@siduri-x/core 2.0.0 → 2.0.2

package/dist/sqlite-action-store.js

@@ -36,7 +36,12 @@ class SqliteActionStore {
         execution_id TEXT PRIMARY KEY,
         approver_actor_id TEXT NOT NULL,
         reason TEXT,
-        approved_at TEXT NOT NULL
+        approver_role TEXT,
+        approved_at TEXT NOT NULL,
+        tool_name TEXT,
+        parameters_hash TEXT,
+        companion_id TEXT,
+        actor_id TEXT
       );
 
       CREATE TABLE IF NOT EXISTS action_audit_log (
@@ -62,6 +67,28 @@ class SqliteActionStore {
         timestamp TEXT NOT NULL
       );
     `);
+        try {
+            this.db.exec('ALTER TABLE action_approvals ADD COLUMN approver_role TEXT;');
+        }
+        catch {
+            // Column already exists or table freshly created
+        }
+        try {
+            this.db.exec('ALTER TABLE action_approvals ADD COLUMN tool_name TEXT;');
+        }
+        catch { }
+        try {
+            this.db.exec('ALTER TABLE action_approvals ADD COLUMN parameters_hash TEXT;');
+        }
+        catch { }
+        try {
+            this.db.exec('ALTER TABLE action_approvals ADD COLUMN companion_id TEXT;');
+        }
+        catch { }
+        try {
+            this.db.exec('ALTER TABLE action_approvals ADD COLUMN actor_id TEXT;');
+        }
+        catch { }
     }
     initLastAuditHash() {
         const row = this.db.prepare('SELECT event_hash FROM action_audit_log ORDER BY id DESC LIMIT 1').get();
@@ -127,22 +154,48 @@ class SqliteActionStore {
             updatedAt: row.updated_at,
         };
     }
-    async saveApproval(executionId, approverActorId, reason) {
+    async saveApproval(executionId, approverActorId, reason, approverRole, toolName, parametersHash, companionId, actorId) {
         const stmt = this.db.prepare(`
-      INSERT INTO action_approvals (execution_id, approver_actor_id, reason, approved_at)
-      VALUES (?, ?, ?, ?)
+      INSERT INTO action_approvals (
+        execution_id, approver_actor_id, reason, approver_role, approved_at,
+        tool_name, parameters_hash, companion_id, actor_id
+      )
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)
       ON CONFLICT(execution_id) DO UPDATE SET
         approver_actor_id = excluded.approver_actor_id,
         reason = excluded.reason,
-        approved_at = excluded.approved_at
+        approver_role = excluded.approver_role,
+        approved_at = excluded.approved_at,
+        tool_name = excluded.tool_name,
+        parameters_hash = excluded.parameters_hash,
+        companion_id = excluded.companion_id,
+        actor_id = excluded.actor_id
     `);
-        stmt.run(executionId, approverActorId, reason ?? null, new Date().toISOString());
+        stmt.run(executionId, approverActorId, reason ?? null, approverRole ?? null, new Date().toISOString(), toolName ?? null, parametersHash ?? null, companionId ?? null, actorId ?? null);
     }
     async isActionApproved(executionId) {
         const stmt = this.db.prepare('SELECT 1 FROM action_approvals WHERE execution_id = ?');
         const row = stmt.get(executionId);
         return !!row;
     }
+    async getApproval(executionId) {
+        const stmt = this.db.prepare('SELECT * FROM action_approvals WHERE execution_id = ?');
+        const row = stmt.get(executionId);
+        if (!row) {
+            return undefined;
+        }
+        return {
+            executionId: row.execution_id,
+            approverActorId: row.approver_actor_id,
+            reason: row.reason ?? undefined,
+            approverRole: row.approver_role ?? undefined,
+            approvedAt: row.approved_at,
+            toolName: row.tool_name ?? undefined,
+            parametersHash: row.parameters_hash ?? undefined,
+            companionId: row.companion_id ?? undefined,
+            actorId: row.actor_id ?? undefined,
+        };
+    }
     async appendAudit(event) {
         const prevHash = this.lastAuditHash;
         const eventPayload = {
@@ -164,6 +217,7 @@ class SqliteActionStore {
                 decisionCode: event.decision.decisionCode,
             } : null,
             parametersHash: event.parametersHash || null,
+            resultHash: event.resultHash || null,
             error: event.error || null,
             timestamp: event.timestamp,
         };

package/dist/sqlite-action-store.test.js

@@ -152,6 +152,7 @@ describe('SqliteActionStore Implementation & Durability', () => {
             lifecycle: event1.lifecycle,
             decision: null,
             parametersHash: null,
+            resultHash: null,
             error: null,
             timestamp: event1.timestamp,
         });
@@ -228,6 +229,7 @@ describe('SqliteActionStore Implementation & Durability', () => {
         await engine1.approveAction({
             executionId: 'exec-danger-1',
             approverActorId: 'local-owner',
+            approverRole: 'owner',
             reason: 'Owner confirmed cleanup',
         });
         store1.close();
@@ -246,6 +248,14 @@ describe('SqliteActionStore Implementation & Durability', () => {
         expect(eval2.decision.decisionCode).toBe('ALLOWED_POLICY');
         expect(eval2.capability).toBeDefined();
         expect((0, capability_1.verifyCapabilitySignature)(eval2.capability, secretKey)).toBe(true);
+        // 5. Tampered action after restart -> rejected due to approval parameter mismatch
+        const tamperedAction = {
+            ...action,
+            parameters: { force: true, dropDatabase: true },
+        };
+        const evalTampered = await engine2.evaluateAction(tamperedAction);
+        expect(evalTampered.decision.allowed).toBe(false);
+        expect(evalTampered.decision.decisionCode).toBe('REJECTED_APPROVAL_MISMATCH');
         store2.close();
     });
 });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@siduri-x/core",
-  "version": "2.0.0",
+  "version": "2.0.2",
   "description": "Core runtime types, evidence protocol, action dispatcher, capability validation, and SiduriRuntime protocol",
   "license": "Apache-2.0",
   "repository": {
@@ -17,7 +17,7 @@
     "LICENSE"
   ],
   "engines": {
-    "node": ">=20"
+    "node": ">=22.16.0"
   },
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -29,11 +29,11 @@
     }
   },
   "devDependencies": {
-    "@types/jest": "^29.5.14",
-    "@types/node": "^26.2.0",
-    "jest": "^29.7.0",
+    "@types/jest": "^30.0.0",
+    "@types/node": "^26.5.1",
+    "jest": "^30.5.1",
     "ts-jest": "^29.4.12",
-    "typescript": "^5.3.3"
+    "typescript": "^5.9.3"
   },
   "scripts": {
     "build": "tsc",