reckon

Tool belt

The observability, CI/CD, messaging, infrastructure, cache, and database CLIs wired into reckon.

reckon installs and configures a set of existing CLIs under one isolated workspace. The agent selects among them as an investigation narrows; reckon does not wrap them in a new binary.

CLIEvidence it covers
grafanaDashboards, datasources, alerts, annotations
jenkinsJobs, builds, pipelines, logs, nodes
cubeapmDistributed traces, PromQL metrics, LogsQL logs
awsCloudWatch metrics and logs, ALB/ELB, ECS, SQS, RDS, S3
ghPull requests, GitHub Actions runs, releases, issues
kcatKafka metadata and group-less topic reads
rpkKafka consumer-group lag and cluster information
kubectlPod and deployment state, events, rollout history
redis-cliRedis INFO, SLOWLOG, LATENCY, DBSIZE, and SCAN diagnostics
mongoshMongoDB diagnostics through a read-only database role
psqlPostgreSQL diagnostics through a read-only database role
mysqlMySQL diagnostics through a read-only database role and option file
clickhouse clientClickHouse tables, slow queries, metrics, events, and bounded exploratory reads through a read-only role and --readonly=1
es (optional)Elasticsearch/ELK cluster health, index state, Query DSL, and SQL search

direnv provides the folder-local environment and jq supports structured output processing.

Signal routing

For machine parsing, use -o json with the custom Grafana, Jenkins, and CubeAPM CLIs. Other tools keep their own documented output flags and formats.

“Read-only” is a combination of credential permissions, client safeguards, approved command shapes, and agent approval prompts. Several upstream tools can mutate production when used outside this contract.

On this page