@bli-cockpit/mcp 0.1.76 → 0.1.77

package/dist/server.js

@@ -32,6 +32,7 @@ import { registerTeamWriteTools } from "./team-write-tools.js";
 import { registerWorkTools } from "./work-tools.js";
 import { registerCareersTools } from "./careers-tools.js";
 import { registerUsageTools } from "./usage-tools.js";
+import { registerSourcesTools } from "./sources-tools.js";
 export const PACKAGE_NAME = "@bli-cockpit/mcp";
 /**
  * The version this server tells a client in `initialize`, read from the
@@ -483,5 +484,9 @@ export function createServer(deps) {
     // BLI-3728: one search over documents, messages, issues, meeting notes and
     // memory. Same door, same ranking, same snippets the browser bar shows.
     registerSearchTool(server, { fetchImpl: deps.fetchImpl });
+    // BLI-11122: which local transcripts Tower holds, read-only, by running
+    // `cockpit sources check` on this machine. No delete twin, ever: Tower never
+    // deletes a person's transcripts and an agent must not do it through a tool.
+    registerSourcesTools(server);
     return server;
 }

package/dist/sources-tools.d.ts

@@ -0,0 +1,30 @@
+import { type ToolResult } from "./tool-result.js";
+declare const VERDICTS: readonly ["stored_full", "stored_partial", "not_stored"];
+export interface CliRunOutcome {
+    exitCode: number | null;
+    stdout: string;
+    /** A reason label when the CLI could not be run at all. */
+    spawnError?: string;
+}
+export type RunCockpitCli = (args: string[]) => Promise<CliRunOutcome>;
+export interface SourcesToolDeps {
+    runCli?: RunCockpitCli;
+}
+export declare function registerSourcesTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps?: SourcesToolDeps): void;
+interface SourcesCheckArgs {
+    older_than_days?: number;
+    verdict?: (typeof VERDICTS)[number];
+    include_files?: boolean;
+    limit?: number;
+}
+export declare function sourcesCheck(runCli: RunCockpitCli, args: SourcesCheckArgs): Promise<ToolResult>;
+/**
+ * The CLI this server shipped beside (`@bli-cockpit/cli` depends on this
+ * package), run with this same Node; `cockpit` on PATH as the fallback.
+ */
+export declare const runInstalledCockpit: RunCockpitCli;
+/** Walk up from this module to the `@bli-cockpit/cli` package that installed it. */
+export declare function findCliEntry(startDir: string, exists?: (file: string) => boolean): string | null;
+export {};

package/dist/sources-tools.js

@@ -0,0 +1,137 @@
+/**
+ * `sources_check` — the twin of `cockpit sources check` (BLI-11122).
+ *
+ * Does Tower hold each Codex and Claude transcript on this machine: stored in
+ * full, stored in part, or not stored, with the reason. An agent asked to free
+ * disk calls this BEFORE anything is deleted; on 2026-09-30 one guessed
+ * instead and deleted 349 transcripts Tower did not hold.
+ *
+ * The answer needs the local files, which only this machine can read, so the
+ * tool runs the SAME verb on the same machine (`cockpit sources check --json`)
+ * rather than a second implementation: one set of verdict rules, one door
+ * (`POST /api/ambient/evidence/transcripts`). This server is always spawned on
+ * the machine that holds the transcripts.
+ *
+ * Read-only, and there is deliberately no delete twin: Tower never deletes a
+ * person's raw transcripts, and an agent must never delete them through a
+ * tool. Deleting one is the person's own act, by their own hand.
+ */
+import { spawn } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { z } from "zod";
+import { dataResult, errorResult, registrarFor } from "./tool-result.js";
+/** Redacting a large transcript store to compare hashes takes minutes, not seconds. */
+const CHECK_TIMEOUT_MS = 15 * 60 * 1000;
+const DEFAULT_FILE_LIMIT = 50;
+const MAX_FILE_LIMIT = 500;
+const VERDICTS = ["stored_full", "stored_partial", "not_stored"];
+export function registerSourcesTools(server, deps = {}) {
+    const runCli = deps.runCli ?? runInstalledCockpit;
+    registrarFor(server)("sources_check", {
+        title: "Check which local transcripts Tower holds",
+        description: "For every Codex and Claude transcript on THIS machine: does Tower hold it (stored_full, stored_partial, not_stored), with the reason, counts and bytes. Read-only. Call it before deleting any agent transcript to free disk: only a stored_full file is held by Tower in full. Tower never deletes these files, and this server has no tool that does. older_than_days limits the check to files not modified in that many days. The answer names files only when verdict is given or include_files is true (paths, newest verdict first, up to limit). Redacting large stores can take minutes.",
+        inputSchema: {
+            older_than_days: z.number().int().min(1).max(36_500).optional().describe("Only files not modified in this many days. Default: every transcript."),
+            verdict: z.enum(VERDICTS).optional().describe("List only files with this verdict (implies include_files)."),
+            include_files: z.boolean().optional().describe("List files with their paths. Off by default: counts only."),
+            limit: z.number().int().min(1).max(MAX_FILE_LIMIT).optional().describe(`How many files to list. Default ${DEFAULT_FILE_LIMIT}.`),
+        },
+    }, async (args) => sourcesCheck(runCli, args));
+}
+export async function sourcesCheck(runCli, args) {
+    const cliArgs = ["sources", "check", "--json", ...(args.older_than_days ? ["--older-than", String(args.older_than_days)] : [])];
+    const outcome = await runCli(cliArgs);
+    if (outcome.spawnError) {
+        return errorResult(`sources_check could not run \`cockpit sources check\` on this machine (${outcome.spawnError}). Nothing was read. Install or update the Tower CLI: \`npm i -g @bli-cockpit/cli && cockpit doctor\`.`);
+    }
+    let report;
+    try {
+        report = JSON.parse(outcome.stdout);
+    }
+    catch {
+        return errorResult(`sources_check got no answer from \`cockpit sources check\` (cli_unparseable_output, exit ${String(outcome.exitCode)}). An older CLI may lack the verb: \`npm i -g @bli-cockpit/cli\`. Nothing was read.`);
+    }
+    if (report.status === "unavailable") {
+        return errorResult(`sources_check could not ask Tower (${String(report.reason)}). No file is answered; nothing here means "not stored".`);
+    }
+    const counts = (report.counts ?? {});
+    const all = Array.isArray(report.files) ? report.files : [];
+    const listFiles = args.include_files === true || args.verdict !== undefined;
+    const matching = args.verdict ? all.filter((file) => file.verdict === args.verdict) : all;
+    const limit = args.limit ?? DEFAULT_FILE_LIMIT;
+    const files = listFiles ? matching.slice(0, limit) : [];
+    const structured = {
+        status: report.status,
+        reason: report.reason,
+        older_than_days: report.older_than_days,
+        counts: report.counts,
+        reasons: report.reasons,
+        local: report.local,
+        remote: report.remote,
+        files,
+        files_listed: files.length,
+        files_matching: listFiles ? matching.length : null,
+    };
+    const mb = (bytes) => ((bytes ?? 0) / (1024 * 1024)).toFixed(1);
+    const headline = `stored in full ${counts.stored_full?.files ?? 0} (${mb(counts.stored_full?.bytes)} MB), ` +
+        `stored in part ${counts.stored_partial?.files ?? 0} (${mb(counts.stored_partial?.bytes)} MB), ` +
+        `not stored ${counts.not_stored?.files ?? 0} (${mb(counts.not_stored?.bytes)} MB)` +
+        `${report.status === "incomplete" ? `; INCOMPLETE (${String(report.reason)}), not stored may be understated` : ""}.` +
+        `${listFiles && matching.length > files.length ? ` Listing ${files.length} of ${matching.length}; pass a larger limit (up to ${MAX_FILE_LIMIT}).` : ""}` +
+        " Tower never deletes these files; only a stored_full file is held in full.";
+    return dataResult(headline, structured);
+}
+/**
+ * The CLI this server shipped beside (`@bli-cockpit/cli` depends on this
+ * package), run with this same Node; `cockpit` on PATH as the fallback.
+ */
+export const runInstalledCockpit = async (args) => {
+    const entry = findCliEntry(path.dirname(fileURLToPath(import.meta.url)));
+    const command = entry ? process.execPath : process.platform === "win32" ? "cockpit.cmd" : "cockpit";
+    const commandArgs = entry ? [entry, ...args] : args;
+    return new Promise((resolve) => {
+        let stdout = "";
+        let settled = false;
+        const finish = (outcome) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve(outcome);
+        };
+        // A `.cmd` shim needs a shell on Windows; the arguments are fixed words and a number.
+        const child = spawn(command, commandArgs, {
+            stdio: ["ignore", "pipe", "ignore"],
+            shell: !entry && process.platform === "win32",
+            windowsHide: true,
+        });
+        const timer = setTimeout(() => {
+            child.kill();
+            finish({ exitCode: null, stdout, spawnError: "cli_timeout" });
+        }, CHECK_TIMEOUT_MS);
+        child.stdout?.setEncoding("utf8");
+        child.stdout?.on("data", (chunk) => (stdout += chunk));
+        child.on("error", (error) => finish({ exitCode: null, stdout, spawnError: error.code ?? "spawn_failed" }));
+        child.on("close", (code) => finish({ exitCode: code, stdout }));
+    });
+};
+/** Walk up from this module to the `@bli-cockpit/cli` package that installed it. */
+export function findCliEntry(startDir, exists = fs.existsSync) {
+    let dir = startDir;
+    for (;;) {
+        const beside = path.join(dir, "node_modules", "@bli-cockpit", "cli", "dist", "cli.js");
+        if (exists(beside))
+            return beside;
+        if (path.basename(dir) === "cli" && path.basename(path.dirname(dir)) === "@bli-cockpit") {
+            const own = path.join(dir, "dist", "cli.js");
+            if (exists(own))
+                return own;
+        }
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}

package/dist/tool-catalog.d.ts

@@ -10,7 +10,7 @@
  * from `src/` under Node's type stripping, so it may import nothing.
  */
 /** Tools that change nothing. The smoke calls every one. */
-export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_sync_status", "notes_granola_status", "ops_status", "slack_coverage", "slack_read", "memory_profile", "memory_consolidation", "settings_show", "settings_list", "model_show", "team_members", "team_device_list", "scout_board", "workbook_read", "tower_search"];
+export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_sync_status", "notes_granola_status", "ops_status", "slack_coverage", "slack_read", "memory_profile", "memory_consolidation", "settings_show", "settings_list", "model_show", "team_members", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check"];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls
  * each one ONLY with its dry-run flag set (`scripts/smoke.ts` says which).

package/dist/tool-catalog.js

@@ -75,6 +75,7 @@ export const READ_TOOLS = [
     "scout_board",
     "workbook_read",
     "tower_search",
+    "sources_check",
 ];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.76",
+  "version": "0.1.77",
   "private": false,
   "description": "bli-tower: an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",
@@ -30,7 +30,7 @@
     "readme": "npm run build && node scripts/write-readme-census.mjs"
   },
   "dependencies": {
-    "@bli-cockpit/telemetry-core": "0.1.54",
+    "@bli-cockpit/telemetry-core": "0.1.55",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.3.6"
   },