@siduri-x/core 1.0.3 → 1.0.4

package/dist/action-policy.js

@@ -73,10 +73,17 @@ class ActionPolicyEngine {
             await this.recordAudit(action, undefined, decision, 'REJECTED');
             return { decision };
         }
-        // Role check if tool restricts roles
+        // Role check if tool restricts roles (supports administrator/owner role parity)
         if (toolDef.allowedRoles && toolDef.allowedRoles.length > 0) {
             const actorRole = effectiveContext.actor.authorizationRole;
-            if (!toolDef.allowedRoles.includes(actorRole)) {
+            const normalizedActorRoles = new Set([actorRole.toLowerCase()]);
+            if (actorRole === 'administrator' || actorRole === 'owner') {
+                normalizedActorRoles.add('administrator');
+                normalizedActorRoles.add('owner');
+                normalizedActorRoles.add('admin');
+            }
+            const isAuthorizedRole = toolDef.allowedRoles.some((r) => normalizedActorRoles.has(r.toLowerCase()));
+            if (!isAuthorizedRole) {
                 const decision = {
                     allowed: false,
                     reason: `Actor role "${actorRole}" is not authorized to execute tool "${action.toolName}"`,

package/dist/action-policy.test.js

@@ -154,4 +154,41 @@ describe('ActionPolicyEngine Boundary', () => {
         expect(log?.parametersHash).toBeDefined();
         expect(log?.resultHash).toBeDefined();
     });
+    it('supports single-owner role parity between owner and administrator', async () => {
+        const ownerTool = {
+            name: 'builtin/owner_tool',
+            description: 'Owner only tool',
+            inputSchema: {},
+            riskLevel: 'LOW',
+            allowedRoles: ['owner'],
+        };
+        engine.registerToolDefinition(ownerTool);
+        // Context with authorizationRole: 'administrator'
+        const adminContext = {
+            ...sampleContext,
+            actor: {
+                ...sampleContext.actor,
+                authorizationRole: 'administrator',
+            },
+        };
+        const actionWithAdmin = {
+            actionId: 'act-owner-admin',
+            toolName: 'builtin/owner_tool',
+            parameters: {},
+            context: adminContext,
+        };
+        const res = await engine.evaluateAction(actionWithAdmin);
+        expect(res.decision.allowed).toBe(true);
+        expect(res.capability).toBeDefined();
+        // Context with authorizationRole: 'operator' (non-owner) is rejected
+        const operatorAction = {
+            actionId: 'act-owner-op',
+            toolName: 'builtin/owner_tool',
+            parameters: {},
+            context: sampleContext, // has authorizationRole: 'operator'
+        };
+        const resOp = await engine.evaluateAction(operatorAction);
+        expect(resOp.decision.allowed).toBe(false);
+        expect(resOp.decision.decisionCode).toBe('REJECTED_UNAUTHORIZED');
+    });
 });

package/dist/chat-contract.d.ts

@@ -31,7 +31,6 @@ export interface ChatResponsePlan {
 }
 export interface ChatResponseMetadata {
     language?: string;
-    internal_monologue?: string;
     proposals?: Claim[];
     memory_proposals?: Array<{
         proposal_id: string;

package/dist/chat-contract.js

@@ -20,10 +20,10 @@ async function dispatchCompanionChat(runtime, payload) {
                 ? 'OWNER'
                 : authRole === 'operator'
                     ? 'OPERATOR'
-                    : 'VIEWER';
+                    : (authRole === 'viewer' ? 'VIEWER' : 'OWNER');
     }
     else {
-        roleOrContext = 'VIEWER';
+        roleOrContext = 'OWNER';
     }
     const runtimeResult = await runtime.handleUserMessage(userMessage, roleOrContext, history);
     // Normalize response plan
@@ -48,6 +48,8 @@ async function dispatchCompanionChat(runtime, payload) {
     const metadata = {
         ...(runtimeResult?.metadata || {}),
     };
+    delete metadata.internal_monologue;
+    delete metadata.internalMonologue;
     return {
         status: runtimeResult?.status || 'APPROVED',
         response_id: runtimeResult?.response_id,

package/dist/runtime.js

@@ -390,7 +390,6 @@ class SiduriRuntime {
             },
             metadata: {
                 language: plan.language,
-                internal_monologue: plan.internalMonologue,
                 proposals: createdMemoryProposals,
                 memory_proposals: memoryProposalReceipts,
                 action_results: actionResults,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@siduri-x/core",
-  "version": "1.0.3",
+  "version": "1.0.4",
   "description": "Core runtime types, evidence protocol, action dispatcher, capability validation, and SiduriRuntime protocol",
   "license": "Apache-2.0",
   "repository": {