@bragduck/mcp 1.7.0 → 1.8.0

package/dist/index.js

@@ -1,131 +1,2015 @@
 #!/usr/bin/env node
-import { Server } from '@modelcontextprotocol/sdk/server/index.js';
-import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
-import { CallToolRequestSchema, ErrorCode, ListToolsRequestSchema, McpError, } from '@modelcontextprotocol/sdk/types.js';
-import { loginTool, handleLogin } from './tools/login.js';
-import { logBragTool, handleLogBrag } from './tools/log-brag.js';
-import { quickBragTool, handleQuickBrag } from './tools/quick-brag.js';
-import { handlePreviewBrag } from './tools/preview-brag.js';
-import { listBragsTool, handleListBrags } from './tools/list-brags.js';
-import { listObjectivesTool, handleListObjectives } from './tools/list-objectives.js';
-import { linkBragToKeyResultTool, handleLinkBragToKeyResult } from './tools/link-brag-to-key-result.js';
-import { listOrganisationsTool, handleListOrganisations } from './tools/list-organisations.js';
-import { saveOrgPreferenceTool, handleSaveOrgPreference } from './tools/save-org-preference.js';
-import { logStoryTool, handleLogStory } from './tools/log-story.js';
-import { listStoriesTool, handleListStories } from './tools/list-stories.js';
-const server = new Server({
-    name: 'bragduck',
-    version: '1.0.0',
-}, {
-    capabilities: {
-        tools: {},
+
+// src/index.ts
+import { Server } from "@modelcontextprotocol/sdk/server/index.js";
+import { StdioServerTransport } from "@modelcontextprotocol/sdk/server/stdio.js";
+import {
+  CallToolRequestSchema,
+  ErrorCode,
+  ListToolsRequestSchema,
+  McpError
+} from "@modelcontextprotocol/sdk/types.js";
+
+// src/auth.ts
+import { randomBytes as randomBytes2 } from "crypto";
+import { createServer } from "http";
+import { parse } from "url";
+import { exec } from "child_process";
+import { promisify } from "util";
+
+// src/credentials.ts
+import { createDecipheriv, scryptSync, randomBytes, createCipheriv } from "crypto";
+import { existsSync, readFileSync, writeFileSync, mkdirSync } from "fs";
+import { homedir } from "os";
+import { join } from "path";
+import Conf from "conf";
+var APP_NAME = "bragduck";
+var CREDENTIALS_DIR = ".bragduck";
+var CREDENTIALS_FILE = "credentials.enc";
+var ENCRYPTION = {
+  ALGORITHM: "aes-256-gcm",
+  KEY_LENGTH: 32,
+  IV_LENGTH: 16,
+  AUTH_TAG_LENGTH: 16,
+  SALT_LENGTH: 32
+};
+function deriveEncryptionKey(salt) {
+  const password = `${APP_NAME}-${homedir()}-${process.platform}`;
+  return scryptSync(password, salt, ENCRYPTION.KEY_LENGTH);
+}
+function decrypt(encryptedData, key) {
+  const decipher = createDecipheriv(
+    ENCRYPTION.ALGORITHM,
+    key,
+    Buffer.from(encryptedData.iv, "hex"),
+    { authTagLength: ENCRYPTION.AUTH_TAG_LENGTH }
+  );
+  decipher.setAuthTag(Buffer.from(encryptedData.authTag, "hex"));
+  let decrypted = decipher.update(encryptedData.encrypted, "hex", "utf8");
+  decrypted += decipher.final("utf8");
+  return decrypted;
+}
+function encrypt(data, key) {
+  const iv = randomBytes(ENCRYPTION.IV_LENGTH);
+  const cipher = createCipheriv(ENCRYPTION.ALGORITHM, key, iv, {
+    authTagLength: ENCRYPTION.AUTH_TAG_LENGTH
+  });
+  let encrypted = cipher.update(data, "utf8", "hex");
+  encrypted += cipher.final("hex");
+  const authTag = cipher.getAuthTag();
+  return {
+    encrypted,
+    iv: iv.toString("hex"),
+    authTag: authTag.toString("hex"),
+    salt: ""
+  };
+}
+function readStoredCredentials() {
+  const credentialsPath = join(homedir(), CREDENTIALS_DIR, CREDENTIALS_FILE);
+  if (!existsSync(credentialsPath)) {
+    return null;
+  }
+  try {
+    const encryptedData = JSON.parse(
+      readFileSync(credentialsPath, "utf8")
+    );
+    const salt = Buffer.from(encryptedData.salt, "hex");
+    const key = deriveEncryptionKey(salt);
+    const decrypted = decrypt(encryptedData, key);
+    return JSON.parse(decrypted);
+  } catch {
+    return null;
+  }
+}
+function writeStoredCredentials(credentials) {
+  const credentialsDir = join(homedir(), CREDENTIALS_DIR);
+  const credentialsPath = join(credentialsDir, CREDENTIALS_FILE);
+  if (!existsSync(credentialsDir)) {
+    mkdirSync(credentialsDir, { recursive: true, mode: 448 });
+  }
+  const data = JSON.stringify(credentials);
+  const salt = randomBytes(ENCRYPTION.SALT_LENGTH);
+  const key = deriveEncryptionKey(salt);
+  const encrypted = encrypt(data, key);
+  encrypted.salt = salt.toString("hex");
+  writeFileSync(credentialsPath, JSON.stringify(encrypted), {
+    mode: 384,
+    encoding: "utf8"
+  });
+}
+function getAccessToken() {
+  const credentials = readStoredCredentials();
+  if (!credentials) return null;
+  if (credentials.accessToken && !credentials.services) {
+    return credentials.accessToken;
+  }
+  return credentials.services?.bragduck?.accessToken || null;
+}
+function getRefreshToken() {
+  const credentials = readStoredCredentials();
+  if (!credentials) return null;
+  if (credentials.accessToken && !credentials.services) {
+    return credentials.refreshToken || null;
+  }
+  return credentials.services?.bragduck?.refreshToken || null;
+}
+function storeCredentials(creds) {
+  let existing = readStoredCredentials();
+  if (existing && existing.accessToken && !existing.services) {
+    existing = {
+      services: {
+        bragduck: {
+          accessToken: existing.accessToken,
+          refreshToken: existing.refreshToken,
+          expiresAt: existing.expiresAt
+        }
+      }
+    };
+  }
+  const updated = {
+    ...existing,
+    services: {
+      ...existing?.services,
+      bragduck: creds
+    }
+  };
+  writeStoredCredentials(updated);
+}
+function getUserInfo() {
+  try {
+    const config = new Conf({ projectName: APP_NAME });
+    return config.get("userInfo") || null;
+  } catch {
+    return null;
+  }
+}
+function storeUserInfo(userInfo) {
+  const config = new Conf({ projectName: APP_NAME });
+  config.set("userInfo", userInfo);
+}
+
+// src/auth.ts
+var execAsync = promisify(exec);
+var API_BASE_URL = process.env.BRAGDUCK_API_URL || "https://api.bragduck.com";
+var OAUTH_CLIENT_ID = "bragduck-cli";
+var CALLBACK_PATH = "/callback";
+var TIMEOUT_MS = 12e4;
+var MIN_PORT = 8010;
+var MAX_PORT = 8014;
+async function findAvailablePort() {
+  for (let port = MIN_PORT; port <= MAX_PORT; port++) {
+    try {
+      await new Promise((resolve, reject) => {
+        const testServer = createServer();
+        testServer.once("error", reject);
+        testServer.once("listening", () => {
+          testServer.close(() => resolve());
+        });
+        testServer.listen(port, "127.0.0.1");
+      });
+      return port;
+    } catch {
+      continue;
+    }
+  }
+  throw new Error(`No available ports found in range ${MIN_PORT}-${MAX_PORT}`);
+}
+async function openBrowser(url) {
+  const platform = process.platform;
+  let command;
+  switch (platform) {
+    case "darwin":
+      command = `open "${url}"`;
+      break;
+    case "win32":
+      command = `start "" "${url}"`;
+      break;
+    default:
+      command = `xdg-open "${url}"`;
+      break;
+  }
+  await execAsync(command);
+}
+var SUCCESS_HTML = `<!DOCTYPE html>
+<html><head><meta charset="UTF-8"><title>BragDuck - Authenticated</title>
+<style>
+  body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+    display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0;
+    background: linear-gradient(135deg, #667eea 0%, #764ba2 100%); color: white; }
+  .container { text-align: center; padding: 2rem; background: rgba(255,255,255,0.1);
+    border-radius: 1rem; backdrop-filter: blur(10px); max-width: 500px; }
+  h1 { font-size: 2rem; margin: 0 0 1rem; }
+  .check { font-size: 4rem; animation: pop 0.3s ease-out; }
+  p { font-size: 1.1rem; opacity: 0.9; }
+  @keyframes pop { from { transform: scale(0); } to { transform: scale(1); } }
+</style></head><body>
+<div class="container">
+  <div class="check">&#10003;</div>
+  <h1>Authentication Successful</h1>
+  <p>You can close this window and return to your editor.</p>
+</div></body></html>`;
+var ERROR_HTML = (error) => `<!DOCTYPE html>
+<html><head><meta charset="UTF-8"><title>BragDuck - Auth Failed</title>
+<style>
+  body { font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+    display: flex; align-items: center; justify-content: center; min-height: 100vh; margin: 0;
+    background: linear-gradient(135deg, #f093fb 0%, #f5576c 100%); color: white; }
+  .container { text-align: center; padding: 2rem; background: rgba(255,255,255,0.1);
+    border-radius: 1rem; backdrop-filter: blur(10px); max-width: 500px; }
+  h1 { font-size: 2rem; margin: 0 0 1rem; }
+  .err { font-size: 4rem; }
+  p { font-size: 1.1rem; opacity: 0.9; }
+  .details { background: rgba(0,0,0,0.2); padding: 1rem; border-radius: 0.5rem;
+    font-family: monospace; font-size: 0.9rem; margin-top: 1rem; }
+</style></head><body>
+<div class="container">
+  <div class="err">&#10007;</div>
+  <h1>Authentication Failed</h1>
+  <p>Please try again.</p>
+  <div class="details">${error}</div>
+</div></body></html>`;
+async function exchangeCodeForToken(code, callbackUrl) {
+  const response = await fetch(`${API_BASE_URL}/v1/auth/cli/token`, {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({
+      code,
+      redirect_uri: callbackUrl,
+      client_id: OAUTH_CLIENT_ID,
+      grant_type: "authorization_code"
+    })
+  });
+  if (!response.ok) {
+    const errorData = await response.json().catch(() => ({}));
+    throw new Error(errorData.message || `Token exchange failed: ${response.statusText}`);
+  }
+  return response.json();
+}
+async function login() {
+  const state = randomBytes2(32).toString("hex");
+  const port = await findAvailablePort();
+  const callbackUrl = `http://127.0.0.1:${port}${CALLBACK_PATH}`;
+  const authParams = new URLSearchParams({
+    client_id: OAUTH_CLIENT_ID,
+    redirect_uri: callbackUrl,
+    state
+  });
+  const authUrl = `${API_BASE_URL}/v1/auth/cli/initiate?${authParams.toString()}`;
+  return new Promise((resolve, reject) => {
+    let server2 = null;
+    let timeoutId = null;
+    const cleanup = () => {
+      if (timeoutId) globalThis.clearTimeout(timeoutId);
+      if (server2) {
+        if (typeof server2.closeAllConnections === "function") {
+          server2.closeAllConnections();
+        }
+        server2.close();
+        server2.unref();
+      }
+    };
+    const handleRequest = async (req, res) => {
+      const parsedUrl = parse(req.url || "", true);
+      if (parsedUrl.pathname !== CALLBACK_PATH) {
+        res.writeHead(404, { "Content-Type": "text/plain" });
+        res.end("Not Found");
+        return;
+      }
+      const { code, state: returnedState, error, error_description } = parsedUrl.query;
+      if (error) {
+        const errorMsg = String(error_description || error);
+        res.writeHead(400, { "Content-Type": "text/html" });
+        res.end(ERROR_HTML(errorMsg));
+        cleanup();
+        reject(new Error(`OAuth error: ${errorMsg}`));
+        return;
+      }
+      if (!code || !returnedState) {
+        res.writeHead(400, { "Content-Type": "text/html" });
+        res.end(ERROR_HTML("Missing code or state parameter"));
+        cleanup();
+        reject(new Error("Missing code or state parameter"));
+        return;
+      }
+      if (returnedState !== state) {
+        res.writeHead(400, { "Content-Type": "text/html" });
+        res.end(ERROR_HTML("Invalid state parameter"));
+        cleanup();
+        reject(new Error("Invalid state parameter (possible CSRF)"));
+        return;
+      }
+      res.writeHead(200, { "Content-Type": "text/html" });
+      res.end(SUCCESS_HTML);
+      try {
+        const tokenResponse = await exchangeCodeForToken(String(code), callbackUrl);
+        const expiresAt = tokenResponse.expires_in ? Date.now() + tokenResponse.expires_in * 1e3 : void 0;
+        storeCredentials({
+          accessToken: tokenResponse.access_token,
+          refreshToken: tokenResponse.refresh_token,
+          expiresAt
+        });
+        const user = tokenResponse.user || { id: "unknown", email: "unknown", name: "Unknown" };
+        storeUserInfo(user);
+        globalThis.setTimeout(() => {
+          cleanup();
+          resolve({ email: user.email, name: user.name });
+        }, 100);
+      } catch (err) {
+        cleanup();
+        reject(err);
+      }
+    };
+    server2 = createServer(handleRequest);
+    server2.on("error", (err) => {
+      cleanup();
+      reject(new Error(`OAuth server error: ${err.message}`));
+    });
+    server2.listen(port, "127.0.0.1", () => {
+      openBrowser(authUrl).catch(() => {
+      });
+    });
+    timeoutId = globalThis.setTimeout(() => {
+      cleanup();
+      reject(new Error("Authentication timed out. No callback received within 2 minutes."));
+    }, TIMEOUT_MS);
+  });
+}
+
+// src/tools/login.ts
+var loginTool = {
+  name: "login",
+  description: "Authenticate with BragDuck. Opens the browser for sign-in/sign-up. Call this when other tools return an authentication error.",
+  inputSchema: {
+    type: "object",
+    properties: {
+      force: {
+        type: "boolean",
+        description: "Force re-authentication even if already logged in"
+      }
+    }
+  }
+};
+async function handleLogin(input) {
+  if (!input?.force) {
+    const existingToken = getAccessToken();
+    if (existingToken) {
+      return {
+        content: [{ type: "text", text: "Already authenticated with BragDuck." }]
+      };
+    }
+  }
+  try {
+    const user = await login();
+    return {
+      content: [{
+        type: "text",
+        text: `Authenticated as ${user.name} (${user.email}). You can now log brags and manage objectives.`
+      }]
+    };
+  } catch (error) {
+    return {
+      content: [{
+        type: "text",
+        text: `Authentication failed: ${error instanceof Error ? error.message : String(error)}`
+      }],
+      isError: true
+    };
+  }
+}
+
+// src/api-client.ts
+var API_BASE_URL2 = process.env.BRAGDUCK_API_URL || "https://api.bragduck.com";
+var DEBUG = !!process.env.BRAGDUCK_DEBUG;
+var OAUTH_CLIENT_ID2 = "bragduck-cli";
+var TOKEN_ENDPOINT = "/v1/auth/cli/token";
+function debug(...args) {
+  if (DEBUG) console.error("[bragduck-mcp]", ...args);
+}
+async function refreshAccessToken() {
+  const refreshToken = getRefreshToken();
+  if (!refreshToken) return null;
+  try {
+    const response = await fetch(`${API_BASE_URL2}${TOKEN_ENDPOINT}`, {
+      method: "POST",
+      headers: { "Content-Type": "application/json" },
+      body: JSON.stringify({
+        refresh_token: refreshToken,
+        client_id: OAUTH_CLIENT_ID2,
+        grant_type: "refresh_token"
+      })
+    });
+    if (!response.ok) return null;
+    const data = await response.json();
+    const expiresAt = data.expires_in ? Date.now() + data.expires_in * 1e3 : void 0;
+    storeCredentials({
+      accessToken: data.access_token,
+      refreshToken: data.refresh_token || refreshToken,
+      expiresAt
+    });
+    return data.access_token;
+  } catch {
+    return null;
+  }
+}
+async function apiRequest(endpoint, options = {}) {
+  const { method = "GET", body, params } = options;
+  let token = getAccessToken();
+  if (!token) {
+    throw new Error("NOT_AUTHENTICATED");
+  }
+  let url = `${API_BASE_URL2}${endpoint}`;
+  if (params) {
+    const searchParams = new URLSearchParams();
+    for (const [key, value] of Object.entries(params)) {
+      if (Array.isArray(value)) {
+        value.forEach((v) => searchParams.append(`${key}[]`, v));
+      } else {
+        searchParams.append(key, value);
+      }
+    }
+    url += `?${searchParams.toString()}`;
+  }
+  const headers = {
+    Authorization: `Bearer ${token}`,
+    "User-Agent": "BragDuck-MCP/1.0.0"
+  };
+  if (body) {
+    headers["Content-Type"] = "application/json";
+  }
+  const bodyString = body ? JSON.stringify(body) : void 0;
+  debug(`${method} ${url}`);
+  if (bodyString) debug("Request body:", bodyString);
+  let response = await fetch(url, {
+    method,
+    headers,
+    body: bodyString
+  });
+  debug(`Response: ${response.status} ${response.statusText}`);
+  if (response.status === 401) {
+    const newToken = await refreshAccessToken();
+    if (!newToken) {
+      throw new Error("TOKEN_EXPIRED");
+    }
+    headers.Authorization = `Bearer ${newToken}`;
+    response = await fetch(url, {
+      method,
+      headers,
+      body: bodyString
+    });
+  }
+  if (!response.ok) {
+    const text = await response.text().catch(() => "");
+    debug("Error response body:", text);
+    let msg = `API error: ${response.status} ${response.statusText}`;
+    try {
+      const errorData = JSON.parse(text);
+      msg = errorData.message || errorData.error || msg;
+    } catch {
+      if (text) msg = text;
+    }
+    throw new Error(msg);
+  }
+  if (response.status === 204) return void 0;
+  return response.json();
+}
+async function getSubscriptionStatus() {
+  return apiRequest("/v1/subscriptions/status");
+}
+async function requirePaidPlan() {
+  try {
+    const { tier } = await getSubscriptionStatus();
+    if (tier === "FREE") {
+      return {
+        content: [
+          {
+            type: "text",
+            text: "BragDuck MCP requires a PLUS or PRO subscription.\n\nThe free plan does not include CLI or MCP access.\nUpgrade at: https://bragduck.com/app/settings/plans"
+          }
+        ],
+        isError: true
+      };
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+
+// src/tools/log-brag.ts
+var logBragTool = {
+  name: "log_brag",
+  description: "Persist a career achievement (brag) to BragDuck. Call this in the same response as the preview table \u2014 the tool permission prompt (Allow/Deny) that appears to the user IS the confirmation. Do not ask the user to type anything.",
+  inputSchema: {
+    type: "object",
+    properties: {
+      title: {
+        type: "string",
+        minLength: 10,
+        maxLength: 200,
+        description: "Short title of the achievement (must be 10-200 characters)"
+      },
+      description: {
+        type: "string",
+        minLength: 50,
+        maxLength: 2e3,
+        description: "Detailed description of what was accomplished and its impact (must be 50-2000 characters)"
+      },
+      tags: {
+        type: "array",
+        items: { type: "string", minLength: 2, maxLength: 30 },
+        maxItems: 10,
+        description: 'Tags to categorize the brag (e.g., "performance", "leadership", "backend"). Each tag must be 2-30 characters. Maximum 10 tags.'
+      },
+      date: {
+        type: "string",
+        description: "ISO datetime string for when this happened (defaults to now)"
+      },
+      impact_level: {
+        type: "number",
+        enum: [0, 1, 2, 3],
+        description: "Impact level of the achievement. 0 = none (personal learning, routine tasks). 1 = low (individual contributor impact, fixed small bug). 2 = medium (team-level impact, improved team process, led project). 3 = high (organization-level impact, reduced costs, improved key metrics)."
+      },
+      impact_description: {
+        type: "string",
+        description: 'Narrative description of the impact. Start with scope (Individual/Team/Organization/Company-wide), then include 1-3 measurable outcomes. Example: "Team impact: Reduced deploy time by 60%, unblocking 4 engineers"'
+      },
+      type: {
+        type: "string",
+        enum: [
+          "progress",
+          "achievement",
+          "recognition",
+          "support",
+          "code",
+          "leadership",
+          "learning",
+          "collaboration",
+          "challenge",
+          "innovation",
+          "meeting",
+          "bug",
+          "others"
+        ],
+        description: "Type of achievement. Choose the most appropriate category for this brag."
+      },
+      references: {
+        type: "array",
+        items: { type: "string", format: "uri" },
+        maxItems: 10,
+        description: 'URLs to reference materials for this achievement. Include any relevant links that provide context or proof: pull request URLs, Jira/Linear tickets, commit URLs, design docs, Notion pages, etc. Example: ["https://github.com/org/repo/pull/123", "https://jira.company.com/browse/PROJ-456"]'
+      },
+      orgId: {
+        type: "string",
+        description: "Organisation ID to associate the brag with"
+      },
+      agent: {
+        type: "string",
+        maxLength: 50,
+        description: 'Optional AI agent/client name for MCP-origin brags, e.g. "claude", "codex", "cursor", or "copilot".'
+      }
     },
-    instructions: 'BragDuck tracks career achievements ("brags") that feed into periodic performance reports. ' +
-        'A strong brag needs: a concrete accomplishment, measurable or observable impact, and ideally a reference link. ' +
-        '\n\n' +
-        'RESOLVING "THIS" IN "BRAG WITH THIS"\n' +
-        'When the user says "brag with this" (or "brag about this", "log this", etc.) without elaborating, ' +
-        '"this" refers to the most recent work visible in the current session: ' +
-        'the latest git diff, the last commit message, the most recently discussed code change, or a PR just mentioned. ' +
-        'Look for that context first before asking anything. ' +
-        'Only start the interview (see below) if no such context exists in the session.\n' +
-        '\n' +
-        'STEP 1 — ASSESS BRAGABILITY\n' +
-        'Before doing anything else, judge whether the subject is worth logging:\n' +
-        '- NOT bragable: vague status updates, trivial tasks with no impact, ' +
-        '  or things a reasonable person would not list on a performance review. ' +
-        '  Tell the user directly that it is not bragable and explain why in one sentence. ' +
-        '  Note that brags feed the AI report generator — weak entries dilute the signal.\n' +
-        '- POTENTIALLY bragable but thin: start the interview (see below).\n' +
-        '- Clearly bragable with full context: skip the interview, go straight to STEP 2.\n' +
-        '\n' +
-        'THE INTERVIEW\n' +
-        'Conduct a short conversational interview to gather what you need. ' +
-        'Ask ONE question at a time — do not list multiple questions at once. ' +
-        'Each question should follow naturally from the previous answer, like a real conversation. ' +
-        'Suggested question order (adapt based on what you already know):\n' +
-        '  1. "What did you work on?" (skip if already known)\n' +
-        '  2. "What was the outcome or result?"\n' +
-        '  3. "Who was affected — just you, the team, or wider?"\n' +
-        '  4. "Do you have a link — PR, ticket, commit, or doc?" (skip if already have one)\n' +
-        'Stop the interview as soon as you have enough to write a strong brag. ' +
-        'Never ask more than 4 questions total.\n' +
-        '\n' +
-        'STEP 2 — SELECT ORGANISATION\n' +
-        'Before composing the brag, determine which company it belongs to:\n' +
-        '1. Call list_organisations. It returns the org list AND any saved preference for the current directory.\n' +
-        '2. If a saved preference exists, use that orgId silently — do not ask the user.\n' +
-        '3. If no saved preference, present the org list to the user and ask: "Which company does this belong to?" ' +
-        '   Wait for their answer, then call save_org_preference with the chosen orgId and orgName.\n' +
-        '4. If the user has only one organisation, select it automatically and save the preference.\n' +
-        '5. If the user has no organisations, skip this step and proceed without an orgId.\n' +
-        '\n' +
-        'STEP 3 — PREVIEW + LOG\n' +
-        'Compose the brag from all gathered context. ' +
-        'Do NOT call preview_brag. Instead, in your response text render the brag fields ' +
-        'as a markdown table with two columns (Field | Value), one row per field, in this order: ' +
-        'Title, Type, Impact Level, Impact Details, Description, Tags, References, Organisation. ' +
-        'In the very same response, after the table, call log_brag with those field values (including orgId). ' +
-        'The native tool-permission prompt (Allow / Deny) that appears below the table IS the ' +
-        'confirmation — do not add any text question. ' +
-        'If the user denies or asks for changes, adjust and repeat this step.\n' +
-        '\n' +
-        'STEP 4 — DONE\n' +
-        'Once log_brag is allowed and succeeds, confirm with one short sentence.\n' +
-        '\n' +
-        'QUICK BRAG (via /brag or raw text)\n' +
-        'When the user says "/brag" followed by text, or pastes a long block of text and asks to log it, ' +
-        'use the quick_brag tool instead of the interview flow. ' +
-        'quick_brag accepts raw text and uses AI to extract and structure it into a proper brag automatically. ' +
-        'Skip the interview, skip the preview table — just call quick_brag with the text.\n' +
-        '\n' +
-        'INTERVIEW STORIES (log_story)\n' +
-        'When the user discusses interview prep, behavioral questions, or asks to save a STAR story, ' +
-        'use log_story instead of log_brag. Stories are structured with Situation/Task/Action/Result fields ' +
-        'and competency tags. Follow the same org-selection flow (list_organisations → saved preference or ask). ' +
-        'Preview the story as a markdown table (Field | Value) before calling log_story in the same response.\n' +
-        'Use list_stories to browse existing stories. Supports filters: category, orgId, search, limit. ' +
-        'Stories include AI-generated strength and impact scores.\n' +
-        '\n' +
-        'GENERAL RULES\n' +
-        '- Never fabricate details, metrics, or links. If unsure, ask.\n' +
-        '- "Is this bragable?" deserves a direct honest answer — not a tool call.\n' +
-        '- Call login first if any tool returns an authentication error.',
-});
-server.setRequestHandler(ListToolsRequestSchema, async () => {
+    required: ["title", "description", "type", "impact_level", "impact_description", "references"]
+  }
+};
+function toAgentExternalType(agent) {
+  if (!agent) return void 0;
+  const normalized = agent.trim().toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9_-]/g, "");
+  if (normalized.length === 0) return void 0;
+  return `agent:${normalized.slice(0, 50)}`;
+}
+async function handleLogBrag(input) {
+  const planError = await requirePaidPlan();
+  if (planError) return planError;
+  try {
+    const brag = {
+      title: input.title,
+      message: input.description,
+      description: input.description,
+      tags: input.tags || [],
+      date: input.date || (/* @__PURE__ */ new Date()).toISOString(),
+      visibility: "private"
+    };
+    if (input.impact_level !== void 0) brag.impactLevel = input.impact_level;
+    if (input.impact_description) brag.impact_description = input.impact_description;
+    if (input.type) brag.typeKey = input.type;
+    if (input.references && input.references.length > 0) brag.attachments = input.references;
+    if (input.orgId) brag.orgId = input.orgId;
+    const agentExternalType = toAgentExternalType(input.agent);
+    if (agentExternalType) brag.externalType = agentExternalType;
+    const response = await apiRequest("/v1/brags", {
+      method: "POST",
+      body: { brags: [brag], source: "mcp" }
+    });
+    if (response.brags && response.brags.length > 0) {
+      const created = response.brags[0];
+      const lines = [`Brag logged: "${created.title}"
+View it at: ${created.url}`];
+      if (created.keyResultIds && created.keyResultIds.length > 0) {
+        lines.push(`Automatically linked to key result: ${created.keyResultIds[0]}`);
+      }
+      return {
+        content: [{
+          type: "text",
+          text: lines.join("\n")
+        }]
+      };
+    }
+    const firstError = response.errors && response.errors.length > 0 ? response.errors[0].message : "Server returned no brag and no error detail";
+    return {
+      content: [{
+        type: "text",
+        text: `Failed to create brag: ${firstError}`
+      }],
+      isError: true
+    };
+  } catch (error) {
+    if (error instanceof Error && (error.message === "NOT_AUTHENTICATED" || error.message === "TOKEN_EXPIRED")) {
+      return {
+        content: [{
+          type: "text",
+          text: 'Not authenticated with BragDuck. Please call the "login" tool first.'
+        }],
+        isError: true
+      };
+    }
+    return {
+      content: [{
+        type: "text",
+        text: `Failed to create brag: ${error instanceof Error ? error.message : String(error)}`
+      }],
+      isError: true
+    };
+  }
+}
+
+// src/tools/quick-brag.ts
+var quickBragTool = {
+  name: "quick_brag",
+  description: 'Log a brag from raw text. Accepts free-form text (a sentence, paragraph, or paste from a message/PR/doc) and uses AI to extract and structure it into a proper brag. The AI will parse the text into a title, description, type, impact, and tags, then log it. Use this when the user says "/brag" followed by text, or pastes something and asks to log it as a brag.',
+  inputSchema: {
+    type: "object",
+    properties: {
+      text: {
+        type: "string",
+        minLength: 10,
+        maxLength: 5e3,
+        description: "Raw text describing the achievement. Can be a sentence, paragraph, paste from a PR description, Slack message, commit message, or any free-form text. The AI will extract brag fields from it."
+      },
+      orgId: {
+        type: "string",
+        description: "Organisation ID to associate the brag with (optional)"
+      },
+      agent: {
+        type: "string",
+        maxLength: 50,
+        description: 'Optional AI agent/client name, e.g. "claude", "cursor", "copilot".'
+      }
+    },
+    required: ["text"]
+  }
+};
+function toAgentExternalType2(agent) {
+  if (!agent) return void 0;
+  const normalized = agent.trim().toLowerCase().replace(/\s+/g, "-").replace(/[^a-z0-9_-]/g, "");
+  if (normalized.length === 0) return void 0;
+  return `agent:${normalized.slice(0, 50)}`;
+}
+async function handleQuickBrag(input) {
+  const planError = await requirePaidPlan();
+  if (planError) return planError;
+  try {
+    const refined = await apiRequest("/v1/brags/refine", {
+      method: "POST",
+      body: { brags: [{ text: input.text }] }
+    });
+    if (!refined.refined_brags || refined.refined_brags.length === 0) {
+      return {
+        content: [{
+          type: "text",
+          text: "Could not extract a brag from the provided text. Try adding more detail about what was accomplished and its impact."
+        }],
+        isError: true
+      };
+    }
+    const extracted = refined.refined_brags[0];
+    const brag = {
+      title: extracted.refined_title,
+      description: extracted.refined_description,
+      tags: extracted.suggested_tags || [],
+      date: (/* @__PURE__ */ new Date()).toISOString(),
+      visibility: "private",
+      impactLevel: extracted.suggested_impactLevel,
+      impact_description: extracted.impact_description || "",
+      typeKey: extracted.suggested_type_key
+    };
+    const allLinks = [
+      ...extracted.extracted_links || [],
+      ...extracted.attachments || []
+    ].filter(Boolean);
+    if (allLinks.length > 0) brag.attachments = allLinks;
+    if (input.orgId) brag.orgId = input.orgId;
+    const agentExternalType = toAgentExternalType2(input.agent);
+    if (agentExternalType) brag.externalType = agentExternalType;
+    const response = await apiRequest("/v1/brags", {
+      method: "POST",
+      body: { brags: [brag], source: "mcp" }
+    });
+    if (response.errors && response.errors.length > 0) {
+      const errorMessages = response.errors.map((e) => e.message).join("; ");
+      return {
+        content: [{
+          type: "text",
+          text: `Failed to create brag: ${errorMessages}`
+        }],
+        isError: true
+      };
+    }
+    if (response.brags && response.brags.length > 0) {
+      const created = response.brags[0];
+      const lines = [
+        `Brag logged: "${created.title}"`,
+        `${created.url}`
+      ];
+      if (created.keyResultIds && created.keyResultIds.length > 0) {
+        lines.push(`Automatically linked to key result: ${created.keyResultIds[0]}`);
+      }
+      return {
+        content: [{
+          type: "text",
+          text: lines.join("\n")
+        }]
+      };
+    }
+    return {
+      content: [{
+        type: "text",
+        text: "Server returned no brag and no error detail"
+      }],
+      isError: true
+    };
+  } catch (error) {
+    if (error instanceof Error && (error.message === "NOT_AUTHENTICATED" || error.message === "TOKEN_EXPIRED")) {
+      return {
+        content: [{
+          type: "text",
+          text: 'Not authenticated with BragDuck. Please call the "login" tool first.'
+        }],
+        isError: true
+      };
+    }
+    return {
+      content: [{
+        type: "text",
+        text: `Error: ${error instanceof Error ? error.message : String(error)}`
+      }],
+      isError: true
+    };
+  }
+}
+
+// src/tools/preview-brag.ts
+var IMPACT_LABELS = {
+  0: "None (personal learning / routine)",
+  1: "Low (individual contributor impact)",
+  2: "Medium (team-level impact)",
+  3: "High (organisation-level impact)"
+};
+var TYPE_EMOJIS = {
+  progress: "\u{1F4C8}",
+  achievement: "\u{1F3C6}",
+  recognition: "\u{1F31F}",
+  support: "\u{1F91D}",
+  code: "\u{1F4BB}",
+  leadership: "\u{1F9ED}",
+  learning: "\u{1F4DA}",
+  collaboration: "\u{1F465}",
+  challenge: "\u2694\uFE0F",
+  innovation: "\u{1F4A1}",
+  meeting: "\u{1F5E3}\uFE0F",
+  bug: "\u{1F41B}",
+  others: "\u{1F4CC}"
+};
+function handlePreviewBrag(input) {
+  const emoji = TYPE_EMOJIS[input.type] ?? "\u{1F4CC}";
+  const impactLabel = IMPACT_LABELS[input.impact_level] ?? String(input.impact_level);
+  return {
+    content: [
+      {
+        type: "text",
+        text: JSON.stringify({
+          title: input.title,
+          type: `${emoji} ${input.type}`,
+          impact_level: impactLabel,
+          impact_details: input.impact_description,
+          description: input.description,
+          tags: input.tags && input.tags.length > 0 ? input.tags.join(", ") : "\u2014",
+          references: input.references && input.references.length > 0 ? input.references.join(", ") : "\u2014"
+        })
+      }
+    ]
+  };
+}
+
+// src/tools/list-brags.ts
+var listBragsTool = {
+  name: "list_brags",
+  description: "List recent brags (career achievements) from BragDuck. Use this to review past accomplishments, find brags to link to keyResults, or check recent entries.",
+  inputSchema: {
+    type: "object",
+    properties: {
+      limit: {
+        type: "number",
+        description: "Number of brags to return (default: 10, max: 100)"
+      },
+      search: {
+        type: "string",
+        description: "Search term to filter brags by title or description"
+      },
+      tags: {
+        type: "array",
+        items: { type: "string" },
+        description: "Filter brags by tags"
+      },
+      date_from: {
+        type: "string",
+        description: "Filter brags from this date (YYYY-MM-DD)"
+      },
+      date_to: {
+        type: "string",
+        description: "Filter brags up to this date (YYYY-MM-DD)"
+      },
+      sort: {
+        type: "string",
+        enum: ["date_asc", "date_desc", "title_asc", "title_desc", "created_asc", "created_desc"],
+        description: "Sort order (default: date_desc)"
+      }
+    }
+  }
+};
+var IMPACT_LABELS2 = {
+  0: "None",
+  1: "Low",
+  2: "Medium",
+  3: "High"
+};
+async function handleListBrags(input) {
+  const planError = await requirePaidPlan();
+  if (planError) return planError;
+  try {
+    const params = {
+      limit: String(input.limit || 10),
+      offset: "0"
+    };
+    if (input.search) params.search = input.search;
+    if (input.tags && input.tags.length > 0) params["tags[]"] = input.tags;
+    if (input.date_from) params.date_from = input.date_from;
+    if (input.date_to) params.date_to = input.date_to;
+    if (input.sort) params.sort = input.sort;
+    const response = await apiRequest("/v1/brags", { params });
+    if (response.brags.length === 0) {
+      return {
+        content: [{ type: "text", text: "No brags found." }]
+      };
+    }
+    const lines = response.brags.map((brag) => {
+      const tags = brag.tags.length > 0 ? ` [${brag.tags.join(", ")}]` : "";
+      const date = new Date(brag.date).toLocaleDateString();
+      const impact = `Impact: ${IMPACT_LABELS2[brag.impactLevel ?? 0] ?? (brag.impactLevel ?? 0)}`;
+      const type = brag.type ? ` | Type: ${brag.type}` : "";
+      const keyResultNote = brag.keyResultIds?.length > 0 ? `
+  Linked to key result: ${brag.keyResultIds[0]}` : "";
+      const impactDesc = brag.impactDescription ? `
+  Impact: ${brag.impactDescription}` : "";
+      return `- **${brag.title}** (ID: ${brag.id}, ${date})${tags}
+  ${impact}${type}` + impactDesc + keyResultNote + `
+  ${brag.description.slice(0, 150)}${brag.description.length > 150 ? "..." : ""}
+  View: ${brag.url}`;
+    });
+    const { total, has_more } = response.pagination;
+    const summary = `Found ${total} brags (showing ${response.brags.length}${has_more ? ", more available" : ""}):`;
+    return {
+      content: [{ type: "text", text: `${summary}
+
+${lines.join("\n\n")}` }]
+    };
+  } catch (error) {
+    if (error instanceof Error && (error.message === "NOT_AUTHENTICATED" || error.message === "TOKEN_EXPIRED")) {
+      return {
+        content: [{
+          type: "text",
+          text: 'Not authenticated with BragDuck. Please call the "login" tool first.'
+        }],
+        isError: true
+      };
+    }
+    return {
+      content: [{
+        type: "text",
+        text: `Failed to list brags: ${error instanceof Error ? error.message : String(error)}`
+      }],
+      isError: true
+    };
+  }
+}
+
+// src/tools/list-objectives.ts
+var listObjectivesTool = {
+  name: "list_objectives",
+  description: "List OKRs (Objectives and Key Results) from BragDuck. Use this to see current keyResults and their IDs, which can be used to link brags to specific keyResults.",
+  inputSchema: {
+    type: "object",
+    properties: {}
+  }
+};
+async function handleListObjectives() {
+  const planError = await requirePaidPlan();
+  if (planError) return planError;
+  try {
+    const userInfo = getUserInfo();
+    if (!userInfo) {
+      return {
+        content: [{
+          type: "text",
+          text: 'Not authenticated with BragDuck. Please call the "login" tool first.'
+        }],
+        isError: true
+      };
+    }
+    const response = await apiRequest(
+      `/v1/users/${userInfo.id}/objectives`
+    );
+    if (response.items.length === 0) {
+      return {
+        content: [{ type: "text", text: "No objectives found." }]
+      };
+    }
+    const lines = response.items.map((obj) => {
+      const keyResults = obj.keyResults.map((g) => `    - ${g.label} (KeyResult ID: ${g.id}, status: ${g.status})`).join("\n");
+      const category = obj.category ? ` [${obj.category}]` : "";
+      return `- **${obj.title}** (ID: ${obj.id}, status: ${obj.status})${category}
+${keyResults || "    (no keyResults)"}`;
+    });
+    return {
+      content: [{
+        type: "text",
+        text: `Found ${response.total} objectives:
+
+${lines.join("\n\n")}`
+      }]
+    };
+  } catch (error) {
+    if (error instanceof Error && (error.message === "NOT_AUTHENTICATED" || error.message === "TOKEN_EXPIRED")) {
+      return {
+        content: [{
+          type: "text",
+          text: 'Not authenticated with BragDuck. Please call the "login" tool first.'
+        }],
+        isError: true
+      };
+    }
     return {
-        tools: [loginTool, logBragTool, quickBragTool, listBragsTool, listObjectivesTool, linkBragToKeyResultTool, listOrganisationsTool, saveOrgPreferenceTool, logStoryTool, listStoriesTool],
+      content: [{
+        type: "text",
+        text: `Failed to list objectives: ${error instanceof Error ? error.message : String(error)}`
+      }],
+      isError: true
     };
+  }
+}
+
+// src/tools/link-brag-to-key-result.ts
+var linkBragToKeyResultTool = {
+  name: "link_brag_to_key_result",
+  description: "Add a keyResult/key-result to a brag (supports multiple keyResults per brag). Use list_objectives to find keyResult IDs and list_brags to find brag IDs.",
+  inputSchema: {
+    type: "object",
+    properties: {
+      bragId: {
+        type: "string",
+        description: "The ID of the brag to update"
+      },
+      keyResultId: {
+        type: "string",
+        description: "The ID of the keyResult to link the brag to"
+      }
+    },
+    required: ["bragId", "keyResultId"]
+  }
+};
+async function handleLinkBragToKeyResult(input) {
+  const planError = await requirePaidPlan();
+  if (planError) return planError;
+  try {
+    const userInfo = getUserInfo();
+    if (!userInfo) {
+      return {
+        content: [{
+          type: "text",
+          text: 'Not authenticated with BragDuck. Please call the "login" tool first.'
+        }],
+        isError: true
+      };
+    }
+    const currentBrag = await apiRequest(
+      `/v1/users/${userInfo.id}/brags/${input.bragId}`
+    );
+    const existingKeyResultIds = currentBrag.keyResultIds || [];
+    if (existingKeyResultIds.includes(input.keyResultId)) {
+      return {
+        content: [{
+          type: "text",
+          text: `Brag ${input.bragId} is already linked to keyResult ${input.keyResultId}.`
+        }]
+      };
+    }
+    const updatedKeyResultIds = [...existingKeyResultIds, input.keyResultId];
+    await apiRequest(`/v1/users/${userInfo.id}/brags/${input.bragId}`, {
+      method: "PATCH",
+      body: { keyResultIds: updatedKeyResultIds }
+    });
+    return {
+      content: [{
+        type: "text",
+        text: `KeyResult ${input.keyResultId} added to brag ${input.bragId} (now linked to ${updatedKeyResultIds.length} keyResult${updatedKeyResultIds.length === 1 ? "" : "s"}).`
+      }]
+    };
+  } catch (error) {
+    if (error instanceof Error && (error.message === "NOT_AUTHENTICATED" || error.message === "TOKEN_EXPIRED")) {
+      return {
+        content: [{
+          type: "text",
+          text: 'Not authenticated with BragDuck. Please call the "login" tool first.'
+        }],
+        isError: true
+      };
+    }
+    return {
+      content: [{
+        type: "text",
+        text: `Failed to link brag to keyResult: ${error instanceof Error ? error.message : String(error)}`
+      }],
+      isError: true
+    };
+  }
+}
+
+// src/org-preference.ts
+import Conf2 from "conf";
+var APP_NAME2 = "bragduck";
+function getConfig() {
+  return new Conf2({ projectName: APP_NAME2 });
+}
+function getOrgPreference(cwd) {
+  try {
+    const config = getConfig();
+    const prefs = config.get("orgPreferences") || {};
+    return prefs[cwd] || null;
+  } catch {
+    return null;
+  }
+}
+function saveOrgPreference(cwd, orgId, orgName) {
+  const config = getConfig();
+  const prefs = config.get("orgPreferences") || {};
+  prefs[cwd] = { orgId, orgName };
+  config.set("orgPreferences", prefs);
+}
+
+// src/tools/list-organisations.ts
+var listOrganisationsTool = {
+  name: "list_organisations",
+  description: "List the user's organisations (companies) from BragDuck. Also returns the saved organisation preference for the current working directory, if any. Use this before logging a brag to determine which company to associate it with.",
+  inputSchema: {
+    type: "object",
+    properties: {}
+  }
+};
+async function handleListOrganisations() {
+  const planError = await requirePaidPlan();
+  if (planError) return planError;
+  try {
+    const userInfo = getUserInfo();
+    if (!userInfo) {
+      return {
+        content: [{
+          type: "text",
+          text: 'Not authenticated with BragDuck. Please call the "login" tool first.'
+        }],
+        isError: true
+      };
+    }
+    const response = await apiRequest(
+      `/v1/users/${userInfo.id}/organisations`
+    );
+    if (response.items.length === 0) {
+      return {
+        content: [{
+          type: "text",
+          text: "No organisations found. You can add companies in the BragDuck web app."
+        }]
+      };
+    }
+    const cwd = process.cwd();
+    const saved = getOrgPreference(cwd);
+    const lines = response.items.map((org) => {
+      const status = org.current ? "current" : "former";
+      return `- **${org.name}** (ID: ${org.id}, role: ${org.role}, ${status})`;
+    });
+    const savedLine = saved ? `
+Saved preference for this directory: **${saved.orgName}** (ID: ${saved.orgId})` : "\nNo saved preference for this directory.";
+    return {
+      content: [{
+        type: "text",
+        text: `Found ${response.items.length} organisation(s):
+
+${lines.join("\n")}${savedLine}`
+      }]
+    };
+  } catch (error) {
+    if (error instanceof Error && (error.message === "NOT_AUTHENTICATED" || error.message === "TOKEN_EXPIRED")) {
+      return {
+        content: [{
+          type: "text",
+          text: 'Not authenticated with BragDuck. Please call the "login" tool first.'
+        }],
+        isError: true
+      };
+    }
+    return {
+      content: [{
+        type: "text",
+        text: `Failed to list organisations: ${error instanceof Error ? error.message : String(error)}`
+      }],
+      isError: true
+    };
+  }
+}
+
+// src/tools/save-org-preference.ts
+var saveOrgPreferenceTool = {
+  name: "save_org_preference",
+  description: "Save the organisation preference for the current working directory. Call this after the user selects which company a brag belongs to, so the same choice is remembered for future brags in this directory.",
+  inputSchema: {
+    type: "object",
+    properties: {
+      orgId: {
+        type: "string",
+        description: "The organisation ID to save as the preference for this directory"
+      },
+      orgName: {
+        type: "string",
+        description: "The organisation name (for display purposes)"
+      }
+    },
+    required: ["orgId", "orgName"]
+  }
+};
+async function handleSaveOrgPreference(input) {
+  const planError = await requirePaidPlan();
+  if (planError) return planError;
+  try {
+    const cwd = process.cwd();
+    saveOrgPreference(cwd, input.orgId, input.orgName);
+    return {
+      content: [{
+        type: "text",
+        text: `Saved: brags in this directory will be associated with **${input.orgName}**.`
+      }]
+    };
+  } catch (error) {
+    return {
+      content: [{
+        type: "text",
+        text: `Failed to save preference: ${error instanceof Error ? error.message : String(error)}`
+      }],
+      isError: true
+    };
+  }
+}
+
+// src/tools/log-story.ts
+var logStoryTool = {
+  name: "log_story",
+  description: "Save a STAR-formatted interview story to BragDuck. Use this when the user discusses interview prep, behavioral questions, or asks to save a story. Each story has Situation, Task, Action, Result fields plus competency tags. Call this in the same response as a preview \u2014 the tool permission prompt (Allow/Deny) that appears to the user IS the confirmation.",
+  inputSchema: {
+    type: "object",
+    properties: {
+      title: {
+        type: "string",
+        minLength: 5,
+        maxLength: 200,
+        description: 'Short title for the story (e.g., "Led migration to microservices")'
+      },
+      situation: {
+        type: "string",
+        minLength: 10,
+        description: "The context and background \u2014 what was happening, what was the environment"
+      },
+      task: {
+        type: "string",
+        minLength: 10,
+        description: "What was your specific responsibility or challenge"
+      },
+      action: {
+        type: "string",
+        minLength: 10,
+        description: "What you specifically did \u2014 the steps you took"
+      },
+      result: {
+        type: "string",
+        minLength: 10,
+        description: "The outcome \u2014 measurable impact, what changed, what you learned"
+      },
+      competencies: {
+        type: "array",
+        items: { type: "string", minLength: 2, maxLength: 50 },
+        maxItems: 20,
+        description: 'Skills or competencies this story demonstrates (e.g., "leadership", "system design", "conflict resolution")'
+      },
+      bragIds: {
+        type: "array",
+        items: { type: "string" },
+        maxItems: 20,
+        description: "IDs of BragDuck brags that back this story"
+      },
+      orgId: {
+        type: "string",
+        description: "Organisation ID to associate the story with"
+      },
+      category: {
+        type: "string",
+        description: "Interview category this story demonstrates (e.g. leadership, technical_excellence, problem_solving, innovation, teamwork, communication, project_delivery, customer_impact, mentorship, process_improvement)"
+      }
+    },
+    required: ["title", "situation", "task", "action", "result"]
+  }
+};
+async function handleLogStory(input) {
+  const planError = await requirePaidPlan();
+  if (planError) return planError;
+  try {
+    const userInfo = getUserInfo();
+    if (!userInfo) {
+      return {
+        content: [{
+          type: "text",
+          text: 'Not authenticated with BragDuck. Please call the "login" tool first.'
+        }],
+        isError: true
+      };
+    }
+    const body = {
+      title: input.title,
+      situation: input.situation,
+      task: input.task,
+      action: input.action,
+      result: input.result,
+      competencies: input.competencies || [],
+      bragIds: input.bragIds || [],
+      source: "mcp"
+    };
+    if (input.orgId) body.orgId = input.orgId;
+    if (input.category) body.category = input.category;
+    const story = await apiRequest(
+      `/v1/users/${userInfo.id}/stories`,
+      { method: "POST", body }
+    );
+    const competencyLine = story.competencies.length > 0 ? `
+Competencies: ${story.competencies.join(", ")}` : "";
+    return {
+      content: [{
+        type: "text",
+        text: `Story saved: "${story.title}"${competencyLine}`
+      }]
+    };
+  } catch (error) {
+    if (error instanceof Error && (error.message === "NOT_AUTHENTICATED" || error.message === "TOKEN_EXPIRED")) {
+      return {
+        content: [{
+          type: "text",
+          text: 'Not authenticated with BragDuck. Please call the "login" tool first.'
+        }],
+        isError: true
+      };
+    }
+    return {
+      content: [{
+        type: "text",
+        text: `Failed to save story: ${error instanceof Error ? error.message : String(error)}`
+      }],
+      isError: true
+    };
+  }
+}
+
+// ../server/src/utils/subscription/feature-config.ts
+var ORG_TEAM_ROLE_FEATURES = [
+  "org_access" /* ORG_ACCESS */,
+  "org_mutate_base" /* ORG_MUTATE_BASE */,
+  "org_admin_access" /* ORG_ADMIN_ACCESS */,
+  "org_owner_access" /* ORG_OWNER_ACCESS */,
+  "org_growth_admin_access" /* ORG_GROWTH_ADMIN_ACCESS */,
+  "manager_tier_access" /* MANAGER_TIER_ACCESS */,
+  "team_manage" /* TEAM_MANAGE */,
+  "team_owner_actions" /* TEAM_OWNER_ACTIONS */,
+  "team_membership_view" /* TEAM_MEMBERSHIP_VIEW */,
+  "org_members_manage" /* ORG_MEMBERS_MANAGE */,
+  "org_invites_manage" /* ORG_INVITES_MANAGE */,
+  "org_teams_manage" /* ORG_TEAMS_MANAGE */,
+  "org_growth_view" /* ORG_GROWTH_VIEW */,
+  "org_career_metrics_manage" /* ORG_CAREER_METRICS_MANAGE */,
+  "org_cycles_manage" /* ORG_CYCLES_MANAGE */,
+  "org_stats_view" /* ORG_STATS_VIEW */,
+  "org_audit_log_view" /* ORG_AUDIT_LOG_VIEW */,
+  "org_billing_manage" /* ORG_BILLING_MANAGE */,
+  "org_notifications_manage" /* ORG_NOTIFICATIONS_MANAGE */
+];
+var DISABLED_ORG_TEAM_FEATURES = Object.fromEntries(
+  ORG_TEAM_ROLE_FEATURES.map((f) => [f, { enabled: false }])
+);
+var UNIVERSAL_FEATURES = [
+  "brags_create" /* BRAGS_CREATE */,
+  "brags_read" /* BRAGS_READ */,
+  "brags_update" /* BRAGS_UPDATE */,
+  "brags_delete" /* BRAGS_DELETE */,
+  "stories_create" /* STORIES_CREATE */,
+  "stories_read" /* STORIES_READ */,
+  "stories_update" /* STORIES_UPDATE */,
+  "stories_delete" /* STORIES_DELETE */,
+  "brag_comments_create" /* BRAG_COMMENTS_CREATE */,
+  "brag_comments_read" /* BRAG_COMMENTS_READ */,
+  "brag_comments_update" /* BRAG_COMMENTS_UPDATE */,
+  "brag_comments_delete" /* BRAG_COMMENTS_DELETE */,
+  "brag_types_create" /* BRAG_TYPES_CREATE */,
+  "brag_types_read" /* BRAG_TYPES_READ */,
+  "brag_types_update" /* BRAG_TYPES_UPDATE */,
+  "objectives_read" /* OBJECTIVES_READ */,
+  "objectives_update" /* OBJECTIVES_UPDATE */,
+  "objectives_delete" /* OBJECTIVES_DELETE */,
+  "objectives_key_results_create" /* OBJECTIVES_KEY_RESULTS_CREATE */,
+  "objectives_key_results_update" /* OBJECTIVES_KEY_RESULTS_UPDATE */,
+  "objectives_key_results_delete" /* OBJECTIVES_KEY_RESULTS_DELETE */,
+  "reports_read" /* REPORTS_READ */,
+  "reports_update" /* REPORTS_UPDATE */,
+  "reports_delete" /* REPORTS_DELETE */,
+  "shares_read" /* SHARES_READ */,
+  "shares_delete" /* SHARES_DELETE */,
+  "fields_read" /* FIELDS_READ */,
+  "user_emails_read" /* USER_EMAILS_READ */,
+  "notifications_preferences_read" /* NOTIFICATIONS_PREFERENCES_READ */,
+  "notifications_preferences_update" /* NOTIFICATIONS_PREFERENCES_UPDATE */,
+  "security_info_read" /* SECURITY_INFO_READ */,
+  "data_access_log_read" /* DATA_ACCESS_LOG_READ */,
+  "users_read" /* USERS_READ */,
+  "users_update" /* USERS_UPDATE */,
+  "users_delete" /* USERS_DELETE */,
+  "badges_read" /* BADGES_READ */,
+  "user_teams_accept_invite" /* USER_TEAMS_ACCEPT_INVITE */,
+  "user_teams_reject_invite" /* USER_TEAMS_REJECT_INVITE */,
+  "page_dashboard_view" /* PAGE_DASHBOARD_VIEW */,
+  "page_brags_view" /* PAGE_BRAGS_VIEW */,
+  "page_stories_view" /* PAGE_STORIES_VIEW */,
+  "page_okrs_view" /* PAGE_OKRS_VIEW */,
+  "page_reports_view" /* PAGE_REPORTS_VIEW */,
+  "page_files_view" /* PAGE_FILES_VIEW */,
+  "page_settings_view" /* PAGE_SETTINGS_VIEW */,
+  "page_integrations_view" /* PAGE_INTEGRATIONS_VIEW */,
+  "settings_tab_account_view" /* SETTINGS_TAB_ACCOUNT_VIEW */,
+  "settings_tab_preferences_view" /* SETTINGS_TAB_PREFERENCES_VIEW */,
+  "settings_tab_notifications_view" /* SETTINGS_TAB_NOTIFICATIONS_VIEW */,
+  "settings_tab_billing_view" /* SETTINGS_TAB_BILLING_VIEW */,
+  "settings_tab_org_view" /* SETTINGS_TAB_ORG_VIEW */,
+  "settings_tab_plans_view" /* SETTINGS_TAB_PLANS_VIEW */,
+  // Account features: plans belong to companies, so these are open to everyone
+  "brags_export" /* BRAGS_EXPORT */,
+  "brags_import" /* BRAGS_IMPORT */,
+  "reports_csv_export" /* REPORTS_CSV_EXPORT */,
+  "llm_keys_create" /* LLM_KEYS_CREATE */,
+  "llm_keys_read" /* LLM_KEYS_READ */,
+  "llm_keys_update" /* LLM_KEYS_UPDATE */,
+  "llm_keys_delete" /* LLM_KEYS_DELETE */,
+  "llm_keys_validate" /* LLM_KEYS_VALIDATE */,
+  "llm_settings_read" /* LLM_SETTINGS_READ */,
+  "llm_settings_update" /* LLM_SETTINGS_UPDATE */,
+  "user_settings_openai_key_manage" /* USER_SETTINGS_OPENAI_KEY_MANAGE */,
+  "notifications_settings_read" /* NOTIFICATIONS_SETTINGS_READ */,
+  "notifications_settings_update" /* NOTIFICATIONS_SETTINGS_UPDATE */,
+  "settings_tab_ai_keys_view" /* SETTINGS_TAB_AI_KEYS_VIEW */,
+  "user_emails_update" /* USER_EMAILS_UPDATE */,
+  "user_emails_delete" /* USER_EMAILS_DELETE */,
+  "user_emails_verify" /* USER_EMAILS_VERIFY */,
+  "badges_read_others" /* BADGES_READ_OTHERS */
+];
+var PLUS_GATED_FEATURES = [
+  "cli_brags_create" /* CLI_BRAGS_CREATE */,
+  "cli_brags_read" /* CLI_BRAGS_READ */,
+  "cli_brags_refine" /* CLI_BRAGS_REFINE */,
+  "commits_refine" /* COMMITS_REFINE */,
+  "ask_ducky" /* ASK_DUCKY */
+];
+var PRO_GATED_FEATURES = [
+  "page_practice_view" /* PAGE_PRACTICE_VIEW */,
+  "page_resume_view" /* PAGE_RESUME_VIEW */
+];
+var TEAM_GATED_FEATURES = [
+  "evaluation_comments_create" /* EVALUATION_COMMENTS_CREATE */,
+  "evaluation_comments_read" /* EVALUATION_COMMENTS_READ */,
+  "peer_reviews_view" /* PEER_REVIEWS_VIEW */,
+  "peer_reviews_accept" /* PEER_REVIEWS_ACCEPT */,
+  "peer_reviews_submit" /* PEER_REVIEWS_SUBMIT */,
+  "user_teams_view" /* USER_TEAMS_VIEW */,
+  "user_teams_nominate_peer" /* USER_TEAMS_NOMINATE_PEER */,
+  "user_cycles_view" /* USER_CYCLES_VIEW */,
+  "user_cycles_self_review_generate" /* USER_CYCLES_SELF_REVIEW_GENERATE */,
+  "user_cycles_self_review_submit" /* USER_CYCLES_SELF_REVIEW_SUBMIT */
+];
+var ENABLED_UNIVERSAL = Object.fromEntries(
+  UNIVERSAL_FEATURES.map((f) => [f, { enabled: true }])
+);
+var DISABLED_PLUS_GATED = Object.fromEntries(
+  PLUS_GATED_FEATURES.map((f) => [f, { enabled: false }])
+);
+var ENABLED_PLUS_GATED = Object.fromEntries(
+  PLUS_GATED_FEATURES.map((f) => [f, { enabled: true }])
+);
+var DISABLED_PRO_GATED = Object.fromEntries(
+  PRO_GATED_FEATURES.map((f) => [f, { enabled: false }])
+);
+var ENABLED_PRO_GATED = Object.fromEntries(
+  PRO_GATED_FEATURES.map((f) => [f, { enabled: true }])
+);
+var DISABLED_TEAM_GATED = Object.fromEntries(
+  TEAM_GATED_FEATURES.map((f) => [f, { enabled: false }])
+);
+var PRO_TIER_TOKEN_BUDGET = 1e6;
+var TIER_FEATURES = {
+  FREE: {
+    tier: "FREE",
+    features: {
+      ...DISABLED_ORG_TEAM_FEATURES,
+      ...ENABLED_UNIVERSAL,
+      ...DISABLED_PLUS_GATED,
+      ...DISABLED_PRO_GATED,
+      ...DISABLED_TEAM_GATED,
+      ["page_team_view" /* PAGE_TEAM_VIEW */]: { enabled: false },
+      ["basic_brags" /* BASIC_BRAGS */]: { enabled: true },
+      ["basic_organizations" /* BASIC_ORGANIZATIONS */]: { enabled: true },
+      ["ai_report_generation" /* AI_REPORT_GENERATION */]: {
+        enabled: true,
+        quota: 2,
+        resetPeriod: "monthly"
+      },
+      ["pdf_export" /* PDF_EXPORT */]: { enabled: true, quota: 3, resetPeriod: "monthly" },
+      ["share_links" /* SHARE_LINKS */]: { enabled: true, quota: 5 },
+      // max 5 active
+      ["objectives" /* OBJECTIVES */]: { enabled: true, quota: 3 },
+      // max 3 active
+      ["advanced_notifications" /* ADVANCED_NOTIFICATIONS */]: { enabled: true },
+      ["full_export_import" /* FULL_EXPORT_IMPORT */]: { enabled: true },
+      ["cli_turbo_mode" /* CLI_TURBO_MODE */]: { enabled: false },
+      ["priority_support" /* PRIORITY_SUPPORT */]: { enabled: false },
+      ["early_access" /* EARLY_ACCESS */]: { enabled: false },
+      ["smart_goal_suggestions" /* SMART_GOAL_SUGGESTIONS */]: { enabled: false },
+      ["ai_powered_suggestions" /* AI_POWERED_SUGGESTIONS */]: { enabled: false },
+      ["ai_token_budget" /* AI_TOKEN_BUDGET */]: { enabled: false },
+      ["generate_objectives" /* GENERATE_OBJECTIVES */]: { enabled: false },
+      ["multi_email" /* MULTI_EMAIL */]: { enabled: true }
+    }
+  },
+  PLUS: {
+    tier: "PLUS",
+    features: {
+      ...DISABLED_ORG_TEAM_FEATURES,
+      ...ENABLED_UNIVERSAL,
+      ...ENABLED_PLUS_GATED,
+      ...DISABLED_PRO_GATED,
+      ...DISABLED_TEAM_GATED,
+      ["page_team_view" /* PAGE_TEAM_VIEW */]: { enabled: false },
+      ["basic_brags" /* BASIC_BRAGS */]: { enabled: true },
+      ["basic_organizations" /* BASIC_ORGANIZATIONS */]: { enabled: true },
+      ["ai_report_generation" /* AI_REPORT_GENERATION */]: { enabled: true, quota: 30, resetPeriod: "monthly" },
+      ["pdf_export" /* PDF_EXPORT */]: {
+        enabled: true,
+        quota: 15,
+        resetPeriod: "monthly"
+      },
+      ["share_links" /* SHARE_LINKS */]: { enabled: true, quota: 20 },
+      // max 20 active
+      ["objectives" /* OBJECTIVES */]: { enabled: true, quota: 4 },
+      // max 4 active
+      ["advanced_notifications" /* ADVANCED_NOTIFICATIONS */]: { enabled: true },
+      ["full_export_import" /* FULL_EXPORT_IMPORT */]: { enabled: true },
+      ["cli_turbo_mode" /* CLI_TURBO_MODE */]: { enabled: false },
+      ["priority_support" /* PRIORITY_SUPPORT */]: { enabled: true },
+      ["early_access" /* EARLY_ACCESS */]: { enabled: false },
+      ["smart_goal_suggestions" /* SMART_GOAL_SUGGESTIONS */]: { enabled: true },
+      ["ai_powered_suggestions" /* AI_POWERED_SUGGESTIONS */]: { enabled: true, quota: 30, resetPeriod: "monthly" },
+      ["ai_token_budget" /* AI_TOKEN_BUDGET */]: { enabled: false },
+      ["generate_objectives" /* GENERATE_OBJECTIVES */]: { enabled: true },
+      ["multi_email" /* MULTI_EMAIL */]: { enabled: true }
+    }
+  },
+  PRO: {
+    tier: "PRO",
+    features: {
+      ...DISABLED_ORG_TEAM_FEATURES,
+      ...ENABLED_UNIVERSAL,
+      ...ENABLED_PLUS_GATED,
+      ...ENABLED_PRO_GATED,
+      ...DISABLED_TEAM_GATED,
+      ["page_team_view" /* PAGE_TEAM_VIEW */]: { enabled: false },
+      ["basic_brags" /* BASIC_BRAGS */]: { enabled: true },
+      ["basic_organizations" /* BASIC_ORGANIZATIONS */]: { enabled: true },
+      ["ai_report_generation" /* AI_REPORT_GENERATION */]: {
+        enabled: true,
+        tokenQuota: PRO_TIER_TOKEN_BUDGET,
+        resetPeriod: "monthly"
+      },
+      ["pdf_export" /* PDF_EXPORT */]: { enabled: true },
+      // unlimited
+      ["share_links" /* SHARE_LINKS */]: { enabled: true },
+      // unlimited
+      ["objectives" /* OBJECTIVES */]: { enabled: true },
+      // unlimited
+      ["advanced_notifications" /* ADVANCED_NOTIFICATIONS */]: { enabled: true },
+      ["full_export_import" /* FULL_EXPORT_IMPORT */]: { enabled: true },
+      ["cli_turbo_mode" /* CLI_TURBO_MODE */]: { enabled: true },
+      ["priority_support" /* PRIORITY_SUPPORT */]: { enabled: true },
+      ["early_access" /* EARLY_ACCESS */]: { enabled: true },
+      ["smart_goal_suggestions" /* SMART_GOAL_SUGGESTIONS */]: { enabled: true },
+      ["ai_powered_suggestions" /* AI_POWERED_SUGGESTIONS */]: { enabled: true },
+      ["ai_token_budget" /* AI_TOKEN_BUDGET */]: {
+        enabled: true,
+        tokenQuota: PRO_TIER_TOKEN_BUDGET,
+        resetPeriod: "monthly"
+      },
+      ["generate_objectives" /* GENERATE_OBJECTIVES */]: { enabled: true },
+      ["multi_email" /* MULTI_EMAIL */]: { enabled: true }
+    }
+  }
+};
+
+// ../server/src/utils/access-control/roles.ts
+function deriveEnabledFeatures(tier) {
+  const config = TIER_FEATURES[tier];
+  if (!config) return [];
+  return Object.entries(config.features).filter(([, limit]) => limit.enabled).map(([f]) => f);
+}
+var PLAN_ROLE_FEATURES = {
+  "plan:FREE": deriveEnabledFeatures("FREE"),
+  "plan:PLUS": deriveEnabledFeatures("PLUS"),
+  "plan:PRO": deriveEnabledFeatures("PRO")
+};
+var ORG_ADMIN_SHARED_FEATURES = [
+  "org_access" /* ORG_ACCESS */,
+  "org_mutate_base" /* ORG_MUTATE_BASE */,
+  "org_admin_access" /* ORG_ADMIN_ACCESS */,
+  "org_growth_admin_access" /* ORG_GROWTH_ADMIN_ACCESS */,
+  "manager_tier_access" /* MANAGER_TIER_ACCESS */,
+  "org_members_manage" /* ORG_MEMBERS_MANAGE */,
+  "org_invites_manage" /* ORG_INVITES_MANAGE */,
+  "org_teams_manage" /* ORG_TEAMS_MANAGE */,
+  "org_growth_view" /* ORG_GROWTH_VIEW */,
+  "org_career_metrics_manage" /* ORG_CAREER_METRICS_MANAGE */,
+  "org_cycles_manage" /* ORG_CYCLES_MANAGE */,
+  "org_stats_view" /* ORG_STATS_VIEW */,
+  "org_audit_log_view" /* ORG_AUDIT_LOG_VIEW */,
+  "org_billing_manage" /* ORG_BILLING_MANAGE */,
+  "org_notifications_manage" /* ORG_NOTIFICATIONS_MANAGE */
+];
+var ORG_ROLE_FEATURES = {
+  "org:org_owner": [...ORG_ADMIN_SHARED_FEATURES, "org_owner_access" /* ORG_OWNER_ACCESS */, "page_team_view" /* PAGE_TEAM_VIEW */, ...TEAM_GATED_FEATURES],
+  "org:org_admin": [...ORG_ADMIN_SHARED_FEATURES, "page_team_view" /* PAGE_TEAM_VIEW */, ...TEAM_GATED_FEATURES],
+  // growth_admin: matches canManageGrowth (owner/admin/growth_admin) but NOT
+  // isOrgAdminRole (owner/admin only) — no ORG_ADMIN_ACCESS or its dependents
+  // (members/invites/teams/stats/audit-log/billing/notifications manage).
+  "org:growth_admin": [
+    "org_access" /* ORG_ACCESS */,
+    "org_mutate_base" /* ORG_MUTATE_BASE */,
+    "org_growth_admin_access" /* ORG_GROWTH_ADMIN_ACCESS */,
+    "manager_tier_access" /* MANAGER_TIER_ACCESS */,
+    "org_growth_view" /* ORG_GROWTH_VIEW */,
+    "org_career_metrics_manage" /* ORG_CAREER_METRICS_MANAGE */,
+    "org_cycles_manage" /* ORG_CYCLES_MANAGE */,
+    "page_team_view" /* PAGE_TEAM_VIEW */,
+    ...TEAM_GATED_FEATURES
+  ],
+  "org:org_member": ["org_access" /* ORG_ACCESS */, "org_mutate_base" /* ORG_MUTATE_BASE */, "page_team_view" /* PAGE_TEAM_VIEW */, ...TEAM_GATED_FEATURES],
+  // org_viewer: read-only — gets view/read subset of team features only.
+  "org:org_viewer": [
+    "org_access" /* ORG_ACCESS */,
+    "page_team_view" /* PAGE_TEAM_VIEW */,
+    "evaluation_comments_read" /* EVALUATION_COMMENTS_READ */,
+    "peer_reviews_view" /* PEER_REVIEWS_VIEW */,
+    "user_teams_view" /* USER_TEAMS_VIEW */,
+    "user_cycles_view" /* USER_CYCLES_VIEW */
+  ]
+};
+var TEAM_ROLE_FEATURES = {
+  "team:owner": [
+    "team_manage" /* TEAM_MANAGE */,
+    "team_owner_actions" /* TEAM_OWNER_ACTIONS */,
+    "team_membership_view" /* TEAM_MEMBERSHIP_VIEW */,
+    "manager_tier_access" /* MANAGER_TIER_ACCESS */,
+    "page_team_view" /* PAGE_TEAM_VIEW */,
+    ...TEAM_GATED_FEATURES
+  ],
+  "team:co_manager": [
+    "team_manage" /* TEAM_MANAGE */,
+    "team_membership_view" /* TEAM_MEMBERSHIP_VIEW */,
+    "manager_tier_access" /* MANAGER_TIER_ACCESS */,
+    "page_team_view" /* PAGE_TEAM_VIEW */,
+    ...TEAM_GATED_FEATURES
+  ],
+  "team:member": [
+    "team_membership_view" /* TEAM_MEMBERSHIP_VIEW */,
+    "page_team_view" /* PAGE_TEAM_VIEW */,
+    ...TEAM_GATED_FEATURES
+  ]
+};
+var ROLE_FEATURES = {
+  ...PLAN_ROLE_FEATURES,
+  ...ORG_ROLE_FEATURES,
+  ...TEAM_ROLE_FEATURES
+};
+var ORG_GROWTH_CAPABLE_ROLE_IDS = Object.keys(ORG_ROLE_FEATURES).filter((id) => ROLE_FEATURES[id].includes("org_growth_admin_access" /* ORG_GROWTH_ADMIN_ACCESS */));
+var ORG_GROWTH_CAPABLE_ROLES = ORG_GROWTH_CAPABLE_ROLE_IDS.map(
+  (id) => id.replace("org:", "")
+);
+
+// ../server/src/utils/badges/badge.constants.ts
+var BadgeKeys = {
+  // Milestone - Brags
+  FIRST_BRAG: "first_brag",
+  BRAGS_10: "10_brags",
+  BRAGS_25: "25_brags",
+  BRAGS_100: "100_brags",
+  BRAGS_500: "500_brags",
+  // Milestone - Features
+  FIRST_OBJECTIVE: "first_objective",
+  FIRST_COMPANY: "first_company",
+  FIRST_REPORT: "first_report",
+  // Streaks
+  STREAK_7_DAY: "7_day_streak",
+  STREAK_30_DAY: "30_day_streak",
+  STREAK_90_DAY: "90_day_streak",
+  // Goal Completion
+  FIRST_OBJECTIVE_COMPLETED: "first_objective_completed",
+  OBJECTIVES_COMPLETED_5: "5_objectives_completed",
+  OBJECTIVES_COMPLETED_25: "25_objectives_completed"
+};
+var BadgeCategories = {
+  MILESTONE: "milestone",
+  STREAK: "streak",
+  GOAL: "goal"
+};
+var BADGE_DEFINITIONS = [
+  // Milestone - Brags
+  { key: BadgeKeys.FIRST_BRAG, category: BadgeCategories.MILESTONE, threshold: 1 },
+  { key: BadgeKeys.BRAGS_10, category: BadgeCategories.MILESTONE, threshold: 10 },
+  { key: BadgeKeys.BRAGS_25, category: BadgeCategories.MILESTONE, threshold: 25 },
+  { key: BadgeKeys.BRAGS_100, category: BadgeCategories.MILESTONE, threshold: 100 },
+  { key: BadgeKeys.BRAGS_500, category: BadgeCategories.MILESTONE, threshold: 500 },
+  // Milestone - Features
+  { key: BadgeKeys.FIRST_OBJECTIVE, category: BadgeCategories.MILESTONE, threshold: 1 },
+  { key: BadgeKeys.FIRST_COMPANY, category: BadgeCategories.MILESTONE, threshold: 1 },
+  { key: BadgeKeys.FIRST_REPORT, category: BadgeCategories.MILESTONE, threshold: 1 },
+  // Streaks
+  { key: BadgeKeys.STREAK_7_DAY, category: BadgeCategories.STREAK, threshold: 7 },
+  { key: BadgeKeys.STREAK_30_DAY, category: BadgeCategories.STREAK, threshold: 30 },
+  { key: BadgeKeys.STREAK_90_DAY, category: BadgeCategories.STREAK, threshold: 90 },
+  // Goal Completion
+  {
+    key: BadgeKeys.FIRST_OBJECTIVE_COMPLETED,
+    category: BadgeCategories.GOAL,
+    threshold: 1
+  },
+  { key: BadgeKeys.OBJECTIVES_COMPLETED_5, category: BadgeCategories.GOAL, threshold: 5 },
+  { key: BadgeKeys.OBJECTIVES_COMPLETED_25, category: BadgeCategories.GOAL, threshold: 25 }
+];
+var BRAG_MILESTONE_BADGES = [
+  BadgeKeys.FIRST_BRAG,
+  BadgeKeys.BRAGS_10,
+  BadgeKeys.BRAGS_25,
+  BadgeKeys.BRAGS_100,
+  BadgeKeys.BRAGS_500
+];
+var STREAK_BADGES = [
+  BadgeKeys.STREAK_7_DAY,
+  BadgeKeys.STREAK_30_DAY,
+  BadgeKeys.STREAK_90_DAY
+];
+var OBJECTIVE_COMPLETED_BADGES = [
+  BadgeKeys.FIRST_OBJECTIVE_COMPLETED,
+  BadgeKeys.OBJECTIVES_COMPLETED_5,
+  BadgeKeys.OBJECTIVES_COMPLETED_25
+];
+
+// ../../packages/types/domain/story-categories.ts
+var STORY_CATEGORY_LABELS = {
+  leadership: "Leadership",
+  technical_excellence: "Technical Excellence",
+  problem_solving: "Problem Solving",
+  innovation: "Innovation",
+  teamwork: "Teamwork",
+  communication: "Communication",
+  project_delivery: "Project Delivery",
+  customer_impact: "Customer Impact",
+  mentorship: "Mentorship",
+  process_improvement: "Process Improvement"
+};
+
+// src/tools/story-tool-shared.ts
+var NOT_AUTHENTICATED = {
+  content: [{ type: "text", text: 'Not authenticated with BragDuck. Please call the "login" tool first.' }],
+  isError: true
+};
+var toolError = (text) => ({ content: [{ type: "text", text }], isError: true });
+async function runForUser(failure, run) {
+  const planError = await requirePaidPlan();
+  if (planError) return planError;
+  try {
+    const userInfo = getUserInfo();
+    if (!userInfo) return NOT_AUTHENTICATED;
+    return await run(userInfo.id);
+  } catch (error) {
+    if (error instanceof Error && (error.message === "NOT_AUTHENTICATED" || error.message === "TOKEN_EXPIRED")) {
+      return NOT_AUTHENTICATED;
+    }
+    return toolError(`${failure}: ${error instanceof Error ? error.message : String(error)}`);
+  }
+}
+
+// src/tools/get-story.ts
+var getStoryTool = {
+  name: "get_story",
+  description: "Get one STAR interview story from BragDuck in full: Situation, Task, Action, Result, competencies, category, Strength/Impact scores (1-10) and the AI summary of how to improve it. Call this before update_story so the improvement builds on the current text. Story IDs come from list_stories.",
+  inputSchema: {
+    type: "object",
+    properties: {
+      story_id: { type: "string", description: "ID of the story (from list_stories)" }
+    },
+    required: ["story_id"]
+  },
+  annotations: { title: "Get story", readOnlyHint: true }
+};
+function formatStory(story) {
+  const category = story.category ? STORY_CATEGORY_LABELS[story.category] : null;
+  return [
+    `**${story.title}** (ID: ${story.id})`,
+    `${category ? `Category: ${category} | ` : ""}Strength: ${story.strengthScore ?? "-"}/10 | Impact: ${story.impactScore ?? "-"}/10`,
+    `How to improve: ${story.aiSummary || "Not rated yet"}`,
+    `Competencies: ${story.competencies.length > 0 ? story.competencies.join(", ") : "None"}`,
+    "",
+    `Situation: ${story.situation}`,
+    `Task: ${story.task}`,
+    `Action: ${story.action}`,
+    `Result: ${story.result}`
+  ].join("\n");
+}
+function handleGetStory(input) {
+  return runForUser("Failed to get story", async (userId) => {
+    const story = await apiRequest(`/v1/users/${userId}/stories/${input.story_id}`);
+    return { content: [{ type: "text", text: formatStory(story) }] };
+  });
+}
+
+// src/tools/update-story.ts
+var updateStoryTool = {
+  name: "update_story",
+  description: "Update a STAR interview story in BragDuck, for example to make it stronger: a sharper Situation, concrete first-person Actions, and a Result with real, measurable impact. Read the story with get_story first and only send the fields you change; the rest are kept. Never invent metrics or facts \u2014 ask the user for missing numbers. Show the changes as a markdown table (Field | Current | Proposed) and call this in the same response \u2014 the tool permission prompt (Allow/Deny) IS the confirmation. Changing the title or STAR text re-scores the story shortly after.",
+  inputSchema: {
+    type: "object",
+    properties: {
+      story_id: { type: "string", description: "ID of the story (from list_stories)" },
+      title: { type: "string", minLength: 5, maxLength: 200, description: "New title" },
+      situation: { type: "string", minLength: 10, description: "New Situation: context and background" },
+      task: { type: "string", minLength: 10, description: "New Task: your responsibility or challenge" },
+      action: { type: "string", minLength: 10, description: "New Action: what you specifically did" },
+      result: { type: "string", minLength: 10, description: "New Result: the outcome and measurable impact" },
+      competencies: {
+        type: "array",
+        items: { type: "string", minLength: 2, maxLength: 50 },
+        maxItems: 20,
+        description: "Replaces the competencies the story demonstrates"
+      },
+      bragIds: {
+        type: "array",
+        items: { type: "string" },
+        maxItems: 20,
+        description: "Replaces the IDs of the brags that back the story"
+      },
+      category: {
+        type: ["string", "null"],
+        description: "Interview category (e.g. leadership, technical_excellence, problem_solving, innovation, teamwork, communication, project_delivery, customer_impact, mentorship, process_improvement), or null to clear it"
+      },
+      orgId: {
+        type: ["string", "null"],
+        description: "Organisation ID to move the story to, or null to remove it from any organisation"
+      }
+    },
+    required: ["story_id"]
+  },
+  annotations: { title: "Update story", destructiveHint: false, idempotentHint: true }
+};
+var UPDATABLE_FIELDS = [
+  "title",
+  "situation",
+  "task",
+  "action",
+  "result",
+  "competencies",
+  "bragIds",
+  "category",
+  "orgId"
+];
+var RATED_FIELDS = /* @__PURE__ */ new Set(["title", "situation", "task", "action", "result"]);
+function handleUpdateStory(input) {
+  const body = Object.fromEntries(
+    UPDATABLE_FIELDS.filter((field) => input[field] !== void 0).map((field) => [field, input[field]])
+  );
+  if (Object.keys(body).length === 0) {
+    return Promise.resolve(toolError("Nothing to update: pass at least one field to change."));
+  }
+  return runForUser("Failed to update story", async (userId) => {
+    const story = await apiRequest(`/v1/users/${userId}/stories/${input.story_id}`, {
+      method: "PATCH",
+      body
+    });
+    const rescored = Object.keys(body).some((field) => RATED_FIELDS.has(field)) ? "\nThe story is being re-scored; call get_story in a moment to see the new scores." : "";
+    return { content: [{ type: "text", text: `Story updated: "${story.title}"${rescored}` }] };
+  });
+}
+
+// src/tools/delete-story.ts
+var deleteStoryTool = {
+  name: "delete_story",
+  description: "Delete a STAR interview story from BragDuck. It cannot be restored from the agent. Before calling, name the story (title) and ask the user for an explicit yes in plain text; never delete as part of improving a story \u2014 use update_story for that.",
+  inputSchema: {
+    type: "object",
+    properties: {
+      story_id: { type: "string", description: "ID of the story to delete (from list_stories)" }
+    },
+    required: ["story_id"]
+  },
+  annotations: { title: "Delete story", destructiveHint: true, idempotentHint: true }
+};
+function handleDeleteStory(input) {
+  return runForUser("Failed to delete story", async (userId) => {
+    await apiRequest(`/v1/users/${userId}/stories/${input.story_id}`, { method: "DELETE" });
+    return { content: [{ type: "text", text: "Story deleted." }] };
+  });
+}
+
+// src/tools/list-stories.ts
+var listStoriesTool = {
+  name: "list_stories",
+  description: "List STAR interview stories from BragDuck. Use when the user wants to review their interview stories or search for stories by category.",
+  inputSchema: {
+    type: "object",
+    properties: {
+      limit: {
+        type: "number",
+        minimum: 1,
+        maximum: 100,
+        description: "Max stories to return (default 10)"
+      },
+      category: {
+        type: "string",
+        description: "Filter by category (e.g. leadership, technical_excellence, problem_solving)"
+      },
+      orgId: {
+        type: "string",
+        description: "Filter by organisation ID"
+      },
+      search: {
+        type: "string",
+        description: "Search stories by keyword"
+      }
+    }
+  }
+};
+async function handleListStories(input) {
+  const planError = await requirePaidPlan();
+  if (planError) return planError;
+  try {
+    const userInfo = getUserInfo();
+    if (!userInfo) {
+      return {
+        content: [{
+          type: "text",
+          text: 'Not authenticated with BragDuck. Please call the "login" tool first.'
+        }],
+        isError: true
+      };
+    }
+    const params = {
+      page: "1",
+      perPage: String(input.limit || 10)
+    };
+    if (input.category) params.category = input.category;
+    if (input.orgId) params.orgId = input.orgId;
+    if (input.search) params.search = input.search;
+    const response = await apiRequest(
+      `/v1/users/${userInfo.id}/stories`,
+      { params }
+    );
+    if (response.items.length === 0) {
+      return {
+        content: [{ type: "text", text: "No stories found." }]
+      };
+    }
+    const lines = response.items.map((story) => {
+      const categoryLabel = story.category ? STORY_CATEGORY_LABELS[story.category] : null;
+      const categoryPart = categoryLabel ? `Category: ${categoryLabel} | ` : "";
+      const strengthPart = `Strength: ${story.strengthScore ?? "-"}/10`;
+      const impactPart = `Impact: ${story.impactScore ?? "-"}/10`;
+      const summary2 = story.aiSummary || "No AI summary yet";
+      const competencies = story.competencies.length > 0 ? story.competencies.join(", ") : "None";
+      return `**${story.title}** (ID: ${story.id})
+${categoryPart}${strengthPart} | ${impactPart}
+${summary2}
+Competencies: ${competencies}`;
+    });
+    const summary = `Found ${response.total} stories (showing ${response.items.length}):`;
+    return {
+      content: [{ type: "text", text: `${summary}
+
+${lines.join("\n\n")}` }]
+    };
+  } catch (error) {
+    if (error instanceof Error && (error.message === "NOT_AUTHENTICATED" || error.message === "TOKEN_EXPIRED")) {
+      return {
+        content: [{
+          type: "text",
+          text: 'Not authenticated with BragDuck. Please call the "login" tool first.'
+        }],
+        isError: true
+      };
+    }
+    return {
+      content: [{
+        type: "text",
+        text: `Failed to list stories: ${error instanceof Error ? error.message : String(error)}`
+      }],
+      isError: true
+    };
+  }
+}
+
+// src/index.ts
+var server = new Server(
+  {
+    name: "bragduck",
+    version: "1.0.0"
+  },
+  {
+    capabilities: {
+      tools: {}
+    },
+    instructions: 'BragDuck tracks career achievements ("brags") that feed into periodic performance reports. A strong brag needs: a concrete accomplishment, measurable or observable impact, and ideally a reference link. \n\nRESOLVING "THIS" IN "BRAG WITH THIS"\nWhen the user says "brag with this" (or "brag about this", "log this", etc.) without elaborating, "this" refers to the most recent work visible in the current session: the latest git diff, the last commit message, the most recently discussed code change, or a PR just mentioned. Look for that context first before asking anything. Only start the interview (see below) if no such context exists in the session.\n\nSTEP 1 \u2014 ASSESS BRAGABILITY\nBefore doing anything else, judge whether the subject is worth logging:\n- NOT bragable: vague status updates, trivial tasks with no impact,   or things a reasonable person would not list on a performance review.   Tell the user directly that it is not bragable and explain why in one sentence.   Note that brags feed the AI report generator \u2014 weak entries dilute the signal.\n- POTENTIALLY bragable but thin: start the interview (see below).\n- Clearly bragable with full context: skip the interview, go straight to STEP 2.\n\nTHE INTERVIEW\nConduct a short conversational interview to gather what you need. Ask ONE question at a time \u2014 do not list multiple questions at once. Each question should follow naturally from the previous answer, like a real conversation. Suggested question order (adapt based on what you already know):\n  1. "What did you work on?" (skip if already known)\n  2. "What was the outcome or result?"\n  3. "Who was affected \u2014 just you, the team, or wider?"\n  4. "Do you have a link \u2014 PR, ticket, commit, or doc?" (skip if already have one)\nStop the interview as soon as you have enough to write a strong brag. Never ask more than 4 questions total.\n\nSTEP 2 \u2014 SELECT ORGANISATION\nBefore composing the brag, determine which company it belongs to:\n1. Call list_organisations. It returns the org list AND any saved preference for the current directory.\n2. If a saved preference exists, use that orgId silently \u2014 do not ask the user.\n3. If no saved preference, present the org list to the user and ask: "Which company does this belong to?"    Wait for their answer, then call save_org_preference with the chosen orgId and orgName.\n4. If the user has only one organisation, select it automatically and save the preference.\n5. If the user has no organisations, skip this step and proceed without an orgId.\n\nSTEP 3 \u2014 PREVIEW + LOG\nCompose the brag from all gathered context. Do NOT call preview_brag. Instead, in your response text render the brag fields as a markdown table with two columns (Field | Value), one row per field, in this order: Title, Type, Impact Level, Impact Details, Description, Tags, References, Organisation. In the very same response, after the table, call log_brag with those field values (including orgId). The native tool-permission prompt (Allow / Deny) that appears below the table IS the confirmation \u2014 do not add any text question. If the user denies or asks for changes, adjust and repeat this step.\n\nSTEP 4 \u2014 DONE\nOnce log_brag is allowed and succeeds, confirm with one short sentence.\n\nQUICK BRAG (via /brag or raw text)\nWhen the user says "/brag" followed by text, or pastes a long block of text and asks to log it, use the quick_brag tool instead of the interview flow. quick_brag accepts raw text and uses AI to extract and structure it into a proper brag automatically. Skip the interview, skip the preview table \u2014 just call quick_brag with the text.\n\nINTERVIEW STORIES (log_story)\nWhen the user discusses interview prep, behavioral questions, or asks to save a STAR story, use log_story instead of log_brag. Stories are structured with Situation/Task/Action/Result fields and competency tags. Follow the same org-selection flow (list_organisations \u2192 saved preference or ask). Preview the story as a markdown table (Field | Value) before calling log_story in the same response.\nUse list_stories to browse existing stories. Supports filters: category, orgId, search, limit. Stories include AI-generated strength and impact scores.\n\nIMPROVING STORIES (get_story, update_story, delete_story)\nTo make a story stronger: find it with list_stories, read it in full with get_story (its AI summary says what is weak), then propose a stronger version \u2014 a clear Situation, first-person Actions, and a Result with measurable impact. Never invent numbers or facts; ask the user for anything missing. Show the changes as a markdown table (Field | Current | Proposed) and call update_story in the same response with only the changed fields; the permission prompt IS the confirmation. Only call delete_story after the user explicitly says yes to deleting that named story.\n\nGENERAL RULES\n- Never fabricate details, metrics, or links. If unsure, ask.\n- "Is this bragable?" deserves a direct honest answer \u2014 not a tool call.\n- Call login first if any tool returns an authentication error.'
+  }
+);
+server.setRequestHandler(ListToolsRequestSchema, async () => {
+  return {
+    tools: [loginTool, logBragTool, quickBragTool, listBragsTool, listObjectivesTool, linkBragToKeyResultTool, listOrganisationsTool, saveOrgPreferenceTool, logStoryTool, listStoriesTool, getStoryTool, updateStoryTool, deleteStoryTool]
+  };
 });
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
-    const { name, arguments: args } = request.params;
-    switch (name) {
-        case 'login':
-            return handleLogin(args);
-        case 'preview_brag':
-            return handlePreviewBrag(args);
-        case 'log_brag':
-            return handleLogBrag(args);
-        case 'quick_brag':
-            return handleQuickBrag(args);
-        case 'list_brags':
-            return handleListBrags(args);
-        case 'list_objectives':
-            return handleListObjectives();
-        case 'link_brag_to_key_result':
-            return handleLinkBragToKeyResult(args);
-        case 'list_organisations':
-            return handleListOrganisations();
-        case 'save_org_preference':
-            return handleSaveOrgPreference(args);
-        case 'log_story':
-            return handleLogStory(args);
-        case 'list_stories':
-            return handleListStories(args);
-        default:
-            throw new McpError(ErrorCode.MethodNotFound, `Unknown tool: ${name}`);
-    }
+  const { name, arguments: args } = request.params;
+  switch (name) {
+    case "login":
+      return handleLogin(args);
+    case "preview_brag":
+      return handlePreviewBrag(args);
+    case "log_brag":
+      return handleLogBrag(args);
+    case "quick_brag":
+      return handleQuickBrag(args);
+    case "list_brags":
+      return handleListBrags(args);
+    case "list_objectives":
+      return handleListObjectives();
+    case "link_brag_to_key_result":
+      return handleLinkBragToKeyResult(args);
+    case "list_organisations":
+      return handleListOrganisations();
+    case "save_org_preference":
+      return handleSaveOrgPreference(args);
+    case "log_story":
+      return handleLogStory(args);
+    case "list_stories":
+      return handleListStories(args);
+    case "get_story":
+      return handleGetStory(args);
+    case "update_story":
+      return handleUpdateStory(args);
+    case "delete_story":
+      return handleDeleteStory(args);
+    default:
+      throw new McpError(ErrorCode.MethodNotFound, `Unknown tool: ${name}`);
+  }
 });
-const transport = new StdioServerTransport();
+var transport = new StdioServerTransport();
 await server.connect(transport);
 //# sourceMappingURL=index.js.map