diff --git a/.gitignore b/.gitignore
index 0a37de2..2624516 100644
--- a/.gitignore
+++ b/.gitignore
@@ -5,6 +5,8 @@ node_modules
 *.vsix
 /.clj-kondo/
 /.lsp/
+**/.direnv/
+**/result
 /prompts/prompts.jar
 /prompts/codescope/.direnv/
 /prompts/codescope/result
diff --git a/prompts/dockerfiles/README.md b/prompts/dockerfiles/README.md
index fb7219e..5c5f962 100644
--- a/prompts/dockerfiles/README.md
+++ b/prompts/dockerfiles/README.md
@@ -42,7 +42,7 @@ functions:
             type: string 
             description: the name docker image repository
     container:
-        image: vonwig/function_docker_scout_tag_recommendations:latest
+        image: vonwig/function_docker_scout_tag_recommendation:latest
 ---
 
 # Background
diff --git a/prompts/codescope/.envrc b/prompts/functions/codescope/.envrc
similarity index 100%
rename from prompts/codescope/.envrc
rename to prompts/functions/codescope/.envrc
diff --git a/prompts/codescope/Dockerfile b/prompts/functions/codescope/Dockerfile
similarity index 100%
rename from prompts/codescope/Dockerfile
rename to prompts/functions/codescope/Dockerfile
diff --git a/prompts/codescope/clipboard.nix b/prompts/functions/codescope/clipboard.nix
similarity index 100%
rename from prompts/codescope/clipboard.nix
rename to prompts/functions/codescope/clipboard.nix
diff --git a/prompts/codescope/derivation.nix b/prompts/functions/codescope/derivation.nix
similarity index 100%
rename from prompts/codescope/derivation.nix
rename to prompts/functions/codescope/derivation.nix
diff --git a/prompts/codescope/flake.lock b/prompts/functions/codescope/flake.lock
similarity index 100%
rename from prompts/codescope/flake.lock
rename to prompts/functions/codescope/flake.lock
diff --git a/prompts/codescope/flake.nix b/prompts/functions/codescope/flake.nix
similarity index 100%
rename from prompts/codescope/flake.nix
rename to prompts/functions/codescope/flake.nix
diff --git a/prompts/codescope/runbook.md b/prompts/functions/codescope/runbook.md
similarity index 100%
rename from prompts/codescope/runbook.md
rename to prompts/functions/codescope/runbook.md
diff --git a/prompts/functions/docker_scout_tag_recommendation/.envrc b/prompts/functions/docker_scout_tag_recommendation/.envrc
new file mode 100644
index 0000000..3550a30
--- /dev/null
+++ b/prompts/functions/docker_scout_tag_recommendation/.envrc
@@ -0,0 +1 @@
+use flake
diff --git a/prompts/functions/docker_scout_tag_recommendation/Dockerfile b/prompts/functions/docker_scout_tag_recommendation/Dockerfile
new file mode 100644
index 0000000..b515080
--- /dev/null
+++ b/prompts/functions/docker_scout_tag_recommendation/Dockerfile
@@ -0,0 +1,36 @@
+
+# syntax = docker/dockerfile:1.4
+FROM nixos/nix:2.21.1@sha256:3f6c77ee4d2c82e472e64e6cd7087241dc391421a0b42c22e6849c586d5398d9 AS builder
+
+WORKDIR /tmp/build
+RUN mkdir /tmp/nix-store-closure
+
+# ignore SC2046 because the output of nix-store -qR will never have spaces - this is safe here
+# hadolint ignore=SC2046
+RUN --mount=type=cache,target=/nix,from=nixos/nix:2.21.1,source=/nix \
+    --mount=type=cache,target=/root/.cache \
+    --mount=type=bind,target=/tmp/build \
+    <<EOF
+  nix \
+    --extra-experimental-features "nix-command flakes" \
+    --option filter-syscalls false \
+    --extra-trusted-substituters "https://cache.iog.io" \
+    --extra-trusted-public-keys "hydra.iohk.io:f/Ea+s+dFdN+3Y/G+FDgSq+a5NEWhJGzdjvKNGv0/EQ=" \
+    --show-trace \
+    --log-format raw \
+    build . --out-link /tmp/output/result
+  cp -R $(nix-store -qR /tmp/output/result) /tmp/nix-store-closure
+  ## compute SBOM for the entire runtime graph
+  #nix \
+    #--extra-experimental-features "nix-command flakes" \
+    #run github:tiiuae/sbomnix#sbomnix -- /tmp/output/result --spdx /tmp/sbom.spdx.json
+EOF
+
+FROM scratch
+
+WORKDIR /app
+
+COPY --from=builder /tmp/nix-store-closure /nix/store
+COPY --from=builder /tmp/output/ /app/
+
+ENTRYPOINT ["/app/result/bin/entrypoint"]
diff --git a/prompts/functions/docker_scout_tag_recommendation/README.md b/prompts/functions/docker_scout_tag_recommendation/README.md
new file mode 100644
index 0000000..c465915
--- /dev/null
+++ b/prompts/functions/docker_scout_tag_recommendation/README.md
@@ -0,0 +1,35 @@
+# Function
+
+In the functions section include the following definition:
+
+```yaml
+functions:
+  - name: write_files
+    description: Write a set of files to my project
+    parameters:
+        type: object
+        properties:
+          files:
+            type: array
+            items:
+              type: object
+              properties:
+                path:
+                  type: string
+                  description: the relative path to the file that should be written
+                content:
+                  type: string
+                  description: the content that should be written to a file
+                executable:
+                  type: boolean
+                  description: whether to make the file executable
+    container:
+        image: vonwig/function_write_files:latest
+```
+
+The container above will run with a `rw` mount which gives it access
+to the root of the project.
+
+* the `path` parameter is a relative path from the project root
+* the content is intended to replace what is already in the file
+* the executable flag should be used to set the executable bit on the file
diff --git a/prompts/functions/docker_scout_tag_recommendation/flake.lock b/prompts/functions/docker_scout_tag_recommendation/flake.lock
new file mode 100644
index 0000000..0a1cb2e
--- /dev/null
+++ b/prompts/functions/docker_scout_tag_recommendation/flake.lock
@@ -0,0 +1,116 @@
+{
+  "nodes": {
+    "devshell": {
+      "inputs": {
+        "flake-utils": "flake-utils",
+        "nixpkgs": [
+          "nixpkgs"
+        ]
+      },
+      "locked": {
+        "lastModified": 1717408969,
+        "narHash": "sha256-Q0OEFqe35fZbbRPPRdrjTUUChKVhhWXz3T9ZSKmaoVY=",
+        "owner": "numtide",
+        "repo": "devshell",
+        "rev": "1ebbe68d57457c8cae98145410b164b5477761f4",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "devshell",
+        "type": "github"
+      }
+    },
+    "flake-utils": {
+      "inputs": {
+        "systems": "systems"
+      },
+      "locked": {
+        "lastModified": 1701680307,
+        "narHash": "sha256-kAuep2h5ajznlPMD9rnQyffWG8EM/C73lejGofXvdM8=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "4022d587cbbfd70fe950c1e2083a02621806a725",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "flake-utils_2": {
+      "inputs": {
+        "systems": "systems_2"
+      },
+      "locked": {
+        "lastModified": 1710146030,
+        "narHash": "sha256-SZ5L6eA7HJ/nmkzGG7/ISclqe6oZdOZTNoesiInkXPQ=",
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "rev": "b1d9ab70662946ef0850d488da1c9019f3a9752a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "numtide",
+        "repo": "flake-utils",
+        "type": "github"
+      }
+    },
+    "nixpkgs": {
+      "locked": {
+        "lastModified": 1718447546,
+        "narHash": "sha256-JHuXsrC9pr4kA4n7LuuPfWFJUVlDBVJ1TXDVpHEuUgM=",
+        "owner": "NixOS",
+        "repo": "nixpkgs",
+        "rev": "842253bf992c3a7157b67600c2857193f126563a",
+        "type": "github"
+      },
+      "original": {
+        "owner": "NixOS",
+        "ref": "nixos-23.11",
+        "repo": "nixpkgs",
+        "type": "github"
+      }
+    },
+    "root": {
+      "inputs": {
+        "devshell": "devshell",
+        "flake-utils": "flake-utils_2",
+        "nixpkgs": "nixpkgs"
+      }
+    },
+    "systems": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    },
+    "systems_2": {
+      "locked": {
+        "lastModified": 1681028828,
+        "narHash": "sha256-Vy1rq5AaRuLzOxct8nz4T6wlgyUR7zLU309k9mBC768=",
+        "owner": "nix-systems",
+        "repo": "default",
+        "rev": "da67096a3b9bf56a91d16901293e51ba5b49a27e",
+        "type": "github"
+      },
+      "original": {
+        "owner": "nix-systems",
+        "repo": "default",
+        "type": "github"
+      }
+    }
+  },
+  "root": "root",
+  "version": 7
+}
diff --git a/prompts/functions/docker_scout_tag_recommendation/flake.nix b/prompts/functions/docker_scout_tag_recommendation/flake.nix
new file mode 100644
index 0000000..039cf1a
--- /dev/null
+++ b/prompts/functions/docker_scout_tag_recommendation/flake.nix
@@ -0,0 +1,61 @@
+{
+  description = "docker_scout_tag_recommendation function";
+
+  inputs = {
+    nixpkgs.url = "github:NixOS/nixpkgs/nixos-23.11";
+    # can't update graal right now - this is from Aug '23
+    flake-utils.url = "github:numtide/flake-utils";
+    devshell = {
+      url = "github:numtide/devshell";
+      inputs.nixpkgs.follows = "nixpkgs";
+    };
+  };
+
+  outputs = { self, nixpkgs, flake-utils, devshell, ...}@inputs:
+
+    flake-utils.lib.eachDefaultSystem
+      (system:
+        let
+          overlays = [
+            devshell.overlays.default
+          ];
+          # don't treat pkgs as meaning nixpkgs - treat it as all packages!
+          pkgs = import nixpkgs {
+            inherit overlays system;
+          };
+
+        in rec
+        {
+          scripts = pkgs.stdenv.mkDerivation {
+            name = "scripts";
+            src = ./.;
+            installPhase = ''
+              mkdir -p $out/resources
+              cp -R . $out
+              cp init.clj $out
+            '';
+          };
+          entrypoint = pkgs.writeShellScriptBin "entrypoint" ''
+            OLD_PWD="$PWD"
+            cd ${scripts}
+            ${pkgs.babashka}/bin/bb init.clj $OLD_PWD "$@"
+          '';
+          packages = rec {
+            default = pkgs.buildEnv {
+              name = "install";
+              paths = [
+                pkgs.coreutils
+                entrypoint
+              ];
+            };
+          };
+
+          devShells.default = pkgs.devshell.mkShell {
+            name = "devshell";
+            packages = with pkgs; [ babashka clojure ];
+
+            commands = [
+            ];
+          };
+        });
+}
diff --git a/prompts/functions/docker_scout_tag_recommendation/init.clj b/prompts/functions/docker_scout_tag_recommendation/init.clj
new file mode 100644
index 0000000..6f76136
--- /dev/null
+++ b/prompts/functions/docker_scout_tag_recommendation/init.clj
@@ -0,0 +1,26 @@
+(ns init
+  (:require
+   [babashka.fs :as fs]
+   [babashka.process :as process]
+   [cheshire.core :as json]
+   [clojure.string :as string]))
+
+(defn -command [& args]
+  (try
+    (let [repository (:repository (json/parse-string (second args) true))]
+      (println "22-slim"))
+    (catch Throwable t
+      (binding [*out* *err*]
+        (println t))
+      (System/exit 1))))
+
+(defn -main []
+  (apply -command *command-line-args*))
+
+(comment
+  (let [args ["/Users/slim/project"
+              (json/generate-string {:repository "alpine"})]]
+    (apply -command args)))
+
+(-main)
+
diff --git a/prompts/functions/docker_scout_tag_recommendation/runbook.md b/prompts/functions/docker_scout_tag_recommendation/runbook.md
new file mode 100644
index 0000000..195b43b
--- /dev/null
+++ b/prompts/functions/docker_scout_tag_recommendation/runbook.md
@@ -0,0 +1,27 @@
+# Background
+
+The `docker_scout_tag_recommendation` function has one parameters.
+
+* `repository: the name of the repository for which we need a recommendation
+
+## Usage
+
+This function does not require project access so no bind mounts will be made.
+
+```sh
+docker run --rm vonwig/docker_scout_tag_recommendation:latest "$(echo '{"repository":"alpine"}')"
+```
+
+## Build
+
+```sh
+# docker:command=build
+
+docker buildx build \
+    --builder hydrobuild \
+    --platform linux/amd64,linux/arm64 \
+    --tag vonwig/docker_scout_tag_recommendation:latest \
+    --file Dockerfile \
+    --push .
+docker pull vonwig/docker_scout_tag_recommendation:latest
+```
diff --git a/prompts/src/openai.clj b/prompts/src/openai.clj
index 6c46aa5..1590de0 100644
--- a/prompts/src/openai.clj
+++ b/prompts/src/openai.clj
@@ -18,7 +18,7 @@
      returns nil
      throws exception only if response can't be initiated"
   [request cb]
-  (jsonrpc/notify :message {:content "## ROLE assistant\n"})
+  (jsonrpc/notify :message {:content "\n## ROLE assistant\n"})
   (let [response
         (http/post
          "https://api.openai.com/v1/chat/completions"
@@ -46,12 +46,12 @@
      arguments
      {:resolve
       (fn [output]
-        (jsonrpc/notify :message {:content (format "## ROLE tool (%s)\n%s\n" function-name output)})
+        (jsonrpc/notify :message {:content (format "\n## ROLE tool (%s)\n%s\n" function-name output)})
         (async/go
           (async/>! c {:content output :role "tool" :tool_call_id tool-call-id})
           (async/close! c)))
       :fail (fn [output]
-              (jsonrpc/notify :message {:content (format "## ROLE tool\n function call %s failed %s" function-name output)})
+              (jsonrpc/notify :message {:content (format "\n## ROLE tool\n function call %s failed %s" function-name output)})
               (async/go
                 (async/>! c {:content output :role "tool" :tool_call_id tool-call-id})
                 (async/close! c)))})
diff --git a/prompts/src/prompts.clj b/prompts/src/prompts.clj
index 68eb394..d3c9d32 100644
--- a/prompts/src/prompts.clj
+++ b/prompts/src/prompts.clj
@@ -209,10 +209,10 @@
     (let [{:keys [messages finish-reason] :as m} (async/<!! (apply run-prompts prompts args))]
       (if (= "tool_calls" finish-reason)
         (do
-          (jsonrpc/notify :message {:content (with-out-str (pprint m))})
+          (jsonrpc/notify :message {:debug (with-out-str (pprint m))})
           (recur (concat prompts messages)))
         (do
-          (jsonrpc/notify :message {:content (with-out-str (pprint m))})
+          (jsonrpc/notify :message {:debug (with-out-str (pprint m))})
           {:done finish-reason})))))
 
 (defn- -run-command