@bli-cockpit/mcp 0.1.44 → 0.1.47

package/README.md

@@ -34,7 +34,7 @@ about what an agent can reach.
 
 <!-- BEGIN GENERATED verb census — `npm run mcp:readme` -->
 
-**91 of 94 Tower verbs have an MCP twin.**
+**94 of 99 Tower verbs have an MCP twin.**
 Each tool goes through the SAME door its CLI verb calls, with the same
 collector device token — never a second route and never a service-role
 reader. `src/verb-census.test.ts` fails when a verb is in none of the
@@ -97,6 +97,8 @@ three tables below.
 | `cockpit msg read` | `msg_read` | `GET /api/msg/channels/[id]/messages` |
 | `cockpit msg send` | `msg_send` | `POST /api/msg/channels/[id]/messages` |
 | `cockpit msg thread` | `msg_thread` | `GET /api/msg/channels/[id]/messages?thread_parent_id=` |
+| `cockpit notes accounts` | `notes_accounts` | `GET /api/notes/accounts` |
+| `cockpit notes detach` | `notes_detach` | `DELETE /api/notes/accounts` |
 | `cockpit notes folders` | `notes_folders` | `GET /api/notes/folders` |
 | `cockpit notes list` | `notes_list` | `GET /api/notes/library` |
 | `cockpit notes mkdir` | `notes_mkdir` | `POST /api/notes/folders` |
@@ -109,6 +111,7 @@ three tables below.
 | `cockpit notes shelf` | `notes_shelf` | `GET /api/notes/shelf` |
 | `cockpit notes shelves` | `notes_shelves` | `GET /api/notes/library` |
 | `cockpit notes show` | `notes_show` | `GET /api/notes/library/[id]` |
+| `cockpit notes sync` | `notes_sync` | `POST /api/notes/accounts/[id]/sync` |
 | `cockpit notes unshare` | `notes_unshare` | `POST /api/notes/share (share=false)` |
 | `cockpit notes upload` | `notes_upload` | `POST /api/notes/upload` |
 | `cockpit ops recompile` | `ops_recompile` | `POST /api/ops/recompile` |
@@ -149,6 +152,8 @@ A claim about the verb's nature, not a backlog.
 | `cockpit brief edit` | opens the person's own $EDITOR on this machine and files what they changed; an agent has no editor to open (commands/editor.ts) |
 | `cockpit cal add-ical` | carries a calendar's SECRET iCal ADDRESS — a permanent, unauthenticated, read-anything-on-that-calendar URL. The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so attaching a calendar stays a thing a person does at a terminal (BLI-3709) |
 | `cockpit mail add-imap` | carries a Google app password. The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so attaching a mailbox stays a thing a person does at a terminal (BLI-3708) |
+| `cockpit notes connect` | carries a notetaker API key (Fellow or Circleback). The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so connecting a notetaker stays a thing a person does at a terminal or in Tower's Settings (BLI-4383) |
+| `cockpit notes webhook` | carries the VENDOR's webhook signing secret, the key an HMAC over every delivered payload is checked against. Exactly the ruling `notes connect` already carries, for the same credential shape: the CLI reads it from STDIN so it never lands in an argument list, and an MCP tool argument travels through a model's context window and whatever transcript store sits behind it (BLI-4394) |
 
 <!-- END GENERATED verb census -->
 

package/dist/notes-account-tools.d.ts

@@ -0,0 +1,24 @@
+/**
+ * `notes_accounts` / `notes_detach` / `notes_sync` MCP tools (BLI-4383) — the
+ * notetaker a person connected, on the `bli-tower` server, over the same
+ * `/api/notes/accounts` doors `cockpit notes` and the Settings section call,
+ * authenticated with this machine's collector device token.
+ *
+ * ONE DELIBERATE ASYMMETRY WITH THE CLI, recorded in `verb-census.ts`:
+ * **`cockpit notes connect` has NO MCP twin.** It carries a notetaker API key,
+ * and the CLI takes that on stdin precisely so it never lands in an argument
+ * list. An MCP tool argument IS an argument list: it travels through a model's
+ * context window and whatever transcript store sits behind it. That is the
+ * same ruling `mail add-imap` and `cal add-ical` already carry, for the same
+ * credential shape, and connecting a notetaker stays a thing a person does at
+ * a terminal or in Settings.
+ *
+ * Same session discipline as `mail-tools.ts`: the session is loaded fresh per
+ * call, so a machine with no `cockpit login` pairing still serves this
+ * server's other tools and only a `notes_` account call fails, by name.
+ */
+import { type ToolDeps } from "./tool-result.js";
+export type NotesAccountDeps = ToolDeps;
+export declare function registerNotesAccountTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps: NotesAccountDeps): void;

package/dist/notes-account-tools.js

@@ -0,0 +1,78 @@
+/**
+ * `notes_accounts` / `notes_detach` / `notes_sync` MCP tools (BLI-4383) — the
+ * notetaker a person connected, on the `bli-tower` server, over the same
+ * `/api/notes/accounts` doors `cockpit notes` and the Settings section call,
+ * authenticated with this machine's collector device token.
+ *
+ * ONE DELIBERATE ASYMMETRY WITH THE CLI, recorded in `verb-census.ts`:
+ * **`cockpit notes connect` has NO MCP twin.** It carries a notetaker API key,
+ * and the CLI takes that on stdin precisely so it never lands in an argument
+ * list. An MCP tool argument IS an argument list: it travels through a model's
+ * context window and whatever transcript store sits behind it. That is the
+ * same ruling `mail add-imap` and `cal add-ical` already carry, for the same
+ * credential shape, and connecting a notetaker stays a thing a person does at
+ * a terminal or in Settings.
+ *
+ * Same session discipline as `mail-tools.ts`: the session is loaded fresh per
+ * call, so a machine with no `cockpit login` pairing still serves this
+ * server's other tools and only a `notes_` account call fails, by name.
+ */
+import { z } from "zod";
+import { callAgentDoor } from "./agent-door.js";
+import { CONFIRM_INPUT, doorFailureText, errorResult, queryString, registrarFor, textResult, unconfirmed, withSession, } from "./tool-result.js";
+function accountLine(account) {
+    const health = account.status === "active"
+        ? "active"
+        : `${account.status}${account.status_reason ? ` (${account.status_reason})` : ""}`;
+    return `${account.label ?? account.provider}  ${account.provider}  ${health}  last read ${account.last_synced_at ?? "never"}  ${account.id}`;
+}
+export function registerNotesAccountTools(server, deps) {
+    const register = registrarFor(server);
+    register("notes_accounts", {
+        title: "List connected notetakers",
+        description: "Every notetaker account (Fellow or Circleback; Otter and Granola are named but not connectable) connected to "
+            + "Tower that you may see: name, provider, workspace, health and when it was last read. Start here when you "
+            + "need an account id. Connecting one is NOT available here on purpose — it carries an API key, so it is done "
+            + "at a terminal with `cockpit notes connect --provider fellow --workspace <subdomain> --key-stdin` or in "
+            + "Tower's Settings.",
+        inputSchema: {},
+    }, async () => withSession(deps, async (session) => {
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", "/api/notes/accounts");
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_accounts", response));
+        const accounts = (Array.isArray(response.body.accounts) ? response.body.accounts : []);
+        return textResult(accounts.length === 0
+            ? "No notetaker is connected. A person connects one with `cockpit notes connect --provider fellow --workspace <subdomain> --key-stdin`, or in Tower's Settings."
+            : `${accounts.length} notetaker(s).\n${accounts.map(accountLine).join("\n")}`, { accounts });
+    }));
+    register("notes_sync", {
+        title: "Read a notetaker now",
+        description: "Reads the meetings this notetaker has recorded since the last pass and files them as meeting notes. "
+            + "Answers with the run's own counts and reason label, which is exactly what the ledger row says. "
+            + "The half-hourly cron does this unasked; this is the button for when you do not want to wait.",
+        inputSchema: { account_id: z.string().uuid() },
+    }, async (args) => withSession(deps, async (session) => {
+        const response = await callAgentDoor(session, deps.fetchImpl, "POST", `/api/notes/accounts/${encodeURIComponent(String(args.account_id))}/sync`);
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_sync", response));
+        const run = response.body.run;
+        return textResult(run
+            ? `${run.reason}: ${run.notesAdded} stored, ${run.notesUpdated} unchanged, ${run.notesSkipped} skipped. ${run.detail}`
+            : "Tower answered without a run.", response.body);
+    }));
+    register("notes_detach", {
+        title: "Detach a notetaker",
+        description: "Removes a notetaker account and its stored key from Tower. The account itself is untouched at the provider, "
+            + "and the meetings it already filed stay where they are. Requires confirm: true.",
+        inputSchema: { account_id: z.string().uuid(), confirm: CONFIRM_INPUT },
+    }, async (args) => withSession(deps, async (session) => {
+        const refusal = unconfirmed(args, "This would detach that notetaker and forget its stored key (the account itself is untouched at the provider, and the meetings it filed stay).");
+        if (refusal)
+            return refusal;
+        const query = new URLSearchParams({ account_id: String(args.account_id) });
+        const response = await callAgentDoor(session, deps.fetchImpl, "DELETE", `/api/notes/accounts${queryString(query)}`);
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_detach", response));
+        return textResult(`Detached ${String(args.account_id)}. Its stored key went with it; the meetings it filed stay where they are.`, response.body);
+    }));
+}

package/dist/server.js

@@ -12,6 +12,7 @@ import { registerDocsMsgTools } from "./docs-msg-tools.js";
 import { registerJarvisTools } from "./jarvis-tools.js";
 import { registerCalTools } from "./cal-tools.js";
 import { registerMailTools } from "./mail-tools.js";
+import { registerNotesAccountTools } from "./notes-account-tools.js";
 import { registerNotesTools } from "./notes-tools.js";
 import { registerNotesWriteTools } from "./notes-write-tools.js";
 import { registerMemoryExperienceTools } from "./memory-experience-tools.js";
@@ -432,6 +433,10 @@ export function createServer(deps) {
     // `AWAITING_TWIN` is empty as of this batch.
     registerBriefWriteTools(server, { fetchImpl: deps.fetchImpl });
     registerNotesWriteTools(server, { fetchImpl: deps.fetchImpl });
+    // BLI-4383: the notetaker a person connected. Connecting one is deliberately
+    // absent — it carries an API key, and a tool argument travels through a
+    // model's context window (`verb-census.ts`'s TERMINAL_ONLY says so in full).
+    registerNotesAccountTools(server, { fetchImpl: deps.fetchImpl });
     registerSettingsWriteTools(server, { fetchImpl: deps.fetchImpl });
     registerTeamWriteTools(server, { fetchImpl: deps.fetchImpl });
     // BLI-3728: one search over documents, messages, issues, meeting notes and

package/dist/verb-census.js

@@ -269,6 +269,11 @@ export const MCP_TWINS = {
     "notes unshare": { tool: "notes_unshare", door: "POST /api/notes/share (share=false)" },
     "notes move": { tool: "notes_move", door: "POST /api/notes/move" },
     "notes place": { tool: "notes_place", door: "POST /api/notes/place" },
+    // BLI-4383. `notes connect` is in TERMINAL_ONLY below, for the same reason
+    // `mail add-imap` and `cal add-ical` are.
+    "notes accounts": { tool: "notes_accounts", door: "GET /api/notes/accounts" },
+    "notes detach": { tool: "notes_detach", door: "DELETE /api/notes/accounts" },
+    "notes sync": { tool: "notes_sync", door: "POST /api/notes/accounts/[id]/sync" },
     "memory log": { tool: "memory_experience", door: "POST /api/memory/experience" },
     // BLI-4047: the memory STORE at a terminal. The twins live on the second
     // server, `bli-memory`, over the same four doors these CLI verbs call.
@@ -350,6 +355,8 @@ export const TERMINAL_ONLY = {
     "mail add-imap": "carries a Google app password. The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so attaching a mailbox stays a thing a person does at a terminal (BLI-3708)",
     "cal add-ical": "carries a calendar's SECRET iCal ADDRESS — a permanent, unauthenticated, read-anything-on-that-calendar URL. The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so attaching a calendar stays a thing a person does at a terminal (BLI-3709)",
     "brief edit": "opens the person's own $EDITOR on this machine and files what they changed; an agent has no editor to open (commands/editor.ts)",
+    "notes connect": "carries a notetaker API key (Fellow or Circleback). The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so connecting a notetaker stays a thing a person does at a terminal or in Tower's Settings (BLI-4383)",
+    "notes webhook": "carries the VENDOR's webhook signing secret, the key an HMAC over every delivered payload is checked against. Exactly the ruling `notes connect` already carries, for the same credential shape: the CLI reads it from STDIN so it never lands in an argument list, and an MCP tool argument travels through a model's context window and whatever transcript store sits behind it (BLI-4394)",
 };
 /**
  * Verbs owed a twin, with who owes it. This list should only ever shrink.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.44",
+  "version": "0.1.47",
   "private": false,
   "description": "bli-tower: an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",