diff --git a/app/api/roles.spec.ts b/app/api/roles.spec.ts
index 984d76d240..81b6418f4f 100644
--- a/app/api/roles.spec.ts
+++ b/app/api/roles.spec.ts
@@ -8,6 +8,7 @@
 import { describe, expect, it, test } from 'vitest'
 
 import {
+  allRoles,
   byGroupThenName,
   deleteRole,
   getEffectiveRole,
@@ -154,3 +155,7 @@ test('byGroupThenName sorts as expected', () => {
 
   expect([c, e, b, d, a].sort(byGroupThenName)).toEqual([a, b, c, d, e])
 })
+
+test('allRoles', () => {
+  expect(allRoles).toEqual(['admin', 'collaborator', 'viewer'])
+})
diff --git a/app/api/roles.ts b/app/api/roles.ts
index bdd1cf97da..e5c9125382 100644
--- a/app/api/roles.ts
+++ b/app/api/roles.ts
@@ -12,8 +12,7 @@
  * it belongs in the API proper.
  */
 import { useMemo } from 'react'
-
-import { lowestBy, sortBy } from '~/util/array'
+import * as R from 'remeda'
 
 import type { FleetRole, IdentityType, ProjectRole, SiloRole } from './__generated__/Api'
 import { usePrefetchedApiQuery } from './client'
@@ -27,12 +26,13 @@ export type RoleKey = FleetRole | SiloRole | ProjectRole
 /** Turn a role order record into a sorted array of strings. */
 // used for displaying lists of roles, like in a <select>
 const flatRoles = (roleOrder: Record<RoleKey, number>): RoleKey[] =>
-  sortBy(Object.keys(roleOrder) as RoleKey[], (role) => roleOrder[role])
+  R.sortBy(Object.keys(roleOrder) as RoleKey[], (role) => roleOrder[role])
 
-// This is a record only to ensure that all RoleKey are covered
+// This is a record only to ensure that all RoleKey are covered. weird order
+// on purpose so allRoles test can confirm sorting works
 export const roleOrder: Record<RoleKey, number> = {
-  admin: 0,
   collaborator: 1,
+  admin: 0,
   viewer: 2,
 }
 
@@ -41,7 +41,7 @@ export const allRoles = flatRoles(roleOrder)
 
 /** Given a list of roles, get the most permissive one */
 export const getEffectiveRole = (roles: RoleKey[]): RoleKey | undefined =>
-  lowestBy(roles, (role) => roleOrder[role])
+  R.firstBy(roles, (role) => roleOrder[role])
 
 ////////////////////////////
 // Policy helpers
diff --git a/app/api/util.ts b/app/api/util.ts
index 352455c161..643ae5cdc2 100644
--- a/app/api/util.ts
+++ b/app/api/util.ts
@@ -5,9 +5,9 @@
  *
  * Copyright Oxide Computer Company
  */
-/// Helpers for working with API objects
-import { sumBy } from '~/util/array'
-import { mapValues, pick } from '~/util/object'
+
+import * as R from 'remeda'
+
 import { bytesToGiB } from '~/util/units'
 
 import type {
@@ -60,8 +60,7 @@ export function parsePortRange(portRange: string): PortRange | null {
 export const firewallRuleGetToPut = (
   rule: VpcFirewallRule
 ): NoExtraKeys<VpcFirewallRuleUpdate, VpcFirewallRule> =>
-  pick(
-    rule,
+  R.pick(rule, [
     'name',
     'action',
     'description',
@@ -69,8 +68,8 @@ export const firewallRuleGetToPut = (
     'filters',
     'priority',
     'status',
-    'targets'
-  )
+    'targets',
+  ])
 
 /**
  * Generates a valid name given a list of strings. Must be given at least
@@ -90,45 +89,44 @@ export const genName = (...parts: [string, ...string[]]) => {
   )
 }
 
-export const instanceCan = mapValues(
-  {
-    start: ['stopped'],
-    reboot: ['running'],
-    stop: ['running', 'starting'],
-    delete: ['stopped', 'failed'],
-    // https://github.com/oxidecomputer/omicron/blob/9eff6a4/nexus/db-queries/src/db/datastore/disk.rs#L310-L314
-    detachDisk: ['creating', 'stopped', 'failed'],
-    // https://github.com/oxidecomputer/omicron/blob/a7c7a67/nexus/db-queries/src/db/datastore/disk.rs#L183-L184
-    attachDisk: ['creating', 'stopped'],
-    // https://github.com/oxidecomputer/omicron/blob/8f0cbf0/nexus/db-queries/src/db/datastore/network_interface.rs#L482
-    updateNic: ['stopped'],
-  },
-  // cute way to make it ergonomic to call the test while also making the states
-  // available directly
-  (states: InstanceState[]) => {
-    const test = (i: Instance) => states.includes(i.runState)
-    test.states = states
-    return test
-  }
-)
-
-export const diskCan = mapValues(
-  {
-    // https://github.com/oxidecomputer/omicron/blob/4970c71e/nexus/db-queries/src/db/datastore/disk.rs#L578-L582.
-    delete: ['detached', 'creating', 'faulted'],
-    // TODO: link to API source
-    snapshot: ['attached', 'detached'],
-    // https://github.com/oxidecomputer/omicron/blob/4970c71e/nexus/db-queries/src/db/datastore/disk.rs#L169-L172
-    attach: ['creating', 'detached'],
-  },
-  (states: DiskState['state'][]) => {
-    // only have to Pick because we want this to work for both Disk and
-    // Json<Disk>, which we pass to it in the MSW handlers
-    const test = (d: Pick<Disk, 'state'>) => states.includes(d.state.state)
-    test.states = states
-    return test
-  }
-)
+const instanceActions: Record<string, InstanceState[]> = {
+  start: ['stopped'],
+  reboot: ['running'],
+  stop: ['running', 'starting'],
+  delete: ['stopped', 'failed'],
+  // https://github.com/oxidecomputer/omicron/blob/9eff6a4/nexus/db-queries/src/db/datastore/disk.rs#L310-L314
+  detachDisk: ['creating', 'stopped', 'failed'],
+  // https://github.com/oxidecomputer/omicron/blob/a7c7a67/nexus/db-queries/src/db/datastore/disk.rs#L183-L184
+  attachDisk: ['creating', 'stopped'],
+  // https://github.com/oxidecomputer/omicron/blob/8f0cbf0/nexus/db-queries/src/db/datastore/network_interface.rs#L482
+  updateNic: ['stopped'],
+}
+
+// setting .states is a cute way to make it ergonomic to call the test function
+// while also making the states available directly
+
+export const instanceCan = R.mapValues(instanceActions, (states) => {
+  const test = (i: Instance) => states.includes(i.runState)
+  test.states = states
+  return test
+})
+
+const diskActions: Record<string, DiskState['state'][]> = {
+  // https://github.com/oxidecomputer/omicron/blob/4970c71e/nexus/db-queries/src/db/datastore/disk.rs#L578-L582.
+  delete: ['detached', 'creating', 'faulted'],
+  // TODO: link to API source
+  snapshot: ['attached', 'detached'],
+  // https://github.com/oxidecomputer/omicron/blob/4970c71e/nexus/db-queries/src/db/datastore/disk.rs#L169-L172
+  attach: ['creating', 'detached'],
+}
+
+export const diskCan = R.mapValues(diskActions, (states) => {
+  // only have to Pick because we want this to work for both Disk and
+  // Json<Disk>, which we pass to it in the MSW handlers
+  const test = (d: Pick<Disk, 'state'>) => states.includes(d.state.state)
+  test.states = states
+  return test
+})
 
 /** Hard coded in the API, so we can hard code it here. */
 export const FLEET_ID = '001de000-1334-4000-8000-000000000000'
@@ -141,8 +139,8 @@ export function totalCapacity(
 ) {
   return {
     disk_tib: Math.ceil(FUDGE * sleds.length * 32 * TBtoTiB), // TODO: make more real
-    ram_gib: Math.ceil(bytesToGiB(FUDGE * sumBy(sleds, (s) => s.usablePhysicalRam))),
-    cpu: Math.ceil(FUDGE * sumBy(sleds, (s) => s.usableHardwareThreads)),
+    ram_gib: Math.ceil(bytesToGiB(FUDGE * R.sumBy(sleds, (s) => s.usablePhysicalRam))),
+    cpu: Math.ceil(FUDGE * R.sumBy(sleds, (s) => s.usableHardwareThreads)),
   }
 }
 
diff --git a/app/forms/instance-create.tsx b/app/forms/instance-create.tsx
index b5a8e403c3..9659393b56 100644
--- a/app/forms/instance-create.tsx
+++ b/app/forms/instance-create.tsx
@@ -9,6 +9,7 @@ import * as Accordion from '@radix-ui/react-accordion'
 import { useEffect, useMemo, useState } from 'react'
 import { useController, useWatch, type Control } from 'react-hook-form'
 import { useNavigate, type LoaderFunctionArgs } from 'react-router-dom'
+import * as R from 'remeda'
 import type { SetRequired } from 'type-fest'
 
 import {
@@ -72,7 +73,6 @@ import { Slash } from '~/ui/lib/Slash'
 import { Tabs } from '~/ui/lib/Tabs'
 import { TextInputHint } from '~/ui/lib/TextInput'
 import { TipIcon } from '~/ui/lib/TipIcon'
-import { isTruthy } from '~/util/array'
 import { readBlobAsBase64 } from '~/util/file'
 import { docLinks, links } from '~/util/links'
 import { nearest10 } from '~/util/math'
@@ -645,7 +645,7 @@ const AdvancedAccordion = ({
   )
   const attachedFloatingIpsData = attachedFloatingIps
     .map((ip) => attachableFloatingIps.find((fip) => fip.name === ip.floatingIp))
-    .filter(isTruthy)
+    .filter(R.isTruthy)
 
   const closeFloatingIpModal = () => {
     setFloatingIpModalOpen(false)
diff --git a/app/forms/network-interface-edit.tsx b/app/forms/network-interface-edit.tsx
index 264f0b6c79..d274bab439 100644
--- a/app/forms/network-interface-edit.tsx
+++ b/app/forms/network-interface-edit.tsx
@@ -5,17 +5,19 @@
  *
  * Copyright Oxide Computer Company
  */
+import * as R from 'remeda'
+
 import {
   useApiMutation,
   useApiQueryClient,
   type InstanceNetworkInterface,
+  type InstanceNetworkInterfaceUpdate,
 } from '@oxide/api'
 
 import { DescriptionField } from '~/components/form/fields/DescriptionField'
 import { NameField } from '~/components/form/fields/NameField'
 import { SideModalForm } from '~/components/form/SideModalForm'
 import { useForm, useInstanceSelector } from '~/hooks'
-import { pick } from '~/util/object'
 
 type EditNetworkInterfaceFormProps = {
   editing: InstanceNetworkInterface
@@ -36,7 +38,10 @@ export function EditNetworkInterfaceForm({
     },
   })
 
-  const defaultValues = pick(editing, 'name', 'description') // satisfies NetworkInterfaceUpdate
+  const defaultValues = R.pick(editing, [
+    'name',
+    'description',
+  ]) satisfies InstanceNetworkInterfaceUpdate
 
   const form = useForm({ defaultValues })
 
diff --git a/app/forms/subnet-edit.tsx b/app/forms/subnet-edit.tsx
index ed93841a54..99247bf38b 100644
--- a/app/forms/subnet-edit.tsx
+++ b/app/forms/subnet-edit.tsx
@@ -5,13 +5,19 @@
  *
  * Copyright Oxide Computer Company
  */
-import { useApiMutation, useApiQueryClient, type VpcSubnet } from '@oxide/api'
+import * as R from 'remeda'
+
+import {
+  useApiMutation,
+  useApiQueryClient,
+  type VpcSubnet,
+  type VpcSubnetUpdate,
+} from '@oxide/api'
 
 import { DescriptionField } from '~/components/form/fields/DescriptionField'
 import { NameField } from '~/components/form/fields/NameField'
 import { SideModalForm } from '~/components/form/SideModalForm'
 import { useForm, useVpcSelector } from '~/hooks'
-import { pick } from '~/util/object'
 
 type EditSubnetFormProps = {
   onDismiss: () => void
@@ -29,7 +35,7 @@ export function EditSubnetForm({ onDismiss, editing }: EditSubnetFormProps) {
     },
   })
 
-  const defaultValues = pick(editing, 'name', 'description') /* satisfies VpcSubnetUpdate */
+  const defaultValues = R.pick(editing, ['name', 'description']) satisfies VpcSubnetUpdate
 
   const form = useForm({ defaultValues })
 
diff --git a/app/pages/SiloAccessPage.tsx b/app/pages/SiloAccessPage.tsx
index 51fc141373..08383f7545 100644
--- a/app/pages/SiloAccessPage.tsx
+++ b/app/pages/SiloAccessPage.tsx
@@ -37,7 +37,7 @@ import { EmptyMessage } from '~/ui/lib/EmptyMessage'
 import { PageHeader, PageTitle } from '~/ui/lib/PageHeader'
 import { TableActions, TableEmptyBox } from '~/ui/lib/Table'
 import { identityTypeLabel, roleColor } from '~/util/access'
-import { groupBy, isTruthy } from '~/util/array'
+import { groupBy } from '~/util/array'
 import { docLinks } from '~/util/links'
 
 const EmptyState = ({ onClick }: { onClick: () => void }) => (
@@ -84,7 +84,7 @@ export function SiloAccessPage() {
       .map(([userId, userAssignments]) => {
         const siloRole = userAssignments.find((a) => a.roleSource === 'silo')?.roleName
 
-        const roles = [siloRole].filter(isTruthy)
+        const roles = siloRole ? [siloRole] : []
 
         const { name, identityType } = userAssignments[0]
 
diff --git a/app/pages/project/access/ProjectAccessPage.tsx b/app/pages/project/access/ProjectAccessPage.tsx
index b93de0fe2b..521a530eb8 100644
--- a/app/pages/project/access/ProjectAccessPage.tsx
+++ b/app/pages/project/access/ProjectAccessPage.tsx
@@ -9,6 +9,7 @@
 import { createColumnHelper, getCoreRowModel, useReactTable } from '@tanstack/react-table'
 import { useMemo, useState } from 'react'
 import type { LoaderFunctionArgs } from 'react-router-dom'
+import * as R from 'remeda'
 
 import {
   apiQueryClient,
@@ -42,7 +43,7 @@ import { PageHeader, PageTitle } from '~/ui/lib/PageHeader'
 import { TableActions, TableEmptyBox } from '~/ui/lib/Table'
 import { TipIcon } from '~/ui/lib/TipIcon'
 import { identityTypeLabel, roleColor } from '~/util/access'
-import { groupBy, isTruthy, sortBy } from '~/util/array'
+import { groupBy } from '~/util/array'
 import { docLinks } from '~/util/links'
 
 const EmptyState = ({ onClick }: { onClick: () => void }) => (
@@ -100,8 +101,8 @@ export function ProjectAccessPage() {
         const siloAccessRow = userAssignments.find((a) => a.roleSource === 'silo')
         const projectAccessRow = userAssignments.find((a) => a.roleSource === 'project')
 
-        const roleBadges = sortBy(
-          [siloAccessRow, projectAccessRow].filter(isTruthy),
+        const roleBadges = R.sortBy(
+          [siloAccessRow, projectAccessRow].filter(R.isTruthy),
           (r) => roleOrder[r.roleName] // sorts strongest role first
         )
 
diff --git a/app/pages/project/vpcs/VpcPage/tabs/VpcFirewallRulesTab.tsx b/app/pages/project/vpcs/VpcPage/tabs/VpcFirewallRulesTab.tsx
index 854cf36f57..873d1b5b42 100644
--- a/app/pages/project/vpcs/VpcPage/tabs/VpcFirewallRulesTab.tsx
+++ b/app/pages/project/vpcs/VpcPage/tabs/VpcFirewallRulesTab.tsx
@@ -7,6 +7,7 @@
  */
 import { createColumnHelper, getCoreRowModel, useReactTable } from '@tanstack/react-table'
 import { useMemo, useState } from 'react'
+import * as R from 'remeda'
 
 import {
   useApiMutation,
@@ -30,7 +31,6 @@ import { Badge } from '~/ui/lib/Badge'
 import { CreateButton } from '~/ui/lib/CreateButton'
 import { EmptyMessage } from '~/ui/lib/EmptyMessage'
 import { TableEmptyBox } from '~/ui/lib/Table'
-import { sortBy } from '~/util/array'
 import { titleCase } from '~/util/str'
 
 const colHelper = createColumnHelper<VpcFirewallRule>()
@@ -103,7 +103,7 @@ export const VpcFirewallRulesTab = () => {
   const { data } = usePrefetchedApiQuery('vpcFirewallRulesView', {
     query: vpcSelector,
   })
-  const rules = useMemo(() => sortBy(data.rules, (r) => r.priority), [data])
+  const rules = useMemo(() => R.sortBy(data.rules, (r) => r.priority), [data])
 
   const [createModalOpen, setCreateModalOpen] = useState(false)
   const [editing, setEditing] = useState<VpcFirewallRule | null>(null)
diff --git a/app/pages/system/inventory/sled/SledInstancesTab.tsx b/app/pages/system/inventory/sled/SledInstancesTab.tsx
index 4af4856f1c..18117d37d9 100644
--- a/app/pages/system/inventory/sled/SledInstancesTab.tsx
+++ b/app/pages/system/inventory/sled/SledInstancesTab.tsx
@@ -7,6 +7,7 @@
  */
 import { createColumnHelper } from '@tanstack/react-table'
 import type { LoaderFunctionArgs } from 'react-router-dom'
+import * as R from 'remeda'
 
 import { apiQueryClient, type SledInstance } from '@oxide/api'
 import { Instances24Icon } from '@oxide/design-system/icons/react'
@@ -18,7 +19,6 @@ import { useColsWithActions, type MenuAction } from '~/table/columns/action-col'
 import { Columns } from '~/table/columns/common'
 import { PAGE_SIZE, useQueryTable } from '~/table/QueryTable'
 import { EmptyMessage } from '~/ui/lib/EmptyMessage'
-import { pick } from '~/util/object'
 
 const EmptyState = () => {
   return (
@@ -44,7 +44,7 @@ const makeActions = (): MenuAction[] => []
 
 const colHelper = createColumnHelper<SledInstance>()
 const staticCols = [
-  colHelper.accessor((i) => pick(i, 'name', 'siloName', 'projectName'), {
+  colHelper.accessor((i) => R.pick(i, ['name', 'siloName', 'projectName']), {
     header: 'name',
     cell: (info) => {
       const value = info.getValue()
@@ -60,7 +60,7 @@ const staticCols = [
     header: 'status',
     cell: (info) => <InstanceStatusBadge key="run-state" status={info.getValue()} />,
   }),
-  colHelper.accessor((i) => pick(i, 'memory', 'ncpus'), {
+  colHelper.accessor((i) => R.pick(i, ['memory', 'ncpus']), {
     header: 'specs',
     cell: (info) => <InstanceResourceCell value={info.getValue()} />,
   }),
diff --git a/app/util/array.spec.tsx b/app/util/array.spec.tsx
index cf6226a6e9..ad46d4c964 100644
--- a/app/util/array.spec.tsx
+++ b/app/util/array.spec.tsx
@@ -8,38 +8,7 @@
 import { type ReactElement } from 'react'
 import { expect, test } from 'vitest'
 
-import { groupBy, intersperse, lowestBy, sortBy, splitOnceBy, sumBy } from './array'
-
-test('sortBy', () => {
-  expect(sortBy(['d', 'b', 'c', 'a'])).toEqual(['a', 'b', 'c', 'd'])
-
-  expect(sortBy([{ x: 'd' }, { x: 'b' }, { x: 'c' }, { x: 'a' }], (o) => o.x)).toEqual([
-    { x: 'a' },
-    { x: 'b' },
-    { x: 'c' },
-    { x: 'd' },
-  ])
-
-  expect(
-    sortBy(
-      [{ x: [0, 0, 0, 0] }, { x: [0, 0, 0] }, { x: [0] }, { x: [0, 0] }],
-      (o) => o.x.length
-    )
-  ).toEqual([{ x: [0] }, { x: [0, 0] }, { x: [0, 0, 0] }, { x: [0, 0, 0, 0] }])
-})
-
-test('lowestBy', () => {
-  expect(lowestBy([{ x: 'd' }, { x: 'b' }, { x: 'c' }, { x: 'a' }], (o) => o.x)).toEqual({
-    x: 'a',
-  })
-
-  expect(
-    lowestBy(
-      [{ x: [0, 0, 0, 0] }, { x: [0, 0, 0] }, { x: [0] }, { x: [0, 0] }],
-      (o) => o.x.length
-    )
-  ).toEqual({ x: [0] })
-})
+import { groupBy, intersperse } from './array'
 
 test('groupBy', () => {
   expect(
@@ -63,11 +32,6 @@ test('groupBy', () => {
   ])
 })
 
-test('sumBy', () => {
-  expect(sumBy([], (x) => x)).toEqual(0)
-  expect(sumBy([{ a: 1 }, { a: 2 }], (x) => x.a)).toEqual(3)
-})
-
 test('intersperse', () => {
   expect(intersperse([], <>,</>)).toEqual([])
 
@@ -97,10 +61,3 @@ test('intersperse', () => {
   expect(result.map(getText)).toEqual(['a', ',', 'b', ',', 'or', 'c'])
   expect(result.map(getKey)).toEqual(['a', 'sep-1', 'b', 'sep-2', 'conj', 'c'])
 })
-
-test('splitOnceBy', () => {
-  expect(splitOnceBy([], () => false)).toEqual([[], []])
-  expect(splitOnceBy([1, 2, 3], () => false)).toEqual([[1, 2, 3], []])
-  expect(splitOnceBy([1, 2, 3], () => true)).toEqual([[], [1, 2, 3]])
-  expect(splitOnceBy([1, 2, 3], (x) => x % 2 === 0)).toEqual([[1], [2, 3]])
-})
diff --git a/app/util/array.ts b/app/util/array.ts
index bc2de39634..2b28eed4b5 100644
--- a/app/util/array.ts
+++ b/app/util/array.ts
@@ -7,76 +7,12 @@
  */
 
 import { cloneElement, type ReactElement } from 'react'
-
-/* eslint-disable @typescript-eslint/no-explicit-any */
-const identity = (x: any) => x
-
-/** Returns a new array sorted by `by`. Assumes return value of `by` is
- * comparable. Default value of `by` is the identity function. */
-export function sortBy<T>(arr: T[], by: (t: T) => any = identity): T[] {
-  const copy = [...arr]
-  copy.sort((a, b) => (by(a) < by(b) ? -1 : by(a) > by(b) ? 1 : 0))
-  return copy
-}
-
-/** Equivalent to `sortBy(...)[0]` but O(N) */
-export function lowestBy<T>(arr: T[], by: (t: T) => any = identity): T | undefined {
-  if (arr.length === 0) return undefined
-
-  let lowest = arr[0]
-  let lowestScore = by(arr[0])
-  for (let i = 1; i < arr.length; i++) {
-    const score = by(arr[i])
-    if (score < lowestScore) {
-      lowest = arr[i]
-      lowestScore = score
-    }
-  }
-  return lowest
-}
-/* eslint-enable @typescript-eslint/no-explicit-any */
+import * as R from 'remeda'
 
 type GroupKey = string | number | symbol
 
 export function groupBy<T>(arr: T[], by: (t: T) => GroupKey) {
-  const groups: Record<GroupKey, T[]> = {}
-  for (const item of arr) {
-    const key = by(item)
-    if (!(key in groups)) {
-      groups[key] = []
-    }
-    groups[key].push(item)
-  }
-  return Object.entries(groups)
-}
-
-/**
- * Split a list into two, one with `by(item)` true, the other with `by(item)`
- * false
- */
-export function partitionBy<T>(arr: T[], by: (t: T) => boolean): [T[], T[]] {
-  const yes: T[] = []
-  const no: T[] = []
-  for (const item of arr) {
-    const target = by(item) ? yes : no
-    target.push(item)
-  }
-  return [yes, no]
-}
-
-type Truthy<T> = T extends false | '' | 0 | null | undefined ? never : T
-
-/**
- * TS-friendly version of `Boolean` for when you want to filter for truthy
- * values. Use `.filter(isTruthy)` instead of `.filter(Boolean)`. See
- * [StackOverflow](https://stackoverflow.com/a/58110124/604986).
- */
-export function isTruthy<T>(value: T): value is Truthy<T> {
-  return !!value
-}
-
-export function sumBy<T>(items: T[], fn: (item: T) => number): number {
-  return items.map(fn).reduce((a, b) => a + b, 0)
+  return Object.entries(R.groupBy(arr, by))
 }
 
 /**
@@ -102,11 +38,3 @@ export function intersperse(
     return [sep0, item]
   })
 }
-
-/**
- * Split array at first element where `by` is true. That element lands in the second array.
- */
-export function splitOnceBy<T>(array: T[], by: (t: T) => boolean) {
-  const i = array.findIndex(by)
-  return i === -1 ? [array, []] : [array.slice(0, i), array.slice(i)]
-}
diff --git a/app/util/math.ts b/app/util/math.ts
index ded991d7a1..a0834f100a 100644
--- a/app/util/math.ts
+++ b/app/util/math.ts
@@ -6,7 +6,7 @@
  * Copyright Oxide Computer Company
  */
 
-import { splitOnceBy } from './array'
+import * as R from 'remeda'
 
 /**
  * Get the two parts of a number (before decimal and after-and-including
@@ -20,7 +20,7 @@ export function splitDecimal(value: number, locale?: string): [string, string] {
   const nf = Intl.NumberFormat(locale, { maximumFractionDigits: 2 })
   const parts = nf.formatToParts(value)
 
-  const [wholeParts, decimalParts] = splitOnceBy(parts, (p) => p.type === 'decimal')
+  const [wholeParts, decimalParts] = R.splitWhen(parts, (p) => p.type === 'decimal')
 
   return [
     wholeParts.map((p) => p.value).join(''),
diff --git a/app/util/object.spec.ts b/app/util/object.spec.ts
deleted file mode 100644
index 5a2158b1d3..0000000000
--- a/app/util/object.spec.ts
+++ /dev/null
@@ -1,18 +0,0 @@
-/*
- * This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, you can obtain one at https://mozilla.org/MPL/2.0/.
- *
- * Copyright Oxide Computer Company
- */
-import { expect, test } from 'vitest'
-
-import { exclude, pick } from './object'
-
-test('pick', () => {
-  expect(pick({ a: 1, b: '2', c: { d: false } }, 'a', 'b')).toEqual({ a: 1, b: '2' })
-})
-
-test('exclude', () => {
-  expect(exclude({ a: 1, b: '2', c: { d: false } }, 'a', 'c')).toEqual({ b: '2' })
-})
diff --git a/app/util/object.ts b/app/util/object.ts
deleted file mode 100644
index 24655d1436..0000000000
--- a/app/util/object.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-/*
- * This Source Code Form is subject to the terms of the Mozilla Public
- * License, v. 2.0. If a copy of the MPL was not distributed with this
- * file, you can obtain one at https://mozilla.org/MPL/2.0/.
- *
- * Copyright Oxide Computer Company
- */
-
-export const pick = <T extends Record<string, unknown>, K extends keyof T>(
-  obj: T,
-  ...keys: K[]
-) =>
-  Object.fromEntries(
-    Object.entries(obj).filter(([key]) => keys.includes(key as never))
-  ) as Pick<T, K>
-
-export const exclude = <T extends Record<string, unknown>, K extends keyof T>(
-  obj: T,
-  ...keys: K[]
-) =>
-  Object.fromEntries(
-    Object.entries(obj).filter(([key]) => !keys.includes(key as never))
-  ) as Exclude<T, K>
-
-export function mapValues<K extends string, V0, V>(
-  obj: Record<K, V0>,
-  fn: (value: V0, key: K) => V
-) {
-  return Object.fromEntries(
-    Object.entries<V0>(obj).map(([key, value]) => [key, fn(value, key as K)])
-  ) as Record<K, V>
-}
diff --git a/mock-api/msw/db.ts b/mock-api/msw/db.ts
index 7dcd426fb0..04325c1b1e 100644
--- a/mock-api/msw/db.ts
+++ b/mock-api/msw/db.ts
@@ -7,13 +7,13 @@
  */
 // note that isUuid checks for any kind of UUID. strictly speaking, we should
 // only be checking for v4
+import * as R from 'remeda'
 import { validate as isUuid } from 'uuid'
 
 import type { ApiTypes as Api, PathParams as PP } from '@oxide/api'
 import * as mock from '@oxide/api-mocks'
 
 import { json } from '~/api/__generated__/msw-handlers'
-import { pick } from '~/util/object'
 import { commaSeries } from '~/util/str'
 
 import type { Json } from '../json-type'
@@ -287,8 +287,8 @@ export function utilizationForSilo(silo: Json<Api.Silo>) {
   }
 
   return {
-    allocated: pick(quotas, 'cpus', 'storage', 'memory'),
-    provisioned: pick(provisioned, 'cpus', 'storage', 'memory'),
+    allocated: R.pick(quotas, ['cpus', 'storage', 'memory']),
+    provisioned: R.pick(provisioned, ['cpus', 'storage', 'memory']),
     silo_id: silo.id,
     silo_name: silo.name,
   }
diff --git a/mock-api/msw/handlers.ts b/mock-api/msw/handlers.ts
index f848c99807..28736e37c6 100644
--- a/mock-api/msw/handlers.ts
+++ b/mock-api/msw/handlers.ts
@@ -6,6 +6,7 @@
  * Copyright Oxide Computer Company
  */
 import { delay } from 'msw'
+import * as R from 'remeda'
 import { v4 as uuid } from 'uuid'
 
 import {
@@ -20,8 +21,6 @@ import {
 } from '@oxide/api'
 
 import { json, makeHandlers, type Json } from '~/api/__generated__/msw-handlers'
-import { partitionBy, sortBy } from '~/util/array'
-import { pick } from '~/util/object'
 import { validateIp } from '~/util/str'
 import { GiB } from '~/util/units'
 
@@ -487,7 +486,7 @@ export const handlers = makeHandlers({
     const newInstance: Json<Api.Instance> = {
       id: instanceId,
       project_id: project.id,
-      ...pick(body, 'name', 'description', 'hostname', 'memory', 'ncpus'),
+      ...R.pick(body, ['name', 'description', 'hostname', 'memory', 'ncpus']),
       ...getTimestamps(),
       run_state: 'creating',
       time_run_state_updated: new Date().toISOString(),
@@ -680,7 +679,7 @@ export const handlers = makeHandlers({
     const ranges = db.ipPoolRanges
       .filter((r) => r.ip_pool_id === pool.id)
       .map((r) => r.range)
-    const [ipv4Ranges, ipv6Ranges] = partitionBy(ranges, (r) => validateIp(r.first).isv4)
+    const [ipv4Ranges, ipv6Ranges] = R.partition(ranges, (r) => validateIp(r.first).isv4)
 
     // in the real backend there are also SNAT IPs, but we don't currently
     // represent those because they are not exposed through the API (except
@@ -864,7 +863,7 @@ export const handlers = makeHandlers({
 
     const role_assignments = db.roleAssignments
       .filter((r) => r.resource_type === 'project' && r.resource_id === project.id)
-      .map((r) => pick(r, 'identity_id', 'identity_type', 'role_name'))
+      .map((r) => R.pick(r, ['identity_id', 'identity_type', 'role_name']))
 
     return { role_assignments }
   },
@@ -874,7 +873,7 @@ export const handlers = makeHandlers({
     const newAssignments = body.role_assignments.map((r) => ({
       resource_type: 'project' as const,
       resource_id: project.id,
-      ...pick(r, 'identity_id', 'identity_type', 'role_name'),
+      ...R.pick(r, ['identity_id', 'identity_type', 'role_name']),
     }))
 
     const unrelatedAssignments = db.roleAssignments.filter(
@@ -1005,7 +1004,7 @@ export const handlers = makeHandlers({
     const vpc = lookup.vpc(query)
     const rules = db.vpcFirewallRules.filter((r) => r.vpc_id === vpc.id)
 
-    return { rules: sortBy(rules, (r) => r.name) }
+    return { rules: R.sortBy(rules, (r) => r.name) }
   },
   vpcFirewallRulesUpdate({ body, query }) {
     const vpc = lookup.vpc(query)
@@ -1023,7 +1022,7 @@ export const handlers = makeHandlers({
       ...rules,
     ]
 
-    return { rules: sortBy(rules, (r) => r.name) }
+    return { rules: R.sortBy(rules, (r) => r.name) }
   },
   vpcSubnetList({ query }) {
     const vpc = lookup.vpc(query)
@@ -1087,7 +1086,7 @@ export const handlers = makeHandlers({
     const siloId = defaultSilo.id
     const role_assignments = db.roleAssignments
       .filter((r) => r.resource_type === 'silo' && r.resource_id === siloId)
-      .map((r) => pick(r, 'identity_id', 'identity_type', 'role_name'))
+      .map((r) => R.pick(r, ['identity_id', 'identity_type', 'role_name']))
 
     return { role_assignments }
   },
@@ -1096,7 +1095,7 @@ export const handlers = makeHandlers({
     const newAssignments = body.role_assignments.map((r) => ({
       resource_type: 'silo' as const,
       resource_id: siloId,
-      ...pick(r, 'identity_id', 'identity_type', 'role_name'),
+      ...R.pick(r, ['identity_id', 'identity_type', 'role_name']),
     }))
 
     const unrelatedAssignments = db.roleAssignments.filter(
@@ -1161,7 +1160,7 @@ export const handlers = makeHandlers({
       db.instances.map((i) => {
         const project = lookupById(db.projects, i.project_id)
         return {
-          ...pick(i, 'id', 'name', 'time_created', 'time_modified', 'memory', 'ncpus'),
+          ...R.pick(i, ['id', 'name', 'time_created', 'time_modified', 'memory', 'ncpus']),
           state: 'running',
           active_sled_id: sled.id,
           project_name: project.name,
@@ -1231,16 +1230,15 @@ export const handlers = makeHandlers({
 
     const provider: Json<SamlIdentityProvider> = {
       id: uuid(),
-      ...pick(
-        body,
+      ...R.pick(body, [
         'name',
         'acs_url',
         'description',
         'idp_entity_id',
         'slo_url',
         'sp_client_id',
-        'technical_contact_email'
-      ),
+        'technical_contact_email',
+      ]),
       public_cert,
       ...getTimestamps(),
     }
@@ -1268,7 +1266,7 @@ export const handlers = makeHandlers({
 
     const role_assignments = db.roleAssignments
       .filter((r) => r.resource_type === 'fleet' && r.resource_id === FLEET_ID)
-      .map((r) => pick(r, 'identity_id', 'identity_type', 'role_name'))
+      .map((r) => R.pick(r, ['identity_id', 'identity_type', 'role_name']))
 
     return { role_assignments }
   },
diff --git a/mock-api/msw/util.ts b/mock-api/msw/util.ts
index 6b60d97547..58cb518c99 100644
--- a/mock-api/msw/util.ts
+++ b/mock-api/msw/util.ts
@@ -9,6 +9,7 @@ import { differenceInSeconds, subHours } from 'date-fns'
 // Works without the .js for dev server and prod build in MSW mode, but
 // playwright wants the .js. No idea why, let's just add the .js.
 import { IPv4, IPv6 } from 'ip-num/IPNumber.js'
+import * as R from 'remeda'
 
 import {
   FLEET_ID,
@@ -25,7 +26,6 @@ import {
 } from '@oxide/api'
 
 import { json, type Json } from '~/api/__generated__/msw-handlers'
-import { isTruthy } from '~/util/array'
 import { validateIp } from '~/util/str'
 import { GiB, TiB } from '~/util/units'
 
@@ -343,7 +343,7 @@ export function userHasRole(
   const userGroupIds = db.groupMemberships
     .filter((gm) => gm.userId === user.id)
     .map((gm) => db.userGroups.find((g) => g.id === gm.groupId))
-    .filter(isTruthy)
+    .filter(R.isTruthy)
     .map((g) => g.id)
 
   /** All actors with *at least* the specified role on the resource */
diff --git a/mock-api/silo.ts b/mock-api/silo.ts
index 39df9e4947..fb14ccd4c3 100644
--- a/mock-api/silo.ts
+++ b/mock-api/silo.ts
@@ -5,9 +5,10 @@
  *
  * Copyright Oxide Computer Company
  */
+import * as R from 'remeda'
+
 import type { IdentityProvider, SamlIdentityProvider, Silo, SiloQuotas } from '@oxide/api'
 
-import { pick } from '~/util/object'
 import { GiB, TiB } from '~/util/units'
 
 import type { Json } from './json-type'
@@ -107,5 +108,5 @@ export const identityProviders: DbIdp[] = [
  */
 export const toIdp = ({ provider, type }: DbIdp): Json<IdentityProvider> => ({
   provider_type: type,
-  ...pick(provider, 'id', 'name', 'description', 'time_created', 'time_modified'),
+  ...R.pick(provider, ['id', 'name', 'description', 'time_created', 'time_modified']),
 })
diff --git a/package-lock.json b/package-lock.json
index 94fd5795d8..e14c2d010a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -41,6 +41,7 @@
         "react-router-dom": "^6.23.0",
         "react-stately": "^3.31.0",
         "recharts": "^2.12.6",
+        "remeda": "^2.0.3",
         "simplebar-react": "^3.2.5",
         "tslib": "^2.6.2",
         "tunnel-rat": "0.0.4",
@@ -16717,6 +16718,15 @@
         "url": "https://opencollective.com/unified"
       }
     },
+    "node_modules/remeda": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/remeda/-/remeda-2.0.3.tgz",
+      "integrity": "sha512-3OtBvbFnhPJPNDxrP4dQ+Y7ghIErMeTy7KQ2vkC6XzrQHbFdlD0tT6mYaJ2S96lUu3umNnhkqni2lhVOdL9UOQ==",
+      "license": "MIT",
+      "dependencies": {
+        "type-fest": "^4.18.2"
+      }
+    },
     "node_modules/remove-accents": {
       "version": "0.5.0",
       "resolved": "https://registry.npmjs.org/remove-accents/-/remove-accents-0.5.0.tgz",
@@ -18291,7 +18301,6 @@
       "version": "4.18.2",
       "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-4.18.2.tgz",
       "integrity": "sha512-+suCYpfJLAe4OXS6+PPXjW3urOS4IoP9waSiLuXfLgqZODKw/aWwASvzqE886wA0kQgGy0mIWyhd87VpqIy6Xg==",
-      "dev": true,
       "engines": {
         "node": ">=16"
       },
@@ -31363,6 +31372,14 @@
         }
       }
     },
+    "remeda": {
+      "version": "2.0.3",
+      "resolved": "https://registry.npmjs.org/remeda/-/remeda-2.0.3.tgz",
+      "integrity": "sha512-3OtBvbFnhPJPNDxrP4dQ+Y7ghIErMeTy7KQ2vkC6XzrQHbFdlD0tT6mYaJ2S96lUu3umNnhkqni2lhVOdL9UOQ==",
+      "requires": {
+        "type-fest": "^4.18.2"
+      }
+    },
     "remove-accents": {
       "version": "0.5.0",
       "resolved": "https://registry.npmjs.org/remove-accents/-/remove-accents-0.5.0.tgz",
@@ -32518,8 +32535,7 @@
     "type-fest": {
       "version": "4.18.2",
       "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-4.18.2.tgz",
-      "integrity": "sha512-+suCYpfJLAe4OXS6+PPXjW3urOS4IoP9waSiLuXfLgqZODKw/aWwASvzqE886wA0kQgGy0mIWyhd87VpqIy6Xg==",
-      "dev": true
+      "integrity": "sha512-+suCYpfJLAe4OXS6+PPXjW3urOS4IoP9waSiLuXfLgqZODKw/aWwASvzqE886wA0kQgGy0mIWyhd87VpqIy6Xg=="
     },
     "type-is": {
       "version": "1.6.18",
diff --git a/package.json b/package.json
index 3748f62544..7d4f18cddc 100644
--- a/package.json
+++ b/package.json
@@ -64,6 +64,7 @@
     "react-router-dom": "^6.23.0",
     "react-stately": "^3.31.0",
     "recharts": "^2.12.6",
+    "remeda": "^2.0.3",
     "simplebar-react": "^3.2.5",
     "tslib": "^2.6.2",
     "tunnel-rat": "0.0.4",