@bli-cockpit/mcp 0.1.76 → 0.1.78

package/README.md

@@ -103,7 +103,7 @@ about what an agent can reach.
 
 <!-- BEGIN GENERATED verb census — `npm run mcp:readme` -->
 
-**115 of 120 Tower verbs have an MCP twin.**
+**116 of 121 Tower verbs have an MCP twin.**
 Each tool goes through the SAME door its CLI verb calls, with the same
 collector device token — never a second route and never a service-role
 reader. `src/verb-census.test.ts` fails when a verb is in none of the
@@ -129,6 +129,7 @@ three tables below.
 | `cockpit cal today` | `cal_today` | `GET /api/cal/today` |
 | `cockpit cal week` | `cal_week` | `GET /api/cal/week` |
 | `cockpit careers decide` | `careers_decide` | `POST /api/careers/applications/[id]/decide` |
+| `cockpit careers followup` | `careers_followup` | `POST /api/careers/applications/[id]/followup` |
 | `cockpit careers grade` | `careers_grade` | `POST /api/careers/applications/[id]/grade` |
 | `cockpit careers send-takehome` | `careers_send_takehome` | `POST /api/careers/applications/[id]/invite` |
 | `cockpit careers list` | `careers_list` | `GET /api/careers/applications` |

package/dist/careers-tools.js

@@ -123,6 +123,20 @@ export function registerCareersTools(server, deps) {
         const expires = typeof body.expires_in === 'number' && body.expires_in > 0 ? body.expires_in : 60;
         return dataResult(`Resume link, valid for ${expires} seconds:`, { url: body.url, expires_in_seconds: expires });
     }));
+    // BLI-12183: the second-chance email, or a record that one went out by hand.
+    // Same door the drawer's Send follow-up and Already followed up controls call.
+    register('careers_followup', {
+        title: 'Send or record the follow-up',
+        description: 'Super-admin only. With no record_sent_at, sends the one second-chance email now, in the take-home thread, from the configured mailbox: only a row at `invited` with no follow-up yet. With record_sent_at, records a follow-up sent outside Tower at that instant and sends nothing. Either way a second follow-up is refused.',
+        inputSchema: {
+            id: APPLICATION_ID,
+            record_sent_at: z.string().min(1).max(40).optional().describe('ISO-8601 instant with an offset, e.g. 2026-10-03T08:00:00Z. Records a follow-up already sent outside Tower; sends nothing.'),
+        },
+    }, async (args) => withSession(deps, async (session) => {
+        const body = args.record_sent_at === undefined ? {} : { record_sent_at: args.record_sent_at };
+        const answer = await callAgentDoor(session, deps.fetchImpl, 'POST', `/api/careers/applications/${encodeURIComponent(String(args.id))}/followup`, body, 60_000);
+        return answer.ok ? dataResult(args.record_sent_at === undefined ? 'Follow-up sent' : 'Follow-up recorded', answer.body) : errorResult(doorFailureText('careers_followup', answer));
+    }));
     register('careers_decide', {
         title: 'Decide on an application',
         description: 'Super-admin only. Records the call on one application: `passed_on`, `archived`, or `reopen` to put it back at `screened`.',
@@ -157,7 +171,7 @@ export function registerCareersTools(server, deps) {
     }));
     register('careers_settings_show', {
         title: 'Show the careers settings',
-        description: 'Super-admin only. The automatic-invite bar, the attention threshold, whether automatic sending is on, and which mailbox it goes out from.',
+        description: 'Super-admin only. The automatic-invite bar, the attention threshold, whether automatic sending is on, which mailbox it goes out from, the booking link and grader model, and the three follow-up settings (followupEnabled, followupAfterDays, takehomeWindowHours).',
         inputSchema: {},
     }, async () => withSession(deps, async (session) => {
         const answer = await callAgentDoor(session, deps.fetchImpl, 'GET', '/api/careers/settings');
@@ -165,7 +179,7 @@ export function registerCareersTools(server, deps) {
     }));
     register('careers_settings_set', {
         title: 'Change the careers settings',
-        description: 'Super-admin only. Writes any of the four careers settings. Each takes effect on the next screening, with no deploy.',
+        description: 'Super-admin only. Writes any of the careers settings. Each takes effect on the next use, with no deploy.',
         inputSchema: {
             auto_invite_enabled: z.boolean().optional().describe('Send the take-home automatically to applicants over the auto-invite bar.'),
             auto_invite_min_score: z.number().min(0).max(100).optional().describe('The screening score (0-100) at or over which the take-home goes out automatically.'),
@@ -173,6 +187,9 @@ export function registerCareersTools(server, deps) {
             invite_account_id: z.string().uuid().nullable().optional().describe('The mailbox id (mail_accounts) invitations are sent from; null clears it.'),
             booking_link: z.string().url().max(2000).nullable().optional().describe('The interview booking link sent after a passing grade; null clears it.'),
             grader_model: z.string().min(3).max(200).optional().describe('The take-home grader model, provider:model (models_list ids).'),
+            followup_enabled: z.boolean().optional().describe('Send the one second-chance follow-up automatically to overdue invited candidates. Off by default.'),
+            followup_after_days: z.number().int().min(1).max(60).optional().describe('Whole days after the invitation before the follow-up is due (1-60).'),
+            takehome_window_hours: z.number().int().min(1).max(720).optional().describe('Hours a candidate has: the first deadline and the second-chance deadline (1-720).'),
         },
     }, async (args) => withSession(deps, async (session) => {
         const answer = await callAgentDoor(session, deps.fetchImpl, 'PUT', '/api/careers/settings', args);

package/dist/server.js

@@ -32,6 +32,7 @@ import { registerTeamWriteTools } from "./team-write-tools.js";
 import { registerWorkTools } from "./work-tools.js";
 import { registerCareersTools } from "./careers-tools.js";
 import { registerUsageTools } from "./usage-tools.js";
+import { registerSourcesTools } from "./sources-tools.js";
 export const PACKAGE_NAME = "@bli-cockpit/mcp";
 /**
  * The version this server tells a client in `initialize`, read from the
@@ -483,5 +484,9 @@ export function createServer(deps) {
     // BLI-3728: one search over documents, messages, issues, meeting notes and
     // memory. Same door, same ranking, same snippets the browser bar shows.
     registerSearchTool(server, { fetchImpl: deps.fetchImpl });
+    // BLI-11122: which local transcripts Tower holds, read-only, by running
+    // `cockpit sources check` on this machine. No delete twin, ever: Tower never
+    // deletes a person's transcripts and an agent must not do it through a tool.
+    registerSourcesTools(server);
     return server;
 }

package/dist/sources-tools.d.ts

@@ -0,0 +1,30 @@
+import { type ToolResult } from "./tool-result.js";
+declare const VERDICTS: readonly ["stored_full", "stored_partial", "not_stored"];
+export interface CliRunOutcome {
+    exitCode: number | null;
+    stdout: string;
+    /** A reason label when the CLI could not be run at all. */
+    spawnError?: string;
+}
+export type RunCockpitCli = (args: string[]) => Promise<CliRunOutcome>;
+export interface SourcesToolDeps {
+    runCli?: RunCockpitCli;
+}
+export declare function registerSourcesTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps?: SourcesToolDeps): void;
+interface SourcesCheckArgs {
+    older_than_days?: number;
+    verdict?: (typeof VERDICTS)[number];
+    include_files?: boolean;
+    limit?: number;
+}
+export declare function sourcesCheck(runCli: RunCockpitCli, args: SourcesCheckArgs): Promise<ToolResult>;
+/**
+ * The CLI this server shipped beside (`@bli-cockpit/cli` depends on this
+ * package), run with this same Node; `cockpit` on PATH as the fallback.
+ */
+export declare const runInstalledCockpit: RunCockpitCli;
+/** Walk up from this module to the `@bli-cockpit/cli` package that installed it. */
+export declare function findCliEntry(startDir: string, exists?: (file: string) => boolean): string | null;
+export {};

package/dist/sources-tools.js

@@ -0,0 +1,137 @@
+/**
+ * `sources_check` — the twin of `cockpit sources check` (BLI-11122).
+ *
+ * Does Tower hold each Codex and Claude transcript on this machine: stored in
+ * full, stored in part, or not stored, with the reason. An agent asked to free
+ * disk calls this BEFORE anything is deleted; on 2026-09-30 one guessed
+ * instead and deleted 349 transcripts Tower did not hold.
+ *
+ * The answer needs the local files, which only this machine can read, so the
+ * tool runs the SAME verb on the same machine (`cockpit sources check --json`)
+ * rather than a second implementation: one set of verdict rules, one door
+ * (`POST /api/ambient/evidence/transcripts`). This server is always spawned on
+ * the machine that holds the transcripts.
+ *
+ * Read-only, and there is deliberately no delete twin: Tower never deletes a
+ * person's raw transcripts, and an agent must never delete them through a
+ * tool. Deleting one is the person's own act, by their own hand.
+ */
+import { spawn } from "node:child_process";
+import fs from "node:fs";
+import path from "node:path";
+import { fileURLToPath } from "node:url";
+import { z } from "zod";
+import { dataResult, errorResult, registrarFor } from "./tool-result.js";
+/** Redacting a large transcript store to compare hashes takes minutes, not seconds. */
+const CHECK_TIMEOUT_MS = 15 * 60 * 1000;
+const DEFAULT_FILE_LIMIT = 50;
+const MAX_FILE_LIMIT = 500;
+const VERDICTS = ["stored_full", "stored_partial", "not_stored"];
+export function registerSourcesTools(server, deps = {}) {
+    const runCli = deps.runCli ?? runInstalledCockpit;
+    registrarFor(server)("sources_check", {
+        title: "Check which local transcripts Tower holds",
+        description: "For every Codex and Claude transcript on THIS machine: does Tower hold it (stored_full, stored_partial, not_stored), with the reason, counts and bytes. Read-only. Call it before deleting any agent transcript to free disk: only a stored_full file is held by Tower in full. Tower never deletes these files, and this server has no tool that does. older_than_days limits the check to files not modified in that many days. The answer names files only when verdict is given or include_files is true (paths, newest verdict first, up to limit). Redacting large stores can take minutes.",
+        inputSchema: {
+            older_than_days: z.number().int().min(1).max(36_500).optional().describe("Only files not modified in this many days. Default: every transcript."),
+            verdict: z.enum(VERDICTS).optional().describe("List only files with this verdict (implies include_files)."),
+            include_files: z.boolean().optional().describe("List files with their paths. Off by default: counts only."),
+            limit: z.number().int().min(1).max(MAX_FILE_LIMIT).optional().describe(`How many files to list. Default ${DEFAULT_FILE_LIMIT}.`),
+        },
+    }, async (args) => sourcesCheck(runCli, args));
+}
+export async function sourcesCheck(runCli, args) {
+    const cliArgs = ["sources", "check", "--json", ...(args.older_than_days ? ["--older-than", String(args.older_than_days)] : [])];
+    const outcome = await runCli(cliArgs);
+    if (outcome.spawnError) {
+        return errorResult(`sources_check could not run \`cockpit sources check\` on this machine (${outcome.spawnError}). Nothing was read. Install or update the Tower CLI: \`npm i -g @bli-cockpit/cli && cockpit doctor\`.`);
+    }
+    let report;
+    try {
+        report = JSON.parse(outcome.stdout);
+    }
+    catch {
+        return errorResult(`sources_check got no answer from \`cockpit sources check\` (cli_unparseable_output, exit ${String(outcome.exitCode)}). An older CLI may lack the verb: \`npm i -g @bli-cockpit/cli\`. Nothing was read.`);
+    }
+    if (report.status === "unavailable") {
+        return errorResult(`sources_check could not ask Tower (${String(report.reason)}). No file is answered; nothing here means "not stored".`);
+    }
+    const counts = (report.counts ?? {});
+    const all = Array.isArray(report.files) ? report.files : [];
+    const listFiles = args.include_files === true || args.verdict !== undefined;
+    const matching = args.verdict ? all.filter((file) => file.verdict === args.verdict) : all;
+    const limit = args.limit ?? DEFAULT_FILE_LIMIT;
+    const files = listFiles ? matching.slice(0, limit) : [];
+    const structured = {
+        status: report.status,
+        reason: report.reason,
+        older_than_days: report.older_than_days,
+        counts: report.counts,
+        reasons: report.reasons,
+        local: report.local,
+        remote: report.remote,
+        files,
+        files_listed: files.length,
+        files_matching: listFiles ? matching.length : null,
+    };
+    const mb = (bytes) => ((bytes ?? 0) / (1024 * 1024)).toFixed(1);
+    const headline = `stored in full ${counts.stored_full?.files ?? 0} (${mb(counts.stored_full?.bytes)} MB), ` +
+        `stored in part ${counts.stored_partial?.files ?? 0} (${mb(counts.stored_partial?.bytes)} MB), ` +
+        `not stored ${counts.not_stored?.files ?? 0} (${mb(counts.not_stored?.bytes)} MB)` +
+        `${report.status === "incomplete" ? `; INCOMPLETE (${String(report.reason)}), not stored may be understated` : ""}.` +
+        `${listFiles && matching.length > files.length ? ` Listing ${files.length} of ${matching.length}; pass a larger limit (up to ${MAX_FILE_LIMIT}).` : ""}` +
+        " Tower never deletes these files; only a stored_full file is held in full.";
+    return dataResult(headline, structured);
+}
+/**
+ * The CLI this server shipped beside (`@bli-cockpit/cli` depends on this
+ * package), run with this same Node; `cockpit` on PATH as the fallback.
+ */
+export const runInstalledCockpit = async (args) => {
+    const entry = findCliEntry(path.dirname(fileURLToPath(import.meta.url)));
+    const command = entry ? process.execPath : process.platform === "win32" ? "cockpit.cmd" : "cockpit";
+    const commandArgs = entry ? [entry, ...args] : args;
+    return new Promise((resolve) => {
+        let stdout = "";
+        let settled = false;
+        const finish = (outcome) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            resolve(outcome);
+        };
+        // A `.cmd` shim needs a shell on Windows; the arguments are fixed words and a number.
+        const child = spawn(command, commandArgs, {
+            stdio: ["ignore", "pipe", "ignore"],
+            shell: !entry && process.platform === "win32",
+            windowsHide: true,
+        });
+        const timer = setTimeout(() => {
+            child.kill();
+            finish({ exitCode: null, stdout, spawnError: "cli_timeout" });
+        }, CHECK_TIMEOUT_MS);
+        child.stdout?.setEncoding("utf8");
+        child.stdout?.on("data", (chunk) => (stdout += chunk));
+        child.on("error", (error) => finish({ exitCode: null, stdout, spawnError: error.code ?? "spawn_failed" }));
+        child.on("close", (code) => finish({ exitCode: code, stdout }));
+    });
+};
+/** Walk up from this module to the `@bli-cockpit/cli` package that installed it. */
+export function findCliEntry(startDir, exists = fs.existsSync) {
+    let dir = startDir;
+    for (;;) {
+        const beside = path.join(dir, "node_modules", "@bli-cockpit", "cli", "dist", "cli.js");
+        if (exists(beside))
+            return beside;
+        if (path.basename(dir) === "cli" && path.basename(path.dirname(dir)) === "@bli-cockpit") {
+            const own = path.join(dir, "dist", "cli.js");
+            if (exists(own))
+                return own;
+        }
+        const parent = path.dirname(dir);
+        if (parent === dir)
+            return null;
+        dir = parent;
+    }
+}

package/dist/tool-catalog.d.ts

@@ -10,7 +10,7 @@
  * from `src/` under Node's type stripping, so it may import nothing.
  */
 /** Tools that change nothing. The smoke calls every one. */
-export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_sync_status", "notes_granola_status", "ops_status", "slack_coverage", "slack_read", "memory_profile", "memory_consolidation", "settings_show", "settings_list", "model_show", "team_members", "team_device_list", "scout_board", "workbook_read", "tower_search"];
+export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_sync_status", "notes_granola_status", "ops_status", "slack_coverage", "slack_read", "memory_profile", "memory_consolidation", "settings_show", "settings_list", "model_show", "team_members", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check"];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls
  * each one ONLY with its dry-run flag set (`scripts/smoke.ts` says which).
@@ -21,7 +21,7 @@ export declare const DRY_RUN_TOOLS: readonly ["ops_recompile", "memory_requeue"]
  * candidates, share calendars. Never called by the smoke; covered by the unit
  * suites (`write-tools.test.ts` and each family's own).
  */
-export declare const WRITE_TOOLS: readonly ["emit_event", "docs_create", "docs_update", "docs_delete", "docs_link", "msg_create_channel", "msg_dm", "msg_send", "work_create_issue", "work_update_issue", "work_move_issue", "work_comment_issue", "careers_rescreen", "careers_send_takehome", "careers_invite", "careers_grade", "careers_decide", "careers_takehome_set", "careers_settings_set", "mail_send", "mail_sync", "mail_detach", "cal_create", "cal_share", "cal_sync", "cal_detach", "cal_delete", "jarvis_dispatch", "notes_mkdir", "notes_rmdir", "notes_rename", "notes_upload", "notes_paste", "notes_share", "notes_unshare", "notes_move", "notes_sync", "notes_detach", "memory_experience", "scout_start", "scout_dismiss", "scout_undo", "brief_rewrite", "brief_correct", "brief_done", "brief_undone", "settings_set", "settings_delete", "model_set", "team_invite", "team_role", "team_device_revoke"];
+export declare const WRITE_TOOLS: readonly ["emit_event", "docs_create", "docs_update", "docs_delete", "docs_link", "msg_create_channel", "msg_dm", "msg_send", "work_create_issue", "work_update_issue", "work_move_issue", "work_comment_issue", "careers_rescreen", "careers_send_takehome", "careers_invite", "careers_grade", "careers_decide", "careers_followup", "careers_takehome_set", "careers_settings_set", "mail_send", "mail_sync", "mail_detach", "cal_create", "cal_share", "cal_sync", "cal_detach", "cal_delete", "jarvis_dispatch", "notes_mkdir", "notes_rmdir", "notes_rename", "notes_upload", "notes_paste", "notes_share", "notes_unshare", "notes_move", "notes_sync", "notes_detach", "memory_experience", "scout_start", "scout_dismiss", "scout_undo", "brief_rewrite", "brief_correct", "brief_done", "brief_undone", "settings_set", "settings_delete", "model_set", "team_invite", "team_role", "team_device_revoke"];
 /** Reads that spend a model turn. The smoke's `--no-model` leaves these out. */
 export declare const MODEL_SPENDING_TOOLS: readonly ["jarvis_ask", "jarvis_check"];
 /**

package/dist/tool-catalog.js

@@ -75,6 +75,7 @@ export const READ_TOOLS = [
     "scout_board",
     "workbook_read",
     "tower_search",
+    "sources_check",
 ];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls
@@ -104,6 +105,7 @@ export const WRITE_TOOLS = [
     "careers_invite",
     "careers_grade",
     "careers_decide",
+    "careers_followup",
     "careers_takehome_set",
     "careers_settings_set",
     "mail_send",

package/dist/verb-census.js

@@ -218,6 +218,8 @@ export const MCP_TWINS = {
     // README). `cockpit careers invite` and `careers_invite` are the older words
     // for the identical door, and both still work.
     "careers invite": { tool: "careers_send_takehome", door: "POST /api/careers/applications/[id]/invite" },
+    // BLI-12183: the second-chance follow-up, sent now or recorded as sent elsewhere.
+    "careers followup": { tool: "careers_followup", door: "POST /api/careers/applications/[id]/followup" },
     "careers decide": { tool: "careers_decide", door: "POST /api/careers/applications/[id]/decide" },
     "careers grade": { tool: "careers_grade", door: "POST /api/careers/applications/[id]/grade" },
     // BLI-4462: the drawer's Open resume button, typed. Both twins call the door

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.76",
+  "version": "0.1.78",
   "private": false,
   "description": "bli-tower: an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",
@@ -30,7 +30,7 @@
     "readme": "npm run build && node scripts/write-readme-census.mjs"
   },
   "dependencies": {
-    "@bli-cockpit/telemetry-core": "0.1.54",
+    "@bli-cockpit/telemetry-core": "0.1.56",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.3.6"
   },