@bli-cockpit/mcp 0.1.115 → 0.1.116

package/README.md

@@ -109,7 +109,7 @@ about what an agent can reach.
 
 <!-- BEGIN GENERATED verb census — `npm run mcp:readme` -->
 
-**160 of 165 Tower verbs have an MCP twin.**
+**169 of 174 Tower verbs have an MCP twin.**
 Each tool goes through the SAME door its CLI verb calls, with the same
 collector device token — never a second route and never a service-role
 reader. `src/verb-census.test.ts` fails when a verb is in none of the
@@ -117,6 +117,15 @@ three tables below.
 
 | CLI verb | MCP tool | Door |
 | --- | --- | --- |
+| `cockpit approvals approve` | `approvals_approve` | `POST /api/approvals/[id]/approve` |
+| `cockpit approvals create` | `approvals_create` | `POST /api/approvals` |
+| `cockpit approvals edit` | `approvals_edit` | `PATCH /api/approvals/[id]` |
+| `cockpit approvals list` | `approvals_list` | `GET /api/approvals` |
+| `cockpit approvals reject` | `approvals_reject` | `POST /api/approvals/[id]/reject` |
+| `cockpit approvals rules` | `approvals_rules` | `GET /api/approvals/rules` |
+| `cockpit approvals rules create` | `approvals_rules_create` | `POST /api/approvals/rules` |
+| `cockpit approvals rules revoke` | `approvals_rules_revoke` | `POST /api/approvals/rules/[id]/revoke` |
+| `cockpit approvals show` | `approvals_show` | `GET /api/approvals/[id]` |
 | `cockpit brain retry` | `brain_retry` | `POST /api/brain/incidents/retry` |
 | `cockpit brain status` | `brain_status` | `GET /api/brain/incidents` |
 | `cockpit brief done` | `brief_done` | `POST /api/jarvis/ticks` |

package/dist/approvals-tools.d.ts

@@ -0,0 +1,4 @@
+import { type ToolDeps } from "./tool-result.js";
+export declare function registerApprovalsTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps: ToolDeps): void;

package/dist/approvals-tools.js

@@ -0,0 +1,191 @@
+/**
+ * The approvals inbox over MCP (BLI-16945): the nine twins of `cockpit approvals`.
+ *
+ * Plain words: an agent PREPARES an outward act (a mail, a message) as a card; the person
+ * approves it, edits it and approves it, or rejects it. After a few approvals of one kind the
+ * person can turn it into a standing rule ("send without asking"). Every run leaves a receipt.
+ * These tools ride the SAME `/api/approvals` doors the browser page and the CLI call, on this
+ * machine's device token, never a second route.
+ *
+ * Three of them are deliberate acts and refuse without `confirm: true`, the same gate as
+ * `mail_send` and the CLI's `--yes`: `approvals_approve` (the guarded act runs and cannot be
+ * recalled), `approvals_rules_create` (future cards send without asking) and
+ * `approvals_rules_revoke` (a standing rule stops). Creating a card, editing one and rejecting one
+ * reach nobody, so they need none.
+ *
+ * A refused send answers 502 with the door's reason and its "Not sent" sentence; this relays both
+ * verbatim, as an error, and approving again retries.
+ */
+import { z } from "zod";
+import { callAgentDoor } from "./agent-door.js";
+import { CONFIRM_INPUT, EMAIL_INPUT, dataResult, doorFailureText, errorResult, queryString, registrarFor, unconfirmed, withSession, } from "./tool-result.js";
+const LIST_STATUSES = ["open", "done", "pending", "executing", "executed", "failed", "rejected"];
+const SOURCE_KINDS = ["session", "meeting", "ticket", "message", "mail", "jarvis", "schedule", "manual"];
+const CARD_ID = z.string().uuid().describe("The card id, from approvals_list.");
+const ADDRESS = z.object({
+    name: z.string().max(200).optional().describe("The person's display name."),
+    address: EMAIL_INPUT.describe("The email address."),
+});
+/** Every field a card's `payload` can carry today (mail.send and msg.send); the door checks the fields of the kind named. */
+const PAYLOAD = z.looseObject({
+    account: z.string().max(100).optional().describe("mail.send: the exact connected mailbox label to send from. Omit for the default."),
+    account_id: z.string().uuid().optional().describe("mail.send: the mailbox id to send from, instead of a label."),
+    to: z.array(ADDRESS).max(50).optional().describe("mail.send: recipients as { name?, address }."),
+    cc: z.array(ADDRESS).max(50).optional().describe("mail.send: copied recipients as { name?, address }."),
+    subject: z.string().max(998).optional().describe("mail.send: the subject line."),
+    text: z.string().max(500_000).optional().describe("mail.send: the plain-text body."),
+    in_reply_to_message_id: z.string().uuid().optional().describe("mail.send: a message id from mail_read, to send as a reply in that thread."),
+    channel_id: z.string().uuid().optional().describe("msg.send: the channel id from msg_channels."),
+    content: z.string().max(8000).optional().describe("msg.send: the message text."),
+    thread_parent_id: z.string().uuid().optional().describe("msg.send: a message id to reply under."),
+});
+const EDIT = z.looseObject({
+    subject: z.string().max(998).optional().describe("mail.send: the new subject line."),
+    text: z.string().max(500_000).optional().describe("mail.send: the new plain-text body."),
+    content: z.string().max(8000).optional().describe("msg.send: the new message text."),
+});
+export function registerApprovalsTools(server, deps) {
+    const register = registrarFor(server);
+    /** One door call, relayed: the data on success, the door's own reason and sentence on a refusal. */
+    async function ask(tool, method, path, body, headline) {
+        return withSession(deps, async (session) => {
+            const response = await callAgentDoor(session, deps.fetchImpl, method, path, body);
+            if (!response.ok)
+                return errorResult(doorFailureText(tool, response));
+            return dataResult(headline(response.body), response.body);
+        });
+    }
+    const titleOf = (answer) => {
+        const card = answer.card;
+        return typeof card?.title === "string" ? card.title : "that card";
+    };
+    register("approvals_list", {
+        title: "List approval cards",
+        description: "The approvals inbox: outward acts (a mail, a message) that an agent prepared and a person has yet to decide. `status` open (default) is everything still waiting "
+            + "(pending, executing, failed); done is everything decided; or name one status. Each card has its title, who it goes to, why, where it came from, the exact content and its "
+            + "latest receipt. Newest first; `has_more` and `next_before` page backwards. Read-only. `cockpit approvals`, same door.",
+        inputSchema: {
+            status: z.enum(LIST_STATUSES).optional().describe("open (default), done, or one of pending, executing, executed, failed, rejected."),
+            limit: z.number().int().min(1).max(100).optional().describe("How many cards, 1 to 100. Default 50."),
+            before: z.string().min(1).max(100).optional().describe("The next_before cursor of the previous page, to read older cards."),
+        },
+    }, async (args) => {
+        const query = new URLSearchParams();
+        if (typeof args.status === "string")
+            query.set("status", args.status);
+        if (typeof args.limit === "number")
+            query.set("limit", String(args.limit));
+        if (typeof args.before === "string")
+            query.set("before", args.before);
+        return ask("approvals_list", "GET", `/api/approvals${queryString(query)}`, undefined, (answer) => `${String(answer.returned ?? 0)} card(s) shown, ${String(answer.waiting ?? 0)} waiting for a decision.${answer.has_more === true ? " More exist: pass next_before as before." : ""}`);
+    });
+    register("approvals_show", {
+        title: "Read one approval card",
+        description: "One card in full: who it goes to, why, where it came from, the exact content that will be (or was) sent, every receipt with the content the act door was given, "
+            + "and whether a standing rule is worth offering. Read-only. `cockpit approvals show`, same door.",
+        inputSchema: { id: CARD_ID },
+    }, async (args) => ask("approvals_show", "GET", `/api/approvals/${encodeURIComponent(String(args.id))}`, undefined, (answer) => `${titleOf(answer)}.`));
+    register("approvals_create", {
+        title: "Prepare an approval card",
+        description: "Prepares an outward act as a card for the person to approve; nothing is sent. `act_kind` is mail.send (payload: to, subject, text, and optionally account, cc, in_reply_to_message_id) "
+            + "or msg.send (payload: channel_id, content, optionally thread_parent_id). `reason` is why, in a sentence the person reads. `dedupe_key` makes a retry return the same card. "
+            + "If a standing rule already covers the act it is sent at once and the answer says so. `cockpit approvals create`, same door.",
+        inputSchema: {
+            act_kind: z.enum(["mail.send", "msg.send"]).describe("Which kind of act: mail.send or msg.send."),
+            payload: PAYLOAD.describe("The act's exact content; the fields of the kind named."),
+            reason: z.string().trim().min(1).max(2000).describe("Why this should go out, in a sentence the person reads."),
+            kind_label: z.string().trim().min(1).max(120).optional().describe("A short name for this sort of card, like Client follow-up email."),
+            source_kind: z.enum(SOURCE_KINDS).optional().describe("Where the act came from. Default manual."),
+            source_ref: z.string().trim().min(1).max(200).optional().describe("An id or link for the source, like a ticket identifier."),
+            source_label: z.string().trim().min(1).max(300).optional().describe("A short human label for the source, shown on the card."),
+            prepared_by: z.string().trim().min(1).max(80).optional().describe("Who prepared it, like Claude. Default an agent on a paired machine."),
+            dedupe_key: z.string().trim().min(1).max(200).optional().describe("A stable key so preparing the same card twice returns the first."),
+        },
+    }, async (args) => ask("approvals_create", "POST", "/api/approvals", args, (answer) => {
+        if (answer.deduped === true)
+            return `${titleOf(answer)} was already prepared. Nothing new was created.`;
+        if (answer.executed_by_rule === true)
+            return `${titleOf(answer)}: a standing rule sent it without asking.`;
+        return `${titleOf(answer)} is prepared and waiting for the person's decision.`;
+    }));
+    register("approvals_approve", {
+        title: "Approve an approval card",
+        description: "Approves a card: the guarded act RUNS (the mail goes out, the message posts) and cannot be taken back, so confirm must be true. `edit` ({ subject, text } or { content }) "
+            + "is applied first, in one step. If the send is refused the answer is an error carrying the door's reason and its \"Not sent\" sentence, the card is marked failed, and approving again retries. "
+            + "A card already decided is refused with already_decided. `cockpit approvals approve`, same door.",
+        inputSchema: {
+            id: CARD_ID,
+            edit: EDIT.optional().describe("An edit to apply before approving: { subject, text } for mail, { content } for a message."),
+            confirm: CONFIRM_INPUT,
+        },
+    }, async (args) => {
+        const refusal = unconfirmed(args, "Approving lets the guarded act run, and a sent mail or message cannot be recalled.");
+        if (refusal)
+            return refusal;
+        return ask("approvals_approve", "POST", `/api/approvals/${encodeURIComponent(String(args.id))}/approve`, args.edit ? { edit: args.edit } : {}, (answer) => {
+            const receipt = answer.receipt;
+            return `Approved. ${typeof receipt?.summary === "string" ? receipt.summary : "Done."}`;
+        });
+    });
+    register("approvals_edit", {
+        title: "Edit an approval card",
+        description: "Saves an edit to a waiting card ({ subject, text } for mail, { content } for a message). The card stays waiting and nothing is sent; to edit and send in one step, call "
+            + "approvals_approve with `edit`. Recipients cannot be edited (field_not_editable). `cockpit approvals edit`, same door.",
+        inputSchema: { id: CARD_ID, edit: EDIT.describe("The edit: { subject, text } for mail, { content } for a message.") },
+    }, async (args) => ask("approvals_edit", "PATCH", `/api/approvals/${encodeURIComponent(String(args.id))}`, { edit: args.edit }, (answer) => `Saved your edit to ${titleOf(answer)}. It is still waiting for a decision.`));
+    register("approvals_reject", {
+        title: "Reject an approval card",
+        description: "Declines a waiting card. Nothing is sent and the card is closed; a card already decided is refused with already_decided. `cockpit approvals reject`, same door.",
+        inputSchema: { id: CARD_ID },
+    }, async (args) => ask("approvals_reject", "POST", `/api/approvals/${encodeURIComponent(String(args.id))}/reject`, {}, (answer) => `Rejected ${titleOf(answer)}. Nothing was sent.`));
+    register("approvals_rules", {
+        title: "List standing approval rules",
+        description: "The person's standing rules: kinds of card that send without asking, who they cover, how often each has fired and whether it is still active. Read-only. `cockpit approvals rules`, same door.",
+        inputSchema: {
+            active: z.boolean().optional().describe("true for rules still in force, false for revoked ones. Omit for both."),
+            limit: z.number().int().min(1).max(100).optional().describe("How many rules, 1 to 100. Default 50."),
+        },
+    }, async (args) => {
+        const query = new URLSearchParams();
+        if (typeof args.active === "boolean")
+            query.set("active", String(args.active));
+        if (typeof args.limit === "number")
+            query.set("limit", String(args.limit));
+        return ask("approvals_rules", "GET", `/api/approvals/rules${queryString(query)}`, undefined, (answer) => `${String(answer.returned ?? 0)} standing rule(s).`);
+    });
+    register("approvals_rules_create", {
+        title: "Create a standing approval rule",
+        description: "Turns a card the person approved into a standing rule: from now on this kind of card sends WITHOUT asking, so confirm must be true. `audience` same (default) covers the same people; "
+            + "any covers every audience of this kind. Refused unless the person approved the card themselves (card_not_approved) and when a rule already exists (rule_exists). `cockpit approvals rules create`, same door.",
+        inputSchema: {
+            card_id: z.string().uuid().describe("The id of a card the person approved."),
+            audience: z.enum(["same", "any"]).optional().describe("same (default): the same people. any: every audience of this kind."),
+            label: z.string().trim().min(1).max(400).optional().describe("A name for the rule, shown in the rules list."),
+            confirm: CONFIRM_INPUT,
+        },
+    }, async (args) => {
+        const refusal = unconfirmed(args, "A standing rule makes this kind of card send without asking from now on.");
+        if (refusal)
+            return refusal;
+        const { confirm: _confirm, ...body } = args;
+        return ask("approvals_rules_create", "POST", "/api/approvals/rules", body, (answer) => {
+            const rule = answer.rule;
+            return `Standing rule created: ${typeof rule?.label === "string" ? rule.label : "see the rule"}.`;
+        });
+    });
+    register("approvals_rules_revoke", {
+        title: "Revoke a standing approval rule",
+        description: "Takes a standing rule back: matching cards wait for a decision again. The rule stays in the list as revoked, with the reason. Confirm must be true. "
+            + "`cockpit approvals rules revoke`, same door.",
+        inputSchema: {
+            id: z.string().uuid().describe("The rule id, from approvals_rules."),
+            reason: z.string().trim().min(1).max(300).optional().describe("Why the rule is taken back."),
+            confirm: CONFIRM_INPUT,
+        },
+    }, async (args) => {
+        const refusal = unconfirmed(args, "Revoking a standing rule changes what Tower sends without asking.");
+        if (refusal)
+            return refusal;
+        return ask("approvals_rules_revoke", "POST", `/api/approvals/rules/${encodeURIComponent(String(args.id))}/revoke`, args.reason ? { reason: args.reason } : {}, () => "Standing rule revoked.");
+    });
+}

package/dist/server.js

@@ -42,6 +42,7 @@ import { registerSpeedTools } from "./speed-tools.js";
 import { registerUsageTools } from "./usage-tools.js";
 import { registerLogsTools } from "./logs-tools.js";
 import { registerBrainTools } from "./brain-tools.js";
+import { registerApprovalsTools } from "./approvals-tools.js";
 import { registerSourcesTools } from "./sources-tools.js";
 import { TOWER_SERVER_ICONS } from "./server-icons.js";
 import { installToolRegistration } from "./tool-registration.js";
@@ -522,5 +523,7 @@ export function createServer(deps, options = {}) {
     // BLI-12859: Tower's incident queue (one incident, one issue, per recurring log problem), over
     // the same GET /api/brain/incidents door `cockpit brain status` reads. Read-only.
     registerBrainTools(server, { fetchImpl: deps.fetchImpl });
+    // BLI-16945: the approvals inbox, over the same /api/approvals doors the page and `cockpit approvals` call.
+    registerApprovalsTools(server, { fetchImpl: deps.fetchImpl });
     return server;
 }

package/dist/tool-annotations.d.ts

@@ -17,7 +17,7 @@ export interface TowerToolAnnotations {
  * Writes a person cannot take back by writing again: deletes, revokes,
  * detaches and a merge. These also carry `destructiveHint: true`.
  */
-export declare const DESTRUCTIVE_TOOLS: readonly ["docs_delete", "cal_delete", "cal_detach", "mail_detach", "notes_detach", "notes_rmdir", "glossary_remove", "settings_delete", "team_device_revoke", "github_merge"];
+export declare const DESTRUCTIVE_TOOLS: readonly ["docs_delete", "cal_delete", "cal_detach", "mail_detach", "notes_detach", "notes_rmdir", "glossary_remove", "settings_delete", "team_device_revoke", "github_merge", "approvals_rules_revoke"];
 /**
  * Tools the HOSTED server leaves out, each with the reason. A hosted process
  * is one machine answering many people: a tool that reads that machine's

package/dist/tool-annotations.js

@@ -24,6 +24,7 @@ export const DESTRUCTIVE_TOOLS = [
     "settings_delete",
     "team_device_revoke",
     "github_merge",
+    "approvals_rules_revoke",
 ];
 /**
  * Tools the HOSTED server leaves out, each with the reason. A hosted process

package/dist/tool-catalog.d.ts

@@ -10,7 +10,7 @@
  * from `src/` under Node's type stripping, so it may import nothing.
  */
 /** Tools that change nothing. The smoke calls every one. */
-export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_board", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "rename_pending", "github_pr", "setup_read", "speed_read", "speed_seen", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "glossary_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_recordings", "notes_recording", "notes_sync_status", "notes_granola_status", "notes_bot_upcoming", "ops_status", "slack_coverage", "slack_connect", "slack_disconnect", "slack_read", "memory_map", "memory_rules", "memory_knowledge", "memory_profile", "memory_consolidation", "memory_chain", "settings_show", "settings_list", "model_show", "team_members", "team_github_login_add", "team_github_login_remove", "team_github_login_list", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check", "logs_digest", "brain_status"];
+export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_board", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "rename_pending", "github_pr", "setup_read", "speed_read", "speed_seen", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "glossary_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_recordings", "notes_recording", "notes_sync_status", "notes_granola_status", "notes_bot_upcoming", "ops_status", "slack_coverage", "slack_connect", "slack_disconnect", "slack_read", "memory_map", "memory_rules", "memory_knowledge", "memory_profile", "memory_consolidation", "memory_chain", "settings_show", "settings_list", "model_show", "team_members", "team_github_login_add", "team_github_login_remove", "team_github_login_list", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check", "logs_digest", "brain_status", "approvals_list", "approvals_show", "approvals_rules"];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls
  * each one ONLY with its dry-run flag set (`scripts/smoke.ts` says which).
@@ -21,7 +21,7 @@ export declare const DRY_RUN_TOOLS: readonly ["ops_recompile", "memory_requeue"]
  * candidates, share calendars. Never called by the smoke; covered by the unit
  * suites (`write-tools.test.ts` and each family's own).
  */
-export declare const WRITE_TOOLS: readonly ["logs_key_mint", "brain_retry", "emit_event", "docs_create", "docs_update", "docs_delete", "docs_link", "msg_create_channel", "msg_dm", "msg_send", "work_create_issue", "work_update_issue", "work_move_issue", "work_comment_issue", "careers_rescreen", "careers_send_takehome", "careers_invite", "careers_grade", "careers_decide", "careers_followup", "careers_interview", "careers_takehome_set", "careers_settings_set", "rename_resolve", "github_merge", "github_retitle", "github_rerun", "mail_send", "mail_draft", "mail_rename", "mail_enable", "mail_disable", "mail_default", "mail_remove", "cal_change", "mail_sync", "mail_detach", "cal_create", "cal_share", "cal_sync", "cal_detach", "cal_delete", "jarvis_dispatch", "glossary_add", "glossary_remove", "notes_mkdir", "notes_rmdir", "notes_rename", "notes_upload", "notes_paste", "notes_share", "notes_unshare", "notes_move", "notes_sync", "notes_detach", "memory_experience", "scout_start", "scout_dismiss", "scout_undo", "brief_rewrite", "brief_correct", "brief_done", "brief_undone", "settings_set", "settings_delete", "model_set", "team_invite", "team_role", "team_grant", "team_revoke", "team_device_revoke", "team_device_doctor"];
+export declare const WRITE_TOOLS: readonly ["approvals_create", "approvals_approve", "approvals_edit", "approvals_reject", "approvals_rules_create", "approvals_rules_revoke", "logs_key_mint", "brain_retry", "emit_event", "docs_create", "docs_update", "docs_delete", "docs_link", "msg_create_channel", "msg_dm", "msg_send", "work_create_issue", "work_update_issue", "work_move_issue", "work_comment_issue", "careers_rescreen", "careers_send_takehome", "careers_invite", "careers_grade", "careers_decide", "careers_followup", "careers_interview", "careers_takehome_set", "careers_settings_set", "rename_resolve", "github_merge", "github_retitle", "github_rerun", "mail_send", "mail_draft", "mail_rename", "mail_enable", "mail_disable", "mail_default", "mail_remove", "cal_change", "mail_sync", "mail_detach", "cal_create", "cal_share", "cal_sync", "cal_detach", "cal_delete", "jarvis_dispatch", "glossary_add", "glossary_remove", "notes_mkdir", "notes_rmdir", "notes_rename", "notes_upload", "notes_paste", "notes_share", "notes_unshare", "notes_move", "notes_sync", "notes_detach", "memory_experience", "scout_start", "scout_dismiss", "scout_undo", "brief_rewrite", "brief_correct", "brief_done", "brief_undone", "settings_set", "settings_delete", "model_set", "team_invite", "team_role", "team_grant", "team_revoke", "team_device_revoke", "team_device_doctor"];
 /** Reads that spend a model turn. The smoke's `--no-model` leaves these out. */
 export declare const MODEL_SPENDING_TOOLS: readonly ["jarvis_ask", "jarvis_check"];
 /**

package/dist/tool-catalog.js

@@ -101,6 +101,10 @@ export const READ_TOOLS = [
     "logs_digest",
     // BLI-12859: Tower's incident queue, per project. Reads only.
     "brain_status",
+    // BLI-16945: the approvals inbox and its standing rules. Reads only.
+    "approvals_list",
+    "approvals_show",
+    "approvals_rules",
 ];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls
@@ -113,6 +117,13 @@ export const DRY_RUN_TOOLS = ["ops_recompile", "memory_requeue"];
  * suites (`write-tools.test.ts` and each family's own).
  */
 export const WRITE_TOOLS = [
+    // BLI-16945: approve runs the guarded act; a rule sends without asking. Never smoked.
+    "approvals_create",
+    "approvals_approve",
+    "approvals_edit",
+    "approvals_reject",
+    "approvals_rules_create",
+    "approvals_rules_revoke",
     "logs_key_mint",
     "brain_retry",
     "emit_event",

package/dist/verb-census-spellings.js

@@ -22,6 +22,8 @@
 export const TYPED_SPELLING = {
     // The action is `invite`; the button, the help wall and the docs all say
     // send-takehome, so that is what a stranger is told to type.
+    "approvals rules-create": "approvals rules create",
+    "approvals rules-revoke": "approvals rules revoke",
     "careers invite": "careers send-takehome",
     "careers takehome-show": "careers takehome show",
     "careers takehome-set": "careers takehome set",

package/dist/verb-census.js

@@ -244,6 +244,15 @@ export const MCP_TWINS = {
     "logs": { tool: "logs_digest", door: "LOCAL @bli-cockpit/telemetry-core/log-digest (this machine's logs); `project` reads GET /api/logs (the stored digests)" },
     "brain retry": { tool: "brain_retry", door: "POST /api/brain/incidents/retry" },
     "brain status": { tool: "brain_status", door: "GET /api/brain/incidents" },
+    "approvals list": { tool: "approvals_list", door: "GET /api/approvals" },
+    "approvals show": { tool: "approvals_show", door: "GET /api/approvals/[id]" },
+    "approvals create": { tool: "approvals_create", door: "POST /api/approvals" },
+    "approvals approve": { tool: "approvals_approve", door: "POST /api/approvals/[id]/approve" },
+    "approvals edit": { tool: "approvals_edit", door: "PATCH /api/approvals/[id]" },
+    "approvals reject": { tool: "approvals_reject", door: "POST /api/approvals/[id]/reject" },
+    "approvals rules": { tool: "approvals_rules", door: "GET /api/approvals/rules" },
+    "approvals rules-create": { tool: "approvals_rules_create", door: "POST /api/approvals/rules" },
+    "approvals rules-revoke": { tool: "approvals_rules_revoke", door: "POST /api/approvals/rules/[id]/revoke" },
     "usage sessions": { tool: "usage_sessions", door: "GET /api/usage/sessions" },
     "setup": { tool: "setup_read", door: "GET /api/setup" },
     // BLI-13033: times the data door of every rail page; the twin runs the same GETs.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.115",
+  "version": "0.1.116",
   "private": false,
   "description": "bli-tower: an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",