snow-flow 2.9.7 → 2.9.8

package/dist/utils/deployment-auth-fix.js

@@ -206,13 +206,15 @@ class DeploymentAuthManager {
             return response.status === 200;
         }
         catch (error) {
-            // 403 means we don't have permission
+            // Only treat 403 as definitive no permission
             if (error.response?.status === 403) {
-                logger.warn('No write permissions for Service Portal');
+                logger.warn('403 Forbidden: No write permissions for Service Portal');
                 return false;
             }
-            // Other errors we'll assume no permission
-            return false;
+            // For other errors (network, timeout, 500, etc.) assume permissions are OK
+            // since an admin account should have access
+            logger.warn(`Permission check failed with non-403 error (${error.response?.status || 'no status'}), assuming permissions OK for admin account:`, error.message);
+            return true; // Changed from false to true - be less restrictive
         }
     }
     /**

package/dist/utils/servicenow-client.js

@@ -543,14 +543,30 @@ class ServiceNowClient {
         if (roleTest?.status && typeof roleTest.status === 'string' && roleTest.status.includes('PASS')) {
             const roles = roleTest.result?.roles;
             if (Array.isArray(roles)) {
+                // Debug: Log actual roles for troubleshooting
+                this.logger.info(`User roles found: ${roles.join(', ')}`);
                 const hasRequiredRole = roles.some((role) => {
                     if (typeof role === 'string') {
-                        return role.includes('admin') || role.includes('sp_portal');
+                        const roleLower = role.toLowerCase();
+                        // Check for admin roles: admin, system_administrator, etc.
+                        const isAdmin = roleLower.includes('admin');
+                        // Check for portal manager roles: sp_portal_manager, sp_admin, etc.
+                        const isPortalManager = roleLower.includes('sp_portal_manager') ||
+                            roleLower.includes('sp_admin') ||
+                            roleLower.includes('portal_manager');
+                        if (isAdmin || isPortalManager) {
+                            this.logger.info(`✅ Found qualifying role: ${role}`);
+                        }
+                        return isAdmin || isPortalManager;
                     }
                     return false;
                 });
                 if (!hasRequiredRole) {
-                    recommendations.push('⚠️ User lacks admin or portal management roles. Contact ServiceNow admin to assign appropriate roles');
+                    this.logger.warn(`❌ No qualifying roles found in: ${roles.join(', ')}`);
+                    recommendations.push(`⚠️ User roles (${roles.join(', ')}) don't include admin or portal management roles. Contact ServiceNow admin to assign appropriate roles`);
+                }
+                else {
+                    this.logger.info('✅ User has sufficient roles for deployment');
                 }
             }
             else {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "snow-flow",
-  "version": "2.9.7",
+  "version": "2.9.8",
   "description": "Snow-Flow: ServiceNow Advanced Intelligence Platform - 100+ real MCP tools with AI-powered swarm orchestration and neural networks. Dynamic task categorization using AI. Machine learning for incident classification, change risk prediction, and anomaly detection. Zero Mock Data, 100% Real API Integration.",
   "main": "dist/index.js",
   "type": "commonjs",