sela-core 1.0.6 → 1.0.7

package/dist/services/ReportGenerator.d.ts

@@ -0,0 +1,70 @@
+import type { HealEvent, HealEventKind } from "./HealReportService";
+export interface ReportStats {
+    total: number;
+    healed: number;
+    failed: number;
+    protectedCnt: number;
+    iframeCnt: number;
+    shadowCnt: number;
+    /** Estimated developer time saved, in minutes. */
+    timeSavedMin: number;
+}
+/**
+ * The canonical JSON payload embedded into sela-report.html and
+ * mirrored verbatim into sela-report.json.  Treat this as a public
+ * contract — additive changes only.
+ */
+export interface ReportData {
+    generatedAt: string;
+    startedAt: string;
+    cwd: string;
+    events: HealEvent[];
+    stats: ReportStats;
+}
+/**
+ * Time-saved heuristics (minutes per event).  Exposed as a constant
+ * so tests pin the math against the same source as production.
+ */
+export declare const TIME_SAVED_CONSTANTS: {
+    readonly PER_HEAL: 12;
+    readonly PER_PROTECT: 18;
+    readonly PER_FAILED: 4;
+};
+export declare const MANDATORY_FIELDS_BY_KIND: Readonly<Record<HealEventKind, ReadonlyArray<string>>>;
+export declare class ReportGenerator {
+    /**
+     * Validates a single event against MANDATORY_FIELDS_BY_KIND.  Throws
+     * a SelaError(subsystem="Report") on the first violation found.  No
+     * partial diagnosis: the report is all-or-nothing.
+     */
+    static validateEvent(event: unknown): asserts event is HealEvent;
+    /**
+     * Validates every event in the buffer.  Returns the array unchanged
+     * when all events pass.  Throws on the first violation.
+     */
+    static validateAll(events: ReadonlyArray<unknown>): HealEvent[];
+    /**
+     * Pure stats computation.  No clock, no IO — easy to pin in tests.
+     */
+    static computeStats(events: ReadonlyArray<HealEvent>): ReportStats;
+    /**
+     * Build the ReportData payload from a raw event buffer.  Validates
+     * every event first.  `now` / `startedAt` are injectable so tests
+     * pin them deterministically.
+     */
+    static generate(events: ReadonlyArray<unknown>, opts?: {
+        cwd?: string;
+        startedAt?: string;
+        now?: () => Date;
+    }): ReportData;
+    /**
+     * Format a confidence value for UI consumption.  Returns a
+     * percentage string ("87%") for finite numbers, "n/a" for anything
+     * else.  NEVER emits literal "undefined" / "null" / "NaN".
+     *
+     * Public so the HTML template's `fmtPct()` can be replaced by this
+     * single source of truth in a future refactor.
+     */
+    static formatConfidence(value: unknown): string;
+}
+//# sourceMappingURL=ReportGenerator.d.ts.map

package/dist/services/ReportGenerator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ReportGenerator.d.ts","sourceRoot":"","sources":["../../src/services/ReportGenerator.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EACV,SAAS,EACT,aAAa,EAId,MAAM,qBAAqB,CAAC;AAM7B,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,MAAM,CAAC;IACf,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,kDAAkD;IAClD,YAAY,EAAE,MAAM,CAAC;CACtB;AAED;;;;GAIG;AACH,MAAM,WAAW,UAAU;IACzB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,GAAG,EAAE,MAAM,CAAC;IACZ,MAAM,EAAE,SAAS,EAAE,CAAC;IACpB,KAAK,EAAE,WAAW,CAAC;CACpB;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB;;;;CAIvB,CAAC;AAmCX,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAAC,MAAM,CACpD,aAAa,EACb,aAAa,CAAC,MAAM,CAAC,CACtB,CAIA,CAAC;AAsBF,qBAAa,eAAe;IAC1B;;;;OAIG;IACH,MAAM,CAAC,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAAC,KAAK,IAAI,SAAS;IAuChE;;;OAGG;IACH,MAAM,CAAC,WAAW,CAAC,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,GAAG,SAAS,EAAE;IAK/D;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,aAAa,CAAC,SAAS,CAAC,GAAG,WAAW;IA4BlE;;;;OAIG;IACH,MAAM,CAAC,QAAQ,CACb,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,EAC9B,IAAI,GAAE;QACJ,GAAG,CAAC,EAAE,MAAM,CAAC;QACb,SAAS,CAAC,EAAE,MAAM,CAAC;QACnB,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;KACb,GACL,UAAU;IAYb;;;;;;;OAOG;IACH,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM;CAOhD"}

package/dist/services/ReportGenerator.js

@@ -0,0 +1,191 @@
+"use strict";
+// src/services/ReportGenerator.ts
+//
+// Pure (no-IO) report layer.  Takes the HealReportService event buffer
+// and produces a stable, validated JSON shape that the HTML template
+// and any external consumer (CI dashboards, telemetry forwarders)
+// can rely on.
+//
+// Design goals:
+//   1. SCHEMA ENFORCED.  Every event passed through ReportGenerator
+//      is validated against MANDATORY_FIELDS_BY_KIND — a SelaError
+//      with subsystem="Report" is thrown for any malformed input.
+//      The HTML template never sees a partial event.
+//
+//   2. CONFIDENCE NEVER LEAKS.  formatConfidence() and the rendered
+//      `confidenceLabel` field always produce either a "<n>%" string
+//      or "n/a" — never `undefined`, `null`, or a stringified
+//      "undefined".  The JS embedded in HealReportService already
+//      uses fmtPct() for the same reason; this module is the
+//      authoritative implementation.
+//
+//   3. STATS DETERMINISTIC.  computeStats() exposes the time-saved
+//      constants via TIME_SAVED_CONSTANTS so tests can pin the math
+//      without duplicating the multipliers.
+//
+//   4. NO IO.  Disk writes still live in HealReportService.flushToDisk
+//      so this module stays trivially unit-testable.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ReportGenerator = exports.MANDATORY_FIELDS_BY_KIND = exports.TIME_SAVED_CONSTANTS = void 0;
+const SelaError_1 = require("../errors/SelaError");
+/**
+ * Time-saved heuristics (minutes per event).  Exposed as a constant
+ * so tests pin the math against the same source as production.
+ */
+exports.TIME_SAVED_CONSTANTS = {
+    PER_HEAL: 12,
+    PER_PROTECT: 18,
+    PER_FAILED: 4,
+};
+// ───────────────────────────────────────────────────────────────────
+// Field manifests — mandatory for each event kind
+//
+// "Mandatory" = the HTML template will render an unintelligible card
+// without this field.  Anything optional belongs in the interface
+// declarations in HealReportService.ts but NOT here.
+// ───────────────────────────────────────────────────────────────────
+const COMMON_MANDATORY = [
+    "kind",
+    "stableId",
+    "sourceFile",
+    "sourceLine",
+    "timestamp",
+];
+const HEALED_MANDATORY = [
+    "oldSelector",
+    "newSelector",
+    "dnaBefore",
+];
+const FAILED_MANDATORY = [
+    "oldSelector",
+    "reason",
+];
+const PROTECTED_MANDATORY = [
+    "oldSelector",
+    "reason",
+    "safetyLevel",
+];
+exports.MANDATORY_FIELDS_BY_KIND = {
+    HEALED: [...COMMON_MANDATORY, ...HEALED_MANDATORY],
+    FAILED: [...COMMON_MANDATORY, ...FAILED_MANDATORY],
+    PROTECTED: [...COMMON_MANDATORY, ...PROTECTED_MANDATORY],
+};
+const VALID_KINDS = new Set(["HEALED", "FAILED", "PROTECTED"]);
+// ───────────────────────────────────────────────────────────────────
+// Helpers
+// ───────────────────────────────────────────────────────────────────
+function throwReport(code, reason, ctx = {}) {
+    throw new SelaError_1.SelaError({ subsystem: "Report", code, reason, context: ctx });
+}
+function isPresent(value) {
+    if (value === undefined || value === null)
+        return false;
+    if (typeof value === "string" && value.length === 0)
+        return false;
+    return true;
+}
+// ───────────────────────────────────────────────────────────────────
+// ReportGenerator
+// ───────────────────────────────────────────────────────────────────
+class ReportGenerator {
+    /**
+     * Validates a single event against MANDATORY_FIELDS_BY_KIND.  Throws
+     * a SelaError(subsystem="Report") on the first violation found.  No
+     * partial diagnosis: the report is all-or-nothing.
+     */
+    static validateEvent(event) {
+        if (!event || typeof event !== "object") {
+            throwReport(SelaError_1.REPORT_CODES.MALFORMED_EVENT, `Event must be an object, received ${event === null ? "null" : typeof event}`);
+        }
+        const ev = event;
+        if (!ev.kind || !VALID_KINDS.has(ev.kind)) {
+            throwReport(SelaError_1.REPORT_CODES.UNKNOWN_KIND, `Unknown event.kind "${String(ev.kind)}" — must be HEALED|FAILED|PROTECTED`, { stableId: ev.stableId });
+        }
+        const required = exports.MANDATORY_FIELDS_BY_KIND[ev.kind];
+        for (const field of required) {
+            const val = ev[field];
+            if (!isPresent(val)) {
+                throwReport(SelaError_1.REPORT_CODES.MISSING_FIELD, `${ev.kind} event missing mandatory field "${field}"`, { stableId: ev.stableId, kind: ev.kind, field });
+            }
+        }
+        // Field-type sanity for the fields we publicly mandate.
+        if (typeof ev.sourceLine !== "number") {
+            throwReport(SelaError_1.REPORT_CODES.INVALID_FIELD_TYPE, `Field "sourceLine" must be a number, received ${typeof ev.sourceLine}`, { stableId: ev.stableId, kind: ev.kind, field: "sourceLine" });
+        }
+    }
+    /**
+     * Validates every event in the buffer.  Returns the array unchanged
+     * when all events pass.  Throws on the first violation.
+     */
+    static validateAll(events) {
+        for (const e of events)
+            ReportGenerator.validateEvent(e);
+        return events;
+    }
+    /**
+     * Pure stats computation.  No clock, no IO — easy to pin in tests.
+     */
+    static computeStats(events) {
+        let healed = 0;
+        let failed = 0;
+        let protectedCnt = 0;
+        let iframeCnt = 0;
+        let shadowCnt = 0;
+        for (const e of events) {
+            if (e.kind === "HEALED")
+                healed++;
+            else if (e.kind === "FAILED")
+                failed++;
+            else if (e.kind === "PROTECTED")
+                protectedCnt++;
+            if (e.inIframe)
+                iframeCnt++;
+            if (e.inShadowDom)
+                shadowCnt++;
+        }
+        const timeSavedMin = healed * exports.TIME_SAVED_CONSTANTS.PER_HEAL +
+            protectedCnt * exports.TIME_SAVED_CONSTANTS.PER_PROTECT +
+            failed * exports.TIME_SAVED_CONSTANTS.PER_FAILED;
+        return {
+            total: events.length,
+            healed,
+            failed,
+            protectedCnt,
+            iframeCnt,
+            shadowCnt,
+            timeSavedMin,
+        };
+    }
+    /**
+     * Build the ReportData payload from a raw event buffer.  Validates
+     * every event first.  `now` / `startedAt` are injectable so tests
+     * pin them deterministically.
+     */
+    static generate(events, opts = {}) {
+        const validated = ReportGenerator.validateAll(events);
+        const now = opts.now ?? (() => new Date());
+        return {
+            generatedAt: now().toISOString(),
+            startedAt: opts.startedAt ?? now().toISOString(),
+            cwd: opts.cwd ?? process.cwd(),
+            events: validated,
+            stats: ReportGenerator.computeStats(validated),
+        };
+    }
+    /**
+     * Format a confidence value for UI consumption.  Returns a
+     * percentage string ("87%") for finite numbers, "n/a" for anything
+     * else.  NEVER emits literal "undefined" / "null" / "NaN".
+     *
+     * Public so the HTML template's `fmtPct()` can be replaced by this
+     * single source of truth in a future refactor.
+     */
+    static formatConfidence(value) {
+        if (typeof value === "number" && Number.isFinite(value)) {
+            const clamped = Math.max(0, Math.min(100, Math.round(value)));
+            return `${clamped}%`;
+        }
+        return "n/a";
+    }
+}
+exports.ReportGenerator = ReportGenerator;

package/dist/services/SafetyGuard.d.ts

@@ -1,5 +1,7 @@
+import { IntentAuditor } from "./IntentAuditor";
 import { ResolvedThresholds } from "../config/SelaConfig";
 import { VisibilityInfo, AncestorNode, AnchorInfo } from "../types";
+import { SafetyGuardCode } from "../errors/SelaError";
 export type HealMode = "assertion" | "action";
 export interface HealContext {
     mode: HealMode;
@@ -42,6 +44,13 @@ export interface SafetyDecision {
     level: RiskLevel;
     reason: string;
     canProceed: boolean;
+    /**
+     * Machine-readable error code from SAFETY_GUARD_CODES.  Always populated
+     * for rejection decisions (BLOCKED / FAIL_HARD) so callers can throw a
+     * SelaError without re-parsing `reason`.  Pass-through decisions (SAFE /
+     * REQUIRES_REVIEW) may omit it.
+     */
+    code?: SafetyGuardCode;
     /** Structured info for policy-aware log messages in FixwrightEngine. */
     meta?: {
         auditorVerdict?: "CONSISTENT" | "SUSPICIOUS" | "INCONSISTENT";
@@ -56,10 +65,27 @@ export interface SafetyDecision {
     };
 }
 type FunctionalRole = "SUBMIT" | "CANCEL" | "DELETE" | "NAVIGATE" | "AUTH" | "STATUS_POSITIVE" | "STATUS_NEGATIVE" | "UNKNOWN";
+/**
+ * Constructor options for SafetyGuard.
+ *
+ * - `thresholds`: per-instance threshold overrides (existing behavior).
+ * - `intentAuditor`: pre-built IntentAuditor.  Tests inject a stub so
+ *   SafetyGuard can be unit-tested without an Anthropic key.
+ */
+export interface SafetyGuardOptions {
+    thresholds?: ResolvedThresholds;
+    intentAuditor?: IntentAuditor;
+}
 export declare class SafetyGuard {
     private intentAuditor;
     private thresholds;
-    constructor(thresholds?: ResolvedThresholds);
+    /**
+     * Accepts either the legacy positional `thresholds` argument or an
+     * options bag (DI-friendly).  Existing call sites keep working
+     * unchanged.
+     */
+    constructor(arg?: ResolvedThresholds | SafetyGuardOptions);
+    private static normalizeArgs;
     evaluate(context: HealContext, aiFix: AIFixSummary): Promise<SafetyDecision>;
     private isSemanticOpposite;
     classifyFunctionalRole(text: string): FunctionalRole;

package/dist/services/SafetyGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SafetyGuard.d.ts","sourceRoot":"","sources":["../../src/services/SafetyGuard.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAMpE,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE9C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,uEAAuE;IACvE,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,6DAA6D;IAC7D,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,+CAA+C;IAC/C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,WAAW,GAAG,SAAS,CAAC;AAE7E,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB,wEAAwE;IACxE,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,cAAc,CAAC;QAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,qFAAqF;QACrF,mBAAmB,CAAC,EAAE;YACpB,aAAa,EAAE,MAAM,CAAC;YACtB,OAAO,EAAE,MAAM,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC;YACd,kBAAkB,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,CAAC;CACH;AA6DD,KAAK,cAAc,GACf,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,MAAM,GACN,iBAAiB,GACjB,iBAAiB,GACjB,SAAS,CAAC;AA2Id,qBAAa,WAAW;IACtB,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,UAAU,CAAqB;gBAE3B,UAAU,CAAC,EAAE,kBAAkB;IASrC,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;IAyTlF,OAAO,CAAC,kBAAkB;IAY1B,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc;IAsBpD,yBAAyB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAiBvD,OAAO,CAAC,mBAAmB;IAyB3B,OAAO,CAAC,iBAAiB;CAY1B"}
+{"version":3,"file":"SafetyGuard.d.ts","sourceRoot":"","sources":["../../src/services/SafetyGuard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACpE,OAAO,EAAsB,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAM1E,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE9C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,uEAAuE;IACvE,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,6DAA6D;IAC7D,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,+CAA+C;IAC/C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,WAAW,GAAG,SAAS,CAAC;AAE7E,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,wEAAwE;IACxE,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,cAAc,CAAC;QAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,qFAAqF;QACrF,mBAAmB,CAAC,EAAE;YACpB,aAAa,EAAE,MAAM,CAAC;YACtB,OAAO,EAAE,MAAM,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC;YACd,kBAAkB,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,CAAC;CACH;AA6DD,KAAK,cAAc,GACf,QAAQ,GACR,QAAQ,GACR,QAAQ,GACR,UAAU,GACV,MAAM,GACN,iBAAiB,GACjB,iBAAiB,GACjB,SAAS,CAAC;AA0Jd;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,UAAU,CAAqB;IAEvC;;;;OAIG;gBACS,GAAG,CAAC,EAAE,kBAAkB,GAAG,kBAAkB;IAMzD,OAAO,CAAC,MAAM,CAAC,aAAa;IAgBtB,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,cAAc,CAAC;IAkUlF,OAAO,CAAC,kBAAkB;IAwB1B,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc;IAqBpD,yBAAyB,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM;IAiBvD,OAAO,CAAC,mBAAmB;IAyB3B,OAAO,CAAC,iBAAiB;CAY1B"}

package/dist/services/SafetyGuard.js

@@ -3,6 +3,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SafetyGuard = void 0;
 const IntentAuditor_1 = require("./IntentAuditor");
+const SelaError_1 = require("../errors/SelaError");
 // ═══════════════════════════════════════════════════════════════════
 // DEFAULT THRESHOLDS  (match pre-config hardcoded values exactly)
 // ═══════════════════════════════════════════════════════════════════
@@ -55,6 +56,9 @@ const SEMANTIC_OPPOSITE_PAIRS = new Set([
     "valid|invalid",
     "invalid|valid",
 ]);
+function escapeRegExp(s) {
+    return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
 const ROLE_KEYWORDS = new Map([
     [
         "SUBMIT",
@@ -185,15 +189,35 @@ const ROLE_KEYWORDS = new Map([
         ]),
     ],
 ]);
-// ═══════════════════════════════════════════════════════════════════
-// SafetyGuard
-// ═══════════════════════════════════════════════════════════════════
+// Pre-compiled word-boundary regexes for the role classifier.  Built
+// once at module load — classifyFunctionalRole() is on the hot heal
+// path, so we don't pay for regex construction per call.
+const ROLE_KEYWORD_REGEXES = Array.from(ROLE_KEYWORDS, ([role, keywords]) => ({
+    role,
+    regexes: Array.from(keywords, (kw) => new RegExp(`\\b${escapeRegExp(kw)}\\b`, "i")),
+}));
 class SafetyGuard {
     intentAuditor;
     thresholds;
-    constructor(thresholds) {
-        this.thresholds = thresholds ?? DEFAULT_THRESHOLDS;
-        this.intentAuditor = new IntentAuditor_1.IntentAuditor();
+    /**
+     * Accepts either the legacy positional `thresholds` argument or an
+     * options bag (DI-friendly).  Existing call sites keep working
+     * unchanged.
+     */
+    constructor(arg) {
+        const opts = SafetyGuard.normalizeArgs(arg);
+        this.thresholds = opts.thresholds ?? DEFAULT_THRESHOLDS;
+        this.intentAuditor = opts.intentAuditor ?? new IntentAuditor_1.IntentAuditor();
+    }
+    static normalizeArgs(arg) {
+        if (!arg)
+            return {};
+        // Heuristic: an options bag has either `intentAuditor` or a nested
+        // `thresholds` field; otherwise the value itself is a ResolvedThresholds.
+        if ("intentAuditor" in arg || "thresholds" in arg) {
+            return arg;
+        }
+        return { thresholds: arg };
     }
     // ─────────────────────────────────────────────────────────────
     // PUBLIC ENTRY POINT
@@ -217,6 +241,7 @@ class SafetyGuard {
             if (vis.isGhost) {
                 return {
                     level: "FAIL_HARD",
+                    code: SelaError_1.SAFETY_GUARD_CODES.FAIL_HARD_VISIBILITY_GHOST,
                     reason: `Visibility Gate: candidate element is a Ghost (${vis.ghostReason}) — ` +
                         `functionally absent from the user's perspective`,
                     canProceed: false,
@@ -227,6 +252,7 @@ class SafetyGuard {
                 if (isMainBranch) {
                     return {
                         level: "FAIL_HARD",
+                        code: SelaError_1.SAFETY_GUARD_CODES.FAIL_HARD_VISIBILITY_OCCLUDED,
                         reason: `Visibility Gate: candidate element is occluded by an overlay on branch "${context.branch}" — ` +
                             `hard-fail policy active on main`,
                         canProceed: false,
@@ -246,6 +272,7 @@ class SafetyGuard {
         if (confidence < this.thresholds.confidenceHardStop) {
             return {
                 level: "BLOCKED",
+                code: SelaError_1.SAFETY_GUARD_CODES.BLOCKED_LOW_CONFIDENCE,
                 reason: `Confidence too low (${confidence}/100 < ${this.thresholds.confidenceHardStop}) — refusing to heal`,
                 canProceed: false,
             };
@@ -290,6 +317,7 @@ class SafetyGuard {
         if (this.isSemanticOpposite(oldText, newText)) {
             return {
                 level: "FAIL_HARD",
+                code: SelaError_1.SAFETY_GUARD_CODES.FAIL_HARD_SEMANTIC_INVERSION,
                 reason: `Semantic inversion detected: "${oldText}" ↔ "${newText}" — ` +
                     `state inversions mask logical regressions`,
                 canProceed: false,
@@ -305,6 +333,7 @@ class SafetyGuard {
         if (isStatusInversion) {
             return {
                 level: "FAIL_HARD",
+                code: SelaError_1.SAFETY_GUARD_CODES.FAIL_HARD_STATUS_INVERSION,
                 reason: `Status inversion: "${oldText}" (${oldRole}) → "${newText}" (${newRole}) — ` +
                     `masking a logic failure is not permitted`,
                 canProceed: false,
@@ -319,6 +348,7 @@ class SafetyGuard {
                 // function being found is almost certainly a wrong element fix.
                 return {
                     level: "BLOCKED",
+                    code: SelaError_1.SAFETY_GUARD_CODES.BLOCKED_ROLE_SWAP_ASSERTION,
                     reason: `Functional role swap in assertion: "${oldText}" (${oldRole}) → "${newText}" (${newRole}) — ` +
                         `the assertion was verifying a specific functional state`,
                     canProceed: false,
@@ -361,6 +391,7 @@ class SafetyGuard {
             if (auditVerdict.verdict === "INCONSISTENT") {
                 return {
                     level: "FAIL_HARD",
+                    code: SelaError_1.SAFETY_GUARD_CODES.FAIL_HARD_AUDITOR_INCONSISTENT,
                     reason: `Intent Auditor — INCONSISTENT: ${auditVerdict.reason}` +
                         (auditVerdict.inversionType
                             ? ` [inversion: ${auditVerdict.inversionType}]`
@@ -377,6 +408,7 @@ class SafetyGuard {
                 if (!this.thresholds.allowSuspicious && mode === "assertion") {
                     return {
                         level: "BLOCKED",
+                        code: SelaError_1.SAFETY_GUARD_CODES.BLOCKED_AUDITOR_SUSPICIOUS,
                         reason: `Intent Auditor — SUSPICIOUS in assertion mode: ${auditVerdict.reason}`,
                         canProceed: false,
                         meta,
@@ -421,6 +453,7 @@ class SafetyGuard {
             if (similarity < this.thresholds.assertionSimilarityFloor) {
                 return {
                     level: "BLOCKED",
+                    code: SelaError_1.SAFETY_GUARD_CODES.BLOCKED_SIMILARITY_FLOOR,
                     reason: `Text divergence too high in assertion: "${oldText}" → "${newText}" ` +
                         `(similarity=${(similarity * 100).toFixed(1)}% < ${(this.thresholds.assertionSimilarityFloor * 100).toFixed(0)}%) — ` +
                         `possible content regression`,
@@ -455,16 +488,29 @@ class SafetyGuard {
     // ─────────────────────────────────────────────────────────────
     // FUNCTIONAL ROLE CLASSIFICATION
     //
-    // Returns the first role whose keyword set contains the text
-    // (exact match or substring). Returns UNKNOWN when no role matches.
+    // Returns the first role whose keyword matches the text as a whole
+    // word (delimited by \b boundaries).  Returns UNKNOWN when no role
+    // matches.
+    //
+    // Why \b instead of `.includes(kw)`:
+    //   - "unauthorized".includes("authorize")  → true   ← bug
+    //   - "offline".includes("on")              → true   ← bug
+    //   - "disconnected".includes("connected")  → true   ← bug
+    //   - "inactive".includes("active")         → true   ← bug
+    // The substring approach mis-classified negations into the
+    // positive role of their root word, silently bypassing
+    // FAIL_HARD_STATUS_INVERSION.  Word-boundary regex eliminates
+    // these collisions while keeping multi-word keywords ("sign in")
+    // and punctuation-flanked matches ("Submit!") working.
     // ─────────────────────────────────────────────────────────────
     classifyFunctionalRole(text) {
         const normalized = text.toLowerCase().trim();
-        for (const [role, keywords] of ROLE_KEYWORDS) {
-            for (const kw of keywords) {
-                if (normalized === kw || normalized.includes(kw)) {
+        if (normalized.length === 0)
+            return "UNKNOWN";
+        for (const { role, regexes } of ROLE_KEYWORD_REGEXES) {
+            for (const re of regexes) {
+                if (re.test(normalized))
                     return role;
-                }
             }
         }
         return "UNKNOWN";

package/dist/services/SourceUpdater.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SourceUpdater.d.ts","sourceRoot":"","sources":["../../src/services/SourceUpdater.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AAMtD,UAAU,YAAY;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,cAAc,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,aAAa;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AA0YD,qBAAa,aAAa;IAMxB,MAAM,CAAC,MAAM,CACX,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,UAAU,CAAC,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,EACpB,mBAAmB,CAAC,EAAE,MAAM,EAC5B,UAAU,CAAC,EAAE,eAAe,EAAE,EAC9B,aAAa,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EACpD,kBAAkB,CAAC,EAAE,iBAAiB,EAAE,EACxC,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,EACvC,cAAc,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,QAAQ,EACrD,UAAU,CAAC,EAAE,OAAO,GACnB,YAAY;IAoDf,OAAO,CAAC,MAAM,CAAC,gBAAgB;IAwC/B,OAAO,CAAC,MAAM,CAAC,WAAW;IAwS1B,OAAO,CAAC,MAAM,CAAC,2BAA2B;IA8E1C,OAAO,CAAC,MAAM,CAAC,wBAAwB;IA8EvC,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAoErC,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAsBjC,OAAO,CAAC,MAAM,CAAC,qBAAqB;IA6DpC,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAuCpC,OAAO,CAAC,MAAM,CAAC,wBAAwB;IA6CvC,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAqCrC,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAqGrC,OAAO,CAAC,MAAM,CAAC,kBAAkB;IA0BjC,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAatC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAgBlD,MAAM,CAAC,cAAc,CACnB,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB,YAAY;IA0Cf,0FAA0F;IAC1F,MAAM,CAAC,eAAe,IAAI,IAAI;CAG/B"}
+{"version":3,"file":"SourceUpdater.d.ts","sourceRoot":"","sources":["../../src/services/SourceUpdater.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAC;AA4BtD,UAAU,YAAY;IACpB,OAAO,EAAE,OAAO,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iFAAiF;IACjF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,wEAAwE;IACxE,cAAc,CAAC,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,iEAAiE;IACjE,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,UAAU,aAAa;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd;AAqZD,qBAAa,aAAa;IAMxB,MAAM,CAAC,MAAM,CACX,MAAM,EAAE,aAAa,EACrB,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,EACnB,UAAU,CAAC,EAAE,MAAM,EACnB,WAAW,CAAC,EAAE,MAAM,EACpB,mBAAmB,CAAC,EAAE,MAAM,EAC5B,UAAU,CAAC,EAAE,eAAe,EAAE,EAC9B,aAAa,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,EACpD,kBAAkB,CAAC,EAAE,iBAAiB,EAAE,EACxC,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,EACvC,cAAc,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,QAAQ,EACrD,UAAU,CAAC,EAAE,OAAO,GACnB,YAAY;IAoDf,OAAO,CAAC,MAAM,CAAC,gBAAgB;IAwC/B,OAAO,CAAC,MAAM,CAAC,WAAW;IAiT1B,OAAO,CAAC,MAAM,CAAC,2BAA2B;IA8E1C,OAAO,CAAC,MAAM,CAAC,wBAAwB;IA8EvC,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAoErC,OAAO,CAAC,MAAM,CAAC,kBAAkB;IAsBjC,OAAO,CAAC,MAAM,CAAC,qBAAqB;IA6DpC,OAAO,CAAC,MAAM,CAAC,qBAAqB;IAuCpC,OAAO,CAAC,MAAM,CAAC,wBAAwB;IA6CvC,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAqCrC,OAAO,CAAC,MAAM,CAAC,sBAAsB;IAqGrC,OAAO,CAAC,MAAM,CAAC,kBAAkB;IA0BjC,OAAO,CAAC,MAAM,CAAC,uBAAuB;IAatC,MAAM,CAAC,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI;IAgBlD,MAAM,CAAC,cAAc,CACnB,MAAM,EAAE,aAAa,EACrB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,WAAW,EAAE,MAAM,GAClB,YAAY;IA0Cf,0FAA0F;IAC1F,MAAM,CAAC,eAAe,IAAI,IAAI;CAG/B"}