bootproof 0.1.0 → 0.4.0

package/docs/schemas/repair-receipt-v1.schema.json

@@ -0,0 +1,221 @@
+{
+  "$schema": "https://json-schema.org/draft/2020-12/schema",
+  "$id": "https://bootproof.dev/schemas/repair-receipt-v1.schema.json",
+  "title": "BootProof Repair Receipt v1",
+  "type": "object",
+  "additionalProperties": false,
+  "required": [
+    "schema",
+    "repairId",
+    "createdAt",
+    "bootproofVersion",
+    "source",
+    "beforeFailureClass",
+    "beforeEvidenceHash",
+    "proposedAction",
+    "actionType",
+    "mutationScope",
+    "riskLevel",
+    "userApprovalRequired",
+    "applyResult",
+    "progressed",
+    "verified",
+    "explanation",
+    "redactionsApplied"
+  ],
+  "properties": {
+    "schema": { "const": "bootproof/repair-receipt/v1" },
+    "repairId": { "type": "string", "minLength": 1 },
+    "createdAt": { "type": "string", "format": "date-time" },
+    "bootproofVersion": { "type": "string", "minLength": 1 },
+    "source": { "enum": ["deterministic_playbook", "ai_suggested"] },
+    "beforeFailureClass": { "type": "string", "minLength": 1 },
+    "beforeEvidenceHash": { "$ref": "#/$defs/hash" },
+    "proposedAction": { "$ref": "repair-action-v1.schema.json" },
+    "actionType": { "enum": ["command", "patch", "instruction"] },
+    "mutationScope": { "enum": ["none", "repo_only", "project_cache", "container_runtime", "host_tool_install", "host_network", "kubernetes_cluster", "database", "service", "credentials", "unknown"] },
+    "riskLevel": { "enum": ["none", "low", "medium", "high", "blocked"] },
+    "userApprovalRequired": { "type": "boolean" },
+    "approvedAt": { "type": "string", "format": "date-time" },
+    "appliedAt": { "type": "string", "format": "date-time" },
+    "applyResult": { "$ref": "#/$defs/applyResult" },
+    "afterFailureClass": { "type": "string", "minLength": 1 },
+    "progressed": { "type": "boolean" },
+    "verified": { "type": "boolean" },
+    "explanation": { "type": "string", "minLength": 1 },
+    "redactionsApplied": {
+      "type": "array",
+      "items": { "type": "string" },
+      "uniqueItems": true
+    },
+    "tool": { "type": "string" },
+    "repo": { "$ref": "#/$defs/repo" },
+    "environment": { "$ref": "#/$defs/environment" },
+    "failure": { "$ref": "#/$defs/failure" },
+    "repair": { "$ref": "#/$defs/legacyRepair" },
+    "verification": { "$ref": "#/$defs/verification" },
+    "aiEvidence": { "$ref": "#/$defs/aiEvidence" },
+    "startedAt": { "type": "string", "format": "date-time" },
+    "finishedAt": { "type": "string", "format": "date-time" },
+    "signer": {
+      "anyOf": [
+        { "$ref": "#/$defs/signer" },
+        { "type": "null" }
+      ]
+    },
+    "signature": { "type": ["string", "null"] }
+  },
+  "$defs": {
+    "hash": { "type": "string", "pattern": "^[0-9a-f]{64}$" },
+    "applyResult": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["status", "exitCode", "filesChanged", "evidence"],
+      "properties": {
+        "status": { "enum": ["not_applied", "applied", "failed"] },
+        "exitCode": { "type": ["integer", "null"] },
+        "filesChanged": {
+          "type": "array",
+          "items": { "type": "string" }
+        },
+        "evidence": { "type": ["string", "null"] }
+      }
+    },
+    "repo": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["remote", "commit", "dirty"],
+      "properties": {
+        "remote": { "type": ["string", "null"] },
+        "commit": { "type": ["string", "null"] },
+        "dirty": { "type": ["boolean", "null"] }
+      }
+    },
+    "environment": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["os", "arch", "node"],
+      "properties": {
+        "os": { "type": "string" },
+        "arch": { "type": "string" },
+        "node": { "type": "string" }
+      }
+    },
+    "failure": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["class", "beforeAttestationSha256"],
+      "properties": {
+        "class": { "type": "string" },
+        "beforeAttestationSha256": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "legacyRepair": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": [
+        "id",
+        "kind",
+        "description",
+        "diff",
+        "filesChanged",
+        "fileChanges",
+        "preconditions",
+        "planDelta",
+        "envDelta"
+      ],
+      "properties": {
+        "id": { "type": "string" },
+        "kind": { "enum": ["repo-diff", "plan-step", "environment"] },
+        "description": { "type": "string" },
+        "diff": { "type": ["string", "null"] },
+        "filesChanged": { "type": "array", "items": { "type": "string" } },
+        "fileChanges": { "type": "array", "items": { "$ref": "#/$defs/fileChange" } },
+        "preconditions": { "type": "array", "items": { "$ref": "#/$defs/precondition" } },
+        "planDelta": { "type": ["string", "null"] },
+        "envDelta": { "type": ["string", "null"] }
+      }
+    },
+    "fileChange": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "beforeSha256", "afterSha256", "beforeContent", "afterContent"],
+      "properties": {
+        "path": { "type": "string" },
+        "beforeSha256": {
+          "anyOf": [
+            { "$ref": "#/$defs/hash" },
+            { "type": "null" }
+          ]
+        },
+        "afterSha256": { "$ref": "#/$defs/hash" },
+        "beforeContent": { "type": ["string", "null"] },
+        "afterContent": { "type": "string" }
+      }
+    },
+    "precondition": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["path", "sha256"],
+      "properties": {
+        "path": { "type": "string" },
+        "sha256": { "$ref": "#/$defs/hash" }
+      }
+    },
+    "verification": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["before", "after"],
+      "properties": {
+        "before": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["booted", "failureClass", "attestationSha256"],
+          "properties": {
+            "booted": { "const": false },
+            "failureClass": { "type": "string" },
+            "attestationSha256": { "$ref": "#/$defs/hash" }
+          }
+        },
+        "after": {
+          "type": "object",
+          "additionalProperties": false,
+          "required": ["booted", "bootproofOrchestrated", "healthObservation", "attestationSha256"],
+          "properties": {
+            "booted": { "type": "boolean" },
+            "bootproofOrchestrated": { "type": "boolean" },
+            "healthObservation": { "type": "string" },
+            "attestationSha256": { "$ref": "#/$defs/hash" }
+          }
+        }
+      }
+    },
+    "signer": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["publicKey", "algorithm"],
+      "properties": {
+        "publicKey": { "type": "string" },
+        "algorithm": { "const": "ed25519" }
+      }
+    },
+    "aiEvidence": {
+      "type": "object",
+      "additionalProperties": false,
+      "required": ["provider", "model", "context", "suggestion"],
+      "description": "AI prompt and response evidence for auditability. Present only when source === 'ai_suggested'. The context is redacted before storage; the suggestion is the validated structured response.",
+      "properties": {
+        "provider": { "enum": ["openai", "anthropic"] },
+        "model": { "type": "string", "minLength": 1 },
+        "context": {
+          "type": "object",
+          "description": "The redacted bootproof/ai-repair-context/v1 object sent to the AI provider."
+        },
+        "suggestion": {
+          "type": "object",
+          "description": "The validated bootproof/ai-repair-suggestion/v1 object the AI returned."
+        }
+      }
+    }
+  }
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "bootproof",
-  "version": "0.1.0",
+  "version": "0.4.0",
   "description": "The honest run button for repos. Boots unfamiliar code when it safely can, tells the truth when it cannot, and signs proof of what happened.",
   "license": "Apache-2.0",
   "type": "module",
@@ -15,17 +15,17 @@
   ],
   "scripts": {
     "clean": "node -e \"require('node:fs').rmSync('dist', { recursive: true, force: true })\"",
-    "build": "npm run clean && tsc -p tsconfig.json",
+    "build": "npm run clean && tsc -p tsconfig.json && chmod +x dist/cli.js",
     "prepack": "npm run build",
     "pack:check": "node scripts/pack-smoke.mjs",
     "release:check": "npm test && npm run build && npm run pack:check && npm publish --dry-run",
     "lint": "tsc -p tsconfig.json --noEmit",
-    "test": "npm run build && node --test tests/*.test.mjs",
+    "test": "npm run build && node --test tests/unit.test.mjs tests/action.test.mjs tests/e2e.test.mjs tests/receipt.test.mjs",
     "ci": "npm run lint && npm run test"
   },
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/rossbuckley1990-hash/bootproof.git"
+    "url": "git+https://github.com/bootproof/bootproof.git"
   },
   "keywords": [
     "devtools",
@@ -42,11 +42,18 @@
     "access": "public"
   },
   "devDependencies": {
+    "@noble/curves": "^1.6.0",
+    "@noble/hashes": "^1.5.0",
     "@types/node": "^22.19.20",
+    "esbuild": "^0.28.1",
+    "playwright": "^1.61.1",
     "typescript": "5.8.3"
   },
   "bugs": {
-    "url": "https://github.com/rossbuckley1990-hash/bootproof/issues"
+    "url": "https://github.com/bootproof/bootproof/issues"
   },
-  "homepage": "https://github.com/rossbuckley1990-hash/bootproof#readme"
+  "homepage": "https://github.com/bootproof/bootproof#readme",
+  "dependencies": {
+    "yaml": "^2.9.0"
+  }
 }