@oscharko-dev/keiko 0.2.0-beta.5 → 0.2.0-beta.7

package/node_modules/@oscharko-dev/keiko-quality-intelligence/dist/domain/figma/htmlCssAdapter.js

@@ -9,8 +9,12 @@
 //
 // Output is a reviewable proposal (an ordered file list): `index.html` (links every screen),
 // `tokens.css` (the `:root` custom-property table), and one `screens/<id>.html` per screen. Pure: no
-// IO, no model, no Date — a given plan yields a byte-identical artifact. All text and attribute values
-// are HTML-escaped so the reviewable artifact cannot inject markup.
+// IO, no model, no clock — a given plan yields a byte-identical artifact. All text and attribute values
+// are HTML-escaped so the reviewable artifact cannot inject markup, and unsafe Unicode format chars
+// (bidi-override / zero-width / C0-C1 / DEL) are stripped from every emitted string before escaping —
+// these are not HTML metacharacters and would otherwise survive into the artifact, enabling
+// Trojan-source spoofing and zero-width-split secrets that evade redaction (same invariant the QI atom
+// path enforces). The TAB/LF/CR trio and all ordinary text survive, so clean boards are unchanged.
 //
 // CSS value handling: fontFamily tokens are emitted as quoted strings with embedded double-quotes
 // escaped and control/injection characters ('{', '}', ';', '</', '*/', newlines) stripped, so a
@@ -19,10 +23,11 @@
 // rather than emitted.
 //
 // Screen file names: Figma ids may contain ':' (Windows-invalid) and ';' (URI scheme risk in hrefs).
-// sanitizeScreenFileName replaces /[:;]/g with '-'. Collisions after substitution are resolved by a
-// numeric suffix. All relative hrefs inside screen HTML are prefixed with './' so they are relative
-// to the screens/ directory, not ambiguous URI-scheme fragments. The raw screen id is preserved in
-// the data-screen-id attribute.
+// Stored evidence can also be tampered with, so screen ids are normalized to one safe POSIX path
+// segment ([A-Za-z0-9_-]) before they become CodeFile.path / href material. Collisions after
+// substitution are resolved by a numeric suffix. All relative hrefs inside screen HTML are prefixed
+// with './' so they are relative to the screens/ directory, not ambiguous URI-scheme fragments. The
+// raw screen id is preserved in the data-screen-id attribute.
 //
 // Layout / sizing / cornerRadius / typography (from IrNode, threaded through EmissionElement):
 // For nodes with auto-layout, a deterministic CSS class is emitted (name = "n-" + sanitized node id)
@@ -34,6 +39,7 @@
 // inline).
 // What is NOT reproduced: absolute positioning, constraints, effects (shadows/blur), image fills
 // beyond refs, grid layout, overflow, z-ordering, component variants.
+import { stripUnsafeFormatChars } from "../assertions.js";
 const ADAPTER_NAME = "html-css";
 const INDENT = "  ";
 const HTML_ESCAPES = {
@@ -43,19 +49,34 @@ const HTML_ESCAPES = {
     '"': "&quot;",
     "'": "&#39;",
 };
-const escapeHtml = (value) => value.replace(/[&<>"']/gu, (char) => HTML_ESCAPES[char] ?? char);
+// Strip unsafe Unicode format chars (bidi-override / zero-width / C0-C1 / DEL) BEFORE HTML-escaping.
+// These are NOT HTML metacharacters, so escaping alone passes them verbatim into the reviewable
+// artifact — enabling Trojan-source spoofing and zero-width-split secrets that evade redaction. This
+// mirrors the QI atom-text invariant (stripUnsafeFormatChars). Clean text is unchanged — the TAB/LF/CR
+// trio and all ordinary/accented/CJK/emoji code points survive — so deterministic output stays
+// byte-identical for non-hostile boards.
+const escapeHtml = (value) => stripUnsafeFormatChars(value).replace(/[&<>"']/gu, (char) => HTML_ESCAPES[char] ?? char);
 const indent = (depth) => INDENT.repeat(depth);
 // ─── Fix #7: safe screen file names ──────────────────────────────────────────
 //
-// Figma ids contain ':' (invalid on Windows file paths) and INSTANCE ids contain ';' which is
-// parsed as a URI scheme separator in sibling hrefs (e.g. "I123:456;789:12.html" → opaque URI).
-// We replace /[:;]/g with '-'; ids are unique before substitution so collisions are rare, but a
-// numeric suffix is appended defensively.
+// Figma ids contain ':' (invalid on Windows file paths) and INSTANCE ids contain ';' which is parsed
+// as a URI scheme separator in sibling hrefs (e.g. "I123:456;789:12.html" → opaque URI). A tampered
+// stored snapshot could also contain slashes, backslashes, or other path metacharacters. Normalize to
+// a single artifact-relative filename segment. Ids are unique before substitution so collisions are
+// rare, but a numeric suffix is appended defensively.
+const SAFE_SCREEN_FILE_RE = /[^A-Za-z0-9_-]/gu;
+function sanitizeScreenFileName(screenId) {
+    const cleaned = stripUnsafeFormatChars(screenId)
+        .replace(SAFE_SCREEN_FILE_RE, "-")
+        .replace(/-+/gu, "-")
+        .replace(/^-|-$/gu, "");
+    return cleaned.length > 0 ? cleaned : "screen";
+}
 function buildSafeNameIndex(screens) {
     const seen = new Map();
     const result = new Map();
     for (const screen of screens) {
-        const base = screen.screenId.replace(/[:;]/gu, "-");
+        const base = sanitizeScreenFileName(screen.screenId);
         const count = seen.get(base) ?? 0;
         seen.set(base, count + 1);
         result.set(screen.screenId, count === 0 ? base : `${base}-${String(count)}`);
@@ -72,7 +93,12 @@ function buildSafeNameIndex(screens) {
 // eslint-disable-next-line no-control-regex
 const CSS_INJECTION_RE = /[{};]|<\/|\*\/|[\u0000-\u001f\u007f]/gu;
 const safeFontFamily = (family) => {
-    const cleaned = family.replace(CSS_INJECTION_RE, "").replace(/"/gu, "\\22 ");
+    // Strip unsafe Unicode format chars first — bidi/zero-width/C1 are NOT covered by CSS_INJECTION_RE
+    // (which only strips C0/DEL + structural injection sequences) — then escape embedded quotes. Same
+    // egress invariant as escapeHtml: these chars would otherwise survive into the quoted CSS string.
+    const cleaned = stripUnsafeFormatChars(family)
+        .replace(CSS_INJECTION_RE, "")
+        .replace(/"/gu, "\\22 ");
     return `"${cleaned}"`;
 };
 // Valid CSS hex color: 3, 4, 6, or 8 hex digits.
@@ -95,8 +121,8 @@ const spaceVar = (index) => `--space-${String(index + 1)}`;
 const radiusVar = (index) => `--radius-${String(index + 1)}`;
 const fontVar = (index) => `--font-${String(index + 1)}`;
 // Typography key used to match per-node typography against the global token table.
-const typographyKey = (t) => `${t.fontFamily}|${String(t.fontSize)}|${String(t.fontWeight)}`;
-const typographyTokenKey = (t) => `${t.fontFamily}|${String(t.fontSize)}|${String(t.fontWeight)}`;
+const typographyKey = (t) => `${t.fontFamily}|${String(t.fontSize)}|${String(t.fontWeight)}|${String(t.lineHeight ?? "")}`;
+const typographyTokenKey = (t) => `${t.fontFamily}|${String(t.fontSize)}|${String(t.fontWeight)}|${String(t.lineHeight)}`;
 const buildTokenLookups = (tokens) => {
     const colorMap = new Map();
     tokens.colors.forEach((token, i) => {
@@ -106,29 +132,70 @@ const buildTokenLookups = (tokens) => {
     tokens.typography.forEach((token, i) => {
         fontMap.set(typographyTokenKey(token), fontVar(i));
     });
-    return { colorVar: colorMap, fontVar: fontMap };
+    const spaceMap = new Map();
+    tokens.spacing.forEach((token, i) => {
+        spaceMap.set(token.value, spaceVar(i));
+    });
+    const radiusMap = new Map();
+    tokens.radius.forEach((token, i) => {
+        radiusMap.set(token.value, radiusVar(i));
+    });
+    return { colorVar: colorMap, fontVar: fontMap, spaceVar: spaceMap, radiusVar: radiusMap };
 };
 // ─── Per-node CSS class generation ───────────────────────────────────────────
 //
 // A deterministic class name is derived from the node id by replacing non-alphanumeric characters
-// with "-" and prefixing "n-". This is stable: same id → same class name every run.
+// with "-" and prefixing "n-". When two raw ids sanitize to the same slug, append a stable raw-id
+// hash to the later class so distinct Figma nodes cannot alias onto one CSS selector.
 const sanitizeIdForClass = (id) => id.replace(/[^a-zA-Z0-9]/gu, "-");
-const nodeClass = (id) => `n-${sanitizeIdForClass(id)}`;
+const classHash = (id) => {
+    let hash = 0x811c9dc5;
+    for (let i = 0; i < id.length; i += 1) {
+        hash ^= id.charCodeAt(i);
+        hash = Math.imul(hash, 0x01000193);
+    }
+    return (hash >>> 0).toString(36);
+};
+const nodeClassBase = (id) => `n-${sanitizeIdForClass(id) || "node"}`;
+const nodeClass = (id, ctx) => {
+    const existing = ctx.classMap.get(id);
+    if (existing !== undefined)
+        return existing;
+    const base = nodeClassBase(id);
+    const owner = ctx.usedClasses.get(base);
+    const cls = owner === undefined || owner === id ? base : `${base}-${classHash(id)}`;
+    ctx.usedClasses.set(cls, id);
+    ctx.classMap.set(id, cls);
+    return cls;
+};
 const ALIGN_CSS = {
     start: "flex-start",
     center: "center",
     end: "flex-end",
     "space-between": "space-between",
 };
+// Resolve a numeric spacing or radius value to a CSS token var or an inline px literal.
+const spaceValue = (value, lookups) => {
+    const varName = lookups.spaceVar.get(value);
+    return varName !== undefined ? `var(${varName})` : `${String(value)}px`;
+};
+const radiusValue = (value, lookups) => {
+    const varName = lookups.radiusVar.get(value);
+    return varName !== undefined ? `var(${varName})` : `${String(value)}px`;
+};
 // Build CSS declarations for a layout node. Returns undefined when nothing would be emitted.
-const layoutDeclarations = (layout) => {
+const layoutDeclarations = (layout, lookups) => {
     const decls = ["display: flex;", `flex-direction: ${layout.mode};`];
     if (layout.itemSpacing !== undefined && Number.isFinite(layout.itemSpacing)) {
-        decls.push(`gap: ${String(layout.itemSpacing)}px;`);
+        decls.push(`gap: ${spaceValue(layout.itemSpacing, lookups)};`);
     }
     if (layout.padding !== undefined) {
         const [top, right, bottom, left] = layout.padding;
-        decls.push(`padding: ${String(top)}px ${String(right)}px ${String(bottom)}px ${String(left)}px;`);
+        const t = spaceValue(top, lookups);
+        const r = spaceValue(right, lookups);
+        const b = spaceValue(bottom, lookups);
+        const l = spaceValue(left, lookups);
+        decls.push(`padding: ${t} ${r} ${b} ${l};`);
     }
     if (layout.primaryAlign !== undefined) {
         decls.push(`justify-content: ${ALIGN_CSS[layout.primaryAlign]};`);
@@ -159,6 +226,9 @@ const typographyDeclarations = (typo, lookups) => {
         decls.push(`font-weight: ${String(typo.fontWeight)};`);
     if (Number.isFinite(typo.fontSize))
         decls.push(`font-size: ${String(typo.fontSize)}px;`);
+    if (typo.lineHeight !== undefined && Number.isFinite(typo.lineHeight)) {
+        decls.push(`line-height: ${String(typo.lineHeight)}px;`);
+    }
     if (typo.fontFamily.length > 0)
         decls.push(`font-family: ${safeFontFamily(typo.fontFamily)};`);
     return decls;
@@ -166,28 +236,36 @@ const typographyDeclarations = (typo, lookups) => {
 // Walk the element tree, collect CSS rules, populate classMap.
 const collectStyles = (element, ctx) => {
     const decls = [
-        ...(element.layout !== undefined ? layoutDeclarations(element.layout) : []),
+        ...(element.layout !== undefined ? layoutDeclarations(element.layout, ctx.lookups) : []),
         ...(element.sizing !== undefined ? sizingDeclarations(element.sizing) : []),
         ...(element.cornerRadius !== undefined && Number.isFinite(element.cornerRadius)
-            ? [`border-radius: ${String(element.cornerRadius)}px;`]
+            ? [`border-radius: ${radiusValue(element.cornerRadius, ctx.lookups)};`]
             : []),
         ...(element.typography !== undefined
             ? typographyDeclarations(element.typography, ctx.lookups)
             : []),
     ];
     if (decls.length > 0) {
-        const cls = nodeClass(element.id);
-        ctx.classMap.set(element.id, cls);
+        const cls = nodeClass(element.id, ctx);
         ctx.rules.push(`.${cls} {`);
         for (const decl of decls)
             ctx.rules.push(`  ${decl}`);
         ctx.rules.push("}");
     }
-    for (const child of element.children)
-        collectStyles(child, ctx);
+    // renderElement discards the children of void-role elements (image/input), so collecting their
+    // styles would emit orphaned CSS rules referencing classes that appear on no rendered element.
+    // Skip the recursion for void roles to keep the stylesheet aligned with the emitted HTML.
+    if (!VOID_ROLES.has(element.role)) {
+        for (const child of element.children)
+            collectStyles(child, ctx);
+    }
 };
 // ─── HTML element rendering ───────────────────────────────────────────────────
 // Fix #6: additionally emit data-node-id so the element's IR origin is traceable in the HTML output.
+// True when this element renders any visible text — its own text or a descendant TEXT node's text.
+// A button/link is usually a container whose visible label lives in a child TEXT node, so checking
+// only the element's OWN `text` misses it (WCAG 4.1.2 / 2.5.3).
+const hasRenderedText = (element) => element.text !== undefined || element.children.some(hasRenderedText);
 function elementAttributes(element, classMap) {
     const parts = [
         `data-role="${escapeHtml(element.role)}"`,
@@ -203,6 +281,13 @@ function elementAttributes(element, classMap) {
         parts.push(`aria-label="${escapeHtml(element.displayName)}"`);
     if (element.role === "image")
         parts.push(`alt="${escapeHtml(element.displayName)}"`);
+    // A button/link with NO visible text (icon-only) gets no accessible name from its content; fall
+    // back to the structural display name so the artifact stays screen-reader navigable (WCAG 4.1.2).
+    // But when it DOES render visible text (own or in a child TEXT node), adding aria-label would
+    // OVERRIDE that visible label for assistive tech (and break label-in-name, WCAG 2.5.3) — so skip it.
+    if ((element.role === "button" || element.role === "link") && !hasRenderedText(element)) {
+        parts.push(`aria-label="${escapeHtml(element.displayName)}"`);
+    }
     return parts.join(" ");
 }
 function renderElement(element, depth, classMap) {
@@ -226,7 +311,7 @@ function renderNav(navTargets, safeNames, depth) {
         return [];
     const lines = [`${indent(depth)}<nav aria-label="Screen navigation">`];
     for (const target of navTargets) {
-        const safeName = safeNames.get(target.toScreenId) ?? target.toScreenId.replace(/[:;]/gu, "-");
+        const safeName = safeNames.get(target.toScreenId) ?? sanitizeScreenFileName(target.toScreenId);
         const href = `./${escapeHtml(safeName)}.html`;
         const trigger = escapeHtml(target.trigger);
         const label = escapeHtml(target.toScreenName);
@@ -238,7 +323,12 @@ function renderNav(navTargets, safeNames, depth) {
 // Fix #7: screen file uses safe name; raw id is preserved in data-screen-id for traceability.
 function renderScreenHtml(screen, safeNames, lookups) {
     // Collect per-node styles first so classMap is populated before HTML rendering.
-    const ctx = { lookups, classMap: new Map(), rules: [] };
+    const ctx = {
+        lookups,
+        classMap: new Map(),
+        usedClasses: new Map(),
+        rules: [],
+    };
     collectStyles(screen.root, ctx);
     const styleBlock = ctx.rules.length > 0
         ? [
@@ -256,7 +346,7 @@ function renderScreenHtml(screen, safeNames, lookups) {
     ];
     return [
         "<!doctype html>",
-        '<html lang="en">',
+        '<html>',
         `${indent(1)}<head>`,
         `${indent(2)}<meta charset="utf-8" />`,
         `${indent(2)}<title>${title}</title>`,
@@ -273,13 +363,13 @@ function renderScreenHtml(screen, safeNames, lookups) {
 // Fix #7: index links use safe names for the href path but display the human-readable screen name.
 function renderIndexHtml(screens, safeNames) {
     const links = screens.map((screen) => {
-        const safeName = safeNames.get(screen.screenId) ?? screen.screenId.replace(/[:;]/gu, "-");
+        const safeName = safeNames.get(screen.screenId) ?? sanitizeScreenFileName(screen.screenId);
         return (`${indent(3)}<li><a href="screens/${escapeHtml(safeName)}.html">` +
             `${escapeHtml(screen.screenName)}</a></li>`);
     });
     return [
         "<!doctype html>",
-        '<html lang="en">',
+        '<html>',
         `${indent(1)}<head>`,
         `${indent(2)}<meta charset="utf-8" />`,
         `${indent(2)}<title>Screens</title>`,
@@ -337,7 +427,7 @@ function emitHtmlCss(plan) {
         { path: "index.html", contents: renderIndexHtml(plan.screens, safeNames) },
         { path: "tokens.css", contents: renderTokensCss(plan.tokens) },
         ...plan.screens.map((screen) => {
-            const safeName = safeNames.get(screen.screenId) ?? screen.screenId.replace(/[:;]/gu, "-");
+            const safeName = safeNames.get(screen.screenId) ?? sanitizeScreenFileName(screen.screenId);
             return {
                 path: `screens/${safeName}.html`,
                 contents: renderScreenHtml(screen, safeNames, lookups),

package/node_modules/@oscharko-dev/keiko-quality-intelligence/dist/domain/figma/index.d.ts

@@ -1,7 +1,7 @@
 export { cleanScopedNodesToScreenIr } from "./cleanToScreenIr.js";
 export { parseDesignTokens } from "./tokens.js";
 export { parseScreenIr, deriveScreenTestBaseline, renderBaselineText, } from "./screenIrTestBaseline.js";
-export type { ScreenTestBaseline, StructuralTestCategory, StructuralTestItem, } from "./screenIrTestBaseline.js";
+export type { ScreenTestBaseline, StructuralTestCategory, StructuralTestItem, StructuralTestOutcome, } from "./screenIrTestBaseline.js";
 export { mergeVisionHints } from "./visionAugmentation.js";
 export type { VisionMergeResult } from "./visionAugmentation.js";
 export { deriveNavGraph, deriveNavFlows, deriveRoutingHints, deriveNavTestItemsByScreen, } from "./navGraph.js";
@@ -15,5 +15,5 @@ export type { SemanticNamingProvider, SemanticNamingRequest } from "./semanticNa
 export { htmlCssAdapter } from "./htmlCssAdapter.js";
 export { deriveA11yTestItemsByScreen, relativeLuminance, contrastRatio, meetsContrastAa, } from "./a11yBaseline.js";
 export type { FigmaSourceNode } from "./sourceNode.js";
-export type { BoundingBox, ColorToken, DesignTokens, ImageFillRef, InteractionHint, InterScreenLink, IrNode, RadiusToken, ReductionReport, ScreenIr, ScreenIrResult, SpacingToken, TypographyToken, } from "./irTypes.js";
+export type { AlignItems, BoundingBox, ColorToken, DesignTokens, ImageFillRef, InteractionHint, InterScreenLink, IrLayout, IrNode, IrSizing, IrTypography, LayoutMode, LayoutSizing, RadiusToken, ReductionReport, ScreenIr, ScreenIrResult, SpacingToken, TypographyToken, } from "./irTypes.js";
 //# sourceMappingURL=index.d.ts.map

package/node_modules/@oscharko-dev/keiko-quality-intelligence/dist/domain/figma/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/domain/figma/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAGlE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIhD,OAAO,EACL,aAAa,EACb,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EACV,kBAAkB,EAClB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAKjE,OAAO,EACL,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,OAAO,EACP,OAAO,EACP,QAAQ,EACR,OAAO,EACP,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAMvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,cAAc,GACf,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAExF,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,YAAY,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAEzF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAKrD,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,aAAa,EACb,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,YAAY,EACV,WAAW,EACX,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,eAAe,EACf,MAAM,EACN,WAAW,EACX,eAAe,EACf,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,eAAe,GAChB,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/domain/figma/index.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAGlE,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAIhD,OAAO,EACL,aAAa,EACb,wBAAwB,EACxB,kBAAkB,GACnB,MAAM,2BAA2B,CAAC;AAEnC,YAAY,EACV,kBAAkB,EAClB,sBAAsB,EACtB,kBAAkB,EAClB,qBAAqB,GACtB,MAAM,2BAA2B,CAAC;AAGnC,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,YAAY,EAAE,iBAAiB,EAAE,MAAM,yBAAyB,CAAC;AAKjE,OAAO,EACL,cAAc,EACd,cAAc,EACd,kBAAkB,EAClB,0BAA0B,GAC3B,MAAM,eAAe,CAAC;AACvB,YAAY,EACV,OAAO,EACP,OAAO,EACP,QAAQ,EACR,OAAO,EACP,WAAW,EACX,cAAc,GACf,MAAM,eAAe,CAAC;AAMvB,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,aAAa,EACb,iBAAiB,EACjB,YAAY,EACZ,cAAc,GACf,MAAM,mBAAmB,CAAC;AAE3B,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAClD,YAAY,EAAE,YAAY,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,wBAAwB,CAAC;AAExF,OAAO,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAClD,YAAY,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAEzF,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAKrD,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,EACjB,aAAa,EACb,eAAe,GAChB,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,YAAY,EACV,UAAU,EACV,WAAW,EACX,UAAU,EACV,YAAY,EACZ,YAAY,EACZ,eAAe,EACf,eAAe,EACf,QAAQ,EACR,MAAM,EACN,QAAQ,EACR,YAAY,EACZ,UAAU,EACV,YAAY,EACZ,WAAW,EACX,eAAe,EACf,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,eAAe,GAChB,MAAM,cAAc,CAAC"}

package/node_modules/@oscharko-dev/keiko-quality-intelligence/dist/domain/figma/irTypes.d.ts

@@ -44,13 +44,15 @@ export interface IrSizing {
 }
 /**
  * Per-TEXT-node typography properties, only present on TEXT nodes. Matches what `tokens.ts`
- * already extracts globally (fontFamily, fontSize, fontWeight). Optional and additive; absent for
- * non-TEXT nodes or when the `style` block is missing. Hash-neutral like {@link IrLayout}.
+ * already extracts globally (fontFamily, fontSize, fontWeight, lineHeight). Optional and additive;
+ * absent for non-TEXT nodes or when the `style` block is missing. Hash-neutral like
+ * {@link IrLayout}.
  */
 export interface IrTypography {
     readonly fontFamily: string;
     readonly fontSize: number;
     readonly fontWeight: number;
+    readonly lineHeight?: number;
 }
 /** A kept node in a screen's normalized structural tree. */
 export interface IrNode {
@@ -88,8 +90,9 @@ export interface IrNode {
      */
     readonly cornerRadius?: number;
     /**
-     * Per-TEXT typography (fontFamily, fontSize, fontWeight). Optional and additive: absent for
-     * non-TEXT nodes or when the style block is missing. Hash-neutral like {@link IrNode.layout}.
+     * Per-TEXT typography (fontFamily, fontSize, fontWeight, optional lineHeight). Optional and
+     * additive: absent for non-TEXT nodes or when the style block is missing. Hash-neutral like
+     * {@link IrNode.layout}.
      */
     readonly typography?: IrTypography;
     readonly imageFills: readonly ImageFillRef[];

package/node_modules/@oscharko-dev/keiko-quality-intelligence/dist/domain/figma/irTypes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"irTypes.d.ts","sourceRoot":"","sources":["../../../src/domain/figma/irTypes.ts"],"names":[],"mappings":"AAQA,yFAAyF;AACzF,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC;AAE3F,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,8FAA8F;AAC9F,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,kDAAkD;AAClD,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE1C,sDAAsD;AACtD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,GAAG,eAAe,CAAC;AAEtE;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gDAAgD;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7D,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;CACpC;AAED,4EAA4E;AAC5E,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;CAClC;AAED;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,4DAA4D;AAC5D,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,SAAS,YAAY,EAAE,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,kGAAkG;AAClG,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;CACzC;AAED,qGAAqG;AACrG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,4FAA4F;AAC5F,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,QAAQ,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC"}
+{"version":3,"file":"irTypes.d.ts","sourceRoot":"","sources":["../../../src/domain/figma/irTypes.ts"],"names":[],"mappings":"AAQA,yFAAyF;AACzF,MAAM,MAAM,eAAe,GAAG,QAAQ,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,WAAW,CAAC;AAE3F,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED,8FAA8F;AAC9F,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,kDAAkD;AAClD,MAAM,MAAM,UAAU,GAAG,KAAK,GAAG,QAAQ,CAAC;AAE1C,sDAAsD;AACtD,MAAM,MAAM,UAAU,GAAG,OAAO,GAAG,QAAQ,GAAG,KAAK,GAAG,eAAe,CAAC;AAEtE;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,4FAA4F;IAC5F,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,gDAAgD;IAChD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,iFAAiF;IACjF,QAAQ,CAAC,OAAO,CAAC,EAAE,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IAC7D,8DAA8D;IAC9D,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;IACnC,4DAA4D;IAC5D,QAAQ,CAAC,YAAY,CAAC,EAAE,UAAU,CAAC;CACpC;AAED,4EAA4E;AAC5E,MAAM,MAAM,YAAY,GAAG,OAAO,GAAG,KAAK,GAAG,MAAM,CAAC;AAEpD;;;;GAIG;AACH,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,YAAY,CAAC;CAClC;AAED;;;;;GAKG;AACH,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,4DAA4D;AAC5D,MAAM,WAAW,MAAM;IACrB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,eAAe,EAAE,eAAe,CAAC;IAC1C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,WAAW,CAAC,EAAE,WAAW,CAAC;IACnC;;;;OAIG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B;;;;OAIG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,QAAQ,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,YAAY,CAAC;IACnC,QAAQ,CAAC,UAAU,EAAE,SAAS,YAAY,EAAE,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,kGAAkG;AAClG,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,CAAC;IACvC,QAAQ,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC;IAChD,QAAQ,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,CAAC;IAC1C,QAAQ,CAAC,MAAM,EAAE,SAAS,WAAW,EAAE,CAAC;CACzC;AAED,qGAAqG;AACrG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,4FAA4F;AAC5F,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,OAAO,EAAE,SAAS,QAAQ,EAAE,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,YAAY,CAAC;IAC9B,QAAQ,CAAC,KAAK,EAAE,SAAS,eAAe,EAAE,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,eAAe,CAAC;CACrC"}

package/node_modules/@oscharko-dev/keiko-quality-intelligence/dist/domain/figma/links.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"links.d.ts","sourceRoot":"","sources":["../../../src/domain/figma/links.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAyC,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC9F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAmF7C,sGAAsG;AACtG,eAAO,MAAM,uBAAuB,GAClC,SAAS,eAAe,EACxB,SAAS,SAAS,UAAU,EAAE,KAC7B,SAAS,eAAe,EAS1B,CAAC"}
+{"version":3,"file":"links.d.ts","sourceRoot":"","sources":["../../../src/domain/figma/links.ts"],"names":[],"mappings":"AAcA,OAAO,EAAyC,KAAK,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAC9F,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AACpD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAqF7C,sGAAsG;AACtG,eAAO,MAAM,uBAAuB,GAClC,SAAS,eAAe,EACxB,SAAS,SAAS,UAAU,EAAE,KAC7B,SAAS,eAAe,EAS1B,CAAC"}

package/node_modules/@oscharko-dev/keiko-quality-intelligence/dist/domain/figma/links.js

@@ -9,9 +9,6 @@
 //   3. CANVAS `flowStartingPoints[]` + `prototypeStartNodeID` — flow entry points, emitted as
 //      `{ sourceNodeId: <canvasId>, trigger: "FLOW_START", targetNodeId }`.
 //
-// URL actions (type=URL, url=<href>) are surfaced with targetNodeId `url:<href>` so they appear in
-// `unresolvedLinks` downstream (no screen owns a `url:` node id) rather than being silently dropped.
-//
 // Links come from the pruned tree (hidden/dropped nodes emit nothing) plus the raw root for flow
 // entry points. The output is sorted by a stable structural key so order never depends on traversal.
 import { asNode, nodeId, readArray, readString } from "./sourceNode.js";
@@ -19,23 +16,18 @@ const FLOW_START = "FLOW_START";
 const UNKNOWN_TRIGGER = "UNKNOWN";
 // Shared constant — see prune.ts for rationale. Must stay in sync with every other recursive walk.
 const MAX_TREE_DEPTH = 512;
-// URL actions carry type="URL" and a url field instead of a destinationId. We surface them with the
-// synthetic target `url:<href>` so they appear in unresolvedLinks downstream (no screen owns a node
-// with that id) rather than being silently dropped. Board-content URLs are acceptable here.
-const readUrlAction = (action) => {
-    if (readString(action.type) !== "URL")
-        return undefined;
-    const url = readString(action.url);
-    return url !== undefined ? `url:${url}` : undefined;
-};
+const EXTERNAL_LINK_TARGET = /^(?:[a-z][a-z0-9+.-]*:\/\/|mailto:|tel:|data:|javascript:)/iu;
+const isExternalLinkTarget = (targetNodeId) => targetNodeId.startsWith("url:") || EXTERNAL_LINK_TARGET.test(targetNodeId);
 const readDestination = (action) => {
     const direct = readString(action.destinationId);
     if (direct !== undefined)
-        return direct;
+        return isExternalLinkTarget(direct) ? undefined : direct;
     const nav = asNode(action.navigation);
-    if (nav !== undefined)
-        return readString(nav.destinationId);
-    return readUrlAction(action);
+    if (nav !== undefined) {
+        const nested = readString(nav.destinationId);
+        return nested !== undefined && !isExternalLinkTarget(nested) ? nested : undefined;
+    }
+    return undefined;
 };
 const triggerType = (entry) => {
     const trigger = asNode(entry.trigger);
@@ -91,7 +83,11 @@ const collectFlowEntries = (root, out) => {
     if (start !== undefined)
         out.push({ sourceNodeId, trigger: FLOW_START, targetNodeId: start });
 };
-const linkKey = (link) => `${link.sourceNodeId}\u0000${link.trigger}\u0000${link.targetNodeId}`;
+// Injective dedup/sort key: JSON.stringify of the field tuple escapes every character (NUL,
+// backslash, quote, ...), so two distinct links can never collide into one key, which would
+// silently drop a transition feeding the downstream navigation graph (#811). Deterministic and
+// stable-ordered, preserving the byte-identical IR contract for every input.
+const linkKey = (link) => JSON.stringify([link.sourceNodeId, link.trigger, link.targetNodeId]);
 /** Extract stable-ordered, deduped raw inter-screen links from the pruned tree + raw flow entries. */
 export const extractInterScreenLinks = (rawRoot, screens) => {
     const collected = [];

package/node_modules/@oscharko-dev/keiko-quality-intelligence/dist/domain/figma/navGraph.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"navGraph.d.ts","sourceRoot":"","sources":["../../../src/domain/figma/navGraph.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAqC,cAAc,EAAE,MAAM,cAAc,CAAC;AACtF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AASpE,gCAAgC;AAChC,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,+EAA+E;AAC/E,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,qGAAqG;AACrG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,qEAAqE;AACrE,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD,gGAAgG;IAChG,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,4DAA4D;IAC5D,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,8DAA8D;IAC9D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAED,4DAA4D;AAC5D,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,SAAS;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC5F;AA+FD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,cAAc,GAAG,QAAQ,CA0B3D;AA+CD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,QAAQ,EACf,QAAQ,GAAE,MAA+B,GACxC,SAAS,OAAO,EAAE,CAWpB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,WAAW,EAAE,CAU1E;AA+ED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,QAAQ,EACf,YAAY,GAAE,MAA+B,GAC5C,WAAW,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC,CAYpD"}
+{"version":3,"file":"navGraph.d.ts","sourceRoot":"","sources":["../../../src/domain/figma/navGraph.ts"],"names":[],"mappings":"AAuBA,OAAO,KAAK,EAAqC,cAAc,EAAE,MAAM,cAAc,CAAC;AACtF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AASpE,gCAAgC;AAChC,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,+EAA+E;AAC/E,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,qGAAqG;AACrG,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,qEAAqE;AACrE,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,SAAS,OAAO,EAAE,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,SAAS,cAAc,EAAE,CAAC;IACpD,gGAAgG;IAChG,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,4DAA4D;IAC5D,QAAQ,CAAC,oBAAoB,EAAE,SAAS,MAAM,EAAE,CAAC;IACjD,8DAA8D;IAC9D,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;CAC9C;AAED,4DAA4D;AAC5D,MAAM,WAAW,OAAO;IACtB,QAAQ,CAAC,SAAS,EAAE,SAAS,MAAM,EAAE,CAAC;CACvC;AAED,kFAAkF;AAClF,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,SAAS;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CAC5F;AA6GD;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,cAAc,GAAG,QAAQ,CA0B3D;AA6DD;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,QAAQ,EACf,QAAQ,GAAE,MAA+B,GACxC,SAAS,OAAO,EAAE,CAWpB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,QAAQ,GAAG,SAAS,WAAW,EAAE,CAU1E;AA+ED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,QAAQ,EACf,YAAY,GAAE,MAA+B,GAC5C,WAAW,CAAC,MAAM,EAAE,SAAS,kBAAkB,EAAE,CAAC,CAYpD"}

package/node_modules/@oscharko-dev/keiko-quality-intelligence/dist/domain/figma/navGraph.js

@@ -42,11 +42,16 @@ function buildNodeOwnership(screens) {
     }
     return owner;
 }
-// NUL (\u0000) is used as a field separator inside key strings: it cannot appear in Figma node ids
-// or trigger names, so the join is unambiguous. The escape sequence is used rather than a literal
-// NUL byte to keep the source file grep-able as plain text (Fix #2).
-const SEP = "\u0000";
-const edgeKey = (e) => `${e.fromScreenId}${SEP}${e.trigger}${SEP}${e.toScreenId}${SEP}${e.sourceNodeId}${SEP}${e.targetNodeId}`;
+// Injective composite key over a field tuple. The previous NUL-delimited join was non-injective:
+// a value carrying the separator byte could shift a field boundary so two distinct tuples collapse
+// to one key — the exact defect #752 fixed in links.ts linkKey, and a Figma node id or trigger from
+// an (untrusted) snapshot is not guaranteed separator-free. JSON.stringify escapes the quote,
+// backslash, and control bytes, so the encoding is total and unambiguous for any input. Used for
+// de-duplication, identity hashing, and stable total ordering so every emitted collection stays
+// byte-identical for a given input.
+const compositeKey = (...parts) => JSON.stringify(parts);
+const edgeKey = (e) => compositeKey(e.fromScreenId, e.trigger, e.toScreenId, e.sourceNodeId, e.targetNodeId);
+const flowKey = (screenIds) => compositeKey(...screenIds);
 // Classify each raw link against the node-ownership index. A target that owns a screen and a source
 // that owns a screen yields an edge; a FLOW_START whose target owns a screen marks an entry; any
 // link whose target owns no screen is unresolved (an edge that leaves the known screens).
@@ -77,7 +82,10 @@ function classifyLinks(links, owner) {
     }
     return {
         edges: [...edges.values()].sort((a, b) => byString(edgeKey(a), edgeKey(b))),
-        unresolved: [...unresolved].sort((a, b) => byString(a.targetNodeId, b.targetNodeId)),
+        // Total order: targetNodeId alone is not injective across unresolved links sharing a target, so
+        // input order would leak into the output and break the byte-identical guarantee (DET1). The
+        // full tuple key restores a deterministic total order under ties.
+        unresolved: [...unresolved].sort((a, b) => byString(compositeKey(a.targetNodeId, a.trigger, a.sourceNodeId), compositeKey(b.targetNodeId, b.trigger, b.sourceNodeId))),
         entryScreenIds: [...entries].sort(byString),
     };
 }
@@ -159,12 +167,27 @@ function walkFlows(start, adjacency, maxDepth, cap, counter, out) {
     recurse([start]);
 }
 // Build the adjacency map once; edges are already stable-sorted so adjacency lists are deterministic.
+// Parallel edges (distinct prototype reactions from the same screen to the same target — two buttons,
+// or the same button with two triggers, both reaching A → B) must NOT push duplicate target entries:
+// walkFlows would traverse the identical sub-path once per duplicate, inflating the shared flow
+// counter past the number of DISTINCT flows. Because deriveNavTestItemsByScreen decides whether to
+// emit the truncation notice from the post-dedup flows.length, an inflated counter can hit
+// MAX_NAV_FLOWS and truncate enumeration while flows.length stays below the cap — silently dropping
+// flows with NO coverage-notice (CORR1). Navigation adjacency is a reachability relation, so a
+// per-source target set is the correct model and keeps the counter equal to the distinct-flow count.
+// First-occurrence order is preserved (edges are stable-sorted) so the derivation stays byte-identical.
 function buildAdjacency(edges) {
     const adj = new Map();
+    const seen = new Map();
     for (const edge of edges) {
         const list = adj.get(edge.fromScreenId) ?? [];
+        const seenTargets = seen.get(edge.fromScreenId) ?? new Set();
+        if (seenTargets.has(edge.toScreenId))
+            continue;
         list.push(edge.toScreenId);
+        seenTargets.add(edge.toScreenId);
         adj.set(edge.fromScreenId, list);
+        seen.set(edge.fromScreenId, seenTargets);
     }
     return adj;
 }
@@ -185,8 +208,8 @@ export function deriveNavFlows(graph, maxDepth = DEFAULT_MAX_FLOW_DEPTH) {
     }
     const byKey = new Map();
     for (const screenIds of collected)
-        byKey.set(screenIds.join(SEP), { screenIds });
-    return [...byKey.values()].sort((a, b) => byString(a.screenIds.join(SEP), b.screenIds.join(SEP)));
+        byKey.set(flowKey(screenIds), { screenIds });
+    return [...byKey.values()].sort((a, b) => byString(flowKey(a.screenIds), flowKey(b.screenIds)));
 }
 /**
  * Framework-agnostic routing hints for design-to-code (#755): every screen mapped to its outgoing
@@ -199,7 +222,7 @@ export function deriveRoutingHints(graph) {
         transitions: graph.edges
             .filter((e) => e.fromScreenId === node.screenId)
             .map((e) => ({ trigger: e.trigger, toScreenId: e.toScreenId }))
-            .sort((a, b) => byString(`${a.trigger}${SEP}${a.toScreenId}`, `${b.trigger}${SEP}${b.toScreenId}`)),
+            .sort((a, b) => byString(compositeKey(a.trigger, a.toScreenId), compositeKey(b.trigger, b.toScreenId))),
     }));
 }
 const screenNameOf = (graph, screenId) => graph.nodes.find((n) => n.screenId === screenId)?.screenName ?? screenId;
@@ -228,7 +251,7 @@ function flowItem(graph, flow) {
     const entry = flow.screenIds[0] ?? "";
     const names = flow.screenIds.map((id) => `"${screenNameOf(graph, id)}"`).join(" → ");
     return {
-        id: navItemId("fflow", flow.screenIds.join(SEP)),
+        id: navItemId("fflow", flowKey(flow.screenIds)),
         category: "flow",
         screenId: entry,
         screenName: screenNameOf(graph, entry),
@@ -241,7 +264,7 @@ function coverageItem(graph, screenId, kind) {
         ? `Screen "${name}" is unreachable: no navigation reaches it`
         : `Screen "${name}" is a dead end: no navigation leaves it`;
     return {
-        id: navItemId("fcov", `${kind}${SEP}${screenId}`),
+        id: navItemId("fcov", compositeKey(kind, screenId)),
         category: "coverage-notice",
         screenId,
         screenName: name,
@@ -254,7 +277,7 @@ function flowCapNoticeItem(graph, totalEnumerated) {
     const entryId = graph.entryScreenIds[0] ?? graph.nodes[0]?.screenId ?? "";
     const name = screenNameOf(graph, entryId);
     return {
-        id: navItemId("fnavcap", `cap${SEP}${entryId}`),
+        id: navItemId("fnavcap", compositeKey("cap", entryId)),
         category: "coverage-notice",
         screenId: entryId,
         screenName: name,

package/node_modules/@oscharko-dev/keiko-quality-intelligence/dist/domain/figma/normalize.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../../src/domain/figma/normalize.ts"],"names":[],"mappings":"AAoCA,OAAO,KAAK,EAMV,MAAM,EAKP,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAqL7C,8FAA8F;AAC9F,eAAO,MAAM,mBAAmB,GAAI,QAAQ,UAAU,KAAG,MAAgC,CAAC;AAO1F,6EAA6E;AAC7E,eAAO,MAAM,YAAY,GAAI,MAAM,MAAM,KAAG,MAAiC,CAAC"}
+{"version":3,"file":"normalize.d.ts","sourceRoot":"","sources":["../../../src/domain/figma/normalize.ts"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAMV,MAAM,EAKP,MAAM,cAAc,CAAC;AACtB,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAiO7C,8FAA8F;AAC9F,eAAO,MAAM,mBAAmB,GAAI,QAAQ,UAAU,KAAG,MAAgC,CAAC;AAO1F,6EAA6E;AAC7E,eAAO,MAAM,YAAY,GAAI,MAAM,MAAM,KAAG,MAAiC,CAAC"}