@jacebenson/jsn 3.0.2 → 3.0.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jacebenson/jsn",
-  "version": "3.0.2",
+  "version": "3.0.5",
   "description": "A command-line interface for ServiceNow that follows the Unix philosophy: simple, composable, and scriptable.",
   "type": "module",
   "bin": {
@@ -43,4 +43,4 @@
     "README.md",
     "LICENSE"
   ]
-}
+}

package/skills/servicenow/SKILL.md

@@ -10,12 +10,12 @@ description: |
 license: MIT
 compatibility: |
   Requires jsn CLI (github.com/jacebenson/jsn). Install via:
-  curl -fsSL https://jsn.jace.pro/install | bash
+  npm install -g @jacebenson/jsn
   Works with Claude Code, OpenCode, Cursor, and agentskills-compatible tools.
   
-  Windows users: Download from GitHub releases. If jsn is not in your PATH, the setup
-  command will automatically detect its location and show the correct command path
-  (e.g., `.\jsn.exe tables list` instead of `jsn tables list`).
+  Windows users: Install Node.js first, then the npm command above. If jsn is not
+  in your PATH, the setup command will automatically detect its location and show
+  the correct command path.
 metadata:
   author: jacebenson
   version: "1.0.0"

package/src/commands/dev/_generic.js

@@ -54,6 +54,28 @@ async function checkScope(sdk, recordScope) {
   return { currentScope, recordScope };
 }
 
+/**
+ * Resolve the API scope name from a record's sys_scope reference field.
+ * With sysparm_display_value=all, sys_scope is { display_value: "Name", value: "<sys_id>" }.
+ * getStringField returns the display_value (human-readable), but we need the API name
+ * (e.g. "x_example_app") to compare against getCurrentScope().
+ */
+async function resolveRecordScope(sdk, record) {
+  const sysScope = record['sys_scope'];
+  let scopeId;
+  if (sysScope && typeof sysScope === 'object' && sysScope.value) {
+    scopeId = sysScope.value;
+  } else {
+    return getStringField(record, 'sys_scope');
+  }
+  try {
+    const scopeRecord = await sdk.get('sys_scope', scopeId);
+    return scopeRecord?.scope || 'global';
+  } catch {
+    return getStringField(record, 'sys_scope');
+  }
+}
+
 export function buildDevCmd(name, table, aliases, defaultColumns, wrap, opts = {}) {
   const showFields = opts.showFields !== undefined ? opts.showFields : null;
   const singular = toSingular(name, opts.singular);
@@ -257,7 +279,7 @@ export function buildDevCmd(name, table, aliases, defaultColumns, wrap, opts = {
               throw new Error(`${singular} not found: ${id}`);
             }
             const sysID = getStringField(records[0], 'sys_id');
-            const recordScope = getStringField(records[0], 'sys_scope');
+            const recordScope = await resolveRecordScope(app.sdk, records[0]);
 
             if (scopeValidation) {
               const scopeErr = await checkScope(app.sdk, recordScope);
@@ -288,7 +310,7 @@ export function buildDevCmd(name, table, aliases, defaultColumns, wrap, opts = {
             }
             const sysID = getStringField(records[0], 'sys_id');
             const recordName = getStringField(records[0], 'name') || id;
-            const recordScope = getStringField(records[0], 'sys_scope');
+            const recordScope = await resolveRecordScope(app.sdk, records[0]);
 
             if (scopeValidation) {
               const scopeErr = await checkScope(app.sdk, recordScope);

package/src/commands/dev/_simple.js

@@ -79,11 +79,23 @@ export const columnsCmd = (wrap) => buildDevCmd('columns', 'sys_dictionary', ['c
 export const importCmd = (wrap) => buildDevCmd('import', 'sys_import_set', ['imports', 'imp'], ['sys_import_set', 'sys_import_row', 'sys_target_table', 'sys_target_sys_id'], wrap, { singular: 'import set', readOnly: true });
 export const spPagesCmd = (wrap) => buildDevCmd('sppages', 'sp_page', ['sp-pages', 'pages'], ['id', 'title', 'sys_scope'], wrap, { singular: 'Service Portal page', readOnly: true });
 export const spWidgetsCmd = (wrap) => buildDevCmd('spwidgets', 'sp_widget', ['sp-widget', 'widgets'], ['id', 'name', 'sys_scope'], wrap, { singular: 'Service Portal widget', readOnly: true });
-export const uiPagesCmd = (wrap) => buildDevCmd('uipages', 'sys_ui_page', ['ui-page', 'pages'], ['name', 'sys_scope'], wrap, { singular: 'UI page', readOnly: true });
-export const appMenuCmd = (wrap) => buildDevCmd('appmenu', 'sys_app_application', ['app-menu', 'menu'], ['name', 'active', 'sys_scope'], wrap, { singular: 'application menu', readOnly: true });
+export const uiPagesCmd = (wrap) => buildDevCmd('uipages', 'sys_ui_page', ['ui-page', 'pages'], ['name', 'sys_scope'], wrap, { singular: 'UI page', scopeValidation: true });
+export const appMenuCmd = (wrap) => buildDevCmd('appmenu', 'sys_app_application', ['app-menu', 'menu'], ['name', 'active', 'sys_scope'], wrap, { singular: 'application menu', scopeValidation: true });
 export const scRAPICmd = (wrap) => buildDevCmd('scrapi', 'sys_ws_operation', ['scripted-rest', 'rest-api'], ['name', 'sys_ws_definition', 'sys_scope'], wrap, { singular: 'scripted REST API', readOnly: true });
 
 // Commands with full CRUD
-export const aclsCmd = (wrap) => buildDevCmd('acls', 'sys_security_acl', ['acl'], ['name', 'operation', 'type', 'active', 'sys_scope'], wrap, { singular: 'ACL', readOnly: true });
+export const aclsCmd = (wrap) => buildDevCmd('acls', 'sys_security_acl', ['acl'], ['name', 'operation', 'type', 'active', 'sys_scope'], wrap, { singular: 'ACL', scopeValidation: true });
 export const rolesCmd = (wrap) => buildDevCmd('roles', 'sys_user_role', ['role', 'r'], ['name', 'description', 'elevated_privilege', 'sys_scope'], wrap, { singular: 'role', scopeValidation: true });
-export const propertiesCmd = (wrap) => buildDevCmd('properties', 'sys_properties', ['property', 'prop'], ['name', 'value', 'description', 'sys_scope'], wrap, { singular: 'property', readOnly: true });
+export const propertiesCmd = (wrap) => buildDevCmd('properties', 'sys_properties', ['property', 'prop'], ['name', 'value', 'description', 'sys_scope'], wrap, { singular: 'property', scopeValidation: true });
+
+// New commands for scoped-app tables
+export const relationshipsCmd = (wrap) => buildDevCmd('relationships', 'sys_relationship', ['relationship', 'rel'], ['name', 'sys_scope'], wrap, { singular: 'relationship', scopeValidation: true });
+export const appmodulesCmd = (wrap) => buildDevCmd('appmodules', 'sys_app_module', ['appmodule', 'am'], ['name', 'active', 'sys_scope'], wrap, { singular: 'application module', scopeValidation: true });
+export const listcontrolsCmd = (wrap) => buildDevCmd('listcontrols', 'sys_ui_list_control', ['listcontrol', 'lc'], ['name', 'active', 'sys_scope'], wrap, { singular: 'list control', scopeValidation: true });
+export const viewsCmd = (wrap) => buildDevCmd('views', 'sys_ui_view', ['view', 'vw'], ['name', 'title', 'sys_scope'], wrap, { singular: 'view', scopeValidation: true });
+export const privilegesCmd = (wrap) => buildDevCmd('privileges', 'sys_scope_privilege', ['privilege', 'priv'], ['name', 'status', 'sys_scope'], wrap, { singular: 'privilege', scopeValidation: true });
+export const securitytypesCmd = (wrap) => buildDevCmd('securitytypes', 'sys_security_type', ['securitytype', 'st'], ['name', 'active', 'sys_scope'], wrap, { singular: 'security type', scopeValidation: true });
+export const uxscriptsCmd = (wrap) => buildDevCmd('uxscripts', 'sys_ux_lib_source_script', ['uxscript', 'ux'], ['name', 'active', 'sys_scope'], wrap, { singular: 'UX script', scopeValidation: true });
+export const aliasesCmd = (wrap) => buildDevCmd('aliases', 'sys_alias', ['alias', 'als'], ['name', 'table', 'sys_scope'], wrap, { singular: 'alias', scopeValidation: true });
+export const catalogscriptsCmd = (wrap) => buildDevCmd('catalogscripts', 'catalog_script_client', ['catalogscript', 'cs'], ['name', 'table', 'active', 'sys_scope'], wrap, { singular: 'catalog script', scopeValidation: true });
+export const cataloguipoliciesCmd = (wrap) => buildDevCmd('cataloguipolicies', 'catalog_ui_policy', ['cataloguipolicy', 'cup'], ['short_description', 'table', 'active', 'sys_scope'], wrap, { singular: 'catalog UI policy', scopeValidation: true });

package/src/commands/dev/eval.js

@@ -7,10 +7,19 @@ export function evalCmd(wrap) {
     builder: (yargs) => {
       return yargs
         .option('script', { alias: 's', type: 'string', describe: "JavaScript code to execute (single-quote the script, double quotes inside: --script 'gs.log(\"Hello\")')" })
-        .option('file', { alias: 'f', type: 'string', describe: 'Read script from file (avoids shell quoting issues)' });
+        .option('file', { alias: 'f', type: 'string', describe: 'Read script from file (avoids shell quoting issues)' })
+        .option('scope', { alias: null, type: 'string', describe: 'Scope name or sys_id to run the script under (default: global)' });
     },
     handler: wrap(async (argv, app) => {
       let script;
+      let scopeSysId = null;
+
+      if (argv.scope) {
+        scopeSysId = await app.sdk.resolveScope(argv.scope);
+        if (!scopeSysId) {
+          throw new Error(`Scope not found: ${argv.scope}`);
+        }
+      }
 
       if (argv.file) {
         script = fs.readFileSync(argv.file, 'utf-8');
@@ -20,13 +29,20 @@ export function evalCmd(wrap) {
         throw new Error('--script or --file is required');
       }
 
-      const output = await app.sdk.executeScript(script);
+      if (scopeSysId) {
+        script = `var $scopeSysId = '${scopeSysId}';\n${script}`;
+      }
+
+      const warning = scopeSysId
+        ? ` ⚠️ Records without explicit sys_scope will land in global. Use $scopeSysId variable.`
+        : '';
+      const output = await app.sdk.executeScript(script, argv.scope);
       app.ok({
         script,
         output,
         instance: app.getEffectiveInstance(),
       }, {
-        summary: 'Script executed',
+        summary: 'Script executed' + warning,
         breadcrumbs: [{
           action: 'eval',
           cmd: 'jsn dev eval --script \'...\'',

package/src/commands/dev/flows.js

@@ -25,7 +25,7 @@ export function flowsCmd(wrap) {
               formatLabel: r => `${getStringField(r, 'name')} ${getStringField(r, 'active') === 'true' ? '' : '[inactive]'}`,
             });
             if (picked) {
-              const inspection = await app.sdk.inspectFlow(picked.sys_id);
+              const inspection = await app.sdk.inspectFlow(getStringField(picked, 'sys_id'));
               const formatted = formatFlowInspection(inspection, app.getEffectiveInstance());
               return app.ok({ ...inspection, _formatted: formatted }, {
                 summary: `Flow: ${inspection.flow.name}`,

package/src/commands/dev/updatesets.js

@@ -1,3 +1,4 @@
+import fs from 'node:fs';
 import { formatRecordForDisplay, getStringField, interactiveList } from '../../helpers.js';
 
 export function updateSetsCmd(wrap) {
@@ -177,6 +178,40 @@ export function updateSetsCmd(wrap) {
             app.ok({ profile: name, yolo: true }, { summary: 'Default update set warning silenced for this profile' });
           }),
         })
+        .command({
+          command: 'export <name>',
+          describe: 'Export an update set to XML',
+          builder: (y) => y
+            .positional('name', {
+              describe: 'Update set name',
+              type: 'string',
+            })
+            .option('output', {
+              alias: 'o',
+              type: 'string',
+              describe: 'Output file path (default: stdout)',
+            }),
+          handler: wrap(async (argv, app) => {
+            const params = new URLSearchParams();
+            params.set('sysparm_query', `name=${argv.name}`);
+            params.set('sysparm_limit', '1');
+            params.set('sysparm_fields', 'sys_id,name');
+            const records = await app.sdk.list('sys_update_set', params);
+            if (records.length === 0) {
+              throw new Error(`Update set not found: ${argv.name}`);
+            }
+            const sysID = getStringField(records[0], 'sys_id');
+            const instance = app.getEffectiveInstance();
+            const url = `${instance}/sys_update_set.do?XML&sysparm_sys_id=${sysID}`;
+            const xml = await app.sdk.rawRequest(url, { method: 'GET' });
+            if (argv.output) {
+              fs.writeFileSync(argv.output, xml, 'utf-8');
+              app.ok({ name: argv.name, sys_id: sysID, output: argv.output }, { summary: `Exported update set to ${argv.output}` });
+            } else {
+              process.stdout.write(xml + '\n');
+            }
+          }),
+        })
 
     },
     handler: (argv) => {
@@ -187,6 +222,7 @@ export function updateSetsCmd(wrap) {
         console.log('  show <name>    Show an update set');
         console.log('  set  <name>    Set the current update set');
         console.log('  create         Create a new update set (auto-sets as current)');
+        console.log('  export <name>  Export an update set to XML');
         console.log('  complete <name>  Mark an update set as complete (coming soon)');
         console.log('  yolo           Silence the "Default update set" warning');
         console.log('\nRun "jsn dev updatesets <command> --help" for details.');

package/src/commands/dev.js

@@ -6,6 +6,9 @@ import {
   tablesCmd, columnsCmd, importCmd,
   spPagesCmd, spWidgetsCmd, uiPagesCmd, appMenuCmd, scRAPICmd,
   aclsCmd, rolesCmd, propertiesCmd,
+  relationshipsCmd, appmodulesCmd, listcontrolsCmd, viewsCmd,
+  privilegesCmd, securitytypesCmd, uxscriptsCmd, aliasesCmd,
+  catalogscriptsCmd, cataloguipoliciesCmd,
 } from './dev/_simple.js';
 import { flowsCmd } from './dev/flows.js';
 import { formsCmd } from './dev/forms.js';
@@ -44,6 +47,16 @@ export function devCmd(wrap) {
         .command(updateSetsCmd(wrap))
         .command(scopesCmd(wrap))
         .command(propertiesCmd(wrap))
+        .command(relationshipsCmd(wrap))
+        .command(appmodulesCmd(wrap))
+        .command(listcontrolsCmd(wrap))
+        .command(viewsCmd(wrap))
+        .command(privilegesCmd(wrap))
+        .command(securitytypesCmd(wrap))
+        .command(uxscriptsCmd(wrap))
+        .command(aliasesCmd(wrap))
+        .command(catalogscriptsCmd(wrap))
+        .command(cataloguipoliciesCmd(wrap))
         .command(logsCmd(wrap))
         .command(evalCmd(wrap))
         .command(restCmd(wrap));

package/src/commands/records.js

@@ -165,6 +165,34 @@ export function recordsCmd(wrap) {
             app.ok({ message: 'Record deleted', table: argv.table, sys_id: argv['sys-id'] }, { summary: `Deleted record from ${argv.table}` });
           }),
         })
+        .command({
+          command: 'inspect <table> <identifier>',
+          aliases: ['debug', 'diag'],
+          describe: 'Inspect a record: show audit history, business rules, and running flows',
+          builder: (y) => y
+            .positional('table', { describe: 'Table name (e.g. incident)', type: 'string' })
+            .positional('identifier', { describe: 'Record sys_id or number', type: 'string' }),
+          handler: wrap(async (argv, app) => {
+            const { inspectRecord, formatInspectOutput } = await import('../records/inspect.js');
+            const result = await inspectRecord(app, argv.table, argv.identifier);
+            const breadcrumbs = [
+              ...result.flows.map(f => ({
+                action: 'show',
+                cmd: `jsn dev flows show "${f.flow}"`,
+                description: `View flow details for ${f.flow}`,
+              })),
+              ...result.businessRules.slice(0, 5).map(br => ({
+                action: 'show',
+                cmd: `jsn dev rules show "${br.name}"`,
+                description: `View business rule: ${br.name}`,
+              })),
+            ];
+            app.ok({ ...result, _formatted: formatInspectOutput(result) }, {
+              summary: `Inspected ${argv.table} ${argv.identifier}`,
+              breadcrumbs,
+            });
+          }),
+        })
 
     },
     handler: () => {},

package/src/commands/skill.js

@@ -8,6 +8,8 @@ const SKILL_REPO_PATH = path.join(
   '..', '..', 'skills', 'servicenow', 'SKILL.md'
 );
 
+const HERMES_SKILL_PATH = path.join(os.homedir(), '.hermes', 'skills', 'servicenow', 'SKILL.md');
+
 const SKILL_RAW_URL = 'https://raw.githubusercontent.com/jacebenson/jsn/nodejs/skills/servicenow/SKILL.md';
 
 function readBundledSkill() {
@@ -18,9 +20,23 @@ function readBundledSkill() {
   }
 }
 
+function readInstalledSkill() {
+  try {
+    return fs.readFileSync(HERMES_SKILL_PATH, 'utf-8');
+  } catch {
+    return null;
+  }
+}
+
 export async function checkSkill() {
-  const bundled = readBundledSkill();
-  if (!bundled) return { current: false, error: 'Skill file not found in package' };
+  // Compare the Hermes-installed copy's version against GitHub (not the npm-bundled copy).
+  // Uses the YAML frontmatter "version" field so publishing jsn doesn't flag it.
+  const installed = readInstalledSkill() || readBundledSkill();
+  if (!installed) return { current: false, error: 'Skill file not found' };
+
+  const installedVersion = extractVersion(installed);
+  if (!installedVersion) return { current: false, error: 'No version field in installed skill' };
+
   try {
     const controller = new AbortController();
     const timer = setTimeout(() => controller.abort(), 10000);
@@ -28,18 +44,27 @@ export async function checkSkill() {
     clearTimeout(timer);
     if (!res.ok) return { current: false, error: `GitHub returned ${res.status}` };
     const upstream = await res.text();
-    const current = bundled === upstream;
+    const upstreamVersion = extractVersion(upstream);
+    if (!upstreamVersion) return { current: false, error: 'No version field in upstream skill' };
+
+    const current = installedVersion === upstreamVersion;
     return {
       current,
-      bundled_lines: bundled.split('\n').length,
-      upstream_lines: upstream.split('\n').length,
-      error: current ? null : 'Bundled skill is outdated — run "jsn skill install" to update',
+      installed_version: installedVersion,
+      upstream_version: upstreamVersion,
+      error: current ? null : `Skill version ${installedVersion} vs GitHub ${upstreamVersion} — run "jsn skill install" to update`,
     };
   } catch {
     return { current: false, error: 'Could not check — GitHub unreachable' };
   }
 }
 
+function extractVersion(content) {
+  // Matches version in YAML frontmatter (top-level or nested under metadata:)
+  const m = content.match(/^\s*version:\s*["']?(.+?)["']?\s*$/m);
+  return m ? m[1] : null;
+}
+
 export function skillCmd(wrap) {
   return {
     command: 'skill',
@@ -70,9 +95,9 @@ export function skillCmd(wrap) {
             if (result.error && !result.current) {
               app.ok(result, { summary: result.error });
             } else if (result.current) {
-              app.ok(result, { summary: `✓ Skill is current (${result.bundled_lines} lines)` });
+              app.ok(result, { summary: `✓ Skill is current (v${result.installed_version})` });
             } else {
-              app.ok(result, { summary: `⚠ Skill is outdated (bundled ${result.bundled_lines} lines vs upstream ${result.upstream_lines} lines) — run "jsn skill install" to update` });
+              app.ok(result, { summary: `⚠ Skill outdated: installed v${result.installed_version} vs GitHub v${result.upstream_version} — run "jsn skill install" to update` });
             }
           }),
         })

package/src/helpers.js

@@ -143,6 +143,8 @@ export function parseDataArg(argv) {
   let raw;
   if (argv['data-file']) {
     raw = fs.readFileSync(argv['data-file'], 'utf-8');
+    // Strip UTF-8 BOM (\ufeff) which some editors (Windows/PowerShell) add
+    if (raw.charCodeAt(0) === 0xFEFF) raw = raw.slice(1);
   } else if (argv.data) {
     raw = argv.data;
   } else {

package/src/records/inspect.js

@@ -0,0 +1,266 @@
+import { isHexString, getStringField } from '../helpers.js';
+
+export async function resolveIdentifier(app, table, identifier) {
+  // If it looks like a sys_id (32 hex chars), use it directly
+  if (isHexString(identifier) && identifier.length === 32) {
+    return identifier;
+  }
+
+  // Otherwise, assume it's a record number — query the table
+  const params = new URLSearchParams();
+  params.set('sysparm_query', `number=${identifier}`);
+  params.set('sysparm_limit', '1');
+  params.set('sysparm_fields', 'sys_id');
+  const records = await app.sdk.list(table, params);
+  if (records.length === 0) {
+    throw new Error(`Record not found in ${table}: ${identifier}`);
+  }
+  return getStringField(records[0], 'sys_id');
+}
+
+async function fetchHistory(app, table, sysId, limit = 20) {
+  const params = new URLSearchParams();
+  params.set('sysparm_query', `documentkey=${sysId}^tablename=${table}`);
+  params.set('sysparm_limit', String(limit));
+  params.set('sysparm_fields', 'fieldname,newvalue,oldvalue,sys_created_on,sys_created_by');
+  params.set('sysparm_display_value', 'all');
+  params.set('sysparm_order_by', 'sys_created_on');
+  const records = await app.sdk.list('sys_audit', params);
+  return records.map(r => ({
+    field: r.fieldname?.display_value || r.fieldname,
+    oldValue: (r.oldvalue?.display_value ?? r.oldvalue?.value ?? '') || '',
+    newValue: (r.newvalue?.display_value ?? r.newvalue?.value ?? '') || '',
+    _oldRaw: r.oldvalue?.value ?? r.oldvalue ?? '',
+    _newRaw: r.newvalue?.value ?? r.newvalue ?? '',
+    changedOn: r.sys_created_on?.display_value || r.sys_created_on,
+    changedBy: r.sys_created_by?.display_value || r.sys_created_by,
+  }));
+}
+
+// Known choice fields and their display labels from sys_choice
+const CHOICE_FIELDS = new Set(['state', 'incident_state', 'priority', 'impact', 'urgency', 'active', 'category', 'subcategory']);
+
+// Known sys_user reference fields
+const USER_REF_FIELDS = new Set(['closed_by', 'assigned_to', 'opened_by', 'resolved_by', 'called_by', 'caller_id']);
+
+// Boolean fields stored as 0/1 in sys_audit
+const BOOL_FIELDS = new Set(['active']);
+
+async function resolveHistoryDisplayValues(app, table, history) {
+  // Collect unique sys_ids for user reference resolution
+  const userSysIds = new Set();
+  for (const h of history) {
+    if (USER_REF_FIELDS.has(h.field)) {
+      if (isHexString(h.oldValue) && h.oldValue.length === 32) userSysIds.add(h.oldValue);
+      if (isHexString(h.newValue) && h.newValue.length === 32) userSysIds.add(h.newValue);
+    }
+  }
+
+  // Batch lookup user names
+  const userNameMap = new Map();
+  if (userSysIds.size > 0) {
+    const idList = [...userSysIds].join(',');
+    const params = new URLSearchParams();
+    params.set('sysparm_query', `sys_idIN${idList}`);
+    params.set('sysparm_limit', '100');
+    params.set('sysparm_fields', 'sys_id,name');
+    params.set('sysparm_display_value', 'all');
+    try {
+      const users = await app.sdk.list('sys_user', params);
+      for (const u of users) {
+        const uid = getStringField(u, 'sys_id');
+        const name = u.name?.display_value || u.name;
+        if (uid && name) userNameMap.set(uid, name);
+      }
+    } catch { /* non-fatal */ }
+  }
+
+  // Collect unique (field, value) pairs for choice resolution
+  const choiceLookups = new Set();
+  for (const h of history) {
+    if (CHOICE_FIELDS.has(h.field)) {
+      if (h.oldValue && h.oldValue !== '_raw_old_') choiceLookups.add(`${h.field}|${h.oldValue}`);
+      if (h.newValue && h.newValue !== '_raw_new_') choiceLookups.add(`${h.field}|${h.newValue}`);
+    }
+  }
+
+  // Batch lookup choice labels
+  const choiceLabelMap = new Map();
+  if (choiceLookups.size > 0) {
+    for (const key of choiceLookups) {
+      const [field, val] = key.split('|');
+      const params = new URLSearchParams();
+      params.set('sysparm_query', `name=${table}^element=${field}^value=${val}^language=en`);
+      params.set('sysparm_limit', '1');
+      params.set('sysparm_fields', 'value,label');
+      params.set('sysparm_display_value', 'all');
+      try {
+        const choices = await app.sdk.list('sys_choice', params);
+        if (choices.length > 0) {
+          const label = choices[0].label?.display_value || choices[0].label;
+          if (label) choiceLabelMap.set(key, label);
+        }
+      } catch { /* non-fatal */ }
+    }
+  }
+
+  // Apply resolutions to history entries
+  return history.map(h => {
+    let oldDisplay = h.oldValue;
+    let newDisplay = h.newValue;
+
+    // Resolve user references
+    if (USER_REF_FIELDS.has(h.field)) {
+      if (isHexString(oldDisplay) && oldDisplay.length === 32) {
+        oldDisplay = userNameMap.get(oldDisplay) || oldDisplay || '(empty)';
+      }
+      if (isHexString(newDisplay) && newDisplay.length === 32) {
+        newDisplay = userNameMap.get(newDisplay) || newDisplay || '(empty)';
+      }
+    }
+
+    // Resolve choice labels
+    if (CHOICE_FIELDS.has(h.field)) {
+      const oldLabel = choiceLabelMap.get(`${h.field}|${h.oldValue}`);
+      const newLabel = choiceLabelMap.get(`${h.field}|${h.newValue}`);
+      if (oldLabel) oldDisplay = oldLabel;
+      if (newLabel) newDisplay = newLabel;
+    }
+
+    // Resolve boolean fields
+    if (BOOL_FIELDS.has(h.field)) {
+      if (oldDisplay === '1') oldDisplay = 'Yes';
+      else if (oldDisplay === '0') oldDisplay = 'No';
+      if (newDisplay === '1') newDisplay = 'Yes';
+      else if (newDisplay === '0') newDisplay = 'No';
+    }
+
+    return { ...h, oldValue: oldDisplay || '(empty)', newValue: newDisplay || '(empty)' };
+  });
+}
+
+async function fetchBusinessRules(app, table) {
+  const params = new URLSearchParams();
+  params.set('sysparm_query', `collection=${table}^active=true`);
+  params.set('sysparm_limit', '50');
+  params.set('sysparm_fields', 'name,collection,order,active,sys_scope,when,filter_condition');
+  params.set('sysparm_display_value', 'all');
+  params.set('sysparm_order_by', 'order');
+  const records = await app.sdk.list('sys_script', params);
+  return records
+    .map(r => ({
+      name: r.name?.display_value || r.name,
+      order: r.order?.display_value || r.order,
+      scope: r.sys_scope?.display_value || r.sys_scope || 'global',
+      when: r.when?.display_value || r.when || '',
+      condition: r.filter_condition?.display_value || r.filter_condition?.value || '',
+    }))
+    .sort((a, b) => {
+      const aOrder = parseInt(String(a.order).replace(/,/g, ''), 10) || 0;
+      const bOrder = parseInt(String(b.order).replace(/,/g, ''), 10) || 0;
+      return aOrder - bOrder;
+    });
+}
+
+async function fetchFlows(app, sysId) {
+  const params = new URLSearchParams();
+  params.set('sysparm_query', `source_record=${sysId}`);
+  params.set('sysparm_limit', '20');
+  params.set('sysparm_fields', 'flow_catalog_model,name,execution_id,state,engine_major_version,sys_created_on,origins,calling_source');
+  params.set('sysparm_display_value', 'all');
+  try {
+    const records = await app.sdk.list('sys_flow_context', params);
+    return records.map(r => ({
+      flow: r.name?.display_value || r.name || r.flow_catalog_model?.display_value || r.flow_catalog_model?.value || '(deleted flow)',
+      executionId: r.execution_id?.display_value || r.execution_id,
+      state: r.state?.display_value || r.state,
+      version: r.engine_major_version?.display_value || r.engine_major_version,
+      started: r.sys_created_on?.display_value || r.sys_created_on,
+    }));
+  } catch {
+    return []; // Flow Designer might not be installed
+  }
+}
+
+export function formatInspectOutput(data) {
+  const lines = [];
+  lines.push('');
+  lines.push(`\u{1F4CB} ${data.table}  ${data.sys_id}`);
+  lines.push('');
+
+  // History section
+  lines.push('\u25B6 HISTORY');
+  lines.push('\u2500'.repeat(50));
+  if (data.history.length === 0) {
+    lines.push('  (no audit history found)');
+  } else {
+    for (const h of data.history.slice(0, 10)) {
+      lines.push(`  ${h.changedOn}  ${h.changedBy}  ${h.field}: ${h.oldValue || '(empty)'} \u2192 ${h.newValue}`);
+    }
+    if (data.history.length > 10) {
+      lines.push(`  ... and ${data.history.length - 10} more`);
+    }
+  }
+  lines.push('');
+
+  // Business rules section
+  lines.push('\u25B6 BUSINESS RULES');
+  lines.push('\u2500'.repeat(50));
+  if (data.businessRules.length === 0) {
+    lines.push('  (no active business rules on this table)');
+  } else {
+    // Group by execution phase: before → display → after → async
+    const phases = ['before', 'display', 'after', 'async'];
+    const grouped = {};
+    for (const br of data.businessRules) {
+      const phase = br.when?.toLowerCase() || '';
+      if (!grouped[phase]) grouped[phase] = [];
+      grouped[phase].push(br);
+    }
+    for (const phase of phases) {
+      const rules = grouped[phase]?.sort((a, b) => {
+        const aOrder = parseInt(String(a.order).replace(/,/g, ''), 10) || 0;
+        const bOrder = parseInt(String(b.order).replace(/,/g, ''), 10) || 0;
+        return aOrder - bOrder;
+      });
+      if (!rules || rules.length === 0) continue;
+      lines.push(`  ${phase.charAt(0).toUpperCase() + phase.slice(1)}:`);
+      for (const br of rules) {
+        lines.push(`    [${br.order}] ${br.name}${br.scope !== 'global' ? ` (${br.scope})` : ''}`);
+        if (br.condition) {
+          const cond = br.condition.length > 80 ? br.condition.substring(0, 77) + '...' : br.condition;
+          lines.push(`       Condition: ${cond}`);
+        }
+      }
+    }
+  }
+  lines.push('');
+
+  // Flows section
+  lines.push('\u25B6 RUNNING FLOWS');
+  lines.push('\u2500'.repeat(50));
+  if (data.flows.length === 0) {
+    lines.push('  (no running flows for this record)');
+  } else {
+    for (const f of data.flows) {
+      lines.push(`  Flow: ${f.flow}`);
+      lines.push(`  Status: ${f.state} | Version: ${f.version}`);
+      if (f.started) lines.push(`  Started: ${f.started}`);
+      lines.push('');
+    }
+  }
+  lines.push('');
+
+  return lines.join('\n');
+}
+
+export async function inspectRecord(app, table, identifier) {
+  const sysId = await resolveIdentifier(app, table, identifier);
+  const [rawHistory, businessRules, flows] = await Promise.all([
+    fetchHistory(app, table, sysId),
+    fetchBusinessRules(app, table),
+    fetchFlows(app, sysId),
+  ]);
+  const history = await resolveHistoryDisplayValues(app, table, rawHistory);
+  return { table, sys_id: sysId, history, businessRules, flows };
+}

package/src/sdk.js

@@ -188,6 +188,25 @@ export class SDKClient {
     };
   }
 
+  /**
+   * Resolve a scope name or sys_id to a sys_id.
+   * @param {string} scope - Scope name (e.g. "sn_notif_dashboard") or sys_id
+   * @returns {Promise<string|null>} The scope sys_id, or null if not found
+   */
+  async resolveScope(scope) {
+    if (!scope) return null;
+    // If it looks like a sys_id (32 hex chars), try it directly
+    if (/^[0-9a-fA-F]{32}$/.test(scope)) return scope;
+
+    const params = new URLSearchParams();
+    params.set('sysparm_query', `scope=${scope}`);
+    params.set('sysparm_limit', '1');
+    params.set('sysparm_fields', 'sys_id,name');
+    const records = await this.list('sys_scope', params);
+    if (records.length === 0) return null;
+    return records[0].sys_id?.value || records[0].sys_id;
+  }
+
   async inspectFlow(identifier) {
     const isSysID = identifier.length === 32 && /^[0-9a-fA-F]+$/.test(identifier);
 
@@ -372,7 +391,7 @@ export class SDKClient {
    * @param {string} script - JavaScript code to execute
    * @returns {Promise<string>} The script's output text
    */
-  async executeScript(script) {
+  async executeScript(script, scope) {
     // Step 1: Warm up the session by hitting any REST API — this makes
     // ServiceNow issue session cookies for subsequent UI page requests.
     // We capture cookies to forward them (Node.js fetch() has no built-in cookie jar).
@@ -387,7 +406,7 @@ export class SDKClient {
     formBody.set('script', script);
     formBody.set('sysparm_ck', csrfToken);
     formBody.set('runscript', 'Run script');
-    formBody.set('sys_scope', 'global');
+    formBody.set('sys_scope', scope || 'global');
     formBody.set('record_for_rollback', 'on');
     formBody.set('quota_managed_transaction', 'on');