@tenonhq/dovetail-servicenow 0.0.39 → 0.0.40

package/README.md

@@ -516,11 +516,11 @@ Programmatic: `invokeRest({ method, path, body, confirm })` is exported, and the
 client gained `now.put` / `now.delete` / `now.invoke` (the latter returns
 `{ status, body }` verbatim) alongside the existing `now.get` / `now.post`.
 
-### Publish an app to the Store / application repository
+### Publish an app to the Store / application repository / an update set
 
 Publish a scoped application to the **ServiceNow Store**, the **company
-application repository**, or both — headlessly, with the publish's progress
-tracker polled to completion.
+application repository**, and/or **into a new update set** — headlessly, with
+each publish's progress tracker polled to completion.
 
 ```bash
 # Dry-run — the DEFAULT: resolves the app, prints the plan, publishes NOTHING
@@ -529,15 +529,21 @@ npx dove-sn publish-app --app x_cadso_filter --version 6.0.20260716 --target bot
 # Publish for real (store, then repo, same version)
 npx dove-sn publish-app --app x_cadso_filter --version 6.0.20260716 \
   --target both --dev-notes "July release" --confirm --json
+
+# Release flow on an instance WITHOUT the sn_cicd plugin: publish to the company
+# repository over the UI uploader, then capture the app into a dated update set.
+npx dove-sn publish-app --app x_cadso_filter --version 6.0.20260729 \
+  --target repo-ui,update-set --update-set-description 20260729 --confirm --json
 ```
 
 **Store publish is EXTERNALLY VISIBLE on the ServiceNow Store — treat
 `--target store --confirm` as a release.** `publish-app` is dry-run by default:
 without `--confirm` it prints the resolved plan and exits `1` (a deliberate
-refusal). `--target both` runs store then repo sequentially and short-circuits
-if the store leg fails.
+refusal). `--target` takes one target, a comma-separated list, or `both` (an
+alias for `store,repo`); targets run **in the order given** and short-circuit on
+the first failure.
 
-The two targets ride different transports:
+The targets ride different transports:
 
 - **store** replays the `sys_app` form's upload flow (`xmlhttp.do` +
   `sn_appauthor.ScopedAppUploaderAJAX`) over a form-login session — basic auth
@@ -547,13 +553,33 @@ The two targets ride different transports:
 - **repo** uses the supported CI/CD REST API (`POST /api/sn_cicd/app_repo/publish`
   + `GET /api/sn_cicd/progress/{id}`) over basic auth. The API user needs the
   `sn_cicd` role (or admin).
+- **repo-ui** reaches the *same* company repository as `repo`, but over the UI
+  uploader (`sysparm_publish_to_store=false`) instead of REST. Use it when the
+  instance has no CI/CD plugin — `tenonworkshop`, for instance, has no `sn_cicd`
+  scope and no `app_repo` service, so `repo` 404s there while `repo-ui` works.
+  It needs no Store credentials.
+- **update-set** publishes the app *into a newly created update set* via the
+  two-call `com.snc.apps.AppsAjaxProcessor` flow (`createUpdateSet` →
+  `publishToUpdateSet`). There is no REST equivalent. `--update-set-name`
+  defaults to the app's name (the dialog's field is readonly, so that is what
+  the UI submits); `--update-set-description` is conventionally the release date
+  stamp `YYYYMMDD`, which makes a whole release one query
+  (`sys_update_set` where `description=20260729`). `--include-data` maps to the
+  dialog's "Include demo data" box and defaults **off**, matching the value the
+  UI actually puts on the wire.
+
+Ordering matters when you combine them: the repo publish is what bumps
+`sys_app.version`, so put it **before** `update-set` if you want the set
+captured at the new version.
 
 `--app` accepts a scope name, `sys_app` sys_id, or app name; `--version` must be
 above the currently published version. The result carries the progress-tracker
 id, per-step states ("Packaging application", "Uploading application"), the
-Store `appLink`, and the publish's update-set sys_id where the instance reports
-one. Exit codes: `0` published or dry-run, `1` bad args/unconfirmed, `2`
-failed/timeout. Programmatic: `publishApp({ app, version, target, confirm })`.
+Store `appLink`, and the update-set sys_id — for the `update-set` target that is
+recorded as soon as the set is created, so it survives a later failure and you
+can always find (or delete) the set. Exit codes: `0` published or dry-run, `1`
+bad args/unconfirmed, `2` failed/timeout. Programmatic:
+`publishApp({ app, version, target, confirm })`.
 
 ### Export an update set (or a whole app) to importable XML
 

package/dist/cli.js

@@ -1043,15 +1043,18 @@ function printHelp() {
         "                      [--script-input <name>] [--update-set <sys_id>] [--apply] [--json])\n" +
         "  edit-flow          Patch a flow/subflow (rename, description, step inputs)\n" +
         "                     (--sys-id <sys_id> --from-json <ops.json> [--apply] [--update-set <sys_id>] [--scope <sys_id>] [--json])\n" +
-        "  publish-app        Publish a scoped app to the ServiceNow Store and/or the company\n" +
-        "                     application repository, then poll the publish to completion.\n" +
+        "  publish-app        Publish a scoped app to the ServiceNow Store, the company application\n" +
+        "                     repository, and/or a new update set, then poll each to completion.\n" +
         "                     STORE PUBLISH IS EXTERNALLY VISIBLE on the ServiceNow Store.\n" +
         "                     DRY-RUN BY DEFAULT — nothing is published without --confirm\n" +
-        "                     (--app <scope|sys_id|name> --version <v> --target store|repo|both\n" +
+        "                     (--app <scope|sys_id|name> --version <v>\n" +
+        "                      --target store|repo|repo-ui|update-set|both (comma-separated ok)\n" +
         "                      [--dev-notes <text>] [--store-user <email>] [--timeout-ms <n>]\n" +
-        "                      [--dry-run] [--json] [--confirm])\n" +
+        "                      [--update-set-name <name>] [--update-set-description <text>]\n" +
+        "                      [--include-data] [--dry-run] [--json] [--confirm])\n" +
         "                     Store creds: SN_STORE_USERNAME/SN_STORE_PASSWORD in the --env file;\n" +
-        "                     the password is never a flag. Repo publish needs the sn_cicd role.\n" +
+        "                     the password is never a flag. 'repo' needs the sn_cicd plugin+role;\n" +
+        "                     'repo-ui' reaches the same repository over the UI uploader instead.\n" +
         "  export-update-set  Export an update set to importable <unload> XML, with secret\n" +
         "                     values replaced by __SET_DURING_INSTALL__ (no opt-out).\n" +
         "                     assemble mode is READ-ONLY; complete mode marks the set\n" +
@@ -1833,8 +1836,19 @@ async function runInvokeRest(flags) {
  * dove-sn publish-app:
  *   --app <scope|sys_id|name>   Required. The sys_app to publish.
  *   --version <v>               Required. Version to publish (e.g. 6.0.20260716).
- *   --target store|repo|both    Required. STORE PUBLISH IS EXTERNALLY VISIBLE.
- *   [--dev-notes <text>]        Optional developer notes.
+ *   --target <t[,t...]>         Required. store | repo | repo-ui | update-set |
+ *                               both (= store,repo). STORE IS EXTERNALLY VISIBLE.
+ *                               repo   = CI/CD REST API (needs the sn_cicd plugin)
+ *                               repo-ui= same destination over the UI uploader,
+ *                                        for instances without sn_cicd
+ *                               update-set = publish the app INTO a new update set
+ *   [--dev-notes <text>]        Optional developer notes (uploader targets).
+ *   [--update-set-name <name>]  update-set only. Defaults to the app's name.
+ *   [--update-set-description <text>]
+ *                               update-set only. Tenon convention is the release
+ *                               date stamp (YYYYMMDD) so a release is one query.
+ *   [--include-data]            update-set only. Include demo data (default off,
+ *                               matching the observed wire value).
  *   [--store-user <email>]      Store account email (else SN_STORE_USERNAME).
  *                               The password comes ONLY from SN_STORE_PASSWORD —
  *                               there is no flag for it, ever.
@@ -1842,9 +1856,9 @@ async function runInvokeRest(flags) {
  *   [--dry-run] [--json] [--confirm]
  *
  * DRY-RUN unless --confirm: without it the resolved plan is printed and the
- * command exits 1 (a deliberate refusal, not success). --target both publishes
- * store then repo sequentially with the same version and short-circuits if the
- * store leg fails; --json emits an array of per-target results.
+ * command exits 1 (a deliberate refusal, not success). Multiple targets run
+ * sequentially with the same version and short-circuit on the first failure;
+ * --json emits an array of per-target results.
  * Exit codes: 0 published/dry-run, 1 bad args/unconfirmed, 2 failed/timeout.
  */
 async function runPublishApp(flags) {
@@ -1852,16 +1866,17 @@ async function runPublishApp(flags) {
     var version = flags.version;
     var target = flags.target;
     if (!app || !version || !target) {
-        process.stderr.write("publish-app: --app, --version and --target store|repo|both are required\n");
+        process.stderr.write("publish-app: --app, --version and --target <" +
+            publishApp_1.PUBLISH_TARGETS.join("|") +
+            "|both> are required\n");
         return 1;
     }
-    if (target !== "store" && target !== "repo" && target !== "both") {
-        process.stderr.write("publish-app: --target must be store, repo or both (got '" +
-            target +
-            "')\n");
+    var parsedTargets = (0, publishApp_1.parsePublishTargets)(target);
+    if (parsedTargets.error) {
+        process.stderr.write("publish-app: " + parsedTargets.error + "\n");
         return 1;
     }
-    var targets = target === "both" ? ["store", "repo"] : [target];
+    var targets = parsedTargets.targets;
     var dryRun = flags["dry-run"] === "true";
     var confirmed = flags.confirm === "true";
     var client = (0, client_1.createClient)({});
@@ -1880,6 +1895,16 @@ async function runPublishApp(flags) {
             params.devNotes = flags["dev-notes"];
         if (flags["store-user"])
             params.storeUsername = flags["store-user"];
+        if (flags["update-set-name"]) {
+            params.updateSetName = flags["update-set-name"];
+        }
+        // Read with !== undefined, not truthiness: an intentionally empty
+        // description must stay empty rather than silently fall back.
+        if (flags["update-set-description"] !== undefined) {
+            params.updateSetDescription = flags["update-set-description"];
+        }
+        if (flags["include-data"] === "true")
+            params.includeData = true;
         if (flags["timeout-ms"]) {
             // A NaN timeout would make the poll-loop budget check always false —
             // an infinite loop. Validate here, exit 1 on garbage.

package/dist/index.d.ts

@@ -29,7 +29,7 @@ export type { RecordWriteResult, SetFieldParams, SetFieldResult, } from "./setFi
 export type { CreateRecordParams, CreateRecordResult } from "./createRecord";
 export { invokeRest, INVOKE_REST_METHODS } from "./invokeRest";
 export type { InvokeRestParams, InvokeRestResult } from "./invokeRest";
-export { publishApp, buildStartFields, parseXmlAnswer, parseProgressTree, classifyProgress, flattenSteps, harvestProgressResults, parseCicdPublishResponse, parseCicdProgress, DEFAULT_PUBLISH_TIMEOUT_MS, PUBLISH_POLL_DELAYS_MS, } from "./publishApp";
+export { publishApp, buildStartFields, buildCreateUpdateSetFields, buildPublishToUpdateSetFields, resolveUpdateSetNaming, describeTarget, parsePublishTargets, PUBLISH_TARGETS, parseXmlAnswer, parseProgressTree, classifyProgress, flattenSteps, harvestProgressResults, parseCicdPublishResponse, parseCicdProgress, DEFAULT_PUBLISH_TIMEOUT_MS, PUBLISH_POLL_DELAYS_MS, } from "./publishApp";
 export type { PublishAppParams, PublishAppResult, PublishTarget, PublishStep, ProgressNode, CicdProgress, PublishTransport, } from "./publishApp";
 export { exportUpdateSet, renderUpdateXmlRow, renderRemoteUpdateSet, renderUnload, countUnloadRecords, countUpdateXml, fetchUpdateXmlRows, refreshTypeFields, parseStatsCount, formatUnloadDate, xmlEscape, UPDATE_XML_FIELDS, DEFAULT_PAGE_SIZE, MAX_PAGE_SIZE, DEFAULT_MAX_ROWS, } from "./exportUpdateSet";
 export type { ExportUpdateSetParams, ExportUpdateSetResult, ExportMode, ExportTransport, } from "./exportUpdateSet";

package/dist/index.js

@@ -7,8 +7,8 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.normalizeColumns = exports.buildColumnXml = exports.projectTableGraph = exports.createTable = exports.WriteOrderError = exports.executeWritePlan = exports.topoSort = exports.generateSysId = exports.DEFAULT_RUN_FLOW_PATH = exports.testFlow = exports.editFlow = exports.buildPublishModel = exports.createFlow = exports.copyFlow = exports.publishFlow = exports.readActionType = exports.readFlow = exports.formatStepPill = exports.summarizeSteps = exports.verifySteps = exports.applyStepOps = exports.editActionType = exports.publishActionType = exports.triggerPublication = exports.cloneActionType = exports.cloneSubflow = exports.verifyArtifact = exports.listTemplates = exports.sincPlugin = exports.formatCreateViewResult = exports.formatLayoutResult = exports.setRelatedLists = exports.setFormLayout = exports.setListLayout = exports.createView = exports.formatRemoveChoicesResult = exports.formatAddChoicesResult = exports.formatHostAssetsResult = exports.classifyChunks = exports.hostAssets = exports.ChoiceWriteError = exports.removeChoicesFromField = exports.addChoicesToField = exports.resolveConfigFromEnvFile = exports.createClientFromEnvFile = exports.assertWriteAllowed = exports.evaluateWriteGate = exports.isCiEnvironment = exports.resolveExecutionContext = exports.createClient = void 0;
-exports.DEFAULT_EXPORT_APP_TIMEOUT_MS = exports.buildPublishFields = exports.buildCreateSetFields = exports.exportApp = exports.DEFAULT_MAX_ROWS = exports.MAX_PAGE_SIZE = exports.DEFAULT_PAGE_SIZE = exports.UPDATE_XML_FIELDS = exports.xmlEscape = exports.formatUnloadDate = exports.parseStatsCount = exports.refreshTypeFields = exports.fetchUpdateXmlRows = exports.countUpdateXml = exports.countUnloadRecords = exports.renderUnload = exports.renderRemoteUpdateSet = exports.renderUpdateXmlRow = exports.exportUpdateSet = exports.PUBLISH_POLL_DELAYS_MS = exports.DEFAULT_PUBLISH_TIMEOUT_MS = exports.parseCicdProgress = exports.parseCicdPublishResponse = exports.harvestProgressResults = exports.flattenSteps = exports.classifyProgress = exports.parseProgressTree = exports.parseXmlAnswer = exports.buildStartFields = exports.publishApp = exports.INVOKE_REST_METHODS = exports.invokeRest = exports.createRecord = exports.setField = exports.resolveTableAttributes = exports.setTable = exports.toStoredValue = exports.resolveAttributes = exports.setColumn = exports.indexMatchesColumns = exports.parseIndexColumns = exports.addIndex = exports.deriveElement = exports.addColumn = exports.DEFAULT_SAVE_ACTION = exports.DEFAULT_SUPER_CLASS = exports.TYPE_MAP = exports.defaultAccessFlags = exports.applyTableSaveOverlay = exports.resolveType = void 0;
-exports.SECRET_INTERNAL_TYPES = exports.SENTINEL = exports.isCapturable = exports.secretFieldsFromDictionary = exports.mergeSecretRules = exports.loadSecretRules = exports.defaultSecretRules = exports.escapeRegExp = exports.encodeXmlText = exports.encodeXmlEntities = exports.stripJsonValue = exports.stripField = exports.plannedStrips = exports.recordFieldNames = exports.readRecordTable = exports.readField = exports.verifyStripped = exports.stripSecrets = void 0;
+exports.DEFAULT_PAGE_SIZE = exports.UPDATE_XML_FIELDS = exports.xmlEscape = exports.formatUnloadDate = exports.parseStatsCount = exports.refreshTypeFields = exports.fetchUpdateXmlRows = exports.countUpdateXml = exports.countUnloadRecords = exports.renderUnload = exports.renderRemoteUpdateSet = exports.renderUpdateXmlRow = exports.exportUpdateSet = exports.PUBLISH_POLL_DELAYS_MS = exports.DEFAULT_PUBLISH_TIMEOUT_MS = exports.parseCicdProgress = exports.parseCicdPublishResponse = exports.harvestProgressResults = exports.flattenSteps = exports.classifyProgress = exports.parseProgressTree = exports.parseXmlAnswer = exports.PUBLISH_TARGETS = exports.parsePublishTargets = exports.describeTarget = exports.resolveUpdateSetNaming = exports.buildPublishToUpdateSetFields = exports.buildCreateUpdateSetFields = exports.buildStartFields = exports.publishApp = exports.INVOKE_REST_METHODS = exports.invokeRest = exports.createRecord = exports.setField = exports.resolveTableAttributes = exports.setTable = exports.toStoredValue = exports.resolveAttributes = exports.setColumn = exports.indexMatchesColumns = exports.parseIndexColumns = exports.addIndex = exports.deriveElement = exports.addColumn = exports.DEFAULT_SAVE_ACTION = exports.DEFAULT_SUPER_CLASS = exports.TYPE_MAP = exports.defaultAccessFlags = exports.applyTableSaveOverlay = exports.resolveType = void 0;
+exports.SECRET_INTERNAL_TYPES = exports.SENTINEL = exports.isCapturable = exports.secretFieldsFromDictionary = exports.mergeSecretRules = exports.loadSecretRules = exports.defaultSecretRules = exports.escapeRegExp = exports.encodeXmlText = exports.encodeXmlEntities = exports.stripJsonValue = exports.stripField = exports.plannedStrips = exports.recordFieldNames = exports.readRecordTable = exports.readField = exports.verifyStripped = exports.stripSecrets = exports.DEFAULT_EXPORT_APP_TIMEOUT_MS = exports.buildPublishFields = exports.buildCreateSetFields = exports.exportApp = exports.DEFAULT_MAX_ROWS = exports.MAX_PAGE_SIZE = void 0;
 var client_1 = require("./client");
 Object.defineProperty(exports, "createClient", { enumerable: true, get: function () { return client_1.createClient; } });
 var executionContext_1 = require("./executionContext");
@@ -99,6 +99,12 @@ Object.defineProperty(exports, "INVOKE_REST_METHODS", { enumerable: true, get: f
 var publishApp_1 = require("./publishApp");
 Object.defineProperty(exports, "publishApp", { enumerable: true, get: function () { return publishApp_1.publishApp; } });
 Object.defineProperty(exports, "buildStartFields", { enumerable: true, get: function () { return publishApp_1.buildStartFields; } });
+Object.defineProperty(exports, "buildCreateUpdateSetFields", { enumerable: true, get: function () { return publishApp_1.buildCreateUpdateSetFields; } });
+Object.defineProperty(exports, "buildPublishToUpdateSetFields", { enumerable: true, get: function () { return publishApp_1.buildPublishToUpdateSetFields; } });
+Object.defineProperty(exports, "resolveUpdateSetNaming", { enumerable: true, get: function () { return publishApp_1.resolveUpdateSetNaming; } });
+Object.defineProperty(exports, "describeTarget", { enumerable: true, get: function () { return publishApp_1.describeTarget; } });
+Object.defineProperty(exports, "parsePublishTargets", { enumerable: true, get: function () { return publishApp_1.parsePublishTargets; } });
+Object.defineProperty(exports, "PUBLISH_TARGETS", { enumerable: true, get: function () { return publishApp_1.PUBLISH_TARGETS; } });
 Object.defineProperty(exports, "parseXmlAnswer", { enumerable: true, get: function () { return publishApp_1.parseXmlAnswer; } });
 Object.defineProperty(exports, "parseProgressTree", { enumerable: true, get: function () { return publishApp_1.parseProgressTree; } });
 Object.defineProperty(exports, "classifyProgress", { enumerable: true, get: function () { return publishApp_1.classifyProgress; } });

package/dist/mcp/registry.js

@@ -624,18 +624,24 @@ function buildDescriptors(deps = {}) {
         {
             name: "app_publish",
             annotations: dovetail_mcp_kit_1.WRITE_EXECUTE,
-            description: "Publish a scoped ServiceNow application to ONE target per call — the ServiceNow Store " +
-                "(target 'store') or the company Application Repository (target 'repo'); call twice to " +
-                "publish to both — then poll the publish to completion. STORE PUBLISH IS EXTERNALLY " +
-                "VISIBLE on the ServiceNow Store — treat it as a release. DRY-RUN BY DEFAULT: without " +
-                "confirm:true the resolved plan (app, current version, target) is returned and nothing is " +
-                "published. target 'store' replays the sys_app form's upload flow over a form-login session " +
-                "and requires SN_STORE_USERNAME/SN_STORE_PASSWORD in the server's env file — credentials " +
-                "never transit tool arguments. target 'repo' uses the supported CI/CD REST API " +
-                "(/api/sn_cicd/app_repo/publish) and requires the sn_cicd role. app is a scope name, " +
+            description: "Publish a scoped ServiceNow application to ONE target per call, then poll the publish to " +
+                "completion; call repeatedly to hit several targets. STORE PUBLISH IS EXTERNALLY VISIBLE " +
+                "on the ServiceNow Store — treat it as a release. DRY-RUN BY DEFAULT: without confirm:true " +
+                "the resolved plan (app, current version, target) is returned and nothing is published. " +
+                "Targets: 'store' replays the sys_app form's upload flow over a form-login session and " +
+                "requires SN_STORE_USERNAME/SN_STORE_PASSWORD in the server's env file — credentials never " +
+                "transit tool arguments. 'repo' publishes to the company Application Repository via the " +
+                "supported CI/CD REST API (/api/sn_cicd/app_repo/publish) and requires the sn_cicd plugin " +
+                "and role. 'repo-ui' reaches the SAME company repository over the UI uploader instead — use " +
+                "it on instances without sn_cicd, where 'repo' 404s. 'update-set' publishes the app INTO a " +
+                "newly created update set via the two-call AppsAjaxProcessor flow (no REST equivalent " +
+                "exists); updateSetName defaults to the app's name and updateSetDescription is conventionally " +
+                "the release date stamp (YYYYMMDD) so a whole release is one sys_update_set query. " +
+                "includeData (default false) is the dialog's 'Include demo data' box. app is a scope name, " +
                 "sys_app sys_id, or app name; version must be above the currently published version. The " +
                 "result carries the progress-tracker id, per-step states, the Store appLink, and the " +
-                "publish's update-set sys_id where the instance reports one.",
+                "update-set sys_id (for 'update-set' this is set as soon as the set is created, so it " +
+                "survives a later failure).",
             shape: schemas_1.publishAppSchema.shape,
             handler: async function (args) {
                 var p = schemas_1.publishAppSchema.parse(args);
@@ -644,6 +650,9 @@ function buildDescriptors(deps = {}) {
                     version: p.version,
                     target: p.target,
                     devNotes: p.devNotes,
+                    updateSetName: p.updateSetName,
+                    updateSetDescription: p.updateSetDescription,
+                    includeData: p.includeData,
                     confirm: p.confirm,
                     dryRun: p.dryRun,
                     timeoutMs: p.timeoutMs,

package/dist/mcp/schemas.d.ts

@@ -1099,26 +1099,35 @@ export declare var publishAppSchema: z.ZodObject<{
     app: z.ZodString;
     version: z.ZodString;
     devNotes: z.ZodOptional<z.ZodString>;
-    target: z.ZodUnion<[z.ZodLiteral<"store">, z.ZodLiteral<"repo">]>;
+    target: z.ZodUnion<[z.ZodLiteral<"store">, z.ZodLiteral<"repo">, z.ZodLiteral<"repo-ui">, z.ZodLiteral<"update-set">]>;
+    updateSetName: z.ZodOptional<z.ZodString>;
+    updateSetDescription: z.ZodOptional<z.ZodString>;
+    includeData: z.ZodOptional<z.ZodBoolean>;
     confirm: z.ZodOptional<z.ZodBoolean>;
     dryRun: z.ZodOptional<z.ZodBoolean>;
     timeoutMs: z.ZodOptional<z.ZodNumber>;
 }, "strip", z.ZodTypeAny, {
-    target: "store" | "repo";
+    target: "store" | "repo" | "repo-ui" | "update-set";
     version: string;
     app: string;
     confirm?: boolean | undefined;
     dryRun?: boolean | undefined;
+    includeData?: boolean | undefined;
     timeoutMs?: number | undefined;
     devNotes?: string | undefined;
+    updateSetName?: string | undefined;
+    updateSetDescription?: string | undefined;
 }, {
-    target: "store" | "repo";
+    target: "store" | "repo" | "repo-ui" | "update-set";
     version: string;
     app: string;
     confirm?: boolean | undefined;
     dryRun?: boolean | undefined;
+    includeData?: boolean | undefined;
     timeoutMs?: number | undefined;
     devNotes?: string | undefined;
+    updateSetName?: string | undefined;
+    updateSetDescription?: string | undefined;
 }>;
 export declare var invokeRestSchema: z.ZodObject<{
     method: z.ZodEffects<z.ZodEnum<["GET", "POST", "PUT", "DELETE"]>, "GET" | "DELETE" | "POST" | "PUT", unknown>;

package/dist/mcp/schemas.js

@@ -339,7 +339,15 @@ exports.publishAppSchema = zod_1.z.object({
     app: zod_1.z.string().min(1),
     version: zod_1.z.string().min(1),
     devNotes: zod_1.z.string().optional(),
-    target: zod_1.z.union([zod_1.z.literal("store"), zod_1.z.literal("repo")]),
+    target: zod_1.z.union([
+        zod_1.z.literal("store"),
+        zod_1.z.literal("repo"),
+        zod_1.z.literal("repo-ui"),
+        zod_1.z.literal("update-set"),
+    ]),
+    updateSetName: zod_1.z.string().optional(),
+    updateSetDescription: zod_1.z.string().optional(),
+    includeData: zod_1.z.boolean().optional(),
     confirm: zod_1.z.boolean().optional(),
     dryRun: zod_1.z.boolean().optional(),
     timeoutMs: zod_1.z.number().int().positive().optional(),

package/dist/publishApp.d.ts

@@ -1,22 +1,34 @@
 /**
- * dove-sn publish-app — publish a scoped application to the ServiceNow Store
- * and/or the company Application Repository, headlessly, then poll the
- * publish's progress tracker until it terminates.
+ * dove-sn publish-app — publish a scoped application to the ServiceNow Store,
+ * the company Application Repository, and/or a new update set, headlessly, then
+ * poll each publish's progress tracker until it terminates.
  *
- * Two engines, one result shape:
+ * Three engines, one result shape:
  *
- *   STORE  — replays the sys_app form's "Publish to ServiceNow Store" flow
- *            (ground truth: HAR capture, 2026-07-16): a form-login session
- *            POSTs /xmlhttp.do with sysparm_processor=
- *            sn_appauthor.ScopedAppUploaderAJAX & sysparm_name=start (plus the
- *            Store account credentials), then polls AJAXProgressStatusChecker/
- *            getStatus with the returned execution sys_id. Basic auth alone
- *            NO-OPS on xmlhttp.do — the form session + X-UserToken is required
- *            (proven by the sn-undo-default-push headless revert).
+ *   UPLOADER — replays the sys_app form's upload flow (ground truth: HAR
+ *            captures 2026-07-16 and 2026-07-29): a form-login session POSTs
+ *            /xmlhttp.do with sysparm_processor=
+ *            sn_appauthor.ScopedAppUploaderAJAX & sysparm_name=start, then polls
+ *            AJAXProgressStatusChecker/getStatus with the returned execution
+ *            sys_id. Basic auth alone NO-OPS on xmlhttp.do — the form session +
+ *            X-UserToken is required (proven by the sn-undo-default-push
+ *            headless revert). Serves BOTH the "store" target
+ *            (sysparm_publish_to_store=true, plus Store credentials) and the
+ *            "repo-ui" target (=false, no credentials) — the destination is one
+ *            flag apart.
  *
  *   REPO   — uses the supported CI/CD REST API: POST /api/sn_cicd/app_repo/publish
  *            (basic auth via the shared client), then polls
  *            GET /api/sn_cicd/progress/{id}. Requires the sn_cicd role (or admin).
+ *            NOTE: the plugin is absent on some instances (tenonworkshop has no
+ *            sn_cicd scope and no app_repo service) — use "repo-ui" there.
+ *
+ *   UPDATE-SET — replays the "Publish to Update Set" dialog: two POSTs to
+ *            /xmlhttp.do against com.snc.apps.AppsAjaxProcessor —
+ *            sysparm_function=createUpdateSet (answers the new sys_update_set
+ *            sys_id), then =publishToUpdateSet (answers a progress worker id) —
+ *            polled through the same AJAXProgressStatusChecker as the uploader.
+ *            There is no REST equivalent for this operation.
  *
  * STORE PUBLISH IS EXTERNALLY VISIBLE on the ServiceNow Store — the verb
  * refuses to run either engine without confirm:true (dry-run is the default).
@@ -28,7 +40,31 @@
  */
 import type { ServiceNowClient } from "./client";
 import type { FormAuth, FormSession, PostResult } from "./table";
-export type PublishTarget = "store" | "repo";
+/**
+ * - "store"      — ServiceNow Store, via ScopedAppUploaderAJAX (UI replay).
+ * - "repo"       — company app repository, via the sn_cicd CI/CD REST API.
+ * - "repo-ui"    — company app repository, via ScopedAppUploaderAJAX (UI replay).
+ *                  Use when the CI/CD plugin is absent: tenonworkshop has no
+ *                  sn_cicd scope and no app_repo service, so "repo" 404s there
+ *                  while the UI path (HAR-proven) works.
+ * - "update-set" — publish the app INTO a new update set, via the two-call
+ *                  com.snc.apps.AppsAjaxProcessor flow. No REST equivalent.
+ */
+export type PublishTarget = "store" | "repo" | "repo-ui" | "update-set";
+export declare var PUBLISH_TARGETS: ReadonlyArray<string>;
+/**
+ * Expand a CLI --target value into an ordered target list.
+ *
+ * "both" stays an alias for store,repo (back-compat). Anything else may be a
+ * comma-separated list, so one invocation can publish to the app repository AND
+ * capture the app into an update set — the order given is the order run.
+ * Returns { targets } on success or { error } with a caller-printable message;
+ * never throws, so the CLI can exit 1 cleanly on bad input.
+ */
+export declare function parsePublishTargets(raw: string): {
+    targets: Array<PublishTarget>;
+    error: string;
+};
 export interface PublishTransport {
     openSession?: (auth: FormAuth) => Promise<FormSession>;
     post?: (auth: FormAuth, session: FormSession, path: string, fields: Record<string, string>) => Promise<PostResult>;
@@ -48,6 +84,24 @@ export interface PublishAppParams {
     storeUsername?: string;
     /** Test seam only — the CLI never passes this; env SN_STORE_PASSWORD is the real source. */
     storePassword?: string;
+    /**
+     * update-set target only — the name of the update set to create. Defaults to
+     * the app's name, which is exactly what the UI dialog submits (its app_name
+     * input is readonly), so the default reproduces the manual flow.
+     */
+    updateSetName?: string;
+    /**
+     * update-set target only — the update set's description. Tenon convention is
+     * the release date stamp (YYYYMMDD) so a whole release is one query:
+     * sys_update_set where description=<stamp>.
+     */
+    updateSetDescription?: string;
+    /**
+     * update-set target only — the dialog's "Include demo data" checkbox. The
+     * checkbox renders checked, but the captured HAR sent an EMPTY string, so the
+     * default here reproduces the observed wire value rather than the markup.
+     */
+    includeData?: boolean;
     instance?: string;
     user?: string;
     password?: string;
@@ -83,11 +137,20 @@ export interface PublishAppResult {
     versionBefore: string;
     /** The version that was (or would be) published. */
     version: string;
-    /** Store: the progress-tracker sys_id. Repo: the CI/CD progress id. */
+    /**
+     * Store/repo-ui/update-set: the progress-tracker sys_id (the update-set leg's
+     * <workerid>). Repo: the CI/CD progress id.
+     */
     executionSysId: string;
-    /** Store leg only — root result["sys_update_set.sys_id"]; "" when absent. */
+    /**
+     * Store: harvested from root result["sys_update_set.sys_id"].
+     * update-set: the sys_update_set created by createUpdateSet — the whole point
+     * of the call, so it is set BEFORE the publish is polled and survives a
+     * failure (the set exists on the instance either way, and the caller needs
+     * the sys_id to clean up). "" when absent.
+     */
     updateSetSysId: string;
-    /** Store: tpp.servicenow.com editapplication URL. Repo: "". */
+    /** Store: tpp.servicenow.com editapplication URL. Everything else: "". */
     appLink: string;
     steps: Array<PublishStep>;
     polls: number;
@@ -114,6 +177,36 @@ export declare function buildStartFields(p: {
     storeUsername: string;
     storePassword: string;
 }): Record<string, string>;
+/**
+ * Field map for AppsAjaxProcessor.createUpdateSet — call 1 of the two-call
+ * "Publish to Update Set" flow (HAR ground truth). The answer attribute is the
+ * new sys_update_set sys_id.
+ *
+ * The app sys_id rides as `sysparm_appid` HERE but as `sysparm_sys_id` in call
+ * 2 (and `sysparm_app_id` in the version validator). The platform spells it
+ * differently per function and they are NOT interchangeable.
+ */
+export declare function buildCreateUpdateSetFields(p: {
+    appSysId: string;
+    updateSetName: string;
+    description: string;
+}): Record<string, string>;
+/**
+ * Field map for AppsAjaxProcessor.publishToUpdateSet — call 2. The answer
+ * attribute is the progress-worker sys_id (echoed as a <workerid> element).
+ *
+ * `sysparm_name` is the literal "start", NOT a name: the dialog composes an
+ * "<app> - <version>" label, but the generic progress viewer overwrites
+ * sysparm_name with "start" before the request leaves the browser, so the
+ * composed label never reaches the wire. The set keeps the name call 1 gave it.
+ */
+export declare function buildPublishToUpdateSetFields(p: {
+    appSysId: string;
+    updateSetSysId: string;
+    version: string;
+    description: string;
+    includeData: boolean;
+}): Record<string, string>;
 /**
  * Extract the `answer` attribute from an xmlhttp.do response envelope
  * (`<xml answer="..." .../>`) and entity-decode it. A missing/empty answer is
@@ -170,4 +263,23 @@ export interface CicdProgress {
 }
 /** CI/CD progress response → a typed snapshot. Unknown shapes become status "". */
 export declare function parseCicdProgress(body: unknown): CicdProgress;
+/**
+ * Resolve the update set's name and description.
+ *
+ * The name defaults to the app's name because the dialog's `app_name` input is
+ * READONLY — the bare app name is what the UI submits, and the live record
+ * confirms it (HAR createUpdateSet answer 2d368e8f… → sys_update_set named
+ * "@tenon/ui-side-modal"). The description defaults to empty; callers wanting
+ * the release-query convention pass the YYYYMMDD stamp.
+ */
+export declare function resolveUpdateSetNaming(p: {
+    updateSetName?: string;
+    updateSetDescription?: string;
+    appName: string;
+}): {
+    name: string;
+    description: string;
+};
+/** Human phrase for a target — used in dry-run notes and CLI output. */
+export declare function describeTarget(target: PublishTarget): string;
 export declare function publishApp(params: PublishAppParams): Promise<PublishAppResult>;

package/dist/publishApp.js

@@ -1,23 +1,35 @@
 "use strict";
 /**
- * dove-sn publish-app — publish a scoped application to the ServiceNow Store
- * and/or the company Application Repository, headlessly, then poll the
- * publish's progress tracker until it terminates.
+ * dove-sn publish-app — publish a scoped application to the ServiceNow Store,
+ * the company Application Repository, and/or a new update set, headlessly, then
+ * poll each publish's progress tracker until it terminates.
  *
- * Two engines, one result shape:
+ * Three engines, one result shape:
  *
- *   STORE  — replays the sys_app form's "Publish to ServiceNow Store" flow
- *            (ground truth: HAR capture, 2026-07-16): a form-login session
- *            POSTs /xmlhttp.do with sysparm_processor=
- *            sn_appauthor.ScopedAppUploaderAJAX & sysparm_name=start (plus the
- *            Store account credentials), then polls AJAXProgressStatusChecker/
- *            getStatus with the returned execution sys_id. Basic auth alone
- *            NO-OPS on xmlhttp.do — the form session + X-UserToken is required
- *            (proven by the sn-undo-default-push headless revert).
+ *   UPLOADER — replays the sys_app form's upload flow (ground truth: HAR
+ *            captures 2026-07-16 and 2026-07-29): a form-login session POSTs
+ *            /xmlhttp.do with sysparm_processor=
+ *            sn_appauthor.ScopedAppUploaderAJAX & sysparm_name=start, then polls
+ *            AJAXProgressStatusChecker/getStatus with the returned execution
+ *            sys_id. Basic auth alone NO-OPS on xmlhttp.do — the form session +
+ *            X-UserToken is required (proven by the sn-undo-default-push
+ *            headless revert). Serves BOTH the "store" target
+ *            (sysparm_publish_to_store=true, plus Store credentials) and the
+ *            "repo-ui" target (=false, no credentials) — the destination is one
+ *            flag apart.
  *
  *   REPO   — uses the supported CI/CD REST API: POST /api/sn_cicd/app_repo/publish
  *            (basic auth via the shared client), then polls
  *            GET /api/sn_cicd/progress/{id}. Requires the sn_cicd role (or admin).
+ *            NOTE: the plugin is absent on some instances (tenonworkshop has no
+ *            sn_cicd scope and no app_repo service) — use "repo-ui" there.
+ *
+ *   UPDATE-SET — replays the "Publish to Update Set" dialog: two POSTs to
+ *            /xmlhttp.do against com.snc.apps.AppsAjaxProcessor —
+ *            sysparm_function=createUpdateSet (answers the new sys_update_set
+ *            sys_id), then =publishToUpdateSet (answers a progress worker id) —
+ *            polled through the same AJAXProgressStatusChecker as the uploader.
+ *            There is no REST equivalent for this operation.
  *
  * STORE PUBLISH IS EXTERNALLY VISIBLE on the ServiceNow Store — the verb
  * refuses to run either engine without confirm:true (dry-run is the default).
@@ -28,8 +40,11 @@
  * never accepted as a CLI flag.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.PUBLISH_POLL_DELAYS_MS = exports.DEFAULT_PUBLISH_TIMEOUT_MS = void 0;
+exports.PUBLISH_POLL_DELAYS_MS = exports.DEFAULT_PUBLISH_TIMEOUT_MS = exports.PUBLISH_TARGETS = void 0;
+exports.parsePublishTargets = parsePublishTargets;
 exports.buildStartFields = buildStartFields;
+exports.buildCreateUpdateSetFields = buildCreateUpdateSetFields;
+exports.buildPublishToUpdateSetFields = buildPublishToUpdateSetFields;
 exports.parseXmlAnswer = parseXmlAnswer;
 exports.parseProgressTree = parseProgressTree;
 exports.classifyProgress = classifyProgress;
@@ -37,9 +52,56 @@ exports.flattenSteps = flattenSteps;
 exports.harvestProgressResults = harvestProgressResults;
 exports.parseCicdPublishResponse = parseCicdPublishResponse;
 exports.parseCicdProgress = parseCicdProgress;
+exports.resolveUpdateSetNaming = resolveUpdateSetNaming;
+exports.describeTarget = describeTarget;
 exports.publishApp = publishApp;
 const client_1 = require("./client");
 const table_1 = require("./table");
+exports.PUBLISH_TARGETS = [
+    "store",
+    "repo",
+    "repo-ui",
+    "update-set",
+];
+/**
+ * Expand a CLI --target value into an ordered target list.
+ *
+ * "both" stays an alias for store,repo (back-compat). Anything else may be a
+ * comma-separated list, so one invocation can publish to the app repository AND
+ * capture the app into an update set — the order given is the order run.
+ * Returns { targets } on success or { error } with a caller-printable message;
+ * never throws, so the CLI can exit 1 cleanly on bad input.
+ */
+function parsePublishTargets(raw) {
+    var value = String(raw || "").trim();
+    if (value === "both") {
+        return { targets: ["store", "repo"], error: "" };
+    }
+    var parts = value
+        .split(",")
+        .map(function (s) {
+        return s.trim();
+    })
+        .filter(function (s) {
+        return s.length > 0;
+    });
+    if (parts.length === 0) {
+        return { targets: [], error: "--target is empty" };
+    }
+    for (var i = 0; i < parts.length; i += 1) {
+        if (exports.PUBLISH_TARGETS.indexOf(parts[i]) === -1) {
+            return {
+                targets: [],
+                error: "--target must be one of " +
+                    exports.PUBLISH_TARGETS.join(", ") +
+                    ", 'both', or a comma-separated list of them (got '" +
+                    parts[i] +
+                    "')",
+            };
+        }
+    }
+    return { targets: parts, error: "" };
+}
 exports.DEFAULT_PUBLISH_TIMEOUT_MS = 120000;
 /** Repeat the LAST delay until the budget is spent — a publish can outrun 15s. */
 exports.PUBLISH_POLL_DELAYS_MS = [
@@ -79,6 +141,64 @@ function buildStartFields(p) {
     }
     return fields;
 }
+var APPS_AJAX_PROCESSOR = "com.snc.apps.AppsAjaxProcessor";
+/**
+ * Field map for AppsAjaxProcessor.createUpdateSet — call 1 of the two-call
+ * "Publish to Update Set" flow (HAR ground truth). The answer attribute is the
+ * new sys_update_set sys_id.
+ *
+ * The app sys_id rides as `sysparm_appid` HERE but as `sysparm_sys_id` in call
+ * 2 (and `sysparm_app_id` in the version validator). The platform spells it
+ * differently per function and they are NOT interchangeable.
+ */
+function buildCreateUpdateSetFields(p) {
+    return {
+        sysparm_processor: APPS_AJAX_PROCESSOR,
+        sysparm_scope: "global",
+        sysparm_want_session_messages: "true",
+        sysparm_function: "createUpdateSet",
+        sysparm_name: p.updateSetName,
+        sysparm_appid: p.appSysId,
+        sysparm_description: p.description,
+        // "false" = create the set but do NOT adopt it as the session's current
+        // update set. A batch that flipped the session set would silently capture
+        // unrelated writes into the last app's set.
+        sysparm_current: "false",
+        "ni.nolog.x_referer": "ignore",
+        x_referer: "sys_app.do?sys_id=" + p.appSysId,
+    };
+}
+/**
+ * Field map for AppsAjaxProcessor.publishToUpdateSet — call 2. The answer
+ * attribute is the progress-worker sys_id (echoed as a <workerid> element).
+ *
+ * `sysparm_name` is the literal "start", NOT a name: the dialog composes an
+ * "<app> - <version>" label, but the generic progress viewer overwrites
+ * sysparm_name with "start" before the request leaves the browser, so the
+ * composed label never reaches the wire. The set keeps the name call 1 gave it.
+ */
+function buildPublishToUpdateSetFields(p) {
+    return {
+        sysparm_processor: APPS_AJAX_PROCESSOR,
+        sysparm_scope: "global",
+        sysparm_want_session_messages: "true",
+        sysparm_function: "publishToUpdateSet",
+        sysparm_update_set_id: p.updateSetSysId,
+        sysparm_sys_id: p.appSysId,
+        sysparm_name: "start",
+        sysparm_version: p.version,
+        sysparm_description: p.description,
+        // The captured HAR sent an EMPTY string here even though the "Include demo
+        // data" checkbox renders checked — empty is the observed wire default and
+        // "true" is the explicit opt-in.
+        sysparm_include_data: p.includeData ? "true" : "",
+        sysparm_progress_name: "Publishing application",
+        sysparm_ajax_processor: APPS_AJAX_PROCESSOR,
+        sysparm_show_done_button: "true",
+        "ni.nolog.x_referer": "ignore",
+        x_referer: "sys_app.do?sys_id=" + p.appSysId,
+    };
+}
 /**
  * Extract the `answer` attribute from an xmlhttp.do response envelope
  * (`<xml answer="..." .../>`) and entity-decode it. A missing/empty answer is
@@ -323,78 +443,68 @@ function resolveStoreCreds(params) {
     }
     return { username: username, password: password };
 }
-async function publishToStore(params, app) {
-    var result = baseResult("store", app, params.version);
-    var creds = resolveStoreCreds(params);
-    var transport = params.transport || {};
-    var openSession = transport.openSession || table_1.openFormSession;
-    var post = transport.post || table_1.postForm;
-    var sleepFn = transport.sleep || realSleep;
-    var timeoutMs = params.timeoutMs != null ? params.timeoutMs : exports.DEFAULT_PUBLISH_TIMEOUT_MS;
-    var auth = (0, table_1.resolveFormAuth)({
-        instance: params.instance,
-        user: params.user,
-        password: params.password,
-    });
-    var session = await openSession(auth);
-    var startFields = buildStartFields({
-        appSysId: app.sysId,
-        version: params.version,
-        devNotes: params.devNotes || "",
-        target: "store",
-        storeUsername: creds.username,
-        storePassword: creds.password,
-    });
-    var startRes = await post(auth, session, "/xmlhttp.do", startFields);
-    if (startRes.status < 200 || startRes.status >= 300) {
-        result.message = "start call returned HTTP " + startRes.status;
-        result.note =
-            "publish-app: the ScopedAppUploaderAJAX start call failed (HTTP " +
-                startRes.status +
-                "): " +
-                (startRes.body || "").slice(0, 200);
-        return result;
-    }
-    var startAnswer = parseXmlAnswer(startRes.body);
-    if (startAnswer.error || !SYS_ID_RE.test(startAnswer.answer)) {
-        result.message = startAnswer.error || "answer is not a sys_id";
-        result.note =
-            "publish-app: the start call did not return an execution sys_id — " +
-                (startAnswer.error ||
-                    "got '" + startAnswer.answer.slice(0, 64) + "'") +
-                ". The upload never started.";
-        return result;
+/**
+ * Resolve the update set's name and description.
+ *
+ * The name defaults to the app's name because the dialog's `app_name` input is
+ * READONLY — the bare app name is what the UI submits, and the live record
+ * confirms it (HAR createUpdateSet answer 2d368e8f… → sys_update_set named
+ * "@tenon/ui-side-modal"). The description defaults to empty; callers wanting
+ * the release-query convention pass the YYYYMMDD stamp.
+ */
+function resolveUpdateSetNaming(p) {
+    var name = typeof p.updateSetName === "string" ? p.updateSetName.trim() : "";
+    if (!name)
+        name = String(p.appName || "").trim();
+    if (!name) {
+        throw new Error("publish-app: the update-set target needs an update set name, and the " +
+            "resolved app has no name — pass updateSetName explicitly.");
     }
-    result.executionSysId = startAnswer.answer;
+    var description = typeof p.updateSetDescription === "string" ? p.updateSetDescription : "";
+    return { name: name, description: description };
+}
+/**
+ * Poll AJAXProgressStatusChecker until the tracker reaches a terminal state.
+ *
+ * Mutates `result` (polls / status / message / note / steps) and returns the
+ * terminal progress tree — or `null` when the caller should return immediately
+ * because the outcome is already written onto `result` (timeout, transport
+ * failure, or an unparseable answer).
+ *
+ * Shared by every UI-replay target: the Store upload, the app-repo upload, and
+ * the update-set publish all report through this one tracker endpoint.
+ */
+async function pollAjaxProgress(p) {
+    var result = p.result;
     var startedAt = Date.now();
     var pollIndex = 0;
     while (true) {
         var delay = exports.PUBLISH_POLL_DELAYS_MS[Math.min(pollIndex, exports.PUBLISH_POLL_DELAYS_MS.length - 1)];
-        if (Date.now() - startedAt + delay > timeoutMs) {
+        if (Date.now() - startedAt + delay > p.timeoutMs) {
             result.status = "timeout";
             result.note =
                 "publish-app: progress tracker " +
                     result.executionSysId +
                     " did not terminate within " +
-                    timeoutMs +
+                    p.timeoutMs +
                     "ms after " +
                     result.polls +
                     " poll(s). Check /sys_execution_tracker.do?sys_id=" +
                     result.executionSysId +
                     " on the instance.";
-            return result;
+            return null;
         }
-        await sleepFn(delay);
+        await p.sleepFn(delay);
         pollIndex += 1;
         result.polls += 1;
-        var pollRes = await post(auth, session, "/xmlhttp.do", {
+        var pollRes = await p.post(p.auth, p.session, "/xmlhttp.do", {
             sysparm_processor: "AJAXProgressStatusChecker",
             sysparm_name: "getStatus",
             sysparm_scope: "global",
             sysparm_want_session_messages: "true",
             sysparm_execution_id: result.executionSysId,
             "ni.nolog.x_referer": "ignore",
-            x_referer: "sys_app.do?sys_id=" + app.sysId,
+            x_referer: "sys_app.do?sys_id=" + p.appSysId,
         });
         if (pollRes.status < 200 || pollRes.status >= 300) {
             result.message = "getStatus returned HTTP " + pollRes.status;
@@ -404,14 +514,14 @@ async function publishToStore(params, app) {
                     ") — tracker " +
                     result.executionSysId +
                     " may still be running on the instance.";
-            return result;
+            return null;
         }
         var pollAnswer = parseXmlAnswer(pollRes.body);
         if (pollAnswer.error) {
             result.message = pollAnswer.error;
             result.note =
                 "publish-app: could not read the progress answer — " + pollAnswer.error;
-            return result;
+            return null;
         }
         var tree;
         try {
@@ -420,41 +530,238 @@ async function publishToStore(params, app) {
         catch (e) {
             result.message = e instanceof Error ? e.message : String(e);
             result.note = result.message;
-            return result;
+            return null;
         }
-        var state = classifyProgress(tree);
-        if (!state.terminal)
+        if (!classifyProgress(tree).terminal)
             continue;
         result.steps = flattenSteps(tree);
         result.message = tree.message || "";
-        var harvested = harvestProgressResults(tree);
-        result.appLink = harvested.appLink;
-        result.updateSetSysId = harvested.updateSetSysId;
-        if (state.success) {
-            result.status = "published";
-            result.note =
-                "Published " +
-                    app.name +
-                    " v" +
-                    params.version +
-                    " to the ServiceNow Store" +
-                    (result.appLink ? " — " + result.appLink : "") +
-                    " (" +
-                    result.polls +
-                    " poll(s)).";
-        }
-        else {
-            result.status = "failed";
-            result.note =
-                "publish-app: store publish terminated in state " +
-                    tree.state +
-                    (result.message ? " — " + result.message : "") +
-                    ". Tracker " +
-                    result.executionSysId +
-                    ".";
-        }
+        return tree;
+    }
+}
+/**
+ * ScopedAppUploaderAJAX upload — the engine behind BOTH the Store publish and
+ * the company-app-repo publish. The two differ only by
+ * `sysparm_publish_to_store` and whether Store credentials are attached; the
+ * session, the start call, and the progress tracker are identical.
+ */
+async function publishViaUploader(params, app, target) {
+    var result = baseResult(target, app, params.version);
+    // repo-ui never carries Store credentials: publish_to_store=false makes the
+    // processor ignore them, and requiring SN_STORE_* would block an internal
+    // publish on a Store account it does not need.
+    var creds = target === "store"
+        ? resolveStoreCreds(params)
+        : { username: "", password: "" };
+    var transport = params.transport || {};
+    var openSession = transport.openSession || table_1.openFormSession;
+    var post = transport.post || table_1.postForm;
+    var sleepFn = transport.sleep || realSleep;
+    var timeoutMs = params.timeoutMs != null ? params.timeoutMs : exports.DEFAULT_PUBLISH_TIMEOUT_MS;
+    var auth = (0, table_1.resolveFormAuth)({
+        instance: params.instance,
+        user: params.user,
+        password: params.password,
+    });
+    var session = await openSession(auth);
+    var startFields = buildStartFields({
+        appSysId: app.sysId,
+        version: params.version,
+        devNotes: params.devNotes || "",
+        target: target,
+        storeUsername: creds.username,
+        storePassword: creds.password,
+    });
+    var startRes = await post(auth, session, "/xmlhttp.do", startFields);
+    if (startRes.status < 200 || startRes.status >= 300) {
+        result.message = "start call returned HTTP " + startRes.status;
+        result.note =
+            "publish-app: the ScopedAppUploaderAJAX start call failed (HTTP " +
+                startRes.status +
+                "): " +
+                (startRes.body || "").slice(0, 200);
+        return result;
+    }
+    var startAnswer = parseXmlAnswer(startRes.body);
+    if (startAnswer.error || !SYS_ID_RE.test(startAnswer.answer)) {
+        result.message = startAnswer.error || "answer is not a sys_id";
+        result.note =
+            "publish-app: the start call did not return an execution sys_id — " +
+                (startAnswer.error || "got '" + startAnswer.answer.slice(0, 64) + "'") +
+                ". The upload never started.";
+        return result;
+    }
+    result.executionSysId = startAnswer.answer;
+    var tree = await pollAjaxProgress({
+        result: result,
+        auth: auth,
+        session: session,
+        post: post,
+        sleepFn: sleepFn,
+        appSysId: app.sysId,
+        timeoutMs: timeoutMs,
+    });
+    if (!tree)
+        return result;
+    var harvested = harvestProgressResults(tree);
+    result.appLink = harvested.appLink;
+    result.updateSetSysId = harvested.updateSetSysId;
+    if (classifyProgress(tree).success) {
+        result.status = "published";
+        result.note =
+            "Published " +
+                app.name +
+                " v" +
+                params.version +
+                " to " +
+                (target === "store"
+                    ? "the ServiceNow Store"
+                    : "the company application repository") +
+                (result.appLink ? " — " + result.appLink : "") +
+                " (" +
+                result.polls +
+                " poll(s)).";
+    }
+    else {
+        result.status = "failed";
+        result.note =
+            "publish-app: " +
+                (target === "store" ? "store" : "app-repo") +
+                " publish terminated in state " +
+                tree.state +
+                (result.message ? " — " + result.message : "") +
+                ". Tracker " +
+                result.executionSysId +
+                ".";
+    }
+    return result;
+}
+/**
+ * "Publish to Update Set" — the two-call AppsAjaxProcessor flow, replayed over
+ * the same form session. Call 1 creates the sys_update_set; call 2 publishes
+ * the app into it under a progress worker.
+ *
+ * `updateSetSysId` is recorded the moment call 1 answers, BEFORE the publish is
+ * polled: if call 2 or the worker fails, the set still exists on the instance
+ * and the caller needs its sys_id to inspect or delete it.
+ */
+async function publishToUpdateSet(params, app) {
+    var result = baseResult("update-set", app, params.version);
+    var naming = resolveUpdateSetNaming({
+        updateSetName: params.updateSetName,
+        updateSetDescription: params.updateSetDescription,
+        appName: app.name,
+    });
+    var transport = params.transport || {};
+    var openSession = transport.openSession || table_1.openFormSession;
+    var post = transport.post || table_1.postForm;
+    var sleepFn = transport.sleep || realSleep;
+    var timeoutMs = params.timeoutMs != null ? params.timeoutMs : exports.DEFAULT_PUBLISH_TIMEOUT_MS;
+    var auth = (0, table_1.resolveFormAuth)({
+        instance: params.instance,
+        user: params.user,
+        password: params.password,
+    });
+    var session = await openSession(auth);
+    // --- call 1: createUpdateSet ---
+    var createRes = await post(auth, session, "/xmlhttp.do", buildCreateUpdateSetFields({
+        appSysId: app.sysId,
+        updateSetName: naming.name,
+        description: naming.description,
+    }));
+    if (createRes.status < 200 || createRes.status >= 300) {
+        result.message = "createUpdateSet returned HTTP " + createRes.status;
+        result.note =
+            "publish-app: createUpdateSet failed (HTTP " +
+                createRes.status +
+                "): " +
+                (createRes.body || "").slice(0, 200) +
+                ". No update set was created.";
+        return result;
+    }
+    var createAnswer = parseXmlAnswer(createRes.body);
+    if (createAnswer.error || !SYS_ID_RE.test(createAnswer.answer)) {
+        result.message = createAnswer.error || "answer is not a sys_id";
+        result.note =
+            "publish-app: createUpdateSet did not return an update set sys_id — " +
+                (createAnswer.error || "got '" + createAnswer.answer.slice(0, 64) + "'") +
+                ". Nothing was published.";
+        return result;
+    }
+    result.updateSetSysId = createAnswer.answer;
+    // --- call 2: publishToUpdateSet ---
+    var publishRes = await post(auth, session, "/xmlhttp.do", buildPublishToUpdateSetFields({
+        appSysId: app.sysId,
+        updateSetSysId: result.updateSetSysId,
+        version: params.version,
+        description: naming.description,
+        includeData: params.includeData === true,
+    }));
+    if (publishRes.status < 200 || publishRes.status >= 300) {
+        result.message = "publishToUpdateSet returned HTTP " + publishRes.status;
+        result.note =
+            "publish-app: publishToUpdateSet failed (HTTP " +
+                publishRes.status +
+                "): " +
+                (publishRes.body || "").slice(0, 200) +
+                ". Update set " +
+                result.updateSetSysId +
+                " was created but is EMPTY.";
+        return result;
+    }
+    var publishAnswer = parseXmlAnswer(publishRes.body);
+    if (publishAnswer.error || !SYS_ID_RE.test(publishAnswer.answer)) {
+        result.message = publishAnswer.error || "answer is not a sys_id";
+        result.note =
+            "publish-app: publishToUpdateSet did not return a worker sys_id — " +
+                (publishAnswer.error ||
+                    "got '" + publishAnswer.answer.slice(0, 64) + "'") +
+                ". Update set " +
+                result.updateSetSysId +
+                " was created but is EMPTY.";
         return result;
     }
+    result.executionSysId = publishAnswer.answer;
+    var tree = await pollAjaxProgress({
+        result: result,
+        auth: auth,
+        session: session,
+        post: post,
+        sleepFn: sleepFn,
+        appSysId: app.sysId,
+        timeoutMs: timeoutMs,
+    });
+    if (!tree)
+        return result;
+    if (classifyProgress(tree).success) {
+        result.status = "published";
+        result.note =
+            "Published " +
+                app.name +
+                " v" +
+                params.version +
+                " into update set '" +
+                naming.name +
+                "' (" +
+                result.updateSetSysId +
+                (naming.description ? ", description '" + naming.description + "'" : "") +
+                ") (" +
+                result.polls +
+                " poll(s)).";
+    }
+    else {
+        result.status = "failed";
+        result.note =
+            "publish-app: update-set publish terminated in state " +
+                tree.state +
+                (result.message ? " — " + result.message : "") +
+                ". Tracker " +
+                result.executionSysId +
+                ". Update set " +
+                result.updateSetSysId +
+                " exists and may be incomplete.";
+    }
+    return result;
 }
 async function publishToRepo(params, app, client) {
     var result = baseResult("repo", app, params.version);
@@ -523,7 +830,8 @@ async function publishToRepo(params, app, client) {
             path: "/api/sn_cicd/progress/" + encodeURIComponent(result.executionSysId),
         });
         if (progRes.status < 200 || progRes.status >= 300) {
-            result.message = "HTTP " + progRes.status + " from the CI/CD progress API";
+            result.message =
+                "HTTP " + progRes.status + " from the CI/CD progress API";
             result.note =
                 "publish-app: CI/CD progress poll failed (HTTP " +
                     progRes.status +
@@ -592,6 +900,46 @@ function maskedPreview(target, app, params) {
             : "(MISSING — set SN_STORE_PASSWORD)";
         return fields;
     }
+    if (target === "repo-ui") {
+        // No credentials are involved at all — publish_to_store=false.
+        return buildStartFields({
+            appSysId: app.sysId,
+            version: params.version,
+            devNotes: params.devNotes || "",
+            target: "repo-ui",
+            storeUsername: "",
+            storePassword: "",
+        });
+    }
+    if (target === "update-set") {
+        var naming = resolveUpdateSetNaming({
+            updateSetName: params.updateSetName,
+            updateSetDescription: params.updateSetDescription,
+            appName: app.name,
+        });
+        // Two calls, so the preview is flattened with a call-N prefix — the second
+        // call's real sysparm_update_set_id is only known at run time.
+        var flat = {};
+        var create = buildCreateUpdateSetFields({
+            appSysId: app.sysId,
+            updateSetName: naming.name,
+            description: naming.description,
+        });
+        Object.keys(create).forEach(function (k) {
+            flat["1." + k] = create[k];
+        });
+        var publish = buildPublishToUpdateSetFields({
+            appSysId: app.sysId,
+            updateSetSysId: "(sys_id returned by call 1)",
+            version: params.version,
+            description: naming.description,
+            includeData: params.includeData === true,
+        });
+        Object.keys(publish).forEach(function (k) {
+            flat["2." + k] = publish[k];
+        });
+        return flat;
+    }
     var preview = {
         method: "POST",
         path: "/api/sn_cicd/app_repo/publish?sys_id=" +
@@ -603,6 +951,16 @@ function maskedPreview(target, app, params) {
         preview.dev_notes = params.devNotes;
     return preview;
 }
+/** Human phrase for a target — used in dry-run notes and CLI output. */
+function describeTarget(target) {
+    if (target === "store")
+        return "ServiceNow Store (EXTERNALLY VISIBLE)";
+    if (target === "repo")
+        return "application repository (CI/CD REST API)";
+    if (target === "repo-ui")
+        return "company application repository (UI replay)";
+    return "new update set";
+}
 async function publishApp(params) {
     if (!params || typeof params !== "object") {
         throw new Error("publish-app: params object is required.");
@@ -613,8 +971,12 @@ async function publishApp(params) {
     if (!params.version) {
         throw new Error("publish-app: version is required.");
     }
-    if (params.target !== "store" && params.target !== "repo") {
-        throw new Error("publish-app: target must be 'store' or 'repo' (got '" +
+    if (params.target !== "store" &&
+        params.target !== "repo" &&
+        params.target !== "repo-ui" &&
+        params.target !== "update-set") {
+        throw new Error("publish-app: target must be 'store', 'repo', 'repo-ui', or " +
+            "'update-set' (got '" +
             String(params.target) +
             "').");
     }
@@ -651,14 +1013,15 @@ async function publishApp(params) {
                 ") as v" +
                 params.version +
                 " to the " +
-                (params.target === "store"
-                    ? "ServiceNow Store (EXTERNALLY VISIBLE)"
-                    : "application repository") +
+                describeTarget(params.target) +
                 ". Re-run with confirm to publish.";
         return dry;
     }
-    if (params.target === "store") {
-        return publishToStore(params, app);
+    if (params.target === "store" || params.target === "repo-ui") {
+        return publishViaUploader(params, app, params.target);
+    }
+    if (params.target === "update-set") {
+        return publishToUpdateSet(params, app);
     }
     return publishToRepo(params, app, client);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tenonhq/dovetail-servicenow",
-  "version": "0.0.39",
+  "version": "0.0.40",
   "engines": {
     "node": ">=22"
   },