snow-flow 1.1.68 → 1.1.69

package/dist/mcp/servicenow-intelligent-mcp.js

@@ -2136,58 +2136,111 @@ class ServiceNowIntelligentMCP {
                 current_permissions: {},
                 required_actions: []
             };
-            // Check current user permissions
-            const currentUser = await this.client.get('/api/now/table/sys_user', {
-                sysparm_query: 'user_name=current_user',
-                sysparm_fields: 'sys_id,user_name,roles'
+            // Get current user info
+            const whoAmI = await this.client.get('/api/now/table/sys_user', {
+                sysparm_query: 'user_name=admin', // Try admin user first
+                sysparm_fields: 'sys_id,user_name,name,email',
+                sysparm_limit: 1
             });
-            if (currentUser.result?.[0]) {
-                // Get user roles
-                const userRoles = await this.client.get('/api/now/table/sys_user_has_role', {
-                    sysparm_query: `user=${currentUser.result[0].sys_id}`,
-                    sysparm_fields: 'role.name,role.sys_id'
-                });
-                escalationResults.current_permissions = {
-                    user_id: currentUser.result[0].sys_id,
-                    current_roles: userRoles.result?.map((r) => r.role?.name || r.role) || []
-                };
-                // Check which roles are missing
-                const currentRoleNames = escalationResults.current_permissions.current_roles;
-                const missingRoles = required_roles.filter((role) => !currentRoleNames.includes(role));
-                if (missingRoles.length === 0) {
-                    escalationResults.escalation_status = 'not_needed';
-                    escalationResults.message = 'User already has all required permissions';
-                }
-                else {
-                    escalationResults.escalation_status = 'required';
-                    escalationResults.missing_roles = missingRoles;
-                    // Generate escalation recommendations
-                    escalationResults.required_actions = [
-                        `Contact ServiceNow administrator to temporarily grant these roles: ${missingRoles.join(', ')}`,
-                        `Reason: ${reason}`,
-                        `Duration: ${duration}`,
-                        `Workflow context: ${workflow_context || 'Multi-agent development'}`
-                    ];
-                    if (duration === 'session') {
-                        escalationResults.required_actions.push('Permissions can be revoked after current development session');
-                    }
-                    // Provide specific guidance for common roles
-                    for (const role of missingRoles) {
-                        switch (role) {
-                            case 'admin':
-                                escalationResults.required_actions.push('🔐 Admin role: Navigate to User Administration > Users, find your user, and add "admin" role');
-                                break;
-                            case 'app_creator':
-                                escalationResults.required_actions.push('📱 App Creator role: Required for creating new applications and scoped artifacts');
-                                break;
-                            case 'system_administrator':
-                                escalationResults.required_actions.push('⚙️ System Administrator: Full system access for advanced configuration');
-                                break;
-                        }
-                    }
+            const currentUser = whoAmI.result?.[0];
+            if (!currentUser) {
+                return { content: [{
+                            type: 'text',
+                            text: '❌ Could not identify current user. Please ensure you are logged in to ServiceNow.'
+                        }] };
+            }
+            // Get user roles
+            const userRoles = await this.client.get('/api/now/table/sys_user_has_role', {
+                sysparm_query: `user=${currentUser.sys_id}`,
+                sysparm_fields: 'role.name,role.description,inherited'
+            });
+            const currentRoles = userRoles.result?.map((r) => r.role?.name).filter(Boolean) || [];
+            const missingRoles = required_roles.filter((role) => !currentRoles.includes(role));
+            // Get instance URL
+            const instanceUrl = process.env.SNOW_INSTANCE ?
+                `https://${process.env.SNOW_INSTANCE.replace(/\/$/, '')}.service-now.com` :
+                'https://your-instance.service-now.com';
+            if (missingRoles.length === 0) {
+                return { content: [{
+                            type: 'text',
+                            text: `✅ **Permission Check Passed**\n\nYou already have all required roles:\n${required_roles.map((r) => `- ✓ ${r}`).join('\n')}\n\nNo escalation needed!`
+                        }] };
+            }
+            // Build actionable response
+            let response = `🔐 **Permission Escalation Required**\n\n`;
+            response += `**Current User:** ${currentUser.name} (${currentUser.user_name})\n`;
+            response += `**Current Roles:** ${currentRoles.length > 0 ? currentRoles.join(', ') : 'None'}\n`;
+            response += `**Missing Roles:** ${missingRoles.join(', ')}\n`;
+            response += `**Reason:** ${reason}\n`;
+            response += `**Duration:** ${duration}\n\n`;
+            response += `## 🎯 Required Actions:\n\n`;
+            // Provide specific instructions for each missing role
+            for (const role of missingRoles) {
+                response += `### ${role} Role\n`;
+                switch (role) {
+                    case 'admin':
+                        response += `The **admin** role provides:\n`;
+                        response += `- Global scope access for creating widgets, flows, and applications\n`;
+                        response += `- Ability to modify system tables and configurations\n`;
+                        response += `- Access to all ServiceNow modules and features\n\n`;
+                        response += `**How to obtain:**\n`;
+                        response += `1. Contact your ServiceNow administrator\n`;
+                        response += `2. Or if you have admin access: [Click here to manage user roles](${instanceUrl}/sys_user.do?sys_id=${currentUser.sys_id})\n`;
+                        response += `3. In the "Roles" related list, click "Edit" and add "admin"\n\n`;
+                        break;
+                    case 'app_creator':
+                        response += `The **app_creator** role provides:\n`;
+                        response += `- Create custom applications and scoped apps\n`;
+                        response += `- Design application modules and menus\n`;
+                        response += `- Manage application artifacts\n\n`;
+                        response += `**How to obtain:**\n`;
+                        response += `1. Request from ServiceNow administrator\n`;
+                        response += `2. Or navigate to: [User Administration > Users](${instanceUrl}/sys_user_list.do)\n`;
+                        response += `3. Find your user record and add "app_creator" role\n\n`;
+                        break;
+                    case 'system_administrator':
+                        response += `The **system_administrator** role provides:\n`;
+                        response += `- Full system access and configuration\n`;
+                        response += `- Advanced scripting and development capabilities\n`;
+                        response += `- Access to all system properties and settings\n\n`;
+                        response += `**How to obtain:**\n`;
+                        response += `1. This is a highly privileged role - contact system admin\n`;
+                        response += `2. Requires approval from ServiceNow instance owner\n\n`;
+                        break;
+                    case 'global_admin':
+                        response += `The **global_admin** role provides:\n`;
+                        response += `- Cross-scope application access\n`;
+                        response += `- Global artifact creation and management\n`;
+                        response += `- Override scope restrictions\n\n`;
+                        response += `**How to obtain:**\n`;
+                        response += `1. Contact ServiceNow administrator\n`;
+                        response += `2. May require business justification\n\n`;
+                        break;
+                    default:
+                        response += `The **${role}** role is required for this operation.\n\n`;
+                        response += `**How to obtain:**\n`;
+                        response += `1. Contact your ServiceNow administrator\n`;
+                        response += `2. Request temporary access for: "${reason}"\n\n`;
                 }
             }
-            return { content: [{ type: 'text', text: JSON.stringify(escalationResults, null, 2) }] };
+            response += `## 💡 Alternative Solutions:\n\n`;
+            response += `1. **Use a development instance** where you have admin access\n`;
+            response += `2. **Request a personal developer instance** from [developer.servicenow.com](https://developer.servicenow.com)\n`;
+            response += `3. **Work with a team member** who has the required permissions\n`;
+            response += `4. **Use Update Sets** to package changes for deployment by an admin\n\n`;
+            response += `## 📋 Template Request for Admin:\n\n`;
+            response += `\`\`\`\n`;
+            response += `Subject: Temporary Permission Request - ${reason}\n\n`;
+            response += `Hi Admin,\n\n`;
+            response += `I need temporary access to the following roles for development:\n`;
+            response += `- Roles needed: ${missingRoles.join(', ')}\n`;
+            response += `- Reason: ${reason}\n`;
+            response += `- Duration: ${duration}\n`;
+            response += `- Context: ${workflow_context || 'ServiceNow multi-agent development'}\n\n`;
+            response += `These permissions can be revoked after the ${duration === 'session' ? 'current session' : duration}.\n\n`;
+            response += `Thank you!\n`;
+            response += `\`\`\``;
+            return { content: [{ type: 'text', text: response }] };
         }
         catch (error) {
             return { content: [{