@bli-cockpit/mcp 0.1.69 → 0.1.71

package/README.md

@@ -103,7 +103,7 @@ about what an agent can reach.
 
 <!-- BEGIN GENERATED verb census — `npm run mcp:readme` -->
 
-**111 of 116 Tower verbs have an MCP twin.**
+**115 of 120 Tower verbs have an MCP twin.**
 Each tool goes through the SAME door its CLI verb calls, with the same
 collector device token — never a second route and never a service-role
 reader. `src/verb-census.test.ts` fails when a verb is in none of the
@@ -125,6 +125,7 @@ three tables below.
 | `cockpit cal next` | `cal_next` | `GET /api/cal/next` |
 | `cockpit cal share` | `cal_share` | `PATCH /api/cal/calendars` |
 | `cockpit cal sync` | `cal_sync` | `POST /api/cal/calendars/[id]/sync` |
+| `cockpit cal sync-status` | `cal_sync_status` | `GET /api/cal/sync-status` |
 | `cockpit cal today` | `cal_today` | `GET /api/cal/today` |
 | `cockpit cal week` | `cal_week` | `GET /api/cal/week` |
 | `cockpit careers decide` | `careers_decide` | `POST /api/careers/applications/[id]/decide` |
@@ -164,6 +165,7 @@ three tables below.
 | `cockpit mail search` | `mail_search` | `GET /api/mail/search` |
 | `cockpit mail send` | `mail_send` | `POST /api/mail/send` |
 | `cockpit mail sync` | `mail_sync` | `POST /api/mail/accounts/[id]/sync` |
+| `cockpit mail sync-status` | `mail_sync_status` | `GET /api/mail/sync-status` |
 | `cockpit memory consolidation` | `memory_consolidation` | `GET /api/memory/consolidation` |
 | `cockpit memory forget` | `forget_memory` (`bli-memory`) | `POST /api/memory/forget` |
 | `cockpit memory log` | `memory_experience` | `POST /api/memory/experience` |
@@ -186,6 +188,7 @@ three tables below.
 | `cockpit notes accounts` | `notes_accounts` | `GET /api/notes/accounts` |
 | `cockpit notes detach` | `notes_detach` | `DELETE /api/notes/accounts` |
 | `cockpit notes folders` | `notes_folders` | `GET /api/notes/folders` |
+| `cockpit notes granola-status` | `notes_granola_status` | `GET /api/notes/granola-status` |
 | `cockpit notes list` | `notes_list` | `GET /api/notes/library` |
 | `cockpit notes mkdir` | `notes_mkdir` | `POST /api/notes/folders` |
 | `cockpit notes move` | `notes_move` | `POST /api/notes/move` |
@@ -198,6 +201,7 @@ three tables below.
 | `cockpit notes shelves` | `notes_shelves` | `GET /api/notes/library` |
 | `cockpit notes show` | `notes_show` | `GET /api/notes/library/[id]` |
 | `cockpit notes sync` | `notes_sync` | `POST /api/notes/accounts/[id]/sync` |
+| `cockpit notes sync-status` | `notes_sync_status` | `GET /api/notes/sync-status` |
 | `cockpit notes unshare` | `notes_unshare` | `POST /api/notes/share (share=false)` |
 | `cockpit notes upload` | `notes_upload` | `POST /api/notes/upload` |
 | `cockpit ops recompile` | `ops_recompile` | `POST /api/ops/recompile` |

package/dist/brief-tools.js

@@ -157,4 +157,24 @@ export function registerBriefTools(server, deps) {
         return textResult(`${status.displayName ?? "This person"} — ${reason}${detail}${slack}${readError}`
             + `\n${status.owningCadence ?? "?"} owns this morning${status.timeZone ? ` (${status.timeZone})` : ""}${rendered}`, { status, ...(body.render ? { render: body.render } : {}) });
     }));
+    register("brief_missed", {
+        title: "Who is missing their Tower daily brief right now",
+        description: "Every roster person owed a brief who has no delivered receipt for their own most recently passed window, "
+            + "and why — `compile_failed`, `page_refused`, `dm_failed`, or `no_page_shape` for a person with no page "
+            + "shape at all (named, never dropped). Same reader `cockpit ops status`'s `jarvis-ic-dm` row folds in. "
+            + "Reads across the team, same gate as `brief_status`'s `subject`.",
+        inputSchema: {},
+    }, async () => withSession(deps, async (session) => {
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", "/api/ops/brief-status?missed=1");
+        if (!response.ok)
+            return errorResult(doorFailureText("brief_missed", response));
+        const body = response.body;
+        const coverage = body.coverage ?? {};
+        const missed = coverage.missed ?? [];
+        const lines = missed
+            .map((person) => `${person.displayName ?? "?"}  ${person.missReason ?? "?"}${person.detail ? ` — ${person.detail}` : ""}`)
+            .join("\n");
+        return textResult(`${coverage.verdict ?? "unknown"}: ${missed.length} missing of those owed a brief${coverage.detail ? `\n${coverage.detail}` : ""}`
+            + `${lines ? `\n${lines}` : ""}`, { coverage });
+    }));
 }

package/dist/cal-sync-status-tool.d.ts

@@ -0,0 +1,11 @@
+/**
+ * `cal_sync_status` (ticket 10730) — split out of `cal-tools.ts` when adding
+ * it there would have pushed that file over the 500-line readability band.
+ * Same door as `cockpit cal sync-status`: every calendar's sync health, or
+ * one's, read from `cal_sync_runs` on the caller's own RLS client. Built
+ * because the integrations audit had no Tower door for this and went to the
+ * ledger table directly; `mail_sync_status` and `notes_sync_status` are its
+ * siblings, same shape, same reason.
+ */
+import { type RegisterTool, type ToolDeps } from "./tool-result.js";
+export declare function registerCalSyncStatusTool(register: RegisterTool, deps: ToolDeps): void;

package/dist/cal-sync-status-tool.js

@@ -0,0 +1,38 @@
+/**
+ * `cal_sync_status` (ticket 10730) — split out of `cal-tools.ts` when adding
+ * it there would have pushed that file over the 500-line readability band.
+ * Same door as `cockpit cal sync-status`: every calendar's sync health, or
+ * one's, read from `cal_sync_runs` on the caller's own RLS client. Built
+ * because the integrations audit had no Tower door for this and went to the
+ * ledger table directly; `mail_sync_status` and `notes_sync_status` are its
+ * siblings, same shape, same reason.
+ */
+import { z } from "zod";
+import { callAgentDoor } from "./agent-door.js";
+import { doorFailureText, errorResult, textResult, withSession } from "./tool-result.js";
+export function registerCalSyncStatusTool(register, deps) {
+    register("cal_sync_status", {
+        title: "Read calendar sync health",
+        description: "Every calendar's sync health, or one's: the last successful pass, the last pass's own result and reason, "
+            + "how many events it carried, failures in the last 24 hours, and the LAG between an event's own provider "
+            + "clock and when Tower actually stored it. Metadata only — the same read `cockpit cal sync-status` makes "
+            + "(ticket 10730, built because the integrations audit had no Tower door for this and went to the table directly).",
+        inputSchema: {
+            calendar_id: z.string().uuid().optional().describe("One calendar id (cal_calendars). Omit for every calendar you may read."),
+        },
+    }, async (args) => withSession(deps, async (session) => {
+        const path = args.calendar_id
+            ? `/api/cal/sync-status?calendar_id=${encodeURIComponent(String(args.calendar_id))}`
+            : "/api/cal/sync-status";
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", path);
+        if (!response.ok)
+            return errorResult(doorFailureText("cal_sync_status", response));
+        const calendars = (Array.isArray(response.body.calendars) ? response.body.calendars : []);
+        const lines = calendars
+            .map((calendar) => `${calendar.name}  last_success=${calendar.last_success_at ?? "never"}  last_run=${calendar.last_run ? `${calendar.last_run.reason}@${calendar.last_run.started_at}` : "never"}  failures_24h=${calendar.failures_24h}${calendar.data_incomplete ? "  (partial read)" : ""}`)
+            .join("\n");
+        return textResult(calendars.length === 0 ? "No calendars are attached." : `${calendars.length} calendar(s).\n${lines}`, {
+            calendars,
+        });
+    }));
+}

package/dist/cal-tools.js

@@ -33,6 +33,7 @@
  */
 import { z } from "zod";
 import { callAgentDoor } from "./agent-door.js";
+import { registerCalSyncStatusTool } from "./cal-sync-status-tool.js";
 import { registerCalDeleteTool } from "./cal-tools-delete.js";
 import { CONFIRM_INPUT, EMAIL_INPUT, doorFailureText, errorResult, queryString, registrarFor, textResult, unconfirmed, withSession, } from "./tool-result.js";
 /** This machine's zone: what a person means by "today" unless they say otherwise. */
@@ -278,6 +279,7 @@ export function registerCalTools(server, deps) {
         return textResult(`Detached ${String(args.calendar_id)}. Its stored events went with it; the calendar itself is untouched at Google.`, response.body);
     }));
     registerCalDeleteTool(register, deps);
+    registerCalSyncStatusTool(register, deps);
 }
 /** BLI-10560: the new event's Tower id, or why there is none yet. */
 function towerIdLine(event) {

package/dist/docs-notion-tools.js

@@ -81,9 +81,20 @@ export function registerDocsNotionTools(server, deps) {
         const summary = Object.entries(counts?.by_state ?? {})
             .map(([state, count]) => `${count} ${state}`)
             .join(", ");
-        return textResult(`${counts?.linked ?? 0} linked: ${summary}.`, {
+        const lastRun = response.body.last_run;
+        const runLine = ["push", "pull"]
+            .map((direction) => `${direction} ${runSentence(lastRun?.[direction] ?? null)}`)
+            .join(" · ");
+        return textResult(`${counts?.linked ?? 0} linked: ${summary}. Last run — ${runLine}.`, {
             counts,
             documents: response.body.documents ?? [],
+            last_run: lastRun ?? { push: null, pull: null },
         });
     }));
 }
+function runSentence(run) {
+    if (!run)
+        return "never run";
+    const moved = run.pushed || run.pulled;
+    return `${run.reason} (${moved} moved, ${run.failed} failed) at ${run.started_at}`;
+}

package/dist/mail-tools.js

@@ -51,6 +51,30 @@ export function registerMailTools(server, deps) {
             ? "No mailboxes are attached. A person attaches one with `cockpit mail add-imap` (personal) or the browser (work)."
             : `${accounts.length} mailbox(es).\n${lines}`, { accounts });
     }));
+    register("mail_sync_status", {
+        title: "Read mail sync health",
+        description: "Every mailbox's sync health, or one's: the last successful pass, the last pass's own result and reason, "
+            + "how many messages it carried, failures in the last 24 hours, and the LAG between a message's own clock "
+            + "and when Tower actually stored it. Metadata only — the same read `cockpit mail sync-status` makes "
+            + "(ticket 10730, built because the integrations audit had no Tower door for this and went to the table directly).",
+        inputSchema: {
+            account_id: z.string().uuid().optional().describe("One mailbox id (mail_accounts). Omit for every mailbox you may read."),
+        },
+    }, async (args) => withSession(deps, async (session) => {
+        const path = args.account_id
+            ? `/api/mail/sync-status?account_id=${encodeURIComponent(String(args.account_id))}`
+            : "/api/mail/sync-status";
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", path);
+        if (!response.ok)
+            return errorResult(doorFailureText("mail_sync_status", response));
+        const accounts = (Array.isArray(response.body.accounts) ? response.body.accounts : []);
+        const lines = accounts
+            .map((account) => `${account.address}  last_success=${account.last_success_at ?? "never"}  last_run=${account.last_run ? `${account.last_run.reason}@${account.last_run.started_at}` : "never"}  failures_24h=${account.failures_24h}${account.data_incomplete ? "  (partial read)" : ""}`)
+            .join("\n");
+        return textResult(accounts.length === 0 ? "No mailboxes are attached." : `${accounts.length} mailbox(es).\n${lines}`, {
+            accounts,
+        });
+    }));
     register("mail_inbox", {
         title: "Read the unified inbox",
         description: "Messages across every mailbox you may read, newest first. Never a body — call mail_read on a thread for that. "

package/dist/notes-account-tools.js

@@ -45,6 +45,30 @@ export function registerNotesAccountTools(server, deps) {
             ? "No notetaker is connected. A person connects one with `cockpit notes connect --provider fellow --workspace <subdomain> --key-stdin`, or in Tower's Settings."
             : `${accounts.length} notetaker(s).\n${accounts.map(accountLine).join("\n")}`, { accounts });
     }));
+    register("notes_sync_status", {
+        title: "Read notetaker sync health",
+        description: "Every notetaker's sync health, or one's: the last successful pass, the last pass's own result and reason, "
+            + "how many meetings it carried, failures in the last 24 hours, and the LAG between the newest meeting it has "
+            + "already read and when it last ran. Metadata only — the same read `cockpit notes sync-status` makes "
+            + "(ticket 10730, built because the integrations audit had no Tower door for this and went to the table directly).",
+        inputSchema: {
+            account_id: z.string().uuid().optional().describe("One notetaker account id (notes_accounts). Omit for every account you may read."),
+        },
+    }, async (args) => withSession(deps, async (session) => {
+        const path = args.account_id
+            ? `/api/notes/sync-status?account_id=${encodeURIComponent(String(args.account_id))}`
+            : "/api/notes/sync-status";
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", path);
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_sync_status", response));
+        const accounts = (Array.isArray(response.body.accounts) ? response.body.accounts : []);
+        const lines = accounts
+            .map((account) => `${account.label ?? account.provider}  last_success=${account.last_success_at ?? "never"}  last_run=${account.last_run ? `${account.last_run.reason}@${account.last_run.started_at}` : "never"}  failures_24h=${account.failures_24h}${account.data_incomplete ? "  (partial read)" : ""}`)
+            .join("\n");
+        return textResult(accounts.length === 0 ? "No notetaker is connected." : `${accounts.length} notetaker(s).\n${lines}`, {
+            accounts,
+        });
+    }));
     register("notes_sync", {
         title: "Read a notetaker now",
         description: "Reads the meetings this notetaker has recorded since the last pass and files them as meeting notes. "

package/dist/notes-granola-status-tool.d.ts

@@ -0,0 +1,15 @@
+/**
+ * `notes_granola_status` MCP tool (ticket 10718) — the Granola cron's own
+ * last several runs, on the `bli-tower` server, over the same
+ * `/api/notes/granola-status` door `cockpit notes granola-status` calls,
+ * authenticated with this machine's collector device token.
+ *
+ * Granola runs on one shared server-side key rather than a `notes_accounts`
+ * row a person connects, so this is its own tool beside
+ * `notes-account-tools.ts` rather than a filter on `notes_accounts`.
+ */
+import { type ToolDeps } from "./tool-result.js";
+export type NotesGranolaStatusDeps = ToolDeps;
+export declare function registerNotesGranolaStatusTool(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps: NotesGranolaStatusDeps): void;

package/dist/notes-granola-status-tool.js

@@ -0,0 +1,40 @@
+/**
+ * `notes_granola_status` MCP tool (ticket 10718) — the Granola cron's own
+ * last several runs, on the `bli-tower` server, over the same
+ * `/api/notes/granola-status` door `cockpit notes granola-status` calls,
+ * authenticated with this machine's collector device token.
+ *
+ * Granola runs on one shared server-side key rather than a `notes_accounts`
+ * row a person connects, so this is its own tool beside
+ * `notes-account-tools.ts` rather than a filter on `notes_accounts`.
+ */
+import { z } from "zod";
+import { callAgentDoor } from "./agent-door.js";
+import { doorFailureText, errorResult, queryString, registrarFor, textResult, withSession, } from "./tool-result.js";
+function runLine(run) {
+    const spend = run.spend_usd === null ? "n/a" : `$${run.spend_usd.toFixed(4)}`;
+    return `${run.started_at}  ${run.reason}  seen=${run.notes_seen} stored=${run.notes_stored} `
+        + `failed=${run.notes_failed}  model=${run.model ?? "n/a"}  spend=${spend}`;
+}
+export function registerNotesGranolaStatusTool(server, deps) {
+    const register = registrarFor(server);
+    register("notes_granola_status", {
+        title: "The Granola cron's own health",
+        description: "The newest granola:pull runs (ticket 10718): each one's reason (ok, partial, or a named setup failure), "
+            + "how many notes it saw/stored/failed, the model it used, real spend, and the lookback window it computed. "
+            + "Granola runs on one shared server-side key, not a connected account, so this answers for the CRON itself "
+            + "rather than `notes_accounts`.",
+        inputSchema: { limit: z.number().int().min(1).max(50).optional().describe("Newest N runs. Default 10, ceiling 50.") },
+    }, async (args) => withSession(deps, async (session) => {
+        const query = new URLSearchParams();
+        if (args.limit !== undefined)
+            query.set("limit", String(args.limit));
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", `/api/notes/granola-status${queryString(query)}`);
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_granola_status", response));
+        const runs = (Array.isArray(response.body.runs) ? response.body.runs : []);
+        return textResult(runs.length === 0
+            ? "No granola:pull run has ever landed a row."
+            : `${runs.length} run(s).\n${runs.map(runLine).join("\n")}`, { runs });
+    }));
+}

package/dist/ops-tools.js

@@ -161,6 +161,12 @@ export function registerOpsTools(server, deps) {
                 ? `TOOL ROUTER  ${toolRouterBoard.turnsRouted} routed`
                 : "TOOL ROUTER  not read (tool_router_section_absent)"
             : "";
+        // BLI-10728: the daily-brief delivery streak, the server's own
+        // sentence relayed verbatim, same rule as `ladderLine` above.
+        const briefStreak = asRecord(body.briefStreak);
+        const briefStreakLine = typeof briefStreak.streakDays === "number"
+            ? `BRIEF STREAK  ${briefStreak.streakDays} day(s)${briefStreak.detail ? ` — ${briefStreak.detail}` : ""}`
+            : "";
         // Both branches say something. A board that is entirely green and
         // reports nothing cannot answer "did anybody look today?".
         return textResult(`${rows.length} pipeline(s), ${unhealthy.length} unhealthy`
@@ -169,6 +175,7 @@ export function registerOpsTools(server, deps) {
             + `${fleetSummary ? `\nFLEET  ${fleetSummary}` : ""}`
             + `${coverageSummary ? `\nCOVERAGE  ${coverageSummary}` : ""}`
             + `${ladderLine ? `\n${ladderLine}` : ""}`
+            + `${briefStreakLine ? `\n${briefStreakLine}` : ""}`
             + `${memoryLines ? `\n${memoryLines}` : ""}`
             + `${experienceLines ? `\n${experienceLines}` : ""}`
             + `${turnLine ? `\n${turnLine}` : ""}`
@@ -181,6 +188,7 @@ export function registerOpsTools(server, deps) {
             ...(body.coverage ? { coverage: summaryOnly(body.coverage, args.people === true) } : {}),
             ...(body.skips ? { skips: body.skips } : {}),
             ...(body.ladder ? { ladder: body.ladder } : {}),
+            ...(body.briefStreak ? { briefStreak: body.briefStreak } : {}),
             ...(memory?.ok ? { memory: memory.body.memory, hooks: memory.body.hooks, experience: memory.body.experience } : {}),
             ...(args.turns ? { turns: body.turns ?? null } : {}),
             ...(toolRouter?.ok ? { toolRouter: toolRouter.body.board ?? null } : {}),

package/dist/server.js

@@ -16,6 +16,7 @@ import { registerCalTools } from "./cal-tools.js";
 import { registerMailTools } from "./mail-tools.js";
 import { registerNotesAccountTools } from "./notes-account-tools.js";
 import { registerNotesTools } from "./notes-tools.js";
+import { registerNotesGranolaStatusTool } from "./notes-granola-status-tool.js";
 import { registerNotesWriteTools } from "./notes-write-tools.js";
 import { registerMemoryConsolidationTools } from "./memory-consolidation-tools.js";
 import { registerMemoryExperienceTools } from "./memory-experience-tools.js";
@@ -450,6 +451,9 @@ export function createServer(deps) {
     // complete.
     registerBriefTools(server, { fetchImpl: deps.fetchImpl });
     registerNotesTools(server, { fetchImpl: deps.fetchImpl });
+    // Ticket 10718: the Granola cron's own health, read-only, over the shared
+    // server-side key rather than a `notes_accounts` row.
+    registerNotesGranolaStatusTool(server, { fetchImpl: deps.fetchImpl });
     registerOpsTools(server, { fetchImpl: deps.fetchImpl });
     registerMemoryExperienceTools(server, { fetchImpl: deps.fetchImpl });
     // BLI-4533: the compiled one-page profile, the twin of `cockpit memory profile`.

package/dist/tool-catalog.d.ts

@@ -10,7 +10,7 @@
  * from `src/` under Node's type stripping, so it may import nothing.
  */
 /** Tools that change nothing. The smoke calls every one. */
-export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "notes_folders", "notes_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "ops_status", "slack_coverage", "slack_read", "memory_profile", "memory_consolidation", "settings_show", "settings_list", "model_show", "team_members", "team_device_list", "scout_board", "workbook_read", "tower_search"];
+export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_sync_status", "notes_granola_status", "ops_status", "slack_coverage", "slack_read", "memory_profile", "memory_consolidation", "settings_show", "settings_list", "model_show", "team_members", "team_device_list", "scout_board", "workbook_read", "tower_search"];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls
  * each one ONLY with its dry-run flag set (`scripts/smoke.ts` says which).

package/dist/tool-catalog.js

@@ -36,11 +36,13 @@ export const READ_TOOLS = [
     "mail_read",
     "mail_search",
     "mail_attachment",
+    "mail_sync_status",
     "cal_today",
     "cal_week",
     "cal_next",
     "cal_find",
     "cal_calendars",
+    "cal_sync_status",
     "jarvis_ask",
     "jarvis_trace",
     "jarvis_check",
@@ -50,6 +52,7 @@ export const READ_TOOLS = [
     "brief_read",
     "brief_history",
     "brief_status",
+    "brief_missed",
     "notes_folders",
     "notes_list",
     "notes_show",
@@ -57,6 +60,8 @@ export const READ_TOOLS = [
     "notes_shelves",
     "notes_place",
     "notes_accounts",
+    "notes_sync_status",
+    "notes_granola_status",
     "ops_status",
     "slack_coverage",
     "slack_read",

package/dist/verb-census.js

@@ -258,6 +258,7 @@ export const MCP_TWINS = {
     "mail send": { tool: "mail_send", door: "POST /api/mail/send" },
     "mail attachment": { tool: "mail_attachment", door: "GET /api/mail/attachments/[id]?meta=1" },
     "mail sync": { tool: "mail_sync", door: "POST /api/mail/accounts/[id]/sync" },
+    "mail sync-status": { tool: "mail_sync_status", door: "GET /api/mail/sync-status" },
     "mail detach": { tool: "mail_detach", door: "DELETE /api/mail/accounts" },
     "cal today": { tool: "cal_today", door: "GET /api/cal/today" },
     "cal week": { tool: "cal_week", door: "GET /api/cal/week" },
@@ -267,6 +268,7 @@ export const MCP_TWINS = {
     "cal create": { tool: "cal_create", door: "POST /api/cal/events" },
     "cal share": { tool: "cal_share", door: "PATCH /api/cal/calendars" },
     "cal sync": { tool: "cal_sync", door: "POST /api/cal/calendars/[id]/sync" },
+    "cal sync-status": { tool: "cal_sync_status", door: "GET /api/cal/sync-status" },
     "cal detach": { tool: "cal_detach", door: "DELETE /api/cal/calendars" },
     "cal delete": { tool: "cal_delete", door: "DELETE /api/cal/events/[eventId]" },
     "brief read": { tool: "brief_read", door: "GET /api/jarvis/brief" },
@@ -297,6 +299,9 @@ export const MCP_TWINS = {
     "notes accounts": { tool: "notes_accounts", door: "GET /api/notes/accounts" },
     "notes detach": { tool: "notes_detach", door: "DELETE /api/notes/accounts" },
     "notes sync": { tool: "notes_sync", door: "POST /api/notes/accounts/[id]/sync" },
+    "notes sync-status": { tool: "notes_sync_status", door: "GET /api/notes/sync-status" },
+    // Ticket 10718: Granola's own cron health, over its shared server-side key.
+    "notes granola-status": { tool: "notes_granola_status", door: "GET /api/notes/granola-status" },
     "memory log": { tool: "memory_experience", door: "POST /api/memory/experience" },
     // BLI-4047: the memory STORE at a terminal. The twins live on the second
     // server, `bli-memory`, over the same four doors these CLI verbs call.

package/dist/work-flag-census.d.ts

@@ -0,0 +1,22 @@
+/** Flags `parseIssueArgs` accepts a VALUE for (`--flag value`), read from its own `valueFlags` array. */
+export declare function issueValueFlags(): string[];
+/** The bare field names (`--parent` → `parent`) `cockpit issue create`/`update` actually write. */
+export declare function issueWriteFieldNames(): string[];
+export declare const WORK_WRITE_VERBS: readonly ["issue create", "issue update"];
+export type WorkWriteVerb = (typeof WORK_WRITE_VERBS)[number];
+export declare const MCP_TOOL_FOR_WRITE_VERB: Record<WorkWriteVerb, string>;
+/** The field names an MCP tool's REGISTERED zod shape actually carries. */
+export declare function mcpToolFieldNames(toolName: string): string[];
+/**
+ * A field on exactly one side ON PURPOSE, with why — a claim about shape,
+ * never a backlog (the same discipline `TERMINAL_ONLY` keeps in
+ * `verb-census.ts`). Anything asymmetric that is NOT listed here fails the
+ * test in `work-flag-census.test.ts`.
+ */
+export interface OneSidedField {
+    verb: WorkWriteVerb;
+    side: "cli" | "mcp";
+    field: string;
+    reason: string;
+}
+export declare const EXPECTED_ONE_SIDED_FIELDS: OneSidedField[];

package/dist/work-flag-census.js

@@ -0,0 +1,109 @@
+/**
+ * Flag-level parity for `cockpit issue create|update` against their MCP
+ * twins, `work_create_issue`/`work_update_issue` (BLI-10575).
+ *
+ * `verb-census.ts` proves every VERB has a twin — it never looks at a verb's
+ * FLAGS, by its own header ("What it deliberately does NOT see"): the
+ * extraction there only ever reads a noun's `action` union, never a shape's
+ * own fields. That is exactly how `work_create_issue` shipped with no
+ * `parent` while `cockpit issue create --parent` already had one (BLI-3716)
+ * — the VERB existed on both sides, its FLAGS did not, and nothing checked
+ * because nothing looked. `--size`, added in this same ticket, would have
+ * been the next one to drift silently were this test not written alongside
+ * it.
+ *
+ * This reads both real sources rather than trusting a hand-written list on
+ * either side:
+ *
+ *   - the collector's own `valueFlags` array for `parseIssueArgs`, a text
+ *     read the same way `verb-census.ts` reads the collector (this package
+ *     declares no dependency on it);
+ *   - the MCP tool's REGISTERED zod shape — `createServer(...)`'s
+ *     `_registeredTools[name].inputSchema.shape`, the same private field
+ *     `server.test.ts` already introspects, not a text scan of the source.
+ *
+ * `cockpit issue` has ONE shared flag vocabulary across every verb (`list`,
+ * `create`, `update`, `move`, ... all parse from the same `valueFlags`
+ * array — `local-args-tower-work.ts` gates a flag's MEANING per action, not
+ * its presence), so the CLI side of this comparison is the same set for
+ * `create` and `update` alike; only the filter list below narrows it to the
+ * fields that name something an issue's ROW carries, as opposed to a filter
+ * (`--state`, `--limit`) or a global (`--home`, `--dashboard-url`).
+ */
+import { readFileSync } from "node:fs";
+import { dirname, resolve } from "node:path";
+import { fileURLToPath } from "node:url";
+import { createServer } from "./server.js";
+const HERE = dirname(fileURLToPath(import.meta.url));
+const WORK_ARGS_FILE = resolve(HERE, "../../cockpit-local-collector/src/commands/local-args-tower-work.ts");
+/** Flags `parseIssueArgs` accepts a VALUE for (`--flag value`), read from its own `valueFlags` array. */
+export function issueValueFlags() {
+    const source = readFileSync(WORK_ARGS_FILE, "utf8");
+    const start = source.indexOf("export function parseIssueArgs");
+    const end = source.indexOf("export type ProjectAction", start);
+    if (start < 0 || end < 0) {
+        throw new Error("parseIssueArgs (or the point where it ends, ProjectAction) moved in local-args-tower-work.ts — "
+            + "work-flag-census.ts's extraction needs updating alongside it.");
+    }
+    const slice = source.slice(start, end);
+    const valueFlagsStart = slice.indexOf("valueFlags: [");
+    if (valueFlagsStart < 0)
+        throw new Error("parseIssueArgs's own valueFlags array not found.");
+    const valueFlagsEnd = slice.indexOf("]", valueFlagsStart);
+    return [...slice.slice(valueFlagsStart, valueFlagsEnd).matchAll(/"(--[a-z-]+)"/g)].map((match) => match[1]);
+}
+/**
+ * Flags that name a filter, a global, or a transport knob rather than a
+ * FIELD on the issue row itself — never counted as a "write field" either
+ * side owes the other. `--file` carries the same DESCRIPTION the MCP tools
+ * take as a plain `description` argument; see `EXPECTED_ONE_SIDED` below for
+ * why that one stays a documented asymmetry rather than a shared name.
+ */
+const NON_FIELD_FLAGS = new Set(["--home", "--dashboard-url", "--state", "--limit", "--file"]);
+/** The bare field names (`--parent` → `parent`) `cockpit issue create`/`update` actually write. */
+export function issueWriteFieldNames() {
+    return issueValueFlags()
+        .filter((flag) => !NON_FIELD_FLAGS.has(flag))
+        .map((flag) => flag.replace(/^--/, ""));
+}
+export const WORK_WRITE_VERBS = ["issue create", "issue update"];
+export const MCP_TOOL_FOR_WRITE_VERB = {
+    "issue create": "work_create_issue",
+    "issue update": "work_update_issue",
+};
+/** The field names an MCP tool's REGISTERED zod shape actually carries. */
+export function mcpToolFieldNames(toolName) {
+    const deps = {
+        resolveToken: async () => "token-not-used-by-registration",
+        baseUrl: "https://dashboard.example.test",
+        fetchImpl: (async () => new Response("{}")),
+    };
+    const server = createServer(deps);
+    const shape = server._registeredTools[toolName]?.inputSchema?.shape;
+    if (!shape) {
+        throw new Error(`${toolName} has no inputSchema shape — is it still registered under this name?`);
+    }
+    return Object.keys(shape);
+}
+export const EXPECTED_ONE_SIDED_FIELDS = [
+    {
+        verb: "issue update",
+        side: "mcp",
+        field: "id",
+        reason: "the issue being updated is a positional argument on the CLI (`cockpit issue update <id>`), never a flag — "
+            + "there is nothing for it to be symmetric WITH.",
+    },
+    {
+        verb: "issue create",
+        side: "mcp",
+        field: "description",
+        reason: "the CLI never takes a description on argv, by the sourcing-secrets discipline every body follows here — "
+            + "stdin or --file only. An MCP call has no stdin, so its tool takes description as a plain argument instead.",
+    },
+    {
+        verb: "issue update",
+        side: "mcp",
+        field: "description",
+        reason: "the same reason as issue create's: stdin/--file on the CLI, a plain argument on MCP.",
+    },
+];

package/dist/work-issue-rows.d.ts

@@ -19,11 +19,40 @@ export interface IssueRow {
     title: string;
     state: string;
     priority?: number | null;
+    estimate?: number | null;
     assignee_id?: string | null;
     project_id?: string | null;
     parent_id?: string | null;
     updated_at?: string | null;
 }
+/**
+ * `size` on `work_create_issue`/`work_update_issue` (BLI-10575) maps onto the
+ * existing `work_issues.estimate` numeric column — the CLI twin of this,
+ * `issue-contracts.ts` in the collector, carries the identical table and
+ * comment; kept as a second copy rather than a shared import for the same
+ * reason `work-directory.ts` duplicates `issue-directory.ts` instead of
+ * depending on the collector package.
+ */
+export declare const SIZE_ESTIMATES: {
+    readonly S: 1;
+    readonly M: 3;
+    readonly L: 5;
+};
+export type IssueSize = keyof typeof SIZE_ESTIMATES;
+export declare function estimateForSize(size: string): number;
+export declare function sizeForEstimate(estimate: number | null | undefined): IssueSize | null;
+/**
+ * `T extends object` rather than `T extends { estimate?: ... }` on purpose:
+ * a caller here often has `result.issue ?? {}` in hand, and TypeScript's
+ * excess-property check on an all-optional ("weak") object type refuses a
+ * `{}` that shares NO property with `{ estimate?: ... }` at all (TS2559) —
+ * exactly the shape `withAssigneeIdentity(... ?? {}, directory)` hands back
+ * when the issue itself is absent. Reading `estimate` off an `object` cast
+ * keeps the same runtime behaviour without that false refusal.
+ */
+export declare function withSizeLabel<T extends object>(row: T): T & {
+    size: IssueSize | null;
+};
 /**
  * The fields `work_list_issues` promises. The door's row carries the whole
  * description and a dozen bookkeeping columns; with no limit that was 1,000
@@ -36,6 +65,7 @@ export interface IssueListRow {
     title: string;
     state: string;
     priority: number | null;
+    estimate: number | null;
     assignee_id: string | null;
     project_id: string | null;
     parent_id: string | null;

package/dist/work-issue-rows.js

@@ -13,6 +13,44 @@
  * Every string moved verbatim.
  */
 import { assigneeLabel } from "./work-directory.js";
+/**
+ * `size` on `work_create_issue`/`work_update_issue` (BLI-10575) maps onto the
+ * existing `work_issues.estimate` numeric column — the CLI twin of this,
+ * `issue-contracts.ts` in the collector, carries the identical table and
+ * comment; kept as a second copy rather than a shared import for the same
+ * reason `work-directory.ts` duplicates `issue-directory.ts` instead of
+ * depending on the collector package.
+ */
+export const SIZE_ESTIMATES = { S: 1, M: 3, L: 5 };
+export function estimateForSize(size) {
+    const key = size.trim().toUpperCase();
+    if (key !== "S" && key !== "M" && key !== "L") {
+        throw new Error("size must be S, M, or L.");
+    }
+    return SIZE_ESTIMATES[key];
+}
+export function sizeForEstimate(estimate) {
+    if (estimate === null || estimate === undefined)
+        return null;
+    for (const key of Object.keys(SIZE_ESTIMATES)) {
+        if (SIZE_ESTIMATES[key] === estimate)
+            return key;
+    }
+    return null;
+}
+/**
+ * `T extends object` rather than `T extends { estimate?: ... }` on purpose:
+ * a caller here often has `result.issue ?? {}` in hand, and TypeScript's
+ * excess-property check on an all-optional ("weak") object type refuses a
+ * `{}` that shares NO property with `{ estimate?: ... }` at all (TS2559) —
+ * exactly the shape `withAssigneeIdentity(... ?? {}, directory)` hands back
+ * when the issue itself is absent. Reading `estimate` off an `object` cast
+ * keeps the same runtime behaviour without that false refusal.
+ */
+export function withSizeLabel(row) {
+    const estimate = row.estimate;
+    return { ...row, size: sizeForEstimate(estimate ?? null) };
+}
 export function issueListRow(row) {
     return {
         id: row.id,
@@ -20,6 +58,7 @@ export function issueListRow(row) {
         title: row.title,
         state: row.state,
         priority: row.priority ?? null,
+        estimate: row.estimate ?? null,
         assignee_id: row.assignee_id ?? null,
         project_id: row.project_id ?? null,
         parent_id: row.parent_id ?? null,
@@ -55,8 +94,9 @@ export function outsideNote(outside) {
 }
 export function renderOneIssue(result, directory) {
     const { issue, comments } = result;
+    const size = sizeForEstimate(issue?.estimate ?? null);
     const commentText = comments.map((comment) => `[${comment.created_at ?? ""}] ${comment.body_markdown ?? ""}`).join("\n\n");
-    return `${issue?.identifier ?? result.ref} ${issue?.title ?? ""} (${issue?.state ?? "?"})  ·  assignee ${assigneeLabel(issue?.assignee_id, directory)}`
+    return `${issue?.identifier ?? result.ref} ${issue?.title ?? ""} (${issue?.state ?? "?"})${size ? `  ·  size ${size}` : ""}  ·  assignee ${assigneeLabel(issue?.assignee_id, directory)}`
         + `\n\n${issue?.description ?? "(no description)"}`
         + (commentText ? `\n\n--- comments ---\n${commentText}` : "")
         + (result.commentsUnread ? "\n\n(comments could not be read on this call)" : "");

package/dist/work-tools.js

@@ -18,7 +18,7 @@ import { z } from "zod";
 import { callAgentDoor } from "./agent-door.js";
 import { DEFAULT_LIST_LIMIT, doorFailureText, errorResult, moreNote, registrarFor, textResult, withSession, } from "./tool-result.js";
 import { assigneeLabel, resolveAssigneeDirectory, withAssigneeIdentity } from "./work-directory.js";
-import { historyChange, issueListRow, listCompleteness, outsideNote, outsideProject, renderOneIssue, } from "./work-issue-rows.js";
+import { estimateForSize, historyChange, issueListRow, listCompleteness, outsideNote, outsideProject, renderOneIssue, sizeForEstimate, withSizeLabel, } from "./work-issue-rows.js";
 /** The closed state vocabulary, verbatim from `lib/work/api-doors.ts` `WORK_ISSUE_STATES`. */
 export const WORK_ISSUE_STATES = [
     "backlog",
@@ -63,6 +63,24 @@ const ISSUE_REF = z
     .min(1)
     .max(200)
     .describe("A BLI-#### identifier (e.g. BLI-3654) or an issue's uuid. Both work.");
+/**
+ * A parent issue's uuid from any issue reference — the `create_id`/`update_id`
+ * bodies below need a uuid, and `[issueId]`'s own ref resolution
+ * (`lib/work/issue-ref.ts`) only runs on the PATH segment of `GET
+ * /api/work/issues/[issueId]`, never on a `parent_id` in a POST/PATCH body.
+ * `issue-contracts.ts#resolveIssueUuid` in the collector is the CLI's own
+ * copy of the identical resolve-then-write two-step.
+ */
+async function resolveParentId(deps, session, ref) {
+    const response = await callAgentDoor(session, deps.fetchImpl, "GET", `/api/work/issues/${encodeURIComponent(ref)}`);
+    if (!response.ok)
+        return { status: "failed", text: doorFailureText("work_get_issue", response) };
+    const parent = response.body.issue;
+    if (!parent?.id) {
+        return { status: "failed", text: `No issue matches "${ref}" — it may not exist, or you cannot read it.` };
+    }
+    return { status: "ok", id: parent.id };
+}
 export function registerWorkTools(server, deps) {
     const register = registrarFor(server);
     register("work_list_issues", {
@@ -111,12 +129,15 @@ export function registerWorkTools(server, deps) {
         // BLI-10450: one directory call for the whole page, never one per row.
         const directory = await resolveAssigneeDirectory(deps, session, issues.map((issue) => issue.assignee_id));
         const lines = issues
-            .map((issue) => `${issue.identifier}  ${issue.state}  ${issue.title}`
-            + `  [p${issue.priority ?? 0}, assignee ${assigneeLabel(issue.assignee_id, directory)}, project ${issue.project_id ?? "none"}]`)
+            .map((issue) => {
+            const size = sizeForEstimate(issue.estimate ?? null);
+            return `${issue.identifier}  ${issue.state}  ${issue.title}`
+                + `  [p${issue.priority ?? 0}${size ? `, size ${size}` : ""}, assignee ${assigneeLabel(issue.assignee_id, directory)}, project ${issue.project_id ?? "none"}]`;
+        })
             .join("\n");
         const totalNote = completeness?.total != null && completeness.total > issues.length ? ` ${completeness.total} match in all.` : "";
         return textResult(`${issues.length} issue(s).${totalNote}${moreNote(more, ISSUE_LIST_MAX)}${outsideNote(outside)}${lines ? `\n${lines}` : ""}`, {
-            issues: issues.map((issue) => withAssigneeIdentity(issueListRow(issue), directory)),
+            issues: issues.map((issue) => withSizeLabel(withAssigneeIdentity(issueListRow(issue), directory))),
             more,
             ...(completeness ? { total: completeness.total } : {}),
             ...(outside ? { outside_project: outside } : {}),
@@ -146,7 +167,7 @@ export function registerWorkTools(server, deps) {
             if (!result?.ok)
                 return errorResult(result?.text ?? "work_get_issue could not read that issue.");
             return textResult(renderOneIssue(result, directory), {
-                issue: withAssigneeIdentity(result.issue ?? {}, directory),
+                issue: withSizeLabel(withAssigneeIdentity(result.issue ?? {}, directory)),
                 comments: result.comments,
                 ...(result.commentsUnread ? { comments_unread: true } : {}),
             });
@@ -160,7 +181,7 @@ export function registerWorkTools(server, deps) {
                 ? {
                     ref: result.ref,
                     ok: true,
-                    issue: withAssigneeIdentity(result.issue ?? {}, directory),
+                    issue: withSizeLabel(withAssigneeIdentity(result.issue ?? {}, directory)),
                     comments: result.comments,
                     ...(result.commentsUnread ? { comments_unread: true } : {}),
                 }
@@ -175,6 +196,11 @@ export function registerWorkTools(server, deps) {
             description: z.string().max(200_000).optional().describe("The issue body, markdown."),
             project: z.string().min(1).max(200).optional().describe("A project name or uuid."),
             priority: z.number().int().min(0).max(4).optional().describe("0 none, 1 urgent, 2 high, 3 medium, 4 low."),
+            // BLI-10575: the CLI twin of this tool, `cockpit issue create`, has
+            // had --parent since BLI-3716; this field was missing, and nothing
+            // checked for the gap — see work-flag-census.test.ts.
+            parent: ISSUE_REF.optional().describe("Another issue's BLI-#### identifier or uuid — this issue becomes its sub-issue."),
+            size: z.enum(["S", "M", "L"]).optional().describe("Tower's own size scale, stored in the existing estimate column: S=1, M=3, L=5 (BLI-10575)."),
             assignee: z.string().min(1).max(100).optional().describe('"me" or a person\'s uuid.'),
         },
     }, async (args) => withSession(deps, async (session) => {
@@ -188,17 +214,26 @@ export function registerWorkTools(server, deps) {
             }
             projectId = resolved.id;
         }
+        let parentId;
+        if (args.parent) {
+            const resolved = await resolveParentId(deps, session, String(args.parent));
+            if (resolved.status === "failed")
+                return errorResult(resolved.text);
+            parentId = resolved.id;
+        }
         const response = await callAgentDoor(session, deps.fetchImpl, "POST", "/api/work/issues", {
             title: args.title,
             ...(args.description === undefined ? {} : { description: args.description }),
             ...(projectId ? { project_id: projectId } : {}),
             ...(args.priority === undefined ? {} : { priority: args.priority }),
+            ...(args.size === undefined ? {} : { estimate: estimateForSize(String(args.size)) }),
             ...(args.assignee ? { assignee_id: args.assignee } : {}),
+            ...(parentId ? { parent_id: parentId } : {}),
         });
         if (!response.ok)
             return errorResult(doorFailureText("work_create_issue", response));
         const issue = response.body.issue;
-        return textResult(`Filed ${issue?.identifier ?? ""} — ${issue?.title ?? ""} (${issue?.id ?? ""}).`, { issue });
+        return textResult(`Filed ${issue?.identifier ?? ""} — ${issue?.title ?? ""} (${issue?.id ?? ""}).`, { issue: issue ? withSizeLabel(issue) : issue });
     }));
     register("work_update_issue", {
         title: "Update a Tower issue",
@@ -209,6 +244,10 @@ export function registerWorkTools(server, deps) {
             title: z.string().min(1).max(300).optional().describe("A new title."),
             description: z.string().max(200_000).nullable().optional().describe("The WHOLE new body, markdown; null clears it."),
             priority: z.number().int().min(0).max(4).optional().describe("0 none, 1 urgent, 2 high, 3 medium, 4 low."),
+            // BLI-10575: had no MCP twin at all — `cockpit issue update --parent`
+            // could re-parent a ticket and nothing on this server could.
+            parent: ISSUE_REF.optional().describe("Another issue's BLI-#### identifier or uuid — this issue becomes its sub-issue."),
+            size: z.enum(["S", "M", "L"]).optional().describe("Tower's own size scale, stored in the existing estimate column: S=1, M=3, L=5 (BLI-10575)."),
             assignee: z.string().min(1).max(100).nullable().optional().describe('"me", a uuid, or null to unassign.'),
             project: z.string().min(1).max(200).optional().describe("A project name or uuid."),
         },
@@ -224,17 +263,26 @@ export function registerWorkTools(server, deps) {
             }
             projectId = resolved.id;
         }
+        let parentId;
+        if (args.parent) {
+            const resolved = await resolveParentId(deps, session, String(args.parent));
+            if (resolved.status === "failed")
+                return errorResult(resolved.text);
+            parentId = resolved.id;
+        }
         const response = await callAgentDoor(session, deps.fetchImpl, "PATCH", `/api/work/issues/${encodeURIComponent(ref)}`, {
             ...(args.title !== undefined ? { title: args.title } : {}),
             ...(args.description !== undefined ? { description: args.description } : {}),
             ...(args.priority !== undefined ? { priority: args.priority } : {}),
+            ...(args.size === undefined ? {} : { estimate: estimateForSize(String(args.size)) }),
             ...(args.assignee !== undefined ? { assignee_id: args.assignee } : {}),
             ...(projectId ? { project_id: projectId } : {}),
+            ...(parentId ? { parent_id: parentId } : {}),
         });
         if (!response.ok)
             return errorResult(doorFailureText("work_update_issue", response));
         const issue = response.body.issue;
-        return textResult(`Updated ${issue?.identifier ?? ref} — ${issue?.title ?? ""}.`, { issue });
+        return textResult(`Updated ${issue?.identifier ?? ref} — ${issue?.title ?? ""}.`, { issue: issue ? withSizeLabel(issue) : issue });
     }));
     register("work_move_issue", {
         title: "Move a Tower issue",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.69",
+  "version": "0.1.71",
   "private": false,
   "description": "bli-tower: an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",
@@ -30,7 +30,7 @@
     "readme": "npm run build && node scripts/write-readme-census.mjs"
   },
   "dependencies": {
-    "@bli-cockpit/telemetry-core": "0.1.48",
+    "@bli-cockpit/telemetry-core": "0.1.49",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.3.6"
   },