@oscharko-dev/keiko 0.2.0-beta.4 → 0.2.0-beta.6

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaReadiness.js

@@ -5,15 +5,16 @@
 //
 //   1. version  — a pinned version id was supplied (operator pinned a named version).
 //   2. section  — a node anywhere in the subtree is named with a configurable release
-//                 marker (default case-insensitive substring `release`).
+//                 marker (default case-insensitive token `release`).
 //   3. devStatus — one or more nodes carry Dev-Mode `devStatus.type === "READY_FOR_DEV"`.
 //
 // `devStatus` is OPTIONAL in the Figma REST response and may be absent for an entire
 // account/plan. When it is absent (or no node is READY_FOR_DEV) and the higher signals
-// did not fire, the result degrades to `{ source: "none", ready: false }`. The connector
-// still returns the scoped subtree — readiness is advisory provenance, not a gate here.
+// did not fire, the result degrades to `{ source: "none", ready: false }`.
 const DEFAULT_RELEASE_MARKER = "release";
 const READY_FOR_DEV = "READY_FOR_DEV";
+const TOKEN_SPLIT = /[^a-z0-9]+/u;
+const NEGATED_RELEASE_NAME = /\b(?:unreleased|not\s+(?:for\s+)?release|no\s+release|non[-\s]+release)\b/iu;
 const walk = (node, visit) => {
     if (visit(node))
         return true;
@@ -24,10 +25,15 @@ const walk = (node, visit) => {
     return false;
 };
 const findReleaseNamedNode = (root, marker) => {
-    const needle = marker.toLowerCase();
+    const needle = marker.trim().toLowerCase();
+    if (needle.length === 0)
+        return undefined;
     let match;
     walk(root, (node) => {
-        if (node.name.toLowerCase().includes(needle)) {
+        const lowerName = node.name.toLowerCase();
+        const tokens = lowerName.split(TOKEN_SPLIT).filter((token) => token.length > 0);
+        const markerMatched = tokens.includes(needle) || (needle === DEFAULT_RELEASE_MARKER && tokens.includes("released"));
+        if (markerMatched && !NEGATED_RELEASE_NAME.test(lowerName)) {
             match = node;
             return true;
         }

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaRenderPort.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaRenderPort.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaRenderPort.ts"],"names":[],"mappings":"AAkBA,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,iDAAiD,CAAC;AAQzD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAG3B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,kBAAkB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAE5F,oEAAoE;AACpE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAiCD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4BAA4B,GACvC,SAAS,wBAAwB,EACjC,YAAY,OAAO,KAAK,EACxB,UAAU,sBAAsB,KAC/B,eA0BF,CAAC"}
+{"version":3,"file":"figmaRenderPort.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaRenderPort.ts"],"names":[],"mappings":"AAkBA,OAAO,EAEL,KAAK,wBAAwB,EAC9B,MAAM,iDAAiD,CAAC;AAQzD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAG3B,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;CACpD;AAED,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,kBAAkB,KAAK,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAE5F,oEAAoE;AACpE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;CACpC;AAiCD;;;;;;;;;;GAUG;AACH,eAAO,MAAM,4BAA4B,GACvC,SAAS,wBAAwB,EACjC,YAAY,OAAO,KAAK,EACxB,UAAU,sBAAsB,KAC/B,eA2BF,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaRenderPort.js

@@ -73,6 +73,7 @@ export const createDefaultFigmaRenderPort = (egress, fetchImpl, options) => {
                 headers: { ...request.headers },
                 redirect: "manual",
                 signal,
+                maxResponseBytes,
                 ...(egress !== undefined ? { egress } : {}),
                 ...(fetchImpl !== undefined ? { fetchImpl } : {}),
             });

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaScopedPagination.d.ts

@@ -44,6 +44,9 @@ export interface ScopedPaginationLimits {
  * 429 backoff (#759) absorbs occasional rate-limit responses; all of these are deployment-overridable.
  */
 export declare const DEFAULT_SCOPED_PAGINATION_LIMITS: ScopedPaginationLimits;
+/** Hard safety ceilings: operators may tune pagination, but never past these finite bounds. */
+export declare const SCOPED_PAGINATION_LIMIT_CEILINGS: ScopedPaginationLimits;
+export declare const resolveScopedPaginationLimits: (partial?: Partial<ScopedPaginationLimits>) => ScopedPaginationLimits;
 /** Coverage telemetry for one deep snapshot fetch — surfaced in the snapshot summary (never a leak). */
 export interface FigmaScopeCoverage {
     /** Screens discovered structurally under the scoped root. */

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaScopedPagination.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaScopedPagination.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaScopedPagination.ts"],"names":[],"mappings":"AAyBA,qGAAqG;AACrG,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;IAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;mFACmF;AACnF,MAAM,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;AAEtF;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC;;mGAE+F;IAC/F,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,0FAA0F;IAC1F,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,wFAAwF;IACxF,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,+FAA+F;IAC/F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,EAAE,sBAM9C,CAAC;AAEF,wGAAwG;AACxG,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,2FAA2F;IAC3F,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,sDAAsD;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,uFAAuF;IACvF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,4FAA4F;IAC5F,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;CACvC;AA0BD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAAI,MAAM,YAAY,KAAG,SAAS,YAAY,EAY7E,CAAC;AAuJF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GACjC,aAAa,YAAY,EACzB,WAAW,iBAAiB,EAC5B,SAAQ,sBAAyD,KAChE,OAAO,CAAC,eAAe,CAqCzB,CAAC"}
+{"version":3,"file":"figmaScopedPagination.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaScopedPagination.ts"],"names":[],"mappings":"AAyBA,qGAAqG;AACrG,MAAM,WAAW,YAAY;IAC3B,EAAE,CAAC,EAAE,OAAO,CAAC;IACb,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,QAAQ,CAAC,EAAE,YAAY,EAAE,CAAC;IAC1B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED;mFACmF;AACnF,MAAM,MAAM,iBAAiB,GAAG,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,CAAC;AAEtF;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC;;mGAE+F;IAC/F,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,0FAA0F;IAC1F,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,wFAAwF;IACxF,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,+FAA+F;IAC/F,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC;;;;;OAKG;IACH,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,gCAAgC,EAAE,sBAM9C,CAAC;AAEF,+FAA+F;AAC/F,eAAO,MAAM,gCAAgC,EAAE,sBAM9C,CAAC;AAEF,eAAO,MAAM,6BAA6B,GACxC,UAAU,OAAO,CAAC,sBAAsB,CAAC,KACxC,sBAgBF,CAAC;AAEF,wGAAwG;AACxG,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,0EAA0E;IAC1E,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,2FAA2F;IAC3F,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,sDAAsD;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,uFAAuF;IACvF,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,4FAA4F;IAC5F,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;CACvC;AA0CD;;;;;GAKG;AACH,eAAO,MAAM,mBAAmB,GAAI,MAAM,YAAY,KAAG,SAAS,YAAY,EAY7E,CAAC;AA4KF;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,GACjC,aAAa,YAAY,EACzB,WAAW,iBAAiB,EAC5B,SAAQ,sBAAyD,KAChE,OAAO,CAAC,eAAe,CAsCzB,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaScopedPagination.js

@@ -37,6 +37,30 @@ export const DEFAULT_SCOPED_PAGINATION_LIMITS = {
     maxScreensDeep: 80,
     fetchConcurrency: 3,
 };
+/** Hard safety ceilings: operators may tune pagination, but never past these finite bounds. */
+export const SCOPED_PAGINATION_LIMIT_CEILINGS = {
+    pageDepth: 16,
+    maxNodesPerScreen: 50_000,
+    maxFetchesPerScreen: 128,
+    maxScreensDeep: 250,
+    fetchConcurrency: 8,
+};
+export const resolveScopedPaginationLimits = (partial) => {
+    const pick = (key) => {
+        const supplied = partial?.[key];
+        const resolved = supplied !== undefined && Number.isInteger(supplied) && supplied >= 1
+            ? supplied
+            : DEFAULT_SCOPED_PAGINATION_LIMITS[key];
+        return Math.min(resolved, SCOPED_PAGINATION_LIMIT_CEILINGS[key]);
+    };
+    return {
+        pageDepth: pick("pageDepth"),
+        maxNodesPerScreen: pick("maxNodesPerScreen"),
+        maxFetchesPerScreen: pick("maxFetchesPerScreen"),
+        maxScreensDeep: pick("maxScreensDeep"),
+        fetchConcurrency: pick("fetchConcurrency"),
+    };
+};
 const SCREEN_TYPES = new Set(["FRAME", "INSTANCE"]);
 const CONTAINER_TYPES = new Set(["CANVAS", "SECTION"]);
 // Node types whose internals are worth a deeper fetch. Leaves (TEXT, VECTOR, RECTANGLE, …) never
@@ -58,6 +82,23 @@ const countNodes = (node) => {
         total += countNodes(child);
     return total;
 };
+const pruneToNodeBudget = (node, maxNodes) => {
+    let remaining = Math.max(1, maxNodes);
+    const clone = (current) => {
+        if (remaining <= 0)
+            return undefined;
+        remaining -= 1;
+        const children = [];
+        for (const child of childrenOf(current)) {
+            const kept = clone(child);
+            if (kept === undefined)
+                break;
+            children.push(kept);
+        }
+        return { ...current, children };
+    };
+    return clone(node) ?? { ...node, children: [] };
+};
 /**
  * The screen FRAME/INSTANCE nodes under a scoped root, descending only through container groupings
  * (CANVAS/SECTION) — never into a screen's own body, so a nested frame stays part of its screen.
@@ -133,21 +174,32 @@ const createFetchGate = (fetchNode, limit) => {
 // Expand one breadth-first level: fetch the (budget-capped) frontier nodes together through the gate,
 // splice their children back in stable order, and collect the next level. Pure of any cross-screen
 // state — its result depends only on the inputs, so concurrent interleaving cannot change it.
-const expandLevel = async (frontier, gatedFetch, pageDepth, fetchBudget) => {
+const expandLevel = async (frontier, gatedFetch, pageDepth, fetchBudget, nodeBudgetRemaining) => {
     const level = frontier.slice(0, Math.max(0, fetchBudget));
-    const cut = level.length < frontier.length;
+    let cut = level.length < frontier.length;
     const deeps = await Promise.all(level.map((fnode) => gatedFetch(idOf(fnode))));
     const nextFrontier = [];
     let nodesAdded = 0;
+    let remainingNodeBudget = Math.max(0, nodeBudgetRemaining);
     for (let k = 0; k < level.length; k += 1) {
         const frontierNode = level[k];
         const deep = deeps[k];
-        if (frontierNode === undefined || deep === undefined)
+        if (frontierNode === undefined)
+            continue;
+        if (deep === undefined) {
+            cut = true;
             continue;
+        }
         const deepChildren = childrenOf(deep);
         if (deepChildren.length > 0) {
+            const added = countNodes(deep) - 1;
+            if (added > remainingNodeBudget) {
+                cut = true;
+                continue;
+            }
             frontierNode.children = deepChildren;
-            nodesAdded += countNodes(deep) - 1;
+            nodesAdded += added;
+            remainingNodeBudget -= added;
             for (const f of collectFrontier(deep, pageDepth))
                 nextFrontier.push(f);
         }
@@ -161,19 +213,27 @@ const expandLevel = async (frontier, gatedFetch, pageDepth, fetchBudget) => {
 const completeScreen = async (shallow, gatedFetch, limits) => {
     const base = await gatedFetch(idOf(shallow));
     if (base === undefined) {
-        // Could not deepen this screen — keep the shallow content (no crash, no fabrication).
-        return { node: shallow, deepFetched: false, truncated: false, fetchCount: 1 };
+        // Could not deepen this screen — keep the shallow content, but surface partial capture.
+        return { node: shallow, deepFetched: false, truncated: true, fetchCount: 1 };
     }
     let screenNodes = countNodes(base);
     let fetches = 1;
     let truncated = false;
+    if (screenNodes > limits.maxNodesPerScreen) {
+        return {
+            node: pruneToNodeBudget(base, limits.maxNodesPerScreen),
+            deepFetched: true,
+            truncated: true,
+            fetchCount: fetches,
+        };
+    }
     let frontier = collectFrontier(base, limits.pageDepth);
     while (frontier.length > 0) {
         if (screenNodes >= limits.maxNodesPerScreen || fetches >= limits.maxFetchesPerScreen) {
             truncated = true;
             break;
         }
-        const level = await expandLevel(frontier, gatedFetch, limits.pageDepth, limits.maxFetchesPerScreen - fetches);
+        const level = await expandLevel(frontier, gatedFetch, limits.pageDepth, limits.maxFetchesPerScreen - fetches, limits.maxNodesPerScreen - screenNodes);
         fetches += level.fetchesUsed;
         screenNodes += level.nodesAdded;
         if (level.cut) {
@@ -209,12 +269,13 @@ const rebuildWithDeepScreens = (root, deepById) => {
  * unchanged with zero-screen coverage.
  */
 export const paginateScopedDocument = async (shallowRoot, fetchNode, limits = DEFAULT_SCOPED_PAGINATION_LIMITS) => {
+    const resolvedLimits = resolveScopedPaginationLimits(limits);
     const screens = discoverScreenNodes(shallowRoot);
-    const deepable = screens.slice(0, limits.maxScreensDeep);
-    const gatedFetch = createFetchGate(fetchNode, limits.fetchConcurrency);
+    const deepable = screens.slice(0, resolvedLimits.maxScreensDeep);
+    const gatedFetch = createFetchGate(fetchNode, resolvedLimits.fetchConcurrency);
     // All deep-fetchable screens run concurrently; the shared gate bounds total in-flight fetches.
     // Each screen's result depends only on its own budgets, so order-of-completion never changes it.
-    const outcomes = await Promise.all(deepable.map((screen) => completeScreen(screen, gatedFetch, limits)));
+    const outcomes = await Promise.all(deepable.map((screen) => completeScreen(screen, gatedFetch, resolvedLimits)));
     const deepById = new Map();
     let screensDeepFetched = 0;
     let screensTruncated = 0;

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaSnapshotBuilder.d.ts

@@ -15,6 +15,8 @@ export interface BuildFigmaSnapshotInput {
     readonly maxImageBytes?: number;
     /** Max simultaneous byte-downloads — bounds burst on huge boards. */
     readonly downloadConcurrency?: number;
+    /** Max screens rendered into image side-files; excess screens remain structural-only skips. */
+    readonly maxScreensRendered?: number;
     /** Deterministic 429 backoff policy; defaults to {@link DEFAULT_FIGMA_RETRY_POLICY}. */
     readonly retryPolicy?: FigmaRetryPolicy;
     /** Injectable wait seam so tests assert the backoff schedule without real delays. */

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaSnapshotBuilder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaSnapshotBuilder.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaSnapshotBuilder.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAGV,aAAa,EAEd,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAWzF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,wBAAwB,CAAC,cAAc,CAAC;IACrD,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,qEAAqE;IACrE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,wFAAwF;IACxF,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IACxC,qFAAqF;IACrF,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAwLD;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAC7B,OAAO,uBAAuB,KAC7B,OAAO,CAAC,aAAa,CA6BvB,CAAC"}
+{"version":3,"file":"figmaSnapshotBuilder.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaSnapshotBuilder.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAMzB,OAAO,KAAK,EAGV,aAAa,EAEd,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAiBzF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,wBAAwB,CAAC,cAAc,CAAC;IACrD,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,qEAAqE;IACrE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,+FAA+F;IAC/F,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,wFAAwF;IACxF,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IACxC,qFAAqF;IACrF,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAwPD;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAC7B,OAAO,uBAAuB,KAC7B,OAAO,CAAC,aAAa,CA2CvB,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaSnapshotBuilder.js

@@ -14,21 +14,35 @@
 // the render-url download, an error, or a log.
 import { FigmaConnectorError } from "./figmaConnectorErrors.js";
 import { mapWithConcurrency } from "./figmaConcurrency.js";
+import { classifyTokenFailure } from "./figmaTokenSource.js";
 import { DEFAULT_FIGMA_RETRY_POLICY, fetchWithBackoff, realFigmaRetrySleep, } from "./figmaRetry.js";
 import { hashBytes, hashScreen, hashSnapshot } from "./figmaSnapshotHash.js";
+import { DEFAULT_SCOPED_PAGINATION_LIMITS, SCOPED_PAGINATION_LIMIT_CEILINGS, } from "./figmaScopedPagination.js";
 const FIGMA_API_ORIGIN = "https://api.figma.com";
 const SNAPSHOT_SCHEMA_VERSION = 1;
 const DEFAULT_RENDER_BATCH_SIZE = 20;
+const MAX_RENDER_BATCH_SIZE = 100;
 const DEFAULT_MAX_IMAGE_BYTES = 25 * 1024 * 1024;
 const DEFAULT_RENDER_SCALE = 1;
 const DEFAULT_DOWNLOAD_CONCURRENCY = 4;
+// Bounded retries for a TRANSIENT malformed `/v1/images` body (a 2xx without an `images` map). Figma's
+// render endpoint returns this intermittently when overloaded by back-to-back whole-page builds; an
+// isolated retry recovers it. After this many retries the batch degrades to a skip rather than failing
+// the whole build (F8).
+const MAX_RENDER_BODY_RETRIES = 3;
 const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const chunk = (items, size) => {
+    const safeSize = Number.isInteger(size) && size >= 1 ? size : DEFAULT_RENDER_BATCH_SIZE;
     const out = [];
-    for (let i = 0; i < items.length; i += size)
-        out.push(items.slice(i, i + size));
+    for (let i = 0; i < items.length; i += safeSize)
+        out.push(items.slice(i, i + safeSize));
     return out;
 };
+const boundedPositiveInt = (value, fallback, ceiling) => {
+    if (value === undefined || !Number.isInteger(value) || value < 1)
+        return fallback;
+    return Math.min(value, ceiling);
+};
 // Returns true when the hostname is an IP literal or a local/loopback name that must be blocked.
 const isBlockedHostname = (h) => h.length === 0 ||
     /^\d+\.\d+\.\d+\.\d+$/.test(h) ||
@@ -54,12 +68,38 @@ const isRenderUrlSafe = (raw) => {
     const h = url.hostname.toLowerCase().replace(/\.$/, "");
     if (isBlockedHostname(h))
         return false;
+    if (!isAllowedFigmaRenderUrl(url, h))
+        return false;
     // Only allow the default HTTPS port (443 or implicit) — non-standard ports indicate an
     // internal service, not a CDN. url.port is "" when the port is the scheme default.
     if (url.port !== "" && url.port !== "443")
         return false;
     return true;
 };
+const isAllowedFigmaRenderUrl = (url, host) => {
+    if (host === "s3-alpha-sig.figma.com")
+        return true;
+    if (host === "cdn.figma.com" || host === "static.figma.com")
+        return true;
+    if (host.endsWith(".figma.com"))
+        return true;
+    // Multi-region S3 bucket allowlist: accepts any globally-unique bucket whose NAME starts with
+    // "figma" (e.g. figma-prod.s3.eu-west-1.amazonaws.com). The residual risk is that an attacker
+    // who can create an S3 bucket named figma-anything could serve a crafted render response. In
+    // practice the risk is low: (a) render URLs are returned by the authenticated Figma API over
+    // TLS, so a MITM or API compromise is a prerequisite; (b) the URLs are short-lived/pre-signed
+    // and carry no Figma auth header (the token is injected only into the /v1/images API call);
+    // (c) the byte-cap + oversized-skip guard limits the blast radius of a poisoned response.
+    // Tightening to a fixed bucket list would break legitimate Figma render fronts that span many
+    // regions; revisit if Figma publishes an authoritative set of render origins.
+    if (/^figma[-a-z0-9]*\.s3[.-][a-z0-9-]+\.amazonaws\.com$/u.test(host))
+        return true;
+    if ((host === "s3-us-west-2.amazonaws.com" || host === "s3.us-west-2.amazonaws.com") &&
+        /^\/figma[-_/a-z0-9]*/iu.test(url.pathname)) {
+        return true;
+    }
+    return false;
+};
 const buildImagesUrl = (fileKey, ids, version) => {
     const url = new URL(`${FIGMA_API_ORIGIN}/v1/images/${encodeURIComponent(fileKey)}`);
     url.searchParams.set("ids", ids.join(","));
@@ -69,39 +109,56 @@ const buildImagesUrl = (fileKey, ids, version) => {
         url.searchParams.set("version", version);
     return url.toString();
 };
-const statusToError = (status) => {
-    if (status === 404)
-        return new FigmaConnectorError("FIGMA_NOT_FOUND");
-    if (status === 401 || status === 403)
-        return new FigmaConnectorError("FIGMA_INSUFFICIENT_SCOPE");
-    if (status >= 500)
-        return new FigmaConnectorError("FIGMA_UPSTREAM_UNAVAILABLE");
-    return new FigmaConnectorError("FIGMA_INTERNAL");
+const extractFigmaReason = (body) => {
+    if (!isRecord(body))
+        return undefined;
+    const reason = body.err ?? body.message;
+    return typeof reason === "string" ? reason : undefined;
 };
-// Extracts the `{ images: { id: url|null } }` map from one `/v1/images` response.
+const statusToError = (status, body) => classifyTokenFailure(status, extractFigmaReason(body));
+// Extracts the `{ images: { id: url|null } }` map from one `/v1/images` response, or `null` when the
+// body is a non-standard 2xx WITHOUT an `images` map. Figma's render endpoint returns such a body
+// intermittently when it is overloaded by back-to-back whole-page builds (#750 F8 — observed live).
+// `null` is a TRANSIENT, retriable signal — the caller retries the batch, then degrades the affected
+// screens to a skip (coverage notice) if it persists, rather than failing the whole build.
 const extractImageUrls = (json) => {
     if (!isRecord(json) || !isRecord(json.images))
-        throw new FigmaConnectorError("FIGMA_INTERNAL");
+        return null;
     const out = {};
     for (const [id, value] of Object.entries(json.images)) {
         out[id] = typeof value === "string" && value.length > 0 ? value : null;
     }
     return out;
 };
+// Resolve one `/v1/images` batch to its ephemeral-url map. The fetch is wrapped in the deterministic
+// 429 backoff; a non-2xx is a hard coded error (auth/scope/upstream); a 2xx with a malformed body is a
+// transient render-overload signal that is retried up to MAX_RENDER_BODY_RETRIES, then degrades to an
+// empty map so the affected screens skip (render-url-missing) instead of aborting the build (F8).
+const resolveRenderBatch = async (input, batch, policy, sleep) => {
+    const requestUrl = buildImagesUrl(input.provenance.fileKey, batch, input.provenance.version);
+    for (let attempt = 0;; attempt += 1) {
+        const response = await fetchWithBackoff(() => input.imagesPort({ url: requestUrl, headers: { "X-Figma-Token": input.token } }), policy, sleep);
+        if (response.status < 200 || response.status >= 300) {
+            throw statusToError(response.status, response.json);
+        }
+        const map = extractImageUrls(response.json);
+        if (map !== null)
+            return map;
+        if (attempt >= MAX_RENDER_BODY_RETRIES)
+            return {};
+        await sleep(Math.min(policy.baseDelayMs * 2 ** attempt, policy.maxDelayMs));
+    }
+};
 // Calls `/v1/images` in bounded batches and merges the ephemeral-url map. The token authenticates
-// each batch via the header only. Each batch call is wrapped in deterministic 429 backoff so a
-// rate-limited huge-board render retries within Figma's limits instead of failing.
+// each batch via the header only. Each batch is 429-backoff retried AND malformed-body retried
+// (resolveRenderBatch), so a rate-limited or transiently-overloaded huge-board render survives.
 const requestRenderUrls = async (input, screenIds) => {
-    const batchSize = input.batchSize ?? DEFAULT_RENDER_BATCH_SIZE;
     const policy = input.retryPolicy ?? DEFAULT_FIGMA_RETRY_POLICY;
     const sleep = input.sleep ?? realFigmaRetrySleep;
+    const batchSize = boundedPositiveInt(input.batchSize, DEFAULT_RENDER_BATCH_SIZE, MAX_RENDER_BATCH_SIZE);
     const urls = new Map();
     for (const batch of chunk(screenIds, batchSize)) {
-        const requestUrl = buildImagesUrl(input.provenance.fileKey, batch, input.provenance.version);
-        const response = await fetchWithBackoff(() => input.imagesPort({ url: requestUrl, headers: { "X-Figma-Token": input.token } }), policy, sleep);
-        if (response.status < 200 || response.status >= 300)
-            throw statusToError(response.status);
-        const map = extractImageUrls(response.json);
+        const map = await resolveRenderBatch(input, batch, policy, sleep);
         for (const id of batch)
             urls.set(id, map[id] ?? null);
     }
@@ -188,12 +245,15 @@ const resolveScreen = async (input, ir, renderUrl) => {
  * `skippedScreens` entry (partial render); a non-2xx `/v1/images` call is a hard coded error.
  */
 export const buildFigmaSnapshot = async (input) => {
-    const screenIds = input.ir.screens.map((screen) => screen.id);
+    const maxScreensRendered = boundedPositiveInt(input.maxScreensRendered, DEFAULT_SCOPED_PAGINATION_LIMITS.maxScreensDeep, SCOPED_PAGINATION_LIMIT_CEILINGS.maxScreensDeep);
+    const renderableScreens = input.ir.screens.slice(0, maxScreensRendered);
+    const cappedScreens = input.ir.screens.slice(maxScreensRendered);
+    const screenIds = renderableScreens.map((screen) => screen.id);
     const renderUrls = screenIds.length === 0
         ? new Map()
         : await requestRenderUrls(input, screenIds);
-    const concurrency = input.downloadConcurrency ?? DEFAULT_DOWNLOAD_CONCURRENCY;
-    const outcomes = await mapWithConcurrency(input.ir.screens, concurrency, (ir) => resolveScreen(input, ir, renderUrls.get(ir.id) ?? null));
+    const concurrency = boundedPositiveInt(input.downloadConcurrency, DEFAULT_DOWNLOAD_CONCURRENCY, Number.MAX_SAFE_INTEGER);
+    const outcomes = await mapWithConcurrency(renderableScreens, concurrency, (ir) => resolveScreen(input, ir, renderUrls.get(ir.id) ?? null));
     const screens = [];
     const skippedScreens = [];
     for (const outcome of outcomes) {
@@ -202,6 +262,9 @@ export const buildFigmaSnapshot = async (input) => {
         if (outcome.skipped !== undefined)
             skippedScreens.push(outcome.skipped);
     }
+    for (const ir of cappedScreens) {
+        skippedScreens.push({ screenId: ir.id, reason: "render-screen-cap-exceeded" });
+    }
     return {
         snapshotSchemaVersion: SNAPSHOT_SCHEMA_VERSION,
         provenance: input.provenance,

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaSnapshotTypes.d.ts

@@ -21,7 +21,7 @@ export interface FigmaSnapshotScreen {
  * threw a FigmaConnectorError — the code suffix lets metrics distinguish an egress
  * misconfiguration (e.g. `FIGMA_EGRESS_TIMEOUT`) from an unclassified network flake.
  */
-export type FigmaSkippedScreenReason = "render-url-missing" | "render-url-blocked" | "render-fetch-failed" | `render-fetch-failed:${string}` | "render-empty" | "render-oversized";
+export type FigmaSkippedScreenReason = "render-url-missing" | "render-url-blocked" | "render-screen-cap-exceeded" | "render-fetch-failed" | `render-fetch-failed:${string}` | "render-empty" | "render-oversized";
 export interface FigmaSkippedScreen {
     readonly screenId: string;
     readonly reason: FigmaSkippedScreenReason;

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaSnapshotTypes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaSnapshotTypes.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaSnapshotTypes.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,KAAK,QAAQ,GAAG,wBAAwB,CAAC,QAAQ,CAAC;AAElD,+FAA+F;AAC/F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,+DAA+D;AAC/D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,kGAAkG;IAClG,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAChC,oBAAoB,GACpB,oBAAoB,GACpB,qBAAqB,GACrB,uBAAuB,MAAM,EAAE,GAC/B,cAAc,GACd,kBAAkB,CAAC;AAEvB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD,QAAQ,CAAC,cAAc,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvD;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,wBAAwB,CAAC,eAAe,EAAE,CAAC;IACrE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC"}
+{"version":3,"file":"figmaSnapshotTypes.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaSnapshotTypes.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,KAAK,QAAQ,GAAG,wBAAwB,CAAC,QAAQ,CAAC;AAElD,+FAA+F;AAC/F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,+DAA+D;AAC/D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,kGAAkG;IAClG,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAChC,oBAAoB,GACpB,oBAAoB,GACpB,4BAA4B,GAC5B,qBAAqB,GACrB,uBAAuB,MAAM,EAAE,GAC/B,cAAc,GACd,kBAAkB,CAAC;AAEvB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD,QAAQ,CAAC,cAAc,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvD;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,wBAAwB,CAAC,eAAe,EAAE,CAAC;IACrE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaTokenSource.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaTokenSource.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaTokenSource.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,mBAAmB,EAAgC,MAAM,2BAA2B,CAAC;AAE9F,MAAM,WAAW,iBAAiB;IAGhC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAUD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAIpE;AA4BD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAGzF"}
+{"version":3,"file":"figmaTokenSource.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaTokenSource.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,mBAAmB,EAAgC,MAAM,2BAA2B,CAAC;AAE9F,MAAM,WAAW,iBAAiB;IAGhC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAUD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAIpE;AA6BD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAGzF"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaTokenSource.js

@@ -46,9 +46,10 @@ function codeForStatus(status, reason) {
         return classifyForbidden(reason);
     if (status === 404)
         return "FIGMA_NOT_FOUND";
-    // Forward-proxy egress failures (#802): 407 proxy-auth, 502/504 gateway. A plain 503 is the
-    // upstream Figma service being unavailable, not a proxy fault — it stays UPSTREAM below.
-    if (status === 407 || status === 502 || status === 504)
+    // Forward-proxy auth is visible as 407. Other proxy failures arrive as OutboundHttpEgressError
+    // before this status classifier runs; raw upstream 502/504 responses must not be blamed on proxy
+    // egress because that sends operators to the wrong remediation path.
+    if (status === 407)
         return "FIGMA_PROXY_EGRESS_FAILED";
     if (status >= 500)
         return "FIGMA_UPSTREAM_UNAVAILABLE";

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaUrl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaUrl.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaUrl.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAeD,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,KAAG,WAAW,GAAG,IAc9D,CAAC"}
+{"version":3,"file":"figmaUrl.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaUrl.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAeD,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,KAAG,WAAW,GAAG,IAe9D,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaUrl.js

@@ -19,6 +19,8 @@ export const parseFigmaTarget = (value) => {
     const url = parseUrl(value.trim());
     if (url === null)
         return null;
+    if (url.protocol !== "https:")
+        return null;
     if (!ACCEPTED_HOSTS.includes(url.hostname))
         return null;
     const segments = url.pathname.split("/").filter((part) => part.length > 0);

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/index.d.ts

@@ -5,7 +5,7 @@ export { buildFigmaSnapshot, type BuildFigmaSnapshotInput } from "./figmaSnapsho
 export { resnapshotFigma, type FigmaCleanToIr, type ResnapshotFigmaDeps, } from "./figmaResnapshot.js";
 export { fetchWithBackoff, realFigmaRetrySleep, DEFAULT_FIGMA_RETRY_POLICY, type FigmaBackoffResponse, type FigmaRetryPolicy, type FigmaRetrySleep, } from "./figmaRetry.js";
 export { mapWithConcurrency } from "./figmaConcurrency.js";
-export { paginateScopedDocument, discoverScreenNodes, DEFAULT_SCOPED_PAGINATION_LIMITS, type FigmaScopeCoverage, type RawFigmaNode, type ScopedNodeFetcher, type ScopedPaginationLimits, } from "./figmaScopedPagination.js";
+export { paginateScopedDocument, discoverScreenNodes, DEFAULT_SCOPED_PAGINATION_LIMITS, SCOPED_PAGINATION_LIMIT_CEILINGS, resolveScopedPaginationLimits, type FigmaScopeCoverage, type RawFigmaNode, type ScopedNodeFetcher, type ScopedPaginationLimits, } from "./figmaScopedPagination.js";
 export type { FigmaRenderedImage, FigmaSkippedScreen, FigmaSkippedScreenReason, FigmaSnapshot, FigmaSnapshotScreen, } from "./figmaSnapshotTypes.js";
 export { FigmaConnectorError, figmaConnectorErrorBody, type FigmaConnectorErrorBody, type FigmaConnectorErrorCode, } from "./figmaConnectorErrors.js";
 export { parseFigmaTarget, type FigmaTarget } from "./figmaUrl.js";

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,0BAA0B,EAC1B,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,4BAA4B,EAC5B,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EACL,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,gCAAgC,EAChC,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACxB,aAAa,EACb,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EACL,gBAAgB,EAChB,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,KAAK,8BAA8B,EACnC,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,GAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,4BAA4B,EAC5B,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,0BAA0B,EAC1B,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,4BAA4B,EAC5B,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EACL,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,gCAAgC,EAChC,gCAAgC,EAChC,6BAA6B,EAC7B,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACxB,aAAa,EACb,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EACL,gBAAgB,EAChB,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,KAAK,8BAA8B,EACnC,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,GAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,4BAA4B,EAC5B,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,2BAA2B,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/index.js

@@ -13,7 +13,7 @@ export { buildFigmaSnapshot } from "./figmaSnapshotBuilder.js";
 export { resnapshotFigma, } from "./figmaResnapshot.js";
 export { fetchWithBackoff, realFigmaRetrySleep, DEFAULT_FIGMA_RETRY_POLICY, } from "./figmaRetry.js";
 export { mapWithConcurrency } from "./figmaConcurrency.js";
-export { paginateScopedDocument, discoverScreenNodes, DEFAULT_SCOPED_PAGINATION_LIMITS, } from "./figmaScopedPagination.js";
+export { paginateScopedDocument, discoverScreenNodes, DEFAULT_SCOPED_PAGINATION_LIMITS, SCOPED_PAGINATION_LIMIT_CEILINGS, resolveScopedPaginationLimits, } from "./figmaScopedPagination.js";
 export { FigmaConnectorError, figmaConnectorErrorBody, } from "./figmaConnectorErrors.js";
 export { parseFigmaTarget } from "./figmaUrl.js";
 export { resolveReadiness, } from "./figmaReadiness.js";

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figmaCodegenRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaCodegenRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/figmaCodegenRoutes.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAShD,QAAA,MAAM,4BAA4B,EAAG,CAAU,CAAC;AAEhD,sGAAsG;AACtG,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,yBAAyB,EAAE,OAAO,4BAA4B,CAAC;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjF;AAED,kGAAkG;AAClG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjF;AA2FD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAsC3F"}
+{"version":3,"file":"figmaCodegenRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/figmaCodegenRoutes.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAShD,QAAA,MAAM,4BAA4B,EAAG,CAAU,CAAC;AAMhD,sGAAsG;AACtG,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,yBAAyB,EAAE,OAAO,4BAA4B,CAAC;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjF;AAED,kGAAkG;AAClG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjF;AA+GD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAkD3F"}