@bli-cockpit/mcp 0.1.115 → 0.1.117

package/README.md

@@ -109,7 +109,7 @@ about what an agent can reach.
 
 <!-- BEGIN GENERATED verb census — `npm run mcp:readme` -->
 
-**160 of 165 Tower verbs have an MCP twin.**
+**171 of 176 Tower verbs have an MCP twin.**
 Each tool goes through the SAME door its CLI verb calls, with the same
 collector device token — never a second route and never a service-role
 reader. `src/verb-census.test.ts` fails when a verb is in none of the
@@ -117,6 +117,15 @@ three tables below.
 
 | CLI verb | MCP tool | Door |
 | --- | --- | --- |
+| `cockpit approvals approve` | `approvals_approve` | `POST /api/approvals/[id]/approve` |
+| `cockpit approvals create` | `approvals_create` | `POST /api/approvals` |
+| `cockpit approvals edit` | `approvals_edit` | `PATCH /api/approvals/[id]` |
+| `cockpit approvals list` | `approvals_list` | `GET /api/approvals` |
+| `cockpit approvals reject` | `approvals_reject` | `POST /api/approvals/[id]/reject` |
+| `cockpit approvals rules` | `approvals_rules` | `GET /api/approvals/rules` |
+| `cockpit approvals rules create` | `approvals_rules_create` | `POST /api/approvals/rules` |
+| `cockpit approvals rules revoke` | `approvals_rules_revoke` | `POST /api/approvals/rules/[id]/revoke` |
+| `cockpit approvals show` | `approvals_show` | `GET /api/approvals/[id]` |
 | `cockpit brain retry` | `brain_retry` | `POST /api/brain/incidents/retry` |
 | `cockpit brain status` | `brain_status` | `GET /api/brain/incidents` |
 | `cockpit brief done` | `brief_done` | `POST /api/jarvis/ticks` |
@@ -167,6 +176,8 @@ three tables below.
 | `cockpit glossary add` | `glossary_add` | `POST /api/glossary` |
 | `cockpit glossary list` | `glossary_list` | `GET /api/glossary` |
 | `cockpit glossary remove` | `glossary_remove` | `POST /api/glossary` |
+| `cockpit image describe` | `image_describe` | `POST /api/ambient/images` |
+| `cockpit image show` | `image_show` | `GET /api/ambient/images` |
 | `cockpit issue board` | `work_board` | `GET /api/work/board` |
 | `cockpit issue comment` | `work_comment_issue` | `POST /api/work/issues/[id]/comments` |
 | `cockpit issue create` | `work_create_issue` | `POST /api/work/issues` |

package/dist/approvals-tools.d.ts

@@ -0,0 +1,4 @@
+import { type ToolDeps } from "./tool-result.js";
+export declare function registerApprovalsTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps: ToolDeps): void;

package/dist/approvals-tools.js

@@ -0,0 +1,191 @@
+/**
+ * The approvals inbox over MCP (BLI-16945): the nine twins of `cockpit approvals`.
+ *
+ * Plain words: an agent PREPARES an outward act (a mail, a message) as a card; the person
+ * approves it, edits it and approves it, or rejects it. After a few approvals of one kind the
+ * person can turn it into a standing rule ("send without asking"). Every run leaves a receipt.
+ * These tools ride the SAME `/api/approvals` doors the browser page and the CLI call, on this
+ * machine's device token, never a second route.
+ *
+ * Three of them are deliberate acts and refuse without `confirm: true`, the same gate as
+ * `mail_send` and the CLI's `--yes`: `approvals_approve` (the guarded act runs and cannot be
+ * recalled), `approvals_rules_create` (future cards send without asking) and
+ * `approvals_rules_revoke` (a standing rule stops). Creating a card, editing one and rejecting one
+ * reach nobody, so they need none.
+ *
+ * A refused send answers 502 with the door's reason and its "Not sent" sentence; this relays both
+ * verbatim, as an error, and approving again retries.
+ */
+import { z } from "zod";
+import { callAgentDoor } from "./agent-door.js";
+import { CONFIRM_INPUT, EMAIL_INPUT, dataResult, doorFailureText, errorResult, queryString, registrarFor, unconfirmed, withSession, } from "./tool-result.js";
+const LIST_STATUSES = ["open", "done", "pending", "executing", "executed", "failed", "rejected"];
+const SOURCE_KINDS = ["session", "meeting", "ticket", "message", "mail", "jarvis", "schedule", "manual"];
+const CARD_ID = z.string().uuid().describe("The card id, from approvals_list.");
+const ADDRESS = z.object({
+    name: z.string().max(200).optional().describe("The person's display name."),
+    address: EMAIL_INPUT.describe("The email address."),
+});
+/** Every field a card's `payload` can carry today (mail.send and msg.send); the door checks the fields of the kind named. */
+const PAYLOAD = z.looseObject({
+    account: z.string().max(100).optional().describe("mail.send: the exact connected mailbox label to send from. Omit for the default."),
+    account_id: z.string().uuid().optional().describe("mail.send: the mailbox id to send from, instead of a label."),
+    to: z.array(ADDRESS).max(50).optional().describe("mail.send: recipients as { name?, address }."),
+    cc: z.array(ADDRESS).max(50).optional().describe("mail.send: copied recipients as { name?, address }."),
+    subject: z.string().max(998).optional().describe("mail.send: the subject line."),
+    text: z.string().max(500_000).optional().describe("mail.send: the plain-text body."),
+    in_reply_to_message_id: z.string().uuid().optional().describe("mail.send: a message id from mail_read, to send as a reply in that thread."),
+    channel_id: z.string().uuid().optional().describe("msg.send: the channel id from msg_channels."),
+    content: z.string().max(8000).optional().describe("msg.send: the message text."),
+    thread_parent_id: z.string().uuid().optional().describe("msg.send: a message id to reply under."),
+});
+const EDIT = z.looseObject({
+    subject: z.string().max(998).optional().describe("mail.send: the new subject line."),
+    text: z.string().max(500_000).optional().describe("mail.send: the new plain-text body."),
+    content: z.string().max(8000).optional().describe("msg.send: the new message text."),
+});
+export function registerApprovalsTools(server, deps) {
+    const register = registrarFor(server);
+    /** One door call, relayed: the data on success, the door's own reason and sentence on a refusal. */
+    async function ask(tool, method, path, body, headline) {
+        return withSession(deps, async (session) => {
+            const response = await callAgentDoor(session, deps.fetchImpl, method, path, body);
+            if (!response.ok)
+                return errorResult(doorFailureText(tool, response));
+            return dataResult(headline(response.body), response.body);
+        });
+    }
+    const titleOf = (answer) => {
+        const card = answer.card;
+        return typeof card?.title === "string" ? card.title : "that card";
+    };
+    register("approvals_list", {
+        title: "List approval cards",
+        description: "The approvals inbox: outward acts (a mail, a message) that an agent prepared and a person has yet to decide. `status` open (default) is everything still waiting "
+            + "(pending, executing, failed); done is everything decided; or name one status. Each card has its title, who it goes to, why, where it came from, the exact content and its "
+            + "latest receipt. Newest first; `has_more` and `next_before` page backwards. Read-only. `cockpit approvals`, same door.",
+        inputSchema: {
+            status: z.enum(LIST_STATUSES).optional().describe("open (default), done, or one of pending, executing, executed, failed, rejected."),
+            limit: z.number().int().min(1).max(100).optional().describe("How many cards, 1 to 100. Default 50."),
+            before: z.string().min(1).max(100).optional().describe("The next_before cursor of the previous page, to read older cards."),
+        },
+    }, async (args) => {
+        const query = new URLSearchParams();
+        if (typeof args.status === "string")
+            query.set("status", args.status);
+        if (typeof args.limit === "number")
+            query.set("limit", String(args.limit));
+        if (typeof args.before === "string")
+            query.set("before", args.before);
+        return ask("approvals_list", "GET", `/api/approvals${queryString(query)}`, undefined, (answer) => `${String(answer.returned ?? 0)} card(s) shown, ${String(answer.waiting ?? 0)} waiting for a decision.${answer.has_more === true ? " More exist: pass next_before as before." : ""}`);
+    });
+    register("approvals_show", {
+        title: "Read one approval card",
+        description: "One card in full: who it goes to, why, where it came from, the exact content that will be (or was) sent, every receipt with the content the act door was given, "
+            + "and whether a standing rule is worth offering. Read-only. `cockpit approvals show`, same door.",
+        inputSchema: { id: CARD_ID },
+    }, async (args) => ask("approvals_show", "GET", `/api/approvals/${encodeURIComponent(String(args.id))}`, undefined, (answer) => `${titleOf(answer)}.`));
+    register("approvals_create", {
+        title: "Prepare an approval card",
+        description: "Prepares an outward act as a card for the person to approve; nothing is sent. `act_kind` is mail.send (payload: to, subject, text, and optionally account, cc, in_reply_to_message_id) "
+            + "or msg.send (payload: channel_id, content, optionally thread_parent_id). `reason` is why, in a sentence the person reads. `dedupe_key` makes a retry return the same card. "
+            + "If a standing rule already covers the act it is sent at once and the answer says so. `cockpit approvals create`, same door.",
+        inputSchema: {
+            act_kind: z.enum(["mail.send", "msg.send"]).describe("Which kind of act: mail.send or msg.send."),
+            payload: PAYLOAD.describe("The act's exact content; the fields of the kind named."),
+            reason: z.string().trim().min(1).max(2000).describe("Why this should go out, in a sentence the person reads."),
+            kind_label: z.string().trim().min(1).max(120).optional().describe("A short name for this sort of card, like Client follow-up email."),
+            source_kind: z.enum(SOURCE_KINDS).optional().describe("Where the act came from. Default manual."),
+            source_ref: z.string().trim().min(1).max(200).optional().describe("An id or link for the source, like a ticket identifier."),
+            source_label: z.string().trim().min(1).max(300).optional().describe("A short human label for the source, shown on the card."),
+            prepared_by: z.string().trim().min(1).max(80).optional().describe("Who prepared it, like Claude. Default an agent on a paired machine."),
+            dedupe_key: z.string().trim().min(1).max(200).optional().describe("A stable key so preparing the same card twice returns the first."),
+        },
+    }, async (args) => ask("approvals_create", "POST", "/api/approvals", args, (answer) => {
+        if (answer.deduped === true)
+            return `${titleOf(answer)} was already prepared. Nothing new was created.`;
+        if (answer.executed_by_rule === true)
+            return `${titleOf(answer)}: a standing rule sent it without asking.`;
+        return `${titleOf(answer)} is prepared and waiting for the person's decision.`;
+    }));
+    register("approvals_approve", {
+        title: "Approve an approval card",
+        description: "Approves a card: the guarded act RUNS (the mail goes out, the message posts) and cannot be taken back, so confirm must be true. `edit` ({ subject, text } or { content }) "
+            + "is applied first, in one step. If the send is refused the answer is an error carrying the door's reason and its \"Not sent\" sentence, the card is marked failed, and approving again retries. "
+            + "A card already decided is refused with already_decided. `cockpit approvals approve`, same door.",
+        inputSchema: {
+            id: CARD_ID,
+            edit: EDIT.optional().describe("An edit to apply before approving: { subject, text } for mail, { content } for a message."),
+            confirm: CONFIRM_INPUT,
+        },
+    }, async (args) => {
+        const refusal = unconfirmed(args, "Approving lets the guarded act run, and a sent mail or message cannot be recalled.");
+        if (refusal)
+            return refusal;
+        return ask("approvals_approve", "POST", `/api/approvals/${encodeURIComponent(String(args.id))}/approve`, args.edit ? { edit: args.edit } : {}, (answer) => {
+            const receipt = answer.receipt;
+            return `Approved. ${typeof receipt?.summary === "string" ? receipt.summary : "Done."}`;
+        });
+    });
+    register("approvals_edit", {
+        title: "Edit an approval card",
+        description: "Saves an edit to a waiting card ({ subject, text } for mail, { content } for a message). The card stays waiting and nothing is sent; to edit and send in one step, call "
+            + "approvals_approve with `edit`. Recipients cannot be edited (field_not_editable). `cockpit approvals edit`, same door.",
+        inputSchema: { id: CARD_ID, edit: EDIT.describe("The edit: { subject, text } for mail, { content } for a message.") },
+    }, async (args) => ask("approvals_edit", "PATCH", `/api/approvals/${encodeURIComponent(String(args.id))}`, { edit: args.edit }, (answer) => `Saved your edit to ${titleOf(answer)}. It is still waiting for a decision.`));
+    register("approvals_reject", {
+        title: "Reject an approval card",
+        description: "Declines a waiting card. Nothing is sent and the card is closed; a card already decided is refused with already_decided. `cockpit approvals reject`, same door.",
+        inputSchema: { id: CARD_ID },
+    }, async (args) => ask("approvals_reject", "POST", `/api/approvals/${encodeURIComponent(String(args.id))}/reject`, {}, (answer) => `Rejected ${titleOf(answer)}. Nothing was sent.`));
+    register("approvals_rules", {
+        title: "List standing approval rules",
+        description: "The person's standing rules: kinds of card that send without asking, who they cover, how often each has fired and whether it is still active. Read-only. `cockpit approvals rules`, same door.",
+        inputSchema: {
+            active: z.boolean().optional().describe("true for rules still in force, false for revoked ones. Omit for both."),
+            limit: z.number().int().min(1).max(100).optional().describe("How many rules, 1 to 100. Default 50."),
+        },
+    }, async (args) => {
+        const query = new URLSearchParams();
+        if (typeof args.active === "boolean")
+            query.set("active", String(args.active));
+        if (typeof args.limit === "number")
+            query.set("limit", String(args.limit));
+        return ask("approvals_rules", "GET", `/api/approvals/rules${queryString(query)}`, undefined, (answer) => `${String(answer.returned ?? 0)} standing rule(s).`);
+    });
+    register("approvals_rules_create", {
+        title: "Create a standing approval rule",
+        description: "Turns a card the person approved into a standing rule: from now on this kind of card sends WITHOUT asking, so confirm must be true. `audience` same (default) covers the same people; "
+            + "any covers every audience of this kind. Refused unless the person approved the card themselves (card_not_approved) and when a rule already exists (rule_exists). `cockpit approvals rules create`, same door.",
+        inputSchema: {
+            card_id: z.string().uuid().describe("The id of a card the person approved."),
+            audience: z.enum(["same", "any"]).optional().describe("same (default): the same people. any: every audience of this kind."),
+            label: z.string().trim().min(1).max(400).optional().describe("A name for the rule, shown in the rules list."),
+            confirm: CONFIRM_INPUT,
+        },
+    }, async (args) => {
+        const refusal = unconfirmed(args, "A standing rule makes this kind of card send without asking from now on.");
+        if (refusal)
+            return refusal;
+        const { confirm: _confirm, ...body } = args;
+        return ask("approvals_rules_create", "POST", "/api/approvals/rules", body, (answer) => {
+            const rule = answer.rule;
+            return `Standing rule created: ${typeof rule?.label === "string" ? rule.label : "see the rule"}.`;
+        });
+    });
+    register("approvals_rules_revoke", {
+        title: "Revoke a standing approval rule",
+        description: "Takes a standing rule back: matching cards wait for a decision again. The rule stays in the list as revoked, with the reason. Confirm must be true. "
+            + "`cockpit approvals rules revoke`, same door.",
+        inputSchema: {
+            id: z.string().uuid().describe("The rule id, from approvals_rules."),
+            reason: z.string().trim().min(1).max(300).optional().describe("Why the rule is taken back."),
+            confirm: CONFIRM_INPUT,
+        },
+    }, async (args) => {
+        const refusal = unconfirmed(args, "Revoking a standing rule changes what Tower sends without asking.");
+        if (refusal)
+            return refusal;
+        return ask("approvals_rules_revoke", "POST", `/api/approvals/rules/${encodeURIComponent(String(args.id))}/revoke`, args.reason ? { reason: args.reason } : {}, () => "Standing rule revoked.");
+    });
+}

package/dist/image-tools.d.ts

@@ -0,0 +1,4 @@
+import { type ToolDeps } from "./tool-result.js";
+export declare function registerImageTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps: ToolDeps): void;

package/dist/image-tools.js

@@ -0,0 +1,114 @@
+/**
+ * Image descriptions over MCP (BLI-16977): the two twins of `cockpit image describe|show`.
+ *
+ * Plain words: Tower swaps the base64 pictures inside collected transcripts for a short written
+ * description kept against the image's sha256. `image_describe` sends one image through that same
+ * door by hand; `image_show` looks a stored description up by the sha256 or the 16-character
+ * prefix a transcript marker carries. Both ride the ONE `/api/ambient/images` door (POST describes,
+ * GET reads) on this machine's device token, never a second route.
+ *
+ * `image_describe` takes an absolute `path` to a local image file OR `content_base64` (the bytes
+ * themselves). It refuses, by name, an image over the door's size limit and bytes that are not a
+ * PNG, JPEG, GIF or WebP (judged by their first bytes, never the name or a declared type), and it
+ * sends nothing in either case. A hosted server has no caller's disk, so `path` is refused there.
+ */
+import { createHash } from "node:crypto";
+import { readFile, stat } from "node:fs/promises";
+import path from "node:path";
+import { z } from "zod";
+import { IMAGE_DESCRIBE_MAX_BYTES, IMAGE_MEDIA_TYPES, ImageHashQuerySchema, formatImageMarker, imageSizeLabel, sniffImageMediaType, } from "@bli-cockpit/telemetry-core";
+import { callAgentDoor } from "./agent-door.js";
+import { inRemoteAgentDoorScope } from "./agent-door-session.js";
+import { dataResult, doorFailureText, errorResult, queryString, registrarFor, withSession, } from "./tool-result.js";
+const DOOR_PATH = "/api/ambient/images";
+const refuse = (reason, sentence) => ({ ok: false, result: errorResult(`image_describe refused (${reason}): ${sentence} Nothing was sent.`) });
+async function pickBytes(args) {
+    const filePath = typeof args.path === "string" ? args.path : undefined;
+    const base64 = typeof args.content_base64 === "string" ? args.content_base64 : undefined;
+    if ((filePath === undefined) === (base64 === undefined))
+        return refuse("give_path_or_content", "Give exactly one of `path` (an absolute path to an image file) or `content_base64`.");
+    if (base64 !== undefined) {
+        const bytes = Buffer.from(base64, "base64");
+        if (bytes.length === 0)
+            return refuse("invalid_base64", "`content_base64` decoded to nothing.");
+        return { ok: true, bytes };
+    }
+    if (inRemoteAgentDoorScope())
+        return refuse("path_not_available_here", "This server is hosted and has no access to your files; send `content_base64` instead.");
+    if (!path.isAbsolute(filePath))
+        return refuse("path_not_absolute", "`path` must be an absolute path.");
+    try {
+        const info = await stat(filePath);
+        if (!info.isFile())
+            return refuse("not_a_file", "`path` is not a file.");
+        if (info.size > IMAGE_DESCRIBE_MAX_BYTES)
+            return refuse("image_too_large", `That image is ${imageSizeLabel(info.size)}; the describe door takes at most ${imageSizeLabel(IMAGE_DESCRIBE_MAX_BYTES)}.`);
+        return { ok: true, bytes: await readFile(filePath) };
+    }
+    catch {
+        return refuse("file_unreadable", "Could not read the file at `path`.");
+    }
+}
+export function registerImageTools(server, deps) {
+    const register = registrarFor(server);
+    register("image_describe", {
+        title: "Describe an image",
+        description: "Sends ONE image to Tower's describe door and returns its short written description, the way the collector does for every picture in a transcript. Give an absolute `path` to a local "
+            + "PNG, JPEG, GIF or WebP file (up to 3 MB), or `content_base64` with the bytes. An image Tower already described answers from storage (status known). The answer carries the description, "
+            + "the sha256 and the `marker` a transcript would hold in place of the picture. Refuses by name, without sending, an image that is too large or not an image. `cockpit image describe`, same door.",
+        inputSchema: {
+            path: z.string().min(1).max(4096).optional().describe("Absolute path to a local image file. Not available on a hosted server."),
+            content_base64: z.string().min(8).max(Math.ceil((IMAGE_DESCRIBE_MAX_BYTES * 4) / 3) + 16).optional().describe("The image bytes, base64. Use instead of `path`."),
+            media_type: z.enum(IMAGE_MEDIA_TYPES).optional().describe("With content_base64: the type you believe it is. Checked against the bytes; a mismatch is refused."),
+            session_id: z.string().min(1).max(200).optional().describe("The agent session the image came from, an id only."),
+        },
+    }, async (args) => {
+        const picked = await pickBytes(args);
+        if (!picked.ok)
+            return picked.result;
+        const bytes = picked.bytes;
+        if (bytes.length > IMAGE_DESCRIBE_MAX_BYTES)
+            return refuse("image_too_large", `That image is ${imageSizeLabel(bytes.length)}; the describe door takes at most ${imageSizeLabel(IMAGE_DESCRIBE_MAX_BYTES)}.`).result;
+        const mediaType = sniffImageMediaType(bytes);
+        if (!mediaType)
+            return refuse("not_an_image", "Those bytes are not a PNG, JPEG, GIF or WebP image (judged by their first bytes, not the name).").result;
+        if (typeof args.media_type === "string" && args.media_type !== mediaType)
+            return refuse("media_type_mismatch", `You said ${args.media_type} but the bytes are ${mediaType}.`).result;
+        const sha256 = createHash("sha256").update(bytes).digest("hex");
+        const request = {
+            schema_version: "image-describe.v1",
+            sha256,
+            media_type: mediaType,
+            byte_size: bytes.length,
+            content_base64: Buffer.from(bytes).toString("base64"),
+            source: "manual",
+            ...(typeof args.session_id === "string" ? { session_id: args.session_id } : {}),
+        };
+        const marker = formatImageMarker({ sha256, mediaType, byteSize: bytes.length });
+        return withSession(deps, async (session) => {
+            const response = await callAgentDoor(session, deps.fetchImpl, "POST", DOOR_PATH, request);
+            if (!response.ok)
+                return errorResult(doorFailureText("image_describe", response));
+            const description = response.body.description;
+            const said = response.body.status === "known" ? "Tower already had a description for this image." : "Described.";
+            return dataResult(`${said} ${typeof description?.description === "string" ? description.description : ""}`.trim(), { ...response.body, marker });
+        });
+    });
+    register("image_show", {
+        title: "Read an image description",
+        description: "Looks up the stored description of an image by its sha256, or by the first 12 to 64 characters of it (a transcript's `[image sha256:ab12cd34ef567890… png 412KB]` marker carries 16). "
+            + "Answers the descriptions found; an empty list means nothing is stored for that image yet. Read-only. `cockpit image show`, same door.",
+        inputSchema: {
+            sha256: ImageHashQuerySchema.describe("The image's sha256 or a prefix of it: 12 to 64 lowercase hex characters."),
+        },
+    }, async (args) => {
+        const query = new URLSearchParams({ sha256: String(args.sha256) });
+        return withSession(deps, async (session) => {
+            const response = await callAgentDoor(session, deps.fetchImpl, "GET", `${DOOR_PATH}${queryString(query)}`, undefined);
+            if (!response.ok)
+                return errorResult(doorFailureText("image_show", response));
+            const found = Array.isArray(response.body.descriptions) ? response.body.descriptions.length : 0;
+            return dataResult(found === 0 ? "No description stored for that image yet." : `${found} description(s) found.`, response.body);
+        });
+    });
+}

package/dist/memory-twins.d.ts

@@ -4,6 +4,8 @@
  * BLI Memory ships its own MCP server, so its store verbs are twinned against
  * tools on THAT server, over the same `/api/memory/*` doors the CLI verbs call.
  * Split out of `verb-census.ts` to keep that file under the readability band.
+ * The image door's two twins (BLI-16977) sit here for the same reason.
  */
 import type { McpTwin } from "./verb-census.js";
 export declare const MEMORY_STORE_TWINS: Record<string, McpTwin>;
+export declare const IMAGE_TWINS: Record<string, McpTwin>;

package/dist/memory-twins.js

@@ -4,6 +4,7 @@
  * BLI Memory ships its own MCP server, so its store verbs are twinned against
  * tools on THAT server, over the same `/api/memory/*` doors the CLI verbs call.
  * Split out of `verb-census.ts` to keep that file under the readability band.
+ * The image door's two twins (BLI-16977) sit here for the same reason.
  */
 export const MEMORY_STORE_TWINS = {
     "memory search": { tool: "search_memory", door: "POST /api/memory/search", server: "bli-memory" },
@@ -15,3 +16,7 @@ export const MEMORY_STORE_TWINS = {
     "memory private": { tool: "set_memory_visibility", door: "POST /api/memory/visibility", server: "bli-memory" },
     "memory public": { tool: "set_memory_visibility", door: "POST /api/memory/visibility", server: "bli-memory" },
 };
+export const IMAGE_TWINS = {
+    "image describe": { tool: "image_describe", door: "POST /api/ambient/images" },
+    "image show": { tool: "image_show", door: "GET /api/ambient/images" },
+};

package/dist/server.js

@@ -42,6 +42,8 @@ import { registerSpeedTools } from "./speed-tools.js";
 import { registerUsageTools } from "./usage-tools.js";
 import { registerLogsTools } from "./logs-tools.js";
 import { registerBrainTools } from "./brain-tools.js";
+import { registerApprovalsTools } from "./approvals-tools.js";
+import { registerImageTools } from "./image-tools.js";
 import { registerSourcesTools } from "./sources-tools.js";
 import { TOWER_SERVER_ICONS } from "./server-icons.js";
 import { installToolRegistration } from "./tool-registration.js";
@@ -522,5 +524,9 @@ export function createServer(deps, options = {}) {
     // BLI-12859: Tower's incident queue (one incident, one issue, per recurring log problem), over
     // the same GET /api/brain/incidents door `cockpit brain status` reads. Read-only.
     registerBrainTools(server, { fetchImpl: deps.fetchImpl });
+    // BLI-16945: the approvals inbox, over the same /api/approvals doors the page and `cockpit approvals` call.
+    registerApprovalsTools(server, { fetchImpl: deps.fetchImpl });
+    // BLI-16977: image descriptions, over the same /api/ambient/images door `cockpit image` calls.
+    registerImageTools(server, { fetchImpl: deps.fetchImpl });
     return server;
 }

package/dist/tool-annotations.d.ts

@@ -17,7 +17,7 @@ export interface TowerToolAnnotations {
  * Writes a person cannot take back by writing again: deletes, revokes,
  * detaches and a merge. These also carry `destructiveHint: true`.
  */
-export declare const DESTRUCTIVE_TOOLS: readonly ["docs_delete", "cal_delete", "cal_detach", "mail_detach", "notes_detach", "notes_rmdir", "glossary_remove", "settings_delete", "team_device_revoke", "github_merge"];
+export declare const DESTRUCTIVE_TOOLS: readonly ["docs_delete", "cal_delete", "cal_detach", "mail_detach", "notes_detach", "notes_rmdir", "glossary_remove", "settings_delete", "team_device_revoke", "github_merge", "approvals_rules_revoke"];
 /**
  * Tools the HOSTED server leaves out, each with the reason. A hosted process
  * is one machine answering many people: a tool that reads that machine's

package/dist/tool-annotations.js

@@ -24,6 +24,7 @@ export const DESTRUCTIVE_TOOLS = [
     "settings_delete",
     "team_device_revoke",
     "github_merge",
+    "approvals_rules_revoke",
 ];
 /**
  * Tools the HOSTED server leaves out, each with the reason. A hosted process

package/dist/tool-catalog.d.ts

@@ -10,7 +10,7 @@
  * from `src/` under Node's type stripping, so it may import nothing.
  */
 /** Tools that change nothing. The smoke calls every one. */
-export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_board", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "rename_pending", "github_pr", "setup_read", "speed_read", "speed_seen", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "glossary_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_recordings", "notes_recording", "notes_sync_status", "notes_granola_status", "notes_bot_upcoming", "ops_status", "slack_coverage", "slack_connect", "slack_disconnect", "slack_read", "memory_map", "memory_rules", "memory_knowledge", "memory_profile", "memory_consolidation", "memory_chain", "settings_show", "settings_list", "model_show", "team_members", "team_github_login_add", "team_github_login_remove", "team_github_login_list", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check", "logs_digest", "brain_status"];
+export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_board", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "rename_pending", "github_pr", "setup_read", "speed_read", "speed_seen", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "glossary_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_recordings", "notes_recording", "notes_sync_status", "notes_granola_status", "notes_bot_upcoming", "ops_status", "slack_coverage", "slack_connect", "slack_disconnect", "slack_read", "memory_map", "memory_rules", "memory_knowledge", "memory_profile", "memory_consolidation", "memory_chain", "settings_show", "settings_list", "model_show", "team_members", "team_github_login_add", "team_github_login_remove", "team_github_login_list", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check", "logs_digest", "brain_status", "approvals_list", "approvals_show", "approvals_rules", "image_show"];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls
  * each one ONLY with its dry-run flag set (`scripts/smoke.ts` says which).
@@ -21,7 +21,7 @@ export declare const DRY_RUN_TOOLS: readonly ["ops_recompile", "memory_requeue"]
  * candidates, share calendars. Never called by the smoke; covered by the unit
  * suites (`write-tools.test.ts` and each family's own).
  */
-export declare const WRITE_TOOLS: readonly ["logs_key_mint", "brain_retry", "emit_event", "docs_create", "docs_update", "docs_delete", "docs_link", "msg_create_channel", "msg_dm", "msg_send", "work_create_issue", "work_update_issue", "work_move_issue", "work_comment_issue", "careers_rescreen", "careers_send_takehome", "careers_invite", "careers_grade", "careers_decide", "careers_followup", "careers_interview", "careers_takehome_set", "careers_settings_set", "rename_resolve", "github_merge", "github_retitle", "github_rerun", "mail_send", "mail_draft", "mail_rename", "mail_enable", "mail_disable", "mail_default", "mail_remove", "cal_change", "mail_sync", "mail_detach", "cal_create", "cal_share", "cal_sync", "cal_detach", "cal_delete", "jarvis_dispatch", "glossary_add", "glossary_remove", "notes_mkdir", "notes_rmdir", "notes_rename", "notes_upload", "notes_paste", "notes_share", "notes_unshare", "notes_move", "notes_sync", "notes_detach", "memory_experience", "scout_start", "scout_dismiss", "scout_undo", "brief_rewrite", "brief_correct", "brief_done", "brief_undone", "settings_set", "settings_delete", "model_set", "team_invite", "team_role", "team_grant", "team_revoke", "team_device_revoke", "team_device_doctor"];
+export declare const WRITE_TOOLS: readonly ["image_describe", "approvals_create", "approvals_approve", "approvals_edit", "approvals_reject", "approvals_rules_create", "approvals_rules_revoke", "logs_key_mint", "brain_retry", "emit_event", "docs_create", "docs_update", "docs_delete", "docs_link", "msg_create_channel", "msg_dm", "msg_send", "work_create_issue", "work_update_issue", "work_move_issue", "work_comment_issue", "careers_rescreen", "careers_send_takehome", "careers_invite", "careers_grade", "careers_decide", "careers_followup", "careers_interview", "careers_takehome_set", "careers_settings_set", "rename_resolve", "github_merge", "github_retitle", "github_rerun", "mail_send", "mail_draft", "mail_rename", "mail_enable", "mail_disable", "mail_default", "mail_remove", "cal_change", "mail_sync", "mail_detach", "cal_create", "cal_share", "cal_sync", "cal_detach", "cal_delete", "jarvis_dispatch", "glossary_add", "glossary_remove", "notes_mkdir", "notes_rmdir", "notes_rename", "notes_upload", "notes_paste", "notes_share", "notes_unshare", "notes_move", "notes_sync", "notes_detach", "memory_experience", "scout_start", "scout_dismiss", "scout_undo", "brief_rewrite", "brief_correct", "brief_done", "brief_undone", "settings_set", "settings_delete", "model_set", "team_invite", "team_role", "team_grant", "team_revoke", "team_device_revoke", "team_device_doctor"];
 /** Reads that spend a model turn. The smoke's `--no-model` leaves these out. */
 export declare const MODEL_SPENDING_TOOLS: readonly ["jarvis_ask", "jarvis_check"];
 /**

package/dist/tool-catalog.js

@@ -101,6 +101,12 @@ export const READ_TOOLS = [
     "logs_digest",
     // BLI-12859: Tower's incident queue, per project. Reads only.
     "brain_status",
+    // BLI-16945: the approvals inbox and its standing rules. Reads only.
+    "approvals_list",
+    "approvals_show",
+    "approvals_rules",
+    // BLI-16977: a stored image description, by sha256. Reads only.
+    "image_show",
 ];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls
@@ -113,6 +119,15 @@ export const DRY_RUN_TOOLS = ["ops_recompile", "memory_requeue"];
  * suites (`write-tools.test.ts` and each family's own).
  */
 export const WRITE_TOOLS = [
+    // BLI-16977: sends one image to the describe door (a vision-model call, stored against its sha256). Never smoked.
+    "image_describe",
+    // BLI-16945: approve runs the guarded act; a rule sends without asking. Never smoked.
+    "approvals_create",
+    "approvals_approve",
+    "approvals_edit",
+    "approvals_reject",
+    "approvals_rules_create",
+    "approvals_rules_revoke",
     "logs_key_mint",
     "brain_retry",
     "emit_event",

package/dist/verb-census-spellings.js

@@ -22,6 +22,8 @@
 export const TYPED_SPELLING = {
     // The action is `invite`; the button, the help wall and the docs all say
     // send-takehome, so that is what a stranger is told to type.
+    "approvals rules-create": "approvals rules create",
+    "approvals rules-revoke": "approvals rules revoke",
     "careers invite": "careers send-takehome",
     "careers takehome-show": "careers takehome show",
     "careers takehome-set": "careers takehome set",

package/dist/verb-census.js

@@ -29,7 +29,7 @@
 import { readFileSync, readdirSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
-import { MEMORY_STORE_TWINS } from "./memory-twins.js";
+import { IMAGE_TWINS, MEMORY_STORE_TWINS } from "./memory-twins.js";
 const HERE = dirname(fileURLToPath(import.meta.url));
 export const COLLECTOR_COMMANDS_DIR = resolve(HERE, "../../cockpit-local-collector/src/commands");
 function read(file) {
@@ -244,6 +244,15 @@ export const MCP_TWINS = {
     "logs": { tool: "logs_digest", door: "LOCAL @bli-cockpit/telemetry-core/log-digest (this machine's logs); `project` reads GET /api/logs (the stored digests)" },
     "brain retry": { tool: "brain_retry", door: "POST /api/brain/incidents/retry" },
     "brain status": { tool: "brain_status", door: "GET /api/brain/incidents" },
+    "approvals list": { tool: "approvals_list", door: "GET /api/approvals" },
+    "approvals show": { tool: "approvals_show", door: "GET /api/approvals/[id]" },
+    "approvals create": { tool: "approvals_create", door: "POST /api/approvals" },
+    "approvals approve": { tool: "approvals_approve", door: "POST /api/approvals/[id]/approve" },
+    "approvals edit": { tool: "approvals_edit", door: "PATCH /api/approvals/[id]" },
+    "approvals reject": { tool: "approvals_reject", door: "POST /api/approvals/[id]/reject" },
+    "approvals rules": { tool: "approvals_rules", door: "GET /api/approvals/rules" },
+    "approvals rules-create": { tool: "approvals_rules_create", door: "POST /api/approvals/rules" },
+    "approvals rules-revoke": { tool: "approvals_rules_revoke", door: "POST /api/approvals/rules/[id]/revoke" },
     "usage sessions": { tool: "usage_sessions", door: "GET /api/usage/sessions" },
     "setup": { tool: "setup_read", door: "GET /api/setup" },
     // BLI-13033: times the data door of every rail page; the twin runs the same GETs.
@@ -341,8 +350,8 @@ export const MCP_TWINS = {
     "notes granola-status": { tool: "notes_granola_status", door: "GET /api/notes/granola-status" },
     "memory log": { tool: "memory_experience", door: "POST /api/memory/experience" },
     // BLI-4047, BLI-12927: the memory STORE at a terminal. Its twins live on the
-    // second server, `bli-memory` (see `memory-twins.ts`).
-    ...MEMORY_STORE_TWINS,
+    // second server, `bli-memory` (see `memory-twins.ts`, which also holds the image twins).
+    ...MEMORY_STORE_TWINS, ...IMAGE_TWINS,
     // BLI-4533: the compiled one-page profile. Its twin is on `bli-tower`, not
     // `bli-memory`: that server's four tools are the vendor-compatible set the
     // Claude Code plugin expects, and this page is ours.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.115",
+  "version": "0.1.117",
   "private": false,
   "description": "bli-tower: an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",
@@ -37,7 +37,7 @@
     "readme": "npm run build && node scripts/write-readme-census.mjs"
   },
   "dependencies": {
-    "@bli-cockpit/telemetry-core": "0.1.70",
+    "@bli-cockpit/telemetry-core": "0.1.71",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.3.6"
   },