bootproof 0.3.0 → 0.4.1

package/dist/repair.d.ts

@@ -1,23 +1,28 @@
+import { type SignatureTrustResult } from "./proof.js";
+import { type RepairAction, type RepairReceiptBase } from "./repair-safety.js";
+import { type DeterministicRepairCandidate } from "./repair-playbooks.js";
 import type { Attestation, FailureClass, PackageManager } from "./types.js";
+import type { RequestedAiRepair } from "./ai-repair.js";
+export * from "./repair-safety.js";
+export * from "./repair-playbooks.js";
 export type RepairKind = "repo-diff" | "plan-step" | "environment";
-export interface RepairReceipt {
-    schema: "bootproof/repair-receipt/v1";
-    tool: string;
-    repo: {
+export interface RepairReceipt extends RepairReceiptBase {
+    tool?: string;
+    repo?: {
         remote: string | null;
         commit: string | null;
         dirty: boolean | null;
     };
-    environment: {
+    environment?: {
         os: string;
         arch: string;
         node: string;
     };
-    failure: {
+    failure?: {
         class: FailureClass;
         beforeAttestationSha256: string;
     };
-    repair: {
+    repair?: {
         id: string;
         kind: RepairKind;
         description: string;
@@ -28,25 +33,40 @@ export interface RepairReceipt {
         planDelta: string | null;
         envDelta: string | null;
     };
-    verification: {
+    verification?: {
         before: {
             booted: false;
             failureClass: FailureClass;
             attestationSha256: string;
         };
         after: {
-            booted: true;
+            booted: boolean;
+            bootproofOrchestrated: boolean;
             healthObservation: string;
             attestationSha256: string;
         };
     };
-    startedAt: string;
-    finishedAt: string;
+    startedAt?: string;
+    finishedAt?: string;
     signer: {
         publicKey: string;
         algorithm: "ed25519";
     } | null;
     signature: string | null;
+    /**
+     * AI evidence captured for auditability when source === "ai_suggested".
+     * Contains the redacted prompt context and the AI's structured suggestion.
+     * Required by the AGENTS.md constitution: an auditor must be able to
+     * reconstruct what the AI proposed without trusting the AI provider.
+     */
+    aiEvidence?: {
+        provider: "openai" | "anthropic";
+        model: string;
+        /** The redacted bootproof/ai-repair-context/v1 object sent to the AI. */
+        context: Record<string, unknown>;
+        /** The validated bootproof/ai-repair-suggestion/v1 object the AI returned. */
+        suggestion: Record<string, unknown>;
+    };
 }
 export interface RepairResult {
     schema: "bootproof/repair-result/v1";
@@ -71,6 +91,14 @@ export interface RepairOptions {
     timeoutMs: number;
     port?: number;
     remoteSource?: string;
+    commandApproved?: boolean;
+    actionApproved?: boolean;
+    /** The full AI repair request (context + suggestion) to embed in the receipt for audit. */
+    aiRepair?: RequestedAiRepair | null;
+}
+export interface LatestRepairCandidate {
+    attestation: Attestation;
+    candidate: DeterministicRepairCandidate;
 }
 export interface RepairFileChange {
     path: string;
@@ -91,6 +119,7 @@ export interface RepairReceiptPrecondition {
 export declare function assertRepairTargetPath(repoPath: string, file: string): void;
 export declare function assertRepairScope(changes: RepairFileChange[]): void;
 export declare function verifyRepairReceipt(receipt: RepairReceipt): boolean;
+export declare function evaluateRepairReceiptSignature(receipt: RepairReceipt): SignatureTrustResult;
 export declare function sha256Attestation(attestation: Attestation): string;
 export declare function composePortRepair(source: string, service: string, occupiedPort: number, replacementPort: number, containerPort: number): string;
 export declare function packageManagerActivationCommand(packageManager: PackageManager, version: string | null): string | null;
@@ -106,5 +135,8 @@ export declare function registeredRemediationsFor(failureClass: FailureClass): {
     id: string;
     kind: RepairKind;
 }[];
+export declare function latestDeterministicRepairCandidate(repoPath: string, requestedProvider?: "docker" | "local"): LatestRepairCandidate | null;
+export declare function latestFailedAttestation(repoPath: string, requestedProvider?: "docker" | "local"): Attestation | null;
+export declare function executeAiSuggestedRepair(repoPath: string, before: Attestation, action: RepairAction, options: RepairOptions): Promise<RepairResult>;
 export declare function applyVerifiedRepair(repoPath: string, receiptFile?: string): RepairApplyResult;
 export declare function repairRepo(repoPath: string, options: RepairOptions): Promise<RepairResult>;