sela-core 0.1.0-alpha.3 → 0.1.0-alpha.32

package/dist/cli/commands/pr.d.ts

@@ -0,0 +1,16 @@
+import type { Command } from "commander";
+/**
+ * `sela pr aggregate --ledger-dir <path>`
+ *
+ * CI fan-in: after all sharded Playwright runners complete and upload their
+ * `.sela/pending-prompts` artifacts, the downstream merge job downloads
+ * everything into one directory and calls this command to open a single
+ * unified PR for the entire test suite.
+ *
+ * Typical GHA usage:
+ *   - Upload: actions/upload-artifact@v4  path: .sela/pending-prompts/
+ *   - Download: actions/download-artifact@v4  merge-multiple: true  path: sela-ledgers/
+ *   - Run: npx sela pr aggregate --ledger-dir ./sela-ledgers
+ */
+export declare function registerPr(parent: Command): void;
+//# sourceMappingURL=pr.d.ts.map

package/dist/cli/commands/pr.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pr.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/pr.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAazC;;;;;;;;;;;;GAYG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,OAAO,GAAG,IAAI,CAgDhD"}

package/dist/cli/commands/pr.js

@@ -0,0 +1,81 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerPr = registerPr;
+const path = __importStar(require("path"));
+const PendingPromptLedger_js_1 = require("../../services/PendingPromptLedger.js");
+const SelaReporter_js_1 = require("../../reporter/SelaReporter.js");
+const PRAutomationService_js_1 = require("../../services/PRAutomationService.js");
+/**
+ * `sela pr aggregate --ledger-dir <path>`
+ *
+ * CI fan-in: after all sharded Playwright runners complete and upload their
+ * `.sela/pending-prompts` artifacts, the downstream merge job downloads
+ * everything into one directory and calls this command to open a single
+ * unified PR for the entire test suite.
+ *
+ * Typical GHA usage:
+ *   - Upload: actions/upload-artifact@v4  path: .sela/pending-prompts/
+ *   - Download: actions/download-artifact@v4  merge-multiple: true  path: sela-ledgers/
+ *   - Run: npx sela pr aggregate --ledger-dir ./sela-ledgers
+ */
+function registerPr(parent) {
+    const pr = parent
+        .command("pr")
+        .description("Pull-request automation commands");
+    pr.command("aggregate")
+        .description("Aggregate sharded ledger files and open a single unified PR (CI fan-in)")
+        .requiredOption("--ledger-dir <path>", "Directory containing all downloaded shard ledger JSON files")
+        .option("--cwd <path>", "Repository root used for git operations (defaults to process.cwd())", process.cwd())
+        .action(async (opts) => {
+        const ledgerDir = path.resolve(opts.cwd, opts.ledgerDir);
+        const payloads = (0, PendingPromptLedger_js_1.readGitPayloadsFromDir)(ledgerDir);
+        if (payloads.length === 0) {
+            console.error(`[sela pr aggregate] No ledger payloads found in ${ledgerDir} — nothing to do.`);
+            return;
+        }
+        const healedEvents = (0, SelaReporter_js_1.deduplicateByStableId)(payloads.flatMap((p) => p.healedEvents));
+        if (healedEvents.length === 0) {
+            console.error("[sela pr aggregate] No healed events after deduplication — nothing to do.");
+            return;
+        }
+        const protectedEvents = payloads.flatMap((p) => p.protectedEvents);
+        await (0, PRAutomationService_js_1.runCentralizedGitFlow)({
+            cwd: opts.cwd,
+            healedEvents,
+            protectedEvents,
+        });
+    });
+}

package/dist/cli/index.js

@@ -54,6 +54,7 @@ const bulk_js_1 = require("./commands/bulk.js");
 const sync_js_1 = require("./commands/sync.js");
 const showReport_js_1 = require("./commands/showReport.js");
 const merge_js_1 = require("./commands/merge.js");
+const pr_js_1 = require("./commands/pr.js");
 (0, ErrorHandler_js_1.registerGlobalHandlers)();
 // Safety net: route any stray third-party console.log through the Logger's
 // verbosity-gated debug channel (stderr) so stdout stays pipe-clean and the
@@ -77,6 +78,8 @@ program
 (0, showReport_js_1.registerShowReport)(program);
 // ── sela merge - CI fan-in: aggregate sharded reports into one ────────────────
 (0, merge_js_1.registerMerge)(program);
+// ── sela pr <subcommand> - pull-request automation ───────────────────────────
+(0, pr_js_1.registerPr)(program);
 // ── sela dna <subcommand> ─────────────────────────────────────────────────────
 const dna = new commander_1.Command("dna")
     .description("DNA management commands")

package/dist/engine/SelaEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SelaEngine.d.ts","sourceRoot":"","sources":["../../src/engine/SelaEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAexC,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,EAAe,QAAQ,EAAkB,MAAM,yBAAyB,CAAC;AA0FhF,qBAAa,UAAU;IACrB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,mBAAmB,CAAmB;IAC9C,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,SAAS,CAA6C;IAC9D,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,eAAe,CAAkC;;IAuBnD,YAAY,CAChB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA0DnB,IAAI,CACR,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,QAAmB,GAC5B,OAAO,CAAC,MAAM,CAAC;IAirBlB,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAerB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IAoB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,2BAA2B;IA4BnC,OAAO,CAAC,yBAAyB;IAgDjC,OAAO,CAAC,kBAAkB;IA8D1B,OAAO,CAAC,oBAAoB;IAyD5B,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAIrD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;YAgLtB,aAAa;IAsB3B,OAAO,CAAC,0BAA0B;IA+BlC,OAAO,CAAC,WAAW;IA6Bb,wBAAwB,CAC5B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM;CAqBnB;AAED,OAAO,EAAE,CAAC"}
+{"version":3,"file":"SelaEngine.d.ts","sourceRoot":"","sources":["../../src/engine/SelaEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAcxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,EAAe,QAAQ,EAAkB,MAAM,yBAAyB,CAAC;AAoFhF,qBAAa,UAAU;IACrB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,mBAAmB,CAAmB;IAC9C,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,SAAS,CAA6C;IAC9D,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,eAAe,CAAkC;;IAuBnD,YAAY,CAChB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IA0DnB,IAAI,CACR,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,QAAmB,GAC5B,OAAO,CAAC,MAAM,CAAC;IAirBlB,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAerB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IAoB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,2BAA2B;IA4BnC,OAAO,CAAC,yBAAyB;IAgDjC,OAAO,CAAC,kBAAkB;IA8D1B,OAAO,CAAC,oBAAoB;IAyD5B,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAIrD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;YAoGtB,aAAa;IAsB3B,OAAO,CAAC,0BAA0B;IA+BlC,OAAO,CAAC,WAAW;IA6Bb,wBAAwB,CAC5B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM;CAqBnB;AAED,OAAO,EAAE,CAAC"}

package/dist/engine/SelaEngine.js

@@ -42,7 +42,6 @@ const IsolatedDiff_1 = require("../utils/IsolatedDiff");
 const logger_1 = require("../utils/logger");
 const SnapshotService_1 = require("../services/SnapshotService");
 const DOMUtils_1 = require("../utils/DOMUtils");
-const FileLock_1 = require("../utils/FileLock");
 const SourceUpdater_1 = require("../services/SourceUpdater");
 const ASTSourceUpdater_1 = require("../services/ASTSourceUpdater");
 const SafetyGuard_1 = require("../services/SafetyGuard");
@@ -51,7 +50,6 @@ const ConfigLoader_1 = require("../config/ConfigLoader");
 const DryRunGuard_1 = require("../config/DryRunGuard");
 const HealBudget_1 = require("../services/HealBudget");
 const HealReportService_1 = require("../services/HealReportService");
-const PRAutomationService_1 = require("../services/PRAutomationService");
 const PendingPromptLedger_1 = require("../services/PendingPromptLedger");
 const SelaError_1 = require("../errors/SelaError");
 const SelectorSanitizer_1 = require("../services/SelectorSanitizer");
@@ -979,70 +977,23 @@ If the text has NOT changed, omit the "contentChange" field entirely.`;
                 }
             }
         }
-        // ── Dual-Mode post-run lifecycle ─────────────────────────────────
+        // ── Cross-process worker ledger ──────────────────────────────────────
         //
-        // CI (process.env.CI truthy) → Clean-Room PR automation (existing flow).
-        // Local DX (CI falsy)        → Write-and-notify: AST mutations are
-        //                              already on disk; the reporter prints a
-        //                              diff + vscode:// deeplink + report link
-        //                              via printHealReview() (no Y/N prompt).
+        // Workers serialise their state to a per-worker JSON file so the master
+        // process (SelaReporter.onEnd) can aggregate everything after all workers
+        // have exited. The ledger carries:
+        //   • PendingPromptEntry[] — for local-DX diff display / vscode deeplinks.
+        //   • WorkerGitPayload     — for CI centralized git/PR flow.
         //
-        // The local branch deliberately bypasses PR automation because:
-        //   • AST fixes are ALREADY persisted to disk (the test passed on them).
-        //   • Local devs want to inspect + cherry-pick, not auto-commit.
-        if (isCiEnvironment()) {
-            if (this.config.prAutomation.enabled) {
-                // SELA-5: serialise PR automation (git stash / checkout / commit /
-                // push) behind a repo-root lock. CI normally runs one worker per
-                // sharded machine, so the lock is uncontended; if a machine is
-                // misconfigured with workers>1 it prevents concurrent git operations
-                // from corrupting the index / worktree. NOTE: this guards against git
-                // corruption only — aggregating heals from multiple workers into a
-                // single PR is intentionally out of scope (run one worker per shard).
-                const prLock = new FileLock_1.FileLock((0, FileLock_1.lockDirFor)(path.join(process.cwd(), ".sela-pr")), { staleMs: 120_000 });
-                try {
-                    const ran = await prLock.withLock(async () => {
-                        const workerIdx = process.env["TEST_WORKER_INDEX"];
-                        if (workerIdx !== undefined && workerIdx !== "0") {
-                            logger_1.logger.warn("[PR] PR automation under workers>1 is unsupported — " +
-                                "run one worker per CI shard. Serialising to protect the git " +
-                                "index; heals from other workers may land in separate commits.");
-                        }
-                        const branchInfo = (0, PRAutomationService_1.detectBranch)(process.cwd());
-                        const decision = (0, PRAutomationService_1.decideEffectiveStrategy)(this.config.prAutomation, branchInfo.branch, healedEvents);
-                        if (decision.downgradeReason) {
-                            logger_1.logger.warn(`[PR] Strategy downgraded: '${decision.configured}' → '${decision.effective}' ` +
-                                `(reason: ${decision.downgradeReason}, ` +
-                                `minAI: ${fmtPctEngine(decision.minAiConfidence)}, ` +
-                                `minAuditor: ${fmtPctEngine(decision.minAuditorConfidence)})`);
-                        }
-                        else {
-                            logger_1.logger.debug(`[PR] Effective strategy: '${decision.effective}' on branch '${branchInfo.branch ?? "unknown"}'`);
-                        }
-                        const ctx = { cwd: process.cwd(), reportHtmlPath };
-                        await (0, PRAutomationService_1.execute)(this.config.prAutomation, decision, healedEvents, branchInfo, ctx);
-                        await (0, PRAutomationService_1.handleBugDetected)(this.config.prAutomation.onBugDetected, protectedEvents, branchInfo, ctx);
-                    });
-                    if (ran === undefined) {
-                        logger_1.logger.warn("[PR] Skipped PR automation — another worker holds the PR lock.");
-                    }
-                }
-                catch (err) {
-                    logger_1.logger.warn(`[PR] PR automation step failed: ${err.message}`);
-                }
-            }
-        }
-        else if (healedEvents.length > 0) {
-            // Local DX: serialise the mutated snapshots to a cross-process
-            // ledger. The SelaReporter drains it from `onEnd()` in the main
-            // process and prints a non-blocking summary (diff + vscode://
-            // deeplink). Mutations are already on disk - the ledger only
-            // exists so the reporter knows what to narrate.
+        // Both CI and local paths write the ledger. The master process decides
+        // which parts to consume based on its own environment check.
+        if (healedEvents.length > 0 || protectedEvents.length > 0) {
             try {
                 (0, PendingPromptLedger_1.writePendingPromptsLedger)({
                     cwd: process.cwd(),
                     workspace: WorkspaceSnapshotService_1.sharedWorkspaceSnapshot,
                     healedEvents,
+                    protectedEvents,
                 });
             }
             catch (err) {

package/dist/errors/SelaError.d.ts

@@ -63,6 +63,10 @@ export declare const SAFETY_GUARD_CODES: {
     readonly BLOCKED_ROLE_SWAP_ASSERTION: "SG_BLOCKED_ROLE_SWAP_ASSERTION";
     readonly FAIL_HARD_AUDITOR_INCONSISTENT: "SG_FAIL_HARD_AUDITOR_INCONSISTENT";
     readonly BLOCKED_AUDITOR_SUSPICIOUS: "SG_BLOCKED_AUDITOR_SUSPICIOUS";
+    /** Structural pre-LLM check: old element had a destructive/auth role and
+     *  the candidate does not — replacing a DELETE/AUTH action is always
+     *  semantically inconsistent regardless of AI confidence. */
+    readonly FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION: "SG_FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION";
     /**
      * Heal was REQUIRES_REVIEW → quarantined (decision #1): proposed but not
      * written to source and not executed this run, pending explicit approval.

package/dist/errors/SelaError.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SelaError.d.ts","sourceRoot":"","sources":["../../src/errors/SelaError.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,aAAa,GACrB,aAAa,GACb,eAAe,GACf,YAAY,GACZ,OAAO,GACP,YAAY,GACZ,UAAU,GACV,gBAAgB,GAChB,QAAQ,GACR,QAAQ,CAAC;AAMb,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,iBAAiB,GAAG,MAAM,CAAC;IACnE,0EAA0E;IAC1E,cAAc,CAAC,EAAE,YAAY,GAAG,cAAc,GAAG,YAAY,CAAC;IAC9D,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAMD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,aAAa,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,aAAa,CAAC;IACzB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,wDAAwD;IACxD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAYD,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;gBAEvB,IAAI,EAAE,aAAa;IAsC/B,MAAM,CAAC,aAAa,CAClB,SAAS,EAAE,aAAa,EACxB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,MAAM;IAIT,MAAM,IAAI,aAAa;CAexB;AAMD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,SAAS,CAE1D;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,aAAa,GACvB,GAAG,IAAI,SAAS,CAElB;AAUD,eAAO,MAAM,kBAAkB;;;;;;;;;IAS7B;;;;OAIG;;IAEH,+EAA+E;;CAEvE,CAAC;AACX,MAAM,MAAM,eAAe,GACzB,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,oBAAoB;IAC/B,wEAAwE;;;;CAIhE,CAAC;AACX,MAAM,MAAM,iBAAiB,GAC3B,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AAEnE,eAAO,MAAM,iBAAiB;;;;;;CAMpB,CAAC;AACX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,eAAO,MAAM,iBAAiB;;;;;;;IAO5B;;;;OAIG;;CAEK,CAAC;AACX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,eAAO,MAAM,WAAW;;;;CAId,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEvE,eAAO,MAAM,cAAc;;;CAGjB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEhF,eAAO,MAAM,YAAY;IACvB,2EAA2E;;IAE3E,wDAAwD;;IAExD,gEAAgE;;IAEhE,gDAAgD;;IAEhD,8CAA8C;;IAE9C;;;;OAIG;;IAEH,gFAAgF;;CAExE,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE1E,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAC5B,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC"}
+{"version":3,"file":"SelaError.d.ts","sourceRoot":"","sources":["../../src/errors/SelaError.ts"],"names":[],"mappings":"AAkBA,MAAM,MAAM,aAAa,GACrB,aAAa,GACb,eAAe,GACf,YAAY,GACZ,OAAO,GACP,YAAY,GACZ,UAAU,GACV,gBAAgB,GAChB,QAAQ,GACR,QAAQ,CAAC;AAMb,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0EAA0E;IAC1E,WAAW,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,iBAAiB,GAAG,MAAM,CAAC;IACnE,0EAA0E;IAC1E,cAAc,CAAC,EAAE,YAAY,GAAG,cAAc,GAAG,YAAY,CAAC;IAC9D,4EAA4E;IAC5E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,iFAAiF;IACjF,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAMD,MAAM,WAAW,aAAa;IAC5B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,aAAa,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,gBAAgB,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,aAAa,CAAC;IACzB;;;;OAIG;IACH,IAAI,EAAE,MAAM,CAAC;IACb,6EAA6E;IAC7E,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,gBAAgB,CAAC;IAC3B,wDAAwD;IACxD,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAYD,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,SAAS,EAAE,aAAa,CAAC;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;gBAEvB,IAAI,EAAE,aAAa;IAsC/B,MAAM,CAAC,aAAa,CAClB,SAAS,EAAE,aAAa,EACxB,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,MAAM,GACb,MAAM;IAIT,MAAM,IAAI,aAAa;CAexB;AAMD,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,GAAG,IAAI,SAAS,CAE1D;AAED,wBAAgB,eAAe,CAC7B,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,aAAa,GACvB,GAAG,IAAI,SAAS,CAElB;AAUD,eAAO,MAAM,kBAAkB;;;;;;;;;IAS7B;;iEAE6D;;IAE7D;;;;OAIG;;IAEH,+EAA+E;;CAEvE,CAAC;AACX,MAAM,MAAM,eAAe,GACzB,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,OAAO,kBAAkB,CAAC,CAAC;AAE/D,eAAO,MAAM,oBAAoB;IAC/B,wEAAwE;;;;CAIhE,CAAC;AACX,MAAM,MAAM,iBAAiB,GAC3B,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,OAAO,oBAAoB,CAAC,CAAC;AAEnE,eAAO,MAAM,iBAAiB;;;;;;CAMpB,CAAC;AACX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,eAAO,MAAM,iBAAiB;;;;;;;IAO5B;;;;OAIG;;CAEK,CAAC;AACX,MAAM,MAAM,cAAc,GACxB,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,OAAO,iBAAiB,CAAC,CAAC;AAE7D,eAAO,MAAM,WAAW;;;;CAId,CAAC;AACX,MAAM,MAAM,SAAS,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAEvE,eAAO,MAAM,cAAc;;;CAGjB,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,OAAO,cAAc,CAAC,CAAC;AAEhF,eAAO,MAAM,YAAY;IACvB,2EAA2E;;IAE3E,wDAAwD;;IAExD,gEAAgE;;IAEhE,gDAAgD;;IAEhD,8CAA8C;;IAE9C;;;;OAIG;;IAEH,gFAAgF;;CAExE,CAAC;AACX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE1E,eAAO,MAAM,qBAAqB;;;;;;CAMxB,CAAC;AACX,MAAM,MAAM,kBAAkB,GAC5B,CAAC,OAAO,qBAAqB,CAAC,CAAC,MAAM,OAAO,qBAAqB,CAAC,CAAC"}

package/dist/errors/SelaError.js

@@ -94,6 +94,10 @@ exports.SAFETY_GUARD_CODES = {
     BLOCKED_ROLE_SWAP_ASSERTION: "SG_BLOCKED_ROLE_SWAP_ASSERTION",
     FAIL_HARD_AUDITOR_INCONSISTENT: "SG_FAIL_HARD_AUDITOR_INCONSISTENT",
     BLOCKED_AUDITOR_SUSPICIOUS: "SG_BLOCKED_AUDITOR_SUSPICIOUS",
+    /** Structural pre-LLM check: old element had a destructive/auth role and
+     *  the candidate does not — replacing a DELETE/AUTH action is always
+     *  semantically inconsistent regardless of AI confidence. */
+    FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION: "SG_FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION",
     /**
      * Heal was REQUIRES_REVIEW → quarantined (decision #1): proposed but not
      * written to source and not executed this run, pending explicit approval.

package/dist/reporter/SelaReporter.d.ts

@@ -1,7 +1,7 @@
 import type { Reporter, TestCase, TestResult, FullConfig, Suite, FullResult } from "@playwright/test/reporter";
 import { HealReportService } from "../services/HealReportService.js";
 import type { SelaEngine } from "../engine/SelaEngine.js";
-import { type PendingPromptEntry } from "../services/PendingPromptLedger.js";
+import { type PendingPromptEntry, type WorkerGitPayload } from "../services/PendingPromptLedger.js";
 import { type PrintReviewDeps } from "../services/InteractiveReview.js";
 export interface ReporterEngine {
     commitUpdates(): Promise<void>;
@@ -61,6 +61,12 @@ export interface SelaReporterOpts {
      * polluted by leftover handlers between cases.
      */
     installSignalHandlers?: boolean;
+    /**
+     * Override the centralized git/PR flow executed in CI after all workers
+     * finish. Tests stub this to avoid real git ops. Defaults to reading the
+     * worker ledger and calling PRAutomationService.runCentralizedGitFlow.
+     */
+    runCentralizedGitFlow?: (cwd: string) => Promise<void>;
 }
 export declare class SelaReporter implements Reporter {
     private readonly engine;
@@ -75,8 +81,10 @@ export declare class SelaReporter implements Reporter {
     private readonly isCi;
     private readonly mergeShards;
     private readonly shouldInstallSignalHandlers;
+    private readonly runCentralizedGitFlowFn;
     private shutdownHandler;
     private shuttingDown;
+    private _isShardedRun;
     /** Total tests in the suite, captured at onBegin for the end-of-run summary. */
     private totalTests;
     /**
@@ -161,5 +169,13 @@ export declare class SelaReporter implements Reporter {
      */
     private extractScreenshotBase64;
 }
+/**
+ * Deduplicate HealedEvents by stableId. When the same selector was healed
+ * across multiple retries or workers, the last entry wins — it represents
+ * the canonical final state of that mutation.
+ *
+ * Exported for use by `sela pr aggregate` (cross-shard fan-in).
+ */
+export declare function deduplicateByStableId(events: WorkerGitPayload["healedEvents"]): WorkerGitPayload["healedEvents"];
 export default SelaReporter;
 //# sourceMappingURL=SelaReporter.d.ts.map

package/dist/reporter/SelaReporter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SelaReporter.d.ts","sourceRoot":"","sources":["../../src/reporter/SelaReporter.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EACV,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,UAAU,EACV,KAAK,EACL,UAAU,EACX,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAEL,iBAAiB,EAIlB,MAAM,kCAAkC,CAAC;AAG1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,oCAAoC,CAAC;AAC5C,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,kCAAkC,CAAC;AAS1C,MAAM,WAAW,cAAc;IAC7B,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,uDAAuD;IACvD,MAAM,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC;IACrC,kEAAkE;IAClE,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,mDAAmD;IACnD,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,yFAAyF;IACzF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,kBAAkB,EAAE,CAAC;IACnD,iCAAiC;IACjC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,IAAI,CAAC;IAC9C;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACnD;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC;IACrB;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAMD,qBAAa,YAAa,YAAW,QAAQ;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwC;IACnE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkC;IAC9D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAiC;IACnE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAU;IAEtD,OAAO,CAAC,eAAe,CAAmD;IAC1E,OAAO,CAAC,YAAY,CAAS;IAE7B,gFAAgF;IAChF,OAAO,CAAC,UAAU,CAAK;IAEvB;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA6B;IAEhE;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAMjB;gBAEI,IAAI,GAAE,gBAAqB;IAmBvC,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI;IAwBlD,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI;IAmC7C,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAuFhD,yEAAyE;IACzE,aAAa,IAAI,OAAO;IAQxB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAiBzB;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAUxB;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IA2B9B,OAAO,CAAC,wBAAwB;IAOhC;;;;;;;OAOG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAgCvC;;;;;;;;OAQG;IACH,uBAAuB,IAAI,MAAM;IAsBjC,2DAA2D;IAC3D,mBAAmB,IAAI,aAAa,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IAIF,yEAAyE;IACzE,yBAAyB,IAAI,MAAM;IAQnC,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,aAAa;IAWrB;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;CA6BhC;AA+CD,eAAe,YAAY,CAAC"}
+{"version":3,"file":"SelaReporter.d.ts","sourceRoot":"","sources":["../../src/reporter/SelaReporter.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EACV,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,UAAU,EACV,KAAK,EACL,UAAU,EACX,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAEL,iBAAiB,EAIlB,MAAM,kCAAkC,CAAC;AAG1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACtB,MAAM,oCAAoC,CAAC;AAK5C,OAAO,EAEL,KAAK,eAAe,EACrB,MAAM,kCAAkC,CAAC;AAS1C,MAAM,WAAW,cAAc;IAC7B,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,uDAAuD;IACvD,MAAM,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC;IACrC,kEAAkE;IAClE,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,mDAAmD;IACnD,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,yFAAyF;IACzF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,kBAAkB,EAAE,CAAC;IACnD,iCAAiC;IACjC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,IAAI,CAAC;IAC9C;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACnD;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC;IACrB;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACxD;AAMD,qBAAa,YAAa,YAAW,QAAQ;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwC;IACnE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkC;IAC9D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAiC;IACnE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAU;IACtD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAiC;IAEzE,OAAO,CAAC,eAAe,CAAmD;IAC1E,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,aAAa,CAAS;IAE9B,gFAAgF;IAChF,OAAO,CAAC,UAAU,CAAK;IAEvB;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA6B;IAEhE;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAMjB;gBAEI,IAAI,GAAE,gBAAqB;IAqBvC,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI;IA6BlD,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI;IAmC7C,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAyGhD,yEAAyE;IACzE,aAAa,IAAI,OAAO;IAQxB;;;;;OAKG;IACH,OAAO,CAAC,iBAAiB;IAiBzB;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAUxB;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IA2B9B,OAAO,CAAC,wBAAwB;IAOhC;;;;;;;OAOG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAgCvC;;;;;;;;OAQG;IACH,uBAAuB,IAAI,MAAM;IAsBjC,2DAA2D;IAC3D,mBAAmB,IAAI,aAAa,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IAIF,yEAAyE;IACzE,yBAAyB,IAAI,MAAM;IAQnC,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,aAAa;IAWrB;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;CA6BhC;AAoED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,gBAAgB,CAAC,cAAc,CAAC,GACvC,gBAAgB,CAAC,cAAc,CAAC,CAMlC;AAID,eAAe,YAAY,CAAC"}

package/dist/reporter/SelaReporter.js

@@ -62,6 +62,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SelaReporter = void 0;
+exports.deduplicateByStableId = deduplicateByStableId;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const HealReportService_js_1 = require("../services/HealReportService.js");
@@ -69,6 +70,7 @@ const ReportMergeService_js_1 = require("../services/ReportMergeService.js");
 const singleton_js_1 = require("../engine/singleton.js");
 const SelaError_js_1 = require("../errors/SelaError.js");
 const PendingPromptLedger_js_1 = require("../services/PendingPromptLedger.js");
+const PRAutomationService_js_1 = require("../services/PRAutomationService.js");
 const InteractiveReview_js_1 = require("../services/InteractiveReview.js");
 const logger_js_1 = require("../utils/logger.js");
 const SummaryTable_js_1 = require("../utils/SummaryTable.js");
@@ -88,8 +90,10 @@ class SelaReporter {
     isCi;
     mergeShards;
     shouldInstallSignalHandlers;
+    runCentralizedGitFlowFn;
     shutdownHandler = null;
     shuttingDown = false;
+    _isShardedRun = false;
     /** Total tests in the suite, captured at onBegin for the end-of-run summary. */
     totalTests = 0;
     /**
@@ -120,6 +124,8 @@ class SelaReporter {
         this.isCi = opts.isCi ?? defaultIsCi;
         this.mergeShards = opts.mergeShards ?? defaultMergeShards;
         this.shouldInstallSignalHandlers = opts.installSignalHandlers ?? true;
+        this.runCentralizedGitFlowFn =
+            opts.runCentralizedGitFlow ?? defaultRunCentralizedGitFlow;
     }
     // ─────────────────────────────────────────────────────────────
     // Playwright Reporter API
@@ -129,6 +135,11 @@ class SelaReporter {
         // finalisation. Today the fixture still calls engine.commitUpdates()
         // itself; the env flag is reserved for the planned dedup guard.
         process.env.SELA_REPORTER_ACTIVE = "1";
+        // Detect Playwright CI sharding (--shard=N/M). When sharded, each runner
+        // must skip the Git/PR flow and let the downstream fan-in job handle it.
+        if (_config?.shard != null) {
+            this._isShardedRun = true;
+        }
         // Snapshot the suite size for the end-of-run summary table. Guarded:
         // allTests() exists on real Playwright suites but not on test stubs.
         try {
@@ -218,6 +229,25 @@ class SelaReporter {
                 this.logger.error(`[Sela] shard merge failed: ${msg}`);
             }
         }
+        // ── CI: centralized git/PR flow ──────────────────────────────
+        //
+        // All workers have exited by the time onEnd() fires. Their git-flow
+        // payloads are aggregated from the per-worker ledger files and fed
+        // into a single runCentralizedGitFlow call — no lock needed, no race
+        // on the git index, no "another worker holds the PR lock" warning.
+        //
+        // Sharded CI runs (--shard=N/M) skip this entirely: each shard runner
+        // only flushes its ledger; the downstream `sela pr aggregate` fan-in
+        // job opens the single unified PR after all shards complete.
+        if (this.isCi() && !this._isShardedRun) {
+            try {
+                await this.runCentralizedGitFlowFn(this.cwd);
+            }
+            catch (err) {
+                const msg = err instanceof Error ? err.message : String(err);
+                this.logger.error(`[Sela] centralized git flow failed: ${msg}`);
+            }
+        }
         // ── Local DX - Write-and-notify summary ─────────────────────
         //
         // Workers serialise their mutated FileSnapshots to
@@ -226,8 +256,7 @@ class SelaReporter {
         // deeplink + HTML report deeplink). No Y/N prompt - the files are
         // already mutated on disk by the time we get here.
         //
-        // CI runs skip the notify entirely - PR automation already handled
-        // the mutations on its isolated branch.
+        // CI runs skip the notify entirely - PR automation is handled above.
         if (!this.isCi()) {
             try {
                 const entries = this.readLedger(this.cwd);
@@ -512,6 +541,39 @@ function defaultMergeShards(cwd) {
         (0, HealReportService_js_1.clearReportShards)(cwd);
     }
 }
+/**
+ * Default centralized git flow: aggregate all workers' git payloads from the
+ * pending-prompts ledger, deduplicate healed events by stableId (last retry
+ * wins), then delegate to PRAutomationService.runCentralizedGitFlow.
+ */
+async function defaultRunCentralizedGitFlow(cwd) {
+    const payloads = (0, PendingPromptLedger_js_1.readGitPayloads)(cwd);
+    if (payloads.length === 0)
+        return;
+    const allHealedEvents = deduplicateByStableId(payloads.flatMap((p) => p.healedEvents));
+    const allProtectedEvents = payloads.flatMap((p) => p.protectedEvents);
+    if (allHealedEvents.length === 0)
+        return;
+    await (0, PRAutomationService_js_1.runCentralizedGitFlow)({
+        cwd,
+        healedEvents: allHealedEvents,
+        protectedEvents: allProtectedEvents,
+    });
+}
+/**
+ * Deduplicate HealedEvents by stableId. When the same selector was healed
+ * across multiple retries or workers, the last entry wins — it represents
+ * the canonical final state of that mutation.
+ *
+ * Exported for use by `sela pr aggregate` (cross-shard fan-in).
+ */
+function deduplicateByStableId(events) {
+    const seen = new Map();
+    for (const ev of events) {
+        seen.set(ev.stableId, ev);
+    }
+    return [...seen.values()];
+}
 // Default export so Playwright can resolve `reporter: [['sela-core/reporter']]`
 // without needing the consumer to spell out the named import.
 exports.default = SelaReporter;

package/dist/services/PRAutomationService.d.ts

@@ -47,4 +47,20 @@ export declare function execute(cfg: ResolvedPRAutomation, decision: StrategyDec
 /** Injectable for tests - defaults to the module singleton. */
 workspace?: WorkspaceSnapshotService): Promise<ExecutionResult>;
 export declare function handleBugDetected(action: BugAction, events: ProtectedEvent[], branchInfo: BranchInfo, ctx: ExecuteContext): Promise<void>;
+export interface CentralizedGitFlowOpts {
+    cwd: string;
+    healedEvents: HealedEvent[];
+    protectedEvents: ProtectedEvent[];
+}
+/**
+ * Run the full git/PR automation ONCE in the master process after all
+ * Playwright workers have exited. Called from SelaReporter.onEnd().
+ *
+ * Unlike the old per-worker path this function:
+ *   - Needs no FileLock (single caller, single process).
+ *   - Resolves `contentBefore` via `git show HEAD` — retry-proof, never
+ *     polluted by a prior MUTATE_IN_PLACE run on the same branch.
+ *   - Accepts pre-aggregated + de-duplicated events from all workers.
+ */
+export declare function runCentralizedGitFlow(opts: CentralizedGitFlowOpts): Promise<void>;
 //# sourceMappingURL=PRAutomationService.d.ts.map

package/dist/services/PRAutomationService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PRAutomationService.d.ts","sourceRoot":"","sources":["../../src/services/PRAutomationService.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,oBAAoB,EACpB,UAAU,EACV,SAAS,EACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,4BAA4B,CAAC;AAQpC,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,kBAAkB,GAAG,gBAAgB,GAAG,aAAa,GAAG,IAAI,CAAC;IAC9E;;;;OAIG;IACH,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,6EAA6E;IAC7E,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAiFD,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAsB,GAAG,UAAU,CA+EpE;AAMD,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,oBAAoB,EACzB,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,KAAK,EAAE,WAAW,EAAE,GACnB,gBAAgB,CAgElB;AAMD,wBAAgB,MAAM,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAEzC;AA6FD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,UAAU,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAE,oBAAoB,EACzB,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,WAAW,EAAE,EACpB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,cAAc;AACnB,+DAA+D;AAC/D,SAAS,GAAE,wBAAkD,GAC5D,OAAO,CAAC,eAAe,CAAC,CAkG1B;AAsTD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,cAAc,EAAE,EACxB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,IAAI,CAAC,CAgGf"}
+{"version":3,"file":"PRAutomationService.d.ts","sourceRoot":"","sources":["../../src/services/PRAutomationService.ts"],"names":[],"mappings":"AAkBA,OAAO,KAAK,EACV,oBAAoB,EACpB,UAAU,EACV,SAAS,EACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACvE,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,4BAA4B,CAAC;AAQpC,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,kBAAkB,GAAG,gBAAgB,GAAG,aAAa,GAAG,IAAI,CAAC;IAC9E;;;;OAIG;IACH,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,6EAA6E;IAC7E,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AAiFD,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAsB,GAAG,UAAU,CA+EpE;AAMD,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,oBAAoB,EACzB,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,KAAK,EAAE,WAAW,EAAE,GACnB,gBAAgB,CAgElB;AAMD,wBAAgB,MAAM,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAEzC;AA6FD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,UAAU,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAE,oBAAoB,EACzB,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,WAAW,EAAE,EACpB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,cAAc;AACnB,+DAA+D;AAC/D,SAAS,GAAE,wBAAkD,GAC5D,OAAO,CAAC,eAAe,CAAC,CAkG1B;AAsTD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,cAAc,EAAE,EACxB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,IAAI,CAAC,CAgGf;AAMD,MAAM,WAAW,sBAAsB;IACrC,GAAG,EAAE,MAAM,CAAC;IACZ,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,eAAe,EAAE,cAAc,EAAE,CAAC;CACnC;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,sBAAsB,GAC3B,OAAO,CAAC,IAAI,CAAC,CAgDf"}

package/dist/services/PRAutomationService.js

@@ -51,9 +51,11 @@ exports.decideEffectiveStrategy = decideEffectiveStrategy;
 exports.fmtPct = fmtPct;
 exports.execute = execute;
 exports.handleBugDetected = handleBugDetected;
+exports.runCentralizedGitFlow = runCentralizedGitFlow;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const child_process_1 = require("child_process");
+const ConfigLoader_1 = require("../config/ConfigLoader");
 const WorkspaceSnapshotService_1 = require("./WorkspaceSnapshotService");
 const IsolatedDiff_1 = require("../utils/IsolatedDiff");
 const logger_1 = require("../utils/logger");
@@ -746,6 +748,103 @@ async function handleBugDetected(action, events, branchInfo, ctx) {
         }
     }
 }
+/**
+ * Run the full git/PR automation ONCE in the master process after all
+ * Playwright workers have exited. Called from SelaReporter.onEnd().
+ *
+ * Unlike the old per-worker path this function:
+ *   - Needs no FileLock (single caller, single process).
+ *   - Resolves `contentBefore` via `git show HEAD` — retry-proof, never
+ *     polluted by a prior MUTATE_IN_PLACE run on the same branch.
+ *   - Accepts pre-aggregated + de-duplicated events from all workers.
+ */
+async function runCentralizedGitFlow(opts) {
+    const cfg = ConfigLoader_1.ConfigLoader.getInstance();
+    const prCfg = cfg.prAutomation;
+    if (!prCfg.enabled)
+        return;
+    if (opts.healedEvents.length === 0)
+        return;
+    const fileSnapshots = resolveGitBaselines(opts.healedEvents, opts.cwd);
+    if (fileSnapshots.length === 0) {
+        logger_1.logger.warn("[PR] Centralized flow: no mutated files resolved from git baseline — skipping.");
+        return;
+    }
+    const branchInfo = detectBranch(opts.cwd);
+    const decision = decideEffectiveStrategy(prCfg, branchInfo.branch, opts.healedEvents);
+    if (decision.downgradeReason) {
+        logger_1.logger.warn(`[PR] Strategy downgraded: '${decision.configured}' → '${decision.effective}' ` +
+            `(reason: ${decision.downgradeReason}, ` +
+            `minAI: ${fmtPct(decision.minAiConfidence)}, ` +
+            `minAuditor: ${fmtPct(decision.minAuditorConfidence)})`);
+    }
+    else {
+        logger_1.logger.debug(`[PR] Effective strategy: '${decision.effective}' on branch '${branchInfo.branch ?? "unknown"}'`);
+    }
+    // Minimal workspace shim — execute() only calls getMutatedSnapshots().
+    const fakeWorkspace = {
+        getMutatedSnapshots: () => fileSnapshots,
+    };
+    const ctx = { cwd: opts.cwd, reportHtmlPath: null };
+    try {
+        await execute(prCfg, decision, opts.healedEvents, branchInfo, ctx, fakeWorkspace);
+        await handleBugDetected(prCfg.onBugDetected, opts.protectedEvents, branchInfo, ctx);
+    }
+    catch (err) {
+        logger_1.logger.warn(`[PR] Centralized git flow failed: ${err?.message ?? err}`);
+    }
+}
+/**
+ * Build FileSnapshot[] for the centralized git flow by resolving each
+ * mutated file's baseline from `git show HEAD`. This is retry-proof:
+ * HEAD always reflects the committed state before any worker's
+ * MUTATE_IN_PLACE touched the working tree.
+ *
+ * contentBefore = headContent = git HEAD content (CI worktree is clean).
+ * contentAfter  = current file on disk (workers wrote mutations in-place).
+ */
+function resolveGitBaselines(heals, cwd) {
+    const filePaths = new Set();
+    for (const h of heals) {
+        const target = h.definitionSite?.file ?? h.sourceFile;
+        if (target) {
+            filePaths.add(path.isAbsolute(target) ? target : path.resolve(cwd, target));
+        }
+    }
+    const snapshots = [];
+    for (const absPath of filePaths) {
+        const rel = path.relative(cwd, absPath).replace(/\\/g, "/");
+        const gitResult = sh(`git show HEAD:"${rel}"`, cwd);
+        const contentAfter = fs.existsSync(absPath)
+            ? fs.readFileSync(absPath, "utf8")
+            : "";
+        if (!gitResult.ok) {
+            // File was not tracked at HEAD — created by Sela or untracked.
+            snapshots.push({
+                absolutePath: absPath,
+                relativePath: rel,
+                contentBefore: "",
+                contentAfter,
+                headContent: null,
+                hadUncommittedChanges: false,
+                createdBySela: true,
+            });
+            continue;
+        }
+        const headContent = gitResult.stdout;
+        snapshots.push({
+            absolutePath: absPath,
+            relativePath: rel,
+            contentBefore: headContent,
+            contentAfter,
+            headContent,
+            hadUncommittedChanges: false,
+            createdBySela: false,
+        });
+    }
+    // Only return files where Sela actually changed something.
+    return snapshots.filter((s) => s.contentAfter !== null && s.contentAfter !== s.contentBefore);
+}
 // ═══════════════════════════════════════════════════════════════════
 // SHELL QUOTING - cross-platform (POSIX single-quote escape;
 // on Windows execSync uses cmd.exe which handles double-quotes natively).

package/dist/services/PendingPromptLedger.d.ts

@@ -1,5 +1,18 @@
 import type { WorkspaceSnapshotService } from "./WorkspaceSnapshotService";
-import type { HealedEvent } from "./HealReportService";
+import type { HealedEvent, ProtectedEvent } from "./HealReportService";
+/**
+ * The subset of worker state that the master process needs to run the
+ * centralized git/PR flow in SelaReporter.onEnd(). Written by every worker
+ * alongside the local-DX PendingPromptEntry list so the master can aggregate
+ * all workers' mutations and fire a single `gh pr create` after every worker
+ * has exited — without any FileLock contention.
+ */
+export interface WorkerGitPayload {
+    /** Absolute paths of every source file this worker mutated. */
+    mutatedFiles: string[];
+    healedEvents: HealedEvent[];
+    protectedEvents: ProtectedEvent[];
+}
 export interface PendingPromptEntry {
     absolutePath: string;
     relativePath: string;
@@ -36,16 +49,34 @@ export declare function writePendingPromptsLedger(opts: {
     cwd: string;
     workspace: WorkspaceSnapshotService;
     healedEvents: HealedEvent[];
+    protectedEvents?: ProtectedEvent[];
 }): string | null;
 /**
  * Drain every per-worker JSON file under the ledger directory and merge
  * their entries into a single de-duplicated list (keyed by absolutePath).
  * The most-recent contentAfter wins on collision - that's the disk truth.
  *
+ * Handles both v1 (bare PendingPromptEntry[]) and v2 (LedgerFileV2) files.
+ *
  * The directory is NOT deleted here so the reporter can inspect entries
  * before calling `clearPendingPromptsLedger()`.
  */
 export declare function readPendingPromptsLedger(cwd: string): PendingPromptEntry[];
+/**
+ * Read the git-flow payloads written by each worker. Used by the master
+ * process (SelaReporter.onEnd) to aggregate all workers' mutations and
+ * fire a single centralized PR creation after all workers have exited.
+ *
+ * Only v2 ledger files carry a `git` payload; v1 files are skipped silently.
+ */
+export declare function readGitPayloads(cwd: string): WorkerGitPayload[];
+/**
+ * Same as readGitPayloads but scans an arbitrary directory directly.
+ * Used by `sela pr aggregate --ledger-dir <path>` where the CI fan-in
+ * job downloads shard ledger artifacts into a flat directory rather than
+ * the standard `.sela/pending-prompts` subpath.
+ */
+export declare function readGitPayloadsFromDir(dir: string): WorkerGitPayload[];
 /** Remove the ledger directory and every file beneath it. Idempotent. */
 export declare function clearPendingPromptsLedger(cwd: string): void;
 //# sourceMappingURL=PendingPromptLedger.d.ts.map

package/dist/services/PendingPromptLedger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PendingPromptLedger.d.ts","sourceRoot":"","sources":["../../src/services/PendingPromptLedger.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAEV,wBAAwB,EACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,wBAAwB,CAAC;IACpC,YAAY,EAAE,WAAW,EAAE,CAAC;CAC7B,GAAG,MAAM,GAAG,IAAI,CAehB;AAED;;;;;;;GAOG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAyB1E;AAED,yEAAyE;AACzE,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAI3D"}
+{"version":3,"file":"PendingPromptLedger.d.ts","sourceRoot":"","sources":["../../src/services/PendingPromptLedger.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAEV,wBAAwB,EACzB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAMvE;;;;;;GAMG;AACH,MAAM,WAAW,gBAAgB;IAC/B,+DAA+D;IAC/D,YAAY,EAAE,MAAM,EAAE,CAAC;IACvB,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,eAAe,EAAE,cAAc,EAAE,CAAC;CACnC;AAcD,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,MAAM,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,4EAA4E;IAC5E,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B;;;;;OAKG;IACH,SAAS,EAAE,MAAM,CAAC;CACnB;AAID;;;;GAIG;AACH,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAE7C;AAED;;;;;;;;;GASG;AACH,wBAAgB,yBAAyB,CAAC,IAAI,EAAE;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,wBAAwB,CAAC;IACpC,YAAY,EAAE,WAAW,EAAE,CAAC;IAC5B,eAAe,CAAC,EAAE,cAAc,EAAE,CAAC;CACpC,GAAG,MAAM,GAAG,IAAI,CA8BhB;AAED;;;;;;;;;GASG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAgC1E;AAED;;;;;;GAMG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAE/D;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,EAAE,CAmBtE;AAED,yEAAyE;AACzE,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAI3D"}

package/dist/services/PendingPromptLedger.js

@@ -55,6 +55,8 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.ledgerDir = ledgerDir;
 exports.writePendingPromptsLedger = writePendingPromptsLedger;
 exports.readPendingPromptsLedger = readPendingPromptsLedger;
+exports.readGitPayloads = readGitPayloads;
+exports.readGitPayloadsFromDir = readGitPayloadsFromDir;
 exports.clearPendingPromptsLedger = clearPendingPromptsLedger;
 const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
@@ -78,15 +80,26 @@ function ledgerDir(cwd) {
  * empty-mutation runs).
  */
 function writePendingPromptsLedger(opts) {
+    const protectedEvents = opts.protectedEvents ?? [];
     const snaps = opts.workspace.getMutatedSnapshots();
-    if (snaps.length === 0)
-        return null;
     const entries = snaps.map((s) => snapshotToEntry(s, opts.healedEvents, opts.cwd));
+    const git = {
+        mutatedFiles: snaps.map((s) => s.absolutePath),
+        healedEvents: opts.healedEvents,
+        protectedEvents,
+    };
+    // Nothing to persist when there are no mutations AND no healed/protected events.
+    if (snaps.length === 0 && opts.healedEvents.length === 0 && protectedEvents.length === 0) {
+        return null;
+    }
     const dir = ledgerDir(opts.cwd);
     fs.mkdirSync(dir, { recursive: true });
-    const fileName = `${process.pid}-${Date.now()}-${randomTag()}.json`;
+    // Filename includes workerIndex so concurrent workers never collide.
+    const workerIdx = process.env["TEST_WORKER_INDEX"] ?? "0";
+    const fileName = `${workerIdx}-${process.pid}-${Date.now()}-${randomTag()}.json`;
     const full = path.join(dir, fileName);
-    fs.writeFileSync(full, JSON.stringify(entries, null, 2), "utf8");
+    const payload = { version: 2, entries, git };
+    fs.writeFileSync(full, JSON.stringify(payload, null, 2), "utf8");
     return full;
 }
 /**
@@ -94,6 +107,8 @@ function writePendingPromptsLedger(opts) {
  * their entries into a single de-duplicated list (keyed by absolutePath).
  * The most-recent contentAfter wins on collision - that's the disk truth.
  *
+ * Handles both v1 (bare PendingPromptEntry[]) and v2 (LedgerFileV2) files.
+ *
  * The directory is NOT deleted here so the reporter can inspect entries
  * before calling `clearPendingPromptsLedger()`.
  */
@@ -105,18 +120,24 @@ function readPendingPromptsLedger(cwd) {
     const files = fs
         .readdirSync(dir)
         .filter((f) => f.endsWith(".json"))
-        .sort(); // pid-timestamp prefix gives a stable, time-ordered merge
+        .sort(); // workerIdx-pid-timestamp prefix gives a stable, time-ordered merge
     for (const f of files) {
         const full = path.join(dir, f);
         try {
             const raw = fs.readFileSync(full, "utf8");
             const parsed = JSON.parse(raw);
-            if (!Array.isArray(parsed))
-                continue;
-            for (const entry of parsed) {
-                if (!entry || typeof entry.absolutePath !== "string")
+            // v2: { version: 2, entries: [...], git: {...} }
+            // v1: bare PendingPromptEntry[]
+            const entryList = Array.isArray(parsed)
+                ? parsed
+                : parsed.version === 2
+                    ? parsed.entries
+                    : [];
+            for (const entry of entryList) {
+                const e = entry;
+                if (!e || typeof e.absolutePath !== "string")
                     continue;
-                merged.set(path.normalize(entry.absolutePath), entry);
+                merged.set(path.normalize(e.absolutePath), e);
             }
         }
         catch {
@@ -125,6 +146,42 @@ function readPendingPromptsLedger(cwd) {
     }
     return Array.from(merged.values());
 }
+/**
+ * Read the git-flow payloads written by each worker. Used by the master
+ * process (SelaReporter.onEnd) to aggregate all workers' mutations and
+ * fire a single centralized PR creation after all workers have exited.
+ *
+ * Only v2 ledger files carry a `git` payload; v1 files are skipped silently.
+ */
+function readGitPayloads(cwd) {
+    return readGitPayloadsFromDir(ledgerDir(cwd));
+}
+/**
+ * Same as readGitPayloads but scans an arbitrary directory directly.
+ * Used by `sela pr aggregate --ledger-dir <path>` where the CI fan-in
+ * job downloads shard ledger artifacts into a flat directory rather than
+ * the standard `.sela/pending-prompts` subpath.
+ */
+function readGitPayloadsFromDir(dir) {
+    if (!fs.existsSync(dir))
+        return [];
+    const payloads = [];
+    const files = fs.readdirSync(dir).filter((f) => f.endsWith(".json"));
+    for (const f of files) {
+        const full = path.join(dir, f);
+        try {
+            const raw = fs.readFileSync(full, "utf8");
+            const parsed = JSON.parse(raw);
+            if (parsed?.version === 2 && parsed.git) {
+                payloads.push(parsed.git);
+            }
+        }
+        catch {
+            // Corrupt file - skip.
+        }
+    }
+    return payloads;
+}
 /** Remove the ledger directory and every file beneath it. Idempotent. */
 function clearPendingPromptsLedger(cwd) {
     const dir = ledgerDir(cwd);

package/dist/services/SafetyGuard.d.ts

@@ -115,6 +115,7 @@ export declare class SafetyGuard {
     constructor(arg?: ResolvedThresholds | SafetyGuardOptions);
     private static normalizeArgs;
     evaluate(context: HealContext, aiFix: AIFixSummary): Promise<SafetyDecision>;
+    private applyTextDriftGuard;
     classifyFunctionalRole(text: string): FunctionalRole;
 }
 //# sourceMappingURL=SafetyGuard.d.ts.map

package/dist/services/SafetyGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SafetyGuard.d.ts","sourceRoot":"","sources":["../../src/services/SafetyGuard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAEL,cAAc,EACf,MAAM,yBAAyB,CAAC;AAMjC,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE9C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,uEAAuE;IACvE,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,6DAA6D;IAC7D,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,+CAA+C;IAC/C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,WAAW,GAAG,SAAS,CAAC;AAE7E;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE5D,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,iBAAiB,CAUlE;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,mEAAmE;IACnE,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,cAAc,CAAC;QAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B;;;;WAIG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,oEAAoE;QACpE,oBAAoB,CAAC,EACjB,UAAU,GACV,cAAc,GACd,OAAO,GACP,UAAU,GACV,IAAI,CAAC;QACT,qFAAqF;QACrF,mBAAmB,CAAC,EAAE;YACpB,aAAa,EAAE,MAAM,CAAC;YACtB,OAAO,EAAE,MAAM,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC;YACd,kBAAkB,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,CAAC;CACH;AAkBD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,UAAU,CAAqB;IAEvC;;;;OAIG;gBACS,GAAG,CAAC,EAAE,kBAAkB,GAAG,kBAAkB;IAMzD,OAAO,CAAC,MAAM,CAAC,aAAa;IAqBtB,QAAQ,CACZ,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,cAAc,CAAC;IAgC1B,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc;CAGrD"}
+{"version":3,"file":"SafetyGuard.d.ts","sourceRoot":"","sources":["../../src/services/SafetyGuard.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAChD,OAAO,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAC1D,OAAO,EAAE,cAAc,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACpE,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAGtD,OAAO,EAEL,cAAc,EACf,MAAM,yBAAyB,CAAC;AAOjC,MAAM,MAAM,QAAQ,GAAG,WAAW,GAAG,QAAQ,CAAC;AAE9C,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,QAAQ,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,YAAY;IAC3B;;;;;OAKG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,aAAa,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACrD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,4EAA4E;IAC5E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAC;IAEjB,0EAA0E;IAC1E,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,uEAAuE;IACvE,YAAY,CAAC,EAAE,YAAY,EAAE,CAAC;IAC9B,6DAA6D;IAC7D,WAAW,CAAC,EAAE,UAAU,CAAC;IACzB,4CAA4C;IAC5C,WAAW,CAAC,EAAE,YAAY,EAAE,CAAC;IAC7B,+CAA+C;IAC/C,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,GAAG,iBAAiB,GAAG,WAAW,GAAG,SAAS,CAAC;AAE7E;;;;;;;;;;GAUG;AACH,MAAM,MAAM,iBAAiB,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE5D,wBAAgB,cAAc,CAAC,KAAK,EAAE,SAAS,GAAG,iBAAiB,CAUlE;AAED,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,SAAS,CAAC;IACjB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,OAAO,CAAC;IACpB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC;;;;;OAKG;IACH,IAAI,CAAC,EAAE,eAAe,CAAC;IACvB,mEAAmE;IACnE,IAAI,CAAC,EAAE;QACL,cAAc,CAAC,EAAE,YAAY,GAAG,YAAY,GAAG,cAAc,CAAC;QAC9D,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B;;;;WAIG;QACH,aAAa,CAAC,EAAE,MAAM,CAAC;QACvB,oEAAoE;QACpE,oBAAoB,CAAC,EACjB,UAAU,GACV,cAAc,GACd,OAAO,GACP,UAAU,GACV,IAAI,CAAC;QACT,qFAAqF;QACrF,mBAAmB,CAAC,EAAE;YACpB,aAAa,EAAE,MAAM,CAAC;YACtB,OAAO,EAAE,MAAM,CAAC;YAChB,KAAK,EAAE,MAAM,CAAC;YACd,kBAAkB,EAAE,MAAM,CAAC;SAC5B,CAAC;KACH,CAAC;CACH;AAkBD;;;;;;GAMG;AACH,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAED,qBAAa,WAAW;IACtB,OAAO,CAAC,aAAa,CAAgB;IACrC,OAAO,CAAC,UAAU,CAAqB;IAEvC;;;;OAIG;gBACS,GAAG,CAAC,EAAE,kBAAkB,GAAG,kBAAkB;IAMzD,OAAO,CAAC,MAAM,CAAC,aAAa;IAqBtB,QAAQ,CACZ,OAAO,EAAE,WAAW,EACpB,KAAK,EAAE,YAAY,GAClB,OAAO,CAAC,cAAc,CAAC;IA2C1B,OAAO,CAAC,mBAAmB;IAsC3B,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,cAAc;CAGrD"}

package/dist/services/SafetyGuard.js

@@ -7,6 +7,7 @@ const IntentAuditor_1 = require("./IntentAuditor");
 const PipelineContext_1 = require("./safety/PipelineContext");
 const rules_1 = require("./safety/rules");
 const roleClassifier_1 = require("./safety/roleClassifier");
+const logger_1 = require("../utils/logger");
 function dispositionFor(level) {
     switch (level) {
         case "SAFE":
@@ -61,6 +62,24 @@ class SafetyGuard {
     // ─────────────────────────────────────────────────────────────
     async evaluate(context, aiFix) {
         const ctx = (0, PipelineContext_1.buildContext)(context, aiFix, this.thresholds, this.intentAuditor);
+        // ── Text-Drift Pre-Flight ─────────────────────────────────────
+        // Compare DNA baseline text vs live candidate text BEFORE any rule
+        // runs.  This is the primary defence against the "Delete System →
+        // Update System same-container mis-identification" class of bug:
+        //
+        //   1. Drift confirmed (both texts present, differ):
+        //      synthesise effectiveContentChange so StructuralOnlyRule
+        //      cannot short-circuit to SAFE, and set forceAudit so the
+        //      Intent Auditor is mandatory regardless of confidence.
+        //
+        //   2. Drift unverifiable (DNA text present but liveText absent
+        //      AND AI did not self-report a contentChange):
+        //      set forceAudit so StructuralOnlyRule downgrades SAFE → HOLD.
+        //
+        // This guard runs once, synchronously, before the rule loop.
+        // ZeroTrustRule (step 2) may re-derive effectiveContentChange from
+        // the same inputs; that is harmless — it will set the same value.
+        this.applyTextDriftGuard(ctx, aiFix);
         for (const rule of rules_1.SAFETY_RULES) {
             const decision = await rule.run(ctx);
             if (decision) {
@@ -73,6 +92,28 @@ class SafetyGuard {
         // Unreachable: ConfidenceTierRule is terminal and always decides.
         throw new Error("[SafetyGuard] rule pipeline exhausted without a decision - this is a bug");
     }
+    applyTextDriftGuard(ctx, aiFix) {
+        const dnaText = aiFix.dnaBaselineText?.trim();
+        const liveText = aiFix.liveText?.trim();
+        if (dnaText && liveText && dnaText !== liveText) {
+            // Drift confirmed — synthesise contentChange if ZeroTrustRule has not
+            // yet run (it will run next and will produce the same pair; no conflict).
+            if (!ctx.effectiveContentChange) {
+                ctx.effectiveContentChange = { oldText: dnaText, newText: liveText };
+            }
+            ctx.forceAudit = true;
+            logger_1.logger.warn(`SafetyGuard text-drift pre-flight: DNA="${dnaText}" ≠ live="${liveText}" — ` +
+                `forceAudit=true, Intent Auditor is mandatory`);
+        }
+        else if (dnaText && !liveText && !aiFix.contentChange) {
+            // Cannot verify: DNA baseline exists but live text could not be fetched
+            // and the AI did not self-report a contentChange.  Conservative stance:
+            // force a hold so StructuralOnlyRule cannot silently approve as SAFE.
+            ctx.forceAudit = true;
+            logger_1.logger.warn(`SafetyGuard text-drift pre-flight: liveText unavailable, ` +
+                `DNA="${dnaText}" unverified — forceAudit=true`);
+        }
+    }
     // ─────────────────────────────────────────────────────────────
     // FUNCTIONAL ROLE CLASSIFICATION (public for tests / external use)
     //

package/dist/services/safety/rules/DangerousSinkRule.d.ts

@@ -1,10 +1,18 @@
 import type { FunctionalRole } from "../roleClassifier";
 import type { SafetyRule } from "../PipelineContext";
 /**
- * Roles whose ARRIVAL is treated as high-risk: a control that did not
- * obviously mean "delete" or "authenticate" before, but now does.
+ * Roles whose arrival OR departure is treated as high-risk.
  */
 export declare const DANGEROUS_SINK_ROLES: ReadonlySet<FunctionalRole>;
+/** Transition INTO a dangerous role (e.g. UNKNOWN → DELETE). */
 export declare function isDangerousSinkTransition(oldRole: FunctionalRole, newRole: FunctionalRole): boolean;
+/**
+ * Transition OUT OF a dangerous role (e.g. DELETE → UNKNOWN / SUBMIT).
+ *
+ * Replacing a destructive/auth control with any other role is semantically
+ * inconsistent: the test was authored against a destructive action and the
+ * proposed candidate performs a different operation.
+ */
+export declare function isDangerousSourceTransition(oldRole: FunctionalRole, newRole: FunctionalRole): boolean;
 export declare const DangerousSinkRule: SafetyRule;
 //# sourceMappingURL=DangerousSinkRule.d.ts.map

package/dist/services/safety/rules/DangerousSinkRule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DangerousSinkRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/DangerousSinkRule.ts"],"names":[],"mappings":"AAsBA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,cAAc,CAG3D,CAAC;AAEH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,GACtB,OAAO,CAET;AAED,eAAO,MAAM,iBAAiB,EAAE,UAmB/B,CAAC"}
+{"version":3,"file":"DangerousSinkRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/DangerousSinkRule.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAExD,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF;;GAEG;AACH,eAAO,MAAM,oBAAoB,EAAE,WAAW,CAAC,cAAc,CAG3D,CAAC;AAEH,gEAAgE;AAChE,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,GACtB,OAAO,CAET;AAED;;;;;;GAMG;AACH,wBAAgB,2BAA2B,CACzC,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,cAAc,GACtB,OAAO,CAET;AAED,eAAO,MAAM,iBAAiB,EAAE,UA4B/B,CAAC"}

package/dist/services/safety/rules/DangerousSinkRule.js

@@ -1,40 +1,55 @@
 "use strict";
 // src/services/safety/rules/DangerousSinkRule.ts
 //
-// Step 5.5 - Dangerous-Sink escalation (context-mutator, returns null).
+// Step 5.5 - Dangerous-Sink / Dangerous-Source escalation (context-mutator,
+// returns null).
 //
-// Closes the headline blind spot from the incident: a heal that transitions
-// INTO a destructive or auth role (e.g. "Update System"(UNKNOWN) →
-// "delete System"(DELETE)) sailed through as SAFE because:
-//   - the cross-role swap rule (step 5) only fires when BOTH roles are known,
-//   - the auditor gate (step 6) only fired for zero-trust / assertion /
-//     both-UNKNOWN, none of which matched.
+// Closes two related blind spots:
+//
+//   SINK   (X → DELETE/AUTH): a control that did not obviously mean "delete"
+//          or "authenticate" before, but now does.  The cross-role swap rule
+//          (step 5) only fires when BOTH roles are known; this catches
+//          UNKNOWN → DELETE.
+//
+//   SOURCE (DELETE/AUTH → X): replacing a destructive/auth control with a
+//          non-destructive one (e.g. "Delete System" → "Update System")
+//          is equally dangerous — it masks the test's original destructive
+//          intent.  FunctionalRoleRule misses this because newRole=UNKNOWN
+//          fails its "both roles known" guard.
 //
 // Per design decision #2, this rule does NOT decide on its own; it FORCES
-// the Intent Auditor to run (ctx.forceAudit = true) whenever the new role is
-// a dangerous sink and differs from the old role.  The auditor's existing
+// the Intent Auditor to run (ctx.forceAudit = true).  The auditor's existing
 // verdict mapping then applies: INCONSISTENT → FAIL_HARD, SUSPICIOUS →
-// BLOCKED/REQUIRES_REVIEW, CONSISTENT → continue.
-//
-// Note on coverage: a swap between two KNOWN roles (e.g. SUBMIT → DELETE)
-// is already short-circuited by FunctionalRoleRule before reaching here, so
-// in practice this rule fires for the UNKNOWN→sink case it was built for.
+// BLOCKED/REQUIRES_REVIEW, CONSISTENT → continue.  In practice the
+// pre-LLM structural check in IntentAuditorRule will FAIL_HARD immediately
+// for SOURCE transitions before the LLM is even consulted.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.DangerousSinkRule = exports.DANGEROUS_SINK_ROLES = void 0;
 exports.isDangerousSinkTransition = isDangerousSinkTransition;
+exports.isDangerousSourceTransition = isDangerousSourceTransition;
 const roleClassifier_1 = require("../roleClassifier");
 const logger_1 = require("../../../utils/logger");
 /**
- * Roles whose ARRIVAL is treated as high-risk: a control that did not
- * obviously mean "delete" or "authenticate" before, but now does.
+ * Roles whose arrival OR departure is treated as high-risk.
  */
 exports.DANGEROUS_SINK_ROLES = new Set([
     "DELETE",
     "AUTH",
 ]);
+/** Transition INTO a dangerous role (e.g. UNKNOWN → DELETE). */
 function isDangerousSinkTransition(oldRole, newRole) {
     return exports.DANGEROUS_SINK_ROLES.has(newRole) && newRole !== oldRole;
 }
+/**
+ * Transition OUT OF a dangerous role (e.g. DELETE → UNKNOWN / SUBMIT).
+ *
+ * Replacing a destructive/auth control with any other role is semantically
+ * inconsistent: the test was authored against a destructive action and the
+ * proposed candidate performs a different operation.
+ */
+function isDangerousSourceTransition(oldRole, newRole) {
+    return exports.DANGEROUS_SINK_ROLES.has(oldRole) && newRole !== oldRole;
+}
 exports.DangerousSinkRule = {
     id: "dangerous-sink-escalation",
     run(ctx) {
@@ -48,6 +63,12 @@ exports.DangerousSinkRule = {
                 `forcing Intent Auditor`);
             ctx.forceAudit = true;
         }
+        if (isDangerousSourceTransition(oldRole, newRole)) {
+            logger_1.logger.warn(`SafetyGuard dangerous-source transition: ` +
+                `"${ctx.oldText}" (${oldRole}) → "${ctx.newText}" (${newRole}) - ` +
+                `outbound from destructive role, forcing Intent Auditor`);
+            ctx.forceAudit = true;
+        }
         return null;
     },
 };

package/dist/services/safety/rules/IntentAuditorRule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"IntentAuditorRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/IntentAuditorRule.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF,eAAO,MAAM,iBAAiB,EAAE,UAoG/B,CAAC"}
+{"version":3,"file":"IntentAuditorRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/IntentAuditorRule.ts"],"names":[],"mappings":"AAwBA,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF,eAAO,MAAM,iBAAiB,EAAE,UAoI/B,CAAC"}

package/dist/services/safety/rules/IntentAuditorRule.js

@@ -5,18 +5,25 @@
 // LLM auditor when:
 //   a) zero-trust synthesized the contentChange (AI silent → extra scrutiny), OR
 //   b) we are in assertion mode (the test explicitly checked the text), OR
-//   c) both roles are UNKNOWN (no functional category to fall back on).
+//   c) both roles are UNKNOWN (no functional category to fall back on), OR
+//   d) forceAudit was set by the text-drift pre-flight or DangerousSinkRule.
+//
+// PRE-LLM STRUCTURAL CHECK (runs before shouldAudit):
+//   Transitioning OUT of a destructive/auth role into any non-destructive role
+//   is always semantically inconsistent — the test was authored against a
+//   DELETE/AUTH action and the candidate performs a different operation.  This
+//   is caught here rather than relying solely on the LLM auditor because the
+//   LLM can return CONSISTENT for superficially similar labels (e.g. "Delete
+//   System" → "Update System" sharing the same container at 95% confidence).
 //
 // INCONSISTENT → FAIL_HARD.  SUSPICIOUS → BLOCKED in assertion (unless
 // allowSuspicious) else REQUIRES_REVIEW.  CONSISTENT → fall through,
 // stashing the auditor score breakdown on the context for the final tier.
-//
-// Extracted verbatim - identical trigger condition, reasons, codes,
-// logs, and meta shape.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.IntentAuditorRule = void 0;
 const SelaError_1 = require("../../../errors/SelaError");
 const logger_1 = require("../../../utils/logger");
+const DangerousSinkRule_1 = require("./DangerousSinkRule");
 exports.IntentAuditorRule = {
     id: "intent-auditor-gate",
     async run(ctx) {
@@ -24,6 +31,31 @@ exports.IntentAuditorRule = {
         const newText = ctx.newText;
         const oldRole = ctx.oldRole;
         const newRole = ctx.newRole;
+        // ── Pre-LLM structural check: destructive role inversion ─────────
+        // When the DNA element had a destructive/auth role and the candidate does
+        // NOT, reject immediately without consulting the LLM.  AI confidence is
+        // irrelevant — no valid heal should replace a DELETE/AUTH control with a
+        // non-destructive one.  The LLM can return CONSISTENT for "Delete System →
+        // Update System" because both appear in the same container; this pure-code
+        // gate closes that bypass regardless of the shouldAudit flag below.
+        if (DangerousSinkRule_1.DANGEROUS_SINK_ROLES.has(oldRole) &&
+            !DangerousSinkRule_1.DANGEROUS_SINK_ROLES.has(newRole)) {
+            logger_1.logger.warn(`SafetyGuard destructive role inversion (pre-LLM): ` +
+                `"${oldText}" (${oldRole}) → "${newText}" (${newRole}) - FAIL_HARD`);
+            return {
+                level: "FAIL_HARD",
+                code: SelaError_1.SAFETY_GUARD_CODES.FAIL_HARD_DESTRUCTIVE_ROLE_INVERSION,
+                reason: `Destructive role inversion: "${oldText}" (${oldRole}) → "${newText}" (${newRole}) — ` +
+                    `replacing a ${oldRole} action is semantically inconsistent regardless of confidence`,
+                canProceed: false,
+                meta: {
+                    auditorVerdict: "INCONSISTENT",
+                    auditorConfidence: 100,
+                    auditorReason: `Source role ${oldRole} is destructive/auth; ` +
+                        `candidate role ${newRole} is not — structural semantic mismatch`,
+                },
+            };
+        }
         const shouldAudit = ctx.forceAudit === true ||
             ctx.source === "zero-trust" ||
             ctx.mode === "assertion" ||

package/dist/services/safety/rules/StructuralOnlyRule.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"StructuralOnlyRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/StructuralOnlyRule.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF,eAAO,MAAM,kBAAkB,EAAE,UAyBhC,CAAC"}
+{"version":3,"file":"StructuralOnlyRule.d.ts","sourceRoot":"","sources":["../../../../src/services/safety/rules/StructuralOnlyRule.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,UAAU,EAAqC,MAAM,oBAAoB,CAAC;AAExF,eAAO,MAAM,kBAAkB,EAAE,UAwChC,CAAC"}

package/dist/services/safety/rules/StructuralOnlyRule.js

@@ -19,6 +19,19 @@ exports.StructuralOnlyRule = {
     id: "structural-only-heal",
     run(ctx) {
         if (!ctx.effectiveContentChange) {
+            // Text-drift pre-flight set forceAudit because live text was unavailable
+            // and we cannot verify the candidate has the same text as the DNA
+            // baseline.  Approving as SAFE here would bypass every downstream guard
+            // (semantic-opposite, functional-role, intent-auditor).  Downgrade to
+            // REQUIRES_REVIEW (HOLD) so the heal is quarantined pending manual review.
+            if (ctx.forceAudit) {
+                return {
+                    level: "REQUIRES_REVIEW",
+                    reason: `Text drift unverifiable: DNA baseline present but live text unavailable ` +
+                        `— cannot approve as structural-only (confidence=${ctx.confidence})`,
+                    canProceed: true,
+                };
+            }
             const level = ctx.confidence < ctx.thresholds.confidenceReviewThreshold
                 ? "REQUIRES_REVIEW"
                 : "SAFE";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sela-core",
-  "version": "0.1.0-alpha.3",
+  "version": "0.1.0-alpha.32",
   "description": "AI self-healing Playwright wrapper - drop-in replacement for @playwright/test",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",