@bli-cockpit/mcp 0.1.122 → 0.1.125

package/README.md

@@ -109,7 +109,7 @@ about what an agent can reach.
 
 <!-- BEGIN GENERATED verb census — `npm run mcp:readme` -->
 
-**187 of 192 Tower verbs have an MCP twin.**
+**188 of 193 Tower verbs have an MCP twin.**
 Each tool goes through the SAME door its CLI verb calls, with the same
 collector device token — never a second route and never a service-role
 reader. `src/verb-census.test.ts` fails when a verb is in none of the
@@ -293,6 +293,7 @@ three tables below.
 | `cockpit team device doctor` | `team_device_doctor` | `POST /api/ambient/devices/[deviceId]/doctor` |
 | `cockpit team device list` | `team_device_list` | `GET /api/team/devices` |
 | `cockpit team device revoke` | `team_device_revoke` | `POST /api/ambient/devices/[deviceId]/revoke` |
+| `cockpit team device scope` | `team_device_scope` | `POST /api/ambient/devices/[deviceId]/scope` |
 | `cockpit team github-login add` | `team_github_login_add` | `POST /api/team/members/[userId]/github-logins` |
 | `cockpit team github-login list` | `team_github_login_list` | `GET /api/team/members/[userId]/github-logins` |
 | `cockpit team github-login remove` | `team_github_login_remove` | `DELETE /api/team/members/[userId]/github-logins` |
@@ -320,7 +321,7 @@ A claim about the verb's nature, not a backlog.
 | `cockpit brief edit` | opens the person's own $EDITOR on this machine and files what they changed; an agent has no editor to open (commands/editor.ts) |
 | `cockpit cal add-ical` | carries a calendar's SECRET iCal ADDRESS — a permanent, unauthenticated, read-anything-on-that-calendar URL. The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so attaching a calendar stays a thing a person does at a terminal (BLI-3709) |
 | `cockpit mail add-imap` | carries a Google app password. The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so attaching a mailbox stays a thing a person does at a terminal (BLI-3708) |
-| `cockpit notes connect` | carries a notetaker credential: an API key (Fellow or Circleback), or for Wispr Flow a browser sign-in whose refresh token the CLI hands straight to Tower. The CLI reads a key from STDIN precisely so it never lands in an argument list, and a browser sign-in has no tool-call equivalent at all; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so connecting a notetaker stays a thing a person does at a terminal or in Tower's Settings (BLI-4383, BLI-12926) |
+| `cockpit notes connect` | an API-key connect (Fellow or Circleback) carries a notetaker credential. The CLI reads the key from STDIN precisely so it never lands in an argument list, and an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so connecting a key stays a thing a person does at a terminal or in Tower's Settings (BLI-4383). Wispr Flow carries no credential through a call: its sign-in is a link the person clicks, started and watched over the same doors by the MCP tools notes_connect_wisprflow and notes_connect_status (BLI-17973) |
 | `cockpit notes webhook` | carries the VENDOR's webhook signing secret, the key an HMAC over every delivered payload is checked against. Exactly the ruling `notes connect` already carries, for the same credential shape: the CLI reads it from STDIN so it never lands in an argument list, and an MCP tool argument travels through a model's context window and whatever transcript store sits behind it (BLI-4394) |
 
 <!-- END GENERATED verb census -->

package/dist/device-twins.d.ts

@@ -0,0 +1,10 @@
+/**
+ * The device-scope twin in the verb census (BLI-17978).
+ *
+ * `cockpit team device scope <device> notetaker_bot|none` and `team_device_scope` both ride
+ * `POST /api/ambient/devices/[deviceId]/scope`, the one door that gives the meeting bot's device the
+ * scope Tower's claim door requires (or takes it away). Split out of `verb-census.ts`, which sits at
+ * the file-size ratchet.
+ */
+import type { McpTwin } from "./verb-census.js";
+export declare const DEVICE_TWINS: Record<string, McpTwin>;

package/dist/device-twins.js

@@ -0,0 +1,11 @@
+/**
+ * The device-scope twin in the verb census (BLI-17978).
+ *
+ * `cockpit team device scope <device> notetaker_bot|none` and `team_device_scope` both ride
+ * `POST /api/ambient/devices/[deviceId]/scope`, the one door that gives the meeting bot's device the
+ * scope Tower's claim door requires (or takes it away). Split out of `verb-census.ts`, which sits at
+ * the file-size ratchet.
+ */
+export const DEVICE_TWINS = {
+    "team device-scope": { tool: "team_device_scope", door: "POST /api/ambient/devices/[deviceId]/scope" },
+};

package/dist/notes-account-tools.d.ts

@@ -5,13 +5,18 @@
  * authenticated with this machine's collector device token.
  *
  * ONE DELIBERATE ASYMMETRY WITH THE CLI, recorded in `verb-census.ts`:
- * **`cockpit notes connect` has NO MCP twin.** It carries a notetaker API key,
- * and the CLI takes that on stdin precisely so it never lands in an argument
- * list. An MCP tool argument IS an argument list: it travels through a model's
- * context window and whatever transcript store sits behind it. That is the
- * same ruling `mail add-imap` and `cal add-ical` already carry, for the same
- * credential shape, and connecting a notetaker stays a thing a person does at
- * a terminal or in Settings.
+ * **an API-key `cockpit notes connect` has NO MCP twin.** It carries a
+ * notetaker API key, and the CLI takes that on stdin precisely so it never
+ * lands in an argument list. An MCP tool argument IS an argument list: it
+ * travels through a model's context window and whatever transcript store sits
+ * behind it. That is the same ruling `mail add-imap` and `cal add-ical`
+ * already carry, for the same credential shape.
+ *
+ * Wispr Flow is the exception that proves it (BLI-17973): its sign-in carries
+ * no credential through a tool call. `notes_connect_wisprflow` starts it over
+ * the same `/api/notes/accounts/wisprflow/start` door the Settings button and
+ * `cockpit notes connect --provider wisprflow` call and returns a link for the
+ * PERSON to click; `notes_connect_status` polls the same status door.
  *
  * Same session discipline as `mail-tools.ts`: the session is loaded fresh per
  * call, so a machine with no `cockpit login` pairing still serves this

package/dist/notes-account-tools.js

@@ -5,13 +5,18 @@
  * authenticated with this machine's collector device token.
  *
  * ONE DELIBERATE ASYMMETRY WITH THE CLI, recorded in `verb-census.ts`:
- * **`cockpit notes connect` has NO MCP twin.** It carries a notetaker API key,
- * and the CLI takes that on stdin precisely so it never lands in an argument
- * list. An MCP tool argument IS an argument list: it travels through a model's
- * context window and whatever transcript store sits behind it. That is the
- * same ruling `mail add-imap` and `cal add-ical` already carry, for the same
- * credential shape, and connecting a notetaker stays a thing a person does at
- * a terminal or in Settings.
+ * **an API-key `cockpit notes connect` has NO MCP twin.** It carries a
+ * notetaker API key, and the CLI takes that on stdin precisely so it never
+ * lands in an argument list. An MCP tool argument IS an argument list: it
+ * travels through a model's context window and whatever transcript store sits
+ * behind it. That is the same ruling `mail add-imap` and `cal add-ical`
+ * already carry, for the same credential shape.
+ *
+ * Wispr Flow is the exception that proves it (BLI-17973): its sign-in carries
+ * no credential through a tool call. `notes_connect_wisprflow` starts it over
+ * the same `/api/notes/accounts/wisprflow/start` door the Settings button and
+ * `cockpit notes connect --provider wisprflow` call and returns a link for the
+ * PERSON to click; `notes_connect_status` polls the same status door.
  *
  * Same session discipline as `mail-tools.ts`: the session is loaded fresh per
  * call, so a machine with no `cockpit login` pairing still serves this
@@ -64,9 +69,9 @@ export function registerNotesAccountTools(server, deps) {
         description: "Every notetaker account (Fellow, Circleback or Wispr Flow; Otter and Granola are named but not connectable) "
             + "connected to Tower that you may see: name, provider, workspace, health and when it was last read, plus the feeds the organization reads for "
             + "everyone (Granola, through its own key). Start here when you need an account id. ALSO answers `coverage`: for every member of the team, which notetakers feed "
-            + "their notes, and which members have none (BLI-12926). Connecting one is NOT available here on purpose — it "
+            + "their notes, and which members have none (BLI-12926). Connecting a Fellow or Circleback key is NOT available here on purpose — it "
             + "carries a credential, so it is done at a terminal with `cockpit notes connect --provider fellow --workspace "
-            + "<subdomain> --key-stdin` (or `--provider wisprflow`, which signs in through a browser) or in Tower's Settings.",
+            + "<subdomain> --key-stdin` or in Tower's Settings. Wispr Flow signs in with a link instead: notes_connect_wisprflow.",
         inputSchema: {},
     }, async () => withSession(deps, async (session) => {
         const response = await callAgentDoor(session, deps.fetchImpl, "GET", "/api/notes/accounts");
@@ -155,10 +160,40 @@ export function registerNotesAccountTools(server, deps) {
             accounts,
         });
     }));
+    register("notes_connect_wisprflow", {
+        title: "Start connecting Wispr Flow",
+        description: "Starts signing in to Wispr Flow, the notetaker with no API key. Answers `authorize_url`: give it to the person as a link to click "
+            + "(they approve on Wispr Flow's page, signed in with the Wispr account that holds their notes, using Google, Apple, Microsoft or company single sign-on) "
+            + "and `attempt_id`, then call notes_connect_status with it to see whether it connected. It is the same door the Settings button and "
+            + "`cockpit notes connect --provider wisprflow` call. Carries no credential: the link is one-time and the verifier stays on Tower's server. "
+            + "Refuses with account_already_connected when Wispr Flow is already connected (detach it first).",
+        inputSchema: {},
+    }, async () => withSession(deps, async (session) => {
+        const response = await callAgentDoor(session, deps.fetchImpl, "POST", "/api/notes/accounts/wisprflow/start", {});
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_connect_wisprflow", response));
+        const url = String(response.body.authorize_url ?? "");
+        return textResult(`Open this link in a browser and approve on Wispr Flow's page, then check with notes_connect_status (attempt_id ${String(response.body.attempt_id)}), `
+            + `expires ${String(response.body.expires_at)}:\n${url}`, response.body);
+    }));
+    register("notes_connect_status", {
+        title: "Check a Wispr Flow sign-in",
+        description: "Where a Wispr Flow sign-in stands: pending (still waiting for the click), connected (with the account id), failed (with a reason label) or expired. "
+            + "Pass the attempt_id notes_connect_wisprflow returned. Only the person who started the attempt can read it.",
+        inputSchema: { attempt_id: z.string().uuid().describe("The attempt_id notes_connect_wisprflow returned.") },
+    }, async (args) => withSession(deps, async (session) => {
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", `/api/notes/accounts/wisprflow/status?attempt_id=${encodeURIComponent(String(args.attempt_id))}`);
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_connect_status", response));
+        const reason = response.body.reason ? ` (${String(response.body.reason)})` : "";
+        return textResult(`Wispr Flow sign-in ${String(response.body.status)}${reason}.`, response.body);
+    }));
     register("notes_sync", {
         title: "Read a notetaker now",
         description: "Reads the meetings this notetaker has recorded since the last pass and files them as meeting notes. "
-            + "Answers with the run's own counts and reason label, which is exactly what the ledger row says. "
+            + "One call is a bounded pass (under a minute): it answers with the run id, the run's own counts and reason label "
+            + "(exactly what the ledger row says), and `more`. While `more` is true, call notes_sync again; each call resumes "
+            + "from the saved cursor, and `done` means the account is caught up. "
             + "The half-hourly cron does this unasked; this is the button for when you do not want to wait.",
         inputSchema: { account_id: z.string().uuid().describe("A notetaker account id (notes_accounts).") },
     }, async (args) => withSession(deps, async (session) => {
@@ -168,6 +203,10 @@ export function registerNotesAccountTools(server, deps) {
         const run = response.body.run;
         return textResult(run
             ? `${run.reason}: ${run.notesAdded} stored, ${run.notesUpdated} unchanged, ${run.notesSkipped} skipped. ${run.detail}`
+                + (run.runId ? ` Run ${run.runId}.` : "")
+                + (run.ok && run.more
+                    ? ` More is waiting${typeof run.remaining === "number" ? ` (${run.remaining})` : ""}: call notes_sync again to continue from the saved cursor.`
+                    : run.ok ? " Caught up." : "")
             : "Tower answered without a run.", response.body);
     }));
     register("notes_detach", {

package/dist/team-write-tools.d.ts

@@ -1,5 +1,5 @@
 /**
- * `team_invite` / `team_role` / `team_device_revoke` MCP tools (BLI-3756 batch
+ * `team_invite` / `team_role` / `team_device_revoke` (and `team_device_scope`, BLI-17978) MCP tools (BLI-3756 batch
  * 2) — the three things an admin does to the team, over the same `/api/team/*`
  * and `/api/ambient/devices/*` doors `cockpit team` calls with the same device
  * token.

package/dist/team-write-tools.js

@@ -1,5 +1,5 @@
 /**
- * `team_invite` / `team_role` / `team_device_revoke` MCP tools (BLI-3756 batch
+ * `team_invite` / `team_role` / `team_device_revoke` (and `team_device_scope`, BLI-17978) MCP tools (BLI-3756 batch
  * 2) — the three things an admin does to the team, over the same `/api/team/*`
  * and `/api/ambient/devices/*` doors `cockpit team` calls with the same device
  * token.
@@ -167,6 +167,28 @@ export function registerTeamWriteTools(server, deps) {
             return errorResult(doorFailureText("team_device_doctor", response));
         return textResult(`Doctor requested for ${String(device.device_name ?? device.device_id)}. Waiting for its next check-in.`, response.body);
     }));
+    register("team_device_scope", {
+        title: "Give the meeting bot's device its scope, or take it away",
+        description: "Grants (`notetaker_bot`) or revokes (`none`) a device's service scope, the same door as `cockpit team device scope`. "
+            + "Without `notetaker_bot` Tower refuses every meeting claim from the bot (bot_scope_required). Super admin only, decided on the server.",
+        inputSchema: {
+            device: z.string().min(1).max(200).describe("A device id or one exact device name."),
+            scope: z.enum(["notetaker_bot", "none"]).describe("`notetaker_bot` to grant, `none` to revoke."),
+        },
+    }, async (args) => withSession(deps, async (session) => {
+        const listed = await listDevices(deps, session);
+        if (!listed.ok)
+            return errorResult(listed.text);
+        const device = findDevice(listed.devices, String(args.device ?? ""));
+        if (!device?.device_id)
+            return errorResult("No unique device matches. Call team_device_list to see ids and names. Nothing was changed.");
+        const response = await callAgentDoor(session, deps.fetchImpl, "POST", `/api/ambient/devices/${encodeURIComponent(device.device_id)}/scope`, { scope: String(args.scope ?? "") }, WRITE_DEADLINE_MS);
+        if (!response.ok)
+            return errorResult(doorFailureText("team_device_scope", response));
+        const name = String(device.device_name ?? device.device_id);
+        return textResult(response.body.changed === false ? `${name} already had that scope. Nothing changed.`
+            : args.scope === "none" ? `Took the service scope away from ${name}.` : `${name} now holds the notetaker_bot scope.`, response.body);
+    }));
     register("team_device_revoke", {
         title: "End a collector device's pairing",
         description: "Revokes one paired machine's token — `cockpit team device revoke`, same door. Irreversible for that token "

package/dist/tool-catalog.d.ts

@@ -10,7 +10,7 @@
  * from `src/` under Node's type stripping, so it may import nothing.
  */
 /** Tools that change nothing. The smoke calls every one. */
-export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_board", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "rename_pending", "github_pr", "setup_read", "speed_read", "speed_seen", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "glossary_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_recordings", "notes_recording", "notes_sync_status", "notes_granola_status", "notes_bot_upcoming", "ops_status", "slack_coverage", "slack_connect", "slack_disconnect", "slack_read", "memory_map", "memory_rules", "memory_knowledge", "memory_profile", "memory_consolidation", "memory_chain", "settings_show", "settings_list", "model_show", "team_members", "team_github_login_add", "team_github_login_remove", "team_github_login_list", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check", "logs_digest", "brain_status", "approvals_list", "approvals_show", "approvals_rules", "manager_clients", "manager_client", "manager_run", "manager_list", "manager_queue", "manager_show", "image_show"];
+export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_board", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "rename_pending", "github_pr", "setup_read", "speed_read", "speed_seen", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "glossary_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_connect_status", "notes_recordings", "notes_recording", "notes_sync_status", "notes_granola_status", "notes_bot_upcoming", "ops_status", "slack_coverage", "slack_connect", "slack_disconnect", "slack_read", "memory_map", "memory_rules", "memory_knowledge", "memory_profile", "memory_consolidation", "memory_chain", "settings_show", "settings_list", "model_show", "team_members", "team_github_login_add", "team_github_login_remove", "team_github_login_list", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check", "logs_digest", "brain_status", "approvals_list", "approvals_show", "approvals_rules", "manager_clients", "manager_client", "manager_run", "manager_list", "manager_queue", "manager_show", "image_show"];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls
  * each one ONLY with its dry-run flag set (`scripts/smoke.ts` says which).
@@ -21,7 +21,7 @@ export declare const DRY_RUN_TOOLS: readonly ["ops_recompile", "memory_requeue"]
  * candidates, share calendars. Never called by the smoke; covered by the unit
  * suites (`write-tools.test.ts` and each family's own).
  */
-export declare const WRITE_TOOLS: readonly ["image_describe", "approvals_create", "approvals_approve", "approvals_edit", "approvals_reject", "approvals_rules_create", "approvals_rules_revoke", "manager_add", "manager_edit", "manager_done", "manager_reopen", "manager_link", "manager_approve", "manager_dismiss", "manager_proposal", "manager_archive", "manager_unarchive", "logs_key_mint", "brain_retry", "emit_event", "docs_create", "docs_update", "docs_delete", "docs_link", "msg_create_channel", "msg_dm", "msg_send", "work_create_issue", "work_update_issue", "work_move_issue", "work_comment_issue", "careers_rescreen", "careers_send_takehome", "careers_invite", "careers_grade", "careers_decide", "careers_followup", "careers_interview", "careers_takehome_set", "careers_settings_set", "rename_resolve", "github_merge", "github_retitle", "github_rerun", "mail_send", "mail_draft", "mail_rename", "mail_enable", "mail_disable", "mail_default", "mail_remove", "cal_change", "mail_sync", "mail_detach", "cal_create", "cal_share", "cal_sync", "cal_detach", "cal_delete", "jarvis_dispatch", "glossary_add", "glossary_remove", "notes_mkdir", "notes_rmdir", "notes_rename", "notes_upload", "notes_paste", "notes_share", "notes_unshare", "notes_move", "notes_sync", "notes_detach", "memory_experience", "scout_start", "scout_dismiss", "scout_undo", "brief_rewrite", "brief_correct", "brief_done", "brief_undone", "settings_set", "settings_delete", "model_set", "team_invite", "team_role", "team_grant", "team_revoke", "team_device_revoke", "team_device_doctor"];
+export declare const WRITE_TOOLS: readonly ["image_describe", "approvals_create", "approvals_approve", "approvals_edit", "approvals_reject", "approvals_rules_create", "approvals_rules_revoke", "manager_add", "manager_edit", "manager_done", "manager_reopen", "manager_link", "manager_approve", "manager_dismiss", "manager_proposal", "manager_archive", "manager_unarchive", "logs_key_mint", "brain_retry", "emit_event", "docs_create", "docs_update", "docs_delete", "docs_link", "msg_create_channel", "msg_dm", "msg_send", "work_create_issue", "work_update_issue", "work_move_issue", "work_comment_issue", "careers_rescreen", "careers_send_takehome", "careers_invite", "careers_grade", "careers_decide", "careers_followup", "careers_interview", "careers_takehome_set", "careers_settings_set", "rename_resolve", "github_merge", "github_retitle", "github_rerun", "mail_send", "mail_draft", "mail_rename", "mail_enable", "mail_disable", "mail_default", "mail_remove", "cal_change", "mail_sync", "mail_detach", "cal_create", "cal_share", "cal_sync", "cal_detach", "cal_delete", "jarvis_dispatch", "glossary_add", "glossary_remove", "notes_mkdir", "notes_rmdir", "notes_rename", "notes_upload", "notes_paste", "notes_share", "notes_unshare", "notes_move", "notes_connect_wisprflow", "notes_sync", "notes_detach", "memory_experience", "scout_start", "scout_dismiss", "scout_undo", "brief_rewrite", "brief_correct", "brief_done", "brief_undone", "settings_set", "settings_delete", "model_set", "team_invite", "team_role", "team_grant", "team_revoke", "team_device_revoke", "team_device_doctor", "team_device_scope"];
 /** Reads that spend a model turn. The smoke's `--no-model` leaves these out. */
 export declare const MODEL_SPENDING_TOOLS: readonly ["jarvis_ask", "jarvis_check"];
 /**

package/dist/tool-catalog.js

@@ -67,6 +67,8 @@ export const READ_TOOLS = [
     "notes_shelves",
     "notes_place",
     "notes_accounts",
+    // BLI-17973: where a Wispr Flow sign-in stands (its start is a write, below).
+    "notes_connect_status",
     // BLI-12926: the alternates of a meeting several notetakers recorded.
     "notes_recordings",
     "notes_recording",
@@ -195,6 +197,8 @@ export const WRITE_TOOLS = [
     "notes_share",
     "notes_unshare",
     "notes_move",
+    // BLI-17973: registers a client at Wispr and records an attempt, so never smoked.
+    "notes_connect_wisprflow",
     "notes_sync",
     "notes_detach",
     "memory_experience",
@@ -214,6 +218,7 @@ export const WRITE_TOOLS = [
     "team_revoke",
     "team_device_revoke",
     "team_device_doctor",
+    "team_device_scope",
 ];
 /** Reads that spend a model turn. The smoke's `--no-model` leaves these out. */
 export const MODEL_SPENDING_TOOLS = ["jarvis_ask", "jarvis_check"];

package/dist/verb-census-spellings.js

@@ -39,6 +39,7 @@ export const TYPED_SPELLING = {
     "team device-list": "team device list",
     "team device-revoke": "team device revoke",
     "team device-doctor": "team device doctor",
+    "team device-scope": "team device scope",
 };
 /** How a census key is written when a person is being told to type it. */
 export function typedSpelling(verb) {

package/dist/verb-census.js

@@ -29,6 +29,7 @@
 import { readFileSync, readdirSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
+import { DEVICE_TWINS } from "./device-twins.js";
 import { MANAGER_TWINS } from "./manager-twins.js";
 import { IMAGE_TWINS, MEMORY_STORE_TWINS } from "./memory-twins.js";
 const HERE = dirname(fileURLToPath(import.meta.url));
@@ -350,8 +351,8 @@ export const MCP_TWINS = {
     "notes bot-upcoming": { tool: "notes_bot_upcoming", door: "GET /api/notetaker/upcoming" },
     "notes granola-status": { tool: "notes_granola_status", door: "GET /api/notes/granola-status" },
     "memory log": { tool: "memory_experience", door: "POST /api/memory/experience" },
-    // BLI-4047, BLI-12927: the memory STORE (twins on the `bli-memory` server) and images: `memory-twins.ts`; BLI-5006: the Manager: `manager-twins.ts`.
-    ...MEMORY_STORE_TWINS, ...IMAGE_TWINS, ...MANAGER_TWINS,
+    // BLI-4047, BLI-12927: the memory STORE (twins on the `bli-memory` server) and images: `memory-twins.ts`; BLI-5006: the Manager: `manager-twins.ts`; BLI-17978: the bot scope: `device-twins.ts`.
+    ...MEMORY_STORE_TWINS, ...IMAGE_TWINS, ...MANAGER_TWINS, ...DEVICE_TWINS,
     // BLI-4533: the compiled one-page profile. Its twin is on `bli-tower`, not
     // `bli-memory`: that server's four tools are the vendor-compatible set the
     // Claude Code plugin expects, and this page is ours.
@@ -410,8 +411,7 @@ export const MCP_TWINS = {
     // are.
     search: { tool: "tower_search", door: "GET /api/search" },
     jarvis: { tool: "jarvis_ask", door: "POST /api/jarvis/cli" },
-    // Entered by hand: a mode flag, not an `action` the parser names (see the
-    // header of this file).
+    // Entered by hand: a mode flag, not an `action` the parser names (see the header of this file).
     "jarvis --trace": { tool: "jarvis_trace", door: "GET /api/ops/trace/[id]" },
 };
 // Human command grammar is separate from the mechanical twin census.
@@ -421,7 +421,7 @@ export const TERMINAL_ONLY = {
     "mail add-imap": "carries a Google app password. The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so attaching a mailbox stays a thing a person does at a terminal (BLI-3708)",
     "cal add-ical": "carries a calendar's SECRET iCal ADDRESS — a permanent, unauthenticated, read-anything-on-that-calendar URL. The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so attaching a calendar stays a thing a person does at a terminal (BLI-3709)",
     "brief edit": "opens the person's own $EDITOR on this machine and files what they changed; an agent has no editor to open (commands/editor.ts)",
-    "notes connect": "carries a notetaker credential: an API key (Fellow or Circleback), or for Wispr Flow a browser sign-in whose refresh token the CLI hands straight to Tower. The CLI reads a key from STDIN precisely so it never lands in an argument list, and a browser sign-in has no tool-call equivalent at all; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so connecting a notetaker stays a thing a person does at a terminal or in Tower's Settings (BLI-4383, BLI-12926)",
+    "notes connect": "an API-key connect (Fellow or Circleback) carries a notetaker credential. The CLI reads the key from STDIN precisely so it never lands in an argument list, and an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so connecting a key stays a thing a person does at a terminal or in Tower's Settings (BLI-4383). Wispr Flow carries no credential through a call: its sign-in is a link the person clicks, started and watched over the same doors by the MCP tools notes_connect_wisprflow and notes_connect_status (BLI-17973)",
     "notes webhook": "carries the VENDOR's webhook signing secret, the key an HMAC over every delivered payload is checked against. Exactly the ruling `notes connect` already carries, for the same credential shape: the CLI reads it from STDIN so it never lands in an argument list, and an MCP tool argument travels through a model's context window and whatever transcript store sits behind it (BLI-4394)",
 };
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.122",
+  "version": "0.1.125",
   "private": false,
   "description": "bli-tower: an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",