@sonisoft/now-sdk-ext-cli 3.0.0 → 5.0.1

package/oclif.manifest.json

@@ -36,6 +36,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -123,6 +131,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -275,6 +291,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -366,191 +390,6 @@
         "query.js"
       ]
     },
-    "atf": {
-      "aliases": [],
-      "args": {},
-      "description": "Execute ATF (Automated Test Framework) tests or test suites on a ServiceNow instance.\n\nThis command allows you to run automated tests and test suites remotely, making it perfect for CI/CD pipelines and automated testing workflows. You can execute individual tests, entire test suites, and configure execution parameters such as browser type, OS, and performance mode.\n\nFeatures:\n  • Execute individual tests or complete test suites\n  • Real-time progress monitoring\n  • JSON output for CI/CD integration\n  • Detailed test results and summaries\n  • Browser and environment configuration\n  • Performance testing mode support",
-      "examples": [
-        {
-          "description": "Execute a single ATF test by sys_id",
-          "command": "<%= config.bin %> <%= command.id %> --test-id f717a8c783103210621e78c6feaad396 --auth dev-instance"
-        },
-        {
-          "description": "Execute a test suite by sys_id and wait for completion",
-          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --auth dev-instance --wait"
-        },
-        {
-          "description": "Execute a test suite by name",
-          "command": "<%= config.bin %> <%= command.id %> --suite-name \"Smoke Tests\" --auth dev-instance"
-        },
-        {
-          "description": "Execute with specific browser configuration",
-          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --browser chrome --auth dev-instance"
-        },
-        {
-          "description": "Execute as performance test with JSON output for CI/CD",
-          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --performance --json --auth dev-instance"
-        },
-        {
-          "description": "Execute with custom poll interval (10 seconds)",
-          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --poll-interval 10000 --auth dev-instance"
-        }
-      ],
-      "flags": {
-        "json": {
-          "char": "j",
-          "description": "Output results as JSON",
-          "name": "json",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "auth": {
-          "char": "a",
-          "description": "Auth alias to use.",
-          "name": "auth",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "log-level": {
-          "helpGroup": "GLOBAL",
-          "name": "log-level",
-          "summary": "Specify level for logging.",
-          "default": "info",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "debug",
-            "warn",
-            "error",
-            "info",
-            "trace"
-          ],
-          "type": "option"
-        },
-        "test-id": {
-          "char": "t",
-          "description": "Test sys_id to execute",
-          "exclusive": [
-            "suite-id",
-            "suite-name"
-          ],
-          "name": "test-id",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "suite-id": {
-          "char": "s",
-          "description": "Test Suite sys_id to execute",
-          "exclusive": [
-            "test-id",
-            "suite-name"
-          ],
-          "name": "suite-id",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "suite-name": {
-          "char": "n",
-          "description": "Test Suite name to execute",
-          "exclusive": [
-            "test-id",
-            "suite-id"
-          ],
-          "name": "suite-name",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "wait": {
-          "char": "w",
-          "description": "Wait for test suite execution to complete and return results",
-          "name": "wait",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "poll-interval": {
-          "char": "p",
-          "description": "Polling interval in milliseconds when waiting for completion",
-          "name": "poll-interval",
-          "required": false,
-          "default": 5000,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "browser": {
-          "char": "b",
-          "description": "Browser name for test execution (e.g., chrome, firefox)",
-          "name": "browser",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "browser-version": {
-          "description": "Browser version for test execution",
-          "name": "browser-version",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "os-name": {
-          "description": "Operating system name for test execution",
-          "name": "os-name",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "os-version": {
-          "description": "Operating system version for test execution",
-          "name": "os-version",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "performance": {
-          "description": "Run as performance test",
-          "name": "performance",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "cloud": {
-          "description": "Run in cloud",
-          "name": "cloud",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "atf",
-      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
-      "pluginName": "@sonisoft/now-sdk-ext-cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
-        "commands",
-        "atf",
-        "index.js"
-      ]
-    },
     "app": {
       "aliases": [],
       "args": {},
@@ -586,6 +425,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -680,6 +527,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -773,6 +628,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -895,6 +758,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -979,6 +850,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1030,25 +909,218 @@
         "uninstall.js"
       ]
     },
-    "attachment:get": {
+    "atf": {
       "aliases": [],
       "args": {},
-      "description": "Get metadata for a specific attachment.",
+      "description": "Execute ATF (Automated Test Framework) tests or test suites on a ServiceNow instance.\n\nThis command allows you to run automated tests and test suites remotely, making it perfect for CI/CD pipelines and automated testing workflows. You can execute individual tests, entire test suites, and configure execution parameters such as browser type, OS, and performance mode.\n\nFeatures:\n  • Execute individual tests or complete test suites\n  • Real-time progress monitoring\n  • JSON output for CI/CD integration\n  • Detailed test results and summaries\n  • Browser and environment configuration\n  • Performance testing mode support",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --sys-id att123 --auth dev",
-          "description": "Get attachment metadata by sys_id"
+          "description": "Execute a single ATF test by sys_id",
+          "command": "<%= config.bin %> <%= command.id %> --test-id f717a8c783103210621e78c6feaad396 --auth dev-instance"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -s att123 --json --auth dev",
-          "description": "Get attachment metadata as JSON"
+          "description": "Execute a test suite by sys_id and wait for completion",
+          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --auth dev-instance --wait"
+        },
+        {
+          "description": "Execute a test suite by name",
+          "command": "<%= config.bin %> <%= command.id %> --suite-name \"Smoke Tests\" --auth dev-instance"
+        },
+        {
+          "description": "Execute with specific browser configuration",
+          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --browser chrome --auth dev-instance"
+        },
+        {
+          "description": "Execute as performance test with JSON output for CI/CD",
+          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --performance --json --auth dev-instance"
+        },
+        {
+          "description": "Execute with custom poll interval (10 seconds)",
+          "command": "<%= config.bin %> <%= command.id %> --suite-id e077e00b83103210621e78c6feaad383 --poll-interval 10000 --auth dev-instance"
         }
       ],
       "flags": {
         "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
-          "name": "json",
+          "char": "j",
+          "description": "Output results as JSON",
+          "name": "json",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "auth": {
+          "char": "a",
+          "description": "Auth alias to use.",
+          "name": "auth",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "log-level": {
+          "helpGroup": "GLOBAL",
+          "name": "log-level",
+          "summary": "Specify level for logging.",
+          "default": "info",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "debug",
+            "warn",
+            "error",
+            "info",
+            "trace"
+          ],
+          "type": "option"
+        },
+        "test-id": {
+          "char": "t",
+          "description": "Test sys_id to execute",
+          "exclusive": [
+            "suite-id",
+            "suite-name"
+          ],
+          "name": "test-id",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "suite-id": {
+          "char": "s",
+          "description": "Test Suite sys_id to execute",
+          "exclusive": [
+            "test-id",
+            "suite-name"
+          ],
+          "name": "suite-id",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "suite-name": {
+          "char": "n",
+          "description": "Test Suite name to execute",
+          "exclusive": [
+            "test-id",
+            "suite-id"
+          ],
+          "name": "suite-name",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "wait": {
+          "char": "w",
+          "description": "Wait for test suite execution to complete and return results",
+          "name": "wait",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "poll-interval": {
+          "char": "p",
+          "description": "Polling interval in milliseconds when waiting for completion",
+          "name": "poll-interval",
+          "required": false,
+          "default": 5000,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "browser": {
+          "char": "b",
+          "description": "Browser name for test execution (e.g., chrome, firefox)",
+          "name": "browser",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "browser-version": {
+          "description": "Browser version for test execution",
+          "name": "browser-version",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "os-name": {
+          "description": "Operating system name for test execution",
+          "name": "os-name",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "os-version": {
+          "description": "Operating system version for test execution",
+          "name": "os-version",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "performance": {
+          "description": "Run as performance test",
+          "name": "performance",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cloud": {
+          "description": "Run in cloud",
+          "name": "cloud",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "atf",
+      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
+      "pluginName": "@sonisoft/now-sdk-ext-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "atf",
+        "index.js"
+      ]
+    },
+    "attachment:get": {
+      "aliases": [],
+      "args": {},
+      "description": "Get metadata for a specific attachment.",
+      "examples": [
+        {
+          "command": "<%= config.bin %> <%= command.id %> --sys-id att123 --auth dev",
+          "description": "Get attachment metadata by sys_id"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> -s att123 --json --auth dev",
+          "description": "Get attachment metadata as JSON"
+        }
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
           "allowNo": false,
           "type": "boolean"
         },
@@ -1061,6 +1133,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1134,6 +1214,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1225,6 +1313,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1293,65 +1389,38 @@
         "upload.js"
       ]
     },
-    "batch:create": {
+    "auth:delete": {
       "aliases": [],
-      "args": {},
-      "description": "Batch create records on a ServiceNow instance from a JSON file.",
+      "args": {
+        "alias": {
+          "description": "Alias to remove",
+          "name": "alias",
+          "required": false
+        }
+      },
+      "description": "Remove a credential from the store.\n\nThis does not touch the OS keyring — a copy stored there before migrating remains.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --file ./records.json --auth dev",
-          "description": "Create records from a JSON file"
+          "command": "<%= config.bin %> <%= command.id %> dev206299",
+          "description": "Remove one alias"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --file ./records.json --no-transaction --auth dev",
-          "description": "Create records without transactional mode"
+          "command": "<%= config.bin %> <%= command.id %> --all",
+          "description": "Remove every stored credential"
         }
       ],
       "flags": {
-        "json": {
-          "description": "Format output as json.",
+        "cred-store": {
+          "description": "Accepted for symmetry with other commands and ignored — the auth commands always use @sonisoft/sn-credstore.",
           "helpGroup": "GLOBAL",
-          "name": "json",
+          "name": "cred-store",
+          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
-        "auth": {
-          "char": "a",
-          "description": "Auth alias to use.",
-          "name": "auth",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "log-level": {
-          "helpGroup": "GLOBAL",
-          "name": "log-level",
-          "summary": "Specify level for logging.",
-          "default": "info",
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "debug",
-            "warn",
-            "error",
-            "info",
-            "trace"
-          ],
-          "type": "option"
-        },
-        "file": {
-          "char": "f",
-          "description": "Path to JSON file with create operations",
-          "name": "file",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "transaction": {
-          "description": "Stop on first error (transactional)",
-          "name": "transaction",
+        "all": {
+          "description": "Remove every stored credential",
+          "name": "all",
           "required": false,
           "allowNo": false,
           "type": "boolean"
@@ -1359,32 +1428,32 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "batch:create",
+      "id": "auth:delete",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
       "strict": true,
-      "enableJsonFlag": true,
+      "enableJsonFlag": false,
       "isESM": true,
       "relativePath": [
         "dist",
         "commands",
-        "batch",
-        "create.js"
+        "auth",
+        "delete.js"
       ]
     },
-    "batch:update": {
+    "auth:doctor": {
       "aliases": [],
       "args": {},
-      "description": "Batch update records on a ServiceNow instance from a JSON file.",
+      "description": "Diagnose credential storage: whether the SDK shim is active, which backend is in use, and what is stored.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --file ./updates.json --auth dev",
-          "description": "Update records from a JSON file"
+          "command": "<%= config.bin %> <%= command.id %>",
+          "description": "Check credential storage health"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --file ./updates.json --stop-on-error --auth dev",
-          "description": "Update records and stop on first error"
+          "command": "<%= config.bin %> <%= command.id %> --json",
+          "description": "Machine-readable output for CI"
         }
       ],
       "flags": {
@@ -1395,7 +1464,231 @@
           "allowNo": false,
           "type": "boolean"
         },
-        "auth": {
+        "cred-store": {
+          "description": "Accepted for symmetry with other commands and ignored — the auth commands always use @sonisoft/sn-credstore.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "auth:doctor",
+      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
+      "pluginName": "@sonisoft/now-sdk-ext-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "auth",
+        "doctor.js"
+      ]
+    },
+    "auth:list": {
+      "aliases": [],
+      "args": {},
+      "description": "List credentials in the headless-safe credential store.\n\nThese are the credentials the ServiceNow SDK reads via the sn-credstore shim, which works in non-interactive sessions where the OS keyring cannot be unlocked.\n\nSecrets are never printed.",
+      "examples": [
+        {
+          "command": "<%= config.bin %> <%= command.id %>",
+          "description": "List stored credentials"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> --json",
+          "description": "List as JSON for scripting"
+        }
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "cred-store": {
+          "description": "Accepted for symmetry with other commands and ignored — the auth commands always use @sonisoft/sn-credstore.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "auth:list",
+      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
+      "pluginName": "@sonisoft/now-sdk-ext-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "auth",
+        "list.js"
+      ]
+    },
+    "auth:use": {
+      "aliases": [],
+      "args": {
+        "alias": {
+          "description": "Alias to make the default",
+          "name": "alias",
+          "required": true
+        }
+      },
+      "description": "Set the default credential alias.\n\nCommands run without --auth use this alias.",
+      "examples": [
+        {
+          "command": "<%= config.bin %> <%= command.id %> dev206299",
+          "description": "Make dev206299 the default"
+        }
+      ],
+      "flags": {
+        "cred-store": {
+          "description": "Accepted for symmetry with other commands and ignored — the auth commands always use @sonisoft/sn-credstore.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "auth:use",
+      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
+      "pluginName": "@sonisoft/now-sdk-ext-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": false,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "auth",
+        "use.js"
+      ]
+    },
+    "batch:create": {
+      "aliases": [],
+      "args": {},
+      "description": "Batch create records on a ServiceNow instance from a JSON file.",
+      "examples": [
+        {
+          "command": "<%= config.bin %> <%= command.id %> --file ./records.json --auth dev",
+          "description": "Create records from a JSON file"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> --file ./records.json --no-transaction --auth dev",
+          "description": "Create records without transactional mode"
+        }
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "auth": {
+          "char": "a",
+          "description": "Auth alias to use.",
+          "name": "auth",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "log-level": {
+          "helpGroup": "GLOBAL",
+          "name": "log-level",
+          "summary": "Specify level for logging.",
+          "default": "info",
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "options": [
+            "debug",
+            "warn",
+            "error",
+            "info",
+            "trace"
+          ],
+          "type": "option"
+        },
+        "file": {
+          "char": "f",
+          "description": "Path to JSON file with create operations",
+          "name": "file",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "transaction": {
+          "description": "Stop on first error (transactional)",
+          "name": "transaction",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "batch:create",
+      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
+      "pluginName": "@sonisoft/now-sdk-ext-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": true,
+      "relativePath": [
+        "dist",
+        "commands",
+        "batch",
+        "create.js"
+      ]
+    },
+    "batch:update": {
+      "aliases": [],
+      "args": {},
+      "description": "Batch update records on a ServiceNow instance from a JSON file.",
+      "examples": [
+        {
+          "command": "<%= config.bin %> <%= command.id %> --file ./updates.json --auth dev",
+          "description": "Update records from a JSON file"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> --file ./updates.json --stop-on-error --auth dev",
+          "description": "Update records and stop on first error"
+        }
+      ],
+      "flags": {
+        "json": {
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
+          "name": "json",
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "auth": {
           "char": "a",
           "description": "Auth alias to use.",
           "name": "auth",
@@ -1404,6 +1697,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1493,6 +1794,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1601,6 +1910,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1752,6 +2069,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1823,6 +2148,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -1935,6 +2268,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2030,6 +2371,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2126,6 +2475,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2212,6 +2569,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2298,6 +2663,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2396,6 +2769,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2496,6 +2877,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2582,6 +2971,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2690,6 +3087,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2772,6 +3177,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2888,6 +3301,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -2994,6 +3415,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3126,6 +3555,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3226,6 +3663,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3322,6 +3767,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3409,6 +3862,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3524,6 +3985,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3608,6 +4077,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3691,6 +4168,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3793,6 +4278,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3870,6 +4363,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3942,6 +4443,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -3984,22 +4493,22 @@
         "set.js"
       ]
     },
-    "script-sync:pull": {
+    "search:add-table": {
       "aliases": [],
       "args": {},
-      "description": "Pull a script from a ServiceNow instance to a local file.\n\nThis command downloads a script record from your ServiceNow instance and saves it as a local file. Supports multiple script types including Script Includes, Business Rules, UI Scripts, UI Actions, and Client Scripts.\n\nFeatures:\n  • Download scripts by name and type\n  • Custom output file path support\n  • Auto-generated file names based on script name and type\n  • JSON output for CI/CD integration",
+      "description": "Add a table to a code search group on a ServiceNow instance.\n\nThis command registers a new table and its searchable fields with a search group, making the table's records discoverable through code search. This is useful when you need to include custom tables in code search results.\n\nFeatures:\n  • Add custom tables to search groups\n  • Specify which fields should be indexed\n  • JSON output for scripting and automation",
       "examples": [
         {
-          "description": "Pull a Script Include to auto-generated file name",
-          "command": "<%= config.bin %> <%= command.id %> --name MyScriptInclude --type sys_script_include --auth dev-instance"
+          "command": "<%= config.bin %> <%= command.id %> --table sys_script_include --search-fields script --search-group \"Script Includes\" --auth dev-instance",
+          "description": "Add a table to a search group"
         },
         {
-          "description": "Pull a Business Rule to a specific file",
-          "command": "<%= config.bin %> <%= command.id %> --name MyBusinessRule --type sys_script --output ./scripts/my-rule.js --auth dev-instance"
+          "command": "<%= config.bin %> <%= command.id %> --table sys_ui_page --search-fields \"html,client_script,processing_script\" --search-group \"UI Pages\" --auth dev-instance",
+          "description": "Add a table with multiple search fields"
         },
         {
-          "description": "Pull a Client Script with JSON output",
-          "command": "<%= config.bin %> <%= command.id %> -n MyClientScript -t sys_script_client --json --auth dev-instance"
+          "command": "<%= config.bin %> <%= command.id %> --table u_custom_script --search-fields script --search-group \"Custom\" --json --auth dev-instance",
+          "description": "Add a table with JSON output"
         }
       ],
       "flags": {
@@ -4019,6 +4528,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4035,36 +4552,29 @@
           ],
           "type": "option"
         },
-        "name": {
-          "char": "n",
-          "description": "Name of the script to pull",
-          "name": "name",
+        "search-fields": {
+          "char": "f",
+          "description": "Comma-separated list of fields to index for search",
+          "name": "search-fields",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "type": {
-          "char": "t",
-          "description": "Type of script to pull",
-          "name": "type",
+        "search-group": {
+          "char": "g",
+          "description": "Search group to add the table to",
+          "name": "search-group",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
-          "options": [
-            "sys_script_include",
-            "sys_script",
-            "sys_ui_script",
-            "sys_ui_action",
-            "sys_script_client"
-          ],
           "type": "option"
         },
-        "output": {
-          "char": "o",
-          "description": "Output file path. If not specified, a file name is auto-generated.",
-          "name": "output",
-          "required": false,
+        "table": {
+          "char": "t",
+          "description": "Table name to add to the search group",
+          "name": "table",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -4072,7 +4582,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "script-sync:pull",
+      "id": "search:add-table",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -4082,26 +4592,22 @@
       "relativePath": [
         "dist",
         "commands",
-        "script-sync",
-        "pull.js"
+        "search",
+        "add-table.js"
       ]
     },
-    "script-sync:push": {
+    "search:groups": {
       "aliases": [],
       "args": {},
-      "description": "Push a local script file to a ServiceNow instance.\n\nThis command uploads a local script file to your ServiceNow instance, updating the corresponding script record. Supports multiple script types including Script Includes, Business Rules, UI Scripts, UI Actions, and Client Scripts.\n\nFeatures:\n  • Upload scripts by name and type\n  • Specify the local file to push\n  • JSON output for CI/CD integration\n  • Detailed push result reporting",
+      "description": "List all available code search groups on a ServiceNow instance.\n\nSearch groups organize searchable tables into logical categories. Use this command to discover which search groups are configured, then use the group names with other search commands to narrow your search scope.\n\nFeatures:\n  • List all configured search groups\n  • JSON output for scripting and automation",
       "examples": [
         {
-          "description": "Push a Script Include from a local file",
-          "command": "<%= config.bin %> <%= command.id %> --name MyScriptInclude --type sys_script_include --file ./scripts/MyScriptInclude.js --auth dev-instance"
-        },
-        {
-          "description": "Push a Business Rule with short flags",
-          "command": "<%= config.bin %> <%= command.id %> -n MyBusinessRule -t sys_script -f ./scripts/my-rule.js -a dev-instance"
+          "command": "<%= config.bin %> <%= command.id %> --auth dev-instance",
+          "description": "List all search groups"
         },
         {
-          "description": "Push a UI Script with JSON output",
-          "command": "<%= config.bin %> <%= command.id %> -n MyUIScript -t sys_ui_script -f ./scripts/ui-script.js --json --auth dev-instance"
+          "command": "<%= config.bin %> <%= command.id %> --json --auth dev-instance",
+          "description": "List search groups with JSON output"
         }
       ],
       "flags": {
@@ -4121,6 +4627,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4136,45 +4650,11 @@
             "trace"
           ],
           "type": "option"
-        },
-        "name": {
-          "char": "n",
-          "description": "Name of the script to push",
-          "name": "name",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "type": {
-          "char": "t",
-          "description": "Type of script to push",
-          "name": "type",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "options": [
-            "sys_script_include",
-            "sys_script",
-            "sys_ui_script",
-            "sys_ui_action",
-            "sys_script_client"
-          ],
-          "type": "option"
-        },
-        "file": {
-          "char": "f",
-          "description": "Path to the local script file to push",
-          "name": "file",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "script-sync:push",
+      "id": "search:groups",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -4184,26 +4664,30 @@
       "relativePath": [
         "dist",
         "commands",
-        "script-sync",
-        "push.js"
+        "search",
+        "groups.js"
       ]
     },
-    "script-sync:sync": {
+    "search": {
       "aliases": [],
       "args": {},
-      "description": "Synchronize all scripts in a directory with a ServiceNow instance.\n\nThis command scans a local directory for script files and synchronizes them with the corresponding records on your ServiceNow instance. You can optionally filter by script types to synchronize only specific kinds of scripts.\n\nFeatures:\n  • Batch synchronization of all scripts in a directory\n  • Filter by one or more script types\n  • Summary report with success/failure counts\n  • JSON output for CI/CD integration",
+      "description": "Search platform code across a ServiceNow instance.\n\nThis command allows you to search through code stored on the platform, including scripts, business rules, UI pages, and other scriptable records. You can search globally, within a specific application scope, or within a specific table and search group.\n\nFeatures:\n  • Full-text code search across the platform\n  • Scope-specific search within application boundaries\n  • Table-specific search within a search group\n  • JSON output for CI/CD integration\n  • Configurable result limits",
       "examples": [
         {
-          "description": "Sync all scripts in a directory",
-          "command": "<%= config.bin %> <%= command.id %> --directory ./scripts --auth dev-instance"
+          "command": "<%= config.bin %> <%= command.id %> --term \"GlideRecord\" --auth dev-instance",
+          "description": "Search for a term across the entire instance"
         },
         {
-          "description": "Sync only Script Includes and Business Rules",
-          "command": "<%= config.bin %> <%= command.id %> --directory ./scripts --types sys_script_include --types sys_script --auth dev-instance"
+          "command": "<%= config.bin %> <%= command.id %> --term \"getValue\" --scope x_my_app --auth dev-instance",
+          "description": "Search within a specific application scope"
         },
         {
-          "description": "Sync with JSON output for CI/CD",
-          "command": "<%= config.bin %> <%= command.id %> -d ./scripts --json --auth dev-instance"
+          "command": "<%= config.bin %> <%= command.id %> --term \"initialize\" --search-group \"Script Includes\" --table sys_script_include --auth dev-instance",
+          "description": "Search within a specific table and search group"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> --term \"GlideRecord\" --limit 10 --json --auth dev-instance",
+          "description": "Search with a result limit and JSON output"
         }
       ],
       "flags": {
@@ -4223,6 +4707,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4239,64 +4731,79 @@
           ],
           "type": "option"
         },
-        "directory": {
-          "char": "d",
-          "description": "Directory containing script files to synchronize",
-          "name": "directory",
-          "required": true,
+        "limit": {
+          "char": "l",
+          "description": "Maximum number of results to return",
+          "name": "limit",
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "types": {
-          "char": "t",
-          "description": "Script types to synchronize. Can be specified multiple times to include multiple types.",
-          "name": "types",
+        "scope": {
+          "char": "s",
+          "description": "Application scope to search within",
+          "name": "scope",
           "required": false,
           "hasDynamicHelp": false,
-          "multiple": true,
-          "options": [
-            "sys_script_include",
-            "sys_script",
-            "sys_ui_script",
-            "sys_ui_action",
-            "sys_script_client"
-          ],
+          "multiple": false,
           "type": "option"
-        }
-      },
-      "hasDynamicHelp": false,
-      "hiddenAliases": [],
-      "id": "script-sync:sync",
-      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
-      "pluginName": "@sonisoft/now-sdk-ext-cli",
-      "pluginType": "core",
-      "strict": true,
-      "enableJsonFlag": true,
-      "isESM": true,
-      "relativePath": [
-        "dist",
+        },
+        "search-group": {
+          "char": "g",
+          "description": "Search group to search within (required when using --table)",
+          "name": "search-group",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "table": {
+          "description": "Table name to search within (requires --search-group)",
+          "name": "table",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "term": {
+          "char": "t",
+          "description": "Search term to look for in platform code",
+          "name": "term",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        }
+      },
+      "hasDynamicHelp": false,
+      "hiddenAliases": [],
+      "id": "search",
+      "pluginAlias": "@sonisoft/now-sdk-ext-cli",
+      "pluginName": "@sonisoft/now-sdk-ext-cli",
+      "pluginType": "core",
+      "strict": true,
+      "enableJsonFlag": true,
+      "isESM": true,
+      "relativePath": [
+        "dist",
         "commands",
-        "script-sync",
-        "sync.js"
+        "search",
+        "index.js"
       ]
     },
-    "store:install": {
+    "search:tables": {
       "aliases": [],
       "args": {},
-      "description": "Install an application from the ServiceNow Store.",
+      "description": "List tables configured for a specific code search group.\n\nEach search group contains one or more tables that are indexed for code search. Use this command to discover which tables belong to a search group, including the fields that are searchable on each table.\n\nFeatures:\n  • List all tables in a search group\n  • View searchable fields per table\n  • JSON output for scripting and automation",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --app-id abc123 --version 1.0.0 --auth dev",
-          "description": "Install a store application and wait for completion"
-        },
-        {
-          "command": "<%= config.bin %> <%= command.id %> --app-id abc123 --version 1.0.0 --no-wait --auth dev",
-          "description": "Install without waiting for completion"
+          "command": "<%= config.bin %> <%= command.id %> --search-group \"Script Includes\" --auth dev-instance",
+          "description": "List tables in a search group"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -a abc123 -v 1.0.0 --demo-data --auth dev",
-          "description": "Install with demo data"
+          "command": "<%= config.bin %> <%= command.id %> --search-group \"Business Rules\" --json --auth dev-instance",
+          "description": "List tables with JSON output"
         }
       ],
       "flags": {
@@ -4316,6 +4823,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4332,51 +4847,10 @@
           ],
           "type": "option"
         },
-        "app-id": {
-          "char": "a",
-          "description": "Store application sys_id",
-          "name": "app-id",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "demo-data": {
-          "description": "Load demo data during installation",
-          "name": "demo-data",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "no-wait": {
-          "description": "Do not wait for installation to complete",
-          "name": "no-wait",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "poll-interval": {
-          "description": "Polling interval in milliseconds",
-          "name": "poll-interval",
-          "required": false,
-          "default": 5000,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "timeout": {
-          "description": "Installation timeout in milliseconds",
-          "name": "timeout",
-          "required": false,
-          "default": 1800000,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "version": {
-          "char": "v",
-          "description": "Application version to install",
-          "name": "version",
+        "search-group": {
+          "char": "g",
+          "description": "Search group name to list tables for",
+          "name": "search-group",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -4385,7 +4859,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "store:install",
+      "id": "search:tables",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -4395,26 +4869,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "store",
-        "install.js"
+        "search",
+        "tables.js"
       ]
     },
-    "store:search": {
+    "script-sync:pull": {
       "aliases": [],
       "args": {},
-      "description": "Search for applications in the ServiceNow Store.",
+      "description": "Pull a script from a ServiceNow instance to a local file.\n\nThis command downloads a script record from your ServiceNow instance and saves it as a local file. Supports multiple script types including Script Includes, Business Rules, UI Scripts, UI Actions, and Client Scripts.\n\nFeatures:\n  • Download scripts by name and type\n  • Custom output file path support\n  • Auto-generated file names based on script name and type\n  • JSON output for CI/CD integration",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --term \"ITSM\" --auth dev",
-          "description": "Search for applications matching a term"
+          "description": "Pull a Script Include to auto-generated file name",
+          "command": "<%= config.bin %> <%= command.id %> --name MyScriptInclude --type sys_script_include --auth dev-instance"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --tab installed --auth dev",
-          "description": "List installed applications"
+          "description": "Pull a Business Rule to a specific file",
+          "command": "<%= config.bin %> <%= command.id %> --name MyBusinessRule --type sys_script --output ./scripts/my-rule.js --auth dev-instance"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --tab updates --limit 10 --auth dev",
-          "description": "List applications with available updates"
+          "description": "Pull a Client Script with JSON output",
+          "command": "<%= config.bin %> <%= command.id %> -n MyClientScript -t sys_script_client --json --auth dev-instance"
         }
       ],
       "flags": {
@@ -4434,6 +4908,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4450,33 +4932,35 @@
           ],
           "type": "option"
         },
-        "limit": {
-          "description": "Maximum number of results to return",
-          "name": "limit",
-          "required": false,
-          "default": 20,
+        "name": {
+          "char": "n",
+          "description": "Name of the script to pull",
+          "name": "name",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "tab": {
-          "description": "Store tab context to search",
-          "name": "tab",
-          "required": false,
-          "default": "available_for_you",
+        "type": {
+          "char": "t",
+          "description": "Type of script to pull",
+          "name": "type",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "options": [
-            "available_for_you",
-            "installed",
-            "updates"
+            "sys_script_include",
+            "sys_script",
+            "sys_ui_script",
+            "sys_ui_action",
+            "sys_script_client"
           ],
           "type": "option"
         },
-        "term": {
-          "char": "t",
-          "description": "Search term",
-          "name": "term",
+        "output": {
+          "char": "o",
+          "description": "Output file path. If not specified, a file name is auto-generated.",
+          "name": "output",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -4485,7 +4969,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "store:search",
+      "id": "script-sync:pull",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -4495,26 +4979,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "store",
-        "search.js"
+        "script-sync",
+        "pull.js"
       ]
     },
-    "store:update": {
+    "script-sync:push": {
       "aliases": [],
       "args": {},
-      "description": "Update a ServiceNow Store application to a new version.",
+      "description": "Push a local script file to a ServiceNow instance.\n\nThis command uploads a local script file to your ServiceNow instance, updating the corresponding script record. Supports multiple script types including Script Includes, Business Rules, UI Scripts, UI Actions, and Client Scripts.\n\nFeatures:\n  • Upload scripts by name and type\n  • Specify the local file to push\n  • JSON output for CI/CD integration\n  • Detailed push result reporting",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --app-id abc123 --version 2.0.0 --auth dev",
-          "description": "Update a store application and wait for completion"
+          "description": "Push a Script Include from a local file",
+          "command": "<%= config.bin %> <%= command.id %> --name MyScriptInclude --type sys_script_include --file ./scripts/MyScriptInclude.js --auth dev-instance"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --app-id abc123 --version 2.0.0 --no-wait --auth dev",
-          "description": "Update without waiting for completion"
+          "description": "Push a Business Rule with short flags",
+          "command": "<%= config.bin %> <%= command.id %> -n MyBusinessRule -t sys_script -f ./scripts/my-rule.js -a dev-instance"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -a abc123 -v 2.0.0 --timeout 3600000 --auth dev",
-          "description": "Update with custom timeout (1 hour)"
+          "description": "Push a UI Script with JSON output",
+          "command": "<%= config.bin %> <%= command.id %> -n MyUIScript -t sys_ui_script -f ./scripts/ui-script.js --json --auth dev-instance"
         }
       ],
       "flags": {
@@ -4534,6 +5018,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4550,44 +5042,35 @@
           ],
           "type": "option"
         },
-        "app-id": {
-          "char": "a",
-          "description": "Store application sys_id",
-          "name": "app-id",
+        "name": {
+          "char": "n",
+          "description": "Name of the script to push",
+          "name": "name",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "no-wait": {
-          "description": "Do not wait for update to complete",
-          "name": "no-wait",
-          "required": false,
-          "allowNo": false,
-          "type": "boolean"
-        },
-        "poll-interval": {
-          "description": "Polling interval in milliseconds",
-          "name": "poll-interval",
-          "required": false,
-          "default": 5000,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "timeout": {
-          "description": "Update timeout in milliseconds",
-          "name": "timeout",
-          "required": false,
-          "default": 1800000,
+        "type": {
+          "char": "t",
+          "description": "Type of script to push",
+          "name": "type",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
+          "options": [
+            "sys_script_include",
+            "sys_script",
+            "sys_ui_script",
+            "sys_ui_action",
+            "sys_script_client"
+          ],
           "type": "option"
         },
-        "version": {
-          "char": "v",
-          "description": "Target application version",
-          "name": "version",
+        "file": {
+          "char": "f",
+          "description": "Path to the local script file to push",
+          "name": "file",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -4596,7 +5079,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "store:update",
+      "id": "script-sync:push",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -4606,18 +5089,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "store",
-        "update.js"
+        "script-sync",
+        "push.js"
       ]
     },
-    "store:validate": {
+    "script-sync:sync": {
       "aliases": [],
       "args": {},
-      "description": "Validate a batch installation definition file.",
+      "description": "Synchronize all scripts in a directory with a ServiceNow instance.\n\nThis command scans a local directory for script files and synchronizes them with the corresponding records on your ServiceNow instance. You can optionally filter by script types to synchronize only specific kinds of scripts.\n\nFeatures:\n  • Batch synchronization of all scripts in a directory\n  • Filter by one or more script types\n  • Summary report with success/failure counts\n  • JSON output for CI/CD integration",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --file ./batch-definition.json --auth dev",
-          "description": "Validate a batch definition file"
+          "description": "Sync all scripts in a directory",
+          "command": "<%= config.bin %> <%= command.id %> --directory ./scripts --auth dev-instance"
+        },
+        {
+          "description": "Sync only Script Includes and Business Rules",
+          "command": "<%= config.bin %> <%= command.id %> --directory ./scripts --types sys_script_include --types sys_script --auth dev-instance"
+        },
+        {
+          "description": "Sync with JSON output for CI/CD",
+          "command": "<%= config.bin %> <%= command.id %> -d ./scripts --json --auth dev-instance"
         }
       ],
       "flags": {
@@ -4637,6 +5128,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4653,19 +5152,35 @@
           ],
           "type": "option"
         },
-        "file": {
-          "char": "f",
-          "description": "Path to batch definition JSON file",
-          "name": "file",
+        "directory": {
+          "char": "d",
+          "description": "Directory containing script files to synchronize",
+          "name": "directory",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
+        },
+        "types": {
+          "char": "t",
+          "description": "Script types to synchronize. Can be specified multiple times to include multiple types.",
+          "name": "types",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": true,
+          "options": [
+            "sys_script_include",
+            "sys_script",
+            "sys_ui_script",
+            "sys_ui_action",
+            "sys_script_client"
+          ],
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "store:validate",
+      "id": "script-sync:sync",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -4675,8 +5190,8 @@
       "relativePath": [
         "dist",
         "commands",
-        "store",
-        "validate.js"
+        "script-sync",
+        "sync.js"
       ]
     },
     "task:approve": {
@@ -4710,6 +5225,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4796,6 +5319,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4896,6 +5427,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -4989,6 +5528,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5091,6 +5638,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5173,6 +5728,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5231,18 +5794,22 @@
         "resolve.js"
       ]
     },
-    "update-set:clone": {
+    "store:install": {
       "aliases": [],
       "args": {},
-      "description": "Clone an update set and its records.",
+      "description": "Install an application from the ServiceNow Store.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --source us-001 --name \"Cloned Set\" --auth dev-instance",
-          "description": "Clone an update set"
+          "command": "<%= config.bin %> <%= command.id %> --app-id abc123 --version 1.0.0 --auth dev",
+          "description": "Install a store application and wait for completion"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --source us-001 --name \"Cloned Set\" --json --auth dev-instance",
-          "description": "Clone with JSON output"
+          "command": "<%= config.bin %> <%= command.id %> --app-id abc123 --version 1.0.0 --no-wait --auth dev",
+          "description": "Install without waiting for completion"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> -a abc123 -v 1.0.0 --demo-data --auth dev",
+          "description": "Install with demo data"
         }
       ],
       "flags": {
@@ -5262,6 +5829,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5278,19 +5853,51 @@
           ],
           "type": "option"
         },
-        "name": {
-          "char": "n",
-          "description": "Name for the cloned update set",
-          "name": "name",
+        "app-id": {
+          "char": "a",
+          "description": "Store application sys_id",
+          "name": "app-id",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "source": {
-          "char": "s",
-          "description": "Source update set sys_id",
-          "name": "source",
+        "demo-data": {
+          "description": "Load demo data during installation",
+          "name": "demo-data",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "no-wait": {
+          "description": "Do not wait for installation to complete",
+          "name": "no-wait",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "poll-interval": {
+          "description": "Polling interval in milliseconds",
+          "name": "poll-interval",
+          "required": false,
+          "default": 5000,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "timeout": {
+          "description": "Installation timeout in milliseconds",
+          "name": "timeout",
+          "required": false,
+          "default": 1800000,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "version": {
+          "char": "v",
+          "description": "Application version to install",
+          "name": "version",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -5299,7 +5906,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "update-set:clone",
+      "id": "store:install",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5309,26 +5916,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "update-set",
-        "clone.js"
+        "store",
+        "install.js"
       ]
     },
-    "update-set:create": {
+    "store:search": {
       "aliases": [],
       "args": {},
-      "description": "Create a new update set.",
+      "description": "Search for applications in the ServiceNow Store.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --name \"My Feature Set\" --auth dev-instance",
-          "description": "Create a new update set with a name"
+          "command": "<%= config.bin %> <%= command.id %> --term \"ITSM\" --auth dev",
+          "description": "Search for applications matching a term"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --name \"My Feature Set\" --description \"Update set for feature X\" --auth dev-instance",
-          "description": "Create with name and description"
+          "command": "<%= config.bin %> <%= command.id %> --tab installed --auth dev",
+          "description": "List installed applications"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --name \"My Feature Set\" --application x_my_app --auth dev-instance",
-          "description": "Create within a specific application scope"
+          "command": "<%= config.bin %> <%= command.id %> --tab updates --limit 10 --auth dev",
+          "description": "List applications with available updates"
         }
       ],
       "flags": {
@@ -5348,6 +5955,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5364,28 +5979,34 @@
           ],
           "type": "option"
         },
-        "application": {
-          "description": "Application scope for the new update set",
-          "name": "application",
+        "limit": {
+          "description": "Maximum number of results to return",
+          "name": "limit",
           "required": false,
+          "default": 20,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "description": {
-          "char": "d",
-          "description": "Description for the new update set",
-          "name": "description",
+        "tab": {
+          "description": "Store tab context to search",
+          "name": "tab",
           "required": false,
+          "default": "available_for_you",
           "hasDynamicHelp": false,
           "multiple": false,
+          "options": [
+            "available_for_you",
+            "installed",
+            "updates"
+          ],
           "type": "option"
         },
-        "name": {
-          "char": "n",
-          "description": "Name for the new update set",
-          "name": "name",
-          "required": true,
+        "term": {
+          "char": "t",
+          "description": "Search term",
+          "name": "term",
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -5393,7 +6014,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "update-set:create",
+      "id": "store:search",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5403,26 +6024,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "update-set",
-        "create.js"
+        "store",
+        "search.js"
       ]
     },
-    "update-set:current": {
+    "store:update": {
       "aliases": [],
       "args": {},
-      "description": "Get or set the current update set.",
+      "description": "Update a ServiceNow Store application to a new version.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --auth dev-instance",
-          "description": "Get the current update set"
+          "command": "<%= config.bin %> <%= command.id %> --app-id abc123 --version 2.0.0 --auth dev",
+          "description": "Update a store application and wait for completion"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --set us-001 --auth dev-instance",
-          "description": "Set the current update set by sys_id"
+          "command": "<%= config.bin %> <%= command.id %> --app-id abc123 --version 2.0.0 --no-wait --auth dev",
+          "description": "Update without waiting for completion"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --json --auth dev-instance",
-          "description": "Get the current update set as JSON"
+          "command": "<%= config.bin %> <%= command.id %> -a abc123 -v 2.0.0 --timeout 3600000 --auth dev",
+          "description": "Update with custom timeout (1 hour)"
         }
       ],
       "flags": {
@@ -5442,6 +6063,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5458,11 +6087,45 @@
           ],
           "type": "option"
         },
-        "set": {
-          "char": "s",
-          "description": "sys_id of update set to make current",
-          "name": "set",
+        "app-id": {
+          "char": "a",
+          "description": "Store application sys_id",
+          "name": "app-id",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "no-wait": {
+          "description": "Do not wait for update to complete",
+          "name": "no-wait",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
+        "poll-interval": {
+          "description": "Polling interval in milliseconds",
+          "name": "poll-interval",
+          "required": false,
+          "default": 5000,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "timeout": {
+          "description": "Update timeout in milliseconds",
+          "name": "timeout",
           "required": false,
+          "default": 1800000,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "version": {
+          "char": "v",
+          "description": "Target application version",
+          "name": "version",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -5470,7 +6133,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "update-set:current",
+      "id": "store:update",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5480,26 +6143,18 @@
       "relativePath": [
         "dist",
         "commands",
-        "update-set",
-        "current.js"
+        "store",
+        "update.js"
       ]
     },
-    "update-set": {
+    "store:validate": {
       "aliases": [],
       "args": {},
-      "description": "List update sets on a ServiceNow instance.",
+      "description": "Validate a batch installation definition file.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --auth dev-instance",
-          "description": "List update sets with default limit"
-        },
-        {
-          "command": "<%= config.bin %> <%= command.id %> --query \"state=in progress\" --limit 50 --auth dev-instance",
-          "description": "List update sets with a custom query filter"
-        },
-        {
-          "command": "<%= config.bin %> <%= command.id %> --json --auth dev-instance",
-          "description": "List update sets with JSON output"
+          "command": "<%= config.bin %> <%= command.id %> --file ./batch-definition.json --auth dev",
+          "description": "Validate a batch definition file"
         }
       ],
       "flags": {
@@ -5519,6 +6174,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5535,20 +6198,11 @@
           ],
           "type": "option"
         },
-        "limit": {
-          "description": "Maximum number of update sets to return",
-          "name": "limit",
-          "required": false,
-          "default": 20,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "query": {
-          "char": "q",
-          "description": "Encoded query filter",
-          "name": "query",
-          "required": false,
+        "file": {
+          "char": "f",
+          "description": "Path to batch definition JSON file",
+          "name": "file",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -5556,7 +6210,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "update-set",
+      "id": "store:validate",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5566,22 +6220,22 @@
       "relativePath": [
         "dist",
         "commands",
-        "update-set",
-        "index.js"
+        "store",
+        "validate.js"
       ]
     },
-    "update-set:inspect": {
+    "workflow:create": {
       "aliases": [],
       "args": {},
-      "description": "Inspect the components of an update set.",
+      "description": "Create a complete workflow from a JSON specification file.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --sys-id us-001 --auth dev-instance",
-          "description": "Inspect an update set by sys_id"
+          "command": "<%= config.bin %> <%= command.id %> --spec ./workflow.json --auth dev",
+          "description": "Create a workflow from a JSON spec file"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --sys-id us-001 --json --auth dev-instance",
-          "description": "Inspect with JSON output"
+          "command": "<%= config.bin %> <%= command.id %> -s ./workflow.json --json --auth dev",
+          "description": "Create a workflow and output result as JSON"
         }
       ],
       "flags": {
@@ -5601,6 +6255,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5617,10 +6279,10 @@
           ],
           "type": "option"
         },
-        "sys-id": {
+        "spec": {
           "char": "s",
-          "description": "sys_id of the update set to inspect",
-          "name": "sys-id",
+          "description": "Path to workflow JSON specification file",
+          "name": "spec",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -5629,7 +6291,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "update-set:inspect",
+      "id": "workflow:create",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5639,26 +6301,22 @@
       "relativePath": [
         "dist",
         "commands",
-        "update-set",
-        "inspect.js"
+        "workflow",
+        "create.js"
       ]
     },
-    "update-set:move": {
+    "workflow:publish": {
       "aliases": [],
       "args": {},
-      "description": "Move records between update sets.",
+      "description": "Publish a workflow version.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --target us-002 --source us-001 --auth dev-instance",
-          "description": "Move all records from one update set to another"
-        },
-        {
-          "command": "<%= config.bin %> <%= command.id %> --target us-002 --records \"rec-001,rec-002,rec-003\" --auth dev-instance",
-          "description": "Move specific records to a target update set"
+          "command": "<%= config.bin %> <%= command.id %> --version-id wfv-001 --start-activity act-001 --auth dev",
+          "description": "Publish a workflow version"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --target us-002 --source us-001 --json --auth dev-instance",
-          "description": "Move records with JSON output"
+          "command": "<%= config.bin %> <%= command.id %> -v wfv-001 -s act-001 --json --auth dev",
+          "description": "Publish a workflow version and output as JSON"
         }
       ],
       "flags": {
@@ -5678,6 +6336,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5694,25 +6360,19 @@
           ],
           "type": "option"
         },
-        "records": {
-          "description": "Comma-separated sys_ids of records to move",
-          "name": "records",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "source": {
-          "description": "Source update set sys_id",
-          "name": "source",
-          "required": false,
+        "start-activity": {
+          "char": "s",
+          "description": "Sys ID of the start activity",
+          "name": "start-activity",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "target": {
-          "description": "Target update set sys_id",
-          "name": "target",
+        "version-id": {
+          "char": "v",
+          "description": "Sys ID of the workflow version to publish",
+          "name": "version-id",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -5721,7 +6381,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "update-set:move",
+      "id": "workflow:publish",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5731,22 +6391,22 @@
       "relativePath": [
         "dist",
         "commands",
-        "update-set",
-        "move.js"
+        "workflow",
+        "publish.js"
       ]
     },
-    "workflow:create": {
+    "update-set:clone": {
       "aliases": [],
       "args": {},
-      "description": "Create a complete workflow from a JSON specification file.",
+      "description": "Clone an update set and its records.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --spec ./workflow.json --auth dev",
-          "description": "Create a workflow from a JSON spec file"
+          "command": "<%= config.bin %> <%= command.id %> --source us-001 --name \"Cloned Set\" --auth dev-instance",
+          "description": "Clone an update set"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -s ./workflow.json --json --auth dev",
-          "description": "Create a workflow and output result as JSON"
+          "command": "<%= config.bin %> <%= command.id %> --source us-001 --name \"Cloned Set\" --json --auth dev-instance",
+          "description": "Clone with JSON output"
         }
       ],
       "flags": {
@@ -5766,6 +6426,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5782,10 +6450,19 @@
           ],
           "type": "option"
         },
-        "spec": {
+        "name": {
+          "char": "n",
+          "description": "Name for the cloned update set",
+          "name": "name",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "source": {
           "char": "s",
-          "description": "Path to workflow JSON specification file",
-          "name": "spec",
+          "description": "Source update set sys_id",
+          "name": "source",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -5794,7 +6471,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "workflow:create",
+      "id": "update-set:clone",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5804,22 +6481,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "workflow",
-        "create.js"
+        "update-set",
+        "clone.js"
       ]
     },
-    "workflow:publish": {
+    "update-set:create": {
       "aliases": [],
       "args": {},
-      "description": "Publish a workflow version.",
+      "description": "Create a new update set.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --version-id wfv-001 --start-activity act-001 --auth dev",
-          "description": "Publish a workflow version"
+          "command": "<%= config.bin %> <%= command.id %> --name \"My Feature Set\" --auth dev-instance",
+          "description": "Create a new update set with a name"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> -v wfv-001 -s act-001 --json --auth dev",
-          "description": "Publish a workflow version and output as JSON"
+          "command": "<%= config.bin %> <%= command.id %> --name \"My Feature Set\" --description \"Update set for feature X\" --auth dev-instance",
+          "description": "Create with name and description"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> --name \"My Feature Set\" --application x_my_app --auth dev-instance",
+          "description": "Create within a specific application scope"
         }
       ],
       "flags": {
@@ -5839,6 +6520,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5855,19 +6544,27 @@
           ],
           "type": "option"
         },
-        "start-activity": {
-          "char": "s",
-          "description": "Sys ID of the start activity",
-          "name": "start-activity",
-          "required": true,
+        "application": {
+          "description": "Application scope for the new update set",
+          "name": "application",
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "version-id": {
-          "char": "v",
-          "description": "Sys ID of the workflow version to publish",
-          "name": "version-id",
+        "description": {
+          "char": "d",
+          "description": "Description for the new update set",
+          "name": "description",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "name": {
+          "char": "n",
+          "description": "Name for the new update set",
+          "name": "name",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -5876,7 +6573,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "workflow:publish",
+      "id": "update-set:create",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5886,34 +6583,33 @@
       "relativePath": [
         "dist",
         "commands",
-        "workflow",
-        "publish.js"
+        "update-set",
+        "create.js"
       ]
     },
-    "xml:export": {
+    "update-set:current": {
       "aliases": [],
       "args": {},
-      "description": "Export a single ServiceNow record as XML.\n\nDownloads the XML representation of a specific record from a ServiceNow table. Without --output, the XML is printed to stdout. With --output, the XML is written to the specified file path.\n\nFeatures:\n  • Export any record by table and sys_id\n  • Print XML to stdout for piping to other tools\n  • Save directly to a file with --output\n  • JSON output mode for CI/CD integration",
+      "description": "Get or set the current update set.",
       "examples": [
         {
-          "description": "Export a record to stdout",
-          "command": "<%= config.bin %> <%= command.id %> --table sys_script_include --sys-id abc123def456 --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> --auth dev-instance",
+          "description": "Get the current update set"
         },
         {
-          "description": "Export and save to a file",
-          "command": "<%= config.bin %> <%= command.id %> --table incident --sys-id abc123 --output ./export.xml --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> --set us-001 --auth dev-instance",
+          "description": "Set the current update set by sys_id"
         },
         {
-          "description": "Export as JSON metadata",
-          "command": "<%= config.bin %> <%= command.id %> --table sys_script --sys-id abc123 --json --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> --json --auth dev-instance",
+          "description": "Get the current update set as JSON"
         }
       ],
       "flags": {
         "json": {
-          "char": "j",
-          "description": "Output results as JSON",
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
           "name": "json",
-          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -5926,6 +6622,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -5942,28 +6646,10 @@
           ],
           "type": "option"
         },
-        "table": {
-          "char": "t",
-          "description": "Table name of the record to export",
-          "name": "table",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "sys-id": {
+        "set": {
           "char": "s",
-          "description": "Sys ID of the record to export",
-          "name": "sys-id",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "output": {
-          "char": "o",
-          "description": "File path to write the exported XML to. If omitted, XML is printed to stdout.",
-          "name": "output",
+          "description": "sys_id of update set to make current",
+          "name": "set",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -5972,7 +6658,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "xml:export",
+      "id": "update-set:current",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -5982,30 +6668,33 @@
       "relativePath": [
         "dist",
         "commands",
-        "xml",
-        "export.js"
+        "update-set",
+        "current.js"
       ]
     },
-    "xml:import": {
+    "update-set": {
       "aliases": [],
       "args": {},
-      "description": "Import XML records into a ServiceNow instance.\n\nReads an XML file and imports its contents into the specified target table. The XML should be in ServiceNow unload format.\n\nFeatures:\n  • Import from local XML files\n  • Target a specific table\n  • JSON output mode for CI/CD integration",
+      "description": "List update sets on a ServiceNow instance.",
       "examples": [
         {
-          "description": "Import records from an XML file",
-          "command": "<%= config.bin %> <%= command.id %> --file ./export.xml --table sys_script_include --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> --auth dev-instance",
+          "description": "List update sets with default limit"
         },
         {
-          "description": "Import with JSON output",
-          "command": "<%= config.bin %> <%= command.id %> --file ./records.xml --table incident --json --auth dev"
+          "command": "<%= config.bin %> <%= command.id %> --query \"state=in progress\" --limit 50 --auth dev-instance",
+          "description": "List update sets with a custom query filter"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> --json --auth dev-instance",
+          "description": "List update sets with JSON output"
         }
       ],
       "flags": {
         "json": {
-          "char": "j",
-          "description": "Output results as JSON",
+          "description": "Format output as json.",
+          "helpGroup": "GLOBAL",
           "name": "json",
-          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -6018,6 +6707,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -6034,20 +6731,20 @@
           ],
           "type": "option"
         },
-        "file": {
-          "char": "f",
-          "description": "Path to the XML file to import",
-          "name": "file",
-          "required": true,
+        "limit": {
+          "description": "Maximum number of update sets to return",
+          "name": "limit",
+          "required": false,
+          "default": 20,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "table": {
-          "char": "t",
-          "description": "Target table to import records into",
-          "name": "table",
-          "required": true,
+        "query": {
+          "char": "q",
+          "description": "Encoded query filter",
+          "name": "query",
+          "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
@@ -6055,7 +6752,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "xml:import",
+      "id": "update-set",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -6065,26 +6762,22 @@
       "relativePath": [
         "dist",
         "commands",
-        "xml",
-        "import.js"
+        "update-set",
+        "index.js"
       ]
     },
-    "search:add-table": {
+    "update-set:inspect": {
       "aliases": [],
       "args": {},
-      "description": "Add a table to a code search group on a ServiceNow instance.\n\nThis command registers a new table and its searchable fields with a search group, making the table's records discoverable through code search. This is useful when you need to include custom tables in code search results.\n\nFeatures:\n  • Add custom tables to search groups\n  • Specify which fields should be indexed\n  • JSON output for scripting and automation",
+      "description": "Inspect the components of an update set.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --table sys_script_include --search-fields script --search-group \"Script Includes\" --auth dev-instance",
-          "description": "Add a table to a search group"
-        },
-        {
-          "command": "<%= config.bin %> <%= command.id %> --table sys_ui_page --search-fields \"html,client_script,processing_script\" --search-group \"UI Pages\" --auth dev-instance",
-          "description": "Add a table with multiple search fields"
+          "command": "<%= config.bin %> <%= command.id %> --sys-id us-001 --auth dev-instance",
+          "description": "Inspect an update set by sys_id"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --table u_custom_script --search-fields script --search-group \"Custom\" --json --auth dev-instance",
-          "description": "Add a table with JSON output"
+          "command": "<%= config.bin %> <%= command.id %> --sys-id us-001 --json --auth dev-instance",
+          "description": "Inspect with JSON output"
         }
       ],
       "flags": {
@@ -6104,6 +6797,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -6120,28 +6821,10 @@
           ],
           "type": "option"
         },
-        "search-fields": {
-          "char": "f",
-          "description": "Comma-separated list of fields to index for search",
-          "name": "search-fields",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "search-group": {
-          "char": "g",
-          "description": "Search group to add the table to",
-          "name": "search-group",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "table": {
-          "char": "t",
-          "description": "Table name to add to the search group",
-          "name": "table",
+        "sys-id": {
+          "char": "s",
+          "description": "sys_id of the update set to inspect",
+          "name": "sys-id",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -6150,7 +6833,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "search:add-table",
+      "id": "update-set:inspect",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -6160,22 +6843,26 @@
       "relativePath": [
         "dist",
         "commands",
-        "search",
-        "add-table.js"
+        "update-set",
+        "inspect.js"
       ]
     },
-    "search:groups": {
+    "update-set:move": {
       "aliases": [],
       "args": {},
-      "description": "List all available code search groups on a ServiceNow instance.\n\nSearch groups organize searchable tables into logical categories. Use this command to discover which search groups are configured, then use the group names with other search commands to narrow your search scope.\n\nFeatures:\n  • List all configured search groups\n  • JSON output for scripting and automation",
+      "description": "Move records between update sets.",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --auth dev-instance",
-          "description": "List all search groups"
+          "command": "<%= config.bin %> <%= command.id %> --target us-002 --source us-001 --auth dev-instance",
+          "description": "Move all records from one update set to another"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --json --auth dev-instance",
-          "description": "List search groups with JSON output"
+          "command": "<%= config.bin %> <%= command.id %> --target us-002 --records \"rec-001,rec-002,rec-003\" --auth dev-instance",
+          "description": "Move specific records to a target update set"
+        },
+        {
+          "command": "<%= config.bin %> <%= command.id %> --target us-002 --source us-001 --json --auth dev-instance",
+          "description": "Move records with JSON output"
         }
       ],
       "flags": {
@@ -6195,6 +6882,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -6210,11 +6905,35 @@
             "trace"
           ],
           "type": "option"
+        },
+        "records": {
+          "description": "Comma-separated sys_ids of records to move",
+          "name": "records",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "source": {
+          "description": "Source update set sys_id",
+          "name": "source",
+          "required": false,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "target": {
+          "description": "Target update set sys_id",
+          "name": "target",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "search:groups",
+      "id": "update-set:move",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -6224,37 +6943,34 @@
       "relativePath": [
         "dist",
         "commands",
-        "search",
-        "groups.js"
+        "update-set",
+        "move.js"
       ]
     },
-    "search": {
+    "xml:export": {
       "aliases": [],
       "args": {},
-      "description": "Search platform code across a ServiceNow instance.\n\nThis command allows you to search through code stored on the platform, including scripts, business rules, UI pages, and other scriptable records. You can search globally, within a specific application scope, or within a specific table and search group.\n\nFeatures:\n  • Full-text code search across the platform\n  • Scope-specific search within application boundaries\n  • Table-specific search within a search group\n  • JSON output for CI/CD integration\n  • Configurable result limits",
+      "description": "Export a single ServiceNow record as XML.\n\nDownloads the XML representation of a specific record from a ServiceNow table. Without --output, the XML is printed to stdout. With --output, the XML is written to the specified file path.\n\nFeatures:\n  • Export any record by table and sys_id\n  • Print XML to stdout for piping to other tools\n  • Save directly to a file with --output\n  • JSON output mode for CI/CD integration",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --term \"GlideRecord\" --auth dev-instance",
-          "description": "Search for a term across the entire instance"
-        },
-        {
-          "command": "<%= config.bin %> <%= command.id %> --term \"getValue\" --scope x_my_app --auth dev-instance",
-          "description": "Search within a specific application scope"
+          "description": "Export a record to stdout",
+          "command": "<%= config.bin %> <%= command.id %> --table sys_script_include --sys-id abc123def456 --auth dev"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --term \"initialize\" --search-group \"Script Includes\" --table sys_script_include --auth dev-instance",
-          "description": "Search within a specific table and search group"
+          "description": "Export and save to a file",
+          "command": "<%= config.bin %> <%= command.id %> --table incident --sys-id abc123 --output ./export.xml --auth dev"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --term \"GlideRecord\" --limit 10 --json --auth dev-instance",
-          "description": "Search with a result limit and JSON output"
+          "description": "Export as JSON metadata",
+          "command": "<%= config.bin %> <%= command.id %> --table sys_script --sys-id abc123 --json --auth dev"
         }
       ],
       "flags": {
         "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
+          "char": "j",
+          "description": "Output results as JSON",
           "name": "json",
+          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -6267,6 +6983,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -6283,54 +7007,37 @@
           ],
           "type": "option"
         },
-        "limit": {
-          "char": "l",
-          "description": "Maximum number of results to return",
-          "name": "limit",
-          "required": false,
+        "table": {
+          "char": "t",
+          "description": "Table name of the record to export",
+          "name": "table",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "scope": {
+        "sys-id": {
           "char": "s",
-          "description": "Application scope to search within",
-          "name": "scope",
-          "required": false,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
-        },
-        "search-group": {
-          "char": "g",
-          "description": "Search group to search within (required when using --table)",
-          "name": "search-group",
-          "required": false,
+          "description": "Sys ID of the record to export",
+          "name": "sys-id",
+          "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
         },
-        "table": {
-          "description": "Table name to search within (requires --search-group)",
-          "name": "table",
+        "output": {
+          "char": "o",
+          "description": "File path to write the exported XML to. If omitted, XML is printed to stdout.",
+          "name": "output",
           "required": false,
           "hasDynamicHelp": false,
           "multiple": false,
           "type": "option"
-        },
-        "term": {
-          "char": "t",
-          "description": "Search term to look for in platform code",
-          "name": "term",
-          "required": true,
-          "hasDynamicHelp": false,
-          "multiple": false,
-          "type": "option"
         }
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "search",
+      "id": "xml:export",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -6340,29 +7047,30 @@
       "relativePath": [
         "dist",
         "commands",
-        "search",
-        "index.js"
+        "xml",
+        "export.js"
       ]
     },
-    "search:tables": {
+    "xml:import": {
       "aliases": [],
       "args": {},
-      "description": "List tables configured for a specific code search group.\n\nEach search group contains one or more tables that are indexed for code search. Use this command to discover which tables belong to a search group, including the fields that are searchable on each table.\n\nFeatures:\n  • List all tables in a search group\n  • View searchable fields per table\n  • JSON output for scripting and automation",
+      "description": "Import XML records into a ServiceNow instance.\n\nReads an XML file and imports its contents into the specified target table. The XML should be in ServiceNow unload format.\n\nFeatures:\n  • Import from local XML files\n  • Target a specific table\n  • JSON output mode for CI/CD integration",
       "examples": [
         {
-          "command": "<%= config.bin %> <%= command.id %> --search-group \"Script Includes\" --auth dev-instance",
-          "description": "List tables in a search group"
+          "description": "Import records from an XML file",
+          "command": "<%= config.bin %> <%= command.id %> --file ./export.xml --table sys_script_include --auth dev"
         },
         {
-          "command": "<%= config.bin %> <%= command.id %> --search-group \"Business Rules\" --json --auth dev-instance",
-          "description": "List tables with JSON output"
+          "description": "Import with JSON output",
+          "command": "<%= config.bin %> <%= command.id %> --file ./records.xml --table incident --json --auth dev"
         }
       ],
       "flags": {
         "json": {
-          "description": "Format output as json.",
-          "helpGroup": "GLOBAL",
+          "char": "j",
+          "description": "Output results as JSON",
           "name": "json",
+          "required": false,
           "allowNo": false,
           "type": "boolean"
         },
@@ -6375,6 +7083,14 @@
           "multiple": false,
           "type": "option"
         },
+        "cred-store": {
+          "description": "Read credentials from @sonisoft/sn-credstore instead of the OS keyring. Use this in headless sessions (SSH, systemd, CI, agents) where the keyring cannot be unlocked.",
+          "helpGroup": "GLOBAL",
+          "name": "cred-store",
+          "required": false,
+          "allowNo": false,
+          "type": "boolean"
+        },
         "log-level": {
           "helpGroup": "GLOBAL",
           "name": "log-level",
@@ -6391,10 +7107,19 @@
           ],
           "type": "option"
         },
-        "search-group": {
-          "char": "g",
-          "description": "Search group name to list tables for",
-          "name": "search-group",
+        "file": {
+          "char": "f",
+          "description": "Path to the XML file to import",
+          "name": "file",
+          "required": true,
+          "hasDynamicHelp": false,
+          "multiple": false,
+          "type": "option"
+        },
+        "table": {
+          "char": "t",
+          "description": "Target table to import records into",
+          "name": "table",
           "required": true,
           "hasDynamicHelp": false,
           "multiple": false,
@@ -6403,7 +7128,7 @@
       },
       "hasDynamicHelp": false,
       "hiddenAliases": [],
-      "id": "search:tables",
+      "id": "xml:import",
       "pluginAlias": "@sonisoft/now-sdk-ext-cli",
       "pluginName": "@sonisoft/now-sdk-ext-cli",
       "pluginType": "core",
@@ -6413,10 +7138,10 @@
       "relativePath": [
         "dist",
         "commands",
-        "search",
-        "tables.js"
+        "xml",
+        "import.js"
       ]
     }
   },
-  "version": "3.0.0"
+  "version": "5.0.1"
 }