@jacebenson/jsn 0.0.10 → 0.1.0

package/src/commands/dev/_generic.js

@@ -1,14 +1,33 @@
 // Generic dev subcommand builder for table-based CRUD
 
-import { formatRecordForDisplay, getStringField, isHexString } from '../../helpers.js';
+import { formatRecordForDisplay, getStringField, isHexString, parseDataArg } from '../../helpers.js';
 import { getCurrentUser, getCurrentApplication } from '../../context.js';
 import readline from 'node:readline';
+import search from '@inquirer/search';
+import { isTTY, FormatAuto } from '../../output.js';
 
 function vowelArticle(word) {
   const first = word.charAt(0).toLowerCase();
   return first === 'a' || first === 'e' || first === 'i' || first === 'o' || first === 'u' ? 'an' : 'a';
 }
 
+function buildHints(name, singular, readOnly) {
+  const crumbs = [];
+  if (!readOnly) {
+    crumbs.push({
+      action: 'create',
+      cmd: `jsn dev ${name} create --name ... --label "..."`,
+      description: `Create ${vowelArticle(singular)} ${singular}`,
+    });
+  }
+  crumbs.push({
+    action: 'show',
+    cmd: `jsn dev ${name} show <name_or_sys_id>`,
+    description: `Show ${singular} details`,
+  });
+  return crumbs;
+}
+
 function toSingular(name, explicitSingular) {
   if (explicitSingular) return explicitSingular;
   if (name.endsWith('ies')) return name.slice(0, -3) + 'y';
@@ -65,12 +84,92 @@ export function buildDevCmd(name, table, aliases, defaultColumns, wrap, opts = {
           .option('columns', { alias: 'c', type: 'string', describe: 'Comma-separated columns (e.g. "name,label,super_class")' })
           .option('limit', { alias: 'l', type: 'number', default: 20, describe: 'Max records' }),
         handler: wrap(async (argv, app) => {
+          const query = argv.query || '';
           const columns = argv.columns ? argv.columns.split(',') : defaultColumns;
+          const limit = argv.limit;
+
+          // Interactive picker in TTY with auto format and no explicit query
+          const interactive = isTTY(process.stdout) && isTTY(process.stdin);
+          if (interactive && app.output.getFormat() === FormatAuto && !query) {
+            const pickerColumns = ['sys_id', 'name', ...columns.filter(c => c !== 'name' && c !== 'sys_id')];
+            const pickerParams = new URLSearchParams();
+            pickerParams.set('sysparm_limit', String(limit));
+            pickerParams.set('sysparm_display_value', 'all');
+            pickerParams.set('sysparm_fields', pickerColumns.join(','));
+            pickerParams.set('sysparm_query', 'ORDERBYDESCsys_updated_on');
+
+            const pickerRecords = await app.sdk.list(table, pickerParams);
+            if (pickerRecords.length === 0) {
+              app.ok({
+                table,
+                count: 0,
+                columns: pickerColumns,
+                records: [],
+                pagination: { limit, offset: 0 },
+                context: { instance_url: app.getEffectiveInstance() },
+              }, {
+                summary: `0 ${name}(s)`,
+                breadcrumbs: buildHints(name, singular, readOnly),
+              });
+              return;
+            }
+
+            const choices = pickerRecords.map(r => {
+              const recordName = getStringField(r, 'name') || getStringField(r, 'sys_id');
+              const scope = getStringField(r, 'sys_scope') || '';
+              let label = recordName;
+              if (scope && scope !== 'global') label += ` [${scope}]`;
+              return { name: label, value: recordName };
+            });
+
+            let selectedName;
+            try {
+              selectedName = await search({
+                message: `Select ${vowelArticle(singular)} ${singular}:`,
+                source: async (input) => {
+                  if (!input) return choices;
+                  const term = input.toLowerCase();
+                  return choices.filter(c => c.name.toLowerCase().includes(term));
+                },
+              });
+            } catch (err) {
+              if (err.name === 'ExitPromptError' || (err.message && err.message.includes('force closed'))) {
+                return;
+              }
+              throw err;
+            }
+
+            if (selectedName) {
+              const showParams = new URLSearchParams();
+              showParams.set('sysparm_query', `name=${selectedName}`);
+              showParams.set('sysparm_display_value', 'all');
+              showParams.set('sysparm_limit', '1');
+              const showRecords = await app.sdk.list(table, showParams);
+              if (showRecords.length === 0) {
+                throw new Error(`${singular} not found: ${selectedName}`);
+              }
+              const record = showRecords[0];
+              record._context = { instance_url: app.getEffectiveInstance(), table };
+              if (opts.onShow) {
+                await opts.onShow(record, app);
+              }
+              app.ok(record, {
+                summary: `${singular.charAt(0).toUpperCase() + singular.slice(1)}: ${selectedName}`,
+                breadcrumbs: [
+                  ...(readOnly ? [] : [{ action: 'update', cmd: `jsn dev ${name} update ${selectedName} --data '{...}'`, description: `Update this ${singular}` }]),
+                  { action: 'list', cmd: `jsn dev ${name} list`, description: `Back to all ${name}` },
+                ],
+              });
+            }
+            return;
+          }
+
+          // Non-interactive: text/table output
           const params = new URLSearchParams();
-          params.set('sysparm_limit', String(argv.limit));
+          params.set('sysparm_limit', String(limit));
           params.set('sysparm_display_value', 'all');
           params.set('sysparm_fields', ['sys_id', ...columns].join(','));
-          const q = argv.query ? argv.query + '^ORDERBYDESCsys_updated_on' : 'ORDERBYDESCsys_updated_on';
+          const q = query ? query + '^ORDERBYDESCsys_updated_on' : 'ORDERBYDESCsys_updated_on';
           params.set('sysparm_query', q);
           const records = await app.sdk.list(table, params);
           app.ok({
@@ -79,7 +178,10 @@ export function buildDevCmd(name, table, aliases, defaultColumns, wrap, opts = {
             columns,
             records: records.map(r => formatRecordForDisplay(r, columns)),
             context: { instance_url: app.getEffectiveInstance() },
-          }, { summary: `${records.length} ${name}(s)` });
+          }, {
+            summary: `${records.length} ${name}(s)`,
+            breadcrumbs: buildHints(name, singular, readOnly),
+          });
         }),
       })
       .command({
@@ -123,9 +225,11 @@ export function buildDevCmd(name, table, aliases, defaultColumns, wrap, opts = {
         .command({
           command: 'create',
           describe: `Create a new ${singular}`,
-          builder: (y) => y.option('data', { type: 'string', demandOption: true, describe: 'JSON fields (e.g. \'{"state":"2"}\')' }),
+          builder: (y) => y
+            .option('data', { type: 'string', describe: 'JSON fields (e.g. \'{"state":"2"}\')' })
+            .option('data-file', { type: 'string', describe: 'Read JSON payload from file' }),
           handler: wrap(async (argv, app) => {
-            const recordData = JSON.parse(argv.data);
+            const recordData = parseDataArg(argv);
             const record = await app.sdk.create(table, recordData);
             app.ok(record, {
               summary: `Created ${singular}`,
@@ -138,7 +242,9 @@ export function buildDevCmd(name, table, aliases, defaultColumns, wrap, opts = {
         .command({
           command: 'update <identifier>',
           describe: `Update ${vowelArticle(singular)} ${singular}`,
-          builder: (y) => y.option('data', { type: 'string', demandOption: true, describe: 'JSON fields (e.g. \'{"state":"2"}\')' }),
+          builder: (y) => y
+            .option('data', { type: 'string', describe: 'JSON fields (e.g. \'{"state":"2"}\')' })
+            .option('data-file', { type: 'string', describe: 'Read JSON payload from file' }),
           handler: wrap(async (argv, app) => {
             const id = argv.identifier;
             const queryField = isHexString(id) && id.length === 32 ? 'sys_id' : 'name';
@@ -159,7 +265,7 @@ export function buildDevCmd(name, table, aliases, defaultColumns, wrap, opts = {
               }
             }
 
-            const recordData = JSON.parse(argv.data);
+            const recordData = parseDataArg(argv);
             const updated = await app.sdk.update(table, sysID, recordData);
             app.ok(updated, { summary: `Updated ${singular} ${id}` });
           }),
@@ -215,9 +321,20 @@ export function buildDevCmd(name, table, aliases, defaultColumns, wrap, opts = {
     aliases: aliases || [],
     describe: `Manage ${name} (e.g. "${name} list --query nameLIKEincident")`,
     builder,
-    handler: (argv) => {
-      if (argv.help) return;
-      argv.showHelp?.();
+    handler: (_argv) => {
+      // This handler only runs when no subcommand is matched (the default case).
+      // Show help for the subcommands available.
+      console.log(`Manage ${name} from the ${table} table.`);
+      console.log('');
+      console.log('Available subcommands:');
+      console.log('  list        List all records');
+      console.log('  show        Show record details');
+      if (!readOnly) {
+        console.log('  create      Create a new record');
+        console.log('  update      Update a record');
+        console.log('  delete      Delete a record');
+      }
+      console.log(`\nRun "jsn dev ${name} <command> --help" for details.`);
     },
   };
 }

package/src/commands/dev/eval.js

@@ -1,17 +1,38 @@
+import fs from 'node:fs';
+
 export function evalCmd(wrap) {
   return {
     command: 'eval',
-    describe: 'Execute background scripts (eval)',
+    describe: 'Execute background scripts on the instance',
     builder: (yargs) => {
       return yargs
-        .option('script', { alias: 's', type: 'string', describe: 'JavaScript code to execute (required)', demandOption: true });
+        .option('script', { alias: 's', type: 'string', describe: 'JavaScript code to execute' })
+        .option('file', { alias: 'f', type: 'string', describe: 'Read script from file' });
     },
     handler: wrap(async (argv, app) => {
+      let script;
+
+      if (argv.file) {
+        script = fs.readFileSync(argv.file, 'utf-8');
+      } else if (argv.script) {
+        script = argv.script;
+      } else {
+        throw new Error('--script or --file is required');
+      }
+
+      const output = await app.sdk.executeScript(script);
       app.ok({
-        status: 'stub',
-        message: 'Background script execution is not yet implemented',
-        script: argv.script,
-      }, { summary: 'Background script execution (stub)' });
+        script,
+        output,
+        instance: app.getEffectiveInstance(),
+      }, {
+        summary: 'Script executed',
+        breadcrumbs: [{
+          action: 'eval',
+          cmd: 'jsn dev eval --script \'...\'',
+          description: 'Execute a background script on the ServiceNow instance',
+        }],
+      });
     }),
   };
 }

package/src/commands/dev/flows.js

@@ -1,4 +1,4 @@
-import { formatRecordForDisplay, getStringField } from '../../helpers.js';
+import { formatRecordForDisplay, getStringField, interactiveList } from '../../helpers.js';
 
 export function flowsCmd(wrap) {
   return {
@@ -17,6 +17,23 @@ export function flowsCmd(wrap) {
             .option('limit', { alias: 'l', type: 'number', default: 20, describe: 'Max records' }),
           handler: wrap(async (argv, app) => {
             const columns = argv.columns ? argv.columns.split(',') : ['name', 'active', 'description', 'sys_created_by', 'sys_updated_on'];
+            const query = argv.query || '';
+
+            // Interactive picker
+            const picked = await interactiveList({
+              app, table: 'sys_hub_flow', singular: 'flow', columns, limit: argv.limit, query, labelField: 'name',
+              formatLabel: r => `${getStringField(r, 'name')} ${getStringField(r, 'active') === 'true' ? '' : '[inactive]'}`,
+            });
+            if (picked) {
+              const inspection = await app.sdk.inspectFlow(picked.sys_id);
+              const formatted = formatFlowInspection(inspection, app.getEffectiveInstance());
+              return app.ok({ ...inspection, _formatted: formatted }, {
+                summary: `Flow: ${inspection.flow.name}`,
+                breadcrumbs: [{ action: 'list', cmd: 'jsn dev flows list', description: 'Back to all flows' }],
+              });
+            }
+
+            // Text/table fallback
             const params = new URLSearchParams();
             params.set('sysparm_limit', String(argv.limit));
             params.set('sysparm_display_value', 'all');
@@ -48,6 +65,34 @@ export function flowsCmd(wrap) {
               ],
             });
           }),
+        })
+        .command({
+          command: 'create',
+          describe: 'Create a new flow (not yet implemented)',
+          builder: (y) => y
+            .option('data', { type: 'string', describe: 'JSON data for the flow' }),
+          handler: wrap(async (_argv, _app) => {
+            throw new Error('Flow creation requires the Flow Designer GraphQL API - not yet implemented.\n'
+              + 'Use the ServiceNow web UI to create flows, then use "jsn dev flows list" to view them.');
+          }),
+        })
+        .command({
+          command: 'update <identifier>',
+          describe: 'Update a flow (not yet implemented)',
+          builder: (y) => y
+            .option('data', { type: 'string', describe: 'JSON data to update' }),
+          handler: wrap(async (_argv, _app) => {
+            throw new Error('Flow updates require the Flow Designer GraphQL API - not yet implemented.\n'
+              + 'Use the ServiceNow web UI to update flows, then use "jsn dev flows list" to view them.');
+          }),
+        })
+        .command({
+          command: 'delete <identifier>',
+          describe: 'Delete a flow (not yet implemented)',
+          handler: wrap(async (_argv, _app) => {
+            throw new Error('Flow deletion requires the Flow Designer GraphQL API - not yet implemented.\n'
+              + 'Use the ServiceNow web UI to delete flows.');
+          }),
         });
     },
     handler: () => {},

package/src/commands/dev/logs.js

@@ -1,4 +1,4 @@
-import { formatRecordForDisplay } from '../../helpers.js';
+import { formatRecordForDisplay, interactiveList, getStringField } from '../../helpers.js';
 
 export function logsCmd(wrap) {
   return {
@@ -17,11 +17,24 @@ export function logsCmd(wrap) {
             .option('limit', { alias: 'l', type: 'number', default: 50, describe: 'Max records' }),
           handler: wrap(async (argv, app) => {
             const columns = argv.columns ? argv.columns.split(',') : ['level', 'message', 'source', 'created'];
+            const query = argv.query || '';
+
+            // Try interactive picker first
+            const picked = await interactiveList({
+              app, table: 'syslog', singular: 'log entry', columns, limit: argv.limit, query, labelField: 'message',
+              formatLabel: r => `[${getStringField(r, 'level') || '?'}] ${(getStringField(r, 'message') || '').substring(0, 80)}`,
+            });
+            if (picked) {
+              picked._context = { instance_url: app.getEffectiveInstance(), table: 'syslog' };
+              return app.ok(picked, { summary: `Log entry` });
+            }
+
+            // Fall back to text/table
             const params = new URLSearchParams();
             params.set('sysparm_limit', String(argv.limit));
             params.set('sysparm_display_value', 'all');
             params.set('sysparm_fields', ['sys_id', ...columns].join(','));
-            const q = argv.query ? argv.query + '^ORDERBYDESCsys_created_on' : 'ORDERBYDESCsys_created_on';
+            const q = query ? query + '^ORDERBYDESCsys_created_on' : 'ORDERBYDESCsys_created_on';
             params.set('sysparm_query', q);
             const records = await app.sdk.list('syslog', params);
             app.ok({

package/src/commands/dev/scopes.js

@@ -1,4 +1,4 @@
-import { formatRecordForDisplay, getStringField } from '../../helpers.js';
+import { formatRecordForDisplay, getStringField, interactiveList } from '../../helpers.js';
 
 export function scopesCmd(wrap) {
   return {
@@ -17,6 +17,17 @@ export function scopesCmd(wrap) {
             .option('limit', { alias: 'l', type: 'number', default: 20, describe: 'Max records' }),
           handler: wrap(async (argv, app) => {
             const columns = argv.columns ? argv.columns.split(',') : ['name', 'scope', 'short_description', 'active'];
+            const query = argv.query || '';
+
+            const picked = await interactiveList({
+              app, table: 'sys_scope', singular: 'scope', columns, limit: argv.limit, query, labelField: 'name',
+              formatLabel: r => `${getStringField(r, 'name')} [${getStringField(r, 'scope') || '?'}]`,
+            });
+            if (picked) {
+              picked._context = { instance_url: app.getEffectiveInstance(), table: 'sys_scope' };
+              return app.ok(picked, { summary: `Scope: ${getStringField(picked, 'name')}` });
+            }
+
             const params = new URLSearchParams();
             params.set('sysparm_limit', String(argv.limit));
             params.set('sysparm_display_value', 'all');
@@ -89,8 +100,57 @@ export function scopesCmd(wrap) {
             app.ok({ scope: argv.scope, sys_id: scopeSysID }, { summary: `Current scope: ${argv.scope}` });
           }),
         })
+        .command({
+          command: 'create',
+          describe: 'Create a new application scope',
+          builder: (y) => y
+            .option('name', { alias: 'n', type: 'string', demandOption: true, describe: 'Application name' })
+            .option('scope', { type: 'string', describe: 'Scope value (auto-generated from name if omitted)' }),
+          handler: wrap(async (argv, app) => {
+            let scope = argv.scope;
+            if (!scope) {
+              // Auto-generate scope from name: lowercase, replace spaces/special chars
+              scope = 'x_' + argv.name.toLowerCase()
+                .replace(/[^a-z0-9_]/g, '_')
+                .replace(/_+/g, '_')
+                .replace(/^_|_$/g, '')
+                .substring(0, 38); // x_ + max 35 chars = 37, leave room
+            }
+            // Check for existing scope
+            const existing = await app.sdk.list('sys_scope', new URLSearchParams({
+              sysparm_query: `scope=${scope}`,
+              sysparm_limit: '1',
+            }));
+            if (existing.length > 0) {
+              throw new Error(`Scope '${scope}' already exists. Use a different name or --scope flag.`);
+            }
+            const record = await app.sdk.create('sys_scope', {
+              name: argv.name,
+              scope,
+              short_description: argv.name,
+            });
+            app.ok(record, {
+              summary: `Created scope: ${scope}`,
+              breadcrumbs: [{
+                action: 'show',
+                cmd: `jsn dev scopes show ${scope}`,
+                description: 'View the new scope',
+              }],
+            });
+          }),
+        })
 
     },
-    handler: () => {},
+    handler: (argv) => {
+      if (!argv._[1]) {
+        console.log('Manage ServiceNow application scopes.\n');
+        console.log('Commands:');
+        console.log('  list           List application scopes');
+        console.log('  show <scope>   Show a scope');
+        console.log('  set  <scope>   Set the current application scope');
+        console.log('  create         Create a new application scope');
+        console.log('\nRun "jsn dev scopes <command> --help" for details.');
+      }
+    },
   };
 }

package/src/commands/dev/updatesets.js

@@ -1,4 +1,4 @@
-import { formatRecordForDisplay, getStringField } from '../../helpers.js';
+import { formatRecordForDisplay, getStringField, interactiveList } from '../../helpers.js';
 
 export function updateSetsCmd(wrap) {
   return {
@@ -17,6 +17,17 @@ export function updateSetsCmd(wrap) {
             .option('limit', { alias: 'l', type: 'number', default: 20, describe: 'Max records' }),
           handler: wrap(async (argv, app) => {
             const columns = argv.columns ? argv.columns.split(',') : ['name', 'state', 'application'];
+            const query = argv.query || '';
+
+            const picked = await interactiveList({
+              app, table: 'sys_update_set', singular: 'update set', columns, limit: argv.limit, query, labelField: 'name',
+              formatLabel: r => `${getStringField(r, 'name')} [${getStringField(r, 'state') || '?'}]`,
+            });
+            if (picked) {
+              picked._context = { instance_url: app.getEffectiveInstance(), table: 'sys_update_set' };
+              return app.ok(picked, { summary: `Update set: ${getStringField(picked, 'name')}` });
+            }
+
             const params = new URLSearchParams();
             params.set('sysparm_limit', String(argv.limit));
             params.set('sysparm_display_value', 'all');
@@ -90,8 +101,40 @@ export function updateSetsCmd(wrap) {
             app.ok({ update_set: argv.name, sys_id: sysID }, { summary: `Current update set: ${argv.name}` });
           }),
         })
+        .command({
+          command: 'create',
+          describe: 'Create a new update set',
+          builder: (y) => y
+            .option('name', { alias: 'n', type: 'string', demandOption: true, describe: 'Update set name' })
+            .option('description', { type: 'string', describe: 'Description' }),
+          handler: wrap(async (argv, app) => {
+            const record = await app.sdk.create('sys_update_set', {
+              name: argv.name,
+              description: argv.description || argv.name,
+              state: 'in progress',
+            });
+            app.ok(record, {
+              summary: `Created update set: ${argv.name}`,
+              breadcrumbs: [{
+                action: 'set',
+                cmd: `jsn dev updatesets set "${argv.name}"`,
+                description: 'Set as current update set',
+              }],
+            });
+          }),
+        })
 
     },
-    handler: () => {},
+    handler: (argv) => {
+      if (!argv._[1]) {
+        console.log('Manage ServiceNow update sets.\n');
+        console.log('Commands:');
+        console.log('  list           List update sets');
+        console.log('  show <name>    Show an update set');
+        console.log('  set  <name>    Set the current update set');
+        console.log('  create         Create a new update set');
+        console.log('\nRun "jsn dev updatesets <command> --help" for details.');
+      }
+    },
   };
 }

package/src/commands/groupmembers.js

@@ -1,4 +1,4 @@
-import { formatRecordForDisplay } from '../helpers.js';
+import { formatRecordForDisplay, getStringField } from '../helpers.js';
 
 export function groupMembersCmd(wrap) {
   return {
@@ -32,7 +32,120 @@ export function groupMembersCmd(wrap) {
             }, { summary: `${records.length} group member(s)` });
           }),
         })
+        .command({
+          command: 'add',
+          describe: 'Add a user to a group',
+          builder: (y) => y
+            .option('group', { alias: 'g', type: 'string', demandOption: true, describe: 'Group name or sys_id (required)' })
+            .option('user', { alias: 'u', type: 'string', demandOption: true, describe: 'Username or sys_id (required)' }),
+          handler: wrap(async (argv, app) => {
+            const groupName = argv.group;
+            const userName = argv.user;
+
+            // Resolve group sys_id
+            const isGroupSysID = groupName.length === 32 && /^[0-9a-fA-F]+$/.test(groupName);
+            const groupParams = new URLSearchParams();
+            groupParams.set('sysparm_query', isGroupSysID ? `sys_id=${groupName}` : `name=${groupName}`);
+            groupParams.set('sysparm_limit', '1');
+            groupParams.set('sysparm_fields', 'sys_id');
+            const groupRecords = await app.sdk.list('sys_user_group', groupParams);
+            if (groupRecords.length === 0) {
+              throw new Error(`Group not found: ${groupName}`);
+            }
+            const groupSysID = getStringField(groupRecords[0], 'sys_id');
+
+            // Resolve user sys_id
+            const isUserSysID = userName.length === 32 && /^[0-9a-fA-F]+$/.test(userName);
+            const userParams = new URLSearchParams();
+            userParams.set('sysparm_query', isUserSysID ? `sys_id=${userName}` : `user_name=${userName}`);
+            userParams.set('sysparm_limit', '1');
+            userParams.set('sysparm_fields', 'sys_id');
+            const userRecords = await app.sdk.list('sys_user', userParams);
+            if (userRecords.length === 0) {
+              throw new Error(`User not found: ${userName}`);
+            }
+            const userSysID = getStringField(userRecords[0], 'sys_id');
+
+            // Check if membership already exists
+            const checkParams = new URLSearchParams();
+            checkParams.set('sysparm_query', `group=${groupSysID}^user=${userSysID}`);
+            checkParams.set('sysparm_limit', '1');
+            checkParams.set('sysparm_fields', 'sys_id');
+            const existing = await app.sdk.list('sys_user_grmember', checkParams);
+            if (existing.length > 0) {
+              throw new Error(`User ${userName} is already a member of group ${groupName}`);
+            }
+
+            // Create the membership
+            const record = await app.sdk.create('sys_user_grmember', {
+              group: groupSysID,
+              user: userSysID,
+            });
+            app.ok(record, {
+              summary: `Added ${userName} to ${groupName}`,
+              breadcrumbs: [
+                { action: 'list', cmd: `jsn groupmembers list --query "group.name=${groupName}"`, description: 'List group members' },
+                { action: 'remove', cmd: `jsn groupmembers remove --group "${groupName}" --user "${userName}"`, description: 'Remove this member' },
+              ],
+            });
+          }),
+        })
+        .command({
+          command: 'remove',
+          describe: 'Remove a user from a group',
+          builder: (y) => y
+            .option('group', { alias: 'g', type: 'string', demandOption: true, describe: 'Group name or sys_id (required)' })
+            .option('user', { alias: 'u', type: 'string', demandOption: true, describe: 'Username or sys_id (required)' }),
+          handler: wrap(async (argv, app) => {
+            const groupName = argv.group;
+            const userName = argv.user;
 
+            // Resolve group sys_id
+            const isGroupSysID = groupName.length === 32 && /^[0-9a-fA-F]+$/.test(groupName);
+            const groupParams = new URLSearchParams();
+            groupParams.set('sysparm_query', isGroupSysID ? `sys_id=${groupName}` : `name=${groupName}`);
+            groupParams.set('sysparm_limit', '1');
+            groupParams.set('sysparm_fields', 'sys_id');
+            const groupRecords = await app.sdk.list('sys_user_group', groupParams);
+            if (groupRecords.length === 0) {
+              throw new Error(`Group not found: ${groupName}`);
+            }
+            const groupSysID = getStringField(groupRecords[0], 'sys_id');
+
+            // Resolve user sys_id
+            const isUserSysID = userName.length === 32 && /^[0-9a-fA-F]+$/.test(userName);
+            const userParams = new URLSearchParams();
+            userParams.set('sysparm_query', isUserSysID ? `sys_id=${userName}` : `user_name=${userName}`);
+            userParams.set('sysparm_limit', '1');
+            userParams.set('sysparm_fields', 'sys_id');
+            const userRecords = await app.sdk.list('sys_user', userParams);
+            if (userRecords.length === 0) {
+              throw new Error(`User not found: ${userName}`);
+            }
+            const userSysID = getStringField(userRecords[0], 'sys_id');
+
+            // Find the membership record
+            const findParams = new URLSearchParams();
+            findParams.set('sysparm_query', `group=${groupSysID}^user=${userSysID}`);
+            findParams.set('sysparm_limit', '1');
+            findParams.set('sysparm_fields', 'sys_id');
+            const membershipRecords = await app.sdk.list('sys_user_grmember', findParams);
+            if (membershipRecords.length === 0) {
+              throw new Error(`User ${userName} is not a member of group ${groupName}`);
+            }
+            const membershipSysID = getStringField(membershipRecords[0], 'sys_id');
+
+            // Delete the membership
+            await app.sdk.delete('sys_user_grmember', membershipSysID);
+            app.ok({ user: userName, group: groupName }, {
+              summary: `Removed ${userName} from ${groupName}`,
+              breadcrumbs: [
+                { action: 'list', cmd: `jsn groupmembers list --query "group.name=${groupName}"`, description: 'List group members' },
+                { action: 'add', cmd: `jsn groupmembers add --group "${groupName}" --user "${userName}"`, description: 'Add user back to group' },
+              ],
+            });
+          }),
+        });
     },
     handler: () => {},
   };