sela-core 0.1.0-alpha.3 → 0.1.0-alpha.31

package/dist/errors/SelaError.d.ts

@@ -63,6 +63,10 @@ export declare const SAFETY_GUARD_CODES: {
     readonly BLOCKED_ROLE_SWAP_ASSERTION: "SG_BLOCKED_ROLE_SWAP_ASSERTION";
     readonly FAIL_HARD_AUDITOR_INCONSISTENT: "SG_FAIL_HARD_AUDITOR_INCONSISTENT";
     readonly BLOCKED_AUDITOR_SUSPICIOUS: "SG_BLOCKED_AUDITOR_SUSPICIOUS";
+    /** Structural pre-LLM check: old element had a destructive/auth role and
+     *  the candidate does not — replacing a DELETE/AUTH action is always
+     *  semantically inconsistent regardless of AI confidence. */
+    readonly FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION: "SG_FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION";
     /**
      * Heal was REQUIRES_REVIEW → quarantined (decision #1): proposed but not
      * written to source and not executed this run, pending explicit approval.

package/dist/errors/SelaError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SelaError.d.ts","sourceRoot":"","sources":["../../src/errors/SelaError.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,aAAa,GACrB,aAAa,GACb,eAAe,GACf,YAAY,GACZ,OAAO,GACP,YAAY,GACZ,UAAU,GACV,gBAAgB,GAChB,QAAQ,GACR,QAAQ,CAAC;AAMb,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,iBAAiB,GAAG,MAAM,CAAC;IACnE,0EAA0E;IAC1E,cAAc,CAAC,EAAE,YAAY,GAAG,cAAc,GAAG,YAAY,CAAC;IAC9D,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAMD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,aAAa,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,aAAa,CAAC;IACzB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,wDAAwD;IACxD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAYD,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;gBAEvB,IAAI,EAAE,aAAa;IAsC/B,MAAM,CAAC,aAAa,CAClB,SAAS,EAAE,aAAa,EACxB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,MAAM;IAIT,MAAM,IAAI,aAAa;CAexB;AAMD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,SAAS,CAE1D;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,aAAa,GACvB,GAAG,IAAI,SAAS,CAElB;AAUD,eAAO,MAAM,kBAAkB;;;;;;;;;IAS7B;;;;OAIG;;IAEH,+EAA+E;;CAEvE,CAAC;AACX,MAAM,MAAM,eAAe,GACzB,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,oBAAoB;IAC/B,wEAAwE;;;;CAIhE,CAAC;AACX,MAAM,MAAM,iBAAiB,GAC3B,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AAEnE,eAAO,MAAM,iBAAiB;;;;;;CAMpB,CAAC;AACX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,eAAO,MAAM,iBAAiB;;;;;;;IAO5B;;;;OAIG;;CAEK,CAAC;AACX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,eAAO,MAAM,WAAW;;;;CAId,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEvE,eAAO,MAAM,cAAc;;;CAGjB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEhF,eAAO,MAAM,YAAY;IACvB,2EAA2E;;IAE3E,wDAAwD;;IAExD,gEAAgE;;IAEhE,gDAAgD;;IAEhD,8CAA8C;;IAE9C;;;;OAIG;;IAEH,gFAAgF;;CAExE,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE1E,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAC5B,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC"}
+{"version":3,"file":"SelaError.d.ts","sourceRoot":"","sources":["../../src/errors/SelaError.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,aAAa,GACrB,aAAa,GACb,eAAe,GACf,YAAY,GACZ,OAAO,GACP,YAAY,GACZ,UAAU,GACV,gBAAgB,GAChB,QAAQ,GACR,QAAQ,CAAC;AAMb,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,iBAAiB,GAAG,MAAM,CAAC;IACnE,0EAA0E;IAC1E,cAAc,CAAC,EAAE,YAAY,GAAG,cAAc,GAAG,YAAY,CAAC;IAC9D,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAMD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,aAAa,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,aAAa,CAAC;IACzB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,wDAAwD;IACxD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAYD,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;gBAEvB,IAAI,EAAE,aAAa;IAsC/B,MAAM,CAAC,aAAa,CAClB,SAAS,EAAE,aAAa,EACxB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,MAAM;IAIT,MAAM,IAAI,aAAa;CAexB;AAMD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,SAAS,CAE1D;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,aAAa,GACvB,GAAG,IAAI,SAAS,CAElB;AAUD,eAAO,MAAM,kBAAkB;;;;;;;;;IAS7B;;iEAE6D;;IAE7D;;;;OAIG;;IAEH,+EAA+E;;CAEvE,CAAC;AACX,MAAM,MAAM,eAAe,GACzB,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,oBAAoB;IAC/B,wEAAwE;;;;CAIhE,CAAC;AACX,MAAM,MAAM,iBAAiB,GAC3B,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AAEnE,eAAO,MAAM,iBAAiB;;;;;;CAMpB,CAAC;AACX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,eAAO,MAAM,iBAAiB;;;;;;;IAO5B;;;;OAIG;;CAEK,CAAC;AACX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,eAAO,MAAM,WAAW;;;;CAId,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEvE,eAAO,MAAM,cAAc;;;CAGjB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEhF,eAAO,MAAM,YAAY;IACvB,2EAA2E;;IAE3E,wDAAwD;;IAExD,gEAAgE;;IAEhE,gDAAgD;;IAEhD,8CAA8C;;IAE9C;;;;OAIG;;IAEH,gFAAgF;;CAExE,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE1E,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAC5B,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/errors/SelaError.js

@@ -94,6 +94,10 @@ exports.SAFETY_GUARD_CODES = {
     BLOCKED_ROLE_SWAP_ASSERTION: "SG_BLOCKED_ROLE_SWAP_ASSERTION",
     FAIL_HARD_AUDITOR_INCONSISTENT: "SG_FAIL_HARD_AUDITOR_INCONSISTENT",
     BLOCKED_AUDITOR_SUSPICIOUS: "SG_BLOCKED_AUDITOR_SUSPICIOUS",
+    /** Structural pre-LLM check: old element had a destructive/auth role and
+     *  the candidate does not — replacing a DELETE/AUTH action is always
+     *  semantically inconsistent regardless of AI confidence. */
+    FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION: "SG_FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION",
     /**
      * Heal was REQUIRES_REVIEW → quarantined (decision #1): proposed but not
      * written to source and not executed this run, pending explicit approval.

package/dist/services/SafetyGuard.d.ts

@@ -115,6 +115,7 @@ export declare class SafetyGuard {
     constructor(arg?: ResolvedThresholds | SafetyGuardOptions);
     private static normalizeArgs;
     evaluate(context: HealContext, aiFix: AIFixSummary): Promise<SafetyDecision>;
+    private applyTextDriftGuard;
     classifyFunctionalRole(text: string): FunctionalRole;
 }
 //# sourceMappingURL=SafetyGuard.d.ts.map

package/dist/services/SafetyGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SafetyGuard.d.ts","sourceRoot":"","sources":["../../src/services/SafetyGuard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAEL,cAAc,EACf,MAAM,yBAAyB,CAAC;AAMjC,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE9C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,uEAAuE;IACvE,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,6DAA6D;IAC7D,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,+CAA+C;IAC/C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,WAAW,GAAG,SAAS,CAAC;AAE7E;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE5D,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,iBAAiB,CAUlE;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,mEAAmE;IACnE,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,cAAc,CAAC;QAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B;;;;WAIG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,oEAAoE;QACpE,oBAAoB,CAAC,EACjB,UAAU,GACV,cAAc,GACd,OAAO,GACP,UAAU,GACV,IAAI,CAAC;QACT,qFAAqF;QACrF,mBAAmB,CAAC,EAAE;YACpB,aAAa,EAAE,MAAM,CAAC;YACtB,OAAO,EAAE,MAAM,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC;YACd,kBAAkB,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,CAAC;CACH;AAkBD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,UAAU,CAAqB;IAEvC;;;;OAIG;gBACS,GAAG,CAAC,EAAE,kBAAkB,GAAG,kBAAkB;IAMzD,OAAO,CAAC,MAAM,CAAC,aAAa;IAqBtB,QAAQ,CACZ,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,cAAc,CAAC;IAgC1B,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc;CAGrD"}
+{"version":3,"file":"SafetyGuard.d.ts","sourceRoot":"","sources":["../../src/services/SafetyGuard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAEL,cAAc,EACf,MAAM,yBAAyB,CAAC;AAOjC,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE9C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,uEAAuE;IACvE,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,6DAA6D;IAC7D,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,+CAA+C;IAC/C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,WAAW,GAAG,SAAS,CAAC;AAE7E;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE5D,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,iBAAiB,CAUlE;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,mEAAmE;IACnE,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,cAAc,CAAC;QAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B;;;;WAIG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,oEAAoE;QACpE,oBAAoB,CAAC,EACjB,UAAU,GACV,cAAc,GACd,OAAO,GACP,UAAU,GACV,IAAI,CAAC;QACT,qFAAqF;QACrF,mBAAmB,CAAC,EAAE;YACpB,aAAa,EAAE,MAAM,CAAC;YACtB,OAAO,EAAE,MAAM,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC;YACd,kBAAkB,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,CAAC;CACH;AAkBD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,UAAU,CAAqB;IAEvC;;;;OAIG;gBACS,GAAG,CAAC,EAAE,kBAAkB,GAAG,kBAAkB;IAMzD,OAAO,CAAC,MAAM,CAAC,aAAa;IAqBtB,QAAQ,CACZ,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,cAAc,CAAC;IA2C1B,OAAO,CAAC,mBAAmB;IAsC3B,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc;CAGrD"}

package/dist/services/SafetyGuard.js

@@ -7,6 +7,7 @@ const IntentAuditor_1 = require("./IntentAuditor");
 const PipelineContext_1 = require("./safety/PipelineContext");
 const rules_1 = require("./safety/rules");
 const roleClassifier_1 = require("./safety/roleClassifier");
+const logger_1 = require("../utils/logger");
 function dispositionFor(level) {
     switch (level) {
         case "SAFE":
@@ -61,6 +62,24 @@ class SafetyGuard {
     // ─────────────────────────────────────────────────────────────
     async evaluate(context, aiFix) {
         const ctx = (0, PipelineContext_1.buildContext)(context, aiFix, this.thresholds, this.intentAuditor);
+        // ── Text-Drift Pre-Flight ─────────────────────────────────────
+        // Compare DNA baseline text vs live candidate text BEFORE any rule
+        // runs.  This is the primary defence against the "Delete System →
+        // Update System same-container mis-identification" class of bug:
+        //
+        //   1. Drift confirmed (both texts present, differ):
+        //      synthesise effectiveContentChange so StructuralOnlyRule
+        //      cannot short-circuit to SAFE, and set forceAudit so the
+        //      Intent Auditor is mandatory regardless of confidence.
+        //
+        //   2. Drift unverifiable (DNA text present but liveText absent
+        //      AND AI did not self-report a contentChange):
+        //      set forceAudit so StructuralOnlyRule downgrades SAFE → HOLD.
+        //
+        // This guard runs once, synchronously, before the rule loop.
+        // ZeroTrustRule (step 2) may re-derive effectiveContentChange from
+        // the same inputs; that is harmless — it will set the same value.
+        this.applyTextDriftGuard(ctx, aiFix);
         for (const rule of rules_1.SAFETY_RULES) {
             const decision = await rule.run(ctx);
             if (decision) {
@@ -73,6 +92,28 @@ class SafetyGuard {
         // Unreachable: ConfidenceTierRule is terminal and always decides.
         throw new Error("[SafetyGuard] rule pipeline exhausted without a decision - this is a bug");
     }
+    applyTextDriftGuard(ctx, aiFix) {
+        const dnaText = aiFix.dnaBaselineText?.trim();
+        const liveText = aiFix.liveText?.trim();
+        if (dnaText && liveText && dnaText !== liveText) {
+            // Drift confirmed — synthesise contentChange if ZeroTrustRule has not
+            // yet run (it will run next and will produce the same pair; no conflict).
+            if (!ctx.effectiveContentChange) {
+                ctx.effectiveContentChange = { oldText: dnaText, newText: liveText };
+            }
+            ctx.forceAudit = true;
+            logger_1.logger.warn(`SafetyGuard text-drift pre-flight: DNA="${dnaText}" ≠ live="${liveText}" — ` +
+                `forceAudit=true, Intent Auditor is mandatory`);
+        }
+        else if (dnaText && !liveText && !aiFix.contentChange) {
+            // Cannot verify: DNA baseline exists but live text could not be fetched
+            // and the AI did not self-report a contentChange.  Conservative stance:
+            // force a hold so StructuralOnlyRule cannot silently approve as SAFE.
+            ctx.forceAudit = true;
+            logger_1.logger.warn(`SafetyGuard text-drift pre-flight: liveText unavailable, ` +
+                `DNA="${dnaText}" unverified — forceAudit=true`);
+        }
+    }
     // ─────────────────────────────────────────────────────────────
     // FUNCTIONAL ROLE CLASSIFICATION (public for tests / external use)
     //

package/dist/services/safety/rules/DangerousSinkRule.d.ts

@@ -1,10 +1,18 @@
 import type { FunctionalRole } from "../roleClassifier";
 import type { SafetyRule } from "../PipelineContext";
 /**
- * Roles whose ARRIVAL is treated as high-risk: a control that did not
- * obviously mean "delete" or "authenticate" before, but now does.
+ * Roles whose arrival OR departure is treated as high-risk.
  */
 export declare const DANGEROUS_SINK_ROLES: ReadonlySet<FunctionalRole>;
+/** Transition INTO a dangerous role (e.g. UNKNOWN → DELETE). */
 export declare function isDangerousSinkTransition(oldRole: FunctionalRole, newRole: FunctionalRole): boolean;
+/**
+ * Transition OUT OF a dangerous role (e.g. DELETE → UNKNOWN / SUBMIT).
+ *
+ * Replacing a destructive/auth control with any other role is semantically
+ * inconsistent: the test was authored against a destructive action and the
+ * proposed candidate performs a different operation.
+ */
+export declare function isDangerousSourceTransition(oldRole: FunctionalRole, newRole: FunctionalRole): boolean;
 export declare const DangerousSinkRule: SafetyRule;
 //# sourceMappingURL=DangerousSinkRule.d.ts.map

package/dist/services/safety/rules/DangerousSinkRule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DangerousSinkRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/DangerousSinkRule.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,cAAc,CAG3D,CAAC;AAEH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,GACtB,OAAO,CAET;AAED,eAAO,MAAM,iBAAiB,EAAE,UAmB/B,CAAC"}
+{"version":3,"file":"DangerousSinkRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/DangerousSinkRule.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,cAAc,CAG3D,CAAC;AAEH,gEAAgE;AAChE,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,GACtB,OAAO,CAET;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,GACtB,OAAO,CAET;AAED,eAAO,MAAM,iBAAiB,EAAE,UA4B/B,CAAC"}

package/dist/services/safety/rules/DangerousSinkRule.js

@@ -1,40 +1,55 @@
 "use strict";
 // src/services/safety/rules/DangerousSinkRule.ts
 //
-// Step 5.5 - Dangerous-Sink escalation (context-mutator, returns null).
+// Step 5.5 - Dangerous-Sink / Dangerous-Source escalation (context-mutator,
+// returns null).
 //
-// Closes the headline blind spot from the incident: a heal that transitions
-// INTO a destructive or auth role (e.g. "Update System"(UNKNOWN) →
-// "delete System"(DELETE)) sailed through as SAFE because:
-//   - the cross-role swap rule (step 5) only fires when BOTH roles are known,
-//   - the auditor gate (step 6) only fired for zero-trust / assertion /
-//     both-UNKNOWN, none of which matched.
+// Closes two related blind spots:
+//
+//   SINK   (X → DELETE/AUTH): a control that did not obviously mean "delete"
+//          or "authenticate" before, but now does.  The cross-role swap rule
+//          (step 5) only fires when BOTH roles are known; this catches
+//          UNKNOWN → DELETE.
+//
+//   SOURCE (DELETE/AUTH → X): replacing a destructive/auth control with a
+//          non-destructive one (e.g. "Delete System" → "Update System")
+//          is equally dangerous — it masks the test's original destructive
+//          intent.  FunctionalRoleRule misses this because newRole=UNKNOWN
+//          fails its "both roles known" guard.
 //
 // Per design decision #2, this rule does NOT decide on its own; it FORCES
-// the Intent Auditor to run (ctx.forceAudit = true) whenever the new role is
-// a dangerous sink and differs from the old role.  The auditor's existing
+// the Intent Auditor to run (ctx.forceAudit = true).  The auditor's existing
 // verdict mapping then applies: INCONSISTENT → FAIL_HARD, SUSPICIOUS →
-// BLOCKED/REQUIRES_REVIEW, CONSISTENT → continue.
-//
-// Note on coverage: a swap between two KNOWN roles (e.g. SUBMIT → DELETE)
-// is already short-circuited by FunctionalRoleRule before reaching here, so
-// in practice this rule fires for the UNKNOWN→sink case it was built for.
+// BLOCKED/REQUIRES_REVIEW, CONSISTENT → continue.  In practice the
+// pre-LLM structural check in IntentAuditorRule will FAIL_HARD immediately
+// for SOURCE transitions before the LLM is even consulted.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DangerousSinkRule = exports.DANGEROUS_SINK_ROLES = void 0;
 exports.isDangerousSinkTransition = isDangerousSinkTransition;
+exports.isDangerousSourceTransition = isDangerousSourceTransition;
 const roleClassifier_1 = require("../roleClassifier");
 const logger_1 = require("../../../utils/logger");
 /**
- * Roles whose ARRIVAL is treated as high-risk: a control that did not
- * obviously mean "delete" or "authenticate" before, but now does.
+ * Roles whose arrival OR departure is treated as high-risk.
  */
 exports.DANGEROUS_SINK_ROLES = new Set([
     "DELETE",
     "AUTH",
 ]);
+/** Transition INTO a dangerous role (e.g. UNKNOWN → DELETE). */
 function isDangerousSinkTransition(oldRole, newRole) {
     return exports.DANGEROUS_SINK_ROLES.has(newRole) && newRole !== oldRole;
 }
+/**
+ * Transition OUT OF a dangerous role (e.g. DELETE → UNKNOWN / SUBMIT).
+ *
+ * Replacing a destructive/auth control with any other role is semantically
+ * inconsistent: the test was authored against a destructive action and the
+ * proposed candidate performs a different operation.
+ */
+function isDangerousSourceTransition(oldRole, newRole) {
+    return exports.DANGEROUS_SINK_ROLES.has(oldRole) && newRole !== oldRole;
+}
 exports.DangerousSinkRule = {
     id: "dangerous-sink-escalation",
     run(ctx) {
@@ -48,6 +63,12 @@ exports.DangerousSinkRule = {
                 `forcing Intent Auditor`);
             ctx.forceAudit = true;
         }
+        if (isDangerousSourceTransition(oldRole, newRole)) {
+            logger_1.logger.warn(`SafetyGuard dangerous-source transition: ` +
+                `"${ctx.oldText}" (${oldRole}) → "${ctx.newText}" (${newRole}) - ` +
+                `outbound from destructive role, forcing Intent Auditor`);
+            ctx.forceAudit = true;
+        }
         return null;
     },
 };

package/dist/services/safety/rules/IntentAuditorRule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IntentAuditorRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/IntentAuditorRule.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF,eAAO,MAAM,iBAAiB,EAAE,UAoG/B,CAAC"}
+{"version":3,"file":"IntentAuditorRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/IntentAuditorRule.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF,eAAO,MAAM,iBAAiB,EAAE,UAoI/B,CAAC"}

package/dist/services/safety/rules/IntentAuditorRule.js

@@ -5,18 +5,25 @@
 // LLM auditor when:
 //   a) zero-trust synthesized the contentChange (AI silent → extra scrutiny), OR
 //   b) we are in assertion mode (the test explicitly checked the text), OR
-//   c) both roles are UNKNOWN (no functional category to fall back on).
+//   c) both roles are UNKNOWN (no functional category to fall back on), OR
+//   d) forceAudit was set by the text-drift pre-flight or DangerousSinkRule.
+//
+// PRE-LLM STRUCTURAL CHECK (runs before shouldAudit):
+//   Transitioning OUT of a destructive/auth role into any non-destructive role
+//   is always semantically inconsistent — the test was authored against a
+//   DELETE/AUTH action and the candidate performs a different operation.  This
+//   is caught here rather than relying solely on the LLM auditor because the
+//   LLM can return CONSISTENT for superficially similar labels (e.g. "Delete
+//   System" → "Update System" sharing the same container at 95% confidence).
 //
 // INCONSISTENT → FAIL_HARD.  SUSPICIOUS → BLOCKED in assertion (unless
 // allowSuspicious) else REQUIRES_REVIEW.  CONSISTENT → fall through,
 // stashing the auditor score breakdown on the context for the final tier.
-//
-// Extracted verbatim - identical trigger condition, reasons, codes,
-// logs, and meta shape.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IntentAuditorRule = void 0;
 const SelaError_1 = require("../../../errors/SelaError");
 const logger_1 = require("../../../utils/logger");
+const DangerousSinkRule_1 = require("./DangerousSinkRule");
 exports.IntentAuditorRule = {
     id: "intent-auditor-gate",
     async run(ctx) {
@@ -24,6 +31,31 @@ exports.IntentAuditorRule = {
         const newText = ctx.newText;
         const oldRole = ctx.oldRole;
         const newRole = ctx.newRole;
+        // ── Pre-LLM structural check: destructive role inversion ─────────
+        // When the DNA element had a destructive/auth role and the candidate does
+        // NOT, reject immediately without consulting the LLM.  AI confidence is
+        // irrelevant — no valid heal should replace a DELETE/AUTH control with a
+        // non-destructive one.  The LLM can return CONSISTENT for "Delete System →
+        // Update System" because both appear in the same container; this pure-code
+        // gate closes that bypass regardless of the shouldAudit flag below.
+        if (DangerousSinkRule_1.DANGEROUS_SINK_ROLES.has(oldRole) &&
+            !DangerousSinkRule_1.DANGEROUS_SINK_ROLES.has(newRole)) {
+            logger_1.logger.warn(`SafetyGuard destructive role inversion (pre-LLM): ` +
+                `"${oldText}" (${oldRole}) → "${newText}" (${newRole}) - FAIL_HARD`);
+            return {
+                level: "FAIL_HARD",
+                code: SelaError_1.SAFETY_GUARD_CODES.FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION,
+                reason: `Destructive role inversion: "${oldText}" (${oldRole}) → "${newText}" (${newRole}) — ` +
+                    `replacing a ${oldRole} action is semantically inconsistent regardless of confidence`,
+                canProceed: false,
+                meta: {
+                    auditorVerdict: "INCONSISTENT",
+                    auditorConfidence: 100,
+                    auditorReason: `Source role ${oldRole} is destructive/auth; ` +
+                        `candidate role ${newRole} is not — structural semantic mismatch`,
+                },
+            };
+        }
         const shouldAudit = ctx.forceAudit === true ||
             ctx.source === "zero-trust" ||
             ctx.mode === "assertion" ||

package/dist/services/safety/rules/StructuralOnlyRule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StructuralOnlyRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/StructuralOnlyRule.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF,eAAO,MAAM,kBAAkB,EAAE,UAyBhC,CAAC"}
+{"version":3,"file":"StructuralOnlyRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/StructuralOnlyRule.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF,eAAO,MAAM,kBAAkB,EAAE,UAwChC,CAAC"}

package/dist/services/safety/rules/StructuralOnlyRule.js

@@ -19,6 +19,19 @@ exports.StructuralOnlyRule = {
     id: "structural-only-heal",
     run(ctx) {
         if (!ctx.effectiveContentChange) {
+            // Text-drift pre-flight set forceAudit because live text was unavailable
+            // and we cannot verify the candidate has the same text as the DNA
+            // baseline.  Approving as SAFE here would bypass every downstream guard
+            // (semantic-opposite, functional-role, intent-auditor).  Downgrade to
+            // REQUIRES_REVIEW (HOLD) so the heal is quarantined pending manual review.
+            if (ctx.forceAudit) {
+                return {
+                    level: "REQUIRES_REVIEW",
+                    reason: `Text drift unverifiable: DNA baseline present but live text unavailable ` +
+                        `— cannot approve as structural-only (confidence=${ctx.confidence})`,
+                    canProceed: true,
+                };
+            }
             const level = ctx.confidence < ctx.thresholds.confidenceReviewThreshold
                 ? "REQUIRES_REVIEW"
                 : "SAFE";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sela-core",
-  "version": "0.1.0-alpha.3",
+  "version": "0.1.0-alpha.31",
   "description": "AI self-healing Playwright wrapper - drop-in replacement for @playwright/test",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",