@sonisoft/now-sdk-ext-cli 2.3.2 → 5.0.0

package/oclif.manifest.json

@@ -36,6 +36,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -123,6 +131,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -275,6 +291,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -401,6 +425,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -495,6 +527,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -588,6 +628,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -710,6 +758,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -794,6 +850,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -845,6 +909,199 @@
         "uninstall.js"
       ]
     },
+    "atf": {
+      "aliases": [],
+      "args": {},
+      "description": "Execute ATF (Automated Test Framework) tests or test suites on a ServiceNow instance.\n\nThis command allows you to run automated tests and test suites remotely, making it perfect for CI/CD pipelines and automated testing workflows. You can execute individual tests, entire test suites, and configure execution parameters such as browser type, OS, and performance mode.\n\nFeatures:\n  • Execute individual tests or complete test suites\n  • Real-time progress monitoring\n  • JSON output for CI/CD integration\n  • Detailed test results and summaries\n  • Browser and environment configuration\n  • Performance testing mode support",
+      "examples": [
+        {
+          "description": "Execute a single ATF test by sys_id",
+          "command": "<%= config.bin %> <%= command.id %> --test-id f717a8c783103210621e78c6feaad396 --auth dev-instance"
+        },
+        {
+          "description": "Execute a test suite by sys_id and wait for completion",
+          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --auth dev-instance --wait"
+        },
+        {
+          "description": "Execute a test suite by name",
+          "command": "<%= config.bin %> <%= command.id %> --suite-name \"Smoke Tests\" --auth dev-instance"
+        },
+        {
+          "description": "Execute with specific browser configuration",
+          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --browser chrome --auth dev-instance"
+        },
+        {
+          "description": "Execute as performance test with JSON output for CI/CD",
+          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --performance --json --auth dev-instance"
+        },
+        {
+          "description": "Execute with custom poll interval (10 seconds)",
+          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --poll-interval 10000 --auth dev-instance"
+        }
+      ],
+      "flags": {
+        "json": {
+          "char": "j",
+          "description": "Output results as JSON",
+          "name": "json",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "auth": {
+          "char": "a",
+          "description": "Auth alias to use.",
+          "name": "auth",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "log-level": {
+          "helpGroup": "GLOBAL",
+          "name": "log-level",
+          "summary": "Specify level for logging.",
+          "default": "info",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "debug",
+            "warn",
+            "error",
+            "info",
+            "trace"
+          ],
+          "type": "option"
+        },
+        "test-id": {
+          "char": "t",
+          "description": "Test sys_id to execute",
+          "exclusive": [
+            "suite-id",
+            "suite-name"
+          ],
+          "name": "test-id",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "suite-id": {
+          "char": "s",
+          "description": "Test Suite sys_id to execute",
+          "exclusive": [
+            "test-id",
+            "suite-name"
+          ],
+          "name": "suite-id",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "suite-name": {
+          "char": "n",
+          "description": "Test Suite name to execute",
+          "exclusive": [
+            "test-id",
+            "suite-id"
+          ],
+          "name": "suite-name",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "wait": {
+          "char": "w",
+          "description": "Wait for test suite execution to complete and return results",
+          "name": "wait",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "poll-interval": {
+          "char": "p",
+          "description": "Polling interval in milliseconds when waiting for completion",
+          "name": "poll-interval",
+          "required": false,
+          "default": 5000,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "browser": {
+          "char": "b",
+          "description": "Browser name for test execution (e.g., chrome, firefox)",
+          "name": "browser",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "browser-version": {
+          "description": "Browser version for test execution",
+          "name": "browser-version",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "os-name": {
+          "description": "Operating system name for test execution",
+          "name": "os-name",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "os-version": {
+          "description": "Operating system version for test execution",
+          "name": "os-version",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "performance": {
+          "description": "Run as performance test",
+          "name": "performance",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cloud": {
+          "description": "Run in cloud",
+          "name": "cloud",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "atf",
+      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
+      "pluginName": "@sonisoft/now-sdk-ext-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "atf",
+        "index.js"
+      ]
+    },
     "attachment:get": {
       "aliases": [],
       "args": {},
@@ -876,6 +1133,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -949,6 +1214,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1040,6 +1313,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1139,6 +1420,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1219,6 +1508,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1268,191 +1565,6 @@
         "update.js"
       ]
     },
-    "atf": {
-      "aliases": [],
-      "args": {},
-      "description": "Execute ATF (Automated Test Framework) tests or test suites on a ServiceNow instance.\n\nThis command allows you to run automated tests and test suites remotely, making it perfect for CI/CD pipelines and automated testing workflows. You can execute individual tests, entire test suites, and configure execution parameters such as browser type, OS, and performance mode.\n\nFeatures:\n  • Execute individual tests or complete test suites\n  • Real-time progress monitoring\n  • JSON output for CI/CD integration\n  • Detailed test results and summaries\n  • Browser and environment configuration\n  • Performance testing mode support",
-      "examples": [
-        {
-          "description": "Execute a single ATF test by sys_id",
-          "command": "<%= config.bin %> <%= command.id %> --test-id f717a8c783103210621e78c6feaad396 --auth dev-instance"
-        },
-        {
-          "description": "Execute a test suite by sys_id and wait for completion",
-          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --auth dev-instance --wait"
-        },
-        {
-          "description": "Execute a test suite by name",
-          "command": "<%= config.bin %> <%= command.id %> --suite-name \"Smoke Tests\" --auth dev-instance"
-        },
-        {
-          "description": "Execute with specific browser configuration",
-          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --browser chrome --auth dev-instance"
-        },
-        {
-          "description": "Execute as performance test with JSON output for CI/CD",
-          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --performance --json --auth dev-instance"
-        },
-        {
-          "description": "Execute with custom poll interval (10 seconds)",
-          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --poll-interval 10000 --auth dev-instance"
-        }
-      ],
-      "flags": {
-        "json": {
-          "char": "j",
-          "description": "Output results as JSON",
-          "name": "json",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "auth": {
-          "char": "a",
-          "description": "Auth alias to use.",
-          "name": "auth",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "log-level": {
-          "helpGroup": "GLOBAL",
-          "name": "log-level",
-          "summary": "Specify level for logging.",
-          "default": "info",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "debug",
-            "warn",
-            "error",
-            "info",
-            "trace"
-          ],
-          "type": "option"
-        },
-        "test-id": {
-          "char": "t",
-          "description": "Test sys_id to execute",
-          "exclusive": [
-            "suite-id",
-            "suite-name"
-          ],
-          "name": "test-id",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "suite-id": {
-          "char": "s",
-          "description": "Test Suite sys_id to execute",
-          "exclusive": [
-            "test-id",
-            "suite-name"
-          ],
-          "name": "suite-id",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "suite-name": {
-          "char": "n",
-          "description": "Test Suite name to execute",
-          "exclusive": [
-            "test-id",
-            "suite-id"
-          ],
-          "name": "suite-name",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "wait": {
-          "char": "w",
-          "description": "Wait for test suite execution to complete and return results",
-          "name": "wait",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "poll-interval": {
-          "char": "p",
-          "description": "Polling interval in milliseconds when waiting for completion",
-          "name": "poll-interval",
-          "required": false,
-          "default": 5000,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "browser": {
-          "char": "b",
-          "description": "Browser name for test execution (e.g., chrome, firefox)",
-          "name": "browser",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "browser-version": {
-          "description": "Browser version for test execution",
-          "name": "browser-version",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "os-name": {
-          "description": "Operating system name for test execution",
-          "name": "os-name",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "os-version": {
-          "description": "Operating system version for test execution",
-          "name": "os-version",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "performance": {
-          "description": "Run as performance test",
-          "name": "performance",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "cloud": {
-          "description": "Run in cloud",
-          "name": "cloud",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "atf",
-      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
-      "pluginName": "@sonisoft/now-sdk-ext-cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "atf",
-        "index.js"
-      ]
-    },
     "bulk:delete": {
       "aliases": [],
       "args": {},
@@ -1493,6 +1605,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1601,6 +1721,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1752,6 +1880,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1795,42 +1931,239 @@
         "index.js"
       ]
     },
-    "flow:action": {
+    "auth:delete": {
       "aliases": [],
-      "args": {},
-      "description": "Execute a Flow Designer action by scoped name.\n\nRuns an action using the sn_fd.FlowAPI ScriptableFlowRunner.\n\nFeatures:\n  • Execute actions by scoped name\n  • Pass input values as JSON\n  • Foreground or background execution mode\n  • Returns context ID, outputs, and debug information",
+      "args": {
+        "alias": {
+          "description": "Alias to remove",
+          "name": "alias",
+          "required": false
+        }
+      },
+      "description": "Remove a credential from the store.\n\nThis does not touch the OS keyring — a copy stored there before migrating remains.",
       "examples": [
         {
-          "description": "Run an action",
-          "command": "<%= config.bin %> <%= command.id %> --name global.create_record --inputs '{\"table\":\"incident\",\"values\":{\"short_description\":\"Test\"}}' --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> dev206299",
+          "description": "Remove one alias"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> --all",
+          "description": "Remove every stored credential"
         }
       ],
       "flags": {
-        "json": {
-          "char": "j",
-          "description": "Output results as JSON",
-          "name": "json",
+        "cred-store": {
+          "description": "Accepted for symmetry with other commands and ignored — the auth commands always use @sonisoft/sn-credstore.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
           "required": false,
           "allowNo": false,
           "type": "boolean"
         },
-        "auth": {
-          "char": "a",
-          "description": "Auth alias to use.",
-          "name": "auth",
+        "all": {
+          "description": "Remove every stored credential",
+          "name": "all",
           "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "auth:delete",
+      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
+      "pluginName": "@sonisoft/now-sdk-ext-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "auth",
+        "delete.js"
+      ]
+    },
+    "auth:doctor": {
+      "aliases": [],
+      "args": {},
+      "description": "Diagnose credential storage: whether the SDK shim is active, which backend is in use, and what is stored.",
+      "examples": [
+        {
+          "command": "<%= config.bin %> <%= command.id %>",
+          "description": "Check credential storage health"
         },
-        "log-level": {
+        {
+          "command": "<%= config.bin %> <%= command.id %> --json",
+          "description": "Machine-readable output for CI"
+        }
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
           "helpGroup": "GLOBAL",
-          "name": "log-level",
-          "summary": "Specify level for logging.",
-          "default": "info",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cred-store": {
+          "description": "Accepted for symmetry with other commands and ignored — the auth commands always use @sonisoft/sn-credstore.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "auth:doctor",
+      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
+      "pluginName": "@sonisoft/now-sdk-ext-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "auth",
+        "doctor.js"
+      ]
+    },
+    "auth:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List credentials in the headless-safe credential store.\n\nThese are the credentials the ServiceNow SDK reads via the sn-credstore shim, which works in non-interactive sessions where the OS keyring cannot be unlocked.\n\nSecrets are never printed.",
+      "examples": [
+        {
+          "command": "<%= config.bin %> <%= command.id %>",
+          "description": "List stored credentials"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> --json",
+          "description": "List as JSON for scripting"
+        }
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cred-store": {
+          "description": "Accepted for symmetry with other commands and ignored — the auth commands always use @sonisoft/sn-credstore.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "auth:list",
+      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
+      "pluginName": "@sonisoft/now-sdk-ext-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "auth",
+        "list.js"
+      ]
+    },
+    "auth:use": {
+      "aliases": [],
+      "args": {
+        "alias": {
+          "description": "Alias to make the default",
+          "name": "alias",
+          "required": true
+        }
+      },
+      "description": "Set the default credential alias.\n\nCommands run without --auth use this alias.",
+      "examples": [
+        {
+          "command": "<%= config.bin %> <%= command.id %> dev206299",
+          "description": "Make dev206299 the default"
+        }
+      ],
+      "flags": {
+        "cred-store": {
+          "description": "Accepted for symmetry with other commands and ignored — the auth commands always use @sonisoft/sn-credstore.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "auth:use",
+      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
+      "pluginName": "@sonisoft/now-sdk-ext-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "auth",
+        "use.js"
+      ]
+    },
+    "flow:action": {
+      "aliases": [],
+      "args": {},
+      "description": "Execute a Flow Designer action by scoped name.\n\nRuns an action using the sn_fd.FlowAPI ScriptableFlowRunner.\n\nFeatures:\n  • Execute actions by scoped name\n  • Pass input values as JSON\n  • Foreground or background execution mode\n  • Returns context ID, outputs, and debug information",
+      "examples": [
+        {
+          "description": "Run an action",
+          "command": "<%= config.bin %> <%= command.id %> --name global.create_record --inputs '{\"table\":\"incident\",\"values\":{\"short_description\":\"Test\"}}' --auth dev"
+        }
+      ],
+      "flags": {
+        "json": {
+          "char": "j",
+          "description": "Output results as JSON",
+          "name": "json",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "auth": {
+          "char": "a",
+          "description": "Auth alias to use.",
+          "name": "auth",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "log-level": {
+          "helpGroup": "GLOBAL",
+          "name": "log-level",
+          "summary": "Specify level for logging.",
+          "default": "info",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
             "debug",
             "warn",
             "error",
@@ -1935,6 +2268,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2030,6 +2371,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2126,6 +2475,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2212,6 +2569,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2298,6 +2663,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2396,6 +2769,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2496,6 +2877,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2582,6 +2971,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2690,6 +3087,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2772,6 +3177,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2888,6 +3301,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2994,6 +3415,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3126,6 +3555,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3226,6 +3663,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3322,6 +3767,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3409,6 +3862,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3524,6 +3985,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3576,26 +4045,29 @@
         "syslog.js"
       ]
     },
-    "schema:field": {
+    "scope": {
       "aliases": [],
       "args": {},
-      "description": "Get detailed information about a specific field on a ServiceNow table.\n\nThis command retrieves comprehensive details about a single field, including its type, constraints, choices, and other metadata. Useful for understanding field definitions during development.",
+      "description": "Get the current application scope or list available applications.",
       "examples": [
         {
-          "description": "Explain the state field on incident table",
-          "command": "<%= config.bin %> <%= command.id %> --table incident --field state --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> --auth dev",
+          "description": "Get the current application scope"
         },
         {
-          "description": "Explain the priority field on incident table with JSON output",
-          "command": "<%= config.bin %> <%= command.id %> --table incident --field priority --json --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> --list --auth dev",
+          "description": "List all available applications"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> -l --json --auth dev",
+          "description": "List applications as JSON"
         }
       ],
       "flags": {
         "json": {
-          "char": "j",
-          "description": "Output results as JSON",
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
           "name": "json",
-          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -3608,6 +4080,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3624,28 +4104,18 @@
           ],
           "type": "option"
         },
-        "table": {
-          "char": "t",
-          "description": "ServiceNow table name",
-          "name": "table",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "field": {
-          "char": "f",
-          "description": "Field name to explain",
-          "name": "field",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
+        "list": {
+          "char": "l",
+          "description": "List all available applications",
+          "name": "list",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "schema:field",
+      "id": "scope",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -3655,30 +4125,29 @@
       "relativePath": [
         "dist",
         "commands",
-        "schema",
-        "field.js"
+        "scope",
+        "index.js"
       ]
     },
-    "schema": {
+    "scope:set": {
       "aliases": [],
       "args": {},
-      "description": "Discover and inspect a ServiceNow table schema including fields, types, and relationships.\n\nThis command retrieves the full schema definition for a ServiceNow table, including all fields, their types, constraints, and optionally choices, relationships, UI policies, and business rules.\n\nFeatures:\n  • List all fields with types, lengths, and constraints\n  • Optionally include field choices\n  • Optionally include table relationships\n  • Optionally include UI policies\n  • Optionally include business rules\n  • JSON output for CI/CD integration",
+      "description": "Set the current application scope on a ServiceNow instance.",
       "examples": [
         {
-          "description": "Discover incident table schema",
-          "command": "<%= config.bin %> <%= command.id %> --table incident --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> --app-id abc123def456ghi789jkl012mno345pq --auth dev",
+          "description": "Set application scope by sys_id"
         },
         {
-          "description": "Include choices and relationships",
-          "command": "<%= config.bin %> <%= command.id %> --table incident --include-choices --include-relationships --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> -a abc123def456ghi789jkl012mno345pq --json --auth dev",
+          "description": "Set application scope and output as JSON"
         }
       ],
       "flags": {
         "json": {
-          "char": "j",
-          "description": "Output results as JSON",
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
           "name": "json",
-          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -3691,6 +4160,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3707,47 +4184,19 @@
           ],
           "type": "option"
         },
-        "table": {
-          "char": "t",
-          "description": "ServiceNow table name to discover schema for",
-          "name": "table",
+        "app-id": {
+          "char": "a",
+          "description": "32-char sys_id of application",
+          "name": "app-id",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "include-choices": {
-          "description": "Include field choices in the schema output",
-          "name": "include-choices",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "include-relationships": {
-          "description": "Include table relationships in the schema output",
-          "name": "include-relationships",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "include-ui-policies": {
-          "description": "Include UI policies in the schema output",
-          "name": "include-ui-policies",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "include-business-rules": {
-          "description": "Include business rules in the schema output",
-          "name": "include-business-rules",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "schema",
+      "id": "scope:set",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -3757,30 +4206,33 @@
       "relativePath": [
         "dist",
         "commands",
-        "schema",
-        "index.js"
+        "scope",
+        "set.js"
       ]
     },
-    "schema:validate-catalog": {
+    "script-sync:pull": {
       "aliases": [],
       "args": {},
-      "description": "Validate a ServiceNow catalog item configuration for common issues.\n\nThis command checks a catalog item configuration and reports any validation issues, warnings, or errors found. Useful for ensuring catalog items are properly configured before deployment.",
+      "description": "Pull a script from a ServiceNow instance to a local file.\n\nThis command downloads a script record from your ServiceNow instance and saves it as a local file. Supports multiple script types including Script Includes, Business Rules, UI Scripts, UI Actions, and Client Scripts.\n\nFeatures:\n  • Download scripts by name and type\n  • Custom output file path support\n  • Auto-generated file names based on script name and type\n  • JSON output for CI/CD integration",
       "examples": [
         {
-          "description": "Validate a catalog item by sys_id",
-          "command": "<%= config.bin %> <%= command.id %> --sys-id a1b2c3d4e5f6 --auth dev"
+          "description": "Pull a Script Include to auto-generated file name",
+          "command": "<%= config.bin %> <%= command.id %> --name MyScriptInclude --type sys_script_include --auth dev-instance"
         },
         {
-          "description": "Validate a catalog item with JSON output",
-          "command": "<%= config.bin %> <%= command.id %> --sys-id a1b2c3d4e5f6 --json --auth dev"
+          "description": "Pull a Business Rule to a specific file",
+          "command": "<%= config.bin %> <%= command.id %> --name MyBusinessRule --type sys_script --output ./scripts/my-rule.js --auth dev-instance"
+        },
+        {
+          "description": "Pull a Client Script with JSON output",
+          "command": "<%= config.bin %> <%= command.id %> -n MyClientScript -t sys_script_client --json --auth dev-instance"
         }
       ],
       "flags": {
         "json": {
-          "char": "j",
-          "description": "Output results as JSON",
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
           "name": "json",
-          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -3793,6 +4245,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3809,19 +4269,44 @@
           ],
           "type": "option"
         },
-        "sys-id": {
-          "char": "s",
-          "description": "Catalog item sys_id to validate",
-          "name": "sys-id",
+        "name": {
+          "char": "n",
+          "description": "Name of the script to pull",
+          "name": "name",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "type": {
+          "char": "t",
+          "description": "Type of script to pull",
+          "name": "type",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "sys_script_include",
+            "sys_script",
+            "sys_ui_script",
+            "sys_ui_action",
+            "sys_script_client"
+          ],
+          "type": "option"
+        },
+        "output": {
+          "char": "o",
+          "description": "Output file path. If not specified, a file name is auto-generated.",
+          "name": "output",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "schema:validate-catalog",
+      "id": "script-sync:pull",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -3831,26 +4316,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "schema",
-        "validate-catalog.js"
+        "script-sync",
+        "pull.js"
       ]
     },
-    "scope": {
+    "script-sync:push": {
       "aliases": [],
       "args": {},
-      "description": "Get the current application scope or list available applications.",
+      "description": "Push a local script file to a ServiceNow instance.\n\nThis command uploads a local script file to your ServiceNow instance, updating the corresponding script record. Supports multiple script types including Script Includes, Business Rules, UI Scripts, UI Actions, and Client Scripts.\n\nFeatures:\n  • Upload scripts by name and type\n  • Specify the local file to push\n  • JSON output for CI/CD integration\n  • Detailed push result reporting",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --auth dev",
-          "description": "Get the current application scope"
+          "description": "Push a Script Include from a local file",
+          "command": "<%= config.bin %> <%= command.id %> --name MyScriptInclude --type sys_script_include --file ./scripts/MyScriptInclude.js --auth dev-instance"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --list --auth dev",
-          "description": "List all available applications"
+          "description": "Push a Business Rule with short flags",
+          "command": "<%= config.bin %> <%= command.id %> -n MyBusinessRule -t sys_script -f ./scripts/my-rule.js -a dev-instance"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -l --json --auth dev",
-          "description": "List applications as JSON"
+          "description": "Push a UI Script with JSON output",
+          "command": "<%= config.bin %> <%= command.id %> -n MyUIScript -t sys_ui_script -f ./scripts/ui-script.js --json --auth dev-instance"
         }
       ],
       "flags": {
@@ -3870,6 +4355,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3886,18 +4379,44 @@
           ],
           "type": "option"
         },
-        "list": {
-          "char": "l",
-          "description": "List all available applications",
-          "name": "list",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
+        "name": {
+          "char": "n",
+          "description": "Name of the script to push",
+          "name": "name",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "type": {
+          "char": "t",
+          "description": "Type of script to push",
+          "name": "type",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "sys_script_include",
+            "sys_script",
+            "sys_ui_script",
+            "sys_ui_action",
+            "sys_script_client"
+          ],
+          "type": "option"
+        },
+        "file": {
+          "char": "f",
+          "description": "Path to the local script file to push",
+          "name": "file",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "scope",
+      "id": "script-sync:push",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -3907,22 +4426,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "scope",
-        "index.js"
+        "script-sync",
+        "push.js"
       ]
     },
-    "scope:set": {
+    "script-sync:sync": {
       "aliases": [],
       "args": {},
-      "description": "Set the current application scope on a ServiceNow instance.",
+      "description": "Synchronize all scripts in a directory with a ServiceNow instance.\n\nThis command scans a local directory for script files and synchronizes them with the corresponding records on your ServiceNow instance. You can optionally filter by script types to synchronize only specific kinds of scripts.\n\nFeatures:\n  • Batch synchronization of all scripts in a directory\n  • Filter by one or more script types\n  • Summary report with success/failure counts\n  • JSON output for CI/CD integration",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --app-id abc123def456ghi789jkl012mno345pq --auth dev",
-          "description": "Set application scope by sys_id"
+          "description": "Sync all scripts in a directory",
+          "command": "<%= config.bin %> <%= command.id %> --directory ./scripts --auth dev-instance"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -a abc123def456ghi789jkl012mno345pq --json --auth dev",
-          "description": "Set application scope and output as JSON"
+          "description": "Sync only Script Includes and Business Rules",
+          "command": "<%= config.bin %> <%= command.id %> --directory ./scripts --types sys_script_include --types sys_script --auth dev-instance"
+        },
+        {
+          "description": "Sync with JSON output for CI/CD",
+          "command": "<%= config.bin %> <%= command.id %> -d ./scripts --json --auth dev-instance"
         }
       ],
       "flags": {
@@ -3942,6 +4465,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3958,19 +4489,35 @@
           ],
           "type": "option"
         },
-        "app-id": {
-          "char": "a",
-          "description": "32-char sys_id of application",
-          "name": "app-id",
+        "directory": {
+          "char": "d",
+          "description": "Directory containing script files to synchronize",
+          "name": "directory",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "types": {
+          "char": "t",
+          "description": "Script types to synchronize. Can be specified multiple times to include multiple types.",
+          "name": "types",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "options": [
+            "sys_script_include",
+            "sys_script",
+            "sys_ui_script",
+            "sys_ui_action",
+            "sys_script_client"
+          ],
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "scope:set",
+      "id": "script-sync:sync",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -3980,33 +4527,30 @@
       "relativePath": [
         "dist",
         "commands",
-        "scope",
-        "set.js"
+        "script-sync",
+        "sync.js"
       ]
     },
-    "script-sync:pull": {
+    "schema:field": {
       "aliases": [],
       "args": {},
-      "description": "Pull a script from a ServiceNow instance to a local file.\n\nThis command downloads a script record from your ServiceNow instance and saves it as a local file. Supports multiple script types including Script Includes, Business Rules, UI Scripts, UI Actions, and Client Scripts.\n\nFeatures:\n  • Download scripts by name and type\n  • Custom output file path support\n  • Auto-generated file names based on script name and type\n  • JSON output for CI/CD integration",
+      "description": "Get detailed information about a specific field on a ServiceNow table.\n\nThis command retrieves comprehensive details about a single field, including its type, constraints, choices, and other metadata. Useful for understanding field definitions during development.",
       "examples": [
         {
-          "description": "Pull a Script Include to auto-generated file name",
-          "command": "<%= config.bin %> <%= command.id %> --name MyScriptInclude --type sys_script_include --auth dev-instance"
-        },
-        {
-          "description": "Pull a Business Rule to a specific file",
-          "command": "<%= config.bin %> <%= command.id %> --name MyBusinessRule --type sys_script --output ./scripts/my-rule.js --auth dev-instance"
+          "description": "Explain the state field on incident table",
+          "command": "<%= config.bin %> <%= command.id %> --table incident --field state --auth dev"
         },
         {
-          "description": "Pull a Client Script with JSON output",
-          "command": "<%= config.bin %> <%= command.id %> -n MyClientScript -t sys_script_client --json --auth dev-instance"
+          "description": "Explain the priority field on incident table with JSON output",
+          "command": "<%= config.bin %> <%= command.id %> --table incident --field priority --json --auth dev"
         }
       ],
       "flags": {
         "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
+          "char": "j",
+          "description": "Output results as JSON",
           "name": "json",
+          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -4019,6 +4563,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4035,36 +4587,20 @@
           ],
           "type": "option"
         },
-        "name": {
-          "char": "n",
-          "description": "Name of the script to pull",
-          "name": "name",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "type": {
+        "table": {
           "char": "t",
-          "description": "Type of script to pull",
-          "name": "type",
+          "description": "ServiceNow table name",
+          "name": "table",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
-          "options": [
-            "sys_script_include",
-            "sys_script",
-            "sys_ui_script",
-            "sys_ui_action",
-            "sys_script_client"
-          ],
           "type": "option"
         },
-        "output": {
-          "char": "o",
-          "description": "Output file path. If not specified, a file name is auto-generated.",
-          "name": "output",
-          "required": false,
+        "field": {
+          "char": "f",
+          "description": "Field name to explain",
+          "name": "field",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -4072,7 +4608,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "script-sync:pull",
+      "id": "schema:field",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -4082,33 +4618,30 @@
       "relativePath": [
         "dist",
         "commands",
-        "script-sync",
-        "pull.js"
+        "schema",
+        "field.js"
       ]
     },
-    "script-sync:push": {
+    "schema": {
       "aliases": [],
       "args": {},
-      "description": "Push a local script file to a ServiceNow instance.\n\nThis command uploads a local script file to your ServiceNow instance, updating the corresponding script record. Supports multiple script types including Script Includes, Business Rules, UI Scripts, UI Actions, and Client Scripts.\n\nFeatures:\n  • Upload scripts by name and type\n  • Specify the local file to push\n  • JSON output for CI/CD integration\n  • Detailed push result reporting",
+      "description": "Discover and inspect a ServiceNow table schema including fields, types, and relationships.\n\nThis command retrieves the full schema definition for a ServiceNow table, including all fields, their types, constraints, and optionally choices, relationships, UI policies, and business rules.\n\nFeatures:\n  • List all fields with types, lengths, and constraints\n  • Optionally include field choices\n  • Optionally include table relationships\n  • Optionally include UI policies\n  • Optionally include business rules\n  • JSON output for CI/CD integration",
       "examples": [
         {
-          "description": "Push a Script Include from a local file",
-          "command": "<%= config.bin %> <%= command.id %> --name MyScriptInclude --type sys_script_include --file ./scripts/MyScriptInclude.js --auth dev-instance"
-        },
-        {
-          "description": "Push a Business Rule with short flags",
-          "command": "<%= config.bin %> <%= command.id %> -n MyBusinessRule -t sys_script -f ./scripts/my-rule.js -a dev-instance"
+          "description": "Discover incident table schema",
+          "command": "<%= config.bin %> <%= command.id %> --table incident --auth dev"
         },
         {
-          "description": "Push a UI Script with JSON output",
-          "command": "<%= config.bin %> <%= command.id %> -n MyUIScript -t sys_ui_script -f ./scripts/ui-script.js --json --auth dev-instance"
+          "description": "Include choices and relationships",
+          "command": "<%= config.bin %> <%= command.id %> --table incident --include-choices --include-relationships --auth dev"
         }
       ],
       "flags": {
         "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
+          "char": "j",
+          "description": "Output results as JSON",
           "name": "json",
+          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -4121,6 +4654,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4137,44 +4678,47 @@
           ],
           "type": "option"
         },
-        "name": {
-          "char": "n",
-          "description": "Name of the script to push",
-          "name": "name",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "type": {
+        "table": {
           "char": "t",
-          "description": "Type of script to push",
-          "name": "type",
+          "description": "ServiceNow table name to discover schema for",
+          "name": "table",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
-          "options": [
-            "sys_script_include",
-            "sys_script",
-            "sys_ui_script",
-            "sys_ui_action",
-            "sys_script_client"
-          ],
           "type": "option"
         },
-        "file": {
-          "char": "f",
-          "description": "Path to the local script file to push",
-          "name": "file",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
+        "include-choices": {
+          "description": "Include field choices in the schema output",
+          "name": "include-choices",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "include-relationships": {
+          "description": "Include table relationships in the schema output",
+          "name": "include-relationships",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "include-ui-policies": {
+          "description": "Include UI policies in the schema output",
+          "name": "include-ui-policies",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "include-business-rules": {
+          "description": "Include business rules in the schema output",
+          "name": "include-business-rules",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "script-sync:push",
+      "id": "schema",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -4184,33 +4728,30 @@
       "relativePath": [
         "dist",
         "commands",
-        "script-sync",
-        "push.js"
+        "schema",
+        "index.js"
       ]
     },
-    "script-sync:sync": {
+    "schema:validate-catalog": {
       "aliases": [],
       "args": {},
-      "description": "Synchronize all scripts in a directory with a ServiceNow instance.\n\nThis command scans a local directory for script files and synchronizes them with the corresponding records on your ServiceNow instance. You can optionally filter by script types to synchronize only specific kinds of scripts.\n\nFeatures:\n  • Batch synchronization of all scripts in a directory\n  • Filter by one or more script types\n  • Summary report with success/failure counts\n  • JSON output for CI/CD integration",
+      "description": "Validate a ServiceNow catalog item configuration for common issues.\n\nThis command checks a catalog item configuration and reports any validation issues, warnings, or errors found. Useful for ensuring catalog items are properly configured before deployment.",
       "examples": [
         {
-          "description": "Sync all scripts in a directory",
-          "command": "<%= config.bin %> <%= command.id %> --directory ./scripts --auth dev-instance"
-        },
-        {
-          "description": "Sync only Script Includes and Business Rules",
-          "command": "<%= config.bin %> <%= command.id %> --directory ./scripts --types sys_script_include --types sys_script --auth dev-instance"
+          "description": "Validate a catalog item by sys_id",
+          "command": "<%= config.bin %> <%= command.id %> --sys-id a1b2c3d4e5f6 --auth dev"
         },
         {
-          "description": "Sync with JSON output for CI/CD",
-          "command": "<%= config.bin %> <%= command.id %> -d ./scripts --json --auth dev-instance"
+          "description": "Validate a catalog item with JSON output",
+          "command": "<%= config.bin %> <%= command.id %> --sys-id a1b2c3d4e5f6 --json --auth dev"
         }
       ],
       "flags": {
         "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
+          "char": "j",
+          "description": "Output results as JSON",
           "name": "json",
+          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -4223,6 +4764,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4239,35 +4788,19 @@
           ],
           "type": "option"
         },
-        "directory": {
-          "char": "d",
-          "description": "Directory containing script files to synchronize",
-          "name": "directory",
+        "sys-id": {
+          "char": "s",
+          "description": "Catalog item sys_id to validate",
+          "name": "sys-id",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "types": {
-          "char": "t",
-          "description": "Script types to synchronize. Can be specified multiple times to include multiple types.",
-          "name": "types",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": true,
-          "options": [
-            "sys_script_include",
-            "sys_script",
-            "sys_ui_script",
-            "sys_ui_action",
-            "sys_script_client"
-          ],
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "script-sync:sync",
+      "id": "schema:validate-catalog",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -4277,8 +4810,8 @@
       "relativePath": [
         "dist",
         "commands",
-        "script-sync",
-        "sync.js"
+        "schema",
+        "validate-catalog.js"
       ]
     },
     "search:add-table": {
@@ -4316,6 +4849,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4407,6 +4948,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4479,6 +5028,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4587,6 +5144,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4664,6 +5229,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4782,6 +5355,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4882,6 +5463,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4985,6 +5574,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5027,18 +5624,18 @@
         "validate.js"
       ]
     },
-    "task:approve": {
+    "update-set:clone": {
       "aliases": [],
       "args": {},
-      "description": "Approve a ServiceNow change request.\n\nThis command approves a change request identified by its number. You can optionally provide approval comments.\n\nFeatures:\n  - Approve change requests\n  - Optionally add approval comments\n  - Auto-resolves change request number to sys_id",
+      "description": "Clone an update set and its records.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --number CHG0010001 --auth dev",
-          "description": "Approve a change request"
+          "command": "<%= config.bin %> <%= command.id %> --source us-001 --name \"Cloned Set\" --auth dev-instance",
+          "description": "Clone an update set"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -n CHG0010001 -c \"Looks good, approved\" --auth dev",
-          "description": "Approve a change request with comments"
+          "command": "<%= config.bin %> <%= command.id %> --source us-001 --name \"Cloned Set\" --json --auth dev-instance",
+          "description": "Clone with JSON output"
         }
       ],
       "flags": {
@@ -5058,6 +5655,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5074,19 +5679,19 @@
           ],
           "type": "option"
         },
-        "comments": {
-          "char": "c",
-          "description": "Approval comments",
-          "name": "comments",
-          "required": false,
+        "name": {
+          "char": "n",
+          "description": "Name for the cloned update set",
+          "name": "name",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "number": {
-          "char": "n",
-          "description": "Change request number (e.g., CHG0010001)",
-          "name": "number",
+        "source": {
+          "char": "s",
+          "description": "Source update set sys_id",
+          "name": "source",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -5095,7 +5700,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "task:approve",
+      "id": "update-set:clone",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5105,26 +5710,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "task",
-        "approve.js"
+        "update-set",
+        "clone.js"
       ]
     },
-    "task:assign": {
+    "update-set:create": {
       "aliases": [],
       "args": {},
-      "description": "Assign a ServiceNow task to a user or group.\n\nThis command assigns a task record identified by its number to a specified user and/or group. You can assign to a user, a group, or both simultaneously.\n\nFeatures:\n  - Assign tasks to individual users\n  - Assign tasks to assignment groups\n  - Assign to both user and group at once\n  - Supports any task-based table\n  - Auto-resolves task number to sys_id",
+      "description": "Create a new update set.",
       "examples": [
-        {
-          "command": "<%= config.bin %> <%= command.id %> --number INC0010001 --user admin --auth dev",
-          "description": "Assign an incident to a user"
+        {
+          "command": "<%= config.bin %> <%= command.id %> --name \"My Feature Set\" --auth dev-instance",
+          "description": "Create a new update set with a name"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -n INC0010001 -u admin -g \"Service Desk\" --auth dev",
-          "description": "Assign an incident to a user and group"
+          "command": "<%= config.bin %> <%= command.id %> --name \"My Feature Set\" --description \"Update set for feature X\" --auth dev-instance",
+          "description": "Create with name and description"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --number CHG0010001 --table change_request --user admin --auth dev",
-          "description": "Assign a change request to a user"
+          "command": "<%= config.bin %> <%= command.id %> --name \"My Feature Set\" --application x_my_app --auth dev-instance",
+          "description": "Create within a specific application scope"
         }
       ],
       "flags": {
@@ -5144,6 +5749,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5160,37 +5773,27 @@
           ],
           "type": "option"
         },
-        "group": {
-          "char": "g",
-          "description": "Assignment group",
-          "name": "group",
+        "application": {
+          "description": "Application scope for the new update set",
+          "name": "application",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "number": {
-          "char": "n",
-          "description": "Task number (e.g., INC0010001)",
-          "name": "number",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "table": {
-          "description": "ServiceNow table name",
-          "name": "table",
+        "description": {
+          "char": "d",
+          "description": "Description for the new update set",
+          "name": "description",
           "required": false,
-          "default": "task",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "user": {
-          "char": "u",
-          "description": "User to assign the task to",
-          "name": "user",
+        "name": {
+          "char": "n",
+          "description": "Name for the new update set",
+          "name": "name",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -5199,7 +5802,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "task:assign",
+      "id": "update-set:create",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5209,22 +5812,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "task",
-        "assign.js"
+        "update-set",
+        "create.js"
       ]
     },
-    "task:close": {
+    "update-set:current": {
       "aliases": [],
       "args": {},
-      "description": "Close a ServiceNow incident.\n\nThis command closes an incident identified by its number, setting the close notes and optionally a close code. The incident must be in a state that allows closure.\n\nFeatures:\n  - Close incidents with close notes\n  - Optionally specify a close code\n  - Auto-resolves incident number to sys_id",
+      "description": "Get or set the current update set.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --number INC0010001 --notes \"Issue confirmed resolved by user\" --auth dev",
-          "description": "Close an incident with close notes"
+          "command": "<%= config.bin %> <%= command.id %> --auth dev-instance",
+          "description": "Get the current update set"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -n INC0010001 --notes \"Closed\" --close-code \"Solved (Permanently)\" --auth dev",
-          "description": "Close with a specific close code"
+          "command": "<%= config.bin %> <%= command.id %> --set us-001 --auth dev-instance",
+          "description": "Set the current update set by sys_id"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> --json --auth dev-instance",
+          "description": "Get the current update set as JSON"
         }
       ],
       "flags": {
@@ -5244,6 +5851,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5260,35 +5875,19 @@
           ],
           "type": "option"
         },
-        "close-code": {
-          "description": "Close code for the closure",
-          "name": "close-code",
+        "set": {
+          "char": "s",
+          "description": "sys_id of update set to make current",
+          "name": "set",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "notes": {
-          "description": "Close notes",
-          "name": "notes",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "number": {
-          "char": "n",
-          "description": "Incident number (e.g., INC0010001)",
-          "name": "number",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "task:close",
+      "id": "update-set:current",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5298,26 +5897,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "task",
-        "close.js"
+        "update-set",
+        "current.js"
       ]
     },
-    "task:comment": {
+    "update-set": {
       "aliases": [],
       "args": {},
-      "description": "Add a comment or work note to a ServiceNow task.\n\nThis command adds a comment or work note to a task record identified by its number. By default, comments are added as customer-visible comments. Use the --work-note flag to add an internal work note instead.\n\nFeatures:\n  - Add customer-visible comments to any task\n  - Add internal work notes visible only to fulfiller teams\n  - Supports any task-based table (incident, change_request, etc.)\n  - Auto-resolves task number to sys_id",
+      "description": "List update sets on a ServiceNow instance.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --number INC0010001 --comment \"Investigating the issue\" --auth dev",
-          "description": "Add a comment to an incident"
+          "command": "<%= config.bin %> <%= command.id %> --auth dev-instance",
+          "description": "List update sets with default limit"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -n INC0010001 -c \"Internal update\" --work-note --auth dev",
-          "description": "Add a work note to an incident"
+          "command": "<%= config.bin %> <%= command.id %> --query \"state=in progress\" --limit 50 --auth dev-instance",
+          "description": "List update sets with a custom query filter"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --number CHG0010001 --table change_request --comment \"Approved\" --auth dev",
-          "description": "Add a comment to a change request"
+          "command": "<%= config.bin %> <%= command.id %> --json --auth dev-instance",
+          "description": "List update sets with JSON output"
         }
       ],
       "flags": {
@@ -5337,6 +5936,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5353,44 +5960,28 @@
           ],
           "type": "option"
         },
-        "comment": {
-          "char": "c",
-          "description": "Comment text to add",
-          "name": "comment",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "number": {
-          "char": "n",
-          "description": "Task number (e.g., INC0010001)",
-          "name": "number",
-          "required": true,
+        "limit": {
+          "description": "Maximum number of update sets to return",
+          "name": "limit",
+          "required": false,
+          "default": 20,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "table": {
-          "description": "ServiceNow table name",
-          "name": "table",
+        "query": {
+          "char": "q",
+          "description": "Encoded query filter",
+          "name": "query",
           "required": false,
-          "default": "task",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "work-note": {
-          "description": "Add as work note instead of comment",
-          "name": "work-note",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "task:comment",
+      "id": "update-set",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5400,26 +5991,22 @@
       "relativePath": [
         "dist",
         "commands",
-        "task",
-        "comment.js"
+        "update-set",
+        "index.js"
       ]
     },
-    "task:find": {
+    "update-set:inspect": {
       "aliases": [],
       "args": {},
-      "description": "Find a ServiceNow task by its number.\n\nThis command looks up a task record by its number in the specified table. Returns the full task details including sys_id, description, state, and assignment information.\n\nFeatures:\n  - Look up any task by number\n  - Supports any task-based table\n  - JSON output for scripting and automation",
+      "description": "Inspect the components of an update set.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --number INC0010001 --auth dev",
-          "description": "Find an incident by number"
-        },
-        {
-          "command": "<%= config.bin %> <%= command.id %> -n CHG0010001 --table change_request --auth dev",
-          "description": "Find a change request by number"
+          "command": "<%= config.bin %> <%= command.id %> --sys-id us-001 --auth dev-instance",
+          "description": "Inspect an update set by sys_id"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -n INC0010001 --json --auth dev",
-          "description": "Find an incident and output as JSON"
+          "command": "<%= config.bin %> <%= command.id %> --sys-id us-001 --json --auth dev-instance",
+          "description": "Inspect with JSON output"
         }
       ],
       "flags": {
@@ -5439,6 +6026,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5455,28 +6050,19 @@
           ],
           "type": "option"
         },
-        "number": {
-          "char": "n",
-          "description": "Task number (e.g., INC0010001, CHG0010001)",
-          "name": "number",
+        "sys-id": {
+          "char": "s",
+          "description": "sys_id of the update set to inspect",
+          "name": "sys-id",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "table": {
-          "description": "ServiceNow table name",
-          "name": "table",
-          "required": false,
-          "default": "task",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "task:find",
+      "id": "update-set:inspect",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5486,22 +6072,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "task",
-        "find.js"
+        "update-set",
+        "inspect.js"
       ]
     },
-    "task:resolve": {
+    "update-set:move": {
       "aliases": [],
       "args": {},
-      "description": "Resolve a ServiceNow incident with resolution notes.\n\nThis command resolves an incident identified by its number, setting the resolution notes and optionally a close code. The incident must be in a state that allows resolution.\n\nFeatures:\n  - Resolve incidents with resolution notes\n  - Optionally specify a close code\n  - Auto-resolves incident number to sys_id",
+      "description": "Move records between update sets.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --number INC0010001 --notes \"Issue resolved by restarting the service\" --auth dev",
-          "description": "Resolve an incident with resolution notes"
+          "command": "<%= config.bin %> <%= command.id %> --target us-002 --source us-001 --auth dev-instance",
+          "description": "Move all records from one update set to another"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -n INC0010001 --notes \"Fixed\" --close-code \"Solved (Permanently)\" --auth dev",
-          "description": "Resolve with a specific close code"
+          "command": "<%= config.bin %> <%= command.id %> --target us-002 --records \"rec-001,rec-002,rec-003\" --auth dev-instance",
+          "description": "Move specific records to a target update set"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> --target us-002 --source us-001 --json --auth dev-instance",
+          "description": "Move records with JSON output"
         }
       ],
       "flags": {
@@ -5521,6 +6111,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5537,26 +6135,25 @@
           ],
           "type": "option"
         },
-        "close-code": {
-          "description": "Close code for the resolution",
-          "name": "close-code",
+        "records": {
+          "description": "Comma-separated sys_ids of records to move",
+          "name": "records",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "notes": {
-          "description": "Resolution notes",
-          "name": "notes",
-          "required": true,
+        "source": {
+          "description": "Source update set sys_id",
+          "name": "source",
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "number": {
-          "char": "n",
-          "description": "Incident number (e.g., INC0010001)",
-          "name": "number",
+        "target": {
+          "description": "Target update set sys_id",
+          "name": "target",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -5565,7 +6162,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "task:resolve",
+      "id": "update-set:move",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5575,22 +6172,22 @@
       "relativePath": [
         "dist",
         "commands",
-        "task",
-        "resolve.js"
+        "update-set",
+        "move.js"
       ]
     },
-    "update-set:clone": {
+    "workflow:create": {
       "aliases": [],
       "args": {},
-      "description": "Clone an update set and its records.",
+      "description": "Create a complete workflow from a JSON specification file.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --source us-001 --name \"Cloned Set\" --auth dev-instance",
-          "description": "Clone an update set"
+          "command": "<%= config.bin %> <%= command.id %> --spec ./workflow.json --auth dev",
+          "description": "Create a workflow from a JSON spec file"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --source us-001 --name \"Cloned Set\" --json --auth dev-instance",
-          "description": "Clone with JSON output"
+          "command": "<%= config.bin %> <%= command.id %> -s ./workflow.json --json --auth dev",
+          "description": "Create a workflow and output result as JSON"
         }
       ],
       "flags": {
@@ -5610,6 +6207,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5626,19 +6231,10 @@
           ],
           "type": "option"
         },
-        "name": {
-          "char": "n",
-          "description": "Name for the cloned update set",
-          "name": "name",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "source": {
+        "spec": {
           "char": "s",
-          "description": "Source update set sys_id",
-          "name": "source",
+          "description": "Path to workflow JSON specification file",
+          "name": "spec",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -5647,7 +6243,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "update-set:clone",
+      "id": "workflow:create",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5657,26 +6253,22 @@
       "relativePath": [
         "dist",
         "commands",
-        "update-set",
-        "clone.js"
+        "workflow",
+        "create.js"
       ]
     },
-    "update-set:create": {
+    "workflow:publish": {
       "aliases": [],
       "args": {},
-      "description": "Create a new update set.",
+      "description": "Publish a workflow version.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --name \"My Feature Set\" --auth dev-instance",
-          "description": "Create a new update set with a name"
-        },
-        {
-          "command": "<%= config.bin %> <%= command.id %> --name \"My Feature Set\" --description \"Update set for feature X\" --auth dev-instance",
-          "description": "Create with name and description"
+          "command": "<%= config.bin %> <%= command.id %> --version-id wfv-001 --start-activity act-001 --auth dev",
+          "description": "Publish a workflow version"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --name \"My Feature Set\" --application x_my_app --auth dev-instance",
-          "description": "Create within a specific application scope"
+          "command": "<%= config.bin %> <%= command.id %> -v wfv-001 -s act-001 --json --auth dev",
+          "description": "Publish a workflow version and output as JSON"
         }
       ],
       "flags": {
@@ -5696,6 +6288,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5712,27 +6312,19 @@
           ],
           "type": "option"
         },
-        "application": {
-          "description": "Application scope for the new update set",
-          "name": "application",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "description": {
-          "char": "d",
-          "description": "Description for the new update set",
-          "name": "description",
-          "required": false,
+        "start-activity": {
+          "char": "s",
+          "description": "Sys ID of the start activity",
+          "name": "start-activity",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "name": {
-          "char": "n",
-          "description": "Name for the new update set",
-          "name": "name",
+        "version-id": {
+          "char": "v",
+          "description": "Sys ID of the workflow version to publish",
+          "name": "version-id",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -5741,7 +6333,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "update-set:create",
+      "id": "workflow:publish",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5751,33 +6343,34 @@
       "relativePath": [
         "dist",
         "commands",
-        "update-set",
-        "create.js"
+        "workflow",
+        "publish.js"
       ]
     },
-    "update-set:current": {
+    "xml:export": {
       "aliases": [],
       "args": {},
-      "description": "Get or set the current update set.",
+      "description": "Export a single ServiceNow record as XML.\n\nDownloads the XML representation of a specific record from a ServiceNow table. Without --output, the XML is printed to stdout. With --output, the XML is written to the specified file path.\n\nFeatures:\n  • Export any record by table and sys_id\n  • Print XML to stdout for piping to other tools\n  • Save directly to a file with --output\n  • JSON output mode for CI/CD integration",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --auth dev-instance",
-          "description": "Get the current update set"
+          "description": "Export a record to stdout",
+          "command": "<%= config.bin %> <%= command.id %> --table sys_script_include --sys-id abc123def456 --auth dev"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --set us-001 --auth dev-instance",
-          "description": "Set the current update set by sys_id"
+          "description": "Export and save to a file",
+          "command": "<%= config.bin %> <%= command.id %> --table incident --sys-id abc123 --output ./export.xml --auth dev"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --json --auth dev-instance",
-          "description": "Get the current update set as JSON"
+          "description": "Export as JSON metadata",
+          "command": "<%= config.bin %> <%= command.id %> --table sys_script --sys-id abc123 --json --auth dev"
         }
       ],
       "flags": {
         "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
+          "char": "j",
+          "description": "Output results as JSON",
           "name": "json",
+          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -5790,6 +6383,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5806,10 +6407,28 @@
           ],
           "type": "option"
         },
-        "set": {
+        "table": {
+          "char": "t",
+          "description": "Table name of the record to export",
+          "name": "table",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "sys-id": {
           "char": "s",
-          "description": "sys_id of update set to make current",
-          "name": "set",
+          "description": "Sys ID of the record to export",
+          "name": "sys-id",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "output": {
+          "char": "o",
+          "description": "File path to write the exported XML to. If omitted, XML is printed to stdout.",
+          "name": "output",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -5818,7 +6437,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "update-set:current",
+      "id": "xml:export",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5828,33 +6447,30 @@
       "relativePath": [
         "dist",
         "commands",
-        "update-set",
-        "current.js"
+        "xml",
+        "export.js"
       ]
     },
-    "update-set": {
+    "xml:import": {
       "aliases": [],
       "args": {},
-      "description": "List update sets on a ServiceNow instance.",
+      "description": "Import XML records into a ServiceNow instance.\n\nReads an XML file and imports its contents into the specified target table. The XML should be in ServiceNow unload format.\n\nFeatures:\n  • Import from local XML files\n  • Target a specific table\n  • JSON output mode for CI/CD integration",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --auth dev-instance",
-          "description": "List update sets with default limit"
-        },
-        {
-          "command": "<%= config.bin %> <%= command.id %> --query \"state=in progress\" --limit 50 --auth dev-instance",
-          "description": "List update sets with a custom query filter"
+          "description": "Import records from an XML file",
+          "command": "<%= config.bin %> <%= command.id %> --file ./export.xml --table sys_script_include --auth dev"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --json --auth dev-instance",
-          "description": "List update sets with JSON output"
+          "description": "Import with JSON output",
+          "command": "<%= config.bin %> <%= command.id %> --file ./records.xml --table incident --json --auth dev"
         }
       ],
       "flags": {
         "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
+          "char": "j",
+          "description": "Output results as JSON",
           "name": "json",
+          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -5867,6 +6483,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5883,20 +6507,20 @@
           ],
           "type": "option"
         },
-        "limit": {
-          "description": "Maximum number of update sets to return",
-          "name": "limit",
-          "required": false,
-          "default": 20,
+        "file": {
+          "char": "f",
+          "description": "Path to the XML file to import",
+          "name": "file",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "query": {
-          "char": "q",
-          "description": "Encoded query filter",
-          "name": "query",
-          "required": false,
+        "table": {
+          "char": "t",
+          "description": "Target table to import records into",
+          "name": "table",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -5904,7 +6528,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "update-set",
+      "id": "xml:import",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5914,22 +6538,22 @@
       "relativePath": [
         "dist",
         "commands",
-        "update-set",
-        "index.js"
+        "xml",
+        "import.js"
       ]
     },
-    "update-set:inspect": {
+    "task:approve": {
       "aliases": [],
       "args": {},
-      "description": "Inspect the components of an update set.",
+      "description": "Approve a ServiceNow change request.\n\nThis command approves a change request identified by its number. You can optionally provide approval comments.\n\nFeatures:\n  - Approve change requests\n  - Optionally add approval comments\n  - Auto-resolves change request number to sys_id",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --sys-id us-001 --auth dev-instance",
-          "description": "Inspect an update set by sys_id"
+          "command": "<%= config.bin %> <%= command.id %> --number CHG0010001 --auth dev",
+          "description": "Approve a change request"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --sys-id us-001 --json --auth dev-instance",
-          "description": "Inspect with JSON output"
+          "command": "<%= config.bin %> <%= command.id %> -n CHG0010001 -c \"Looks good, approved\" --auth dev",
+          "description": "Approve a change request with comments"
         }
       ],
       "flags": {
@@ -5949,6 +6573,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5965,10 +6597,19 @@
           ],
           "type": "option"
         },
-        "sys-id": {
-          "char": "s",
-          "description": "sys_id of the update set to inspect",
-          "name": "sys-id",
+        "comments": {
+          "char": "c",
+          "description": "Approval comments",
+          "name": "comments",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "number": {
+          "char": "n",
+          "description": "Change request number (e.g., CHG0010001)",
+          "name": "number",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -5977,7 +6618,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "update-set:inspect",
+      "id": "task:approve",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5987,26 +6628,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "update-set",
-        "inspect.js"
+        "task",
+        "approve.js"
       ]
     },
-    "update-set:move": {
+    "task:assign": {
       "aliases": [],
       "args": {},
-      "description": "Move records between update sets.",
+      "description": "Assign a ServiceNow task to a user or group.\n\nThis command assigns a task record identified by its number to a specified user and/or group. You can assign to a user, a group, or both simultaneously.\n\nFeatures:\n  - Assign tasks to individual users\n  - Assign tasks to assignment groups\n  - Assign to both user and group at once\n  - Supports any task-based table\n  - Auto-resolves task number to sys_id",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --target us-002 --source us-001 --auth dev-instance",
-          "description": "Move all records from one update set to another"
+          "command": "<%= config.bin %> <%= command.id %> --number INC0010001 --user admin --auth dev",
+          "description": "Assign an incident to a user"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --target us-002 --records \"rec-001,rec-002,rec-003\" --auth dev-instance",
-          "description": "Move specific records to a target update set"
+          "command": "<%= config.bin %> <%= command.id %> -n INC0010001 -u admin -g \"Service Desk\" --auth dev",
+          "description": "Assign an incident to a user and group"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --target us-002 --source us-001 --json --auth dev-instance",
-          "description": "Move records with JSON output"
+          "command": "<%= config.bin %> <%= command.id %> --number CHG0010001 --table change_request --user admin --auth dev",
+          "description": "Assign a change request to a user"
         }
       ],
       "flags": {
@@ -6026,6 +6667,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -6042,25 +6691,37 @@
           ],
           "type": "option"
         },
-        "records": {
-          "description": "Comma-separated sys_ids of records to move",
-          "name": "records",
+        "group": {
+          "char": "g",
+          "description": "Assignment group",
+          "name": "group",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "source": {
-          "description": "Source update set sys_id",
-          "name": "source",
+        "number": {
+          "char": "n",
+          "description": "Task number (e.g., INC0010001)",
+          "name": "number",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "table": {
+          "description": "ServiceNow table name",
+          "name": "table",
           "required": false,
+          "default": "task",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "target": {
-          "description": "Target update set sys_id",
-          "name": "target",
+        "user": {
+          "char": "u",
+          "description": "User to assign the task to",
+          "name": "user",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -6069,7 +6730,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "update-set:move",
+      "id": "task:assign",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -6079,22 +6740,22 @@
       "relativePath": [
         "dist",
         "commands",
-        "update-set",
-        "move.js"
+        "task",
+        "assign.js"
       ]
     },
-    "workflow:create": {
+    "task:close": {
       "aliases": [],
       "args": {},
-      "description": "Create a complete workflow from a JSON specification file.",
+      "description": "Close a ServiceNow incident.\n\nThis command closes an incident identified by its number, setting the close notes and optionally a close code. The incident must be in a state that allows closure.\n\nFeatures:\n  - Close incidents with close notes\n  - Optionally specify a close code\n  - Auto-resolves incident number to sys_id",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --spec ./workflow.json --auth dev",
-          "description": "Create a workflow from a JSON spec file"
+          "command": "<%= config.bin %> <%= command.id %> --number INC0010001 --notes \"Issue confirmed resolved by user\" --auth dev",
+          "description": "Close an incident with close notes"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -s ./workflow.json --json --auth dev",
-          "description": "Create a workflow and output result as JSON"
+          "command": "<%= config.bin %> <%= command.id %> -n INC0010001 --notes \"Closed\" --close-code \"Solved (Permanently)\" --auth dev",
+          "description": "Close with a specific close code"
         }
       ],
       "flags": {
@@ -6114,6 +6775,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -6130,10 +6799,26 @@
           ],
           "type": "option"
         },
-        "spec": {
-          "char": "s",
-          "description": "Path to workflow JSON specification file",
-          "name": "spec",
+        "close-code": {
+          "description": "Close code for the closure",
+          "name": "close-code",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "notes": {
+          "description": "Close notes",
+          "name": "notes",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "number": {
+          "char": "n",
+          "description": "Incident number (e.g., INC0010001)",
+          "name": "number",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -6142,7 +6827,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "workflow:create",
+      "id": "task:close",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -6152,22 +6837,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "workflow",
-        "create.js"
+        "task",
+        "close.js"
       ]
     },
-    "workflow:publish": {
+    "task:comment": {
       "aliases": [],
       "args": {},
-      "description": "Publish a workflow version.",
+      "description": "Add a comment or work note to a ServiceNow task.\n\nThis command adds a comment or work note to a task record identified by its number. By default, comments are added as customer-visible comments. Use the --work-note flag to add an internal work note instead.\n\nFeatures:\n  - Add customer-visible comments to any task\n  - Add internal work notes visible only to fulfiller teams\n  - Supports any task-based table (incident, change_request, etc.)\n  - Auto-resolves task number to sys_id",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --version-id wfv-001 --start-activity act-001 --auth dev",
-          "description": "Publish a workflow version"
+          "command": "<%= config.bin %> <%= command.id %> --number INC0010001 --comment \"Investigating the issue\" --auth dev",
+          "description": "Add a comment to an incident"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -v wfv-001 -s act-001 --json --auth dev",
-          "description": "Publish a workflow version and output as JSON"
+          "command": "<%= config.bin %> <%= command.id %> -n INC0010001 -c \"Internal update\" --work-note --auth dev",
+          "description": "Add a work note to an incident"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> --number CHG0010001 --table change_request --comment \"Approved\" --auth dev",
+          "description": "Add a comment to a change request"
         }
       ],
       "flags": {
@@ -6187,6 +6876,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -6203,28 +6900,44 @@
           ],
           "type": "option"
         },
-        "start-activity": {
-          "char": "s",
-          "description": "Sys ID of the start activity",
-          "name": "start-activity",
+        "comment": {
+          "char": "c",
+          "description": "Comment text to add",
+          "name": "comment",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "version-id": {
-          "char": "v",
-          "description": "Sys ID of the workflow version to publish",
-          "name": "version-id",
+        "number": {
+          "char": "n",
+          "description": "Task number (e.g., INC0010001)",
+          "name": "number",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "table": {
+          "description": "ServiceNow table name",
+          "name": "table",
+          "required": false,
+          "default": "task",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "work-note": {
+          "description": "Add as work note instead of comment",
+          "name": "work-note",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "workflow:publish",
+      "id": "task:comment",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -6234,34 +6947,33 @@
       "relativePath": [
         "dist",
         "commands",
-        "workflow",
-        "publish.js"
+        "task",
+        "comment.js"
       ]
     },
-    "xml:export": {
+    "task:find": {
       "aliases": [],
       "args": {},
-      "description": "Export a single ServiceNow record as XML.\n\nDownloads the XML representation of a specific record from a ServiceNow table. Without --output, the XML is printed to stdout. With --output, the XML is written to the specified file path.\n\nFeatures:\n  • Export any record by table and sys_id\n  • Print XML to stdout for piping to other tools\n  • Save directly to a file with --output\n  • JSON output mode for CI/CD integration",
+      "description": "Find a ServiceNow task by its number.\n\nThis command looks up a task record by its number in the specified table. Returns the full task details including sys_id, description, state, and assignment information.\n\nFeatures:\n  - Look up any task by number\n  - Supports any task-based table\n  - JSON output for scripting and automation",
       "examples": [
         {
-          "description": "Export a record to stdout",
-          "command": "<%= config.bin %> <%= command.id %> --table sys_script_include --sys-id abc123def456 --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> --number INC0010001 --auth dev",
+          "description": "Find an incident by number"
         },
         {
-          "description": "Export and save to a file",
-          "command": "<%= config.bin %> <%= command.id %> --table incident --sys-id abc123 --output ./export.xml --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> -n CHG0010001 --table change_request --auth dev",
+          "description": "Find a change request by number"
         },
         {
-          "description": "Export as JSON metadata",
-          "command": "<%= config.bin %> <%= command.id %> --table sys_script --sys-id abc123 --json --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> -n INC0010001 --json --auth dev",
+          "description": "Find an incident and output as JSON"
         }
       ],
       "flags": {
         "json": {
-          "char": "j",
-          "description": "Output results as JSON",
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
           "name": "json",
-          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -6274,6 +6986,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -6290,29 +7010,20 @@
           ],
           "type": "option"
         },
-        "table": {
-          "char": "t",
-          "description": "Table name of the record to export",
-          "name": "table",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "sys-id": {
-          "char": "s",
-          "description": "Sys ID of the record to export",
-          "name": "sys-id",
+        "number": {
+          "char": "n",
+          "description": "Task number (e.g., INC0010001, CHG0010001)",
+          "name": "number",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "output": {
-          "char": "o",
-          "description": "File path to write the exported XML to. If omitted, XML is printed to stdout.",
-          "name": "output",
+        "table": {
+          "description": "ServiceNow table name",
+          "name": "table",
           "required": false,
+          "default": "task",
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -6320,7 +7031,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "xml:export",
+      "id": "task:find",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -6330,30 +7041,29 @@
       "relativePath": [
         "dist",
         "commands",
-        "xml",
-        "export.js"
+        "task",
+        "find.js"
       ]
     },
-    "xml:import": {
+    "task:resolve": {
       "aliases": [],
       "args": {},
-      "description": "Import XML records into a ServiceNow instance.\n\nReads an XML file and imports its contents into the specified target table. The XML should be in ServiceNow unload format.\n\nFeatures:\n  • Import from local XML files\n  • Target a specific table\n  • JSON output mode for CI/CD integration",
+      "description": "Resolve a ServiceNow incident with resolution notes.\n\nThis command resolves an incident identified by its number, setting the resolution notes and optionally a close code. The incident must be in a state that allows resolution.\n\nFeatures:\n  - Resolve incidents with resolution notes\n  - Optionally specify a close code\n  - Auto-resolves incident number to sys_id",
       "examples": [
         {
-          "description": "Import records from an XML file",
-          "command": "<%= config.bin %> <%= command.id %> --file ./export.xml --table sys_script_include --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> --number INC0010001 --notes \"Issue resolved by restarting the service\" --auth dev",
+          "description": "Resolve an incident with resolution notes"
         },
         {
-          "description": "Import with JSON output",
-          "command": "<%= config.bin %> <%= command.id %> --file ./records.xml --table incident --json --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> -n INC0010001 --notes \"Fixed\" --close-code \"Solved (Permanently)\" --auth dev",
+          "description": "Resolve with a specific close code"
         }
       ],
       "flags": {
         "json": {
-          "char": "j",
-          "description": "Output results as JSON",
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
           "name": "json",
-          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -6366,6 +7076,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -6382,19 +7100,26 @@
           ],
           "type": "option"
         },
-        "file": {
-          "char": "f",
-          "description": "Path to the XML file to import",
-          "name": "file",
+        "close-code": {
+          "description": "Close code for the resolution",
+          "name": "close-code",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "notes": {
+          "description": "Resolution notes",
+          "name": "notes",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "table": {
-          "char": "t",
-          "description": "Target table to import records into",
-          "name": "table",
+        "number": {
+          "char": "n",
+          "description": "Incident number (e.g., INC0010001)",
+          "name": "number",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -6403,7 +7128,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "xml:import",
+      "id": "task:resolve",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -6413,10 +7138,10 @@
       "relativePath": [
         "dist",
         "commands",
-        "xml",
-        "import.js"
+        "task",
+        "resolve.js"
       ]
     }
   },
-  "version": "2.3.2"
+  "version": "5.0.0"
 }