src/tools/status.ts

Functions

Imports

It imports src/job-breaker.ts, src/limits.ts, src/operator-key.ts, src/overnight.ts, src/policy-sign.ts, src/status.ts, src/tools/docs.ts. Imported by src/server.ts.

Source

1import { setOvernight } from "../overnight";
2import { McpServer } from "@modelcontextprotocol/server";
3import { z } from "zod";
4import { bounded, MAX_DOC_STATUS, nsName } from "../limits";
5import { capsidStatus } from "../status";
6import { mintOperatorKey } from "../operator-key";
7import { signPolicyDocument } from "../policy-sign";
8import { resetBreaker } from "../job-breaker";
9import { fail, ok, type ToolCtx } from "./docs";
10
11// The two operations behind capsid_run_improve (status) and capsid_admin_control_improve
12// (the admin's switches). Both tools keep the improve loop's names, under which agents'
13// tools lists grant them, though the loop itself was removed (Dustin, 2026-10-19).
14export function defineStatusOperations(server: McpServer, ctx: ToolCtx): void {
15  const { env } = ctx;
16
17  ctx.ops.define(
18    "admin_control",
19    {
20      description:
21        `The administrator's switches. action "mint_operator_key" returns a new read-only (ro:) operator key once, stores it nowhere, and returns the wrangler command that adds its hash to OPERATOR_KEY_HASH; it does not set the secret. action "breaker_reset" closes the queue's circuit breaker for namespace, so jobs its drivers failed before now stop counting toward the threshold (default 3 holder fails in 24 hours), and with threshold sets that threshold for every namespace; audit-logged and read back. action "overnight" sets the overnight run's switch (value "off" | "api" | "subscription", and a reason, both required): off unless set, with a "Runs on" choice of API key or subscription; choosing subscription records Dustin's decision, its date and its reasoning with the switch; audit-logged and read back. action "sign_policy" signs the policy document already stored at path (namespace "capsid", path under "policy/"), never a body the caller supplies; the prior body is snapshotted and the signing is audit-logged. Admin only.`,
22      inputSchema: {
23        action: z.enum(["mint_operator_key", "sign_policy", "breaker_reset", "overnight"]),
24        namespace: nsName.optional().describe('For "breaker_reset", the namespace. For "sign_policy", "capsid".'),
25        value: z.enum(["off", "subscription", "api"]).optional().describe('For action "overnight": "off", "api" or "subscription".'),
26        threshold: z.number().int().min(1).max(50).optional().describe('For action "breaker_reset": the number of holder fails in 24 hours that opens the breaker of any namespace.'),
27        reason: bounded(MAX_DOC_STATUS).optional().describe('For action "overnight": the required reason for the change.'),
28        path: bounded(512)
29          .optional()
30          .describe('For action "sign_policy": the path of the stored policy document to sign, under "policy/" in the capsid namespace.'),
31      },
32    },
33    async ({ action, namespace, value, reason, path, threshold }) => {
34      try {
35        // Admin only, stated in TOOL_GRANTS (src/scope.ts) and enforced by the registrar
36        // before this handler runs.
37        if (action === "sign_policy") {
38          if (!namespace || !path) return fail("sign_policy needs the namespace and the path of the policy document.");
39          const signed = await signPolicyDocument(env, ctx.actor, namespace, path);
40          return signed.ok ? ok(signed) : fail(signed.error);
41        }
42        if (action === "overnight") return ok(await setOvernight(env, ctx.actor, new Date(), { value, reason }));
43        if (action === "breaker_reset") {
44          if (!namespace || namespace === "all") return fail("breaker_reset needs one namespace.");
45          const reset = await resetBreaker(env, ctx.actor, new Date(), { namespace, threshold });
46          return reset.ok ? ok(reset) : fail(reset.error);
47        }
48        return ok(await mintOperatorKey(env, ctx.actor));
49      } catch (err) {
50        return fail(err instanceof Error ? err.message : String(err));
51      }
52    }
53  );
54
55  ctx.ops.define(
56    "status",
57    {
58      description:
59        "Capsid's state per namespace: a jobs block (queued, claimed and blocked counts, jobs finished today, and each blocked job with the command it is waiting on), the queue's breaker, the latest lint report, the pull requests auto-merge declined, the daily maintenance list and what needs Dustin. Also the signed policies' versions, the overnight switch, the auto-merge safety meter, canon_paths (the canon documents a driver's write turns into a proposal for the seat to approve) and, for the admin, canon_proposals, the proposals waiting, and agents: every minted agent with its kind, namespaces, grants, the flags it holds, when it was last seen and whether it is revoked. Never returns a key or a stored verifier. Read-only.",
60      inputSchema: {
61        namespace: nsName.optional().describe("Limit to one namespace. Omit for every app namespace."),
62      },
63    },
64    async ({ namespace }) => {
65      try {
66        return ok(await capsidStatus(env, namespace, { namespaces: ctx.agent.scopes.namespaces, admin: ctx.agent.admin }));
67      } catch (err) {
68        return fail(err instanceof Error ? err.message : String(err));
69      }
70    }
71  );
72}