speclock 4.5.0 → 4.5.1

package/package.json

@@ -2,7 +2,7 @@
 
   "name": "speclock",
 
-  "version": "4.5.0",
+  "version": "4.5.1",
 
   "description": "AI constraint engine with Gemini LLM universal detection, Policy-as-Code DSL, OAuth/OIDC SSO, admin dashboard, telemetry, API key auth, RBAC, AES-256-GCM encryption, hard enforcement, semantic pre-commit, HMAC audit chain, SOC 2/HIPAA compliance. Cross-platform: MCP + direct API. 31 MCP tools + CLI. Enterprise platform.",
 

package/src/cli/index.js

@@ -117,7 +117,7 @@ function refreshContext(root) {
 
 function printHelp() {
   console.log(`
-SpecLock v4.5.0 — AI Constraint Engine (Gemini LLM + Policy-as-Code + SSO + Dashboard + Telemetry + Auth + RBAC + Encryption)
+SpecLock v4.5.1 — AI Constraint Engine (Gemini LLM + Policy-as-Code + SSO + Dashboard + Telemetry + Auth + RBAC + Encryption)
 Developed by Sandeep Roy (github.com/sgroy10)
 
 Usage: speclock <command> [options]

package/src/core/compliance.js

@@ -9,7 +9,7 @@
 import { readBrain, readEvents } from "./storage.js";
 import { verifyAuditChain } from "./audit.js";
 
-const VERSION = "4.5.0";
+const VERSION = "4.5.1";
 
 // PHI-related keywords for HIPAA filtering
 const PHI_KEYWORDS = [

package/src/core/semantics.js

@@ -1964,10 +1964,34 @@ export function scoreConflict({ actionText, lockText }) {
     }
   }
 
+  // Check 3b: Safe/verification verbs against preservation/maintenance locks
+  // "Test that Stripe is working" is COMPLIANT with "must always use Stripe"
+  // "Debug the Stripe webhook" is COMPLIANT — it's verifying the preserved system
+  if (!intentAligned && actionPrimaryVerb) {
+    const lockIsPreservation = /must remain|must be preserved|must always|at all times|must stay/i.test(lockText);
+
+    if (lockIsPreservation) {
+      const SAFE_FOR_PRESERVATION = new Set([
+        "test", "verify", "check", "validate", "confirm", "ensure",
+        "debug", "inspect", "review", "examine", "monitor", "observe",
+        "watch", "scan", "detect", "audit", "report", "document",
+        "read", "view", "generate", "fix", "repair", "patch",
+        "protect", "secure", "guard", "maintain", "preserve",
+      ]);
+      if (SAFE_FOR_PRESERVATION.has(actionPrimaryVerb)) {
+        intentAligned = true;
+        reasons.push(
+          `intent alignment: verification/maintenance "${actionPrimaryVerb}" is ` +
+          `compliant with preservation lock`);
+      }
+    }
+  }
+
   // Check 4: Enhancement/constructive actions against preservation/maintenance locks
   // "Increase the rate limit" is COMPLIANT with "rate limiting must remain active"
   // "Add better rate limit error messages" is COMPLIANT (doesn't disable rate limiting)
   // But "Add a way to bypass rate limiting" is NOT safe (contains negative op "bypass")
+  // And "Add Razorpay" vs "must always use Stripe" is NOT safe (competing alternative)
   if (!intentAligned && actionPrimaryVerb) {
     const ENHANCEMENT_VERBS = new Set([
       "increase", "improve", "enhance", "boost", "strengthen",
@@ -1986,15 +2010,23 @@ export function scoreConflict({ actionText, lockText }) {
           `intent alignment: enhancement action "${actionPrimaryVerb}" is ` +
           `compliant with preservation lock`);
       } else if (CONSTRUCTIVE_FOR_PRESERVATION.has(actionPrimaryVerb)) {
-        // Constructive verbs align ONLY if the action doesn't contain negative ops
+        // Constructive verbs align ONLY if:
+        // 1. No negative operations in the action
+        // 2. The action doesn't introduce a COMPETING alternative
+        //    "Add Razorpay" vs "must always use Stripe" → competitor (same synonym group)
+        //    "Add dark mode" vs "must always use Stripe" → unrelated (safe)
         const actionLower = actionText.toLowerCase();
         const hasNegativeOp = NEGATIVE_INTENT_MARKERS.some(m =>
           new RegExp(`\\b${escapeRegex(m)}\\b`, "i").test(actionLower));
-        if (!hasNegativeOp) {
+        // Check if action introduces a competing product/brand from the same category
+        const hasCompetitorMatch = subjectComparison.matchedSubjects.some(m =>
+          typeof m === "string" && m.startsWith("synonym:")
+        );
+        if (!hasNegativeOp && !hasCompetitorMatch) {
           intentAligned = true;
           reasons.push(
             `intent alignment: constructive "${actionPrimaryVerb}" is ` +
-            `compliant with preservation lock (no negative operations)`);
+            `compliant with preservation lock (no negative operations, no competitor)`);
         }
       }
     }

package/src/core/telemetry.js

@@ -257,7 +257,7 @@ export async function flushToRemote(root) {
   // Build anonymized payload
   const payload = {
     instanceId: summary.instanceId,
-    version: "4.5.0",
+    version: "4.5.1",
     totalCalls: summary.totalCalls,
     avgResponseMs: summary.avgResponseMs,
     conflicts: summary.conflicts,

package/src/dashboard/index.html

@@ -89,7 +89,7 @@
 <div class="header">
   <div>
     <h1><span>SpecLock</span> Dashboard</h1>
-    <div class="meta">v4.5.0 &mdash; AI Constraint Engine</div>
+    <div class="meta">v4.5.1 &mdash; AI Constraint Engine</div>
   </div>
   <div style="display:flex;align-items:center;gap:12px;">
     <span id="health-badge" class="status-badge healthy">Loading...</span>
@@ -182,7 +182,7 @@
 </div>
 
 <div style="text-align:center;padding:24px;color:var(--muted);font-size:12px;">
-  SpecLock v4.5.0 &mdash; Developed by Sandeep Roy &mdash; <a href="https://github.com/sgroy10/speclock" style="color:var(--accent)">GitHub</a>
+  SpecLock v4.5.1 &mdash; Developed by Sandeep Roy &mdash; <a href="https://github.com/sgroy10/speclock" style="color:var(--accent)">GitHub</a>
 </div>
 
 <script>

package/src/mcp/http-server.js

@@ -91,7 +91,7 @@ import { fileURLToPath } from "url";
 import _path from "path";
 
 const PROJECT_ROOT = process.env.SPECLOCK_PROJECT_ROOT || process.cwd();
-const VERSION = "4.5.0";
+const VERSION = "4.5.1";
 const AUTHOR = "Sandeep Roy";
 const START_TIME = Date.now();
 

package/src/mcp/server.js

@@ -100,7 +100,7 @@ const PROJECT_ROOT =
   args.project || process.env.SPECLOCK_PROJECT_ROOT || process.cwd();
 
 // --- MCP Server ---
-const VERSION = "4.5.0";
+const VERSION = "4.5.1";
 const AUTHOR = "Sandeep Roy";
 
 const server = new McpServer(