souleyez 2.43.29__py3-none-any.whl → 2.43.34__py3-none-any.whl

souleyez/ai/safety.py

@@ -10,6 +10,7 @@ from souleyez.ui.design_system import DesignSystem
 
 class RiskLevel(Enum):
     """Risk levels for actions."""
+
     LOW = "LOW"
     MEDIUM = "MEDIUM"
     HIGH = "HIGH"
@@ -17,23 +18,24 @@ class RiskLevel(Enum):
 
 class ApprovalMode(Enum):
     """Approval modes."""
-    MANUAL = "manual"           # Ask for every action
-    AUTO_LOW = "auto_low"       # Auto-approve LOW only
-    AUTO_MEDIUM = "auto_medium" # Auto-approve LOW + MEDIUM
-    DRY_RUN = "dry_run"         # Show but don't execute
+
+    MANUAL = "manual"  # Ask for every action
+    AUTO_LOW = "auto_low"  # Auto-approve LOW only
+    AUTO_MEDIUM = "auto_medium"  # Auto-approve LOW + MEDIUM
+    DRY_RUN = "dry_run"  # Show but don't execute
 
 
 class SafetyFramework:
     """
     Safety framework for command execution.
-    
+
     Handles risk assessment and approval prompts.
     """
 
     def __init__(self, approval_mode: ApprovalMode = ApprovalMode.MANUAL):
         """
         Initialize safety framework.
-        
+
         Args:
             approval_mode: How to handle approvals
         """
@@ -42,11 +44,11 @@ class SafetyFramework:
     def assess_risk(self, action: str, command: str) -> RiskLevel:
         """
         Assess risk level of an action.
-        
+
         Args:
             action: AI recommendation action text
             command: Actual command to execute
-            
+
         Returns:
             RiskLevel enum
         """
@@ -58,9 +60,20 @@ class SafetyFramework:
 
         # HIGH risk patterns
         high_risk_patterns = [
-            'rm ', 'delete', 'drop', 'exploit', 'payload',
-            'shell', 'reverse', 'meterpreter', 'privilege',
-            'escalat', 'root', 'admin', 'sudo', 'persistence'
+            "rm ",
+            "delete",
+            "drop",
+            "exploit",
+            "payload",
+            "shell",
+            "reverse",
+            "meterpreter",
+            "privilege",
+            "escalat",
+            "root",
+            "admin",
+            "sudo",
+            "persistence",
         ]
 
         for pattern in high_risk_patterns:
@@ -69,8 +82,14 @@ class SafetyFramework:
 
         # MEDIUM risk patterns
         medium_risk_patterns = [
-            'password', 'credential', 'login', 'auth',
-            'brute', 'test', 'try', 'attempt'
+            "password",
+            "credential",
+            "login",
+            "auth",
+            "brute",
+            "test",
+            "try",
+            "attempt",
         ]
 
         for pattern in medium_risk_patterns:
@@ -81,38 +100,44 @@ class SafetyFramework:
         return RiskLevel.LOW
 
     def require_approval(
-        self,
-        action: str,
-        target: str,
-        command: str,
-        risk_level: RiskLevel
+        self, action: str, target: str, command: str, risk_level: RiskLevel
     ) -> bool:
         """
         Check if action requires approval and prompt user if needed.
-        
+
         Args:
             action: Human-readable action description
             target: Target of the action
             command: Actual command to execute
             risk_level: Assessed risk level
-            
+
         Returns:
             True if approved (execute), False if rejected
         """
         # Dry-run mode: never execute
         if self.approval_mode == ApprovalMode.DRY_RUN:
-            click.echo(click.style("\n[DRY-RUN] Would execute but skipping", fg='yellow'))
+            click.echo(
+                click.style("\n[DRY-RUN] Would execute but skipping", fg="yellow")
+            )
             return False
 
         # Auto-approval logic
         if self.approval_mode == ApprovalMode.AUTO_MEDIUM:
             if risk_level in [RiskLevel.LOW, RiskLevel.MEDIUM]:
-                click.echo(click.style(f"\n✅ {risk_level.value} risk - Auto-approved\n", fg='green'))
+                click.echo(
+                    click.style(
+                        f"\n✅ {risk_level.value} risk - Auto-approved\n", fg="green"
+                    )
+                )
                 return True
 
         if self.approval_mode == ApprovalMode.AUTO_LOW:
             if risk_level == RiskLevel.LOW:
-                click.echo(click.style(f"\n✅ {risk_level.value} risk - Auto-approved\n", fg='green'))
+                click.echo(
+                    click.style(
+                        f"\n✅ {risk_level.value} risk - Auto-approved\n", fg="green"
+                    )
+                )
                 return True
 
         # Manual approval required
@@ -120,45 +145,43 @@ class SafetyFramework:
 
         while True:
             choice = click.prompt(
-                click.style("\nExecute this command?", fg='yellow'),
-                type=click.Choice(['y', 'n', 'skip', 'abort'], case_sensitive=False),
-                show_choices=True
+                click.style("\nExecute this command?", fg="yellow"),
+                type=click.Choice(["y", "n", "skip", "abort"], case_sensitive=False),
+                show_choices=True,
             )
 
-            if choice == 'y':
+            if choice == "y":
                 return True
-            elif choice == 'n' or choice == 'skip':
-                click.echo(click.style("⏭  Skipped", fg='yellow'))
+            elif choice == "n" or choice == "skip":
+                click.echo(click.style("⏭  Skipped", fg="yellow"))
                 return False
-            elif choice == 'abort':
-                click.echo(click.style("\n🛑 Execution aborted by user", fg='red'))
+            elif choice == "abort":
+                click.echo(click.style("\n🛑 Execution aborted by user", fg="red"))
                 raise KeyboardInterrupt("User aborted execution")
 
     def _show_approval_prompt(
-        self,
-        action: str,
-        target: str,
-        command: str,
-        risk_level: RiskLevel
+        self, action: str, target: str, command: str, risk_level: RiskLevel
     ):
         """Show formatted approval prompt."""
         # Risk indicator
         if risk_level == RiskLevel.HIGH:
-            risk_color = 'red'
-            risk_icon = '🚨'
+            risk_color = "red"
+            risk_icon = "🚨"
         elif risk_level == RiskLevel.MEDIUM:
-            risk_color = 'yellow'
-            risk_icon = '⚠️ '
+            risk_color = "yellow"
+            risk_icon = "⚠️ "
         else:
-            risk_color = 'green'
-            risk_icon = 'ℹ️ '
+            risk_color = "green"
+            risk_icon = "ℹ️ "
 
         click.echo()
         click.echo(DesignSystem.separator(60))
-        click.echo(f"{risk_icon} {click.style(f'{risk_level.value} RISK', fg=risk_color, bold=True)} - Approval Required")
+        click.echo(
+            f"{risk_icon} {click.style(f'{risk_level.value} RISK', fg=risk_color, bold=True)} - Approval Required"
+        )
         click.echo(DesignSystem.separator(60))
         click.echo(f"ACTION: {action}")
         click.echo(f"TARGET: {target}")
         click.echo(f"\n📋 Command to execute:")
-        click.echo(click.style(f"   {command}", fg='cyan', bold=True))
+        click.echo(click.style(f"   {command}", fg="cyan", bold=True))
         click.echo(DesignSystem.separator(60))

souleyez/auth/__init__.py

@@ -9,6 +9,7 @@ Usage:
         # Pro feature access
         pass
 """
+
 from .permissions import (
     Role,
     Tier,
@@ -63,29 +64,29 @@ def is_pro() -> bool:
 
 __all__ = [
     # Classes
-    'Role',
-    'Tier',
-    'Permission',
-    'PermissionChecker',
-    'User',
-    'UserManager',
-    'Session',
-    'SessionManager',
-    'AuditLogger',
-    'AuditAction',
+    "Role",
+    "Tier",
+    "Permission",
+    "PermissionChecker",
+    "User",
+    "UserManager",
+    "Session",
+    "SessionManager",
+    "AuditLogger",
+    "AuditAction",
     # Decorators
-    'requires_permission',
-    'requires_pro',
-    'requires_role',
+    "requires_permission",
+    "requires_pro",
+    "requires_role",
     # Functions
-    'init_auth',
-    'get_session_manager',
-    'get_current_user',
-    'is_logged_in',
-    'is_pro',
-    'audit_log',
-    'get_audit_logger',
+    "init_auth",
+    "get_session_manager",
+    "get_current_user",
+    "is_logged_in",
+    "is_pro",
+    "audit_log",
+    "get_audit_logger",
     # Constants
-    'PRO_TIER_PERMISSIONS',
-    'ROLE_PERMISSIONS',
+    "PRO_TIER_PERMISSIONS",
+    "ROLE_PERMISSIONS",
 ]

souleyez/auth/audit.py

@@ -4,6 +4,7 @@ souleyez.auth.audit - Centralized audit logging
 All sensitive actions should be logged through this module.
 Logs are immutable and include user context automatically.
 """
+
 import sqlite3
 import json
 from datetime import datetime, timedelta
@@ -15,6 +16,7 @@ from souleyez.storage.database import get_db
 
 class AuditAction(Enum):
     """All auditable actions in the system."""
+
     # User actions
     USER_LOGIN = "user.login"
     USER_LOGOUT = "user.logout"
@@ -110,7 +112,7 @@ class AuditLogger:
         resource_id: Optional[str] = None,
         details: Optional[Dict[str, Any]] = None,
         ip_address: Optional[str] = None,
-        success: bool = True
+        success: bool = True,
     ):
         """
         Log an audit event.
@@ -129,6 +131,7 @@ class AuditLogger:
         if user_id is None or username is None:
             try:
                 from souleyez.auth import get_current_user
+
                 user = get_current_user()
                 if user:
                     user_id = user_id or user.id
@@ -141,21 +144,24 @@ class AuditLogger:
 
         try:
             conn = sqlite3.connect(self.db_path)
-            conn.execute("""
+            conn.execute(
+                """
                 INSERT INTO audit_log
                 (timestamp, user_id, username, action, resource_type, resource_id, details, ip_address, success)
                 VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
-            """, (
-                datetime.now().isoformat(),
-                user_id,
-                username,
-                action.value,
-                resource_type,
-                str(resource_id) if resource_id else None,
-                details_json,
-                ip_address,
-                success
-            ))
+            """,
+                (
+                    datetime.now().isoformat(),
+                    user_id,
+                    username,
+                    action.value,
+                    resource_type,
+                    str(resource_id) if resource_id else None,
+                    details_json,
+                    ip_address,
+                    success,
+                ),
+            )
             conn.commit()
             conn.close()
         except Exception:
@@ -167,11 +173,11 @@ class AuditLogger:
         action: AuditAction,
         ip_address: Optional[str] = None,
         details: Optional[Dict[str, Any]] = None,
-        success: bool = True
+        success: bool = True,
     ):
         """
         Log vault events (no user_id since pre-login).
-        
+
         Args:
             action: Vault action being logged
             ip_address: Client IP address
@@ -185,7 +191,7 @@ class AuditLogger:
             resource_type="vault",
             details=details,
             ip_address=ip_address,
-            success=success
+            success=success,
         )
 
     def query(
@@ -198,7 +204,7 @@ class AuditLogger:
         end_date: Optional[datetime] = None,
         success_only: bool = False,
         limit: int = 100,
-        offset: int = 0
+        offset: int = 0,
     ) -> List[Dict[str, Any]]:
         """
         Query audit logs with filters.
@@ -251,8 +257,9 @@ class AuditLogger:
         """Get audit log statistics for the last N days."""
         conn = sqlite3.connect(self.db_path)
 
-        cutoff = (datetime.now().replace(hour=0, minute=0, second=0) -
-                  timedelta(days=days)).isoformat()
+        cutoff = (
+            datetime.now().replace(hour=0, minute=0, second=0) - timedelta(days=days)
+        ).isoformat()
 
         # Total events
         total = conn.execute(
@@ -260,7 +267,8 @@ class AuditLogger:
         ).fetchone()[0]
 
         # Events by action category
-        by_category = conn.execute("""
+        by_category = conn.execute(
+            """
             SELECT
                 SUBSTR(action, 1, INSTR(action, '.') - 1) as category,
                 COUNT(*) as count
@@ -268,18 +276,20 @@ class AuditLogger:
             WHERE timestamp >= ?
             GROUP BY category
             ORDER BY count DESC
-        """, (cutoff,)).fetchall()
+        """,
+            (cutoff,),
+        ).fetchall()
 
         # Failed events
         failed = conn.execute(
             "SELECT COUNT(*) FROM audit_log WHERE timestamp >= ? AND success = 0",
-            (cutoff,)
+            (cutoff,),
         ).fetchone()[0]
 
         # Unique users
         users = conn.execute(
             "SELECT COUNT(DISTINCT user_id) FROM audit_log WHERE timestamp >= ?",
-            (cutoff,)
+            (cutoff,),
         ).fetchone()[0]
 
         conn.close()
@@ -289,7 +299,7 @@ class AuditLogger:
             "failed_events": failed,
             "unique_users": users,
             "by_category": {row[0]: row[1] for row in by_category},
-            "period_days": days
+            "period_days": days,
         }
 
 
@@ -310,7 +320,7 @@ def audit_log(
     resource_type: Optional[str] = None,
     resource_id: Optional[str] = None,
     details: Optional[Dict[str, Any]] = None,
-    success: bool = True
+    success: bool = True,
 ):
     """
     Convenience function for audit logging.
@@ -323,5 +333,5 @@ def audit_log(
         resource_type=resource_type,
         resource_id=resource_id,
         details=details,
-        success=success
+        success=success,
     )