sela-core 0.1.0-alpha.43 → 0.1.0-alpha.44

package/dist/engine/SelaEngine.d.ts

@@ -14,6 +14,7 @@ export declare class SelaEngine {
     private testTitleBuffer;
     private capturedSelectorSnapshots;
     private bypassedSelectorCache;
+    private directiveVerdicts;
     private readonly stateManager;
     private readonly aliasBuffer;
     constructor();

package/dist/engine/SelaEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SelaEngine.d.ts","sourceRoot":"","sources":["../../src/engine/SelaEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAqBxC,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAcjF,OAAO,EAAe,QAAQ,EAAkB,MAAM,yBAAyB,CAAC;AA8HhF,qBAAa,UAAU;IACrB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,oBAAoB,CAAuB;IACnD,OAAO,CAAC,mBAAmB,CAAmB;IAC9C,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,SAAS,CAA6C;IAC9D,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,eAAe,CAAkC;IAMzD,OAAO,CAAC,yBAAyB,CAA6C;IAK9E,OAAO,CAAC,qBAAqB,CAAkC;IAM/D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;IAMzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAGxB;;IAkDE,YAAY,CAChB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAqEzB;;;;;OAKG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAQlC;;;;;;OAMG;YACW,sBAAsB;IA4CpC;;;;;OAKG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI9B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB,CAAkC;IAE5D,cAAc,CAAC,GAAG,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI;IAInD;;;;;;;OAOG;IACH,2BAA2B,CAAC,KAAK,EAAE;QACjC,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,qEAAqE;QACrE,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kEAAkE;QAClE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,IAAI;IAkCF,IAAI,CACR,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,QAAmB,EAC7B,cAAc,CAAC,EAAE,MAAM,EAKvB,eAAe,CAAC,EAAE;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,EAG7C,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,MAAM,CAAC;IA4gDlB,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAerB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IAoB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,2BAA2B;IA4BnC,OAAO,CAAC,yBAAyB;IAgDjC,OAAO,CAAC,kBAAkB;IA8D1B,OAAO,CAAC,oBAAoB;IAyD5B,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAIrD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5E,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAK/B,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAiOpC,OAAO,CAAC,iBAAiB;YAwCX,mBAAmB;YAyCnB,qBAAqB;YAiCrB,aAAa;IAsB3B,OAAO,CAAC,0BAA0B;IA+BlC,OAAO,CAAC,WAAW;IA8Bb,wBAAwB,CAC5B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM;IAyFrB,OAAO,CAAC,MAAM,CAAC,oBAAoB;CAWpC;AAED,OAAO,EAAE,CAAC"}
+{"version":3,"file":"SelaEngine.d.ts","sourceRoot":"","sources":["../../src/engine/SelaEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAsBxC,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAejF,OAAO,EAAe,QAAQ,EAAkB,MAAM,yBAAyB,CAAC;AA+HhF,qBAAa,UAAU;IACrB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,oBAAoB,CAAuB;IACnD,OAAO,CAAC,mBAAmB,CAAmB;IAC9C,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,SAAS,CAA6C;IAC9D,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,eAAe,CAAkC;IAMzD,OAAO,CAAC,yBAAyB,CAA6C;IAK9E,OAAO,CAAC,qBAAqB,CAAkC;IAI/D,OAAO,CAAC,iBAAiB,CAAmC;IAM5D,OAAO,CAAC,QAAQ,CAAC,YAAY,CAA4B;IAMzD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAGxB;;IAkDE,YAAY,CAChB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAqEzB;;;;;OAKG;IACG,WAAW,IAAI,OAAO,CAAC,IAAI,CAAC;IAQlC;;;;;;OAMG;YACW,sBAAsB;IA4CpC;;;;;OAKG;IACH,SAAS,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI;IAI9B;;;;OAIG;IACH,OAAO,CAAC,kBAAkB,CAAkC;IAE5D,cAAc,CAAC,GAAG,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI;IAInD;;;;;;;OAOG;IACH,2BAA2B,CAAC,KAAK,EAAE;QACjC,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,IAAI,EAAE,MAAM,CAAC;QACb,QAAQ,EAAE,MAAM,CAAC;QACjB,MAAM,EAAE,MAAM,CAAC;QACf,qEAAqE;QACrE,WAAW,CAAC,EAAE,MAAM,CAAC;QACrB,kEAAkE;QAClE,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,GAAG,IAAI;IAkCF,IAAI,CACR,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,QAAmB,EAC7B,cAAc,CAAC,EAAE,MAAM,EAKvB,eAAe,CAAC,EAAE;QAAE,eAAe,EAAE,MAAM,CAAA;KAAE,EAG7C,OAAO,CAAC,EAAE,eAAe,GACxB,OAAO,CAAC,MAAM,CAAC;IAinDlB,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAerB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IAoB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,2BAA2B;IA4BnC,OAAO,CAAC,yBAAyB;IAgDjC,OAAO,CAAC,kBAAkB;IA8D1B,OAAO,CAAC,oBAAoB;IAyD5B,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAIrD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5E,aAAa,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAK/B,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;IAuPpC,OAAO,CAAC,iBAAiB;YAwCX,mBAAmB;YAyCnB,qBAAqB;YAiCrB,aAAa;IAsB3B,OAAO,CAAC,0BAA0B;IA+BlC,OAAO,CAAC,WAAW;IA8Bb,wBAAwB,CAC5B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM;IAyFrB,OAAO,CAAC,MAAM,CAAC,oBAAoB;CAWpC;AAED,OAAO,EAAE,CAAC"}

package/dist/engine/SelaEngine.js

@@ -38,6 +38,7 @@ const fs = __importStar(require("fs"));
 const path = __importStar(require("path"));
 const LLMService_1 = require("../services/LLMService");
 const WorkspaceSnapshotService_1 = require("../services/WorkspaceSnapshotService");
+const FileLock_1 = require("../utils/FileLock");
 const IsolatedDiff_1 = require("../utils/IsolatedDiff");
 const logger_1 = require("../utils/logger");
 const SnapshotService_1 = require("../services/SnapshotService");
@@ -61,6 +62,7 @@ const ProviderFactory_1 = require("../providers/ProviderFactory");
 const IntentAuditor_1 = require("../services/IntentAuditor");
 const DryRunGuard_1 = require("../config/DryRunGuard");
 const HealBudget_1 = require("../services/HealBudget");
+const HealCircuitBreaker_1 = require("../services/HealCircuitBreaker");
 const HealReportService_1 = require("../services/HealReportService");
 const SharedLocatorGuard_1 = require("../services/SharedLocatorGuard");
 const RegressionManifestService_1 = require("../services/RegressionManifestService");
@@ -146,6 +148,10 @@ class SelaEngine {
     // immediate in-memory hit without a second LLM round-trip or any page.evaluate
     // call (which would fail when the page is already closed, e.g. unawaited promises).
     bypassedSelectorCache = new Map();
+    // Memoized fail-fast directive verdicts per "file:line" (P1-5): the
+    // ts-morph spec-file parse runs once per call-site, not once per failure —
+    // critical when a systemic failure floods heal() with repeats.
+    directiveVerdicts = new Map();
     // Lifecycle state machine — owns the transient (session-scoped) NO_HEAL locks
     // and hydrates the persistent v3 selector ledger into the HealingRegistry at
     // session start. Replaces the old ad-hoc, worker-lifetime `noHealCache` Map so
@@ -402,15 +408,85 @@ CRITICAL: Do NOT return a CSS selector like "#my-select". Return plain text only
             criticalityOverrides: this.config.healing.criticality,
         };
         const businessCriticality = (0, BusinessContextParser_1.deriveBusinessCriticality)(businessIntent);
+        // ── NO_HEAL cache pre-check ──────────────────────────────────────────
+        // FIRST gate (P1-5): a pure in-memory Map hit, so it runs before the
+        // AST directive scan — in a mass-failure stampede the old order parsed
+        // the spec file with ts-morph on EVERY repeat of an already-blocked
+        // selector. If this selector was already identified as an application
+        // logic/state failure in this run, skip LLM, DNA load, and DOM
+        // extraction entirely. One LLM call pays for 50+ identical state-bug
+        // failures in large suites.
+        const cachedNoHealReason = this.stateManager.selectorBlockReason(elementSelectorOnly);
+        if (cachedNoHealReason !== undefined) {
+            logger_1.logger.warn(`[Sela] NO_HEAL cache hit — skipping LLM: ${cachedNoHealReason}`);
+            HealReportService_1.sharedHealReport.record({
+                kind: "FAILED",
+                stableId,
+                deterministicKey: (0, HealReportService_1.computeEventDeterministicKey)(reportFile, line, elementSelectorOnly),
+                sourceFile: reportFile,
+                sourceLine: line,
+                testTitle,
+                timestamp: new Date().toISOString(),
+                framePath: [],
+                inIframe: false,
+                inShadowDom: false,
+                oldSelector: elementSelectorOnly,
+                reason: `NO_HEAL (cached) — ${cachedNoHealReason}`,
+                dnaBefore: null,
+            });
+            return "";
+        }
+        // ── Systemic-drift circuit breaker (P1-5) ────────────────────────────
+        // A burst of DISTINCT structural failures signals one application change
+        // (redeploy / renamed root container), not N independent selector
+        // drifts. Past the threshold, refuse further LLM heals for this run and
+        // say so once, loudly. Blocking the selector routes every repeat through
+        // the cheap NO_HEAL cache above.
+        HealCircuitBreaker_1.sharedHealCircuitBreaker.recordAttempt();
+        if (HealCircuitBreaker_1.sharedHealCircuitBreaker.isTripped()) {
+            const breakerReason = HealCircuitBreaker_1.sharedHealCircuitBreaker.reason();
+            if (HealCircuitBreaker_1.sharedHealCircuitBreaker.shouldWarnOnce()) {
+                logger_1.logger.warn(`[Sela] Heal BLOCKED — ${breakerReason}`);
+            }
+            this.stateManager.blockSelector(elementSelectorOnly, "CIRCUIT_BREAKER — systemic drift suspected");
+            HealReportService_1.sharedHealReport.record({
+                kind: "FAILED",
+                stableId,
+                deterministicKey: (0, HealReportService_1.computeEventDeterministicKey)(reportFile, line, elementSelectorOnly),
+                sourceFile: reportFile,
+                sourceLine: line,
+                testTitle,
+                timestamp: new Date().toISOString(),
+                framePath: [],
+                inIframe: false,
+                inShadowDom: false,
+                oldSelector: elementSelectorOnly,
+                reason: `CIRCUIT_BREAKER — ${breakerReason}`,
+                dnaBefore: null,
+            });
+            return "";
+        }
         // ── Developer fail-fast directive pre-gate ──────────────────────
         // Scan the failing statement's leading comments for `// sela-fail-fast`
         // BEFORE the expensive LLM round-trip. When present, record a
         // "Skipped by Developer" FailedEvent and propagate the canonical
         // SelaError(AST_HEAL_DISABLED_BY_DIRECTIVE) so retries are skipped too.
-        try {
-            this.astDirectiveScanner.enforceFailFastDirective({ filePath, line });
+        // The verdict is memoized per call-site (P1-5): the ts-morph parse of
+        // the spec file runs once per (file, line), not once per failure.
+        const directiveKey = `${filePath}:${line}`;
+        let directiveVerdict = this.directiveVerdicts.get(directiveKey);
+        if (directiveVerdict === undefined) {
+            try {
+                this.astDirectiveScanner.enforceFailFastDirective({ filePath, line });
+                directiveVerdict = null;
+            }
+            catch (scanErr) {
+                directiveVerdict = scanErr;
+            }
+            this.directiveVerdicts.set(directiveKey, directiveVerdict);
         }
-        catch (directiveErr) {
+        if (directiveVerdict) {
+            const directiveErr = directiveVerdict;
             if ((0, SelaError_1.isSelaErrorFrom)(directiveErr, "ASTUpdater") &&
                 directiveErr.code === SelaError_1.AST_UPDATER_CODES.HEAL_DISABLED_BY_DIRECTIVE) {
                 logger_1.logger.warn(`Skipped by Developer - ${directiveErr.reason}`);
@@ -434,30 +510,6 @@ CRITICAL: Do NOT return a CSS selector like "#my-select". Return plain text only
             }
             throw directiveErr;
         }
-        // ── NO_HEAL cache pre-check ──────────────────────────────────────────
-        // If this selector was already identified as an application logic/state
-        // failure in this run, skip LLM, DNA load, and DOM extraction entirely.
-        // One LLM call pays for 50+ identical state-bug failures in large suites.
-        const cachedNoHealReason = this.stateManager.selectorBlockReason(elementSelectorOnly);
-        if (cachedNoHealReason !== undefined) {
-            logger_1.logger.warn(`[Sela] NO_HEAL cache hit — skipping LLM: ${cachedNoHealReason}`);
-            HealReportService_1.sharedHealReport.record({
-                kind: "FAILED",
-                stableId,
-                deterministicKey: (0, HealReportService_1.computeEventDeterministicKey)(reportFile, line, elementSelectorOnly),
-                sourceFile: reportFile,
-                sourceLine: line,
-                testTitle,
-                timestamp: new Date().toISOString(),
-                framePath: [],
-                inIframe: false,
-                inShadowDom: false,
-                oldSelector: elementSelectorOnly,
-                reason: `NO_HEAL (cached) — ${cachedNoHealReason}`,
-                dnaBefore: null,
-            });
-            return "";
-        }
         // Interception is now active for this call-site — enter HEALING.
         this.stateManager.beginHeal({ filePath, line });
         // Snapshot for report event context (loaded once below, used at all exit paths).
@@ -945,6 +997,45 @@ Decision rule (overrides any typo/Levenshtein-distance heuristic):
                     logger_1.logger.info(`[SELA GUARD] Re-prompt escaped the volatile family — proceeding with ` +
                         `stable anchor "${fmtSelector(newFullSelector)}".`);
                 }
+                // ── Anchor-oscillation gate (P1-7 — matrix ping-pong) ───────────
+                // The token ladder above catches id/class FACTORY rotation; this
+                // catches stable anchors flipping A→B→A across runs — the signature
+                // of i18n matrix legs, feature-flag variants, and canary deploys
+                // serving N concurrent DOM truths. Healing the flip-back would just
+                // arm the next flip (dueling PRs rewriting one line). No re-prompt:
+                // the context conflict is real, the LLM would re-propose the same.
+                const oscillation = (0, SelectorForensics_1.detectAnchorOscillation)({
+                    proposal: elementOnlySelector,
+                    previousSourceSelector: lastKnownState?.sourceSelector,
+                    healHistory: (lastKnownState?.healHistory ?? []).map((h) => h.selector),
+                });
+                if (oscillation.oscillating) {
+                    const reason = `ANCHOR OSCILLATION — ${oscillation.reason} Sela refuses to flip ` +
+                        `the selector back. The element is Protected until the run ` +
+                        `contexts are reconciled: pin a variant-invariant anchor ` +
+                        `(data-testid / stable attribute), or exclude this suite leg via ` +
+                        `healing.exclude.`;
+                    logger_1.logger.warn(`[SELA GUARD] ${reason}`);
+                    this.stateManager.failNoHeal({ filePath, line }, elementSelectorOnly, reason);
+                    HealReportService_1.sharedHealReport.record({
+                        kind: "FAILED",
+                        stableId,
+                        deterministicKey: (0, HealReportService_1.computeEventDeterministicKey)(reportFile, line, elementSelectorOnly),
+                        sourceFile: reportFile,
+                        sourceLine: line,
+                        testTitle,
+                        timestamp: new Date().toISOString(),
+                        framePath: successfulPath,
+                        inIframe: successfulPath.length > 0,
+                        inShadowDom: false,
+                        oldSelector: elementSelectorOnly,
+                        reason,
+                        aiConfidence: aiFix?.confidence,
+                        aiExplanation: aiFix?.explanation,
+                        dnaBefore: (0, HealReportService_1.summariseSnapshot)(lastKnownStateForReport),
+                    });
+                    return "";
+                }
                 // ── Step 3.5: Fetch live text (lightweight zero-trust probe) ─
                 const liveText = await this.fetchLiveText(page, elementOnlySelector, successfulPath);
                 const dnaBaselineText = oldText ?? undefined;
@@ -1854,59 +1945,74 @@ Decision rule (overrides any typo/Levenshtein-distance heuristic):
                 // preserve any tombstones already on disk (a re-heal must never erase
                 // the record of selectors reviewers rejected).
                 const alias = this.aliasBuffer.get(key);
-                const existingSnap = await this.snapshotService.load(key);
-                let withAlias;
-                if (alias) {
-                    withAlias = {
-                        ...toSave,
-                        schemaVersion: 4,
-                        sourceSelector: alias.source,
-                        healedSelector: alias.healed,
-                        status: "healed",
-                        lastHealed: new Date().toISOString(),
-                        healContext: { filePath: alias.filePath, line: alias.line },
-                        anchor: (0, LedgerAnchor_1.buildLedgerAnchor)({
-                            filePath: alias.filePath,
-                            line: alias.line,
+                // P1-4: load → merge → save below is a read-modify-write of shared
+                // ledger state. It runs under the per-key mkdir FileLock so a peer
+                // worker flushing the SAME key (shared POM element exercised from
+                // two workers) cannot interleave — an unlocked interleave is a lost
+                // update that can silently resurrect reviewer-rejected tombstones.
+                // Contended ⇒ skip with a warning; the DNA memo is re-captured on
+                // the next run. staleMs reclaims locks orphaned by a SIGKILLed run.
+                const keyLock = new FileLock_1.FileLock((0, FileLock_1.lockDirFor)(this.snapshotService.filePathFor(key)), { staleMs: 60_000 });
+                const wrote = await keyLock.withLock(async () => {
+                    const existingSnap = await this.snapshotService.load(key);
+                    let withAlias;
+                    if (alias) {
+                        withAlias = {
+                            ...toSave,
+                            schemaVersion: 4,
                             sourceSelector: alias.source,
-                        }) ?? existingSnap?.anchor,
-                        review: { state: "PENDING_REVIEW" },
-                        tombstones: existingSnap?.tombstones,
-                        // Rolling heal log (capped) — SelectorForensics S0 proves an
-                        // id-prefix ping-pong deterministically across sessions.
-                        healHistory: [
-                            ...(existingSnap?.healHistory ?? []),
-                            { selector: alias.healed, at: new Date().toISOString() },
-                        ].slice(-10),
-                    };
-                }
-                else if (existingSnap?.healedSelector) {
-                    // No new heal this run, but the ledger already holds an alias —
-                    // typically a RESOLVED_VIA_DNA run whose post-success DNA memo
-                    // landed in dnaBuffer. A bare `toSave` write would WIPE the alias
-                    // ("alias amnesia": heal → seeded pass → alias lost → re-heal on
-                    // run 3 — an LLM-cost idempotency leak). Refresh the structural
-                    // DNA, preserve the durable ledger fields verbatim.
-                    withAlias = {
-                        ...toSave,
-                        schemaVersion: 4,
-                        sourceSelector: existingSnap.sourceSelector,
-                        healedSelector: existingSnap.healedSelector,
-                        status: existingSnap.status,
-                        lastHealed: existingSnap.lastHealed,
-                        healContext: existingSnap.healContext,
-                        anchor: existingSnap.anchor,
-                        review: existingSnap.review,
-                        tombstones: existingSnap.tombstones,
-                        healHistory: existingSnap.healHistory,
-                        visualSnapshot: toSave.visualSnapshot ??
-                            existingSnap.visualSnapshot,
-                    };
-                }
-                else {
-                    withAlias = toSave;
+                            healedSelector: alias.healed,
+                            status: "healed",
+                            lastHealed: new Date().toISOString(),
+                            healContext: { filePath: alias.filePath, line: alias.line },
+                            anchor: (0, LedgerAnchor_1.buildLedgerAnchor)({
+                                filePath: alias.filePath,
+                                line: alias.line,
+                                sourceSelector: alias.source,
+                            }) ?? existingSnap?.anchor,
+                            review: { state: "PENDING_REVIEW" },
+                            tombstones: existingSnap?.tombstones,
+                            // Rolling heal log (capped) — SelectorForensics S0 proves an
+                            // id-prefix ping-pong deterministically across sessions.
+                            healHistory: [
+                                ...(existingSnap?.healHistory ?? []),
+                                { selector: alias.healed, at: new Date().toISOString() },
+                            ].slice(-10),
+                        };
+                    }
+                    else if (existingSnap?.healedSelector) {
+                        // No new heal this run, but the ledger already holds an alias —
+                        // typically a RESOLVED_VIA_DNA run whose post-success DNA memo
+                        // landed in dnaBuffer. A bare `toSave` write would WIPE the alias
+                        // ("alias amnesia": heal → seeded pass → alias lost → re-heal on
+                        // run 3 — an LLM-cost idempotency leak). Refresh the structural
+                        // DNA, preserve the durable ledger fields verbatim.
+                        withAlias = {
+                            ...toSave,
+                            schemaVersion: 4,
+                            sourceSelector: existingSnap.sourceSelector,
+                            healedSelector: existingSnap.healedSelector,
+                            status: existingSnap.status,
+                            lastHealed: existingSnap.lastHealed,
+                            healContext: existingSnap.healContext,
+                            anchor: existingSnap.anchor,
+                            review: existingSnap.review,
+                            tombstones: existingSnap.tombstones,
+                            healHistory: existingSnap.healHistory,
+                            visualSnapshot: toSave.visualSnapshot ??
+                                existingSnap.visualSnapshot,
+                        };
+                    }
+                    else {
+                        withAlias = toSave;
+                    }
+                    await this.snapshotService.save(key, withAlias);
+                    return true;
+                });
+                if (!wrote) {
+                    logger_1.logger.warn(`Ledger flush skipped for '${key}' — a peer worker holds the ` +
+                        `lock; the snapshot will be re-captured on the next run.`);
                 }
-                await this.snapshotService.save(key, withAlias);
             }
             this.dnaBuffer.clear();
             this.healMetaBuffer.clear();
@@ -1921,13 +2027,16 @@ Decision rule (overrides any typo/Levenshtein-distance heuristic):
         const healedEvents = HealReportService_1.sharedHealReport.getHealedEvents();
         const protectedEvents = HealReportService_1.sharedHealReport.getProtectedEvents();
         if (HealReportService_1.sharedHealReport.hasContent()) {
-            // SELA-5: in a LOCAL multi-worker run every worker shares one cwd, so a
-            // direct flushToDisk is a last-writer-wins race on sela-report.json.
-            // Each worker instead writes a private shard; the single main-process
-            // reporter fans them in at onEnd. CI keeps the direct flush — it runs
-            // one worker per sharded machine and merges across machines separately.
-            const inLocalWorker = !isCiEnvironment() && process.env["TEST_WORKER_INDEX"] !== undefined;
-            if (inLocalWorker) {
+            // SELA-5 single-writer invariant: the write path is decided by PROCESS
+            // ROLE, never by environment. A worker process shares one cwd with its
+            // peers, so a direct flushToDisk is a last-writer-wins race on
+            // sela-report.json (and the regression manifest) — locally AND in CI:
+            // real CI runners execute `--workers=N` inside every shard. Workers
+            // therefore ALWAYS write a private shard; the single main-process
+            // reporter fans them in at onEnd (or `sela merge` across sharded
+            // machines). Only a non-worker process may flush the shared files.
+            const inWorkerProcess = process.env["TEST_WORKER_INDEX"] !== undefined;
+            if (inWorkerProcess) {
                 try {
                     const shard = HealReportService_1.sharedHealReport.flushShard(process.cwd());
                     if (shard) {

package/dist/errors/SelectorForensics.d.ts

@@ -35,4 +35,35 @@ export declare function analyzeSelectorVolatility(input: VolatilityInput): Volat
  * text is guidance; this predicate is what actually breaks the ping-pong.
  */
 export declare function proposalViolatesVolatility(proposedSelector: string, verdict: VolatilityVerdict): boolean;
+export interface AnchorOscillationInput {
+    /** The LLM's proposed replacement selector (element-only form). */
+    proposal: string;
+    /** Ledger `sourceSelector` — what this element was last healed AWAY from. */
+    previousSourceSelector: string | undefined;
+    /** Ledger `healHistory` selectors, oldest → newest. */
+    healHistory: string[];
+}
+export interface AnchorOscillationVerdict {
+    oscillating: boolean;
+    reason: string;
+    /** The historical selector the proposal flips back to. */
+    flippedBackTo?: string;
+}
+/**
+ * Detects the A→B→A flip the token-level volatility ladder cannot see:
+ * stable, human-readable anchors oscillating because the application
+ * legitimately serves N concurrent DOM truths — i18n matrix legs, feature
+ * flag / A-B variants, canary deploys. A proposal that flips BACK to a
+ * selector this element was already healed away from is context variance,
+ * not selector drift; healing it would just arm the next flip (and, in CI,
+ * dueling PRs rewriting the same line forever).
+ *
+ * Two deterministic signals, evidence strongest first:
+ *   1. proposal == ledger `sourceSelector` — the exact selector the last
+ *      heal replaced (catches the FIRST re-flip).
+ *   2. proposal == an OLDER `healHistory` entry — healed in previously,
+ *      later replaced. The LATEST entry is intentionally exempt: it is the
+ *      element's current selector, owned by the same-selector guards.
+ */
+export declare function detectAnchorOscillation(input: AnchorOscillationInput): AnchorOscillationVerdict;
 //# sourceMappingURL=SelectorForensics.d.ts.map

package/dist/errors/SelectorForensics.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SelectorForensics.d.ts","sourceRoot":"","sources":["../../src/errors/SelectorForensics.ts"],"names":[],"mappings":"AA4BA,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,QAAQ,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACpD;;+DAE2D;IAC3D,oBAAoB,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACxD,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAyFD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,eAAe,GACrB,iBAAiB,CA+KnB;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,gBAAgB,EAAE,MAAM,EACxB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAmBT"}
+{"version":3,"file":"SelectorForensics.d.ts","sourceRoot":"","sources":["../../src/errors/SelectorForensics.ts"],"names":[],"mappings":"AA4BA,MAAM,WAAW,iBAAiB;IAChC,kEAAkE;IAClE,QAAQ,EAAE,OAAO,CAAC;IAClB,uEAAuE;IACvE,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,sDAAsD;IACtD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,gEAAgE;IAChE,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,cAAc,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,gEAAgE;IAChE,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACvC,6DAA6D;IAC7D,gBAAgB,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACpD;;+DAE2D;IAC3D,oBAAoB,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;IACxD,2EAA2E;IAC3E,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAyFD,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,eAAe,GACrB,iBAAiB,CA+KnB;AAED;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CACxC,gBAAgB,EAAE,MAAM,EACxB,OAAO,EAAE,iBAAiB,GACzB,OAAO,CAmBT;AAMD,MAAM,WAAW,sBAAsB;IACrC,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,6EAA6E;IAC7E,sBAAsB,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3C,uDAAuD;IACvD,WAAW,EAAE,MAAM,EAAE,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,WAAW,EAAE,OAAO,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,0DAA0D;IAC1D,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAQD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,sBAAsB,GAC5B,wBAAwB,CAmC1B"}

package/dist/errors/SelectorForensics.js

@@ -29,6 +29,7 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.analyzeSelectorVolatility = analyzeSelectorVolatility;
 exports.proposalViolatesVolatility = proposalViolatesVolatility;
+exports.detectAnchorOscillation = detectAnchorOscillation;
 const INERT = {
     volatile: false,
     volatileTokens: [],
@@ -280,3 +281,55 @@ function proposalViolatesVolatility(proposedSelector, verdict) {
     }
     return false;
 }
+const OSC_INERT = { oscillating: false, reason: "" };
+function normalizeSelector(s) {
+    return s.replace(/\s+/g, " ").trim();
+}
+/**
+ * Detects the A→B→A flip the token-level volatility ladder cannot see:
+ * stable, human-readable anchors oscillating because the application
+ * legitimately serves N concurrent DOM truths — i18n matrix legs, feature
+ * flag / A-B variants, canary deploys. A proposal that flips BACK to a
+ * selector this element was already healed away from is context variance,
+ * not selector drift; healing it would just arm the next flip (and, in CI,
+ * dueling PRs rewriting the same line forever).
+ *
+ * Two deterministic signals, evidence strongest first:
+ *   1. proposal == ledger `sourceSelector` — the exact selector the last
+ *      heal replaced (catches the FIRST re-flip).
+ *   2. proposal == an OLDER `healHistory` entry — healed in previously,
+ *      later replaced. The LATEST entry is intentionally exempt: it is the
+ *      element's current selector, owned by the same-selector guards.
+ */
+function detectAnchorOscillation(input) {
+    const proposal = normalizeSelector(input.proposal ?? "");
+    if (!proposal)
+        return OSC_INERT;
+    const prevSource = input.previousSourceSelector
+        ? normalizeSelector(input.previousSourceSelector)
+        : undefined;
+    if (prevSource && proposal === prevSource) {
+        return {
+            oscillating: true,
+            flippedBackTo: prevSource,
+            reason: `Proposal "${proposal}" is the exact selector this element was healed away from ` +
+                `(A→B→A flip). This pattern means the application serves BOTH selector variants ` +
+                `across runs (i18n matrix leg, feature flag / A-B variant, or canary deploy) — ` +
+                `context variance, not selector drift.`,
+        };
+    }
+    const history = (input.healHistory ?? []).map(normalizeSelector);
+    // Exclude the newest entry — it IS the current selector.
+    for (const past of history.slice(0, -1)) {
+        if (past && proposal === past) {
+            return {
+                oscillating: true,
+                flippedBackTo: past,
+                reason: `Proposal "${proposal}" was already healed in previously and later replaced ` +
+                    `(ledger healHistory). Re-healing it re-arms the ping-pong — the application ` +
+                    `likely serves multiple DOM variants across runs (i18n / flags / canary).`,
+            };
+        }
+    }
+    return OSC_INERT;
+}

package/dist/reporter/SelaReporter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SelaReporter.d.ts","sourceRoot":"","sources":["../../src/reporter/SelaReporter.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EACV,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,UAAU,EACV,KAAK,EACL,UAAU,EACX,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAEL,iBAAiB,EAIjB,KAAK,aAAa,EACnB,MAAM,kCAAkC,CAAC;AAI1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACtB,MAAM,oCAAoC,CAAC;AAK5C,OAAO,EAEL,KAAK,eAAe,EAErB,MAAM,kCAAkC,CAAC;AAS1C,MAAM,WAAW,cAAc;IAC7B,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,uDAAuD;IACvD,MAAM,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC;IACrC,kEAAkE;IAClE,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,mDAAmD;IACnD,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,yFAAyF;IACzF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,kBAAkB,EAAE,CAAC;IACnD,iCAAiC;IACjC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,IAAI,CAAC;IAC9C;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACnD;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC;IACrB;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,aAAa,EAAE,CAAC;CAC9C;AAMD,qBAAa,YAAa,YAAW,QAAQ;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwC;IACnE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkC;IAC9D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAiC;IACnE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAU;IACtD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAiC;IACzE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAsC;IAE5E,OAAO,CAAC,eAAe,CAAmD;IAC1E,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,aAAa,CAAS;IAE9B,gFAAgF;IAChF,OAAO,CAAC,UAAU,CAAK;IAEvB;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA6B;IAEhE;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAMjB;gBAEI,IAAI,GAAE,gBAAqB;IAsBvC,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI;IA6BlD,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI;IAmC7C,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IA8IhD,yEAAyE;IACzE,aAAa,IAAI,OAAO;IAQxB;;;;;OAKG;IACH;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,kBAAkB;IAoB1B;;;;;;;OAOG;IACH,OAAO,CAAC,6BAA6B;IAyBrC,OAAO,CAAC,iBAAiB;IAiBzB;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAUxB;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IA2B9B,OAAO,CAAC,wBAAwB;IAOhC;;;;;;;OAOG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAiCvC;;;;;;;;OAQG;IACH,uBAAuB,IAAI,MAAM;IAsBjC,2DAA2D;IAC3D,mBAAmB,IAAI,aAAa,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IAIF,yEAAyE;IACzE,yBAAyB,IAAI,MAAM;IAQnC,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,aAAa;IAWrB;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;CA6BhC;AAoED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,gBAAgB,CAAC,cAAc,CAAC,GACvC,gBAAgB,CAAC,cAAc,CAAC,CAMlC;AAID,eAAe,YAAY,CAAC"}
+{"version":3,"file":"SelaReporter.d.ts","sourceRoot":"","sources":["../../src/reporter/SelaReporter.ts"],"names":[],"mappings":"AA+BA,OAAO,KAAK,EACV,QAAQ,EACR,QAAQ,EACR,UAAU,EACV,UAAU,EACV,KAAK,EACL,UAAU,EACX,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAEL,iBAAiB,EAIjB,KAAK,aAAa,EACnB,MAAM,kCAAkC,CAAC;AAI1C,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAE1D,OAAO,EAIL,KAAK,kBAAkB,EACvB,KAAK,gBAAgB,EACtB,MAAM,oCAAoC,CAAC;AAK5C,OAAO,EAEL,KAAK,eAAe,EAErB,MAAM,kCAAkC,CAAC;AAS1C,MAAM,WAAW,cAAc;IAC7B,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAChC;AAED,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,IAAI,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC5B,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAC9B;AAED,MAAM,WAAW,gBAAgB;IAC/B;;;;OAIG;IACH,eAAe,CAAC,EAAE,OAAO,CAAC;IAC1B,uDAAuD;IACvD,MAAM,CAAC,EAAE,cAAc,GAAG,UAAU,CAAC;IACrC,kEAAkE;IAClE,MAAM,CAAC,EAAE,iBAAiB,CAAC;IAC3B,mDAAmD;IACnD,MAAM,CAAC,EAAE,cAAc,CAAC;IACxB,yFAAyF;IACzF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;OAGG;IACH,UAAU,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,kBAAkB,EAAE,CAAC;IACnD,iCAAiC;IACjC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,eAAe,KAAK,IAAI,CAAC;IAC9C;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;IACnD;;;OAGG;IACH,IAAI,CAAC,EAAE,MAAM,OAAO,CAAC;IACrB;;;;OAIG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IACpC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,OAAO,CAAC;IAChC;;;;OAIG;IACH,qBAAqB,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACvD;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,MAAM,aAAa,EAAE,CAAC;CAC9C;AAMD,qBAAa,YAAa,YAAW,QAAQ;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAoB;IAC3C,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAiB;IACxC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAU;IAC1C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAwC;IACnE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkC;IAC9D,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAiC;IACnE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAgB;IACrC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwB;IACpD,OAAO,CAAC,QAAQ,CAAC,2BAA2B,CAAU;IACtD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAiC;IACzE,OAAO,CAAC,QAAQ,CAAC,qBAAqB,CAAsC;IAE5E,OAAO,CAAC,eAAe,CAAmD;IAC1E,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,aAAa,CAAS;IAE9B,gFAAgF;IAChF,OAAO,CAAC,UAAU,CAAK;IAEvB;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA6B;IAEhE;;;;OAIG;IACH,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAMjB;gBAEI,IAAI,GAAE,gBAAqB;IAsBvC,OAAO,CAAC,OAAO,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI;IA6BlD,SAAS,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,UAAU,GAAG,IAAI;IAmC7C,KAAK,CAAC,OAAO,CAAC,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAiJhD,yEAAyE;IACzE,aAAa,IAAI,OAAO;IAQxB;;;;;OAKG;IACH;;;;;OAKG;IACH,OAAO,CAAC,eAAe;IASvB,OAAO,CAAC,kBAAkB;IAoB1B;;;;;;;OAOG;IACH,OAAO,CAAC,6BAA6B;IAyBrC,OAAO,CAAC,iBAAiB;IAiBzB;;;;OAIG;IACH,OAAO,CAAC,gBAAgB;IAUxB;;;;;OAKG;IACH,OAAO,CAAC,sBAAsB;IA2B9B,OAAO,CAAC,wBAAwB;IAOhC;;;;;;;OAOG;IACG,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC;IAiCvC;;;;;;;;OAQG;IACH,uBAAuB,IAAI,MAAM;IAsBjC,2DAA2D;IAC3D,mBAAmB,IAAI,aAAa,CAAC;QACnC,UAAU,EAAE,MAAM,CAAC;QACnB,UAAU,CAAC,EAAE,MAAM,CAAC;QACpB,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,aAAa,EAAE,OAAO,CAAC;KACxB,CAAC;IAIF,yEAAyE;IACzE,yBAAyB,IAAI,MAAM;IAQnC,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,aAAa;IAWrB;;;;;;OAMG;IACH,OAAO,CAAC,uBAAuB;CA6BhC;AAoED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,gBAAgB,CAAC,cAAc,CAAC,GACvC,gBAAgB,CAAC,cAAc,CAAC,CAMlC;AAID,eAAe,YAAY,CAAC"}

package/dist/reporter/SelaReporter.js

@@ -219,11 +219,14 @@ class SelaReporter {
             this.logger.error(`[Sela] reporter commitUpdates failed: ${msg}`);
         }
         // ── SELA-5: fan in per-worker heal shards ───────────────────
-        // Local multi-worker runs write one shard per worker (commitUpdates) to
-        // avoid clobbering a shared report file. The reporter is the single
-        // main-process writer, so it is the safe place to merge them into the
-        // final sela-report.{html,json}. CI uses cross-machine `sela merge`.
-        if (!this.isCi()) {
+        // Workers ALWAYS write one shard each (commitUpdates) — locally and in
+        // CI, since real CI runners execute `--workers=N` inside every shard.
+        // The reporter is the single main-process writer, so it merges them into
+        // the final sela-report.{html,json} whenever this machine is the whole
+        // run. The one exception is a SHARDED CI run (`--shard=N/M`): the raw
+        // shards must survive for the artifact upload step, and the downstream
+        // cross-machine `sela merge` job owns the fan-in (P0-1).
+        if (!this.isCi() || !this._isShardedRun) {
             // Capture raw bypass events from shards BEFORE merge — the merge runs
             // normalizeEventsForReport() which prettifies internal:role=... selector
             // strings to page.getByRole(...) form. The manifest needs the raw

package/dist/services/HealCircuitBreaker.d.ts

@@ -0,0 +1,28 @@
+export interface HealCircuitBreakerOptions {
+    maxAttempts?: number;
+    windowMs?: number;
+}
+export declare class HealCircuitBreaker {
+    private readonly opts;
+    /** Injectable clock for tests. */
+    private readonly now;
+    private attempts;
+    private tripped;
+    private trippedAtCount;
+    private warned;
+    constructor(opts?: HealCircuitBreakerOptions, 
+    /** Injectable clock for tests. */
+    now?: () => number);
+    private maxAttempts;
+    private windowMs;
+    /** Record one heal attempt (called on entry to the LLM heal pipeline). */
+    recordAttempt(): void;
+    isTripped(): boolean;
+    reason(): string;
+    /** One-shot warning latch (mirrors HealBudget.shouldWarnOnce). */
+    shouldWarnOnce(): boolean;
+    /** Test isolation / new session. */
+    reset(): void;
+}
+export declare const sharedHealCircuitBreaker: HealCircuitBreaker;
+//# sourceMappingURL=HealCircuitBreaker.d.ts.map

package/dist/services/HealCircuitBreaker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"HealCircuitBreaker.d.ts","sourceRoot":"","sources":["../../src/services/HealCircuitBreaker.ts"],"names":[],"mappings":"AAsBA,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB;AAmBD,qBAAa,kBAAkB;IAO3B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,kCAAkC;IAClC,OAAO,CAAC,QAAQ,CAAC,GAAG;IARtB,OAAO,CAAC,QAAQ,CAAgB;IAChC,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,MAAM,CAAS;gBAGJ,IAAI,GAAE,yBAA8B;IACrD,kCAAkC;IACjB,GAAG,GAAE,MAAM,MAAyB;IAGvD,OAAO,CAAC,WAAW;IAInB,OAAO,CAAC,QAAQ;IAIhB,0EAA0E;IAC1E,aAAa,IAAI,IAAI;IAerB,SAAS,IAAI,OAAO;IAIpB,MAAM,IAAI,MAAM;IAWhB,kEAAkE;IAClE,cAAc,IAAI,OAAO;IAMzB,oCAAoC;IACpC,KAAK,IAAI,IAAI;CAMd;AAED,eAAO,MAAM,wBAAwB,oBAA2B,CAAC"}