAmC,CAAC;IAC/D,8DAA8D;IAC9D,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,eAAe,EAAE,kCAAkC,CAAC;IAC7D,QAAQ,CAAC,eAAe,EAAE,kCAAkC,CAAC;CAC9D;AAED,MAAM,WAAW,kCAAmC,SAAQ,qCAAqC;IAC/F,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;CAC9B;AAED,MAAM,WAAW,qCAAsC,SAAQ,qCAAqC;IAClG,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;CAClC;AAED,MAAM,WAAW,mCAAoC,SAAQ,qCAAqC;IAChG,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;CAChC;AAED,MAAM,WAAW,sCAAuC,SAAQ,qCAAqC;IACnG,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;CACnC;AAED,MAAM,WAAW,qCAAsC,SAAQ,qCAAqC;IAClG,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;CAClC;AAED,MAAM,MAAM,+BAA+B,GACvC,kCAAkC,GAClC,qCAAqC,GACrC,mCAAmC,GACnC,sCAAsC,GACtC,qCAAqC,CAAC;AAE1C,0FAA0F;AAC1F,eAAO,MAAM,sBAAsB,GAAI,MAAM,+BAA+B,KAAG,OAC1B,CAAC"}

package/dist/qualityIntelligence/evidenceAtom.js

@@ -0,0 +1,29 @@
+// Quality Intelligence evidence atom (Epic #270, Issue #277).
+//
+// An atom is the smallest reviewable provenance unit. Atoms are produced by
+// dereferencing a `QualityIntelligenceSourceEnvelope` and slicing the underlying
+// content into a single coherent claim. The contract surface NEVER carries raw
+// content — only:
+//   * the atom id
+//   * the source envelope id it was derived from
+//   * a canonical hash of the content (so audit can detect drift)
+//   * a redaction status marker
+//   * a lifecycle status
+//
+// Discriminated union over `kind`:
+//   * requirement       — atomic acceptance criterion / behaviour statement
+//   * design-fragment   — UI/UX intent fragment (e.g. a Figma frame caption)
+//   * code-fragment     — code-level claim (e.g. a function signature)
+//   * document-excerpt  — passage from a connector document
+//   * human-statement   — human-authored claim (Conversation Center)
+export const QUALITY_INTELLIGENCE_EVIDENCE_ATOM_KINDS = [
+    "requirement",
+    "design-fragment",
+    "code-fragment",
+    "document-excerpt",
+    "human-statement",
+];
+export const QUALITY_INTELLIGENCE_REDACTION_STATUSES = ["redacted", "not-required"];
+export const QUALITY_INTELLIGENCE_LIFECYCLE_STATUSES = ["draft", "finalised", "archived"];
+/** Pure structural guard: returns true if the atom's hash field looks like sha256 hex. */
+export const hasCanonicalSha256Hash = (atom) => /^[0-9a-f]{64}$/u.test(atom.canonicalHashSha256Hex);

package/dist/qualityIntelligence/exportBundle.d.ts

@@ -0,0 +1,28 @@
+import type { QualityIntelligenceCoverageMapId, QualityIntelligenceExportBundleId, QualityIntelligenceRunId, QualityIntelligenceTestCaseId, QualityIntelligenceValidationFindingId } from "./ids.js";
+export type QualityIntelligenceExportAdapter = "jira-issues" | "qtest" | "xray" | "polarion" | "alm" | "csv" | "json" | "spreadsheet-safe-csv" | "markdown" | "plain-text" | "quality-center";
+export declare const QUALITY_INTELLIGENCE_EXPORT_ADAPTERS: readonly QualityIntelligenceExportAdapter[];
+/** Adapters whose target is an external TMS — they require a redaction attestation. */
+export declare const QUALITY_INTELLIGENCE_TMS_ADAPTERS: ReadonlySet<QualityIntelligenceExportAdapter>;
+export interface QualityIntelligenceExportBundleEntry {
+    readonly candidateId: QualityIntelligenceTestCaseId;
+    readonly coverageMapRefs: readonly QualityIntelligenceCoverageMapId[];
+    readonly findingRefs: readonly QualityIntelligenceValidationFindingId[];
+}
+export interface QualityIntelligenceExportBundle {
+    readonly id: QualityIntelligenceExportBundleId;
+    readonly runId: QualityIntelligenceRunId;
+    readonly targetAdapter: QualityIntelligenceExportAdapter;
+    /** ISO 8601 timestamp. */
+    readonly createdAt: string;
+    /** Lowercase hex sha256 over the canonical refs payload. */
+    readonly integrityHashSha256Hex: string;
+    readonly redactionAttested: boolean;
+    readonly contents: readonly QualityIntelligenceExportBundleEntry[];
+}
+/**
+ * Enforce that a TMS-targeted bundle attests redaction, and that the integrity hash
+ * field is a well-formed sha256 hex string. Throws `Error` on violation; returns
+ * `void` on success.
+ */
+export declare const assertExportBundleInvariant: (bundle: QualityIntelligenceExportBundle) => void;
+//# sourceMappingURL=exportBundle.d.ts.map

package/dist/qualityIntelligence/exportBundle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exportBundle.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/exportBundle.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EACV,gCAAgC,EAChC,iCAAiC,EACjC,wBAAwB,EACxB,6BAA6B,EAC7B,sCAAsC,EACvC,MAAM,UAAU,CAAC;AAElB,MAAM,MAAM,gCAAgC,GACxC,aAAa,GACb,OAAO,GACP,MAAM,GACN,UAAU,GACV,KAAK,GACL,KAAK,GACL,MAAM,GACN,sBAAsB,GACtB,UAAU,GACV,YAAY,GACZ,gBAAgB,CAAC;AAErB,eAAO,MAAM,oCAAoC,EAAE,SAAS,gCAAgC,EAYlF,CAAC;AAEX,uFAAuF;AACvF,eAAO,MAAM,iCAAiC,EAAE,WAAW,CAAC,gCAAgC,CAQxF,CAAC;AAEL,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,WAAW,EAAE,6BAA6B,CAAC;IACpD,QAAQ,CAAC,eAAe,EAAE,SAAS,gCAAgC,EAAE,CAAC;IACtE,QAAQ,CAAC,WAAW,EAAE,SAAS,sCAAsC,EAAE,CAAC;CACzE;AAED,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,EAAE,EAAE,iCAAiC,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACzC,QAAQ,CAAC,aAAa,EAAE,gCAAgC,CAAC;IACzD,0BAA0B;IAC1B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,4DAA4D;IAC5D,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;IACxC,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,SAAS,oCAAoC,EAAE,CAAC;CACpE;AAED;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,GAAI,QAAQ,+BAA+B,KAAG,IAWrF,CAAC"}

package/dist/qualityIntelligence/exportBundle.js

@@ -0,0 +1,46 @@
+// Quality Intelligence export bundle (Epic #270, Issue #277).
+//
+// An export bundle is a refs-only manifest of which candidates / coverage maps /
+// findings to send to a downstream Test-Management System (TMS) or spreadsheet
+// target. RAW CONTENT IS NEVER EMBEDDED — the runtime (#283) resolves refs and
+// composes the wire payload at export time, applying TMS-specific redaction.
+//
+// Invariant: any TMS-targeted bundle MUST carry `redactionAttested === true`. The
+// helper `assertExportBundleInvariant` enforces this so #283 cannot ship a bundle
+// to a TMS without an attestation. Pure CSV/JSON/spreadsheet targets do not require
+// attestation (the user has explicitly chosen a portable format).
+export const QUALITY_INTELLIGENCE_EXPORT_ADAPTERS = [
+    "jira-issues",
+    "qtest",
+    "xray",
+    "polarion",
+    "alm",
+    "csv",
+    "json",
+    "spreadsheet-safe-csv",
+    "markdown",
+    "plain-text",
+    "quality-center",
+];
+/** Adapters whose target is an external TMS — they require a redaction attestation. */
+export const QUALITY_INTELLIGENCE_TMS_ADAPTERS = new Set([
+    "jira-issues",
+    "qtest",
+    "xray",
+    "polarion",
+    "alm",
+    "quality-center",
+]);
+/**
+ * Enforce that a TMS-targeted bundle attests redaction, and that the integrity hash
+ * field is a well-formed sha256 hex string. Throws `Error` on violation; returns
+ * `void` on success.
+ */
+export const assertExportBundleInvariant = (bundle) => {
+    if (!/^[0-9a-f]{64}$/u.test(bundle.integrityHashSha256Hex)) {
+        throw new Error(`Export bundle integrity hash must be a lowercase sha256 hex string (id=${bundle.id})`);
+    }
+    if (QUALITY_INTELLIGENCE_TMS_ADAPTERS.has(bundle.targetAdapter) && !bundle.redactionAttested) {
+        throw new Error(`Export bundle targeting TMS adapter "${bundle.targetAdapter}" requires redactionAttested === true (id=${bundle.id})`);
+    }
+};