sela-core 0.1.0-alpha.2 → 0.1.0-alpha.31

package/dist/config/ConfigLoader.d.ts

@@ -5,6 +5,11 @@ export declare class ConfigLoader {
     /**
      * Returns the fully resolved config.  First call does all I/O; subsequent
      * calls return the cached result at zero cost.
+     *
+     * Throws when:
+     * - `SELA_CONFIG_PATH` is set but points to a non-existent file.
+     * - A config file is found but cannot be loaded or has invalid keys.
+     * - `SELA_DRY_RUN` / `SELA_NO_CACHE` contain an unrecognised value.
      */
     static getInstance(): ResolvedConfig;
     private static logEnvBanners;

package/dist/config/ConfigLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ConfigLoader.d.ts","sourceRoot":"","sources":["../../src/config/ConfigLoader.ts"],"names":[],"mappings":"AAQA,OAAO,EAAc,cAAc,EAAiB,MAAM,cAAc,CAAC;AA6GzE,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA+B;IACtD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAuB;IAE5C;;;OAGG;IACH,MAAM,CAAC,WAAW,IAAI,cAAc;IAuCpC,OAAO,CAAC,MAAM,CAAC,aAAa;IAW5B,yEAAyE;IACzE,MAAM,CAAC,SAAS,IAAI,MAAM,GAAG,IAAI;IAMjC,uDAAuD;IACvD,MAAM,CAAC,KAAK,IAAI,IAAI;CAIrB"}
+{"version":3,"file":"ConfigLoader.d.ts","sourceRoot":"","sources":["../../src/config/ConfigLoader.ts"],"names":[],"mappings":"AAQA,OAAO,EAAc,cAAc,EAAiB,MAAM,cAAc,CAAC;AAwLzE,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA+B;IACtD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAuB;IAE5C;;;;;;;;OAQG;IACH,MAAM,CAAC,WAAW,IAAI,cAAc;IAmCpC,OAAO,CAAC,MAAM,CAAC,aAAa;IAW5B,yEAAyE;IACzE,MAAM,CAAC,SAAS,IAAI,MAAM,GAAG,IAAI;IAKjC,uDAAuD;IACvD,MAAM,CAAC,KAAK,IAAI,IAAI;CAIrB"}

package/dist/config/ConfigLoader.js

@@ -43,10 +43,41 @@ const path = __importStar(require("path"));
 const child_process_1 = require("child_process");
 const SelaConfig_1 = require("./SelaConfig");
 const logger_1 = require("../utils/logger");
+// All public top-level keys of SelaConfig — used to catch typos at load time.
+const KNOWN_CONFIG_KEYS = new Set([
+    "healingPolicy",
+    "thresholds",
+    "agenticDiscovery",
+    "updateStrategy",
+    "autoCommit",
+    "prAutomation",
+    "dnaStoragePath",
+    "allowedPaths",
+    "maxHealsPerRun",
+    "sanitization",
+    "branchOverrides",
+]);
 // ─────────────────────────────────────────────────────────────────
 // FILE DISCOVERY
 // ─────────────────────────────────────────────────────────────────
+/**
+ * Resolves the config file path.
+ *
+ * Resolution order:
+ *   1. `SELA_CONFIG_PATH` env var — absolute or cwd-relative; throws immediately
+ *      if set but the file does not exist (typo in CI config is a hard error).
+ *   2. Upward traversal from `startDir`, checking both .ts and .js extensions,
+ *      stopping at the filesystem root.
+ */
 function findConfigFile(startDir) {
+    const envPath = process.env.SELA_CONFIG_PATH;
+    if (envPath) {
+        const resolved = path.resolve(envPath);
+        if (fs.existsSync(resolved))
+            return resolved;
+        throw new Error(`[Sela] SELA_CONFIG_PATH points to a non-existent file: "${resolved}". ` +
+            `Check the env var in your CI configuration.`);
+    }
     let dir = startDir;
     while (true) {
         for (const name of ["sela.config.ts", "sela.config.js"]) {
@@ -65,13 +96,11 @@ function findConfigFile(startDir) {
 // ─────────────────────────────────────────────────────────────────
 function getCurrentBranch() {
     try {
-        // Fail fast if not a git repo or git is unavailable
         const branch = (0, child_process_1.execSync)("git rev-parse --abbrev-ref HEAD", {
             encoding: "utf-8",
             stdio: ["pipe", "pipe", "pipe"],
         }).trim();
         if (branch === "HEAD") {
-            // Detached HEAD (common in CI with explicit SHA checkout)
             logger_1.logger.warn("Detached HEAD detected - branch overrides skipped");
             return null;
         }
@@ -83,25 +112,64 @@ function getCurrentBranch() {
     }
 }
 // ─────────────────────────────────────────────────────────────────
+// STRUCTURAL VALIDATION
+// ─────────────────────────────────────────────────────────────────
+function validateConfigKeys(config, filePath) {
+    const unknown = Object.keys(config).filter((k) => !KNOWN_CONFIG_KEYS.has(k));
+    if (unknown.length > 0) {
+        throw new Error(`[Sela] Unknown key(s) in ${path.basename(filePath)}: ` +
+            `${unknown.map((k) => `"${k}"`).join(", ")}. ` +
+            `Valid top-level keys: ${[...KNOWN_CONFIG_KEYS].join(", ")}.`);
+    }
+}
+// ─────────────────────────────────────────────────────────────────
 // CONFIG FILE LOADING
 // ─────────────────────────────────────────────────────────────────
+/**
+ * Loads and validates the raw config from `configPath`.
+ *
+ * Load strategy (in order):
+ *   1. `configPath` as-is — works when a TS loader is registered
+ *      (Playwright, ts-node, tsx).
+ *   2. `.js` sibling — for compiled CI builds where only the transpiled file
+ *      is present alongside the source `.ts`.
+ *
+ * Throws (never silently returns {}) when the file is found but every load
+ * attempt fails, so CI surfaces the root cause instead of running on defaults.
+ */
 function loadRawConfig(configPath) {
-    try {
-        // Works in Playwright test context (TypeScript loader registered by @playwright/test)
-        // and in Jest context (ts-jest). Falls back gracefully if neither is active.
-        // eslint-disable-next-line @typescript-eslint/no-var-requires
-        const mod = require(configPath);
-        const config = mod?.default ?? mod ?? {};
-        if (typeof config !== "object" || config === null) {
-            logger_1.logger.warn(`sela.config did not export an object - using defaults`);
-            return {};
-        }
-        return config;
+    const candidates = [configPath];
+    if (configPath.endsWith(".ts")) {
+        candidates.push(configPath.replace(/\.ts$/, ".js"));
     }
-    catch (err) {
-        logger_1.logger.warn(`Failed to load ${path.basename(configPath)}: ${err.message}`);
-        return {};
+    let lastError = null;
+    for (const candidate of candidates) {
+        if (!fs.existsSync(candidate))
+            continue;
+        try {
+            // eslint-disable-next-line @typescript-eslint/no-var-requires
+            const mod = require(candidate);
+            const config = mod?.default ?? mod ?? {};
+            if (typeof config !== "object" || config === null || Array.isArray(config)) {
+                throw new Error(`${path.basename(candidate)} must export a plain object — ` +
+                    `got ${Array.isArray(config) ? "array" : typeof config}`);
+            }
+            validateConfigKeys(config, candidate);
+            return config;
+        }
+        catch (err) {
+            // Key-validation failures are definitive — skip fallback candidates.
+            if (err.message?.startsWith("[Sela]"))
+                throw err;
+            lastError = err;
+        }
     }
+    // Every attempt failed — throw with a diagnostic instead of silently
+    // falling back to defaults. Missing sela.config → defaults is intentional
+    // (handled at the call site); found-but-broken is always a hard error.
+    throw new Error(`[Sela] Failed to load ${path.basename(configPath)}: ${lastError?.message ?? "unknown error"}. ` +
+        `Ensure a TypeScript loader (Playwright, ts-node, tsx) is active, ` +
+        `or provide a compiled sela.config.js alongside sela.config.ts.`);
 }
 // ─────────────────────────────────────────────────────────────────
 // DEEP MERGE  (plain objects only - arrays are replaced, not merged)
@@ -134,20 +202,23 @@ class ConfigLoader {
     /**
      * Returns the fully resolved config.  First call does all I/O; subsequent
      * calls return the cached result at zero cost.
+     *
+     * Throws when:
+     * - `SELA_CONFIG_PATH` is set but points to a non-existent file.
+     * - A config file is found but cannot be loaded or has invalid keys.
+     * - `SELA_DRY_RUN` / `SELA_NO_CACHE` contain an unrecognised value.
      */
     static getInstance() {
         if (ConfigLoader.resolved)
             return ConfigLoader.resolved;
         const configPath = findConfigFile(process.cwd());
         if (!configPath) {
-            // Zero-breaking-change guarantee: no config → pure defaults
             ConfigLoader.resolved = (0, SelaConfig_1.resolveConfig)({});
             ConfigLoader.logEnvBanners(ConfigLoader.resolved);
             return ConfigLoader.resolved;
         }
         logger_1.logger.debug(`Loaded config from: ${path.relative(process.cwd(), configPath)}`);
         let rawConfig = loadRawConfig(configPath);
-        // Apply branch overrides using exact-string matching
         const detectedBranch = getCurrentBranch();
         ConfigLoader.branch = detectedBranch;
         if (rawConfig.branchOverrides && detectedBranch) {
@@ -171,7 +242,6 @@ class ConfigLoader {
     }
     /** Returns the detected Git branch name, or null if detection failed. */
     static getBranch() {
-        // Ensure getInstance() has been called at least once
         if (!ConfigLoader.resolved)
             ConfigLoader.getInstance();
         return ConfigLoader.branch;

package/dist/engine/SelaEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SelaEngine.d.ts","sourceRoot":"","sources":["../../src/engine/SelaEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAexC,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,EAAe,QAAQ,EAAkB,MAAM,yBAAyB,CAAC;AA0FhF,qBAAa,UAAU;IACrB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,mBAAmB,CAAmB;IAC9C,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,SAAS,CAA6C;IAC9D,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,eAAe,CAAkC;;IAuBnD,YAAY,CAChB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA0DnB,IAAI,CACR,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,QAAmB,GAC5B,OAAO,CAAC,MAAM,CAAC;IA8qBlB,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAerB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IAoB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,2BAA2B;IA4BnC,OAAO,CAAC,yBAAyB;IAgDjC,OAAO,CAAC,kBAAkB;IA8D1B,OAAO,CAAC,oBAAoB;IAyD5B,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAIrD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;YAgLtB,aAAa;IAsB3B,OAAO,CAAC,0BAA0B;IA+BlC,OAAO,CAAC,WAAW;IA6Bb,wBAAwB,CAC5B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM;CAqBnB;AAED,OAAO,EAAE,CAAC"}
+{"version":3,"file":"SelaEngine.d.ts","sourceRoot":"","sources":["../../src/engine/SelaEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAexC,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,EAAe,QAAQ,EAAkB,MAAM,yBAAyB,CAAC;AA0FhF,qBAAa,UAAU;IACrB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,mBAAmB,CAAmB;IAC9C,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,SAAS,CAA6C;IAC9D,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,eAAe,CAAkC;;IAuBnD,YAAY,CAChB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA0DnB,IAAI,CACR,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,QAAmB,GAC5B,OAAO,CAAC,MAAM,CAAC;IAirBlB,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAerB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IAoB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,2BAA2B;IA4BnC,OAAO,CAAC,yBAAyB;IAgDjC,OAAO,CAAC,kBAAkB;IA8D1B,OAAO,CAAC,oBAAoB;IAyD5B,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAIrD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;YAgLtB,aAAa;IAsB3B,OAAO,CAAC,0BAA0B;IA+BlC,OAAO,CAAC,WAAW;IA6Bb,wBAAwB,CAC5B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM;CAqBnB;AAED,OAAO,EAAE,CAAC"}

package/dist/engine/SelaEngine.js

@@ -481,6 +481,7 @@ If the text has NOT changed, omit the "contentChange" field entirely.`;
                 // branch / autoCommit / dry-run keep the legacy git-aware path).
                 // Falls back to the legacy regex/semantic engine on ABORT / PROMPT.
                 let updateResult;
+                let composedMicroDiff;
                 const plainInPlace = (!this.config.updateStrategy ||
                     this.config.updateStrategy === "inPlace") &&
                     !this.config.autoCommit;
@@ -500,6 +501,7 @@ If the text has NOT changed, omit the "contentChange" field entirely.`;
                             composed.outcome?.status === "applied" &&
                             (strat === "MUTATE_IN_PLACE" || strat === "FORK_AT_TEST")) {
                             WorkspaceSnapshotService_1.sharedWorkspaceSnapshot.postWrite(resolvedForCompose);
+                            composedMicroDiff = composed.outcome?.microDiff;
                             const wl = composed.writtenLine ?? line;
                             logger_1.logger.stage("ANALYZING AST", `composeHeal primary path (${strat})`);
                             updateResult = {
@@ -550,7 +552,7 @@ If the text has NOT changed, omit the "contentChange" field entirely.`;
                 // any developer dirty edits sit identically in both buffers and
                 // therefore cancel out. Falls back to "" when the snapshot is
                 // missing (cross-file healing into an untracked path, etc.).
-                const gitUnifiedDiff = this._captureIsolatedDiff(mutatedFilePath);
+                const gitUnifiedDiff = composedMicroDiff || this._captureIsolatedDiff(mutatedFilePath);
                 const firstChange = this._extractFirstChangeFromDiff(gitUnifiedDiff);
                 // Backward-compat: keep oldCodeLine/newCodeLine populated from the
                 // first -/+ pair inside the diff. When git produced no diff (file

package/dist/errors/SelaError.d.ts

@@ -63,6 +63,10 @@ export declare const SAFETY_GUARD_CODES: {
     readonly BLOCKED_ROLE_SWAP_ASSERTION: "SG_BLOCKED_ROLE_SWAP_ASSERTION";
     readonly FAIL_HARD_AUDITOR_INCONSISTENT: "SG_FAIL_HARD_AUDITOR_INCONSISTENT";
     readonly BLOCKED_AUDITOR_SUSPICIOUS: "SG_BLOCKED_AUDITOR_SUSPICIOUS";
+    /** Structural pre-LLM check: old element had a destructive/auth role and
+     *  the candidate does not — replacing a DELETE/AUTH action is always
+     *  semantically inconsistent regardless of AI confidence. */
+    readonly FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION: "SG_FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION";
     /**
      * Heal was REQUIRES_REVIEW → quarantined (decision #1): proposed but not
      * written to source and not executed this run, pending explicit approval.

package/dist/errors/SelaError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SelaError.d.ts","sourceRoot":"","sources":["../../src/errors/SelaError.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,aAAa,GACrB,aAAa,GACb,eAAe,GACf,YAAY,GACZ,OAAO,GACP,YAAY,GACZ,UAAU,GACV,gBAAgB,GAChB,QAAQ,GACR,QAAQ,CAAC;AAMb,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,iBAAiB,GAAG,MAAM,CAAC;IACnE,0EAA0E;IAC1E,cAAc,CAAC,EAAE,YAAY,GAAG,cAAc,GAAG,YAAY,CAAC;IAC9D,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAMD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,aAAa,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,aAAa,CAAC;IACzB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,wDAAwD;IACxD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAYD,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;gBAEvB,IAAI,EAAE,aAAa;IAsC/B,MAAM,CAAC,aAAa,CAClB,SAAS,EAAE,aAAa,EACxB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,MAAM;IAIT,MAAM,IAAI,aAAa;CAexB;AAMD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,SAAS,CAE1D;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,aAAa,GACvB,GAAG,IAAI,SAAS,CAElB;AAUD,eAAO,MAAM,kBAAkB;;;;;;;;;IAS7B;;;;OAIG;;IAEH,+EAA+E;;CAEvE,CAAC;AACX,MAAM,MAAM,eAAe,GACzB,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,oBAAoB;IAC/B,wEAAwE;;;;CAIhE,CAAC;AACX,MAAM,MAAM,iBAAiB,GAC3B,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AAEnE,eAAO,MAAM,iBAAiB;;;;;;CAMpB,CAAC;AACX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,eAAO,MAAM,iBAAiB;;;;;;;IAO5B;;;;OAIG;;CAEK,CAAC;AACX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,eAAO,MAAM,WAAW;;;;CAId,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEvE,eAAO,MAAM,cAAc;;;CAGjB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEhF,eAAO,MAAM,YAAY;IACvB,2EAA2E;;IAE3E,wDAAwD;;IAExD,gEAAgE;;IAEhE,gDAAgD;;IAEhD,8CAA8C;;IAE9C;;;;OAIG;;IAEH,gFAAgF;;CAExE,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE1E,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAC5B,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC"}
+{"version":3,"file":"SelaError.d.ts","sourceRoot":"","sources":["../../src/errors/SelaError.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,aAAa,GACrB,aAAa,GACb,eAAe,GACf,YAAY,GACZ,OAAO,GACP,YAAY,GACZ,UAAU,GACV,gBAAgB,GAChB,QAAQ,GACR,QAAQ,CAAC;AAMb,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,iBAAiB,GAAG,MAAM,CAAC;IACnE,0EAA0E;IAC1E,cAAc,CAAC,EAAE,YAAY,GAAG,cAAc,GAAG,YAAY,CAAC;IAC9D,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAMD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,aAAa,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,aAAa,CAAC;IACzB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,wDAAwD;IACxD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAYD,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;gBAEvB,IAAI,EAAE,aAAa;IAsC/B,MAAM,CAAC,aAAa,CAClB,SAAS,EAAE,aAAa,EACxB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,MAAM;IAIT,MAAM,IAAI,aAAa;CAexB;AAMD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,SAAS,CAE1D;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,aAAa,GACvB,GAAG,IAAI,SAAS,CAElB;AAUD,eAAO,MAAM,kBAAkB;;;;;;;;;IAS7B;;iEAE6D;;IAE7D;;;;OAIG;;IAEH,+EAA+E;;CAEvE,CAAC;AACX,MAAM,MAAM,eAAe,GACzB,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,oBAAoB;IAC/B,wEAAwE;;;;CAIhE,CAAC;AACX,MAAM,MAAM,iBAAiB,GAC3B,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AAEnE,eAAO,MAAM,iBAAiB;;;;;;CAMpB,CAAC;AACX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,eAAO,MAAM,iBAAiB;;;;;;;IAO5B;;;;OAIG;;CAEK,CAAC;AACX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,eAAO,MAAM,WAAW;;;;CAId,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEvE,eAAO,MAAM,cAAc;;;CAGjB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEhF,eAAO,MAAM,YAAY;IACvB,2EAA2E;;IAE3E,wDAAwD;;IAExD,gEAAgE;;IAEhE,gDAAgD;;IAEhD,8CAA8C;;IAE9C;;;;OAIG;;IAEH,gFAAgF;;CAExE,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE1E,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAC5B,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/errors/SelaError.js

@@ -94,6 +94,10 @@ exports.SAFETY_GUARD_CODES = {
     BLOCKED_ROLE_SWAP_ASSERTION: "SG_BLOCKED_ROLE_SWAP_ASSERTION",
     FAIL_HARD_AUDITOR_INCONSISTENT: "SG_FAIL_HARD_AUDITOR_INCONSISTENT",
     BLOCKED_AUDITOR_SUSPICIOUS: "SG_BLOCKED_AUDITOR_SUSPICIOUS",
+    /** Structural pre-LLM check: old element had a destructive/auth role and
+     *  the candidate does not — replacing a DELETE/AUTH action is always
+     *  semantically inconsistent regardless of AI confidence. */
+    FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION: "SG_FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION",
     /**
      * Heal was REQUIRES_REVIEW → quarantined (decision #1): proposed but not
      * written to source and not executed this run, pending explicit approval.

package/dist/services/LLMService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LLMService.d.ts","sourceRoot":"","sources":["../../src/services/LLMService.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAWtC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IAEjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC1C;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GACD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAEpD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,GAAG,WAAW,CAAC;IAC9B;;;OAGG;IACH,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B;;OAEG;IACH,aAAa,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACpC,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACxC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAqLD;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,qBAAa,UAAU;IACrB,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,IAAI,GAAE,iBAAsB;IAsBxC,OAAO,CAAC,SAAS;IAejB;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IA6FpB,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;CAqLxD"}
+{"version":3,"file":"LLMService.d.ts","sourceRoot":"","sources":["../../src/services/LLMService.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAWtC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IAEjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC1C;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GACD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAEpD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,GAAG,WAAW,CAAC;IAC9B;;;OAGG;IACH,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B;;OAEG;IACH,aAAa,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACpC,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACxC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAyND;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,qBAAa,UAAU;IACrB,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,IAAI,GAAE,iBAAsB;IAsBxC,OAAO,CAAC,SAAS;IAejB;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IA6FpB,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;CAqLxD"}

package/dist/services/LLMService.js

@@ -109,7 +109,17 @@ intended element on the next test run. Use this rubric:
   - 90-100: stable id, data-testid, or unique role+name - zero ambiguity in the DOM.
   - 70-89:  strong semantic match, but some structural drift or competing candidates.
   - 50-69:  best-guess match - multiple plausible candidates required disambiguation.
-  - 1-49:   speculative match - return this only when no better candidate exists.
+  - 20-49:  speculative match - return this only when no better candidate exists.
+  - 1-19:   SEMANTIC MISMATCH - the best candidate in the DOM has a different action
+            type or intent than the original (e.g. original was "Delete" but you can
+            only find "Update", or the element is completely absent from the DOM).
+            Use this range whenever the semantic role/purpose of the match differs
+            from what the DNA describes.
+CRITICAL: The 90-100 range is ONLY valid when the match is unambiguous AND semantically
+identical to the original element. If there is ANY doubt about semantic equivalence
+(different button text implying a different action, different role, different purpose),
+you MUST score below 70. A high confidence on a semantically wrong match is a
+critical failure - it will silently corrupt a test suite.
 NEVER omit this field. NEVER return it as a string, boolean, or null.
 Reports rendered downstream will show "n/a" when this field is missing - which
 is a clear failure signal to the developer reviewing the heal.
@@ -117,10 +127,23 @@ is a clear failure signal to the developer reviewing the heal.
 ### MANDATORY OUTPUT FORMAT
 Return ONLY valid JSON.
 
-Example output - Identifying a specific button in a list row:
+Example output A - Unambiguous match via stable testid (confidence 90-100):
 {
   "status": "FIXED",
-  "confidence": 92,
+  "confidence": 95,
+  "chainSegments": [
+    { "type": "getByTestId", "testId": "submit-order-btn" }
+  ],
+  "segments": [
+    { "type": "element", "selector": "[data-testid=\"submit-order-btn\"]" }
+  ],
+  "explanation": "Element found by stable data-testid - zero ambiguity."
+}
+
+Example output B - Semantic drift with structural change (confidence 70-89):
+{
+  "status": "FIXED",
+  "confidence": 74,
   "chainSegments": [
     { "type": "locator", "selector": ".user-item" },
     { "type": "filter", "hasText": "Bob Smith" },
@@ -132,7 +155,20 @@ Example output - Identifying a specific button in a list row:
       "selector": ".user-item >> internal:has-text=\"Bob Smith\"i >> internal:role=button[name=\"Modify Bob\"i]"
     }
   ],
-  "explanation": "Updated container to .user-item and targeted the button by its new semantic name 'Modify Bob' to ensure a unique match."
+  "explanation": "Button name changed from 'Edit Bob' to 'Modify Bob' - semantically equivalent action, structural drift in container class."
+}
+
+Example output C - Semantic mismatch, original element absent (confidence 1-19):
+{
+  "status": "FIXED",
+  "confidence": 12,
+  "chainSegments": [
+    { "type": "getByRole", "role": "button", "name": "Update System" }
+  ],
+  "segments": [
+    { "type": "element", "selector": "internal:role=button[name=\"Update System\"i]" }
+  ],
+  "explanation": "Original 'Delete System' button is absent from the DOM. Nearest candidate is 'Update System' which performs a different action - semantic mismatch, very low confidence."
 }`;
 // ─────────────────────────────────────────────────────────────────
 // HELPERS

package/dist/services/MutationApplier.d.ts

@@ -33,6 +33,8 @@ export interface ApplyOutcome {
     skipped: Array<{
         reason: string;
     }>;
+    /** Isolated per-batch unified diff — only set when status === "applied". */
+    microDiff?: string;
 }
 export interface ApplyOptions {
     /** When false, compute + gate but never touch disk. Default true. */

package/dist/services/MutationApplier.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"MutationApplier.d.ts","sourceRoot":"","sources":["../../src/services/MutationApplier.ts"],"names":[],"mappings":"AA2BA,OAAO,EACL,SAAS,EAET,UAAU,EACX,MAAM,kBAAkB,CAAC;AAY1B;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;AAE1E,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mEAAmE;IACnE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAeD,qBAAa,eAAe;IAC1B,gEAAgE;IAChE,MAAM,CAAC,YAAY,CACjB,OAAO,EAAE,SAAS,EAAE,EACpB,IAAI,GAAE,YAAiB,GACtB,YAAY,EAAE;IAIjB;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,cAAc,CACnB,KAAK,EAAE,SAAS,EAChB,IAAI,GAAE,YAAiB,GACtB,YAAY;IAqCf,OAAO,CAAC,MAAM,CAAC,sBAAsB;CA2KtC;AA2CD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAkB5D"}
+{"version":3,"file":"MutationApplier.d.ts","sourceRoot":"","sources":["../../src/services/MutationApplier.ts"],"names":[],"mappings":"AA6BA,OAAO,EACL,SAAS,EAET,UAAU,EACX,MAAM,kBAAkB,CAAC;AAY1B;;;;GAIG;AACH,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,SAAS,GAAG,QAAQ,CAAC;IAC3B,WAAW,EAAE,MAAM,CAAC;IACpB,oEAAoE;IACpE,MAAM,CAAC,EAAE,SAAS,CAAC;IACnB,4EAA4E;IAC5E,IAAI,CAAC,EAAE,UAAU,CAAC;IAClB;;;OAGG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,EAAE,YAAY,EAAE,CAAC;CACvB;AAED,MAAM,MAAM,WAAW,GAAG,SAAS,GAAG,aAAa,GAAG,OAAO,GAAG,SAAS,CAAC;AAE1E,MAAM,WAAW,YAAY;IAC3B,QAAQ,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,WAAW,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,OAAO,CAAC;IACjB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB,wEAAwE;IACxE,OAAO,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACnC,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,YAAY;IAC3B,qEAAqE;IACrE,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,mEAAmE;IACnE,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAeD,qBAAa,eAAe;IAC1B,gEAAgE;IAChE,MAAM,CAAC,YAAY,CACjB,OAAO,EAAE,SAAS,EAAE,EACpB,IAAI,GAAE,YAAiB,GACtB,YAAY,EAAE;IAIjB;;;;;;;;;;;;OAYG;IACH,MAAM,CAAC,cAAc,CACnB,KAAK,EAAE,SAAS,EAChB,IAAI,GAAE,YAAiB,GACtB,YAAY;IAqCf,OAAO,CAAC,MAAM,CAAC,sBAAsB;CAiLtC;AA2CD;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAkB5D"}

package/dist/services/MutationApplier.js

@@ -60,7 +60,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.MutationApplier = void 0;
 exports.isLocatorReturningExpr = isLocatorReturningExpr;
 const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
 const ts_morph_1 = require("ts-morph");
+const IsolatedDiff_1 = require("../utils/IsolatedDiff");
 const AnchorResolver_1 = require("./AnchorResolver");
 const DecisionEngine_1 = require("./DecisionEngine");
 const TraceBackEngine_1 = require("./TraceBackEngine");
@@ -236,6 +238,10 @@ class MutationApplier {
                 skipped,
             };
         }
+        const microDiff = (0, IsolatedDiff_1.generateUnifiedDiff)(original, newContent, {
+            filePath: path.relative(process.cwd(), filePath),
+            context: 3,
+        }) || undefined;
         // ── Type-safety gate: baseline-diff diagnostics ──────────────────
         const afterSf = project.createSourceFile(filePath, newContent, {
             overwrite: true,
@@ -286,6 +292,7 @@ class MutationApplier {
             written: write && !dryRun,
             finalContent: newContent,
             skipped,
+            microDiff,
         };
     }
 }

package/dist/services/SafetyGuard.d.ts

@@ -115,6 +115,7 @@ export declare class SafetyGuard {
     constructor(arg?: ResolvedThresholds | SafetyGuardOptions);
     private static normalizeArgs;
     evaluate(context: HealContext, aiFix: AIFixSummary): Promise<SafetyDecision>;
+    private applyTextDriftGuard;
     classifyFunctionalRole(text: string): FunctionalRole;
 }
 //# sourceMappingURL=SafetyGuard.d.ts.map

package/dist/services/SafetyGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SafetyGuard.d.ts","sourceRoot":"","sources":["../../src/services/SafetyGuard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAEL,cAAc,EACf,MAAM,yBAAyB,CAAC;AAMjC,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE9C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,uEAAuE;IACvE,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,6DAA6D;IAC7D,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,+CAA+C;IAC/C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,WAAW,GAAG,SAAS,CAAC;AAE7E;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE5D,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,iBAAiB,CAUlE;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,mEAAmE;IACnE,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,cAAc,CAAC;QAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B;;;;WAIG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,oEAAoE;QACpE,oBAAoB,CAAC,EACjB,UAAU,GACV,cAAc,GACd,OAAO,GACP,UAAU,GACV,IAAI,CAAC;QACT,qFAAqF;QACrF,mBAAmB,CAAC,EAAE;YACpB,aAAa,EAAE,MAAM,CAAC;YACtB,OAAO,EAAE,MAAM,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC;YACd,kBAAkB,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,CAAC;CACH;AAkBD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,UAAU,CAAqB;IAEvC;;;;OAIG;gBACS,GAAG,CAAC,EAAE,kBAAkB,GAAG,kBAAkB;IAMzD,OAAO,CAAC,MAAM,CAAC,aAAa;IAqBtB,QAAQ,CACZ,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,cAAc,CAAC;IAgC1B,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc;CAGrD"}
+{"version":3,"file":"SafetyGuard.d.ts","sourceRoot":"","sources":["../../src/services/SafetyGuard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAEL,cAAc,EACf,MAAM,yBAAyB,CAAC;AAOjC,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE9C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,uEAAuE;IACvE,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,6DAA6D;IAC7D,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,+CAA+C;IAC/C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,WAAW,GAAG,SAAS,CAAC;AAE7E;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE5D,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,iBAAiB,CAUlE;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,mEAAmE;IACnE,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,cAAc,CAAC;QAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B;;;;WAIG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,oEAAoE;QACpE,oBAAoB,CAAC,EACjB,UAAU,GACV,cAAc,GACd,OAAO,GACP,UAAU,GACV,IAAI,CAAC;QACT,qFAAqF;QACrF,mBAAmB,CAAC,EAAE;YACpB,aAAa,EAAE,MAAM,CAAC;YACtB,OAAO,EAAE,MAAM,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC;YACd,kBAAkB,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,CAAC;CACH;AAkBD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,UAAU,CAAqB;IAEvC;;;;OAIG;gBACS,GAAG,CAAC,EAAE,kBAAkB,GAAG,kBAAkB;IAMzD,OAAO,CAAC,MAAM,CAAC,aAAa;IAqBtB,QAAQ,CACZ,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,cAAc,CAAC;IA2C1B,OAAO,CAAC,mBAAmB;IAsC3B,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc;CAGrD"}

package/dist/services/SafetyGuard.js

@@ -7,6 +7,7 @@ const IntentAuditor_1 = require("./IntentAuditor");
 const PipelineContext_1 = require("./safety/PipelineContext");
 const rules_1 = require("./safety/rules");
 const roleClassifier_1 = require("./safety/roleClassifier");
+const logger_1 = require("../utils/logger");
 function dispositionFor(level) {
     switch (level) {
         case "SAFE":
@@ -61,6 +62,24 @@ class SafetyGuard {
     // ─────────────────────────────────────────────────────────────
     async evaluate(context, aiFix) {
         const ctx = (0, PipelineContext_1.buildContext)(context, aiFix, this.thresholds, this.intentAuditor);
+        // ── Text-Drift Pre-Flight ─────────────────────────────────────
+        // Compare DNA baseline text vs live candidate text BEFORE any rule
+        // runs.  This is the primary defence against the "Delete System →
+        // Update System same-container mis-identification" class of bug:
+        //
+        //   1. Drift confirmed (both texts present, differ):
+        //      synthesise effectiveContentChange so StructuralOnlyRule
+        //      cannot short-circuit to SAFE, and set forceAudit so the
+        //      Intent Auditor is mandatory regardless of confidence.
+        //
+        //   2. Drift unverifiable (DNA text present but liveText absent
+        //      AND AI did not self-report a contentChange):
+        //      set forceAudit so StructuralOnlyRule downgrades SAFE → HOLD.
+        //
+        // This guard runs once, synchronously, before the rule loop.
+        // ZeroTrustRule (step 2) may re-derive effectiveContentChange from
+        // the same inputs; that is harmless — it will set the same value.
+        this.applyTextDriftGuard(ctx, aiFix);
         for (const rule of rules_1.SAFETY_RULES) {
             const decision = await rule.run(ctx);
             if (decision) {
@@ -73,6 +92,28 @@ class SafetyGuard {
         // Unreachable: ConfidenceTierRule is terminal and always decides.
         throw new Error("[SafetyGuard] rule pipeline exhausted without a decision - this is a bug");
     }
+    applyTextDriftGuard(ctx, aiFix) {
+        const dnaText = aiFix.dnaBaselineText?.trim();
+        const liveText = aiFix.liveText?.trim();
+        if (dnaText && liveText && dnaText !== liveText) {
+            // Drift confirmed — synthesise contentChange if ZeroTrustRule has not
+            // yet run (it will run next and will produce the same pair; no conflict).
+            if (!ctx.effectiveContentChange) {
+                ctx.effectiveContentChange = { oldText: dnaText, newText: liveText };
+            }
+            ctx.forceAudit = true;
+            logger_1.logger.warn(`SafetyGuard text-drift pre-flight: DNA="${dnaText}" ≠ live="${liveText}" — ` +
+                `forceAudit=true, Intent Auditor is mandatory`);
+        }
+        else if (dnaText && !liveText && !aiFix.contentChange) {
+            // Cannot verify: DNA baseline exists but live text could not be fetched
+            // and the AI did not self-report a contentChange.  Conservative stance:
+            // force a hold so StructuralOnlyRule cannot silently approve as SAFE.
+            ctx.forceAudit = true;
+            logger_1.logger.warn(`SafetyGuard text-drift pre-flight: liveText unavailable, ` +
+                `DNA="${dnaText}" unverified — forceAudit=true`);
+        }
+    }
     // ─────────────────────────────────────────────────────────────
     // FUNCTIONAL ROLE CLASSIFICATION (public for tests / external use)
     //

package/dist/services/safety/rules/DangerousSinkRule.d.ts

@@ -1,10 +1,18 @@
 import type { FunctionalRole } from "../roleClassifier";
 import type { SafetyRule } from "../PipelineContext";
 /**
- * Roles whose ARRIVAL is treated as high-risk: a control that did not
- * obviously mean "delete" or "authenticate" before, but now does.
+ * Roles whose arrival OR departure is treated as high-risk.
  */
 export declare const DANGEROUS_SINK_ROLES: ReadonlySet<FunctionalRole>;
+/** Transition INTO a dangerous role (e.g. UNKNOWN → DELETE). */
 export declare function isDangerousSinkTransition(oldRole: FunctionalRole, newRole: FunctionalRole): boolean;
+/**
+ * Transition OUT OF a dangerous role (e.g. DELETE → UNKNOWN / SUBMIT).
+ *
+ * Replacing a destructive/auth control with any other role is semantically
+ * inconsistent: the test was authored against a destructive action and the
+ * proposed candidate performs a different operation.
+ */
+export declare function isDangerousSourceTransition(oldRole: FunctionalRole, newRole: FunctionalRole): boolean;
 export declare const DangerousSinkRule: SafetyRule;
 //# sourceMappingURL=DangerousSinkRule.d.ts.map

package/dist/services/safety/rules/DangerousSinkRule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DangerousSinkRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/DangerousSinkRule.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,cAAc,CAG3D,CAAC;AAEH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,GACtB,OAAO,CAET;AAED,eAAO,MAAM,iBAAiB,EAAE,UAmB/B,CAAC"}
+{"version":3,"file":"DangerousSinkRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/DangerousSinkRule.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,cAAc,CAG3D,CAAC;AAEH,gEAAgE;AAChE,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,GACtB,OAAO,CAET;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,GACtB,OAAO,CAET;AAED,eAAO,MAAM,iBAAiB,EAAE,UA4B/B,CAAC"}

package/dist/services/safety/rules/DangerousSinkRule.js

@@ -1,40 +1,55 @@
 "use strict";
 // src/services/safety/rules/DangerousSinkRule.ts
 //
-// Step 5.5 - Dangerous-Sink escalation (context-mutator, returns null).
+// Step 5.5 - Dangerous-Sink / Dangerous-Source escalation (context-mutator,
+// returns null).
 //
-// Closes the headline blind spot from the incident: a heal that transitions
-// INTO a destructive or auth role (e.g. "Update System"(UNKNOWN) →
-// "delete System"(DELETE)) sailed through as SAFE because:
-//   - the cross-role swap rule (step 5) only fires when BOTH roles are known,
-//   - the auditor gate (step 6) only fired for zero-trust / assertion /
-//     both-UNKNOWN, none of which matched.
+// Closes two related blind spots:
+//
+//   SINK   (X → DELETE/AUTH): a control that did not obviously mean "delete"
+//          or "authenticate" before, but now does.  The cross-role swap rule
+//          (step 5) only fires when BOTH roles are known; this catches
+//          UNKNOWN → DELETE.
+//
+//   SOURCE (DELETE/AUTH → X): replacing a destructive/auth control with a
+//          non-destructive one (e.g. "Delete System" → "Update System")
+//          is equally dangerous — it masks the test's original destructive
+//          intent.  FunctionalRoleRule misses this because newRole=UNKNOWN
+//          fails its "both roles known" guard.
 //
 // Per design decision #2, this rule does NOT decide on its own; it FORCES
-// the Intent Auditor to run (ctx.forceAudit = true) whenever the new role is
-// a dangerous sink and differs from the old role.  The auditor's existing
+// the Intent Auditor to run (ctx.forceAudit = true).  The auditor's existing
 // verdict mapping then applies: INCONSISTENT → FAIL_HARD, SUSPICIOUS →
-// BLOCKED/REQUIRES_REVIEW, CONSISTENT → continue.
-//
-// Note on coverage: a swap between two KNOWN roles (e.g. SUBMIT → DELETE)
-// is already short-circuited by FunctionalRoleRule before reaching here, so
-// in practice this rule fires for the UNKNOWN→sink case it was built for.
+// BLOCKED/REQUIRES_REVIEW, CONSISTENT → continue.  In practice the
+// pre-LLM structural check in IntentAuditorRule will FAIL_HARD immediately
+// for SOURCE transitions before the LLM is even consulted.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DangerousSinkRule = exports.DANGEROUS_SINK_ROLES = void 0;
 exports.isDangerousSinkTransition = isDangerousSinkTransition;
+exports.isDangerousSourceTransition = isDangerousSourceTransition;
 const roleClassifier_1 = require("../roleClassifier");
 const logger_1 = require("../../../utils/logger");
 /**
- * Roles whose ARRIVAL is treated as high-risk: a control that did not
- * obviously mean "delete" or "authenticate" before, but now does.
+ * Roles whose arrival OR departure is treated as high-risk.
  */
 exports.DANGEROUS_SINK_ROLES = new Set([
     "DELETE",
     "AUTH",
 ]);
+/** Transition INTO a dangerous role (e.g. UNKNOWN → DELETE). */
 function isDangerousSinkTransition(oldRole, newRole) {
     return exports.DANGEROUS_SINK_ROLES.has(newRole) && newRole !== oldRole;
 }
+/**
+ * Transition OUT OF a dangerous role (e.g. DELETE → UNKNOWN / SUBMIT).
+ *
+ * Replacing a destructive/auth control with any other role is semantically
+ * inconsistent: the test was authored against a destructive action and the
+ * proposed candidate performs a different operation.
+ */
+function isDangerousSourceTransition(oldRole, newRole) {
+    return exports.DANGEROUS_SINK_ROLES.has(oldRole) && newRole !== oldRole;
+}
 exports.DangerousSinkRule = {
     id: "dangerous-sink-escalation",
     run(ctx) {
@@ -48,6 +63,12 @@ exports.DangerousSinkRule = {
                 `forcing Intent Auditor`);
             ctx.forceAudit = true;
         }
+        if (isDangerousSourceTransition(oldRole, newRole)) {
+            logger_1.logger.warn(`SafetyGuard dangerous-source transition: ` +
+                `"${ctx.oldText}" (${oldRole}) → "${ctx.newText}" (${newRole}) - ` +
+                `outbound from destructive role, forcing Intent Auditor`);
+            ctx.forceAudit = true;
+        }
         return null;
     },
 };

package/dist/services/safety/rules/IntentAuditorRule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IntentAuditorRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/IntentAuditorRule.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF,eAAO,MAAM,iBAAiB,EAAE,UAoG/B,CAAC"}
+{"version":3,"file":"IntentAuditorRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/IntentAuditorRule.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF,eAAO,MAAM,iBAAiB,EAAE,UAoI/B,CAAC"}