@jacebenson/jsn 3.1.4 → 3.1.5

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jacebenson/jsn",
-  "version": "3.1.4",
+  "version": "3.1.5",
   "description": "A command-line interface for ServiceNow that follows the Unix philosophy: simple, composable, and scriptable.",
   "type": "module",
   "bin": {

package/src/auth.js

@@ -7,8 +7,8 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import crypto from 'node:crypto';
-import readline from 'node:readline';
 import { execSync } from 'node:child_process';
+import { password as passwordPrompt } from '@inquirer/prompts';
 import { globalConfigDir, normalizeInstanceURL } from './config.js';
 import { errAuth } from './errors.js';
 
@@ -248,52 +248,7 @@ function deleteCredentials(instance, username) {
 }
 
 function askHidden(promptText) {
-  return new Promise((resolve) => {
-    const rl = readline.createInterface({
-      input: process.stdin,
-      output: process.stdout,
-    });
-
-    const stdin = process.stdin;
-    const stdout = process.stdout;
-
-    if (!stdin.isTTY) {
-    rl.question(promptText, (answer) => {
-      rl.close();
-      resolve(answer.trim());
-    });
-    return;
-  }
-
-    stdout.write(promptText);
-
-    stdin.setRawMode(true);
-    stdin.resume();
-    stdin.setEncoding('utf-8');
-
-    let input = '';
-    const onData = (key) => {
-      if (key === '\r' || key === '\n') {
-        stdin.removeListener('data', onData);
-        stdin.setRawMode(false);
-        stdin.pause();
-        stdout.write('\n');
-        rl.close();
-        resolve(input);
-      } else if (key === '\u0003') {
-        process.exit();
-      } else if (key === '\u007f') {
-        if (input.length > 0) {
-          input = input.slice(0, -1);
-          stdout.write('\b \b');
-        }
-      } else {
-        input += key;
-        stdout.write('*');
-      }
-    };
-    stdin.on('data', onData);
-  });
+  return passwordPrompt({ message: promptText });
 }
 
 export class AuthManager {

package/src/cli.js

@@ -35,8 +35,9 @@ import {
   spPagesCmd, spWidgetsCmd, uiPagesCmd, appMenuCmd,
   aclsCmd, rolesCmd, propertiesCmd,
   relationshipsCmd, appmodulesCmd, listcontrolsCmd, viewsCmd,
-  privilegesCmd, securitytypesCmd, uxscriptsCmd, aliasesCmd,
+  privilegesCmd, uxscriptsCmd, aliasesCmd,
   catalogscriptsCmd, cataloguipoliciesCmd,
+  uipoliciesCmd,
   scriptactionsCmd, scheduledjobsCmd, asyncrulesCmd, triggersCmd,
   decisiontablesCmd, assignmentsCmd,
   emailCmd,
@@ -235,7 +236,6 @@ export function buildCLI() {
     .command(b4rulesCmd(wrap))
     .command(rolesCmd(wrap))
     .command(privilegesCmd(wrap))
-    .command(securitytypesCmd(wrap))
     .command(aliasesCmd(wrap))
     .command(groupsCmd(wrap))
     .command(groupMembersCmd(wrap))
@@ -249,6 +249,7 @@ export function buildCLI() {
     .command(uiActionsCmd(wrap))
     .command(viewsCmd(wrap))
     .command(catalogscriptsCmd(wrap))
+    .command(uipoliciesCmd(wrap))
     .command(cataloguipoliciesCmd(wrap))
     // USER EXPERIENCE — Core UI
     .command(uiPagesCmd(wrap))

package/src/commands/dev/_simple.js

@@ -73,10 +73,10 @@ export const tablesCmd = (wrap) => buildDevCmd('tables', 'sys_db_object', ['tabl
   },
 });
 
-export const columnsCmd = (wrap) => buildDevCmd('columns', 'sys_dictionary', ['column', 'col'], ['element', 'column_label', 'internal_type', 'mandatory', 'max_length', 'active'], wrap, { singular: 'column', scopeValidation: true });
+export { columnsCmd } from './columns.js';
 
 // Read-only commands (Go only has list/show)
-export const importCmd = (wrap) => buildDevCmd('import', 'sys_import_set', ['imports', 'imp'], ['sys_import_set', 'sys_import_row', 'sys_target_table', 'sys_target_sys_id'], wrap, { singular: 'import set', readOnly: true });
+export { importCmd } from './import.js';
 export const spPagesCmd = (wrap) => buildDevCmd('sppages', 'sp_page', ['sp-pages', 'pages'], ['id', 'title', 'sys_scope'], wrap, { singular: 'Service Portal page', readOnly: true });
 export const spWidgetsCmd = (wrap) => buildDevCmd('spwidgets', 'sp_widget', ['sp-widget', 'widgets'], ['id', 'name', 'sys_scope'], wrap, { singular: 'Service Portal widget', readOnly: true });
 export const uiPagesCmd = (wrap) => buildDevCmd('uipages', 'sys_ui_page', ['ui-page', 'pages'], ['name', 'sys_scope'], wrap, { singular: 'UI page', scopeValidation: true });
@@ -92,10 +92,9 @@ export const relationshipsCmd = (wrap) => buildDevCmd('relationships', 'sys_rela
 export const appmodulesCmd = (wrap) => buildDevCmd('appmodules', 'sys_app_module', ['appmodule', 'am'], ['name', 'active', 'sys_scope'], wrap, { singular: 'application module', scopeValidation: true });
 export const listcontrolsCmd = (wrap) => buildDevCmd('listcontrols', 'sys_ui_list_control', ['listcontrol', 'lc'], ['name', 'active', 'sys_scope'], wrap, { singular: 'list control', scopeValidation: true });
 export const viewsCmd = (wrap) => buildDevCmd('views', 'sys_ui_view', ['view', 'vw'], ['name', 'title', 'sys_scope'], wrap, { singular: 'view', scopeValidation: true });
-export const privilegesCmd = (wrap) => buildDevCmd('privileges', 'sys_scope_privilege', ['privilege', 'priv'], ['name', 'status', 'sys_scope'], wrap, { singular: 'privilege', scopeValidation: true });
-export const securitytypesCmd = (wrap) => buildDevCmd('securitytypes', 'sys_security_type', ['securitytype', 'st'], ['name', 'active', 'sys_scope'], wrap, { singular: 'security type', scopeValidation: true });
+export const privilegesCmd = (wrap) => buildDevCmd('privileges', 'sys_scope_privilege', ['privilege', 'priv'], ['source_scope', 'target_scope', 'target_name', 'operation', 'status'], wrap, { singular: 'privilege', scopeValidation: true });
 export const uxscriptsCmd = (wrap) => buildDevCmd('uxscripts', 'sys_ux_lib_source_script', ['uxscript', 'ux'], ['name', 'active', 'sys_scope'], wrap, { singular: 'UX script', scopeValidation: true });
-export const aliasesCmd = (wrap) => buildDevCmd('aliases', 'sys_alias', ['alias', 'als'], ['name', 'table', 'sys_scope'], wrap, { singular: 'alias', scopeValidation: true });
+export { aliasesCmd } from './aliases.js';
 export const catalogscriptsCmd = (wrap) => buildDevCmd('catalogscripts', 'catalog_script_client', ['catalogscript', 'cs'], ['name', 'table', 'active', 'sys_scope'], wrap, { singular: 'catalog script', scopeValidation: true });
 
 // ── Automation: Async ──
@@ -122,4 +121,5 @@ export const uimacrosCmd = (wrap) => buildDevCmd('uimacros', 'sys_ui_macro', ['u
 // ── UX: Workspaces ──
 export const uxlistsCmd = (wrap) => buildDevCmd('uxlists', 'sys_ux_list', ['uxlist'], ['name', 'active', 'sys_scope'], wrap, { singular: 'workspace list', scopeValidation: true, readOnly: true });
 export const uxapplicabilityCmd = (wrap) => buildDevCmd('uxapplicability', 'sys_ux_applicability_m2m', ['uxapp'], ['name', 'active', 'sys_scope'], wrap, { singular: 'workspace applicability', scopeValidation: true, readOnly: true });
-export const cataloguipoliciesCmd = (wrap) => buildDevCmd('cataloguipolicies', 'catalog_ui_policy', ['cataloguipolicy', 'cup'], ['short_description', 'table', 'active', 'sys_scope'], wrap, { singular: 'catalog UI policy', scopeValidation: true });
+export { uipoliciesCmd } from './uipolicies.js';
+export const cataloguipoliciesCmd = (wrap) => buildDevCmd('cataloguipolicies', 'catalog_ui_policy', ['cataloguipolicy', 'cup'], ['short_description', 'catalog_item', 'variable_set', 'active', 'sys_scope'], wrap, { singular: 'catalog UI policy', scopeValidation: true });

package/src/commands/dev/aliases.js

@@ -0,0 +1,30 @@
+import { buildDevCmd } from './_generic.js';
+import { getStringField } from '../../helpers.js';
+
+export const aliasesCmd = (wrap) => buildDevCmd('aliases', 'sys_alias', ['alias', 'als'],
+  ['name', 'table', 'sys_scope'], wrap, {
+    singular: 'alias',
+    scopeValidation: true,
+    onShow: async (record, app) => {
+      const sysID = getStringField(record, 'sys_id') || '';
+      if (!sysID) return;
+
+      const mp = new URLSearchParams();
+      mp.set('sysparm_query', `connection_alias=${sysID}^ORDERBYname`);
+      mp.set('sysparm_limit', '100');
+      mp.set('sysparm_display_value', 'all');
+      mp.set('sysparm_fields', 'name,active,credential,sys_id');
+      const conns = await app.sdk.list('sys_connection', mp);
+
+      if (conns.length > 0) {
+        console.log(`  Connections (${conns.length}):`);
+        for (const c of conns) {
+          const name = getStringField(c, 'name') || '';
+          const cred = getStringField(c, 'credential') || '';
+          const cid = getStringField(c, 'sys_id') || '';
+          console.log(`    ${name}${cred ? ` → ${cred}` : ''}`);
+          console.log(`      → jsn records get --table sys_connection --sys-id ${cid}`);
+        }
+      }
+    },
+  });

package/src/commands/dev/b4rules.js

@@ -2,4 +2,4 @@ import { buildDevCmd } from './_generic.js';
 
 // Before-query business rules — applies filters to GlideRecord queries before they execute.
 // These are sys_script records with order < 100.
-export const b4rulesCmd = (wrap) => buildDevCmd('b4rules', 'sys_script', ['b4rule'], ['name', 'collection', 'active', 'order', 'sys_scope'], wrap, { singular: 'before-query business rule', scopeValidation: true, extraQuery: 'order<100' });
+export const b4rulesCmd = (wrap) => buildDevCmd('b4rules', 'sys_script', ['b4rule'], ['name', 'collection', 'active', 'order', 'sys_scope'], wrap, { singular: 'before-query business rule', scopeValidation: true, extraQuery: 'when=before' });

package/src/commands/dev/columns.js

@@ -0,0 +1,27 @@
+import { buildDevCmd } from './_generic.js';
+
+export const columnsCmd = (wrap) => {
+  const base = buildDevCmd('columns', 'sys_dictionary', ['column', 'col'],
+    ['element', 'column_label', 'internal_type', 'mandatory', 'max_length', 'active'],
+    wrap, { singular: 'column', scopeValidation: true });
+
+  // Add --table filter
+  const origBuilder = base.builder;
+  base.builder = (yargs) => {
+    const built = origBuilder(yargs);
+    // Patch the 'list' subcommand builder to add --table
+    const listCmd = built._commands?.find(c => c.name === 'list' || c._aliases?.includes('ls'));
+    if (listCmd) {
+      const origListBuilder = listCmd.builder;
+      listCmd.builder = (y) => (origListBuilder ? origListBuilder(y).option('table', { type: 'string', describe: 'Filter by table (e.g. incident)' }) : y.option('table', { type: 'string' }));
+      const origHandler = listCmd.handler;
+      listCmd.handler = async (argv) => {
+        if (argv.table) argv.query = argv.query ? `${argv.query}^name=${argv.table}` : `name=${argv.table}`;
+        return origHandler(argv);
+      };
+    }
+    return built;
+  };
+
+  return base;
+};

package/src/commands/dev/import.js

@@ -0,0 +1,27 @@
+import { buildDevCmd } from './_generic.js';
+import { getStringField } from '../../helpers.js';
+
+export const importCmd = (wrap) => buildDevCmd('import', 'sys_import_set', ['imports', 'imp'],
+  ['name', 'sys_target_table', 'state', 'sys_created_on'], wrap, {
+    singular: 'import set',
+    readOnly: true,
+    formatLabel: (r) => {
+      const name = getStringField(r, 'name') || '';
+      const table = getStringField(r, 'sys_target_table') || '';
+      return table ? `${name} [${table}]` : name;
+    },
+    onShow: async (record, app) => {
+      const sysID = getStringField(record, 'sys_id') || '';
+      if (!sysID) return;
+      try {
+        const rp = new URLSearchParams();
+        rp.set('sysparm_query', `sys_import_set=${sysID}`);
+        rp.set('sysparm_limit', '0'); rp.set('sysparm_fields', 'sys_id');
+        const rows = await app.sdk.list('sys_import_set_row', rp);
+        console.log(`  Import rows: ${rows.length}`);
+        console.log(`    → jsn records list --table sys_import_set_row --query "sys_import_set=${sysID}" --limit 200`);
+      } catch (err) {
+        console.log(`  Import rows: (unavailable)`);
+      }
+    },
+  });

package/src/commands/dev/lists.js

@@ -1,99 +1,68 @@
-import chalk from 'chalk';
-import { getStringField } from '../../helpers.js';
-
-// ─── Helpers ───
-
-function getDisplayValue(record, key) {
-  if (!record || typeof record !== 'object') return '';
-  const val = record[key];
-  if (val == null) return '';
-  if (typeof val === 'string') return val;
-  if (typeof val === 'object') {
-    if (val.display_value != null && val.display_value !== '') return String(val.display_value);
-    if (val.value != null) return String(val.value);
-  }
-  return String(val);
-}
-
-function getIntValue(record, key) {
-  if (!record || typeof record !== 'object') return 0;
-  const val = record[key];
-  if (val == null) return 0;
-  if (typeof val === 'number') return Math.floor(val);
-  if (typeof val === 'string') {
-    const n = parseInt(val, 10);
-    return isNaN(n) ? 0 : n;
-  }
-  if (typeof val === 'object' && val.value != null) {
-    const n = parseInt(val.value, 10);
-    return isNaN(n) ? 0 : n;
-  }
-  return 0;
-}
-
-// ─── Commands ───
+import { getStringField, interactiveList } from '../../helpers.js';
 
 export function listsCmd(wrap) {
   return {
     command: 'lists [subcommand]',
     aliases: ['list-layout', 'l'],
-    describe: 'Manage UI List layouts',
+    describe: 'List views for a table',
     builder: (yargs) => {
       return yargs
         .command({
-          command: 'list <table>',
+          command: 'list [table]',
           aliases: ['ls'],
-          describe: 'List list views for a table',
+          describe: 'List views for a table (or pick from all tables)',
           builder: (y) => y
-            .positional('table', {
-              describe: 'Table name (e.g. incident, change_request)',
-              type: 'string',
-            })
-            .option('limit', { alias: 'l', type: 'number', default: 50, describe: 'Max records' }),
+            .positional('table', { type: 'string', describe: 'Table name (e.g. incident)' })
+            .option('limit', { alias: 'l', type: 'number', default: 50 }),
           handler: wrap(async (argv, app) => {
             app.requireInstance();
-            const table = argv.table;
-            const limit = argv.limit || 50;
-
-            const params = new URLSearchParams();
-            params.set('sysparm_limit', String(limit));
-            params.set('sysparm_fields', 'view');
-            params.set('sysparm_group_by', 'view');
-            params.set('sysparm_display_value', 'all');
-            const sysparmQuery = table ? `name=${table}^ORDERBYview` : 'ORDERBYview';
-            params.set('sysparm_query', sysparmQuery);
-
-            const records = await app.sdk.list('sys_ui_list', params);
-
-            const viewMap = new Map();
-            for (const record of records) {
-              const view = getDisplayValue(record, 'view');
-              if (view && !viewMap.has(view)) {
-                viewMap.set(view, true);
-              }
+            let table = argv.table;
+            let viewSysID = null;
+
+            // If no table, pick one interactively
+            if (!table) {
+              const tpicked = await interactiveList({
+                app, table: 'sys_ui_list', singular: 'table',
+                columns: ['name'],
+                limit: argv.limit,
+                labelField: 'name',
+                groupBy: 'name',
+              });
+              if (!tpicked) return;
+              table = getStringField(tpicked, 'name');
             }
 
-            const views = Array.from(viewMap.keys()).sort();
-            const defaultViews = views.filter(v => v === 'Default view');
-            const workspaceViews = views.filter(v => v.toLowerCase().includes('workspace'));
-            const otherViews = views.filter(v => !defaultViews.includes(v) && !workspaceViews.includes(v));
+            // Show list views for table
+            const picked = await interactiveList({
+              app, table: 'sys_ui_list', singular: 'list',
+              columns: ['name', 'view'],
+              limit: argv.limit,
+              query: table ? `name=${table}` : '',
+              labelField: 'view',
+              formatLabel: (r) => `${getStringField(r, 'view')}`,
+            });
 
-            const recordsOut = views.map(v => ({ view: v, table }));
+            if (picked) {
+              const sysID = getStringField(picked, 'sys_id') || '';
+              viewSysID = getStringField(picked, 'view') || '';
+              await showList(app, table, viewSysID, sysID);
+              return;
+            }
 
+            // Fallback non-TTY
+            const p = new URLSearchParams();
+            p.set('sysparm_limit', String(argv.limit));
+            p.set('sysparm_display_value', 'all');
+            p.set('sysparm_fields', 'name,view');
+            p.set('sysparm_query', table ? `name=${table}^ORDERBYview` : 'ORDERBYview');
+            const records = await app.sdk.list('sys_ui_list', p);
             app.ok({
-              table,
-              count: views.length,
-              default: defaultViews,
-              workspaces: workspaceViews,
-              other: otherViews,
-              records: recordsOut,
-              instance_url: app.getEffectiveInstance(),
-            }, {
-              summary: `${views.length} list views for ${table}`,
-              breadcrumbs: [
-                { action: 'show', cmd: `jsn lists show ${table} --view "Default view"`, description: 'Show Default view columns' },
-              ],
-            });
+              table: 'sys_ui_list',
+              count: records.length,
+              columns: ['name', 'view'],
+              records: records.map(r => ({ name: getStringField(r, 'name'), view: getStringField(r, 'view') })),
+              context: { instance_url: app.getEffectiveInstance() },
+            }, { summary: `${records.length} list view(s)${table ? ` for ${table}` : ''}` });
           }),
         })
         .command({
@@ -101,147 +70,61 @@ export function listsCmd(wrap) {
           aliases: ['get'],
           describe: 'Show list layout',
           builder: (y) => y
-            .option('view', { type: 'string', default: 'Default view', describe: 'View name' }),
+            .option('view', { type: 'string', default: 'Default view' }),
           handler: wrap(async (argv, app) => {
             app.requireInstance();
             const table = argv.table;
-            const viewName = argv.view;
 
-            // Look up view sys_id
+            // Resolve view sys_id
             let viewSysID = '';
-            const viewParams = new URLSearchParams();
-            viewParams.set('sysparm_limit', '1');
-            viewParams.set('sysparm_fields', 'sys_id');
-            viewParams.set('sysparm_query', `name=${viewName}`);
-            try {
-              const viewRecords = await app.sdk.list('sys_ui_view', viewParams);
-              if (viewRecords.length > 0) {
-                viewSysID = getStringField(viewRecords[0], 'sys_id');
-              }
-            } catch {
-              // ignore
-            }
-
-            if (!viewSysID) {
-              viewParams.set('sysparm_query', `title=${viewName}`);
-              try {
-                const viewRecords = await app.sdk.list('sys_ui_view', viewParams);
-                if (viewRecords.length > 0) {
-                  viewSysID = getStringField(viewRecords[0], 'sys_id');
-                }
-              } catch {
-                // ignore
-              }
-            }
-
-            if (!viewSysID) {
-              viewSysID = viewName;
-            }
-
-            // Fetch list layouts
-            const params = new URLSearchParams();
-            params.set('sysparm_limit', '10');
-            params.set('sysparm_fields', 'sys_id,name,view,parent,active,sys_created_on,sys_updated_on');
-            params.set('sysparm_display_value', 'all');
-
-            const parts = [];
-            if (table) parts.push(`name=${table}`);
-            if (viewSysID) parts.push(`view=${viewSysID}`);
-            const sysparmQuery = parts.length > 0 ? `${parts.join('^')}^ORDERBYsys_created_on` : 'ORDERBYsys_created_on';
-            params.set('sysparm_query', sysparmQuery);
-
-            const records = await app.sdk.list('sys_ui_list', params);
-            if (records.length === 0) {
-              throw new Error(`no list layout found for ${table} with view "${viewName}"`);
-            }
-
-            const mainLayout = records[0];
-            const layoutSysID = getStringField(mainLayout, 'sys_id');
-
-            // Fetch elements (columns) for the list
-            const elemParams = new URLSearchParams();
-            elemParams.set('sysparm_limit', '100');
-            elemParams.set('sysparm_fields', 'sys_id,list_id,element,position,type');
-            elemParams.set('sysparm_display_value', 'all');
-            elemParams.set('sysparm_query', `list_id=${layoutSysID}^ORDERBYposition`);
-
-            const elemRecords = await app.sdk.list('sys_ui_list_element', elemParams);
-
-            const elements = elemRecords.map(record => ({
-              sys_id: getStringField(record, 'sys_id'),
-              listID: getStringField(record, 'list_id'),
-              element: getDisplayValue(record, 'element'),
-              position: getIntValue(record, 'position'),
-              type: getDisplayValue(record, 'type'),
-            }));
-
-            elements.sort((a, b) => a.position - b.position);
-
-            // Build formatted output
-            const lines = [];
-            lines.push('');
-            lines.push(chalk.bold(chalk.hex('#e8a217')(`${table} (${viewName})`)));
-            lines.push('');
-
-            lines.push(chalk.bold(chalk.hex('#666666')('─ List Columns ─')));
-            if (elements.length === 0) {
-              lines.push(chalk.hex('#888888')('  (no columns defined)'));
-            } else {
-              for (let i = 0; i < elements.length; i++) {
-                const elem = elements[i];
-                lines.push(`  ${chalk.hex('#666666')(`${String(i + 1).padStart(2)}.`)}  ${chalk.hex('#cccccc')(elem.element)}`);
-              }
-            }
-            lines.push('');
-
-            lines.push('─────');
-            lines.push('');
-            lines.push(chalk.bold(chalk.hex('#e8a217')('Hints:')));
-            lines.push(`  ${`jsn lists list ${table}`.padEnd(50)}  ${chalk.hex('#888888')('List all views')}`);
-            lines.push(`  ${`jsn forms show ${table} --view "${viewName}"`.padEnd(50)}  ${chalk.hex('#888888')('Show form layout')}`);
-            lines.push('');
-
-            const formatted = lines.join('\n');
-
-            // Build structured data for JSON/quiet mode
-            const columnsData = elements.map(elem => {
-              const col = {
-                element: elem.element,
-                position: elem.position,
-              };
-              if (elem.type) {
-                col.type = elem.type;
-              }
-              return col;
-            });
-
-            app.ok({
-              table,
-              view: viewName,
-              columns: columnsData,
-              _formatted: formatted,
-              _context: {
-                instance_url: app.getEffectiveInstance(),
-                table: 'sys_ui_list',
-              },
-            }, {
-              summary: `List: ${table} (${viewName}) - ${elements.length} columns`,
-              breadcrumbs: [
-                { action: 'list', cmd: `jsn lists list ${table}`, description: 'List all views' },
-                { action: 'form', cmd: `jsn forms show ${table} --view "${viewName}"`, description: 'Show form layout' },
-              ],
-            });
+            const vp = new URLSearchParams();
+            vp.set('sysparm_limit', '1'); vp.set('sysparm_fields', 'sys_id');
+            vp.set('sysparm_query', `name=${argv.view}^name=${table}`);
+            const vr = await app.sdk.list('sys_ui_view', vp);
+            viewSysID = vr.length > 0 ? getStringField(vr[0], 'sys_id') : '';
+
+            // Find list layout
+            const lp = new URLSearchParams();
+            lp.set('sysparm_limit', '1'); lp.set('sysparm_display_value', 'all');
+            lp.set('sysparm_fields', 'sys_id,name,view');
+            lp.set('sysparm_query', `name=${table}^view=${viewSysID || argv.view}`);
+            const layouts = await app.sdk.list('sys_ui_list', lp);
+            if (layouts.length === 0) throw new Error(`No list layout for ${table} view "${argv.view}"`);
+            await showList(app, table, getStringField(layouts[0], 'view') || argv.view, getStringField(layouts[0], 'sys_id'));
           }),
         });
     },
     handler: () => {
-      console.log('Manage list layouts from the sys_ui_list table.');
-      console.log('');
-      console.log('Available subcommands:');
-      console.log('  list <table>         List list views for a table');
-      console.log('  show <table>         Show list layout for a table');
+      console.log('Manage list layouts.');
       console.log('');
-      console.log('Run "jsn lists <command> --help" for details.');
+      console.log('Commands:');
+      console.log('  list [table]      List views (pick table if omitted)');
+      console.log('  show <table>      Show list layout columns');
     },
   };
 }
+
+async function showList(app, table, viewName, layoutSysID) {
+  const ep = new URLSearchParams();
+  ep.set('sysparm_limit', '100'); ep.set('sysparm_display_value', 'all');
+  ep.set('sysparm_fields', 'element,position,type');
+  ep.set('sysparm_query', `list_id=${layoutSysID}^ORDERBYposition`);
+  const elements = await app.sdk.list('sys_ui_list_element', ep);
+
+  elements.sort((a, b) => {
+    const pa = parseInt(getStringField(a, 'position') || '0', 10) || 0;
+    const pb = parseInt(getStringField(b, 'position') || '0', 10) || 0;
+    return pa - pb;
+  });
+
+  app.ok({
+    table,
+    view: viewName,
+    columns: elements.map(e => ({
+      element: getStringField(e, 'element'),
+      position: parseInt(getStringField(e, 'position') || '0', 10) || 0,
+      type: getStringField(e, 'type') || undefined,
+    })),
+    _context: { instance_url: app.getEffectiveInstance(), table: 'sys_ui_list' },
+  }, { summary: `${table} (${viewName}) — ${elements.length} columns` });
+}

package/src/commands/dev/uipolicies.js

@@ -0,0 +1,28 @@
+import { buildDevCmd } from './_generic.js';
+import { getStringField } from '../../helpers.js';
+
+export const uipoliciesCmd = (wrap) => buildDevCmd('uipolicies', 'sys_ui_policy', ['uipolicy', 'up'],
+  ['short_description', 'table', 'sys_class_name', 'active'], wrap, {
+    singular: 'UI policy',
+    scopeValidation: true,
+    onShow: async (record, app) => {
+      const sysID = getStringField(record, 'sys_id') || '';
+      if (!sysID) return;
+      const mp = new URLSearchParams();
+      mp.set('sysparm_query', `ui_policy=${sysID}^ORDERBYorder`);
+      mp.set('sysparm_limit', '100'); mp.set('sysparm_display_value', 'all');
+      mp.set('sysparm_fields', 'name,table,field_name,read_only,mandatory,visible,sys_id');
+      const actions = await app.sdk.list('sys_ui_policy_action', mp);
+      if (actions.length > 0) {
+        console.log(`  Actions (${actions.length}):`);
+        for (const a of actions) {
+          const f = getStringField(a, 'field_name') || '(all fields)';
+          const flags = [];
+          if (getStringField(a, 'mandatory') === 'true') flags.push('mandatory');
+          if (getStringField(a, 'read_only') === 'true') flags.push('read-only');
+          if (getStringField(a, 'visible') === 'false') flags.push('hidden');
+          console.log(`    ${f}  ${flags.length ? `[${flags.join(', ')}]` : ''}`);
+        }
+      }
+    },
+  });

package/src/commands/dev.js

@@ -7,7 +7,7 @@ import {
   spPagesCmd, spWidgetsCmd, uiPagesCmd, appMenuCmd,
   aclsCmd, rolesCmd, propertiesCmd,
   relationshipsCmd, appmodulesCmd, listcontrolsCmd, viewsCmd,
-  privilegesCmd, securitytypesCmd, uxscriptsCmd, aliasesCmd,
+  privilegesCmd, uxscriptsCmd, aliasesCmd,
   catalogscriptsCmd, cataloguipoliciesCmd,
 } from './dev/_simple.js';
 import { flowsCmd } from './dev/flows.js';
@@ -53,7 +53,6 @@ export function devCmd(wrap) {
         .command(listcontrolsCmd(wrap))
         .command(viewsCmd(wrap))
         .command(privilegesCmd(wrap))
-        .command(securitytypesCmd(wrap))
         .command(uxscriptsCmd(wrap))
         .command(aliasesCmd(wrap))
         .command(catalogscriptsCmd(wrap))

package/src/commands/groups.js

@@ -24,8 +24,30 @@ export function groupsCmd(wrap) {
               formatLabel: r => `${getStringField(r, 'name')} ${getStringField(r, 'manager') ? '→ ' + getStringField(r, 'manager') : ''}`,
             });
             if (picked) {
+              const sysID = getStringField(picked, 'sys_id') || '';
+              // Fetch member + role counts for hints
+              let memberCount = 0, roleCount = 0;
+              try {
+                const cp = new URLSearchParams();
+                cp.set('sysparm_query', `group=${sysID}`); cp.set('sysparm_limit', '0'); cp.set('sysparm_fields', 'sys_id');
+                const members = await app.sdk.list('sys_user_grmember', cp);
+                memberCount = members.length;
+              } catch {}
+              try {
+                const rp = new URLSearchParams();
+                rp.set('sysparm_query', `group=${sysID}`); rp.set('sysparm_limit', '0'); rp.set('sysparm_fields', 'sys_id');
+                const roles = await app.sdk.list('sys_group_has_role', rp);
+                roleCount = roles.length;
+              } catch {}
+
               picked._context = { instance_url: app.getEffectiveInstance(), table: 'sys_user_group' };
-              return app.ok(picked, { summary: `Group: ${getStringField(picked, 'name')}` });
+              return app.ok(picked, {
+                summary: `Group: ${getStringField(picked, 'name')}`,
+                breadcrumbs: [
+                  memberCount > 0 ? { action: 'members', cmd: `jsn records list --table sys_user_grmember --query "group=${sysID}"`, description: `${memberCount} member(s)` } : null,
+                  roleCount > 0 ? { action: 'roles', cmd: `jsn records list --table sys_group_has_role --query "group=${sysID}"`, description: `${roleCount} role(s)` } : null,
+                ].filter(Boolean),
+              });
             }
 
             const params = new URLSearchParams();

package/src/commands/users.js

@@ -24,8 +24,15 @@ export function usersCmd(wrap) {
               formatLabel: r => `${getStringField(r, 'user_name')} (${getStringField(r, 'name') || '-'})`,
             });
             if (picked) {
+              const sysID = getStringField(picked, 'sys_id') || '';
               picked._context = { instance_url: app.getEffectiveInstance(), table: 'sys_user' };
-              return app.ok(picked, { summary: `User: ${getStringField(picked, 'user_name')}` });
+              return app.ok(picked, {
+                summary: `User: ${getStringField(picked, 'user_name')}`,
+                breadcrumbs: [
+                  { action: 'preferences', cmd: `jsn records list --table sys_user_preference --query "user=${sysID}"`, description: 'User preferences' },
+                  { action: 'groups', cmd: `jsn records list --table sys_user_grmember --query "user=${sysID}"`, description: 'Group memberships' },
+                ],
+              });
             }
 
             const params = new URLSearchParams();

package/src/help.js

@@ -53,7 +53,6 @@ const ACCESS_COMMANDS = [
   { name: 'b4rules', alias: 'b4r', desc: 'Before-query business rules (see also Automation)' },
   { name: 'roles', alias: 'role', desc: 'Roles' },
   { name: 'privileges', alias: 'priv', desc: 'Scope privileges' },
-  { name: 'securitytypes', alias: 'st', desc: 'Custom security types' },
   { name: 'aliases', alias: 'als', desc: 'Connection & credential aliases' },
   { name: 'groups', alias: 'group', desc: 'Manage groups' },
   { name: 'groupmembers', alias: 'gm', desc: 'Group memberships' },

package/src/output.js

@@ -460,6 +460,9 @@ export function getTableURL(instance, table, sysID) {
     sysevent_email_action: `nav_to.do?uri=sysevent_email_action.do?sys_id=${sysID}`,
     sysevent_in_email_action: `nav_to.do?uri=sysevent_in_email_action.do?sys_id=${sysID}`,
     soap_message: `nav_to.do?uri=soap_message.do?sys_id=${sysID}`,
+    sys_security_acl: `nav_to.do?uri=sys_security_acl.do?sys_id=${sysID}`,
+    sys_user_role: `nav_to.do?uri=sys_user_role.do?sys_id=${sysID}`,
+    sys_db_object: `nav_to.do?uri=sys_db_object.do?sys_id=${sysID}`,
   };
   const path = mapped[table] || `${table}.do?sys_id=${sysID}`;
   return `${instance}/${path}`;