aiden-runtime 3.16.0

package/dist/security/dataGuard.js

@@ -0,0 +1,89 @@
+"use strict";
+// ============================================================
+// DevOS — Autonomous AI Execution System
+// Copyright (c) 2026 Shiva Deore. All rights reserved.
+// ============================================================
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.dataGuard = void 0;
+// security/dataGuard.ts — Routes sensitive data to local-only processing.
+//
+// When DevOS handles screenshots, documents, or text that may contain PII,
+// credentials, or financial data, DataGuard decides whether it is safe to
+// send that data to a cloud LLM (e.g. Claude via API) or whether it must
+// stay on-device and be processed by the local Ollama model only.
+//
+// Heuristic sensitivity detection is fast and runs synchronously.
+// For higher-assurance scenarios, set DEVOS_DATAGUARD_STRICT=true to force
+// all data through local models regardless of content.
+// ── Patterns that indicate sensitive content ──────────────────
+const SENSITIVE_PATTERNS = [
+    // Credentials
+    /password\s*[:=]/i,
+    /api[_-]?key\s*[:=]/i,
+    /secret[_-]?key\s*[:=]/i,
+    /access[_-]?token\s*[:=]/i,
+    /auth[_-]?token\s*[:=]/i,
+    /bearer\s+[A-Za-z0-9._\-]{20,}/i,
+    /-----BEGIN (RSA |EC )?PRIVATE KEY-----/,
+    // Financial data
+    /\b(?:4[0-9]{12}(?:[0-9]{3})?|5[1-5][0-9]{14}|3[47][0-9]{13})\b/, // credit cards
+    /\biban\b/i,
+    /\bswift\s*code\b/i,
+    /\brouting\s*number\b/i,
+    // PII
+    /\bssn\b/i,
+    /\bsocial\s+security\b/i,
+    /\bdate\s+of\s+birth\b/i,
+    /\bpassport\s+number\b/i,
+    // Dev secrets
+    /sk-[A-Za-z0-9]{20,}/, // OpenAI / Anthropic keys
+    /ghp_[A-Za-z0-9]{36}/, // GitHub PAT
+    /xox[bpra]-[A-Za-z0-9\-]{24,}/, // Slack tokens
+];
+// ── DataGuard class ────────────────────────────────────────────
+class DataGuard {
+    /**
+     * Returns true if the given data string appears to contain sensitive
+     * information that should not be sent to a cloud LLM.
+     *
+     * For screenshots, pass a short text description or a sample of any
+     * OCR output, not the raw base64 — base64 is never matched.
+     *
+     * When DEVOS_DATAGUARD_STRICT=true, always returns true (local-only).
+     */
+    async isSensitive(data) {
+        if (process.env.DEVOS_DATAGUARD_STRICT === 'true')
+            return true;
+        // Limit scan to first 4 KB — avoids scanning huge binary blobs
+        const sample = data.slice(0, 4096);
+        for (const pattern of SENSITIVE_PATTERNS) {
+            if (pattern.test(sample)) {
+                console.log(`[DataGuard] Sensitive pattern detected — routing to local model`);
+                return true;
+            }
+        }
+        return false;
+    }
+    /**
+     * Synchronous variant for hot paths — no async overhead.
+     * Less thorough than the async version (no awaitable plugins).
+     */
+    isSensitiveSync(data) {
+        if (process.env.DEVOS_DATAGUARD_STRICT === 'true')
+            return true;
+        const sample = data.slice(0, 4096);
+        return SENSITIVE_PATTERNS.some(p => p.test(sample));
+    }
+    /**
+     * Redact sensitive values from a string before logging or storage.
+     * Replaces matched values with [REDACTED].
+     */
+    redact(data) {
+        let out = data;
+        for (const p of SENSITIVE_PATTERNS) {
+            out = out.replace(new RegExp(p.source, p.flags.includes('g') ? p.flags : p.flags + 'g'), '[REDACTED]');
+        }
+        return out;
+    }
+}
+exports.dataGuard = new DataGuard();

package/dist/tools/eonetTool.js

@@ -0,0 +1,72 @@
+"use strict";
+// tools/eonetTool.ts — NASA EONET natural disaster events (v3 API)
+// Free, no auth required. Fetches open events filtered to high-impact categories.
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getActiveNaturalEvents = getActiveNaturalEvents;
+exports.formatEonetEvents = formatEonetEvents;
+exports.getEonetSummary = getEonetSummary;
+const undici_1 = require("undici");
+const EONET_BASE = 'https://eonet.gsfc.nasa.gov/api/v3';
+const HIGH_IMPACT_CATEGORIES = [
+    'wildfires',
+    'severeStorms',
+    'volcanoes',
+    'floods',
+    'earthquakes',
+];
+// ── Fetch active events ────────────────────────────────────────
+async function getActiveNaturalEvents(days = 1, limit = 10) {
+    try {
+        const url = `${EONET_BASE}/events?status=open&days=${days}&limit=${limit}`;
+        const res = await (0, undici_1.fetch)(url, { signal: AbortSignal.timeout(5000) });
+        if (!res.ok)
+            return [];
+        const data = await res.json();
+        if (!Array.isArray(data?.events))
+            return [];
+        // filter to high-impact categories only
+        return data.events.filter(ev => ev.categories?.some(c => HIGH_IMPACT_CATEGORIES.includes(c.id)));
+    }
+    catch {
+        return [];
+    }
+}
+// ── Format events as a briefing section string ─────────────────
+function formatEonetEvents(events) {
+    if (events.length === 0)
+        return '';
+    const lines = events.slice(0, 8).map(ev => {
+        const cat = ev.categories[0];
+        const emoji = getCategoryEmoji(cat?.id ?? '');
+        const geo = ev.geometry?.[ev.geometry.length - 1];
+        const date = geo?.date ? new Date(geo.date).toLocaleDateString('en-IN', { month: 'short', day: 'numeric' }) : '';
+        return `  ${emoji} ${ev.title}${date ? ` (${date})` : ''}`;
+    });
+    return `**🌍 NASA Live Events (${events.length} active):**\n${lines.join('\n')}`;
+}
+// ── One-liner summary for desktop notification ─────────────────
+function getEonetSummary(events) {
+    if (events.length === 0)
+        return '';
+    const counts = {};
+    for (const ev of events) {
+        const id = ev.categories[0]?.id ?? 'other';
+        counts[id] = (counts[id] ?? 0) + 1;
+    }
+    const parts = Object.entries(counts).map(([id, n]) => {
+        const emoji = getCategoryEmoji(id);
+        return `${n} ${emoji}${id}`;
+    });
+    return `NASA: ${parts.join(', ')}`;
+}
+// ── Emoji map ──────────────────────────────────────────────────
+function getCategoryEmoji(categoryId) {
+    switch (categoryId) {
+        case 'wildfires': return '🔥';
+        case 'severeStorms': return '🌪️';
+        case 'volcanoes': return '🌋';
+        case 'floods': return '🌊';
+        case 'earthquakes': return '🫨';
+        default: return '⚠️';
+    }
+}

package/dist/types/computerUse.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });

package/dist/types/executor.js

@@ -0,0 +1,2 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });