@bli-cockpit/mcp 0.1.89 → 0.1.94

package/README.md

@@ -169,7 +169,7 @@ three tables below.
 | `cockpit issue update` | `work_update_issue` | `PATCH /api/work/issues/[id]` |
 | `cockpit jarvis` | `jarvis_ask` | `POST /api/jarvis/cli` |
 | `cockpit jarvis --trace` | `jarvis_trace` | `GET /api/ops/trace/[id]` |
-| `cockpit logs` | `logs_digest` | `LOCAL @bli-cockpit/telemetry-core/log-digest (this machine's logs; no HTTP door)` |
+| `cockpit logs` | `logs_digest` | `LOCAL @bli-cockpit/telemetry-core/log-digest (this machine's logs); `project` reads GET /api/logs (the stored digests)` |
 | `cockpit mail accounts` | `mail_accounts` | `GET /api/mail/accounts` |
 | `cockpit mail attachment` | `mail_attachment` | `GET /api/mail/attachments/[id]?meta=1` |
 | `cockpit mail detach` | `mail_detach` | `DELETE /api/mail/accounts` |

package/dist/logs-tools.d.ts

@@ -13,11 +13,18 @@
  * as `text`. A CLI that is missing or not logged in is a named refusal
  * (`vercel_cli_missing`, `railway_not_logged_in`), never a stack trace.
  *
+ * `project` (BLI-12855) reads the digests Tower's own 15-minute cron STORED for a
+ * BLI project (`kolm`, `tower`, ...) through the dashboard's `GET /api/logs` door,
+ * the same door `cockpit logs <project>` calls: no `vercel` or `railway` login, no
+ * local file. A `dashboard` or `railway` read whose local CLI is missing or logged
+ * out falls back to the stored digest of project `tower` and says so.
+ *
  * Not on the hosted server: it reads the machine's files and spawns programs
  * there (`REMOTE_EXCLUDED_TOOLS`).
  */
 import { digestSource, type DigestOutcome } from "@bli-cockpit/telemetry-core/log-digest";
-export interface LogsToolDeps {
+import { type ToolDeps } from "./tool-result.js";
+export interface LogsToolDeps extends Partial<ToolDeps> {
     /** Test seam: replaces the digest. */
     digest?: (...args: Parameters<typeof digestSource>) => Promise<DigestOutcome>;
     /** Test seam: where the collector's state lives; defaults to this machine's. */

package/dist/logs-tools.js

@@ -13,19 +13,27 @@
  * as `text`. A CLI that is missing or not logged in is a named refusal
  * (`vercel_cli_missing`, `railway_not_logged_in`), never a stack trace.
  *
+ * `project` (BLI-12855) reads the digests Tower's own 15-minute cron STORED for a
+ * BLI project (`kolm`, `tower`, ...) through the dashboard's `GET /api/logs` door,
+ * the same door `cockpit logs <project>` calls: no `vercel` or `railway` login, no
+ * local file. A `dashboard` or `railway` read whose local CLI is missing or logged
+ * out falls back to the stored digest of project `tower` and says so.
+ *
  * Not on the hosted server: it reads the machine's files and spawns programs
  * there (`REMOTE_EXCLUDED_TOOLS`).
  */
 import os from "node:os";
-import { digestSource, routineText } from "@bli-cockpit/telemetry-core/log-digest";
+import { LOCAL_ACCESS_REFUSALS, LOG_PROJECT_PATTERN, digestSource, routineText } from "@bli-cockpit/telemetry-core/log-digest";
 import { getUserLocalCockpitPaths } from "@bli-cockpit/telemetry-core";
 import { z } from "zod";
-import { errorResult, registrarFor, textResult } from "./tool-result.js";
+import { callAgentDoor } from "./agent-door.js";
+import { doorFailureText, errorResult, registrarFor, textResult, withSession } from "./tool-result.js";
 /** Past this the structured half would crowd the 32 KB per-half read budget. */
 const MAX_TEMPLATES_RETURNED = 40;
 const MAX_TEXT_CHARS = 256_000;
 export function registerLogsTools(server, deps = {}) {
     const digest = deps.digest ?? digestSource;
+    const door = { fetchImpl: deps.fetchImpl ?? fetch, ...(deps.loadSession ? { loadSession: deps.loadSession } : {}) };
     registrarFor(server)("logs_digest", {
         title: "Digest Tower's logs (about 2 KB)",
         description: "A token-cheap digest of Tower's own logs, read on THIS machine and never uploaded. Use it BEFORE reading raw logs: a 15-minute window of a "
@@ -35,30 +43,67 @@ export function registerLogsTools(server, deps = {}) {
             + "(this machine's sync.log and sync.err.log), `dashboard` (Vercel runtime logs through the `vercel` CLI), `railway` (every Tower service) "
             + "or `railway:<service>` (through the `railway` CLI), `-` (lines passed as `text`). `since` is 15m, 1h, 2d or an ISO time (default 15m). "
             + "Pass `raw` (an 8-hex template id from a digest line) to get the original lines behind that template, redacted, newest last. A missing or "
-            + "logged-out CLI is a named refusal (vercel_cli_missing, vercel_not_logged_in, railway_cli_missing, railway_not_logged_in). `cockpit logs`, same code.",
+            + "logged-out CLI is a named refusal (vercel_cli_missing, vercel_not_logged_in, railway_cli_missing, railway_not_logged_in), except that "
+            + "`dashboard` and `railway` then fall back to the digest Tower STORED. Pass `project` (tower, kolm, portpal, pearl-portal, triage-crm, "
+            + "triage-ocr, blue-pearl-website, kaiben, black-knight-tire, sublimation-squad, bli-website) instead of `source` to read what Tower's "
+            + "15-minute cron stored from that project's Vercel, Railway and Supabase logs, merged over `since` (default 24h, at most 30d), no login "
+            + "needed. A line `NOT READ: ...` and the structured `still_refusing` ([{source, reason, since, last_seen}]) name every source whose newest "
+            + "stored row is a refusal, however old, plus `not_wired`: a digest with ERROR 0 and a NOT READ line is a blind spot, never all clear. A stored "
+            + "digest keeps no raw line, so `raw` does not apply. `cockpit logs`, same code.",
         inputSchema: {
-            source: z.string().min(1).max(80).describe("collector, dashboard, railway, railway:<service> or - (lines in `text`)."),
+            source: z.string().min(1).max(80).optional().describe("collector, dashboard, railway, railway:<service> or - (lines in `text`). Omit when `project` is given."),
+            project: z.string().regex(LOG_PROJECT_PATTERN).optional().describe("A BLI project id: read the digest Tower's cron stored for it (no local CLI needed). Takes `since`; `raw` does not apply."),
             since: z.string().min(1).max(40).optional().describe("Window: 15m, 1h, 2d or an ISO time. Default 15m."),
             raw: z.string().regex(/^[0-9a-f]{8}$/).optional().describe("A template id from a digest line: return the original lines behind it."),
             limit: z.number().int().min(1).max(200).optional().describe("With raw: how many original lines. Default 20."),
             all_levels: z.boolean().optional().describe("dashboard only: also read info-only requests (slow, minutes)."),
             text: z.string().max(MAX_TEXT_CHARS).optional().describe("The lines to digest when source is -."),
         },
-    }, async (args) => answer(digest, deps, args));
+    }, async (args) => answer(digest, deps, door, args));
+}
+/** The stored digest of a project, through `GET /api/logs` with this machine's device token. */
+async function storedAnswer(door, project, since, fallbackReason) {
+    return withSession(door, async (session) => {
+        const query = new URLSearchParams({ project });
+        if (since)
+            query.set("since", since);
+        const response = await callAgentDoor(session, door.fetchImpl, "GET", `/api/logs?${query.toString()}`);
+        if (!response.ok)
+            return errorResult(doorFailureText("logs_digest", response));
+        const body = response.body;
+        const text = typeof body["text"] === "string" ? body["text"] : "";
+        return textResult(fallbackReason ? `(no local access: ${fallbackReason}; this is the digest Tower stored)\n${text}` : text, {
+            ...body,
+            ...(fallbackReason ? { fallback_from: fallbackReason } : {}),
+        });
+    });
 }
-async function answer(digest, deps, args) {
-    const source = String(args["source"]);
+async function answer(digest, deps, door, args) {
+    const since = typeof args["since"] === "string" ? args["since"] : undefined;
+    if (typeof args["project"] === "string") {
+        if (typeof args["raw"] === "string")
+            return errorResult("logs_digest refused (raw_not_stored): a stored digest keeps no raw line; raw reads a local source.");
+        return storedAnswer(door, args["project"], since);
+    }
+    if (typeof args["source"] !== "string")
+        return errorResult("logs_digest refused (source_or_project_required): pass `source` (a local log) or `project` (a stored digest).");
+    const source = args["source"];
     const text = typeof args["text"] === "string" ? args["text"] : undefined;
     if (source === "-" && !text) {
         return errorResult('logs_digest refused (stdin_empty): source "-" digests the lines you pass in `text`; none were given.');
     }
     const outcome = await digest({
         source,
-        since: typeof args["since"] === "string" ? args["since"] : undefined,
+        since,
         raw: typeof args["raw"] === "string" ? args["raw"] : undefined,
         rawLimit: typeof args["limit"] === "number" ? args["limit"] : undefined,
         allLevels: args["all_levels"] === true,
     }, { stateDir: deps.stateDir ?? getUserLocalCockpitPaths(os.homedir()).state_dir, stdinText: text, stdinIsTerminal: false });
+    if (!outcome.ok && LOCAL_ACCESS_REFUSALS.has(outcome.reason) && (source === "dashboard" || source === "railway") && typeof args["raw"] !== "string") {
+        const stored = await storedAnswer(door, "tower", since, outcome.reason);
+        // No pairing either: the local refusal is the honest answer.
+        return stored.isError ? errorResult(`logs_digest refused (${outcome.reason}): ${outcome.detail} The stored digest could not be read either: ${stored.content[0]?.text ?? "unknown"}`) : stored;
+    }
     if (!outcome.ok)
         return errorResult(`logs_digest refused (${outcome.reason}): ${outcome.detail}`);
     if (outcome.kind === "raw") {

package/dist/server.js

@@ -503,6 +503,6 @@ export function createServer(deps, options = {}) {
     registerSourcesTools(server);
     // BLI-12833: a token-cheap digest of Tower's own logs, read on this machine
     // with the shared `@bli-cockpit/telemetry-core/log-digest`. Read-only; not on the hosted server.
-    registerLogsTools(server);
+    registerLogsTools(server, { fetchImpl: deps.fetchImpl });
     return server;
 }

package/dist/verb-census.js

@@ -241,7 +241,8 @@ export const MCP_TWINS = {
     "github rerun": { tool: "github_rerun", door: "POST /api/github/pull-request (rerun)" },
     // BLI-12833: a local read, not a Tower door: it runs the shared log digest over
     // this machine's collector logs and the `vercel` / `railway` CLIs.
-    "logs": { tool: "logs_digest", door: "LOCAL @bli-cockpit/telemetry-core/log-digest (this machine's logs; no HTTP door)" },
+    // BLI-12855: a project name (or --stored, or a local CLI that is missing) reads the digests Tower's cron stored, through GET /api/logs.
+    "logs": { tool: "logs_digest", door: "LOCAL @bli-cockpit/telemetry-core/log-digest (this machine's logs); `project` reads GET /api/logs (the stored digests)" },
     "usage sessions": { tool: "usage_sessions", door: "GET /api/usage/sessions" },
     "usage people": { tool: "usage_people", door: "GET /api/usage/people" },
     "docs list": { tool: "docs_list", door: "GET /api/docs/documents" },

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.89",
+  "version": "0.1.94",
   "private": false,
   "description": "bli-tower: an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",
@@ -37,7 +37,7 @@
     "readme": "npm run build && node scripts/write-readme-census.mjs"
   },
   "dependencies": {
-    "@bli-cockpit/telemetry-core": "0.1.59",
+    "@bli-cockpit/telemetry-core": "0.1.64",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.3.6"
   },