@bli-cockpit/mcp 0.1.29 → 0.1.31

package/README.md

@@ -34,7 +34,7 @@ about what an agent can reach.
 
 <!-- BEGIN GENERATED verb census — `npm run mcp:readme` -->
 
-**81 of 84 Tower verbs have an MCP twin.**
+**90 of 93 Tower verbs have an MCP twin.**
 Each tool goes through the SAME door its CLI verb calls, with the same
 collector device token — never a second route and never a service-role
 reader. `src/verb-census.test.ts` fails when a verb is in none of the
@@ -55,6 +55,9 @@ three tables below.
 | `cockpit cal sync` | `cal_sync` | `POST /api/cal/calendars/[id]/sync` |
 | `cockpit cal today` | `cal_today` | `GET /api/cal/today` |
 | `cockpit cal week` | `cal_week` | `GET /api/cal/week` |
+| `cockpit careers list` | `careers_list` | `GET /api/careers/applications` |
+| `cockpit careers rescreen` | `careers_rescreen` | `POST /api/careers/applications/[id]/rescreen` |
+| `cockpit careers show` | `careers_show` | `GET /api/careers/applications/[id]` |
 | `cockpit correct` | `brief_correct` | `POST /api/jarvis/corrections` |
 | `cockpit docs create` | `docs_create` | `POST /api/docs/documents` |
 | `cockpit docs list` | `docs_list` | `GET /api/docs/documents` |
@@ -94,9 +97,14 @@ three tables below.
 | `cockpit msg read` | `msg_read` | `GET /api/msg/channels/[id]/messages` |
 | `cockpit msg send` | `msg_send` | `POST /api/msg/channels/[id]/messages` |
 | `cockpit msg thread` | `msg_thread` | `GET /api/msg/channels/[id]/messages?thread_parent_id=` |
+| `cockpit notes folders` | `notes_folders` | `GET /api/notes/folders` |
 | `cockpit notes list` | `notes_list` | `GET /api/notes/library` |
+| `cockpit notes mkdir` | `notes_mkdir` | `POST /api/notes/folders` |
 | `cockpit notes move` | `notes_move` | `POST /api/notes/move` |
 | `cockpit notes paste` | `notes_paste` | `POST /api/notes/upload (text)` |
+| `cockpit notes place` | `notes_place` | `POST /api/notes/place` |
+| `cockpit notes rename` | `notes_rename` | `PATCH /api/notes/folders/[id]` |
+| `cockpit notes rmdir` | `notes_rmdir` | `DELETE /api/notes/folders/[id]` |
 | `cockpit notes share` | `notes_share` | `POST /api/notes/share` |
 | `cockpit notes shelf` | `notes_shelf` | `GET /api/notes/shelf` |
 | `cockpit notes shelves` | `notes_shelves` | `GET /api/notes/library` |
@@ -111,17 +119,18 @@ three tables below.
 | `cockpit scout start` | `scout_start` | `POST /api/cockpit/scout (start)` |
 | `cockpit scout undo` | `scout_undo` | `POST /api/cockpit/scout (undo_dismiss)` |
 | `cockpit search` | `tower_search` | `GET /api/search` |
-| `cockpit settings delete` | `settings_delete` | `DELETE /api/settings/env-blobs` |
-| `cockpit settings list` | `settings_list` | `GET /api/settings/env-blobs` |
-| `cockpit settings set` | `settings_set` | `POST /api/settings/{jarvis-model,switches,model-routing,env-blobs} + PUT /api/settings/cli-floor` |
-| `cockpit settings show` | `settings_show` | `GET /api/settings/* + /api/team/members` |
+| `cockpit settings env delete` | `settings_delete` | `DELETE /api/settings/env-blobs` |
+| `cockpit settings env list` | `settings_list` | `GET /api/settings/env-blobs` |
+| `cockpit settings switches set` | `settings_set` | `POST /api/settings/{jarvis-model,switches,model-routing,env-blobs} + PUT /api/settings/cli-floor` |
+| `cockpit settings` | `settings_show` | `GET /api/settings/* + /api/team/members` |
 | `cockpit slack coverage` | `slack_coverage` | `GET /api/ops/slack/coverage` |
 | `cockpit slack read` | `slack_read` | `POST /api/ops/slack/read` |
-| `cockpit team device-list` | `team_device_list` | `GET /api/team/devices` |
-| `cockpit team device-revoke` | `team_device_revoke` | `POST /api/ambient/devices/[deviceId]/revoke` |
+| `cockpit team device list` | `team_device_list` | `GET /api/team/devices` |
+| `cockpit team device revoke` | `team_device_revoke` | `POST /api/ambient/devices/[deviceId]/revoke` |
 | `cockpit team invite` | `team_invite` | `POST /api/team/invite` |
 | `cockpit team members` | `team_members` | `GET /api/team/members` |
 | `cockpit team role` | `team_role` | `PATCH /api/team/members/[userId]/role` |
+| `cockpit usage people` | `usage_people` | `GET /api/usage/people` |
 | `cockpit workbook` | `workbook_read` | `GET /api/cockpit/workbook` |
 
 ### Owed a twin

package/dist/careers-tools.d.ts

@@ -0,0 +1,4 @@
+import { type ToolDeps } from './tool-result.js';
+export declare function registerCareersTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps: ToolDeps): void;

package/dist/careers-tools.js

@@ -0,0 +1,19 @@
+import { z } from 'zod';
+import { callAgentDoor } from './agent-door.js';
+import { doorFailureText, errorResult, registrarFor, textResult, withSession } from './tool-result.js';
+export function registerCareersTools(server, deps) {
+    const register = registrarFor(server);
+    register('careers_list', { title: 'List applications', description: 'Super-admin only. Newest applications, bounded to 100 with total and has_more.', inputSchema: { role: z.string().optional(), min_score: z.number().min(0).max(100).optional(), since: z.string().optional() } }, async (args) => withSession(deps, async (session) => {
+        const query = new URLSearchParams();
+        for (const key of ['role', 'min_score', 'since'])
+            if (args[key] !== undefined)
+                query.set(key, String(args[key]));
+        const answer = await callAgentDoor(session, deps.fetchImpl, 'GET', `/api/careers/applications?${query}`);
+        return answer.ok ? textResult('Applications', answer.body) : errorResult(doorFailureText('careers_list', answer));
+    }));
+    for (const action of ['show', 'rescreen'])
+        register(`careers_${action}`, { title: `${action} application`, description: `Super-admin only. ${action} one application.`, inputSchema: { id: z.string().uuid() } }, async (args) => withSession(deps, async (session) => {
+            const answer = await callAgentDoor(session, deps.fetchImpl, action === 'show' ? 'GET' : 'POST', `/api/careers/applications/${encodeURIComponent(String(args.id))}${action === 'rescreen' ? '/rescreen' : ''}`, undefined, 60_000);
+            return answer.ok ? textResult('Application', answer.body) : errorResult(doorFailureText(`careers_${action}`, answer));
+        }));
+}

package/dist/note-folder-tools.d.ts

@@ -0,0 +1,4 @@
+import { type ToolDeps } from "./tool-result.js";
+export declare function registerNoteFolderTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps: ToolDeps): void;

package/dist/note-folder-tools.js

@@ -0,0 +1,57 @@
+import { z } from "zod";
+import { callAgentDoor } from "./agent-door.js";
+import { registrarFor, withSession, textResult, errorResult, doorFailureText } from "./tool-result.js";
+export function registerNoteFolderTools(server, deps) {
+    const register = registrarFor(server);
+    register("notes_folders", {
+        title: "List note folders", description: "The folder tree with caller-visible note counts.",
+        inputSchema: { tree: z.boolean().optional() },
+    }, async () => withSession(deps, async (session) => {
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", "/api/notes/folders");
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_folders", response));
+        return textResult(JSON.stringify(response.body), response.body);
+    }));
+    register("notes_mkdir", {
+        title: "Create a note folder", description: "Create a path, including missing ancestors. Existing paths are reused.",
+        inputSchema: { path: z.string().min(1).max(2000) },
+    }, async (args) => withSession(deps, async (session) => {
+        const response = await callAgentDoor(session, deps.fetchImpl, "POST", "/api/notes/folders", { path: args.path });
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_mkdir", response));
+        return textResult(JSON.stringify(response.body), response.body);
+    }));
+    register("notes_rmdir", {
+        title: "Delete an empty note folder", description: "Delete a folder by path. Refuses any folder with notes or children.",
+        inputSchema: { path: z.string().min(1).max(2000) },
+    }, async (args) => withSession(deps, async (session) => {
+        const listed = await callAgentDoor(session, deps.fetchImpl, "GET", "/api/notes/folders");
+        if (!listed.ok)
+            return errorResult(doorFailureText("notes_rmdir", listed));
+        const body = listed.body;
+        const path = String(args.path).split("/").map(part => part.trim()).join("/");
+        const folder = body.folders.find(folder => folder.path === path);
+        if (!folder)
+            return errorResult("That folder could not be found.");
+        const response = await callAgentDoor(session, deps.fetchImpl, "DELETE", `/api/notes/folders/${encodeURIComponent(folder.id)}`);
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_rmdir", response));
+        return textResult(JSON.stringify(response.body), response.body);
+    }));
+    register("notes_rename", {
+        title: "Rename a note folder", description: "Rename a folder by path, updating every descendant path.",
+        inputSchema: { path: z.string().min(1).max(2000), name: z.string().min(1).max(120) },
+    }, async (args) => withSession(deps, async (session) => {
+        const listed = await callAgentDoor(session, deps.fetchImpl, "GET", "/api/notes/folders");
+        if (!listed.ok)
+            return errorResult(doorFailureText("notes_rename", listed));
+        const body = listed.body;
+        const folder = body.folders.find(folder => folder.path === String(args.path).split("/").map(part => part.trim()).join("/"));
+        if (!folder)
+            return errorResult("That folder could not be found.");
+        const response = await callAgentDoor(session, deps.fetchImpl, "PATCH", `/api/notes/folders/${encodeURIComponent(folder.id)}`, { name: args.name });
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_rename", response));
+        return textResult(JSON.stringify(response.body), response.body);
+    }));
+}

package/dist/notes-tools.d.ts

@@ -1,20 +1,3 @@
-/**
- * `notes_*` MCP tools (BLI-3756) — the meeting-notes library, read by an
- * agent, over the same `/api/notes/**` doors `cockpit notes` calls with the
- * same device token.
- *
- * **The narrowing is always said out loud.** `lib/notes/api-doors.ts` gives a
- * caller with no signed-in browser session a NARROWER read and names it in the
- * answer's own `scope`/`degradedBecause` — a device token is exactly such a
- * caller, so an agent reading this library is routinely seeing less than a
- * person would in a browser. Every tool here appends that reason to its text.
- * Swallowing it would let an agent conclude a note was never taken when in
- * fact it simply was not this caller's to read, which is a fact invented out
- * of a permission.
- *
- * Reads only. `notes move|share|unshare|paste|upload` are batch 2 — sharing is
- * a deliberate act and the paste door takes a body on stdin by rule.
- */
 import { type ToolDeps } from "./tool-result.js";
 export type NotesDeps = ToolDeps;
 interface ScopedBody {

package/dist/notes-tools.js

@@ -1,3 +1,4 @@
+import { registerNoteFolderTools } from "./note-folder-tools.js";
 /**
  * `notes_*` MCP tools (BLI-3756) — the meeting-notes library, read by an
  * agent, over the same `/api/notes/**` doors `cockpit notes` calls with the
@@ -50,6 +51,7 @@ const LIBRARY_FILTERS = {
     limit: z.number().int().min(1).max(500).optional(),
 };
 export function registerNotesTools(server, deps) {
+    registerNoteFolderTools(server, deps);
     const register = registrarFor(server);
     register("notes_list", {
         title: "List Tower meeting notes",
@@ -92,7 +94,7 @@ export function registerNotesTools(server, deps) {
         }
         const room = note.participants.length > 0 ? `\nIn the room: ${note.participants.join(", ")}` : "";
         return textResult(`${note.title}\n${note.meetingDate}  ·  ${note.shelf}  ·  ${note.fileName}  ·  ${note.lineCount} lines`
-            + `${room}\n${note.visibility}\n\n${note.content}${narrowingNote(body)}`, { scope: body.scope ?? null, note });
+            + `${room}\n${note.visibility}${body.audio ? "\nTranscription: " + body.audio.transcription_status : ""}\n\n${note.content}${narrowingNote(body)}`, { scope: body.scope ?? null, note, audio: body.audio ?? null });
     }));
     register("notes_shelf", {
         title: "Your own Tower notes shelf",

package/dist/notes-write-tools.js

@@ -77,6 +77,9 @@ async function readNoteFile(filePath) {
     }
     if (size === 0)
         return refuse("file_empty");
+    if (/\.(mp3|m4a|wav|webm|ogg)$/i.test(fileName) && size > 4_000_000) {
+        return { ok: false, refusal: "file_too_big", sentence: "file_too_large: Audio is limited to 4 MB (4,000,000 bytes)." };
+    }
     if (size > NOTE_FILE_MAX_BYTES)
         return refuse("file_too_big");
     try {
@@ -102,18 +105,19 @@ async function postForm(deps, session, tool, form) {
     // `stored: false` is the door saying it did not keep the note. That is a
     // refusal with a reason, not a success with a caveat.
     return body.stored === true
-        ? textResult(text, { ok: true, noteId: body.noteId ?? null, scope: body.scope ?? null })
+        ? textResult(text, { ok: true, noteId: body.noteId ?? null, scope: body.scope ?? null, transcription: body.transcription ?? null })
         : errorResult(text);
 }
 export function registerNotesWriteTools(server, deps) {
     const register = registrarFor(server);
     register("notes_upload", {
         title: "Put a local file in as a Tower meeting note",
-        description: "Uploads a transcript or note file from THIS machine's disk — the same door `cockpit notes upload` uses. "
+        description: "Uploads a transcript, note, or MP3/M4A/WAV/WebM/OGG audio file from this machine. Audio is limited to 4 MB and returns a note id plus transcription status immediately. Poll notes_show for completion. "
             + "A name that looks like a key or credential file is refused without being opened; so is a missing, empty or "
             + "over-20-MB file. Tower reads the whole note with one model call, so a large file can take a couple of "
             + "minutes and your client may give up first — the upload keeps going; notes_list will show it.",
         inputSchema: {
+            folder: z.string().min(1).max(2000).optional().describe("Folder path; creates missing ancestors. / means Root."),
             path: z.string().min(1).max(4096).describe("An absolute path on this machine."),
             exclude: z
                 .string()
@@ -128,9 +132,13 @@ export function registerNotesWriteTools(server, deps) {
         if (!read.ok)
             return errorResult(`Refused (${read.refusal}): ${read.sentence} Nothing was sent.`);
         const form = new FormData();
-        form.set("file", new File([new Uint8Array(read.bytes)], read.fileName));
+        const audioTypes = { mp3: "audio/mpeg", m4a: "audio/mp4", wav: "audio/wav", webm: "audio/webm", ogg: "audio/ogg" };
+        const mediaType = audioTypes[path.extname(read.fileName).slice(1).toLowerCase()] ?? "";
+        form.set("file", new File([new Uint8Array(read.bytes)], read.fileName, { type: mediaType }));
         if (args.exclude)
             form.set("exclusions", String(args.exclude));
+        if (args.folder)
+            form.set("folder_path", String(args.folder));
         return postForm(deps, session, "notes_upload", form);
     }));
     register("notes_paste", {
@@ -139,6 +147,7 @@ export function registerNotesWriteTools(server, deps) {
             + "`cockpit notes paste` posts to. The CLI takes the body on stdin; here it is an argument, so the text "
             + "travels in the request and is never echoed back to you.",
         inputSchema: {
+            folder: z.string().min(1).max(2000).optional().describe("Folder path; creates missing ancestors."),
             text: z.string().min(1).max(PASTE_MAX_CHARS).describe("The note itself."),
             name: z.string().min(1).max(300).optional().describe("What to call it. Tower names it by date if you do not."),
             exclude: z.string().min(1).max(2000).optional().describe("Anything to leave out, in plain words."),
@@ -154,6 +163,8 @@ export function registerNotesWriteTools(server, deps) {
             form.set("name", String(args.name));
         if (args.exclude)
             form.set("exclusions", String(args.exclude));
+        if (args.folder)
+            form.set("folder_path", String(args.folder));
         return postForm(deps, session, "notes_paste", form);
     }));
     register("notes_share", {
@@ -182,15 +193,19 @@ export function registerNotesWriteTools(server, deps) {
             + "own move box sends. A shelf is free text; notes_shelves lists the ones in use.",
         inputSchema: {
             note_id: z.string().min(1).max(200).describe("A note id."),
+            folder: z.string().min(1).max(2000).optional().describe("Destination folder path; / means Root. Leaves the shelf unchanged."),
             to: z.string().min(1).max(200).optional().describe("The shelf to move it to."),
             clear: z.boolean().optional().describe("Take it off every shelf instead."),
         },
     }, async (args) => withSession(deps, async (session) => {
         const clearing = args.clear === true;
-        if (!clearing && !args.to) {
+        if (!clearing && !args.to && !args.folder) {
             return errorResult("Refused (no_destination): say which shelf with `to`, or pass `clear: true`. Nothing was moved.");
         }
-        const response = await callAgentDoor(session, deps.fetchImpl, "POST", "/api/notes/move", { note_id: String(args.note_id ?? ""), category: clearing ? "" : String(args.to) }, WRITE_DEADLINE_MS);
+        const response = await callAgentDoor(session, deps.fetchImpl, "POST", "/api/notes/move", { note_id: String(args.note_id ?? ""),
+            ...(args.folder ? { folder_path: String(args.folder) } : {}),
+            ...(clearing || args.to ? { category: clearing ? "" : String(args.to) } : {}),
+        }, WRITE_DEADLINE_MS);
         if (!response.ok)
             return errorResult(doorFailureText("notes_move", response));
         const body = response.body;
@@ -199,6 +214,31 @@ export function registerNotesWriteTools(server, deps) {
             ? textResult(text, { ok: true, shelf: body.shelf ?? null })
             : errorResult(text);
     }));
+    register("notes_place", {
+        title: "Say which shelf a Tower meeting note belongs on",
+        description: "Answers where one note files itself and WHY, from the meeting series it is part of, who was in the room "
+            + "and its own name — no model call. Read-only unless `apply: true`, which files it there. It never "
+            + "overrules a shelf a person typed: a note that already has one comes back as `already_shelved`.",
+        inputSchema: {
+            note_id: z.string().min(1).max(200).describe("A note id."),
+            apply: z.boolean().optional().describe("Actually put it there. Default: only say where."),
+        },
+    }, async (args) => withSession(deps, async (session) => {
+        const response = await callAgentDoor(session, deps.fetchImpl, "POST", "/api/notes/place", { note_id: String(args.note_id ?? ""), apply: args.apply === true }, WRITE_DEADLINE_MS);
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_place", response));
+        const body = response.body;
+        const text = [body.headline ?? "Tower answered without a sentence.", ...(body.lines ?? [])].join("\n");
+        return body.ok === true
+            ? textResult(text, {
+                ok: true,
+                shelf: body.shelf ?? null,
+                suggested_shelf: body.suggestedShelf ?? null,
+                decided_by: body.decidedBy ?? null,
+                applied: body.applied === true,
+            })
+            : errorResult(text);
+    }));
 }
 /** Share and unshare are one door and one body; only the boolean differs. */
 async function shareCall(deps, session, args, share) {

package/dist/readme-census.js

@@ -11,12 +11,17 @@
  * and returns a string. No file writing here — that is the script's job, so
  * this can be asserted without touching a disk.
  */
-import { AWAITING_TWIN, MCP_TWINS, TERMINAL_ONLY, towerVerbs } from "./verb-census.js";
+import { AWAITING_TWIN, MCP_TWINS, TERMINAL_ONLY, towerVerbs, typedSpelling } from "./verb-census.js";
 export const CENSUS_BEGIN = "<!-- BEGIN GENERATED verb census — `npm run mcp:readme` -->";
 export const CENSUS_END = "<!-- END GENERATED verb census -->";
-/** `cockpit docs read` → `` `cockpit docs read` ``; `jarvis --trace` keeps its flag. */
+/**
+ * `cockpit docs read` → `` `cockpit docs read` ``; `jarvis --trace` keeps its
+ * flag. A census key whose grammar differs from the typed command is rendered
+ * as the command (`settings show` → `cockpit settings`), because this column is
+ * headed "CLI verb" and a reader takes it literally (BLI-4048).
+ */
 function spell(verb) {
-    return `\`cockpit ${verb}\``;
+    return `\`cockpit ${typedSpelling(verb)}\``;
 }
 export function renderCensusMarkdown() {
     // Every verb the collector's own tables name, plus the one hand-entered mode

package/dist/server.js

@@ -23,6 +23,8 @@ import { registerSettingsTools } from "./settings-tools.js";
 import { registerSettingsWriteTools } from "./settings-write-tools.js";
 import { registerTeamWriteTools } from "./team-write-tools.js";
 import { registerWorkTools } from "./work-tools.js";
+import { registerCareersTools } from "./careers-tools.js";
+import { registerUsageTools } from "./usage-tools.js";
 export const PACKAGE_NAME = "@bli-cockpit/mcp";
 export const PACKAGE_VERSION = "0.1.4";
 // ---- input schemas (Zod raw shapes) -----------------------------------------
@@ -390,6 +392,8 @@ export function createServer(deps) {
     // the docs/msg tools above, for the same reason: a coding session should
     // file and move a Tower issue the way it files and moves a Linear one.
     registerWorkTools(server, { fetchImpl: deps.fetchImpl });
+    registerCareersTools(server, deps);
+    registerUsageTools(server, { fetchImpl: deps.fetchImpl });
     // BLI-3708: the mailboxes a person attached. Reads, a send and a sync over
     // the same /api/mail/** doors `cockpit mail` calls; `add-imap` deliberately
     // has no twin (see mail-tools.ts's header — a credential is not a tool

package/dist/usage-tools.d.ts

@@ -0,0 +1,4 @@
+import { type ToolDeps } from "./tool-result.js";
+export declare function registerUsageTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps: ToolDeps): void;

package/dist/usage-tools.js

@@ -0,0 +1,21 @@
+import { z } from "zod";
+import { callAgentDoor } from "./agent-door.js";
+import { doorFailureText, errorResult, registrarFor, textResult, withSession } from "./tool-result.js";
+export function registerUsageTools(server, deps) {
+    registrarFor(server)("usage_people", {
+        title: "Read usage by person",
+        description: "Per-person Claude Code and Codex token usage, list-price equivalent, and extraction coverage.",
+        inputSchema: { since: z.string().optional().describe("30d or an ISO timestamp."), until: z.string().optional(), include_automated: z.boolean().optional() },
+    }, async (args) => withSession(deps, async (session) => {
+        const query = new URLSearchParams({ since: String(args.since ?? "30d") });
+        if (args.until)
+            query.set("until", String(args.until));
+        if (args.include_automated)
+            query.set("include_automated", "1");
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", `/api/usage/people?${query}`);
+        if (!response.ok)
+            return errorResult(doorFailureText("usage_people", response));
+        const coverage = response.body.coverage;
+        return textResult(`${coverage?.sessions_extracted ?? 0} of ${coverage?.sessions_observed ?? 0} sessions extracted.`, response.body);
+    }));
+}

package/dist/verb-census.d.ts

@@ -67,6 +67,30 @@ export interface McpTwin {
 }
 /** A CLI verb and the MCP tool that does the same thing, over the same door. */
 export declare const MCP_TWINS: Record<string, McpTwin>;
+/**
+ * Census key → what a person actually types. (BLI-4048)
+ *
+ * The keys above are derived MECHANICALLY from each noun's `action` union, and
+ * for two nouns that union is not the grammar. `settings`'s positional is a
+ * SECTION (`personal|switches|models|env|cli-floor`) and the `action` is what
+ * the parser decides afterwards; `team`'s `device-list` is one action word
+ * spelled as two typed words, `team device list`. So `cockpit settings show`
+ * and `cockpit team device-list` were rendered into the README's "CLI verb"
+ * column and into `cli-caller-identity.md`, and the CLI refused all six.
+ *
+ * This is the display layer and nothing else: the keys, the twin rule and the
+ * suite are untouched. Every spelling here is proven typable —
+ * `scripts/doc-doors.test.mjs` runs the rendered table through the collector's
+ * own parser, so a wrong entry fails the build rather than misleading a
+ * stranger. Where one tool serves several sections (`settings_set` writes any
+ * of them) the spelling names ONE of them and the door column names the rest.
+ *
+ * A verb whose key is already typable is absent from here on purpose; the
+ * shorter this map is, the closer the census keys are to the product.
+ */
+export declare const TYPED_SPELLING: Record<string, string>;
+/** How a census key is written when a person is being told to type it. */
+export declare function typedSpelling(verb: string): string;
 /** Verbs that can never have an MCP twin, and why. A claim, not a backlog. */
 export declare const TERMINAL_ONLY: Record<string, string>;
 /**

package/dist/verb-census.js

@@ -209,6 +209,10 @@ export function memoryMcpToolNames() {
 }
 /** A CLI verb and the MCP tool that does the same thing, over the same door. */
 export const MCP_TWINS = {
+    "careers list": { tool: "careers_list", door: "GET /api/careers/applications" },
+    "careers show": { tool: "careers_show", door: "GET /api/careers/applications/[id]" },
+    "careers rescreen": { tool: "careers_rescreen", door: "POST /api/careers/applications/[id]/rescreen" },
+    "usage people": { tool: "usage_people", door: "GET /api/usage/people" },
     "docs list": { tool: "docs_list", door: "GET /api/docs/documents" },
     "docs tree": { tool: "docs_tree", door: "GET /api/docs/tree" },
     "docs read": { tool: "docs_read", door: "GET /api/docs/documents/[id]" },
@@ -250,6 +254,10 @@ export const MCP_TWINS = {
     "brief status": { tool: "brief_status", door: "GET /api/ops/brief-status" },
     "brief rewrite": { tool: "brief_rewrite", door: "POST /api/jarvis/recompile" },
     correct: { tool: "brief_correct", door: "POST /api/jarvis/corrections" },
+    "notes folders": { tool: "notes_folders", door: "GET /api/notes/folders" },
+    "notes mkdir": { tool: "notes_mkdir", door: "POST /api/notes/folders" },
+    "notes rename": { tool: "notes_rename", door: "PATCH /api/notes/folders/[id]" },
+    "notes rmdir": { tool: "notes_rmdir", door: "DELETE /api/notes/folders/[id]" },
     "notes list": { tool: "notes_list", door: "GET /api/notes/library" },
     "notes show": { tool: "notes_show", door: "GET /api/notes/library/[id]" },
     "notes shelf": { tool: "notes_shelf", door: "GET /api/notes/shelf" },
@@ -259,6 +267,7 @@ export const MCP_TWINS = {
     "notes share": { tool: "notes_share", door: "POST /api/notes/share" },
     "notes unshare": { tool: "notes_unshare", door: "POST /api/notes/share (share=false)" },
     "notes move": { tool: "notes_move", door: "POST /api/notes/move" },
+    "notes place": { tool: "notes_place", door: "POST /api/notes/place" },
     "memory log": { tool: "memory_experience", door: "POST /api/memory/experience" },
     // BLI-4047: the memory STORE at a terminal. The twins live on the second
     // server, `bli-memory`, over the same four doors these CLI verbs call.
@@ -302,6 +311,39 @@ export const MCP_TWINS = {
     // header of this file).
     "jarvis --trace": { tool: "jarvis_trace", door: "GET /api/ops/trace/[id]" },
 };
+/**
+ * Census key → what a person actually types. (BLI-4048)
+ *
+ * The keys above are derived MECHANICALLY from each noun's `action` union, and
+ * for two nouns that union is not the grammar. `settings`'s positional is a
+ * SECTION (`personal|switches|models|env|cli-floor`) and the `action` is what
+ * the parser decides afterwards; `team`'s `device-list` is one action word
+ * spelled as two typed words, `team device list`. So `cockpit settings show`
+ * and `cockpit team device-list` were rendered into the README's "CLI verb"
+ * column and into `cli-caller-identity.md`, and the CLI refused all six.
+ *
+ * This is the display layer and nothing else: the keys, the twin rule and the
+ * suite are untouched. Every spelling here is proven typable —
+ * `scripts/doc-doors.test.mjs` runs the rendered table through the collector's
+ * own parser, so a wrong entry fails the build rather than misleading a
+ * stranger. Where one tool serves several sections (`settings_set` writes any
+ * of them) the spelling names ONE of them and the door column names the rest.
+ *
+ * A verb whose key is already typable is absent from here on purpose; the
+ * shorter this map is, the closer the census keys are to the product.
+ */
+export const TYPED_SPELLING = {
+    "settings show": "settings",
+    "settings list": "settings env list",
+    "settings set": "settings switches set",
+    "settings delete": "settings env delete",
+    "team device-list": "team device list",
+    "team device-revoke": "team device revoke",
+};
+/** How a census key is written when a person is being told to type it. */
+export function typedSpelling(verb) {
+    return TYPED_SPELLING[verb] ?? verb;
+}
 /** Verbs that can never have an MCP twin, and why. A claim, not a backlog. */
 export const TERMINAL_ONLY = {
     "mail add-imap": "carries a Google app password. The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so attaching a mailbox stays a thing a person does at a terminal (BLI-3708)",

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.29",
+  "version": "0.1.31",
   "private": false,
-  "description": "bli-tower \u2014 an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
+  "description": "bli-tower — an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",
   "bin": {
     "bli-cockpit-mcp": "./dist/index.js"
@@ -30,7 +30,7 @@
     "readme": "npm run build && node scripts/write-readme-census.mjs"
   },
   "dependencies": {
-    "@bli-cockpit/telemetry-core": "0.1.42",
+    "@bli-cockpit/telemetry-core": "0.1.43",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.3.6"
   },