@oscharko-dev/keiko 0.2.0-beta.4 → 0.2.0-beta.6

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/editRoutes.js

@@ -8,6 +8,7 @@
 // (mirrors reviewRoutes); the body is capped at 16KB and every field is validated before persist.
 import { applyQualityIntelligenceCandidateEdit, loadQualityIntelligenceRun, } from "@oscharko-dev/keiko-evidence";
 import { QualityIntelligence, } from "@oscharko-dev/keiko-contracts";
+import { normaliseCandidateText } from "@oscharko-dev/keiko-quality-intelligence";
 import { appendEditAudit, candidateReviewStateOf, loadRunReviewState } from "./reviewStore.js";
 const MAX_BODY_BYTES = 16 * 1024;
 const MAX_TITLE_LEN = 256;
@@ -18,17 +19,23 @@ const RISK_CLASSES = new Set(QualityIntelligence.QUALITY_INTELLIGENCE_RISK_CLASS
 const readBody = (req) => new Promise((resolve, reject) => {
     const chunks = [];
     let total = 0;
+    let capped = false;
     req.on("data", (chunk) => {
         total += chunk.length;
         if (total > MAX_BODY_BYTES) {
-            reject(new Error("body too large"));
-            req.resume();
+            if (!capped) {
+                capped = true;
+                chunks.length = 0;
+                reject(new Error("body too large"));
+                req.resume();
+            }
             return;
         }
         chunks.push(chunk);
     });
     req.on("end", () => {
-        resolve(Buffer.concat(chunks).toString("utf8"));
+        if (!capped)
+            resolve(Buffer.concat(chunks).toString("utf8"));
     });
     req.on("error", reject);
 });
@@ -75,16 +82,49 @@ const EDITABLE_KEYS = [
 function parseEditorLabel(value) {
     if (typeof value !== "string")
         return undefined;
-    const trimmed = value.trim();
-    return trimmed.length > 0 ? trimmed.slice(0, MAX_LABEL_LEN) : undefined;
+    // Strip bidi/zero-width/control spoofing code points (+ NFKC + trim) before length-capping so the
+    // persisted provenance `editorLabel` and the `.review.json` `reviewerLabel` (both derived from this
+    // one value) get the same content-safety treatment as generated candidate text. A label of only
+    // format characters normalises to "" and is rejected as a missing reviewer label.
+    const cleaned = normaliseCandidateText(value);
+    return cleaned.length > 0 ? cleaned.slice(0, MAX_LABEL_LEN) : undefined;
+}
+// The editable fields whose value is an array of candidate body-text lines. `title` (single string)
+// and the closed enums (priority / riskClass) are handled separately in normaliseEditedValue.
+const TEXT_LIST_KEYS = new Set([
+    "preconditions",
+    "steps",
+    "expectedResults",
+    "tags",
+]);
+// Strip bidi / zero-width / control spoofing code points (+ NFKC + trim) from every human-supplied
+// text field BEFORE validation, so an inline edit persists through the SAME candidate-text
+// normalisation as the generation path (parseGeneratedCandidates → normaliseCandidateText — the
+// documented single chokepoint for persisted candidate text). Closed enums (priority / riskClass) and
+// any non-string shape pass through untouched; their validators reject anything off-list. A title or
+// list item whose only content was format characters normalises to "" and is then rejected by the
+// non-blank validators (an actionable 400) rather than persisted as junk. Normalising first also means
+// MAX_TITLE_LEN is measured on the cleaned text, so padding a title with zero-width marks cannot
+// smuggle it past the length cap.
+function normaliseEditedValue(key, value) {
+    if (key === "title") {
+        return typeof value === "string" ? normaliseCandidateText(value) : value;
+    }
+    if (TEXT_LIST_KEYS.has(key) && Array.isArray(value)) {
+        // `Array.isArray` narrows `unknown` to `any[]`; widen back to `unknown[]` so each item is typed
+        // (no unsafe `any`). Non-string items pass through for the list validator to reject.
+        return value.map((item) => typeof item === "string" ? normaliseCandidateText(item) : item);
+    }
+    return value;
 }
 function collectEditedFields(edited) {
     const collected = {};
     let fieldCount = 0;
     for (const key of EDITABLE_KEYS) {
-        const value = edited[key];
-        if (value === undefined)
+        const raw = edited[key];
+        if (raw === undefined)
             continue;
+        const value = normaliseEditedValue(key, raw);
         if (!isValidField(key, value))
             return { ok: false, invalidField: key };
         collected[key] = value;
@@ -151,6 +191,11 @@ async function readEdit(req) {
     }
     return { ok: true, edit: edit.edit };
 }
+// Project the edited row for the immediate POST response. This intentionally omits `weakTestFlag`
+// (the adversarial-judge badge): that flag is derived from the run MANIFEST findings, not the
+// candidate row, and recomputing it here would duplicate the run-detail GET's manifest read
+// (uiRoutes.ts) and risk drift. AC1 scopes "reflected" to the next run-detail fetch, where the GET
+// projection re-attaches `weakTestFlag`; clients refresh the badge from that fetch.
 function projectCandidate(row, evidenceDir, runId) {
     const reviewArtifact = loadRunReviewState(runId, evidenceDir);
     return {
@@ -194,12 +239,22 @@ function recordEdit(runId, edit, evidenceDir, deps) {
         return errorResult(404, "QI_NOT_FOUND", "Candidate not found for this run.");
     }
     if (result.changed) {
+        // Append the consolidated `.review.json` audit entry. The atomic, per-edit record is the
+        // `editedRevisions[]` provenance just written WITH the candidate change (a single candidates.json
+        // write inside applyQualityIntelligenceCandidateEdit); this is a second, separate companion write.
+        // If it throws (e.g. disk failure) the outer handler returns 500, but the edit is still recorded
+        // in editedRevisions[] provenance — an edit is never fully unaudited. The trade-off: the
+        // consolidated audit log can lag the per-artifact provenance on a partial-write failure, and a
+        // retry with identical fields is a no-op (changed === false) that won't backfill it. Cross-artifact
+        // write atomicity is a tracked follow-up; it is not introduced here to avoid touching the shared
+        // companion store used by every QI route.
         appendEditAudit({
             runId,
             evidenceDir,
             candidateId: edit.candidateId,
             reviewerLabel: edit.editorLabel,
             now: new Date().toISOString(),
+            redact: deps.redactor,
         });
     }
     return {

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/exportRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"exportRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/exportRoutes.ts"],"names":[],"mappings":"AAqBA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAsKhD,wBAAsB,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAuBjG;AAgHD,eAAO,MAAM,qBAAqB,EAAE,SAAS,eAAe,EAE3D,CAAC"}
+{"version":3,"file":"exportRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/exportRoutes.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AA8NhD,wBAAsB,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CA2BjG;AA+HD,eAAO,MAAM,qBAAqB,EAAE,SAAS,eAAe,EAE3D,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/exportRoutes.js

@@ -12,8 +12,8 @@
 import { QualityIntelligence } from "@oscharko-dev/keiko-contracts";
 import { sha256Hex } from "@oscharko-dev/keiko-security";
 import { QualityIntelligenceExport } from "@oscharko-dev/keiko-quality-intelligence";
-import { loadQualityIntelligenceRun, loadQualityIntelligenceCandidates, } from "@oscharko-dev/keiko-evidence";
-import { loadRunReviewState, candidateReviewStateOf } from "./reviewStore.js";
+import { appendQualityIntelligenceExportRow, loadQualityIntelligenceRun, loadQualityIntelligenceCandidates, } from "@oscharko-dev/keiko-evidence";
+import { loadRunReviewState, candidateReviewStateOf, runReviewStateOf } from "./reviewStore.js";
 import { assemblePdf, assembleZipBundle } from "./exportAssembly.js";
 const ADAPTERS = new Set([
     ...QualityIntelligence.QUALITY_INTELLIGENCE_EXPORT_ADAPTERS,
@@ -27,7 +27,10 @@ const LOCAL_META = {
     json: { contentType: "application/json", ext: "json" },
     markdown: { contentType: "text/markdown", ext: "md" },
     "plain-text": { contentType: "text/plain", ext: "txt" },
-    "quality-center": { contentType: "text/plain", ext: "txt" },
+    // NOTE: no "quality-center" entry — it is a TMS adapter, so a non-dry-run request is rejected with
+    // 403 before LOCAL_META is consulted, and the dry-run path returns a preview object that never
+    // reads LOCAL_META. The `?? { text/plain, txt }` fallback at the materialised-response site covers
+    // any future non-TMS text adapter.
     pdf: { contentType: "application/pdf", ext: "pdf" },
     "zip-bundle": { contentType: "application/zip", ext: "zip" },
 };
@@ -39,17 +42,23 @@ const isObject = (value) => typeof value === "object" && value !== null && !Arra
 const readBody = (req) => new Promise((resolve, reject) => {
     const chunks = [];
     let total = 0;
+    let capped = false;
     req.on("data", (chunk) => {
         total += chunk.length;
         if (total > MAX_BODY_BYTES) {
-            reject(new Error("body too large"));
-            req.resume();
+            if (!capped) {
+                capped = true;
+                chunks.length = 0;
+                reject(new Error("body too large"));
+                req.resume();
+            }
             return;
         }
         chunks.push(chunk);
     });
     req.on("end", () => {
-        resolve(Buffer.concat(chunks).toString("utf8"));
+        if (!capped)
+            resolve(Buffer.concat(chunks).toString("utf8"));
     });
     req.on("error", reject);
 });
@@ -85,6 +94,38 @@ function buildBundle(runId, adapter, candidates, createdAt) {
         contents,
     };
 }
+/**
+ * Build the export-evidence row for an export action (Issue #283, AC4). Records the target type, a
+ * deterministic artifact id, an integrity hash over the exported candidate ids, the redaction
+ * attestation (candidates were redacted at persist time), and whether the action was a dry-run.
+ */
+function buildExportEvidenceRow(runId, target, rows, dryRun) {
+    return {
+        id: `qi-export-${sha256Hex(`${runId}|${target}`).slice(0, 24)}`,
+        targetAdapter: target,
+        integrityHash: sha256Hex(JSON.stringify(rows.map((r) => r.id))),
+        redactionAttested: true,
+        dryRun,
+    };
+}
+/**
+ * Best-effort append of an export-evidence row for a 200 export action (Issue #283, AC4). A failed
+ * audit write must NOT withhold an already-computed local export from the user: the artifact has no
+ * external side effect, the run already exists on disk, and the manifest write is atomic so this path
+ * is rare. Swallow on failure rather than turning a successful export into a 500. No-op for error
+ * responses and for the disabled external-TMS path (which produces no artifact).
+ */
+function recordExportEvidence(runId, outcome, evidenceDir) {
+    if (outcome.evidence === undefined || outcome.result.status !== 200) {
+        return;
+    }
+    try {
+        appendQualityIntelligenceExportRow({ runId, export: outcome.evidence }, { evidenceDir });
+    }
+    catch {
+        // intentionally swallowed — see doc comment
+    }
+}
 function parseExportBody(body) {
     const adapter = body.adapter;
     if (typeof adapter !== "string" || !ADAPTERS.has(adapter))
@@ -99,6 +140,11 @@ function selectRows(rows, approvedOnly, runId, evidenceDir) {
     if (!approvedOnly)
         return rows;
     const review = loadRunReviewState(runId, evidenceDir);
+    // FIX E (Issue #282) — a reviewer can approve the whole RUN instead of each candidate. A
+    // run-level approval is an explicit approval of every candidate, so it satisfies approvedOnly
+    // (incl. the TMS adapters that force it). Otherwise fall back to the per-candidate filter.
+    if (runReviewStateOf(review) === "approved")
+        return rows;
     return rows.filter((r) => candidateReviewStateOf(review, r.id) === "approved");
 }
 async function readExportRequest(req) {
@@ -157,7 +203,11 @@ export async function handleQiExport(ctx, deps) {
         if (artifact === undefined || artifact.candidates.length === 0) {
             return errorResult(409, "QI_NO_CANDIDATES", "This run has no candidates to export.");
         }
-        return serialiseExport(id, parsed.request, artifact.candidates, evidenceDir);
+        const outcome = serialiseExport(id, parsed.request, artifact.candidates, evidenceDir);
+        // Emit audit evidence for every materialised export or dry-run preview (Issue #283, AC4). The
+        // append is best-effort and must not turn a successful export into a 500 — see recordExportEvidence.
+        recordExportEvidence(id, outcome, evidenceDir);
+        return outcome.result;
     }
     catch {
         return errorResult(500, "QI_EXPORT_FAILED", "Failed to build the export.");
@@ -190,16 +240,19 @@ function binaryResponse(runId, mode, rows) {
         bytes = assembleZipBundle(entries);
     }
     return {
-        status: 200,
-        body: {
-            dryRun: false,
-            adapter: mode,
-            filename: `${runId}.${meta.ext}`,
-            contentType: meta.contentType,
-            byteLen: bytes.length,
-            encoding: "base64",
-            body: Buffer.from(bytes).toString("base64"),
+        result: {
+            status: 200,
+            body: {
+                dryRun: false,
+                adapter: mode,
+                filename: `${runId}.${meta.ext}`,
+                contentType: meta.contentType,
+                byteLen: bytes.length,
+                encoding: "base64",
+                body: Buffer.from(bytes).toString("base64"),
+            },
         },
+        evidence: buildExportEvidenceRow(runId, mode, rows, false),
     };
 }
 function serialisedResponse(runId, request, rows) {
@@ -213,27 +266,33 @@ function serialisedResponse(runId, request, rows) {
     const serialized = QualityIntelligenceExport.serializeExportBundle(bundle, candidates);
     if (request.dryRun) {
         return {
-            status: 200,
-            body: {
-                dryRun: true,
-                adapter,
-                candidateCount: rows.length,
-                byteLen: serialized.byteLen,
-                preview: serialized.body.slice(0, 1200),
+            result: {
+                status: 200,
+                body: {
+                    dryRun: true,
+                    adapter,
+                    candidateCount: rows.length,
+                    byteLen: serialized.byteLen,
+                    preview: serialized.body.slice(0, 1200),
+                },
             },
+            evidence: buildExportEvidenceRow(runId, adapter, rows, true),
         };
     }
     const meta = LOCAL_META[adapter] ?? { contentType: "text/plain", ext: "txt" };
     return {
-        status: 200,
-        body: {
-            dryRun: false,
-            adapter,
-            filename: `${runId}.${meta.ext}`,
-            contentType: meta.contentType,
-            byteLen: serialized.byteLen,
-            body: serialized.body,
+        result: {
+            status: 200,
+            body: {
+                dryRun: false,
+                adapter,
+                filename: `${runId}.${meta.ext}`,
+                contentType: meta.contentType,
+                byteLen: serialized.byteLen,
+                body: serialized.body,
+            },
         },
+        evidence: buildExportEvidenceRow(runId, adapter, rows, false),
     };
 }
 function serialiseExport(runId, request, allRows, evidenceDir) {
@@ -243,10 +302,16 @@ function serialiseExport(runId, request, allRows, evidenceDir) {
     const approvedOnly = isTms ? true : request.approvedOnly;
     const rows = selectRows(allRows, approvedOnly, runId, evidenceDir);
     if (rows.length === 0) {
-        return errorResult(409, "QI_NOTHING_TO_EXPORT", approvedOnly ? "No approved candidates to export." : "No candidates to export.");
+        return {
+            result: errorResult(409, "QI_NOTHING_TO_EXPORT", approvedOnly ? "No approved candidates to export." : "No candidates to export."),
+        };
     }
     if (isTms && !request.dryRun) {
-        return errorResult(403, "QI_EXTERNAL_EXPORT_DISABLED", "External TMS export is disabled. Configure the connector and use a dry-run preview.");
+        // External TMS write is disabled — no artifact is produced, so no export-evidence row is
+        // recorded for this rejected action.
+        return {
+            result: errorResult(403, "QI_EXTERNAL_EXPORT_DISABLED", "External TMS export is disabled. Configure the connector and use a dry-run preview."),
+        };
     }
     return serialisedResponse(runId, request, rows);
 }

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaConcurrency.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaConcurrency.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaConcurrency.ts"],"names":[],"mappings":"AAOA;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAAU,CAAC,EAAE,CAAC,EAC3C,OAAO,SAAS,CAAC,EAAE,EACnB,OAAO,MAAM,EACb,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,KAC7C,OAAO,CAAC,SAAS,CAAC,EAAE,CAmBtB,CAAC"}
+{"version":3,"file":"figmaConcurrency.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaConcurrency.ts"],"names":[],"mappings":"AAOA;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,GAAU,CAAC,EAAE,CAAC,EAC3C,OAAO,SAAS,CAAC,EAAE,EACnB,OAAO,MAAM,EACb,QAAQ,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,KAC7C,OAAO,CAAC,SAAS,CAAC,EAAE,CAoBtB,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaConcurrency.js

@@ -13,7 +13,8 @@
 export const mapWithConcurrency = async (items, limit, worker) => {
     if (items.length === 0)
         return [];
-    const cap = Math.max(1, Math.min(limit, items.length));
+    const safeLimit = Number.isInteger(limit) && limit >= 1 ? limit : 1;
+    const cap = Math.max(1, Math.min(safeLimit, items.length));
     const results = new Array(items.length);
     let next = 0;
     const runLane = async () => {

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaConnector.d.ts

@@ -3,6 +3,12 @@ import { type FigmaRetryPolicy, type FigmaRetrySleep } from "./figmaRetry.js";
 import { type FigmaNode, type ReadinessSignal } from "./figmaReadiness.js";
 import { type FigmaScopeCoverage, type ScopedPaginationLimits } from "./figmaScopedPagination.js";
 export interface FigmaConnectorConfig {
+    /**
+     * Optional config-key PAT alternate (#751 AC2). Sits between the vault and env sources in the
+     * vault > config > env precedence. It is only honoured when the connector is constructed directly
+     * with a config token; the governed production build ({@link governedSnapshotBuild}) resolves
+     * vault > env (no config token), so this field stays inert there by design.
+     */
     readonly accessToken?: string;
     readonly depth?: number;
     readonly releaseMarker?: string;

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaConnector.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaConnector.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaConnector.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAoB,KAAK,SAAS,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE7F,OAAO,EAGL,KAAK,kBAAkB,EAGvB,KAAK,sBAAsB,EAC5B,MAAM,4BAA4B,CAAC;AAOpC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAIvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAExC,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,kGAAkG;IAClG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvF;;;;OAIG;IACH,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC5F;AAoND,eAAO,MAAM,oBAAoB,GAAI,MAAM,kBAAkB,KAAG,cAc/D,CAAC"}
+{"version":3,"file":"figmaConnector.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaConnector.ts"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EAAoB,KAAK,SAAS,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE7F,OAAO,EAIL,KAAK,kBAAkB,EAGvB,KAAK,sBAAsB,EAC5B,MAAM,4BAA4B,CAAC;AAOpC,MAAM,WAAW,oBAAoB;IACnC;;;;;OAKG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,sBAAsB,CAAC,CAAC;CACvD;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;IAIvC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAE7B,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAExC,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;IACpC;;;;OAIG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,kBAAkB,CAAC;CACxC;AAED,MAAM,WAAW,cAAc;IAC7B,kGAAkG;IAClG,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACvF;;;;OAIG;IACH,oBAAoB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC5F;AA8ND,eAAO,MAAM,oBAAoB,GAAI,MAAM,kBAAkB,KAAG,cAiB/D,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaConnector.js

@@ -16,7 +16,7 @@ import { DEFAULT_FIGMA_RETRY_POLICY, fetchWithBackoff, realFigmaRetrySleep, } fr
 import { parseFigmaTarget } from "./figmaUrl.js";
 import { resolveReadiness } from "./figmaReadiness.js";
 import { classifyTokenFailure, resolveFigmaToken } from "./figmaTokenSource.js";
-import { DEFAULT_SCOPED_PAGINATION_LIMITS, paginateScopedDocument, } from "./figmaScopedPagination.js";
+import { DEFAULT_SCOPED_PAGINATION_LIMITS, paginateScopedDocument, resolveScopedPaginationLimits, } from "./figmaScopedPagination.js";
 const FIGMA_API_ORIGIN = "https://api.figma.com";
 const DEFAULT_DEPTH = 4;
 const DEFAULT_MAX_NODE_COUNT = 5000;
@@ -71,6 +71,15 @@ const guardScopeSize = (node, maxNodeCount) => {
 // rate-limit exhausted, egress/TLS broken) — it must abort, not silently degrade a branch to shallow.
 // Any other per-node failure (a transient 5xx or a vanished sub-node) is soft: that branch keeps its
 // shallow content and the build proceeds with a truncation-aware coverage report.
+// The proxy family is covered in full — symmetric with RENDER_EGRESS_ABORT_CODES in
+// figmaSnapshotBuilder.ts — so a forward-proxy that requires auth (FIGMA_PROXY_AUTH_REQUIRED) or
+// denies the request by policy (FIGMA_PROXY_BLOCKED_BY_POLICY) on a per-screen fetch aborts the build
+// instead of silently degrading that screen to shallow content.
+// Rate-limit exhaustion is deliberately NOT in this hard-abort set. The discovery fetch still aborts
+// on FIGMA_RATE_LIMITED before this fetcher is constructed, but a single per-screen deepening fetch
+// that exhausts retries can safely degrade to the already-fetched shallow screen while coverage marks
+// it truncated. That keeps large boards reviewable instead of failing the whole snapshot after one
+// expensive branch hits Figma's cost-based limit.
 const DEEP_FETCH_ABORT_CODES = new Set([
     "FIGMA_TOKEN_MISSING",
     "FIGMA_TOKEN_INVALID",
@@ -78,9 +87,10 @@ const DEEP_FETCH_ABORT_CODES = new Set([
     "FIGMA_TOKEN_REVOKED",
     "FIGMA_INSUFFICIENT_SCOPE",
     "FIGMA_CONSENT_REQUIRED",
-    "FIGMA_RATE_LIMITED",
     "FIGMA_PROXY_EGRESS_FAILED",
     "FIGMA_PROXY_UNREACHABLE",
+    "FIGMA_PROXY_AUTH_REQUIRED",
+    "FIGMA_PROXY_BLOCKED_BY_POLICY",
     "FIGMA_TLS_CA_FAILURE",
 ]);
 // One scoped `nodes?ids=&depth=` fetch (with 429 backoff), returning the raw document. No oversize
@@ -157,7 +167,10 @@ export const createFigmaConnector = (deps) => {
         maxNodeCount: deps.config?.maxNodeCount ?? DEFAULT_MAX_NODE_COUNT,
         retryPolicy: deps.retryPolicy ?? DEFAULT_FIGMA_RETRY_POLICY,
         sleep: deps.sleep ?? realFigmaRetrySleep,
-        paginationLimits: { ...DEFAULT_SCOPED_PAGINATION_LIMITS, ...deps.config?.pagination },
+        paginationLimits: resolveScopedPaginationLimits({
+            ...DEFAULT_SCOPED_PAGINATION_LIMITS,
+            ...deps.config?.pagination,
+        }),
     };
     return {
         fetchScopedNodes: (url, options = {}) => doFetchScopedNodes(rt, url, options),

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaConnectorAudit.d.ts

@@ -1,6 +1,13 @@
 import type { FigmaConnectorErrorCode } from "./figmaConnectorErrors.js";
 import type { FigmaScopeRef } from "./figmaScopeRef.js";
 export declare const FIGMA_AUDIT_SCHEMA_VERSION: 1;
+/**
+ * The four AC1-audited connector actions (Issue #760). `"snapshot"`, `"resnapshot"`, and `"revoke"`
+ * are emitted at their respective operations. `"connect"` is emitted exactly once — at the operator's
+ * first read-only-scope acknowledgement (acknowledgeReadOnly on the first build for a scope), by the
+ * orchestration's `gateConsent` (figmaSnapshotOrchestration.ts) — the durable record of the operator
+ * establishing the connection. Re-acknowledging an already-consented scope emits no further connect.
+ */
 export type FigmaConnectorAction = "connect" | "snapshot" | "resnapshot" | "revoke";
 export type FigmaConnectorOutcome = "ok" | "error";
 /** Pure cardinalities only — never names, ids, links, or design content. */

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaConnectorAudit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaConnectorAudit.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaConnectorAudit.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AAGrD,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,QAAQ,CAAC;AACpF,MAAM,MAAM,qBAAqB,GAAG,IAAI,GAAG,OAAO,CAAC;AAEnD,4EAA4E;AAC5E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,qGAAqG;IACrG,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,gGAAgG;IAChG,QAAQ,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAC;IAC7C,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,uBAAuB,EAAE,OAAO,0BAA0B,CAAC;IACpE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACvD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAoBD,eAAO,MAAM,uBAAuB,GAClC,UAAU,aAAa,EACvB,aAAa,MAAM,KAClB,2BAA2B,GAAG,SAAiD,CAAC;AAEnF,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC;CAC7C;AAeD;;;GAGG;AACH,eAAO,MAAM,yBAAyB,GACpC,OAAO,8BAA8B,KACpC,2BAWF,CAAC"}
+{"version":3,"file":"figmaConnectorAudit.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaConnectorAudit.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AACzE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,eAAO,MAAM,0BAA0B,EAAG,CAAU,CAAC;AAGrD;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,UAAU,GAAG,YAAY,GAAG,QAAQ,CAAC;AACpF,MAAM,MAAM,qBAAqB,GAAG,IAAI,GAAG,OAAO,CAAC;AAEnD,4EAA4E;AAC5E,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,qGAAqG;IACrG,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;CAClC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,gGAAgG;IAChG,QAAQ,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAC;IAC7C,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC;CAC7C;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,uBAAuB,EAAE,OAAO,0BAA0B,CAAC;IACpE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,SAAS,wBAAwB,EAAE,CAAC;IACvD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAoBD,eAAO,MAAM,uBAAuB,GAClC,UAAU,aAAa,EACvB,aAAa,MAAM,KAClB,2BAA2B,GAAG,SAAiD,CAAC;AAEnF,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,CAAC,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC;CAC7C;AAeD;;;GAGG;AACH,eAAO,MAAM,yBAAyB,GACpC,OAAO,8BAA8B,KACpC,2BAWF,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaConnectorErrors.d.ts

@@ -1,4 +1,4 @@
-export type FigmaConnectorErrorCode = "FIGMA_MALFORMED_URL" | "FIGMA_TOKEN_MISSING" | "FIGMA_CONSENT_REQUIRED" | "FIGMA_TOKEN_INVALID" | "FIGMA_TOKEN_EXPIRED" | "FIGMA_TOKEN_REVOKED" | "FIGMA_NOT_FOUND" | "FIGMA_INSUFFICIENT_SCOPE" | "FIGMA_RENDER_FAILED" | "FIGMA_PROXY_EGRESS_FAILED" | "FIGMA_PROXY_UNREACHABLE" | "FIGMA_PROXY_AUTH_REQUIRED" | "FIGMA_PROXY_BLOCKED_BY_POLICY" | "FIGMA_TLS_CA_FAILURE" | "FIGMA_OVERSIZED_SCOPE" | "FIGMA_RESPONSE_TOO_LARGE" | "FIGMA_RATE_LIMITED" | "FIGMA_UPSTREAM_UNAVAILABLE" | "FIGMA_NETWORK_UNREACHABLE" | "FIGMA_EGRESS_TIMEOUT" | "FIGMA_EGRESS_FAILED" | "FIGMA_BUILD_TIMEOUT" | "FIGMA_INTERNAL";
+export type FigmaConnectorErrorCode = "FIGMA_MALFORMED_URL" | "FIGMA_TOKEN_MISSING" | "FIGMA_CONSENT_REQUIRED" | "FIGMA_TOKEN_INVALID" | "FIGMA_TOKEN_EXPIRED" | "FIGMA_TOKEN_REVOKED" | "FIGMA_NOT_FOUND" | "FIGMA_NOT_READY" | "FIGMA_INSUFFICIENT_SCOPE" | "FIGMA_RENDER_FAILED" | "FIGMA_PROXY_EGRESS_FAILED" | "FIGMA_PROXY_UNREACHABLE" | "FIGMA_PROXY_AUTH_REQUIRED" | "FIGMA_PROXY_BLOCKED_BY_POLICY" | "FIGMA_TLS_CA_FAILURE" | "FIGMA_OVERSIZED_SCOPE" | "FIGMA_RESPONSE_TOO_LARGE" | "FIGMA_RATE_LIMITED" | "FIGMA_UPSTREAM_UNAVAILABLE" | "FIGMA_NETWORK_UNREACHABLE" | "FIGMA_EGRESS_TIMEOUT" | "FIGMA_EGRESS_FAILED" | "FIGMA_BUILD_TIMEOUT" | "FIGMA_INTERNAL";
 export interface FigmaConnectorErrorBody {
     readonly error: {
         readonly code: FigmaConnectorErrorCode;

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaConnectorErrors.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaConnectorErrors.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaConnectorErrors.ts"],"names":[],"mappings":"AAkCA,MAAM,MAAM,uBAAuB,GAC/B,qBAAqB,GACrB,qBAAqB,GACrB,wBAAwB,GACxB,qBAAqB,GACrB,qBAAqB,GACrB,qBAAqB,GACrB,iBAAiB,GACjB,0BAA0B,GAC1B,qBAAqB,GACrB,2BAA2B,GAC3B,yBAAyB,GACzB,2BAA2B,GAC3B,+BAA+B,GAC/B,sBAAsB,GACtB,uBAAuB,GACvB,0BAA0B,GAC1B,oBAAoB,GACpB,4BAA4B,GAC5B,2BAA2B,GAC3B,sBAAsB,GACtB,qBAAqB,GACrB,qBAAqB,GACrB,gBAAgB,CAAC;AAgDrB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACtF;AAED,eAAO,MAAM,uBAAuB,GAClC,MAAM,uBAAuB,KAC5B,uBAED,CAAC;AAEH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;gBAE3B,IAAI,EAAE,uBAAuB;CAK1C;AA0JD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,2BAA2B,GAAI,KAAK,OAAO,KAAG,uBAa1D,CAAC"}
+{"version":3,"file":"figmaConnectorErrors.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaConnectorErrors.ts"],"names":[],"mappings":"AAmCA,MAAM,MAAM,uBAAuB,GAC/B,qBAAqB,GACrB,qBAAqB,GACrB,wBAAwB,GACxB,qBAAqB,GACrB,qBAAqB,GACrB,qBAAqB,GACrB,iBAAiB,GACjB,iBAAiB,GACjB,0BAA0B,GAC1B,qBAAqB,GACrB,2BAA2B,GAC3B,yBAAyB,GACzB,2BAA2B,GAC3B,+BAA+B,GAC/B,sBAAsB,GACtB,uBAAuB,GACvB,0BAA0B,GAC1B,oBAAoB,GACpB,4BAA4B,GAC5B,2BAA2B,GAC3B,sBAAsB,GACtB,qBAAqB,GACrB,qBAAqB,GACrB,gBAAgB,CAAC;AAkDrB,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,KAAK,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;QAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;CACtF;AAED,eAAO,MAAM,uBAAuB,GAClC,MAAM,uBAAuB,KAC5B,uBAED,CAAC;AAEH,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;gBAE3B,IAAI,EAAE,uBAAuB;CAK1C;AA0JD;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,2BAA2B,GAAI,KAAK,OAAO,KAAG,uBAa1D,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaConnectorErrors.js

@@ -13,6 +13,7 @@
 //   scope         → FIGMA_INSUFFICIENT_SCOPE
 //   rate-limit    → FIGMA_RATE_LIMITED
 //   not-found     → FIGMA_NOT_FOUND
+//   readiness     → FIGMA_NOT_READY
 //   oversized     → FIGMA_OVERSIZED_SCOPE | FIGMA_RESPONSE_TOO_LARGE
 //   render-failed → FIGMA_RENDER_FAILED
 //   proxy egress  → FIGMA_PROXY_UNREACHABLE (proxy host unreachable)
@@ -35,6 +36,7 @@ const SAFE_MESSAGES = {
     FIGMA_TOKEN_EXPIRED: "The Figma access token has expired. Re-key the connector with a new read-only token.",
     FIGMA_TOKEN_REVOKED: "The Figma access token has been revoked. Re-key the connector with a new read-only token.",
     FIGMA_NOT_FOUND: "The requested Figma node could not be found for the supplied link.",
+    FIGMA_NOT_READY: "The requested Figma scope is not release-ready. Pin a Figma version, select a Release section, or mark the frame Ready for dev before snapshotting.",
     FIGMA_INSUFFICIENT_SCOPE: "The configured Figma access token is not permitted to read the requested node. Re-key the connector with a read-only token that can read this file.",
     FIGMA_RENDER_FAILED: "Figma could not render the requested screens. Re-run the snapshot; if it persists, connect a narrower section.",
     FIGMA_PROXY_EGRESS_FAILED: "The Figma request could not be routed through the platform egress proxy. Check proxy connectivity and try again.",
@@ -44,7 +46,7 @@ const SAFE_MESSAGES = {
     FIGMA_TLS_CA_FAILURE: "The TLS certificate for the Figma egress could not be verified. Check the configured certificate authority bundle and try again.",
     FIGMA_OVERSIZED_SCOPE: "The requested Figma node subtree is too large for a single scoped fetch. Connect a narrower section.",
     FIGMA_RESPONSE_TOO_LARGE: "The Figma API response exceeded the maximum allowed size. Connect a narrower section to reduce the response.",
-    FIGMA_RATE_LIMITED: "Figma rate-limited the snapshot-build after repeated retries. Wait a moment and re-run the snapshot.",
+    FIGMA_RATE_LIMITED: "Figma rate-limited the snapshot-build after repeated retries. Re-run with a narrower Release section or lower the Figma fetch limits.",
     FIGMA_UPSTREAM_UNAVAILABLE: "The Figma service is currently unavailable. Try the scoped fetch again later.",
     FIGMA_NETWORK_UNREACHABLE: "The outbound network request to Figma failed (DNS, connection, or socket error). Check network connectivity and egress policy.",
     FIGMA_EGRESS_TIMEOUT: "The Figma request timed out before completing. Retry; if it persists, raise KEIKO_FIGMA_REQUEST_TIMEOUT_MS or check upstream latency.",

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaConsent.d.ts

@@ -3,8 +3,8 @@ export declare const FIGMA_CONSENT_SCHEMA_VERSION: 1;
 /**
  * Display-only list of the least-privilege, read-only Figma scopes the connector relies on. Shown to
  * the operator before the first fetch so they can confirm the PAT they minted is read-only. The
- * connector reads files and renders images; it never writes. Figma PAT scopes are coarse, so this is
- * the human-readable expectation, not an enforced grant.
+ * connector reads file content and renders images; it never writes. This is the human-readable
+ * expectation for an out-of-band PAT grant, not an enforced grant.
  */
 export declare const EXPECTED_FIGMA_SCOPES: readonly string[];
 export interface FigmaScopeConsent {

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaConsent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaConsent.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaConsent.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,eAAO,MAAM,4BAA4B,EAAG,CAAU,CAAC;AAGvD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAA8C,CAAC;AAElG,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,yBAAyB,EAAE,OAAO,4BAA4B,CAAC;IACxE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,iGAAiG;IACjG,QAAQ,CAAC,oBAAoB,EAAE,IAAI,CAAC;IACpC,kFAAkF;IAClF,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAaD,eAAO,MAAM,mBAAmB,GAC9B,UAAU,aAAa,EACvB,aAAa,MAAM,KAClB,iBAAiB,GAAG,SAAiD,CAAC;AAEzE,eAAO,MAAM,kBAAkB,GAAI,UAAU,aAAa,EAAE,aAAa,MAAM,KAAG,OACxB,CAAC;AAE3D,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAAI,OAAO,0BAA0B,KAAG,iBAWzE,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAAI,UAAU,aAAa,EAAE,aAAa,MAAM,KAAG,IAIpF,CAAC"}
+{"version":3,"file":"figmaConsent.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaConsent.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAExD,eAAO,MAAM,4BAA4B,EAAG,CAAU,CAAC;AAGvD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAA0B,CAAC;AAE9E,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,yBAAyB,EAAE,OAAO,4BAA4B,CAAC;IACxE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,iGAAiG;IACjG,QAAQ,CAAC,oBAAoB,EAAE,IAAI,CAAC;IACpC,kFAAkF;IAClF,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;CACjC;AAaD,eAAO,MAAM,mBAAmB,GAC9B,UAAU,aAAa,EACvB,aAAa,MAAM,KAClB,iBAAiB,GAAG,SAAiD,CAAC;AAEzE,eAAO,MAAM,kBAAkB,GAAI,UAAU,aAAa,EAAE,aAAa,MAAM,KAAG,OACxB,CAAC;AAE3D,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;GAGG;AACH,eAAO,MAAM,qBAAqB,GAAI,OAAO,0BAA0B,KAAG,iBAWzE,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,qBAAqB,GAAI,UAAU,aAAa,EAAE,aAAa,MAAM,KAAG,IAIpF,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaConsent.js

@@ -17,10 +17,10 @@ const FIGMA_CONSENT_SUFFIX = ".figma-consent.json";
 /**
  * Display-only list of the least-privilege, read-only Figma scopes the connector relies on. Shown to
  * the operator before the first fetch so they can confirm the PAT they minted is read-only. The
- * connector reads files and renders images; it never writes. Figma PAT scopes are coarse, so this is
- * the human-readable expectation, not an enforced grant.
+ * connector reads file content and renders images; it never writes. This is the human-readable
+ * expectation for an out-of-band PAT grant, not an enforced grant.
  */
-export const EXPECTED_FIGMA_SCOPES = ["files:read", "file_dev_resources:read"];
+export const EXPECTED_FIGMA_SCOPES = ["file_content:read"];
 const parseConsent = (value) => {
     if (typeof value !== "object" || value === null)
         return undefined;

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaObservedActions.d.ts

@@ -16,6 +16,11 @@ export interface ObservedSnapshotInput {
     readonly extras?: FigmaConnectorMetricsExtras;
     /** `true` for a re-snapshot action, `false`/omitted for an initial snapshot. */
     readonly isResnapshot?: boolean;
+    /**
+     * Defaults to true. Route orchestration sets this false so success is audited only after the
+     * snapshot record has been durably written and reloaded from Evidence.
+     */
+    readonly auditSuccess?: boolean;
     /** Performs the actual render + assembly (delegates to buildFigmaSnapshot / resnapshotFigma). */
     readonly run: () => Promise<FigmaSnapshot>;
 }

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaObservedActions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaObservedActions.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaObservedActions.ts"],"names":[],"mappings":"AAoBA,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EACjC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAEzF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAmCD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,EAAE,EAAE,wBAAwB,CAAC,cAAc,CAAC;IACrD,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,2BAA2B,CAAC;IAC9C,gFAAgF;IAChF,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,iGAAiG;IACjG,QAAQ,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;CAClC;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,GAC/B,OAAO,qBAAqB,KAC3B,OAAO,CAAC,sBAAsB,CA6BhC,CAAC;AAEF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,6EAA6E;IAC7E,QAAQ,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC;CAC1B;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAAI,OAAO,mBAAmB,KAAG,IAa/D,CAAC"}
+{"version":3,"file":"figmaObservedActions.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaObservedActions.ts"],"names":[],"mappings":"AAoBA,OAAO,EAEL,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EACjC,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAuB,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAEzF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAmCD,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IACpC,4EAA4E;IAC5E,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,EAAE,EAAE,wBAAwB,CAAC,cAAc,CAAC;IACrD,QAAQ,CAAC,YAAY,EAAE,sBAAsB,CAAC;IAC9C,QAAQ,CAAC,MAAM,CAAC,EAAE,2BAA2B,CAAC;IAC9C,gFAAgF;IAChF,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,OAAO,CAAC;IAChC,iGAAiG;IACjG,QAAQ,CAAC,GAAG,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;CAC5C;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;CAClC;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,GAC/B,OAAO,qBAAqB,KAC3B,OAAO,CAAC,sBAAsB,CA+BhC,CAAC;AAEF,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,GAAG,EAAE,qBAAqB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;IACjC,6EAA6E;IAC7E,QAAQ,CAAC,GAAG,EAAE,MAAM,IAAI,CAAC;CAC1B;AAED;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAAI,OAAO,mBAAmB,KAAG,IAa/D,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaObservedActions.js

@@ -56,14 +56,16 @@ export const observeFigmaSnapshot = async (input) => {
         return auditFailureAndRethrow(input.ctx, scopeRef, action, error);
     }
     const metrics = computeFigmaConnectorMetrics(input.ir, snapshot, input.augmentation, input.extras ?? {});
-    appendFigmaConnectorAudit({
-        scopeRef,
-        evidenceDir: input.ctx.evidenceDir,
-        action,
-        outcome: "ok",
-        counts: countsOf(input.ir, snapshot),
-        now: input.ctx.now,
-    });
+    if (input.auditSuccess !== false) {
+        appendFigmaConnectorAudit({
+            scopeRef,
+            evidenceDir: input.ctx.evidenceDir,
+            action,
+            outcome: "ok",
+            counts: countsOf(input.ir, snapshot),
+            now: input.ctx.now,
+        });
+    }
     return { snapshot, metrics, scopeRef };
 };
 /**

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaReadiness.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaReadiness.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaReadiness.ts"],"names":[],"mappings":"AAeA,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GACtF;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GACvF;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AAmCvD,eAAO,MAAM,gBAAgB,GAAI,MAAM,SAAS,EAAE,SAAS,gBAAgB,KAAG,eAiB7E,CAAC"}
+{"version":3,"file":"figmaReadiness.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaReadiness.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,SAAS,SAAS,EAAE,CAAC;CAC1C;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC7C;AAED,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAA;CAAE,GACtF;IAAE,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAA;CAAE,GACvF;IAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;CAAE,CAAC;AA2CvD,eAAO,MAAM,gBAAgB,GAAI,MAAM,SAAS,EAAE,SAAS,gBAAgB,KAAG,eAiB7E,CAAC"}