speclock 4.5.3 → 4.5.4

package/src/core/compliance.js

@@ -9,7 +9,7 @@
 import { readBrain, readEvents } from "./storage.js";
 import { verifyAuditChain } from "./audit.js";
 
-const VERSION = "4.5.3";
+const VERSION = "4.5.4";
 
 // PHI-related keywords for HIPAA filtering
 const PHI_KEYWORDS = [

package/src/core/conflict.js

@@ -342,16 +342,15 @@ export async function checkConflictAsync(rootOrAction, proposedActionOrLock) {
 
 /**
  * Merge heuristic result with LLM/proxy result.
- * Keeps HIGH heuristic conflicts + all LLM conflicts, deduplicates, takes MAX.
+ * Takes MAX(heuristic, LLM) confidence per lock — neither engine can override the other.
+ * The heuristic catches domain-specific patterns; the LLM catches cross-domain vocabulary.
  */
 function mergeLLMResult(heuristicResult, llmResult) {
-  const highConfidence = heuristicResult.conflictingLocks.filter(
-    (c) => c.confidence > 70
-  );
+  const allHeuristic = heuristicResult.conflictingLocks || [];
   const llmConflicts = llmResult.conflictingLocks || [];
-  const merged = [...highConfidence, ...llmConflicts];
+  const merged = [...allHeuristic, ...llmConflicts];
 
-  // Deduplicate by lock text, keeping the higher-confidence entry
+  // Deduplicate by lock text, keeping the higher-confidence entry (MAX per lock)
   const byText = new Map();
   for (const c of merged) {
     const existing = byText.get(c.text);
@@ -365,15 +364,17 @@ function mergeLLMResult(heuristicResult, llmResult) {
     return {
       hasConflict: false,
       conflictingLocks: [],
-      analysis: `Heuristic had partial signal, LLM verified as safe. No conflicts.`,
+      analysis: `Both heuristic and LLM agree: no conflicts detected.`,
     };
   }
 
   unique.sort((a, b) => b.confidence - a.confidence);
+  const heuristicCount = allHeuristic.filter(c => !llmConflicts.some(l => l.text === c.text)).length;
+  const llmOnlyCount = llmConflicts.filter(l => !allHeuristic.some(h => h.text === l.text)).length;
   return {
     hasConflict: true,
     conflictingLocks: unique,
-    analysis: `${unique.length} conflict(s) confirmed (${highConfidence.length} heuristic + ${llmConflicts.length} LLM-verified).`,
+    analysis: `${unique.length} conflict(s) detected (${heuristicCount} heuristic-only, ${llmOnlyCount} LLM-only, ${unique.length - heuristicCount - llmOnlyCount} both).`,
   };
 }
 

package/src/core/telemetry.js

@@ -257,7 +257,7 @@ export async function flushToRemote(root) {
   // Build anonymized payload
   const payload = {
     instanceId: summary.instanceId,
-    version: "4.5.3",
+    version: "4.5.4",
     totalCalls: summary.totalCalls,
     avgResponseMs: summary.avgResponseMs,
     conflicts: summary.conflicts,

package/src/dashboard/index.html

@@ -89,7 +89,7 @@
 <div class="header">
   <div>
     <h1><span>SpecLock</span> Dashboard</h1>
-    <div class="meta">v4.5.3 &mdash; AI Constraint Engine</div>
+    <div class="meta">v4.5.4 &mdash; AI Constraint Engine</div>
   </div>
   <div style="display:flex;align-items:center;gap:12px;">
     <span id="health-badge" class="status-badge healthy">Loading...</span>
@@ -182,7 +182,7 @@
 </div>
 
 <div style="text-align:center;padding:24px;color:var(--muted);font-size:12px;">
-  SpecLock v4.5.3 &mdash; Developed by Sandeep Roy &mdash; <a href="https://github.com/sgroy10/speclock" style="color:var(--accent)">GitHub</a>
+  SpecLock v4.5.4 &mdash; Developed by Sandeep Roy &mdash; <a href="https://github.com/sgroy10/speclock" style="color:var(--accent)">GitHub</a>
 </div>
 
 <script>

package/src/mcp/http-server.js

@@ -91,7 +91,7 @@ import { fileURLToPath } from "url";
 import _path from "path";
 
 const PROJECT_ROOT = process.env.SPECLOCK_PROJECT_ROOT || process.cwd();
-const VERSION = "4.5.3";
+const VERSION = "4.5.4";
 const AUTHOR = "Sandeep Roy";
 const START_TIME = Date.now();