speclock 4.5.5 → 4.5.6

package/README.md

@@ -409,6 +409,21 @@ The AI opens the file and sees:
 
 ---
 
+## Configuration
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `SPECLOCK_API_KEY` | — | API key for authenticated access |
+| `SPECLOCK_ENCRYPTION_KEY` | — | Enables AES-256-GCM encryption at rest |
+| `SPECLOCK_NO_PROXY` | `false` | Set `true` for heuristic-only mode (~250ms). Skips the Gemini proxy (~2s) |
+| `SPECLOCK_LLM_KEY` | — | Your own LLM API key (Gemini/OpenAI/Anthropic) |
+| `GEMINI_API_KEY` | — | Google Gemini API key for hybrid conflict detection |
+| `SPECLOCK_TELEMETRY` | `false` | Opt-in anonymous usage analytics |
+
+> **Tip:** The heuristic engine alone scores 95%+ accuracy at ~250ms. The Gemini proxy adds cross-domain coverage but takes ~2s. For fastest response, set `SPECLOCK_NO_PROXY=true`.
+
+---
+
 ## Test Results
 
 | Suite | Tests | Pass Rate |
@@ -457,4 +472,4 @@ Built by **[Sandeep Roy](https://github.com/sgroy10)**
 
 ---
 
-<p align="center"><i>v4.5.5 — 600+ tests, 31 MCP tools, 0 false positives, Gemini hybrid. Because remembering isn't enough.</i></p>
+<p align="center"><i>v4.5.6 — 600+ tests, 31 MCP tools, 0 false positives, Gemini hybrid. Because remembering isn't enough.</i></p>

package/package.json

@@ -2,7 +2,7 @@
 
   "name": "speclock",
 
-  "version": "4.5.5",
+  "version": "4.5.6",
 
   "description": "AI constraint engine with Gemini LLM universal detection, Policy-as-Code DSL, OAuth/OIDC SSO, admin dashboard, telemetry, API key auth, RBAC, AES-256-GCM encryption, hard enforcement, semantic pre-commit, HMAC audit chain, SOC 2/HIPAA compliance. Cross-platform: MCP + direct API. 31 MCP tools + CLI. Enterprise platform.",
 

package/src/cli/index.js

@@ -117,7 +117,7 @@ function refreshContext(root) {
 
 function printHelp() {
   console.log(`
-SpecLock v4.5.5 — AI Constraint Engine (Gemini LLM + Policy-as-Code + SSO + Dashboard + Telemetry + Auth + RBAC + Encryption)
+SpecLock v4.5.6 — AI Constraint Engine (Gemini LLM + Policy-as-Code + SSO + Dashboard + Telemetry + Auth + RBAC + Encryption)
 Developed by Sandeep Roy (github.com/sgroy10)
 
 Usage: speclock <command> [options]

package/src/core/compliance.js

@@ -9,7 +9,7 @@
 import { readBrain, readEvents } from "./storage.js";
 import { verifyAuditChain } from "./audit.js";
 
-const VERSION = "4.5.5";
+const VERSION = "4.5.6";
 
 // PHI-related keywords for HIPAA filtering
 const PHI_KEYWORDS = [

package/src/core/semantics.js

@@ -124,7 +124,7 @@ export const SYNONYM_GROUPS = [
    "payment service", "payment platform"],
   ["razorpay", "stripe", "paypal", "phonepe", "paytm", "ccavenue",
    "cashfree", "braintree", "adyen", "square", "google pay", "gpay",
-   "juspay", "billdesk", "instamojo"],
+   "juspay", "billdesk", "instamojo", "payu"],
 
   // --- IoT / firmware ---
   ["firmware", "firmware update", "ota", "over the air",
@@ -467,6 +467,8 @@ export const CONCEPT_MAP = {
                         "transaction", "billing", "razorpay", "ccavenue"],
   "instamojo":         ["payment gateway", "payment processing", "payment",
                         "transaction", "billing", "razorpay", "cashfree"],
+  "payu":              ["payment gateway", "payment processing", "payment",
+                        "transaction", "billing", "razorpay", "stripe", "cashfree"],
   "upi":               ["payment gateway", "payment processing", "phonepe",
                         "paytm", "google pay", "razorpay",
                         "transaction", "payment"],
@@ -2077,7 +2079,7 @@ export function scoreConflict({ actionText, lockText }) {
       // These are specific nouns (not verbs, not stopwords) that identify the technology
       const TECH_BRANDS = new Set([
         "stripe", "razorpay", "paypal", "phonepe", "paytm", "ccavenue", "cashfree",
-        "braintree", "adyen", "square", "billdesk", "instamojo", "juspay",
+        "braintree", "adyen", "square", "billdesk", "instamojo", "juspay", "payu",
         "postgresql", "postgres", "mysql", "mongodb", "mongo", "firebase",
         "firestore", "supabase", "dynamodb", "redis", "sqlite", "mariadb",
         "cassandra", "couchdb", "neo4j",

package/src/core/telemetry.js

@@ -257,7 +257,7 @@ export async function flushToRemote(root) {
   // Build anonymized payload
   const payload = {
     instanceId: summary.instanceId,
-    version: "4.5.5",
+    version: "4.5.6",
     totalCalls: summary.totalCalls,
     avgResponseMs: summary.avgResponseMs,
     conflicts: summary.conflicts,

package/src/dashboard/index.html

@@ -89,7 +89,7 @@
 <div class="header">
   <div>
     <h1><span>SpecLock</span> Dashboard</h1>
-    <div class="meta">v4.5.5 &mdash; AI Constraint Engine</div>
+    <div class="meta">v4.5.6 &mdash; AI Constraint Engine</div>
   </div>
   <div style="display:flex;align-items:center;gap:12px;">
     <span id="health-badge" class="status-badge healthy">Loading...</span>
@@ -182,7 +182,7 @@
 </div>
 
 <div style="text-align:center;padding:24px;color:var(--muted);font-size:12px;">
-  SpecLock v4.5.5 &mdash; Developed by Sandeep Roy &mdash; <a href="https://github.com/sgroy10/speclock" style="color:var(--accent)">GitHub</a>
+  SpecLock v4.5.6 &mdash; Developed by Sandeep Roy &mdash; <a href="https://github.com/sgroy10/speclock" style="color:var(--accent)">GitHub</a>
 </div>
 
 <script>

package/src/mcp/http-server.js

@@ -91,7 +91,7 @@ import { fileURLToPath } from "url";
 import _path from "path";
 
 const PROJECT_ROOT = process.env.SPECLOCK_PROJECT_ROOT || process.cwd();
-const VERSION = "4.5.5";
+const VERSION = "4.5.6";
 const AUTHOR = "Sandeep Roy";
 const START_TIME = Date.now();
 

package/src/mcp/server.js

@@ -100,7 +100,7 @@ const PROJECT_ROOT =
   args.project || process.env.SPECLOCK_PROJECT_ROOT || process.cwd();
 
 // --- MCP Server ---
-const VERSION = "4.5.5";
+const VERSION = "4.5.6";
 const AUTHOR = "Sandeep Roy";
 
 const server = new McpServer(