@bike4mind/cli 2.0.0 → 2.1.0

package/dist/{serve-Y2zMbfGs.mjs → serve-DM7ld3-o.mjs}

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
-import { R as PROMPT_TEXT_MAX, Y as generatedAudioResponseSchema, _ as requireApiUrl, b as AGENT_QUEST_MANIFEST, dt as ttsBase64ResponseSchema, ft as ttsRequestSchema, g as parseApiUrl, k as DEFAULT_TTS_PROVIDER, n as logger, pt as ttsResponseTooLargeSchema, t as ConfigStore, ut as supportedVoiceGenerationVendor, x as AGENT_QUEST_MCP_URI, y as AGENT_QUEST_ID } from "./ConfigStore-DIs-K9oD.mjs";
-import { n as NotAuthenticatedError, r as isProviderKeyFailure, t as ApiClient } from "./ApiClient-BTI0-m0g.mjs";
+import { Ct as ttsResponseTooLargeSchema, D as BriefcasePromptIdSchema, F as ImagePromptResolutionSchema, N as GENERATED_IMAGE_EXTENSION_RE, P as ImageModels, St as ttsRequestSchema, T as BRIEFCASE_CATALOG_QUERIES, U as PROMPT_TEXT_MAX, Z as buildPromptContext, _ as requireApiUrl, b as AGENT_QUEST_MANIFEST, ft as questReplyText, g as parseApiUrl, j as DEFAULT_TTS_PROVIDER, n as logger, pt as replacePromptVariables, t as ConfigStore, tt as generatedAudioResponseSchema, ut as joinReplySlots, x as AGENT_QUEST_MCP_URI, xt as ttsBase64ResponseSchema, y as AGENT_QUEST_ID, yt as supportedVoiceGenerationVendor } from "./ConfigStore-BygzEI6H.mjs";
+import { n as NotAuthenticatedError, r as isProviderKeyFailure, t as ApiClient } from "./ApiClient-dIB3YQc2.mjs";
 import { z as z$1 } from "zod";
 import { isAxiosError } from "axios";
 import { Writable } from "node:stream";
@@ -8,7 +8,17 @@ import { createServer } from "node:http";
 import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
 import { StreamableHTTPServerTransport } from "@modelcontextprotocol/sdk/server/streamableHttp.js";
 import { McpServer, ResourceTemplate } from "@modelcontextprotocol/sdk/server/mcp.js";
+import { ErrorCode, GetPromptRequestSchema, ListPromptsRequestSchema, McpError } from "@modelcontextprotocol/sdk/types.js";
 //#region src/mcp/b4mApiClient.ts
+const NOTEBOOK_ID_PATTERN = /^[a-f0-9]{24}$/i;
+/**
+* An empty or dot-segment id collapses `/api/sessions/{id}` to `/api/sessions`, whose DELETE wipes every
+* notebook the caller owns, so write paths refuse anything that is not an ObjectId before any request.
+*/
+function notebookPath(notebookId) {
+	if (!NOTEBOOK_ID_PATTERN.test(notebookId)) throw new Error(`Invalid notebook id: ${JSON.stringify(notebookId)}`);
+	return `/api/sessions/${notebookId}`;
+}
 /**
 * Typed wrapper over {@link ApiClient} exposing exactly the Bike4Mind REST
 * endpoints the MCP tools call. All routes are `baseApi()` routes that accept
@@ -50,6 +60,16 @@ var B4mApiClient = class {
 			...args.dataLakeId ? { dataLakeId: args.dataLakeId } : {}
 		});
 	}
+	async renameNotebook(notebookId, name) {
+		return this.client.put(notebookPath(notebookId), { name });
+	}
+	/** Returns the new (cloned) notebook. */
+	async cloneNotebook(notebookId) {
+		return this.client.post(`${notebookPath(notebookId)}/clone`, {});
+	}
+	async deleteNotebook(notebookId) {
+		return this.client.delete(notebookPath(notebookId), { maxRedirects: 0 });
+	}
 	/**
 	* GET /api/v1/data-lakes is cursor-paginated (flat `limit`/`cursor` params,
 	* `{ data, next_cursor }` body), so `toList` does not apply.
@@ -70,7 +90,7 @@ var B4mApiClient = class {
 			message: args.message,
 			...args.model ? { model: args.model } : {},
 			...args.systemPrompt ? { systemPrompt: args.systemPrompt } : {},
-			wait: true
+			wait: false
 		});
 	}
 	async getQuest(questId) {
@@ -130,6 +150,16 @@ var B4mApiClient = class {
 			throw error;
 		}
 	}
+	async generateImage(args) {
+		return this.client.post("/api/ai/generate-image", {
+			prompt: args.prompt,
+			model: args.model,
+			...args.size ? { size: args.size } : {},
+			...args.notebookId ? { sessionId: args.notebookId } : {},
+			...args.projectId ? { projectId: args.projectId } : {},
+			...args.promptResolution ? { prompt_resolution: args.promptResolution } : {}
+		});
+	}
 	/**
 	* POST a generated-audio request with `encoding: 'base64'` and normalize any
 	* server's answer into the JSON shape `schema` describes. Base64 (never binary)
@@ -175,6 +205,14 @@ var B4mApiClient = class {
 	async getProject(projectId) {
 		return this.client.get(`/api/projects/${encodeURIComponent(projectId)}`);
 	}
+	async createProject(args) {
+		return this.client.post("/api/projects", {
+			name: args.name,
+			description: args.description,
+			...args.sessionIds?.length ? { sessionIds: args.sessionIds } : {},
+			...args.fileIds?.length ? { fileIds: args.fileIds } : {}
+		});
+	}
 	/**
 	* GET /api/artifacts takes flat `limit`/`offset` params (not the nested
 	* `pagination` object the session/file/project routes use) and hard-caps
@@ -194,6 +232,20 @@ var B4mApiClient = class {
 	async getArtifact(artifactId) {
 		return this.client.get(`/api/artifacts/${encodeURIComponent(artifactId)}`, { params: { includeContent: "true" } });
 	}
+	/**
+	* POST /api/briefcase/catalog: a key -> prompts map, one entry per query key.
+	*
+	* The route runs csrfProtection, which exempts API-key requests but rejects a
+	* login (JWT bearer) request that carries no Origin - and Node sends none. CSRF
+	* defends browsers, so a non-browser client naming the backend's own origin is
+	* the intended pass, not a bypass.
+	*/
+	async getBriefcaseCatalog(queries) {
+		return (await this.client.post("/api/briefcase/catalog", { queries }, { headers: { Origin: new URL(this.baseURL).origin } })).catalog;
+	}
+	async getBriefcasePrompt(promptId) {
+		return (await this.client.get(`/api/briefcase/prompts/${encodeURIComponent(promptId)}`)).prompt;
+	}
 };
 /**
 * Turn an API failure into an actionable, transport-agnostic message. `scope` is
@@ -213,6 +265,8 @@ function mapApiError(error, baseURL, scope) {
 		}
 		if (status === 403) {
 			if ((error.response?.data)?.code === "FEATURE_DISABLED") return "feature disabled on this Bike4Mind instance (ask an admin to enable it)";
+			const csrfMessage = extractServerMessage(error.response?.data);
+			if (csrfMessage && /CSRF|request origin/i.test(csrfMessage)) return csrfMessage;
 			const base = "API key forbidden: check the key's scopes and account access";
 			return scope ? `${base} (recommended scope: ${scope})` : base;
 		}
@@ -297,10 +351,46 @@ const TOOL_META = [
 		description: "Create a new notebook, optionally inside a project or grounded in a data lake (dataLakeId, see list_lakes). Defaults the name to \"New Notebook\" when omitted.",
 		scope: "notebooks:write"
 	},
+	{
+		name: "rename_notebook",
+		title: "Rename notebook",
+		description: "Rename a notebook.",
+		scope: "notebooks:write"
+	},
+	{
+		name: "clone_notebook",
+		title: "Clone notebook",
+		description: "Clone a notebook into a new one; returns the new notebook.",
+		scope: "notebooks:write"
+	},
+	{
+		name: "delete_notebook",
+		title: "Delete notebook",
+		description: "Permanently delete a notebook and the files its owner uploaded to it; this cannot be undone through the API. Requires confirm: true. On a conflict (409) nothing was deleted, so retry.",
+		scope: "notebooks:write"
+	},
+	{
+		name: "list_projects",
+		title: "List projects",
+		description: "List the Bike4Mind projects the caller can access, including ones shared with them.",
+		scope: "projects:read"
+	},
+	{
+		name: "get_project",
+		title: "Get project",
+		description: "Fetch a single project by id.",
+		scope: "projects:read"
+	},
+	{
+		name: "create_project",
+		title: "Create project",
+		description: "Create a new project. Pass the returned id as projectId to create_notebook to create notebooks inside it.",
+		scope: "projects:write"
+	},
 	{
 		name: "send_message",
 		title: "Send message",
-		description: "Send a chat message and wait for the assistant reply; returns the cited sources (citables) the answer was grounded in.",
+		description: "Send a chat message and wait for the assistant reply, reporting progress while it is generated; returns the cited sources (citables) the answer was grounded in.",
 		scope: "ai:chat"
 	},
 	{
@@ -338,6 +428,12 @@ const TOOL_META = [
 		title: "Text to speech",
 		description: "Synthesize speech from text. Returns a saved audio file with a signed download URL when available, otherwise audio inline.",
 		scope: "ai:generate"
+	},
+	{
+		name: "generate_image",
+		title: "Generate image",
+		description: "Generate an image from a text prompt and wait for the render. Returns the quest and notebook ids plus each image's file name and download URL. Image names are not file ids and do not work with get_file.",
+		scope: "ai:generate"
 	}
 ];
 TOOL_META.map((t) => t.name);
@@ -346,12 +442,34 @@ const listNotebooksShape = {
 	limit: z$1.number().int().min(1).max(100).default(25).describe("Maximum notebooks to return"),
 	page: z$1.number().int().min(1).default(1).describe("1-based page number; request the next page when hasMore is true")
 };
-const getNotebookShape = { notebookId: z$1.string().describe("The notebook (session) id") };
+const notebookId = (description) => z$1.string().regex(NOTEBOOK_ID_PATTERN, "notebookId must be a 24-character hex ObjectId").describe(description);
+const getNotebookShape = { notebookId: notebookId("The notebook (session) id") };
 const createNotebookShape = {
 	name: z$1.string().optional().describe("Name for the new notebook"),
 	projectId: z$1.string().optional().describe("Project to create the notebook in"),
 	dataLakeId: z$1.string().optional().describe("Data lake id or slug to ground the notebook in (see list_lakes); seeds the lake's retrieval defaults")
 };
+const renameNotebookShape = {
+	notebookId: notebookId("The notebook (session) id"),
+	name: z$1.string().min(1).describe("The new name")
+};
+const cloneNotebookShape = { notebookId: notebookId("The notebook (session) id to clone") };
+const deleteNotebookShape = {
+	notebookId: notebookId("The notebook (session) id to delete"),
+	confirm: z$1.literal(true).describe("Must be true; the delete is permanent")
+};
+const listProjectsShape = {
+	search: z$1.string().optional().describe("Filter projects by name"),
+	limit: z$1.number().int().min(1).max(100).default(25).describe("Maximum projects to return"),
+	page: z$1.number().int().min(1).default(1).describe("1-based page number; request the next page when hasMore is true")
+};
+const getProjectShape = { projectId: z$1.string().describe("The project id") };
+const createProjectShape = {
+	name: z$1.string().min(1).describe("Name for the new project; must be unique among your projects"),
+	description: z$1.string().min(1).describe("Short description of the project"),
+	sessionIds: z$1.array(z$1.string()).optional().describe("Notebook (session) ids to add to the project"),
+	fileIds: z$1.array(z$1.string()).optional().describe("File ids to add to the project")
+};
 const sendMessageShape = {
 	message: z$1.string().describe("The message to send"),
 	notebookId: z$1.string().optional().describe("Notebook to send to; omit to start a new notebook (its id is returned as notebookId, pass it back to continue the thread)"),
@@ -380,6 +498,14 @@ const generateSoundEffectShape = {
 	promptInfluence: z$1.number().min(0).max(1).optional().describe("How strictly to follow the prompt (0 = loose, 1 = strict)"),
 	format: z$1.string().optional().describe("Provider output encoding token, e.g. mp3_44100_128")
 };
+const generateImageShape = {
+	prompt: z$1.string().min(1).describe("Text description of the image to generate"),
+	model: z$1.string().default(ImageModels.GPT_IMAGE_2).describe("Image model id, e.g. gpt-image-2"),
+	size: z$1.string().optional().describe("Image size as 'widthxheight', e.g. 1024x1024; omit for the model default"),
+	notebookId: z$1.string().optional().describe("Notebook to add the image to; omit to create a new one"),
+	projectId: z$1.string().optional().describe("Project for the new notebook when notebookId is omitted"),
+	promptResolution: ImagePromptResolutionSchema.optional().describe("'auto' (default) rewrites the prompt against the notebook history; 'literal' sends it as written")
+};
 const textToSpeechShape = {
 	...ttsRequestSchema.omit({ encoding: true }).shape,
 	text: ttsRequestSchema.shape.text.describe("Text to speak"),
@@ -395,6 +521,13 @@ function notebookSummary(n) {
 		updatedAt: n.updatedAt ?? n.lastUpdated
 	};
 }
+function projectSummary(p) {
+	return {
+		id: p.id,
+		name: p.name,
+		createdAt: p.createdAt
+	};
+}
 function lakeSummary(l) {
 	return {
 		id: l.id,
@@ -422,28 +555,65 @@ async function createNotebook(client, args) {
 		name: args.name ?? "New Notebook"
 	});
 }
-async function sendMessage(client, args) {
-	const res = await client.sendChat(args);
-	const questId = res.id;
-	let quest;
-	try {
-		quest = await client.getQuest(questId);
-	} catch {
-		quest = void 0;
-	}
-	const notebookId = args.notebookId ?? res.sessionId ?? quest?.sessionId;
-	const citables = quest ? (quest.promptMeta?.citables ?? []).map((c) => ({
+async function renameNotebook(client, args) {
+	return notebookSummary(await client.renameNotebook(args.notebookId, args.name));
+}
+async function cloneNotebook(client, args) {
+	return notebookSummary(await client.cloneNotebook(args.notebookId));
+}
+async function deleteNotebook(client, args) {
+	if (args.confirm !== true) throw new Error("delete_notebook requires confirm: true");
+	const { newLastNotebookId } = await client.deleteNotebook(args.notebookId);
+	return {
+		deleted: true,
+		notebookId: args.notebookId,
+		newLastNotebookId
+	};
+}
+async function listProjects(client, args) {
+	const { data, hasMore } = await client.listProjects(args);
+	return {
+		projects: data.map(projectSummary),
+		hasMore
+	};
+}
+async function getProject(client, args) {
+	return client.getProject(args.projectId);
+}
+async function createProject(client, args) {
+	return projectSummary(await client.createProject(args));
+}
+/**
+* Queue a chat turn and poll its quest to completion. A failed turn ends `type: 'error'` with its
+* explanation as the reply, which is returned as-is like any other reply.
+*/
+async function sendMessage(client, args, { intervalMs = CHAT_POLL_INTERVAL_MS, timeoutMs = CHAT_POLL_TIMEOUT_MS, ...poll } = {}) {
+	const ack = await client.sendChat(args);
+	const questId = ack.id;
+	const quest = await pollQuest(client, {
+		questId,
+		ref: questRef(questId, ack.sessionId),
+		task: "chat completion",
+		scope: "ai:chat",
+		isFinished: isSettled
+	}, {
+		...poll,
+		timeoutMs,
+		interval: (elapsedMs) => chatPollInterval(elapsedMs, intervalMs)
+	});
+	const notebookId = args.notebookId ?? ack.sessionId ?? quest.sessionId;
+	const citables = (quest.promptMeta?.citables ?? []).map((c) => ({
 		id: c.id,
 		type: c.type,
 		title: c.title,
 		url: c.url,
 		description: c.description
-	})) : void 0;
+	}));
 	return {
 		notebookId,
 		questId,
-		reply: res.responses && res.responses.length > 0 ? res.responses.join("\n\n") : res.response ?? "",
-		model: res.model,
+		reply: replyText(quest),
+		model: ack.model,
 		citables
 	};
 }
@@ -470,6 +640,97 @@ async function getFile(client, args) {
 async function generateSoundEffect(client, args) {
 	return generatedAudioResult(await client.generateSoundEffect(args), { provider: args.provider });
 }
+const IMAGE_POLL_INTERVAL_MS = 2e3;
+const IMAGE_POLL_TIMEOUT_MS = 3e5;
+const CHAT_POLL_INTERVAL_MS = 2e3;
+const CHAT_POLL_FAST_WINDOW_MS = 3e4;
+const CHAT_POLL_SLOW_INTERVAL_MS = 5e3;
+const CHAT_POLL_TIMEOUT_MS = 9e5;
+const MAX_CONSECUTIVE_POLL_FAILURES = 3;
+const defaultSleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+const chatPollInterval = (elapsedMs, intervalMs) => elapsedMs < CHAT_POLL_FAST_WINDOW_MS ? intervalMs : Math.max(intervalMs, CHAT_POLL_SLOW_INTERVAL_MS);
+const isSettled = (q) => q.status === "done" || q.status === "stopped" || q.type === "error";
+const isImageSettled = (q) => isSettled(q) || !q.status && !!q.images?.length;
+const replyText = (q) => questReplyText(q, joinReplySlots) ?? "";
+const questRef = (questId, notebookId) => `quest ${questId}${notebookId ? `, notebook ${notebookId}` : ""}`;
+const isRateLimited = (err) => isAxiosError(err) && err.response?.status === 429;
+const isPermanentApiError = (err) => {
+	const status = isAxiosError(err) ? err.response?.status : void 0;
+	return status === 401 || status === 403 || status === 404;
+};
+/** Poll a queued quest until `isFinished`, the timeout, a permanent poll failure, or an abort. */
+async function pollQuest(client, { questId, ref, task, scope, isFinished }, { interval, timeoutMs, sleep = defaultSleep, signal, onProgress, baseURL = "" }) {
+	const started = Date.now();
+	let failures = 0;
+	let retryAfterMs = 0;
+	for (;;) {
+		signal?.throwIfAborted();
+		let quest;
+		try {
+			quest = await client.getQuest(questId);
+			failures = 0;
+			if (isFinished(quest)) return quest;
+		} catch (err) {
+			if (isRateLimited(err)) retryAfterMs = (parseRetryAfterSeconds(isAxiosError(err) && err.response?.headers?.["retry-after"]) ?? 0) * 1e3;
+			else {
+				failures += 1;
+				if (isPermanentApiError(err) || failures >= MAX_CONSECUTIVE_POLL_FAILURES) throw new Error(`${mapApiError(err, baseURL, scope)} (${ref}; the ${task} may still complete)`);
+			}
+		}
+		const elapsed = Date.now() - started;
+		if (elapsed >= timeoutMs) throw new Error(`${task} did not finish within ${Math.round(timeoutMs / 1e3)}s (${ref})`);
+		signal?.throwIfAborted();
+		try {
+			await onProgress?.(elapsed, quest);
+		} catch (err) {
+			logger.warn(`mcp: progress notification failed (${ref}): ${err instanceof Error ? err.message : String(err)}`);
+		}
+		const intervalMs = interval(elapsed);
+		await sleep(Math.min(Math.max(intervalMs, retryAfterMs), Math.max(timeoutMs - elapsed, intervalMs)));
+		retryAfterMs = 0;
+	}
+}
+/**
+* Queue an image render and poll its quest to completion. A failed render still
+* resolves `status: 'done'`, so `type: 'error'` (reason in `reply`) is the failure signal.
+* Generated images are not FabFiles, so there is no file id: the quest id is the handle,
+* and each image is its generated-file name plus the URL the quest poll resolves for it
+* (`fileUrl` is absent when the server has no CDN configured).
+*/
+async function generateImage(client, args, { intervalMs = IMAGE_POLL_INTERVAL_MS, timeoutMs = IMAGE_POLL_TIMEOUT_MS, ...poll } = {}) {
+	const ack = await client.generateImage(args);
+	const questId = ack.quest.id;
+	const ref = questRef(questId, ack.quest.sessionId);
+	const quest = await pollQuest(client, {
+		questId,
+		ref,
+		task: "image generation",
+		scope: "ai:generate",
+		isFinished: isImageSettled
+	}, {
+		...poll,
+		timeoutMs,
+		interval: () => intervalMs
+	});
+	if (quest.status === "stopped") throw new Error(`image generation was stopped (${ref})`);
+	if (quest.type === "error") {
+		const code = quest.errorCode ? `${quest.errorCode}: ` : "";
+		throw new Error(`${code}${quest.reply || "image generation failed"} (${ref})`);
+	}
+	const urls = new Map((quest.files ?? []).map((f) => [f.name, f.url]));
+	const images = (quest.images ?? []).filter((name) => GENERATED_IMAGE_EXTENSION_RE.test(name)).map((name) => ({
+		fileName: name,
+		fileUrl: urls.get(name)
+	}));
+	if (images.length === 0) throw new Error(`${quest.reply || "image generation finished without producing an image"} (${ref})`);
+	return {
+		notebookId: quest.sessionId ?? ack.quest.sessionId,
+		questId,
+		model: args.model,
+		enhancedPrompt: ack.enhancedPrompt,
+		images
+	};
+}
 function toResult(value) {
 	const structuredContent = value && typeof value === "object" && !Array.isArray(value) ? value : { result: value };
 	return {
@@ -575,6 +836,28 @@ async function textToSpeech(client, args) {
 	});
 }
 /**
+* Turn a quest poll's progress callback into MCP `notifications/progress`, or nothing when the
+* client sent no progressToken. Progress also lets a client that resets its request timeout on
+* progress wait out a slow quest.
+*/
+function progressReporter({ _meta, sendNotification }, describe) {
+	const progressToken = _meta?.progressToken;
+	if (progressToken === void 0) return void 0;
+	return (elapsedMs, quest) => sendNotification({
+		method: "notifications/progress",
+		params: {
+			progressToken,
+			progress: Math.floor(elapsedMs / 1e3),
+			message: describe(quest)
+		}
+	});
+}
+function chatProgress(quest) {
+	if (quest?.status !== "running") return "waiting for the reply to start";
+	const characters = replyText(quest).length;
+	return characters > 0 ? `generating reply (${characters} characters so far)` : "generating reply";
+}
+/**
 * Register the Bike4Mind MCP tools on `server`. Each handler is wrapped so an
 * API failure becomes a structured `isError` result carrying a friendly message
 * (see {@link mapApiError}) rather than throwing across the transport.
@@ -604,11 +887,45 @@ function registerTools(server, client) {
 		description: meta("create_notebook").description,
 		inputSchema: createNotebookShape
 	}, (args) => run("notebooks:write", () => createNotebook(client, args)));
+	server.registerTool("rename_notebook", {
+		title: meta("rename_notebook").title,
+		description: meta("rename_notebook").description,
+		inputSchema: renameNotebookShape
+	}, (args) => run("notebooks:write", () => renameNotebook(client, args)));
+	server.registerTool("clone_notebook", {
+		title: meta("clone_notebook").title,
+		description: meta("clone_notebook").description,
+		inputSchema: cloneNotebookShape
+	}, (args) => run("notebooks:write", () => cloneNotebook(client, args)));
+	server.registerTool("delete_notebook", {
+		title: meta("delete_notebook").title,
+		description: meta("delete_notebook").description,
+		inputSchema: deleteNotebookShape
+	}, (args) => run("notebooks:write", () => deleteNotebook(client, args)));
+	server.registerTool("list_projects", {
+		title: meta("list_projects").title,
+		description: meta("list_projects").description,
+		inputSchema: listProjectsShape
+	}, (args) => run("projects:read", () => listProjects(client, args)));
+	server.registerTool("get_project", {
+		title: meta("get_project").title,
+		description: meta("get_project").description,
+		inputSchema: getProjectShape
+	}, (args) => run("projects:read", () => getProject(client, args)));
+	server.registerTool("create_project", {
+		title: meta("create_project").title,
+		description: meta("create_project").description,
+		inputSchema: createProjectShape
+	}, (args) => run("projects:write", () => createProject(client, args)));
 	server.registerTool("send_message", {
 		title: meta("send_message").title,
 		description: meta("send_message").description,
 		inputSchema: sendMessageShape
-	}, (args) => run("ai:chat", () => sendMessage(client, args)));
+	}, (args, extra) => run("ai:chat", () => sendMessage(client, args, {
+		signal: extra.signal,
+		baseURL,
+		onProgress: progressReporter(extra, chatProgress)
+	})));
 	server.registerTool("search_knowledge_base", {
 		title: meta("search_knowledge_base").title,
 		description: meta("search_knowledge_base").description,
@@ -651,6 +968,15 @@ function registerTools(server, client) {
 			return errorResult(mapApiError(err, baseURL, "ai:generate"));
 		}
 	});
+	server.registerTool("generate_image", {
+		title: meta("generate_image").title,
+		description: meta("generate_image").description,
+		inputSchema: generateImageShape
+	}, (args, extra) => run("ai:generate", () => generateImage(client, args, {
+		signal: extra.signal,
+		baseURL,
+		onProgress: progressReporter(extra, () => "rendering image")
+	})));
 }
 //#endregion
 //#region src/mcp/resources.ts
@@ -783,15 +1109,114 @@ function registerResources(server, client) {
 	});
 }
 //#endregion
+//#region src/mcp/prompts.ts
+/**
+* The `{{placeholder}}` keys a client supplies as prompt arguments. The clock keys
+* (currentDate, currentTime, ...) are not arguments: they are filled at get time,
+* exactly as the web launcher does at click time.
+*/
+const PROMPT_ARGUMENTS = [
+	{
+		name: "userName",
+		description: "Your name, substituted for {{userName}}"
+	},
+	{
+		name: "userEmail",
+		description: "Your email, substituted for {{userEmail}}"
+	},
+	{
+		name: "userRole",
+		description: "Your role, substituted for {{userRole}}"
+	},
+	{
+		name: "organization",
+		description: "Your organization, substituted for {{organization}}"
+	}
+];
+const PROMPT_ARGUMENT_NAMES = new Set(PROMPT_ARGUMENTS.map((arg) => arg.name));
+/** Flatten the catalog in category order; a prompt listed under two keys appears once. */
+function flattenCatalog(catalog) {
+	const byId = /* @__PURE__ */ new Map();
+	for (const { key } of BRIEFCASE_CATALOG_QUERIES) for (const prompt of catalog[key] ?? []) if (!byId.has(prompt.id)) byId.set(prompt.id, prompt);
+	return [...byId.values()];
+}
+/**
+* List the caller's Briefcase catalog as MCP prompts, named by prompt id (display
+* names are not unique). Degrades to an empty list on failure, like the resource
+* lists: EnableBriefcase is off by default, so a hard error would fail every
+* client's startup listing on most instances.
+*/
+async function listPrompts(client) {
+	try {
+		return { prompts: flattenCatalog(await client.getBriefcaseCatalog(BRIEFCASE_CATALOG_QUERIES)).map((prompt) => ({
+			name: prompt.id,
+			title: prompt.name,
+			description: prompt.description,
+			arguments: PROMPT_ARGUMENTS.map((arg) => ({
+				...arg,
+				required: false
+			}))
+		})) };
+	} catch (err) {
+		logger.error(`mcp: listing briefcase prompts failed: ${mapApiError(err, client.baseURL)}`);
+		return { prompts: [] };
+	}
+}
+function toPromptContext(args, now) {
+	const supplied = Object.entries(args ?? {}).filter(([name, value]) => PROMPT_ARGUMENT_NAMES.has(name) && value !== "");
+	return {
+		...buildPromptContext(null, null, now),
+		...Object.fromEntries(supplied)
+	};
+}
+/** Resolve one prompt's template against the supplied arguments plus the clock. */
+async function getPrompt(client, name, args, now) {
+	const notFound = new McpError(ErrorCode.InvalidParams, `Prompt ${name} not found`);
+	const id = BriefcasePromptIdSchema.safeParse(name);
+	if (!id.success) throw notFound;
+	let prompt;
+	try {
+		prompt = await client.getBriefcasePrompt(id.data);
+	} catch (err) {
+		if (isAxiosError(err) && err.response?.status === 404) throw notFound;
+		throw new Error(mapApiError(err, client.baseURL));
+	}
+	if (!prompt.promptText) throw new Error(`Prompt ${name} has no text`);
+	const text = replacePromptVariables(prompt.promptText, toPromptContext(args, now));
+	return {
+		description: prompt.description ?? prompt.name,
+		messages: [{
+			role: "user",
+			content: {
+				type: "text",
+				text
+			}
+		}]
+	};
+}
+/**
+* Expose the Briefcase prompt catalog as MCP prompts. Wired on the low-level
+* server rather than through `registerPrompt`: the catalog is per-caller server
+* data that changes at runtime, so it is fetched on every prompts/list instead
+* of being frozen at build time. Requires the `prompts` capability to be declared
+* on the server (see buildMcpServer). Claims prompts/list and prompts/get on the
+* low-level server, so do not also call McpServer.registerPrompt on this server
+* (a claimed method makes it throw "already exists" at startup).
+*/
+function registerPrompts(server, client, now = () => /* @__PURE__ */ new Date()) {
+	server.server.setRequestHandler(ListPromptsRequestSchema, () => listPrompts(client));
+	server.server.setRequestHandler(GetPromptRequestSchema, (request) => getPrompt(client, request.params.name, request.params.arguments, now()));
+}
+//#endregion
 //#region src/mcp/server.ts
 /**
 * Build a fully-configured Bike4Mind MCP server: the tools, the four resource
 * templates (`b4m://notebook/{id}`, `b4m://file/{id}`, `b4m://project/{id}`,
 * `b4m://artifact/{id}`) backed by a {@link B4mApiClient} bound to the given
-* endpoint and credentials, and the credential-free `b4m://agent-quest` manifest.
-* Tool listing never touches the network - only tool/resource *calls* hit the API -
-* so a server built with an unreachable endpoint still advertises its full
-* capability set.
+* endpoint and credentials, the credential-free `b4m://agent-quest` manifest, and
+* the Briefcase prompt catalog as MCP prompts. Tool listing never touches the
+* network - only tool/resource *calls* and prompt listing/gets hit the API - so a
+* server built with an unreachable endpoint still advertises its full capability set.
 */
 function buildMcpServer(options) {
 	const client = new B4mApiClient(options.baseURL, options.configStore, options.apiKey);
@@ -800,10 +1225,12 @@ function buildMcpServer(options) {
 		version: options.version
 	}, { capabilities: {
 		tools: {},
-		resources: {}
+		resources: {},
+		prompts: {}
 	} });
 	registerTools(server, client);
 	registerResources(server, client);
+	registerPrompts(server, client);
 	return server;
 }
 //#endregion