bootproof 0.1.0 → 0.4.0

package/dist/repair.d.ts

@@ -0,0 +1,142 @@
+import { type SignatureTrustResult } from "./proof.js";
+import { type RepairAction, type RepairReceiptBase } from "./repair-safety.js";
+import { type DeterministicRepairCandidate } from "./repair-playbooks.js";
+import type { Attestation, FailureClass, PackageManager } from "./types.js";
+import type { RequestedAiRepair } from "./ai-repair.js";
+export * from "./repair-safety.js";
+export * from "./repair-playbooks.js";
+export type RepairKind = "repo-diff" | "plan-step" | "environment";
+export interface RepairReceipt extends RepairReceiptBase {
+    tool?: string;
+    repo?: {
+        remote: string | null;
+        commit: string | null;
+        dirty: boolean | null;
+    };
+    environment?: {
+        os: string;
+        arch: string;
+        node: string;
+    };
+    failure?: {
+        class: FailureClass;
+        beforeAttestationSha256: string;
+    };
+    repair?: {
+        id: string;
+        kind: RepairKind;
+        description: string;
+        diff: string | null;
+        filesChanged: string[];
+        fileChanges: RepairReceiptFileChange[];
+        preconditions: RepairReceiptPrecondition[];
+        planDelta: string | null;
+        envDelta: string | null;
+    };
+    verification?: {
+        before: {
+            booted: false;
+            failureClass: FailureClass;
+            attestationSha256: string;
+        };
+        after: {
+            booted: boolean;
+            bootproofOrchestrated: boolean;
+            healthObservation: string;
+            attestationSha256: string;
+        };
+    };
+    startedAt?: string;
+    finishedAt?: string;
+    signer: {
+        publicKey: string;
+        algorithm: "ed25519";
+    } | null;
+    signature: string | null;
+    /**
+     * AI evidence captured for auditability when source === "ai_suggested".
+     * Contains the redacted prompt context and the AI's structured suggestion.
+     * Required by the AGENTS.md constitution: an auditor must be able to
+     * reconstruct what the AI proposed without trusting the AI provider.
+     */
+    aiEvidence?: {
+        provider: "openai" | "anthropic";
+        model: string;
+        /** The redacted bootproof/ai-repair-context/v1 object sent to the AI. */
+        context: Record<string, unknown>;
+        /** The validated bootproof/ai-repair-suggestion/v1 object the AI returned. */
+        suggestion: Record<string, unknown>;
+    };
+}
+export interface RepairResult {
+    schema: "bootproof/repair-result/v1";
+    repaired: boolean;
+    failureClass: FailureClass | null;
+    repairId: string | null;
+    receiptPath: string | null;
+    patchPath: string | null;
+    afterAttestationPath: string | null;
+    explanation: string;
+}
+export interface RepairApplyResult {
+    schema: "bootproof/repair-apply-result/v1";
+    applied: boolean;
+    receiptPath: string;
+    filesChanged: string[];
+    explanation: string;
+}
+export interface RepairOptions {
+    provider?: "docker" | "local";
+    unsafeLocal: boolean;
+    timeoutMs: number;
+    port?: number;
+    remoteSource?: string;
+    commandApproved?: boolean;
+    actionApproved?: boolean;
+    /** The full AI repair request (context + suggestion) to embed in the receipt for audit. */
+    aiRepair?: RequestedAiRepair | null;
+}
+export interface LatestRepairCandidate {
+    attestation: Attestation;
+    candidate: DeterministicRepairCandidate;
+}
+export interface RepairFileChange {
+    path: string;
+    before: string | null;
+    after: string;
+}
+export interface RepairReceiptFileChange {
+    path: string;
+    beforeSha256: string | null;
+    afterSha256: string;
+    beforeContent: string | null;
+    afterContent: string;
+}
+export interface RepairReceiptPrecondition {
+    path: string;
+    sha256: string;
+}
+export declare function assertRepairTargetPath(repoPath: string, file: string): void;
+export declare function assertRepairScope(changes: RepairFileChange[]): void;
+export declare function verifyRepairReceipt(receipt: RepairReceipt): boolean;
+export declare function evaluateRepairReceiptSignature(receipt: RepairReceipt): SignatureTrustResult;
+export declare function sha256Attestation(attestation: Attestation): string;
+export declare function composePortRepair(source: string, service: string, occupiedPort: number, replacementPort: number, containerPort: number): string;
+export declare function packageManagerActivationCommand(packageManager: PackageManager, version: string | null): string | null;
+export declare function prismaRepairCommand(repo: string): string;
+export interface MigrationRepair {
+    id: string;
+    framework: "prisma" | "django" | "rails" | "knex" | "drizzle";
+    command: string;
+    source: string;
+}
+export declare function migrationRepairFor(repo: string, evidence: string): MigrationRepair | null;
+export declare function registeredRemediationsFor(failureClass: FailureClass): {
+    id: string;
+    kind: RepairKind;
+}[];
+export declare function latestDeterministicRepairCandidate(repoPath: string, requestedProvider?: "docker" | "local"): LatestRepairCandidate | null;
+export declare function latestFailedAttestation(repoPath: string, requestedProvider?: "docker" | "local"): Attestation | null;
+export declare function executeAiSuggestedRepair(repoPath: string, before: Attestation, action: RepairAction, options: RepairOptions): Promise<RepairResult>;
+export declare function applyVerifiedRepair(repoPath: string, receiptFile?: string): RepairApplyResult;
+export declare function repairRepo(repoPath: string, options: RepairOptions): Promise<RepairResult>;