@tenonhq/dovetail-servicenow 0.0.19 → 0.0.21

package/README.md

@@ -237,14 +237,21 @@ insert into `sys_db_object` **orphans** the table (a metadata row with no physic
 table, no ACLs, no scope wiring). So this replays the Studio form save: a single
 `POST /sys_db_object.do` (form-login session → `g_ck`) whose body embeds every
 column as a `sys_dictionary` list-edit XML blob (one `<record operation="add">`
-per column) plus the Application-Navigator module — yielding the real 36-record
-graph + the physical table + seeded ACLs. Friendly column types are mapped to
-ServiceNow internal types (`string` → `string_full_utf8`, Studio's real String
-type). `--dry-run` returns the plan + the column XML + the projected graph with no
-session and no writes; the pure transforms are unit-tested. **The live write path
-is pending a validated-live spike** — prefer `--dry-run`, and always verify the
-`sys_update_xml` rows landed in the intended update set. Ground truth (the HAR
-dissection) lives in the CTO repo's create-table docs.
+per column) plus the Application-Navigator module — yielding the real platform
+graph + the physical table + seeded ACLs. Before the save it switches the form
+session's **current application** to the target scope (the new table's scope is
+governed by the session app, not a form field), so the table, columns, ACLs, and
+module all land in `--scope`. Friendly column types are mapped to ServiceNow
+internal types (`string` → `string_full_utf8`, Studio's real String type).
+
+`--dry-run` returns the plan + the column XML + the projected graph with no session
+and no writes. **Validated live 2026-06-13** (tenonworkstudio): a 6-column create
+landed the correctly-scoped table, all columns, ACLs + role, the module, and the
+full graph in the pinned update set, and a scoped insert round-tripped. Still: pin
+`--update-set <sys_id>` and verify the `sys_update_xml` rows afterward. `--debug`
+adds diagnostics (app-switch status, resolved column key, assigned sys_id) to the
+result note. Ground truth (the HAR dissection) lives in the CTO repo's create-table
+docs.
 
 `test-flow` defaults to **validate** — a safe pre-flight (published? inputs match
 declared variables?) that never runs the flow; `--execute --confirm` runs it via

package/dist/cli.js

@@ -785,8 +785,13 @@ async function runCreateTable(flags) {
     var sa = flags["save-action"] || spec.saveActionSysId;
     if (sa)
         params.saveActionSysId = sa;
+    var relId = flags["columns-rel-id"] || spec.columnsRelId;
+    if (relId)
+        params.columnsRelId = relId;
     if (flags["dry-run"] === "true" || spec.dryRun === true)
         params.dryRun = true;
+    if (flags.debug === "true" || spec.debug === true)
+        params.debug = true;
     var result = await (0, table_1.createTable)(params);
     if (flags.json === "true") {
         process.stdout.write(JSON.stringify(result, null, 2) + "\n");

package/dist/createClientFromEnvFile.d.ts

@@ -0,0 +1,29 @@
+import type { ServiceNowClient } from "./client";
+import type { ServiceNowClientConfig } from "./types";
+/**
+ * Build a ServiceNowClientConfig from a `.env`-style file WITHOUT mutating the
+ * global process.env.
+ *
+ * Unlike `loadEnvFile` (which calls `dotenv.config()` and is correct for a
+ * one-shot CLI), this reads the file into a local object via `dotenv.parse` so
+ * it is safe to call repeatedly inside a long-lived process — e.g. a per-call
+ * retarget in the MCP server, where a global dotenv mutation would race across
+ * concurrent reads.
+ *
+ * Instance/auth precedence within the file mirrors `createClient`'s env
+ * precedence (SN_* > SN_DEV_* > SN_PROD_*) so a file written for either the
+ * dev-style or prod-style variable names resolves the same way. The resolved
+ * values are returned as an explicit config object — they are never read from
+ * the surrounding process.env, so the file fully determines the target.
+ *
+ * Throws if the file cannot be read, or if it does not define an instance and
+ * a complete credential pair — failing loudly rather than silently falling
+ * back to whatever instance the host process happens to be pointed at.
+ */
+export declare function resolveConfigFromEnvFile(envPath: string): ServiceNowClientConfig;
+/**
+ * Construct a ServiceNowClient bound to the instance/credentials defined in a
+ * `.env`-style file, without touching the global process.env. See
+ * `resolveConfigFromEnvFile` for the precedence and failure rules.
+ */
+export declare function createClientFromEnvFile(envPath: string): ServiceNowClient;

package/dist/createClientFromEnvFile.js

@@ -0,0 +1,63 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveConfigFromEnvFile = resolveConfigFromEnvFile;
+exports.createClientFromEnvFile = createClientFromEnvFile;
+const fs_1 = __importDefault(require("fs"));
+const dotenv_1 = __importDefault(require("dotenv"));
+const client_1 = require("./client");
+/**
+ * Build a ServiceNowClientConfig from a `.env`-style file WITHOUT mutating the
+ * global process.env.
+ *
+ * Unlike `loadEnvFile` (which calls `dotenv.config()` and is correct for a
+ * one-shot CLI), this reads the file into a local object via `dotenv.parse` so
+ * it is safe to call repeatedly inside a long-lived process — e.g. a per-call
+ * retarget in the MCP server, where a global dotenv mutation would race across
+ * concurrent reads.
+ *
+ * Instance/auth precedence within the file mirrors `createClient`'s env
+ * precedence (SN_* > SN_DEV_* > SN_PROD_*) so a file written for either the
+ * dev-style or prod-style variable names resolves the same way. The resolved
+ * values are returned as an explicit config object — they are never read from
+ * the surrounding process.env, so the file fully determines the target.
+ *
+ * Throws if the file cannot be read, or if it does not define an instance and
+ * a complete credential pair — failing loudly rather than silently falling
+ * back to whatever instance the host process happens to be pointed at.
+ */
+function resolveConfigFromEnvFile(envPath) {
+    if (typeof envPath !== "string" || envPath.length === 0) {
+        throw new Error("resolveConfigFromEnvFile: envPath must be a non-empty string.");
+    }
+    var raw;
+    try {
+        raw = fs_1.default.readFileSync(envPath, "utf8");
+    }
+    catch (e) {
+        throw new Error("Cannot read env file '" + envPath + "': " + (e && e.message ? e.message : String(e)));
+    }
+    var parsed = dotenv_1.default.parse(raw);
+    var instance = parsed.SN_INSTANCE || parsed.SN_DEV_INSTANCE || parsed.SN_PROD_INSTANCE || "";
+    var user = parsed.SN_USER || parsed.SN_DEV_USERNAME || parsed.SN_PROD_USERNAME || "";
+    var password = parsed.SN_PASSWORD || parsed.SN_DEV_PASSWORD || parsed.SN_PROD_PASSWORD || "";
+    if (!instance) {
+        throw new Error("env file '" + envPath + "' does not define a ServiceNow instance — " +
+            "set SN_INSTANCE (preferred) or SN_DEV_INSTANCE / SN_PROD_INSTANCE.");
+    }
+    if (!user || !password) {
+        throw new Error("env file '" + envPath + "' is missing ServiceNow credentials — " +
+            "set SN_USER/SN_PASSWORD (preferred) or SN_DEV_USERNAME/SN_DEV_PASSWORD (or SN_PROD_*).");
+    }
+    return { instance: instance, user: user, password: password };
+}
+/**
+ * Construct a ServiceNowClient bound to the instance/credentials defined in a
+ * `.env`-style file, without touching the global process.env. See
+ * `resolveConfigFromEnvFile` for the precedence and failure rules.
+ */
+function createClientFromEnvFile(envPath) {
+    return (0, client_1.createClient)(resolveConfigFromEnvFile(envPath));
+}

package/dist/index.d.ts

@@ -5,6 +5,7 @@
  * REST API so every change lands in the target update set and scope.
  */
 export { createClient } from "./client";
+export { createClientFromEnvFile, resolveConfigFromEnvFile } from "./createClientFromEnvFile";
 export type { ServiceNowClient, TableQueryOptions, TableSchema, TableSchemaField } from "./client";
 export { addChoicesToField } from "./choices";
 export { formatAddChoicesResult } from "./formatter";

package/dist/index.js

@@ -6,9 +6,12 @@
  * REST API so every change lands in the target update set and scope.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_SAVE_ACTION = exports.DEFAULT_SUPER_CLASS = exports.TYPE_MAP = exports.defaultAccessFlags = exports.applyTableSaveOverlay = exports.resolveType = exports.normalizeColumns = exports.buildColumnXml = exports.projectTableGraph = exports.createTable = exports.WriteOrderError = exports.executeWritePlan = exports.topoSort = exports.generateSysId = exports.DEFAULT_RUN_FLOW_PATH = exports.testFlow = exports.editFlow = exports.buildPublishModel = exports.createFlow = exports.copyFlow = exports.publishFlow = exports.readActionType = exports.readFlow = exports.editActionType = exports.publishActionType = exports.triggerPublication = exports.cloneActionType = exports.cloneSubflow = exports.verifyArtifact = exports.listTemplates = exports.sincPlugin = exports.formatCreateViewResult = exports.formatLayoutResult = exports.setRelatedLists = exports.setFormLayout = exports.setListLayout = exports.createView = exports.formatAddChoicesResult = exports.addChoicesToField = exports.createClient = void 0;
+exports.DEFAULT_SAVE_ACTION = exports.DEFAULT_SUPER_CLASS = exports.TYPE_MAP = exports.defaultAccessFlags = exports.applyTableSaveOverlay = exports.resolveType = exports.normalizeColumns = exports.buildColumnXml = exports.projectTableGraph = exports.createTable = exports.WriteOrderError = exports.executeWritePlan = exports.topoSort = exports.generateSysId = exports.DEFAULT_RUN_FLOW_PATH = exports.testFlow = exports.editFlow = exports.buildPublishModel = exports.createFlow = exports.copyFlow = exports.publishFlow = exports.readActionType = exports.readFlow = exports.editActionType = exports.publishActionType = exports.triggerPublication = exports.cloneActionType = exports.cloneSubflow = exports.verifyArtifact = exports.listTemplates = exports.sincPlugin = exports.formatCreateViewResult = exports.formatLayoutResult = exports.setRelatedLists = exports.setFormLayout = exports.setListLayout = exports.createView = exports.formatAddChoicesResult = exports.addChoicesToField = exports.resolveConfigFromEnvFile = exports.createClientFromEnvFile = exports.createClient = void 0;
 var client_1 = require("./client");
 Object.defineProperty(exports, "createClient", { enumerable: true, get: function () { return client_1.createClient; } });
+var createClientFromEnvFile_1 = require("./createClientFromEnvFile");
+Object.defineProperty(exports, "createClientFromEnvFile", { enumerable: true, get: function () { return createClientFromEnvFile_1.createClientFromEnvFile; } });
+Object.defineProperty(exports, "resolveConfigFromEnvFile", { enumerable: true, get: function () { return createClientFromEnvFile_1.resolveConfigFromEnvFile; } });
 var choices_1 = require("./choices");
 Object.defineProperty(exports, "addChoicesToField", { enumerable: true, get: function () { return choices_1.addChoicesToField; } });
 var formatter_1 = require("./formatter");

package/dist/mcp/schemas.d.ts

@@ -432,7 +432,9 @@ export declare var createTableSchema: z.ZodObject<{
     showInMenu: z.ZodOptional<z.ZodBoolean>;
     updateSetSysId: z.ZodOptional<z.ZodString>;
     saveActionSysId: z.ZodOptional<z.ZodString>;
+    columnsRelId: z.ZodOptional<z.ZodString>;
     dryRun: z.ZodOptional<z.ZodBoolean>;
+    debug: z.ZodOptional<z.ZodBoolean>;
 }, "strip", z.ZodTypeAny, {
     name: string;
     columns: {
@@ -445,6 +447,7 @@ export declare var createTableSchema: z.ZodObject<{
     label: string;
     scope: string;
     dryRun?: boolean | undefined;
+    debug?: boolean | undefined;
     updateSetSysId?: string | undefined;
     extendsTable?: string | undefined;
     numberPrefix?: string | undefined;
@@ -453,6 +456,7 @@ export declare var createTableSchema: z.ZodObject<{
     access?: string | undefined;
     showInMenu?: boolean | undefined;
     saveActionSysId?: string | undefined;
+    columnsRelId?: string | undefined;
 }, {
     name: string;
     columns: {
@@ -465,6 +469,7 @@ export declare var createTableSchema: z.ZodObject<{
     label: string;
     scope: string;
     dryRun?: boolean | undefined;
+    debug?: boolean | undefined;
     updateSetSysId?: string | undefined;
     extendsTable?: string | undefined;
     numberPrefix?: string | undefined;
@@ -473,4 +478,5 @@ export declare var createTableSchema: z.ZodObject<{
     access?: string | undefined;
     showInMenu?: boolean | undefined;
     saveActionSysId?: string | undefined;
+    columnsRelId?: string | undefined;
 }>;

package/dist/mcp/schemas.js

@@ -133,5 +133,7 @@ exports.createTableSchema = zod_1.z.object({
     showInMenu: zod_1.z.boolean().optional(),
     updateSetSysId: zod_1.z.string().optional(),
     saveActionSysId: zod_1.z.string().optional(),
-    dryRun: zod_1.z.boolean().optional()
+    columnsRelId: zod_1.z.string().optional(),
+    dryRun: zod_1.z.boolean().optional(),
+    debug: zod_1.z.boolean().optional()
 });

package/dist/table/buildTableSave.d.ts

@@ -48,6 +48,15 @@ export interface OverlaySpec {
     superClassLabel: string;
     scopeSysId: string;
     scopeLabel: string;
+    /**
+     * Scope sys_id to stamp the transaction with. A new table's scope is governed
+     * by the form transaction's scope, NOT the `sys_db_object.sys_scope` field — and
+     * a form-login session can't reliably switch its current application. Setting
+     * `sysparm_transaction_scope` / `sysparm_record_scope` explicitly is the same
+     * lever createFlow.ts uses to scope cross-scope writes. Without it the table,
+     * ACLs, and module land in the session user's default app. Normally === scopeSysId.
+     */
+    transactionScopeSysId: string;
     numberPrefix: string;
     userRoleSysId: string;
     userRoleLabel: string;

package/dist/table/buildTableSave.js

@@ -128,6 +128,16 @@ function applyTableSaveOverlay(base, o) {
     f["sys_db_object.sys_scope_label"] = o.scopeLabel;
     f["sys_display.sys_db_object.sys_scope"] = o.scopeLabel;
     f["sys_display.original.sys_db_object.sys_scope"] = o.scopeLabel;
+    // NOTE: do NOT set sysparm_transaction_scope / sysparm_record_scope here. Setting
+    // them on a cross-scope POST triggers ServiceNow's scope-switch interstitial, which
+    // bounces the save to welcome.do (nothing created). The session's current app —
+    // switched via setCurrentApplication() before the POST — is what scopes the table.
+    // transactionScopeSysId is retained on OverlaySpec for callers that genuinely need
+    // it, but the orchestrator leaves it empty.
+    if (o.transactionScopeSysId) {
+        f["sysparm_transaction_scope"] = o.transactionScopeSysId;
+        f["sysparm_record_scope"] = o.transactionScopeSysId;
+    }
     f["sys_db_object.number_ref.prefix"] = o.numberPrefix;
     f["sys_db_object.create_access_controls"] = flag(o.createAccessControls);
     f["ni.sys_db_object.create_access_controls"] = flag(o.createAccessControls);

package/dist/table/createTable.d.ts

@@ -9,19 +9,35 @@
  *
  * Sequence (form-login replay, modeled on flowDesigner/createFlow.ts):
  *   1. open a form session (login.do -> authenticated g_ck)
+ *   1b. switch the form session's current application to the target scope, so the
+ *       new table is scoped correctly (the session app governs scope, NOT a field)
  *   2. resolve sys_ids via the REST client (parent table, scope, role, app)
- *   3. GET the new-record form, harvest its fields (ck, encoded_record, REL id)
- *   4. overlay the table + column values, POST -> expect 302
- *   5. assert the resulting sys_update_xml landed in the pinned update set
+ *   3. GET the new-record form, harvest its fields (ck, encoded_record)
+ *   4. overlay the table + column values (columns ride a constant "Table Columns"
+ *      relId — the new-record form doesn't render related lists to harvest one from)
+ *   5. POST -> expect 302 to sys_db_object.do?sys_id=<assigned>; parse that sys_id
  *
- * NOT YET VALIDATED LIVE — this is the B2 spike surface. dryRun is pure and
- * fully tested; the live write path awaits a validated-live run before the verb /
- * MCP tool flip from Studio. ES6 only, no optional chaining, no `any`.
+ * VALIDATED LIVE 2026-06-13 (tenonworkstudio): a 6-column create landed the table,
+ * all columns, ACLs + role, the nav module, and 25 sys_update_xml rows in the pinned
+ * update set; a scoped insert round-tripped (physical table, not an orphan). The
+ * earlier defects (wrong scope, 0 columns, fabricated sys_id) are fixed here.
+ * ES6 only, no optional chaining, no `any`.
  */
 import type { ServiceNowClient } from "../client";
 import { ColumnSpec, AccessFlags } from "./buildTableSave";
 /** Default parent for a custom scoped table — what Studio picks for "extends nothing". */
 export declare var DEFAULT_SUPER_CLASS: string;
+/**
+ * The "Table Columns" sys_relationship sys_id — the related list that carries the
+ * column XML in the `sys_db_object.REL:<relId>` list-edit key. It is a shipped OOB
+ * relationship (stable across instances), so we use it as a constant: the new-record
+ * (sys_id=-1) form does NOT render related lists, so the relId can't be harvested
+ * from it — relying on harvest discovery silently dropped every column. Override via
+ * params.columnsRelId only if an instance customized it.
+ */
+export declare var DEFAULT_COLUMNS_REL_ID: string;
+/** Pull the assigned record sys_id out of a `...do?sys_id=<id>&...` 302 Location. */
+export declare function parseSysIdFromLocation(location: string): string;
 export interface CreateTableParams {
     /** REST client for sys_id resolution + the update-set assertion. */
     client: ServiceNowClient;
@@ -51,6 +67,10 @@ export interface CreateTableParams {
     updateSetSysId?: string;
     /** Override the Save UI-action sys_id (defaults to the well-known global Save). */
     saveActionSysId?: string;
+    /** Override the "Table Columns" relationship sys_id (defaults to the OOB constant). */
+    columnsRelId?: string;
+    /** Emit diagnostic detail (harvested key, scope fields, response snippet) in the result note. */
+    debug?: boolean;
     /** Instance/creds for the form session (default: env, same precedence as the client). */
     instance?: string;
     user?: string;
@@ -92,6 +112,12 @@ export interface CreateTableResult {
 }
 /** The well-known global "Save" UI action (sys_ui_action). Override per-instance if needed. */
 export declare var DEFAULT_SAVE_ACTION: string;
-/** Project the record graph a real create emits (the 36-record shape for 12 cols). */
+/**
+ * Project the record graph a real create emits (the documented 36-record shape for
+ * 12 cols + ACLs + role + menu). NOTE: a live create with Show-in-menu also re-emits
+ * the parent Application-Navigator menu into the update set, so the pinned set holds
+ * one MORE row than `total` (verified 2026-06-13: 6 cols → graph total 24, 25 rows
+ * captured). The extra row is the existing menu being touched, not a new record.
+ */
 export declare function projectTableGraph(columnCount: number, createAcls: boolean, hasRole: boolean): TableGraph;
 export declare function createTable(params: CreateTableParams): Promise<CreateTableResult>;

package/dist/table/createTable.js

@@ -10,14 +10,19 @@
  *
  * Sequence (form-login replay, modeled on flowDesigner/createFlow.ts):
  *   1. open a form session (login.do -> authenticated g_ck)
+ *   1b. switch the form session's current application to the target scope, so the
+ *       new table is scoped correctly (the session app governs scope, NOT a field)
  *   2. resolve sys_ids via the REST client (parent table, scope, role, app)
- *   3. GET the new-record form, harvest its fields (ck, encoded_record, REL id)
- *   4. overlay the table + column values, POST -> expect 302
- *   5. assert the resulting sys_update_xml landed in the pinned update set
+ *   3. GET the new-record form, harvest its fields (ck, encoded_record)
+ *   4. overlay the table + column values (columns ride a constant "Table Columns"
+ *      relId — the new-record form doesn't render related lists to harvest one from)
+ *   5. POST -> expect 302 to sys_db_object.do?sys_id=<assigned>; parse that sys_id
  *
- * NOT YET VALIDATED LIVE — this is the B2 spike surface. dryRun is pure and
- * fully tested; the live write path awaits a validated-live run before the verb /
- * MCP tool flip from Studio. ES6 only, no optional chaining, no `any`.
+ * VALIDATED LIVE 2026-06-13 (tenonworkstudio): a 6-column create landed the table,
+ * all columns, ACLs + role, the nav module, and 25 sys_update_xml rows in the pinned
+ * update set; a scoped insert round-tripped (physical table, not an orphan). The
+ * earlier defects (wrong scope, 0 columns, fabricated sys_id) are fixed here.
+ * ES6 only, no optional chaining, no `any`.
  */
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
@@ -53,7 +58,8 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEFAULT_SAVE_ACTION = exports.DEFAULT_SUPER_CLASS = void 0;
+exports.DEFAULT_SAVE_ACTION = exports.DEFAULT_COLUMNS_REL_ID = exports.DEFAULT_SUPER_CLASS = void 0;
+exports.parseSysIdFromLocation = parseSysIdFromLocation;
 exports.projectTableGraph = projectTableGraph;
 exports.createTable = createTable;
 const crypto = __importStar(require("crypto"));
@@ -62,12 +68,34 @@ const buildTableSave_1 = require("./buildTableSave");
 const formSession_1 = require("./formSession");
 /** Default parent for a custom scoped table — what Studio picks for "extends nothing". */
 exports.DEFAULT_SUPER_CLASS = "sys_metadata";
+/**
+ * The "Table Columns" sys_relationship sys_id — the related list that carries the
+ * column XML in the `sys_db_object.REL:<relId>` list-edit key. It is a shipped OOB
+ * relationship (stable across instances), so we use it as a constant: the new-record
+ * (sys_id=-1) form does NOT render related lists, so the relId can't be harvested
+ * from it — relying on harvest discovery silently dropped every column. Override via
+ * params.columnsRelId only if an instance customized it.
+ */
+exports.DEFAULT_COLUMNS_REL_ID = "4344f6f5bf1320001875647fcf0739ad";
+/** Pull the assigned record sys_id out of a `...do?sys_id=<id>&...` 302 Location. */
+function parseSysIdFromLocation(location) {
+    if (!location)
+        return "";
+    var m = String(location).match(/[?&]sys_id=([0-9a-f]{32})\b/i);
+    return m ? m[1] : "";
+}
 /** The well-known global "Save" UI action (sys_ui_action). Override per-instance if needed. */
 exports.DEFAULT_SAVE_ACTION = "3dc6c898c3201100dcc2addbdfba8fe7";
 function newSysId() {
     return crypto.randomBytes(16).toString("hex");
 }
-/** Project the record graph a real create emits (the 36-record shape for 12 cols). */
+/**
+ * Project the record graph a real create emits (the documented 36-record shape for
+ * 12 cols + ACLs + role + menu). NOTE: a live create with Show-in-menu also re-emits
+ * the parent Application-Navigator menu into the update set, so the pinned set holds
+ * one MORE row than `total` (verified 2026-06-13: 6 cols → graph total 24, 25 rows
+ * captured). The extra row is the existing menu being touched, not a new record.
+ */
 function projectTableGraph(columnCount, createAcls, hasRole) {
     var dictionary = columnCount + 1; // +1 collection row
     var labels = columnCount + 1; // table label + per-column labels
@@ -155,17 +183,24 @@ async function createTable(params) {
         roleSysId = role.sysId;
         roleLabel = role.label || String(params.userRole);
     }
+    // Resolve the app ALWAYS — it scopes the form session (setCurrentApplication),
+    // not just the optional nav module. scope may be a name or a sys_scope sys_id.
     var appSysId = "";
     var showInMenu = params.showInMenu === false ? false : true;
-    if (showInMenu) {
-        var apps = await client.table.query("sys_app", "scope=" + params.scope, 1);
-        if (apps.length > 0)
-            appSysId = String(apps[0].sys_id);
-    }
+    var appQuery = SYS_ID.test(params.scope) ? "sys_id=" + params.scope : "scope=" + params.scope;
+    var apps = await client.table.query("sys_app", appQuery, 1);
+    if (apps.length > 0)
+        appSysId = String(apps[0].sys_id);
     var saveAction = params.saveActionSysId && params.saveActionSysId.trim() ? params.saveActionSysId.trim() : exports.DEFAULT_SAVE_ACTION;
     // 1: open the form session.
     var auth = (0, formSession_1.resolveFormAuth)({ instance: params.instance, user: params.user, password: params.password });
     var session = await (0, formSession_1.openFormSession)(auth);
+    // 1b: put the form session IN the target app so the new table is scoped correctly.
+    // Without this the table lands in the session user's default app (the #1 live defect).
+    var appSwitch = { ok: false, status: 0, body: "no app resolved" };
+    if (appSysId) {
+        appSwitch = await (0, formSession_1.setCurrentApplication)(auth, session, appSysId);
+    }
     if (params.updateSetSysId) {
         // Pin the REST session's update set; the form session inherits the user pref.
         try {
@@ -176,6 +211,11 @@ async function createTable(params) {
     // 3: harvest the new-record form.
     var harvest = await (0, formSession_1.getNewRecordForm)(auth, session);
     var tableSysId = newSysId();
+    // The new-record (sys_id=-1) form doesn't render related lists, so harvest.listEditKey
+    // is normally empty — fall back to the constant "Table Columns" relId so the columns
+    // always ride the POST. Relying on the harvest alone silently produced column-less tables.
+    var relId = params.columnsRelId && params.columnsRelId.trim() ? params.columnsRelId.trim() : exports.DEFAULT_COLUMNS_REL_ID;
+    var colKey = harvest.listEditKey ? harvest.listEditKey : (0, buildTableSave_1.listEditKey)(relId);
     var overlay = {
         name: params.name,
         label: params.label,
@@ -185,6 +225,9 @@ async function createTable(params) {
         superClassLabel: superClass.label,
         scopeSysId: scopeRef.sysId,
         scopeLabel: scopeRef.label,
+        // Left empty on purpose — the form-session app switch (1b) scopes the table.
+        // Setting these triggers a cross-scope interstitial that bounces to welcome.do.
+        transactionScopeSysId: "",
         numberPrefix: params.numberPrefix ? params.numberPrefix : "",
         userRoleSysId: roleSysId,
         userRoleLabel: roleLabel,
@@ -193,16 +236,38 @@ async function createTable(params) {
         accessFlags: params.accessFlags ? params.accessFlags : (0, buildTableSave_1.defaultAccessFlags)(),
         selectedApplicationSysId: showInMenu ? appSysId : "",
         menuName: params.label,
-        listEditKey: harvest.listEditKey,
+        listEditKey: colKey,
         columnXml: columnXml
     };
     var fields = (0, buildTableSave_1.applyTableSaveOverlay)(harvest.fields, overlay);
     // 4: POST the save.
     var resp = await (0, formSession_1.postForm)(auth, session, "/sys_db_object.do", fields);
     var ok = resp.status >= 300 && resp.status < 400; // 302 on success
+    // The form assigns its own sys_id for a new record — the 302 Location is the truth,
+    // not the sys_uniqueValue we sent. Prefer the parsed id; fall back to what we sent.
+    var assignedSysId = parseSysIdFromLocation(resp.location);
+    var finalSysId = ok ? (assignedSysId || tableSysId) : "";
+    var note;
+    if (ok) {
+        note = "Created via form save. Verify the " + graph.total
+            + " records landed in scope " + scopeRef.sysId + " and the pinned update set.";
+    }
+    else {
+        note = "save POST returned " + resp.status + " (expected 302). " + resp.body.slice(0, 200);
+    }
+    if (params.debug) {
+        note += " [debug: appSwitch=" + appSwitch.status + (appSwitch.ok ? "/ok" : "/FAIL:" + appSwitch.body)
+            + " appSysId=" + (appSysId || "(none)")
+            + " harvestedListEditKey=" + (harvest.listEditKey ? "yes" : "no")
+            + " colKey=" + colKey
+            + " fieldCount=" + Object.keys(fields).length
+            + " location=" + resp.location
+            + " sentSysId=" + tableSysId
+            + " assignedSysId=" + (assignedSysId || "(unparsed)") + "]";
+    }
     return {
         status: ok ? "created" : "failed",
-        tableSysId: ok ? tableSysId : "",
+        tableSysId: finalSysId,
         name: params.name,
         label: params.label,
         scopeSysId: scopeRef.sysId,
@@ -212,9 +277,6 @@ async function createTable(params) {
         httpStatus: resp.status,
         location: resp.location,
         columnXml: columnXml,
-        note: ok
-            ? "LIVE PATH NOT YET VALIDATED — verify the " + graph.total
-                + " sys_update_xml rows landed in the pinned update set before trusting this result."
-            : "save POST returned " + resp.status + " (expected 302). " + resp.body.slice(0, 200)
+        note: note
     };
 }

package/dist/table/formSession.d.ts

@@ -8,8 +8,8 @@
  * buildColumnXml.ts. Uses Node 18+ global fetch (the package targets Node >=22).
  * ES6 only, no optional chaining.
  *
- * NOT YET VALIDATED LIVE — pending the create-table spike (B2). The HTML harvest
- * in getNewRecordForm is the documented "112-field fidelity" risk surface.
+ * VALIDATED LIVE 2026-06-13 (tenonworkstudio). setCurrentApplication() puts the
+ * session in the target scope before the save (the scope-correctness lever).
  */
 /** Resolved instance + credentials for a form session. */
 export interface FormAuth {
@@ -32,6 +32,20 @@ export interface FormSession {
 export declare function scrapeCk(html: string): string;
 /** Form-login (login.do) and return an authenticated { ck, jar }. */
 export declare function openFormSession(auth: FormAuth): Promise<FormSession>;
+/**
+ * Switch the form session's CURRENT APPLICATION to `appSysId`. A new table's scope
+ * is governed by the session's current app, not a form field — and setting
+ * `sysparm_transaction_scope` on the POST triggers a cross-scope interstitial that
+ * bounces the save to welcome.do. The faithful lever is the same app-picker the UI
+ * drives: PUT the Next-Experience concourse picker, which updates both the session's
+ * in-memory current app and the `apps.current_app` user preference. Returns true if
+ * the picker accepted the switch. Best-effort: a non-2xx is reported, not thrown.
+ */
+export declare function setCurrentApplication(auth: FormAuth, session: FormSession, appSysId: string): Promise<{
+    ok: boolean;
+    status: number;
+    body: string;
+}>;
 /** The fields harvested from the new-record form, plus the discovered list-edit key. */
 export interface HarvestedForm {
     fields: Record<string, string>;
@@ -41,11 +55,10 @@ export interface HarvestedForm {
 /**
  * GET the new sys_db_object form and harvest every hidden/input field the browser
  * would submit (sysparm_ck, sysparm_encoded_record, the dynamic `<sysid>_text`
- * field, every sys_original.* default, and the list-edit formatter key). The
- * caller overlays capability params onto `fields` before POSTing.
- *
- * NOT YET VALIDATED LIVE — the HTML parse is a best-effort harvest of the
- * documented field set; confirm against a real form during the spike.
+ * field, every sys_original.* default). The caller overlays capability params onto
+ * `fields` before POSTing. NOTE: the new-record (sys_id=-1) form does NOT render
+ * related lists, so `listEditKey` is normally empty — the caller falls back to the
+ * constant "Table Columns" relId. Validated live 2026-06-13.
  */
 export declare function getNewRecordForm(auth: FormAuth, session: FormSession): Promise<HarvestedForm>;
 /**

package/dist/table/formSession.js

@@ -9,13 +9,14 @@
  * buildColumnXml.ts. Uses Node 18+ global fetch (the package targets Node >=22).
  * ES6 only, no optional chaining.
  *
- * NOT YET VALIDATED LIVE — pending the create-table spike (B2). The HTML harvest
- * in getNewRecordForm is the documented "112-field fidelity" risk surface.
+ * VALIDATED LIVE 2026-06-13 (tenonworkstudio). setCurrentApplication() puts the
+ * session in the target scope before the save (the scope-correctness lever).
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.resolveFormAuth = resolveFormAuth;
 exports.scrapeCk = scrapeCk;
 exports.openFormSession = openFormSession;
+exports.setCurrentApplication = setCurrentApplication;
 exports.getNewRecordForm = getNewRecordForm;
 exports.parseFormInputs = parseFormInputs;
 exports.postForm = postForm;
@@ -94,14 +95,50 @@ async function openFormSession(auth) {
         throw new Error("form login failed (no authenticated g_ck) — check SN_USER/SN_PASSWORD.");
     return { ck: ck, jar: jar };
 }
+/**
+ * Switch the form session's CURRENT APPLICATION to `appSysId`. A new table's scope
+ * is governed by the session's current app, not a form field — and setting
+ * `sysparm_transaction_scope` on the POST triggers a cross-scope interstitial that
+ * bounces the save to welcome.do. The faithful lever is the same app-picker the UI
+ * drives: PUT the Next-Experience concourse picker, which updates both the session's
+ * in-memory current app and the `apps.current_app` user preference. Returns true if
+ * the picker accepted the switch. Best-effort: a non-2xx is reported, not thrown.
+ */
+async function setCurrentApplication(auth, session, appSysId) {
+    if (!appSysId)
+        return { ok: false, status: 0, body: "no appSysId" };
+    var B = base(auth);
+    var res = await fetch(B + "/api/now/ui/concoursepicker/application", {
+        method: "PUT",
+        headers: {
+            "X-UserToken": session.ck,
+            Cookie: cookieHeader(session.jar),
+            "Content-Type": "application/json",
+            Accept: "application/json"
+        },
+        // The picker's ApplicationProcessor expects `app_id` (a `value` body returns
+        // 400 "Missing Application Id").
+        body: JSON.stringify({ app_id: appSysId }),
+        redirect: "manual"
+    });
+    jarFrom(res, session.jar);
+    var body = "";
+    try {
+        body = await res.text();
+    }
+    catch (e) {
+        body = "";
+    }
+    var ok = res.status >= 200 && res.status < 300;
+    return { ok: ok, status: res.status, body: body.slice(0, 200) };
+}
 /**
  * GET the new sys_db_object form and harvest every hidden/input field the browser
  * would submit (sysparm_ck, sysparm_encoded_record, the dynamic `<sysid>_text`
- * field, every sys_original.* default, and the list-edit formatter key). The
- * caller overlays capability params onto `fields` before POSTing.
- *
- * NOT YET VALIDATED LIVE — the HTML parse is a best-effort harvest of the
- * documented field set; confirm against a real form during the spike.
+ * field, every sys_original.* default). The caller overlays capability params onto
+ * `fields` before POSTing. NOTE: the new-record (sys_id=-1) form does NOT render
+ * related lists, so `listEditKey` is normally empty — the caller falls back to the
+ * constant "Table Columns" relId. Validated live 2026-06-13.
  */
 async function getNewRecordForm(auth, session) {
     var B = base(auth);

package/dist/table/index.d.ts

@@ -3,11 +3,11 @@
  * sys_db_object.do save). See createTable.ts for the full sequence + the
  * live-validation caveat.
  */
-export { createTable, projectTableGraph, DEFAULT_SUPER_CLASS, DEFAULT_SAVE_ACTION } from "./createTable";
+export { createTable, projectTableGraph, parseSysIdFromLocation, DEFAULT_SUPER_CLASS, DEFAULT_SAVE_ACTION, DEFAULT_COLUMNS_REL_ID } from "./createTable";
 export type { CreateTableParams, CreateTableResult, TableGraph } from "./createTable";
 export { buildColumnXml, xmlEscape } from "./buildColumnXml";
 export type { NormalizedColumn } from "./buildColumnXml";
 export { normalizeColumns, resolveType, applyTableSaveOverlay, defaultAccessFlags, showInMenuKey, listEditKey, TYPE_MAP } from "./buildTableSave";
 export type { ColumnSpec, AccessFlags, OverlaySpec } from "./buildTableSave";
-export { resolveFormAuth, openFormSession, getNewRecordForm, parseFormInputs, postForm, scrapeCk } from "./formSession";
+export { resolveFormAuth, openFormSession, setCurrentApplication, getNewRecordForm, parseFormInputs, postForm, scrapeCk } from "./formSession";
 export type { FormAuth, FormSession, HarvestedForm, PostResult } from "./formSession";

package/dist/table/index.js

@@ -5,12 +5,14 @@
  * live-validation caveat.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.scrapeCk = exports.postForm = exports.parseFormInputs = exports.getNewRecordForm = exports.openFormSession = exports.resolveFormAuth = exports.TYPE_MAP = exports.listEditKey = exports.showInMenuKey = exports.defaultAccessFlags = exports.applyTableSaveOverlay = exports.resolveType = exports.normalizeColumns = exports.xmlEscape = exports.buildColumnXml = exports.DEFAULT_SAVE_ACTION = exports.DEFAULT_SUPER_CLASS = exports.projectTableGraph = exports.createTable = void 0;
+exports.scrapeCk = exports.postForm = exports.parseFormInputs = exports.getNewRecordForm = exports.setCurrentApplication = exports.openFormSession = exports.resolveFormAuth = exports.TYPE_MAP = exports.listEditKey = exports.showInMenuKey = exports.defaultAccessFlags = exports.applyTableSaveOverlay = exports.resolveType = exports.normalizeColumns = exports.xmlEscape = exports.buildColumnXml = exports.DEFAULT_COLUMNS_REL_ID = exports.DEFAULT_SAVE_ACTION = exports.DEFAULT_SUPER_CLASS = exports.parseSysIdFromLocation = exports.projectTableGraph = exports.createTable = void 0;
 var createTable_1 = require("./createTable");
 Object.defineProperty(exports, "createTable", { enumerable: true, get: function () { return createTable_1.createTable; } });
 Object.defineProperty(exports, "projectTableGraph", { enumerable: true, get: function () { return createTable_1.projectTableGraph; } });
+Object.defineProperty(exports, "parseSysIdFromLocation", { enumerable: true, get: function () { return createTable_1.parseSysIdFromLocation; } });
 Object.defineProperty(exports, "DEFAULT_SUPER_CLASS", { enumerable: true, get: function () { return createTable_1.DEFAULT_SUPER_CLASS; } });
 Object.defineProperty(exports, "DEFAULT_SAVE_ACTION", { enumerable: true, get: function () { return createTable_1.DEFAULT_SAVE_ACTION; } });
+Object.defineProperty(exports, "DEFAULT_COLUMNS_REL_ID", { enumerable: true, get: function () { return createTable_1.DEFAULT_COLUMNS_REL_ID; } });
 var buildColumnXml_1 = require("./buildColumnXml");
 Object.defineProperty(exports, "buildColumnXml", { enumerable: true, get: function () { return buildColumnXml_1.buildColumnXml; } });
 Object.defineProperty(exports, "xmlEscape", { enumerable: true, get: function () { return buildColumnXml_1.xmlEscape; } });
@@ -25,6 +27,7 @@ Object.defineProperty(exports, "TYPE_MAP", { enumerable: true, get: function ()
 var formSession_1 = require("./formSession");
 Object.defineProperty(exports, "resolveFormAuth", { enumerable: true, get: function () { return formSession_1.resolveFormAuth; } });
 Object.defineProperty(exports, "openFormSession", { enumerable: true, get: function () { return formSession_1.openFormSession; } });
+Object.defineProperty(exports, "setCurrentApplication", { enumerable: true, get: function () { return formSession_1.setCurrentApplication; } });
 Object.defineProperty(exports, "getNewRecordForm", { enumerable: true, get: function () { return formSession_1.getNewRecordForm; } });
 Object.defineProperty(exports, "parseFormInputs", { enumerable: true, get: function () { return formSession_1.parseFormInputs; } });
 Object.defineProperty(exports, "postForm", { enumerable: true, get: function () { return formSession_1.postForm; } });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tenonhq/dovetail-servicenow",
-  "version": "0.0.19",
+  "version": "0.0.21",
   "engines": {
     "node": ">=22"
   },