evilution 0.27.0 → 0.28.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 12d485d3cce9569229a95a1e8f29403fbb11f8f067e0c438256919521f6d82dc
-  data.tar.gz: 11a1adeca7c61fa905757137d6a737c6e389eae584b37fca91a8c9eed57926d0
+  metadata.gz: dda90ba09660e134411bad5df79ba56075ed9661f8e94aa3b366478cc3191755
+  data.tar.gz: c1c5606e0a2c082dd1d7ec24738f0558b7cc94bfc3632cd4c2fdd200d5ad5e11
 SHA512:
-  metadata.gz: ce9208fa3f3ed3160d2844cdd5e1479cf7b2fa90985371cb95d6978177f371d38ec4bdccf473f79af318cd6c617fda2b1962efe4f389eab1912ab348cc48b475
-  data.tar.gz: 57ff4d971829430d5d47525ac0bc5e488b326e6916657aaf9acb3faf0e8795e909523ec8238b6b9fbaace13bdd60c0f437f30d94efbfa82861b42da802a54aac
+  metadata.gz: 30d4d7dcdcb9d88615fa5d37205bd02a307f32b6150a7ee7fa55b8397b677d40dd26e5777043fb6dfeeddf2559c8e79ae23276574ede65627ccf95f9effcd31e
+  data.tar.gz: a657c55edcffd46c6883c4146cd97471db4c51940def54027a49f01ff89a29e7fd6fd4c28e758d9d7207623d664c320ccc22a9a01430abd5d26574afb1142932

data/.beads/interactions.jsonl

@@ -245,3 +245,16 @@
 {"id":"int-9d182026","kind":"field_change","created_at":"2026-04-25T17:54:26.23542935Z","actor":"Denis Kiselev","issue_id":"EV-67yh","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"Merged via PR #897"}}
 {"id":"int-7ede49f5","kind":"field_change","created_at":"2026-04-25T18:16:18.358350457Z","actor":"Denis Kiselev","issue_id":"EV-zvhp","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"Merged via PR #898"}}
 {"id":"int-c28f7ee0","kind":"field_change","created_at":"2026-04-26T02:28:38.321564801Z","actor":"Denis Kiselev","issue_id":"EV-vev8","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"Merged via PR #899"}}
+{"id":"int-111f631a","kind":"field_change","created_at":"2026-04-26T07:57:40.59622849Z","actor":"Denis Kiselev","issue_id":"EV-p5vh","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"Released in v0.27.0 (PR #901 merged, release PR #902 shipped)"}}
+{"id":"int-5a159da9","kind":"field_change","created_at":"2026-04-29T11:51:40.86913186Z","actor":"Denis Kiselev","issue_id":"EV-vm61","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"Closed"}}
+{"id":"int-1787900f","kind":"field_change","created_at":"2026-04-30T02:40:52.288627178Z","actor":"Denis Kiselev","issue_id":"EV-v1i6","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"merged via PR #911"}}
+{"id":"int-08958dc0","kind":"field_change","created_at":"2026-04-30T03:15:14.369272687Z","actor":"Denis Kiselev","issue_id":"EV-x3s0","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"merged via PR #912"}}
+{"id":"int-e013b002","kind":"field_change","created_at":"2026-04-30T05:46:44.70653253Z","actor":"Denis Kiselev","issue_id":"EV-eww3","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"merged via PR #913"}}
+{"id":"int-7b15a1b0","kind":"field_change","created_at":"2026-04-30T09:30:21.057039785Z","actor":"Denis Kiselev","issue_id":"EV-7rov","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"merged via PR #914"}}
+{"id":"int-71c9f98d","kind":"field_change","created_at":"2026-04-30T12:30:36.528587334Z","actor":"Denis Kiselev","issue_id":"EV-318q","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"merged"}}
+{"id":"int-42eadbdc","kind":"field_change","created_at":"2026-04-30T16:09:00.539400752Z","actor":"Denis Kiselev","issue_id":"EV-voay","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"merged"}}
+{"id":"int-cb4c0ebf","kind":"field_change","created_at":"2026-05-01T02:38:05.091612839Z","actor":"Denis Kiselev","issue_id":"EV-t918","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"merged via PR #918"}}
+{"id":"int-ffa8f0b2","kind":"field_change","created_at":"2026-05-01T17:47:23.967998678Z","actor":"Denis Kiselev","issue_id":"EV-m3ta","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"merged"}}
+{"id":"int-b9cb7738","kind":"field_change","created_at":"2026-05-01T18:06:39.17748775Z","actor":"Denis Kiselev","issue_id":"EV-gffv","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"merged"}}
+{"id":"int-983c2fe6","kind":"field_change","created_at":"2026-05-02T02:47:27.113692488Z","actor":"Denis Kiselev","issue_id":"EV-3t8l","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"Audit confirmed feature already fully implemented in current master: --fail-fast CLI flag, .evilution.yml key, FailFast validator, ResultNotifier trips at threshold, sequential+parallel strategies short-circuit, summary.truncated? indicator, reporter notices (CLI/HTML/JSON), full spec coverage across notifier/sequential/parallel/runner/parser. CI signal available via summary.truncated? in reports."}}
+{"id":"int-1790a8b7","kind":"field_change","created_at":"2026-05-02T17:53:56.73309749Z","actor":"Denis Kiselev","issue_id":"EV-2gpj","extra":{"field":"status","new_value":"closed","old_value":"in_progress","reason":"Audit confirmed refactor already done: ProcessCleanup.safe_kill / safe_wait helpers extracted to lib/evilution/process_cleanup.rb (lines 8-18), used by baseline.rb (lines 85,93,94) and parallel/work_queue/worker.rb. No Style/RescueModifier disables remain anywhere in lib/. bundle exec rubocop lib/evilution/baseline.rb clean. Existing specs pass."}}

data/.rubocop_todo.yml

@@ -3,5 +3,4 @@
 
 Metrics/AbcSize:
   Exclude:
-    - "lib/evilution/config.rb"
     - "lib/evilution/runner.rb"

data/CHANGELOG.md

@@ -1,5 +1,37 @@
 # Changelog
 
+## [0.28.0] - 2026-05-03
+
+### Added
+
+- **Operator profiles: `default` (current 72-operator set) and `strict` (adds aggressive truthiness mutators)** — pre-merge audits can opt into a more sensitive operator mix. The `strict` profile registers `PredicateToNil`, which replaces every `x.predicate?` call with `nil` to surface tests that only assert truthiness rather than exact return values. Wired through CLI (`--profile=strict`, `--strict` shortcut), `.evilution.yml` (`profile: strict`), and a new `Evilution::Mutator::Registry.for_profile(:default | :strict)` factory. `default` is unchanged, so existing CI runs are not affected (#920, PR #926)
+- **Multi-file batch invocation documented** — `evilution path/a.rb path/b.rb path/c.rb` runs every file in a single Runner invocation so the framework (Rails, Sorbet, etc.) and the `preload` chain load **once** in the parent process. With `--isolation=fork` (default for Rails projects under `auto`), every per-mutation fork branches off the warmed parent — materially faster than `for f in ...; do bundle exec evilution run "$f"; done`. README now has a "5a. Multi-file batch scan" workflow section and an end-to-end runner spec covers two positional file paths; session save/load preserves per-file paths in `survived[].file` (#922, PR #927)
+
+### Fixed
+
+- **`Compare::Normalizer` mis-classified Mutant payload lines whose mutated source started with `--` or `++` as unified-diff headers** — pre-existing bug in `extract_from_mutant_diff` that would, for example, drop a removed line `--flag` (emitted as `---flag` in the diff). The new `DiffExtractor::Mutant` requires a trailing space after `---`/`+++` to match a header, preserving real payload. Equivalent Evilution/Mutant mutations on such lines now hash identically and `compare` no longer reports false additions/removals (#917, PR #934)
+
+### Changed
+
+- **Internal `Evilution::Compare::Fingerprint` SOLID refactor** — module-function form replaced with a class taking injectable `(extractor:, normalizer:)` collaborators and a `#call(diff:, file_path:, line:)` interface. Diff parsing extracted into `Evilution::Compare::DiffExtractor::{Evilution,Mutant}` strategy classes (one per format, common duck-typed interface), enabling open/closed extension for future tools without touching the orchestrator. `Compare::Normalizer` constructs both fingerprints once and reuses them across records (#917, PR #934)
+- **`Evilution::Mutation` migrated to value-object composition** — sources, slice, parse status now Data.define-backed value objects (#822, PR #907)
+- **`Evilution::Result::MutationResult` encapsulates memory and error state in dedicated Data.define value objects** — `MemoryStats` and `ErrorInfo` instead of flat positional fields (#823, PR #907)
+- **`Reporter::Suggestion` registry/templates and the RSpec/Minitest template builders unified** — single `build` entrypoint per format (#824, PR #908; #849, PR #905; #850, PR #904)
+- **`Reporter::HTML` namespace inlined into `report.rb`** — separate `namespace.rb` removed, autoload pattern adopted for sub-templates (#826, PR #909)
+- **`Compare::LineNormalizer` extracted into its own class** — whitespace collapse separated from fingerprint orchestration (#829, PR #832)
+- **`Evilution::Config` attribute assignment migrated to a transformation map** — single source of truth for type coercion across simple attributes (#830)
+- **`Runner` `require` chain consolidated** — sub-component loading now centralized; circular-require pitfalls in `MutationExecutor` resolved with `Module#autoload` for child strategy/neutralizer files (#831)
+- **Process cleanup helpers extracted into `Evilution::ProcessCleanup`** — `safe_kill(sig, pid)` and `safe_wait(pid)` shared by `Baseline`, `Isolation::Fork`, and `WorkQueue::Worker`, replacing scattered inline `rescue` modifiers swallowing `Errno::ESRCH`/`ECHILD` (#838)
+- **`ProgressStreamer` and `Loop` error handling tightened** — generic `StandardError` rescues replaced with specific `Errno::EPIPE`/`Errno::EBADF`/etc.; once-only warning suppression added so a flood of failures cannot drown stderr (#827, #840)
+- **Crash detector predicate methods renamed** — `has_*?` → `*?` per Ruby/RSpec conventions (`have_X` matcher calls `has_X?`; the renamed methods are still picked up by `be_X` matchers used in specs) (#839)
+- **Rubocop hygiene sweep across 6 sites** — `Style/RescueModifier`, `Lint/UnusedMethodArgument`, `Lint/SuppressedException` (3 instances), `Security/Eval`, and `Security/MarshalLoad` (3 instances) inline disable comments removed in favor of either narrowed code, explanatory rescue-body comments, or main-`.rubocop.yml` per-file Excludes documented with the underlying trust boundary (#832, #833, #834, #835, #836, #837)
+
+### Documentation
+
+- **README "Operator Profiles" subsection** — explains the `default` vs `strict` profiles, how to opt in (CLI, config, shortcut), and what `strict` adds today (#920, PR #926)
+- **README "5a. Multi-file batch scan" workflow** — documents Rails-loads-once amortisation and qualifies the speed claim by isolation mode (`fork` vs `in_process`) (#922, PR #927)
+- **`.evilution.yml` template gained a `profile:` block** — generated by `evilution init` (#920, PR #926)
+
 ## [0.27.0] - 2026-04-26
 
 ### Added

data/README.md

@@ -118,6 +118,17 @@ The shorter alias `evil` ships alongside `evilution` and accepts identical argum
 | `--fallback-full-suite`      | Boolean | false        | When no matching spec/test resolves for a mutation, run the whole test suite instead of marking it `:unresolved` and skipping. |
 | `--baseline-session PATH`    | String  | _(none)_     | Saved session file for HTML report comparison.     |
 | `-e CODE`, `--eval CODE`     | String  | _(none)_     | Inline Ruby code for `util mutation` command.      |
+| `--profile NAME`             | String  | `default`    | Operator profile: `default` or `strict`. `strict` adds aggressive truthiness mutators (e.g. replaces `x.predicate?` with `nil`) intended for pre-merge audits. |
+| `--strict`                   | Boolean | false        | Shortcut for `--profile=strict`.                    |
+
+### Operator Profiles
+
+Two profiles ship out of the box:
+
+- **`default`** — the 72 stable operators registered in `Mutator::Registry.default`. Suitable for everyday CI runs; balances coverage signal against survivor noise.
+- **`strict`** — adds extra truthiness mutators on top of `default`. Currently `PredicateToNil` (replaces every `x.predicate?` call with `nil` to surface tests that only assert truthiness rather than exact return values). Use for pre-merge audits where you want maximum sensitivity at the cost of more survivors.
+
+Set via `--profile=strict`, the `--strict` shortcut, or `profile: strict` in `.evilution.yml`.
 
 ### Exit Codes
 
@@ -484,6 +495,14 @@ bundle exec evilution run lib/specific_file.rb --format json
 
 Use when you know which file was modified and want to verify its test coverage.
 
+### 5a. Multi-file batch scan
+
+```bash
+bundle exec evilution run lib/models/user.rb lib/models/account.rb lib/models/order.rb
+```
+
+Pass multiple file paths on a single invocation to amortise startup cost. The framework (Rails, Sorbet, etc.) and the `preload` chain (`spec/rails_helper.rb` → `spec/spec_helper.rb` → `test/test_helper.rb`) load **once** in the parent process. When `--isolation=fork` is selected (the default `--isolation=auto` resolves to `fork` on Rails projects), every subsequent mutation across all files forks from that warmed parent — materially faster than scripting a `for f in ...; do bundle exec evilution run "$f"; done` loop, which pays the bootstrap per file. With `--isolation=in_process` (default for non-Rails projects under `auto`), there is no per-mutation fork, but the parent-process boot still runs once instead of N times. Per-file paths and line numbers are preserved in the report (`survived[].file`, HTML grouping by source file).
+
 ### 6. Fixing surviving mutants
 
 For each entry in `survived[]`:

data/lib/evilution/baseline.rb

@@ -1,6 +1,7 @@
 # frozen_string_literal: true
 
 require_relative "spec_resolver"
+require_relative "process_cleanup"
 
 class Evilution::Baseline
   Result = Struct.new(:failed_spec_files, :duration) do
@@ -72,7 +73,7 @@ class Evilution::Baseline
       Process.wait(pid)
       return false if data.empty?
 
-      result = Marshal.load(data) # rubocop:disable Security/MarshalLoad
+      result = Marshal.load(data)
       result[:passed]
     else
       terminate_child(pid)
@@ -81,7 +82,7 @@ class Evilution::Baseline
   end
 
   def terminate_child(pid)
-    Process.kill("TERM", pid) rescue nil # rubocop:disable Style/RescueModifier
+    Evilution::ProcessCleanup.safe_kill("TERM", pid)
     _, status = Process.waitpid2(pid, Process::WNOHANG)
     return if status
 
@@ -89,8 +90,8 @@ class Evilution::Baseline
     _, status = Process.waitpid2(pid, Process::WNOHANG)
     return if status
 
-    Process.kill("KILL", pid) rescue nil # rubocop:disable Style/RescueModifier
-    Process.wait(pid) rescue nil # rubocop:disable Style/RescueModifier
+    Evilution::ProcessCleanup.safe_kill("KILL", pid)
+    Evilution::ProcessCleanup.safe_wait(pid)
   end
 
   private

data/lib/evilution/cli/parser/options_builder.rb

@@ -21,6 +21,7 @@ class Evilution::CLI::Parser::OptionsBuilder
       add_core_options(opts)
       add_filter_options(opts)
       add_flag_options(opts)
+      add_profile_options(opts)
       add_extra_flag_options(opts)
       add_session_options(opts)
       add_compare_options(opts)
@@ -95,6 +96,12 @@ class Evilution::CLI::Parser::OptionsBuilder
     end
   end
 
+  def add_profile_options(opts)
+    opts.on("--profile NAME", "Operator profile: default, strict (default: default). " \
+                              "strict adds aggressive truthiness mutators for pre-merge audits.") { |p| @options[:profile] = p }
+    opts.on("--strict", "Shortcut for --profile=strict") { @options[:profile] = "strict" }
+  end
+
   def add_extra_flag_options(opts)
     opts.on("--skip-heredoc-literals", "Skip all string literal mutations inside heredocs") { @options[:skip_heredoc_literals] = true }
     opts.on("--related-specs-heuristic", "Append related request/integration/feature/system specs for includes() mutations") do

data/lib/evilution/compare/diff_extractor/evilution.rb

@@ -0,0 +1,22 @@
+# frozen_string_literal: true
+
+require_relative "../diff_extractor"
+
+# Extracts {minus:, plus:} payload arrays from Evilution-format diffs.
+# Evilution diffs use "- " / "+ " line prefixes (note the trailing space) and
+# do not carry unified-diff headers or hunk markers.
+class Evilution::Compare::DiffExtractor::Evilution
+  def call(diff)
+    minus = []
+    plus = []
+    diff.to_s.each_line do |line|
+      line = line.chomp
+      if line.start_with?("- ")
+        minus << line[2..]
+      elsif line.start_with?("+ ")
+        plus << line[2..]
+      end
+    end
+    { minus: minus, plus: plus }
+  end
+end

data/lib/evilution/compare/diff_extractor/mutant.rb

@@ -0,0 +1,30 @@
+# frozen_string_literal: true
+
+require_relative "../diff_extractor"
+
+# Extracts {minus:, plus:} payload arrays from Mutant unified-diff format.
+# Skips the "--- <name>", "+++ <name>", and "@@ ... @@" header lines and
+# returns each remaining payload line with its single leading "-" or "+"
+# marker stripped.
+#
+# Header detection requires a trailing space after "---"/"+++" so that a
+# payload line whose mutated source starts with "--" (emitted as "---var")
+# or "++" (emitted as "+++var") is preserved rather than misclassified as
+# a header.
+class Evilution::Compare::DiffExtractor::Mutant
+  def call(diff)
+    minus = []
+    plus = []
+    diff.to_s.each_line do |line|
+      line = line.chomp
+      next if line.start_with?("--- ", "+++ ", "@@")
+
+      if line.start_with?("-")
+        minus << line[1..]
+      elsif line.start_with?("+")
+        plus << line[1..]
+      end
+    end
+    { minus: minus, plus: plus }
+  end
+end

data/lib/evilution/compare/diff_extractor.rb

@@ -0,0 +1,6 @@
+# frozen_string_literal: true
+
+require_relative "../compare"
+
+module Evilution::Compare::DiffExtractor
+end

data/lib/evilution/compare/fingerprint.rb

@@ -3,80 +3,23 @@
 require "digest"
 require_relative "../compare"
 
-module Evilution::Compare::Fingerprint
-  module_function
-
-  def extract_from_evilution_diff(diff)
-    minus = []
-    plus = []
-    diff.to_s.each_line do |line|
-      line = line.chomp
-      if line.start_with?("- ")
-        minus << line[2..]
-      elsif line.start_with?("+ ")
-        plus << line[2..]
-      end
-    end
-    { minus: minus, plus: plus }
-  end
-
-  def extract_from_mutant_diff(diff)
-    minus = []
-    plus = []
-    diff.to_s.each_line do |line|
-      line = line.chomp
-      next if line.start_with?("---", "+++", "@@")
-
-      if line.start_with?("-")
-        minus << line[1..]
-      elsif line.start_with?("+")
-        plus << line[1..]
-      end
-    end
-    { minus: minus, plus: plus }
-  end
-
-  # v1 limitation: only " and ' literals are preserved. Regex literals (/.../),
-  # heredocs, %w[], %q{} forms are treated as ordinary code — whitespace runs
-  # inside them collapse. A mutation touching whitespace inside a regex may
-  # false-match across tools.
-  # rubocop:disable Metrics/PerceivedComplexity, Style/MultipleComparison
-  def normalize_line(line)
-    out = +""
-    i = 0
-    in_literal = nil
-    last_was_space = false
-    chars = line.chars
-    while i < chars.length
-      ch = chars[i]
-      if in_literal
-        out << ch
-        if ch == "\\" && i + 1 < chars.length
-          out << chars[i + 1]
-          i += 2
-          next
-        end
-        in_literal = nil if ch == in_literal
-      elsif ch == '"' || ch == "'"
-        in_literal = ch
-        out << ch
-        last_was_space = false
-      elsif ch == " " || ch == "\t"
-        out << " " unless last_was_space || out.empty?
-        last_was_space = true
-      else
-        out << ch
-        last_was_space = false
-      end
-      i += 1
-    end
-    out.rstrip
+# Composes a stable SHA256 fingerprint from a mutation diff for cross-tool
+# matching (Evilution vs Mutant). Orchestrates two collaborators along
+# distinct change axes:
+#
+#   - extractor: parses a tool-specific diff format into {minus:, plus:}
+#   - normalizer: collapses whitespace per line so cosmetic differences
+#                 don't perturb the hash
+class Evilution::Compare::Fingerprint
+  def initialize(extractor:, normalizer:)
+    @extractor = extractor
+    @normalizer = normalizer
   end
-  # rubocop:enable Metrics/PerceivedComplexity, Style/MultipleComparison
 
-  def compute(file_path:, line:, body:)
-    minus = body[:minus].map { |l| normalize_line(l) }
-    plus  = body[:plus].map  { |l| normalize_line(l) }
+  def call(diff:, file_path:, line:)
+    body = @extractor.call(diff)
+    minus = body[:minus].map { |l| @normalizer.call(l) }
+    plus  = body[:plus].map  { |l| @normalizer.call(l) }
     payload = [file_path, line.to_s, minus.join("\n"), plus.join("\n")].join("\x00")
     Digest::SHA256.hexdigest(payload)
   end

data/lib/evilution/compare/line_normalizer.rb

@@ -0,0 +1,72 @@
+# frozen_string_literal: true
+
+require_relative "../compare"
+
+# Collapses whitespace runs in source-code text while preserving the contents
+# of "..." and '...' string literals. Used for fingerprinting mutation diffs
+# so that whitespace-only differences do not cause false fingerprint mismatches
+# across tooling (evilution vs mutant).
+#
+# v1 limitation: only " and ' literals are preserved. Regex literals (/.../),
+# heredocs, %w[], %q{} forms are treated as ordinary code — whitespace runs
+# inside them collapse. A mutation touching whitespace inside a regex may
+# false-match across tools.
+class Evilution::Compare::LineNormalizer
+  QUOTES = ['"', "'"].freeze
+  WHITESPACE = [" ", "\t"].freeze
+  private_constant :QUOTES, :WHITESPACE
+
+  def call(line)
+    @chars = line.chars
+    @i = 0
+    @out = +""
+    @in_literal = nil
+    @last_was_space = false
+
+    @i += step while @i < @chars.length
+    result = @out.rstrip
+    @chars = nil
+    @out = nil
+    result
+  end
+
+  private
+
+  def step
+    ch = @chars[@i]
+    return step_in_literal(ch) if @in_literal
+    return step_open_quote(ch) if QUOTES.include?(ch)
+    return step_whitespace if WHITESPACE.include?(ch)
+
+    append_regular(ch)
+  end
+
+  def step_in_literal(ch)
+    @out << ch
+    if ch == "\\" && @i + 1 < @chars.length
+      @out << @chars[@i + 1]
+      return 2
+    end
+    @in_literal = nil if ch == @in_literal
+    1
+  end
+
+  def step_open_quote(ch)
+    @in_literal = ch
+    @out << ch
+    @last_was_space = false
+    1
+  end
+
+  def step_whitespace
+    @out << " " unless @last_was_space || @out.empty?
+    @last_was_space = true
+    1
+  end
+
+  def append_regular(ch)
+    @out << ch
+    @last_was_space = false
+    1
+  end
+end

data/lib/evilution/compare/normalizer.rb

@@ -3,6 +3,9 @@
 require_relative "../compare"
 require_relative "record"
 require_relative "fingerprint"
+require_relative "line_normalizer"
+require_relative "diff_extractor/evilution"
+require_relative "diff_extractor/mutant"
 
 class Evilution::Compare::Normalizer
   EVILUTION_BUCKETS = %w[killed survived timed_out errors neutral equivalent unresolved unparseable].freeze
@@ -17,6 +20,18 @@ class Evilution::Compare::Normalizer
     "unparseable" => :unparseable
   }.freeze
 
+  def initialize
+    line_normalizer = Evilution::Compare::LineNormalizer.new
+    @evilution_fingerprint = Evilution::Compare::Fingerprint.new(
+      extractor: Evilution::Compare::DiffExtractor::Evilution.new,
+      normalizer: line_normalizer
+    )
+    @mutant_fingerprint = Evilution::Compare::Fingerprint.new(
+      extractor: Evilution::Compare::DiffExtractor::Mutant.new,
+      normalizer: line_normalizer
+    )
+  end
+
   def from_evilution(json)
     records = []
     EVILUTION_BUCKETS.each do |bucket|
@@ -47,13 +62,12 @@ class Evilution::Compare::Normalizer
     diff = entry["diff"].to_s
     status = EVILUTION_STATUS_MAP[entry["status"]] ||
              raise(Evilution::Compare::InvalidInput.new("unknown status #{entry["status"].inspect}", index: index))
-    body = Evilution::Compare::Fingerprint.extract_from_evilution_diff(diff)
     Evilution::Compare::Record.new(
       source: :evilution,
       file_path: file_path,
       line: line,
       status: status,
-      fingerprint: Evilution::Compare::Fingerprint.compute(file_path: file_path, line: line, body: body),
+      fingerprint: @evilution_fingerprint.call(diff: diff, file_path: file_path, line: line),
       operator: entry["operator"],
       diff_body: diff,
       raw: entry
@@ -67,13 +81,12 @@ class Evilution::Compare::Normalizer
     line = parse_mutant_line(ident, index)
     diff = mr["mutation_diff"].to_s
     status = derive_mutant_status(mr, cr, index)
-    body = Evilution::Compare::Fingerprint.extract_from_mutant_diff(diff)
     Evilution::Compare::Record.new(
       source: :mutant,
       file_path: source_path,
       line: line,
       status: status,
-      fingerprint: Evilution::Compare::Fingerprint.compute(file_path: source_path, line: line, body: body),
+      fingerprint: @mutant_fingerprint.call(diff: diff, file_path: source_path, line: line),
       operator: nil,
       diff_body: diff,
       raw: { "mutation_result" => mr, "criteria_result" => cr, "source_path" => source_path }

data/lib/evilution/config/validators/profile.rb

@@ -0,0 +1,11 @@
+# frozen_string_literal: true
+
+require_relative "base"
+
+class Evilution::Config::Validators::Profile < Evilution::Config::Validators::Base
+  ALLOWED = %i[default strict].freeze
+
+  def self.call(value)
+    coerce_symbol!(value, allowed: ALLOWED, name: "profile")
+  end
+end

data/lib/evilution/config.rb

@@ -17,7 +17,8 @@ class Evilution::Config
     spec_mappings: {}, spec_pattern: nil, example_targeting: true,
     example_targeting_fallback: :full_file,
     example_targeting_cache: { max_files: 50, max_blocks: 10_000 },
-    quiet_children: false, quiet_children_dir: "tmp/evilution_children"
+    quiet_children: false, quiet_children_dir: "tmp/evilution_children",
+    profile: :default
   }.freeze
 
   attr_reader :target_files, :timeout, :format,
@@ -28,7 +29,7 @@ class Evilution::Config
               :skip_heredoc_literals, :related_specs_heuristic,
               :fallback_to_full_suite, :preload, :spec_mappings, :spec_pattern,
               :example_targeting, :example_targeting_fallback, :example_targeting_cache,
-              :spec_selector, :quiet_children, :quiet_children_dir
+              :spec_selector, :quiet_children, :quiet_children_dir, :profile
 
   def initialize(**options)
     skip_file = options.delete(:skip_config_file) ? true : false
@@ -183,6 +184,11 @@ class Evilution::Config
       # ignore_patterns:
       #   - "call{name=info, receiver=call{name=logger}}"
       #   - "call{name=debug|warn}"
+
+      # Operator profile: default or strict (default: default).
+      # strict adds aggressive truthiness mutators (e.g. replaces
+      # `x.predicate?` with `nil`) intended for pre-merge audits.
+      # profile: default
     YAML
   end
 
@@ -200,28 +206,37 @@ class Evilution::Config
     )
   end
 
+  SIMPLE_ATTR_TRANSFORMS = {
+    target_files: ->(v) { Array(v) },
+    timeout: nil,
+    format: :to_sym.to_proc,
+    target: nil,
+    min_score: :to_f.to_proc,
+    verbose: nil,
+    quiet: nil,
+    baseline: nil,
+    incremental: nil,
+    suggest_tests: nil,
+    progress: nil,
+    save_session: nil,
+    line_ranges: ->(v) { v || {} },
+    spec_files: ->(v) { Array(v) },
+    show_disabled: nil,
+    baseline_session: nil,
+    skip_heredoc_literals: nil,
+    related_specs_heuristic: nil,
+    fallback_to_full_suite: nil,
+    quiet_children: nil,
+    quiet_children_dir: nil
+  }.freeze
+  private_constant :SIMPLE_ATTR_TRANSFORMS
+
   def assign_simple_attributes(merged)
-    @target_files            = Array(merged[:target_files])
-    @timeout                 = merged[:timeout]
-    @format                  = merged[:format].to_sym
-    @target                  = merged[:target]
-    @min_score               = merged[:min_score].to_f
-    @verbose                 = merged[:verbose]
-    @quiet                   = merged[:quiet]
-    @baseline                = merged[:baseline]
-    @incremental             = merged[:incremental]
-    @suggest_tests           = merged[:suggest_tests]
-    @progress                = merged[:progress]
-    @save_session            = merged[:save_session]
-    @line_ranges             = merged[:line_ranges] || {}
-    @spec_files              = Array(merged[:spec_files])
-    @show_disabled           = merged[:show_disabled]
-    @baseline_session        = merged[:baseline_session]
-    @skip_heredoc_literals   = merged[:skip_heredoc_literals]
-    @related_specs_heuristic = merged[:related_specs_heuristic]
-    @fallback_to_full_suite  = merged[:fallback_to_full_suite]
-    @quiet_children          = merged[:quiet_children]
-    @quiet_children_dir      = merged[:quiet_children_dir]
+    SIMPLE_ATTR_TRANSFORMS.each do |key, transform|
+      value = merged[key]
+      value = transform.call(value) if transform
+      instance_variable_set(:"@#{key}", value)
+    end
   end
 
   def assign_validated_attributes(merged)
@@ -234,6 +249,7 @@ class Evilution::Config
     @preload         = Validators::Preload.call(merged[:preload])
     @spec_mappings   = Validators::SpecMappings.call(merged[:spec_mappings])
     @spec_pattern    = Validators::SpecPattern.call(merged[:spec_pattern])
+    @profile         = Validators::Profile.call(merged[:profile])
   end
 
   def assign_example_targeting(merged)
@@ -259,6 +275,7 @@ require_relative "config/validators/spec_pattern"
 require_relative "config/validators/spec_mappings"
 require_relative "config/validators/example_targeting_fallback"
 require_relative "config/validators/example_targeting_cache"
+require_relative "config/validators/profile"
 require_relative "config/builders"
 require_relative "config/builders/spec_resolver"
 require_relative "config/builders/spec_selector"

data/lib/evilution/integration/crash_detector.rb

@@ -26,11 +26,11 @@ class Evilution::Integration::CrashDetector
     end
   end
 
-  def has_assertion_failure? # rubocop:disable Naming/PredicatePrefix
+  def assertion_failure?
     @assertion_failures.positive?
   end
 
-  def has_crash? # rubocop:disable Naming/PredicatePrefix
+  def crashed?
     @crashes.any?
   end
 

data/lib/evilution/integration/loading/source_evaluator.rb

@@ -5,11 +5,15 @@ require_relative "../loading"
 # Evaluate source with __FILE__ set to the absolute original path so that
 # `require_relative` and `__dir__` resolve against the real source tree, where
 # sibling files actually exist.
+#
+# Trust boundary: `source` is never user-supplied. It is always the original
+# on-disk source from a file the user already pointed Evilution at, with
+# byte-level mutations applied by AST::SourceSurgeon. The only difference
+# between this eval path and a plain `require` of the same file is that we
+# substitute the mutated bytes — the privilege level is identical.
 class Evilution::Integration::Loading::SourceEvaluator
   def call(source, file_path)
     absolute = File.expand_path(file_path)
-    # rubocop:disable Security/Eval
     eval(source, TOPLEVEL_BINDING, absolute, 1)
-    # rubocop:enable Security/Eval
   end
 end

data/lib/evilution/integration/minitest_crash_detector.rb

@@ -34,11 +34,11 @@ class Evilution::Integration::MinitestCrashDetector
     end
   end
 
-  def has_assertion_failure? # rubocop:disable Naming/PredicatePrefix
+  def assertion_failure?
     @assertion_failures.positive?
   end
 
-  def has_crash? # rubocop:disable Naming/PredicatePrefix
+  def crashed?
     @crashes.any?
   end