opensentinel 3.1.1 → 3.6.1

package/dist/{audit-logger-OBPR7CRO.js → audit-logger-AU3TMWKI.js}

@@ -6,10 +6,11 @@ import {
   logAudit,
   queryAuditLogs,
   verifyAuditChain
-} from "./chunk-OCVQGBJK.js";
-import "./chunk-XKYRH4FM.js";
-import "./chunk-ZLZKF2PM.js";
-import "./chunk-PLDDJCW6.js";
+} from "./chunk-KABG5PG3.js";
+import "./chunk-S4NJJS5C.js";
+import "./chunk-PUNIMPMY.js";
+import "./chunk-NYVBXUGD.js";
+import "./chunk-UP2VWCW5.js";
 export {
   audit,
   countActionsByType,
@@ -19,4 +20,4 @@ export {
   queryAuditLogs,
   verifyAuditChain
 };
-//# sourceMappingURL=audit-logger-OBPR7CRO.js.map
+//# sourceMappingURL=audit-logger-AU3TMWKI.js.map

package/dist/{auth-UOX5K2BE.js → auth-PH5IHISW.js}

@@ -6,7 +6,7 @@ import {
   auth_default,
   createSpotifyAuth
 } from "./chunk-P6QINGFL.js";
-import "./chunk-PLDDJCW6.js";
+import "./chunk-UP2VWCW5.js";
 export {
   DEFAULT_SCOPES,
   SPOTIFY_SCOPES,
@@ -15,4 +15,4 @@ export {
   createSpotifyAuth,
   auth_default as default
 };
-//# sourceMappingURL=auth-UOX5K2BE.js.map
+//# sourceMappingURL=auth-PH5IHISW.js.map

package/dist/{autonomy-ZXDBDQUJ.js → autonomy-N7W5XPLX.js}

@@ -1,4 +1,4 @@
-import "./chunk-PLDDJCW6.js";
+import "./chunk-UP2VWCW5.js";
 
 // src/core/security/autonomy.ts
 var READONLY_TOOLS = /* @__PURE__ */ new Set([
@@ -18,7 +18,8 @@ var SUPERVISED_REQUIRE_APPROVAL = /* @__PURE__ */ new Set([
   "generate_spreadsheet",
   "send_email",
   "spawn_agent",
-  "create_workflow"
+  "create_workflow",
+  "crypto_exchange"
 ]);
 var AutonomyManager = class {
   defaultLevel = "autonomous";
@@ -83,4 +84,4 @@ export {
   SUPERVISED_REQUIRE_APPROVAL,
   autonomyManager
 };
-//# sourceMappingURL=autonomy-ZXDBDQUJ.js.map
+//# sourceMappingURL=autonomy-N7W5XPLX.js.map

package/dist/autonomy-N7W5XPLX.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core/security/autonomy.ts"],"sourcesContent":["/**\r\n * Autonomy Manager\r\n *\r\n * Controls the level of autonomy the assistant has when executing tools.\r\n * Three levels are supported:\r\n *   - readonly:    only safe, read-only tools are permitted\r\n *   - supervised:  all tools are permitted but certain high-impact tools are\r\n *                  flagged as requiring approval (enforcement happens upstream)\r\n *   - autonomous:  all tools are permitted without restriction\r\n */\r\n\r\nexport type AutonomyLevel = \"readonly\" | \"supervised\" | \"autonomous\";\r\n\r\n/** Tools that are allowed even in readonly mode. */\r\nexport const READONLY_TOOLS: Set<string> = new Set([\r\n  \"search_web\",\r\n  \"read_file\",\r\n  \"list_files\",\r\n  \"analyze_image\",\r\n  \"get_time\",\r\n  \"get_weather\",\r\n  \"get_system_info\",\r\n  \"get_calendar_events\",\r\n]);\r\n\r\n/** Tools that require explicit approval when running in supervised mode. */\r\nexport const SUPERVISED_REQUIRE_APPROVAL: Set<string> = new Set([\r\n  \"execute_command\",\r\n  \"write_file\",\r\n  \"generate_document\",\r\n  \"generate_spreadsheet\",\r\n  \"send_email\",\r\n  \"spawn_agent\",\r\n  \"create_workflow\",\r\n  \"crypto_exchange\",\r\n]);\r\n\r\nexport class AutonomyManager {\r\n  private defaultLevel: AutonomyLevel = \"autonomous\";\r\n  private userLevels: Map<string, AutonomyLevel> = new Map();\r\n\r\n  /** Set the system-wide default autonomy level. */\r\n  setDefaultLevel(level: AutonomyLevel): void {\r\n    this.defaultLevel = level;\r\n  }\r\n\r\n  /** Get the system-wide default autonomy level. */\r\n  getDefaultLevel(): AutonomyLevel {\r\n    return this.defaultLevel;\r\n  }\r\n\r\n  /** Override the autonomy level for a specific user. */\r\n  setLevel(userId: string, level: AutonomyLevel): void {\r\n    this.userLevels.set(userId, level);\r\n  }\r\n\r\n  /** Get the effective autonomy level for a user (falls back to default). */\r\n  getLevel(userId: string): AutonomyLevel {\r\n    return this.userLevels.get(userId) ?? this.defaultLevel;\r\n  }\r\n\r\n  /**\r\n   * Check whether a tool invocation is allowed for the given user.\r\n   *\r\n   * Returns an object with `allowed` (boolean) and an optional `reason`\r\n   * string that explains the decision.\r\n   */\r\n  checkToolAccess(\r\n    userId: string,\r\n    toolName: string,\r\n  ): { allowed: boolean; reason?: string } {\r\n    const level = this.getLevel(userId);\r\n\r\n    switch (level) {\r\n      case \"autonomous\":\r\n        return { allowed: true };\r\n\r\n      case \"readonly\":\r\n        if (READONLY_TOOLS.has(toolName)) {\r\n          return { allowed: true };\r\n        }\r\n        return {\r\n          allowed: false,\r\n          reason: `Tool \"${toolName}\" is not permitted in readonly mode`,\r\n        };\r\n\r\n      case \"supervised\":\r\n        if (SUPERVISED_REQUIRE_APPROVAL.has(toolName)) {\r\n          return {\r\n            allowed: true,\r\n            reason: `Tool \"${toolName}\" requires approval in supervised mode`,\r\n          };\r\n        }\r\n        return { allowed: true };\r\n    }\r\n  }\r\n\r\n  /** Return high-level stats about the current autonomy configuration. */\r\n  getStats(): { level: string; usersWithCustomLevel: number } {\r\n    return {\r\n      level: this.defaultLevel,\r\n      usersWithCustomLevel: this.userLevels.size,\r\n    };\r\n  }\r\n}\r\n\r\nexport const autonomyManager = new AutonomyManager();\r\n"],"mappings":";;;AAcO,IAAM,iBAA8B,oBAAI,IAAI;AAAA,EACjD;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAGM,IAAM,8BAA2C,oBAAI,IAAI;AAAA,EAC9D;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AACF,CAAC;AAEM,IAAM,kBAAN,MAAsB;AAAA,EACnB,eAA8B;AAAA,EAC9B,aAAyC,oBAAI,IAAI;AAAA;AAAA,EAGzD,gBAAgB,OAA4B;AAC1C,SAAK,eAAe;AAAA,EACtB;AAAA;AAAA,EAGA,kBAAiC;AAC/B,WAAO,KAAK;AAAA,EACd;AAAA;AAAA,EAGA,SAAS,QAAgB,OAA4B;AACnD,SAAK,WAAW,IAAI,QAAQ,KAAK;AAAA,EACnC;AAAA;AAAA,EAGA,SAAS,QAA+B;AACtC,WAAO,KAAK,WAAW,IAAI,MAAM,KAAK,KAAK;AAAA,EAC7C;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,gBACE,QACA,UACuC;AACvC,UAAM,QAAQ,KAAK,SAAS,MAAM;AAElC,YAAQ,OAAO;AAAA,MACb,KAAK;AACH,eAAO,EAAE,SAAS,KAAK;AAAA,MAEzB,KAAK;AACH,YAAI,eAAe,IAAI,QAAQ,GAAG;AAChC,iBAAO,EAAE,SAAS,KAAK;AAAA,QACzB;AACA,eAAO;AAAA,UACL,SAAS;AAAA,UACT,QAAQ,SAAS,QAAQ;AAAA,QAC3B;AAAA,MAEF,KAAK;AACH,YAAI,4BAA4B,IAAI,QAAQ,GAAG;AAC7C,iBAAO;AAAA,YACL,SAAS;AAAA,YACT,QAAQ,SAAS,QAAQ;AAAA,UAC3B;AAAA,QACF;AACA,eAAO,EAAE,SAAS,KAAK;AAAA,IAC3B;AAAA,EACF;AAAA;AAAA,EAGA,WAA4D;AAC1D,WAAO;AAAA,MACL,OAAO,KAAK;AAAA,MACZ,sBAAsB,KAAK,WAAW;AAAA,IACxC;AAAA,EACF;AACF;AAEO,IAAM,kBAAkB,IAAI,gBAAgB;","names":[]}

package/dist/{aws-s3-Q4LLZZPD.js → aws-s3-QZMURYXB.js}

@@ -1,7 +1,7 @@
 import {
   BaseAdapter
 } from "./chunk-7WQO5J2M.js";
-import "./chunk-PLDDJCW6.js";
+import "./chunk-UP2VWCW5.js";
 
 // src/core/adapters/adapters/aws-s3.ts
 import { z } from "zod";
@@ -143,4 +143,4 @@ var AWSS3Adapter = class extends BaseAdapter {
 export {
   AWSS3Adapter
 };
-//# sourceMappingURL=aws-s3-Q4LLZZPD.js.map
+//# sourceMappingURL=aws-s3-QZMURYXB.js.map

package/dist/{backup-restore-PZ7CYYB7.js → backup-restore-72OQTZO3.js}

@@ -5,7 +5,7 @@ import {
   listBackups,
   restoreDatabase
 } from "./chunk-NPRTSZIF.js";
-import "./chunk-PLDDJCW6.js";
+import "./chunk-UP2VWCW5.js";
 export {
   createDatabaseBackup,
   backup_restore_default as default,
@@ -13,4 +13,4 @@ export {
   listBackups,
   restoreDatabase
 };
-//# sourceMappingURL=backup-restore-PZ7CYYB7.js.map
+//# sourceMappingURL=backup-restore-72OQTZO3.js.map

package/dist/{blocks-R3PODY47.js → blocks-YOWOESDD.js}

@@ -7,9 +7,9 @@ import {
   getBlocks,
   markdownToBlocks,
   updateBlock
-} from "./chunk-TVEWKIK3.js";
-import "./chunk-VRD5CYRL.js";
-import "./chunk-PLDDJCW6.js";
+} from "./chunk-2WTKTG2C.js";
+import "./chunk-C6PELIHS.js";
+import "./chunk-UP2VWCW5.js";
 export {
   appendBlocks,
   blocksToMarkdown,
@@ -20,4 +20,4 @@ export {
   markdownToBlocks,
   updateBlock
 };
-//# sourceMappingURL=blocks-R3PODY47.js.map
+//# sourceMappingURL=blocks-YOWOESDD.js.map

package/dist/bot-MU2TJQ3Y.js

@@ -0,0 +1,46 @@
+import {
+  createBot
+} from "./chunk-M7YLQHFP.js";
+import "./chunk-45YXODSB.js";
+import "./chunk-4YJRBMMA.js";
+import "./chunk-MFK34XSY.js";
+import "./chunk-LFDXEYYB.js";
+import "./chunk-7MZN73J2.js";
+import "./chunk-6JY4HNUH.js";
+import "./chunk-HKOPRRDJ.js";
+import "./chunk-6UZPE35A.js";
+import "./chunk-ADTDYJO7.js";
+import "./chunk-CUPEENUY.js";
+import "./chunk-2WTKTG2C.js";
+import "./chunk-U2X2J3FI.js";
+import "./chunk-X6Q3K3L2.js";
+import "./chunk-ODCFS5WD.js";
+import "./chunk-KM22GV7G.js";
+import "./chunk-P6QINGFL.js";
+import "./chunk-2RGPWU77.js";
+import "./chunk-C6PELIHS.js";
+import "./chunk-7WQO5J2M.js";
+import "./chunk-643M3AP5.js";
+import "./chunk-6LTLIYAQ.js";
+import "./chunk-BMOUYXLX.js";
+import "./chunk-WZAH34TG.js";
+import "./chunk-6KONMXQ6.js";
+import "./chunk-22VGGA7S.js";
+import "./chunk-HN3F4WSW.js";
+import "./chunk-A24GPVLY.js";
+import "./chunk-AR34B6XR.js";
+import "./chunk-UWUIJTT4.js";
+import "./chunk-GUKKW7JI.js";
+import "./chunk-HTF2GIQC.js";
+import "./chunk-DOYGMNMK.js";
+import "./chunk-CQ4JURG7.js";
+import "./chunk-KABG5PG3.js";
+import "./chunk-S4NJJS5C.js";
+import "./chunk-PUNIMPMY.js";
+import "./chunk-NYVBXUGD.js";
+import "./chunk-35WYTA3C.js";
+import "./chunk-UP2VWCW5.js";
+export {
+  createBot
+};
+//# sourceMappingURL=bot-MU2TJQ3Y.js.map

package/dist/brain-SLA474EU.js

@@ -0,0 +1,65 @@
+import {
+  SYSTEM_PROMPT,
+  chat,
+  chatWithTools,
+  compactConversation,
+  intentParser,
+  needsCompaction,
+  qualityScorer,
+  reflectionTracker,
+  requestTracer,
+  streamChat,
+  streamChatWithTools
+} from "./chunk-6JY4HNUH.js";
+import "./chunk-HKOPRRDJ.js";
+import "./chunk-6UZPE35A.js";
+import "./chunk-ADTDYJO7.js";
+import "./chunk-CUPEENUY.js";
+import "./chunk-2WTKTG2C.js";
+import "./chunk-U2X2J3FI.js";
+import "./chunk-X6Q3K3L2.js";
+import "./chunk-ODCFS5WD.js";
+import "./chunk-KM22GV7G.js";
+import "./chunk-P6QINGFL.js";
+import "./chunk-2RGPWU77.js";
+import "./chunk-C6PELIHS.js";
+import "./chunk-7WQO5J2M.js";
+import "./chunk-643M3AP5.js";
+import "./chunk-6LTLIYAQ.js";
+import {
+  costTracker,
+  modelRouter
+} from "./chunk-BMOUYXLX.js";
+import "./chunk-WZAH34TG.js";
+import "./chunk-6KONMXQ6.js";
+import "./chunk-22VGGA7S.js";
+import "./chunk-HN3F4WSW.js";
+import "./chunk-A24GPVLY.js";
+import "./chunk-AR34B6XR.js";
+import "./chunk-UWUIJTT4.js";
+import "./chunk-GUKKW7JI.js";
+import "./chunk-HTF2GIQC.js";
+import "./chunk-DOYGMNMK.js";
+import "./chunk-CQ4JURG7.js";
+import "./chunk-KABG5PG3.js";
+import "./chunk-S4NJJS5C.js";
+import "./chunk-PUNIMPMY.js";
+import "./chunk-NYVBXUGD.js";
+import "./chunk-35WYTA3C.js";
+import "./chunk-UP2VWCW5.js";
+export {
+  SYSTEM_PROMPT,
+  chat,
+  chatWithTools,
+  compactConversation,
+  costTracker,
+  intentParser,
+  modelRouter,
+  needsCompaction,
+  qualityScorer,
+  reflectionTracker,
+  requestTracer,
+  streamChat,
+  streamChatWithTools
+};
+//# sourceMappingURL=brain-SLA474EU.js.map

package/dist/{camera-monitor-M5CYKUU4.js → camera-monitor-LHTUWHEL.js}

@@ -1,6 +1,6 @@
 import {
   __require
-} from "./chunk-PLDDJCW6.js";
+} from "./chunk-UP2VWCW5.js";
 
 // src/tools/camera-monitor.ts
 import { spawn, execSync } from "child_process";
@@ -332,4 +332,4 @@ export {
   snapshotHA,
   snapshotRTSP
 };
-//# sourceMappingURL=camera-monitor-M5CYKUU4.js.map
+//# sourceMappingURL=camera-monitor-LHTUWHEL.js.map

package/dist/{charts-V7ARZNKF.js → charts-FJ32GQK7.js}

@@ -1,7 +1,7 @@
 import {
   isPathAllowed
 } from "./chunk-CQ4JURG7.js";
-import "./chunk-PLDDJCW6.js";
+import "./chunk-UP2VWCW5.js";
 
 // src/tools/file-generation/charts.ts
 import { join } from "path";
@@ -238,4 +238,4 @@ export {
   generateChart,
   quickChart
 };
-//# sourceMappingURL=charts-V7ARZNKF.js.map
+//# sourceMappingURL=charts-FJ32GQK7.js.map

package/dist/{chunk-6PMVAAA7.js → chunk-2RGPWU77.js}

@@ -1,9 +1,9 @@
 import {
   env
-} from "./chunk-ZLZKF2PM.js";
+} from "./chunk-PUNIMPMY.js";
 import {
   __require
-} from "./chunk-PLDDJCW6.js";
+} from "./chunk-UP2VWCW5.js";
 
 // src/integrations/twilio/sms.ts
 var TWILIO_API_URL = "https://api.twilio.com/2010-04-01";
@@ -193,4 +193,4 @@ export {
   validateTwilioSignature,
   isTwilioConfigured
 };
-//# sourceMappingURL=chunk-6PMVAAA7.js.map
+//# sourceMappingURL=chunk-2RGPWU77.js.map

package/dist/{chunk-TVEWKIK3.js → chunk-2WTKTG2C.js}

@@ -1,7 +1,7 @@
 import {
   getNotionClient,
   init_client
-} from "./chunk-VRD5CYRL.js";
+} from "./chunk-C6PELIHS.js";
 
 // src/integrations/notion/blocks.ts
 init_client();
@@ -449,4 +449,4 @@ export {
   markdownToBlocks,
   blocksToMarkdown
 };
-//# sourceMappingURL=chunk-TVEWKIK3.js.map
+//# sourceMappingURL=chunk-2WTKTG2C.js.map

package/dist/{chunk-MXAPLSJ5.js → chunk-45YXODSB.js}

@@ -1,6 +1,6 @@
 import {
   env
-} from "./chunk-ZLZKF2PM.js";
+} from "./chunk-PUNIMPMY.js";
 
 // src/outputs/tts.ts
 var ELEVENLABS_API_URL = "https://api.elevenlabs.io/v1";
@@ -48,4 +48,4 @@ async function textToSpeech(text, options = {}) {
 export {
   textToSpeech
 };
-//# sourceMappingURL=chunk-MXAPLSJ5.js.map
+//# sourceMappingURL=chunk-45YXODSB.js.map

package/dist/{chunk-SJSUSJ47.js → chunk-4YJRBMMA.js}

@@ -1,6 +1,6 @@
 import {
   env
-} from "./chunk-ZLZKF2PM.js";
+} from "./chunk-PUNIMPMY.js";
 
 // src/outputs/stt.ts
 import OpenAI from "openai";
@@ -26,4 +26,4 @@ async function transcribeAudio(audioBuffer, language) {
 export {
   transcribeAudio
 };
-//# sourceMappingURL=chunk-SJSUSJ47.js.map
+//# sourceMappingURL=chunk-4YJRBMMA.js.map