@bli-cockpit/mcp 0.1.87 → 0.1.90

package/README.md

@@ -109,7 +109,7 @@ about what an agent can reach.
 
 <!-- BEGIN GENERATED verb census — `npm run mcp:readme` -->
 
-**124 of 129 Tower verbs have an MCP twin.**
+**125 of 130 Tower verbs have an MCP twin.**
 Each tool goes through the SAME door its CLI verb calls, with the same
 collector device token — never a second route and never a service-role
 reader. `src/verb-census.test.ts` fails when a verb is in none of the
@@ -169,6 +169,7 @@ three tables below.
 | `cockpit issue update` | `work_update_issue` | `PATCH /api/work/issues/[id]` |
 | `cockpit jarvis` | `jarvis_ask` | `POST /api/jarvis/cli` |
 | `cockpit jarvis --trace` | `jarvis_trace` | `GET /api/ops/trace/[id]` |
+| `cockpit logs` | `logs_digest` | `LOCAL @bli-cockpit/telemetry-core/log-digest (this machine's logs); `project` reads GET /api/logs (the stored digests)` |
 | `cockpit mail accounts` | `mail_accounts` | `GET /api/mail/accounts` |
 | `cockpit mail attachment` | `mail_attachment` | `GET /api/mail/attachments/[id]?meta=1` |
 | `cockpit mail detach` | `mail_detach` | `DELETE /api/mail/accounts` |

package/dist/logs-tools.d.ts

@@ -0,0 +1,35 @@
+/**
+ * `logs_digest` — the twin of `cockpit logs` (BLI-12833).
+ *
+ * A token-cheap digest of Tower's own logs, read on THIS machine: the same
+ * `digestSource` from `@bli-cockpit/telemetry-core/log-digest` the CLI calls, so the two print
+ * the same text. Variable parts of each line are masked into a template, equal
+ * templates are counted, routine runs become counts, and every template is
+ * classified: `our_bug` and `unknown` first, harmless ones counted on one line.
+ *
+ * It is local and read-only. Sources: `collector` (this machine's sync logs),
+ * `dashboard` (Vercel runtime logs through the `vercel` CLI), `railway` and
+ * `railway:<service>` (through the `railway` CLI), and `-` with the lines passed
+ * as `text`. A CLI that is missing or not logged in is a named refusal
+ * (`vercel_cli_missing`, `railway_not_logged_in`), never a stack trace.
+ *
+ * `project` (BLI-12855) reads the digests Tower's own 15-minute cron STORED for a
+ * BLI project (`kolm`, `tower`, ...) through the dashboard's `GET /api/logs` door,
+ * the same door `cockpit logs <project>` calls: no `vercel` or `railway` login, no
+ * local file. A `dashboard` or `railway` read whose local CLI is missing or logged
+ * out falls back to the stored digest of project `tower` and says so.
+ *
+ * Not on the hosted server: it reads the machine's files and spawns programs
+ * there (`REMOTE_EXCLUDED_TOOLS`).
+ */
+import { digestSource, type DigestOutcome } from "@bli-cockpit/telemetry-core/log-digest";
+import { type ToolDeps } from "./tool-result.js";
+export interface LogsToolDeps extends Partial<ToolDeps> {
+    /** Test seam: replaces the digest. */
+    digest?: (...args: Parameters<typeof digestSource>) => Promise<DigestOutcome>;
+    /** Test seam: where the collector's state lives; defaults to this machine's. */
+    stateDir?: string;
+}
+export declare function registerLogsTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps?: LogsToolDeps): void;

package/dist/logs-tools.js

@@ -0,0 +1,122 @@
+/**
+ * `logs_digest` — the twin of `cockpit logs` (BLI-12833).
+ *
+ * A token-cheap digest of Tower's own logs, read on THIS machine: the same
+ * `digestSource` from `@bli-cockpit/telemetry-core/log-digest` the CLI calls, so the two print
+ * the same text. Variable parts of each line are masked into a template, equal
+ * templates are counted, routine runs become counts, and every template is
+ * classified: `our_bug` and `unknown` first, harmless ones counted on one line.
+ *
+ * It is local and read-only. Sources: `collector` (this machine's sync logs),
+ * `dashboard` (Vercel runtime logs through the `vercel` CLI), `railway` and
+ * `railway:<service>` (through the `railway` CLI), and `-` with the lines passed
+ * as `text`. A CLI that is missing or not logged in is a named refusal
+ * (`vercel_cli_missing`, `railway_not_logged_in`), never a stack trace.
+ *
+ * `project` (BLI-12855) reads the digests Tower's own 15-minute cron STORED for a
+ * BLI project (`kolm`, `tower`, ...) through the dashboard's `GET /api/logs` door,
+ * the same door `cockpit logs <project>` calls: no `vercel` or `railway` login, no
+ * local file. A `dashboard` or `railway` read whose local CLI is missing or logged
+ * out falls back to the stored digest of project `tower` and says so.
+ *
+ * Not on the hosted server: it reads the machine's files and spawns programs
+ * there (`REMOTE_EXCLUDED_TOOLS`).
+ */
+import os from "node:os";
+import { LOCAL_ACCESS_REFUSALS, LOG_PROJECT_PATTERN, digestSource, routineText } from "@bli-cockpit/telemetry-core/log-digest";
+import { getUserLocalCockpitPaths } from "@bli-cockpit/telemetry-core";
+import { z } from "zod";
+import { callAgentDoor } from "./agent-door.js";
+import { doorFailureText, errorResult, registrarFor, textResult, withSession } from "./tool-result.js";
+/** Past this the structured half would crowd the 32 KB per-half read budget. */
+const MAX_TEMPLATES_RETURNED = 40;
+const MAX_TEXT_CHARS = 256_000;
+export function registerLogsTools(server, deps = {}) {
+    const digest = deps.digest ?? digestSource;
+    const door = { fetchImpl: deps.fetchImpl ?? fetch, ...(deps.loadSession ? { loadSession: deps.loadSession } : {}) };
+    registrarFor(server)("logs_digest", {
+        title: "Digest Tower's logs (about 2 KB)",
+        description: "A token-cheap digest of Tower's own logs, read on THIS machine and never uploaded. Use it BEFORE reading raw logs: a 15-minute window of a "
+            + "busy source is tens of thousands of lines; this returns about 2 KB. Each line's variable parts are masked into a template, equal templates "
+            + "are counted with first and last time, routine runs become counts, and every template is classified (our_bug and unknown first, then "
+            + "capacity, config_drift, rate_pushback, hiccup; dead_source and benign are counted on one line and never alerted). Sources: `collector` "
+            + "(this machine's sync.log and sync.err.log), `dashboard` (Vercel runtime logs through the `vercel` CLI), `railway` (every Tower service) "
+            + "or `railway:<service>` (through the `railway` CLI), `-` (lines passed as `text`). `since` is 15m, 1h, 2d or an ISO time (default 15m). "
+            + "Pass `raw` (an 8-hex template id from a digest line) to get the original lines behind that template, redacted, newest last. A missing or "
+            + "logged-out CLI is a named refusal (vercel_cli_missing, vercel_not_logged_in, railway_cli_missing, railway_not_logged_in), except that "
+            + "`dashboard` and `railway` then fall back to the digest Tower STORED. Pass `project` (tower, kolm, portpal, pearl-portal, triage-crm, "
+            + "triage-ocr, blue-pearl-website, kaiben, black-knight-tire, sublimation-squad, bli-website) instead of `source` to read what Tower's "
+            + "15-minute cron stored from that project's Vercel, Railway and Supabase logs, merged over `since` (default 24h, at most 30d), no login "
+            + "needed: the answer names the sources it could not see. A stored digest keeps no raw line, so `raw` does not apply. `cockpit logs`, same code.",
+        inputSchema: {
+            source: z.string().min(1).max(80).optional().describe("collector, dashboard, railway, railway:<service> or - (lines in `text`). Omit when `project` is given."),
+            project: z.string().regex(LOG_PROJECT_PATTERN).optional().describe("A BLI project id: read the digest Tower's cron stored for it (no local CLI needed). Takes `since`; `raw` does not apply."),
+            since: z.string().min(1).max(40).optional().describe("Window: 15m, 1h, 2d or an ISO time. Default 15m."),
+            raw: z.string().regex(/^[0-9a-f]{8}$/).optional().describe("A template id from a digest line: return the original lines behind it."),
+            limit: z.number().int().min(1).max(200).optional().describe("With raw: how many original lines. Default 20."),
+            all_levels: z.boolean().optional().describe("dashboard only: also read info-only requests (slow, minutes)."),
+            text: z.string().max(MAX_TEXT_CHARS).optional().describe("The lines to digest when source is -."),
+        },
+    }, async (args) => answer(digest, deps, door, args));
+}
+/** The stored digest of a project, through `GET /api/logs` with this machine's device token. */
+async function storedAnswer(door, project, since, fallbackReason) {
+    return withSession(door, async (session) => {
+        const query = new URLSearchParams({ project });
+        if (since)
+            query.set("since", since);
+        const response = await callAgentDoor(session, door.fetchImpl, "GET", `/api/logs?${query.toString()}`);
+        if (!response.ok)
+            return errorResult(doorFailureText("logs_digest", response));
+        const body = response.body;
+        const text = typeof body["text"] === "string" ? body["text"] : "";
+        return textResult(fallbackReason ? `(no local access: ${fallbackReason}; this is the digest Tower stored)\n${text}` : text, {
+            ...body,
+            ...(fallbackReason ? { fallback_from: fallbackReason } : {}),
+        });
+    });
+}
+async function answer(digest, deps, door, args) {
+    const since = typeof args["since"] === "string" ? args["since"] : undefined;
+    if (typeof args["project"] === "string") {
+        if (typeof args["raw"] === "string")
+            return errorResult("logs_digest refused (raw_not_stored): a stored digest keeps no raw line; raw reads a local source.");
+        return storedAnswer(door, args["project"], since);
+    }
+    if (typeof args["source"] !== "string")
+        return errorResult("logs_digest refused (source_or_project_required): pass `source` (a local log) or `project` (a stored digest).");
+    const source = args["source"];
+    const text = typeof args["text"] === "string" ? args["text"] : undefined;
+    if (source === "-" && !text) {
+        return errorResult('logs_digest refused (stdin_empty): source "-" digests the lines you pass in `text`; none were given.');
+    }
+    const outcome = await digest({
+        source,
+        since,
+        raw: typeof args["raw"] === "string" ? args["raw"] : undefined,
+        rawLimit: typeof args["limit"] === "number" ? args["limit"] : undefined,
+        allLevels: args["all_levels"] === true,
+    }, { stateDir: deps.stateDir ?? getUserLocalCockpitPaths(os.homedir()).state_dir, stdinText: text, stdinIsTerminal: false });
+    if (!outcome.ok && LOCAL_ACCESS_REFUSALS.has(outcome.reason) && (source === "dashboard" || source === "railway") && typeof args["raw"] !== "string") {
+        const stored = await storedAnswer(door, "tower", since, outcome.reason);
+        // No pairing either: the local refusal is the honest answer.
+        return stored.isError ? errorResult(`logs_digest refused (${outcome.reason}): ${outcome.detail} The stored digest could not be read either: ${stored.content[0]?.text ?? "unknown"}`) : stored;
+    }
+    if (!outcome.ok)
+        return errorResult(`logs_digest refused (${outcome.reason}): ${outcome.detail}`);
+    if (outcome.kind === "raw") {
+        return textResult(outcome.text, { kind: "raw", source: outcome.source, tid: outcome.tid, window: outcome.window, matched: outcome.matched, lines: outcome.lines });
+    }
+    return textResult(outcome.text, {
+        kind: "digest",
+        source: outcome.source,
+        window: outcome.window,
+        lines: outcome.lines,
+        noise: outcome.noise,
+        notes: outcome.notes,
+        measure: outcome.measure,
+        templates_total: outcome.templates.length,
+        templates: outcome.templates.slice(0, MAX_TEMPLATES_RETURNED),
+        work: routineText(outcome.routine, 12),
+    });
+}

package/dist/server.js

@@ -34,6 +34,7 @@ import { registerWorkTools } from "./work-tools.js";
 import { registerCareersTools } from "./careers-tools.js";
 import { registerRenameTools } from "./rename-tools.js";
 import { registerUsageTools } from "./usage-tools.js";
+import { registerLogsTools } from "./logs-tools.js";
 import { registerSourcesTools } from "./sources-tools.js";
 import { TOWER_SERVER_ICONS } from "./server-icons.js";
 import { installToolRegistration } from "./tool-registration.js";
@@ -500,5 +501,8 @@ export function createServer(deps, options = {}) {
     // `cockpit sources check` on this machine. No delete twin, ever: Tower never
     // deletes a person's transcripts and an agent must not do it through a tool.
     registerSourcesTools(server);
+    // BLI-12833: a token-cheap digest of Tower's own logs, read on this machine
+    // with the shared `@bli-cockpit/telemetry-core/log-digest`. Read-only; not on the hosted server.
+    registerLogsTools(server, { fetchImpl: deps.fetchImpl });
     return server;
 }

package/dist/tool-annotations.js

@@ -36,6 +36,7 @@ export const REMOTE_EXCLUDED_TOOLS = {
     get_active_tickets: "legacy event stream; authenticates with an operator token the host does not hold",
     notes_upload: "reads a file by path from the machine the server runs on; use notes_paste with the text",
     sources_check: "spawns `cockpit sources check` on the machine the server runs on",
+    logs_digest: "reads the machine's collector logs and spawns the vercel and railway CLIs on the machine the server runs on",
 };
 const READS = new Set(READ_TOOLS);
 const DESTRUCTIVE = new Set(DESTRUCTIVE_TOOLS);

package/dist/tool-catalog.d.ts

@@ -10,7 +10,7 @@
  * from `src/` under Node's type stripping, so it may import nothing.
  */
 /** Tools that change nothing. The smoke calls every one. */
-export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "rename_pending", "github_pr", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_sync_status", "notes_granola_status", "ops_status", "slack_coverage", "slack_read", "memory_profile", "memory_consolidation", "settings_show", "settings_list", "model_show", "team_members", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check"];
+export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "rename_pending", "github_pr", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_sync_status", "notes_granola_status", "ops_status", "slack_coverage", "slack_read", "memory_profile", "memory_consolidation", "settings_show", "settings_list", "model_show", "team_members", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check", "logs_digest"];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls
  * each one ONLY with its dry-run flag set (`scripts/smoke.ts` says which).

package/dist/tool-catalog.js

@@ -78,6 +78,8 @@ export const READ_TOOLS = [
     "workbook_read",
     "tower_search",
     "sources_check",
+    // BLI-12833: a digest of Tower's own logs, read on this machine. Reads only.
+    "logs_digest",
 ];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls

package/dist/verb-census.js

@@ -239,6 +239,10 @@ export const MCP_TWINS = {
     "github merge": { tool: "github_merge", door: "POST /api/github/pull-request (merge)" },
     "github retitle": { tool: "github_retitle", door: "POST /api/github/pull-request (retitle)" },
     "github rerun": { tool: "github_rerun", door: "POST /api/github/pull-request (rerun)" },
+    // BLI-12833: a local read, not a Tower door: it runs the shared log digest over
+    // this machine's collector logs and the `vercel` / `railway` CLIs.
+    // BLI-12855: a project name (or --stored, or a local CLI that is missing) reads the digests Tower's cron stored, through GET /api/logs.
+    "logs": { tool: "logs_digest", door: "LOCAL @bli-cockpit/telemetry-core/log-digest (this machine's logs); `project` reads GET /api/logs (the stored digests)" },
     "usage sessions": { tool: "usage_sessions", door: "GET /api/usage/sessions" },
     "usage people": { tool: "usage_people", door: "GET /api/usage/people" },
     "docs list": { tool: "docs_list", door: "GET /api/docs/documents" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.87",
+  "version": "0.1.90",
   "private": false,
   "description": "bli-tower: an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",
@@ -37,7 +37,7 @@
     "readme": "npm run build && node scripts/write-readme-census.mjs"
   },
   "dependencies": {
-    "@bli-cockpit/telemetry-core": "0.1.58",
+    "@bli-cockpit/telemetry-core": "0.1.60",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.3.6"
   },