@nuvlore/extension-bds 0.1.1

package/tools/bds_information_source_knowledge.mjs

@@ -0,0 +1,356 @@
+export const description = "Return read-only BDS information-source collection guidance across logs, dashboards, tickets, repos, incidents, and collaboration systems.";
+
+import { z } from "zod";
+import { defineReadOnlyTool, fail, ok } from "@nuvlore/extension-read-only-toolkit/devops-diagnostics";
+
+export const BDS_INFORMATION_SOURCES = {
+  private_cloud_host_logs: {
+    purpose: "Private-cloud host and service log discovery through Boundary plus read-only sudo.",
+    tools: [
+      "workday_boundary_login",
+      "bds_environment_host_lookup",
+      "bds_log_path_knowledge",
+      "workday_private_cloud_sudo_readonly_command"
+    ],
+    examples: [
+      "bds_environment_host_lookup({ environment, cluster, roles })",
+      "bds_log_path_knowledge({ machineType: \"hdfs\" })",
+      "workday_private_cloud_sudo_readonly_command({ host, command: \"sudo tail -n 200 <path>\", humanApprovedSudoRead: true })"
+    ]
+  },
+  public_cloud_pod_logs: {
+    purpose: "Public-cloud Kubernetes pod, deployment, statefulset, and sidecar log collection.",
+    tools: [
+      "workday_public_cloud_spc_login",
+      "workday_spc_argo_readonly_command_pack",
+      "bds_log_path_knowledge"
+    ],
+    examples: [
+      "workday_public_cloud_spc_login({ action: \"login\", cluster })",
+      "kubectl logs -n <namespace> <pod> -c <container> --since=<window>",
+      "kubectl logs -n <namespace> <pod> -c <sidecar-container> --previous --since=<window>"
+    ]
+  },
+  hadoop_stack: {
+    purpose: "HDFS, YARN, Hadoop KMS, ZooKeeper, MapReduce history, Spark history, and application logs.",
+    tools: [
+      "bds_log_path_knowledge",
+      "bds_yarn_app_health_command_pack",
+      "workday_private_cloud_sudo_readonly_command"
+    ],
+    examples: [
+      "bds_log_path_knowledge({ machineType: \"hdfs\" })",
+      "bds_log_path_knowledge({ machineType: \"spark history server\" })",
+      "yarn logs -applicationId <applicationId>"
+    ]
+  },
+  airflow: {
+    purpose: "Airflow scheduler, webserver, worker, DAG run, task, retry, tenant clone, DR pull, finalizer, and tenant data operation log collection.",
+    tools: [
+      "bds_airflow_job_status_command_pack",
+      "bds_log_path_knowledge",
+      "workday_private_cloud_sudo_readonly_command"
+    ],
+    examples: [
+      "bds_airflow_job_status_command_pack({ dagId, taskId, runId })",
+      "bds_log_path_knowledge({ machineType: \"airflow dag\" })",
+      "bds_log_path_knowledge({ machineType: \"tenant clone\" })",
+      "tail -n 200 /data/workday-bds-airflow/logs/<dag_id>/<run_id>/<task_id>/<try_number>.log"
+    ]
+  },
+  bds_services: {
+    purpose: "BDM, BAS status/API/DB evidence, service proxy, migration service, and BDS portal operation context. Current tenant clone, DR, finalizer, and tenant data operation execution logs are Airflow/Kubernetes evidence, not Oozie workflow evidence.",
+    tools: [
+      "bds_log_path_knowledge",
+      "bds_tenant_data_operation_log_command_pack",
+      "bds_migration_service_operation_command_pack",
+      "bds_portal_operation_knowledge",
+      "bds_scylla_tenant_bucket_command_pack"
+    ],
+    examples: [
+      "bds_log_path_knowledge({ machineType: \"bdm\" })",
+      "bds_log_path_knowledge({ machineType: \"bas\" })",
+      "bds_log_path_knowledge({ machineType: \"tenant data operation\" })",
+      "bds_tenant_data_operation_log_command_pack({ tenantName, environmentName })"
+    ]
+  },
+  automation_runs: {
+    purpose: "SPAS-MT, Chef cookbook, and Ansible playbook logs from hosts, runners, or pods.",
+    tools: [
+      "bds_log_path_knowledge",
+      "workday_private_cloud_sudo_readonly_command",
+      "workday_public_cloud_spc_login"
+    ],
+    examples: [
+      "bds_log_path_knowledge({ machineType: \"spas-mt\" })",
+      "bds_log_path_knowledge({ machineType: \"chef cookbook\" })",
+      "bds_log_path_knowledge({ machineType: \"ansible playbook\" })"
+    ]
+  },
+  pharos: {
+    purpose: "Pharos service reads, searches, health, datasources, and BDS Pharos query packs.",
+    tools: [
+      "pharos_sso_read",
+      "pharos_sso_search",
+      "pharos_sso_health",
+      "pharos_sso_datasources",
+      "bds_pharos_query_pack"
+    ],
+    examples: [
+      "pharos_sso_search({ query })",
+      "bds_pharos_query_pack({ cluster, metric })"
+    ]
+  },
+  grafana_prometheus: {
+    purpose: "Grafana dashboard discovery, dashboard reads, and Prometheus-style metric query planning.",
+    tools: [
+      "dashboard_sso_discover",
+      "dashboard_sso_read",
+      "dashboard_sso_path",
+      "bds_dashboard_links",
+      "bds_dashboard_query_read",
+      "bds_dashboard_query_knowledge"
+    ],
+    examples: [
+      "bds_dashboard_links({ cluster })",
+      "bds_dashboard_query_read({ dashboardUrl, query })"
+    ]
+  },
+  slack: {
+    purpose: "Slack message, bot history, AI capability, and Okta sync status reads.",
+    tools: [
+      "slack_okta_search_messages",
+      "slack_okta_bot_history",
+      "slack_okta_ai_capabilities",
+      "slack_okta_sync_status"
+    ],
+    examples: [
+      "slack_okta_search_messages({ query })",
+      "slack_okta_bot_history({ channel, threadTs })"
+    ]
+  },
+  sana_meetings: {
+    purpose: "Sana meeting, transcript, summary, action-item, and related meeting context reads through the Workday Okta Sana access path.",
+    tools: [
+      "okta_sana_okta_read",
+      "okta_sana_ask",
+      "slack_okta_search_messages",
+      "confluence_sso_search",
+      "jira_sso_search"
+    ],
+    examples: [
+      "okta_sana_okta_read({ pathOrUrl })",
+      "okta_sana_ask({ question })",
+      "slack_okta_search_messages({ query: \"<meeting title or participant>\" })"
+    ]
+  },
+  confluence: {
+    purpose: "Confluence spaces, pages, content, and search reads for operational docs and handoffs.",
+    tools: [
+      "confluence_sso_search",
+      "confluence_sso_read",
+      "confluence_sso_content",
+      "confluence_sso_space_content",
+      "confluence_handoff_page_draft"
+    ],
+    examples: [
+      "confluence_sso_search({ query })",
+      "confluence_sso_content({ contentId })"
+    ]
+  },
+  jira: {
+    purpose: "Jira issue, project, version, search, and user metadata reads.",
+    tools: [
+      "jira_sso_search",
+      "jira_sso_issue",
+      "jira_sso_project",
+      "jira_sso_project_versions",
+      "jira_sso_user_assignable_search"
+    ],
+    examples: [
+      "jira_sso_search({ jql })",
+      "jira_sso_issue({ issueKey })"
+    ]
+  },
+  bitbucket: {
+    purpose: "Bitbucket repository, branch, commit, pull request, and project reads.",
+    tools: [
+      "bitbucket_sso_read",
+      "bitbucket_sso_repo",
+      "bitbucket_sso_repos",
+      "bitbucket_sso_commits",
+      "bitbucket_sso_pull_request",
+      "bitbucket_sso_pull_requests"
+    ],
+    examples: [
+      "bitbucket_sso_repo({ projectKey, repoSlug })",
+      "bitbucket_sso_pull_request({ projectKey, repoSlug, pullRequestId })"
+    ]
+  },
+  bamboo: {
+    purpose: "Bamboo plan, result, latest-result, plan-results, and RCA evidence reads.",
+    tools: [
+      "bamboo_sso_plan",
+      "bamboo_sso_result",
+      "bamboo_sso_latest_result",
+      "bamboo_sso_plan_results",
+      "bamboo_result_query_paths",
+      "bamboo_rca_evidence_read"
+    ],
+    examples: [
+      "bamboo_sso_result({ planKey, resultNumber })",
+      "bamboo_result_query_paths({ bambooUrl })"
+    ]
+  },
+  pagerduty: {
+    purpose: "PagerDuty incidents, incident detail, services, and on-call reads.",
+    tools: [
+      "pagerduty_sso_incidents",
+      "pagerduty_sso_incident",
+      "pagerduty_sso_services",
+      "pagerduty_sso_oncalls"
+    ],
+    examples: [
+      "pagerduty_sso_incidents({ query })",
+      "pagerduty_sso_oncalls({ scheduleOrEscalationPolicy })"
+    ]
+  },
+  toolcity: {
+    purpose: "ToolCity context should start from Workday SSO/Okta app access plus repository or documentation discovery until a dedicated ToolCity reader exists.",
+    tools: [
+      "workday_okta_login",
+      "repository_sso_read",
+      "repository_sso_search_gavc",
+      "confluence_sso_search"
+    ],
+    examples: [
+      "confluence_sso_search({ query: \"ToolCity <service or error>\" })",
+      "repository_sso_search_gavc({ query: \"toolcity\" })"
+    ]
+  }
+};
+
+export const BDS_INFORMATION_SOURCE_ALIASES = {
+  host: "private_cloud_host_logs",
+  host_logs: "private_cloud_host_logs",
+  private_cloud: "private_cloud_host_logs",
+  private_cloud_logs: "private_cloud_host_logs",
+  pod: "public_cloud_pod_logs",
+  pod_logs: "public_cloud_pod_logs",
+  pods: "public_cloud_pod_logs",
+  sidecar: "public_cloud_pod_logs",
+  side_car: "public_cloud_pod_logs",
+  public_cloud: "public_cloud_pod_logs",
+  public_cloud_logs: "public_cloud_pod_logs",
+  hadoop: "hadoop_stack",
+  hdfs: "hadoop_stack",
+  yarn: "hadoop_stack",
+  spark: "hadoop_stack",
+  spark_history_server: "hadoop_stack",
+  zookeeper: "hadoop_stack",
+  kms: "hadoop_stack",
+  airflow_dag: "airflow",
+  dag: "airflow",
+  tenant_data: "airflow",
+  tenant_data_operation: "airflow",
+  tenant_data_operations: "airflow",
+  tenant_clone: "airflow",
+  tenant_clone_dr: "airflow",
+  tenant_dr: "airflow",
+  dr_pull: "airflow",
+  finalizer: "airflow",
+  bdm: "bds_services",
+  bas: "bds_services",
+  service_proxy: "bds_services",
+  spas_mt: "automation_runs",
+  spasmt: "automation_runs",
+  chef: "automation_runs",
+  cookbook: "automation_runs",
+  chef_cookbook: "automation_runs",
+  ansible: "automation_runs",
+  playbook: "automation_runs",
+  ansible_playbook: "automation_runs",
+  grafana: "grafana_prometheus",
+  prometheus: "grafana_prometheus",
+  promethus: "grafana_prometheus",
+  dashboard: "grafana_prometheus",
+  confluence: "confluence",
+  conflucen: "confluence",
+  bitbucket: "bitbucket",
+  bamboo: "bamboo",
+  pagerduty: "pagerduty",
+  pager_duty: "pagerduty",
+  sana: "sana_meetings",
+  sana_meeting: "sana_meetings",
+  sana_meetings: "sana_meetings",
+  meetings: "sana_meetings",
+  meeting_logs: "sana_meetings",
+  transcript: "sana_meetings",
+  transcripts: "sana_meetings"
+};
+
+function normalizeText(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+
+function normalizeSource(value) {
+  return normalizeText(value).toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+}
+
+export class BdsInformationSourceKnowledgeService {
+  constructor({ sources = BDS_INFORMATION_SOURCES, aliases = BDS_INFORMATION_SOURCE_ALIASES } = {}) {
+    this.sources = sources;
+    this.aliases = aliases;
+  }
+
+  resolveSource(value) {
+    const normalized = normalizeSource(value);
+    return this.aliases[normalized] ?? normalized;
+  }
+
+  invoke(input) {
+    const requestedSource = normalizeSource(input.source);
+    const resolvedSource = this.resolveSource(input.source);
+    const entries = resolvedSource ? { [resolvedSource]: this.sources[resolvedSource] ?? null } : this.sources;
+    return JSON.stringify({
+      source: requestedSource,
+      resolvedSource,
+      entries,
+      note: "This is a read-only collection catalog. It identifies existing read tools and safe inspection commands; it does not grant credentials or perform writes."
+    }, null, 2);
+  }
+}
+
+const defaultService = new BdsInformationSourceKnowledgeService();
+
+export function bdsInformationSourceKnowledge(input) {
+  return defaultService.invoke(input);
+}
+
+export const __test = {
+  BDS_INFORMATION_SOURCES,
+  BDS_INFORMATION_SOURCE_ALIASES,
+  BdsInformationSourceKnowledgeService,
+  bdsInformationSourceKnowledge
+};
+
+const sharedTool = defineReadOnlyTool({
+  name: "bds_information_source_knowledge",
+  description: "Return read-only BDS information-source collection guidance across logs, dashboards, tickets, repos, incidents, and collaboration systems.",
+  inputSchema: {
+    source: z.string().trim().max(128).default("")
+  },
+  async handler(input) {
+    try { return ok(defaultService.invoke(input)); } catch (error) { return fail(error); }
+  }
+});
+
+export default {
+  name: sharedTool.name,
+  description,
+  inputSchema: sharedTool.inputSchema,
+  meta: sharedTool.meta,
+  annotations: sharedTool.annotations,
+  invoke: sharedTool.invoke,
+  handler: sharedTool.handler
+};

package/tools/bds_kms_log_read.mjs

@@ -0,0 +1,23 @@
+export const description = "Read Hadoop KMS audit logs from a private-cloud KMS/admin host through the approved Boundary sudo read tool.";
+
+import { createPrivateCloudLogReadTool, globPrivateLogSpec } from "../src/bds-atomic-log-tools.mjs";
+
+const spec = globPrivateLogSpec({
+  toolName: "bds_kms_log_read",
+  description: "Read Hadoop KMS audit logs from a private-cloud KMS/admin host through the approved Boundary sudo read tool.",
+  glob: "/var/log/hadoop-kms/kms-audit.log"
+});
+
+export const __test = spec;
+
+const sharedTool = createPrivateCloudLogReadTool(spec);
+
+export default {
+  name: sharedTool.name,
+  description,
+  inputSchema: sharedTool.inputSchema,
+  meta: sharedTool.meta,
+  annotations: sharedTool.annotations,
+  invoke: sharedTool.invoke,
+  handler: sharedTool.handler
+};

package/tools/bds_log_path_knowledge.mjs

@@ -0,0 +1,267 @@
+export const description = "Return static BDS server-type log path guidance for read-only host inspection planning.";
+
+import { z } from "zod";
+import { defineReadOnlyTool, fail, ok } from "@nuvlore/extension-read-only-toolkit/devops-diagnostics";
+
+export const BDS_LOG_PATHS = {
+  bdm: [
+    "kcsb logs deploy/bdm -c bdm --since=<window>",
+    "kcsb logs statefulset/bdm -c bdm --since=<window>",
+    "kcsb logs <bdm-pod> -c bdm --since=<window>",
+    "/var/log/httpd/access.log",
+    "/var/log/httpd/error.log"
+  ],
+  bas: [
+    "kcsb logs deploy/bas -c bas --since=<window>",
+    "kcsb logs <bas-pod> -c bas --since=<window>",
+    "/data/workday-bas/logs/bas.log"
+  ],
+  kms: ["/var/log/hadoop-kms/kms-audit.log", "/var/log/hadoop-kms/*.log"],
+  resource_manager: [
+    "/var/log/hadoop-yarn/yarn-yarn-resourcemanager-*.log",
+    "/var/log/hadoop-yarn/yarn-yarn-resourcemanager-*.out"
+  ],
+  node_manager: [
+    "/var/log/hadoop-yarn/yarn-yarn-nodemanager-*.log",
+    "/var/log/hadoop-yarn/yarn-yarn-nodemanager-*.out"
+  ],
+  name_node: [
+    "/var/log/hadoop-hdfs/hadoop-hdfs-namenode-*.log",
+    "/var/log/hadoop-hdfs/hadoop-hdfs-namenode-*.out"
+  ],
+  data_node: [
+    "/var/log/hadoop-hdfs/hadoop-hdfs-datanode-*.log",
+    "/var/log/hadoop-hdfs/hadoop-hdfs-datanode-*.out"
+  ],
+  journal_node: ["/var/log/hadoop-hdfs/hadoop-hdfs-journalnode-*.log", "/var/log/hadoop-hdfs/hadoop-hdfs-journalnode-*.out"],
+  zkfc: ["/var/log/hadoop-hdfs/hadoop-hdfs-zkfc-*.log", "/var/log/hadoop-hdfs/hadoop-hdfs-zkfc-*.out"],
+  hdfs: [
+    "/var/log/hadoop-hdfs/hadoop-hdfs-namenode-*.log",
+    "/var/log/hadoop-hdfs/hadoop-hdfs-datanode-*.log",
+    "/var/log/hadoop-hdfs/hadoop-hdfs-journalnode-*.log",
+    "/var/log/hadoop-hdfs/hadoop-hdfs-zkfc-*.log",
+    "/var/log/hadoop-hdfs/hdfs-audit.log"
+  ],
+  yarn: [
+    "/var/log/hadoop-yarn/yarn-yarn-resourcemanager-*.log",
+    "/var/log/hadoop-yarn/yarn-yarn-nodemanager-*.log",
+    "/var/log/hadoop-yarn/yarn-yarn-timelineserver-*.log",
+    "yarn logs -show_application_log_info -applicationId <applicationId>",
+    "yarn logs -applicationId <applicationId>"
+  ],
+  hadoop: [
+    "/var/log/hadoop-hdfs/*.log",
+    "/var/log/hadoop-yarn/*.log",
+    "/var/log/hadoop-mapreduce/*.log",
+    "/var/log/hadoop-kms/*.log"
+  ],
+  application: [
+    "yarn logs -show_application_log_info -applicationId <applicationId>",
+    "yarn logs -applicationId <applicationId>",
+    "hdfs dfs -ls /app-logs/<owner>/logs/<applicationId>",
+    "hdfs dfs -ls /app-logs/<owner>/logs-tfile/<applicationId>",
+    "hdfs dfs -ls /app-logs/<owner>/bucket-logs-tfile/<last4>/<applicationId>"
+  ],
+  mapreduce_history_server: ["/var/log/hadoop-mapreduce/mapred-mapred-historyserver-*.log", "/var/log/hadoop-mapreduce/mapred-mapred-historyserver-*.out"],
+  spark_history_server: [
+    "private cloud: kubectl logs -n bds-k8s-services <bds-shs-pod> -c bds-shs --tail=<lines>",
+    "public cloud: kubectl logs -n bds <bds-shs-pod> -c bds-shs --tail=<lines>"
+  ],
+  spark_application: [
+    "yarn logs -applicationId <applicationId>",
+    "hdfs dfs -ls <spark.eventLog.dir>",
+    "hdfs dfs -cat <spark.eventLog.dir>/<applicationId>*"
+  ],
+  airflow: [
+    "/hadoop/disk2/workday-bds-airflow/logs/scheduler/<yyyy-mm-dd>/<dag_id>.py.log",
+    "/hadoop/disk2/workday-bds-airflow/logs/<dag_id>/<run_id>/<task_id>/<try_number>.log",
+    "/data/workday-bds-airflow/logs/scheduler/<yyyy-mm-dd>/<dag_id>.py.log",
+    "/data/airflow/logs/<dag_id>/<run_id>/<task_id>/<try_number>.log",
+    "kcsb logs deploy/airflow-scheduler -c scheduler --since=<window>",
+    "kcsb logs deploy/airflow-webserver -c webserver --since=<window>",
+    "kcsb logs <airflow-worker-pod> -c worker --since=<window>"
+  ],
+  airflow_dag: [
+    "/hadoop/disk2/workday-bds-airflow/logs/scheduler/<yyyy-mm-dd>/<dag_id>.py.log",
+    "/hadoop/disk2/workday-bds-airflow/logs/<dag_id>/<run_id>/<task_id>/<try_number>.log",
+    "/data/workday-bds-airflow/logs/scheduler/<yyyy-mm-dd>/<dag_id>.py.log",
+    "airflow tasks logs <dag_id> <task_id> <run_id> --try-number <try_number>",
+    "airflow dags list-runs -d <dag_id>",
+    "airflow tasks states-for-dag-run <dag_id> <run_id>"
+  ],
+  tenant_data_operation: [
+    "/hadoop/disk2/workday-bds-airflow/logs/dag_tenant_data_copy_on_demand.py.log",
+    "/hadoop/disk2/workday-bds-airflow/logs/dag_tenant_data_dr_pull.py.log",
+    "/hadoop/disk2/workday-bds-airflow/logs/dag_tenant_data_finalizer.py.log",
+    "/hadoop/disk2/workday-bds-airflow/logs/dag_service_data_finalizer.py.log",
+    "/hadoop/disk2/workday-bds-airflow/logs/dag_tenant_data_copy_on_demand/<run_id>/run_tenant_data_ondemand_restore_copy/<try_number>.log",
+    "kubectl -n airflow logs deploy/airflow-scheduler --since=<window>",
+    "kubectl -n airflow logs deploy/airflow-webserver --since=<window>",
+    "kubectl -n airflow logs <dag-task-pod> --tail=-1",
+    "kubectl -n airflow get pods -o wide | grep -E 'dag-tenant-data|tenant-data|drpull|finalizer|copy'",
+    "airflow dags list-runs -d dag_tenant_data_copy_on_demand -s <start-date>",
+    "airflow dags list-runs -d dag_tenant_data_dr_pull -s <start-date>"
+  ],
+  zookeeper: ["/var/log/zookeeper/zookeeper-zookeeper-server-*.log"],
+  oozie: ["LEGACY only for retired Oozie workflows; current tenant clone, DR, and tenant data operations run through Airflow.", "/var/log/oozie/oozie.log"],
+  mysql: ["/var/log/mysql/error.log", "/var/log/mysqld.log"],
+  ldap: ["/var/log/dirsrv/slapd-*/errors", "/var/log/dirsrv/slapd-*/access"],
+  service_proxy: ["/var/log/haproxy.log"],
+  public_cloud_pod: [
+    "kubectl logs -n <namespace> <pod> -c <container> --since=<window>",
+    "kubectl logs -n <namespace> deploy/<deployment> -c <container> --since=<window>",
+    "kubectl logs -n <namespace> statefulset/<statefulset> -c <container> --since=<window>",
+    "kubectl logs -n <namespace> <pod> -c <sidecar-container> --previous --since=<window>",
+    "kubectl describe pod -n <namespace> <pod>"
+  ],
+  sidecar: [
+    "kubectl get pod -n <namespace> <pod> -o jsonpath='{.spec.containers[*].name}'",
+    "kubectl logs -n <namespace> <pod> -c <sidecar-container> --since=<window>",
+    "kubectl logs -n <namespace> <pod> -c <sidecar-container> --previous --since=<window>"
+  ],
+  spas_mt: [
+    "/data/workday-spas-mt/1.0.0/log/spas.log",
+    "kcsb logs deploy/spas-mt -c spas-mt --since=<window>",
+    "kubectl logs -n <namespace> deploy/spas-mt -c spas-mt --since=<window>"
+  ],
+  chef_cookbook: [
+    "/var/log/chef/client.log",
+    "/var/chef/cache/chef-stacktrace.out",
+    "/var/chef/cache/cookbooks/<cookbook>/",
+    "sudo chef-client --why-run"
+  ],
+  ansible_playbook: [
+    "/var/log/ansible.log",
+    "<workspace-or-runner>/ansible.log",
+    "<workspace-or-runner>/*.retry",
+    "ansible-playbook <playbook>.yml --check --diff"
+  ]
+};
+
+export const BDS_LOG_TYPE_ALIASES = {
+  app: "application",
+  apps: "application",
+  yarn_app: "application",
+  application_log: "application",
+  applications: "application",
+  rm: "resource_manager",
+  resourcemanager: "resource_manager",
+  yarn_rm: "resource_manager",
+  nm: "node_manager",
+  nodemanager: "node_manager",
+  yarn_nm: "node_manager",
+  nn: "name_node",
+  namenode: "name_node",
+  hdfs_namenode: "name_node",
+  dn: "data_node",
+  datanode: "data_node",
+  hdfs_datanode: "data_node",
+  jn: "journal_node",
+  journalnode: "journal_node",
+  jobhistory: "mapreduce_history_server",
+  history_server: "mapreduce_history_server",
+  mapred_history_server: "mapreduce_history_server",
+  spark_history: "spark_history_server",
+  spark_history_server: "spark_history_server",
+  shs: "spark_history_server",
+  spark: "spark_application",
+  spark_app: "spark_application",
+  airflow_logs: "airflow",
+  airflow_task: "airflow_dag",
+  dag: "airflow_dag",
+  tenant_data: "tenant_data_operation",
+  tenant_data_operation: "tenant_data_operation",
+  tenant_data_operations: "tenant_data_operation",
+  tenant_clone: "tenant_data_operation",
+  clone: "tenant_data_operation",
+  dr_pull: "tenant_data_operation",
+  tenant_dr: "tenant_data_operation",
+  finalizer: "tenant_data_operation",
+  zk: "zookeeper",
+  zookeeper_server: "zookeeper",
+  serviceproxy: "service_proxy",
+  bds_service_proxy: "service_proxy",
+  pod: "public_cloud_pod",
+  pods: "public_cloud_pod",
+  kubernetes_pod: "public_cloud_pod",
+  public_cloud_pods: "public_cloud_pod",
+  k8s: "public_cloud_pod",
+  k8s_pod: "public_cloud_pod",
+  side_car: "sidecar",
+  sidecars: "sidecar",
+  spasmt: "spas_mt",
+  chef: "chef_cookbook",
+  chef_log: "chef_cookbook",
+  cookbook: "chef_cookbook",
+  ansible: "ansible_playbook",
+  playbook: "ansible_playbook"
+};
+
+function normalizeText(value) {
+  return typeof value === "string" ? value.trim() : "";
+}
+
+function normalizeType(value) {
+  return normalizeText(value).toLowerCase().replace(/[^a-z0-9]+/g, "_").replace(/^_+|_+$/g, "");
+}
+
+export class BdsLogPathKnowledgeService {
+  constructor({ paths = BDS_LOG_PATHS } = {}) {
+    this.paths = paths;
+  }
+
+  normalizeType(value) {
+    return normalizeType(value);
+  }
+
+  resolveType(value) {
+    const normalized = this.normalizeType(value);
+    return BDS_LOG_TYPE_ALIASES[normalized] ?? normalized;
+  }
+
+  invoke(input) {
+    const requestedType = this.normalizeType(input.machineType);
+    const resolvedType = this.resolveType(input.machineType);
+    const entries = resolvedType ? { [resolvedType]: this.paths[resolvedType] ?? [] } : this.paths;
+    return JSON.stringify({
+      machineType: requestedType,
+      resolvedType,
+      entries,
+      note: "Path knowledge is static read-only guidance. Verify on the host, pod, or service UI with read-only ls/stat/tail/kubectl/yarn commands before relying on it."
+    }, null, 2);
+  }
+}
+
+const defaultService = new BdsLogPathKnowledgeService();
+
+export function bdsLogPathKnowledge(input) {
+  return defaultService.invoke(input);
+}
+
+export const __test = {
+  BDS_LOG_PATHS,
+  BDS_LOG_TYPE_ALIASES,
+  BdsLogPathKnowledgeService,
+  bdsLogPathKnowledge
+};
+
+const sharedTool = defineReadOnlyTool({
+  name: "bds_log_path_knowledge",
+  description: "Return static BDS server-type log path guidance for read-only host inspection planning.",
+  inputSchema: {
+    machineType: z.string().trim().max(128).default("")
+  },
+  async handler(input) {
+    try { return ok(defaultService.invoke(input)); } catch (error) { return fail(error); }
+  }
+});
+
+export default {
+  name: sharedTool.name,
+  description,
+  inputSchema: sharedTool.inputSchema,
+  meta: sharedTool.meta,
+  annotations: sharedTool.annotations,
+  invoke: sharedTool.invoke,
+  handler: sharedTool.handler
+};