tabtree-mcp 1.5.0 → 1.6.0

package/README.md

@@ -68,8 +68,9 @@ that reads a JSON config:
 | `search_maps` | Searches the whole library — map names, nodes, notes, shapes, stickies. |
 | `create_mindmap` | Creates a mind map from a markdown outline — or a **note** (a page of text) or a **Gantt** (give it dates). |
 | `create_kanban` | Creates a kanban board in one go: columns, and cards with owners, start and due days, priority, colour labels, time estimates, an Ai4X lever, a note (a Google Meet link in it becomes clickable), a link and sub-tasks. |
-| `create_board` | Creates a whiteboard — shapes and arrows that stay anchored in the app. |
+| `create_board` | Creates a whiteboard — shapes, **images** (`kind: "image"` + a PNG/JPEG/WebP/GIF/SVG `file`: logos, photos, posters) and arrows that stay anchored in the app. |
 | `propose_changes` | Changes a map or kanban you already have — see below. |
+| `harvest` | Keeps what matters from the conversation — facts, decisions, lessons — in your Company knowledge and 🌱 Lessons maps. Nothing is filed until you accept it in TabTree. |
 
 Every creation tool takes an optional `folder` and an optional `space`. Name a
 **team space** you are an editor of and the new map lives there: every member

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tabtree-mcp",
-  "version": "1.5.0",
+  "version": "1.6.0",
   "mcpName": "app.tabtree/tabtree",
   "description": "Let Claude read your TabTree library and build mind maps, kanban boards and whiteboards in your TabTree account — team spaces included.",
   "repository": {

package/tabtree-mcp.mjs

@@ -482,6 +482,53 @@ function applyImages(root, images){
   return notes;
 }
 
+// --- Les IMAGES d'un board (2026-10-23) ----------------------------------------------
+// Un logo, une photo, une affiche posés LIBREMENT sur la toile : `doc.images` de l'app
+// ({ id, src, x, y, w, h }), le même tableau que remplit un glisser-déposer. Rapporté : « l'outil
+// qui crée les boards ne sait poser que des pictogrammes intégrés, pas tes fichiers de logo » —
+// Claude avait dû écrire le fichier du board à la main. Un PNG/JPEG/WebP/GIF passe par la porte
+// des captures (`coverFrom` : même budget, même ré-encodage) ; un SVG — la forme ordinaire d'un
+// logo — est gardé tel quel, sans rasterisation (aucun codec ici). Il ne court aucun risque :
+// l'app le peint dans un `<image href>`, où un script ne s'exécute jamais, et `deserialize`
+// accepte tout `data:image/` sur un élément image (c'est ainsi que vit le logo de la toile Ai4X).
+const SVG_BUDGET = 300000;
+function svgSize(txt){
+  const head = (/<svg\b[^>]*>/i.exec(txt) || [""])[0];
+  const num = re => { const m = re.exec(head); const v = m ? parseFloat(m[1]) : NaN; return v > 0 ? v : 0; };
+  let w = num(/\swidth\s*=\s*["']\s*([\d.]+)\s*(?:px)?\s*["']/i), h = num(/\sheight\s*=\s*["']\s*([\d.]+)\s*(?:px)?\s*["']/i);
+  const vb = /\sviewBox\s*=\s*["']\s*[-\d.]+[\s,]+[-\d.]+[\s,]+([\d.]+)[\s,]+([\d.]+)/i.exec(head);
+  if((!w || !h) && vb){ w = parseFloat(vb[1]); h = parseFloat(vb[2]); }
+  return { w, h };
+}
+function boardImageFrom(spec, where){
+  if(spec && typeof spec.data === "string" && /^data:image\/svg\+xml/i.test(spec.data.trim())){
+    const d = spec.data.trim();
+    if(d.length > SVG_BUDGET) throw new Error(`${where}: the SVG is over ${Math.round(SVG_BUDGET / 1024)} KB.`);
+    let txt = "";
+    const b64 = /^data:image\/svg\+xml;base64,([A-Za-z0-9+/=\s]+)$/i.exec(d);
+    if(b64) txt = Buffer.from(b64[1].replace(/\s+/g, ""), "base64").toString("utf8");
+    else { const c = d.indexOf(","); try{ txt = decodeURIComponent(d.slice(c + 1)); }catch(e){ txt = ""; } }
+    if(!/<svg\b/i.test(txt)) throw new Error(`${where}: \`data\` is not an SVG image.`);
+    return { src: "data:image/svg+xml;base64," + Buffer.from(txt, "utf8").toString("base64"), ...svgSize(txt), note: `inline SVG kept as is` };
+  }
+  if(spec && typeof spec.file === "string" && spec.file.trim()){
+    const p = resolve(spec.file.trim());
+    if(existsSync(p) && statSync(p).isFile() && statSync(p).size <= IMG_FILE_MAX){
+      const raw = readFileSync(p);
+      const head = raw.subarray(0, 512).toString("utf8").replace(/^\uFEFF/, "").trimStart();
+      if(/^(<\?xml|<svg\b|<!--|<!DOCTYPE svg)/i.test(head) && /<svg\b/i.test(raw.toString("utf8"))){
+        const txt = raw.toString("utf8");
+        const src = "data:image/svg+xml;base64," + Buffer.from(txt, "utf8").toString("base64");
+        if(src.length > SVG_BUDGET) throw new Error(`${where}: ${basename(p)} is an SVG of ${Math.round(raw.length / 1024)} KB — over the ${Math.round(SVG_BUDGET / 1024)} KB budget. Simplify it, or export it as a PNG.`);
+        return { src, ...svgSize(txt), note: `${basename(p)} (SVG, ${Math.round(src.length / 1024)} KB, kept as is)` };
+      }
+    }
+  }
+  const { img, note } = coverFrom(spec, where);
+  const info = imageInfo(Buffer.from(img.slice(img.indexOf(",") + 1), "base64")) || {};
+  return { src: img, w: info.w || 0, h: info.h || 0, note };
+}
+
 // ---------------------------------------------------------------------------
 // Désignation d'un nœud (partagé mot pour mot avec l'app — voir tabtree-mcp.test.mjs)
 //
@@ -627,7 +674,25 @@ function fitSize(text, w, h, kind, want){
 
 function buildBoardDoc(name, elements, connections, style){
   if(!Array.isArray(elements) || !elements.length) throw new Error("`elements` must be a non-empty list.");
+  const imgCount = elements.filter(e=>e && e.kind === "image").length;
+  if(imgCount > 60) throw new Error("Too many images in one board (60 max).");
+  const imageNotes = [];
   const els = elements.map((e,i)=>{
+    if(e && e.kind === "image"){
+      const where = "elements[" + i + "] (image" + (e.id != null ? " “" + e.id + "”" : "") + ")";
+      const im = boardImageFrom(e, where);
+      imageNotes.push(im.note);
+      // La boîte garde les PROPORTIONS de l'image : un logo étiré se voit tout de suite. Une
+      // seule cote donnée → l'autre en découle ; aucune → 220 px sur le côté long.
+      const ar = (im.w > 0 && im.h > 0) ? im.w / im.h : 1;
+      let w = (+e.w >= 24) ? Math.round(+e.w) : null, h = (+e.h >= 24) ? Math.round(+e.h) : null;
+      if(w && !h) h = Math.max(24, Math.round(w / ar));
+      else if(h && !w) w = Math.max(24, Math.round(h * ar));
+      else if(!w && !h){ if(ar >= 1){ w = 220; h = Math.max(24, Math.round(220 / ar)); } else { h = 220; w = Math.max(24, Math.round(220 * ar)); } }
+      return { lid: String(e.id != null ? e.id : i), kind: "image", text: "", src: im.src,
+               x: Number.isFinite(+e.x) && e.x!=null ? Math.round(+e.x) : null,
+               y: Number.isFinite(+e.y) && e.y!=null ? Math.round(+e.y) : null, w, h };
+    }
     const kind = KINDS.includes(e.kind) ? e.kind : "rect";
     return { lid: String(e.id != null ? e.id : i), kind, text: String(e.text||""),
              x: Number.isFinite(+e.x) && e.x!=null ? Math.round(+e.x) : null,
@@ -684,6 +749,7 @@ function buildBoardDoc(name, elements, connections, style){
       e.x = 60 + lv*320;
       e.y = 60 + idx*170;
     }
+    if(e.kind === "image") continue;
     if(!e.color) e.color = e.kind==="sticky" ? "#fff59d" : (level.get(e.lid)===0 && conns.length ? "#dbeafe" : "#ffffff");
   }
 
@@ -695,6 +761,7 @@ function buildBoardDoc(name, elements, connections, style){
   // C'est l'uniformité qui fait qu'une toile remplie a l'air composée.
   const warnings = [];
   for(const e of els){
+    if(e.kind === "image") continue;
     const f = fitSize(e.text, e.w, e.h, e.kind, e.size || 15);
     if(!f.shrunk) continue;
     e.size = f.size;
@@ -704,9 +771,12 @@ function buildBoardDoc(name, elements, connections, style){
   }
 
   // Sortie au format de l'app : shapes / stickies + refs "sh:i" / "st:i"
-  const shapes = [], stickies = [], refOf = new Map();
+  const shapes = [], stickies = [], images = [], refOf = new Map();
   for(const e of els){
-    if(e.kind==="sticky"){
+    if(e.kind==="image"){
+      refOf.set(e.lid, "im:" + images.length);
+      images.push({ id: "im" + images.length, src: e.src, x: e.x, y: e.y, w: e.w, h: e.h });
+    } else if(e.kind==="sticky"){
       refOf.set(e.lid, "st:" + stickies.length);
       stickies.push({ text:e.text, x:e.x, y:e.y, w:e.w, h:e.h, color:e.color, size:e.size||undefined, pic:e.pic||undefined });
     } else {
@@ -726,12 +796,12 @@ function buildBoardDoc(name, elements, connections, style){
              from: refOf.get(c.from), to: refOf.get(c.to) };
   });
   const root = makeNode(name); root.color = "#dbeafe";
-  const doc = { v:1, root, images:[], stickies, board:true, shapes, arrows, draws:[] };
+  const doc = { v:1, root, images, stickies, board:true, shapes, arrows, draws:[] };
   // `style` n'est émis que s'il est posé : l'app elle-même l'omet quand il vaut le défaut
   // (styleParDefaut), et le JSON d'un board ordinaire ne doit pas gagner un octet.
   const st = okStyleMcp(style);
   if(st) doc.style = st;
-  return { doc, warnings };
+  return { doc, warnings, imageNotes };
 }
 
 // Habillage du document : familles de caractères, forme des nœuds, fond de page. Liste
@@ -852,6 +922,7 @@ function teamLocalId(owner, key){
   return "T" + t + "_" + key;
 }
 let cloudSpacesCache = null;   // les espaces vus au dernier chargement — la création les résout par nom
+let cloudMe = null;            // le compte de la clé, vu au dernier chargement — la récolte en a besoin pour « Personal »
 async function cloudLibrary(){
   const pages = [];
   let total = Infinity, off = 0, j = null;
@@ -864,6 +935,7 @@ async function cloudLibrary(){
     off += got.length;
   }
   const me = (j && j.me) || null;
+  cloudMe = me;
   cloudSpacesCache = (j && j.spaces) || [];
   const spaceName = (owner, key)=>{ const sp = cloudSpacesCache.find(x=>x.owner === owner && x.space_key === key); return sp ? sp.name : null; };
   const folders = new Map((j && j.folders || []).filter(f=>f && f.folder_key).map(f=>[(f.owner || "") + "|" + f.folder_key, f]));
@@ -873,6 +945,15 @@ async function cloudLibrary(){
     while(f && !seen.has(f.folder_key) && out.length <= 16){ seen.add(f.folder_key); out.unshift(f.name); f = f.parent_key ? (folders.get((owner || "") + "|" + f.parent_key) || folders.get("|" + f.parent_key)) : null; }
     return out.length ? out.join(" / ") : null;
   };
+  // L'ESPACE d'une carte (1.6.0, pour la récolte) : le sien, sinon celui du dossier RACINE qui la contient —
+  // la règle de l'app (`spaceOfMapIn` : ce qui est dans un dossier hérite de la racine). Sans elle, une carte
+  // « Company knowledge » rangée dans un dossier d'un espace passerait pour une carte de Personal.
+  const rootSpaceOf = (owner, k)=>{
+    const seen = new Set();
+    let f = folders.get((owner || "") + "|" + k) || folders.get("|" + k);
+    while(f && f.parent_key && !seen.has(f.folder_key) && seen.size <= 16){ seen.add(f.folder_key); f = folders.get((owner || "") + "|" + f.parent_key) || folders.get("|" + f.parent_key); }
+    return (f && f.space_key) || null;
+  };
   const out = [];
   for(const r of pages){
     const doc = r && r.doc;
@@ -893,6 +974,8 @@ async function cloudLibrary(){
       nodes: countNodes(doc.root),
       elements: doc.board ? ((doc.shapes||[]).length + (doc.stickies||[]).length + (doc.arrows||[]).length + (doc.draws||[]).length) : undefined,
       mtime: String(r.updated_at || "").slice(0,16).replace("T"," "),
+      updatedAt: String(r.updated_at || ""),
+      spaceKey: r.space_key || (r.folder_key ? rootSpaceOf(owner, r.folder_key) : null),
       doc
     });
   }
@@ -1007,6 +1090,9 @@ async function writeDoc(name, doc, folder, opts){
       where = "  (space “" + sp.name + "”" + (owner !== me ? " — a team space: every member sees it" : "") + ")";
     }
     const id = (owner && me && owner !== me) ? teamLocalId(owner, r.map_key) : r.map_key;
+    // La récolte (1.6.0) crée une carte PUIS y dépose une proposition : il lui faut la clé et le
+    // propriétaire, que la phrase ne rend pas sans perte (une carte d'équipe s'y nomme par son id d'app).
+    if(o.info) return { text: "cloud:" + (id || r.map_key) + where, key: r.map_key, owner, id: id || r.map_key, team: !!(owner && me && owner !== me) };
     return "cloud:" + (id || r.map_key) + where;
   }
   dirOk();
@@ -1038,7 +1124,7 @@ function countForest(roots){ return roots.reduce((n,r)=>n + countNodes(r), 0); }
 // connecteur la refuserait à l'écriture, ou l'app la jetterait à la lecture — dans les deux
 // cas Claude croirait avoir proposé quelque chose qui n'arrive jamais chez l'utilisateur.
 // C'est le défaut du losange, rejoué. Un test compare les deux listes en ensembles.
-const PROP_OPS = ["add","rename","note","check","delete","move","pic","img","persona","tags","assign","priority","due","attr","comment","est","start","cols","link"];
+const PROP_OPS = ["add","rename","note","check","delete","move","pic","img","persona","tags","assign","priority","due","attr","comment","est","start","cols","link","vote"];
 // ⚡ Les ops que l'app applique D'ELLE-MÊME (1.5.0, décidé « hybride » le 2026-10-20) — ≡
 // `PROP_AUTO_OPS` d'app/index.html (le test compare les deux). Plus `cols` quand le tableau n'a
 // pas encore de colonnes (`seed`). C'est l'APP qui décide : le connecteur ne fait que demander
@@ -1231,6 +1317,9 @@ function buildProposalOps(mapDoc0, changes){
       const q = (c[op] == null) ? "" : String(c[op]);
       if(q && !/^\d{4}-(0[1-9]|1[0-2])-(0[1-9]|[12]\d|3[01])$/.test(q)) throw new Error(`${where}: \`${op}\` must be a day written YYYY-MM-DD (or "" to remove it).`);
       out[op] = q;
+    } else if(op === "vote"){
+      // 👍 Un vote est le geste d'une PERSONNE sur le tableau (app, page publiée) : Claude ne vote pas à la place de quelqu'un.
+      throw new Error(`${where}: "vote" is cast by people on the board, not proposed by Claude.`);
     } else if(op === "link"){
       // La liste blanche de l'app (`okOpLink`), en plus étroit : une page web, un e-mail, ou une
       // autre carte (`map:<id>` — l'id que list_maps donne). Jamais `javascript:` ni `data:`.
@@ -1312,7 +1401,7 @@ async function writeProposal(map, note, ops, opts){
   const payload = (id, list, auto)=>Object.assign({
     v: 1, kind: "tabtree-proposal", mapId: id, mapFile: CLOUD ? map.file : basename(map.file), mapName: map.name,
     createdAt: Date.now(), by: "Claude", note: String(note||"").slice(0, 2000), ops: list
-  }, auto ? { auto: true } : {});
+  }, auto ? { auto: true } : {}, o.extra || {});
   const shots = ops.filter(x=>x.op === "img" && x.img).length;
   if(JSON.stringify(payload("x", ops)).length > PROP_FILE_MAX)
     throw new Error("This proposal is too large for TabTree's mailbox (" + Math.round(PROP_FILE_MAX / 1024) + " KB max) — it carries " + shots + " screenshot(s). Send it as several proposals with fewer screenshots each.");
@@ -1491,6 +1580,91 @@ function buildKanbanDoc(args){
   return doc;
 }
 
+// ---------------------------------------------------------------------------
+// 🏁 LA RÉCOLTE D'UNE CONVERSATION (1.6.0, 2026-10-20) — docs/second-brain-harvest-spec.md
+// ---------------------------------------------------------------------------
+// À la fin d'une conversation, Claude envoie ce qui mérite d'être gardé — faits, décisions, leçons — et
+// la personne le range d'un clic. Trois règles portent tout :
+//  · JAMAIS SANS CLIC. Toute la récolte part à la revue (`review`), marquée `origin: "harvest"`, et l'app
+//    refuse de l'appliquer seule même si chaque op est dans PROP_AUTO_OPS (`propAutoOk`). L'appel d'outil
+//    est fait par le MODÈLE, qui a pu lire une page qui lui dicte quoi envoyer : rien de ce qu'il envoie ne
+//    devient un FAIT sans un geste dans l'app.
+//  · LE LOT ENTIER OU RIEN. Un élément invalide fait échouer l'appel, en le nommant : une récolte est
+//    petite et la personne l'a vue dans la conversation — mieux vaut la corriger que la ranger à moitié.
+//  · UN ESPACE PAR APPEL. Les faits ne traversent pas les domaines ; les LEÇONS, elles, vont toujours dans
+//    la carte « 🌱 Lessons » de Personal : la pensée appartient à la personne.
+// Les entrées ont la grammaire de 📚 File it (`kbFileEntry`) : un titre, une note qui finit par sa
+// provenance, des attributs « Nom: valeur » en enfants, rien de coché (une case recopiée serait une tâche
+// FANTÔME dans My work).
+// ≡ `KNOW_NAME` et `KNOW_DEFAULT` d'app/index.html (le test compare) : le connecteur cherche la carte de
+// connaissance par ce NOM — la marque `know` est un champ d'index du compte, qu'il ne lit pas encore — et
+// la crée avec ces sections quand l'espace n'en a pas.
+const KNOW_NAME = "Company knowledge";
+const KNOW_DEFAULT = ["🔑 Access — who has what", "🌐 Domains & infrastructure", "🧰 Tools & subscriptions",
+                        "💼 Clients & deals", "📖 Playbooks", "⚖️ Decisions"];
+const LESSONS_NAME = "🌱 Lessons";
+const HARVEST_MAX = 12;
+// ≡ app/index.html, comparés caractère par caractère par le test : un secret que l'app retirerait au
+// rangement et que le connecteur aurait laissé partir serait déjà dans la table `proposals`.
+const KB_SECRET_RES = [
+    /\b(pass(word|wd|code|phrase)|pwd|mdp|mot de passe|secret|api[ _-]?key|token)\s*[:=]/i,
+    /\b(sk-(ant-)?[A-Za-z0-9_-]{8,}|gh[pousr]_[A-Za-z0-9]{12,}|xox[abpr]-[A-Za-z0-9-]{8,}|AKIA[0-9A-Z]{12,}|AIza[0-9A-Za-z_-]{20,})/,
+    /\bBearer [A-Za-z0-9._~+\/-]{12,}/i
+  ];
+function kbSecretLike(line){
+    const s = String(line == null ? "" : line);
+    if(KB_SECRET_RES.some(re => re.test(s))) return true;
+    for(const w of s.split(/\s+/)){
+      if(w.length >= 32 && !/^(https?:|mailto:|map:|fsref:)/i.test(w) && /^[A-Za-z0-9._~+\/=-]+$/.test(w)
+         && /[A-Za-z]/.test(w) && /[0-9]/.test(w)) return true;
+    }
+    return false;
+  }
+function knowNorm(s){ return String(s || "").toLowerCase().normalize("NFD").replace(/[̀-ͯ]/g, ""); }
+const hvSame = (a, b)=>knowNorm(a).trim() === knowNorm(b).trim();
+// Un texte d'une ligne, borné. `[` et `]` deviennent des parenthèses dans ce qui passe par le markdown d'un
+// `add` : « [x] » y serait lu comme une case, « [a](b) » comme un lien.
+function hvLine(v, max){ return (typeof v === "string") ? v.replace(/[\x00-\x1f\x7f]/g, " ").replace(/\s+/g, " ").trim().slice(0, max) : ""; }
+function hvMd(v){ return String(v).replace(/\[/g, "(").replace(/\]/g, ")"); }
+// Un JOUR qui existe : la forme (`DAY_RE`) puis l'aller-retour par le calendrier — le piège du 30 février,
+// payé par 🏁 Harvest côté app.
+function hvDayOk(s){ if(!DAY_RE.test(s)) return false; const d = new Date(s + "T00:00:00Z"); return !isNaN(d) && d.toISOString().slice(0, 10) === s; }
+const okNid = v=>typeof v === "string" && /^[A-Za-z0-9_]{1,40}$/.test(v);
+// Le document d'une carte de connaissance (ou de leçons) NEUVE : celui que `kbKnowCreate` écrirait.
+function hvNewDoc(name, sections){
+  const root = makeNode(name);
+  root.color = "#dbeafe";
+  root.children = sections.map(t=>makeNode(t));
+  assignIds(root);
+  return { v:1, root, images:[], stickies:[] };
+}
+// La carte la plus récente qui porte EXACTEMENT ce nom dans une portée (propriétaire + espace ; Personal =
+// pas d'espace), jamais un board, un kanban, un tableur ni un Gantt — la règle de `kbKnowMapId`.
+function hvFindMap(lib, owner, spaceKey, name){
+  return lib.filter(m=>m.owner === owner && (m.spaceKey || null) === (spaceKey || null)
+                    && (m.kind === "map" || m.kind === "note") && hvSame(m.name, name))
+            .sort((x, y)=>String(y.updatedAt).localeCompare(String(x.updatedAt)))[0] || null;
+}
+// Les ops d'UNE carte : un état de travail (la carte telle que les ops précédentes la laissent) et la liste.
+function hvTarget(doc){ return { seed: doc, doc: cloneDoc(doc), ops: [] }; }
+// Une op qui vise un nœud : par son ID quand il en a un valide (exact, jamais ambigu), avec le chemin
+// lisible pour le panneau ; sinon par le chemin seul.
+function hvAt(node, path){ return Object.assign(okNid(node.id) ? { node: node.id } : {}, { target: path.slice(0, 600) }); }
+// La section d'une carte de connaissance, par son nom (casse et accents ignorés, la règle de
+// `kbKnowSection`) ; absente, elle est AJOUTÉE par une op de section, une seule fois par appel. Elle ne
+// porte pas de `hv` : deux éléments peuvent y aller, et décocher l'un ne doit pas retirer l'autre.
+function hvSection(t, name){
+  const root = t.doc.root;
+  const hit = (root.children || []).find(c=>hvSame(c.text, name));
+  if(hit) return hit;
+  const nid = newNid();
+  const node = Object.assign(makeNode(name), { id: nid });
+  root.children = (root.children || []).concat([node]);
+  t.ops.push(Object.assign({ op:"add" }, hvAt(root, String(root.text || "")), { markdown: "- " + hvMd(name), text: name, nid, adds: 1, why: "New section of your " + KNOW_NAME }));
+  return node;
+}
+function hvFindEntry(section, text){ return (section.children || []).find(c=>hvSame(c.text, text)) || null; }
+
 // ---------------------------------------------------------------------------
 // Définition des outils
 // ---------------------------------------------------------------------------
@@ -1541,12 +1715,12 @@ const TOOLS = [
   },
   {
     name: "create_board",
-    description: "Creates a NEW TabTree board (whiteboard): shapes (rect, ellipse, diamond, text, sticky) and arrow connections that stay anchored to the shapes in the app. With no x/y coordinates, layout is automatic by level (the connections define the hierarchy, left to right). Good for a diagram, a flow, a brainstorm. In a flowchart use ellipse for start/end, rect for a step, and diamond for a decision — its text should read as a closed question with exactly two ways out.\n\nFIT THE TEXT TO THE BOX. A box shows roughly (w−24)/7 characters per line and (h−10)/20 lines, and every blank line costs a full line. Write captions, not paragraphs: when filling a canvas template (Business Model Canvas, Lean Canvas, SWOT…), the shipped templates use 70–110 characters per block, and that is what looks composed. Longer text is shrunk to fit — nothing ever spills out — but past ~11px it stops being readable and the response will warn you.",
+    description: "Creates a NEW TabTree board (whiteboard): shapes (rect, ellipse, diamond, text, sticky), IMAGES (kind \"image\" with a `file` path — your logos, photos, posters, placed where you say) and arrow connections that stay anchored to the shapes in the app. With no x/y coordinates, layout is automatic by level (the connections define the hierarchy, left to right). Good for a diagram, a flow, a brainstorm. In a flowchart use ellipse for start/end, rect for a step, and diamond for a decision — its text should read as a closed question with exactly two ways out.\n\nFIT THE TEXT TO THE BOX. A box shows roughly (w−24)/7 characters per line and (h−10)/20 lines, and every blank line costs a full line. Write captions, not paragraphs: when filling a canvas template (Business Model Canvas, Lean Canvas, SWOT…), the shipped templates use 70–110 characters per block, and that is what looks composed. Longer text is shrunk to fit — nothing ever spills out — but past ~11px it stops being readable and the response will warn you.",
     inputSchema: { type:"object", properties:{
       name:{ type:"string", description:"Name of the board" },
       elements:{ type:"array", description:"Board elements", items:{ type:"object", properties:{
         id:{ type:"string", description:"Logical id used by connections (defaults to the index)" },
-        kind:{ type:"string", enum:["rect","ellipse","diamond","trap","chev","arc","text","sticky"], description:"Type (defaults to rect). diamond = a decision in a flowchart, trap = a pyramid/funnel tier (tk = small-side ratio, negative when the base is the narrow side), chev = a process step pointing forward, arc = a pie slice (a0/a1 in degrees from 12 o'clock, ir = inner-radius fraction for a donut)." },
+        kind:{ type:"string", enum:["rect","ellipse","diamond","trap","chev","arc","text","sticky","image"], description:"Type (defaults to rect). image = a PICTURE placed freely on the board — a logo, a photo, a poster: give `file` (full path of a PNG/JPEG/WebP/GIF/SVG on this machine) or `data` (a data:image/… URL); w/h keep the image's proportions when only one (or neither, 220 px on the long side) is given; arrows can start or end on it; `text` is ignored. diamond = a decision in a flowchart, trap = a pyramid/funnel tier (tk = small-side ratio, negative when the base is the narrow side), chev = a process step pointing forward, arc = a pie slice (a0/a1 in degrees from 12 o'clock, ir = inner-radius fraction for a donut)." },
         text:{ type:"string" },
         x:{ type:"number" }, y:{ type:"number" }, w:{ type:"number" }, h:{ type:"number" },
         color:{ type:"string", description:"Hex fill colour (shapes) or sticky-note colour" },
@@ -1555,8 +1729,10 @@ const TOOLS = [
         tk:{ type:"number", description:"trap only — small-side/large-side ratio, 0..0.95 (0 = triangle); NEGATIVE puts the narrow side at the bottom (funnel tier)" },
         a0:{ type:"number", description:"arc only — start angle in degrees, 0 at 12 o'clock, clockwise" },
         a1:{ type:"number", description:"arc only — end angle in degrees (a1 > a0; a full circle is a0=0, a1=360)" },
-        ir:{ type:"number", description:"arc only — inner-radius fraction 0..0.9 (0 = pie slice, 0.55 = donut)" }
-      }, required:["text"], additionalProperties:false } },
+        ir:{ type:"number", description:"arc only — inner-radius fraction 0..0.9 (0 = pie slice, 0.55 = donut)" },
+        file:{ type:"string", description:"image only — full path of a PNG/JPEG/WebP/GIF/SVG file on this machine. Rasters are re-encoded to about 840 px; an SVG is kept as is (300 KB max)." },
+        data:{ type:"string", description:"image only — a data:image/(png|jpeg|webp|gif|svg+xml) URL instead of a file" }
+      }, additionalProperties:false } },
       connections:{ type:"array", description:"Arrows anchored between elements (by id)", items:{ type:"object", properties:{
         from:{ type:"string" }, to:{ type:"string" }
       }, required:["from","to"], additionalProperties:false } },
@@ -1637,6 +1813,27 @@ const TOOLS = [
         est:{ type:"string", description:"est: the estimate as a duration — \"2h\", \"1h30\", \"45\" (minutes), \"2:15\" — or \"\" to remove it" }
       }, required:["op"], additionalProperties:false } }
     }, required:["file","changes"], additionalProperties:false }
+  },
+  {
+    // 🏁 1.6.0. La description porte la règle de déclenchement : c'est elle que Claude lit au moment de choisir.
+    name: "harvest",
+    description: "Keeps what matters from THIS conversation in the user's TabTree second brain: facts, decisions and lessons. Call it ONLY after you listed the items to the user in the conversation and they agreed — then once. Nothing is filed until the user accepts it in TabTree (a banner, on any of their devices). Use it when the user ends a conversation (thanks, \"that's all\", \"ok bye\") or right after a decision was made. Facts and decisions go to the \"Company knowledge\" map of ONE space (created if the space has none); lessons always go to the user's \"🌱 Lessons\" map in Personal. Never for tasks (use propose_changes or create_kanban). Never a password, key or token. If nothing is worth keeping, call it with nothing: true and tell the user so.",
+    inputSchema: { type:"object", properties:{
+      space:   { type:"string", description:"The space the conversation was about, by name (list_maps shows them). Omit for Personal. If two spaces could apply, ASK the user — never guess: facts never cross between spaces." },
+      title:   { type:"string", description:"One line naming the conversation, e.g. \"Discount request — Batimar\". Shown in TabTree and written as the source of every entry." },
+      nothing: { type:"boolean", description:"true when nothing is worth keeping — then send no items." },
+      items:   { type:"array", description:"What to keep, 12 at most.", items:{ type:"object", properties:{
+        kind:    { type:"string", enum:["fact","decision","lesson"], description:"fact = what is true today (a price, an access, a client's answer); decision = what was decided, appended and never rewritten; lesson = what the user learned, reusable anywhere." },
+        text:    { type:"string", description:"The entry's title: one sentence that stays true on its own, without the conversation. 300 characters max." },
+        detail:  { type:"string", description:"Optional: what a reader needs in six months. 1500 characters max." },
+        section: { type:"string", description:"fact only, required: the section of the Company knowledge map — its EXACT name when it exists (read_map shows them; the defaults are " + KNOW_DEFAULT.map(s=>"\"" + s + "\"").join(", ") + "), or a new name to create one." },
+        updates: { type:"string", description:"fact only: the EXACT text of the entry of that section this fact replaces (its new value). Omit for a new entry." },
+        signal:  { type:"string", description:"decision only: the observable sign that will say whether it was right, e.g. \"Q4 margins back above 22%\"." },
+        check_on:{ type:"string", description:"decision only: YYYY-MM-DD, the day to look at the signal." },
+        replaces:{ type:"string", description:"decision only: the EXACT text of an earlier decision this one supersedes. The earlier one is kept." },
+        why:     { type:"string", description:"One short line: why keep it. Shown next to the item when the user reviews it." }
+      }, required:["kind","text"], additionalProperties:false } }
+    }, additionalProperties:false }
   }
 ];
 
@@ -1735,9 +1932,10 @@ const HANDLERS = {
     return `✅ ${label} created (${countNodes(root)} nodes${dated.length ? ", " + dated.length + " dated" : ""}): ${file}\n${shotLines}${importHint()}`;
   },
   async create_board(args){
-    const { doc, warnings } = buildBoardDoc(args.name || "Board", args.elements, args.connections, args.style);
+    const { doc, warnings, imageNotes } = buildBoardDoc(args.name || "Board", args.elements, args.connections, args.style);
     const file = await writeDoc(args.name || "Board", doc, args.folder, { space: args.space });
-    const n = doc.shapes.length + doc.stickies.length;
+    const n = doc.shapes.length + doc.stickies.length + doc.images.length;
+    const imgs = imageNotes.length ? `🖼  ${imageNotes.length} image(s):\n` + imageNotes.map(t=>"   • " + t).join("\n") + "\n" : "";
     // Les avertissements passent AVANT l'astuce d'import : c'est le seul moment où le texte
     // peut encore être raccourci, et une ligne noyée en fin de réponse ne se lit pas.
     const warn = warnings.length
@@ -1746,7 +1944,7 @@ const HANDLERS = {
         + `\n   Nothing spills out — the text was shrunk to fit — but blocks at different sizes look\n`
         + `   uneven on a canvas. Recreate the board with shorter text to keep it clean.\n`
       : "";
-    return `✅ Board created (${n} elements, ${doc.arrows.length} connection(s)): ${file}\n${warn}${importHint()}`;
+    return `✅ Board created (${n} elements, ${doc.arrows.length} connection(s)): ${file}\n${imgs}${warn}${importHint()}`;
   },
   async create_kanban(args){
     if(typeof args.name !== "string" || !args.name.trim()) throw new Error("The `name` parameter is required (the board's name).");
@@ -1794,6 +1992,161 @@ const HANDLERS = {
         + "Tell the user to look at TabTree — do not claim those changes are made.\n";
     }
     return out + (shotLines ? shotLines + "\n" : "");
+  },
+  async harvest(args){
+    if(!CLOUD) throw new Error("harvest keeps what matters in the user's TabTree ACCOUNT, and this connector reads a backup folder. Connect it with a connector key (TabTree → Settings → Account → Claude connector) — the backup-folder mode does not receive new features.");
+    const a = args || {};
+    const items = Array.isArray(a.items) ? a.items : [];
+    if(a.nothing === true){
+      if(items.length) throw new Error("`nothing: true` means nothing is worth keeping — send no items with it.");
+      return "Nothing filed: nothing from this conversation needed keeping. Tell the user so.";
+    }
+    if(!items.length) throw new Error("No items. List what is worth keeping — facts, decisions, lessons — or pass nothing: true.");
+    if(items.length > HARVEST_MAX) throw new Error(items.length + " items: a harvest keeps " + HARVEST_MAX + " at most. Beyond that it is a report — put it in a map of its own with create_mindmap, or keep only what matters.");
+    const title = hvLine(a.title, 120);
+    if(!title) throw new Error("`title` is required — one line naming the conversation; it is written as the source of every entry.");
+    const today = new Date().toISOString().slice(0, 10);
+
+    // 1. Contrôler chaque élément AVANT de toucher au compte : un appel refusé ne crée rien.
+    const clean = items.map((it, i)=>{
+      const where = "item #" + (i + 1);
+      if(!it || typeof it !== "object") throw new Error(where + ": must be an object { kind, text, … }.");
+      const kind = it.kind;
+      if(!["fact", "decision", "lesson"].includes(kind)) throw new Error(where + ": `kind` must be fact, decision or lesson.");
+      const text = hvLine(it.text, 300);
+      if(!text) throw new Error(where + ": `text` is required — one sentence that stays true on its own.");
+      if(kbSecretLike(text)) throw new Error(where + ": its text looks like a password, key or token. Never file a secret — leave it out.");
+      let secrets = 0;
+      const detail = (typeof it.detail === "string" ? it.detail.replace(/\r/g, "").slice(0, 1500) : "").split("\n")
+        .filter(l=>{ if(kbSecretLike(l)){ secrets++; return false; } return true; }).join("\n").trim();
+      const out = { i, kind, text, detail, secrets, why: hvLine(it.why, 200) };
+      const only = (k, kinds)=>{ if(it[k] != null && it[k] !== "" && !kinds.includes(kind)) throw new Error(where + ": `" + k + "` is for a " + kinds.join(" or ") + ", not a " + kind + "."); };
+      only("section", ["fact"]); only("updates", ["fact"]);
+      only("signal", ["decision"]); only("check_on", ["decision"]); only("replaces", ["decision"]);
+      if(kind === "fact"){
+        out.section = hvLine(it.section, 80);
+        if(!out.section) throw new Error(where + ": a fact needs its `section` of the " + KNOW_NAME + " map (read_map shows them).");
+        out.updates = hvLine(it.updates, 300);
+      }
+      if(kind === "decision"){
+        out.signal = hvLine(it.signal, 300);
+        out.replaces = hvLine(it.replaces, 300);
+        out.check_on = hvLine(it.check_on, 10);
+        if(out.check_on && !hvDayOk(out.check_on)) throw new Error(where + ": `check_on` must be a real day written YYYY-MM-DD.");
+        if(kbSecretLike(out.signal)) throw new Error(where + ": its signal looks like a password, key or token.");
+      }
+      return out;
+    });
+
+    // 2. L'espace, puis les deux cartes (sans rien créer encore).
+    const lib = await loadLibrary();
+    const me = cloudMe;
+    let sp = null;
+    if(a.space != null && String(a.space).trim()){
+      const hits = (cloudSpacesCache || []).filter(x=>hvSame(x.name, a.space));
+      if(!hits.length) throw new Error("No space named “" + a.space + "” in this account" + ((cloudSpacesCache || []).length ? ". Spaces: " + cloudSpacesCache.map(x=>"“" + x.name + "”").join(", ") + " — or omit `space` for Personal" : "") + ".");
+      sp = hits.find(x=>x.owner === me) || hits[0];
+      if(!sp.writable) throw new Error("The space “" + sp.name + "” is read-only for this user (" + (sp.role === "viewer" ? "their role there is viewer — ask its owner for the editor role" : "its owner's plan has ended") + "). Nothing was filed.");
+    }
+    const knowOwner = sp ? sp.owner : me, knowKey = sp ? sp.space_key : null;
+    const needKnow = clean.some(x=>x.kind !== "lesson"), needLessons = clean.some(x=>x.kind === "lesson");
+    const knowMap = needKnow ? hvFindMap(lib, knowOwner, knowKey, KNOW_NAME) : null;
+    const lessMap = needLessons ? hvFindMap(lib, me, null, LESSONS_NAME) : null;
+    const know = needKnow ? hvTarget(knowMap ? knowMap.doc : hvNewDoc(KNOW_NAME, KNOW_DEFAULT)) : null;
+    const less = needLessons ? hvTarget(lessMap ? lessMap.doc : hvNewDoc(LESSONS_NAME, [])) : null;
+
+    // 3. Les ops, élément par élément, contre la carte TELLE QUE LES ÉLÉMENTS PRÉCÉDENTS LA LAISSENT.
+    const said = [], skipped = [];
+    let secretLines = 0;
+    const src = (verb)=>verb + " a conversation with Claude — “" + title + "” · " + today;
+    for(const x of clean){
+      const where = "item #" + (x.i + 1);
+      secretLines += x.secrets;
+      const hv = x.i;
+      const noteOf = (verb)=>(x.detail ? x.detail + "\n\n" : "") + src(verb);
+      const addEntry = (t, parent, path, attrs)=>{
+        const nid = newNid();
+        const md = "- " + hvMd(x.text) + attrs.map(([k, v])=>"\n  - " + k + ": " + hvMd(v)).join("");
+        t.ops.push(Object.assign({ op:"add" }, hvAt(parent, path), { markdown: md, text: x.text, nid, adds: 1 + attrs.length, hv }, x.why ? { why: x.why } : {}));
+        t.ops.push({ op:"note", node: nid, target: (path + " > " + x.text).slice(0, 600), note: noteOf("From"), hv });
+        const node = Object.assign(makeNode(x.text), { id: nid });
+        node.children = attrs.map(([k, v])=>makeNode(k + ": " + v));
+        parent.children = (parent.children || []).concat([node]);
+      };
+      if(x.kind === "lesson"){
+        const root = less.doc.root;
+        if(hvFindEntry(root, x.text)){ skipped.push("“" + x.text + "” is already in your " + LESSONS_NAME); continue; }
+        addEntry(less, root, String(root.text || LESSONS_NAME), []);
+        said.push("🌱 lesson — " + x.text);
+        continue;
+      }
+      const root = know.doc.root;
+      if(x.kind === "decision"){
+        const sec = (root.children || []).find(c=>/decision/.test(knowNorm(c.text))) || hvSection(know, "⚖️ Decisions");
+        if(hvFindEntry(sec, x.text)){ skipped.push("“" + x.text + "” is already among the decisions"); continue; }
+        const attrs = [];
+        if(x.signal) attrs.push(["Signal", x.signal]);
+        if(x.check_on) attrs.push(["Check on", x.check_on]);
+        if(x.replaces){
+          const prev = hvFindEntry(sec, x.replaces);
+          if(!prev) throw new Error(where + ": no decision “" + x.replaces + "” in “" + sec.text + "” — `replaces` takes the EXACT text of an earlier decision" + ((sec.children || []).length ? " (" + sec.children.slice(-6).map(c=>"“" + c.text + "”").join(", ") + ")" : "") + ".");
+          attrs.push(["Replaces", String(prev.text)]);
+        }
+        addEntry(know, sec, String(root.text) + " > " + String(sec.text), attrs);
+        said.push("⚖️ decision — " + x.text + (x.check_on ? " (check on " + x.check_on + ")" : ""));
+        continue;
+      }
+      // fact
+      const sec = hvSection(know, x.section);
+      const path = String(root.text) + " > " + String(sec.text);
+      if(x.updates){
+        const prev = hvFindEntry(sec, x.updates);
+        if(!prev) throw new Error(where + ": no entry “" + x.updates + "” in “" + sec.text + "” — `updates` takes the EXACT text of the entry it replaces" + ((sec.children || []).length ? " (" + sec.children.slice(0, 8).map(c=>"“" + c.text + "”").join(", ") + ")" : ", and that section is empty") + ".");
+        const at = hvAt(prev, path + " > " + String(prev.text));
+        if(!hvSame(prev.text, x.text)) know.ops.push(Object.assign({ op:"rename" }, at, { was: String(prev.text), text: x.text, hv }, x.why ? { why: x.why } : {}));
+        know.ops.push(Object.assign({ op:"note" }, at, { was: String(prev.text), note: noteOf("Updated from"), hv }));
+        prev.text = x.text;
+        said.push("✏️ updated in " + sec.text + " — " + x.text);
+        continue;
+      }
+      const dup = hvFindEntry(sec, x.text);
+      if(dup){
+        if(!x.detail){ skipped.push("“" + x.text + "” is already in “" + sec.text + "”"); continue; }
+        know.ops.push(Object.assign({ op:"note" }, hvAt(dup, path + " > " + String(dup.text)), { was: String(dup.text), note: noteOf("Updated from"), hv }));
+        said.push("✏️ detail updated in " + sec.text + " — " + x.text);
+        continue;
+      }
+      addEntry(know, sec, path, []);
+      said.push("📚 " + sec.text + " — " + x.text);
+    }
+    const targets = [];
+    if(know && know.ops.length) targets.push([know, knowMap, KNOW_NAME, sp ? sp.name : undefined]);
+    if(less && less.ops.length) targets.push([less, lessMap, LESSONS_NAME, undefined]);
+    if(!targets.length) return "Nothing new to file — everything is already there:\n" + skipped.map(s=>"   • " + s).join("\n") + "\nTell the user so.";
+
+    // 4. Créer ce qui manque (un squelette sans un fait : rien à approuver), puis déposer, à la revue.
+    const harvest_id = "hv" + Date.now().toString(36) + Math.random().toString(36).slice(2, 6);
+    const created = [], filed = [];
+    for(const [t, map0, name, space] of targets){
+      let map = map0;
+      if(!map){
+        // Le squelette créé est EXACTEMENT celui contre lequel les ops ont été validées (`seed`, avant
+        // toute op) : mêmes ids — les ops de la proposition visent ses sections par leur id.
+        const info = await writeDoc(name, t.seed, null, { kind: "map", space, info: true });
+        map = { file: info.id, key: info.key, owner: info.owner, team: info.team, name };
+        created.push("“" + name + "”" + (space ? " in the space “" + space + "”" : " in Personal"));
+      }
+      const res = await writeProposal(map, "🏁 From your conversation with Claude: “" + title + "”", t.ops, { review: true, extra: { origin: "harvest", harvest_id, title } });
+      filed.push(res.ids.review);
+    }
+    const n = said.length;
+    return "🏁 " + n + " item" + (n > 1 ? "s are" : " is") + " waiting in TabTree" + (sp ? " (space “" + sp.name + "”)" : "") + ":\n"
+      + said.map(s=>"   • " + s).join("\n") + "\n"
+      + (skipped.length ? "Left out, already there:\n" + skipped.map(s=>"   • " + s).join("\n") + "\n" : "")
+      + (secretLines ? "🔒 " + secretLines + " line(s) of detail looked like a password, key or token and were left out.\n" : "")
+      + (created.length ? "📚 Created " + created.join(" and ") + " to hold them.\n" : "")
+      + "NOTHING is filed yet. TabTree shows a banner on any device where it is open (otherwise the next time it opens): the user ticks what to keep and accepts it; Cmd+Z undoes it.\n"
+      + "Tell the user it is waiting in TabTree — do not claim it is filed.";
   }
 };
 
@@ -1815,7 +2168,7 @@ function handle(msg){
       // déjà dérivé (1.0.0 ici, 1.1.0 dans le manifeste) sans que rien ne le
       // signale : un client affiche l'une, le registre publie l'autre. Un
       // autotest les compare désormais toutes les quatre.
-      serverInfo: { name: "tabtree", version: "1.5.0" }
+      serverInfo: { name: "tabtree", version: "1.6.0" }
     });
   } else if(method === "notifications/initialized" || (method||"").startsWith("notifications/")){
     // notification : pas de réponse