@oscharko-dev/keiko 0.2.0-beta.3 → 0.2.0-beta.5

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/reviewStore.js

@@ -7,10 +7,31 @@
 // nothing is approved by default (#282 AC). All reads tolerate a missing artifact.
 import { createNodeContainedJsonArtifactStore, } from "@oscharko-dev/keiko-evidence";
 import { QualityIntelligence } from "@oscharko-dev/keiko-contracts";
+import { QualityIntelligenceReview } from "@oscharko-dev/keiko-quality-intelligence";
+/**
+ * Redact a reviewer label before it lands in the persisted (append-only) audit log. The label is
+ * user-supplied, so a secret-shaped value must be scrubbed at persist time — the `.review.json`
+ * companion otherwise bypasses the QI persist redactor (Issue #282 FIX M1). The live redactor maps
+ * string→string; the non-string fallback keeps the type honest without `any`.
+ */
+const redactLabel = (label, redact) => {
+    const redacted = redact(label);
+    return typeof redacted === "string" ? redacted : label;
+};
 export const QI_REVIEW_SCHEMA_VERSION = 1;
 const REVIEW_SUFFIX = ".review.json";
 const REVIEW_STATES = new Set(QualityIntelligence.QUALITY_INTELLIGENCE_REVIEW_STATES);
 const isReviewState = (value) => typeof value === "string" && REVIEW_STATES.has(value);
+// FIX L1 (Issue #282) — candidate ids are arbitrary strings. Building the candidate-state map over a
+// null-prototype object means a candidate literally named `__proto__` / `constructor` cannot collide
+// with an Object.prototype member (no prototype-pollution, no spurious own-key reads). Behaviour is
+// identical for normal ids.
+const toNullProtoStates = (source) => {
+    const target = Object.create(null);
+    for (const [id, state] of Object.entries(source))
+        target[id] = state;
+    return target;
+};
 const parseArtifact = (value) => {
     if (typeof value !== "object" || value === null)
         return undefined;
@@ -21,7 +42,10 @@ const parseArtifact = (value) => {
         return undefined;
     if (typeof record.candidateStates !== "object" || record.candidateStates === null)
         return undefined;
-    return value;
+    // Rehydrate candidateStates onto a null-proto object so a persisted `__proto__`/`constructor`
+    // candidate id round-trips as an own key rather than the prototype member it was parsed into.
+    const candidateStates = toNullProtoStates(record.candidateStates);
+    return { ...value, candidateStates };
 };
 const storeFor = (evidenceDir) => createNodeContainedJsonArtifactStore(evidenceDir, REVIEW_SUFFIX, { parse: parseArtifact });
 export const loadRunReviewState = (runId, evidenceDir) => storeFor(evidenceDir).load(runId);
@@ -38,17 +62,52 @@ const ACTION_TARGET = {
     reopen: "open",
     withdraw: "withdrawn",
 };
+// FIX A (Issue #282) — legal-transition predicate, resurrecting the audited pure terminal-state
+// check from keiko-quality-intelligence. A transition from `from` via `action` (target `to`) is
+// legal iff:
+//   * to !== from           (reject every no-op, including reopen-from-open), AND
+//   * action === "reopen" OR the source state is not terminal.
+// reopen is the deliberate, audited undo from any non-open state (changes-requested / approved /
+// rejected / withdrawn → open). Every other action (approve / reject / request-changes / withdraw)
+// is legal only from a non-terminal state — this blocks silent illegal flips (approve a rejected,
+// reject an approved) while keeping re-decision possible via an explicit reopen.
+const isLegalTransition = (from, action) => {
+    const to = ACTION_TARGET[action];
+    if (to === from)
+        return false;
+    return action === "reopen" || !QualityIntelligenceReview.isTerminalReviewState(from);
+};
+/**
+ * Thrown by `applyReviewDecision` when the requested action is not a legal transition from the
+ * current review state. Nothing is persisted and no audit entry is appended — the append-only log
+ * never attests a transition the audited domain declares illegal. The route maps this to a 409.
+ */
+export class QualityIntelligenceReviewTransitionRejected extends Error {
+    from;
+    action;
+    toState;
+    constructor(from, action, toState) {
+        super(`Review transition ${from} → ${action} (${toState}) is not permitted.`);
+        this.name = "QualityIntelligenceReviewTransitionRejected";
+        this.from = from;
+        this.action = action;
+        this.toState = toState;
+    }
+}
 const emptyArtifact = (runId, now) => ({
     qiReviewSchemaVersion: QI_REVIEW_SCHEMA_VERSION,
     runId,
     runState: "open",
-    candidateStates: {},
+    candidateStates: toNullProtoStates({}),
     auditLog: [],
     lastUpdatedAt: now,
 });
 /**
- * Apply a review decision and persist the updated artifact. Pure transition + append-only audit
- * entry; returns the new artifact. The caller is responsible for authorising the action.
+ * Apply a review decision and persist the updated artifact. Validates transition legality first
+ * (FIX A): an illegal transition throws `QualityIntelligenceReviewTransitionRejected` and persists
+ * nothing — no audit entry is ever appended for a rejected transition. On success, appends an
+ * append-only audit entry (with a redacted reviewer label, FIX M1) and returns the new artifact.
+ * The caller is responsible for authorising the action.
  */
 export const applyReviewDecision = (input) => {
     const current = loadRunReviewState(input.runId, input.evidenceDir) ?? emptyArtifact(input.runId, input.now);
@@ -57,15 +116,18 @@ export const applyReviewDecision = (input) => {
     const fromState = isCandidate
         ? candidateReviewStateOf(current, input.candidateId)
         : current.runState;
+    if (!isLegalTransition(fromState, input.action)) {
+        throw new QualityIntelligenceReviewTransitionRejected(fromState, input.action, toState);
+    }
     const candidateStates = isCandidate
-        ? { ...current.candidateStates, [input.candidateId]: toState }
+        ? Object.assign(toNullProtoStates(current.candidateStates), { [input.candidateId]: toState })
         : current.candidateStates;
     const audit = {
         at: input.now,
         action: input.action,
         scope: input.scope,
         ...(isCandidate ? { candidateId: input.candidateId } : {}),
-        reviewerLabel: input.reviewerLabel,
+        reviewerLabel: redactLabel(input.reviewerLabel, input.redact),
         fromState,
         toState,
     };
@@ -82,8 +144,9 @@ export const applyReviewDecision = (input) => {
 };
 /**
  * Append an append-only `edit` audit entry for an inline candidate edit. Review state is NOT
- * transitioned — `fromState`/`toState` are the candidate's existing review state. Persists and
- * returns the updated review artifact (created empty on first use).
+ * transitioned — `fromState`/`toState` are the candidate's existing review state. The reviewer label
+ * is redacted before persist (FIX M1). Persists and returns the updated review artifact (created
+ * empty on first use).
  */
 export const appendEditAudit = (input) => {
     const current = loadRunReviewState(input.runId, input.evidenceDir) ?? emptyArtifact(input.runId, input.now);
@@ -93,7 +156,7 @@ export const appendEditAudit = (input) => {
         action: "edit",
         scope: "candidate",
         candidateId: input.candidateId,
-        reviewerLabel: input.reviewerLabel,
+        reviewerLabel: redactLabel(input.reviewerLabel, input.redact),
         fromState: state,
         toState: state,
     };

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runIngestion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runIngestion.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runIngestion.ts"],"names":[],"mappings":"AASA,OAAO,EAAuB,KAAK,mBAAmB,IAAI,EAAE,EAAE,MAAM,+BAA+B,CAAC;AAqBpG,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,KAAK,EACV,+BAA+B,EAC/B,kCAAkC,EACnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAwC9F,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,SAAgB,IAAI,EAAE,MAAM,CAAC;gBACjB,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,iCAAiC,EAAE,CAAC;IACpE,QAAQ,CAAC,aAAa,EAAE,SAAS,+BAA+B,EAAE,CAAC;IACnE,QAAQ,CAAC,cAAc,EAAE;QACvB,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;QACxC,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,iCAAiC,CAAC;KAC/D,CAAC;IACF,QAAQ,CAAC,eAAe,EAAE,SAAS,eAAe,EAAE,CAAC;IACrD,yFAAyF;IACzF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,eAAe,EAAE,CAAC;CACrD;AAwvBD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,kCAAkC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,gHAAgH;IAChH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvD;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC/D;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;CAC5D;AAsED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,iBAAiB,CAiDtF"}
+{"version":3,"file":"runIngestion.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runIngestion.ts"],"names":[],"mappings":"AAUA,OAAO,EAAuB,KAAK,mBAAmB,IAAI,EAAE,EAAE,MAAM,+BAA+B,CAAC;AAqBpG,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,KAAK,EACV,+BAA+B,EAC/B,kCAAkC,EACnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAyC9F,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,SAAgB,IAAI,EAAE,MAAM,CAAC;gBACjB,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,iCAAiC,EAAE,CAAC;IACpE,QAAQ,CAAC,aAAa,EAAE,SAAS,+BAA+B,EAAE,CAAC;IACnE,QAAQ,CAAC,cAAc,EAAE;QACvB,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;QACxC,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,iCAAiC,CAAC;KAC/D,CAAC;IACF,QAAQ,CAAC,eAAe,EAAE,SAAS,eAAe,EAAE,CAAC;IACrD,yFAAyF;IACzF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,eAAe,EAAE,CAAC;CACrD;AAk1BD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,kCAAkC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,gHAAgH;IAChH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvD;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC/D;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;CAC5D;AAsED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,iBAAiB,CAiDtF"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runIngestion.js

@@ -5,6 +5,7 @@
 // `@oscharko-dev/keiko-quality-intelligence`. The server tier owns IO (it is the only layer that
 // may touch the filesystem); the pure domain owns splitting + hashing. Oversize and unsupported
 // inputs fail with user-actionable errors (#278 AC) before any model prompt is built.
+import { realpathSync } from "node:fs";
 import { dirname, isAbsolute, relative, resolve } from "node:path";
 import { QualityIntelligence } from "@oscharko-dev/keiko-contracts";
 import { redact, sha256Hex } from "@oscharko-dev/keiko-security";
@@ -25,12 +26,13 @@ function perSourceAtomBudget(total, sourceCount) {
         return total;
     return Math.max(1, Math.floor(total / sourceCount));
 }
-// Global per-run evidence byte budget. Each source kind (workspace / file / capsule) was previously
-// allowed ~192KB INDEPENDENTLY, so N large sources summed to N×192KB and blew the model prompt cap
-// (MAX_PROMPT_BYTES = 256KB) — failing the entire N+1 run with QI_PROMPT_TOO_LARGE (Epic #729
-// headline). The byte budget is now a single global pool split fairly across sources, mirroring the
-// atom-budget split, so the merged evidence text stays bounded regardless of N. A single source keeps
-// the full budget (identical to the prior single-source behaviour).
+// Global per-run evidence byte budget. Each source kind (workspace / file / capsule /
+// figma-snapshot) was previously allowed ~192KB INDEPENDENTLY, so N large sources summed to N×192KB
+// and blew the model prompt cap (MAX_PROMPT_BYTES = 256KB) — failing the entire N+1 run with
+// QI_PROMPT_TOO_LARGE (Epic #729 headline). The byte budget is now a single global pool split fairly
+// across sources, mirroring the atom-budget split, so the merged evidence text stays bounded
+// regardless of N. A single source keeps the full budget (identical to the prior single-source
+// behaviour). figma-snapshot uses the same split via figmaScreenDocs (mirrors processCapsuleDocs).
 const EVIDENCE_BUDGET_BYTES = 196_608;
 // Never starve a source below this many bytes — a tiny share is still usable context.
 const MIN_SOURCE_BUDGET_BYTES = 4_096;
@@ -53,18 +55,84 @@ export class QiIngestionError extends Error {
         this.name = "QiIngestionError";
     }
 }
+// Credential token shapes mirrored from keiko-contracts `fieldLooksUnsafe` so a connected
+// source's display label can never echo a secret back to the browser-surfaced envelope
+// (#277/#278 envelope display-surface invariant — the label is the only user-derived envelope
+// field; localRef/origin/integrityHash are server-built and hash-derived).
+const CREDENTIAL_LABEL_SHAPES = [
+    /AKIA[0-9A-Z]{12,}/gu,
+    /(?:ghp_|gho_|github_pat_)[A-Za-z0-9_]{20,}/gu,
+    /xox[baprs]-[A-Za-z0-9-]{10,}/gu,
+    /sk-[A-Za-z0-9]{16,}/gu,
+    /\bBearer\s+\S+/giu,
+    /-----BEGIN [A-Z ]*PRIVATE KEY-----/gu,
+];
+// Replace every control character (C0 range incl. tab/newline/CR, plus DEL) with a space using a
+// code-point scan — the `no-control-regex` lint rule forbids a control-range regex literal, and a
+// scan is the established in-package idiom (mirrors generationPort.scrubEvidenceText). Keeps a
+// label single-line.
+function collapseControlCharsToSpace(value) {
+    let out = "";
+    for (const ch of value) {
+        const cp = ch.codePointAt(0) ?? 0;
+        out += cp <= 0x1f || cp === 0x7f ? " " : ch;
+    }
+    return out;
+}
 const sanitiseLabel = (label) => {
-    const trimmed = label.replace(/https?:\/\/\S+/giu, "").trim();
-    const safe = trimmed.length === 0 ? "Untitled source" : trimmed;
+    // Strip any URL authority — ANY scheme (http, file, s3, ftp, …), not just http(s) — plus the
+    // well-known credential token shapes, so a browser-supplied label never carries a URL or secret
+    // into the envelope display surface that is streamed back to the client (#277/#278).
+    let cleaned = label.replace(/[a-z][a-z0-9+.-]*:\/\/\S+/giu, " ");
+    for (const shape of CREDENTIAL_LABEL_SHAPES)
+        cleaned = cleaned.replace(shape, " ");
+    // Replace every control character (newline, CR, tab, NUL, DEL, …) with a space so a multi-line or
+    // control-laden label can never carry a second line of content into the browser-streamed envelope
+    // displayLabel. Without this, the absolute-path basename-collapse below (which splits on "/" only)
+    // would keep a trailing "\n<more content>" glued inside the final path segment — defeating the
+    // basename defence and emitting a multi-line label (#277/#278 envelope display-surface invariant).
+    cleaned = collapseControlCharsToSpace(cleaned);
+    cleaned = cleaned.trim();
+    // Collapse an absolute POSIX / Windows-drive / UNC path label to its final segment so the
+    // display label never leaks the filesystem layout (the basename is the useful display token).
+    if (/^(?:\/|[A-Za-z]:[\\/]|\\\\)/u.test(cleaned)) {
+        const segments = cleaned.split(/[\\/]/u).filter((s) => s.length > 0);
+        cleaned = (segments[segments.length - 1] ?? "").trim();
+    }
+    const safe = cleaned.length === 0 ? "Untitled source" : cleaned;
     return safe.length > MAX_LABEL_CHARS ? `${safe.slice(0, MAX_LABEL_CHARS - 1)}…` : safe;
 };
 // Reject a source whose absolute path (any segment) names a denied credential location. isDenied
 // inspects EVERY path segment, so a denied ancestor cannot be hidden by rooting a read deeper. Shared
 // by the folder and single-file paths so both honour the same containment guard (Epic #729 security).
+// Also rejects the symlink variant (assertRealPathNotDenied) so a benign-named link cannot resolve
+// into a protected location.
 function assertNotDenied(absPath, label, noun) {
     if (isDenied(absPath)) {
         throw new QiIngestionError("QI_SOURCE_DENIED", `${noun} "${label}" is in a protected location.`);
     }
+    assertRealPathNotDenied(absPath, label, noun);
+}
+// Defense-in-depth against a symlinked workspace root. The keiko-workspace deny gate (readWorkspaceFile)
+// inspects only the path RELATIVE to the realpath'd root, so a denied segment AT or ABOVE the connected
+// root is invisible to it: a benign-named "~/docs" symlink whose real target is "~/.aws" lets a
+// supported file inside it read through to the model, even though the lexical assertNotDenied above sees
+// only "docs". Re-running the deny gate over the REAL (symlink-resolved) absolute path rejects it. The
+// lexical check above already covers the no-symlink case, so this only ADDS denials when realpath
+// diverges into a protected location; a non-existent target surfaces later as NOT_FOUND, so a failed
+// realpath is a deliberate no-op here. (#713 single-file security review: "deny-list still applies";
+// #729 folder-root parity — both ingest paths share this boundary blind spot.)
+function assertRealPathNotDenied(absPath, label, noun) {
+    let realPath;
+    try {
+        realPath = realpathSync(absPath);
+    }
+    catch {
+        return;
+    }
+    if (realPath !== absPath && isDenied(realPath)) {
+        throw new QiIngestionError("QI_SOURCE_DENIED", `${noun} "${label}" is in a protected location.`);
+    }
 }
 const envelopeIdFor = (index, label, content) => {
     const digest = sha256Hex(`qi-src-v1|${String(index)}|${label}|${content}`).slice(0, 24);
@@ -169,8 +237,8 @@ function atomsForWorkspaceEntry(entry, envelopeId) {
 // entry becomes one content-bearing atom under a single repository-context envelope.
 function ingestWorkspace(source, index, registeredAt, byteBudget) {
     const label = sanitiseLabel(source.label);
-    // Reject a folder whose ROOT names a denied credential location: connecting e.g. ~/.aws or
-    // ~/.docker AS A FOLDER would otherwise ingest credential files whose RELATIVE paths
+    // Reject a folder whose ROOT names a denied credential location (lexically or via a symlinked root):
+    // connecting e.g. ~/.aws AS A FOLDER would otherwise ingest credential files whose RELATIVE paths
     // ("credentials", "config.json") never trip the per-file deny check (#729 security).
     assertNotDenied(resolve(source.path), label, "Folder");
     let workspace;
@@ -307,7 +375,7 @@ function ingestFile(source, index, registeredAt, byteBudget) {
         throw new QiIngestionError("QI_SOURCE_UNSUPPORTED", `File "${label}" is not a supported single-file document.`);
     }
     // Reject any path whose segments name a denied credential directory or file (.ssh, .aws, .env,
-    // *.pem, id_rsa, …) regardless of how the workspace root resolves below.
+    // *.pem, id_rsa, …) — lexically or after symlink resolution — regardless of the workspace root below.
     assertNotDenied(absFile, label, "File");
     const content = readSingleFileContent(absFile, label);
     // keiko-workspace decodes as UTF-8; a NUL byte is the canonical binary marker. A binary file that
@@ -520,7 +588,14 @@ function a11yItemsByScreen(parsed) {
 // items (#811) AND its accessibility test items (#812) — concatenated, neither replacing the other —
 // through the `extraItems` seam, then optionally with vision hints. The per-run byte budget bounds
 // the cumulative corpus so an oversized board never hard-fails on QI_PROMPT_TOO_LARGE.
-function figmaScreenDocs(record, vision) {
+// The byteBudget is the caller's fair share of the global evidence pool (Epic #729 N+1 split)
+// so a figma-snapshot source never consumes more than its fair slice alongside other sources.
+function figmaScreenDocs(record, vision, byteBudget) {
+    // Mirror processCapsuleDocs (:558-563): the per-run corpus budget is the smaller of the capsule's
+    // own ceiling and this source's fair share of the global evidence byte budget (Epic #729 N+1
+    // split). The per-document cap is likewise never larger than the per-run budget.
+    const perRunBudget = Math.min(CAPSULE_BUDGET_BYTES, byteBudget);
+    const perDocBudget = Math.min(CAPSULE_MAX_BYTES_PER_DOCUMENT, perRunBudget);
     const parsed = parseScreens(record);
     const navItems = navItemsByScreen(parsed, record.links ?? []);
     const a11yItems = a11yItemsByScreen(parsed);
@@ -530,18 +605,18 @@ function figmaScreenDocs(record, vision) {
         const extraItems = [...(navItems.get(ir.id) ?? []), ...(a11yItems.get(ir.id) ?? [])];
         const baseline = QualityIntelligenceFigma.deriveScreenTestBaseline(ir, extraItems);
         const augmented = visionAugmentedScreenText(baseline, row, vision);
-        const capped = truncateToUtf8Bytes(redact(augmented), CAPSULE_MAX_BYTES_PER_DOCUMENT);
+        const capped = truncateToUtf8Bytes(redact(augmented), perDocBudget);
         if (capped.trim().length === 0)
             continue;
         const bytes = utf8ByteLength(capped);
-        if (docs.length > 0 && totalBytes + bytes > CAPSULE_BUDGET_BYTES)
+        if (docs.length > 0 && totalBytes + bytes > perRunBudget)
             break;
         docs.push({ documentId: `${row.screenId} (${ir.name})`, text: capped });
         totalBytes += bytes;
     }
     return docs;
 }
-function ingestFigmaSnapshot(source, index, registeredAt, loader, vision) {
+function ingestFigmaSnapshot(source, index, registeredAt, loader, vision, byteBudget) {
     const label = sanitiseLabel(source.label);
     const record = loader(source.snapshotRunId);
     if (record === undefined) {
@@ -550,15 +625,19 @@ function ingestFigmaSnapshot(source, index, registeredAt, loader, vision) {
     if (record.screens.length === 0) {
         throw new QiIngestionError("QI_SOURCE_EMPTY", `Figma snapshot "${label}" has no screens.`);
     }
-    const docs = figmaScreenDocs(record, vision);
+    const docs = figmaScreenDocs(record, vision, byteBudget);
     if (docs.length === 0) {
         throw new QiIngestionError("QI_SOURCE_EMPTY", `Figma snapshot "${label}" produced no usable screen baseline.`);
     }
     const joinedText = docs.map((d) => d.text).join("\n");
     const envelopeId = envelopeIdFor(index, label, source.snapshotRunId);
+    // A stored Figma Snapshot is figma evidence, not repository context. Use the dedicated
+    // `figma-evidence` envelope kind (#278 AC2 "represented as an explicit connector-backed source"
+    // + AC4 citation/audit attribution) so the persisted envelope, source-mix priority, and any
+    // kind-grouped audit rollup classify it correctly instead of folding it into repo context.
     const envelope = {
         id: envelopeId,
-        kind: "repository-context",
+        kind: "figma-evidence",
         displayLabel: label,
         provenance: {
             origin: `figma-snapshot:${source.snapshotRunId}`,
@@ -592,7 +671,7 @@ function ingestOne(source, index, registeredAt, capsuleResolver, figmaSnapshotLo
             if (figmaSnapshotLoader === undefined) {
                 throw new QiIngestionError("QI_FIGMA_SNAPSHOT_UNAVAILABLE", "Figma-snapshot sources are unavailable: the evidence directory is not configured.");
             }
-            return ingestFigmaSnapshot(source, index, registeredAt, figmaSnapshotLoader, figmaVision);
+            return ingestFigmaSnapshot(source, index, registeredAt, figmaSnapshotLoader, figmaVision, byteBudget);
     }
 }
 /**

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runRegistry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runRegistry.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runRegistry.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAErF,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEjF,UAAU,WAAW;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACnE;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkC;IAEvD,oGAAoG;IACpG,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,eAAe;IAY7D,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI;IAMzE,0FAA0F;IAC1F,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG,IAAI;IAM5E,oFAAoF;IACpF,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAO9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAIhC,oFAAoF;IACpF,mBAAmB,IAAI,SAAS,+BAA+B,EAAE;IAUjE,wCAAwC;IACxC,KAAK,IAAI,IAAI;CAId;AAGD,eAAO,MAAM,aAAa,eAAsB,CAAC"}
+{"version":3,"file":"runRegistry.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runRegistry.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AAErF,MAAM,MAAM,iBAAiB,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;AAEjF,UAAU,WAAW;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,MAAM,EAAE;QAAE,UAAU,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACnE;AAED,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAkC;IAEvD,oGAAoG;IACpG,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,eAAe;IAY7D,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC,GAAG,IAAI;IAMzE,0FAA0F;IAC1F,QAAQ,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,iBAAiB,EAAE,SAAS,CAAC,GAAG,IAAI;IAM5E,oFAAoF;IACpF,MAAM,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAO9B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO;IAIhC,oFAAoF;IACpF,mBAAmB,IAAI,SAAS,+BAA+B,EAAE;IAYjE,wCAAwC;IACxC,KAAK,IAAI,IAAI;CAId;AAGD,eAAO,MAAM,aAAa,eAAsB,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runRegistry.js

@@ -51,6 +51,8 @@ export class QiRunRegistry {
             requestedAt: run.requestedAt,
             completedAt: null,
             totals: { ...run.totals },
+            // An in-flight run is not yet persisted and cannot have been reviewed (Issue #282 FIX A11y-2).
+            reviewState: "open",
         }));
     }
     /** Test seam: clear all active runs. */

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runRoutes.d.ts

@@ -1,5 +1,8 @@
+import type { QualityIntelligenceRunStreamMessage } from "@oscharko-dev/keiko-contracts";
+import type { QualityIntelligence as QI } from "@oscharko-dev/keiko-contracts";
 import { type HandlerOutcome, type RouteContext, type RouteResult, type RouteDefinition } from "../routes.js";
-import type { UiHandlerDeps } from "../deps.js";
+import type { Redactor, UiHandlerDeps } from "../deps.js";
+export declare function toStreamEvent(event: QI.QualityIntelligenceRunEvent, redact: Redactor): QualityIntelligenceRunStreamMessage;
 export declare function handleStartQiRun(ctx: RouteContext, deps: UiHandlerDeps): Promise<HandlerOutcome>;
 export declare function handleCancelQiRun(ctx: RouteContext, _deps: UiHandlerDeps): RouteResult;
 export declare const QI_RUN_EXECUTION_ROUTE_GROUP: readonly RouteDefinition[];

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runRoutes.ts"],"names":[],"mappings":"AAuBA,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAmShD,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,cAAc,CAAC,CAmBzB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,GAAG,WAAW,CAStF;AAED,eAAO,MAAM,4BAA4B,EAAE,SAAS,eAAe,EAOlE,CAAC"}
+{"version":3,"file":"runRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runRoutes.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAKV,mCAAmC,EAEpC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,mBAAmB,IAAI,EAAE,EAAE,MAAM,+BAA+B,CAAC;AAE/E,OAAO,EAEL,KAAK,cAAc,EACnB,KAAK,YAAY,EACjB,KAAK,WAAW,EAChB,KAAK,eAAe,EACrB,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AA8N1D,wBAAgB,aAAa,CAC3B,KAAK,EAAE,EAAE,CAAC,2BAA2B,EACrC,MAAM,EAAE,QAAQ,GACf,mCAAmC,CAgBrC;AAoED,wBAAsB,gBAAgB,CACpC,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,GAClB,OAAO,CAAC,cAAc,CAAC,CAmBzB;AAED,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,GAAG,WAAW,CAStF;AAED,eAAO,MAAM,4BAA4B,EAAE,SAAS,eAAe,EAOlE,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runRoutes.js

@@ -180,7 +180,9 @@ async function parseStartBody(req) {
     }
     return validateRequest(parsed);
 }
-function toStreamEvent(event) {
+// Exported for unit testing of the reasonSummary redaction backstop (#279 AC3); not part of the
+// package public surface (the QI index re-exports only the route handlers, not this helper).
+export function toStreamEvent(event, redact) {
     const p = event.payload;
     return {
         type: "event",
@@ -189,9 +191,21 @@ function toStreamEvent(event) {
         ...("stageName" in p ? { stageName: p.stageName } : {}),
         ...("candidateId" in p ? { candidateId: String(p.candidateId) } : {}),
         ...("findingId" in p ? { findingId: String(p.findingId) } : {}),
-        ...("reasonSummary" in p ? { reasonSummary: p.reasonSummary } : {}),
+        // `reasonSummary` is the only free-text field on the QI event envelope. The workflow already
+        // produces a fail-closed, secret-free summary (see `safeReasonSummary`), but pass it through the
+        // live-payload redactor too so this SSE writer — the one QI surface with no other redaction —
+        // can never stream a credential/endpoint substring should a future code path widen the field
+        // (#279 AC3, defence-in-depth; mirrors the Conversation Center SSE redaction posture).
+        ...("reasonSummary" in p ? { reasonSummary: applyRedactor(redact, p.reasonSummary) } : {}),
     };
 }
+// Apply the live-payload redactor to a string field. The redactor is typed `(unknown) => unknown`
+// (it walks arbitrary structures); for a string input it returns the redacted string. Fall back to
+// the already-safe input on the impossible non-string return so the field type stays `string`.
+function applyRedactor(redact, value) {
+    const out = redact(value);
+    return typeof out === "string" ? out : value;
+}
 function classifyStartError(error) {
     if (error instanceof QiIngestionError || error instanceof QiGenerationError) {
         return { code: error.code, message: error.message };
@@ -229,7 +243,7 @@ async function streamRunExecution(deps, request, runId, registeredAt, signal, wr
                 if (event.payload.kind === "finding:recorded")
                     totals.findings += 1;
                 qiRunRegistry.updateTotals(runId, totals);
-                write(toStreamEvent(event));
+                write(toStreamEvent(event, deps.redactor));
             },
         });
         terminal = summary.status;

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/uiRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"uiRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/uiRoutes.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAOhD,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAqMzC,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CA8CpF;AAMD,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAmClF"}
+{"version":3,"file":"uiRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/uiRoutes.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAOhD,eAAO,MAAM,yBAAyB,MAAM,CAAC;AAC7C,eAAO,MAAM,qBAAqB,MAAM,CAAC;AAmNzC,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAkDpF;AAMD,wBAAgB,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAmClF"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/uiRoutes.js

@@ -29,7 +29,7 @@ function resolveEvidenceDir(deps) {
 // Projection helpers — build browser-safe wire shapes from manifest data.
 // NEVER include raw prompt, raw source content, credentials, or unsafe markdown.
 // ---------------------------------------------------------------------------
-function projectRunSummary(manifest) {
+function projectRunSummary(manifest, reviewState) {
     if (manifest === undefined)
         return null;
     return {
@@ -42,8 +42,18 @@ function projectRunSummary(manifest) {
             findings: manifest.totals.findings,
             exports: manifest.totals.exports,
         },
+        reviewState,
     };
 }
+// FIX A11y-2 (Issue #282) — resolve the run's overall review state for the list item so the hub list
+// can show a per-run lifecycle badge (AC1). Loads the small `.review.json` companion per listed run;
+// this is acceptable because the list path already loads a per-run manifest and the list is bounded
+// by the route limit. Defaults to "open" when no companion exists or no evidence dir is configured.
+function listReviewStateFor(runId, evidenceDir) {
+    if (evidenceDir === undefined)
+        return "open";
+    return runReviewStateOf(loadRunReviewState(runId, evidenceDir));
+}
 /**
  * Build a candidateId → weak-test flag map from the persisted test-quality findings (Epic #736).
  * Only findings of kind "test-quality" that carry a candidateId contribute; the first finding wins
@@ -202,13 +212,17 @@ export function handleListQiRuns(ctx, deps) {
                 break;
             try {
                 const manifest = loadQualityIntelligenceRun(id, { evidenceDir });
-                const summary = projectRunSummary(manifest);
+                const summary = projectRunSummary(manifest, listReviewStateFor(id, evidenceDir));
                 if (summary !== null)
                     runs.push(summary);
             }
             catch {
-                // A single corrupt manifest must not prevent listing other runs.
-                // Skip and continue — the store's quarantine mechanism handles it.
+                // A single corrupt manifest must not prevent listing other runs: skip and continue. The
+                // store fails closed on a corrupt manifest (EvidenceReadError) so nothing unsafe is
+                // surfaced. Quarantine (`quarantineCorruptQualityIntelligenceManifest`) is a SEPARATE,
+                // explicitly-invoked maintenance step — it is intentionally NOT run from this read path
+                // (a GET must not rename files); its wiring is deferred with the retention orchestrator
+                // (Issue #274 follow-up).
             }
         }
         const body = { runs, limit, totalRunIds, truncated };

package/node_modules/@oscharko-dev/keiko-server/dist/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AA+H/C,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACrE;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,eAAO,MAAM,SAAS,eAAsB,CAAC;AAC7C,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,OAAO,SAAS,CAAC;AAE5D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAElD,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GAAG,CACzB,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,KAChB,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC;AAUD,eAAO,MAAM,UAAU,EAAE,SAAS,eAAe,EAsRhD,CAAC;AA6BF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAKD,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,UAAU,GAAG,oBAAoB,GAAG,SAAS,CA2B/C;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,QAAQ,CAEjE;AAED,wBAAgB,YAAY,IAAI,QAAQ,CAEvC;AAED,wBAAgB,oBAAoB,IAAI,QAAQ,CAE/C"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../src/routes.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAEjE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAqI/C,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACrE;AAID,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,eAAO,MAAM,SAAS,eAAsB,CAAC;AAC7C,MAAM,MAAM,cAAc,GAAG,WAAW,GAAG,OAAO,SAAS,CAAC;AAE5D,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;IAC9B,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IAElD,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;CACnB;AAED,MAAM,MAAM,YAAY,GAAG,CACzB,GAAG,EAAE,YAAY,EACjB,IAAI,EAAE,aAAa,KAChB,cAAc,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAE9C,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAExB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;CAChC;AAUD,eAAO,MAAM,UAAU,EAAE,SAAS,eAAe,EA2RhD,CAAC;AA6BF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACnD;AAKD,wBAAgB,UAAU,CACxB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,MAAM,GACf,UAAU,GAAG,oBAAoB,GAAG,SAAS,CA2B/C;AAED,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAEnD;AAED,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,QAAQ,CAEjE;AAED,wBAAgB,YAAY,IAAI,QAAQ,CAEvC;AAED,wBAAgB,oBAAoB,IAAI,QAAQ,CAE/C"}

package/node_modules/@oscharko-dev/keiko-server/dist/routes.js

@@ -18,11 +18,11 @@ import { handleGroundedAsk } from "./grounded-qa.js";
 import { handleGroundedWorkflowHandoff } from "./grounded-handoff.js";
 import { handleGatewaySetup } from "./gateway-setup.js";
 import { handleCreateTerminalExecution, handleDeleteTerminalExecution, handleTerminalDirectories, handleTerminalEvents, handleTerminalPolicy, } from "./terminal-routes.js";
-import { handleFilesDirectories, handleFilesPreview, handleFilesTree } from "./files.js";
+import { handleFilesContent, handleFilesDirectories, handleFilesPreview, handleFilesTree, } from "./files.js";
 import { handleBrowserApplyScreenshot, handleBrowserContent, handleBrowserEvents, handleBrowserNavigate, handleBrowserScreenshot, handleBrowserStatus, handleCreateBrowserSession, handleDeleteBrowserSession, } from "./browser.js";
 import { handleCancelLocalKnowledgeCapsuleIndexing, handleConnectLocalKnowledgeCapsule, handleCreateLocalKnowledgeCapsule, handleCreateLocalKnowledgeCapsuleSet, handleDeleteLocalKnowledgeCapsule, handleDisconnectLocalKnowledgeCapsule, handleGetLocalKnowledgeCapsule, handleListLocalKnowledgeCapsules, handleListLocalKnowledgeCapsuleSets, handleReindexLocalKnowledgeCapsule, handleStartLocalKnowledgeCapsuleIndexing, handleUpdateLocalKnowledgeCapsule, } from "./local-knowledge-handlers.js";
 import { handleRelationshipCreate, handleRelationshipDelete, handleRelationshipDependencies, handleRelationshipEvents, handleRelationshipExplain, handleRelationshipGet, handleRelationshipHealth, handleRelationshipImpact, handleRelationshipList, handleRelationshipPatch, handleRelationshipValidate, } from "./relationship-handlers.js";
-import { handleQiCapabilities, handleQiDryRunFigma, handleQiDryRunJira, handleQiSourceSelect, handleListQiRuns, handleGetQiRun, QI_HANDOFF_ROUTE_GROUP, QI_RUN_EXECUTION_ROUTE_GROUP, QI_REVIEW_ROUTE_GROUP, QI_EXPORT_ROUTE_GROUP, QI_EDIT_ROUTE_GROUP, QI_TRACEABILITY_ROUTE_GROUP, QI_RECHECK_ROUTE_GROUP, } from "./qualityIntelligence/index.js";
+import { handleQiCapabilities, handleQiDryRunFigma, handleQiDryRunJira, handleQiSourceSelect, handleListQiRuns, handleGetQiRun, QI_HANDOFF_ROUTE_GROUP, QI_RUN_EXECUTION_ROUTE_GROUP, QI_REVIEW_ROUTE_GROUP, QI_EXPORT_ROUTE_GROUP, QI_EDIT_ROUTE_GROUP, QI_RETENTION_ROUTE_GROUP, QI_TRACEABILITY_ROUTE_GROUP, QI_RECHECK_ROUTE_GROUP, } from "./qualityIntelligence/index.js";
 import { handleFigmaTriggerSnapshot, handleFigmaLoadSnapshot, handleFigmaRevokeToken, } from "./qualityIntelligence/figmaSnapshotRoutes.js";
 import { handleFigmaGenerateCode } from "./qualityIntelligence/figmaCodegenRoutes.js";
 export const STREAMING = Symbol("streaming");
@@ -90,10 +90,12 @@ export const API_ROUTES = [
         handler: handleDeleteTerminalExecution,
     },
     { method: "GET", pattern: "/api/terminal/events", handler: handleTerminalEvents },
-    // Desktop files — read-only selected-root browser and preview control plane.
+    // Desktop files — selected-root browser, preview, and editor control plane.
     { method: "GET", pattern: "/api/files/directories", handler: handleFilesDirectories },
     { method: "GET", pattern: "/api/files/tree", handler: handleFilesTree },
     { method: "GET", pattern: "/api/files/preview", handler: handleFilesPreview },
+    { method: "GET", pattern: "/api/files/content", handler: handleFilesContent },
+    { method: "PATCH", pattern: "/api/files/content", handler: handleFilesContent },
     // Issue #198 audit fix — live capsule detail/health routes for the Local Knowledge UI.
     {
         method: "GET",
@@ -272,6 +274,9 @@ export const API_ROUTES = [
     // Issue #726 (Epic #712) — inline candidate editing. Literal-suffix POST /runs/:id/edit
     // disambiguates against /runs/:id/cancel just like /review and /export above.
     ...QI_EDIT_ROUTE_GROUP,
+    // Issue #282 follow-up (Epic #270) — run-deletion control. DELETE /runs/:id is method-distinct
+    // from GET /runs/:id and sweeps every server-owned companion (ADR-0023 D8).
+    ...QI_RETENTION_ROUTE_GROUP,
     // Issue #740 (Epic #734) — requirement↔test traceability matrix export.
     ...QI_TRACEABILITY_ROUTE_GROUP,
     // Issue #743 (Epic #735) — drift re-check + targeted regeneration. Literal-suffix POST routes

package/node_modules/@oscharko-dev/keiko-server/dist/run-engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"run-engine.d.ts","sourceRoot":"","sources":["../src/run-engine.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAqB7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAa,MAAM,WAAW,CAAC;AAC3E,OAAO,EAIL,KAAK,sBAAsB,EAE5B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AASD,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAG/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,GAAG,SAAS,CAAC;CAC5E;AA2TD,wBAAgB,QAAQ,CACtB,GAAG,EAAE,aAAa,EAClB,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,EACzC,OAAO,GAAE,eAAoB,GAC5B,cAAc,CAoBhB;AAmGD,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GACxC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAMD,YAAY,EAAE,aAAa,EAAE,CAAC"}
+{"version":3,"file":"run-engine.d.ts","sourceRoot":"","sources":["../src/run-engine.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,6BAA6B,CAAC;AAqB7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AACzE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,KAAK,EAAE,iBAAiB,EAAE,WAAW,EAAa,MAAM,WAAW,CAAC;AAC3E,OAAO,EAIL,KAAK,sBAAsB,EAE5B,MAAM,eAAe,CAAC;AAIvB,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AASD,UAAU,aAAa;IACrB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAG/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;IACvD,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,MAAM,KAAK,MAAM,CAAC,GAAG,SAAS,CAAC;CAC5E;AA2TD,wBAAgB,QAAQ,CACtB,GAAG,EAAE,aAAa,EAClB,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,EACzC,OAAO,GAAE,eAAoB,GAC5B,cAAc,CAoBhB;AA4GD,wBAAsB,QAAQ,CAC5B,QAAQ,EAAE,iBAAiB,EAC3B,KAAK,EAAE,SAAS,EAChB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,GACxC,OAAO,CAAC,OAAO,CAAC,CAmBlB;AAMD,YAAY,EAAE,aAAa,EAAE,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/run-engine.js

@@ -337,7 +337,12 @@ function persistOutcome(ctx, identity, outcome) {
         return persistExplainEvidence(runIdentity, outcome.result, ctx.evidence);
     }
     if (ctx.request.kind === "verify") {
-        return persistVerifyEvidence(runIdentity, ctx.evidence);
+        return persistVerifyEvidence(runIdentity, ctx.evidence, ctx.request.governedHandoff === undefined
+            ? undefined
+            : buildGovernedHandoffEvidence({
+                request: ctx.request.governedHandoff,
+                sourceGroundedRunId: ctx.request.governedHandoffSourceGroundedRunId,
+            }));
     }
     return persistWorkflowEvidence(runIdentity, outcome.report, identity.sink.buffered(), ctx.evidence, ctx.request.governedHandoff === undefined
         ? undefined

package/node_modules/@oscharko-dev/keiko-server/dist/store/chats.d.ts

@@ -1,5 +1,5 @@
 import type { DatabaseSync } from "node:sqlite";
-import type { Chat, CreateChatOptions, UpdateChatPatch } from "./types.js";
+import type { Chat, CreateChatOptions, UpdateChatOptions, UpdateChatPatch } from "./types.js";
 export declare function listChats(db: DatabaseSync, projectPath: string): readonly Chat[];
 export declare function listChatsLimited(db: DatabaseSync, projectPath: string, limit: number): readonly Chat[];
 export declare function findChatById(db: DatabaseSync, id: string): Chat | undefined;
@@ -11,7 +11,7 @@ export declare function insertChat(db: DatabaseSync, args: {
     readonly opts: CreateChatOptions | undefined;
     readonly now: number;
 }): Chat;
-export declare function updateChat(db: DatabaseSync, id: string, patch: UpdateChatPatch, now: number): Chat;
+export declare function updateChat(db: DatabaseSync, id: string, patch: UpdateChatPatch, now: number, options?: UpdateChatOptions): Chat;
 export declare function deleteChat(db: DatabaseSync, id: string): void;
 export declare function touchChat(db: DatabaseSync, id: string, now: number): void;
 //# sourceMappingURL=chats.d.ts.map

package/node_modules/@oscharko-dev/keiko-server/dist/store/chats.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"chats.d.ts","sourceRoot":"","sources":["../../src/store/chats.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAYhD,OAAO,KAAK,EACV,IAAI,EAGJ,iBAAiB,EACjB,eAAe,EAChB,MAAM,YAAY,CAAC;AA8UpB,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,IAAI,EAAE,CAEhF;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,YAAY,EAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,SAAS,IAAI,EAAE,CAOjB;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAG3E;AAED,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE;IACJ,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GACA,IAAI,CAkBN;AAmPD,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,EACtB,GAAG,EAAE,MAAM,GACV,IAAI,CA2BN;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAG7D;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAGzE"}
+{"version":3,"file":"chats.d.ts","sourceRoot":"","sources":["../../src/store/chats.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAahD,OAAO,KAAK,EACV,IAAI,EAGJ,iBAAiB,EACjB,iBAAiB,EACjB,eAAe,EAChB,MAAM,YAAY,CAAC;AAyWpB,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,GAAG,SAAS,IAAI,EAAE,CAEhF;AAED,wBAAgB,gBAAgB,CAC9B,EAAE,EAAE,YAAY,EAChB,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,MAAM,GACZ,SAAS,IAAI,EAAE,CAOjB;AAED,wBAAgB,YAAY,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAG3E;AAED,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,IAAI,EAAE;IACJ,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,EAAE,iBAAiB,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB,GACA,IAAI,CAkBN;AAmTD,wBAAgB,UAAU,CACxB,EAAE,EAAE,YAAY,EAChB,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,EACtB,GAAG,EAAE,MAAM,EACX,OAAO,CAAC,EAAE,iBAAiB,GAC1B,IAAI,CA4BN;AAED,wBAAgB,UAAU,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAG7D;AAED,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,IAAI,CAGzE"}