@oscharko-dev/keiko 0.2.0-beta.5 → 0.2.0-beta.6

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaScopedPagination.js

@@ -37,6 +37,30 @@ export const DEFAULT_SCOPED_PAGINATION_LIMITS = {
     maxScreensDeep: 80,
     fetchConcurrency: 3,
 };
+/** Hard safety ceilings: operators may tune pagination, but never past these finite bounds. */
+export const SCOPED_PAGINATION_LIMIT_CEILINGS = {
+    pageDepth: 16,
+    maxNodesPerScreen: 50_000,
+    maxFetchesPerScreen: 128,
+    maxScreensDeep: 250,
+    fetchConcurrency: 8,
+};
+export const resolveScopedPaginationLimits = (partial) => {
+    const pick = (key) => {
+        const supplied = partial?.[key];
+        const resolved = supplied !== undefined && Number.isInteger(supplied) && supplied >= 1
+            ? supplied
+            : DEFAULT_SCOPED_PAGINATION_LIMITS[key];
+        return Math.min(resolved, SCOPED_PAGINATION_LIMIT_CEILINGS[key]);
+    };
+    return {
+        pageDepth: pick("pageDepth"),
+        maxNodesPerScreen: pick("maxNodesPerScreen"),
+        maxFetchesPerScreen: pick("maxFetchesPerScreen"),
+        maxScreensDeep: pick("maxScreensDeep"),
+        fetchConcurrency: pick("fetchConcurrency"),
+    };
+};
 const SCREEN_TYPES = new Set(["FRAME", "INSTANCE"]);
 const CONTAINER_TYPES = new Set(["CANVAS", "SECTION"]);
 // Node types whose internals are worth a deeper fetch. Leaves (TEXT, VECTOR, RECTANGLE, …) never
@@ -58,6 +82,23 @@ const countNodes = (node) => {
         total += countNodes(child);
     return total;
 };
+const pruneToNodeBudget = (node, maxNodes) => {
+    let remaining = Math.max(1, maxNodes);
+    const clone = (current) => {
+        if (remaining <= 0)
+            return undefined;
+        remaining -= 1;
+        const children = [];
+        for (const child of childrenOf(current)) {
+            const kept = clone(child);
+            if (kept === undefined)
+                break;
+            children.push(kept);
+        }
+        return { ...current, children };
+    };
+    return clone(node) ?? { ...node, children: [] };
+};
 /**
  * The screen FRAME/INSTANCE nodes under a scoped root, descending only through container groupings
  * (CANVAS/SECTION) — never into a screen's own body, so a nested frame stays part of its screen.
@@ -133,21 +174,32 @@ const createFetchGate = (fetchNode, limit) => {
 // Expand one breadth-first level: fetch the (budget-capped) frontier nodes together through the gate,
 // splice their children back in stable order, and collect the next level. Pure of any cross-screen
 // state — its result depends only on the inputs, so concurrent interleaving cannot change it.
-const expandLevel = async (frontier, gatedFetch, pageDepth, fetchBudget) => {
+const expandLevel = async (frontier, gatedFetch, pageDepth, fetchBudget, nodeBudgetRemaining) => {
     const level = frontier.slice(0, Math.max(0, fetchBudget));
-    const cut = level.length < frontier.length;
+    let cut = level.length < frontier.length;
     const deeps = await Promise.all(level.map((fnode) => gatedFetch(idOf(fnode))));
     const nextFrontier = [];
     let nodesAdded = 0;
+    let remainingNodeBudget = Math.max(0, nodeBudgetRemaining);
     for (let k = 0; k < level.length; k += 1) {
         const frontierNode = level[k];
         const deep = deeps[k];
-        if (frontierNode === undefined || deep === undefined)
+        if (frontierNode === undefined)
+            continue;
+        if (deep === undefined) {
+            cut = true;
             continue;
+        }
         const deepChildren = childrenOf(deep);
         if (deepChildren.length > 0) {
+            const added = countNodes(deep) - 1;
+            if (added > remainingNodeBudget) {
+                cut = true;
+                continue;
+            }
             frontierNode.children = deepChildren;
-            nodesAdded += countNodes(deep) - 1;
+            nodesAdded += added;
+            remainingNodeBudget -= added;
             for (const f of collectFrontier(deep, pageDepth))
                 nextFrontier.push(f);
         }
@@ -161,19 +213,27 @@ const expandLevel = async (frontier, gatedFetch, pageDepth, fetchBudget) => {
 const completeScreen = async (shallow, gatedFetch, limits) => {
     const base = await gatedFetch(idOf(shallow));
     if (base === undefined) {
-        // Could not deepen this screen — keep the shallow content (no crash, no fabrication).
-        return { node: shallow, deepFetched: false, truncated: false, fetchCount: 1 };
+        // Could not deepen this screen — keep the shallow content, but surface partial capture.
+        return { node: shallow, deepFetched: false, truncated: true, fetchCount: 1 };
     }
     let screenNodes = countNodes(base);
     let fetches = 1;
     let truncated = false;
+    if (screenNodes > limits.maxNodesPerScreen) {
+        return {
+            node: pruneToNodeBudget(base, limits.maxNodesPerScreen),
+            deepFetched: true,
+            truncated: true,
+            fetchCount: fetches,
+        };
+    }
     let frontier = collectFrontier(base, limits.pageDepth);
     while (frontier.length > 0) {
         if (screenNodes >= limits.maxNodesPerScreen || fetches >= limits.maxFetchesPerScreen) {
             truncated = true;
             break;
         }
-        const level = await expandLevel(frontier, gatedFetch, limits.pageDepth, limits.maxFetchesPerScreen - fetches);
+        const level = await expandLevel(frontier, gatedFetch, limits.pageDepth, limits.maxFetchesPerScreen - fetches, limits.maxNodesPerScreen - screenNodes);
         fetches += level.fetchesUsed;
         screenNodes += level.nodesAdded;
         if (level.cut) {
@@ -209,12 +269,13 @@ const rebuildWithDeepScreens = (root, deepById) => {
  * unchanged with zero-screen coverage.
  */
 export const paginateScopedDocument = async (shallowRoot, fetchNode, limits = DEFAULT_SCOPED_PAGINATION_LIMITS) => {
+    const resolvedLimits = resolveScopedPaginationLimits(limits);
     const screens = discoverScreenNodes(shallowRoot);
-    const deepable = screens.slice(0, limits.maxScreensDeep);
-    const gatedFetch = createFetchGate(fetchNode, limits.fetchConcurrency);
+    const deepable = screens.slice(0, resolvedLimits.maxScreensDeep);
+    const gatedFetch = createFetchGate(fetchNode, resolvedLimits.fetchConcurrency);
     // All deep-fetchable screens run concurrently; the shared gate bounds total in-flight fetches.
     // Each screen's result depends only on its own budgets, so order-of-completion never changes it.
-    const outcomes = await Promise.all(deepable.map((screen) => completeScreen(screen, gatedFetch, limits)));
+    const outcomes = await Promise.all(deepable.map((screen) => completeScreen(screen, gatedFetch, resolvedLimits)));
     const deepById = new Map();
     let screensDeepFetched = 0;
     let screensTruncated = 0;

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaSnapshotBuilder.d.ts

@@ -15,6 +15,8 @@ export interface BuildFigmaSnapshotInput {
     readonly maxImageBytes?: number;
     /** Max simultaneous byte-downloads — bounds burst on huge boards. */
     readonly downloadConcurrency?: number;
+    /** Max screens rendered into image side-files; excess screens remain structural-only skips. */
+    readonly maxScreensRendered?: number;
     /** Deterministic 429 backoff policy; defaults to {@link DEFAULT_FIGMA_RETRY_POLICY}. */
     readonly retryPolicy?: FigmaRetryPolicy;
     /** Injectable wait seam so tests assert the backoff schedule without real delays. */

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaSnapshotBuilder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaSnapshotBuilder.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaSnapshotBuilder.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC3D,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAEzB,OAAO,KAAK,EAGV,aAAa,EAEd,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAWzF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,wBAAwB,CAAC,cAAc,CAAC;IACrD,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,qEAAqE;IACrE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,wFAAwF;IACxF,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IACxC,qFAAqF;IACrF,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAwLD;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAC7B,OAAO,uBAAuB,KAC7B,OAAO,CAAC,aAAa,CA6BvB,CAAC"}
+{"version":3,"file":"figmaSnapshotBuilder.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaSnapshotBuilder.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACxD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC5D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,OAAO,EAIL,KAAK,gBAAgB,EACrB,KAAK,eAAe,EACrB,MAAM,iBAAiB,CAAC;AAMzB,OAAO,KAAK,EAGV,aAAa,EAEd,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AAiBzF,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,EAAE,EAAE,wBAAwB,CAAC,cAAc,CAAC;IACrD,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,gEAAgE;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;IAChC,qEAAqE;IACrE,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,+FAA+F;IAC/F,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;IACrC,wFAAwF;IACxF,QAAQ,CAAC,WAAW,CAAC,EAAE,gBAAgB,CAAC;IACxC,qFAAqF;IACrF,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC;CAClC;AAwPD;;;GAGG;AACH,eAAO,MAAM,kBAAkB,GAC7B,OAAO,uBAAuB,KAC7B,OAAO,CAAC,aAAa,CA2CvB,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaSnapshotBuilder.js

@@ -14,21 +14,35 @@
 // the render-url download, an error, or a log.
 import { FigmaConnectorError } from "./figmaConnectorErrors.js";
 import { mapWithConcurrency } from "./figmaConcurrency.js";
+import { classifyTokenFailure } from "./figmaTokenSource.js";
 import { DEFAULT_FIGMA_RETRY_POLICY, fetchWithBackoff, realFigmaRetrySleep, } from "./figmaRetry.js";
 import { hashBytes, hashScreen, hashSnapshot } from "./figmaSnapshotHash.js";
+import { DEFAULT_SCOPED_PAGINATION_LIMITS, SCOPED_PAGINATION_LIMIT_CEILINGS, } from "./figmaScopedPagination.js";
 const FIGMA_API_ORIGIN = "https://api.figma.com";
 const SNAPSHOT_SCHEMA_VERSION = 1;
 const DEFAULT_RENDER_BATCH_SIZE = 20;
+const MAX_RENDER_BATCH_SIZE = 100;
 const DEFAULT_MAX_IMAGE_BYTES = 25 * 1024 * 1024;
 const DEFAULT_RENDER_SCALE = 1;
 const DEFAULT_DOWNLOAD_CONCURRENCY = 4;
+// Bounded retries for a TRANSIENT malformed `/v1/images` body (a 2xx without an `images` map). Figma's
+// render endpoint returns this intermittently when overloaded by back-to-back whole-page builds; an
+// isolated retry recovers it. After this many retries the batch degrades to a skip rather than failing
+// the whole build (F8).
+const MAX_RENDER_BODY_RETRIES = 3;
 const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
 const chunk = (items, size) => {
+    const safeSize = Number.isInteger(size) && size >= 1 ? size : DEFAULT_RENDER_BATCH_SIZE;
     const out = [];
-    for (let i = 0; i < items.length; i += size)
-        out.push(items.slice(i, i + size));
+    for (let i = 0; i < items.length; i += safeSize)
+        out.push(items.slice(i, i + safeSize));
     return out;
 };
+const boundedPositiveInt = (value, fallback, ceiling) => {
+    if (value === undefined || !Number.isInteger(value) || value < 1)
+        return fallback;
+    return Math.min(value, ceiling);
+};
 // Returns true when the hostname is an IP literal or a local/loopback name that must be blocked.
 const isBlockedHostname = (h) => h.length === 0 ||
     /^\d+\.\d+\.\d+\.\d+$/.test(h) ||
@@ -54,12 +68,38 @@ const isRenderUrlSafe = (raw) => {
     const h = url.hostname.toLowerCase().replace(/\.$/, "");
     if (isBlockedHostname(h))
         return false;
+    if (!isAllowedFigmaRenderUrl(url, h))
+        return false;
     // Only allow the default HTTPS port (443 or implicit) — non-standard ports indicate an
     // internal service, not a CDN. url.port is "" when the port is the scheme default.
     if (url.port !== "" && url.port !== "443")
         return false;
     return true;
 };
+const isAllowedFigmaRenderUrl = (url, host) => {
+    if (host === "s3-alpha-sig.figma.com")
+        return true;
+    if (host === "cdn.figma.com" || host === "static.figma.com")
+        return true;
+    if (host.endsWith(".figma.com"))
+        return true;
+    // Multi-region S3 bucket allowlist: accepts any globally-unique bucket whose NAME starts with
+    // "figma" (e.g. figma-prod.s3.eu-west-1.amazonaws.com). The residual risk is that an attacker
+    // who can create an S3 bucket named figma-anything could serve a crafted render response. In
+    // practice the risk is low: (a) render URLs are returned by the authenticated Figma API over
+    // TLS, so a MITM or API compromise is a prerequisite; (b) the URLs are short-lived/pre-signed
+    // and carry no Figma auth header (the token is injected only into the /v1/images API call);
+    // (c) the byte-cap + oversized-skip guard limits the blast radius of a poisoned response.
+    // Tightening to a fixed bucket list would break legitimate Figma render fronts that span many
+    // regions; revisit if Figma publishes an authoritative set of render origins.
+    if (/^figma[-a-z0-9]*\.s3[.-][a-z0-9-]+\.amazonaws\.com$/u.test(host))
+        return true;
+    if ((host === "s3-us-west-2.amazonaws.com" || host === "s3.us-west-2.amazonaws.com") &&
+        /^\/figma[-_/a-z0-9]*/iu.test(url.pathname)) {
+        return true;
+    }
+    return false;
+};
 const buildImagesUrl = (fileKey, ids, version) => {
     const url = new URL(`${FIGMA_API_ORIGIN}/v1/images/${encodeURIComponent(fileKey)}`);
     url.searchParams.set("ids", ids.join(","));
@@ -69,39 +109,56 @@ const buildImagesUrl = (fileKey, ids, version) => {
         url.searchParams.set("version", version);
     return url.toString();
 };
-const statusToError = (status) => {
-    if (status === 404)
-        return new FigmaConnectorError("FIGMA_NOT_FOUND");
-    if (status === 401 || status === 403)
-        return new FigmaConnectorError("FIGMA_INSUFFICIENT_SCOPE");
-    if (status >= 500)
-        return new FigmaConnectorError("FIGMA_UPSTREAM_UNAVAILABLE");
-    return new FigmaConnectorError("FIGMA_INTERNAL");
+const extractFigmaReason = (body) => {
+    if (!isRecord(body))
+        return undefined;
+    const reason = body.err ?? body.message;
+    return typeof reason === "string" ? reason : undefined;
 };
-// Extracts the `{ images: { id: url|null } }` map from one `/v1/images` response.
+const statusToError = (status, body) => classifyTokenFailure(status, extractFigmaReason(body));
+// Extracts the `{ images: { id: url|null } }` map from one `/v1/images` response, or `null` when the
+// body is a non-standard 2xx WITHOUT an `images` map. Figma's render endpoint returns such a body
+// intermittently when it is overloaded by back-to-back whole-page builds (#750 F8 — observed live).
+// `null` is a TRANSIENT, retriable signal — the caller retries the batch, then degrades the affected
+// screens to a skip (coverage notice) if it persists, rather than failing the whole build.
 const extractImageUrls = (json) => {
     if (!isRecord(json) || !isRecord(json.images))
-        throw new FigmaConnectorError("FIGMA_INTERNAL");
+        return null;
     const out = {};
     for (const [id, value] of Object.entries(json.images)) {
         out[id] = typeof value === "string" && value.length > 0 ? value : null;
     }
     return out;
 };
+// Resolve one `/v1/images` batch to its ephemeral-url map. The fetch is wrapped in the deterministic
+// 429 backoff; a non-2xx is a hard coded error (auth/scope/upstream); a 2xx with a malformed body is a
+// transient render-overload signal that is retried up to MAX_RENDER_BODY_RETRIES, then degrades to an
+// empty map so the affected screens skip (render-url-missing) instead of aborting the build (F8).
+const resolveRenderBatch = async (input, batch, policy, sleep) => {
+    const requestUrl = buildImagesUrl(input.provenance.fileKey, batch, input.provenance.version);
+    for (let attempt = 0;; attempt += 1) {
+        const response = await fetchWithBackoff(() => input.imagesPort({ url: requestUrl, headers: { "X-Figma-Token": input.token } }), policy, sleep);
+        if (response.status < 200 || response.status >= 300) {
+            throw statusToError(response.status, response.json);
+        }
+        const map = extractImageUrls(response.json);
+        if (map !== null)
+            return map;
+        if (attempt >= MAX_RENDER_BODY_RETRIES)
+            return {};
+        await sleep(Math.min(policy.baseDelayMs * 2 ** attempt, policy.maxDelayMs));
+    }
+};
 // Calls `/v1/images` in bounded batches and merges the ephemeral-url map. The token authenticates
-// each batch via the header only. Each batch call is wrapped in deterministic 429 backoff so a
-// rate-limited huge-board render retries within Figma's limits instead of failing.
+// each batch via the header only. Each batch is 429-backoff retried AND malformed-body retried
+// (resolveRenderBatch), so a rate-limited or transiently-overloaded huge-board render survives.
 const requestRenderUrls = async (input, screenIds) => {
-    const batchSize = input.batchSize ?? DEFAULT_RENDER_BATCH_SIZE;
     const policy = input.retryPolicy ?? DEFAULT_FIGMA_RETRY_POLICY;
     const sleep = input.sleep ?? realFigmaRetrySleep;
+    const batchSize = boundedPositiveInt(input.batchSize, DEFAULT_RENDER_BATCH_SIZE, MAX_RENDER_BATCH_SIZE);
     const urls = new Map();
     for (const batch of chunk(screenIds, batchSize)) {
-        const requestUrl = buildImagesUrl(input.provenance.fileKey, batch, input.provenance.version);
-        const response = await fetchWithBackoff(() => input.imagesPort({ url: requestUrl, headers: { "X-Figma-Token": input.token } }), policy, sleep);
-        if (response.status < 200 || response.status >= 300)
-            throw statusToError(response.status);
-        const map = extractImageUrls(response.json);
+        const map = await resolveRenderBatch(input, batch, policy, sleep);
         for (const id of batch)
             urls.set(id, map[id] ?? null);
     }
@@ -188,12 +245,15 @@ const resolveScreen = async (input, ir, renderUrl) => {
  * `skippedScreens` entry (partial render); a non-2xx `/v1/images` call is a hard coded error.
  */
 export const buildFigmaSnapshot = async (input) => {
-    const screenIds = input.ir.screens.map((screen) => screen.id);
+    const maxScreensRendered = boundedPositiveInt(input.maxScreensRendered, DEFAULT_SCOPED_PAGINATION_LIMITS.maxScreensDeep, SCOPED_PAGINATION_LIMIT_CEILINGS.maxScreensDeep);
+    const renderableScreens = input.ir.screens.slice(0, maxScreensRendered);
+    const cappedScreens = input.ir.screens.slice(maxScreensRendered);
+    const screenIds = renderableScreens.map((screen) => screen.id);
     const renderUrls = screenIds.length === 0
         ? new Map()
         : await requestRenderUrls(input, screenIds);
-    const concurrency = input.downloadConcurrency ?? DEFAULT_DOWNLOAD_CONCURRENCY;
-    const outcomes = await mapWithConcurrency(input.ir.screens, concurrency, (ir) => resolveScreen(input, ir, renderUrls.get(ir.id) ?? null));
+    const concurrency = boundedPositiveInt(input.downloadConcurrency, DEFAULT_DOWNLOAD_CONCURRENCY, Number.MAX_SAFE_INTEGER);
+    const outcomes = await mapWithConcurrency(renderableScreens, concurrency, (ir) => resolveScreen(input, ir, renderUrls.get(ir.id) ?? null));
     const screens = [];
     const skippedScreens = [];
     for (const outcome of outcomes) {
@@ -202,6 +262,9 @@ export const buildFigmaSnapshot = async (input) => {
         if (outcome.skipped !== undefined)
             skippedScreens.push(outcome.skipped);
     }
+    for (const ir of cappedScreens) {
+        skippedScreens.push({ screenId: ir.id, reason: "render-screen-cap-exceeded" });
+    }
     return {
         snapshotSchemaVersion: SNAPSHOT_SCHEMA_VERSION,
         provenance: input.provenance,

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaSnapshotTypes.d.ts

@@ -21,7 +21,7 @@ export interface FigmaSnapshotScreen {
  * threw a FigmaConnectorError — the code suffix lets metrics distinguish an egress
  * misconfiguration (e.g. `FIGMA_EGRESS_TIMEOUT`) from an unclassified network flake.
  */
-export type FigmaSkippedScreenReason = "render-url-missing" | "render-url-blocked" | "render-fetch-failed" | `render-fetch-failed:${string}` | "render-empty" | "render-oversized";
+export type FigmaSkippedScreenReason = "render-url-missing" | "render-url-blocked" | "render-screen-cap-exceeded" | "render-fetch-failed" | `render-fetch-failed:${string}` | "render-empty" | "render-oversized";
 export interface FigmaSkippedScreen {
     readonly screenId: string;
     readonly reason: FigmaSkippedScreenReason;

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaSnapshotTypes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaSnapshotTypes.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaSnapshotTypes.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,KAAK,QAAQ,GAAG,wBAAwB,CAAC,QAAQ,CAAC;AAElD,+FAA+F;AAC/F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,+DAA+D;AAC/D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,kGAAkG;IAClG,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAChC,oBAAoB,GACpB,oBAAoB,GACpB,qBAAqB,GACrB,uBAAuB,MAAM,EAAE,GAC/B,cAAc,GACd,kBAAkB,CAAC;AAEvB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD,QAAQ,CAAC,cAAc,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvD;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,wBAAwB,CAAC,eAAe,EAAE,CAAC;IACrE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC"}
+{"version":3,"file":"figmaSnapshotTypes.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaSnapshotTypes.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,0CAA0C,CAAC;AACzF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAE3D,KAAK,QAAQ,GAAG,wBAAwB,CAAC,QAAQ,CAAC;AAElD,+FAA+F;AAC/F,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,WAAW,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,+DAA+D;AAC/D,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,QAAQ,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,kGAAkG;IAClG,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,MAAM,wBAAwB,GAChC,oBAAoB,GACpB,oBAAoB,GACpB,4BAA4B,GAC5B,qBAAqB,GACrB,uBAAuB,MAAM,EAAE,GAC/B,cAAc,GACd,kBAAkB,CAAC;AAEvB,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,wBAAwB,CAAC;CAC3C;AAED;;;;;GAKG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,qBAAqB,EAAE,CAAC,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACjD,QAAQ,CAAC,cAAc,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACvD;;;;;;OAMG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,wBAAwB,CAAC,eAAe,EAAE,CAAC;IACrE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;CAChC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaTokenSource.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaTokenSource.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaTokenSource.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,mBAAmB,EAAgC,MAAM,2BAA2B,CAAC;AAE9F,MAAM,WAAW,iBAAiB;IAGhC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAUD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAIpE;AA4BD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAGzF"}
+{"version":3,"file":"figmaTokenSource.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaTokenSource.ts"],"names":[],"mappings":"AAaA,OAAO,EAAE,mBAAmB,EAAgC,MAAM,2BAA2B,CAAC;AAE9F,MAAM,WAAW,iBAAiB;IAGhC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAUD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,iBAAiB,GAAG,MAAM,CAIpE;AA6BD,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,mBAAmB,CAGzF"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaTokenSource.js

@@ -46,9 +46,10 @@ function codeForStatus(status, reason) {
         return classifyForbidden(reason);
     if (status === 404)
         return "FIGMA_NOT_FOUND";
-    // Forward-proxy egress failures (#802): 407 proxy-auth, 502/504 gateway. A plain 503 is the
-    // upstream Figma service being unavailable, not a proxy fault — it stays UPSTREAM below.
-    if (status === 407 || status === 502 || status === 504)
+    // Forward-proxy auth is visible as 407. Other proxy failures arrive as OutboundHttpEgressError
+    // before this status classifier runs; raw upstream 502/504 responses must not be blamed on proxy
+    // egress because that sends operators to the wrong remediation path.
+    if (status === 407)
         return "FIGMA_PROXY_EGRESS_FAILED";
     if (status >= 500)
         return "FIGMA_UPSTREAM_UNAVAILABLE";

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaUrl.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaUrl.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaUrl.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAeD,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,KAAG,WAAW,GAAG,IAc9D,CAAC"}
+{"version":3,"file":"figmaUrl.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/figmaUrl.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAeD,eAAO,MAAM,gBAAgB,GAAI,OAAO,MAAM,KAAG,WAAW,GAAG,IAe9D,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/figmaUrl.js

@@ -19,6 +19,8 @@ export const parseFigmaTarget = (value) => {
     const url = parseUrl(value.trim());
     if (url === null)
         return null;
+    if (url.protocol !== "https:")
+        return null;
     if (!ACCEPTED_HOSTS.includes(url.hostname))
         return null;
     const segments = url.pathname.split("/").filter((part) => part.length > 0);

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/index.d.ts

@@ -5,7 +5,7 @@ export { buildFigmaSnapshot, type BuildFigmaSnapshotInput } from "./figmaSnapsho
 export { resnapshotFigma, type FigmaCleanToIr, type ResnapshotFigmaDeps, } from "./figmaResnapshot.js";
 export { fetchWithBackoff, realFigmaRetrySleep, DEFAULT_FIGMA_RETRY_POLICY, type FigmaBackoffResponse, type FigmaRetryPolicy, type FigmaRetrySleep, } from "./figmaRetry.js";
 export { mapWithConcurrency } from "./figmaConcurrency.js";
-export { paginateScopedDocument, discoverScreenNodes, DEFAULT_SCOPED_PAGINATION_LIMITS, type FigmaScopeCoverage, type RawFigmaNode, type ScopedNodeFetcher, type ScopedPaginationLimits, } from "./figmaScopedPagination.js";
+export { paginateScopedDocument, discoverScreenNodes, DEFAULT_SCOPED_PAGINATION_LIMITS, SCOPED_PAGINATION_LIMIT_CEILINGS, resolveScopedPaginationLimits, type FigmaScopeCoverage, type RawFigmaNode, type ScopedNodeFetcher, type ScopedPaginationLimits, } from "./figmaScopedPagination.js";
 export type { FigmaRenderedImage, FigmaSkippedScreen, FigmaSkippedScreenReason, FigmaSnapshot, FigmaSnapshotScreen, } from "./figmaSnapshotTypes.js";
 export { FigmaConnectorError, figmaConnectorErrorBody, type FigmaConnectorErrorBody, type FigmaConnectorErrorCode, } from "./figmaConnectorErrors.js";
 export { parseFigmaTarget, type FigmaTarget } from "./figmaUrl.js";

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,0BAA0B,EAC1B,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,4BAA4B,EAC5B,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EACL,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,gCAAgC,EAChC,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACxB,aAAa,EACb,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EACL,gBAAgB,EAChB,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,KAAK,8BAA8B,EACnC,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,GAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,4BAA4B,EAC5B,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/qualityIntelligence/figma/index.ts"],"names":[],"mappings":"AASA,OAAO,EACL,oBAAoB,EACpB,KAAK,cAAc,EACnB,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,EACvB,KAAK,QAAQ,EACb,KAAK,iBAAiB,EACtB,KAAK,eAAe,EACpB,KAAK,iBAAiB,GACvB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,0BAA0B,EAC1B,KAAK,aAAa,EAClB,KAAK,gBAAgB,EACrB,KAAK,iBAAiB,GACvB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,4BAA4B,EAC5B,KAAK,eAAe,EACpB,KAAK,kBAAkB,EACvB,KAAK,mBAAmB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kBAAkB,EAAE,KAAK,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAC7F,OAAO,EACL,eAAe,EACf,KAAK,cAAc,EACnB,KAAK,mBAAmB,GACzB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,gBAAgB,EAChB,mBAAmB,EACnB,0BAA0B,EAC1B,KAAK,oBAAoB,EACzB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,kBAAkB,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,EACL,sBAAsB,EACtB,mBAAmB,EACnB,gCAAgC,EAChC,gCAAgC,EAChC,6BAA6B,EAC7B,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,iBAAiB,EACtB,KAAK,sBAAsB,GAC5B,MAAM,4BAA4B,CAAC;AACpC,YAAY,EACV,kBAAkB,EAClB,kBAAkB,EAClB,wBAAwB,EACxB,aAAa,EACb,mBAAmB,GACpB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,mBAAmB,EACnB,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,GAC7B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,gBAAgB,EAAE,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AACnE,OAAO,EACL,gBAAgB,EAChB,KAAK,SAAS,EACd,KAAK,cAAc,EACnB,KAAK,gBAAgB,EACrB,KAAK,eAAe,GACrB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,qBAAqB,EACrB,oBAAoB,EACpB,iBAAiB,EACjB,KAAK,eAAe,EACpB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,GAC3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,iBAAiB,EACjB,oBAAoB,EACpB,KAAK,iBAAiB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,mBAAmB,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,0BAA0B,EAC1B,KAAK,8BAA8B,EACnC,KAAK,oBAAoB,EACzB,KAAK,2BAA2B,EAChC,KAAK,yBAAyB,EAC9B,KAAK,wBAAwB,EAC7B,KAAK,qBAAqB,GAC3B,MAAM,0BAA0B,CAAC;AAClC,OAAO,EACL,qBAAqB,EACrB,mBAAmB,EACnB,kBAAkB,EAClB,qBAAqB,EACrB,qBAAqB,EACrB,4BAA4B,EAC5B,KAAK,iBAAiB,EACtB,KAAK,0BAA0B,GAChC,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACL,4BAA4B,EAC5B,KAAK,gBAAgB,EACrB,KAAK,sBAAsB,EAC3B,KAAK,sBAAsB,EAC3B,KAAK,qBAAqB,EAC1B,KAAK,2BAA2B,EAChC,KAAK,oBAAoB,GAC1B,MAAM,4BAA4B,CAAC;AACpC,OAAO,EACL,oBAAoB,EACpB,kBAAkB,EAClB,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACxB,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,GAC5B,MAAM,2BAA2B,CAAC"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figma/index.js

@@ -13,7 +13,7 @@ export { buildFigmaSnapshot } from "./figmaSnapshotBuilder.js";
 export { resnapshotFigma, } from "./figmaResnapshot.js";
 export { fetchWithBackoff, realFigmaRetrySleep, DEFAULT_FIGMA_RETRY_POLICY, } from "./figmaRetry.js";
 export { mapWithConcurrency } from "./figmaConcurrency.js";
-export { paginateScopedDocument, discoverScreenNodes, DEFAULT_SCOPED_PAGINATION_LIMITS, } from "./figmaScopedPagination.js";
+export { paginateScopedDocument, discoverScreenNodes, DEFAULT_SCOPED_PAGINATION_LIMITS, SCOPED_PAGINATION_LIMIT_CEILINGS, resolveScopedPaginationLimits, } from "./figmaScopedPagination.js";
 export { FigmaConnectorError, figmaConnectorErrorBody, } from "./figmaConnectorErrors.js";
 export { parseFigmaTarget } from "./figmaUrl.js";
 export { resolveReadiness, } from "./figmaReadiness.js";

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figmaCodegenRoutes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaCodegenRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/figmaCodegenRoutes.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAShD,QAAA,MAAM,4BAA4B,EAAG,CAAU,CAAC;AAEhD,sGAAsG;AACtG,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,yBAAyB,EAAE,OAAO,4BAA4B,CAAC;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjF;AAED,kGAAkG;AAClG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjF;AA2FD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAsC3F"}
+{"version":3,"file":"figmaCodegenRoutes.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/figmaCodegenRoutes.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,YAAY,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAC9D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAShD,QAAA,MAAM,4BAA4B,EAAG,CAAU,CAAC;AAMhD,sGAAsG;AACtG,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,yBAAyB,EAAE,OAAO,4BAA4B,CAAC;IACxE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjF;AAED,kGAAkG;AAClG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,SAAS;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjF;AA+GD,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,YAAY,EAAE,IAAI,EAAE,aAAa,GAAG,WAAW,CAkD3F"}

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figmaCodegenRoutes.js

@@ -12,16 +12,31 @@
 //
 // Determinism + model-independence (#755 DoD): emission is pure and model-free, so the same stored
 // snapshot yields a byte-identical artifact; semantic naming (the only model-augmentation point) is
-// additive and absent here, so the structural defaults are used. Evidence-backed: the artifact is
-// persisted to the local evidence dir through the reused contained-store seam. Gated: CSRF + a valid
-// stored runId. No hidden external effects: nothing leaves the box, the snapshot is never mutated.
+// additive and absent here, so the structural defaults are used. Evidence-backed: the artifact must be
+// persisted to the local evidence dir through the reused contained-store seam before the route returns
+// success. Gated: CSRF + host-check + a valid stored runId (the dispatch layer enforces the
+// state-changing-request guard for this POST). No hidden external effects: nothing leaves the box, the
+// snapshot is never mutated.
+//
+// Cancellable (#755 AC2): for the first slice this is moot by construction — the handler is a
+// synchronous, pure, microsecond computation with no run-registry entry, no model call, no streaming,
+// and no long-running external work to abort; a client disconnect simply drops the response. When a
+// future slice wires the SemanticNamingProvider to a gateway model call, that injected port is where
+// an AbortSignal threads through — no structural change to this route is required.
 import { createNodeContainedJsonArtifactStore, createNodeFigmaSnapshotStore, } from "@oscharko-dev/keiko-evidence";
 import { QualityIntelligenceFigma } from "@oscharko-dev/keiko-quality-intelligence";
 const FIGMA_CODEGEN_SUFFIX = ".figma-codegen.json";
 const FIGMA_CODEGEN_SCHEMA_VERSION = 1;
+const MAX_CODEGEN_SCREENS = 80;
+const MAX_CODEGEN_FILES = MAX_CODEGEN_SCREENS + 2;
+const MAX_CODEGEN_FILE_BYTES = 1024 * 1024;
+const MAX_CODEGEN_TOTAL_BYTES = 5 * 1024 * 1024;
 const errorBody = (code, message) => ({
     error: { code, message },
 });
+function codegenTooLarge(message) {
+    return { status: 413, body: errorBody("FIGMA_CODEGEN_TOO_LARGE", message) };
+}
 // Re-hydrate the deterministic emission input from the stored snapshot. Unparseable screens are
 // dropped (never crash). Links → nav graph → routing hints feed the adapter's screen-to-screen wiring.
 function emissionInputFromRecord(record) {
@@ -43,22 +58,34 @@ function emissionInputFromRecord(record) {
     return { screens, tokens, hints: QualityIntelligenceFigma.deriveRoutingHints(graph) };
 }
 function persistArtifact(evidenceDir, artifact) {
-    // Evidence-backed (#755): the reviewable artifact is written through the reused contained-store
-    // seam. Best-effort — a failed evidence write must not fail the (already-computed) reviewable
-    // response, so the caller still returns the code; the persist is the durability layer.
-    try {
-        createNodeContainedJsonArtifactStore(evidenceDir, FIGMA_CODEGEN_SUFFIX, {
-            parse: (value) => typeof value === "object" &&
-                value !== null &&
-                value.figmaCodegenSchemaVersion ===
-                    FIGMA_CODEGEN_SCHEMA_VERSION
-                ? value
-                : undefined,
-        }).record(artifact.runId, artifact);
+    // Evidence-backed (#755): the reviewable artifact is written through the reused contained-store seam.
+    // Fail closed when the companion cannot be written; otherwise the route could return generated code
+    // with no durable evidence record.
+    createNodeContainedJsonArtifactStore(evidenceDir, FIGMA_CODEGEN_SUFFIX, {
+        parse: (value) => typeof value === "object" &&
+            value !== null &&
+            value.figmaCodegenSchemaVersion ===
+                FIGMA_CODEGEN_SCHEMA_VERSION
+            ? value
+            : undefined,
+    }).record(artifact.runId, artifact);
+}
+function summarizeArtifact(artifact) {
+    if (artifact.files.length > MAX_CODEGEN_FILES) {
+        return codegenTooLarge("The generated code artifact contains too many files to review safely.");
     }
-    catch {
-        // swallow: the response below is the source of truth for the operator's review.
+    let totalBytes = 0;
+    for (const file of artifact.files) {
+        const fileBytes = Buffer.byteLength(file.contents, "utf8");
+        if (fileBytes > MAX_CODEGEN_FILE_BYTES) {
+            return codegenTooLarge("A generated code file is too large to review safely.");
+        }
+        totalBytes += fileBytes;
+        if (totalBytes > MAX_CODEGEN_TOTAL_BYTES) {
+            return codegenTooLarge("The generated code artifact is too large to review safely.");
+        }
     }
+    return { totalBytes };
 }
 // ─── POST /api/figma/snapshots/:runId/code ─────────────────────────────────────
 // Resolve evidenceDir + runId, load + 404 the stored snapshot, or return a coded RouteResult.
@@ -104,20 +131,33 @@ export function handleFigmaGenerateCode(ctx, deps) {
             body: errorBody("FIGMA_CODEGEN_NO_SCREENS", "The snapshot has no usable screen to generate code from."),
         };
     }
+    if (input.screens.length > MAX_CODEGEN_SCREENS) {
+        return codegenTooLarge("The snapshot contains too many screens to generate code safely.");
+    }
     const artifact = QualityIntelligenceFigma.emitCode(input, QualityIntelligenceFigma.htmlCssAdapter);
+    const artifactSummary = summarizeArtifact(artifact);
+    if ("status" in artifactSummary)
+        return artifactSummary;
     const persisted = {
         figmaCodegenSchemaVersion: FIGMA_CODEGEN_SCHEMA_VERSION,
         runId,
         adapterName: artifact.adapterName,
         files: artifact.files,
     };
-    persistArtifact(evidenceDir, persisted);
-    const totalBytes = artifact.files.reduce((sum, f) => sum + Buffer.byteLength(f.contents), 0);
+    try {
+        persistArtifact(evidenceDir, persisted);
+    }
+    catch {
+        return {
+            status: 500,
+            body: errorBody("FIGMA_INTERNAL", "The code artifact could not be persisted as evidence."),
+        };
+    }
     const response = {
         runId,
         adapterName: artifact.adapterName,
         fileCount: artifact.files.length,
-        totalBytes,
+        totalBytes: artifactSummary.totalBytes,
         screenCount: input.screens.length,
         files: artifact.files,
     };

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figmaSnapshotAdapter.d.ts

@@ -1,4 +1,4 @@
-import { type FigmaSnapshotRecord } from "@oscharko-dev/keiko-evidence";
+import { type FigmaSnapshotImageRef, type FigmaSnapshotRecord } from "@oscharko-dev/keiko-evidence";
 import type { UiHandlerDeps } from "../deps.js";
 /** Loads an immutable Figma Snapshot evidence record by runId. Returns `undefined` when not found. */
 export type FigmaSnapshotLoader = (snapshotRunId: string) => FigmaSnapshotRecord | undefined;
@@ -21,8 +21,10 @@ export interface FigmaSnapshotLoaderOptions {
 export declare function makeFigmaSnapshotLoader(deps: UiHandlerDeps, options?: FigmaSnapshotLoaderOptions): FigmaSnapshotLoader | undefined;
 /** The image-derived semantics a multimodal model recovered for one screen, as additive hints. */
 export interface FigmaVisionScreenRequest {
+    readonly snapshotRunId: string;
     readonly screenId: string;
     /** The image side-file reference recorded in the snapshot (relative path + sha256). */
+    readonly image: FigmaSnapshotImageRef;
     readonly imageRelativePath: string;
     /** The deterministic baseline text, supplied so the model cross-checks rather than re-derives. */
     readonly baselineText: string;
@@ -32,13 +34,16 @@ export interface FigmaVisionScreenRequest {
  * The contract is total: it NEVER throws and NEVER returns a value that could override the IR — the
  * caller appends the hints below the baseline.
  */
-export type FigmaVisionHintProvider = (request: FigmaVisionScreenRequest) => readonly string[];
+export type FigmaVisionHintProvider = (request: FigmaVisionScreenRequest) => readonly string[] | Promise<readonly string[]>;
 /**
  * A raw vision call: given a screen request and the selected model id, return image-derived hint
- * strings. Injected so this module imports no provider SDK and stays testable. Absent in production
- * until the multimodal port lands (#810 follow-up) — its absence is exactly the IR-only path.
+ * strings. Injectable so tests can keep the provider deterministic; production defaults to the
+ * server-owned evidence-store + Model Gateway port below. Absence is exactly the IR-only path.
  */
-export type FigmaVisionCall = (request: FigmaVisionScreenRequest, modelId: string) => readonly string[];
+export type FigmaVisionCall = (request: FigmaVisionScreenRequest, modelId: string) => readonly string[] | Promise<readonly string[]>;
+export interface FigmaVisionHintProviderOptions {
+    readonly onGatewayCallAttempt?: (() => void) | undefined;
+}
 /**
  * Build a capability-routed vision hint provider. When no multimodal capability is configured (or no
  * `visionCall` is injected), every request returns `[]` — the deterministic IR-only baseline path.
@@ -46,5 +51,5 @@ export type FigmaVisionCall = (request: FigmaVisionScreenRequest, modelId: strin
  * garbage result is swallowed to `[]` so a misbehaving model can never break the run or override the
  * structural baseline. No model id is hard-coded — selection is via `resolveQiMultimodalSelection`.
  */
-export declare function makeFigmaVisionHintProvider(deps: UiHandlerDeps, visionCall?: FigmaVisionCall): FigmaVisionHintProvider;
+export declare function makeFigmaVisionHintProvider(deps: UiHandlerDeps, visionCall?: FigmaVisionCall, options?: FigmaVisionHintProviderOptions): FigmaVisionHintProvider;
 //# sourceMappingURL=figmaSnapshotAdapter.d.ts.map

package/node_modules/@oscharko-dev/keiko-server/dist/qualityIntelligence/figmaSnapshotAdapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"figmaSnapshotAdapter.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/figmaSnapshotAdapter.ts"],"names":[],"mappings":"AAiBA,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AACtC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGhD,sGAAsG;AACtG,MAAM,MAAM,mBAAmB,GAAG,CAAC,aAAa,EAAE,MAAM,KAAK,mBAAmB,GAAG,SAAS,CAAC;AAE7F,MAAM,WAAW,0BAA0B;IACzC;;;;;;;;OAQG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,aAAa,EACnB,OAAO,CAAC,EAAE,0BAA0B,GACnC,mBAAmB,GAAG,SAAS,CA0BjC;AAED,kGAAkG;AAClG,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uFAAuF;IACvF,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,kGAAkG;IAClG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,EAAE,wBAAwB,KAAK,SAAS,MAAM,EAAE,CAAC;AAE/F;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAC5B,OAAO,EAAE,wBAAwB,EACjC,OAAO,EAAE,MAAM,KACZ,SAAS,MAAM,EAAE,CAAC;AAOvB;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,aAAa,EACnB,UAAU,CAAC,EAAE,eAAe,GAC3B,uBAAuB,CAazB"}
+{"version":3,"file":"figmaSnapshotAdapter.d.ts","sourceRoot":"","sources":["../../src/qualityIntelligence/figmaSnapshotAdapter.ts"],"names":[],"mappings":"AAmBA,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,mBAAmB,EACzB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAGhD,sGAAsG;AACtG,MAAM,MAAM,mBAAmB,GAAG,CAAC,aAAa,EAAE,MAAM,KAAK,mBAAmB,GAAG,SAAS,CAAC;AAE7F,MAAM,WAAW,0BAA0B;IACzC;;;;;;;;OAQG;IACH,QAAQ,CAAC,oBAAoB,CAAC,EAAE,OAAO,CAAC;CACzC;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,EAAE,aAAa,EACnB,OAAO,CAAC,EAAE,0BAA0B,GACnC,mBAAmB,GAAG,SAAS,CA0BjC;AAED,kGAAkG;AAClG,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,uFAAuF;IACvF,QAAQ,CAAC,KAAK,EAAE,qBAAqB,CAAC;IACtC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,kGAAkG;IAClG,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED;;;;GAIG;AACH,MAAM,MAAM,uBAAuB,GAAG,CACpC,OAAO,EAAE,wBAAwB,KAC9B,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;AAEpD;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAC5B,OAAO,EAAE,wBAAwB,EACjC,OAAO,EAAE,MAAM,KACZ,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,SAAS,MAAM,EAAE,CAAC,CAAC;AAEpD,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,oBAAoB,CAAC,EAAE,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAAC;CAC1D;AAsKD;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,IAAI,EAAE,aAAa,EACnB,UAAU,CAAC,EAAE,eAAe,EAC5B,OAAO,GAAE,8BAAmC,GAC3C,uBAAuB,CAiBzB"}