@bli-cockpit/mcp 0.1.30 → 0.1.31

package/README.md

@@ -34,7 +34,7 @@ about what an agent can reach.
 
 <!-- BEGIN GENERATED verb census — `npm run mcp:readme` -->
 
-**83 of 86 Tower verbs have an MCP twin.**
+**90 of 93 Tower verbs have an MCP twin.**
 Each tool goes through the SAME door its CLI verb calls, with the same
 collector device token — never a second route and never a service-role
 reader. `src/verb-census.test.ts` fails when a verb is in none of the
@@ -55,6 +55,9 @@ three tables below.
 | `cockpit cal sync` | `cal_sync` | `POST /api/cal/calendars/[id]/sync` |
 | `cockpit cal today` | `cal_today` | `GET /api/cal/today` |
 | `cockpit cal week` | `cal_week` | `GET /api/cal/week` |
+| `cockpit careers list` | `careers_list` | `GET /api/careers/applications` |
+| `cockpit careers rescreen` | `careers_rescreen` | `POST /api/careers/applications/[id]/rescreen` |
+| `cockpit careers show` | `careers_show` | `GET /api/careers/applications/[id]` |
 | `cockpit correct` | `brief_correct` | `POST /api/jarvis/corrections` |
 | `cockpit docs create` | `docs_create` | `POST /api/docs/documents` |
 | `cockpit docs list` | `docs_list` | `GET /api/docs/documents` |
@@ -94,10 +97,14 @@ three tables below.
 | `cockpit msg read` | `msg_read` | `GET /api/msg/channels/[id]/messages` |
 | `cockpit msg send` | `msg_send` | `POST /api/msg/channels/[id]/messages` |
 | `cockpit msg thread` | `msg_thread` | `GET /api/msg/channels/[id]/messages?thread_parent_id=` |
+| `cockpit notes folders` | `notes_folders` | `GET /api/notes/folders` |
 | `cockpit notes list` | `notes_list` | `GET /api/notes/library` |
+| `cockpit notes mkdir` | `notes_mkdir` | `POST /api/notes/folders` |
 | `cockpit notes move` | `notes_move` | `POST /api/notes/move` |
 | `cockpit notes paste` | `notes_paste` | `POST /api/notes/upload (text)` |
 | `cockpit notes place` | `notes_place` | `POST /api/notes/place` |
+| `cockpit notes rename` | `notes_rename` | `PATCH /api/notes/folders/[id]` |
+| `cockpit notes rmdir` | `notes_rmdir` | `DELETE /api/notes/folders/[id]` |
 | `cockpit notes share` | `notes_share` | `POST /api/notes/share` |
 | `cockpit notes shelf` | `notes_shelf` | `GET /api/notes/shelf` |
 | `cockpit notes shelves` | `notes_shelves` | `GET /api/notes/library` |

package/dist/careers-tools.d.ts

@@ -0,0 +1,4 @@
+import { type ToolDeps } from './tool-result.js';
+export declare function registerCareersTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps: ToolDeps): void;

package/dist/careers-tools.js

@@ -0,0 +1,19 @@
+import { z } from 'zod';
+import { callAgentDoor } from './agent-door.js';
+import { doorFailureText, errorResult, registrarFor, textResult, withSession } from './tool-result.js';
+export function registerCareersTools(server, deps) {
+    const register = registrarFor(server);
+    register('careers_list', { title: 'List applications', description: 'Super-admin only. Newest applications, bounded to 100 with total and has_more.', inputSchema: { role: z.string().optional(), min_score: z.number().min(0).max(100).optional(), since: z.string().optional() } }, async (args) => withSession(deps, async (session) => {
+        const query = new URLSearchParams();
+        for (const key of ['role', 'min_score', 'since'])
+            if (args[key] !== undefined)
+                query.set(key, String(args[key]));
+        const answer = await callAgentDoor(session, deps.fetchImpl, 'GET', `/api/careers/applications?${query}`);
+        return answer.ok ? textResult('Applications', answer.body) : errorResult(doorFailureText('careers_list', answer));
+    }));
+    for (const action of ['show', 'rescreen'])
+        register(`careers_${action}`, { title: `${action} application`, description: `Super-admin only. ${action} one application.`, inputSchema: { id: z.string().uuid() } }, async (args) => withSession(deps, async (session) => {
+            const answer = await callAgentDoor(session, deps.fetchImpl, action === 'show' ? 'GET' : 'POST', `/api/careers/applications/${encodeURIComponent(String(args.id))}${action === 'rescreen' ? '/rescreen' : ''}`, undefined, 60_000);
+            return answer.ok ? textResult('Application', answer.body) : errorResult(doorFailureText(`careers_${action}`, answer));
+        }));
+}

package/dist/note-folder-tools.d.ts

@@ -0,0 +1,4 @@
+import { type ToolDeps } from "./tool-result.js";
+export declare function registerNoteFolderTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps: ToolDeps): void;

package/dist/note-folder-tools.js

@@ -0,0 +1,57 @@
+import { z } from "zod";
+import { callAgentDoor } from "./agent-door.js";
+import { registrarFor, withSession, textResult, errorResult, doorFailureText } from "./tool-result.js";
+export function registerNoteFolderTools(server, deps) {
+    const register = registrarFor(server);
+    register("notes_folders", {
+        title: "List note folders", description: "The folder tree with caller-visible note counts.",
+        inputSchema: { tree: z.boolean().optional() },
+    }, async () => withSession(deps, async (session) => {
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", "/api/notes/folders");
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_folders", response));
+        return textResult(JSON.stringify(response.body), response.body);
+    }));
+    register("notes_mkdir", {
+        title: "Create a note folder", description: "Create a path, including missing ancestors. Existing paths are reused.",
+        inputSchema: { path: z.string().min(1).max(2000) },
+    }, async (args) => withSession(deps, async (session) => {
+        const response = await callAgentDoor(session, deps.fetchImpl, "POST", "/api/notes/folders", { path: args.path });
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_mkdir", response));
+        return textResult(JSON.stringify(response.body), response.body);
+    }));
+    register("notes_rmdir", {
+        title: "Delete an empty note folder", description: "Delete a folder by path. Refuses any folder with notes or children.",
+        inputSchema: { path: z.string().min(1).max(2000) },
+    }, async (args) => withSession(deps, async (session) => {
+        const listed = await callAgentDoor(session, deps.fetchImpl, "GET", "/api/notes/folders");
+        if (!listed.ok)
+            return errorResult(doorFailureText("notes_rmdir", listed));
+        const body = listed.body;
+        const path = String(args.path).split("/").map(part => part.trim()).join("/");
+        const folder = body.folders.find(folder => folder.path === path);
+        if (!folder)
+            return errorResult("That folder could not be found.");
+        const response = await callAgentDoor(session, deps.fetchImpl, "DELETE", `/api/notes/folders/${encodeURIComponent(folder.id)}`);
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_rmdir", response));
+        return textResult(JSON.stringify(response.body), response.body);
+    }));
+    register("notes_rename", {
+        title: "Rename a note folder", description: "Rename a folder by path, updating every descendant path.",
+        inputSchema: { path: z.string().min(1).max(2000), name: z.string().min(1).max(120) },
+    }, async (args) => withSession(deps, async (session) => {
+        const listed = await callAgentDoor(session, deps.fetchImpl, "GET", "/api/notes/folders");
+        if (!listed.ok)
+            return errorResult(doorFailureText("notes_rename", listed));
+        const body = listed.body;
+        const folder = body.folders.find(folder => folder.path === String(args.path).split("/").map(part => part.trim()).join("/"));
+        if (!folder)
+            return errorResult("That folder could not be found.");
+        const response = await callAgentDoor(session, deps.fetchImpl, "PATCH", `/api/notes/folders/${encodeURIComponent(folder.id)}`, { name: args.name });
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_rename", response));
+        return textResult(JSON.stringify(response.body), response.body);
+    }));
+}

package/dist/notes-tools.d.ts

@@ -1,20 +1,3 @@
-/**
- * `notes_*` MCP tools (BLI-3756) — the meeting-notes library, read by an
- * agent, over the same `/api/notes/**` doors `cockpit notes` calls with the
- * same device token.
- *
- * **The narrowing is always said out loud.** `lib/notes/api-doors.ts` gives a
- * caller with no signed-in browser session a NARROWER read and names it in the
- * answer's own `scope`/`degradedBecause` — a device token is exactly such a
- * caller, so an agent reading this library is routinely seeing less than a
- * person would in a browser. Every tool here appends that reason to its text.
- * Swallowing it would let an agent conclude a note was never taken when in
- * fact it simply was not this caller's to read, which is a fact invented out
- * of a permission.
- *
- * Reads only. `notes move|share|unshare|paste|upload` are batch 2 — sharing is
- * a deliberate act and the paste door takes a body on stdin by rule.
- */
 import { type ToolDeps } from "./tool-result.js";
 export type NotesDeps = ToolDeps;
 interface ScopedBody {

package/dist/notes-tools.js

@@ -1,3 +1,4 @@
+import { registerNoteFolderTools } from "./note-folder-tools.js";
 /**
  * `notes_*` MCP tools (BLI-3756) — the meeting-notes library, read by an
  * agent, over the same `/api/notes/**` doors `cockpit notes` calls with the
@@ -50,6 +51,7 @@ const LIBRARY_FILTERS = {
     limit: z.number().int().min(1).max(500).optional(),
 };
 export function registerNotesTools(server, deps) {
+    registerNoteFolderTools(server, deps);
     const register = registrarFor(server);
     register("notes_list", {
         title: "List Tower meeting notes",
@@ -92,7 +94,7 @@ export function registerNotesTools(server, deps) {
         }
         const room = note.participants.length > 0 ? `\nIn the room: ${note.participants.join(", ")}` : "";
         return textResult(`${note.title}\n${note.meetingDate}  ·  ${note.shelf}  ·  ${note.fileName}  ·  ${note.lineCount} lines`
-            + `${room}\n${note.visibility}\n\n${note.content}${narrowingNote(body)}`, { scope: body.scope ?? null, note });
+            + `${room}\n${note.visibility}${body.audio ? "\nTranscription: " + body.audio.transcription_status : ""}\n\n${note.content}${narrowingNote(body)}`, { scope: body.scope ?? null, note, audio: body.audio ?? null });
     }));
     register("notes_shelf", {
         title: "Your own Tower notes shelf",

package/dist/notes-write-tools.js

@@ -77,6 +77,9 @@ async function readNoteFile(filePath) {
     }
     if (size === 0)
         return refuse("file_empty");
+    if (/\.(mp3|m4a|wav|webm|ogg)$/i.test(fileName) && size > 4_000_000) {
+        return { ok: false, refusal: "file_too_big", sentence: "file_too_large: Audio is limited to 4 MB (4,000,000 bytes)." };
+    }
     if (size > NOTE_FILE_MAX_BYTES)
         return refuse("file_too_big");
     try {
@@ -102,18 +105,19 @@ async function postForm(deps, session, tool, form) {
     // `stored: false` is the door saying it did not keep the note. That is a
     // refusal with a reason, not a success with a caveat.
     return body.stored === true
-        ? textResult(text, { ok: true, noteId: body.noteId ?? null, scope: body.scope ?? null })
+        ? textResult(text, { ok: true, noteId: body.noteId ?? null, scope: body.scope ?? null, transcription: body.transcription ?? null })
         : errorResult(text);
 }
 export function registerNotesWriteTools(server, deps) {
     const register = registrarFor(server);
     register("notes_upload", {
         title: "Put a local file in as a Tower meeting note",
-        description: "Uploads a transcript or note file from THIS machine's disk — the same door `cockpit notes upload` uses. "
+        description: "Uploads a transcript, note, or MP3/M4A/WAV/WebM/OGG audio file from this machine. Audio is limited to 4 MB and returns a note id plus transcription status immediately. Poll notes_show for completion. "
             + "A name that looks like a key or credential file is refused without being opened; so is a missing, empty or "
             + "over-20-MB file. Tower reads the whole note with one model call, so a large file can take a couple of "
             + "minutes and your client may give up first — the upload keeps going; notes_list will show it.",
         inputSchema: {
+            folder: z.string().min(1).max(2000).optional().describe("Folder path; creates missing ancestors. / means Root."),
             path: z.string().min(1).max(4096).describe("An absolute path on this machine."),
             exclude: z
                 .string()
@@ -128,9 +132,13 @@ export function registerNotesWriteTools(server, deps) {
         if (!read.ok)
             return errorResult(`Refused (${read.refusal}): ${read.sentence} Nothing was sent.`);
         const form = new FormData();
-        form.set("file", new File([new Uint8Array(read.bytes)], read.fileName));
+        const audioTypes = { mp3: "audio/mpeg", m4a: "audio/mp4", wav: "audio/wav", webm: "audio/webm", ogg: "audio/ogg" };
+        const mediaType = audioTypes[path.extname(read.fileName).slice(1).toLowerCase()] ?? "";
+        form.set("file", new File([new Uint8Array(read.bytes)], read.fileName, { type: mediaType }));
         if (args.exclude)
             form.set("exclusions", String(args.exclude));
+        if (args.folder)
+            form.set("folder_path", String(args.folder));
         return postForm(deps, session, "notes_upload", form);
     }));
     register("notes_paste", {
@@ -139,6 +147,7 @@ export function registerNotesWriteTools(server, deps) {
             + "`cockpit notes paste` posts to. The CLI takes the body on stdin; here it is an argument, so the text "
             + "travels in the request and is never echoed back to you.",
         inputSchema: {
+            folder: z.string().min(1).max(2000).optional().describe("Folder path; creates missing ancestors."),
             text: z.string().min(1).max(PASTE_MAX_CHARS).describe("The note itself."),
             name: z.string().min(1).max(300).optional().describe("What to call it. Tower names it by date if you do not."),
             exclude: z.string().min(1).max(2000).optional().describe("Anything to leave out, in plain words."),
@@ -154,6 +163,8 @@ export function registerNotesWriteTools(server, deps) {
             form.set("name", String(args.name));
         if (args.exclude)
             form.set("exclusions", String(args.exclude));
+        if (args.folder)
+            form.set("folder_path", String(args.folder));
         return postForm(deps, session, "notes_paste", form);
     }));
     register("notes_share", {
@@ -182,15 +193,19 @@ export function registerNotesWriteTools(server, deps) {
             + "own move box sends. A shelf is free text; notes_shelves lists the ones in use.",
         inputSchema: {
             note_id: z.string().min(1).max(200).describe("A note id."),
+            folder: z.string().min(1).max(2000).optional().describe("Destination folder path; / means Root. Leaves the shelf unchanged."),
             to: z.string().min(1).max(200).optional().describe("The shelf to move it to."),
             clear: z.boolean().optional().describe("Take it off every shelf instead."),
         },
     }, async (args) => withSession(deps, async (session) => {
         const clearing = args.clear === true;
-        if (!clearing && !args.to) {
+        if (!clearing && !args.to && !args.folder) {
             return errorResult("Refused (no_destination): say which shelf with `to`, or pass `clear: true`. Nothing was moved.");
         }
-        const response = await callAgentDoor(session, deps.fetchImpl, "POST", "/api/notes/move", { note_id: String(args.note_id ?? ""), category: clearing ? "" : String(args.to) }, WRITE_DEADLINE_MS);
+        const response = await callAgentDoor(session, deps.fetchImpl, "POST", "/api/notes/move", { note_id: String(args.note_id ?? ""),
+            ...(args.folder ? { folder_path: String(args.folder) } : {}),
+            ...(clearing || args.to ? { category: clearing ? "" : String(args.to) } : {}),
+        }, WRITE_DEADLINE_MS);
         if (!response.ok)
             return errorResult(doorFailureText("notes_move", response));
         const body = response.body;

package/dist/server.js

@@ -23,6 +23,7 @@ import { registerSettingsTools } from "./settings-tools.js";
 import { registerSettingsWriteTools } from "./settings-write-tools.js";
 import { registerTeamWriteTools } from "./team-write-tools.js";
 import { registerWorkTools } from "./work-tools.js";
+import { registerCareersTools } from "./careers-tools.js";
 import { registerUsageTools } from "./usage-tools.js";
 export const PACKAGE_NAME = "@bli-cockpit/mcp";
 export const PACKAGE_VERSION = "0.1.4";
@@ -391,6 +392,7 @@ export function createServer(deps) {
     // the docs/msg tools above, for the same reason: a coding session should
     // file and move a Tower issue the way it files and moves a Linear one.
     registerWorkTools(server, { fetchImpl: deps.fetchImpl });
+    registerCareersTools(server, deps);
     registerUsageTools(server, { fetchImpl: deps.fetchImpl });
     // BLI-3708: the mailboxes a person attached. Reads, a send and a sync over
     // the same /api/mail/** doors `cockpit mail` calls; `add-imap` deliberately

package/dist/verb-census.js

@@ -209,6 +209,9 @@ export function memoryMcpToolNames() {
 }
 /** A CLI verb and the MCP tool that does the same thing, over the same door. */
 export const MCP_TWINS = {
+    "careers list": { tool: "careers_list", door: "GET /api/careers/applications" },
+    "careers show": { tool: "careers_show", door: "GET /api/careers/applications/[id]" },
+    "careers rescreen": { tool: "careers_rescreen", door: "POST /api/careers/applications/[id]/rescreen" },
     "usage people": { tool: "usage_people", door: "GET /api/usage/people" },
     "docs list": { tool: "docs_list", door: "GET /api/docs/documents" },
     "docs tree": { tool: "docs_tree", door: "GET /api/docs/tree" },
@@ -251,6 +254,10 @@ export const MCP_TWINS = {
     "brief status": { tool: "brief_status", door: "GET /api/ops/brief-status" },
     "brief rewrite": { tool: "brief_rewrite", door: "POST /api/jarvis/recompile" },
     correct: { tool: "brief_correct", door: "POST /api/jarvis/corrections" },
+    "notes folders": { tool: "notes_folders", door: "GET /api/notes/folders" },
+    "notes mkdir": { tool: "notes_mkdir", door: "POST /api/notes/folders" },
+    "notes rename": { tool: "notes_rename", door: "PATCH /api/notes/folders/[id]" },
+    "notes rmdir": { tool: "notes_rmdir", door: "DELETE /api/notes/folders/[id]" },
     "notes list": { tool: "notes_list", door: "GET /api/notes/library" },
     "notes show": { tool: "notes_show", door: "GET /api/notes/library/[id]" },
     "notes shelf": { tool: "notes_shelf", door: "GET /api/notes/shelf" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.30",
+  "version": "0.1.31",
   "private": false,
   "description": "bli-tower — an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",