sela-core 1.0.6 → 1.0.8

package/dist/config/ConfigLoader.d.ts

@@ -1,4 +1,4 @@
-import { ResolvedConfig } from './SelaConfig';
+import { ResolvedConfig } from "./SelaConfig";
 export declare class ConfigLoader {
     private static resolved;
     private static branch;
@@ -7,9 +7,10 @@ export declare class ConfigLoader {
      * calls return the cached result at zero cost.
      */
     static getInstance(): ResolvedConfig;
+    private static logEnvBanners;
     /** Returns the detected Git branch name, or null if detection failed. */
     static getBranch(): string | null;
-    /** Clears the singleton cache — useful for testing. */
+    /** Clears the singleton cache - useful for testing. */
     static reset(): void;
 }
 //# sourceMappingURL=ConfigLoader.d.ts.map

package/dist/config/ConfigLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ConfigLoader.d.ts","sourceRoot":"","sources":["../../src/config/ConfigLoader.ts"],"names":[],"mappings":"AAQA,OAAO,EAAc,cAAc,EAAiB,MAAM,cAAc,CAAC;AAoGzE,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA+B;IACtD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAuB;IAE5C;;;OAGG;IACH,MAAM,CAAC,WAAW,IAAI,cAAc;IAiCpC,yEAAyE;IACzE,MAAM,CAAC,SAAS,IAAI,MAAM,GAAG,IAAI;IAMjC,uDAAuD;IACvD,MAAM,CAAC,KAAK,IAAI,IAAI;CAIrB"}
+{"version":3,"file":"ConfigLoader.d.ts","sourceRoot":"","sources":["../../src/config/ConfigLoader.ts"],"names":[],"mappings":"AAQA,OAAO,EAAc,cAAc,EAAiB,MAAM,cAAc,CAAC;AA4GzE,qBAAa,YAAY;IACvB,OAAO,CAAC,MAAM,CAAC,QAAQ,CAA+B;IACtD,OAAO,CAAC,MAAM,CAAC,MAAM,CAAuB;IAE5C;;;OAGG;IACH,MAAM,CAAC,WAAW,IAAI,cAAc;IAuCpC,OAAO,CAAC,MAAM,CAAC,aAAa;IAW5B,yEAAyE;IACzE,MAAM,CAAC,SAAS,IAAI,MAAM,GAAG,IAAI;IAMjC,uDAAuD;IACvD,MAAM,CAAC,KAAK,IAAI,IAAI;CAIrB"}

package/dist/config/ConfigLoader.js

@@ -48,7 +48,7 @@ const SelaConfig_1 = require("./SelaConfig");
 function findConfigFile(startDir) {
     let dir = startDir;
     while (true) {
-        for (const name of ['sela.config.ts', 'sela.config.js']) {
+        for (const name of ["sela.config.ts", "sela.config.js"]) {
             const candidate = path.join(dir, name);
             if (fs.existsSync(candidate))
                 return candidate;
@@ -65,19 +65,19 @@ function findConfigFile(startDir) {
 function getCurrentBranch() {
     try {
         // Fail fast if not a git repo or git is unavailable
-        const branch = (0, child_process_1.execSync)('git rev-parse --abbrev-ref HEAD', {
-            encoding: 'utf-8',
-            stdio: ['pipe', 'pipe', 'pipe'],
+        const branch = (0, child_process_1.execSync)("git rev-parse --abbrev-ref HEAD", {
+            encoding: "utf-8",
+            stdio: ["pipe", "pipe", "pipe"],
         }).trim();
-        if (branch === 'HEAD') {
+        if (branch === "HEAD") {
             // Detached HEAD (common in CI with explicit SHA checkout)
-            console.warn('[Sela] ⚠️  Detached HEAD detected — branch overrides skipped');
+            console.warn("[Sela] ⚠️  Detached HEAD detected - branch overrides skipped");
             return null;
         }
         return branch;
     }
     catch {
-        console.warn('[Sela] ⚠️  Git branch detection failed — branch overrides skipped');
+        console.warn("[Sela] ⚠️  Git branch detection failed - branch overrides skipped");
         return null;
     }
 }
@@ -91,8 +91,8 @@ function loadRawConfig(configPath) {
         // eslint-disable-next-line @typescript-eslint/no-var-requires
         const mod = require(configPath);
         const config = mod?.default ?? mod ?? {};
-        if (typeof config !== 'object' || config === null) {
-            console.warn(`[Sela] ⚠️  sela.config did not export an object — using defaults`);
+        if (typeof config !== "object" || config === null) {
+            console.warn(`[Sela] ⚠️  sela.config did not export an object - using defaults`);
             return {};
         }
         return config;
@@ -103,7 +103,7 @@ function loadRawConfig(configPath) {
     }
 }
 // ─────────────────────────────────────────────────────────────────
-// DEEP MERGE  (plain objects only — arrays are replaced, not merged)
+// DEEP MERGE  (plain objects only - arrays are replaced, not merged)
 // ─────────────────────────────────────────────────────────────────
 function deepMerge(base, override) {
     const result = { ...base };
@@ -111,10 +111,10 @@ function deepMerge(base, override) {
         const baseVal = result[key];
         const overrideVal = override[key];
         if (overrideVal !== null &&
-            typeof overrideVal === 'object' &&
+            typeof overrideVal === "object" &&
             !Array.isArray(overrideVal) &&
             baseVal !== null &&
-            typeof baseVal === 'object' &&
+            typeof baseVal === "object" &&
             !Array.isArray(baseVal)) {
             result[key] = deepMerge(baseVal, overrideVal);
         }
@@ -141,6 +141,7 @@ class ConfigLoader {
         if (!configPath) {
             // Zero-breaking-change guarantee: no config → pure defaults
             ConfigLoader.resolved = (0, SelaConfig_1.resolveConfig)({});
+            ConfigLoader.logEnvBanners(ConfigLoader.resolved);
             return ConfigLoader.resolved;
         }
         console.log(`[Sela] 📄 Loaded config from: ${path.relative(process.cwd(), configPath)}`);
@@ -156,8 +157,17 @@ class ConfigLoader {
             }
         }
         ConfigLoader.resolved = (0, SelaConfig_1.resolveConfig)(rawConfig);
+        ConfigLoader.logEnvBanners(ConfigLoader.resolved);
         return ConfigLoader.resolved;
     }
+    static logEnvBanners(resolved) {
+        if (resolved.dryRun) {
+            console.log("[Sela] 🌵 DRY RUN active (SELA_DRY_RUN) - disk writes & git commits suppressed.");
+        }
+        if (resolved.noCache) {
+            console.log("[Sela] 🧊 Cache disabled (SELA_NO_CACHE).");
+        }
+    }
     /** Returns the detected Git branch name, or null if detection failed. */
     static getBranch() {
         // Ensure getInstance() has been called at least once
@@ -165,7 +175,7 @@ class ConfigLoader {
             ConfigLoader.getInstance();
         return ConfigLoader.branch;
     }
-    /** Clears the singleton cache — useful for testing. */
+    /** Clears the singleton cache - useful for testing. */
     static reset() {
         ConfigLoader.resolved = null;
         ConfigLoader.branch = null;

package/dist/config/DryRunGuard.d.ts

@@ -0,0 +1,14 @@
+export declare const DryRunGuard: {
+    /**
+     * Returns true when `SELA_DRY_RUN` is set to a truthy value in the current
+     * process environment. Throws via `parseEnvBoolean` when the value is not
+     * one of the accepted tokens - fail-fast keeps misconfigured CI loud.
+     */
+    active(env?: NodeJS.ProcessEnv): boolean;
+    /**
+     * Centralised log line for skipped writes so the diff between a dry run
+     * and a real run is auditable in test output and CI logs.
+     */
+    logSkippedWrite(label: string, target: string): void;
+};
+//# sourceMappingURL=DryRunGuard.d.ts.map

package/dist/config/DryRunGuard.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"DryRunGuard.d.ts","sourceRoot":"","sources":["../../src/config/DryRunGuard.ts"],"names":[],"mappings":"AA2BA,eAAO,MAAM,WAAW;IACtB;;;;OAIG;iBACS,MAAM,CAAC,UAAU,GAAiB,OAAO;IAIrD;;;OAGG;2BACoB,MAAM,UAAU,MAAM,GAAG,IAAI;CAIrD,CAAC"}

package/dist/config/DryRunGuard.js

@@ -0,0 +1,79 @@
+"use strict";
+// src/config/DryRunGuard.ts
+//
+// Single source of truth for the "dry run" runtime gate.
+//
+// The flag is sourced from the `SELA_DRY_RUN` environment variable using the
+// strict parser in SelaConfig.parseEnvBoolean (no silent coercion - bad
+// values throw). The variable is re-read on every call so tests and
+// long-running processes can toggle it without restarting the engine.
+//
+// Two writer paths route through this guard:
+//
+//   1. SourceUpdater._coreUpdate - every `fs.writeFileSync` to a spec/source
+//      file. When dry-run is active the write is skipped and a console
+//      breadcrumb is emitted with the absolute path that *would have* been
+//      written.
+//
+//   2. ASTSourceUpdater._persistChanges - wraps ts-morph `SourceFile.saveSync`.
+//      When dry-run is active the in-memory AST mutation stays, but the
+//      `saveSync` call (which forwards to fs.writeFileSync inside ts-morph)
+//      is skipped so the spec on disk is identical pre/post heal.
+//
+// Git auto-commit operations consult `DryRunGuard.active()` directly so
+// `git add` / `git commit` never fire during a dry run.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DryRunGuard = void 0;
+const path = __importStar(require("path"));
+const SelaConfig_1 = require("./SelaConfig");
+exports.DryRunGuard = {
+    /**
+     * Returns true when `SELA_DRY_RUN` is set to a truthy value in the current
+     * process environment. Throws via `parseEnvBoolean` when the value is not
+     * one of the accepted tokens - fail-fast keeps misconfigured CI loud.
+     */
+    active(env = process.env) {
+        return (0, SelaConfig_1.parseEnvBoolean)("SELA_DRY_RUN", env.SELA_DRY_RUN);
+    },
+    /**
+     * Centralised log line for skipped writes so the diff between a dry run
+     * and a real run is auditable in test output and CI logs.
+     */
+    logSkippedWrite(label, target) {
+        const display = target ? path.basename(target) : "<no-path>";
+        console.log(`[Sela] 🌵 Dry Run - skip ${label} → ${display}`);
+    },
+};

package/dist/config/SelaConfig.d.ts

@@ -1,11 +1,11 @@
-export type PRStrategy = 'directCommit' | 'pr' | 'draftPR' | 'readOnly';
-export type BugAction = 'failCI' | 'createIssue' | 'labelOnly';
+export type PRStrategy = "directCommit" | "pr" | "draftPR" | "readOnly";
+export type BugAction = "failCI" | "createIssue" | "labelOnly";
 export interface SelaPRAutomationConfig {
     /** Master switch. Default: false (fully backward-compatible). */
     enabled?: boolean;
     /** Git-flow strategy. Default: 'readOnly' (safest). */
     strategy?: PRStrategy;
-    /** Branches on which directCommit is FORBIDDEN — auto-downgraded. */
+    /** Branches on which directCommit is FORBIDDEN - auto-downgraded. */
     protectedBranches?: string[];
     /** Trust-aware downgrade thresholds (0–100). 0 = never downgrade by that metric. */
     reviewThresholds?: {
@@ -14,7 +14,7 @@ export interface SelaPRAutomationConfig {
         /** Min auditor adjusted confidence required for directCommit. Below → downgrade. */
         minAuditorScoreForDirectCommit?: number;
         /** Strategy to downgrade TO. Default: 'draftPR'. */
-        downgradeTo?: Exclude<PRStrategy, 'directCommit'>;
+        downgradeTo?: Exclude<PRStrategy, "directCommit">;
     };
     /** Behavior when SafetyGuard blocks a heal (PROTECTED events). Default: 'failCI'. */
     onBugDetected?: BugAction;
@@ -31,15 +31,13 @@ export interface SelaPRAutomationConfig {
 }
 export interface SelaConfig {
     /** Shorthand preset that expands to concrete threshold values. */
-    healingPolicy?: 'conservative' | 'balanced' | 'aggressive';
+    healingPolicy?: "conservative" | "balanced" | "aggressive";
     /** Fine-grained threshold overrides. Explicit values always win over preset expansion. */
     thresholds?: {
         /** Minimum AI confidence to attempt a heal. Default: 85. Maps to CONFIDENCE_HARD_STOP. */
         minHealerConfidence?: number;
         /** How strictly the Intent Auditor treats SUSPICIOUS verdicts. Default: 'balanced'. */
-        auditorStrictness?: 'strict' | 'balanced' | 'loose';
-        /** Similarity floor for UNKNOWN-role assertion text changes. Default: 0.70. */
-        assertionSimilarityFloor?: number;
+        auditorStrictness?: "strict" | "balanced" | "loose";
     };
     agenticDiscovery?: {
         enabled?: boolean;
@@ -47,7 +45,7 @@ export interface SelaConfig {
         forbiddenSelectors?: string[];
     };
     /** How healed selectors are persisted. Default: 'inPlace'. */
-    updateStrategy?: 'inPlace' | 'commentOnly' | 'branch';
+    updateStrategy?: "inPlace" | "commentOnly" | "branch";
     /**
      * @deprecated Use `prAutomation.strategy = 'directCommit'` instead.
      * When `prAutomation.enabled` is true this flag is forced to false and
@@ -71,14 +69,12 @@ export interface ResolvedThresholds {
     confidenceHardStop: number;
     /** Confidence below which a heal is tagged REQUIRES_REVIEW instead of SAFE. */
     confidenceReviewThreshold: number;
-    /** Similarity floor for UNKNOWN→UNKNOWN assertion text changes. */
-    assertionSimilarityFloor: number;
     /** Minimum auditor confidence to treat a verdict as CONSISTENT. */
     auditorConfidenceMin: number;
     /** When true, SUSPICIOUS in assertion mode yields REQUIRES_REVIEW instead of BLOCKED. */
     allowSuspicious: boolean;
-    /** The resolved strictness name — used for policy-aware log messages. */
-    auditorStrictness: 'strict' | 'balanced' | 'loose';
+    /** The resolved strictness name - used for policy-aware log messages. */
+    auditorStrictness: "strict" | "balanced" | "loose";
 }
 export interface ResolvedPRAutomation {
     enabled: boolean;
@@ -87,7 +83,7 @@ export interface ResolvedPRAutomation {
     reviewThresholds: {
         minConfidenceForDirectCommit: number;
         minAuditorScoreForDirectCommit: number;
-        downgradeTo: Exclude<PRStrategy, 'directCommit'>;
+        downgradeTo: Exclude<PRStrategy, "directCommit">;
     };
     onBugDetected: BugAction;
     branchNameTemplate: string;
@@ -98,7 +94,7 @@ export interface ResolvedPRAutomation {
 }
 export interface ResolvedConfig {
     thresholds: ResolvedThresholds;
-    updateStrategy: 'inPlace' | 'commentOnly' | 'branch';
+    updateStrategy: "inPlace" | "commentOnly" | "branch";
     autoCommit: boolean;
     dnaStoragePath: string;
     prAutomation: ResolvedPRAutomation;
@@ -107,7 +103,21 @@ export interface ResolvedConfig {
         maxSteps: number;
         forbiddenSelectors: string[];
     };
+    /**
+     * When true, every disk-mutating side-effect in the heal pipeline is
+     * suppressed: `fs.writeFileSync`, ts-morph `saveSync`, and git auto-commits.
+     * The heal still runs end-to-end (LLM call, SafetyGuard, candidate diff),
+     * but no source files are modified and no commits are produced.
+     * Sourced from `SELA_DRY_RUN` env var (`1`, `true`, `yes`, `on`).
+     */
+    dryRun: boolean;
+    /**
+     * When true, the healing cache layer is bypassed - every heal request
+     * goes straight to the LLM. Sourced from `SELA_NO_CACHE` env var.
+     */
+    noCache: boolean;
 }
 export declare function resolveThresholds(config: SelaConfig): ResolvedThresholds;
-export declare function resolveConfig(config: SelaConfig): ResolvedConfig;
+export declare function parseEnvBoolean(varName: string, rawValue: string | undefined): boolean;
+export declare function resolveConfig(config: SelaConfig, env?: NodeJS.ProcessEnv): ResolvedConfig;
 //# sourceMappingURL=SelaConfig.d.ts.map

package/dist/config/SelaConfig.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SelaConfig.d.ts","sourceRoot":"","sources":["../../src/config/SelaConfig.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG,IAAI,GAAG,SAAS,GAAG,UAAU,CAAC;AACxE,MAAM,MAAM,SAAS,GAAI,QAAQ,GAAG,aAAa,GAAG,WAAW,CAAC;AAEhE,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,UAAU,CAAC;IAEtB,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE7B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE;QACjB,sEAAsE;QACtE,4BAA4B,CAAC,EAAE,MAAM,CAAC;QACtC,oFAAoF;QACpF,8BAA8B,CAAC,EAAE,MAAM,CAAC;QACxC,oDAAoD;QACpD,WAAW,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;KACnD,CAAC;IAEF,qFAAqF;IACrF,aAAa,CAAC,EAAE,SAAS,CAAC;IAE1B,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAElB,gEAAgE;IAChE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAMD,MAAM,WAAW,UAAU;IACzB,kEAAkE;IAClE,aAAa,CAAC,EAAE,cAAc,GAAG,UAAU,GAAG,YAAY,CAAC;IAE3D,0FAA0F;IAC1F,UAAU,CAAC,EAAE;QACX,0FAA0F;QAC1F,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,uFAAuF;QACvF,iBAAiB,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;QACpD,+EAA+E;QAC/E,wBAAwB,CAAC,EAAE,MAAM,CAAC;KACnC,CAAC;IAEF,gBAAgB,CAAC,EAAE;QACjB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC/B,CAAC;IAEF,8DAA8D;IAC9D,cAAc,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,QAAQ,CAAC;IAEtD;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB,6FAA6F;IAC7F,YAAY,CAAC,EAAE,sBAAsB,CAAC;IAEtC,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;CACvD;AAMD,MAAM,WAAW,kBAAkB;IACjC,0EAA0E;IAC1E,kBAAkB,EAAE,MAAM,CAAC;IAC3B,+EAA+E;IAC/E,yBAAyB,EAAE,MAAM,CAAC;IAClC,mEAAmE;IACnE,wBAAwB,EAAE,MAAM,CAAC;IACjC,mEAAmE;IACnE,oBAAoB,EAAE,MAAM,CAAC;IAC7B,yFAAyF;IACzF,eAAe,EAAE,OAAO,CAAC;IACzB,yEAAyE;IACzE,iBAAiB,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;CACpD;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,UAAU,CAAC;IACrB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE;QAChB,4BAA4B,EAAE,MAAM,CAAC;QACrC,8BAA8B,EAAE,MAAM,CAAC;QACvC,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;KAClD,CAAC;IACF,aAAa,EAAE,SAAS,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,cAAc,EAAE,SAAS,GAAG,aAAa,GAAG,QAAQ,CAAC;IACrD,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,oBAAoB,CAAC;IACnC,gBAAgB,EAAE;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,kBAAkB,EAAE,MAAM,EAAE,CAAC;KAC9B,CAAC;CACH;AAgCD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,kBAAkB,CAkBxE;AAgCD,wBAAgB,aAAa,CAAC,MAAM,EAAE,UAAU,GAAG,cAAc,CA2BhE"}
+{"version":3,"file":"SelaConfig.d.ts","sourceRoot":"","sources":["../../src/config/SelaConfig.ts"],"names":[],"mappings":"AAQA,MAAM,MAAM,UAAU,GAAG,cAAc,GAAG,IAAI,GAAG,SAAS,GAAG,UAAU,CAAC;AACxE,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,aAAa,GAAG,WAAW,CAAC;AAE/D,MAAM,WAAW,sBAAsB;IACrC,iEAAiE;IACjE,OAAO,CAAC,EAAE,OAAO,CAAC;IAElB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,UAAU,CAAC;IAEtB,qEAAqE;IACrE,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;IAE7B,oFAAoF;IACpF,gBAAgB,CAAC,EAAE;QACjB,sEAAsE;QACtE,4BAA4B,CAAC,EAAE,MAAM,CAAC;QACtC,oFAAoF;QACpF,8BAA8B,CAAC,EAAE,MAAM,CAAC;QACxC,oDAAoD;QACpD,WAAW,CAAC,EAAE,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;KACnD,CAAC;IAEF,qFAAqF;IACrF,aAAa,CAAC,EAAE,SAAS,CAAC;IAE1B,iFAAiF;IACjF,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAE5B,yEAAyE;IACzE,aAAa,CAAC,EAAE,MAAM,CAAC;IAEvB,8EAA8E;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAC;IAEtB,mCAAmC;IACnC,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAElB,gEAAgE;IAChE,kBAAkB,CAAC,EAAE,MAAM,CAAC;CAC7B;AAMD,MAAM,WAAW,UAAU;IACzB,kEAAkE;IAClE,aAAa,CAAC,EAAE,cAAc,GAAG,UAAU,GAAG,YAAY,CAAC;IAE3D,0FAA0F;IAC1F,UAAU,CAAC,EAAE;QACX,0FAA0F;QAC1F,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAC7B,uFAAuF;QACvF,iBAAiB,CAAC,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;KACrD,CAAC;IAEF,gBAAgB,CAAC,EAAE;QACjB,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;KAC/B,CAAC;IAEF,8DAA8D;IAC9D,cAAc,CAAC,EAAE,SAAS,GAAG,aAAa,GAAG,QAAQ,CAAC;IAEtD;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,OAAO,CAAC;IAErB,6FAA6F;IAC7F,YAAY,CAAC,EAAE,sBAAsB,CAAC;IAEtC,mEAAmE;IACnE,cAAc,CAAC,EAAE,MAAM,CAAC;IAExB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC;CACvD;AAMD,MAAM,WAAW,kBAAkB;IACjC,0EAA0E;IAC1E,kBAAkB,EAAE,MAAM,CAAC;IAC3B,+EAA+E;IAC/E,yBAAyB,EAAE,MAAM,CAAC;IAClC,mEAAmE;IACnE,oBAAoB,EAAE,MAAM,CAAC;IAC7B,yFAAyF;IACzF,eAAe,EAAE,OAAO,CAAC;IACzB,yEAAyE;IACzE,iBAAiB,EAAE,QAAQ,GAAG,UAAU,GAAG,OAAO,CAAC;CACpD;AAED,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,QAAQ,EAAE,UAAU,CAAC;IACrB,iBAAiB,EAAE,MAAM,EAAE,CAAC;IAC5B,gBAAgB,EAAE;QAChB,4BAA4B,EAAE,MAAM,CAAC;QACrC,8BAA8B,EAAE,MAAM,CAAC;QACvC,WAAW,EAAE,OAAO,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC;KAClD,CAAC;IACF,aAAa,EAAE,SAAS,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,kBAAkB,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,cAAc;IAC7B,UAAU,EAAE,kBAAkB,CAAC;IAC/B,cAAc,EAAE,SAAS,GAAG,aAAa,GAAG,QAAQ,CAAC;IACrD,UAAU,EAAE,OAAO,CAAC;IACpB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,oBAAoB,CAAC;IACnC,gBAAgB,EAAE;QAChB,OAAO,EAAE,OAAO,CAAC;QACjB,QAAQ,EAAE,MAAM,CAAC;QACjB,kBAAkB,EAAE,MAAM,EAAE,CAAC;KAC9B,CAAC;IACF;;;;;;OAMG;IACH,MAAM,EAAE,OAAO,CAAC;IAChB;;;OAGG;IACH,OAAO,EAAE,OAAO,CAAC;CAClB;AA6CD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,UAAU,GAAG,kBAAkB,CAgBxE;AA8CD,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,GAAG,SAAS,GAC3B,OAAO,CAST;AAED,wBAAgB,aAAa,CAC3B,MAAM,EAAE,UAAU,EAClB,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,cAAc,CAgChB"}

package/dist/config/SelaConfig.js

@@ -3,11 +3,21 @@
 // Single source of truth for all Sela configuration types and preset expansion logic.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveThresholds = resolveThresholds;
+exports.parseEnvBoolean = parseEnvBoolean;
 exports.resolveConfig = resolveConfig;
 const PRESET_MAP = {
-    conservative: { minHealerConfidence: 92, auditorStrictness: 'strict', assertionSimilarityFloor: 0.85 },
-    balanced: { minHealerConfidence: 85, auditorStrictness: 'balanced', assertionSimilarityFloor: 0.70 },
-    aggressive: { minHealerConfidence: 75, auditorStrictness: 'loose', assertionSimilarityFloor: 0.55 },
+    conservative: {
+        minHealerConfidence: 92,
+        auditorStrictness: "strict",
+    },
+    balanced: {
+        minHealerConfidence: 85,
+        auditorStrictness: "balanced",
+    },
+    aggressive: {
+        minHealerConfidence: 75,
+        auditorStrictness: "loose",
+    },
 };
 const STRICTNESS_CONFIDENCE = {
     strict: 90,
@@ -25,15 +35,13 @@ function resolveThresholds(config) {
     // Explicit thresholds always win over preset expansion
     const merged = { ...fromPreset, ...config.thresholds };
     const minHealerConfidence = merged.minHealerConfidence ?? 85;
-    const auditorStrictness = merged.auditorStrictness ?? 'balanced';
-    const assertionSimilarityFloor = merged.assertionSimilarityFloor ?? 0.7;
+    const auditorStrictness = merged.auditorStrictness ?? "balanced";
     return {
         confidenceHardStop: minHealerConfidence,
         confidenceReviewThreshold: 95,
-        assertionSimilarityFloor,
         auditorConfidenceMin: STRICTNESS_CONFIDENCE[auditorStrictness],
-        // allowSuspicious is derived — never independently settable to avoid footguns
-        allowSuspicious: auditorStrictness === 'loose',
+        // allowSuspicious is derived - never independently settable to avoid footguns
+        allowSuspicious: auditorStrictness === "loose",
         auditorStrictness,
     };
 }
@@ -41,47 +49,71 @@ function resolvePRAutomation(config) {
     const pr = config.prAutomation ?? {};
     // Legacy bridge: autoCommit:true with no explicit prAutomation block
     // → enable prAutomation in directCommit mode. Explicit prAutomation always wins.
-    const legacyEnabled = config.autoCommit === true &&
-        config.prAutomation === undefined;
+    const legacyEnabled = config.autoCommit === true && config.prAutomation === undefined;
     const enabled = pr.enabled ?? legacyEnabled;
-    const strategy = pr.strategy ?? (legacyEnabled ? 'directCommit' : 'readOnly');
+    const strategy = pr.strategy ?? (legacyEnabled ? "directCommit" : "readOnly");
     return {
         enabled,
         strategy,
-        protectedBranches: pr.protectedBranches ?? ['main', 'master', 'release'],
+        protectedBranches: pr.protectedBranches ?? ["main", "master", "release"],
         reviewThresholds: {
             minConfidenceForDirectCommit: pr.reviewThresholds?.minConfidenceForDirectCommit ?? 0,
             minAuditorScoreForDirectCommit: pr.reviewThresholds?.minAuditorScoreForDirectCommit ?? 0,
-            downgradeTo: pr.reviewThresholds?.downgradeTo ?? 'draftPR',
+            downgradeTo: pr.reviewThresholds?.downgradeTo ?? "draftPR",
         },
-        onBugDetected: pr.onBugDetected ?? 'failCI',
-        branchNameTemplate: pr.branchNameTemplate ?? 'sela/heal-${id}',
-        titleTemplate: pr.titleTemplate ?? 'fix(sela): heal selector in ${fileName}',
+        onBugDetected: pr.onBugDetected ?? "failCI",
+        branchNameTemplate: pr.branchNameTemplate ?? "sela/heal-${id}",
+        titleTemplate: pr.titleTemplate ?? "fix(sela): heal selector in ${fileName}",
         bodyTemplate: pr.bodyTemplate ?? null,
         labels: pr.labels ?? [],
-        reportArtifactPath: pr.reportArtifactPath ?? 'sela-report.html',
+        reportArtifactPath: pr.reportArtifactPath ?? "sela-report.html",
     };
 }
-function resolveConfig(config) {
+// ═══════════════════════════════════════════════════════════════════
+// ENV FLAG PARSING - strict, fail-fast
+//
+// Accepted truthy values (case-insensitive): "1", "true", "yes", "on".
+// Accepted falsy  values (case-insensitive): "0", "false", "no", "off", "".
+// Anything else → throws so misconfigured CI environments fail loudly
+// instead of silently running the wrong mode.
+// ═══════════════════════════════════════════════════════════════════
+const ENV_TRUTHY = new Set(["1", "true", "yes", "on"]);
+const ENV_FALSY = new Set(["0", "false", "no", "off", ""]);
+function parseEnvBoolean(varName, rawValue) {
+    if (rawValue === undefined)
+        return false;
+    const normalized = rawValue.trim().toLowerCase();
+    if (ENV_TRUTHY.has(normalized))
+        return true;
+    if (ENV_FALSY.has(normalized))
+        return false;
+    throw new Error(`[Sela] Invalid value for env var "${varName}": "${rawValue}". ` +
+        `Expected one of: 1, 0, true, false, yes, no, on, off.`);
+}
+function resolveConfig(config, env = process.env) {
     const prAutomation = resolvePRAutomation(config);
     // When prAutomation owns the git pipeline, suppress per-heal git side-effects
     // in SourceUpdater (autoCommit + updateStrategy:'branch') to avoid double-commits.
     const suppressLegacyGit = prAutomation.enabled;
-    const requestedUpdateStrategy = config.updateStrategy ?? 'inPlace';
-    const updateStrategy = suppressLegacyGit && requestedUpdateStrategy === 'branch'
-        ? 'inPlace'
+    const requestedUpdateStrategy = config.updateStrategy ?? "inPlace";
+    const updateStrategy = suppressLegacyGit && requestedUpdateStrategy === "branch"
+        ? "inPlace"
         : requestedUpdateStrategy;
     const autoCommit = suppressLegacyGit ? false : (config.autoCommit ?? false);
+    const dryRun = parseEnvBoolean("SELA_DRY_RUN", env.SELA_DRY_RUN);
+    const noCache = parseEnvBoolean("SELA_NO_CACHE", env.SELA_NO_CACHE);
     return {
         thresholds: resolveThresholds(config),
         updateStrategy,
         autoCommit,
-        dnaStoragePath: config.dnaStoragePath ?? 'fixwright-snapshots',
+        dnaStoragePath: config.dnaStoragePath ?? "fixwright-snapshots",
         prAutomation,
         agenticDiscovery: {
             enabled: config.agenticDiscovery?.enabled ?? false,
             maxSteps: config.agenticDiscovery?.maxSteps ?? 10,
             forbiddenSelectors: config.agenticDiscovery?.forbiddenSelectors ?? [],
         },
+        dryRun,
+        noCache,
     };
 }

package/dist/engine/HealingRegistry.d.ts

@@ -29,7 +29,7 @@ export declare class HealingRegistry {
     /**
      * Resolve a selector within a specific call-site context.
      * Falls back to a context-free lookup ONLY when the fingerprint
-     * has no entry — prevents poisoning while still enabling same-file reuse.
+     * has no entry - prevents poisoning while still enabling same-file reuse.
      */
     resolveSelector(selector: string, ctx?: SelectorContext): string;
     private walkChain;

package/dist/engine/HealingRegistry.js

@@ -1,5 +1,5 @@
 "use strict";
-// src/engine/HealingRegistry.ts — full replacement
+// src/engine/HealingRegistry.ts - full replacement
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.HealingRegistry = void 0;
 const crypto_1 = require("crypto");
@@ -60,7 +60,7 @@ class HealingRegistry {
     /**
      * Resolve a selector within a specific call-site context.
      * Falls back to a context-free lookup ONLY when the fingerprint
-     * has no entry — prevents poisoning while still enabling same-file reuse.
+     * has no entry - prevents poisoning while still enabling same-file reuse.
      */
     resolveSelector(selector, ctx) {
         if (ctx) {
@@ -72,7 +72,7 @@ class HealingRegistry {
                     return resolved;
             }
         }
-        return selector; // No global fallback — intentional
+        return selector; // No global fallback - intentional
     }
     walkChain(selector, store) {
         let current = selector;

package/dist/engine/SelaEngine.d.ts

@@ -5,6 +5,8 @@ export declare class SelaEngine {
     private llmService;
     private snapshotService;
     private safetyGuard;
+    private astDirectiveScanner;
+    private healingCache;
     private config;
     private dnaBuffer;
     private healMetaBuffer;
@@ -15,17 +17,18 @@ export declare class SelaEngine {
     private _toReportFile;
     private _safeReadLine;
     /**
-     * Capture the native `git diff --unified=1 HEAD -- <file>` for the file the
-     * AST mutation just wrote to. Returns an empty string when git is not
-     * available, the file is not tracked, or any other failure — callers must
-     * treat empty output as "no diff captured" and fall back to a direct disk
-     * read of the mutated line.
+     * Clean-Room isolated diff: render a unified diff between the file's
+     * pre-Sela disk snapshot (`contentBefore`) and the post-write disk state
+     * (`contentAfter`) captured by `WorkspaceSnapshotService`. Returns "" when
+     * the file was never tracked (no snapshot) or the AST mutation produced
+     * no net change.
      *
-     * Path safety: the absolute path is always wrapped in double quotes after
-     * escaping any embedded double quotes, which makes the call safe on Windows
-     * paths containing spaces or backslashes as well as POSIX paths.
+     * This is what makes the HTML report immune to developer dirty edits: any
+     * pre-existing uncommitted changes live in BOTH buffers identically and
+     * are therefore filtered out by the diff. The output contains only Sela's
+     * selector swap.
      */
-    private _captureGitDiff;
+    private _captureIsolatedDiff;
     /**
      * Walk a unified diff and pull out the first removed line and the first
      * added line so the legacy report fields (`oldCodeLine`, `newCodeLine`)
@@ -33,7 +36,7 @@ export declare class SelaEngine {
      * `gitUnifiedDiff` payload yet.
      *
      * Carefully skips the diff preamble (--- a/file, +++ b/file, "diff ",
-     * "index ", rename headers) — those lines would otherwise be mistaken for
+     * "index ", rename headers) - those lines would otherwise be mistaken for
      * a -/+ change pair and produce nonsense like the original "line replaced
      * by itself" output. Real change lines only count once the parser has seen
      * a "@@" hunk header.

package/dist/engine/SelaEngine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"SelaEngine.d.ts","sourceRoot":"","sources":["../../src/engine/SelaEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAOxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAE7C,OAAO,EAAe,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAyChE,qBAAa,UAAU;IACrB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,SAAS,CAA6C;IAC9D,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,eAAe,CAAkC;;IAanD,YAAY,CAChB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAiDnB,IAAI,CACR,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,QAAmB,GAC5B,OAAO,CAAC,MAAM,CAAC;IAyclB,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,aAAa;IAarB;;;;;;;;;;OAUG;IACH,OAAO,CAAC,eAAe;IAwBvB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,2BAA2B;IA4BnC,OAAO,CAAC,yBAAyB;IAwBjC,OAAO,CAAC,kBAAkB;IA8B1B,OAAO,CAAC,oBAAoB;IAuC5B,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAIrD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;YA6FtB,aAAa;IAsB3B,OAAO,CAAC,0BAA0B;IAiClC,OAAO,CAAC,WAAW;IA6Bb,wBAAwB,CAC5B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM;CAqBnB;AAED,OAAO,EAAE,CAAC"}
+{"version":3,"file":"SelaEngine.d.ts","sourceRoot":"","sources":["../../src/engine/SelaEngine.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAaxC,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AAG7C,OAAO,EAAe,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AAmEhE,qBAAa,UAAU;IACrB,OAAO,CAAC,UAAU,CAAa;IAC/B,OAAO,CAAC,eAAe,CAAkB;IACzC,OAAO,CAAC,WAAW,CAAc;IACjC,OAAO,CAAC,mBAAmB,CAAmB;IAC9C,OAAO,CAAC,YAAY,CAAsB;IAC1C,OAAO,CAAC,MAAM,CAAiB;IAC/B,OAAO,CAAC,SAAS,CAA6C;IAC9D,OAAO,CAAC,cAAc,CAAoC;IAC1D,OAAO,CAAC,eAAe,CAAkC;;IAqBnD,YAAY,CAChB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;IAiDnB,IAAI,CACR,IAAI,EAAE,IAAI,EACV,YAAY,EAAE,MAAM,EACpB,mBAAmB,EAAE,MAAM,EAC3B,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,EACZ,QAAQ,GAAE,QAAmB,GAC5B,OAAO,CAAC,MAAM,CAAC;IAilBlB,OAAO,CAAC,aAAa;IAYrB,OAAO,CAAC,aAAa;IAerB;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,oBAAoB;IAsB5B;;;;;;;;;;;OAWG;IACH,OAAO,CAAC,2BAA2B;IA4BnC,OAAO,CAAC,yBAAyB;IAmCjC,OAAO,CAAC,kBAAkB;IA8D1B,OAAO,CAAC,oBAAoB;IAyD5B,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;IAIrD,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC;IAItE,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC;YAqItB,aAAa;IAsB3B,OAAO,CAAC,0BAA0B;IAiClC,OAAO,CAAC,WAAW;IA6Bb,wBAAwB,CAC5B,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM;CAqBnB;AAED,OAAO,EAAE,CAAC"}