@bli-cockpit/mcp 0.1.95 → 0.1.97

package/README.md

@@ -109,7 +109,7 @@ about what an agent can reach.
 
 <!-- BEGIN GENERATED verb census — `npm run mcp:readme` -->
 
-**126 of 131 Tower verbs have an MCP twin.**
+**135 of 140 Tower verbs have an MCP twin.**
 Each tool goes through the SAME door its CLI verb calls, with the same
 collector device token — never a second route and never a service-role
 reader. `src/verb-census.test.ts` fails when a verb is in none of the
@@ -161,6 +161,9 @@ three tables below.
 | `cockpit github pr` | `github_pr` | `POST /api/github/pull-request (read)` |
 | `cockpit github rerun` | `github_rerun` | `POST /api/github/pull-request (rerun)` |
 | `cockpit github retitle` | `github_retitle` | `POST /api/github/pull-request (retitle)` |
+| `cockpit glossary add` | `glossary_add` | `POST /api/glossary` |
+| `cockpit glossary list` | `glossary_list` | `GET /api/glossary` |
+| `cockpit glossary remove` | `glossary_remove` | `POST /api/glossary` |
 | `cockpit issue comment` | `work_comment_issue` | `POST /api/work/issues/[id]/comments` |
 | `cockpit issue create` | `work_create_issue` | `POST /api/work/issues` |
 | `cockpit issue history` | `work_issue_history` | `GET /api/work/issues/[id]/history` |
@@ -184,7 +187,9 @@ three tables below.
 | `cockpit memory consolidation` | `memory_consolidation` | `GET /api/memory/consolidation` |
 | `cockpit memory forget` | `forget_memory` (`bli-memory`) | `POST /api/memory/forget` |
 | `cockpit memory log` | `memory_experience` | `POST /api/memory/experience` |
+| `cockpit memory private` | `set_memory_visibility` (`bli-memory`) | `POST /api/memory/visibility` |
 | `cockpit memory profile` | `memory_profile` | `GET /api/memory/profile` |
+| `cockpit memory public` | `set_memory_visibility` (`bli-memory`) | `POST /api/memory/visibility` |
 | `cockpit memory requeue` | `memory_requeue` | `POST /api/memory/requeue` |
 | `cockpit memory save` | `save_memory` (`bli-memory`) | `POST /api/memory/save` |
 | `cockpit memory search` | `search_memory` (`bli-memory`) | `POST /api/memory/search` |
@@ -209,6 +214,8 @@ three tables below.
 | `cockpit notes move` | `notes_move` | `POST /api/notes/move` |
 | `cockpit notes paste` | `notes_paste` | `POST /api/notes/upload (text)` |
 | `cockpit notes place` | `notes_place` | `POST /api/notes/place` |
+| `cockpit notes recording` | `notes_recording` | `GET /api/notes/recordings?recording_id` |
+| `cockpit notes recordings` | `notes_recordings` | `GET /api/notes/recordings?note_id` |
 | `cockpit notes rename` | `notes_rename` | `PATCH /api/notes/folders/[id]` |
 | `cockpit notes rmdir` | `notes_rmdir` | `DELETE /api/notes/folders/[id]` |
 | `cockpit notes share` | `notes_share` | `POST /api/notes/share` |
@@ -233,8 +240,10 @@ three tables below.
 | `cockpit settings env list` | `settings_list` | `GET /api/settings/env-blobs` |
 | `cockpit settings switches set` | `settings_set` | `POST /api/settings/{jarvis-model,switches,model-routing,env-blobs} + PUT /api/settings/cli-floor` |
 | `cockpit settings` | `settings_show` | `GET /api/settings/* + /api/team/members` |
+| `cockpit setup` | `setup_read` | `GET /api/setup` |
 | `cockpit slack coverage` | `slack_coverage` | `GET /api/ops/slack/coverage` |
 | `cockpit slack read` | `slack_read` | `POST /api/ops/slack/read` |
+| `cockpit team device doctor` | `team_device_doctor` | `POST /api/ambient/devices/[deviceId]/doctor` |
 | `cockpit team device list` | `team_device_list` | `GET /api/team/devices` |
 | `cockpit team device revoke` | `team_device_revoke` | `POST /api/ambient/devices/[deviceId]/revoke` |
 | `cockpit team invite` | `team_invite` | `POST /api/team/invite` |
@@ -259,7 +268,7 @@ A claim about the verb's nature, not a backlog.
 | `cockpit brief edit` | opens the person's own $EDITOR on this machine and files what they changed; an agent has no editor to open (commands/editor.ts) |
 | `cockpit cal add-ical` | carries a calendar's SECRET iCal ADDRESS — a permanent, unauthenticated, read-anything-on-that-calendar URL. The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so attaching a calendar stays a thing a person does at a terminal (BLI-3709) |
 | `cockpit mail add-imap` | carries a Google app password. The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so attaching a mailbox stays a thing a person does at a terminal (BLI-3708) |
-| `cockpit notes connect` | carries a notetaker API key (Fellow or Circleback). The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so connecting a notetaker stays a thing a person does at a terminal or in Tower's Settings (BLI-4383) |
+| `cockpit notes connect` | carries a notetaker credential: an API key (Fellow or Circleback), or for Wispr Flow a browser sign-in whose refresh token the CLI hands straight to Tower. The CLI reads a key from STDIN precisely so it never lands in an argument list, and a browser sign-in has no tool-call equivalent at all; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so connecting a notetaker stays a thing a person does at a terminal or in Tower's Settings (BLI-4383, BLI-12926) |
 | `cockpit notes webhook` | carries the VENDOR's webhook signing secret, the key an HMAC over every delivered payload is checked against. Exactly the ruling `notes connect` already carries, for the same credential shape: the CLI reads it from STDIN so it never lands in an argument list, and an MCP tool argument travels through a model's context window and whatever transcript store sits behind it (BLI-4394) |
 
 <!-- END GENERATED verb census -->

package/dist/glossary-tools.d.ts

@@ -0,0 +1,4 @@
+import { type ToolDeps } from "./tool-result.js";
+export declare function registerGlossaryTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps: ToolDeps): void;

package/dist/glossary-tools.js

@@ -0,0 +1,19 @@
+import { z } from "zod";
+import { callAgentDoor } from "./agent-door.js";
+import { registrarFor, withSession, textResult, errorResult, doorFailureText } from "./tool-result.js";
+const WRONG_FORM = z.string().min(1).max(80).describe("The misheard spelling to correct, exactly as it shows up (for example a name transcribed wrongly).");
+const RIGHT_FORM = z.string().min(1).max(80).describe("The correct spelling to put in its place.");
+export function registerGlossaryTools(server, deps) {
+    const register = registrarFor(server);
+    for (const action of ["list", "add", "remove"]) {
+        register(`glossary_${action}`, {
+            title: `Glossary ${action}`, description: action === "remove" ? "Prevent future corrections of a wrong form." : "Read or add a shared spelling correction. Quote phrases in the CLI.",
+            inputSchema: action === "list" ? {} : action === "add" ? { wrong: WRONG_FORM, to: RIGHT_FORM } : { wrong: WRONG_FORM },
+        }, async (args) => withSession(deps, async (session) => {
+            const response = await callAgentDoor(session, deps.fetchImpl, action === "list" ? "GET" : "POST", "/api/glossary", action === "list" ? undefined : { action, wrong: args.wrong, to: args.to });
+            if (!response.ok)
+                return errorResult(doorFailureText(`glossary_${action}`, response));
+            return textResult(JSON.stringify(response.body), response.body);
+        }));
+    }
+}

package/dist/memory-twins.d.ts

@@ -0,0 +1,9 @@
+/**
+ * The `bli-memory` server's twins in the verb census (BLI-4047, BLI-12927).
+ *
+ * BLI Memory ships its own MCP server, so its store verbs are twinned against
+ * tools on THAT server, over the same `/api/memory/*` doors the CLI verbs call.
+ * Split out of `verb-census.ts` to keep that file under the readability band.
+ */
+import type { McpTwin } from "./verb-census.js";
+export declare const MEMORY_STORE_TWINS: Record<string, McpTwin>;

package/dist/memory-twins.js

@@ -0,0 +1,17 @@
+/**
+ * The `bli-memory` server's twins in the verb census (BLI-4047, BLI-12927).
+ *
+ * BLI Memory ships its own MCP server, so its store verbs are twinned against
+ * tools on THAT server, over the same `/api/memory/*` doors the CLI verbs call.
+ * Split out of `verb-census.ts` to keep that file under the readability band.
+ */
+export const MEMORY_STORE_TWINS = {
+    "memory search": { tool: "search_memory", door: "POST /api/memory/search", server: "bli-memory" },
+    "memory save": { tool: "save_memory", door: "POST /api/memory/save", server: "bli-memory" },
+    "memory update": { tool: "update_memory", door: "POST /api/memory/update", server: "bli-memory" },
+    "memory forget": { tool: "forget_memory", door: "POST /api/memory/forget", server: "bli-memory" },
+    // BLI-12927: memory is public to the team until its owner narrows it. Two CLI
+    // verbs, one tool: `visibility` is the tool's argument.
+    "memory private": { tool: "set_memory_visibility", door: "POST /api/memory/visibility", server: "bli-memory" },
+    "memory public": { tool: "set_memory_visibility", door: "POST /api/memory/visibility", server: "bli-memory" },
+};

package/dist/notes-account-tools.js

@@ -19,7 +19,38 @@
  */
 import { z } from "zod";
 import { callAgentDoor } from "./agent-door.js";
-import { CONFIRM_INPUT, doorFailureText, errorResult, queryString, registrarFor, textResult, unconfirmed, withSession, } from "./tool-result.js";
+import { CONFIRM_INPUT, doorFailureText, dataResult, errorResult, queryString, registrarFor, textResult, unconfirmed, withSession, } from "./tool-result.js";
+/**
+ * What else feeds this person's notes (BLI-12925): Granola arrives through the
+ * organization's own key and cron, never an account a person connected, so an
+ * empty account list never meant "no notetaker". Same sentence the CLI prints.
+ */
+async function sharedFeedsText(session, fetchImpl) {
+    const how = "read by the organization's own Granola key, swept once a day by Tower's server; no key of yours is involved";
+    const response = await callAgentDoor(session, fetchImpl, "GET", "/api/notes/granola-status?limit=1");
+    const runs = response.ok && Array.isArray(response.body.runs)
+        ? response.body.runs
+        : null;
+    const last = !response.ok
+        ? "last run unknown (the run ledger could not be read)"
+        : runs && runs[0]
+            ? `last run ${runs[0].started_at}: ${runs[0].reason}, saw ${runs[0].notes_seen}, stored ${runs[0].notes_stored}, failed ${runs[0].notes_failed}`
+            : "no run has landed a row yet";
+    return {
+        text: `\n\nAlso feeding your notes, for the whole organization:\n  Granola  ${how}; ${last}. Its runs in full: notes_granola_status.`,
+        feeds: [{ provider: "granola", name: "Granola", how, last_run: runs?.[0] ?? null, unreadable: !response.ok }],
+    };
+}
+function coverageLines(coverage) {
+    return (coverage.members ?? []).map((member) => {
+        const who = `${member.display_name ?? member.email}${member.is_you ? " (you)" : ""}`;
+        if (member.notetakers.length === 0)
+            return `${who}  NO NOTETAKER CONNECTED`;
+        return `${who}  ${member.notetakers
+            .map((taker) => (taker.status === "active" ? taker.provider : `${taker.provider} (${taker.status})`))
+            .join(", ")}`;
+    });
+}
 function accountLine(account) {
     const health = account.status === "active"
         ? "active"
@@ -30,20 +61,66 @@ export function registerNotesAccountTools(server, deps) {
     const register = registrarFor(server);
     register("notes_accounts", {
         title: "List connected notetakers",
-        description: "Every notetaker account (Fellow or Circleback; Otter and Granola are named but not connectable) connected to "
-            + "Tower that you may see: name, provider, workspace, health and when it was last read. Start here when you "
-            + "need an account id. Connecting one is NOT available here on purpose — it carries an API key, so it is done "
-            + "at a terminal with `cockpit notes connect --provider fellow --workspace <subdomain> --key-stdin` or in "
-            + "Tower's Settings.",
+        description: "Every notetaker account (Fellow, Circleback or Wispr Flow; Otter and Granola are named but not connectable) "
+            + "connected to Tower that you may see: name, provider, workspace, health and when it was last read, plus the feeds the organization reads for "
+            + "everyone (Granola, through its own key). Start here when you need an account id. ALSO answers `coverage`: for every member of the team, which notetakers feed "
+            + "their notes, and which members have none (BLI-12926). Connecting one is NOT available here on purpose — it "
+            + "carries a credential, so it is done at a terminal with `cockpit notes connect --provider fellow --workspace "
+            + "<subdomain> --key-stdin` (or `--provider wisprflow`, which signs in through a browser) or in Tower's Settings.",
         inputSchema: {},
     }, async () => withSession(deps, async (session) => {
         const response = await callAgentDoor(session, deps.fetchImpl, "GET", "/api/notes/accounts");
         if (!response.ok)
             return errorResult(doorFailureText("notes_accounts", response));
         const accounts = (Array.isArray(response.body.accounts) ? response.body.accounts : []);
-        return textResult(accounts.length === 0
-            ? "No notetaker is connected. A person connects one with `cockpit notes connect --provider fellow --workspace <subdomain> --key-stdin`, or in Tower's Settings."
-            : `${accounts.length} notetaker(s).\n${accounts.map(accountLine).join("\n")}`, { accounts });
+        const shared = await sharedFeedsText(session, deps.fetchImpl);
+        // BLI-12926: added after the list so the list is exactly what it was. A
+        // failed read of it is said in the answer and never fails the list.
+        const coverageResponse = await callAgentDoor(session, deps.fetchImpl, "GET", "/api/notes/coverage");
+        const coverage = coverageResponse.ok ? coverageResponse.body : null;
+        const headline = accounts.length === 0
+            ? "You have not connected a notetaker of your own. A person connects one with `cockpit notes connect --provider fellow --workspace <subdomain> --key-stdin`, or in Tower's Settings."
+            : `${accounts.length} notetaker(s).\n${accounts.map(accountLine).join("\n")}`;
+        const who = coverage
+            ? `\nWho feeds Tower's notes (${coverage.members_with_none ?? 0} member(s) with none):\n${coverageLines(coverage).join("\n")}`
+            : "\nWho feeds Tower's notes: could not be read just now.";
+        return dataResult(`${headline}${shared.text}${who}`, {
+            accounts,
+            shared_feeds: shared.feeds,
+            coverage,
+        });
+    }));
+    register("notes_recordings", {
+        title: "List the recordings of one meeting",
+        description: "When several notetakers or people recorded one meeting, the library shows ONE note: the recording with the "
+            + "longest transcript. This lists every recording of the meeting a note is: which one is shown, which are "
+            + "alternates, each one's transcript length, its notetaker, and the sentence saying why it holds its role "
+            + "(BLI-12926). Open an alternate with `notes_recording`. Read-only; you only see recordings of meetings you "
+            + "can already read.",
+        inputSchema: { note_id: z.string().uuid().describe("A note's id, as notes_list returns it.") },
+    }, async (args) => withSession(deps, async (session) => {
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", `/api/notes/recordings?note_id=${encodeURIComponent(String(args.note_id))}`);
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_recordings", response));
+        const recordings = (Array.isArray(response.body.recordings) ? response.body.recordings : []);
+        const lines = recordings.map((row) => `${row.role === "primary" ? "SHOWN    " : "alternate"}  ${row.source_namespace}  ${row.transcript_chars === null ? "length unknown" : `${row.transcript_chars} chars`}  ${row.started_at ?? "no start time"}  ${row.id}${row.chosen_reason ? `  (${row.chosen_reason})` : ""}`);
+        return dataResult(recordings.length === 0
+            ? "No recording is indexed for this note."
+            : `${recordings.length} recording(s) of this meeting.\n${lines.join("\n")}`, { note_id: String(args.note_id), recordings });
+    }));
+    register("notes_recording", {
+        title: "Open one recording of a meeting",
+        description: "One recording by its own id, text and all, shown or alternate (BLI-12926). An alternate was never ingested, so "
+            + "it has no extracted claims; its text is here and nowhere else. Read-only.",
+        inputSchema: { recording_id: z.string().uuid().describe("A recording id, as notes_recordings returns it.") },
+    }, async (args) => withSession(deps, async (session) => {
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", `/api/notes/recordings?recording_id=${encodeURIComponent(String(args.recording_id))}`);
+        if (!response.ok)
+            return errorResult(doorFailureText("notes_recording", response));
+        const recording = response.body.recording;
+        if (!recording)
+            return errorResult("notes_recording: Tower answered without a recording.");
+        return dataResult(`${recording.role === "primary" ? "The recording shown as the note" : "An alternate"} from ${recording.source_namespace}.\n${recording.body ?? "(Tower did not keep this recording's text.)"}`, { recording });
     }));
     register("notes_sync_status", {
         title: "Read notetaker sync health",

package/dist/notes-tools.js

@@ -56,7 +56,7 @@ export function registerNotesTools(server, deps) {
     const register = registrarFor(server);
     register("notes_list", {
         title: "List Tower meeting notes",
-        description: "The meeting-notes library you may read, grouped by shelf: id, date, kind, participants and file name. "
+        description: "The meeting-notes library you may read, grouped by shelf: id, date, kind, participants and the meeting's title (file name when it has none). "
             + `Newest ${DEFAULT_LIST_LIMIT} unless you pass limit (up to 500); the answer says when more exist. `
             + "Never a note's text — call notes_show for one. Says when the answer is narrower than a browser's.",
         inputSchema: LIBRARY_FILTERS,
@@ -77,7 +77,7 @@ export function registerNotesTools(server, deps) {
             const notes = shelf.notes
                 .map((note) => {
                 const who = note.participants.length > 0 ? ` — ${note.participants.join(", ")}` : "";
-                return `  ${note.meetingDate}  ${note.id}  ${note.fileName}${who}`;
+                return `  ${note.meetingDate}  ${note.id}  ${note.title?.trim() || note.fileName}${who}`;
             })
                 .join("\n");
             return `${shelf.heading} (${shelf.notes.length})\n${notes}`;

package/dist/server.d.ts

@@ -1,9 +1,3 @@
-/**
- * MCP server factory for @bli-cockpit/mcp.
- *
- * Pure factory — accepts injected fetch + base URL + token so it can be
- * unit-tested without binding to a real network or transport.
- */
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 import { z } from "zod";
 import { type CreateServerOptions } from "./tool-registration.js";

package/dist/server.js

@@ -1,3 +1,4 @@
+import { registerGlossaryTools } from "./glossary-tools.js";
 /**
  * MCP server factory for @bli-cockpit/mcp.
  *
@@ -33,6 +34,7 @@ import { registerTeamWriteTools } from "./team-write-tools.js";
 import { registerWorkTools } from "./work-tools.js";
 import { registerCareersTools } from "./careers-tools.js";
 import { registerRenameTools } from "./rename-tools.js";
+import { registerSetupTools } from "./setup-tools.js";
 import { registerUsageTools } from "./usage-tools.js";
 import { registerLogsTools } from "./logs-tools.js";
 import { registerBrainTools } from "./brain-tools.js";
@@ -422,6 +424,7 @@ export function createServer(deps, options = {}) {
     // unconditionally — the session is loaded fresh per call, so a machine with
     // no `cockpit login` pairing yet still serves the three event tools; only a
     // docs/msg call on that machine fails, by name.
+    registerGlossaryTools(server, deps);
     registerDocsMsgTools(server, { fetchImpl: deps.fetchImpl });
     // BLI-10430: docs_link, the Notion half of the docs tools, on the same path.
     registerDocsNotionTools(server, { fetchImpl: deps.fetchImpl });
@@ -435,6 +438,7 @@ export function createServer(deps, options = {}) {
     registerRenameTools(server, deps);
     // BLI-12385: GitHub PR read, and merge / retitle / re-run behind the two-step code.
     registerGithubTools(server, deps);
+    registerSetupTools(server, { fetchImpl: deps.fetchImpl });
     registerUsageTools(server, { fetchImpl: deps.fetchImpl });
     // BLI-3708: the mailboxes a person attached. Reads, a send and a sync over
     // the same /api/mail/** doors `cockpit mail` calls; `add-imap` deliberately

package/dist/setup-tools.d.ts

@@ -0,0 +1,4 @@
+import { type ToolDeps } from "./tool-result.js";
+export declare function registerSetupTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps: ToolDeps): void;

package/dist/setup-tools.js

@@ -0,0 +1,18 @@
+import { z } from "zod";
+import { callAgentDoor } from "./agent-door.js";
+import { dataResult, doorFailureText, errorResult, registrarFor, withSession } from "./tool-result.js";
+export function registerSetupTools(server, deps) {
+    registrarFor(server)("setup_read", {
+        title: "Compare agent setups and outcomes",
+        description: "Read machine setup names and 30-day merged PR volume, tokens per merged PR and session yield. Compare exact emails. Differences are observations, not evidence that a setting causes better results. Missing or stale setup and incomplete token coverage are labeled. Members see their own outcomes; team comparisons require super_admin.",
+        inputSchema: { person: z.string().max(200).optional().describe("Only this person, by exact email address."), compare: z.string().max(401).optional().describe("Two exact email addresses separated by a comma.") },
+    }, async (args) => withSession(deps, async (session) => {
+        const query = new URLSearchParams();
+        if (args.person)
+            query.set("person", String(args.person));
+        if (args.compare)
+            query.set("compare", String(args.compare));
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", `/api/setup?${query}`);
+        return response.ok ? dataResult("Agent setups and outcomes over the last 30 days.", response.body) : errorResult(doorFailureText("setup_read", response));
+    }));
+}

package/dist/team-write-tools.js

@@ -109,6 +109,22 @@ export function registerTeamWriteTools(server, deps) {
             return errorResult(doorFailureText("team_role", response));
         return textResult(`${String(response.body.user_id ?? args.user_id)} is now ${String(response.body.role ?? args.role)}.`, response.body);
     }));
+    register("team_device_doctor", {
+        title: "Repair a Tower machine on its next tick",
+        description: "Requests one full non-interactive doctor run. Only super admins may request it. No arbitrary commands. The pending request and before-and-after receipt are visible in the device list.",
+        inputSchema: { device: z.string().min(1).max(200).describe("A device id or one exact device name.") },
+    }, async (args) => withSession(deps, async (session) => {
+        const listed = await listDevices(deps, session);
+        if (!listed.ok)
+            return errorResult(listed.text);
+        const device = findDevice(listed.devices, String(args.device ?? ""));
+        if (!device?.device_id)
+            return errorResult("No unique device matches. Call team_device_list to see ids and names.");
+        const response = await callAgentDoor(session, deps.fetchImpl, "POST", `/api/ambient/devices/${encodeURIComponent(device.device_id)}/doctor`, { action: "doctor" }, WRITE_DEADLINE_MS);
+        if (!response.ok)
+            return errorResult(doorFailureText("team_device_doctor", response));
+        return textResult(`Doctor requested for ${String(device.device_name ?? device.device_id)}. Waiting for its next check-in.`, response.body);
+    }));
     register("team_device_revoke", {
         title: "End a collector device's pairing",
         description: "Revokes one paired machine's token — `cockpit team device revoke`, same door. Irreversible for that token "

package/dist/tool-annotations.d.ts

@@ -17,7 +17,7 @@ export interface TowerToolAnnotations {
  * Writes a person cannot take back by writing again: deletes, revokes,
  * detaches and a merge. These also carry `destructiveHint: true`.
  */
-export declare const DESTRUCTIVE_TOOLS: readonly ["docs_delete", "cal_delete", "cal_detach", "mail_detach", "notes_detach", "notes_rmdir", "settings_delete", "team_device_revoke", "github_merge"];
+export declare const DESTRUCTIVE_TOOLS: readonly ["docs_delete", "cal_delete", "cal_detach", "mail_detach", "notes_detach", "notes_rmdir", "glossary_remove", "settings_delete", "team_device_revoke", "github_merge"];
 /**
  * Tools the HOSTED server leaves out, each with the reason. A hosted process
  * is one machine answering many people: a tool that reads that machine's

package/dist/tool-annotations.js

@@ -20,6 +20,7 @@ export const DESTRUCTIVE_TOOLS = [
     "mail_detach",
     "notes_detach",
     "notes_rmdir",
+    "glossary_remove",
     "settings_delete",
     "team_device_revoke",
     "github_merge",

package/dist/tool-catalog.d.ts

@@ -10,7 +10,7 @@
  * from `src/` under Node's type stripping, so it may import nothing.
  */
 /** Tools that change nothing. The smoke calls every one. */
-export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "rename_pending", "github_pr", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_sync_status", "notes_granola_status", "ops_status", "slack_coverage", "slack_read", "memory_profile", "memory_consolidation", "settings_show", "settings_list", "model_show", "team_members", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check", "logs_digest", "brain_status"];
+export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "rename_pending", "github_pr", "setup_read", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "glossary_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_recordings", "notes_recording", "notes_sync_status", "notes_granola_status", "ops_status", "slack_coverage", "slack_read", "memory_profile", "memory_consolidation", "settings_show", "settings_list", "model_show", "team_members", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check", "logs_digest", "brain_status"];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls
  * each one ONLY with its dry-run flag set (`scripts/smoke.ts` says which).
@@ -21,7 +21,7 @@ export declare const DRY_RUN_TOOLS: readonly ["ops_recompile", "memory_requeue"]
  * candidates, share calendars. Never called by the smoke; covered by the unit
  * suites (`write-tools.test.ts` and each family's own).
  */
-export declare const WRITE_TOOLS: readonly ["emit_event", "docs_create", "docs_update", "docs_delete", "docs_link", "msg_create_channel", "msg_dm", "msg_send", "work_create_issue", "work_update_issue", "work_move_issue", "work_comment_issue", "careers_rescreen", "careers_send_takehome", "careers_invite", "careers_grade", "careers_decide", "careers_followup", "careers_interview", "careers_takehome_set", "careers_settings_set", "rename_resolve", "github_merge", "github_retitle", "github_rerun", "mail_send", "mail_draft", "mail_sync", "mail_detach", "cal_create", "cal_share", "cal_sync", "cal_detach", "cal_delete", "jarvis_dispatch", "notes_mkdir", "notes_rmdir", "notes_rename", "notes_upload", "notes_paste", "notes_share", "notes_unshare", "notes_move", "notes_sync", "notes_detach", "memory_experience", "scout_start", "scout_dismiss", "scout_undo", "brief_rewrite", "brief_correct", "brief_done", "brief_undone", "settings_set", "settings_delete", "model_set", "team_invite", "team_role", "team_device_revoke"];
+export declare const WRITE_TOOLS: readonly ["emit_event", "docs_create", "docs_update", "docs_delete", "docs_link", "msg_create_channel", "msg_dm", "msg_send", "work_create_issue", "work_update_issue", "work_move_issue", "work_comment_issue", "careers_rescreen", "careers_send_takehome", "careers_invite", "careers_grade", "careers_decide", "careers_followup", "careers_interview", "careers_takehome_set", "careers_settings_set", "rename_resolve", "github_merge", "github_retitle", "github_rerun", "mail_send", "mail_draft", "mail_sync", "mail_detach", "cal_create", "cal_share", "cal_sync", "cal_detach", "cal_delete", "jarvis_dispatch", "glossary_add", "glossary_remove", "notes_mkdir", "notes_rmdir", "notes_rename", "notes_upload", "notes_paste", "notes_share", "notes_unshare", "notes_move", "notes_sync", "notes_detach", "memory_experience", "scout_start", "scout_dismiss", "scout_undo", "brief_rewrite", "brief_correct", "brief_done", "brief_undone", "settings_set", "settings_delete", "model_set", "team_invite", "team_role", "team_device_revoke", "team_device_doctor"];
 /** Reads that spend a model turn. The smoke's `--no-model` leaves these out. */
 export declare const MODEL_SPENDING_TOOLS: readonly ["jarvis_ask", "jarvis_check"];
 /**

package/dist/tool-catalog.js

@@ -31,6 +31,7 @@ export const READ_TOOLS = [
     "careers_settings_show",
     "rename_pending",
     "github_pr",
+    "setup_read",
     "usage_people",
     "usage_sessions",
     "mail_accounts",
@@ -57,11 +58,15 @@ export const READ_TOOLS = [
     "brief_missed",
     "notes_folders",
     "notes_list",
+    "glossary_list",
     "notes_show",
     "notes_shelf",
     "notes_shelves",
     "notes_place",
     "notes_accounts",
+    // BLI-12926: the alternates of a meeting several notetakers recorded.
+    "notes_recordings",
+    "notes_recording",
     "notes_sync_status",
     "notes_granola_status",
     "ops_status",
@@ -130,6 +135,8 @@ export const WRITE_TOOLS = [
     "cal_detach",
     "cal_delete",
     "jarvis_dispatch",
+    "glossary_add",
+    "glossary_remove",
     "notes_mkdir",
     "notes_rmdir",
     "notes_rename",
@@ -154,6 +161,7 @@ export const WRITE_TOOLS = [
     "team_invite",
     "team_role",
     "team_device_revoke",
+    "team_device_doctor",
 ];
 /** Reads that spend a model turn. The smoke's `--no-model` leaves these out. */
 export const MODEL_SPENDING_TOOLS = ["jarvis_ask", "jarvis_check"];

package/dist/verb-census-spellings.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Census key → what a person actually types. (BLI-4048)
+ *
+ * The keys above are derived MECHANICALLY from each noun's `action` union, and
+ * for two nouns that union is not the grammar. `settings`'s positional is a
+ * SECTION (`personal|switches|models|env|cli-floor`) and the `action` is what
+ * the parser decides afterwards; `team`'s `device-list` is one action word
+ * spelled as two typed words, `team device list`. So `cockpit settings show`
+ * and `cockpit team device-list` were rendered into the README's "CLI verb"
+ * column and into `cli-caller-identity.md`, and the CLI refused all six.
+ *
+ * This is the display layer and nothing else: the keys, the twin rule and the
+ * suite are untouched. Every spelling here is proven typable —
+ * `scripts/doc-doors.test.mjs` runs the rendered table through the collector's
+ * own parser, so a wrong entry fails the build rather than misleading a
+ * stranger. Where one tool serves several sections (`settings_set` writes any
+ * of them) the spelling names ONE of them and the door column names the rest.
+ *
+ * A verb whose key is already typable is absent from here on purpose; the
+ * shorter this map is, the closer the census keys are to the product.
+ */
+export declare const TYPED_SPELLING: Record<string, string>;
+/** How a census key is written when a person is being told to type it. */
+export declare function typedSpelling(verb: string): string;

package/dist/verb-census-spellings.js

@@ -0,0 +1,41 @@
+/**
+ * Census key → what a person actually types. (BLI-4048)
+ *
+ * The keys above are derived MECHANICALLY from each noun's `action` union, and
+ * for two nouns that union is not the grammar. `settings`'s positional is a
+ * SECTION (`personal|switches|models|env|cli-floor`) and the `action` is what
+ * the parser decides afterwards; `team`'s `device-list` is one action word
+ * spelled as two typed words, `team device list`. So `cockpit settings show`
+ * and `cockpit team device-list` were rendered into the README's "CLI verb"
+ * column and into `cli-caller-identity.md`, and the CLI refused all six.
+ *
+ * This is the display layer and nothing else: the keys, the twin rule and the
+ * suite are untouched. Every spelling here is proven typable —
+ * `scripts/doc-doors.test.mjs` runs the rendered table through the collector's
+ * own parser, so a wrong entry fails the build rather than misleading a
+ * stranger. Where one tool serves several sections (`settings_set` writes any
+ * of them) the spelling names ONE of them and the door column names the rest.
+ *
+ * A verb whose key is already typable is absent from here on purpose; the
+ * shorter this map is, the closer the census keys are to the product.
+ */
+export const TYPED_SPELLING = {
+    // The action is `invite`; the button, the help wall and the docs all say
+    // send-takehome, so that is what a stranger is told to type.
+    "careers invite": "careers send-takehome",
+    "careers takehome-show": "careers takehome show",
+    "careers takehome-set": "careers takehome set",
+    "careers settings-show": "careers settings show",
+    "careers settings-set": "careers settings set",
+    "settings show": "settings",
+    "settings list": "settings env list",
+    "settings set": "settings switches set",
+    "settings delete": "settings env delete",
+    "team device-list": "team device list",
+    "team device-revoke": "team device revoke",
+    "team device-doctor": "team device doctor",
+};
+/** How a census key is written when a person is being told to type it. */
+export function typedSpelling(verb) {
+    return TYPED_SPELLING[verb] ?? verb;
+}

package/dist/verb-census.d.ts

@@ -15,9 +15,8 @@
  *   re-exports. That file is the authoritative "these are the commands that
  *   talk to Tower" table — its siblings are a filing decision, not a contract.
  * - The VERBS are each noun's `action:` union in `LocalCommand`
- *   (`local-args.ts`), with an `XAction` alias resolved from whichever
- *   `local-args-tower-*.ts` declares it. A noun with no `action` field is one
- *   verb wearing the noun's own name (`jarvis`, `correct`, `workbook`).
+ *   (`local-args.ts`), resolving XAction aliases from the tower parser siblings.
+ *   A noun without an action field is its own verb.
  *
  * ## What it deliberately does NOT see
  *
@@ -67,30 +66,7 @@ export interface McpTwin {
 }
 /** A CLI verb and the MCP tool that does the same thing, over the same door. */
 export declare const MCP_TWINS: Record<string, McpTwin>;
-/**
- * Census key → what a person actually types. (BLI-4048)
- *
- * The keys above are derived MECHANICALLY from each noun's `action` union, and
- * for two nouns that union is not the grammar. `settings`'s positional is a
- * SECTION (`personal|switches|models|env|cli-floor`) and the `action` is what
- * the parser decides afterwards; `team`'s `device-list` is one action word
- * spelled as two typed words, `team device list`. So `cockpit settings show`
- * and `cockpit team device-list` were rendered into the README's "CLI verb"
- * column and into `cli-caller-identity.md`, and the CLI refused all six.
- *
- * This is the display layer and nothing else: the keys, the twin rule and the
- * suite are untouched. Every spelling here is proven typable —
- * `scripts/doc-doors.test.mjs` runs the rendered table through the collector's
- * own parser, so a wrong entry fails the build rather than misleading a
- * stranger. Where one tool serves several sections (`settings_set` writes any
- * of them) the spelling names ONE of them and the door column names the rest.
- *
- * A verb whose key is already typable is absent from here on purpose; the
- * shorter this map is, the closer the census keys are to the product.
- */
-export declare const TYPED_SPELLING: Record<string, string>;
-/** How a census key is written when a person is being told to type it. */
-export declare function typedSpelling(verb: string): string;
+export { TYPED_SPELLING, typedSpelling } from "./verb-census-spellings.js";
 /** Verbs that can never have an MCP twin, and why. A claim, not a backlog. */
 export declare const TERMINAL_ONLY: Record<string, string>;
 /**

package/dist/verb-census.js

@@ -15,9 +15,8 @@
  *   re-exports. That file is the authoritative "these are the commands that
  *   talk to Tower" table — its siblings are a filing decision, not a contract.
  * - The VERBS are each noun's `action:` union in `LocalCommand`
- *   (`local-args.ts`), with an `XAction` alias resolved from whichever
- *   `local-args-tower-*.ts` declares it. A noun with no `action` field is one
- *   verb wearing the noun's own name (`jarvis`, `correct`, `workbook`).
+ *   (`local-args.ts`), resolving XAction aliases from the tower parser siblings.
+ *   A noun without an action field is its own verb.
  *
  * ## What it deliberately does NOT see
  *
@@ -30,6 +29,7 @@
 import { readFileSync, readdirSync } from "node:fs";
 import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
+import { MEMORY_STORE_TWINS } from "./memory-twins.js";
 const HERE = dirname(fileURLToPath(import.meta.url));
 export const COLLECTOR_COMMANDS_DIR = resolve(HERE, "../../cockpit-local-collector/src/commands");
 function read(file) {
@@ -59,10 +59,6 @@ function actionAliases() {
     }
     return aliases;
 }
-/**
- * The `LocalCommand` variants, split the way the union is written: one chunk
- * per `  | {` at the top level of the type.
- */
 /**
  * The `LocalCommand` union, wherever it currently lives.
  *
@@ -245,7 +241,11 @@ export const MCP_TWINS = {
     "logs": { tool: "logs_digest", door: "LOCAL @bli-cockpit/telemetry-core/log-digest (this machine's logs); `project` reads GET /api/logs (the stored digests)" },
     "brain status": { tool: "brain_status", door: "GET /api/brain/incidents" },
     "usage sessions": { tool: "usage_sessions", door: "GET /api/usage/sessions" },
+    "setup": { tool: "setup_read", door: "GET /api/setup" },
     "usage people": { tool: "usage_people", door: "GET /api/usage/people" },
+    "glossary list": { tool: "glossary_list", door: "GET /api/glossary" },
+    "glossary add": { tool: "glossary_add", door: "POST /api/glossary" },
+    "glossary remove": { tool: "glossary_remove", door: "POST /api/glossary" },
     "docs list": { tool: "docs_list", door: "GET /api/docs/documents" },
     "docs tree": { tool: "docs_tree", door: "GET /api/docs/tree" },
     "docs read": { tool: "docs_read", door: "GET /api/docs/documents/[id]" },
@@ -313,21 +313,19 @@ export const MCP_TWINS = {
     "notes unshare": { tool: "notes_unshare", door: "POST /api/notes/share (share=false)" },
     "notes move": { tool: "notes_move", door: "POST /api/notes/move" },
     "notes place": { tool: "notes_place", door: "POST /api/notes/place" },
-    // BLI-4383. `notes connect` is in TERMINAL_ONLY below, for the same reason
-    // `mail add-imap` and `cal add-ical` are.
+    // BLI-4383. `notes connect` is in TERMINAL_ONLY below, like `mail add-imap` and `cal add-ical`.
     "notes accounts": { tool: "notes_accounts", door: "GET /api/notes/accounts" },
+    "notes recordings": { tool: "notes_recordings", door: "GET /api/notes/recordings?note_id" },
+    "notes recording": { tool: "notes_recording", door: "GET /api/notes/recordings?recording_id" },
     "notes detach": { tool: "notes_detach", door: "DELETE /api/notes/accounts" },
     "notes sync": { tool: "notes_sync", door: "POST /api/notes/accounts/[id]/sync" },
     "notes sync-status": { tool: "notes_sync_status", door: "GET /api/notes/sync-status" },
     // Ticket 10718: Granola's own cron health, over its shared server-side key.
     "notes granola-status": { tool: "notes_granola_status", door: "GET /api/notes/granola-status" },
     "memory log": { tool: "memory_experience", door: "POST /api/memory/experience" },
-    // BLI-4047: the memory STORE at a terminal. The twins live on the second
-    // server, `bli-memory`, over the same four doors these CLI verbs call.
-    "memory search": { tool: "search_memory", door: "POST /api/memory/search", server: "bli-memory" },
-    "memory save": { tool: "save_memory", door: "POST /api/memory/save", server: "bli-memory" },
-    "memory update": { tool: "update_memory", door: "POST /api/memory/update", server: "bli-memory" },
-    "memory forget": { tool: "forget_memory", door: "POST /api/memory/forget", server: "bli-memory" },
+    // BLI-4047, BLI-12927: the memory STORE at a terminal. Its twins live on the
+    // second server, `bli-memory` (see `memory-twins.ts`).
+    ...MEMORY_STORE_TWINS,
     // BLI-4533: the compiled one-page profile. Its twin is on `bli-tower`, not
     // `bli-memory`: that server's four tools are the vendor-compatible set the
     // Claude Code plugin expects, and this page is ours.
@@ -352,6 +350,7 @@ export const MCP_TWINS = {
     "team device-list": { tool: "team_device_list", door: "GET /api/team/devices" },
     "team invite": { tool: "team_invite", door: "POST /api/team/invite" },
     "team role": { tool: "team_role", door: "PATCH /api/team/members/[userId]/role" },
+    "team device-doctor": { tool: "team_device_doctor", door: "POST /api/ambient/devices/[deviceId]/doctor" },
     "team device-revoke": { tool: "team_device_revoke", door: "POST /api/ambient/devices/[deviceId]/revoke" },
     "model show": { tool: "model_show", door: "GET /api/settings/jarvis-model" },
     "model set": { tool: "model_set", door: "POST /api/settings/jarvis-model" },
@@ -376,52 +375,14 @@ export const MCP_TWINS = {
     // header of this file).
     "jarvis --trace": { tool: "jarvis_trace", door: "GET /api/ops/trace/[id]" },
 };
-/**
- * Census key → what a person actually types. (BLI-4048)
- *
- * The keys above are derived MECHANICALLY from each noun's `action` union, and
- * for two nouns that union is not the grammar. `settings`'s positional is a
- * SECTION (`personal|switches|models|env|cli-floor`) and the `action` is what
- * the parser decides afterwards; `team`'s `device-list` is one action word
- * spelled as two typed words, `team device list`. So `cockpit settings show`
- * and `cockpit team device-list` were rendered into the README's "CLI verb"
- * column and into `cli-caller-identity.md`, and the CLI refused all six.
- *
- * This is the display layer and nothing else: the keys, the twin rule and the
- * suite are untouched. Every spelling here is proven typable —
- * `scripts/doc-doors.test.mjs` runs the rendered table through the collector's
- * own parser, so a wrong entry fails the build rather than misleading a
- * stranger. Where one tool serves several sections (`settings_set` writes any
- * of them) the spelling names ONE of them and the door column names the rest.
- *
- * A verb whose key is already typable is absent from here on purpose; the
- * shorter this map is, the closer the census keys are to the product.
- */
-export const TYPED_SPELLING = {
-    // The action is `invite`; the button, the help wall and the docs all say
-    // send-takehome, so that is what a stranger is told to type.
-    "careers invite": "careers send-takehome",
-    "careers takehome-show": "careers takehome show",
-    "careers takehome-set": "careers takehome set",
-    "careers settings-show": "careers settings show",
-    "careers settings-set": "careers settings set",
-    "settings show": "settings",
-    "settings list": "settings env list",
-    "settings set": "settings switches set",
-    "settings delete": "settings env delete",
-    "team device-list": "team device list",
-    "team device-revoke": "team device revoke",
-};
-/** How a census key is written when a person is being told to type it. */
-export function typedSpelling(verb) {
-    return TYPED_SPELLING[verb] ?? verb;
-}
+// Human command grammar is separate from the mechanical twin census.
+export { TYPED_SPELLING, typedSpelling } from "./verb-census-spellings.js";
 /** Verbs that can never have an MCP twin, and why. A claim, not a backlog. */
 export const TERMINAL_ONLY = {
     "mail add-imap": "carries a Google app password. The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so attaching a mailbox stays a thing a person does at a terminal (BLI-3708)",
     "cal add-ical": "carries a calendar's SECRET iCal ADDRESS — a permanent, unauthenticated, read-anything-on-that-calendar URL. The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so attaching a calendar stays a thing a person does at a terminal (BLI-3709)",
     "brief edit": "opens the person's own $EDITOR on this machine and files what they changed; an agent has no editor to open (commands/editor.ts)",
-    "notes connect": "carries a notetaker API key (Fellow or Circleback). The CLI reads it from STDIN precisely so it never lands in an argument list; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so connecting a notetaker stays a thing a person does at a terminal or in Tower's Settings (BLI-4383)",
+    "notes connect": "carries a notetaker credential: an API key (Fellow or Circleback), or for Wispr Flow a browser sign-in whose refresh token the CLI hands straight to Tower. The CLI reads a key from STDIN precisely so it never lands in an argument list, and a browser sign-in has no tool-call equivalent at all; an MCP tool argument travels through a model's context window and whatever transcript store sits behind it, so connecting a notetaker stays a thing a person does at a terminal or in Tower's Settings (BLI-4383, BLI-12926)",
     "notes webhook": "carries the VENDOR's webhook signing secret, the key an HMAC over every delivered payload is checked against. Exactly the ruling `notes connect` already carries, for the same credential shape: the CLI reads it from STDIN so it never lands in an argument list, and an MCP tool argument travels through a model's context window and whatever transcript store sits behind it (BLI-4394)",
 };
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.95",
+  "version": "0.1.97",
   "private": false,
   "description": "bli-tower: an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",
@@ -37,7 +37,7 @@
     "readme": "npm run build && node scripts/write-readme-census.mjs"
   },
   "dependencies": {
-    "@bli-cockpit/telemetry-core": "0.1.65",
+    "@bli-cockpit/telemetry-core": "0.1.66",
     "@modelcontextprotocol/sdk": "^1.29.0",
     "zod": "^4.3.6"
   },