@oscharko-dev/keiko 0.2.0-beta.3 → 0.2.0-beta.5

package/node_modules/@oscharko-dev/keiko-evidence/dist/index.js

@@ -26,5 +26,5 @@ export { AUDIT_CODES, AuditError, EvidenceReadError, EvidenceSchemaError, Eviden
 // trust rule 6 to let downstream consumers (Issue #273 workflow runners, future
 // orchestrators) avoid namespace plumbing in hot paths.
 export * as QualityIntelligence from "./qualityIntelligence/index.js";
-export { QUALITY_INTELLIGENCE_DEFAULT_RETENTION_PROFILE_ID, QUALITY_INTELLIGENCE_EVIDENCE_SCHEMA_VERSION, QUALITY_INTELLIGENCE_RETENTION_PROFILES, applyQualityIntelligenceRetention, createInMemoryQualityIntelligenceLocalStore, createNodeQualityIntelligenceLocalStore, deleteQualityIntelligenceRun, getQualityIntelligenceRetentionProfile, listQualityIntelligenceRuns, loadQualityIntelligenceRun, quarantineCorruptQualityIntelligenceManifest, recordQualityIntelligenceRun, recordQualityIntelligenceCandidates, loadQualityIntelligenceCandidates, deleteQualityIntelligenceCandidates, applyQualityIntelligenceCandidateEdit, QUALITY_INTELLIGENCE_CANDIDATES_SCHEMA_VERSION, createNodeContainedJsonArtifactStore, redactQualityIntelligenceEvidence, snapshotQualityIntelligenceRunsForRecovery, validateQualityIntelligenceEvidenceManifest, FIGMA_SNAPSHOT_SCHEMA_VERSION, validateFigmaSnapshotRecord, createNodeFigmaSnapshotStore, } from "./qualityIntelligence/index.js";
+export { QUALITY_INTELLIGENCE_DEFAULT_RETENTION_PROFILE_ID, QUALITY_INTELLIGENCE_EVIDENCE_SCHEMA_VERSION, QUALITY_INTELLIGENCE_RETENTION_PROFILES, appendQualityIntelligenceExportRow, applyQualityIntelligenceRetention, createInMemoryQualityIntelligenceLocalStore, createNodeQualityIntelligenceLocalStore, deleteQualityIntelligenceRun, getQualityIntelligenceRetentionProfile, listQualityIntelligenceRuns, loadQualityIntelligenceRun, quarantineCorruptQualityIntelligenceManifest, recordQualityIntelligenceRun, recordQualityIntelligenceCandidates, loadQualityIntelligenceCandidates, deleteQualityIntelligenceCandidates, applyQualityIntelligenceCandidateEdit, QUALITY_INTELLIGENCE_CANDIDATES_SCHEMA_VERSION, createNodeContainedJsonArtifactStore, redactQualityIntelligenceEvidence, snapshotQualityIntelligenceRunsForRecovery, validateQualityIntelligenceEvidenceManifest, FIGMA_SNAPSHOT_SCHEMA_VERSION, validateFigmaSnapshotRecord, createNodeFigmaSnapshotStore, } from "./qualityIntelligence/index.js";
 export { EVIDENCE_SCHEMA_VERSION, DEFAULT_RETENTION, } from "./types.js";

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/candidatesArtifact.d.ts

@@ -1,5 +1,6 @@
 import { QualityIntelligence } from "@oscharko-dev/keiko-contracts";
 export declare const QUALITY_INTELLIGENCE_CANDIDATES_SCHEMA_VERSION: 1;
+export declare const CANDIDATES_SUFFIX = ".candidates.json";
 export interface QualityIntelligenceCandidateRow {
     readonly id: string;
     readonly title: string;

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/candidatesArtifact.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"candidatesArtifact.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/candidatesArtifact.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAOpE,eAAO,MAAM,8CAA8C,EAAG,CAAU,CAAC;AAIzE,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,2BAA2B,CAAC;IACnE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC,4BAA4B,CAAC;IACrE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC,iCAAiC,CAAC;IACvE,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,yBAAyB,EAAE,OAAO,8CAA8C,CAAC;IAC1F,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAGhE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,mBAAmB,CAAC,0CAA0C,EAAE,CAAC;CACtG;AAgLD,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAOD,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,CAAC,oCAAoC,EAAE,CAAC;IACzF,QAAQ,CAAC,eAAe,CAAC,EACrB,SAAS,mBAAmB,CAAC,0CAA0C,EAAE,GACzE,SAAS,CAAC;IACd,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CAC9C;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,GAC9C,OAAO,wCAAwC,KAC9C,MAiBF,CAAC;AAEF,eAAO,MAAM,iCAAiC,GAC5C,OAAO,MAAM,EACb,SAAS,yCAAyC,KACjD,qCAAqC,GAAG,SAAsD,CAAC;AAElG,eAAO,MAAM,mCAAmC,GAC9C,OAAO,MAAM,EACb,SAAS,yCAAyC,KACjD,OAAsD,CAAC;AAQ1D,KAAK,cAAc,GAAG,mBAAmB,CAAC,0CAA0C,CAAC;AACrF,KAAK,cAAc,GAAG,mBAAmB,CAAC,0CAA0C,CAAC;AAGrF,MAAM,MAAM,2CAA2C,GACnD,oBAAoB,GACpB,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,2CAA2C,GACnD;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,SAAS,EAAE,+BAA+B,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,2CAA2C,CAAA;CAAE,CAAC;AAEzF,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CAC9C;AA+CD,eAAO,MAAM,qCAAqC,GAChD,OAAO,0CAA0C,KAChD,2CA0BF,CAAC"}
+{"version":3,"file":"candidatesArtifact.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/candidatesArtifact.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAOpE,eAAO,MAAM,8CAA8C,EAAG,CAAU,CAAC;AAIzE,eAAO,MAAM,iBAAiB,qBAAqB,CAAC;AAEpD,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC;IAC1C,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,CAAC,2BAA2B,CAAC;IACnE,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC,4BAA4B,CAAC;IACrE,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC,iCAAiC,CAAC;IACvE,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,yBAAyB,EAAE,OAAO,8CAA8C,CAAC;IAC1F,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,SAAS,+BAA+B,EAAE,CAAC;IAGhE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,mBAAmB,CAAC,0CAA0C,EAAE,CAAC;CACtG;AAgLD,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAOD,MAAM,WAAW,wCAAwC;IACvD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,SAAS,mBAAmB,CAAC,oCAAoC,EAAE,CAAC;IACzF,QAAQ,CAAC,eAAe,CAAC,EACrB,SAAS,mBAAmB,CAAC,0CAA0C,EAAE,GACzE,SAAS,CAAC;IACd,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B;;;;OAIG;IACH,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CAC9C;AAED;;;GAGG;AACH,eAAO,MAAM,mCAAmC,GAC9C,OAAO,wCAAwC,KAC9C,MAiBF,CAAC;AAEF,eAAO,MAAM,iCAAiC,GAC5C,OAAO,MAAM,EACb,SAAS,yCAAyC,KACjD,qCAAqC,GAAG,SAAsD,CAAC;AAElG,eAAO,MAAM,mCAAmC,GAC9C,OAAO,MAAM,EACb,SAAS,yCAAyC,KACjD,OAAsD,CAAC;AAQ1D,KAAK,cAAc,GAAG,mBAAmB,CAAC,0CAA0C,CAAC;AACrF,KAAK,cAAc,GAAG,mBAAmB,CAAC,0CAA0C,CAAC;AAGrF,MAAM,MAAM,2CAA2C,GACnD,oBAAoB,GACpB,qBAAqB,GACrB,kBAAkB,CAAC;AAEvB,MAAM,MAAM,2CAA2C,GACnD;IACE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAClB,QAAQ,CAAC,SAAS,EAAE,+BAA+B,CAAC;IACpD,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,2CAA2C,CAAA;CAAE,CAAC;AAEzF,MAAM,WAAW,0CAA0C;IACzD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,cAAc,CAAC;IACtC,QAAQ,CAAC,UAAU,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;CAC9C;AA+CD,eAAO,MAAM,qCAAqC,GAChD,OAAO,0CAA0C,KAChD,2CA0BF,CAAC"}

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/candidatesArtifact.js

@@ -9,7 +9,9 @@ import { QualityIntelligence } from "@oscharko-dev/keiko-contracts";
 import { createNodeContainedJsonArtifactStore, } from "./companionStore.js";
 import { EvidenceReadError } from "../errors.js";
 export const QUALITY_INTELLIGENCE_CANDIDATES_SCHEMA_VERSION = 1;
-const CANDIDATES_SUFFIX = ".candidates.json";
+// Exported (but intentionally NOT re-exported from the package barrel) so the run-deletion path
+// can reference the evidence-owned companion suffix without duplicating the literal.
+export const CANDIDATES_SUFFIX = ".candidates.json";
 const toRow = (candidate) => ({
     id: String(candidate.id),
     title: candidate.title,

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/companionStore.d.ts

@@ -17,4 +17,21 @@ export interface ContainedJsonArtifactStoreOptions<T> {
  * a fresh atomic temp and renames over any existing file.
  */
 export declare function createNodeContainedJsonArtifactStore<T>(evidenceDir: string, suffix: string, options: ContainedJsonArtifactStoreOptions<T>): ContainedJsonArtifactStore<T>;
+/**
+ * Idempotently delete ONE QI companion artifact `<runId><suffix>` from the contained `qi/` dir.
+ *
+ * Used by the run-deletion path (`deleteQualityIntelligenceRun`) to clean up companion artifacts
+ * that live alongside the run manifest. EXACT-suffix matching is mandatory: a non-leading `.` is a
+ * legal runId character (`assertValidRunId`), so `run-1` and `run-1.2` can coexist and a prefix
+ * (`startsWith`) sweep would let deleting `run-1` destroy `run-1.2`'s companion. By deriving the
+ * full `${runId}${suffix}` name and resolving it through `assertContainedRealPath`, the delete is
+ * collision-free, realpath-contained, and symlink-refusing (`deleteArtifactFile` lstat-gates
+ * `isFile`, which is false for a symlink). Returns true iff a regular file was removed.
+ *
+ * Intentionally NOT re-exported from the package barrel — it is an internal seam consumed only by
+ * the deletion path, so the published surface stays unchanged.
+ */
+export declare function deleteQualityIntelligenceCompanionArtifact(evidenceDir: string, runId: string, suffix: string, options?: {
+    readonly fs?: WorkspaceFs;
+}): boolean;
 //# sourceMappingURL=companionStore.d.ts.map

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/companionStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"companionStore.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/companionStore.ts"],"names":[],"mappings":"AAuBA,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,+BAA+B,CAAC;AAQvC,MAAM,WAAW,0BAA0B,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,MAAM,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CAC9C;AAED,MAAM,WAAW,iCAAiC,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;IACrC,gGAAgG;IAChG,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,CAAC,GAAG,SAAS,CAAC;CACnD;AAuFD;;;;GAIG;AACH,wBAAgB,oCAAoC,CAAC,CAAC,EACpD,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iCAAiC,CAAC,CAAC,CAAC,GAC5C,0BAA0B,CAAC,CAAC,CAAC,CAwB/B"}
+{"version":3,"file":"companionStore.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/companionStore.ts"],"names":[],"mappings":"AAuBA,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,+BAA+B,CAAC;AAQvC,MAAM,WAAW,0BAA0B,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,MAAM,CAAC;IACrD,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,CAAC,GAAG,SAAS,CAAC;IAChD,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC;IAC5C,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CAC9C;AAED,MAAM,WAAW,iCAAiC,CAAC,CAAC;IAClD,QAAQ,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;IACrC,gGAAgG;IAChG,QAAQ,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,CAAC,GAAG,SAAS,CAAC;CACnD;AAuFD;;;;GAIG;AACH,wBAAgB,oCAAoC,CAAC,CAAC,EACpD,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,MAAM,EACd,OAAO,EAAE,iCAAiC,CAAC,CAAC,CAAC,GAC5C,0BAA0B,CAAC,CAAC,CAAC,CAwB/B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,0CAA0C,CACxD,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,CAAC,EAAE,WAAW,CAAA;CAAO,GAC1C,OAAO,CAIT"}

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/companionStore.js

@@ -117,3 +117,22 @@ export function createNodeContainedJsonArtifactStore(evidenceDir, suffix, option
         },
     };
 }
+/**
+ * Idempotently delete ONE QI companion artifact `<runId><suffix>` from the contained `qi/` dir.
+ *
+ * Used by the run-deletion path (`deleteQualityIntelligenceRun`) to clean up companion artifacts
+ * that live alongside the run manifest. EXACT-suffix matching is mandatory: a non-leading `.` is a
+ * legal runId character (`assertValidRunId`), so `run-1` and `run-1.2` can coexist and a prefix
+ * (`startsWith`) sweep would let deleting `run-1` destroy `run-1.2`'s companion. By deriving the
+ * full `${runId}${suffix}` name and resolving it through `assertContainedRealPath`, the delete is
+ * collision-free, realpath-contained, and symlink-refusing (`deleteArtifactFile` lstat-gates
+ * `isFile`, which is false for a symlink). Returns true iff a regular file was removed.
+ *
+ * Intentionally NOT re-exported from the package barrel — it is an internal seam consumed only by
+ * the deletion path, so the published surface stays unchanged.
+ */
+export function deleteQualityIntelligenceCompanionArtifact(evidenceDir, runId, suffix, options = {}) {
+    const baseDir = join(evidenceDir, QI_SUBDIR);
+    const fs = options.fs ?? nodeWorkspaceFs;
+    return deleteArtifactFile(baseDir, fs, suffix, runId);
+}

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/figmaSnapshot/schema.d.ts

@@ -7,7 +7,11 @@ export interface FigmaSnapshotImageRef {
     readonly sha256: string;
     readonly byteLength: number;
 }
-export type FigmaSnapshotSkipReason = "render-url-missing" | "render-fetch-failed" | "render-empty" | "render-oversized";
+/** Why a screen was excluded from the snapshot. The `render-fetch-failed:<CODE>` variant carries
+ * the FigmaConnectorErrorCode suffix when the download threw a coded error, letting retention
+ * and metrics distinguish misconfigured egress from an unclassified network flake.
+ */
+export type FigmaSnapshotSkipReason = "render-url-missing" | "render-url-blocked" | "render-fetch-failed" | `render-fetch-failed:${string}` | "render-empty" | "render-oversized";
 export interface FigmaSnapshotSkippedScreenRow {
     readonly screenId: string;
     readonly reason: FigmaSnapshotSkipReason;

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/figmaSnapshot/schema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figmaSnapshot/schema.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,6BAA6B,EAAG,CAAU,CAAC;AAExD,8EAA8E;AAC9E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,MAAM,uBAAuB,GAC/B,oBAAoB,GACpB,qBAAqB,GACrB,cAAc,GACd,kBAAkB,CAAC;AAEvB,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;CAC1C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,8FAA8F;AAC9F,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,0BAA0B,EAAE,OAAO,6BAA6B,CAAC;IAC1E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACpD,QAAQ,CAAC,cAAc,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAClE,8FAA8F;IAC9F,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACjD;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;CAC1D;AAcD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAID,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,6BAA6B,CAoBzF"}
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figmaSnapshot/schema.ts"],"names":[],"mappings":"AAeA,eAAO,MAAM,6BAA6B,EAAG,CAAU,CAAC;AAExD,8EAA8E;AAC9E,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,qDAAqD;IACrD,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;GAGG;AACH,MAAM,MAAM,uBAAuB,GAC/B,oBAAoB,GACpB,oBAAoB,GACpB,qBAAqB,GACrB,uBAAuB,MAAM,EAAE,GAC/B,cAAc,GACd,kBAAkB,CAAC;AAEvB,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,uBAAuB,CAAC;CAC1C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,oFAAoF;IACpF,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,8FAA8F;AAC9F,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,0BAA0B,EAAE,OAAO,6BAA6B,CAAC;IAC1E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,0BAA0B,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,SAAS,sBAAsB,EAAE,CAAC;IACpD,QAAQ,CAAC,cAAc,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAClE,8FAA8F;IAC9F,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACjD;;;;;;;;OAQG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;CAC1D;AAcD,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAID,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,6BAA6B,CAoBzF"}

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/figmaSnapshot/store.d.ts

@@ -1,5 +1,5 @@
 import { type WorkspaceFs } from "@oscharko-dev/keiko-workspace";
-import { type FigmaSnapshotLinkRow, type FigmaSnapshotRecord, type FigmaSnapshotSkippedScreenRow } from "./schema.js";
+import { type FigmaSnapshotLinkRow, type FigmaSnapshotRecord } from "./schema.js";
 export interface RecordFigmaSnapshotScreenInput {
     readonly screenId: string;
     readonly irJson: unknown;
@@ -19,7 +19,10 @@ export interface RecordFigmaSnapshotInput {
     };
     readonly integrityHash: string;
     readonly screens: readonly RecordFigmaSnapshotScreenInput[];
-    readonly skippedScreens: readonly FigmaSnapshotSkippedScreenRow[];
+    readonly skippedScreens: readonly {
+        readonly screenId: string;
+        readonly reason: string;
+    }[];
     /** Raw inter-screen transitions for the navigation/flow graph (#811). Optional + additive. */
     readonly links?: readonly FigmaSnapshotLinkRow[];
     /** Deterministic design-tokens artifact (#752), opaque, for design-to-code (#755). Optional. */
@@ -29,14 +32,41 @@ export interface RecordFigmaSnapshotResult {
     readonly recordPath: string;
     readonly sideFileDir: string;
 }
+/** Summary entry returned by {@link FigmaSnapshotStore.listByScope}. */
+export interface FigmaSnapshotScopeEntry {
+    readonly runId: string;
+    readonly fetchedAt: string;
+    readonly integrityHash: string;
+}
 export interface FigmaSnapshotStore {
     readonly record: (input: RecordFigmaSnapshotInput) => RecordFigmaSnapshotResult;
     readonly load: (runId: string) => FigmaSnapshotRecord | undefined;
     readonly location: (runId: string) => string;
+    /**
+     * List all snapshot records for a specific Figma scope, sorted by `fetchedAt` descending
+     * (most-recent first). Reads only the record headers — cheap scan. Unparseable files are
+     * skipped silently. Used by drift work (#735) to find existing snapshots for re-comparison.
+     */
+    readonly listByScope: (fileKey: string, nodeId: string) => readonly FigmaSnapshotScopeEntry[];
 }
 export interface FigmaSnapshotStoreOptions {
     readonly fs?: WorkspaceFs;
     readonly randomSuffix?: () => string;
 }
+export interface FigmaSnapshotRetentionProfile {
+    /** Maximum number of snapshots to keep (newest first by fetchedAt). */
+    readonly maxRecords: number;
+}
+/**
+ * Enforce store-level retention for Figma snapshot records. Deletes the RECORD first, then the
+ * side-file dir, so a partially-retained snapshot is never in a state where the record is gone
+ * but the side-files remain (the side-files are unreachable without the record). A retained
+ * record's side-dir is never touched.
+ *
+ * Wiring: call this alongside `deleteQualityIntelligenceRun` in the QI retention orchestrator
+ * (#274). The profiles are intentionally separate because snapshot retention may differ from
+ * run-manifest retention (snapshots are larger, longer-lived evidence artifacts).
+ */
+export declare function enforceFigmaSnapshotRetention(evidenceDir: string, profile: FigmaSnapshotRetentionProfile): void;
 export declare function createNodeFigmaSnapshotStore(evidenceDir: string, options?: FigmaSnapshotStoreOptions): FigmaSnapshotStore;
 //# sourceMappingURL=store.d.ts.map

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/figmaSnapshot/store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figmaSnapshot/store.ts"],"names":[],"mappings":"AA2BA,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,+BAA+B,CAAC;AAOvC,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EAExB,KAAK,6BAA6B,EACnC,MAAM,aAAa,CAAC;AAMrB,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;CAChF;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAC5D,QAAQ,CAAC,cAAc,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAClE,8FAA8F;IAC9F,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACjD,gGAAgG;IAChG,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,wBAAwB,KAAK,yBAAyB,CAAC;IAChF,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,mBAAmB,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;CAC9C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;CACtC;AAgHD,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,yBAA8B,GACtC,kBAAkB,CA6CpB"}
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figmaSnapshot/store.ts"],"names":[],"mappings":"AAyCA,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,+BAA+B,CAAC;AAOvC,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EAGzB,MAAM,aAAa,CAAC;AAMrB,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;QAAC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAA;KAAE,CAAC;CAChF;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE;QACnB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;QACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,OAAO,EAAE,SAAS,8BAA8B,EAAE,CAAC;IAI5D,QAAQ,CAAC,cAAc,EAAE,SAAS;QAAE,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAC3F,8FAA8F;IAC9F,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACjD,gGAAgG;IAChG,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,wEAAwE;AACxE,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,wBAAwB,KAAK,yBAAyB,CAAC;IAChF,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,mBAAmB,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC;IAC7C;;;;OAIG;IACH,QAAQ,CAAC,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,KAAK,SAAS,uBAAuB,EAAE,CAAC;CAC/F;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,MAAM,CAAC;CACtC;AAwND,MAAM,WAAW,6BAA6B;IAC5C,uEAAuE;IACvE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAC3C,WAAW,EAAE,MAAM,EACnB,OAAO,EAAE,6BAA6B,GACrC,IAAI,CAkCN;AAiGD,wBAAgB,4BAA4B,CAC1C,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,yBAA8B,GACtC,kBAAkB,CA2BpB"}

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/figmaSnapshot/store.js

@@ -13,8 +13,21 @@
 // Redaction: the whole record (including the design-content IR) is passed through
 // `redactQualityIntelligenceEvidence` before write. The token is never present by construction
 // (the server builder never places it on the in-memory snapshot); redaction is defense-in-depth.
-import { randomUUID } from "node:crypto";
-import { chmodSync, lstatSync, mkdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+//
+// Integrity: load() recomputes the snapshot integrity hash and rejects a record whose persisted
+// `integrityHash` disagrees — tampered or truncated records are rejected at the read boundary.
+// NOTE: the PNG side-files are NOT re-hashed on load (they are served separately); the per-screen
+// `sha256` stored in the record serves as the tamper-evidence for each image.
+//
+// Retention: `enforceFigmaSnapshotRetention` deletes snapshot records + their side-file dirs in
+// lock-step with the provided policy. Wiring: call it where the other QI retention enforcement
+// runs (the orchestrator that calls `deleteQualityIntelligenceRun` for each expired run).
+//
+// Orphan cleanup: `sweepOrphanedFigmaSnapshotSideDirs` removes side-file dirs (and stray *.tmp
+// files) that have no matching record. It is lazy/once — the store calls it on first use so stale
+// dirs from a previously interrupted record() are cleaned up without a separate boot step.
+import { createHash, randomUUID } from "node:crypto";
+import { chmodSync, lstatSync, mkdirSync, readdirSync, readFileSync, renameSync, rmSync, writeFileSync, } from "node:fs";
 import { join } from "node:path";
 import { assertContainedRealPath, resolveWithinWorkspace, } from "@oscharko-dev/keiko-workspace";
 import { nodeWorkspaceFs } from "@oscharko-dev/keiko-workspace/internal/fs";
@@ -27,6 +40,38 @@ import { FIGMA_SNAPSHOT_SCHEMA_VERSION, validateFigmaSnapshotRecord, } from "./s
 const QI_DIR_MODE = 0o700;
 const SNAPSHOT_SUFFIX = ".figma-snapshot.json";
 const SIDE_FILE_SUBDIR = "figma-snapshots";
+// ─── Integrity hash (mirrors figmaSnapshotHash.ts — inlined so keiko-evidence does not depend
+//     on the private keiko-server package). MUST stay bit-identical with the server builder. ────
+const sha256Hex = (input) => createHash("sha256").update(input, "utf8").digest("hex");
+// Stable stringify: keys emitted in sorted order at every depth (mirrors canonical() in hash.ts).
+function canonical(value) {
+    if (value === undefined)
+        return "null";
+    if (value === null || typeof value !== "object")
+        return JSON.stringify(value);
+    if (Array.isArray(value))
+        return `[${value.map(canonical).join(",")}]`;
+    const record = value;
+    const entries = Object.keys(record)
+        .sort()
+        .map((key) => `${JSON.stringify(key)}:${canonical(record[key])}`);
+    return `{${entries.join(",")}}`;
+}
+// Recompute the snapshot-level integrity hash from a loaded record.
+// This exactly mirrors hashSnapshot() in figmaSnapshotHash.ts:
+//   sha256( canonical({ screens: sorted [{integrityHash,screenId}], snapshotSchemaVersion, version }) )
+// fetchedAt and links/tokens are excluded by design (non-identity metadata).
+function recomputeSnapshotIntegrityHash(record) {
+    const screens = [...record.screens]
+        .sort((a, b) => (a.screenId < b.screenId ? -1 : a.screenId > b.screenId ? 1 : 0))
+        .map((s) => ({ integrityHash: s.integrityHash, screenId: s.screenId }));
+    return sha256Hex(canonical({
+        screens,
+        snapshotSchemaVersion: record.figmaSnapshotSchemaVersion,
+        version: record.provenance.version ?? null,
+    }));
+}
+// ─── Helpers ─────────────────────────────────────────────────────────────────────────────────
 function realBaseForWrite(baseDir, fs) {
     try {
         mkdirSync(baseDir, { recursive: true, mode: QI_DIR_MODE });
@@ -121,47 +166,221 @@ function assembleRecord(input, screenRows) {
     const { redacted, summary } = redactQualityIntelligenceEvidence(draft);
     return { ...redacted, redactionSummary: summary };
 }
-export function createNodeFigmaSnapshotStore(evidenceDir, options = {}) {
+// Parse one raw JSON string from a snapshot record file into a scope entry, or null when the
+// file does not belong to the requested scope or cannot be parsed.
+function parseScopeEntry(filePath, fileKey, nodeId) {
+    try {
+        const parsed = JSON.parse(readFileSync(filePath, "utf8"));
+        const prov = parsed.provenance;
+        if (!prov?.fileKey || prov.fileKey !== fileKey || prov.nodeId !== nodeId)
+            return null;
+        const runId = typeof parsed.runId === "string" ? parsed.runId : undefined;
+        if (runId === undefined)
+            return null;
+        const fetchedAt = typeof prov.fetchedAt === "string" ? prov.fetchedAt : "";
+        const integrityHash = typeof parsed.integrityHash === "string" ? parsed.integrityHash : "";
+        return { runId, fetchedAt, integrityHash };
+    }
+    catch {
+        return null;
+    }
+}
+// ─── Orphan sweep ─────────────────────────────────────────────────────────────────────────────
+// Removes side-file dirs and stray *.tmp files under sideFileBase that have no matching record
+// in qiDir. Called lazily once per store instance to clean up dirs left by an interrupted
+// record() call (side-files written, JSON write failed).
+function sweepOrphanedSideDirs(qiDir, sideFileBase) {
+    const sideBaseStat = lstatSync(sideFileBase, { throwIfNoEntry: false });
+    if (!sideBaseStat?.isDirectory())
+        return;
+    let entries;
+    try {
+        entries = readdirSync(sideFileBase);
+    }
+    catch {
+        return; // non-fatal: best-effort sweep
+    }
+    for (const name of entries) {
+        // Remove stray temp files at the top level of sideFileBase.
+        if (name.endsWith(".tmp")) {
+            rmSync(join(sideFileBase, name), { force: true });
+            continue;
+        }
+        // Each subdirectory name should equal a runId that has a matching record.
+        const recordPath = join(qiDir, `${name}${SNAPSHOT_SUFFIX}`);
+        const hasRecord = lstatSync(recordPath, { throwIfNoEntry: false })?.isFile() === true;
+        if (!hasRecord) {
+            const runDir = join(sideFileBase, name);
+            const stat = lstatSync(runDir, { throwIfNoEntry: false });
+            if (stat?.isDirectory() === true) {
+                rmSync(runDir, { recursive: true, force: true });
+            }
+        }
+    }
+}
+// Read the fetchedAt timestamp from one snapshot file, or undefined when unparseable.
+function readFetchedAt(filePath) {
+    try {
+        const parsed = JSON.parse(readFileSync(filePath, "utf8"));
+        const prov = parsed.provenance;
+        return typeof prov?.fetchedAt === "string" ? prov.fetchedAt : "";
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Enforce store-level retention for Figma snapshot records. Deletes the RECORD first, then the
+ * side-file dir, so a partially-retained snapshot is never in a state where the record is gone
+ * but the side-files remain (the side-files are unreachable without the record). A retained
+ * record's side-dir is never touched.
+ *
+ * Wiring: call this alongside `deleteQualityIntelligenceRun` in the QI retention orchestrator
+ * (#274). The profiles are intentionally separate because snapshot retention may differ from
+ * run-manifest retention (snapshots are larger, longer-lived evidence artifacts).
+ */
+export function enforceFigmaSnapshotRetention(evidenceDir, profile) {
     const qiDir = join(evidenceDir, QI_SUBDIR);
     const sideFileBase = join(qiDir, SIDE_FILE_SUBDIR);
-    const fs = options.fs ?? nodeWorkspaceFs;
-    const randomSuffix = options.randomSuffix ?? randomUUID;
-    const record = (input) => {
-        assertValidRunId(input.runId);
-        const realBase = realBaseForWrite(qiDir, fs);
-        const recordPath = containedRecordPath(input.runId, realBase, fs);
-        // Write-once pre-check BEFORE any side-file is written, so a rejected re-record leaves no
-        // partial render bytes behind. `atomicWriteOnce` re-checks via O_EXCL to close the TOCTOU gap.
-        assertSnapshotAbsent(recordPath);
-        const rows = writeScreenSideFiles(sideFileBase, input.runId, input.screens, fs, randomSuffix);
-        atomicWriteOnce(recordPath, JSON.stringify(assembleRecord(input, rows)), randomSuffix);
-        return { recordPath, sideFileDir: join(sideFileBase, input.runId) };
-    };
-    const load = (runId) => {
-        assertValidRunId(runId);
-        const realBase = realBaseForRead(qiDir, fs);
-        if (realBase === undefined)
-            return undefined;
-        const target = join(realBase, `${runId}${SNAPSHOT_SUFFIX}`);
-        if (lstatSync(target, { throwIfNoEntry: false })?.isFile() !== true)
-            return undefined;
-        let parsed;
-        try {
-            parsed = JSON.parse(readFileSync(target, "utf8"));
-        }
-        catch (error) {
-            throw new EvidenceReadError(`Figma snapshot is not valid JSON: ${error instanceof Error ? error.message : "unknown"}`);
+    const dirStat = lstatSync(qiDir, { throwIfNoEntry: false });
+    if (!dirStat?.isDirectory())
+        return;
+    // Scan for snapshot records and sort by fetchedAt ascending so we remove the oldest first.
+    let entries;
+    try {
+        entries = readdirSync(qiDir);
+    }
+    catch {
+        return;
+    }
+    const records = [];
+    for (const name of entries) {
+        if (!name.endsWith(SNAPSHOT_SUFFIX))
+            continue;
+        const runId = name.slice(0, -SNAPSHOT_SUFFIX.length);
+        const fetchedAt = readFetchedAt(join(qiDir, name));
+        // Unparseable records are skipped — do not evict conservatively.
+        if (fetchedAt !== undefined)
+            records.push({ runId, fetchedAt });
+    }
+    // Sort oldest first (ascending fetchedAt) so we evict the oldest beyond the cap.
+    records.sort((a, b) => (a.fetchedAt < b.fetchedAt ? -1 : a.fetchedAt > b.fetchedAt ? 1 : 0));
+    const toEvict = records.slice(0, Math.max(0, records.length - profile.maxRecords));
+    for (const { runId } of toEvict) {
+        // Delete record first — after this the side-dir is unreachable by any normal path.
+        rmSync(join(qiDir, `${runId}${SNAPSHOT_SUFFIX}`), { force: true });
+        // Best-effort: remove the side-file dir; failure is non-fatal (it is orphaned, not
+        // linked to a live record, and will be removed by the next sweepOrphanedSideDirs pass).
+        const runDir = join(sideFileBase, runId);
+        const stat = lstatSync(runDir, { throwIfNoEntry: false });
+        if (stat?.isDirectory() === true) {
+            rmSync(runDir, { recursive: true, force: true });
         }
-        if (!validateFigmaSnapshotRecord(parsed).ok)
-            return undefined;
-        return parsed;
+    }
+}
+function recordOp(ctx, input) {
+    assertValidRunId(input.runId);
+    ctx.ensureSwept();
+    const realBase = realBaseForWrite(ctx.qiDir, ctx.fs);
+    const recordPath = containedRecordPath(input.runId, realBase, ctx.fs);
+    // Write-once pre-check BEFORE any side-file is written so a rejected re-record leaves no
+    // partial render bytes behind. `atomicWriteOnce` re-checks via O_EXCL to close the TOCTOU gap.
+    assertSnapshotAbsent(recordPath);
+    let rows;
+    try {
+        rows = writeScreenSideFiles(ctx.sideFileBase, input.runId, input.screens, ctx.fs, ctx.randomSuffix);
+    }
+    catch (error) {
+        // Side-file write failed: best-effort remove the run's side-dir so it is not orphaned.
+        rmSync(join(ctx.sideFileBase, input.runId), { recursive: true, force: true });
+        throw error;
+    }
+    try {
+        atomicWriteOnce(recordPath, JSON.stringify(assembleRecord(input, rows)), ctx.randomSuffix);
+    }
+    catch (error) {
+        // Record write failed after side-files succeeded: remove side-dir to avoid orphaning.
+        rmSync(join(ctx.sideFileBase, input.runId), { recursive: true, force: true });
+        throw error;
+    }
+    return { recordPath, sideFileDir: join(ctx.sideFileBase, input.runId) };
+}
+function loadOp(ctx, runId) {
+    assertValidRunId(runId);
+    ctx.ensureSwept();
+    const realBase = realBaseForRead(ctx.qiDir, ctx.fs);
+    if (realBase === undefined)
+        return undefined;
+    const target = join(realBase, `${runId}${SNAPSHOT_SUFFIX}`);
+    if (lstatSync(target, { throwIfNoEntry: false })?.isFile() !== true)
+        return undefined;
+    let parsed;
+    try {
+        parsed = JSON.parse(readFileSync(target, "utf8"));
+    }
+    catch (error) {
+        throw new EvidenceReadError(`Figma snapshot is not valid JSON: ${error instanceof Error ? error.message : "unknown"}`);
+    }
+    if (!validateFigmaSnapshotRecord(parsed).ok)
+        return undefined;
+    const rec = parsed;
+    // Integrity check: recompute and reject on mismatch. The PNG side-files are NOT re-hashed
+    // on load — each screen's `sha256` field is the tamper evidence for the image bytes.
+    const expected = recomputeSnapshotIntegrityHash(rec);
+    if (rec.integrityHash !== expected) {
+        throw new EvidenceReadError(`Figma snapshot integrity check failed for run ${runId}: hash mismatch`);
+    }
+    return rec;
+}
+function listByScopeOp(ctx, fileKey, nodeId) {
+    const realBase = realBaseForRead(ctx.qiDir, ctx.fs);
+    if (realBase === undefined)
+        return [];
+    let entries;
+    try {
+        entries = readdirSync(realBase);
+    }
+    catch {
+        return [];
+    }
+    const results = [];
+    for (const name of entries) {
+        if (!name.endsWith(SNAPSHOT_SUFFIX))
+            continue;
+        const entry = parseScopeEntry(join(realBase, name), fileKey, nodeId);
+        if (entry !== null)
+            results.push(entry);
+    }
+    results.sort((a, b) => (a.fetchedAt > b.fetchedAt ? -1 : a.fetchedAt < b.fetchedAt ? 1 : 0));
+    return results;
+}
+// ─── Store factory ────────────────────────────────────────────────────────────────────────────
+export function createNodeFigmaSnapshotStore(evidenceDir, options = {}) {
+    const qiDir = join(evidenceDir, QI_SUBDIR);
+    const sideFileBase = join(qiDir, SIDE_FILE_SUBDIR);
+    let swept = false;
+    const ctx = {
+        qiDir,
+        sideFileBase,
+        fs: options.fs ?? nodeWorkspaceFs,
+        randomSuffix: options.randomSuffix ?? randomUUID,
+        ensureSwept() {
+            if (swept)
+                return;
+            swept = true;
+            sweepOrphanedSideDirs(qiDir, sideFileBase);
+        },
     };
-    const location = (runId) => {
-        assertValidRunId(runId);
-        const realBase = realBaseForRead(qiDir, fs);
-        return realBase === undefined
-            ? join(qiDir, `${runId}${SNAPSHOT_SUFFIX}`)
-            : containedRecordPath(runId, realBase, fs);
+    return {
+        record: (input) => recordOp(ctx, input),
+        load: (runId) => loadOp(ctx, runId),
+        location: (runId) => {
+            assertValidRunId(runId);
+            const realBase = realBaseForRead(qiDir, ctx.fs);
+            return realBase === undefined
+                ? join(qiDir, `${runId}${SNAPSHOT_SUFFIX}`)
+                : containedRecordPath(runId, realBase, ctx.fs);
+        },
+        listByScope: (fileKey, nodeId) => listByScopeOp(ctx, fileKey, nodeId),
     };
-    return { record, load, location };
 }

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/index.d.ts

@@ -1,11 +1,11 @@
 export { QUALITY_INTELLIGENCE_EVIDENCE_SCHEMA_VERSION, validateQualityIntelligenceEvidenceManifest, } from "./manifestSchema.js";
-export type { QualityIntelligenceEvidenceManifest, QualityIntelligenceEvidenceRefRow, QualityIntelligenceExportRow, QualityIntelligenceFindingRow, QualityIntelligenceIntegrityHashes, QualityIntelligenceManifestTotals, QualityIntelligenceProvenanceRefs, QualityIntelligenceRedactionSummary, QualityIntelligenceSchemaValidationResult, QualityIntelligenceCoverageMatrixRow, QualityIntelligenceAtomFingerprintRow, QualityIntelligenceSourceFingerprintRow, } from "./manifestSchema.js";
+export type { QualityIntelligenceBinaryExportMode, QualityIntelligenceEvidenceManifest, QualityIntelligenceEvidenceRefRow, QualityIntelligenceExportRow, QualityIntelligenceExportTarget, QualityIntelligenceFindingRow, QualityIntelligenceIntegrityHashes, QualityIntelligenceManifestTotals, QualityIntelligenceProvenanceRefs, QualityIntelligenceRedactionSummary, QualityIntelligenceSchemaValidationResult, QualityIntelligenceCoverageMatrixRow, QualityIntelligenceAtomFingerprintRow, QualityIntelligenceSourceFingerprintRow, } from "./manifestSchema.js";
 export { redactQualityIntelligenceEvidence } from "./redaction.js";
 export type { QualityIntelligenceRedactionOptions, QualityIntelligenceRedactionResult, } from "./redaction.js";
 export { QUALITY_INTELLIGENCE_DEFAULT_RETENTION_PROFILE_ID, QUALITY_INTELLIGENCE_RETENTION_PROFILES, getQualityIntelligenceRetentionProfile, } from "./retentionPolicy.js";
 export type { QualityIntelligenceRetentionProfile } from "./retentionPolicy.js";
-export { createInMemoryQualityIntelligenceLocalStore, createNodeQualityIntelligenceLocalStore, listQualityIntelligenceRuns, loadQualityIntelligenceRun, recordQualityIntelligenceRun, QI_SUBDIR, } from "./store.js";
-export type { QualityIntelligenceLoadOptions, QualityIntelligenceLocalStore, QualityIntelligenceNodeStoreOptions, QualityIntelligenceRecordInput, QualityIntelligenceRecordOptions, QualityIntelligenceRecordResult, } from "./store.js";
+export { appendQualityIntelligenceExportRow, createInMemoryQualityIntelligenceLocalStore, createNodeQualityIntelligenceLocalStore, listQualityIntelligenceRuns, loadQualityIntelligenceRun, recordQualityIntelligenceRun, QI_SUBDIR, } from "./store.js";
+export type { QualityIntelligenceExportEvidenceInput, QualityIntelligenceLoadOptions, QualityIntelligenceLocalStore, QualityIntelligenceNodeStoreOptions, QualityIntelligenceRecordInput, QualityIntelligenceRecordOptions, QualityIntelligenceRecordResult, } from "./store.js";
 export { QUALITY_INTELLIGENCE_CANDIDATES_SCHEMA_VERSION, recordQualityIntelligenceCandidates, loadQualityIntelligenceCandidates, deleteQualityIntelligenceCandidates, applyQualityIntelligenceCandidateEdit, } from "./candidatesArtifact.js";
 export type { QualityIntelligenceCandidateRow, QualityIntelligenceCandidatesArtifact, QualityIntelligenceCandidatesStoreOptions, RecordQualityIntelligenceCandidatesInput, ApplyQualityIntelligenceCandidateEditInput, ApplyQualityIntelligenceCandidateEditResult, QualityIntelligenceCandidateEditErrorReason, } from "./candidatesArtifact.js";
 export { createNodeContainedJsonArtifactStore, type ContainedJsonArtifactStore, type ContainedJsonArtifactStoreOptions, } from "./companionStore.js";

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/index.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,4CAA4C,EAC5C,2CAA2C,GAC5C,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,mCAAmC,EACnC,iCAAiC,EACjC,4BAA4B,EAC5B,6BAA6B,EAC7B,kCAAkC,EAClC,iCAAiC,EACjC,iCAAiC,EACjC,mCAAmC,EACnC,yCAAyC,EACzC,oCAAoC,EACpC,qCAAqC,EACrC,uCAAuC,GACxC,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,gBAAgB,CAAC;AACnE,YAAY,EACV,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,iDAAiD,EACjD,uCAAuC,EACvC,sCAAsC,GACvC,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,mCAAmC,EAAE,MAAM,sBAAsB,CAAC;AAGhF,OAAO,EACL,2CAA2C,EAC3C,uCAAuC,EACvC,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,8BAA8B,EAC9B,6BAA6B,EAC7B,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,8CAA8C,EAC9C,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,qCAAqC,GACtC,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,+BAA+B,EAC/B,qCAAqC,EACrC,yCAAyC,EACzC,wCAAwC,EACxC,0CAA0C,EAC1C,2CAA2C,EAC3C,2CAA2C,GAC5C,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oCAAoC,EACpC,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,GACvC,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,6BAA6B,EAC7B,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,YAAY,EACV,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,EACxB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,iCAAiC,EACjC,4BAA4B,EAC5B,4CAA4C,EAC5C,0CAA0C,GAC3C,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,gCAAgC,EAChC,kCAAkC,EAClC,iCAAiC,EACjC,oCAAoC,EACpC,oCAAoC,EACpC,mCAAmC,EACnC,oCAAoC,EACpC,yCAAyC,EACzC,kCAAkC,EAClC,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/index.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,4CAA4C,EAC5C,2CAA2C,GAC5C,MAAM,qBAAqB,CAAC;AAC7B,YAAY,EACV,mCAAmC,EACnC,mCAAmC,EACnC,iCAAiC,EACjC,4BAA4B,EAC5B,+BAA+B,EAC/B,6BAA6B,EAC7B,kCAAkC,EAClC,iCAAiC,EACjC,iCAAiC,EACjC,mCAAmC,EACnC,yCAAyC,EACzC,oCAAoC,EACpC,qCAAqC,EACrC,uCAAuC,GACxC,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EAAE,iCAAiC,EAAE,MAAM,gBAAgB,CAAC;AACnE,YAAY,EACV,mCAAmC,EACnC,kCAAkC,GACnC,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EACL,iDAAiD,EACjD,uCAAuC,EACvC,sCAAsC,GACvC,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,mCAAmC,EAAE,MAAM,sBAAsB,CAAC;AAGhF,OAAO,EACL,kCAAkC,EAClC,2CAA2C,EAC3C,uCAAuC,EACvC,2BAA2B,EAC3B,0BAA0B,EAC1B,4BAA4B,EAC5B,SAAS,GACV,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,sCAAsC,EACtC,8BAA8B,EAC9B,6BAA6B,EAC7B,mCAAmC,EACnC,8BAA8B,EAC9B,gCAAgC,EAChC,+BAA+B,GAChC,MAAM,YAAY,CAAC;AAGpB,OAAO,EACL,8CAA8C,EAC9C,mCAAmC,EACnC,iCAAiC,EACjC,mCAAmC,EACnC,qCAAqC,GACtC,MAAM,yBAAyB,CAAC;AACjC,YAAY,EACV,+BAA+B,EAC/B,qCAAqC,EACrC,yCAAyC,EACzC,wCAAwC,EACxC,0CAA0C,EAC1C,2CAA2C,EAC3C,2CAA2C,GAC5C,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,oCAAoC,EACpC,KAAK,0BAA0B,EAC/B,KAAK,iCAAiC,GACvC,MAAM,qBAAqB,CAAC;AAG7B,OAAO,EACL,6BAA6B,EAC7B,2BAA2B,GAC5B,MAAM,2BAA2B,CAAC;AACnC,YAAY,EACV,qBAAqB,EACrB,oBAAoB,EACpB,0BAA0B,EAC1B,mBAAmB,EACnB,6BAA6B,EAC7B,sBAAsB,EACtB,uBAAuB,EACvB,6BAA6B,EAC7B,6BAA6B,GAC9B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,4BAA4B,EAAE,MAAM,0BAA0B,CAAC;AACxE,YAAY,EACV,kBAAkB,EAClB,yBAAyB,EACzB,wBAAwB,EACxB,yBAAyB,EACzB,8BAA8B,GAC/B,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EACL,iCAAiC,EACjC,4BAA4B,EAC5B,4CAA4C,EAC5C,0CAA0C,GAC3C,MAAM,gBAAgB,CAAC;AACxB,YAAY,EACV,gCAAgC,EAChC,kCAAkC,EAClC,iCAAiC,EACjC,oCAAoC,EACpC,oCAAoC,EACpC,mCAAmC,EACnC,oCAAoC,EACpC,yCAAyC,EACzC,kCAAkC,EAClC,kCAAkC,EAClC,mCAAmC,GACpC,MAAM,gBAAgB,CAAC"}

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/index.js

@@ -10,7 +10,7 @@ export { redactQualityIntelligenceEvidence } from "./redaction.js";
 // ─── Retention profiles (M1) ───────────────────────────────────────────────────────
 export { QUALITY_INTELLIGENCE_DEFAULT_RETENTION_PROFILE_ID, QUALITY_INTELLIGENCE_RETENTION_PROFILES, getQualityIntelligenceRetentionProfile, } from "./retentionPolicy.js";
 // ─── Local-state store + CRUD (M2) ─────────────────────────────────────────────────
-export { createInMemoryQualityIntelligenceLocalStore, createNodeQualityIntelligenceLocalStore, listQualityIntelligenceRuns, loadQualityIntelligenceRun, recordQualityIntelligenceRun, QI_SUBDIR, } from "./store.js";
+export { appendQualityIntelligenceExportRow, createInMemoryQualityIntelligenceLocalStore, createNodeQualityIntelligenceLocalStore, listQualityIntelligenceRuns, loadQualityIntelligenceRun, recordQualityIntelligenceRun, QI_SUBDIR, } from "./store.js";
 // ─── Generated-candidate companion artifact (Issue #280) ────────────────────────────
 export { QUALITY_INTELLIGENCE_CANDIDATES_SCHEMA_VERSION, recordQualityIntelligenceCandidates, loadQualityIntelligenceCandidates, deleteQualityIntelligenceCandidates, applyQualityIntelligenceCandidateEdit, } from "./candidatesArtifact.js";
 export { createNodeContainedJsonArtifactStore, } from "./companionStore.js";

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/manifestSchema.d.ts

@@ -1,5 +1,14 @@
 import type { QualityIntelligence } from "@oscharko-dev/keiko-contracts";
 type QualityIntelligenceExportAdapter = QualityIntelligence.QualityIntelligenceExportAdapter;
+/**
+ * Binary export modes assembled at the runtime/route level (Issue #283 + #711) rather than by a pure
+ * domain adapter — a paginated text PDF and a STORE ZIP bundle. They are not part of the contract
+ * `QualityIntelligenceExportAdapter` union (which drives the serialise dispatch + TMS classification),
+ * but an export-evidence row must be able to record them faithfully as the produced target type.
+ */
+export type QualityIntelligenceBinaryExportMode = "pdf" | "zip-bundle";
+/** Any target an export-evidence row may record: a domain adapter or a binary bundle mode. */
+export type QualityIntelligenceExportTarget = QualityIntelligenceExportAdapter | QualityIntelligenceBinaryExportMode;
 type QualityIntelligenceLifecycleStatus = QualityIntelligence.QualityIntelligenceLifecycleStatus;
 type QualityIntelligenceRunId = QualityIntelligence.QualityIntelligenceRunId;
 type QualityIntelligenceValidationFindingKind = QualityIntelligence.QualityIntelligenceValidationFindingKind;
@@ -59,9 +68,17 @@ export interface QualityIntelligenceFindingRow {
 }
 export interface QualityIntelligenceExportRow {
     readonly id: string;
-    readonly targetAdapter: QualityIntelligenceExportAdapter;
+    readonly targetAdapter: QualityIntelligenceExportTarget;
     readonly integrityHash: string;
     readonly redactionAttested: boolean;
+    /**
+     * Whether this row records a dry-run preview rather than a materialised export (Issue #283, AC4).
+     * Absent/`false` means the export produced a downloadable artifact (local serialisation or a
+     * binary PDF/ZIP bundle); `true` means only a preview was rendered. Additive and optional:
+     * manifests written before #283 carry no export rows at all, and the strict-schema gate validates
+     * only top-level keys, so no schema-version bump is required.
+     */
+    readonly dryRun?: boolean;
 }
 export interface QualityIntelligenceEvidenceRefRow {
     readonly envelopeId: string;

package/node_modules/@oscharko-dev/keiko-evidence/dist/qualityIntelligence/manifestSchema.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"manifestSchema.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/manifestSchema.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,KAAK,gCAAgC,GAAG,mBAAmB,CAAC,gCAAgC,CAAC;AAC7F,KAAK,kCAAkC,GAAG,mBAAmB,CAAC,kCAAkC,CAAC;AACjG,KAAK,wBAAwB,GAAG,mBAAmB,CAAC,wBAAwB,CAAC;AAC7E,KAAK,wCAAwC,GAC3C,mBAAmB,CAAC,wCAAwC,CAAC;AAC/D,KAAK,2BAA2B,GAAG,mBAAmB,CAAC,2BAA2B,CAAC;AACnF,KAAK,iCAAiC,GAAG,mBAAmB,CAAC,iCAAiC,CAAC;AAE/F,eAAO,MAAM,4CAA4C,EAAG,CAAU,CAAC;AAKvE,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,4FAA4F;IAC5F,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAKD,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,gBAAgB,GAAG,WAAW,CAAC;IAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;CAC9C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,wCAAwC,CAAC;IACxD,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,gCAAgC,CAAC;IACzD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,kCAAkC,CAAC;CAC9D;AAED,8FAA8F;AAC9F,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC;AAED,gGAAgG;AAChG,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,iCAAiC,CAAC;CAC5D;AAWD,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,uBAAuB,EAAE,OAAO,4CAA4C,CAAC;IACtF,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAClE,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC;IACnD,QAAQ,CAAC,QAAQ,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAC5D,QAAQ,CAAC,OAAO,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAC1D,QAAQ,CAAC,YAAY,EAAE,SAAS,iCAAiC,EAAE,CAAC;IACpE,QAAQ,CAAC,cAAc,EAAE,iCAAiC,CAAC;IAC3D,QAAQ,CAAC,gBAAgB,EAAE,mCAAmC,CAAC;IAC/D,QAAQ,CAAC,eAAe,EAAE,kCAAkC,CAAC;IAC7D,8FAA8F;IAC9F,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,oCAAoC,EAAE,CAAC;IAC1E,+IAA+I;IAC/I,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,+FAA+F;IAC/F,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,uCAAuC,EAAE,CAAC;IACjF,0FAA0F;IAC1F,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,qCAAqC,EAAE,CAAC;IAC7E,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,kGAAkG;IAClG,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,gGAAgG;IAChG,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAuCD,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAKD,wBAAgB,2CAA2C,CACzD,KAAK,EAAE,OAAO,GACb,yCAAyC,CAqB3C"}
+{"version":3,"file":"manifestSchema.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/manifestSchema.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AAEzE,KAAK,gCAAgC,GAAG,mBAAmB,CAAC,gCAAgC,CAAC;AAE7F;;;;;GAKG;AACH,MAAM,MAAM,mCAAmC,GAAG,KAAK,GAAG,YAAY,CAAC;AAEvE,8FAA8F;AAC9F,MAAM,MAAM,+BAA+B,GACvC,gCAAgC,GAChC,mCAAmC,CAAC;AACxC,KAAK,kCAAkC,GAAG,mBAAmB,CAAC,kCAAkC,CAAC;AACjG,KAAK,wBAAwB,GAAG,mBAAmB,CAAC,wBAAwB,CAAC;AAC7E,KAAK,wCAAwC,GAC3C,mBAAmB,CAAC,wCAAwC,CAAC;AAC/D,KAAK,2BAA2B,GAAG,mBAAmB,CAAC,2BAA2B,CAAC;AACnF,KAAK,iCAAiC,GAAG,mBAAmB,CAAC,iCAAiC,CAAC;AAE/F,eAAO,MAAM,4CAA4C,EAAG,CAAU,CAAC;AAKvE,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,4FAA4F;IAC5F,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAKD,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CAC5D;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED;;;;;;GAMG;AACH,MAAM,WAAW,oCAAoC;IACnD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,gBAAgB,GAAG,WAAW,CAAC;IAC5D,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,QAAQ,CAAC,0BAA0B,CAAC,EAAE,MAAM,CAAC;CAC9C;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,wCAAwC,CAAC;IACxD,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC;;;;OAIG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,aAAa,EAAE,+BAA+B,CAAC;IACxD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;IACpC;;;;;;OAMG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,eAAe,EAAE,kCAAkC,CAAC;CAC9D;AAED,8FAA8F;AAC9F,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC;AAED,gGAAgG;AAChG,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,sBAAsB,EAAE,MAAM,CAAC;CACzC;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;IACxC,QAAQ,CAAC,cAAc,EAAE,iCAAiC,CAAC;CAC5D;AAWD,MAAM,WAAW,mCAAmC;IAClD,QAAQ,CAAC,uBAAuB,EAAE,OAAO,4CAA4C,CAAC;IACtF,QAAQ,CAAC,KAAK,EAAE,wBAAwB,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAClE,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,qBAAqB,EAAE,MAAM,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,iCAAiC,CAAC;IACnD,QAAQ,CAAC,QAAQ,EAAE,SAAS,6BAA6B,EAAE,CAAC;IAC5D,QAAQ,CAAC,OAAO,EAAE,SAAS,4BAA4B,EAAE,CAAC;IAC1D,QAAQ,CAAC,YAAY,EAAE,SAAS,iCAAiC,EAAE,CAAC;IACpE,QAAQ,CAAC,cAAc,EAAE,iCAAiC,CAAC;IAC3D,QAAQ,CAAC,gBAAgB,EAAE,mCAAmC,CAAC;IAC/D,QAAQ,CAAC,eAAe,EAAE,kCAAkC,CAAC;IAC7D,8FAA8F;IAC9F,QAAQ,CAAC,cAAc,CAAC,EAAE,SAAS,oCAAoC,EAAE,CAAC;IAC1E,+IAA+I;IAC/I,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtC,+FAA+F;IAC/F,QAAQ,CAAC,kBAAkB,CAAC,EAAE,SAAS,uCAAuC,EAAE,CAAC;IACjF,0FAA0F;IAC1F,QAAQ,CAAC,gBAAgB,CAAC,EAAE,SAAS,qCAAqC,EAAE,CAAC;IAC7E,gFAAgF;IAChF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,kGAAkG;IAClG,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnD,gGAAgG;IAChG,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC;AAuCD,MAAM,WAAW,yCAAyC;IACxD,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAKD,wBAAgB,2CAA2C,CACzD,KAAK,EAAE,OAAO,GACb,yCAAyC,CAqB3C"}