@tenonhq/dovetail-servicenow 0.0.9 → 0.0.11

package/README.md

@@ -66,6 +66,21 @@ SN_USER=...
 SN_PASSWORD=...
 ```
 
+### Selecting a .env file per command
+
+Every `dove-sn` command (and `dove-sn mcp`) loads `.env` from the current
+directory by default. Point it at a different file to target another instance:
+
+```bash
+npx dove-sn view-flow --sys-id <id> --env .env.prod
+npx dove-sn add-choices --env ../envs/workshop.env --table ... --column ...
+```
+
+`--env` (alias `--env-file`) wins over the `DOVETAIL_ENV_FILE` env var, which in
+turn beats the default `.env`. Variables already present in the environment are
+never overridden, so an exported `SN_INSTANCE` still takes precedence over the
+file — handy for CI.
+
 ## CLI
 
 ```bash

package/dist/cli.js

@@ -57,6 +57,7 @@ var __importStar = (this && this.__importStar) || (function () {
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
 const fs = __importStar(require("fs"));
+const loadEnv_1 = require("./loadEnv");
 const client_1 = require("./client");
 const choices_1 = require("./choices");
 const formatter_1 = require("./formatter");
@@ -557,10 +558,17 @@ function printHelp() {
         "                     (--sys-id <sys_id> [--execute --confirm] [--inputs <json>] [--json])\n" +
         "  edit-flow          Patch a flow/subflow (rename, description, step inputs)\n" +
         "                     (--sys-id <sys_id> --from-json <ops.json> [--apply] [--update-set <sys_id>] [--scope <sys_id>] [--json])\n" +
-        "  mcp                Run the MCP stdio server (--smoke lists tools and exits)\n");
+        "  mcp                Run the MCP stdio server (--smoke lists tools and exits)\n" +
+        "\nGlobal flags:\n" +
+        "  --env <path>       Load credentials from a specific .env file (also --env-file,\n" +
+        "                     or the DOVETAIL_ENV_FILE env var). Default: .env in the cwd.\n");
 }
 async function main() {
     var parsed = parseArgs(process.argv.slice(2));
+    // Load credentials before any command runs. `--env`/`--env-file` (or the
+    // DOVETAIL_ENV_FILE env var) selects a specific file so one checkout can
+    // target multiple instances; otherwise the cwd `.env` is used.
+    (0, loadEnv_1.loadEnvFile)(parsed.flags.env || parsed.flags["env-file"]);
     if (parsed.command === "add-choices") {
         await runAddChoices(parsed.flags);
         return 0;

package/dist/client.d.ts

@@ -6,15 +6,15 @@
  *   - `buildAgent.*`  — reads via the sn_build_agent API, with graceful
  *                       fallback to Table API / sys_dictionary when the
  *                       Build Agent plugin is unavailable
- *   - `claude.*`      — writes via the Dovetail Scripted REST API
- *                       (/api/cadso/dovetail/*), which handles update-set + scope
- *                       switching atomically so every write lands in the right
- *                       update set without touching sys_user_preference.
- *                       Falls back to the legacy /api/cadso/claude/* path on
- *                       instances where the API has not yet been re-imported.
- *                       The namespace name `claude` is preserved for API
- *                       compatibility; the underlying server-side API is now
- *                       named "Dovetail".
+ *   - `claude.*`      — writes via the Dovetail core Scripted REST API
+ *                       (/api/cadso/dovetail_core/*), which handles update-set +
+ *                       scope switching atomically so every write lands in the
+ *                       right update set without touching sys_user_preference.
+ *                       Falls back to the legacy global-scope /api/cadso/dovetail/*
+ *                       path on instances without the Dovetail app installed.
+ *                       The `claude.*` property name is preserved for API
+ *                       compatibility; the server-side API now lives in the
+ *                       Dovetail scoped application as "Dovetail Core".
  *
  * Env fallbacks mirror prior dashboard-fetch helpers so dev setups that already
  * have SN_INSTANCE/SN_USER/SN_PASSWORD work without reconfiguration.
@@ -62,7 +62,7 @@ export interface ServiceNowClient {
         getTableSchema: (table: string) => Promise<TableSchema>;
     };
     claude: {
-        /** POST /api/cadso/dovetail/createRecord (legacy path: /api/cadso/claude/createRecord). */
+        /** POST /api/cadso/dovetail_core/createRecord (legacy: /api/cadso/dovetail/createRecord). */
         createRecord: (params: {
             table: string;
             fields: Record<string, any>;
@@ -73,7 +73,7 @@ export interface ServiceNowClient {
             sys_id: string;
             [k: string]: any;
         }>;
-        /** POST /api/cadso/dovetail/pushWithUpdateSet (legacy: /api/cadso/claude/pushWithUpdateSet). */
+        /** POST /api/cadso/dovetail_core/pushWithUpdateSet (legacy: /api/cadso/dovetail/pushWithUpdateSet). */
         pushWithUpdateSet: (params: {
             update_set_sys_id: string;
             table: string;
@@ -83,18 +83,18 @@ export interface ServiceNowClient {
             sys_id: string;
             [k: string]: any;
         }>;
-        /** GET /api/cadso/dovetail/currentUpdateSet?scope=... (legacy: /api/cadso/claude/currentUpdateSet). */
+        /** GET /api/cadso/dovetail_core/currentUpdateSet?scope=... (legacy: /api/cadso/dovetail/currentUpdateSet). */
         currentUpdateSet: (scope?: string) => Promise<{
             sys_id: string;
             name: string;
         }>;
-        /** GET /api/cadso/dovetail/changeUpdateSet?sysId=... — pins the REST session's active update set. */
+        /** GET /api/cadso/dovetail_core/changeUpdateSet?sysId=... — pins the REST session's active update set. */
         changeUpdateSet: (params: {
             sysId: string;
         }) => Promise<{
             [k: string]: any;
         }>;
-        /** POST /api/cadso/dovetail/deleteRecord — body { table, sys_id }. Returns the deleted record. */
+        /** POST /api/cadso/dovetail_core/deleteRecord — body { table, sys_id }. Returns the deleted record. */
         deleteRecord: (params: {
             table: string;
             sys_id: string;

package/dist/client.js

@@ -7,15 +7,15 @@
  *   - `buildAgent.*`  — reads via the sn_build_agent API, with graceful
  *                       fallback to Table API / sys_dictionary when the
  *                       Build Agent plugin is unavailable
- *   - `claude.*`      — writes via the Dovetail Scripted REST API
- *                       (/api/cadso/dovetail/*), which handles update-set + scope
- *                       switching atomically so every write lands in the right
- *                       update set without touching sys_user_preference.
- *                       Falls back to the legacy /api/cadso/claude/* path on
- *                       instances where the API has not yet been re-imported.
- *                       The namespace name `claude` is preserved for API
- *                       compatibility; the underlying server-side API is now
- *                       named "Dovetail".
+ *   - `claude.*`      — writes via the Dovetail core Scripted REST API
+ *                       (/api/cadso/dovetail_core/*), which handles update-set +
+ *                       scope switching atomically so every write lands in the
+ *                       right update set without touching sys_user_preference.
+ *                       Falls back to the legacy global-scope /api/cadso/dovetail/*
+ *                       path on instances without the Dovetail app installed.
+ *                       The `claude.*` property name is preserved for API
+ *                       compatibility; the server-side API now lives in the
+ *                       Dovetail scoped application as "Dovetail Core".
  *
  * Env fallbacks mirror prior dashboard-fetch helpers so dev setups that already
  * have SN_INSTANCE/SN_USER/SN_PASSWORD work without reconfiguration.
@@ -104,11 +104,12 @@ function createClient(config = {}) {
         validateStatus: function () { return true; }
     });
     var lastAt = 0;
-    // Dovetail Scripted REST API rebrand: prefer /api/cadso/dovetail/* and fall back
-    // to the legacy /api/cadso/claude/* path on instances where the rename hasn't
-    // been imported yet. Latch the legacy flag after the first 404 to avoid paying
-    // the round-trip cost on every subsequent call.
-    var useDovetailLegacyClaudePath = false;
+    // Dovetail core Scripted REST API: prefer the Dovetail-app path
+    // /api/cadso/dovetail_core/* and fall back to the legacy global-scope path
+    // /api/cadso/dovetail/* on instances that don't have the Dovetail app yet.
+    // Latch the legacy flag after the first 404 to avoid paying the round-trip
+    // cost on every subsequent call.
+    var useDovetailLegacyPath = false;
     async function request(cfg, ctx) {
         var attempt429 = 0;
         var attempt5xx = 0;
@@ -160,24 +161,24 @@ function createClient(config = {}) {
             return res.data;
         }
     }
-    // Dovetail Scripted REST API request: try /api/cadso/dovetail/<op>, fall back to
-    // /api/cadso/claude/<op> on 404 (with a one-time deprecation warning).
+    // Dovetail core Scripted REST API request: try /api/cadso/dovetail_core/<op>,
+    // fall back to the legacy /api/cadso/dovetail/<op> on 404 (one-time warning).
     async function dovetailRequest(method, op, body, params, ctx) {
-        var url = useDovetailLegacyClaudePath
-            ? "/api/cadso/claude/" + op
-            : "/api/cadso/dovetail/" + op;
+        var url = useDovetailLegacyPath
+            ? "/api/cadso/dovetail/" + op
+            : "/api/cadso/dovetail_core/" + op;
         try {
             return await request({ method: method, url: url, data: body, params: params }, ctx);
         }
         catch (e) {
             var msg = e && e.message ? String(e.message) : "";
-            if (!useDovetailLegacyClaudePath && msg.indexOf("SN 404 on") === 0) {
+            if (!useDovetailLegacyPath && msg.indexOf("SN 404 on") === 0) {
                 // eslint-disable-next-line no-console
-                console.warn("[deprecation] /api/cadso/dovetail/" + op +
-                    " returned 404. Falling back to legacy /api/cadso/claude/" + op +
-                    ". Re-import the Dovetail Scripted REST API XML on your ServiceNow instance to silence this warning.");
-                useDovetailLegacyClaudePath = true;
-                var legacyUrl = "/api/cadso/claude/" + op;
+                console.warn("[deprecation] /api/cadso/dovetail_core/" + op +
+                    " returned 404. Falling back to legacy /api/cadso/dovetail/" + op +
+                    ". Install the Dovetail application's Scripted REST APIs to silence this warning.");
+                useDovetailLegacyPath = true;
+                var legacyUrl = "/api/cadso/dovetail/" + op;
                 return await request({ method: method, url: legacyUrl, data: body, params: params }, ctx);
             }
             throw e;

package/dist/loadEnv.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Loads ServiceNow credentials for the `dove-sn` CLI and its MCP server.
+ *
+ * Resolution order for the env file:
+ *   1. An explicit `--env <path>` / `--env-file <path>` flag (passed in here).
+ *   2. The `DOVETAIL_ENV_FILE` environment variable — lets an MCP host point
+ *      `dove-sn mcp` at a specific credential file without a CLI flag.
+ *   3. The default `.env` in the current working directory.
+ *
+ * dotenv does not override variables already present in process.env, so an
+ * explicit file augments (never clobbers) credentials the parent shell exported.
+ *
+ * @param {string} [explicitPath] - Path from the `--env` / `--env-file` flag.
+ */
+export declare function loadEnvFile(explicitPath?: string): void;

package/dist/loadEnv.js

@@ -0,0 +1,32 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadEnvFile = loadEnvFile;
+const dotenv_1 = __importDefault(require("dotenv"));
+const path_1 = __importDefault(require("path"));
+/**
+ * Loads ServiceNow credentials for the `dove-sn` CLI and its MCP server.
+ *
+ * Resolution order for the env file:
+ *   1. An explicit `--env <path>` / `--env-file <path>` flag (passed in here).
+ *   2. The `DOVETAIL_ENV_FILE` environment variable — lets an MCP host point
+ *      `dove-sn mcp` at a specific credential file without a CLI flag.
+ *   3. The default `.env` in the current working directory.
+ *
+ * dotenv does not override variables already present in process.env, so an
+ * explicit file augments (never clobbers) credentials the parent shell exported.
+ *
+ * @param {string} [explicitPath] - Path from the `--env` / `--env-file` flag.
+ */
+function loadEnvFile(explicitPath) {
+    var raw = explicitPath || process.env.DOVETAIL_ENV_FILE;
+    if (raw) {
+        var resolved = path_1.default.isAbsolute(raw) ? raw : path_1.default.resolve(process.cwd(), raw);
+        dotenv_1.default.config({ path: resolved });
+        return;
+    }
+    // No explicit selection — load .env from cwd if it exists (no-op otherwise).
+    dotenv_1.default.config();
+}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tenonhq/dovetail-servicenow",
-  "version": "0.0.9",
+  "version": "0.0.11",
   "engines": {
     "node": ">=22"
   },
@@ -20,6 +20,7 @@
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0",
     "axios": "^1.5.1",
+    "dotenv": "^16.3.1",
     "zod": "^3.23.0"
   },
   "devDependencies": {