@tenonhq/dovetail-servicenow 0.0.45 → 0.0.47

package/README.md

@@ -652,6 +652,73 @@ Three consequences, each reported rather than hidden:
 single request goes out. Exit codes: `0` created / skipped / dry-run, `1` bad args, `2`
 failed (the lying-row case included).
 
+### List a table's indexes
+
+```bash
+npx dove-sn index-list --table x_cadso_automate_message_batch_recipient --json
+```
+
+Read-only: no form session, no writes. **`v_db_index` is the index read surface** - and
+the only one. `sys_index` fails an API-LEVEL ACL (HTTP 403) for every identity including
+admin, and `sys_index_column` does not exist at all (HTTP 400 `Invalid table`), so there
+is no two-table index model to join and nothing to cross-check against.
+
+Each row comes back as `{ name, columns, type, rawColumns }`. `columns` is the view's
+bracketed `column_names` cell (`"[phone]"`, `"[a,b]"`) **parsed** into a list - never
+substring-matched, because `"[owner_id]"` contains `"owner"`. `type` is `access_method`.
+
+**Uniqueness is not readable.** `v_db_index` has no uniqueness field, so a unique index
+and an ordinary one are indistinguishable in it: `unique` is left **absent** rather than
+guessed, and `uniqueness-enforced` is reported in `unverified` on every result. Only a
+duplicate-insert test proves enforcement. An empty result more likely means the table name
+is wrong than that the table is unindexed - every physical table has a `PRIMARY`.
+
+### Create an index (composite and non-unique included)
+
+> **A DATABASE INDEX IS A PHYSICAL, PER-INSTANCE CHANGE. IT IS NOT CAPTURED IN AN UPDATE
+> SET AND DOES NOT TRAVEL WITH A PROMOTION.** Re-run `index-create` against every
+> environment that needs the index (dev, test, uat, staging, prod). There is deliberately
+> no `--update-set` - passing one is an error, not a silent no-op.
+
+```bash
+# Dry-run (the DEFAULT) - sends nothing and reads nothing
+npx dove-sn index-create --table x_cadso_journey_instance --columns state,created_on
+
+# Send it
+npx dove-sn index-create \
+  --table x_cadso_journey_instance --columns state,created_on --confirm --json
+```
+
+This is what `add-index` cannot do. `sys_dictionary.unique` - the only record-shaped lever
+- is **per-column and unique-only**, so composite and plain indexes have no record path at
+all. `index-create` instead replays the platform's own index-creator form
+(`sys_action=create_index`, `sysparm_index_table`, `sysparm_fields`,
+`sysparm_unique_index_SKIP`) over a form-login session. That contract is lifted from the
+instance's shipped `index_creator_information` UI macro, not from a guess, and the POST
+target is taken from the rendered page's own `<form action>`.
+
+- **Dry-run by default.** Without `--confirm` nothing is sent *and nothing is read*;
+  `--dry-run` forces a plan even with `--confirm`.
+- **Idempotent.** On the live path `v_db_index` is read first, and an index over *exactly*
+  these columns short-circuits to `already-exists` with no form session and no write.
+  Column **order** is part of an index's identity - `[a,b]` is not `[b,a]`.
+- **`--name` is refused.** The platform's form has no name input; ServiceNow names the
+  index itself. Reporting a name the instance does not carry would be a lie, so the
+  created index's *real* name is returned in `name` instead.
+- **The read-back is the proof.** After the POST the index is polled for in `v_db_index`
+  (default 10 checks, 3 s apart - a build on a populated table is asynchronous). If it
+  never appears the status is `failed`: a form processor returning a page is not evidence
+  an ALTER ran, and a unique index cannot build over duplicate values (EMPTY counts).
+- **Uniqueness is still never claimed.** `uniqueness-enforced` stays in `unverified` on
+  every status.
+
+**Requires a username+password identity that can form-log-in.** An instance on
+API-key-only auth, SSO or MFA rejects the form login however valid the API key is; the
+verb fails at the session with that diagnosis rather than a mystery 302, and no `.do`
+replay (including `create-table`'s) can work in that state.
+
+Exit codes: `0` created / already-exists / dry-run, `1` bad args, `2` failed.
+
 ### Set a field on a record
 
 Set scalar field value(s) on an **existing** data record, capture the change into
@@ -954,7 +1021,12 @@ Claude Code and agents: `create_view`, `set_list_layout`, `set_form_layout`,
 `set_related_lists`, `add_choices_to_field`, the schema verbs `create_table` /
 `add_column` / `add_index` (a single-column unique index via `sys_dictionary.unique`,
 read back from the `v_db_index` view - uniqueness enforcement is always reported
-unverified), the record-write verbs `set_field` (update scalar fields on an
+unverified) / `index_list` (read-only: a table's database indexes from `v_db_index`,
+the only index read surface - `sys_index` is API-level-ACL 403 and `sys_index_column`
+does not exist) / `index_create` (create an index, composite and non-unique included, by
+replaying the platform index-creator form; dry-run by default, idempotent, read back from
+`v_db_index` - and **not** captured in an update set, because a database index is a
+physical per-instance change), the record-write verbs `set_field` (update scalar fields on an
 existing record) and `create_record` (insert one record) — both update-set-captured
 and read-back-verified — `host_assets` (deploy a built dist/), plus the Flow Designer
 tools `flow_view` (read a flow/subflow's step graph), `action_view` (read an action

package/dist/cli.js

@@ -1300,6 +1300,25 @@ function printHelp() {
         "                     is treated exactly like a proven collision. Success is\n" +
         "                     read back from v_db_index; that view has no uniqueness field, so\n" +
         "                     ENFORCEMENT is always reported unverified.\n" +
+        "  index-list         List a table's DATABASE INDEXES from the v_db_index view (read-only)\n" +
+        "                     (--table <name> [--json])\n" +
+        "                     sys_index is API-level-ACL 403 and sys_index_column does not\n" +
+        "                     exist, so v_db_index is the only index read surface. It has no\n" +
+        "                     uniqueness field, so WHICH indexes are unique is always\n" +
+        "                     reported unverified.\n" +
+        "  index-create       Create a DATABASE INDEX (composite and non-unique included) by\n" +
+        "                     replaying the platform index-creator form, then read it back\n" +
+        "                     DRY-RUN BY DEFAULT — nothing is sent or read without --confirm\n" +
+        "                     (--table <name> --columns <a[,b,...]> [--unique]\n" +
+        "                      [--access-method <m>] [--confirm] [--dry-run]\n" +
+        "                      [--poll-attempts <n>] [--poll-interval-ms <n>] [--debug] [--json])\n" +
+        "                     A DATABASE INDEX IS PHYSICAL AND PER-INSTANCE: it is NOT captured\n" +
+        "                     in an update set and does NOT travel with a promotion — re-run it\n" +
+        "                     against every environment. There is no --update-set for that\n" +
+        "                     reason. Idempotent: an index over exactly those columns already\n" +
+        "                     present returns already-exists with no write. --name is REFUSED —\n" +
+        "                     the platform's form has no name input; the real name is returned.\n" +
+        "                     Needs a username+password identity that can form-log-in.\n" +
         "  set-column         Update an EXISTING column's SCHEMA (label/mandatory/default/read-only/max-length),\n" +
         "                     into an update set, then verify against the instance\n" +
         "                     (--table <t> --column <c> --update-set <sys_id>\n" +
@@ -1662,6 +1681,130 @@ async function runAddIndex(flags) {
         return 2;
     return 0;
 }
+/**
+ * dove-sn index-list:
+ *   --table x_cadso_automate_message_batch_recipient [--json]
+ *
+ * Read-only. Lists the table's database indexes from the v_db_index view — the only
+ * index read surface an instance exposes (sys_index is API-level-ACL 403,
+ * sys_index_column does not exist).
+ *
+ * Exit codes: 0 read, 1 bad args.
+ */
+async function runIndexList(flags) {
+    if (!flags.table) {
+        process.stderr.write("index-list: --table <name> is required\n");
+        return 1;
+    }
+    var result = await (0, table_1.listIndexes)({
+        client: (0, client_1.createClient)({}),
+        table: flags.table,
+    });
+    if (flags.json === "true") {
+        process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+        return 0;
+    }
+    process.stdout.write(result.table + " — " + result.indexes.length + " index(es)\n");
+    for (var i = 0; i < result.indexes.length; i += 1) {
+        var idx = result.indexes[i];
+        process.stdout.write("  " +
+            (idx.name || "(unnamed)") +
+            "  [" +
+            idx.columns.join(", ") +
+            "]  " +
+            (idx.type || "(no access_method)") +
+            "\n");
+    }
+    process.stdout.write(result.note + "\nUNVERIFIED: " + result.unverified.join(", ") + "\n");
+    return 0;
+}
+/**
+ * dove-sn index-create:
+ *   --table x_cadso_core_u_smoke --columns a,b [--unique] [--access-method <m>]
+ *   [--confirm] [--dry-run] [--poll-attempts <n>] [--poll-interval-ms <n>]
+ *   [--debug] [--json]
+ *
+ * DRY-RUN BY DEFAULT — nothing is sent (and nothing is even READ) without --confirm;
+ * --dry-run forces a plan even with it. There is deliberately NO --update-set: a
+ * database index is physical and is not captured in one.
+ *
+ * Exit codes: 0 created / already-exists / dry-run, 1 bad args, 2 failed (which
+ * includes "the form was posted but no index was read back").
+ */
+async function runIndexCreate(flags) {
+    var columns = splitList(flags.columns || "");
+    if (!flags.table || columns.length === 0) {
+        process.stderr.write("index-create: --table <name> and --columns <a[,b,...]> are required\n");
+        return 1;
+    }
+    if (flags["update-set"]) {
+        process.stderr.write("index-create: --update-set is not accepted. A database index is a PHYSICAL, " +
+            "PER-INSTANCE change — it is NOT captured in an update set and does not " +
+            "travel with a promotion. Run index-create against each environment.\n");
+        return 1;
+    }
+    var params = {
+        client: (0, client_1.createClient)({}),
+        table: flags.table,
+        columns: columns,
+        unique: flags.unique === "true",
+        confirm: flags.confirm === "true",
+        dryRun: flags["dry-run"] === "true",
+    };
+    if (flags.name !== undefined)
+        params.name = flags.name;
+    if (flags["access-method"])
+        params.accessMethod = flags["access-method"];
+    if (flags["form-path"])
+        params.formPath = flags["form-path"];
+    if (flags.debug === "true")
+        params.debug = true;
+    // A non-integer poll setting would make the bounded wait unbounded (or zero).
+    // Reject it here with a named message instead of letting NaN reach the loop.
+    var numeric = [
+        ["poll-attempts", "pollAttempts"],
+        ["poll-interval-ms", "pollIntervalMs"],
+    ];
+    for (var n = 0; n < numeric.length; n += 1) {
+        var raw = flags[numeric[n][0]];
+        if (raw === undefined)
+            continue;
+        var value = Number(raw);
+        if (!Number.isInteger(value) || value <= 0) {
+            process.stderr.write("index-create: --" +
+                numeric[n][0] +
+                " must be a positive integer (got '" +
+                raw +
+                "')\n");
+            return 1;
+        }
+        params[numeric[n][1]] = value;
+    }
+    var result = await (0, table_1.createIndex)(params);
+    if (flags.json === "true") {
+        process.stdout.write(JSON.stringify(result, null, 2) + "\n");
+    }
+    else {
+        process.stdout.write("[" +
+            result.status +
+            "] " +
+            result.table +
+            " [" +
+            result.columns.join(", ") +
+            "]" +
+            (result.name ? " -> " + result.name : "") +
+            (result.instance ? " on " + result.instance : "") +
+            (result.verified ? " — verified" : "") +
+            "\n" +
+            result.note +
+            "\nUNVERIFIED: " +
+            result.unverified.join(", ") +
+            "\n");
+    }
+    if (result.status === "failed")
+        return 2;
+    return 0;
+}
 /** Parse a CLI boolean flag. Bare `--mandatory` means true; `--mandatory false` means
  *  false. Anything else is rejected rather than quietly coerced to `true`. */
 function parseBoolFlag(name, raw, verb = "set-column") {
@@ -2544,6 +2687,12 @@ async function main() {
     if (parsed.command === "add-index") {
         return await runAddIndex(parsed.flags);
     }
+    if (parsed.command === "index-list") {
+        return await runIndexList(parsed.flags);
+    }
+    if (parsed.command === "index-create") {
+        return await runIndexCreate(parsed.flags);
+    }
     if (parsed.command === "set-column") {
         return await runSetColumn(parsed.flags, parsed.bare);
     }

package/dist/index.d.ts

@@ -21,8 +21,8 @@ export { sincPlugin } from "./plugin";
 export { listTemplates, verifyArtifact, cloneSubflow, cloneActionType, resolveScope, slugInternalName, fetchActionSteps, findStepInput, triggerPublication, publishActionType, editActionType, defineActionType, planActionDefinition, validateDefineSpec, applyStepOps, verifySteps, summarizeSteps, formatStepPill, readFlow, readActionType, publishFlow, copyFlow, createFlow, buildPublishModel, editFlow, testFlow, DEFAULT_RUN_FLOW_PATH, generateSysId, topoSort, executeWritePlan, WriteOrderError, } from "./flowDesigner";
 export type { TemplateRef, ListTemplatesParams, FlowKind, VerifyExpect, VerifyFound, VerifyFailure, VerifyReport, VerifyArtifactParams, CloneSubflowParams, CloneSubflowResult, CloneActionTypeParams, CloneActionTypeResult, CloneActionTypePlan, CloneActionTypeStepReport, TriggerPublicationParams, TriggerPublicationResult, PublishActionTypeParams, PublishActionTypeResult, EditActionTypeParams, EditActionTypeResult, EditActionTypeOps, DefineActionSpec, DefineActionInputSpec, DefineActionOutputSpec, DefineStepSpec, DefineStepVarSpec, DefineStepOutputSpec, DefineStepValue, DefineActionTypeParams, DefineActionTypeResult, DefineActionDiff, DefineActionPlan, PlanActionDefinitionParams, ActionView, StepView, StepOps, StepRecord, StepSummary, StepIoSummary, PatchStepScriptOp, SetStepInputOp, AddStepOutputOp, AddStepInputOp, ApplyStepOpsResult, VerifyStepsResult, ReadFlowParams, ReadFlowResult, FlowStep, FlowVariable, ReadActionTypeParams, ReadActionTypeResult, ActionIo, PublishFlowParams, PublishFlowResult, CopyFlowParams, CopyFlowResult, CreateFlowParams, CreateFlowResult, EditFlowParams, EditFlowResult, EditFlowOps, StepInputPatch, TestFlowParams, TestFlowResult, WriteOp, WriteOpResult, } from "./flowDesigner";
 export type { ServiceNowClientConfig, ChoiceValue, ChoiceType, AddChoicesParams, AddChoicesResult, ChoiceActionResult, RemoveChoicesParams, RemoveChoicesResult, ChoiceRemovalResult, DictionaryRecord, UpdateSetRecord, LayoutAction, LayoutRecordResult, LayoutResult, CreateViewParams, CreateViewResult, FormSectionSpec, SetFormLayoutParams, SetListLayoutParams, SetRelatedListsParams, ChunkRole, ChunkInfo, ChunkResult, PrunedResult, HostAssetsParams, HostAssetsResult, } from "./types";
-export { createTable, projectTableGraph, buildColumnXml, normalizeColumns, resolveType, applyTableSaveOverlay, defaultAccessFlags, TYPE_MAP, DEFAULT_SUPER_CLASS, DEFAULT_SAVE_ACTION, addColumn, deriveElement, addIndex, parseIndexColumns, indexMatchesColumns, setColumn, resolveAttributes, toStoredValue, setTable, resolveTableAttributes, } from "./table";
-export type { CreateTableParams, CreateTableResult, AddColumnParams, AddColumnResult, AddIndexParams, AddIndexResult, AddIndexVerification, SetColumnParams, SetColumnResult, ColumnAttributes, AttributeChange, SetTableParams, SetTableResult, TableAttributes, TableGraph, NormalizedColumn, ColumnSpec, AccessFlags, OverlaySpec, } from "./table";
+export { createTable, projectTableGraph, buildColumnXml, normalizeColumns, resolveType, applyTableSaveOverlay, defaultAccessFlags, TYPE_MAP, DEFAULT_SUPER_CLASS, DEFAULT_SAVE_ACTION, addColumn, deriveElement, addIndex, parseIndexColumns, indexMatchesColumns, listIndexes, createIndex, validateCreateIndex, DEFAULT_INDEX_FORM_PATH, NOT_IN_UPDATE_SET, setColumn, resolveAttributes, toStoredValue, setTable, resolveTableAttributes, } from "./table";
+export type { CreateTableParams, CreateTableResult, AddColumnParams, AddColumnResult, AddIndexParams, AddIndexResult, AddIndexVerification, ListIndexesParams, ListIndexesResult, TableIndex, CreateIndexParams, CreateIndexResult, SetColumnParams, SetColumnResult, ColumnAttributes, AttributeChange, SetTableParams, SetTableResult, TableAttributes, TableGraph, NormalizedColumn, ColumnSpec, AccessFlags, OverlaySpec, } from "./table";
 export { setField } from "./setField";
 export { createRecord } from "./createRecord";
 export type { RecordWriteResult, SetFieldParams, SetFieldResult, } from "./setField";

package/dist/index.js

@@ -7,8 +7,8 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.editFlow = exports.buildPublishModel = exports.createFlow = exports.copyFlow = exports.publishFlow = exports.readActionType = exports.readFlow = exports.formatStepPill = exports.summarizeSteps = exports.verifySteps = exports.applyStepOps = exports.validateDefineSpec = exports.planActionDefinition = exports.defineActionType = exports.editActionType = exports.publishActionType = exports.triggerPublication = exports.findStepInput = exports.fetchActionSteps = exports.slugInternalName = exports.resolveScope = exports.cloneActionType = exports.cloneSubflow = exports.verifyArtifact = exports.listTemplates = exports.sincPlugin = exports.formatCreateViewResult = exports.formatLayoutResult = exports.setRelatedLists = exports.setFormLayout = exports.setListLayout = exports.createView = exports.formatRemoveChoicesResult = exports.formatAddChoicesResult = exports.formatHostAssetsResult = exports.classifyChunks = exports.hostAssets = exports.ChoiceWriteError = exports.removeChoicesFromField = exports.addChoicesToField = exports.resolveConfigFromEnvFile = exports.createClientFromEnvFile = exports.assertWriteAllowed = exports.evaluateWriteGate = exports.isCiEnvironment = exports.resolveExecutionContext = exports.PROCESSFLOW_PATH_PREFIX = exports.isProcessflowPath = exports.resolveFlowAuth = exports.createClient = void 0;
-exports.renderRemoteUpdateSet = exports.renderUpdateXmlRow = exports.exportUpdateSet = exports.PUBLISH_POLL_DELAYS_MS = exports.DEFAULT_PUBLISH_TIMEOUT_MS = exports.parseCicdProgress = exports.parseCicdPublishResponse = exports.harvestProgressResults = exports.flattenSteps = exports.classifyProgress = exports.parseProgressTree = exports.parseXmlAnswer = exports.PUBLISH_TARGETS = exports.parsePublishTargets = exports.describeTarget = exports.resolveUpdateSetNaming = exports.buildPublishToUpdateSetFields = exports.buildCreateUpdateSetFields = exports.buildStartFields = exports.publishApp = exports.INVOKE_REST_METHODS = exports.invokeRest = exports.createRecord = exports.setField = exports.resolveTableAttributes = exports.setTable = exports.toStoredValue = exports.resolveAttributes = exports.setColumn = exports.indexMatchesColumns = exports.parseIndexColumns = exports.addIndex = exports.deriveElement = exports.addColumn = exports.DEFAULT_SAVE_ACTION = exports.DEFAULT_SUPER_CLASS = exports.TYPE_MAP = exports.defaultAccessFlags = exports.applyTableSaveOverlay = exports.resolveType = exports.normalizeColumns = exports.buildColumnXml = exports.projectTableGraph = exports.createTable = exports.WriteOrderError = exports.executeWritePlan = exports.topoSort = exports.generateSysId = exports.DEFAULT_RUN_FLOW_PATH = exports.testFlow = void 0;
-exports.SECRET_INTERNAL_TYPES = exports.SENTINEL = exports.isCapturable = exports.secretFieldsFromDictionary = exports.mergeSecretRules = exports.loadSecretRules = exports.defaultSecretRules = exports.escapeRegExp = exports.encodeXmlText = exports.encodeXmlEntities = exports.stripJsonValue = exports.stripField = exports.plannedStrips = exports.recordFieldNames = exports.readRecordTable = exports.readField = exports.verifyStripped = exports.stripSecrets = exports.DEFAULT_EXPORT_APP_TIMEOUT_MS = exports.buildPublishFields = exports.buildCreateSetFields = exports.exportApp = exports.DEFAULT_MAX_ROWS = exports.MAX_PAGE_SIZE = exports.DEFAULT_PAGE_SIZE = exports.UPDATE_XML_FIELDS = exports.xmlEscape = exports.formatUnloadDate = exports.parseStatsCount = exports.refreshTypeFields = exports.fetchUpdateXmlRows = exports.countUpdateXml = exports.countUnloadRecords = exports.renderUnload = void 0;
+exports.parseCicdProgress = exports.parseCicdPublishResponse = exports.harvestProgressResults = exports.flattenSteps = exports.classifyProgress = exports.parseProgressTree = exports.parseXmlAnswer = exports.PUBLISH_TARGETS = exports.parsePublishTargets = exports.describeTarget = exports.resolveUpdateSetNaming = exports.buildPublishToUpdateSetFields = exports.buildCreateUpdateSetFields = exports.buildStartFields = exports.publishApp = exports.INVOKE_REST_METHODS = exports.invokeRest = exports.createRecord = exports.setField = exports.resolveTableAttributes = exports.setTable = exports.toStoredValue = exports.resolveAttributes = exports.setColumn = exports.NOT_IN_UPDATE_SET = exports.DEFAULT_INDEX_FORM_PATH = exports.validateCreateIndex = exports.createIndex = exports.listIndexes = exports.indexMatchesColumns = exports.parseIndexColumns = exports.addIndex = exports.deriveElement = exports.addColumn = exports.DEFAULT_SAVE_ACTION = exports.DEFAULT_SUPER_CLASS = exports.TYPE_MAP = exports.defaultAccessFlags = exports.applyTableSaveOverlay = exports.resolveType = exports.normalizeColumns = exports.buildColumnXml = exports.projectTableGraph = exports.createTable = exports.WriteOrderError = exports.executeWritePlan = exports.topoSort = exports.generateSysId = exports.DEFAULT_RUN_FLOW_PATH = exports.testFlow = void 0;
+exports.SECRET_INTERNAL_TYPES = exports.SENTINEL = exports.isCapturable = exports.secretFieldsFromDictionary = exports.mergeSecretRules = exports.loadSecretRules = exports.defaultSecretRules = exports.escapeRegExp = exports.encodeXmlText = exports.encodeXmlEntities = exports.stripJsonValue = exports.stripField = exports.plannedStrips = exports.recordFieldNames = exports.readRecordTable = exports.readField = exports.verifyStripped = exports.stripSecrets = exports.DEFAULT_EXPORT_APP_TIMEOUT_MS = exports.buildPublishFields = exports.buildCreateSetFields = exports.exportApp = exports.DEFAULT_MAX_ROWS = exports.MAX_PAGE_SIZE = exports.DEFAULT_PAGE_SIZE = exports.UPDATE_XML_FIELDS = exports.xmlEscape = exports.formatUnloadDate = exports.parseStatsCount = exports.refreshTypeFields = exports.fetchUpdateXmlRows = exports.countUpdateXml = exports.countUnloadRecords = exports.renderUnload = exports.renderRemoteUpdateSet = exports.renderUpdateXmlRow = exports.exportUpdateSet = exports.PUBLISH_POLL_DELAYS_MS = exports.DEFAULT_PUBLISH_TIMEOUT_MS = void 0;
 var client_1 = require("./client");
 Object.defineProperty(exports, "createClient", { enumerable: true, get: function () { return client_1.createClient; } });
 Object.defineProperty(exports, "resolveFlowAuth", { enumerable: true, get: function () { return client_1.resolveFlowAuth; } });
@@ -94,6 +94,11 @@ Object.defineProperty(exports, "deriveElement", { enumerable: true, get: functio
 Object.defineProperty(exports, "addIndex", { enumerable: true, get: function () { return table_1.addIndex; } });
 Object.defineProperty(exports, "parseIndexColumns", { enumerable: true, get: function () { return table_1.parseIndexColumns; } });
 Object.defineProperty(exports, "indexMatchesColumns", { enumerable: true, get: function () { return table_1.indexMatchesColumns; } });
+Object.defineProperty(exports, "listIndexes", { enumerable: true, get: function () { return table_1.listIndexes; } });
+Object.defineProperty(exports, "createIndex", { enumerable: true, get: function () { return table_1.createIndex; } });
+Object.defineProperty(exports, "validateCreateIndex", { enumerable: true, get: function () { return table_1.validateCreateIndex; } });
+Object.defineProperty(exports, "DEFAULT_INDEX_FORM_PATH", { enumerable: true, get: function () { return table_1.DEFAULT_INDEX_FORM_PATH; } });
+Object.defineProperty(exports, "NOT_IN_UPDATE_SET", { enumerable: true, get: function () { return table_1.NOT_IN_UPDATE_SET; } });
 Object.defineProperty(exports, "setColumn", { enumerable: true, get: function () { return table_1.setColumn; } });
 Object.defineProperty(exports, "resolveAttributes", { enumerable: true, get: function () { return table_1.resolveAttributes; } });
 Object.defineProperty(exports, "toStoredValue", { enumerable: true, get: function () { return table_1.toStoredValue; } });

package/dist/mcp/registry.d.ts

@@ -10,7 +10,7 @@ import type { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
 import type { ToolAnnotations } from "@tenonhq/dovetail-mcp-kit";
 import type { ServiceNowClient } from "../client";
-export declare var TOOL_NAMES: readonly ["create_view", "set_list_layout", "set_form_layout", "set_related_lists", "add_choices_to_field", "remove_choices_from_field", "flow_view", "action_view", "action_edit", "action_clone", "action_define", "flow_publish", "flow_copy", "flow_create", "flow_test", "flow_edit", "create_table", "add_column", "add_index", "set_column", "set_table", "set_field", "create_record", "host_assets", "invoke_rest", "app_publish", "update_set_export", "app_export"];
+export declare var TOOL_NAMES: readonly ["create_view", "set_list_layout", "set_form_layout", "set_related_lists", "add_choices_to_field", "remove_choices_from_field", "flow_view", "action_view", "action_edit", "action_clone", "action_define", "flow_publish", "flow_copy", "flow_create", "flow_test", "flow_edit", "create_table", "add_column", "add_index", "index_list", "index_create", "set_column", "set_table", "set_field", "create_record", "host_assets", "invoke_rest", "app_publish", "update_set_export", "app_export"];
 export type ToolName = (typeof TOOL_NAMES)[number];
 export interface RegistryDeps {
     /** Optional client injection for tests; defaults to createClient({}). */

package/dist/mcp/registry.js

@@ -57,6 +57,8 @@ exports.TOOL_NAMES = [
     "create_table",
     "add_column",
     "add_index",
+    "index_list",
+    "index_create",
     "set_column",
     "set_table",
     "set_field",
@@ -509,6 +511,72 @@ function buildDescriptors(deps = {}) {
                 });
             },
         },
+        {
+            name: "index_list",
+            annotations: dovetail_mcp_kit_1.READ_ONLY,
+            description: "List the DATABASE INDEXES on a ServiceNow table. Read-only — no form session, no " +
+                "writes. Reads the v_db_index VIEW, which is the only index read surface an instance " +
+                "exposes: sys_index fails an API-LEVEL ACL (HTTP 403) for every identity including " +
+                "admin (an ACL that refuses GET refuses POST), and sys_index_column does not exist at " +
+                "all (HTTP 400 'Invalid table') — there is no two-table index model to join. Each row " +
+                "returns { name, columns, type, rawColumns }: `columns` is v_db_index's bracketed " +
+                "`column_names` cell ('[phone]', '[a,b]') PARSED into a list, never substring-matched, " +
+                "and `type` is access_method (btree for essentially everything). UNIQUENESS IS NOT " +
+                "READABLE: v_db_index carries no uniqueness field, so a unique index and an ordinary " +
+                "one are indistinguishable in it — `unique` is therefore left ABSENT rather than " +
+                "guessed, and 'uniqueness-enforced' is always reported in unverified. Only a " +
+                "duplicate-insert test proves enforcement. An empty result more likely means the table " +
+                "name is wrong than that the table is unindexed (every physical table has a PRIMARY).",
+            shape: schemas_1.listIndexesSchema.shape,
+            handler: async function (args) {
+                var p = schemas_1.listIndexesSchema.parse(args);
+                return (0, table_1.listIndexes)({ client: client(), table: p.table });
+            },
+        },
+        {
+            name: "index_create",
+            annotations: dovetail_mcp_kit_1.WRITE_ADDITIVE_IDEMPOTENT,
+            description: "Create a DATABASE INDEX on an EXISTING ServiceNow table — including the COMPOSITE and " +
+                "NON-UNIQUE indexes add_index cannot build. A DATABASE INDEX IS A PHYSICAL, PER-INSTANCE " +
+                "CHANGE: IT IS NOT CAPTURED IN AN UPDATE SET AND DOES NOT TRAVEL WITH A PROMOTION, so it " +
+                "must be re-run against every environment that needs it — which is why this tool takes " +
+                "no updateSetSysId. There is no record path to an index (sys_index is API-level-ACL 403, " +
+                "sys_index_column does not exist, and sys_dictionary.unique — the add_index lever — is " +
+                "per-column and unique-only), so this replays the platform's own index-creator form " +
+                "(sys_action=create_index) over a form-login session. DRY-RUN BY DEFAULT: without " +
+                "confirm:true NOTHING is sent and nothing is read; dryRun:true forces a dry-run even " +
+                "with confirm. IDEMPOTENT: on the live path v_db_index is read first, and an index over " +
+                "exactly these columns returns 'already-exists' with no write. `columns` is ORDERED — " +
+                "order is part of an index's identity and is preserved verbatim. `name` is REFUSED: the " +
+                "platform's form has no name input (ServiceNow names the index itself), so accepting one " +
+                "would mean reporting a name the instance does not carry — the created index's real name " +
+                "comes back in `name`. After the POST the index is polled for in v_db_index (default 10 " +
+                "checks, 3s apart, since a build on a populated table is asynchronous); if it never " +
+                "appears the result is 'failed', because a form processor returning a page is not " +
+                "evidence an ALTER ran — and a unique index cannot build over duplicate values, EMPTY " +
+                "included. verified:true means a matching row was READ BACK. 'uniqueness-enforced' is " +
+                "ALWAYS in unverified: v_db_index has no uniqueness field, so enforcement is provable " +
+                "only by a duplicate-insert test. Requires a username+password identity that can form-" +
+                "log-in; an instance on API-key-only auth or SSO/MFA will fail at the session with a " +
+                "diagnosis, because no .do replay can work there.",
+            shape: schemas_1.createIndexSchema.shape,
+            handler: async function (args) {
+                var p = schemas_1.createIndexSchema.parse(args);
+                return (0, table_1.createIndex)({
+                    client: client(),
+                    table: p.table,
+                    columns: p.columns,
+                    unique: p.unique,
+                    name: p.name,
+                    accessMethod: p.accessMethod,
+                    confirm: p.confirm,
+                    dryRun: p.dryRun,
+                    pollAttempts: p.pollAttempts,
+                    pollIntervalMs: p.pollIntervalMs,
+                    debug: p.debug,
+                });
+            },
+        },
         {
             name: "set_column",
             annotations: dovetail_mcp_kit_1.WRITE_OVERWRITE,

package/dist/mcp/schemas.d.ts

@@ -1930,6 +1930,47 @@ export declare var addIndexSchema: z.ZodObject<{
     scope?: string | undefined;
     updateSetSysId?: string | undefined;
 }>;
+export declare var listIndexesSchema: z.ZodObject<{
+    table: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    table: string;
+}, {
+    table: string;
+}>;
+export declare var createIndexSchema: z.ZodObject<{
+    table: z.ZodString;
+    columns: z.ZodArray<z.ZodString, "many">;
+    unique: z.ZodOptional<z.ZodBoolean>;
+    name: z.ZodOptional<z.ZodString>;
+    accessMethod: z.ZodOptional<z.ZodString>;
+    confirm: z.ZodOptional<z.ZodBoolean>;
+    dryRun: z.ZodOptional<z.ZodBoolean>;
+    pollAttempts: z.ZodOptional<z.ZodNumber>;
+    pollIntervalMs: z.ZodOptional<z.ZodNumber>;
+    debug: z.ZodOptional<z.ZodBoolean>;
+}, "strip", z.ZodTypeAny, {
+    columns: string[];
+    table: string;
+    name?: string | undefined;
+    confirm?: boolean | undefined;
+    dryRun?: boolean | undefined;
+    debug?: boolean | undefined;
+    unique?: boolean | undefined;
+    accessMethod?: string | undefined;
+    pollAttempts?: number | undefined;
+    pollIntervalMs?: number | undefined;
+}, {
+    columns: string[];
+    table: string;
+    name?: string | undefined;
+    confirm?: boolean | undefined;
+    dryRun?: boolean | undefined;
+    debug?: boolean | undefined;
+    unique?: boolean | undefined;
+    accessMethod?: string | undefined;
+    pollAttempts?: number | undefined;
+    pollIntervalMs?: number | undefined;
+}>;
 export declare var columnAttributesSchema: z.ZodObject<{
     label: z.ZodOptional<z.ZodString>;
     mandatory: z.ZodOptional<z.ZodBoolean>;

package/dist/mcp/schemas.js

@@ -4,7 +4,7 @@
  * own file so registry.ts stays focused on wiring.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.invokeRestSchema = exports.publishAppSchema = exports.exportAppSchema = exports.exportUpdateSetSchema = exports.createRecordSchema = exports.setFieldSchema = exports.setTableSchema = exports.tableAttributesSchema = exports.setColumnSchema = exports.columnAttributesSchema = exports.addIndexSchema = exports.addColumnSchema = exports.createTableSchema = exports.columnSpecSchema = exports.hostAssetsSchema = exports.editFlowSchema = exports.defineActionSchema = exports.defineActionSpecSchema = exports.cloneActionSchema = exports.editActionSchema = exports.stepInputPatchSchema = exports.testFlowSchema = exports.createFlowSchema = exports.copyFlowSchema = exports.publishFlowSchema = exports.viewActionSchema = exports.viewFlowSchema = exports.removeChoicesFromFieldSchema = exports.addChoicesToFieldSchema = exports.choiceValueSchema = exports.setRelatedListsSchema = exports.setFormLayoutSchema = exports.formSectionSchema = exports.setListLayoutSchema = exports.createViewSchema = void 0;
+exports.invokeRestSchema = exports.publishAppSchema = exports.exportAppSchema = exports.exportUpdateSetSchema = exports.createRecordSchema = exports.setFieldSchema = exports.setTableSchema = exports.tableAttributesSchema = exports.setColumnSchema = exports.columnAttributesSchema = exports.createIndexSchema = exports.listIndexesSchema = exports.addIndexSchema = exports.addColumnSchema = exports.createTableSchema = exports.columnSpecSchema = exports.hostAssetsSchema = exports.editFlowSchema = exports.defineActionSchema = exports.defineActionSpecSchema = exports.cloneActionSchema = exports.editActionSchema = exports.stepInputPatchSchema = exports.testFlowSchema = exports.createFlowSchema = exports.copyFlowSchema = exports.publishFlowSchema = exports.viewActionSchema = exports.viewFlowSchema = exports.removeChoicesFromFieldSchema = exports.addChoicesToFieldSchema = exports.choiceValueSchema = exports.setRelatedListsSchema = exports.setFormLayoutSchema = exports.formSectionSchema = exports.setListLayoutSchema = exports.createViewSchema = void 0;
 const zod_1 = require("zod");
 exports.createViewSchema = zod_1.z.object({
     name: zod_1.z.string().min(1),
@@ -378,6 +378,31 @@ exports.addIndexSchema = zod_1.z.object({
     dryRun: zod_1.z.boolean().optional(),
     debug: zod_1.z.boolean().optional(),
 });
+// index_list is read-only: a table name and nothing else. `v_db_index` keys on the table
+// NAME, not a sys_id, so no sys_id form is offered — accepting one would mean resolving it
+// and then listing a table the caller never named.
+exports.listIndexesSchema = zod_1.z.object({
+    table: zod_1.z.string().min(1),
+});
+// index_create takes an ordered column LIST — order is part of an index's identity, so it
+// is preserved verbatim and never sorted. `name` is accepted ONLY so that asking for one
+// earns the explanation that the platform's index-creator form has no name input (the
+// same contract set-column uses for internalType/element); createIndex refuses it.
+// confirm is the write gate: without confirm:true the tool is a pure dry-run that sends
+// nothing and reads nothing. There is deliberately NO updateSetSysId — a database index is
+// physical and is not captured in an update set.
+exports.createIndexSchema = zod_1.z.object({
+    table: zod_1.z.string().min(1),
+    columns: zod_1.z.array(zod_1.z.string().min(1)).min(1),
+    unique: zod_1.z.boolean().optional(),
+    name: zod_1.z.string().optional(),
+    accessMethod: zod_1.z.string().min(1).optional(),
+    confirm: zod_1.z.boolean().optional(),
+    dryRun: zod_1.z.boolean().optional(),
+    pollAttempts: zod_1.z.number().int().positive().optional(),
+    pollIntervalMs: zod_1.z.number().int().positive().optional(),
+    debug: zod_1.z.boolean().optional(),
+});
 // set-column takes a CLOSED attribute set, not an open field map: an unbounded write to
 // sys_dictionary lets a caller silently corrupt the schema. internalType and element are
 // listed but are NOT settable — ServiceNow honours neither on an existing column, and

package/dist/table/createIndex.d.ts

@@ -0,0 +1,118 @@
+/**
+ * createIndex — create a database index on an EXISTING ServiceNow table, including
+ * the COMPOSITE and NON-UNIQUE indexes `add-index` cannot build, by replaying the
+ * platform's own index-creator form.
+ *
+ * ──────────────────────────────────────────────────────────────────────────────
+ * A DATABASE INDEX IS A PHYSICAL, PER-INSTANCE CHANGE. IT IS **NOT** CAPTURED IN AN
+ * UPDATE SET, AND IT DOES **NOT** TRAVEL WITH A PROMOTION. Every environment that
+ * needs the index must have this run against it. That is why this verb takes no
+ * `updateSetSysId` — there is nothing for one to capture.
+ * ──────────────────────────────────────────────────────────────────────────────
+ *
+ * WHY A FORM REPLAY. There is no record path to an index:
+ *   - `sys_index` is API-level-ACL 403 for every identity (an ACL that refuses GET
+ *     refuses POST), and `sys_index_column` does not exist (HTTP 400 "Invalid
+ *     table"). So the "insert two records" design is not merely blocked, it is
+ *     not a real model of the platform.
+ *   - `sys_dictionary.unique` is the one record-shaped lever, and it is PER-COLUMN
+ *     and UNIQUE-ONLY. That lever is already shipped as `add-index`; this verb
+ *     exists for everything that lever cannot express.
+ *
+ * THE FORM CONTRACT IS THE INSTANCE'S OWN. It was not guessed and it was not read
+ * off a stale HAR: it is lifted from the shipped `index_creator_information`
+ * sys_ui_macro and the `v_index_creator` "New" UI action, both read live from a
+ * Tenon instance 2026-09-30. The macro's own inputs are:
+ *
+ *     sys_action                = "create_index"   (hidden)
+ *     sysparm_index_table       = <table>
+ *     sysparm_fields            = <comma-separated column list>
+ *     sysparm_unique_index_SKIP = "on"             (the Unique Index checkbox)
+ *     sysparm_access_method     = <method>         (only when
+ *                                 glide.ui.index_method.enabled is true)
+ *
+ * and the dialog is the `index_creator_dialog` UI page. The POST target is taken
+ * from that page's own `<form action>` when it renders one, falling back to the
+ * page itself — harvest-then-use, the same discipline createTable applies to the
+ * list-edit key rather than hard-coding a guess.
+ *
+ * THERE IS NO INDEX-NAME INPUT. The form has none; ServiceNow names the index
+ * itself (in practice after the leading column). A `name` is therefore REFUSED
+ * rather than silently dropped — a caller who asked for `idx_phone_created` and got
+ * `phone` would have no way to know, and the whole point of this module is that the
+ * instance is read back rather than believed.
+ *
+ * THE WRITE IS NEVER THE PROOF. After the POST the index is looked for in
+ * `v_db_index` on a bounded poll (index builds are asynchronous on a populated
+ * table). If it never appears, this FAILS loudly — a 200 from a form processor is
+ * not evidence an ALTER ran. `verified:true` means a matching row was READ BACK.
+ *
+ * WHAT IS STILL NOT PROVABLE: that a unique index actually REJECTS duplicates.
+ * `v_db_index` has no uniqueness field, so "uniqueness-enforced" is reported in
+ * `unverified` on every status, success included.
+ *
+ * ES6 only, no optional chaining, no `any`.
+ */
+import type { ServiceNowClient } from "../client";
+/** The UI page that renders the index creator. Overridable per instance. */
+export declare var DEFAULT_INDEX_FORM_PATH: string;
+/** The standing caveat every caller must carry forward. */
+export declare var NOT_IN_UPDATE_SET: string;
+export interface CreateIndexParams {
+    /** REST client — used for the idempotency read and the read-back poll. */
+    client: ServiceNowClient;
+    /** The table to index, by NAME. */
+    table: string;
+    /** Ordered column list. Order matters to an index; it is preserved verbatim. */
+    columns: Array<string>;
+    /**
+     * REFUSED. The platform's index-creator form has no name input — ServiceNow names
+     * the index itself. Declared only so a caller can express it and be told why,
+     * rather than have it silently ignored.
+     */
+    name?: string;
+    /** Tick the form's "Unique Index" checkbox. Default false (a plain index). */
+    unique?: boolean;
+    /** `sysparm_access_method`, when the instance exposes the selector. */
+    accessMethod?: string;
+    /** REQUIRED to write. Without it this is a dry-run, whatever else is passed. */
+    confirm?: boolean;
+    /** Force a dry-run even with confirm:true. */
+    dryRun?: boolean;
+    /** Override the index-creator page path (default DEFAULT_INDEX_FORM_PATH). */
+    formPath?: string;
+    /** Read-back poll shape. Defaults: 10 attempts, 3000 ms apart. */
+    pollAttempts?: number;
+    pollIntervalMs?: number;
+    /** Instance/creds for the form session (default: env, same precedence as the client). */
+    instance?: string;
+    user?: string;
+    password?: string;
+    /** Add diagnostic detail to the note. */
+    debug?: boolean;
+}
+export interface CreateIndexResult {
+    status: "created" | "already-exists" | "dry-run" | "failed";
+    /** True ONLY on a fresh, read-back-verified create. */
+    created: boolean;
+    table: string;
+    /** The index name as `v_db_index` reports it — never a name we asked for. */
+    name: string;
+    /** The requested column list, normalized. */
+    columns: Array<string>;
+    /** True ONLY when a matching `v_db_index` row was READ BACK. */
+    verified: boolean;
+    /** The host the write was aimed at — an index is per-instance, so this matters. */
+    instance: string;
+    /** Always includes "uniqueness-enforced". Never empty. */
+    unverified: Array<string>;
+    /** HTTP status of the form POST; 0 when none was sent. */
+    httpStatus: number;
+    note: string;
+}
+/** Validate every input BEFORE any network call. Returns the normalized columns. */
+export declare function validateCreateIndex(params: CreateIndexParams): {
+    table: string;
+    columns: Array<string>;
+};
+export declare function createIndex(params: CreateIndexParams): Promise<CreateIndexResult>;