@oscharko-dev/keiko 0.2.0-beta.4 → 0.2.0-beta.6

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/retentionRoutes.d.ts

@@ -0,0 +1,5 @@
+import type { RouteContext, RouteResult, RouteDefinition } from "../routes.js";
+import type { UiHandlerDeps } from "../deps.js";
+export declare function handleQiDeleteRun(ctx: RouteContext, deps: UiHandlerDeps): RouteResult;
+export declare const QI_RETENTION_ROUTE_GROUP: readonly RouteDefinition[];
+//# sourceMappingURL=retentionRoutes.d.ts.map

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/retentionRoutes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retentionRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/retentionRoutes.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAyBhD,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CA+BrF;AAED,eAAO,MAAM,wBAAwB,EAAE,SAAS,eAAe,EAE9D,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/retentionRoutes.js

@@ -0,0 +1,70 @@
+// Quality Intelligence run-deletion BFF route (Epic #270, Issue #282 follow-up; ADR-0023 D8).
+//
+//   * DELETE /api/quality-intelligence/runs/:id — delete a run and ALL its local companions
+//
+// ADR-0023 (lines ~487-492) assigns the deletion-control wiring to the consuming epic: a UI/BFF
+// delete action -> `deleteQualityIntelligenceRun` (the hardened keiko-evidence primitive) passing
+// the SERVER-owned `companionSuffixes`. This route is that wiring. It passes EVERY server-owned
+// companion so a deleted run leaves no orphaned customer-derived content (Stop-Condition b:
+// lifecycle must not bypass retention semantics): `.review.json` (reviewer labels + the append-only
+// review audit log, Issue #282), the three figma connector companions, the figma snapshot record,
+// and the figma snapshot side-file directory. `.candidates.json` is evidence-owned and always swept
+// by the primitive. CSRF is enforced by the dispatch layer for mutating methods.
+import { join } from "node:path";
+import { deleteQualityIntelligenceRun, loadQualityIntelligenceRun, } from "@oscharko-dev/keiko-evidence";
+// Companion artifacts written alongside the run manifest under `qi/` that are owned by HIGHER layers
+// (keiko-server), not by keiko-evidence. The primitive ALWAYS sweeps the evidence-owned
+// `.candidates.json`; these must be passed explicitly or a deleted run orphans them. Kept in one
+// place so a new server-owned companion is added here rather than rediscovered per call site.
+const SERVER_OWNED_COMPANION_SUFFIXES = [
+    ".review.json", // Issue #282 — reviewer labels + append-only review audit log
+    ".figma-codegen.json", // Epic #750 — figma code-generation companion
+    ".figma-audit.json", // Epic #750 — figma connector audit companion
+    ".figma-consent.json", // Epic #750 — figma consent companion
+    ".figma-snapshot.json", // Epic #750 — figma snapshot record
+];
+// The QI evidence sub-directory and the figma snapshot side-file sub-directory, mirrored from
+// keiko-evidence (`QI_SUBDIR` / `SIDE_FILE_SUBDIR`). `sideFileRoot` lets the primitive remove
+// `<evidenceDir>/qi/figma-snapshots/<runId>/` (binary snapshot side-files) alongside the manifest.
+const QI_SUBDIR = "qi";
+const QI_SNAPSHOT_SIDE_FILE_SUBDIR = "figma-snapshots";
+const errorResult = (status, code, message) => ({
+    status,
+    body: { error: { code, message } },
+});
+export function handleQiDeleteRun(ctx, deps) {
+    const { id } = ctx.params;
+    if (id === undefined || id.trim().length === 0) {
+        return errorResult(400, "QI_BAD_REQUEST", "Run id is required.");
+    }
+    const evidenceDir = deps.evidenceDir;
+    if (evidenceDir === undefined) {
+        return errorResult(500, "QI_NO_EVIDENCE_DIR", "The evidence directory is not configured.");
+    }
+    try {
+        // Not-found is an explicit 404 (the primitive itself is idempotent and would report "absent",
+        // but the BFF gives the caller a clear signal that nothing was there to delete).
+        if (loadQualityIntelligenceRun(id, { evidenceDir }) === undefined) {
+            return errorResult(404, "QI_NOT_FOUND", "Quality Intelligence run not found.");
+        }
+        const receipt = deleteQualityIntelligenceRun(id, {
+            evidenceDir,
+            companionSuffixes: SERVER_OWNED_COMPANION_SUFFIXES,
+            sideFileRoot: join(evidenceDir, QI_SUBDIR, QI_SNAPSHOT_SIDE_FILE_SUBDIR),
+        });
+        return {
+            status: 200,
+            body: {
+                runId: receipt.runId,
+                status: receipt.status,
+                removedCompanionSuffixes: receipt.removedCompanionSuffixes,
+            },
+        };
+    }
+    catch {
+        return errorResult(500, "QI_DELETE_FAILED", "Failed to delete the Quality Intelligence run.");
+    }
+}
+export const QI_RETENTION_ROUTE_GROUP = [
+    { method: "DELETE", pattern: "/api/quality-intelligence/runs/:id", handler: handleQiDeleteRun },
+];

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/reviewRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reviewRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/reviewRoutes.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAsGhD,wBAAsB,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CAoCjG;AAED,eAAO,MAAM,qBAAqB,EAAE,SAAS,eAAe,EAE3D,CAAC"}
+{"version":3,"file":"reviewRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/reviewRoutes.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAC/E,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAgHhD,wBAAsB,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,OAAO,CAAC,WAAW,CAAC,CA4CjG;AAED,eAAO,MAAM,qBAAqB,EAAE,SAAS,eAAe,EAE3D,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/reviewRoutes.js

@@ -6,7 +6,8 @@
 // withdraw) to a run or a single candidate, persisting it to the review companion artifact. Nothing
 // is approved by default; a decision is required to flip state. The route never echoes raw content.
 import { loadQualityIntelligenceRun } from "@oscharko-dev/keiko-evidence";
-import { applyReviewDecision } from "./reviewStore.js";
+import { normaliseCandidateText } from "@oscharko-dev/keiko-quality-intelligence";
+import { applyReviewDecision, QualityIntelligenceReviewTransitionRejected, } from "./reviewStore.js";
 const MAX_BODY_BYTES = 16 * 1024;
 const ACTIONS = new Set([
     "approve",
@@ -15,20 +16,28 @@ const ACTIONS = new Set([
     "reopen",
     "withdraw",
 ]);
+class BodyTooLargeError extends Error {
+}
 const readBody = (req) => new Promise((resolve, reject) => {
     const chunks = [];
     let total = 0;
+    let capped = false;
     req.on("data", (chunk) => {
         total += chunk.length;
         if (total > MAX_BODY_BYTES) {
-            reject(new Error("body too large"));
-            req.resume();
+            if (!capped) {
+                capped = true;
+                chunks.length = 0;
+                reject(new BodyTooLargeError());
+                req.resume();
+            }
             return;
         }
         chunks.push(chunk);
     });
     req.on("end", () => {
-        resolve(Buffer.concat(chunks).toString("utf8"));
+        if (!capped)
+            resolve(Buffer.concat(chunks).toString("utf8"));
     });
     req.on("error", reject);
 });
@@ -43,9 +52,8 @@ function parseDecision(body) {
         return undefined;
     const candidateId = typeof body.candidateId === "string" ? body.candidateId : undefined;
     const scope = candidateId !== undefined ? "candidate" : "run";
-    const reviewerLabel = typeof body.reviewerLabel === "string" && body.reviewerLabel.trim().length > 0
-        ? body.reviewerLabel.trim().slice(0, 80)
-        : "reviewer";
+    const rawLabel = typeof body.reviewerLabel === "string" ? normaliseCandidateText(body.reviewerLabel) : "";
+    const reviewerLabel = rawLabel.length > 0 ? rawLabel.slice(0, 80) : "reviewer";
     return {
         action: action,
         scope,
@@ -113,6 +121,7 @@ export async function handleQiReview(ctx, deps) {
             scope: decision.scope,
             reviewerLabel: decision.reviewerLabel,
             now: new Date().toISOString(),
+            redact: deps.redactor,
             ...(decision.candidateId ? { candidateId: decision.candidateId } : {}),
         });
         return {
@@ -124,7 +133,10 @@ export async function handleQiReview(ctx, deps) {
             },
         };
     }
-    catch {
+    catch (error) {
+        if (error instanceof QualityIntelligenceReviewTransitionRejected) {
+            return errorResult(409, "QI_REVIEW_TRANSITION_NOT_ALLOWED", `Review transition not permitted: cannot ${error.action} a run/candidate in state "${error.from}".`);
+        }
         return errorResult(500, "QI_REVIEW_FAILED", "Failed to record the review decision.");
     }
 }

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/reviewStore.d.ts

@@ -1,5 +1,7 @@
 import { type QualityIntelligence as QI } from "@oscharko-dev/keiko-contracts";
 type ReviewState = QI.QualityIntelligenceReviewState;
+/** Redacts a payload leaf before it is persisted; `deepRedactStrings` preserves string→string. */
+export type ReviewRedactor = (value: unknown) => unknown;
 export declare const QI_REVIEW_SCHEMA_VERSION: 1;
 export type QiReviewAction = "approve" | "reject" | "request-changes" | "reopen" | "withdraw";
 export type QiAuditAction = QiReviewAction | "edit";
@@ -23,6 +25,17 @@ export interface QiReviewStateArtifact {
 export declare const loadRunReviewState: (runId: string, evidenceDir: string) => QiReviewStateArtifact | undefined;
 export declare const runReviewStateOf: (artifact: QiReviewStateArtifact | undefined) => ReviewState;
 export declare const candidateReviewStateOf: (artifact: QiReviewStateArtifact | undefined, candidateId: string) => ReviewState;
+/**
+ * Thrown by `applyReviewDecision` when the requested action is not a legal transition from the
+ * current review state. Nothing is persisted and no audit entry is appended — the append-only log
+ * never attests a transition the audited domain declares illegal. The route maps this to a 409.
+ */
+export declare class QualityIntelligenceReviewTransitionRejected extends Error {
+    readonly from: ReviewState;
+    readonly action: QiReviewAction;
+    readonly toState: ReviewState;
+    constructor(from: ReviewState, action: QiReviewAction, toState: ReviewState);
+}
 export interface ApplyReviewDecisionInput {
     readonly runId: string;
     readonly evidenceDir: string;
@@ -31,10 +44,15 @@ export interface ApplyReviewDecisionInput {
     readonly candidateId?: string;
     readonly reviewerLabel: string;
     readonly now: string;
+    /** Redacts the reviewer label before it lands in the persisted audit log (Issue #282 FIX M1). */
+    readonly redact: ReviewRedactor;
 }
 /**
- * Apply a review decision and persist the updated artifact. Pure transition + append-only audit
- * entry; returns the new artifact. The caller is responsible for authorising the action.
+ * Apply a review decision and persist the updated artifact. Validates transition legality first
+ * (FIX A): an illegal transition throws `QualityIntelligenceReviewTransitionRejected` and persists
+ * nothing — no audit entry is ever appended for a rejected transition. On success, appends an
+ * append-only audit entry (with a redacted reviewer label, FIX M1) and returns the new artifact.
+ * The caller is responsible for authorising the action.
  */
 export declare const applyReviewDecision: (input: ApplyReviewDecisionInput) => QiReviewStateArtifact;
 export interface AppendEditAuditInput {
@@ -43,11 +61,14 @@ export interface AppendEditAuditInput {
     readonly candidateId: string;
     readonly reviewerLabel: string;
     readonly now: string;
+    /** Redacts the reviewer label before it lands in the persisted audit log (Issue #282 FIX M1). */
+    readonly redact: ReviewRedactor;
 }
 /**
  * Append an append-only `edit` audit entry for an inline candidate edit. Review state is NOT
- * transitioned — `fromState`/`toState` are the candidate's existing review state. Persists and
- * returns the updated review artifact (created empty on first use).
+ * transitioned — `fromState`/`toState` are the candidate's existing review state. The reviewer label
+ * is redacted before persist (FIX M1). Persists and returns the updated review artifact (created
+ * empty on first use).
  */
 export declare const appendEditAudit: (input: AppendEditAuditInput) => QiReviewStateArtifact;
 export {};

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/reviewStore.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"reviewStore.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/reviewStore.ts"],"names":[],"mappings":"AAYA,OAAO,EAAuB,KAAK,mBAAmB,IAAI,EAAE,EAAE,MAAM,+BAA+B,CAAC;AAEpG,KAAK,WAAW,GAAG,EAAE,CAAC,8BAA8B,CAAC;AAErD,eAAO,MAAM,wBAAwB,EAAG,CAAU,CAAC;AAOnD,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,QAAQ,GAAG,iBAAiB,GAAG,QAAQ,GAAG,UAAU,CAAC;AAK9F,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,WAAW,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,qBAAqB,EAAE,OAAO,wBAAwB,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACjD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAkBD,eAAO,MAAM,kBAAkB,GAC7B,OAAO,MAAM,EACb,aAAa,MAAM,KAClB,qBAAqB,GAAG,SAA8C,CAAC;AAE1E,eAAO,MAAM,gBAAgB,GAAI,UAAU,qBAAqB,GAAG,SAAS,KAAG,WACjD,CAAC;AAE/B,eAAO,MAAM,sBAAsB,GACjC,UAAU,qBAAqB,GAAG,SAAS,EAC3C,aAAa,MAAM,KAClB,WAGF,CAAC;AAYF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,WAAW,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAWD;;;GAGG;AACH,eAAO,MAAM,mBAAmB,GAAI,OAAO,wBAAwB,KAAG,qBA8BrE,CAAC;AAIF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,oBAAoB,KAAG,qBAoB7D,CAAC"}
+{"version":3,"file":"reviewStore.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/reviewStore.ts"],"names":[],"mappings":"AAYA,OAAO,EAAuB,KAAK,mBAAmB,IAAI,EAAE,EAAE,MAAM,+BAA+B,CAAC;AAGpG,KAAK,WAAW,GAAG,EAAE,CAAC,8BAA8B,CAAC;AAErD,kGAAkG;AAClG,MAAM,MAAM,cAAc,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,OAAO,CAAC;AAazD,eAAO,MAAM,wBAAwB,EAAG,CAAU,CAAC;AAOnD,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,QAAQ,GAAG,iBAAiB,GAAG,QAAQ,GAAG,UAAU,CAAC;AAK9F,MAAM,MAAM,aAAa,GAAG,cAAc,GAAG,MAAM,CAAC;AAEpD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,WAAW,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,WAAW,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;CAC/B;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,qBAAqB,EAAE,OAAO,wBAAwB,CAAC;IAChE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,QAAQ,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACjD,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAmCD,eAAO,MAAM,kBAAkB,GAC7B,OAAO,MAAM,EACb,aAAa,MAAM,KAClB,qBAAqB,GAAG,SAA8C,CAAC;AAE1E,eAAO,MAAM,gBAAgB,GAAI,UAAU,qBAAqB,GAAG,SAAS,KAAG,WACjD,CAAC;AAE/B,eAAO,MAAM,sBAAsB,GACjC,UAAU,qBAAqB,GAAG,SAAS,EAC3C,aAAa,MAAM,KAClB,WAGF,CAAC;AA2BF;;;;GAIG;AACH,qBAAa,2CAA4C,SAAQ,KAAK;IACpE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;gBAElB,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,EAAE,OAAO,EAAE,WAAW;CAO5E;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,KAAK,GAAG,WAAW,CAAC;IACpC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;CACjC;AAWD;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,GAAI,OAAO,wBAAwB,KAAG,qBAiCrE,CAAC;AAIF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,iGAAiG;IACjG,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;CACjC;AAED;;;;;GAKG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,oBAAoB,KAAG,qBAoB7D,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/reviewStore.js

@@ -7,10 +7,31 @@
 // nothing is approved by default (#282 AC). All reads tolerate a missing artifact.
 import { createNodeContainedJsonArtifactStore, } from "@oscharko-dev/keiko-evidence";
 import { QualityIntelligence } from "@oscharko-dev/keiko-contracts";
+import { QualityIntelligenceReview } from "@oscharko-dev/keiko-quality-intelligence";
+/**
+ * Redact a reviewer label before it lands in the persisted (append-only) audit log. The label is
+ * user-supplied, so a secret-shaped value must be scrubbed at persist time — the `.review.json`
+ * companion otherwise bypasses the QI persist redactor (Issue #282 FIX M1). The live redactor maps
+ * string→string; the non-string fallback keeps the type honest without `any`.
+ */
+const redactLabel = (label, redact) => {
+    const redacted = redact(label);
+    return typeof redacted === "string" ? redacted : label;
+};
 export const QI_REVIEW_SCHEMA_VERSION = 1;
 const REVIEW_SUFFIX = ".review.json";
 const REVIEW_STATES = new Set(QualityIntelligence.QUALITY_INTELLIGENCE_REVIEW_STATES);
 const isReviewState = (value) => typeof value === "string" && REVIEW_STATES.has(value);
+// FIX L1 (Issue #282) — candidate ids are arbitrary strings. Building the candidate-state map over a
+// null-prototype object means a candidate literally named `__proto__` / `constructor` cannot collide
+// with an Object.prototype member (no prototype-pollution, no spurious own-key reads). Behaviour is
+// identical for normal ids.
+const toNullProtoStates = (source) => {
+    const target = Object.create(null);
+    for (const [id, state] of Object.entries(source))
+        target[id] = state;
+    return target;
+};
 const parseArtifact = (value) => {
     if (typeof value !== "object" || value === null)
         return undefined;
@@ -21,7 +42,10 @@ const parseArtifact = (value) => {
         return undefined;
     if (typeof record.candidateStates !== "object" || record.candidateStates === null)
         return undefined;
-    return value;
+    // Rehydrate candidateStates onto a null-proto object so a persisted `__proto__`/`constructor`
+    // candidate id round-trips as an own key rather than the prototype member it was parsed into.
+    const candidateStates = toNullProtoStates(record.candidateStates);
+    return { ...value, candidateStates };
 };
 const storeFor = (evidenceDir) => createNodeContainedJsonArtifactStore(evidenceDir, REVIEW_SUFFIX, { parse: parseArtifact });
 export const loadRunReviewState = (runId, evidenceDir) => storeFor(evidenceDir).load(runId);
@@ -38,17 +62,52 @@ const ACTION_TARGET = {
     reopen: "open",
     withdraw: "withdrawn",
 };
+// FIX A (Issue #282) — legal-transition predicate, resurrecting the audited pure terminal-state
+// check from keiko-quality-intelligence. A transition from `from` via `action` (target `to`) is
+// legal iff:
+//   * to !== from           (reject every no-op, including reopen-from-open), AND
+//   * action === "reopen" OR the source state is not terminal.
+// reopen is the deliberate, audited undo from any non-open state (changes-requested / approved /
+// rejected / withdrawn → open). Every other action (approve / reject / request-changes / withdraw)
+// is legal only from a non-terminal state — this blocks silent illegal flips (approve a rejected,
+// reject an approved) while keeping re-decision possible via an explicit reopen.
+const isLegalTransition = (from, action) => {
+    const to = ACTION_TARGET[action];
+    if (to === from)
+        return false;
+    return action === "reopen" || !QualityIntelligenceReview.isTerminalReviewState(from);
+};
+/**
+ * Thrown by `applyReviewDecision` when the requested action is not a legal transition from the
+ * current review state. Nothing is persisted and no audit entry is appended — the append-only log
+ * never attests a transition the audited domain declares illegal. The route maps this to a 409.
+ */
+export class QualityIntelligenceReviewTransitionRejected extends Error {
+    from;
+    action;
+    toState;
+    constructor(from, action, toState) {
+        super(`Review transition ${from} → ${action} (${toState}) is not permitted.`);
+        this.name = "QualityIntelligenceReviewTransitionRejected";
+        this.from = from;
+        this.action = action;
+        this.toState = toState;
+    }
+}
 const emptyArtifact = (runId, now) => ({
     qiReviewSchemaVersion: QI_REVIEW_SCHEMA_VERSION,
     runId,
     runState: "open",
-    candidateStates: {},
+    candidateStates: toNullProtoStates({}),
     auditLog: [],
     lastUpdatedAt: now,
 });
 /**
- * Apply a review decision and persist the updated artifact. Pure transition + append-only audit
- * entry; returns the new artifact. The caller is responsible for authorising the action.
+ * Apply a review decision and persist the updated artifact. Validates transition legality first
+ * (FIX A): an illegal transition throws `QualityIntelligenceReviewTransitionRejected` and persists
+ * nothing — no audit entry is ever appended for a rejected transition. On success, appends an
+ * append-only audit entry (with a redacted reviewer label, FIX M1) and returns the new artifact.
+ * The caller is responsible for authorising the action.
  */
 export const applyReviewDecision = (input) => {
     const current = loadRunReviewState(input.runId, input.evidenceDir) ?? emptyArtifact(input.runId, input.now);
@@ -57,15 +116,18 @@ export const applyReviewDecision = (input) => {
     const fromState = isCandidate
         ? candidateReviewStateOf(current, input.candidateId)
         : current.runState;
+    if (!isLegalTransition(fromState, input.action)) {
+        throw new QualityIntelligenceReviewTransitionRejected(fromState, input.action, toState);
+    }
     const candidateStates = isCandidate
-        ? { ...current.candidateStates, [input.candidateId]: toState }
+        ? Object.assign(toNullProtoStates(current.candidateStates), { [input.candidateId]: toState })
         : current.candidateStates;
     const audit = {
         at: input.now,
         action: input.action,
         scope: input.scope,
         ...(isCandidate ? { candidateId: input.candidateId } : {}),
-        reviewerLabel: input.reviewerLabel,
+        reviewerLabel: redactLabel(input.reviewerLabel, input.redact),
         fromState,
         toState,
     };
@@ -82,8 +144,9 @@ export const applyReviewDecision = (input) => {
 };
 /**
  * Append an append-only `edit` audit entry for an inline candidate edit. Review state is NOT
- * transitioned — `fromState`/`toState` are the candidate's existing review state. Persists and
- * returns the updated review artifact (created empty on first use).
+ * transitioned — `fromState`/`toState` are the candidate's existing review state. The reviewer label
+ * is redacted before persist (FIX M1). Persists and returns the updated review artifact (created
+ * empty on first use).
  */
 export const appendEditAudit = (input) => {
     const current = loadRunReviewState(input.runId, input.evidenceDir) ?? emptyArtifact(input.runId, input.now);
@@ -93,7 +156,7 @@ export const appendEditAudit = (input) => {
         action: "edit",
         scope: "candidate",
         candidateId: input.candidateId,
-        reviewerLabel: input.reviewerLabel,
+        reviewerLabel: redactLabel(input.reviewerLabel, input.redact),
         fromState: state,
         toState: state,
     };

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runExecution.d.ts

@@ -1,7 +1,7 @@
 import { type QualityIntelligence as QI } from "@oscharko-dev/keiko-contracts";
 import { type QualityIntelligenceRunSummary } from "@oscharko-dev/keiko-workflows";
 import type { QualityIntelligenceStartRunRequest } from "@oscharko-dev/keiko-contracts";
-import type { UiHandlerDeps } from "../deps.js";
+import { type UiHandlerDeps } from "../deps.js";
 import { QiIngestionError } from "./runIngestion.js";
 import type { QiSkippedSource } from "./runIngestion.js";
 import { QiGenerationError } from "./generationPort.js";
@@ -28,7 +28,8 @@ export interface ExecuteQiRunInput {
 /**
  * Execute a QI run end to end. Throws `QiIngestionError` / `QiGenerationError` (safe, coded) when
  * the request cannot start; otherwise returns the run summary after the workflow reaches a terminal
- * state. `onAccepted` fires once, after ingestion + model resolution succeed and before generation.
+ * state. `onAccepted` fires once, after ingestion + model/judge resolution succeed and before
+ * generation.
  */
 export declare function executeQiRun(input: ExecuteQiRunInput): Promise<QualityIntelligenceRunSummary>;
 export { QiIngestionError, QiGenerationError };

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runExecution.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runExecution.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runExecution.ts"],"names":[],"mappings":"AASA,OAAO,EAAuB,KAAK,mBAAmB,IAAI,EAAE,EAAE,MAAM,+BAA+B,CAAC;AAUpG,OAAO,EAEL,KAAK,6BAA6B,EAEnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,+BAA+B,CAAC;AACxF,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAChD,OAAO,EAAuB,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC1E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD,OAAO,EAA0B,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAqBhF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,kFAAkF;IAClF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,oGAAoG;IACpG,QAAQ,CAAC,cAAc,EAAE,SAAS,eAAe,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,kCAAkC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,KAAK,IAAI,CAAC;IAClE,QAAQ,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;CACxD;AAiED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,6BAA6B,CAAC,CAsCxC;AAgDD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC"}
+{"version":3,"file":"runExecution.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runExecution.ts"],"names":[],"mappings":"AASA,OAAO,EAAuB,KAAK,mBAAmB,IAAI,EAAE,EAAE,MAAM,+BAA+B,CAAC;AAUpG,OAAO,EAEL,KAAK,6BAA6B,EAEnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,kCAAkC,EAAE,MAAM,+BAA+B,CAAC;AACxF,OAAO,EAA2B,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AACzE,OAAO,EAA4B,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AAC/E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AAGzD,OAAO,EAA0B,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAqBhF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,kFAAkF;IAClF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,oGAAoG;IACpG,QAAQ,CAAC,cAAc,EAAE,SAAS,eAAe,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,kCAAkC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,2BAA2B,KAAK,IAAI,CAAC;IAClE,QAAQ,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,aAAa,KAAK,IAAI,CAAC;CACxD;AAmED;;;;;GAKG;AACH,wBAAsB,YAAY,CAChC,KAAK,EAAE,iBAAiB,GACvB,OAAO,CAAC,6BAA6B,CAAC,CAaxC;AAwGD,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runExecution.js

@@ -10,12 +10,13 @@ import { QualityIntelligence } from "@oscharko-dev/keiko-contracts";
 import { ALL_POLICY_PROFILES, regressionDefault, } from "@oscharko-dev/keiko-quality-intelligence";
 import { createNodeQualityIntelligenceLocalStore, recordQualityIntelligenceCandidates, } from "@oscharko-dev/keiko-evidence";
 import { runQualityIntelligenceModelRoutedTestDesign, } from "@oscharko-dev/keiko-workflows";
-import { ingestInlineSources, QiIngestionError } from "./runIngestion.js";
+import { currentRedactionSecrets } from "../deps.js";
+import { ingestInlineSourcesAsync, QiIngestionError } from "./runIngestion.js";
 import { makeCapsuleResolver } from "./capsuleAdapter.js";
 import { makeFigmaSnapshotLoader, makeFigmaVisionHintProvider } from "./figmaSnapshotAdapter.js";
 import { createQiGenerationPort, QiGenerationError } from "./generationPort.js";
-import { createQiJudgePort } from "./judgePort.js";
-import { resolveQiTestDesignSelection } from "./modelSelection.js";
+import { createQiJudgePort, QiJudgeError } from "./judgePort.js";
+import { resolveModelForQiCapability, resolveQiTestDesignSelection } from "./modelSelection.js";
 // Mirrors the stages the model-routed workflow actually emits (descriptors.ts stageNames), so the
 // run plan the UI renders matches the live stage:started/completed events — including the
 // adversarial test-quality judge (Epic #736).
@@ -81,26 +82,44 @@ function buildRunPlan(input) {
 /**
  * Execute a QI run end to end. Throws `QiIngestionError` / `QiGenerationError` (safe, coded) when
  * the request cannot start; otherwise returns the run summary after the workflow reaches a terminal
- * state. `onAccepted` fires once, after ingestion + model resolution succeed and before generation.
+ * state. `onAccepted` fires once, after ingestion + model/judge resolution succeed and before
+ * generation.
  */
 export async function executeQiRun(input) {
-    const { deps, runId, request } = input;
-    const evidenceDir = deps.evidenceDir;
+    const evidenceDir = input.deps.evidenceDir;
     if (evidenceDir === undefined) {
         throw new QiGenerationError("QI_NO_EVIDENCE_DIR", "The evidence directory is not configured.");
     }
-    const ingestion = ingestInlineSources({
+    // The capsule resolver owns a SQLite handle; close it in a finally so a thrown ingestion/generation
+    // never leaks it. The run body is extracted so this entrypoint stays within the line budget.
+    const capsuleResolver = makeCapsuleResolver(input.deps);
+    try {
+        return await runResolvedQi(input, evidenceDir, capsuleResolver);
+    }
+    finally {
+        capsuleResolver?.close();
+    }
+}
+async function runResolvedQi(input, evidenceDir, capsuleResolver) {
+    const { deps, runId, request } = input;
+    let ingestionModelGatewayCallCount = 0;
+    const ingestion = await ingestInlineSourcesAsync({
         request,
         runId,
         registeredAt: input.registeredAt,
-        capsuleResolver: makeCapsuleResolver(deps),
+        capsuleResolver,
         figmaSnapshotLoader: makeFigmaSnapshotLoader(deps),
-        figmaVision: makeFigmaVisionHintProvider(deps),
+        figmaVision: makeFigmaVisionHintProvider(deps, undefined, {
+            onGatewayCallAttempt: () => {
+                ingestionModelGatewayCallCount += 1;
+            },
+        }),
     });
     const { modelId, generate } = resolveExecutionStrategy(deps, request);
+    const judge = buildJudgePortForModelRun(deps, modelId, request.modelId);
     const profile = resolveProfile(request.profileId);
     input.onAccepted(buildAccepted(input, ingestion, modelId));
-    return runQualityIntelligenceModelRoutedTestDesign({
+    return await runQualityIntelligenceModelRoutedTestDesign({
         plan: buildRunPlan(input),
         envelopes: ingestion.envelopes,
         ingestedAtoms: ingestion.ingestedAtoms,
@@ -111,20 +130,27 @@ export async function executeQiRun(input) {
         runId,
         evidenceDir,
         modelId,
+        initialModelGatewayCallCount: ingestionModelGatewayCallCount,
         generate,
+        judge,
         onEvent: input.onEvent,
         signal: input.signal,
     }));
 }
-function buildJudgePortIfAvailable(deps, modelId) {
+function buildJudgePortForModelRun(deps, modelId, requestedModelId) {
     if (modelId === undefined)
         return undefined;
+    const judgeSelection = resolveModelForQiCapability(deps, "qi:judge-logic", requestedModelId);
+    if (judgeSelection.kind === "unavailable")
+        return undefined;
     try {
-        return createQiJudgePort(deps, modelId);
+        return createQiJudgePort(deps, judgeSelection.modelId);
     }
-    catch {
-        // Judge port creation failures are non-fatal: the judge stage is optional.
-        return undefined;
+    catch (error) {
+        if (error instanceof QiJudgeError) {
+            throw new QiGenerationError(error.code, error.message);
+        }
+        throw error;
     }
 }
 function buildWorkflowDeps(args) {
@@ -133,6 +159,7 @@ function buildWorkflowDeps(args) {
     return {
         sink: { emit: args.onEvent },
         evidenceStore: createNodeQualityIntelligenceLocalStore(evidenceDir),
+        initialModelGatewayCallCount: args.initialModelGatewayCallCount,
         candidatesSink: {
             record: (candidates, generatedAt) => {
                 recordQualityIntelligenceCandidates({
@@ -145,7 +172,8 @@ function buildWorkflowDeps(args) {
             },
         },
         generate: args.generate,
-        judge: buildJudgePortIfAvailable(args.deps, args.modelId),
+        judge: args.judge,
+        redaction: { additionalSecrets: currentRedactionSecrets(args.deps) },
         signal: args.signal,
     };
 }

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runIngestion.d.ts

@@ -40,10 +40,16 @@ export interface QiIngestionResult {
      */
     readonly skippedSources: readonly QiSkippedSource[];
 }
+export declare const envelopeIdFor: (index: number, label: string, content: string) => QI.QualityIntelligenceSourceEnvelopeId;
 export interface IngestInlineSourcesInput {
     readonly request: QualityIntelligenceStartRunRequest;
     readonly runId: string;
     readonly registeredAt: string;
+    /**
+     * Drift-only mode: an existing run whose current source is now empty must still be comparable so all
+     * old candidates classify as orphaned-stale. Initial run creation keeps the strict non-empty guard.
+     */
+    readonly allowEmpty?: boolean | undefined;
     /** Optional capsule resolver (Epic #710, Issue #717). Absent → capsule sources throw QI_CAPSULE_UNAVAILABLE. */
     readonly capsuleResolver?: CapsuleResolver | undefined;
     /**
@@ -58,4 +64,5 @@ export interface IngestInlineSourcesInput {
     readonly figmaVision?: FigmaVisionHintProvider | undefined;
 }
 export declare function ingestInlineSources(input: IngestInlineSourcesInput): QiIngestionResult;
+export declare function ingestInlineSourcesAsync(input: IngestInlineSourcesInput): Promise<QiIngestionResult>;
 //# sourceMappingURL=runIngestion.d.ts.map

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/runIngestion.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"runIngestion.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runIngestion.ts"],"names":[],"mappings":"AASA,OAAO,EAAuB,KAAK,mBAAmB,IAAI,EAAE,EAAE,MAAM,+BAA+B,CAAC;AAqBpG,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,KAAK,EACV,+BAA+B,EAC/B,kCAAkC,EACnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAyC9F,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,SAAgB,IAAI,EAAE,MAAM,CAAC;gBACjB,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,iCAAiC,EAAE,CAAC;IACpE,QAAQ,CAAC,aAAa,EAAE,SAAS,+BAA+B,EAAE,CAAC;IACnE,QAAQ,CAAC,cAAc,EAAE;QACvB,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;QACxC,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,iCAAiC,CAAC;KAC/D,CAAC;IACF,QAAQ,CAAC,eAAe,EAAE,SAAS,eAAe,EAAE,CAAC;IACrD,yFAAyF;IACzF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,eAAe,EAAE,CAAC;CACrD;AAoyBD,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,kCAAkC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,gHAAgH;IAChH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvD;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC/D;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;CAC5D;AAsED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,iBAAiB,CAiDtF"}
+{"version":3,"file":"runIngestion.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/runIngestion.ts"],"names":[],"mappings":"AAUA,OAAO,EAAuB,KAAK,mBAAmB,IAAI,EAAE,EAAE,MAAM,+BAA+B,CAAC;AAuBpG,OAAO,KAAK,EAAE,+BAA+B,EAAE,MAAM,+BAA+B,CAAC;AACrF,OAAO,KAAK,EACV,+BAA+B,EAC/B,kCAAkC,EACnC,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AA4C9F,qBAAa,gBAAiB,SAAQ,KAAK;IACzC,SAAgB,IAAI,EAAE,MAAM,CAAC;gBACjB,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM;CAK1C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACvD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,+BAA+B,CAAC,MAAM,CAAC,CAAC;IACvD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,SAAS,EAAE,SAAS,EAAE,CAAC,iCAAiC,EAAE,CAAC;IACpE,QAAQ,CAAC,aAAa,EAAE,SAAS,+BAA+B,EAAE,CAAC;IACnE,QAAQ,CAAC,cAAc,EAAE;QACvB,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;QACxC,QAAQ,CAAC,cAAc,EAAE,EAAE,CAAC,iCAAiC,CAAC;KAC/D,CAAC;IACF,QAAQ,CAAC,eAAe,EAAE,SAAS,eAAe,EAAE,CAAC;IACrD,yFAAyF;IACzF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC;;;OAGG;IACH,QAAQ,CAAC,cAAc,EAAE,SAAS,eAAe,EAAE,CAAC;CACrD;AAuHD,eAAO,MAAM,aAAa,GACxB,OAAO,MAAM,EACb,OAAO,MAAM,EACb,SAAS,MAAM,KACd,EAAE,CAAC,mCAKL,CAAC;AA0hCF,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,OAAO,EAAE,kCAAkC,CAAC;IACrD,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1C,gHAAgH;IAChH,QAAQ,CAAC,eAAe,CAAC,EAAE,eAAe,GAAG,SAAS,CAAC;IACvD;;;OAGG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,mBAAmB,GAAG,SAAS,CAAC;IAC/D;;;OAGG;IACH,QAAQ,CAAC,WAAW,CAAC,EAAE,uBAAuB,GAAG,SAAS,CAAC;CAC5D;AA8ID,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,wBAAwB,GAAG,iBAAiB,CAmDtF;AAED,wBAAsB,wBAAwB,CAC5C,KAAK,EAAE,wBAAwB,GAC9B,OAAO,CAAC,iBAAiB,CAAC,CAyC5B"}