opensentinel 3.6.1 → 3.7.0

package/dist/{chunk-6JY4HNUH.js → chunk-ZMML6T63.js}

@@ -2,13 +2,13 @@ import {
   reviewPullRequest,
   securityScan,
   summarizeChanges
-} from "./chunk-HKOPRRDJ.js";
+} from "./chunk-5JJTLWOR.js";
 import {
   TFIDFProvider,
   buildMemoryContext,
   searchMemories,
   storeMemory
-} from "./chunk-6UZPE35A.js";
+} from "./chunk-QPY3WRVM.js";
 import {
   hookManager,
   soulHookManager
@@ -46,7 +46,7 @@ import {
   sendMMS,
   sendSMS,
   validateTwilioSignature
-} from "./chunk-2RGPWU77.js";
+} from "./chunk-HJSEEFO3.js";
 import {
   client_exports,
   init_client,
@@ -60,15 +60,15 @@ import {
   cancelAgent,
   getAgent,
   spawnAgent
-} from "./chunk-643M3AP5.js";
+} from "./chunk-WMFYI7XC.js";
 import {
   metric
-} from "./chunk-6LTLIYAQ.js";
+} from "./chunk-YEDEAX6Y.js";
 import {
   MODEL_TIERS,
   costTracker,
   modelRouter
-} from "./chunk-BMOUYXLX.js";
+} from "./chunk-6ZNCY2GI.js";
 import {
   CryptoClient
 } from "./chunk-6KONMXQ6.js";
@@ -92,26 +92,26 @@ import {
   getCommunities,
   getNeighbors,
   runCustomCypher
-} from "./chunk-A24GPVLY.js";
+} from "./chunk-V3OKHQUX.js";
 import {
   findDuplicates,
   mergeEntities,
   resolveEntity
-} from "./chunk-AR34B6XR.js";
+} from "./chunk-2I5QHYG6.js";
 import {
   executeMCPTool,
   isMCPTool,
   mcpToolsToAnthropicTools
-} from "./chunk-UWUIJTT4.js";
+} from "./chunk-CZTMGHUC.js";
 import {
   analyzeImage,
   analyzeImageBuffer,
   extractStructuredData,
   performOCR
-} from "./chunk-GUKKW7JI.js";
+} from "./chunk-4WH6MFEW.js";
 import {
   providerRegistry
-} from "./chunk-HTF2GIQC.js";
+} from "./chunk-GW6V4D43.js";
 import {
   generatePDF
 } from "./chunk-DOYGMNMK.js";
@@ -124,13 +124,13 @@ import {
 } from "./chunk-CQ4JURG7.js";
 import {
   audit
-} from "./chunk-KABG5PG3.js";
+} from "./chunk-BBN4VCNK.js";
 import {
   db
-} from "./chunk-S4NJJS5C.js";
+} from "./chunk-5BTVJR7R.js";
 import {
   env
-} from "./chunk-PUNIMPMY.js";
+} from "./chunk-4KIHDIXZ.js";
 import {
   achievements,
   conversations,
@@ -143,7 +143,7 @@ import {
   toolLogs,
   usagePatterns,
   userAchievements
-} from "./chunk-NYVBXUGD.js";
+} from "./chunk-ZIBRVA3Y.js";
 import {
   __esm,
   __export,
@@ -26572,7 +26572,7 @@ var TOOLS = [
   },
   {
     name: "generate_spreadsheet",
-    description: "Generate a spreadsheet (Excel or CSV) from data",
+    description: "Create a local Excel (.xlsx) or CSV spreadsheet from structured data (2D array or array of objects). Returns a file path the user can download. Use for queries like 'create an Excel with Q2 sales data', 'make a CSV of my contacts', 'build a spreadsheet with these columns'.",
     input_schema: {
       type: "object",
       properties: {
@@ -28777,7 +28777,7 @@ var TOOLS = [
   },
   {
     name: "generate_word_document",
-    description: "Generate a Word (.docx) document with formatted content including headings, paragraphs, lists, tables, and images.",
+    description: "Create a local Word (.docx) document with formatted content including headings, paragraphs, lists, tables, and images. Content is passed as markdown and converted. Use for queries like 'create a Word doc about X', 'draft a letter in Word', 'write a memo'.",
     input_schema: {
       type: "object",
       properties: {
@@ -28818,7 +28818,7 @@ var TOOLS = [
   },
   {
     name: "parse_document",
-    description: "Parse and extract text from uploaded documents. Supports PDF, DOCX, TXT, MD, HTML, CSV, JSON, XML, YAML.",
+    description: "Read a local document file and extract its text (for summarising, analysing, question-answering). Supports PDF, DOCX (Word), TXT, MD, HTML, CSV, JSON, XML, YAML. For Excel/XLSX files use analyze_spreadsheet instead. Use this for queries like 'analyze my document', 'summarize this PDF', 'what does this Word doc say'.",
     input_schema: {
       type: "object",
       properties: {
@@ -28828,6 +28828,18 @@ var TOOLS = [
       required: ["file_path"]
     }
   },
+  {
+    name: "analyze_spreadsheet",
+    description: "Read a local Excel (.xlsx) or CSV spreadsheet and return its contents as structured text (sheet names, headers, rows). Claude can then summarise, spot anomalies, flag PII, answer questions about the data, etc. Use for queries like 'analyze my spreadsheet', 'summarize this xlsx', 'find anomalies in this Excel', 'pull PII from this CSV'.",
+    input_schema: {
+      type: "object",
+      properties: {
+        file_path: { type: "string", description: "Path to the .xlsx or .csv file" },
+        max_rows_per_sheet: { type: "number", description: "Cap rows returned per sheet (default 500)" }
+      },
+      required: ["file_path"]
+    }
+  },
   {
     name: "key_rotation",
     description: "Rotate encryption keys and security credentials. Generate new keys, check rotation status, and re-encrypt stored data.",
@@ -28987,6 +28999,71 @@ var TOOLS = [
       },
       required: ["action"]
     }
+  },
+  // ---------------------------------------------------------------------
+  // Microsoft 365 / Graph — chat-callable
+  // Requires the user to have connected M365 first via the dashboard.
+  // ---------------------------------------------------------------------
+  {
+    name: "m365_list_inbox",
+    description: "List the latest emails from the user's Outlook inbox via Microsoft Graph. Requires Microsoft 365 to be connected via the dashboard. Use this when the user asks something like 'list my emails' or 'show my inbox' or 'any new Microsoft mail'.",
+    input_schema: {
+      type: "object",
+      properties: {
+        top: { type: "number", description: "Number of messages to return (default 10, max 50)" },
+        unreadOnly: { type: "boolean", description: "Only return unread messages" },
+        search: { type: "string", description: "Free-text search term (sender, subject, body)" }
+      }
+    }
+  },
+  {
+    name: "m365_analyze_email",
+    description: "Analyze a specific email for phishing, business-email-compromise, and credential-harvest risk. Uses Claude with a security analyst prompt. Returns risk score 0-100, category (Safe/Suspicious/Phishing), signals detected, and recommended actions. Pass either a graphMessageId (preferred \u2014 full message is fetched via Graph) OR raw subject+sender+body.",
+    input_schema: {
+      type: "object",
+      properties: {
+        graphMessageId: { type: "string", description: "Microsoft Graph message id \u2014 fetched and analyzed" },
+        subject: { type: "string", description: "Email subject (if not using graphMessageId)" },
+        sender: { type: "string", description: "Sender email or display (if not using graphMessageId)" },
+        body: { type: "string", description: "Email body text (if not using graphMessageId)" }
+      }
+    }
+  },
+  {
+    name: "m365_list_sharepoint_sites",
+    description: "List SharePoint sites the user has access to via Microsoft Graph. Returns site id, name, description, and webUrl. Requires Microsoft 365 connected. Use for queries like 'what SharePoint sites do I have', 'find the Finance SharePoint site', etc.",
+    input_schema: {
+      type: "object",
+      properties: {
+        search: { type: "string", description: "Optional search term to filter sites by name" },
+        top: { type: "number", description: "Max sites to return (default 25)" }
+      }
+    }
+  },
+  {
+    name: "m365_list_sharepoint_files",
+    description: "List files in a SharePoint site's default document library (Shared Documents). Returns file id, name, size, mimeType, and webUrl. Pass siteId from m365_list_sharepoint_sites.",
+    input_schema: {
+      type: "object",
+      properties: {
+        siteId: { type: "string", description: "SharePoint site id (from m365_list_sharepoint_sites)" },
+        search: { type: "string", description: "Optional search term to filter files" },
+        top: { type: "number", description: "Max items to return (default 25)" }
+      },
+      required: ["siteId"]
+    }
+  },
+  {
+    name: "m365_analyze_sharepoint_file",
+    description: "Analyze a SharePoint/OneDrive file for risk (PII, phishing payload, credential-harvest content, policy violations). Extracts text from .docx/.xlsx/.pdf/.txt/.csv/.html and sends to Claude. Pass driveId + itemId \u2014 both come from m365_list_sharepoint_files response (item.parentReference.driveId + item.id).",
+    input_schema: {
+      type: "object",
+      properties: {
+        driveId: { type: "string", description: "Microsoft Graph drive id" },
+        itemId: { type: "string", description: "Microsoft Graph drive item id (file id)" }
+      },
+      required: ["driveId", "itemId"]
+    }
   }
 ];
 var mcpRegistry = null;
@@ -31223,7 +31300,7 @@ async function executeTool(name, input) {
           }
           case "message_status": {
             if (!input.message_sid) return { success: false, result: null, error: "'message_sid' required" };
-            const { getMessageStatus: getMessageStatus2 } = await import("./sms-4VME2HUL.js");
+            const { getMessageStatus: getMessageStatus2 } = await import("./sms-CSUCC7HL.js");
             const result = await getMessageStatus2(input.message_sid);
             return { success: result.success, result: result.success ? { sid: result.messageSid, status: result.status } : null, error: result.error };
           }
@@ -32443,7 +32520,7 @@ async function executeTool(name, input) {
       }
       // ===== NEW TOOLS (v3.1.0) =====
       case "ocr_tesseract": {
-        const { ocrWithTesseract } = await import("./ocr-LGUIPKVZ.js");
+        const { ocrWithTesseract } = await import("./ocr-UONKTQU7.js");
         const result = await ocrWithTesseract(input.file_path, input.language);
         return { success: result.success, result: result.text || result.error, error: result.error };
       }
@@ -32458,7 +32535,7 @@ async function executeTool(name, input) {
         return withDownloadUrl({ success: result.success, filePath: result.filePath, error: result.error });
       }
       case "generate_word_document": {
-        const { generateWordDocument } = await import("./word-document-D6N2C47N.js");
+        const { generateWordDocument } = await import("./word-document-AV3YB4L2.js");
         const elements = typeof input.content === "string" ? JSON.parse(input.content) : input.content || [];
         const opts = { title: input.title };
         if (input.template) opts.template = input.template;
@@ -32466,7 +32543,7 @@ async function executeTool(name, input) {
         return withDownloadUrl({ success: result.success, filePath: result.filePath, error: result.error });
       }
       case "generate_presentation": {
-        const { generatePresentation } = await import("./presentations-HXTAMGHT.js");
+        const { generatePresentation } = await import("./presentations-UOET2FVZ.js");
         const slides = typeof input.slides === "string" ? JSON.parse(input.slides) : input.slides;
         const result = await generatePresentation(slides, input.filename, {
           theme: input.theme
@@ -32482,7 +32559,7 @@ async function executeTool(name, input) {
         return withDownloadUrl({ success: result.success, filePath: result.url || result.filePath, error: result.error });
       }
       case "parse_document": {
-        const { parseDocument } = await import("./documents-EYIYLZK2.js");
+        const { parseDocument } = await import("./documents-PFHSK7SZ.js");
         const result = await parseDocument(input.file_path, input.format);
         const text3 = result.text || "";
         return {
@@ -32495,6 +32572,82 @@ async function executeTool(name, input) {
           }
         };
       }
+      case "analyze_spreadsheet": {
+        const path4 = input.file_path;
+        if (!path4) {
+          return { success: false, result: null, error: "file_path is required" };
+        }
+        const maxRows = typeof input.max_rows_per_sheet === "number" ? input.max_rows_per_sheet : 500;
+        const { readFile: readFile4 } = await import("fs/promises");
+        const { extname: extname2 } = await import("path");
+        const ext = extname2(path4).toLowerCase();
+        try {
+          if (ext === ".csv") {
+            const raw = await readFile4(path4, "utf8");
+            const lines = raw.split(/\r?\n/).slice(0, maxRows + 1);
+            return {
+              success: true,
+              result: {
+                format: "csv",
+                rowCount: lines.length,
+                truncated: raw.split(/\r?\n/).length > maxRows + 1,
+                text: lines.join("\n")
+              }
+            };
+          }
+          if (ext !== ".xlsx") {
+            return {
+              success: false,
+              result: null,
+              error: `Unsupported extension ${ext}. Use .xlsx or .csv.`
+            };
+          }
+          const buf = await readFile4(path4);
+          const ExcelJS = await import("exceljs");
+          const wb = new ExcelJS.default.Workbook();
+          await wb.xlsx.load(buf);
+          const sheets = [];
+          wb.eachSheet((sheet) => {
+            const rows = [];
+            let i = 0;
+            sheet.eachRow((row) => {
+              if (i >= maxRows) return;
+              const cells = [];
+              row.eachCell({ includeEmpty: true }, (c) => {
+                cells.push(c.value == null ? "" : String(c.value));
+              });
+              rows.push(cells);
+              i++;
+            });
+            sheets.push({
+              name: sheet.name,
+              rowCount: sheet.rowCount,
+              truncated: sheet.rowCount > maxRows,
+              rows
+            });
+          });
+          const textBlob = sheets.map(
+            (s) => `# Sheet: ${s.name} (${s.rowCount} rows${s.truncated ? ", truncated" : ""})
+` + s.rows.map((r) => r.join("	")).join("\n")
+          ).join("\n\n");
+          return {
+            success: true,
+            result: {
+              format: "xlsx",
+              sheetCount: sheets.length,
+              sheets,
+              text: textBlob.length > 5e4 ? textBlob.slice(0, 5e4) + "\n...[truncated]" : textBlob,
+              truncated: textBlob.length > 5e4
+            }
+          };
+        } catch (err) {
+          return {
+            success: false,
+            result: null,
+            error: err instanceof Error ? err.message : String(err)
+          };
+        }
+      }
       case "key_rotation": {
         const keyRotation = await import("./key-rotation-WCC5FOYS.js");
         switch (input.action) {
@@ -32614,6 +32767,190 @@ async function executeTool(name, input) {
         });
         return { success: result.success, result: result.entry || result.entries || result.error, error: result.error };
       }
+      // -------------------------------------------------------------------
+      // Microsoft 365 / Graph — chat-callable
+      // Uses the "local" user key since tool execution doesn't currently
+      // carry the authenticated user context through to this switch.
+      // -------------------------------------------------------------------
+      case "m365_list_inbox": {
+        const { getAccessToken: getAccessToken3 } = await import("./token-store-SEWRX6RE.js");
+        const { listMessages } = await import("./graph-client-NB475AK5.js");
+        const { isM365Configured } = await import("./oauth-UPJYFOVU.js");
+        if (!isM365Configured()) {
+          return { success: false, result: null, error: "Microsoft 365 is not configured. Set M365_CLIENT_ID and M365_CLIENT_SECRET in .env." };
+        }
+        const token = await getAccessToken3("local");
+        const result = await listMessages(token, {
+          top: typeof input.top === "number" ? input.top : 10,
+          unreadOnly: input.unreadOnly === true,
+          search: typeof input.search === "string" ? input.search : void 0
+        });
+        const slim = (result.value || []).map((m) => ({
+          id: m.id,
+          subject: m.subject,
+          from: m.from?.emailAddress?.address,
+          receivedDateTime: m.receivedDateTime,
+          isRead: m.isRead,
+          preview: m.bodyPreview
+        }));
+        return { success: true, result: { count: slim.length, messages: slim } };
+      }
+      case "m365_analyze_email": {
+        const { isM365Configured } = await import("./oauth-UPJYFOVU.js");
+        const { analyzeEmail, persistAnalysis } = await import("./analyzer-OTWE3ARE.js");
+        let analysisInput = null;
+        let inputId;
+        if (typeof input.graphMessageId === "string" && input.graphMessageId) {
+          if (!isM365Configured()) {
+            return { success: false, result: null, error: "Microsoft 365 is not configured." };
+          }
+          const { getAccessToken: getAccessToken3 } = await import("./token-store-SEWRX6RE.js");
+          const { getMessage, stripHtml } = await import("./graph-client-NB475AK5.js");
+          const token = await getAccessToken3("local");
+          const msg = await getMessage(token, input.graphMessageId);
+          const bodyText = msg.body?.contentType === "html" ? stripHtml(msg.body.content || "") : msg.body?.content || msg.bodyPreview || "";
+          analysisInput = {
+            subject: msg.subject || "(no subject)",
+            sender: msg.from?.emailAddress?.address || "unknown",
+            body: bodyText
+          };
+          inputId = input.graphMessageId;
+        } else if (input.subject && input.sender) {
+          analysisInput = {
+            subject: String(input.subject),
+            sender: String(input.sender),
+            body: typeof input.body === "string" ? input.body : void 0
+          };
+        } else {
+          return {
+            success: false,
+            result: null,
+            error: "Either graphMessageId or subject+sender is required"
+          };
+        }
+        const result = await analyzeEmail(analysisInput);
+        try {
+          await persistAnalysis({
+            userKey: "local",
+            input: analysisInput,
+            inputId,
+            inputType: "email",
+            result
+          });
+        } catch {
+        }
+        return { success: true, result };
+      }
+      case "m365_list_sharepoint_sites": {
+        const { isM365Configured } = await import("./oauth-UPJYFOVU.js");
+        const { getAccessToken: getAccessToken3 } = await import("./token-store-SEWRX6RE.js");
+        const { listSites: listSites2 } = await import("./sharepoint-V5P4Q62L.js");
+        if (!isM365Configured()) {
+          return { success: false, result: null, error: "Microsoft 365 is not configured." };
+        }
+        const token = await getAccessToken3("local");
+        const sites2 = await listSites2(token, {
+          search: typeof input.search === "string" ? input.search : void 0,
+          top: typeof input.top === "number" ? input.top : 25
+        });
+        return {
+          success: true,
+          result: {
+            count: sites2.length,
+            sites: sites2.map((s) => ({
+              id: s.id,
+              name: s.displayName || s.name,
+              description: s.description,
+              webUrl: s.webUrl
+            }))
+          }
+        };
+      }
+      case "m365_list_sharepoint_files": {
+        const { isM365Configured } = await import("./oauth-UPJYFOVU.js");
+        const { getAccessToken: getAccessToken3 } = await import("./token-store-SEWRX6RE.js");
+        const { getDefaultDrive, listDriveRoot } = await import("./sharepoint-V5P4Q62L.js");
+        if (!isM365Configured()) {
+          return { success: false, result: null, error: "Microsoft 365 is not configured." };
+        }
+        if (!input.siteId) {
+          return { success: false, result: null, error: "siteId is required" };
+        }
+        const token = await getAccessToken3("local");
+        const drive = await getDefaultDrive(token, input.siteId);
+        const items2 = await listDriveRoot(token, drive.id, {
+          search: typeof input.search === "string" ? input.search : void 0,
+          top: typeof input.top === "number" ? input.top : 25
+        });
+        return {
+          success: true,
+          result: {
+            driveId: drive.id,
+            driveName: drive.name,
+            count: items2.length,
+            items: items2.map((i) => ({
+              id: i.id,
+              name: i.name,
+              isFolder: !!i.folder,
+              size: i.size,
+              mimeType: i.file?.mimeType,
+              webUrl: i.webUrl,
+              lastModified: i.lastModifiedDateTime
+            }))
+          }
+        };
+      }
+      case "m365_analyze_sharepoint_file": {
+        const { isM365Configured } = await import("./oauth-UPJYFOVU.js");
+        const { getAccessToken: getAccessToken3 } = await import("./token-store-SEWRX6RE.js");
+        const { getDriveItem, extractTextFromDriveItem } = await import("./sharepoint-V5P4Q62L.js");
+        const { analyzeEmail, persistAnalysis } = await import("./analyzer-OTWE3ARE.js");
+        if (!isM365Configured()) {
+          return { success: false, result: null, error: "Microsoft 365 is not configured." };
+        }
+        if (!input.driveId || !input.itemId) {
+          return { success: false, result: null, error: "driveId and itemId are required" };
+        }
+        const token = await getAccessToken3("local");
+        const item = await getDriveItem(token, input.driveId, input.itemId);
+        const extracted = await extractTextFromDriveItem(
+          token,
+          input.driveId,
+          input.itemId,
+          item
+        );
+        if (!extracted.text || extracted.text.trim().length === 0) {
+          return {
+            success: false,
+            result: { extractedFrom: extracted.extractedFrom, byteLength: extracted.byteLength },
+            error: `No text could be extracted (${extracted.extractedFrom})`
+          };
+        }
+        const analysisInput = {
+          subject: item.name || "(unnamed file)",
+          sender: item.parentReference?.path || "sharepoint",
+          body: extracted.text.slice(0, 16e3)
+        };
+        const result = await analyzeEmail(analysisInput);
+        try {
+          await persistAnalysis({
+            userKey: "local",
+            input: analysisInput,
+            inputId: `${input.driveId}:${input.itemId}`,
+            inputType: "file",
+            result
+          });
+        } catch {
+        }
+        return {
+          success: true,
+          result: {
+            ...result,
+            file: { name: item.name, size: item.size, mimeType: item.file?.mimeType, webUrl: item.webUrl },
+            extractedFrom: extracted.extractedFrom
+          }
+        };
+      }
       default:
         return { success: false, result: null, error: `Unknown tool: ${name}` };
     }
@@ -32662,4 +32999,4 @@ export {
   streamChat,
   streamChatWithTools
 };
-//# sourceMappingURL=chunk-6JY4HNUH.js.map
+//# sourceMappingURL=chunk-ZMML6T63.js.map