nowaikit 4.19.0 → 4.21.0

package/desktop/renderer/dist/index.html

@@ -9,7 +9,7 @@
   <link rel="apple-touch-icon" sizes="180x180" href="./apple-touch-icon.png" />
   <!-- CSP: script-src unsafe-inline needed for Vite HMR in dev; style-src unsafe-inline needed for React inline styles -->
   <meta http-equiv="Content-Security-Policy" content="default-src 'self'; script-src 'self' 'unsafe-inline'; style-src 'self' 'unsafe-inline'; connect-src 'self' https://*.service-now.com https://*.servicenowservices.com https://generativelanguage.googleapis.com ws://localhost:* http://localhost:*; img-src 'self' data:; frame-ancestors 'none'; form-action 'self';" />
-  <script type="module" crossorigin src="./assets/index-DIXajM0H.js"></script>
+  <script type="module" crossorigin src="./assets/index-DSLAKhIs.js"></script>
   <link rel="stylesheet" crossorigin href="./assets/index-Bb0ncZQl.css">
 </head>
 <body>

package/desktop/serve.cjs

@@ -25,6 +25,8 @@ const http = require('http');
 const https = require('https');
 const fs = require('fs');
 const path = require('path');
+const os = require('os');
+const { spawn } = require('child_process');
 const { URL } = require('url');
 
 const PORT = parseInt(process.env.PORT || '4175', 10);
@@ -464,6 +466,158 @@ function handleReportGenerate(req, res) {
 
 // ─── HTTP server ─────────────────────────────────────────────────────────────
 
+/** Read a JSON file from ~/.config/nowaikit (returns null if missing/invalid). */
+function readNowaikitJson(file) {
+  try {
+    return JSON.parse(fs.readFileSync(path.join(os.homedir(), '.config', 'nowaikit', file), 'utf8'));
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * POST /api/ai/claude-cli
+ * Runs the local `claude` CLI (Claude Code subscription) headlessly with the NowAIKit MCP loaded, so
+ * it answers with real ServiceNow data using the user's subscription instead of an API key. The MCP
+ * server authenticates from the active instance's stored config (basic creds, or an OAuth token it
+ * self-refreshes). Returns an Anthropic-Messages-shaped body so the chat UI handles it unchanged.
+ * Body: { messages: [{role, content}], system?: string, instanceUrl?: string }
+ */
+function handleClaudeCli(req, res) {
+  const chunks = [];
+  let total = 0;
+  const MAX = 5 * 1024 * 1024;
+  req.on('data', (c) => {
+    total += c.length;
+    if (total > MAX) {
+      res.writeHead(413, { 'Content-Type': 'application/json' });
+      res.end(JSON.stringify({ error: 'Request body too large' }));
+      req.destroy();
+    } else {
+      chunks.push(c);
+    }
+  });
+  req.on('end', () => {
+    if (total > MAX) return;
+    let body;
+    try {
+      body = JSON.parse(Buffer.concat(chunks).toString());
+    } catch {
+      res.writeHead(400, { 'Content-Type': 'application/json' });
+      res.end(JSON.stringify({ error: 'Invalid JSON' }));
+      return;
+    }
+
+    const messages = Array.isArray(body.messages) ? body.messages : [];
+    const system = typeof body.system === 'string' ? body.system : '';
+    const instanceUrl = typeof body.instanceUrl === 'string' ? body.instanceUrl : '';
+
+    const textOf = (c) =>
+      typeof c === 'string' ? c : Array.isArray(c) ? c.map((b) => (b && b.text) || '').join('') : '';
+    const prompt = messages
+      .map((m) => `${m.role === 'assistant' ? 'Assistant' : 'User'}: ${textOf(m.content)}`)
+      .join('\n\n')
+      .trim();
+    if (!prompt) {
+      res.writeHead(400, { 'Content-Type': 'application/json' });
+      res.end(JSON.stringify({ error: 'No prompt to send' }));
+      return;
+    }
+
+    // Resolve the active instance and build an MCP config so claude has the ServiceNow tools.
+    const cfg = readNowaikitJson('instances.json');
+    let inst = null;
+    if (cfg && cfg.instances) {
+      const list = Object.values(cfg.instances);
+      inst = list.find((i) => i.instanceUrl === instanceUrl) || list.find((i) => i.name === cfg.defaultInstance) || list[0] || null;
+    }
+    const mcpEnv = { MCP_TOOL_DISCOVERY: 'lean' };
+    if (inst) {
+      mcpEnv.SERVICENOW_INSTANCE_URL = inst.instanceUrl;
+      mcpEnv.SERVICENOW_AUTH_METHOD = inst.authMethod || 'basic';
+      if (inst.authMethod === 'oauth') {
+        if (inst.clientId) mcpEnv.SERVICENOW_OAUTH_CLIENT_ID = inst.clientId;
+        if (inst.clientSecret) mcpEnv.SERVICENOW_OAUTH_CLIENT_SECRET = inst.clientSecret;
+        // The MCP server reads and self-refreshes the stored per-user token from tokens.json.
+      } else {
+        if (inst.username) mcpEnv.SERVICENOW_BASIC_USERNAME = inst.username;
+        if (inst.password) mcpEnv.SERVICENOW_BASIC_PASSWORD = inst.password;
+      }
+    }
+
+    const serverJs = path.resolve(__dirname, '..', 'dist', 'server.js');
+    const mcpConfig = { mcpServers: { nowaikit: { command: process.execPath, args: [serverJs], env: mcpEnv } } };
+    let mcpConfigPath;
+    try {
+      mcpConfigPath = path.join(os.tmpdir(), `nowaikit-mcp-${process.pid}-${total}.json`);
+      fs.writeFileSync(mcpConfigPath, JSON.stringify(mcpConfig), { mode: 0o600 });
+    } catch (e) {
+      res.writeHead(500, { 'Content-Type': 'application/json' });
+      res.end(JSON.stringify({ error: 'Could not prepare MCP config: ' + (e.message || e) }));
+      return;
+    }
+    const cleanup = () => { try { fs.unlinkSync(mcpConfigPath); } catch { /* ignore */ } };
+
+    const bin = process.env.NOWAIKIT_CLAUDE_BIN || 'claude';
+    // Restrict to the NowAIKit MCP tools and block the built-in filesystem/shell tools, and run in a
+    // neutral temp dir, so the web chat's claude only touches ServiceNow, never the local machine.
+    const args = [
+      '-p', '--output-format', 'json',
+      '--mcp-config', mcpConfigPath,
+      '--allowedTools', 'mcp__nowaikit',
+      '--disallowedTools', 'Bash,Edit,Write,Read,WebFetch,WebSearch',
+    ];
+    if (system) args.push('--append-system-prompt', system);
+
+    let stdout = '';
+    let stderr = '';
+    let child;
+    try {
+      child = spawn(bin, args, { shell: process.platform === 'win32', cwd: os.tmpdir() });
+    } catch (e) {
+      cleanup();
+      res.writeHead(500, { 'Content-Type': 'application/json' });
+      res.end(JSON.stringify({ error: 'Failed to start Claude CLI: ' + (e.message || e) }));
+      return;
+    }
+    child.on('error', (e) => {
+      cleanup();
+      const msg = e.code === 'ENOENT'
+        ? 'Claude CLI not found. Install Claude Code, run `claude login`, or set NOWAIKIT_CLAUDE_BIN to the claude binary.'
+        : 'Claude CLI error: ' + e.message;
+      if (!res.headersSent) {
+        res.writeHead(500, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: msg }));
+      }
+    });
+    child.stdout.on('data', (d) => { stdout += d; if (stdout.length > MAX) child.kill(); });
+    child.stderr.on('data', (d) => { stderr += d; });
+    try { child.stdin.end(prompt); } catch { /* ignore */ }
+
+    child.on('close', (code) => {
+      cleanup();
+      if (res.headersSent) return;
+      if (code !== 0 && !stdout) {
+        res.writeHead(500, { 'Content-Type': 'application/json' });
+        res.end(JSON.stringify({ error: `Claude CLI exited ${code}` + (stderr ? ': ' + stderr.slice(0, 500) : '') }));
+        return;
+      }
+      let text = '';
+      try {
+        const parsed = JSON.parse(stdout);
+        text = parsed.result || parsed.text || (parsed.is_error ? 'Error: ' + (parsed.error || 'unknown') : '');
+      } catch {
+        text = stdout.trim();
+      }
+      const origin = req.headers.origin;
+      const headers = { 'Content-Type': 'application/json' };
+      if (isAllowedOrigin(origin)) headers['Access-Control-Allow-Origin'] = origin || '*';
+      res.writeHead(200, headers);
+      res.end(JSON.stringify({ role: 'assistant', model: 'claude-cli', stop_reason: 'end_turn', content: [{ type: 'text', text: text || '(no output)' }] }));
+    });
+  });
+}
+
 const server = http.createServer((req, res) => {
   const origin = req.headers.origin;
   const allowed = isAllowedOrigin(origin);
@@ -506,6 +660,13 @@ const server = http.createServer((req, res) => {
     return true;
   };
 
+  // Claude Code subscription (local claude CLI) — spawns claude with the NowAIKit MCP loaded.
+  if (req.url === '/api/ai/claude-cli' && req.method === 'POST') {
+    if (!proxySecurityCheck()) return;
+    handleClaudeCli(req, res);
+    return;
+  }
+
   // Check if this is an AI proxy request
   for (const [prefix, config] of Object.entries(AI_PROXIES)) {
     if (req.url.startsWith(prefix)) {

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAqDnE,wBAAgB,YAAY,IAAI,MAAM,CA4LrC"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AAqDnE,wBAAgB,YAAY,IAAI,MAAM,CA6MrC"}

package/dist/server.js

@@ -9,7 +9,7 @@ import { getPrompts, resolvePromptAsync } from './prompts/index.js';
 import { logger } from './utils/logging.js';
 import { ServiceNowError } from './utils/errors.js';
 import { connectTransport } from './transport/index.js';
-import { getDelegatedAuth } from './utils/request-context.js';
+import { getDelegatedAuth, strictDelegationViolation } from './utils/request-context.js';
 import { VERSION, SERVER_NAME } from './utils/version.js';
 // quiet: suppress dotenv v17+ startup banner (keeps MCP stdio + CLI output clean)
 dotenv.config({ quiet: true });
@@ -64,13 +64,22 @@ export function createServer() {
                 throw new ServiceNowError(`Unknown tool: ${name}`, 'UNKNOWN_TOOL');
             }
             const instanceName = args?.['instance'];
-            const baseClient = instanceManager.getClient(instanceName);
             // DELEGATED_AUTH: run as the per-request identity AND (for multi-tenant
             // hosting) against the caller's own instance, both carried in the delegated
             // context headers. When a token is present we also honour its instanceUrl,
             // so one shared server serves many customers with no per-customer config.
             // No-op in normal single-user mode.
             const delegatedAuth = getDelegatedAuth();
+            // Strict delegated-auth: refuse to run without a valid delegated token (never fall back to base
+            // credentials), and refuse the instance-manager tools that bypass per-request delegation.
+            const violation = strictDelegationViolation(name);
+            if (violation === 'DELEGATION_REQUIRED') {
+                throw new ServiceNowError('Delegation required: strict delegated-auth mode is on, so every tool call must carry a valid delegated token from the trusted gateway. The server will not fall back to base credentials.', 'DELEGATION_REQUIRED');
+            }
+            if (violation === 'DELEGATION_INCOMPATIBLE_TOOL') {
+                throw new ServiceNowError(`Tool "${name}" is unavailable under strict delegated-auth: it operates on server-configured instances, not the delegated per-request identity.`, 'DELEGATION_INCOMPATIBLE_TOOL');
+            }
+            const baseClient = instanceManager.getClient(instanceName);
             const client = delegatedAuth?.bearerToken
                 ? baseClient.withUser({ bearerToken: delegatedAuth.bearerToken, instanceUrl: delegatedAuth.instanceUrl })
                 : baseClient;

package/dist/server.js.map

@@ -1 +1 @@
-{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,MAAM,4BAA4B,CAAC;AAC9D,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE1D,kFAAkF;AAClF,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAE/B,iDAAiD;AACjD,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;AACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;AACpD,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,wFAAwF,CAAC,CAAC;IACvG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,gFAAgF;AAEhF,gFAAgF;AAChF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,eAAe,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,iBAAiB;IACjF,cAAc,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,2BAA2B;CAC/F,CAAC,CAAC;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,+EAA+E;AAC/E,+DAA+D;AAC/D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,oBAAoB,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,sBAAsB;IAC/F,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,sBAAsB;IACtF,uBAAuB,EAAE,kBAAkB,EAAE,mBAAmB;IAChE,mBAAmB,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,sBAAsB;IAC7F,8BAA8B,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,uBAAuB;CAC7G,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,OAAO;KACjB,EACD;QACE,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;SACZ;KACF,CACF,CAAC;IAEF,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IAEzB,+EAA+E;IAE/E,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QAC1D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAEjD,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,eAAe,CAAC,iBAAiB,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,YAAY,GAAI,IAAgC,EAAE,CAAC,UAAU,CAAuB,CAAC;YAC3F,MAAM,UAAU,GAAG,eAAe,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC3D,wEAAwE;YACxE,4EAA4E;YAC5E,2EAA2E;YAC3E,0EAA0E;YAC1E,oCAAoC;YACpC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;YACzC,MAAM,MAAM,GAAG,aAAa,EAAE,WAAW;gBACvC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,CAAC;gBACzG,CAAC,CAAC,UAAU,CAAC;YACf,MAAM,QAAQ,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;YAEzD,8EAA8E;YAC9E,4EAA4E;YAC5E,4EAA4E;YAC5E,+DAA+D;YAC/D,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,qBAAqB,EAAE,EAAE,WAAW,EAAE,CAAC;gBACnG,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;wBACvC,OAAO,EAAE,WAAW,IAAI,cAAc,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,iBAAiB,eAAe,CAAC,cAAc,EAAE,iCAAiC;wBAC/N,eAAe,EAAE;4BACf,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,0CAA0C,EAAE,EAAE;4BACrG,QAAQ,EAAE,CAAC,SAAS,CAAC;yBACtB;qBACF,CAAC,CAAC;oBACH,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAE,OAAO,CAAC,OAA+C,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC1G,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,cAAc,IAAI,qBAAqB,EAAE,CAAC,EAAE,CAAC;oBACjG,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,2EAA2E;gBAC7E,CAAC;YACH,CAAC;YAED,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAEzD,4EAA4E;YAC5E,6EAA6E;YAC7E,4EAA4E;YAC5E,MAAM,aAAa,GAAI,OAAO,CAAC,MAA0D,CAAC,KAAK,EAAE,aAAa,CAAC;YAC/G,MAAM,aAAa,GAAG,aAAa,KAAK,SAAS,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClF,IAAI,SAAqD,CAAC;YAC1D,IAAI,aAAa,EAAE,CAAC;gBAClB,IAAI,GAAG,GAAG,CAAC,CAAC;gBACZ,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,OAAe,EAAE,EAAE,CACzD,MAAM,CAAC,YAAY,CAAC;oBAClB,MAAM,EAAE,wBAAwB;oBAChC,MAAM,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE;iBACzD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAiD,CAAC,CAAC,CAAC;gBACpE,MAAM,YAAY,CAAC,CAAC,EAAE,YAAY,IAAI,GAAG,CAAC,CAAC;gBAC3C,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;oBAC3B,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC5B,KAAK,YAAY,CAAC,GAAG,EAAE,WAAW,IAAI,GAAG,CAAC,CAAC;gBAC7C,CAAC,EAAE,IAAI,CAAC,CAAC;YACX,CAAC;YAED,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YACrD,CAAC;oBAAS,CAAC;gBACT,IAAI,SAAS;oBAAE,aAAa,CAAC,SAAS,CAAC,CAAC;gBACxC,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,MAAM,CAAC,YAAY,CAAC;wBACxB,MAAM,EAAE,wBAAwB;wBAChC,MAAM,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,WAAW,EAAE;qBAClF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAgB,CAAC,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;YAED,yEAAyE;YACzE,oEAAoE;YACpE,MAAM,UAAU,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACxF,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAiC,EAAE;gBAC1D,CAAC,CAAC,EAAE,CAAC;YACP,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC5E;iBACF;gBACD,GAAG,UAAU;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;YAErD,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBACrC,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC,IAAI,GAAG;yBACtD;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;qBAC1F;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAE/E,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QAC9D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,GAAG,KAAK,2BAA2B,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAC5F,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAEnF,OAAO;gBACL,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aACpC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;YACnD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAE/E,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QAC5D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,8DAA8D;IAC9D,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAgB,EAAE;QAC/E,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAA0C,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAEhE,oDAAoD;IACpD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1D,cAAc,CAAC,UAAU,CAAC,CAAC;QAE3B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1D,cAAc,CAAC,UAAU,CAAC,CAAC;QAE3B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAChE,cAAc,CAAC,UAAU,CAAC,CAAC;QAE3B,MAAM,CAAC,IAAI,CAAC,gCAAgC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,MAAM,CAAC,CAAC;QAC/G,MAAM,CAAC,IAAI,CAAC,4BAA4B,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,yBAAyB,CAAC,CAAC;QAC9H,MAAM,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,GAAG,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}
+{"version":3,"file":"server.js","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,MAAM,EAAE,MAAM,2CAA2C,CAAC;AACnE,OAAO,EACL,qBAAqB,EACrB,sBAAsB,EACtB,wBAAwB,EACxB,0BAA0B,EAC1B,sBAAsB,EACtB,yBAAyB,GAC1B,MAAM,oCAAoC,CAAC;AAC5C,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAC5D,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,kBAAkB,EAAE,MAAM,oBAAoB,CAAC;AACpE,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACxD,OAAO,EAAE,gBAAgB,EAAE,yBAAyB,EAAE,MAAM,4BAA4B,CAAC;AACzF,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAE1D,kFAAkF;AAClF,MAAM,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;AAE/B,iDAAiD;AACjD,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;AACxD,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,8BAA8B,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AAC5F,MAAM,SAAS,GAAG,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;AACpD,IAAI,CAAC,SAAS,IAAI,CAAC,QAAQ,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1C,MAAM,CAAC,KAAK,CAAC,wFAAwF,CAAC,CAAC;IACvG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,gFAAgF;AAEhF,gFAAgF;AAChF,MAAM,iBAAiB,GAAG,IAAI,GAAG,CAAC;IAChC,eAAe,EAAE,mBAAmB,EAAE,wBAAwB,EAAE,iBAAiB;IACjF,cAAc,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,2BAA2B;CAC/F,CAAC,CAAC;AACH,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,+EAA+E;AAC/E,+DAA+D;AAC/D,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAC;IACjC,oBAAoB,EAAE,eAAe,EAAE,cAAc,EAAE,gBAAgB,EAAE,sBAAsB;IAC/F,qBAAqB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,sBAAsB;IACtF,uBAAuB,EAAE,kBAAkB,EAAE,mBAAmB;IAChE,mBAAmB,EAAE,oBAAoB,EAAE,0BAA0B,EAAE,sBAAsB;IAC7F,8BAA8B,EAAE,sBAAsB,EAAE,2BAA2B,EAAE,uBAAuB;CAC7G,CAAC,CAAC;AAEH,MAAM,UAAU,YAAY;IAC1B,MAAM,MAAM,GAAG,IAAI,MAAM,CACvB;QACE,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,OAAO;KACjB,EACD;QACE,YAAY,EAAE;YACZ,KAAK,EAAE,EAAE;YACT,SAAS,EAAE,EAAE;YACb,OAAO,EAAE,EAAE;SACZ;KACF,CACF,CAAC;IAEF,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IAEzB,+EAA+E;IAE/E,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,IAAI,EAAE;QAC1D,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,EAAE,CAAC;IAC/B,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,qBAAqB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QAChE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAEjD,MAAM,CAAC,IAAI,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC;QAEpC,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,MAAM,IAAI,eAAe,CAAC,iBAAiB,IAAI,EAAE,EAAE,cAAc,CAAC,CAAC;YACrE,CAAC;YAED,MAAM,YAAY,GAAI,IAAgC,EAAE,CAAC,UAAU,CAAuB,CAAC;YAC3F,wEAAwE;YACxE,4EAA4E;YAC5E,2EAA2E;YAC3E,0EAA0E;YAC1E,oCAAoC;YACpC,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;YAEzC,gGAAgG;YAChG,0FAA0F;YAC1F,MAAM,SAAS,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;YAClD,IAAI,SAAS,KAAK,qBAAqB,EAAE,CAAC;gBACxC,MAAM,IAAI,eAAe,CACvB,2LAA2L,EAC3L,qBAAqB,CACtB,CAAC;YACJ,CAAC;YACD,IAAI,SAAS,KAAK,8BAA8B,EAAE,CAAC;gBACjD,MAAM,IAAI,eAAe,CACvB,SAAS,IAAI,mIAAmI,EAChJ,8BAA8B,CAC/B,CAAC;YACJ,CAAC;YAED,MAAM,UAAU,GAAG,eAAe,CAAC,SAAS,CAAC,YAAY,CAAC,CAAC;YAC3D,MAAM,MAAM,GAAG,aAAa,EAAE,WAAW;gBACvC,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,EAAE,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,WAAW,EAAE,CAAC;gBACzG,CAAC,CAAC,UAAU,CAAC;YACf,MAAM,QAAQ,GAAG,CAAC,IAAI,IAAI,EAAE,CAA4B,CAAC;YAEzD,8EAA8E;YAC9E,4EAA4E;YAC5E,4EAA4E;YAC5E,+DAA+D;YAC/D,IAAI,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,qBAAqB,EAAE,EAAE,WAAW,EAAE,CAAC;gBACnG,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;wBACvC,OAAO,EAAE,WAAW,IAAI,cAAc,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,YAAY,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,iBAAiB,eAAe,CAAC,cAAc,EAAE,iCAAiC;wBAC/N,eAAe,EAAE;4BACf,IAAI,EAAE,QAAQ;4BACd,UAAU,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,0CAA0C,EAAE,EAAE;4BACrG,QAAQ,EAAE,CAAC,SAAS,CAAC;yBACtB;qBACF,CAAC,CAAC;oBACH,IAAI,OAAO,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAE,OAAO,CAAC,OAA+C,EAAE,CAAC,SAAS,CAAC,EAAE,CAAC;wBAC1G,OAAO,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,IAAI,EAAE,cAAc,IAAI,qBAAqB,EAAE,CAAC,EAAE,CAAC;oBACjG,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,2EAA2E;gBAC7E,CAAC;YACH,CAAC;YAED,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,MAAM,CAAC,kBAAkB,CAAC,CAAC;YAEzD,4EAA4E;YAC5E,6EAA6E;YAC7E,4EAA4E;YAC5E,MAAM,aAAa,GAAI,OAAO,CAAC,MAA0D,CAAC,KAAK,EAAE,aAAa,CAAC;YAC/G,MAAM,aAAa,GAAG,aAAa,KAAK,SAAS,IAAI,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAClF,IAAI,SAAqD,CAAC;YAC1D,IAAI,aAAa,EAAE,CAAC;gBAClB,IAAI,GAAG,GAAG,CAAC,CAAC;gBACZ,MAAM,YAAY,GAAG,CAAC,QAAgB,EAAE,OAAe,EAAE,EAAE,CACzD,MAAM,CAAC,YAAY,CAAC;oBAClB,MAAM,EAAE,wBAAwB;oBAChC,MAAM,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE;iBACzD,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAiD,CAAC,CAAC,CAAC;gBACpE,MAAM,YAAY,CAAC,CAAC,EAAE,YAAY,IAAI,GAAG,CAAC,CAAC;gBAC3C,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE;oBAC3B,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;oBAC5B,KAAK,YAAY,CAAC,GAAG,EAAE,WAAW,IAAI,GAAG,CAAC,CAAC;gBAC7C,CAAC,EAAE,IAAI,CAAC,CAAC;YACX,CAAC;YAED,IAAI,MAAe,CAAC;YACpB,IAAI,CAAC;gBACH,MAAM,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;YACrD,CAAC;oBAAS,CAAC;gBACT,IAAI,SAAS;oBAAE,aAAa,CAAC,SAAS,CAAC,CAAC;gBACxC,IAAI,aAAa,EAAE,CAAC;oBAClB,MAAM,MAAM,CAAC,YAAY,CAAC;wBACxB,MAAM,EAAE,wBAAwB;wBAChC,MAAM,EAAE,EAAE,aAAa,EAAE,QAAQ,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,IAAI,WAAW,EAAE;qBAClF,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAgB,CAAC,CAAC,CAAC;gBACnC,CAAC;YACH,CAAC;YAED,yEAAyE;YACzE,oEAAoE;YACpE,MAAM,UAAU,GAAG,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBACxF,CAAC,CAAC,EAAE,iBAAiB,EAAE,MAAiC,EAAE;gBAC1D,CAAC,CAAC,EAAE,CAAC;YACP,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;qBAC5E;iBACF;gBACD,GAAG,UAAU;aACd,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,yBAAyB,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;YAErD,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;gBACrC,OAAO;oBACL,OAAO,EAAE;wBACP;4BACE,IAAI,EAAE,MAAe;4BACrB,IAAI,EAAE,UAAU,KAAK,CAAC,OAAO,WAAW,KAAK,CAAC,IAAI,GAAG;yBACtD;qBACF;oBACD,OAAO,EAAE,IAAI;iBACd,CAAC;YACJ,CAAC;YAED,OAAO;gBACL,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,MAAe;wBACrB,IAAI,EAAE,yBAAyB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,EAAE;qBAC1F;iBACF;gBACD,OAAO,EAAE,IAAI;aACd,CAAC;QACJ,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAE/E,MAAM,CAAC,iBAAiB,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QAC9D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,EAAE,CAAC;IACvC,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,iBAAiB,CAAC,yBAAyB,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE;QACpE,MAAM,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAE/B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,eAAe,CAAC,SAAS,EAAE,CAAC;YAC3C,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAC/C,MAAM,QAAQ,GAAG,GAAG,KAAK,2BAA2B,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC;YAC5F,MAAM,IAAI,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;YAEnF,OAAO;gBACL,QAAQ,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;aACpC,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,CAAC,KAAK,CAAC,wBAAwB,GAAG,EAAE,EAAE,KAAK,CAAC,CAAC;YACnD,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,+EAA+E;IAE/E,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QAC5D,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,CAAC;IACnC,CAAC,CAAC,CAAC;IAEH,8DAA8D;IAC9D,MAAM,CAAC,iBAAiB,CAAC,sBAAsB,EAAE,KAAK,EAAE,OAAO,EAAgB,EAAE;QAC/E,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC;QAEjD,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,EAAE,IAA0C,CAAC,CAAC;QAC1F,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC;QAC7C,CAAC;QAED,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC,CAAC;IAEH,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,iFAAiF;AAEjF,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,YAAY,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,QAAQ,EAAE,CAAC;IACzB,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAEhE,oDAAoD;IACpD,IAAI,UAAU,EAAE,CAAC;QACf,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1D,cAAc,CAAC,UAAU,CAAC,CAAC;QAE3B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,CAAC;QAC1D,cAAc,CAAC,UAAU,CAAC,CAAC;QAE3B,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,sBAAsB,CAAC,CAAC;QAChE,cAAc,CAAC,UAAU,CAAC,CAAC;QAE3B,MAAM,CAAC,IAAI,CAAC,gCAAgC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,MAAM,CAAC,CAAC;QAC/G,MAAM,CAAC,IAAI,CAAC,4BAA4B,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,yBAAyB,CAAC,CAAC;QAC9H,MAAM,CAAC,IAAI,CAAC,uBAAuB,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,MAAM,GAAG,CAAC,CAAC;IACrG,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,EAAE;IACrB,MAAM,CAAC,KAAK,CAAC,uBAAuB,EAAE,KAAK,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/servicenow/client.d.ts

@@ -11,6 +11,11 @@ export declare function basicAuthDiagnostic(): string;
  * authorized — for OAuth this is almost always a missing scope/role on the token.
  */
 export declare function forbiddenDiagnostic(authMethod: 'basic' | 'oauth'): string;
+/**
+ * A business-rule or data-policy abort. ServiceNow returns 403 for these, but they are NOT a
+ * permissions problem, so we surface them separately and never show the roles/ACL checklist.
+ */
+export declare function businessRuleAbortDiagnostic(): string;
 /** Validate and sanitize ServiceNow encoded query strings */
 export declare function validateQuery(query: string): string;
 export declare class ServiceNowClient {
@@ -50,6 +55,12 @@ export declare class ServiceNowClient {
     get instanceUrl(): string;
     /** Human-facing record URL (opens the form in ServiceNow), not the /api/now REST link. */
     recordUrl(table: string, sysId: string): string;
+    /**
+     * Attach a `record_url` deep-link to a record the API just returned, so create/update tool results
+     * always give the user a direct link to open the record. Uses `record_url` (not `url`) so it never
+     * clobbers a real ServiceNow `url` column. No-op if there's no sys_id.
+     */
+    attachRecordUrl<T extends Record<string, any>>(table: string, record: T): T;
     /**
      * Return the fields that ServiceNow Data Policies make mandatory on a table, so an agent can
      * collect them BEFORE a create/update and avoid the "Data Policy Exception: mandatory fields"
@@ -101,6 +112,22 @@ export declare class ServiceNowClient {
         user_display_name?: string;
         [k: string]: any;
     }>;
+    /**
+     * Resolve a scope argument to a sys_scope sys_id. Accepts "global", a scope name
+     * (e.g. "x_myco_app"), an application display name, or a 32-char sys_id. ServiceNow
+     * uses the literal value "global" as the sys_id of the global application.
+     */
+    resolveScopeSysId(scope: string): Promise<string>;
+    /**
+     * Run `fn` with the current user's active application temporarily set to `scope`, then restore it.
+     * ServiceNow stamps application-file records (script includes, business rules, client scripts, UI
+     * actions/policies, ACLs, etc.) with the CALLER'S current application, NOT any sys_scope in the
+     * request body. Over the Table API the only reliable way to target a scope is to switch
+     * `apps.current_app` (the Studio/Developer app picker) around the create. This best-effort restores
+     * the prior value in a finally block. Note: on a shared integration user, concurrent scoped creates
+     * can race on this preference; per-user auth (the gateway default) switches only that user's picker.
+     */
+    withCurrentApp<T>(scope: string, fn: () => Promise<T>): Promise<T>;
     /**
      * Get table schema/structure
      */

package/dist/servicenow/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/servicenow/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EAGpB,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAKpB;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAkB5C;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAuBzE;AAgDD,6DAA6D;AAC7D,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAmBnD;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAAoB;IACtC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,WAAW,CAAC,CAA4B;IAChD,OAAO,CAAC,WAAW,CAAC,CAA4B;IAChD,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,gBAAgB,CAAS;IAEjC,sEAAsE;IACtE,OAAO,CAAC,oBAAoB,CAAC,CAAS;IACtC,yEAAyE;IACzE,OAAO,CAAC,kBAAkB,CAAC,CAAS;IACpC,oGAAoG;IACpG,OAAO,CAAC,mBAAmB,CAAC,CAAS;IACrC,OAAO,CAAC,kBAAkB,CAAC,CAAS;IACpC,OAAO,CAAC,gBAAgB,CAAC,CAAuC;IAEhE,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,WAAW,CAAC,CAAS;gBAEjB,MAAM,EAAE,gBAAgB;IAgBpC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAIzB,4FAA4F;YAC9E,mBAAmB;IA6BjC;;;OAGG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,qGAAqG;IACrG,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,0FAA0F;IAC1F,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAI/C;;;;;OAKG;IACG,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAqCrD;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,gBAAgB;IAqCnG;;OAEG;YACW,YAAY;IA+E1B;;;;OAIG;IACH,OAAO,CAAC,aAAa;IA4BrB;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAO5B;;OAEG;YACW,OAAO;IA+HrB;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA6E7E;;;;;OAKG;IACG,cAAc,IAAI,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC;IAO3H;;OAEG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAwCrD;;OAEG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA+BzH;;OAEG;IACG,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAoChE;;OAEG;IACG,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmClE;;OAEG;IACG,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BrF;;OAEG;IACG,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI5E;;OAEG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IA0BtD;;OAEG;IACG,sBAAsB,CAAC,UAAU,GAAE,OAAe,GAAG,OAAO,CAAC,GAAG,CAAC;IA0BvE;;OAEG;IACG,cAAc,CAAC,UAAU,GAAE,OAAe,GAAG,OAAO,CAAC,GAAG,CAAC;IA0B/D;;OAEG;IACG,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BzF;;OAEG;IACG,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC;IAmDzC;;OAEG;IACG,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IA8B/D;;OAEG;IACG,mBAAmB,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyBjE;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA8BvF;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAwCtG;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiC/D;;OAEG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC;IAmBjF;;;;OAIG;IACG,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAOxD;;;;OAIG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC;IAQnE;;;;;OAKG;IACG,QAAQ,CACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GAC1K,OAAO,CAAC,GAAG,EAAE,CAAC;IAmBjB;;OAEG;IACG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAE,MAAgB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAmBnH;;OAEG;IACG,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAc5E;;;OAGG;IACG,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,GAAG,CAAC;IAMf;;;;;;OAMG;IACG,uBAAuB,CAC3B,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,MAAM,EACpB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACrC,OAAO,CAAC,GAAG,CAAC;IA2Ef,qFAAqF;YACvE,sBAAsB;IAkDpC,6FAA6F;YAC/E,eAAe;IA2B7B;;;;OAIG;IACG,cAAc,CAClB,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,MAAM,EACzB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,GAAG,CAAC;IAQf;;;;OAIG;IACG,cAAc,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,SAAU,GAAG,OAAO,CAAC,GAAG,CAAC;IAqC/E;;;OAGG;IACG,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC;IA2D5G;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;YA4BnD,sBAAsB;IAgDpC;;OAEG;IACG,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAUhF"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/servicenow/client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAEV,gBAAgB,EAChB,kBAAkB,EAClB,oBAAoB,EAGpB,gBAAgB,EACjB,MAAM,YAAY,CAAC;AAKpB;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAkB5C;AAED;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,OAAO,GAAG,OAAO,GAAG,MAAM,CAuBzE;AAED;;;GAGG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,CAWpD;AAgDD,6DAA6D;AAC7D,wBAAgB,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAmBnD;AAED,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,UAAU,CAAoB;IACtC,OAAO,CAAC,QAAQ,CAAW;IAC3B,OAAO,CAAC,WAAW,CAAC,CAA4B;IAChD,OAAO,CAAC,WAAW,CAAC,CAA4B;IAChD,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,YAAY,CAAS;IAC7B,OAAO,CAAC,gBAAgB,CAAS;IAEjC,sEAAsE;IACtE,OAAO,CAAC,oBAAoB,CAAC,CAAS;IACtC,yEAAyE;IACzE,OAAO,CAAC,kBAAkB,CAAC,CAAS;IACpC,oGAAoG;IACpG,OAAO,CAAC,mBAAmB,CAAC,CAAS;IACrC,OAAO,CAAC,kBAAkB,CAAC,CAAS;IACpC,OAAO,CAAC,gBAAgB,CAAC,CAAuC;IAEhE,OAAO,CAAC,WAAW,CAAC,CAAS;IAC7B,OAAO,CAAC,WAAW,CAAC,CAAS;gBAEjB,MAAM,EAAE,gBAAgB;IAgBpC;;;;OAIG;IACH,OAAO,CAAC,iBAAiB;IAIzB,4FAA4F;YAC9E,mBAAmB;IA6BjC;;;OAGG;IACH,IAAI,YAAY,IAAI,MAAM,CAEzB;IAED,qGAAqG;IACrG,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,0FAA0F;IAC1F,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM;IAI/C;;;;OAIG;IACH,eAAe,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,GAAG,CAAC;IAU3E;;;;;OAKG;IACG,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAqCrD;;;OAGG;IACH,QAAQ,CAAC,OAAO,EAAE;QAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,gBAAgB;IAqCnG;;OAEG;YACW,YAAY;IA+E1B;;;;OAIG;IACH,OAAO,CAAC,aAAa;IA4BrB;;;OAGG;IACH,OAAO,CAAC,oBAAoB;IAO5B;;OAEG;YACW,OAAO;IAsJrB;;OAEG;IACG,YAAY,CAAC,MAAM,EAAE,kBAAkB,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA6E7E;;;;;OAKG;IACG,cAAc,IAAI,OAAO,CAAC;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,CAAC,EAAE,MAAM,GAAG,GAAG,CAAA;KAAE,CAAC;IAO3H;;;;OAIG;IACG,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAUvD;;;;;;;;OAQG;IACG,cAAc,CAAC,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IA0BxE;;OAEG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAwCrD;;OAEG;IACG,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,OAAO,GAAG,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA+BzH;;OAEG;IACG,OAAO,CAAC,cAAc,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAoChE;;OAEG;IACG,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAmClE;;OAEG;IACG,YAAY,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BrF;;OAEG;IACG,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAI5E;;OAEG;IACG,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IA0BtD;;OAEG;IACG,sBAAsB,CAAC,UAAU,GAAE,OAAe,GAAG,OAAO,CAAC,GAAG,CAAC;IA0BvE;;OAEG;IACG,cAAc,CAAC,UAAU,GAAE,OAAe,GAAG,OAAO,CAAC,GAAG,CAAC;IA0B/D;;OAEG;IACG,gBAAgB,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA+BzF;;OAEG;IACG,mBAAmB,IAAI,OAAO,CAAC,GAAG,CAAC;IAmDzC;;OAEG;IACG,qBAAqB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IA8B/D;;OAEG;IACG,mBAAmB,CAAC,MAAM,EAAE,GAAG,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAyBjE;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IA8BvF;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAwCtG;;OAEG;IACG,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAiC/D;;OAEG;IACG,aAAa,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC;IAmBjF;;;;OAIG;IACG,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAOxD;;;;OAIG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC;IAQnE;;;;;OAKG;IACG,QAAQ,CACZ,KAAK,EAAE,MAAM,EACb,IAAI,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,YAAY,CAAC,EAAE,OAAO,CAAA;KAAE,GAC1K,OAAO,CAAC,GAAG,EAAE,CAAC;IAmBjB;;OAEG;IACG,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,GAAE,MAAgB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;IAmBnH;;OAEG;IACG,qBAAqB,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,GAAE,MAAW,GAAG,OAAO,CAAC,GAAG,CAAC;IAc5E;;;OAGG;IACG,gBAAgB,CACpB,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,GAAG,CAAC;IAMf;;;;;;OAMG;IACG,uBAAuB,CAC3B,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,MAAM,EACnB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,EACjB,WAAW,CAAC,EAAE,MAAM,EACpB,aAAa,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GACrC,OAAO,CAAC,GAAG,CAAC;IA2Ef,qFAAqF;YACvE,sBAAsB;IAkDpC,6FAA6F;YAC/E,eAAe;IA2B7B;;;;OAIG;IACG,cAAc,CAClB,eAAe,EAAE,MAAM,EACvB,WAAW,EAAE,MAAM,EACnB,iBAAiB,EAAE,MAAM,EACzB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC,GAAG,CAAC;IAQf;;;;OAIG;IACG,cAAc,CAAC,eAAe,EAAE,MAAM,EAAE,QAAQ,SAAU,GAAG,OAAO,CAAC,GAAG,CAAC;IAqC/E;;;OAGG;IACG,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,GAAG,CAAA;KAAE,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC;IA2D5G;;;OAGG;IACG,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;YA4BnD,sBAAsB;IAgDpC;;OAEG;IACG,qBAAqB,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC;CAUhF"}

package/dist/servicenow/client.js

@@ -46,6 +46,22 @@ export function forbiddenDiagnostic(authMethod) {
     lines.push(`  ${authMethod === 'oauth' ? '5' : '3'}. Writes need WRITE_ENABLED=true AND the user\'s write roles; some tools also need scripting/CMDB/ATF flags.`);
     return lines.join('\n');
 }
+/**
+ * A business-rule or data-policy abort. ServiceNow returns 403 for these, but they are NOT a
+ * permissions problem, so we surface them separately and never show the roles/ACL checklist.
+ */
+export function businessRuleAbortDiagnostic() {
+    return [
+        'This was stopped by server-side logic on the instance, not by your permissions. A business rule or',
+        'data policy aborted the write, and that runs for everyone (admins included), so roles do not bypass',
+        'it. The rule or policy named above is telling you the actual reason. Typically:',
+        '  1. The record state or field combination is not allowed by the process (e.g. only one active task',
+        '     at a time, a required field, or a state transition that is not permitted).',
+        '  2. Fix it on the process side (adjust the related records or fields), not by adding roles.',
+        '  To bypass on purpose, an admin deactivates the rule or runs a fix script with',
+        '  current.setWorkflow(false). The REST path runs business rules by design and will not skip them.',
+    ].join('\n');
+}
 // ─── Input validation helpers ────────────────────────────────────────────────
 /** Best-effort MIME type from a file extension, for attachments fetched without a content type. */
 function guessContentType(fileName) {
@@ -131,7 +147,7 @@ export class ServiceNowClient {
         this.authMode = config.authMode || 'service-account';
         this.oauthConfig = config.oauth;
         this.basicConfig = config.basic;
-        this.maxRetries = config.maxRetries || 3;
+        this.maxRetries = config.maxRetries ?? 3; // honor an explicit 0 (|| would turn 0 back into 3)
         this.retryDelayMs = config.retryDelayMs || 1000;
         this.requestTimeoutMs = config.requestTimeoutMs || 30000;
         this.impersonateUserSysId = config.impersonateUserSysId;
@@ -200,6 +216,24 @@ export class ServiceNowClient {
     recordUrl(table, sysId) {
         return `${this.baseUrl}/${encodeURIComponent(table)}.do?sys_id=${encodeURIComponent(sysId)}`;
     }
+    /**
+     * Attach a `record_url` deep-link to a record the API just returned, so create/update tool results
+     * always give the user a direct link to open the record. Uses `record_url` (not `url`) so it never
+     * clobbers a real ServiceNow `url` column. No-op if there's no sys_id.
+     */
+    attachRecordUrl(table, record) {
+        if (!record || typeof record !== 'object')
+            return record;
+        const raw = record.sys_id;
+        const sysId = raw && typeof raw === 'object' ? (raw.value ?? raw.display_value) : raw;
+        if (sysId && !record.record_url) {
+            try {
+                record.record_url = this.recordUrl(table, String(sysId));
+            }
+            catch { /* ignore */ }
+        }
+        return record;
+    }
     /**
      * Return the fields that ServiceNow Data Policies make mandatory on a table, so an agent can
      * collect them BEFORE a create/update and avoid the "Data Policy Exception: mandatory fields"
@@ -460,8 +494,17 @@ export class ServiceNowClient {
                         }
                     }
                     else if (response.status === 403) {
-                        errorCode = 'INSUFFICIENT_PRIVILEGES';
-                        errorMessage = `${errorMessage}\n\n${forbiddenDiagnostic(this.authMethod)}`;
+                        // A business-rule or data-policy abort also returns 403, but it is NOT a permissions
+                        // problem (business rules run for everyone, admin included, and roles do not bypass them).
+                        // Label it as an abort and skip the roles/ACL checklist, which is misleading here.
+                        if (/aborted by Business Rule|Data Policy Exception/i.test(errorMessage)) {
+                            errorCode = 'OPERATION_ABORTED';
+                            errorMessage = `${errorMessage}\n\n${businessRuleAbortDiagnostic()}`;
+                        }
+                        else {
+                            errorCode = 'INSUFFICIENT_PRIVILEGES';
+                            errorMessage = `${errorMessage}\n\n${forbiddenDiagnostic(this.authMethod)}`;
+                        }
                     }
                     else if (response.status === 404) {
                         errorCode = 'NOT_FOUND';
@@ -471,8 +514,16 @@ export class ServiceNowClient {
                     }
                     throw new ServiceNowError(errorMessage, errorCode);
                 }
-                const data = await response.json();
-                return data;
+                // A successful DELETE (and some other 2xx responses) return 204 No Content with an empty
+                // body. Calling response.json() on an empty body throws, which previously surfaced a
+                // *successful* delete as a bogus "No Record found"/parse error. Treat an empty or
+                // no-content body as a clean, result-less success instead.
+                if (response.status === 204)
+                    return undefined;
+                const text = await response.text();
+                if (!text)
+                    return undefined;
+                return JSON.parse(text);
             }
             catch (error) {
                 lastError = error instanceof Error ? error : new Error('Unknown error');
@@ -480,10 +531,18 @@ export class ServiceNowClient {
                 if (error instanceof ServiceNowError) {
                     // 403 is not transient (a role/ACL/data-policy denial won't clear in 4s), so fail fast
                     // instead of burning ~7s on retries.
-                    if (['AUTHENTICATION_FAILED', 'INVALID_REQUEST', 'NOT_FOUND', 'INSUFFICIENT_PRIVILEGES'].includes(error.code)) {
+                    if (['AUTHENTICATION_FAILED', 'INVALID_REQUEST', 'NOT_FOUND', 'INSUFFICIENT_PRIVILEGES', 'OPERATION_ABORTED'].includes(error.code)) {
                         throw error;
                     }
                 }
+                // Never auto-retry a non-idempotent write when we got no HTTP response (network error, timeout
+                // or abort). The write may already have committed on the server, so replaying it can duplicate
+                // the effect. A ServiceNowError means the server DID respond; a bare Error means no response.
+                const method = (options.method || 'GET').toUpperCase();
+                const safeToRetry = method === 'GET' || method === 'HEAD' || method === 'OPTIONS';
+                if (!safeToRetry && !(error instanceof ServiceNowError)) {
+                    throw lastError;
+                }
                 // Retry on network errors or server errors
                 if (attempt < this.maxRetries) {
                     const delay = this.retryDelayMs * Math.pow(2, attempt); // Exponential backoff
@@ -579,6 +638,63 @@ export class ServiceNowClient {
         const response = await this.request(url);
         return response.result || {};
     }
+    /**
+     * Resolve a scope argument to a sys_scope sys_id. Accepts "global", a scope name
+     * (e.g. "x_myco_app"), an application display name, or a 32-char sys_id. ServiceNow
+     * uses the literal value "global" as the sys_id of the global application.
+     */
+    async resolveScopeSysId(scope) {
+        const s = String(scope || '').trim();
+        if (!s || s.toLowerCase() === 'global')
+            return 'global';
+        if (/^[0-9a-f]{32}$/i.test(s))
+            return s;
+        const resp = await this.queryRecords({ table: 'sys_scope', query: `scope=${s}^ORname=${s}`, limit: 1, fields: 'sys_id,scope,name' });
+        const rec = resp.records && resp.records[0];
+        if (rec && rec.sys_id)
+            return String(rec.sys_id);
+        throw new ServiceNowError(`Scope not found: "${scope}". Pass "global", a scope name (e.g. x_myco_app), or a sys_scope sys_id.`, 'INVALID_REQUEST');
+    }
+    /**
+     * Run `fn` with the current user's active application temporarily set to `scope`, then restore it.
+     * ServiceNow stamps application-file records (script includes, business rules, client scripts, UI
+     * actions/policies, ACLs, etc.) with the CALLER'S current application, NOT any sys_scope in the
+     * request body. Over the Table API the only reliable way to target a scope is to switch
+     * `apps.current_app` (the Studio/Developer app picker) around the create. This best-effort restores
+     * the prior value in a finally block. Note: on a shared integration user, concurrent scoped creates
+     * can race on this preference; per-user auth (the gateway default) switches only that user's picker.
+     */
+    async withCurrentApp(scope, fn) {
+        const target = await this.resolveScopeSysId(scope);
+        const me = await this.getCurrentUser();
+        const userSysId = me.user_sys_id;
+        if (!userSysId)
+            throw new ServiceNowError('Cannot target a scope: current user sys_id is unavailable.', 'API_ERROR');
+        const prefResp = await this.queryRecords({ table: 'sys_user_preference', query: `name=apps.current_app^user=${userSysId}`, limit: 1, fields: 'sys_id,value' });
+        const existing = prefResp.records && prefResp.records[0];
+        const prefSysId = existing ? String(existing.sys_id) : undefined;
+        const prior = existing ? String(existing.value ?? '') : undefined;
+        let createdPrefSysId;
+        if (prefSysId) {
+            await this.updateRecord('sys_user_preference', prefSysId, { value: target });
+        }
+        else {
+            const created = await this.createRecord('sys_user_preference', { name: 'apps.current_app', user: userSysId, value: target, type: 'string' });
+            createdPrefSysId = created && created.sys_id ? String(created.sys_id) : undefined;
+        }
+        try {
+            return await fn();
+        }
+        finally {
+            try {
+                if (prefSysId)
+                    await this.updateRecord('sys_user_preference', prefSysId, { value: prior ?? 'global' });
+                else if (createdPrefSysId)
+                    await this.deleteRecord('sys_user_preference', createdPrefSysId);
+            }
+            catch { /* best-effort restore; leaving the picker switched is non-fatal */ }
+        }
+    }
     /**
      * Get table schema/structure
      */
@@ -937,7 +1053,7 @@ export class ServiceNowClient {
                 method: 'POST',
                 body: JSON.stringify(data),
             });
-            return response.result;
+            return this.attachRecordUrl(table, response.result);
         }
         catch (error) {
             if (error instanceof ServiceNowError)
@@ -980,7 +1096,7 @@ export class ServiceNowClient {
                         `ACLs or a data policy may have silently discarded them (the Table API still returns 200), ` +
                         `or a business rule transformed them. Verify the change took effect.`;
             }
-            return result;
+            return this.attachRecordUrl(table, result);
         }
         catch (error) {
             if (error instanceof ServiceNowError)