sela-core 1.0.5 → 1.0.7

package/dist/services/InteractiveReview.js

@@ -0,0 +1,218 @@
+"use strict";
+// src/services/InteractiveReview.ts
+//
+// Local DX — Interactive CLI review of post-run heals.
+//
+// Runs in the REPORTER (main process) only — workers must never block on
+// stdin. The reporter reads cross-process state from
+// `PendingPromptLedger` and calls `runInteractiveReview()` with the
+// merged entry list.
+//
+// For every entry: prints `[Sela] 🔧 Healed selector in <FileName>`, the
+// isolated unified diff, a clickable `vscode://file/<abs>:<line>`
+// deeplink, then prompts the developer. 'Y' / 'y' / Enter keeps the
+// on-disk fix (the worker already wrote it); 'N' / 'n' rewrites the file
+// back to `contentBefore` (the pre-heal state captured by
+// `WorkspaceSnapshotService.preWrite()` in the worker).
+//
+// All I/O is injectable so this can be unit-tested without a real TTY.
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.runInteractiveReview = runInteractiveReview;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const readline = __importStar(require("readline"));
+const chalk_1 = __importDefault(require("chalk"));
+const IsolatedDiff_1 = require("../utils/IsolatedDiff");
+const DEFAULT_PROMPT = "[Sela] Apply this fix? (Y/n): ";
+/**
+ * Run the post-run interactive review loop sequentially across every
+ * pending entry. Returns one outcome per entry so callers can log / test
+ * the resulting Apply / Reject decisions.
+ *
+ * Sequential by design — every prompt `await`s before the next entry is
+ * rendered. Concurrent prompts on a single TTY would interleave output.
+ */
+async function runInteractiveReview(deps) {
+    const log = deps.log ?? ((m) => process.stdout.write(m + "\n"));
+    const prompt = deps.prompt ?? defaultPrompt;
+    const rollback = deps.rollback ?? defaultRollback;
+    const entries = deps.entries ?? [];
+    const outcomes = [];
+    if (entries.length === 0)
+        return outcomes;
+    // Headline banner — surfaces even when downstream chalk/readline
+    // output is suppressed by the host terminal multiplexer (e.g.
+    // Playwright's reporter-level stdio interception).
+    log("");
+    log(chalk_1.default.bold.bgCyan.black(` [Sela] Local DX Review — ${entries.length} pending fix(es) `));
+    for (const entry of entries) {
+        renderEntry(entry, log);
+        const answer = await prompt(chalk_1.default.cyan(DEFAULT_PROMPT));
+        const decision = parseDecision(answer);
+        if (decision === "apply") {
+            log(chalk_1.default.green(`[Sela] ✅ Fix kept on disk: ${entry.relativePath}`));
+            outcomes.push({ file: entry.absolutePath, applied: true });
+        }
+        else {
+            try {
+                rollback(entry);
+                log(chalk_1.default.yellow(`[Sela] ↩️  Rolled back: ${entry.relativePath} (restored to pre-heal state)`));
+            }
+            catch (err) {
+                log(chalk_1.default.red(`[Sela] ⚠️  Rollback failed for ${entry.relativePath}: ${err.message}`));
+            }
+            outcomes.push({ file: entry.absolutePath, applied: false });
+        }
+    }
+    log("");
+    return outcomes;
+}
+function renderEntry(entry, log) {
+    const fileName = path.basename(entry.absolutePath);
+    const diff = (0, IsolatedDiff_1.generateUnifiedDiff)(entry.contentBefore, entry.contentAfter, {
+        filePath: entry.relativePath,
+    });
+    log("");
+    log(chalk_1.default.bold(`[Sela] 🔧 Healed selector in ${fileName}`));
+    log("");
+    log(colorizeDiff(diff));
+    log("");
+    log(`👉 To review and accept this fix directly in VS Code, click here:`);
+    log(`   ${chalk_1.default.cyan(buildVsCodeLink(entry.absolutePath, entry.lineNumber))}`);
+    log("");
+}
+function colorizeDiff(diff) {
+    if (!diff)
+        return chalk_1.default.dim("(no diff)");
+    return diff
+        .split("\n")
+        .map((row) => {
+        if (row.startsWith("+++") ||
+            row.startsWith("---") ||
+            row.startsWith("diff --git")) {
+            return chalk_1.default.bold(row);
+        }
+        if (row.startsWith("@@"))
+            return chalk_1.default.cyan(row);
+        if (row.startsWith("+"))
+            return chalk_1.default.green(row);
+        if (row.startsWith("-"))
+            return chalk_1.default.red(row);
+        return row;
+    })
+        .join("\n");
+}
+function buildVsCodeLink(absPath, line) {
+    const normalised = absPath.split(path.sep).join("/");
+    return line && line > 0
+        ? `vscode://file/${normalised}:${line}`
+        : `vscode://file/${normalised}`;
+}
+function parseDecision(raw) {
+    const trimmed = (raw ?? "").trim().toLowerCase();
+    // Empty (Enter) ⇒ apply. 'y' / 'yes' ⇒ apply. 'n' / 'no' ⇒ reject.
+    // Anything else ⇒ apply (default-safe — never silently destroy work).
+    if (trimmed === "" || trimmed === "y" || trimmed === "yes")
+        return "apply";
+    if (trimmed === "n" || trimmed === "no")
+        return "reject";
+    return "apply";
+}
+/**
+ * Default rollback — rewrites `contentBefore` to disk. Honours the
+ * `createdBySela` flag so files Sela CREATED from nothing get unlinked
+ * instead of being replaced with an empty buffer.
+ */
+function defaultRollback(entry) {
+    if (entry.createdBySela) {
+        if (fs.existsSync(entry.absolutePath)) {
+            fs.unlinkSync(entry.absolutePath);
+        }
+        return;
+    }
+    fs.writeFileSync(entry.absolutePath, entry.contentBefore, "utf8");
+}
+/**
+ * Bind `readline` to the live stdin/stdout. Reporter-only — workers must
+ * never reach this code path (they have no TTY and would deadlock).
+ *
+ * Hardening:
+ *   • If stdin is not a TTY (CI, non-interactive shell, Playwright reporter
+ *     context that detached stdio), default to Apply ('y') without blocking.
+ *   • Explicitly `resume()` stdin — Node pauses it by default once any other
+ *     consumer (readline-from-an-earlier-iteration, raw-mode toggles) lets go.
+ *   • Write the prompt to `stderr` so Playwright's stdout summary buffer does
+ *     not overwrite or strip the question line.
+ */
+function defaultPrompt(question) {
+    const stdinIsTty = process.stdin.isTTY === true;
+    if (!stdinIsTty) {
+        process.stderr.write(question + "y (no TTY — auto-apply)\n");
+        return Promise.resolve("y");
+    }
+    return new Promise((resolve) => {
+        try {
+            process.stdin.resume();
+        }
+        catch {
+            // Already resumed / not resumable — readline will still try.
+        }
+        // `terminal: false` reads stdin line-buffered without raw-mode tricks.
+        // This is reliable for both real TTYs AND piped harnesses (CI smoke
+        // tests, child-process drivers). `terminal: true` only adds history /
+        // arrow-key support, which we don't need for a single Y/N prompt and
+        // which mis-parses piped input on Windows.
+        process.stderr.write(question);
+        const rl = readline.createInterface({
+            input: process.stdin,
+            output: process.stderr,
+            terminal: false,
+        });
+        let settled = false;
+        const finalise = (answer) => {
+            if (settled)
+                return;
+            settled = true;
+            rl.close();
+            resolve(answer);
+        };
+        rl.once("line", (line) => finalise(line));
+        rl.once("close", () => finalise("y"));
+    });
+}

package/dist/services/LLMService.d.ts

@@ -1,3 +1,4 @@
+import Anthropic from "@anthropic-ai/sdk";
 import { FixRequest } from "../types";
 export interface SelectorSegment {
     type: "frame" | "element";
@@ -76,14 +77,34 @@ export interface FixResponse {
      */
     chainSegments?: SmartChainSegment[];
     originalChainHint?: SmartChainSegment[];
-    confidence: number;
+    /**
+     * Confidence score 0-100. Undefined when the model omitted it or returned a
+     * non-finite value — downstream code must treat undefined as "unknown" and
+     * render "n/a" rather than synthesising a 0.
+     */
+    confidence?: number;
     explanation: string;
     new_selector?: string | null;
     contentChange?: ContentChange;
 }
+/**
+ * Constructor options for LLMService.
+ *
+ * - `anthropic`: pre-built Anthropic client. Tests use this to inject a
+ *   mock client without touching env vars or network.
+ * - `apiKey`: override the env-based ANTHROPIC_API_KEY when constructing
+ *   the default client.
+ * - `model`: override the Sonnet model id (lets tests pin the SDK call).
+ */
+export interface LLMServiceOptions {
+    anthropic?: Anthropic;
+    apiKey?: string;
+    model?: string;
+}
 export declare class LLMService {
     private anthropic;
-    constructor();
+    private readonly model;
+    constructor(opts?: LLMServiceOptions);
     private cleanJson;
     /**
      * Attempts to infer contentChange when the AI did not return the field.

package/dist/services/LLMService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LLMService.d.ts","sourceRoot":"","sources":["../../src/services/LLMService.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAQtC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IAEjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC1C;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GACD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAEpD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,GAAG,WAAW,CAAC;IAC9B;;;OAGG;IACH,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B;;OAEG;IACH,aAAa,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACpC,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAwKD,qBAAa,UAAU;IACrB,OAAO,CAAC,SAAS,CAAY;;IAQ7B,OAAO,CAAC,SAAS;IAejB;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IA6FpB,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;CAsKxD"}
+{"version":3,"file":"LLMService.d.ts","sourceRoot":"","sources":["../../src/services/LLMService.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AAStC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,IAAI,EAAE,SAAS,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IAEjB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GAC1C;IACE,IAAI,EAAE,WAAW,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,OAAO,CAAC;IAEhB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,GACD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAEpD;IAAE,IAAI,EAAE,kBAAkB,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GAC3D;IAAE,IAAI,EAAE,aAAa,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACvC;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAE,GACrD;IACE,IAAI,EAAE,QAAQ,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,GACD;IAAE,IAAI,EAAE,OAAO,CAAA;CAAE,GACjB;IAAE,IAAI,EAAE,MAAM,CAAA;CAAE,GAChB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAEnC,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,OAAO,GAAG,WAAW,CAAC;IAC9B;;;OAGG;IACH,QAAQ,EAAE,eAAe,EAAE,CAAC;IAC5B;;OAEG;IACH,aAAa,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACpC,iBAAiB,CAAC,EAAE,iBAAiB,EAAE,CAAC;IACxC;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,aAAa,CAAC,EAAE,aAAa,CAAC;CAC/B;AAqLD;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,qBAAa,UAAU;IACrB,OAAO,CAAC,SAAS,CAAY;IAC7B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;gBAEnB,IAAI,GAAE,iBAAsB;IAoBxC,OAAO,CAAC,SAAS;IAejB;;;;;;;;OAQG;IACH,OAAO,CAAC,kBAAkB;IA6FpB,MAAM,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,WAAW,CAAC;CAqLxD"}

package/dist/services/LLMService.js

@@ -39,6 +39,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.LLMService = void 0;
 const sdk_1 = __importDefault(require("@anthropic-ai/sdk"));
 const dotenv = __importStar(require("dotenv"));
+const SelaError_1 = require("../errors/SelaError");
 dotenv.config();
 // ─────────────────────────────────────────────────────────────────
 // SYSTEM PROMPT
@@ -103,21 +104,34 @@ The healing system depends on the attribute value being present in your response
 If the element's text changed, you MUST include:
   "contentChange": { "oldText": "<previous>", "newText": "<current>" }
 
+### CONFIDENCE SCORE (MANDATORY)
+You MUST include a numeric "confidence" field — an INTEGER in the range 0-100 —
+representing how certain you are that the returned chain will resolve the
+intended element on the next test run. Use this rubric:
+  - 90-100: stable id, data-testid, or unique role+name — zero ambiguity in the DOM.
+  - 70-89:  strong semantic match, but some structural drift or competing candidates.
+  - 50-69:  best-guess match — multiple plausible candidates required disambiguation.
+  - 1-49:   speculative match — return this only when no better candidate exists.
+NEVER omit this field. NEVER return it as a string, boolean, or null.
+Reports rendered downstream will show "n/a" when this field is missing — which
+is a clear failure signal to the developer reviewing the heal.
+
 ### MANDATORY OUTPUT FORMAT
 Return ONLY valid JSON.
 
 Example output — Identifying a specific button in a list row:
 {
   "status": "FIXED",
+  "confidence": 92,
   "chainSegments": [
     { "type": "locator", "selector": ".user-item" },
     { "type": "filter", "hasText": "Bob Smith" },
     { "type": "getByRole", "role": "button", "name": "Modify Bob" }
   ],
   "segments": [
-    { 
-      "type": "element", 
-      "selector": ".user-item >> internal:has-text=\"Bob Smith\"i >> internal:role=button[name=\"Modify Bob\"i]" 
+    {
+      "type": "element",
+      "selector": ".user-item >> internal:has-text=\"Bob Smith\"i >> internal:role=button[name=\"Modify Bob\"i]"
     }
   ],
   "explanation": "Updated container to .user-item and targeted the button by its new semantic name 'Modify Bob' to ensure a unique match."
@@ -186,15 +200,24 @@ function inferOriginalChainHint(selector) {
     }
     return segments;
 }
-// ─────────────────────────────────────────────────────────────────
-// LLM SERVICE
-// ─────────────────────────────────────────────────────────────────
+const DEFAULT_LLM_MODEL = "claude-sonnet-4-20250514";
 class LLMService {
     anthropic;
-    constructor() {
-        const apiKey = process.env.ANTHROPIC_API_KEY || "";
-        if (!apiKey)
-            throw new Error("ANTHROPIC_API_KEY not found in .env");
+    model;
+    constructor(opts = {}) {
+        this.model = opts.model ?? DEFAULT_LLM_MODEL;
+        if (opts.anthropic) {
+            this.anthropic = opts.anthropic;
+            return;
+        }
+        const apiKey = opts.apiKey ?? process.env.ANTHROPIC_API_KEY ?? "";
+        if (!apiKey) {
+            throw new SelaError_1.SelaError({
+                subsystem: "LLMService",
+                code: SelaError_1.LLM_SERVICE_CODES.NO_API_KEY,
+                reason: "ANTHROPIC_API_KEY not found — pass an `anthropic` client or `apiKey` to LLMService(), or set the env var",
+            });
+        }
         this.anthropic = new sdk_1.default({ apiKey });
     }
     cleanJson(text) {
@@ -331,7 +354,7 @@ ${request.currentDom}
 Return ONLY a raw JSON object — no markdown, no preamble.`;
         try {
             const msg = await this.anthropic.messages.create({
-                model: "claude-sonnet-4-20250514",
+                model: this.model,
                 max_tokens: 1024,
                 system: SYSTEM_PROMPT_TEXT +
                     "\nIMPORTANT: Respond ONLY with a raw JSON object.",
@@ -343,6 +366,19 @@ Return ONLY a raw JSON object — no markdown, no preamble.`;
             if (!jsonString)
                 throw new Error("AI did not return a valid JSON object");
             const parsed = JSON.parse(jsonString);
+            // ── Normalise confidence: keep only finite numbers in [0,100] ─────
+            // Anything else (undefined, NaN, null, string, out-of-range) collapses
+            // to `undefined` so reports render "n/a" instead of synthesising 0.
+            const rawConf = parsed.confidence;
+            if (typeof rawConf === "number" && Number.isFinite(rawConf)) {
+                parsed.confidence = Math.max(0, Math.min(100, Math.round(rawConf)));
+            }
+            else {
+                if (rawConf !== undefined) {
+                    console.warn(`[LLMService] ⚠️  Discarded non-numeric confidence: ${JSON.stringify(rawConf)}`);
+                }
+                parsed.confidence = undefined;
+            }
             // ── Normalize chainSegments → segments (legacy) ───────────────────
             if (parsed.chainSegments && Array.isArray(parsed.chainSegments)) {
                 // Reconstruct a flat new_selector from chain segments for legacy paths
@@ -430,7 +466,7 @@ Return ONLY a raw JSON object — no markdown, no preamble.`;
                 status: "NOT_FOUND",
                 segments: [],
                 new_selector: null,
-                confidence: 0,
+                confidence: undefined,
                 explanation: `AI Error: ${error.message}`,
             };
         }

package/dist/services/PRAutomationService.d.ts

@@ -1,5 +1,6 @@
 import type { ResolvedPRAutomation, PRStrategy, BugAction } from "../config/SelaConfig";
 import type { HealedEvent, ProtectedEvent } from "./HealReportService";
+import { type WorkspaceSnapshotService } from "./WorkspaceSnapshotService";
 export interface BranchInfo {
     branch: string | null;
     isPR: boolean;
@@ -10,8 +11,14 @@ export interface StrategyDecision {
     effective: PRStrategy;
     configured: PRStrategy;
     downgradeReason: "PROTECTED_BRANCH" | "LOW_CONFIDENCE" | "LOW_AUDITOR" | null;
-    minAiConfidence: number;
-    minAuditorConfidence: number;
+    /**
+     * Lowest AI confidence observed across this session's heals, or `undefined`
+     * when no heal carried a numeric confidence (LLM omitted the field). Render
+     * via `fmtPct` so the absence reads as "n/a" instead of 0%.
+     */
+    minAiConfidence: number | undefined;
+    /** Same semantics as `minAiConfidence`, for the auditor's adjusted score. */
+    minAuditorConfidence: number | undefined;
 }
 export interface ExecuteContext {
     cwd: string;
@@ -19,12 +26,25 @@ export interface ExecuteContext {
 }
 export declare function detectBranch(cwd?: string): BranchInfo;
 export declare function decideEffectiveStrategy(cfg: ResolvedPRAutomation, branch: string | null, heals: HealedEvent[]): StrategyDecision;
+export declare function fmtPct(v: unknown): string;
 export interface ExecutionResult {
     effective: PRStrategy;
     prUrl: string | null;
     branchPushed: string | null;
     errors: string[];
 }
-export declare function execute(cfg: ResolvedPRAutomation, decision: StrategyDecision, heals: HealedEvent[], branchInfo: BranchInfo, ctx: ExecuteContext): Promise<ExecutionResult>;
+/**
+ * Clean-Room execution lifecycle.
+ *
+ * The legacy flow committed the developer's whole dirty working tree onto
+ * the PR branch — polluting reviewers with `test.only`, commented debug
+ * blocks, etc. This refactor isolates Sela's specific AST changes onto an
+ * ephemeral branch, leaves the developer's local workspace byte-identical
+ * to its pre-Sela state, and is wrapped in a try/finally that restores
+ * the workspace even on mid-flight crashes.
+ */
+export declare function execute(cfg: ResolvedPRAutomation, decision: StrategyDecision, heals: HealedEvent[], branchInfo: BranchInfo, ctx: ExecuteContext, 
+/** Injectable for tests — defaults to the module singleton. */
+workspace?: WorkspaceSnapshotService): Promise<ExecutionResult>;
 export declare function handleBugDetected(action: BugAction, events: ProtectedEvent[], branchInfo: BranchInfo, ctx: ExecuteContext): Promise<void>;
 //# sourceMappingURL=PRAutomationService.d.ts.map

package/dist/services/PRAutomationService.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"PRAutomationService.d.ts","sourceRoot":"","sources":["../../src/services/PRAutomationService.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,oBAAoB,EACpB,UAAU,EACV,SAAS,EACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,WAAW,EACX,cAAc,EACf,MAAM,qBAAqB,CAAC;AAM7B,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,kBAAkB,GAAG,gBAAgB,GAAG,aAAa,GAAG,IAAI,CAAC;IAC9E,eAAe,EAAE,MAAM,CAAC;IACxB,oBAAoB,EAAE,MAAM,CAAC;CAC9B;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AA2ED,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAsB,GAAG,UAAU,CA8EpE;AAMD,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,oBAAoB,EACzB,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,KAAK,EAAE,WAAW,EAAE,GACnB,gBAAgB,CAuDlB;AA6DD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,UAAU,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED,wBAAsB,OAAO,CAC3B,GAAG,EAAE,oBAAoB,EACzB,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,WAAW,EAAE,EACpB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,eAAe,CAAC,CA4J1B;AAMD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,cAAc,EAAE,EACxB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,IAAI,CAAC,CA0Ff"}
+{"version":3,"file":"PRAutomationService.d.ts","sourceRoot":"","sources":["../../src/services/PRAutomationService.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EACV,oBAAoB,EACpB,UAAU,EACV,SAAS,EACV,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EACV,WAAW,EACX,cAAc,EACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAGL,KAAK,wBAAwB,EAC9B,MAAM,4BAA4B,CAAC;AAUpC,MAAM,WAAW,UAAU;IACzB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,IAAI,EAAE,OAAO,CAAC;IACd,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,MAAM,EAAE,KAAK,GAAG,KAAK,GAAG,MAAM,CAAC;CAChC;AAED,MAAM,WAAW,gBAAgB;IAC/B,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,UAAU,CAAC;IACvB,eAAe,EAAE,kBAAkB,GAAG,gBAAgB,GAAG,aAAa,GAAG,IAAI,CAAC;IAC9E;;;;OAIG;IACH,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,6EAA6E;IAC7E,oBAAoB,EAAE,MAAM,GAAG,SAAS,CAAC;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;CAC/B;AA2ED,wBAAgB,YAAY,CAAC,GAAG,GAAE,MAAsB,GAAG,UAAU,CA8EpE;AAMD,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,oBAAoB,EACzB,MAAM,EAAE,MAAM,GAAG,IAAI,EACrB,KAAK,EAAE,WAAW,EAAE,GACnB,gBAAgB,CAgElB;AAMD,wBAAgB,MAAM,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAEzC;AAuFD,MAAM,WAAW,eAAe;IAC9B,SAAS,EAAE,UAAU,CAAC;IACtB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;;;GASG;AACH,wBAAsB,OAAO,CAC3B,GAAG,EAAE,oBAAoB,EACzB,QAAQ,EAAE,gBAAgB,EAC1B,KAAK,EAAE,WAAW,EAAE,EACpB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,cAAc;AACnB,+DAA+D;AAC/D,SAAS,GAAE,wBAAkD,GAC5D,OAAO,CAAC,eAAe,CAAC,CAkG1B;AA4SD,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,SAAS,EACjB,MAAM,EAAE,cAAc,EAAE,EACxB,UAAU,EAAE,UAAU,EACtB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,IAAI,CAAC,CA0Ff"}