ruvnet/ruflo · error · Error

policy administration requires an authenticated user context

Error message

policy administration requires an authenticated user context

What it means

Error "policy administration requires an authenticated user context" thrown in ruvnet/ruflo.

Source

Thrown at v3/@claude-flow/cli/src/mcp-tools/policy-tools.ts:24

  PolicyState,
} from '@claude-flow/security';
import type { MCPTool } from './types.js';
import {
  evaluatePolicyRequest,
  issuePolicyApproval,
  loadPolicyState,
  revokePolicyApproval,
  setPolicyBudget,
  setPolicyMode,
  upsertPolicyRule,
  verifyPolicyLedger,
} from '../services/policy-runtime.js';

function requireAuthenticatedAdministrator(
  context: Record<string, unknown> | undefined,
): asserts context is Record<string, unknown> & { principalId: string; principalType: 'user' } {
  if (context?.principalType !== 'user' || typeof context.principalId !== 'string') {
    throw new Error('policy administration requires an authenticated user context');
  }
}

export const policyTools: MCPTool[] = [
  {
    name: 'policy_evaluate',
    description: 'Evaluate an agent action against ADR-324 policy and persist a tamper-evident decision receipt. Use when a consequential tool, deployment, network, spend, or promotion action needs authorization.',
    category: 'security',
    inputSchema: {
      type: 'object',
      properties: {
        request: { type: 'object', description: 'Policy request containing identity, action, and optional evidence/envelope context' },
      },
      required: ['request'],
    },
    handler: async (input, context) => evaluatePolicyRequest(
      input.request as PolicyRequest,
      typeof context?.projectRoot === 'string' ? context.projectRoot : process.cwd(),

View on GitHub (pinned to 6b01dc5a68)

When it happens

Trigger: Thrown at v3/@claude-flow/cli/src/mcp-tools/policy-tools.ts:24 when the library encounters an invalid state.

Common situations: See trigger scenarios.

Understand the failure class

• Authentication and authorization failures — expired tokens, bad credentials, and missing scopes.

AI-assisted analysis of ruvnet/ruflo@6b01dc5a68 (2026-08-12). Data as JSON: /api/errors/5cacf88d649b7b13. Report an issue: GitHub.