@bli-cockpit/mcp 0.1.98 → 0.1.101

package/README.md

@@ -109,7 +109,7 @@ about what an agent can reach.
 
 <!-- BEGIN GENERATED verb census — `npm run mcp:readme` -->
 
-**135 of 140 Tower verbs have an MCP twin.**
+**136 of 141 Tower verbs have an MCP twin.**
 Each tool goes through the SAME door its CLI verb calls, with the same
 collector device token — never a second route and never a service-role
 reader. `src/verb-census.test.ts` fails when a verb is in none of the
@@ -191,6 +191,7 @@ three tables below.
 | `cockpit memory profile` | `memory_profile` | `GET /api/memory/profile` |
 | `cockpit memory public` | `set_memory_visibility` (`bli-memory`) | `POST /api/memory/visibility` |
 | `cockpit memory requeue` | `memory_requeue` | `POST /api/memory/requeue` |
+| `cockpit memory rules` | `memory_rules` | `GET /api/memory/rules` |
 | `cockpit memory save` | `save_memory` (`bli-memory`) | `POST /api/memory/save` |
 | `cockpit memory search` | `search_memory` (`bli-memory`) | `POST /api/memory/search` |
 | `cockpit memory update` | `update_memory` (`bli-memory`) | `POST /api/memory/update` |

package/dist/memory-rules-tools.d.ts

@@ -0,0 +1,4 @@
+import { type ToolDeps } from "./tool-result.js";
+export declare function registerMemoryRulesTools(server: {
+    registerTool: (...args: never[]) => unknown;
+}, deps: ToolDeps): void;

package/dist/memory-rules-tools.js

@@ -0,0 +1,25 @@
+import { z } from "zod";
+import { callAgentDoor } from "./agent-door.js";
+import { doorFailureText, errorResult, queryString, registrarFor, textResult, withSession } from "./tool-result.js";
+export function registerMemoryRulesTools(server, deps) {
+    registrarFor(server)("memory_rules", {
+        title: "Read BLI agent ground rules",
+        description: "Standing instructions grouped by whose rule it is, with project and date. Reads only memories visible to you, over the same door as cockpit memory rules. Default 200, max 1000; capped means narrow the filters or increase the bound.",
+        inputSchema: { person: z.string().min(1).optional().describe("Exact roster name, or unattributed for memories with no author."), project: z.string().min(1).optional().describe("Exact project label, for example Pearl Portal or BLI-wide."), limit: z.number().int().min(1).max(1000).optional().describe("Maximum rows, default 200, maximum 1000. A full page is marked capped.") },
+    }, async (args) => withSession(deps, async (session) => {
+        const params = new URLSearchParams();
+        for (const key of ["person", "project", "limit"])
+            if (args[key] !== undefined)
+                params.set(key, String(args[key]));
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", `/api/memory/rules${queryString(params)}`);
+        if (!response.ok)
+            return errorResult(doorFailureText("memory_rules", response));
+        const body = response.body;
+        const lines = body.groups.flatMap((group) => [group.owner, ...group.rules.map((rule) => `[${rule.created_at.slice(0, 10)}] ${rule.project ? `[${rule.project}] ` : ""}${rule.text}${group.owner === "unattributed" ? ` (space: ${rule.container})` : ""}`)]);
+        if (!lines.length)
+            lines.push("No ground rules matched.");
+        if (body.capped)
+            lines.push("Result capped; narrow by person/project or increase limit (max 1000).");
+        return textResult(lines.join("\n"), response.body);
+    }));
+}

package/dist/notes-account-tools.js

@@ -97,16 +97,25 @@ export function registerNotesAccountTools(server, deps) {
             + "alternates, each one's transcript length, its notetaker, and the sentence saying why it holds its role "
             + "(BLI-12926). Open an alternate with `notes_recording`. Read-only; you only see recordings of meetings you "
             + "can already read.",
-        inputSchema: { note_id: z.string().uuid().describe("A note's id, as notes_list returns it.") },
+        inputSchema: {
+            note_id: z.string().uuid().optional().describe("A note id; supply exactly one of note_id or calendar_event_id."),
+            calendar_event_id: z.string().min(1).max(512).optional().describe("Bot outcomes even when no note exists."),
+        },
     }, async (args) => withSession(deps, async (session) => {
-        const response = await callAgentDoor(session, deps.fetchImpl, "GET", `/api/notes/recordings?note_id=${encodeURIComponent(String(args.note_id))}`);
+        if (Boolean(args.note_id) === Boolean(args.calendar_event_id))
+            return errorResult("Supply exactly one of note_id or calendar_event_id.");
+        const response = await callAgentDoor(session, deps.fetchImpl, "GET", args.calendar_event_id
+            ? `/api/notes/recordings?calendar_event_id=${encodeURIComponent(String(args.calendar_event_id))}`
+            : `/api/notes/recordings?note_id=${encodeURIComponent(String(args.note_id))}`);
         if (!response.ok)
             return errorResult(doorFailureText("notes_recordings", response));
         const recordings = (Array.isArray(response.body.recordings) ? response.body.recordings : []);
         const lines = recordings.map((row) => `${row.role === "primary" ? "SHOWN    " : "alternate"}  ${row.source_namespace}  ${row.transcript_chars === null ? "length unknown" : `${row.transcript_chars} chars`}  ${row.started_at ?? "no start time"}  ${row.id}${row.chosen_reason ? `  (${row.chosen_reason})` : ""}`);
+        const missed = (Array.isArray(response.body.missed) ? response.body.missed : []);
+        const outcomes = missed.map((row) => `No bot transcript: ${row.status} (${row.reason}), ${row.started_at}`).join("\n");
         return dataResult(recordings.length === 0
-            ? "No recording is indexed for this note."
-            : `${recordings.length} recording(s) of this meeting.\n${lines.join("\n")}`, { note_id: String(args.note_id), recordings });
+            ? outcomes || "No recording is indexed for this note."
+            : `${recordings.length} recording(s) of this meeting.\n${lines.join("\n")}\n${outcomes}`, { note_id: args.note_id, calendar_event_id: args.calendar_event_id, recordings, missed });
     }));
     register("notes_recording", {
         title: "Open one recording of a meeting",

package/dist/notes-tools.js

@@ -110,7 +110,7 @@ export function registerNotesTools(server, deps) {
         }
         const invited = note.participants.length > 0 ? `\nInvited: ${note.participants.join(", ")}` : "";
         return textResult(`${note.title}\n${note.meetingDate}  ·  ${note.shelf}  ·  ${note.fileName}  ·  ${note.lineCount} lines`
-            + `${invited}\n${note.visibility}${body.audio ? "\nTranscription: " + body.audio.transcription_status : ""}\n\n${note.content}${narrowingNote(body)}`, { scope: body.scope ?? null, note, audio: body.audio ?? null });
+            + `${invited}\n${note.visibility}${body.audio ? "\nTranscription: " + body.audio.transcription_status + (body.audio.transcription_detail ? ` (${body.audio.transcription_detail})` : "") : ""}\n\n${note.content}${narrowingNote(body)}`, { scope: body.scope ?? null, note, audio: body.audio ?? null });
     }));
     register("notes_shelf", {
         title: "Your own Tower notes shelf",

package/dist/notes-write-tools.js

@@ -25,14 +25,26 @@
  * it manages to send one. An MCP client's own deadline may still be shorter —
  * the description says so rather than letting a cut call read as a refusal.
  */
+import { createReadStream } from "node:fs";
 import { readFile, stat } from "node:fs/promises";
 import path from "node:path";
+import { Readable } from "node:stream";
 import { isSecretLikePathSegment } from "@bli-cockpit/telemetry-core";
 import { z } from "zod";
 import { callAgentDoor } from "./agent-door.js";
 import { CONFIRM_INPUT, doorFailureText, errorResult, registrarFor, textResult, unconfirmed, withSession, } from "./tool-result.js";
 /** Mirrors `UPLOADED_NOTE_MAX_BYTES`; a courtesy check, not a second authority. */
 export const NOTE_FILE_MAX_BYTES = 20 * 1024 * 1024;
+/**
+ * Audio over this goes straight to storage and is transcribed in the
+ * background (BLI-12963); at or under it, the upload route takes it. Mirrors
+ * `AUDIO_MAX_BYTES` in the dashboard's `lib/notes/audio.ts`.
+ */
+const AUDIO_INLINE_MAX_BYTES = 4_000_000;
+/** Mirrors the bucket's `file_size_limit`. */
+const AUDIO_DIRECT_MAX_BYTES = 1_000_000_000;
+/** A signed upload URL lives two hours. */
+const STORAGE_PUT_DEADLINE_MS = 2 * 60 * 60 * 1000;
 /** The route's own ceiling is 300 s. Wait past it so its sentence wins. */
 const UPLOAD_DEADLINE_MS = 305_000;
 const WRITE_DEADLINE_MS = 60_000;
@@ -77,13 +89,18 @@ async function readNoteFile(filePath) {
     }
     if (size === 0)
         return refuse("file_empty");
-    if (/\.(mp3|m4a|wav|webm|ogg)$/i.test(fileName) && size > 4_000_000) {
-        return { ok: false, refusal: "file_too_big", sentence: "file_too_large: Audio is limited to 4 MB (4,000,000 bytes)." };
+    if (/\.(mp3|m4a|wav|webm|ogg)$/i.test(fileName)) {
+        if (size > AUDIO_DIRECT_MAX_BYTES) {
+            return { ok: false, refusal: "file_too_big", sentence: "file_too_large: Audio is limited to 1 GB (1,000,000,000 bytes)." };
+        }
+        // Big audio is never read into memory; the upload streams it from disk.
+        if (size > AUDIO_INLINE_MAX_BYTES)
+            return { ok: true, bytes: Buffer.alloc(0), fileName, size, direct: true };
     }
-    if (size > NOTE_FILE_MAX_BYTES)
+    else if (size > NOTE_FILE_MAX_BYTES)
         return refuse("file_too_big");
     try {
-        return { ok: true, bytes: await readFile(filePath), fileName };
+        return { ok: true, bytes: await readFile(filePath), fileName, size, direct: false };
     }
     catch {
         return refuse("file_unreadable");
@@ -108,11 +125,59 @@ async function postForm(deps, session, tool, form) {
         ? textResult(text, { ok: true, noteId: body.noteId ?? null, scope: body.scope ?? null, transcription: body.transcription ?? null })
         : errorResult(text);
 }
+/**
+ * A whole-meeting recording: signed URL from Tower, the file streamed from disk
+ * to storage, then Tower told it is there (BLI-12963). Tower transcribes it in
+ * the background; poll notes_show for `transcription_detail` and the final
+ * transcript. The storage PUT carries the signed URL only, never the device
+ * token.
+ */
+async function postAudioDirect(deps, session, read, filePath, mediaType, extras) {
+    const target = await callAgentDoor(session, deps.fetchImpl, "POST", "/api/notes/audio/target", { file_name: read.fileName, bytes: read.size, media_type: mediaType }, WRITE_DEADLINE_MS);
+    if (!target.ok)
+        return errorResult(doorFailureText("notes_upload", target));
+    const issued = target.body;
+    if (!issued.objectKey || !issued.upload?.url) {
+        return errorResult("Refused (target_unreadable): Tower answered without an upload link. Nothing was stored.");
+    }
+    let put;
+    try {
+        put = await deps.fetchImpl(issued.upload.url, {
+            method: issued.upload.method ?? "PUT",
+            headers: { ...(issued.upload.headers ?? {}), "content-length": String(read.size) },
+            body: Readable.toWeb(createReadStream(filePath)),
+            duplex: "half",
+            signal: AbortSignal.timeout(STORAGE_PUT_DEADLINE_MS),
+        });
+    }
+    catch (error) {
+        console.error("[notes_upload] storage put failed", JSON.stringify({ reason: "storage_unreachable", bytes: read.size, error_name: error?.name ?? "Error" }));
+        return errorResult("Refused (storage_unreachable): could not reach storage to upload the file. Nothing was saved; try again.");
+    }
+    if (!put.ok) {
+        console.error("[notes_upload] storage put refused", JSON.stringify({ reason: `storage_http_${put.status}`, bytes: read.size }));
+        return errorResult(put.status === 413
+            ? "Refused (storage_http_413): storage refused the file as too large. An admin may need to raise the project's storage file size limit."
+            : `Refused (storage_http_${put.status}): storage refused the upload. Nothing was saved; try again.`);
+    }
+    const saved = await callAgentDoor(session, deps.fetchImpl, "POST", "/api/notes/audio/saved", {
+        object_key: issued.objectKey, file_name: read.fileName,
+        ...(extras.exclude ? { exclusions: extras.exclude } : {}),
+        ...(extras.folder ? { folder_path: extras.folder } : {}),
+    }, WRITE_DEADLINE_MS);
+    if (!saved.ok)
+        return errorResult(doorFailureText("notes_upload", saved));
+    const body = saved.body;
+    const text = saidByTower(body);
+    return body.stored === true
+        ? textResult(text, { ok: true, noteId: body.noteId ?? null, scope: body.scope ?? null, transcription: body.transcription ?? null })
+        : errorResult(text);
+}
 export function registerNotesWriteTools(server, deps) {
     const register = registrarFor(server);
     register("notes_upload", {
         title: "Put a local file in as a Tower meeting note",
-        description: "Uploads a transcript, note, or MP3/M4A/WAV/WebM/OGG audio file from this machine. Audio is limited to 4 MB and returns a note id plus transcription status immediately. Poll notes_show for completion. "
+        description: "Uploads a transcript, note, or MP3/M4A/WAV/WebM/OGG audio file from this machine. Audio up to 4 MB goes through the upload door; a longer recording (up to 1 GB, a whole meeting) is sent straight to storage and transcribed in the background. Either way it returns a note id plus transcription status immediately. Poll notes_show for completion and progress (a long meeting takes several minutes). "
             + "A name that looks like a key or credential file is refused without being opened; so is a missing, empty or "
             + "over-20-MB file. Tower reads the whole note with one model call, so a large file can take a couple of "
             + "minutes and your client may give up first — the upload keeps going; notes_list will show it.",
@@ -131,9 +196,15 @@ export function registerNotesWriteTools(server, deps) {
         const read = await readNoteFile(filePath);
         if (!read.ok)
             return errorResult(`Refused (${read.refusal}): ${read.sentence} Nothing was sent.`);
-        const form = new FormData();
         const audioTypes = { mp3: "audio/mpeg", m4a: "audio/mp4", wav: "audio/wav", webm: "audio/webm", ogg: "audio/ogg" };
         const mediaType = audioTypes[path.extname(read.fileName).slice(1).toLowerCase()] ?? "";
+        if (read.direct) {
+            return postAudioDirect(deps, session, read, filePath, mediaType, {
+                ...(args.exclude ? { exclude: String(args.exclude) } : {}),
+                ...(args.folder ? { folder: String(args.folder) } : {}),
+            });
+        }
+        const form = new FormData();
         form.set("file", new File([new Uint8Array(read.bytes)], read.fileName, { type: mediaType }));
         if (args.exclude)
             form.set("exclusions", String(args.exclude));

package/dist/server.js

@@ -21,6 +21,7 @@ import { registerNotesGranolaStatusTool } from "./notes-granola-status-tool.js";
 import { registerNotesWriteTools } from "./notes-write-tools.js";
 import { registerMemoryConsolidationTools } from "./memory-consolidation-tools.js";
 import { registerMemoryExperienceTools } from "./memory-experience-tools.js";
+import { registerMemoryRulesTools } from "./memory-rules-tools.js";
 import { registerMemoryProfileTools } from "./memory-profile-tools.js";
 import { registerMemoryRequeueTools } from "./memory-requeue-tools.js";
 import { registerModelsTools } from "./models-tools.js";
@@ -475,6 +476,7 @@ export function createServer(deps, options = {}) {
     registerNotesGranolaStatusTool(server, { fetchImpl: deps.fetchImpl });
     registerOpsTools(server, { fetchImpl: deps.fetchImpl });
     registerMemoryExperienceTools(server, { fetchImpl: deps.fetchImpl });
+    registerMemoryRulesTools(server, { fetchImpl: deps.fetchImpl });
     // BLI-4533: the compiled one-page profile, the twin of `cockpit memory profile`.
     registerMemoryProfileTools(server, { fetchImpl: deps.fetchImpl });
     // BLI-4534: the nightly consolidation receipts, twin of `cockpit memory

package/dist/tool-catalog.d.ts

@@ -10,7 +10,7 @@
  * from `src/` under Node's type stripping, so it may import nothing.
  */
 /** Tools that change nothing. The smoke calls every one. */
-export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "rename_pending", "github_pr", "setup_read", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "glossary_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_recordings", "notes_recording", "notes_sync_status", "notes_granola_status", "ops_status", "slack_coverage", "slack_read", "memory_profile", "memory_consolidation", "settings_show", "settings_list", "model_show", "team_members", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check", "logs_digest", "brain_status"];
+export declare const READ_TOOLS: readonly ["get_ticket_timeline", "get_active_tickets", "docs_list", "docs_tree", "docs_read", "docs_sync_status", "msg_channels", "msg_read", "msg_thread", "work_list_issues", "work_get_issue", "work_issue_history", "work_list_projects", "careers_list", "careers_show", "careers_resume_url", "careers_takehome_show", "careers_settings_show", "rename_pending", "github_pr", "setup_read", "usage_people", "usage_sessions", "mail_accounts", "mail_inbox", "mail_read", "mail_search", "mail_attachment", "mail_sync_status", "cal_today", "cal_week", "cal_next", "cal_find", "cal_calendars", "cal_sync_status", "jarvis_ask", "jarvis_trace", "jarvis_check", "models_list", "models_card", "models_compare", "brief_read", "brief_history", "brief_status", "brief_missed", "notes_folders", "notes_list", "glossary_list", "notes_show", "notes_shelf", "notes_shelves", "notes_place", "notes_accounts", "notes_recordings", "notes_recording", "notes_sync_status", "notes_granola_status", "ops_status", "slack_coverage", "slack_read", "memory_rules", "memory_profile", "memory_consolidation", "settings_show", "settings_list", "model_show", "team_members", "team_device_list", "scout_board", "workbook_read", "tower_search", "sources_check", "logs_digest", "brain_status"];
 /**
  * Tools that write, but answer a dry run that writes nothing. The smoke calls
  * each one ONLY with its dry-run flag set (`scripts/smoke.ts` says which).

package/dist/tool-catalog.js

@@ -72,6 +72,7 @@ export const READ_TOOLS = [
     "ops_status",
     "slack_coverage",
     "slack_read",
+    "memory_rules",
     "memory_profile",
     "memory_consolidation",
     "settings_show",

package/dist/verb-census.js

@@ -329,6 +329,7 @@ export const MCP_TWINS = {
     // BLI-4533: the compiled one-page profile. Its twin is on `bli-tower`, not
     // `bli-memory`: that server's four tools are the vendor-compatible set the
     // Claude Code plugin expects, and this page is ours.
+    "memory rules": { tool: "memory_rules", door: "GET /api/memory/rules" },
     "memory profile": { tool: "memory_profile", door: "GET /api/memory/profile" },
     // BLI-4534: the nightly consolidation receipts. This twin lives on
     // `bli-tower` rather than `bli-memory`, because it is a read of a JOB s

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bli-cockpit/mcp",
-  "version": "0.1.98",
+  "version": "0.1.101",
   "private": false,
   "description": "bli-tower: an MCP server over BLI Cockpit's agent doors: JARVIS (jarvis_*), documents (docs_*), channels (msg_*), issues (work_*), the daily page (brief_*), meeting notes (notes_*), the ops board (ops_status/slack_*), settings/team/model, Scout and the workbook, plus the legacy event-stream tools (emit_event, get_ticket_timeline, get_active_tickets).",
   "type": "module",