@tenonhq/dovetail-core 0.0.95 → 0.0.97

package/dist/appUtils.js

@@ -118,7 +118,13 @@ const processFilesInManRec = async (recPath, rec, forceWrite) => {
 const processRecsInManTable = async (tablePath, table, forceWrite, onRecordProcessed) => {
     const { records } = table;
     const recKeys = Object.keys(records);
-    const recKeyToPath = (key) => path_1.default.join(tablePath, records[key].name);
+    // Derive the folder name via toSafeFolderName, not the raw record.name. The
+    // download path normalizes manifest keys upstream (processManifest), but the
+    // refresh path (processMissingFiles) feeds this writer the raw bulkDownload
+    // response, whose .name is the unmodified ServiceNow display name — which can
+    // be filesystem-unsafe (e.g. a `<table>.*` ACL). toSafeFolderName is
+    // idempotent on already-safe names, so re-applying it here is harmless.
+    const recKeyToPath = (key) => path_1.default.join(tablePath, (0, exports.toSafeFolderName)(records[key]));
     const recPathPromises = recKeys
         .map(recKeyToPath)
         .map(fUtils.createDirRecursively);
@@ -511,11 +517,16 @@ const refreshAllFiles = async (newManifest, sourcePath, options = {}) => {
             var recs = filesToProcess[tableName].records;
             var recKeys = Object.keys(recs);
             await Promise.all(recKeys.map(function (k) {
-                return fUtils.createDirRecursively(path_1.default.join(tablePath, recs[k].name));
+                // toSafeFolderName, not raw recs[k].name: the bulkDownload response
+                // carries the unmodified ServiceNow display name, which may be
+                // filesystem-unsafe (e.g. a `<table>.*` ACL). Without this, refresh
+                // recreates Windows-illegal folders that normalizeManifestKeys
+                // already removed from the manifest.
+                return fUtils.createDirRecursively(path_1.default.join(tablePath, (0, exports.toSafeFolderName)(recs[k])));
             }));
             await (0, genericUtils_1.processBatched)(recKeys, constants_1.CONCURRENCY_RECORDS, async function (recKey) {
                 var rec = recs[recKey];
-                var recPath = path_1.default.join(tablePath, rec.name);
+                var recPath = path_1.default.join(tablePath, (0, exports.toSafeFolderName)(rec));
                 // Split server-provided metadata off from the regular files so we can
                 // track whether any regular file actually changed — metaData shouldn't
                 // be the trigger for "this record changed" since we stamp it on every

package/dist/snClient.js

@@ -6,7 +6,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.unwrapSNResponse = exports.defaultClient = exports.snClient = exports.processPushResponse = exports.retryOnHttpErr = exports.retryOnErr = void 0;
 exports.setBenchmarkSink = setBenchmarkSink;
 exports._resetDovetailApiFallback = _resetDovetailApiFallback;
-exports._isUsingLegacyClaudePath = _isUsingLegacyClaudePath;
+exports._isUsingLegacyPath = _isUsingLegacyPath;
 exports._callDovetailApi = _callDovetailApi;
 exports.unwrapTableAPIFirstItem = unwrapTableAPIFirstItem;
 const axios_1 = __importDefault(require("axios"));
@@ -56,28 +56,28 @@ function _getHttpStatus(e) {
     }
     return undefined;
 }
-// Dovetail server-side Scripted REST API was renamed from "Claude" (path
-// /api/cadso/claude/*) to "Dovetail" (path /api/cadso/dovetail/*). On instances
-// where the rename hasn't been imported yet, the new path returns 404. We try
-// the dovetail path first; if it 404s we fall back to the legacy claude path
-// for the rest of the session, with a one-time deprecation warning.
-let _dovetailApiUseLegacyClaudePath = false;
+// Dovetail's core Scripted REST API now lives in the Dovetail scoped
+// application at /api/cadso/dovetail_core/*. Older instances still expose the
+// previous global-scope path /api/cadso/dovetail/*. We try dovetail_core first;
+// if it 404s we fall back to the legacy /api/cadso/dovetail/* path for the rest
+// of the session, with a one-time deprecation warning.
+let _dovetailApiUseLegacyPath = false;
 function _dovetailEndpoint(op) {
-    return _dovetailApiUseLegacyClaudePath
-        ? "api/cadso/claude/" + op
-        : "api/cadso/dovetail/" + op;
+    return _dovetailApiUseLegacyPath
+        ? "api/cadso/dovetail/" + op
+        : "api/cadso/dovetail_core/" + op;
 }
 // Exported for tests only: reset the latched fallback state between test cases.
 function _resetDovetailApiFallback() {
-    _dovetailApiUseLegacyClaudePath = false;
+    _dovetailApiUseLegacyPath = false;
 }
 // Exported for tests only: inspect the latched fallback state.
-function _isUsingLegacyClaudePath() {
-    return _dovetailApiUseLegacyClaudePath;
+function _isUsingLegacyPath() {
+    return _dovetailApiUseLegacyPath;
 }
 // SN returns 400 with this body when a Scripted REST endpoint does not exist
-// at the requested URI. The /dovetail -> /claude fallback above only fires on
-// 404, so the same "endpoint missing" condition presents as an opaque 400 to
+// at the requested URI. The dovetail_core -> dovetail fallback above only fires
+// on 404, so the same "endpoint missing" condition presents as an opaque 400 to
 // callers. Detect it and surface a clear hint.
 var _SN_MISSING_ENDPOINT_BODY = "Requested URI does not represent any resource";
 function _summarizeResponseBody(data) {
@@ -101,7 +101,7 @@ function _enrichDovetailApiError(e, attemptedEndpoint) {
     var body = e.response ? _summarizeResponseBody(e.response.data) : "";
     var missingEndpoint = status === 400 && body.indexOf(_SN_MISSING_ENDPOINT_BODY) !== -1;
     var hint = missingEndpoint
-        ? " — Scripted REST endpoint not found on this instance. Re-import the Dovetail Scripted REST API XML (see Dovetail/docs/dovetail-servicenow-migration.md)."
+        ? " — Scripted REST endpoint not found on this instance. Install the Dovetail application's Scripted REST APIs (dovetail_core / dovetail_sync / dovetail_promote)."
         : "";
     e.message =
         "Dovetail REST call failed: " +
@@ -117,11 +117,11 @@ async function _callDovetailApi(op, call) {
         return await call(endpoint);
     }
     catch (e) {
-        if (!_dovetailApiUseLegacyClaudePath && _getHttpStatus(e) === 404) {
-            Logger_1.logger.warn("[deprecation] /api/cadso/dovetail/" + op +
-                " returned 404. Falling back to legacy /api/cadso/claude/" + op +
-                ". Re-import the Dovetail Scripted REST API XML on your ServiceNow instance to silence this warning.");
-            _dovetailApiUseLegacyClaudePath = true;
+        if (!_dovetailApiUseLegacyPath && _getHttpStatus(e) === 404) {
+            Logger_1.logger.warn("[deprecation] /api/cadso/dovetail_core/" + op +
+                " returned 404. Falling back to legacy /api/cadso/dovetail/" + op +
+                ". Install the Dovetail application's Scripted REST APIs to silence this warning.");
+            _dovetailApiUseLegacyPath = true;
             var legacyEndpoint = _dovetailEndpoint(op);
             try {
                 return await call(legacyEndpoint);
@@ -290,11 +290,11 @@ const snClient = (baseURL, username, password) => {
     });
     const client = (0, axios_rate_limit_1.default)(rawAxios, { maxRPS: 20 });
     const getAppList = () => {
-        const endpoint = "api/sinc/sincronia/getAppList";
+        const endpoint = "api/cadso/dovetail_sync/getAppList";
         return client.get(endpoint);
     };
     const updateATFfile = (contents, sysId) => {
-        const endpoint = "api/sinc/sincronia/pushATFfile";
+        const endpoint = "api/cadso/dovetail_sync/pushATFfile";
         try {
             return client.post(endpoint, { file: contents, sys_id: sysId });
         }
@@ -350,7 +350,7 @@ const snClient = (baseURL, username, password) => {
         });
     };
     const getCurrentScope = () => {
-        const endpoint = "api/sinc/sincronia/getCurrentScope";
+        const endpoint = "api/cadso/dovetail_sync/getCurrentScope";
         return client.get(endpoint);
     };
     const createUpdateSet = (updateSetName, scopeSysId, description) => {
@@ -390,13 +390,13 @@ const snClient = (baseURL, username, password) => {
         });
     };
     const getMissingFiles = (missingFiles, tableOptions) => {
-        const endpoint = `api/sinc/sincronia/bulkDownload`;
+        const endpoint = `api/cadso/dovetail_sync/bulkDownload`;
         const tableCount = Object.keys(missingFiles).length;
         FileLogger_1.fileLogger.debug("Bulk downloading files for " + tableCount + " tables");
         return client.post(endpoint, { missingFiles, tableOptions });
     };
     const getManifest = (scope, config, withFiles = false) => {
-        const endpoint = `api/sinc/sincronia/getManifest/${scope}`;
+        const endpoint = `api/cadso/dovetail_sync/getManifest/${scope}`;
         const { includes = {}, excludes = {}, tableOptions = {}, scopes = {}, } = config;
         // Strip _ directive keys before sending to ServiceNow API
         var cleanIncludes = _stripUnderscoreKeys(includes);

package/dist/tests/refreshSafeFolderNames.test.js

@@ -0,0 +1,216 @@
+"use strict";
+/**
+ * Regression: the refresh path must write filesystem-SAFE folder names.
+ *
+ * normalizeManifestKeys() (PR #117) re-keys the manifest object so a record
+ * with a Windows-illegal display name (e.g. a table-wildcard ACL named
+ * `x_cadso_work_campaign.*`) maps to its sys_id. But the refresh writer
+ * (`refreshAllFiles`) builds folders from the raw `getMissingFiles`
+ * (bulkDownload) server response, whose `.name` is the unmodified display
+ * name — so it recreated the illegal `<table>.*` folders on every refresh,
+ * silently breaking the folder ≡ manifest-key invariant and aborting
+ * `git clone` on Windows.
+ *
+ * These tests assert the writer routes through toSafeFolderName: a `.*` ACL
+ * record lands in a sys_id folder, while a safe name stays human-readable.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+const fs = __importStar(require("fs"));
+const os = __importStar(require("os"));
+const path = __importStar(require("path"));
+// ---------- mocks (must come before importing the module under test) ----------
+var mockLogger = {
+    info: jest.fn(),
+    debug: jest.fn(),
+    warn: jest.fn(),
+    error: jest.fn(),
+    success: jest.fn(),
+    getLogLevel: function () { return "warn"; },
+};
+var mockFileLogger = {
+    debug: jest.fn(),
+    info: jest.fn(),
+    warn: jest.fn(),
+    error: jest.fn(),
+};
+var mockClient = {
+    getManifest: jest.fn(),
+    getMissingFiles: jest.fn(),
+};
+jest.mock("../Logger", function () { return { logger: mockLogger }; });
+jest.mock("../FileLogger", function () { return { fileLogger: mockFileLogger }; });
+jest.mock("../snClient", function () {
+    return {
+        defaultClient: function () { return mockClient; },
+        unwrapSNResponse: function (p) { return Promise.resolve(p).then(function (r) { return r; }); },
+        processPushResponse: jest.fn(),
+        retryOnErr: jest.fn(),
+        retryOnHttpErr: jest.fn(),
+        unwrapTableAPIFirstItem: jest.fn(),
+    };
+});
+var mockConfig = {
+    getConfig: jest.fn().mockReturnValue({
+        scopes: { x_cadso_work: {} },
+        tableOptions: {},
+    }),
+    getManifest: jest.fn().mockResolvedValue({
+        x_cadso_work: { scope: "x_cadso_work", tables: {} },
+    }),
+    getSourcePathForScope: jest.fn(),
+    getSourcePath: jest.fn(),
+    getManifestPath: jest.fn().mockReturnValue("/tmp/dove.manifest.json"),
+    resolveConfigForScope: jest.fn().mockImplementation(function () {
+        return {
+            tables: ["sys_security_acl"],
+            fieldOverrides: {},
+            apiIncludes: {},
+            apiExcludes: {},
+        };
+    }),
+    isMultiScopeManifest: jest.fn().mockReturnValue(true),
+    updateManifest: jest.fn(),
+};
+jest.mock("../config", function () { return mockConfig; });
+jest.mock("progress", function () {
+    return jest.fn().mockImplementation(function () {
+        return { tick: jest.fn() };
+    });
+});
+// Keep real FileUtils so we assert against the actual file system; stub only
+// writeScopeManifest so no manifest file is written.
+jest.mock("../FileUtils", function () {
+    var actual = jest.requireActual("../FileUtils");
+    return Object.assign({}, actual, {
+        writeScopeManifest: jest.fn().mockResolvedValue(undefined),
+    });
+});
+const AppUtils = __importStar(require("../appUtils"));
+// ---------- helpers ----------
+var tmpRoot;
+var ACL_SYS_ID = "bc91c2a5f334621048dff31590812771";
+function listAclFolders() {
+    var dir = path.join(tmpRoot, "sys_security_acl");
+    try {
+        return fs.readdirSync(dir).sort();
+    }
+    catch (e) {
+        return [];
+    }
+}
+describe("refresh — folder names are filesystem-safe (sys_id fallback)", function () {
+    beforeEach(function () {
+        jest.clearAllMocks();
+        tmpRoot = fs.mkdtempSync(path.join(os.tmpdir(), "dove-safe-folder-"));
+        mockConfig.getSourcePathForScope.mockReturnValue(tmpRoot);
+        mockConfig.getSourcePath.mockReturnValue(tmpRoot);
+    });
+    afterEach(function () {
+        try {
+            fs.rmSync(tmpRoot, { recursive: true, force: true });
+        }
+        catch (e) { }
+    });
+    test("a `<table>.*` ACL record is written to its sys_id folder, never `.*`", async function () {
+        // Manifest as the server returns it: keyed by the illegal display name.
+        // normalizeManifestKeys re-keys this to sys_id inside syncManifest.
+        mockClient.getManifest.mockResolvedValue({
+            scope: "x_cadso_work",
+            tables: {
+                sys_security_acl: {
+                    records: {
+                        "x_cadso_work_campaign.*": {
+                            name: "x_cadso_work_campaign.*",
+                            sys_id: ACL_SYS_ID,
+                            files: [{ name: "script", type: "js" }],
+                        },
+                    },
+                },
+            },
+        });
+        // bulkDownload echoes the RAW display name back — the bug source. The
+        // writer must not trust it for the folder path.
+        mockClient.getMissingFiles.mockResolvedValue({
+            sys_security_acl: {
+                records: {
+                    "x_cadso_work_campaign.*": {
+                        name: "x_cadso_work_campaign.*",
+                        sys_id: ACL_SYS_ID,
+                        files: [{ name: "script", type: "js", content: "// acl" }],
+                    },
+                },
+            },
+        });
+        await AppUtils.syncManifest("x_cadso_work");
+        var folders = listAclFolders();
+        expect(folders).toContain(ACL_SYS_ID);
+        expect(folders).not.toContain("x_cadso_work_campaign.*");
+        // The file landed inside the sys_id folder.
+        expect(fs.readFileSync(path.join(tmpRoot, "sys_security_acl", ACL_SYS_ID, "script.js"), "utf8")).toBe("// acl");
+    });
+    test("a filesystem-safe ACL name stays human-readable (no needless sys_id fallback)", async function () {
+        var SAFE_SYS_ID = "aa11bb22cc33dd44ee55ff6600112233";
+        mockClient.getManifest.mockResolvedValue({
+            scope: "x_cadso_work",
+            tables: {
+                sys_security_acl: {
+                    records: {
+                        x_cadso_work_campaign: {
+                            name: "x_cadso_work_campaign",
+                            sys_id: SAFE_SYS_ID,
+                            files: [{ name: "script", type: "js" }],
+                        },
+                    },
+                },
+            },
+        });
+        mockClient.getMissingFiles.mockResolvedValue({
+            sys_security_acl: {
+                records: {
+                    x_cadso_work_campaign: {
+                        name: "x_cadso_work_campaign",
+                        sys_id: SAFE_SYS_ID,
+                        files: [{ name: "script", type: "js", content: "// safe" }],
+                    },
+                },
+            },
+        });
+        await AppUtils.syncManifest("x_cadso_work");
+        var folders = listAclFolders();
+        expect(folders).toContain("x_cadso_work_campaign");
+        expect(folders).not.toContain(SAFE_SYS_ID);
+    });
+});

package/dist/tests/snClient.fallback.test.js

@@ -1,5 +1,5 @@
 "use strict";
-// Tests for the /api/cadso/dovetail/* -> /api/cadso/claude/* 404 fallback
+// Tests for the /api/cadso/dovetail_core/* -> /api/cadso/dovetail/* 404 fallback
 // in _callDovetailApi (snClient.ts). Covers: first call hits the dovetail
 // endpoint, 404 latches the legacy path with a one-time warning, subsequent
 // calls skip dovetail, and non-404 errors do NOT trigger fallback.
@@ -35,21 +35,21 @@ describe("_callDovetailApi 404 fallback", function () {
         (0, snClient_1._resetDovetailApiFallback)();
         jest.clearAllMocks();
     });
-    it("first request hits /api/cadso/dovetail/<op>", async function () {
+    it("first request hits /api/cadso/dovetail_core/<op>", async function () {
         var seen = [];
         var call = jest.fn(async function (endpoint) {
             seen.push(endpoint);
             return makeAxiosResponse({ ok: true });
         });
         await (0, snClient_1._callDovetailApi)("changeScope", call);
-        expect(seen).toEqual(["api/cadso/dovetail/changeScope"]);
-        expect((0, snClient_1._isUsingLegacyClaudePath)()).toBe(false);
+        expect(seen).toEqual(["api/cadso/dovetail_core/changeScope"]);
+        expect((0, snClient_1._isUsingLegacyPath)()).toBe(false);
     });
-    it("on 404, retries against legacy /api/cadso/claude/<op> and warns once", async function () {
+    it("on 404, retries against legacy /api/cadso/dovetail/<op> and warns once", async function () {
         var seen = [];
         var call = jest.fn(async function (endpoint) {
             seen.push(endpoint);
-            if (endpoint.indexOf("api/cadso/dovetail/") === 0) {
+            if (endpoint.indexOf("api/cadso/dovetail_core/") === 0) {
                 throw makeAxiosError(404);
             }
             return makeAxiosResponse({ ok: true });
@@ -57,20 +57,20 @@ describe("_callDovetailApi 404 fallback", function () {
         var result = await (0, snClient_1._callDovetailApi)("changeScope", call);
         expect(result.data).toEqual({ ok: true });
         expect(seen).toEqual([
+            "api/cadso/dovetail_core/changeScope",
             "api/cadso/dovetail/changeScope",
-            "api/cadso/claude/changeScope",
         ]);
-        expect((0, snClient_1._isUsingLegacyClaudePath)()).toBe(true);
+        expect((0, snClient_1._isUsingLegacyPath)()).toBe(true);
         expect(mockLogger.warn).toHaveBeenCalledTimes(1);
         expect(mockLogger.warn.mock.calls[0][0]).toContain("[deprecation]");
+        expect(mockLogger.warn.mock.calls[0][0]).toContain("/api/cadso/dovetail_core/changeScope");
         expect(mockLogger.warn.mock.calls[0][0]).toContain("/api/cadso/dovetail/changeScope");
-        expect(mockLogger.warn.mock.calls[0][0]).toContain("/api/cadso/claude/changeScope");
     });
     it("after latching, subsequent calls skip dovetail and warn no more", async function () {
         var seen = [];
         var call = jest.fn(async function (endpoint) {
             seen.push(endpoint);
-            if (endpoint.indexOf("api/cadso/dovetail/") === 0) {
+            if (endpoint.indexOf("api/cadso/dovetail_core/") === 0) {
                 throw makeAxiosError(404);
             }
             return makeAxiosResponse({ ok: true });
@@ -81,8 +81,8 @@ describe("_callDovetailApi 404 fallback", function () {
         await (0, snClient_1._callDovetailApi)("changeScope", call);
         await (0, snClient_1._callDovetailApi)("changeUpdateSet", call);
         expect(seen).toEqual([
-            "api/cadso/claude/changeScope",
-            "api/cadso/claude/changeUpdateSet",
+            "api/cadso/dovetail/changeScope",
+            "api/cadso/dovetail/changeUpdateSet",
         ]);
         expect(mockLogger.warn).not.toHaveBeenCalled();
     });
@@ -94,7 +94,7 @@ describe("_callDovetailApi 404 fallback", function () {
             response: { status: 401 },
         });
         expect(call).toHaveBeenCalledTimes(1);
-        expect((0, snClient_1._isUsingLegacyClaudePath)()).toBe(false);
+        expect((0, snClient_1._isUsingLegacyPath)()).toBe(false);
         expect(mockLogger.warn).not.toHaveBeenCalled();
     });
     it("does NOT fall back on 500 (server error)", async function () {
@@ -105,7 +105,7 @@ describe("_callDovetailApi 404 fallback", function () {
             response: { status: 500 },
         });
         expect(call).toHaveBeenCalledTimes(1);
-        expect((0, snClient_1._isUsingLegacyClaudePath)()).toBe(false);
+        expect((0, snClient_1._isUsingLegacyPath)()).toBe(false);
         expect(mockLogger.warn).not.toHaveBeenCalled();
     });
     it("does NOT fall back on a network error with no response", async function () {
@@ -114,7 +114,7 @@ describe("_callDovetailApi 404 fallback", function () {
         });
         await expect((0, snClient_1._callDovetailApi)("changeScope", call)).rejects.toThrow("ECONNREFUSED");
         expect(call).toHaveBeenCalledTimes(1);
-        expect((0, snClient_1._isUsingLegacyClaudePath)()).toBe(false);
+        expect((0, snClient_1._isUsingLegacyPath)()).toBe(false);
         expect(mockLogger.warn).not.toHaveBeenCalled();
     });
     describe("descriptive error enrichment", function () {
@@ -129,7 +129,7 @@ describe("_callDovetailApi 404 fallback", function () {
             catch (e) {
                 expect(e.response.status).toBe(401);
                 expect(e.message).toContain("HTTP 401");
-                expect(e.message).toContain("api/cadso/dovetail/changeScope");
+                expect(e.message).toContain("api/cadso/dovetail_core/changeScope");
                 expect(e.message).toContain("User Not Authenticated");
             }
         });
@@ -148,8 +148,8 @@ describe("_callDovetailApi 404 fallback", function () {
             catch (e) {
                 expect(e.response.status).toBe(400);
                 expect(e.message).toContain("HTTP 400");
-                expect(e.message).toContain("api/cadso/dovetail/changeScope");
-                expect(e.message).toContain("Re-import the Dovetail Scripted REST API XML");
+                expect(e.message).toContain("api/cadso/dovetail_core/changeScope");
+                expect(e.message).toContain("Install the Dovetail application's Scripted REST APIs");
             }
         });
         it("does NOT add the missing-endpoint hint for unrelated 400s", async function () {
@@ -163,14 +163,14 @@ describe("_callDovetailApi 404 fallback", function () {
             catch (e) {
                 expect(e.message).toContain("HTTP 400");
                 expect(e.message).toContain("Invalid scope name");
-                expect(e.message).not.toContain("Re-import the Dovetail Scripted REST API XML");
+                expect(e.message).not.toContain("Install the Dovetail application's Scripted REST APIs");
             }
         });
         it("after fallback latches, errors from the legacy path are also enriched", async function () {
             var calls = [];
             var call = jest.fn(async function (endpoint) {
                 calls.push(endpoint);
-                if (endpoint.indexOf("api/cadso/dovetail/") === 0) {
+                if (endpoint.indexOf("api/cadso/dovetail_core/") === 0) {
                     throw makeAxiosError(404, {});
                 }
                 throw makeAxiosError(500, { error: { message: "boom" } });
@@ -181,12 +181,12 @@ describe("_callDovetailApi 404 fallback", function () {
             }
             catch (e) {
                 expect(calls).toEqual([
+                    "api/cadso/dovetail_core/changeScope",
                     "api/cadso/dovetail/changeScope",
-                    "api/cadso/claude/changeScope",
                 ]);
                 expect(e.response.status).toBe(500);
                 expect(e.message).toContain("HTTP 500");
-                expect(e.message).toContain("api/cadso/claude/changeScope");
+                expect(e.message).toContain("api/cadso/dovetail/changeScope");
                 expect(e.message).toContain("boom");
             }
         });

package/dist/tests/unwrapSNResponseError.test.js

@@ -38,7 +38,7 @@ function makeAxiosError(overrides) {
     error.isAxiosError = true;
     error.config = {
         method: overrides.method || "post",
-        url: overrides.url || "api/sinc/sincronia/getManifest/x_cadso_example",
+        url: overrides.url || "api/cadso/dovetail_sync/getManifest/x_cadso_example",
     };
     error.response = {
         status: overrides.status,
@@ -74,7 +74,7 @@ describe("unwrapSNResponse — error handling", function () {
         var axErr = makeAxiosError({
             status: 500,
             method: "post",
-            url: "api/sinc/sincronia/getManifest/x_cadso_automate",
+            url: "api/cadso/dovetail_sync/getManifest/x_cadso_automate",
             data: snBody,
             statusText: "Internal Server Error",
         });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tenonhq/dovetail-core",
-  "version": "0.0.95",
+  "version": "0.0.97",
   "description": "Next-gen file syncer",
   "license": "GPL-3.0",
   "main": "./dist/index.js",

package/release-manifest.json

@@ -1,7 +1,333 @@
 {
   "$schema": "dovetail-manifest/v1",
-  "generated_at": "2026-05-29T16:55:37.736Z",
+  "generated_at": "2026-06-01T21:28:08.741Z",
   "events": [
+    {
+      "$schema": "dovetail-release-event/v1",
+      "event_id": "dovetail-core@0.0.96",
+      "package": "@tenonhq/dovetail-core",
+      "version": "0.0.96",
+      "prev_version": "0.0.95",
+      "published_at": "2026-06-01T21:28:08.724Z",
+      "git": {
+        "sha": "a3ea5ead48b0bd4c324e0847e7e768a43520c7ec",
+        "tag": "dovetail-core@0.0.96"
+      },
+      "semver_bump": "patch",
+      "commits": [
+        {
+          "sha": "a3ea5ead4",
+          "subject": "feat(client): point Dovetail clients at the scoped dovetail_* APIs (#132)",
+          "pr": 132
+        },
+        {
+          "sha": "93d180eef",
+          "subject": "chore(release): @tenonhq/dovetail-servicenow@0.0.9 [skip ci]"
+        },
+        {
+          "sha": "d32523991",
+          "subject": "chore(release): @tenonhq/dovetail-servicenow@0.0.8 [skip ci]"
+        },
+        {
+          "sha": "ba1c67775",
+          "subject": "chore(release): @tenonhq/dovetail-dashboard@0.0.36 [skip ci]"
+        },
+        {
+          "sha": "9901285c6",
+          "subject": "chore(release): @tenonhq/dovetail-dashboard@0.0.35 [skip ci]"
+        },
+        {
+          "sha": "55de31527",
+          "subject": "chore(release): @tenonhq/dovetail-dashboard@0.0.34 [skip ci]"
+        },
+        {
+          "sha": "776f1fc53",
+          "subject": "chore(release): @tenonhq/dovetail-sawmill@0.0.7 [skip ci]"
+        },
+        {
+          "sha": "407d6d75e",
+          "subject": "chore(release): publish 2 packages [skip ci]"
+        }
+      ],
+      "exports_delta": null,
+      "narrative": null
+    },
+    {
+      "$schema": "dovetail-release-event/v1",
+      "event_id": "dovetail-servicenow@0.0.10",
+      "package": "@tenonhq/dovetail-servicenow",
+      "version": "0.0.10",
+      "prev_version": "0.0.9",
+      "published_at": "2026-06-01T21:28:08.724Z",
+      "git": {
+        "sha": "a3ea5ead48b0bd4c324e0847e7e768a43520c7ec",
+        "tag": "dovetail-servicenow@0.0.10"
+      },
+      "semver_bump": "patch",
+      "commits": [
+        {
+          "sha": "a3ea5ead4",
+          "subject": "feat(client): point Dovetail clients at the scoped dovetail_* APIs (#132)",
+          "pr": 132
+        },
+        {
+          "sha": "93d180eef",
+          "subject": "chore(release): @tenonhq/dovetail-servicenow@0.0.9 [skip ci]"
+        }
+      ],
+      "exports_delta": null,
+      "narrative": null
+    },
+    {
+      "$schema": "dovetail-release-event/v1",
+      "event_id": "dovetail-sawmill@0.0.8",
+      "package": "@tenonhq/dovetail-sawmill",
+      "version": "0.0.8",
+      "prev_version": "0.0.7",
+      "published_at": "2026-06-01T21:28:08.724Z",
+      "git": {
+        "sha": "a3ea5ead48b0bd4c324e0847e7e768a43520c7ec",
+        "tag": "dovetail-sawmill@0.0.8"
+      },
+      "semver_bump": "patch",
+      "commits": [
+        {
+          "sha": "a3ea5ead4",
+          "subject": "feat(client): point Dovetail clients at the scoped dovetail_* APIs (#132)",
+          "pr": 132
+        },
+        {
+          "sha": "776f1fc53",
+          "subject": "chore(release): @tenonhq/dovetail-sawmill@0.0.7 [skip ci]"
+        }
+      ],
+      "exports_delta": null,
+      "narrative": null
+    },
+    {
+      "$schema": "dovetail-release-event/v1",
+      "event_id": "dovetail-servicenow@0.0.9",
+      "package": "@tenonhq/dovetail-servicenow",
+      "version": "0.0.9",
+      "prev_version": "0.0.8",
+      "published_at": "2026-05-31T16:52:41.024Z",
+      "git": {
+        "sha": "6e62bec706d10158b1f1496e3e2246a927c1c0b5",
+        "tag": "dovetail-servicenow@0.0.9"
+      },
+      "semver_bump": "patch",
+      "commits": [
+        {
+          "sha": "6e62bec70",
+          "subject": "fix(servicenow): editFlow persistence + copyFlow (dropped from #129 squash-merge) (#130)",
+          "pr": 130
+        },
+        {
+          "sha": "d32523991",
+          "subject": "chore(release): @tenonhq/dovetail-servicenow@0.0.8 [skip ci]"
+        }
+      ],
+      "exports_delta": null,
+      "narrative": null
+    },
+    {
+      "$schema": "dovetail-release-event/v1",
+      "event_id": "dovetail-servicenow@0.0.8",
+      "package": "@tenonhq/dovetail-servicenow",
+      "version": "0.0.8",
+      "prev_version": "0.0.7",
+      "published_at": "2026-05-31T03:07:57.716Z",
+      "git": {
+        "sha": "41b87ff39f4dcb7f6fd5bbbd3d3d26446d450bc6",
+        "tag": "dovetail-servicenow@0.0.8"
+      },
+      "semver_bump": "patch",
+      "commits": [
+        {
+          "sha": "41b87ff39",
+          "subject": "feat(servicenow): view + test + publish + edit flows/subflows/actions (Dovetail Flow Capability) (#129)",
+          "pr": 129
+        },
+        {
+          "sha": "cbd551e00",
+          "subject": "chore(release): @tenonhq/dovetail-servicenow@0.0.7 [skip ci]"
+        }
+      ],
+      "exports_delta": null,
+      "narrative": null
+    },
+    {
+      "$schema": "dovetail-release-event/v1",
+      "event_id": "dovetail-dashboard@0.0.36",
+      "package": "@tenonhq/dovetail-dashboard",
+      "version": "0.0.36",
+      "prev_version": "0.0.35",
+      "published_at": "2026-05-30T10:12:42.799Z",
+      "git": {
+        "sha": "fd04f052c3426e1591fcd3383c5ace29f2d9121f",
+        "tag": "dovetail-dashboard@0.0.36"
+      },
+      "semver_bump": "patch",
+      "commits": [
+        {
+          "sha": "fd04f052c",
+          "subject": "feat(dashboard): TODO side panel on claude-plans page (#127)",
+          "pr": 127
+        },
+        {
+          "sha": "9901285c6",
+          "subject": "chore(release): @tenonhq/dovetail-dashboard@0.0.35 [skip ci]"
+        }
+      ],
+      "exports_delta": null,
+      "narrative": null
+    },
+    {
+      "$schema": "dovetail-release-event/v1",
+      "event_id": "dovetail-dashboard@0.0.35",
+      "package": "@tenonhq/dovetail-dashboard",
+      "version": "0.0.35",
+      "prev_version": "0.0.34",
+      "published_at": "2026-05-30T09:01:34.128Z",
+      "git": {
+        "sha": "31178f2465068e24d4804cc467976f9ede3c9788",
+        "tag": "dovetail-dashboard@0.0.35"
+      },
+      "semver_bump": "patch",
+      "commits": [
+        {
+          "sha": "31178f246",
+          "subject": "fix(todo): apply PR #124 review findings (R-1…R-4) + unblock republish (#125)",
+          "pr": 125
+        },
+        {
+          "sha": "55de31527",
+          "subject": "chore(release): @tenonhq/dovetail-dashboard@0.0.34 [skip ci]"
+        }
+      ],
+      "exports_delta": null,
+      "narrative": null
+    },
+    {
+      "$schema": "dovetail-release-event/v1",
+      "event_id": "dovetail-dashboard@0.0.34",
+      "package": "@tenonhq/dovetail-dashboard",
+      "version": "0.0.34",
+      "prev_version": "0.0.33",
+      "published_at": "2026-05-30T08:18:23.493Z",
+      "git": {
+        "sha": "d8151d39e4fa684a3bfee0b9f5bc6f51859bffe4",
+        "tag": "dovetail-dashboard@0.0.34"
+      },
+      "semver_bump": "patch",
+      "commits": [
+        {
+          "sha": "d8151d39e",
+          "subject": "feat(todo): TODO MCP package + dashboard priority checklist (#124)",
+          "pr": 124
+        },
+        {
+          "sha": "da705804d",
+          "subject": "chore(release): @tenonhq/dovetail-dashboard@0.0.33 [skip ci]"
+        }
+      ],
+      "exports_delta": null,
+      "narrative": null
+    },
+    {
+      "$schema": "dovetail-release-event/v1",
+      "event_id": "dovetail-sawmill@0.0.7",
+      "package": "@tenonhq/dovetail-sawmill",
+      "version": "0.0.7",
+      "prev_version": "0.0.6",
+      "published_at": "2026-05-29T21:44:48.823Z",
+      "git": {
+        "sha": "1e949a30823f064a9dc603455f16cf5b10bc61d3",
+        "tag": "dovetail-sawmill@0.0.7"
+      },
+      "semver_bump": "patch",
+      "commits": [
+        {
+          "sha": "1e949a308",
+          "subject": "docs: Dovetail adoption pack (Claude operating guide, onboarding, INDEX, drift fix) (#121)",
+          "pr": 121
+        },
+        {
+          "sha": "9332fdf7a",
+          "subject": "chore(release): publish 20 packages [skip ci]"
+        },
+        {
+          "sha": "9046da774",
+          "subject": "chore(release): publish 19 packages [skip ci]"
+        }
+      ],
+      "exports_delta": null,
+      "narrative": null
+    },
+    {
+      "$schema": "dovetail-release-event/v1",
+      "event_id": "dovetail-schema@0.0.9",
+      "package": "@tenonhq/dovetail-schema",
+      "version": "0.0.9",
+      "prev_version": "0.0.8",
+      "published_at": "2026-05-29T21:30:43.647Z",
+      "git": {
+        "sha": "dac76cc7b8e6a346aa54a84c7b50c442323301fb",
+        "tag": "dovetail-schema@0.0.9"
+      },
+      "semver_bump": "patch",
+      "commits": [
+        {
+          "sha": "dac76cc7b",
+          "subject": "feat(schema): snapshots + structured drift diff for dove schema (#122)",
+          "pr": 122
+        },
+        {
+          "sha": "9332fdf7a",
+          "subject": "chore(release): publish 20 packages [skip ci]"
+        },
+        {
+          "sha": "9046da774",
+          "subject": "chore(release): publish 19 packages [skip ci]"
+        }
+      ],
+      "exports_delta": null,
+      "narrative": null
+    },
+    {
+      "$schema": "dovetail-release-event/v1",
+      "event_id": "dovetail-core@0.0.95",
+      "package": "@tenonhq/dovetail-core",
+      "version": "0.0.95",
+      "prev_version": "0.0.94",
+      "published_at": "2026-05-29T21:30:43.647Z",
+      "git": {
+        "sha": "dac76cc7b8e6a346aa54a84c7b50c442323301fb",
+        "tag": "dovetail-core@0.0.95"
+      },
+      "semver_bump": "patch",
+      "commits": [
+        {
+          "sha": "dac76cc7b",
+          "subject": "feat(schema): snapshots + structured drift diff for dove schema (#122)",
+          "pr": 122
+        },
+        {
+          "sha": "da705804d",
+          "subject": "chore(release): @tenonhq/dovetail-dashboard@0.0.33 [skip ci]"
+        },
+        {
+          "sha": "92213e1f8",
+          "subject": "chore(release): publish 2 packages [skip ci]"
+        },
+        {
+          "sha": "1d43f9122",
+          "subject": "chore(release): @tenonhq/dovetail-core@0.0.94 [skip ci]"
+        }
+      ],
+      "exports_delta": null,
+      "narrative": null
+    },
     {
       "$schema": "dovetail-release-event/v1",
       "event_id": "dovetail-dashboard@0.0.33",