@buzzposter/mcp 0.1.4 → 0.1.6

package/dist/index.js

@@ -101,12 +101,28 @@ var BuzzPosterClient = class {
     });
   }
   // Media
-  async uploadMedia(filename, base64Data, mimeType) {
-    return this.request("POST", "/api/v1/media/upload-base64", {
-      filename,
-      data: base64Data,
-      mimeType
+  async uploadMediaMultipart(filename, buffer, mimeType) {
+    const formData = new FormData();
+    formData.append("file", new Blob([buffer], { type: mimeType }), filename);
+    const url = new URL(`${this.baseUrl}/api/v1/media/upload`);
+    const res = await fetch(url, {
+      method: "POST",
+      headers: { Authorization: `Bearer ${this.apiKey}` },
+      body: formData
     });
+    if (!res.ok) {
+      const errorBody = await res.json().catch(() => ({ message: res.statusText }));
+      const message = typeof errorBody === "object" && errorBody !== null && "message" in errorBody ? String(errorBody.message) : `API error (${res.status})`;
+      throw new Error(`BuzzPoster API error (${res.status}): ${message}`);
+    }
+    const text = await res.text();
+    return text ? JSON.parse(text) : void 0;
+  }
+  async uploadFromUrl(data) {
+    return this.request("POST", "/api/v1/media/upload-from-url", data);
+  }
+  async getUploadUrl(data) {
+    return this.request("POST", "/api/v1/media/presign", data);
   }
   async listMedia() {
     return this.request("GET", "/api/v1/media");
@@ -152,6 +168,79 @@ var BuzzPosterClient = class {
   async listForms() {
     return this.request("GET", "/api/v1/newsletters/forms");
   }
+  // Newsletter Advanced
+  async getSubscriberByEmail(email) {
+    return this.request("GET", `/api/v1/newsletters/subscribers/by-email/${encodeURIComponent(email)}`);
+  }
+  async listAutomations(params) {
+    return this.request("GET", "/api/v1/newsletters/automations", void 0, params);
+  }
+  async enrollInAutomation(automationId, data) {
+    return this.request("POST", `/api/v1/newsletters/automations/${automationId}/enroll`, data);
+  }
+  async listSegments(params) {
+    return this.request("GET", "/api/v1/newsletters/segments", void 0, params);
+  }
+  async getSegment(id, params) {
+    return this.request("GET", `/api/v1/newsletters/segments/${id}`, void 0, params);
+  }
+  async getSegmentMembers(segmentId, params) {
+    return this.request("GET", `/api/v1/newsletters/segments/${segmentId}/members`, void 0, params);
+  }
+  async deleteSegment(id) {
+    return this.request("DELETE", `/api/v1/newsletters/segments/${id}`);
+  }
+  async recalculateSegment(id) {
+    return this.request("POST", `/api/v1/newsletters/segments/${id}/recalculate`);
+  }
+  async listCustomFields() {
+    return this.request("GET", "/api/v1/newsletters/custom-fields");
+  }
+  async createCustomField(data) {
+    return this.request("POST", "/api/v1/newsletters/custom-fields", data);
+  }
+  async updateCustomField(id, data) {
+    return this.request("PUT", `/api/v1/newsletters/custom-fields/${id}`, data);
+  }
+  async deleteCustomField(id) {
+    return this.request("DELETE", `/api/v1/newsletters/custom-fields/${id}`);
+  }
+  async tagSubscriber(subscriberId, data) {
+    return this.request("POST", `/api/v1/newsletters/subscribers/${subscriberId}/tags`, data);
+  }
+  async updateSubscriber(id, data) {
+    return this.request("PUT", `/api/v1/newsletters/subscribers/${id}`, data);
+  }
+  async deleteSubscriber(id) {
+    return this.request("DELETE", `/api/v1/newsletters/subscribers/${id}`);
+  }
+  async bulkCreateSubscribers(data) {
+    return this.request("POST", "/api/v1/newsletters/subscribers/bulk", data);
+  }
+  async getReferralProgram() {
+    return this.request("GET", "/api/v1/newsletters/referral-program");
+  }
+  async listEspTiers() {
+    return this.request("GET", "/api/v1/newsletters/tiers");
+  }
+  async listPostTemplates() {
+    return this.request("GET", "/api/v1/newsletters/post-templates");
+  }
+  async getPostAggregateStats() {
+    return this.request("GET", "/api/v1/newsletters/broadcasts/aggregate-stats");
+  }
+  async deleteBroadcast(id) {
+    return this.request("DELETE", `/api/v1/newsletters/broadcasts/${id}`);
+  }
+  async listEspWebhooks() {
+    return this.request("GET", "/api/v1/newsletters/webhooks");
+  }
+  async createEspWebhook(data) {
+    return this.request("POST", "/api/v1/newsletters/webhooks", data);
+  }
+  async deleteEspWebhook(id) {
+    return this.request("DELETE", `/api/v1/newsletters/webhooks/${id}`);
+  }
   // Knowledge
   async listKnowledge(params) {
     return this.request("GET", "/api/v1/knowledge", void 0, params);
@@ -163,6 +252,9 @@ var BuzzPosterClient = class {
   async getBrandVoice() {
     return this.request("GET", "/api/v1/brand-voice");
   }
+  async updateBrandVoice(data) {
+    return this.request("PUT", "/api/v1/brand-voice", data);
+  }
   // Audiences
   async getAudience(id) {
     return this.request("GET", `/api/v1/audiences/${id}`);
@@ -170,6 +262,9 @@ var BuzzPosterClient = class {
   async getDefaultAudience() {
     return this.request("GET", "/api/v1/audiences/default");
   }
+  async updateAudience(id, data) {
+    return this.request("PUT", `/api/v1/audiences/${id}`, data);
+  }
   // Newsletter Templates
   async getTemplate(id) {
     if (id) return this.request("GET", `/api/v1/templates/${id}`);
@@ -229,6 +324,58 @@ var BuzzPosterClient = class {
   async markAllNotificationsRead() {
     return this.request("PUT", "/api/v1/notifications/read-all");
   }
+  // Content Sources
+  async listSources(params) {
+    return this.request("GET", "/api/v1/content-sources", void 0, params);
+  }
+  async createSource(data) {
+    return this.request("POST", "/api/v1/content-sources", data);
+  }
+  async updateSource(id, data) {
+    return this.request("PUT", `/api/v1/content-sources/${id}`, data);
+  }
+  async deleteSource(id) {
+    return this.request("DELETE", `/api/v1/content-sources/${id}`);
+  }
+  async checkSource(id) {
+    return this.request("POST", `/api/v1/content-sources/${id}/check`);
+  }
+  // Publishing Rules
+  async getPublishingRules() {
+    return this.request("GET", "/api/v1/publishing-rules");
+  }
+  // Audit Log
+  async getAuditLog(params) {
+    return this.request("GET", "/api/v1/audit-log", void 0, params);
+  }
+  // Newsletter Validation
+  async validateNewsletter(data) {
+    return this.request("POST", "/api/v1/newsletters/validate", data);
+  }
+  // Newsletter Schedule
+  async scheduleBroadcast(id, data) {
+    return this.request("POST", `/api/v1/newsletters/broadcasts/${id}/schedule`, data);
+  }
+  // Newsletter Test
+  async testBroadcast(id, data) {
+    return this.request("POST", `/api/v1/newsletters/broadcasts/${id}/test`, data);
+  }
+  // Carousel templates
+  async getCarouselTemplate() {
+    return this.request("GET", "/api/v1/carousel-templates");
+  }
+  async updateCarouselTemplate(data) {
+    return this.request("PUT", "/api/v1/carousel-templates", data);
+  }
+  async deleteCarouselTemplate() {
+    return this.request("DELETE", "/api/v1/carousel-templates");
+  }
+  async generateCarousel(data) {
+    return this.request("POST", "/api/v1/carousel-templates/generate", data);
+  }
+  async previewCarousel(data) {
+    return this.request("POST", "/api/v1/carousel-templates/preview", data);
+  }
 };
 
 // src/tools/posts.ts
@@ -236,7 +383,23 @@ import { z } from "zod";
 function registerPostTools(server2, client2) {
   server2.tool(
     "post",
-    "Create and publish a post to one or more social media platforms. Supports Twitter, Instagram, LinkedIn, and Facebook with full platform-specific options. Requires confirmation before publishing.",
+    `Create and publish a post to one or more social media platforms. Supports Twitter, Instagram, LinkedIn, and Facebook.
+
+Always show the user a preview of the content before calling this tool. Call get_brand_voice and get_audience before composing if not already loaded this session. Never call with confirmed=true without explicit user approval.
+
+REQUIRED WORKFLOW:
+1. BEFORE creating any content, call get_brand_voice and get_audience to match the customer's tone
+2. BEFORE publishing, call get_publishing_rules to check safety settings
+3. ALWAYS set confirmed=false first to get a preview -- never set confirmed=true on the first call
+4. Show the user a visual preview of the post before confirming
+5. Only set confirmed=true after the user explicitly says to publish/post/send
+6. If publishing_rules.social_default_action is 'draft', create as draft unless the user explicitly asks to publish
+7. If publishing_rules.require_double_confirm_social is true, ask for confirmation twice before publishing
+8. NEVER publish immediately without user confirmation, even if the user says "post this" -- always show the preview first
+
+When confirmed=false, this tool returns a structured preview with content, platform details, character counts, safety checks, and a confirmation message. You MUST render this as a visual preview for the user and wait for their explicit approval before calling again with confirmed=true.
+
+IMPORTANT: Always show the user a preview of the post content before publishing. Never publish without explicit user approval. If no preview has been shown yet, do NOT set confirmed=true -- render the preview first.`,
     {
       content: z.string().optional().describe("The text content of the post"),
       platforms: z.array(z.string()).describe('Platforms to post to, e.g. ["twitter", "linkedin"]'),
@@ -244,7 +407,7 @@ function registerPostTools(server2, client2) {
       platform_specific: z.record(z.record(z.unknown())).optional().describe(
         "Platform-specific data keyed by platform name. E.g. { twitter: { threadItems: [...] }, instagram: { firstComment: '...' } }"
       ),
-      confirmed: z.boolean().optional().describe(
+      confirmed: z.boolean().default(false).describe(
         "Set to true to confirm and publish. If false or missing, returns a preview for user approval."
       )
     },
@@ -256,14 +419,52 @@ function registerPostTools(server2, client2) {
       openWorldHint: true
     },
     async (args) => {
-      if (!args.confirmed) {
+      if (args.confirmed !== true) {
+        let rulesText = "";
+        try {
+          const rules = await client2.getPublishingRules();
+          const blockedWords = rules.blockedWords ?? [];
+          const foundBlocked = [];
+          if (args.content && blockedWords.length > 0) {
+            const lower = args.content.toLowerCase();
+            for (const word of blockedWords) {
+              if (lower.includes(word.toLowerCase())) foundBlocked.push(word);
+            }
+          }
+          rulesText = `
+### Safety Checks
+`;
+          rulesText += `- Blocked words: ${foundBlocked.length > 0 ? `**FAILED** (found: ${foundBlocked.join(", ")})` : "PASS"}
+`;
+          rulesText += `- Default action: ${rules.socialDefaultAction ?? "draft"}
+`;
+          rulesText += `- Immediate publish allowed: ${rules.allowImmediatePublish ? "yes" : "no"}
+`;
+          if (rules.maxPostsPerDay) rulesText += `- Daily post limit: ${rules.maxPostsPerDay}
+`;
+        } catch {
+        }
+        const charCounts = {};
+        const limits = { twitter: 280, linkedin: 3e3, instagram: 2200, facebook: 63206, threads: 500 };
+        const contentLen = (args.content ?? "").length;
+        for (const p of args.platforms) {
+          const limit = limits[p.toLowerCase()] ?? 5e3;
+          charCounts[p] = { used: contentLen, limit, ok: contentLen <= limit };
+        }
+        let charText = "\n### Character Counts\n";
+        for (const [platform, counts] of Object.entries(charCounts)) {
+          charText += `- ${platform}: ${counts.used}/${counts.limit} ${counts.ok ? "" : "**OVER LIMIT**"}
+`;
+        }
         const preview = `## Post Preview
 
 **Content:** "${args.content ?? "(no text)"}"
 **Platforms:** ${args.platforms.join(", ")}
 ` + (args.media_urls?.length ? `**Media:** ${args.media_urls.length} file(s)
-` : "") + `
-This will be published **immediately**. Call this tool again with confirmed=true to proceed.`;
+` : "") + charText + rulesText + `
+**Action:** This will be published **immediately** to ${args.platforms.length} platform(s).
+
+Call this tool again with confirmed=true to proceed.`;
         return { content: [{ type: "text", text: preview }] };
       }
       const platforms = args.platforms.map((platform) => {
@@ -292,11 +493,23 @@ This will be published **immediately**. Call this tool again with confirmed=true
   );
   server2.tool(
     "cross_post",
-    "Post the same content to all connected social media platforms at once. Requires confirmation before publishing.",
+    `Post the same content to all connected platforms at once.
+
+Always show the user a preview of the content before calling this tool. Call get_brand_voice and get_audience before composing if not already loaded this session. Never call with confirmed=true without explicit user approval.
+
+REQUIRED WORKFLOW:
+1. BEFORE creating content, call get_brand_voice and get_audience
+2. BEFORE publishing, call get_publishing_rules
+3. ALWAYS set confirmed=false first to preview
+4. Show the user a visual preview showing how the post will appear on each platform
+5. This is a high-impact action (goes to ALL platforms) -- always require explicit confirmation
+6. If publishing_rules.require_double_confirm_social is true, ask twice
+
+When confirmed=false, this tool returns a structured preview with content, platform details, character counts, safety checks, and a confirmation message. You MUST render this as a visual preview for the user and wait for their explicit approval before calling again with confirmed=true.`,
     {
       content: z.string().describe("The text content to post everywhere"),
       media_urls: z.array(z.string()).optional().describe("Public URLs of media to attach"),
-      confirmed: z.boolean().optional().describe(
+      confirmed: z.boolean().default(false).describe(
         "Set to true to confirm and publish. If false or missing, returns a preview for user approval."
       )
     },
@@ -322,14 +535,38 @@ This will be published **immediately**. Call this tool again with confirmed=true
           ]
         };
       }
-      if (!args.confirmed) {
+      if (args.confirmed !== true) {
+        let rulesText = "";
+        try {
+          const rules = await client2.getPublishingRules();
+          const blockedWords = rules.blockedWords ?? [];
+          const foundBlocked = [];
+          if (args.content && blockedWords.length > 0) {
+            const lower = args.content.toLowerCase();
+            for (const word of blockedWords) {
+              if (lower.includes(word.toLowerCase())) foundBlocked.push(word);
+            }
+          }
+          rulesText = `
+### Safety Checks
+`;
+          rulesText += `- Blocked words: ${foundBlocked.length > 0 ? `**FAILED** (found: ${foundBlocked.join(", ")})` : "PASS"}
+`;
+          rulesText += `- Default action: ${rules.socialDefaultAction ?? "draft"}
+`;
+          rulesText += `- Double confirmation required: ${rules.requireDoubleConfirmSocial ? "yes" : "no"}
+`;
+        } catch {
+        }
         const preview = `## Cross-Post Preview
 
 **Content:** "${args.content}"
-**Platforms:** ${platforms.join(", ")}
+**Platforms:** ${platforms.join(", ")} (${platforms.length} platforms)
 ` + (args.media_urls?.length ? `**Media:** ${args.media_urls.length} file(s)
-` : "") + `
-This will be published **immediately** to all connected platforms. Call this tool again with confirmed=true to proceed.`;
+` : "") + rulesText + `
+**Action:** This will be published **immediately** to **all ${platforms.length} connected platforms**. This is a high-impact action.
+
+Call this tool again with confirmed=true to proceed.`;
         return { content: [{ type: "text", text: preview }] };
       }
       const body = {
@@ -351,7 +588,21 @@ This will be published **immediately** to all connected platforms. Call this too
   );
   server2.tool(
     "schedule_post",
-    "Schedule a post for future publication. Requires confirmation before scheduling.",
+    `Schedule a post for future publication.
+
+Always show the user a preview of the content before calling this tool. Call get_brand_voice and get_audience before composing if not already loaded this session. Never call with confirmed=true without explicit user approval.
+
+REQUIRED WORKFLOW:
+1. BEFORE creating content, call get_brand_voice and get_audience
+2. BEFORE scheduling, call get_publishing_rules
+3. ALWAYS set confirmed=false first to preview
+4. Show the user a visual preview with the scheduled date/time before confirming
+5. Only confirm after explicit user approval
+6. If the user hasn't specified a time, suggest one based on get_queue time slots
+
+When confirmed=false, this tool returns a structured preview with content, platform details, character counts, safety checks, and a confirmation message. You MUST render this as a visual preview for the user and wait for their explicit approval before calling again with confirmed=true.
+
+IMPORTANT: Always show the user a preview of the post content before scheduling. Never schedule without explicit user approval. If no preview has been shown yet, do NOT set confirmed=true -- render the preview first.`,
     {
       content: z.string().optional().describe("The text content of the post"),
       platforms: z.array(z.string()).describe('Platforms to post to, e.g. ["twitter", "linkedin"]'),
@@ -359,7 +610,7 @@ This will be published **immediately** to all connected platforms. Call this too
       timezone: z.string().default("UTC").describe("Timezone for the scheduled time, e.g. America/New_York"),
       media_urls: z.array(z.string()).optional().describe("Media URLs to attach"),
       platform_specific: z.record(z.record(z.unknown())).optional().describe("Platform-specific data keyed by platform name"),
-      confirmed: z.boolean().optional().describe(
+      confirmed: z.boolean().default(false).describe(
         "Set to true to confirm scheduling. If false or missing, returns a preview for user approval."
       )
     },
@@ -371,14 +622,32 @@ This will be published **immediately** to all connected platforms. Call this too
       openWorldHint: true
     },
     async (args) => {
-      if (!args.confirmed) {
+      if (args.confirmed !== true) {
+        let rulesText = "";
+        try {
+          const rules = await client2.getPublishingRules();
+          const blockedWords = rules.blockedWords ?? [];
+          const foundBlocked = [];
+          if (args.content && blockedWords.length > 0) {
+            const lower = args.content.toLowerCase();
+            for (const word of blockedWords) {
+              if (lower.includes(word.toLowerCase())) foundBlocked.push(word);
+            }
+          }
+          rulesText = `
+### Safety Checks
+`;
+          rulesText += `- Blocked words: ${foundBlocked.length > 0 ? `**FAILED** (found: ${foundBlocked.join(", ")})` : "PASS"}
+`;
+        } catch {
+        }
         const preview = `## Schedule Preview
 
 **Content:** "${args.content ?? "(no text)"}"
 **Platforms:** ${args.platforms.join(", ")}
 **Scheduled for:** ${args.scheduled_for} (${args.timezone})
 ` + (args.media_urls?.length ? `**Media:** ${args.media_urls.length} file(s)
-` : "") + `
+` : "") + rulesText + `
 Call this tool again with confirmed=true to schedule.`;
         return { content: [{ type: "text", text: preview }] };
       }
@@ -409,7 +678,7 @@ Call this tool again with confirmed=true to schedule.`;
   );
   server2.tool(
     "create_draft",
-    "Save a post as a draft without publishing.",
+    "Save a post as a draft without publishing. This NEVER publishes \u2014 it only saves. No confirmation needed since nothing goes live.",
     {
       content: z.string().optional().describe("The text content of the draft"),
       platforms: z.array(z.string()).describe("Platforms this draft is intended for"),
@@ -425,8 +694,7 @@ Call this tool again with confirmed=true to schedule.`;
     async (args) => {
       const body = {
         content: args.content,
-        platforms: args.platforms.map((p) => ({ platform: p })),
-        publishNow: false
+        platforms: args.platforms.map((p) => ({ platform: p }))
       };
       if (args.media_urls?.length) {
         body.mediaItems = args.media_urls.map((url) => ({
@@ -489,7 +757,7 @@ Call this tool again with confirmed=true to schedule.`;
     "Retry a post that failed to publish on one or more platforms. Only retries the failed platforms -- already-published platforms are not affected. Use this when a post shows 'failed' or 'partial' status.",
     {
       post_id: z.string().describe("The ID of the post to retry"),
-      confirmed: z.boolean().optional().describe(
+      confirmed: z.boolean().default(false).describe(
         "Set to true to confirm retry. If false/missing, shows post details first."
       )
     },
@@ -501,7 +769,7 @@ Call this tool again with confirmed=true to schedule.`;
       openWorldHint: true
     },
     async (args) => {
-      if (!args.confirmed) {
+      if (args.confirmed !== true) {
         const post = await client2.getPost(args.post_id);
         const platforms = post.platforms ?? [];
         const failed = platforms.filter((p) => p.status === "failed");
@@ -540,7 +808,7 @@ Retrying will only attempt the failed platforms. Call this tool again with confi
 function registerAccountTools(server2, client2) {
   server2.tool(
     "list_accounts",
-    "List all connected social media accounts with their platform, username, and connection status.",
+    "List all connected accounts \u2014 both social media platforms (Twitter, Instagram, etc.) and email service provider / ESP (Kit, Beehiiv, Mailchimp). Use this whenever the user asks about their accounts, connections, or integrations.",
     {},
     {
       title: "List Connected Accounts",
@@ -551,8 +819,44 @@ function registerAccountTools(server2, client2) {
     },
     async () => {
       const result = await client2.listAccounts();
+      const accounts = result.accounts ?? [];
+      const esp = result.esp;
+      if (accounts.length === 0 && !esp) {
+        return {
+          content: [{
+            type: "text",
+            text: "## Connected Accounts\n\nNo accounts connected. Connect social media accounts and/or an email service provider via the dashboard."
+          }]
+        };
+      }
+      let text = "## Connected Accounts\n\n";
+      text += "### Social Media\n";
+      if (accounts.length > 0) {
+        for (const a of accounts) {
+          const icon = a.isActive ? "\u2705" : "\u274C";
+          const platform = a.platform.charAt(0).toUpperCase() + a.platform.slice(1);
+          const name = a.username || a.displayName || a.platform;
+          text += `${icon} **${platform}** \u2014 @${name}
+`;
+        }
+      } else {
+        text += "No social accounts connected.\n";
+      }
+      text += "\n### Email Service Provider (ESP)\n";
+      if (esp && esp.connected) {
+        const provider = esp.provider.charAt(0).toUpperCase() + esp.provider.slice(1);
+        text += `\u2705 **${provider}** \u2014 Connected`;
+        if (esp.publicationId) text += ` (Publication: ${esp.publicationId})`;
+        text += "\n";
+      } else if (esp) {
+        const provider = esp.provider.charAt(0).toUpperCase() + esp.provider.slice(1);
+        text += `\u26A0\uFE0F **${provider}** \u2014 Provider set but API key missing
+`;
+      } else {
+        text += "No ESP configured.\n";
+      }
       return {
-        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+        content: [{ type: "text", text }]
       };
     }
   );
@@ -684,11 +988,16 @@ function registerInboxTools(server2, client2) {
   );
   server2.tool(
     "reply_to_conversation",
-    "Send a reply message in a DM conversation. Sends a message to an external platform on your behalf.",
+    `Send a reply message in a DM conversation. This sends a message on an external platform on the customer's behalf. Always show draft reply to the user before calling with confirmed=true.
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to preview the reply
+2. Show the user the reply text and which platform/conversation it will be sent to
+3. Only confirm after explicit user approval`,
     {
       conversation_id: z3.string().describe("The conversation ID to reply to"),
       message: z3.string().describe("The reply message text"),
-      confirmed: z3.boolean().optional().describe("Set to true to confirm and send. If false or missing, returns a preview for user approval.")
+      confirmed: z3.boolean().default(false).describe("Set to true to confirm and send. If false or missing, returns a preview for user approval.")
     },
     {
       title: "Reply to Conversation",
@@ -698,7 +1007,7 @@ function registerInboxTools(server2, client2) {
       openWorldHint: true
     },
     async (args) => {
-      if (!args.confirmed) {
+      if (args.confirmed !== true) {
         const preview = `## Reply Preview
 
 **Conversation:** ${args.conversation_id}
@@ -740,11 +1049,16 @@ This will send a DM reply on the external platform. Call this tool again with co
   );
   server2.tool(
     "reply_to_comment",
-    "Reply to a comment on one of your posts. Sends a reply on the external platform.",
+    `Reply to a comment on one of the customer's posts. This sends a public reply on the external platform. Sends a message on the user's behalf on an external platform. Always show draft reply to the user before calling with confirmed=true.
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to preview
+2. Show the user the reply and the original comment for context
+3. Only confirm after explicit user approval -- public replies are visible to everyone`,
     {
       comment_id: z3.string().describe("The comment ID to reply to"),
       message: z3.string().describe("The reply text"),
-      confirmed: z3.boolean().optional().describe("Set to true to confirm and send. If false or missing, returns a preview for user approval.")
+      confirmed: z3.boolean().default(false).describe("Set to true to confirm and send. If false or missing, returns a preview for user approval.")
     },
     {
       title: "Reply to Comment",
@@ -754,7 +1068,7 @@ This will send a DM reply on the external platform. Call this tool again with co
       openWorldHint: true
     },
     async (args) => {
-      if (!args.confirmed) {
+      if (args.confirmed !== true) {
         const preview = `## Comment Reply Preview
 
 **Comment ID:** ${args.comment_id}
@@ -792,11 +1106,16 @@ This will post a public reply. Call this tool again with confirmed=true to send.
   );
   server2.tool(
     "reply_to_review",
-    "Reply to a review on your Facebook page. Sends a public reply on the external platform.",
+    `Reply to a review on the customer's Facebook page. This sends a public reply on the external platform. Sends a message on the user's behalf on an external platform. Always show draft reply to the user before calling with confirmed=true.
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to preview
+2. Show the user the reply, the original review, and the star rating for context
+3. Only confirm after explicit user approval -- public replies represent the brand`,
     {
       review_id: z3.string().describe("The review ID to reply to"),
       message: z3.string().describe("The reply text"),
-      confirmed: z3.boolean().optional().describe("Set to true to confirm and send. If false or missing, returns a preview for user approval.")
+      confirmed: z3.boolean().default(false).describe("Set to true to confirm and send. If false or missing, returns a preview for user approval.")
     },
     {
       title: "Reply to Review",
@@ -806,7 +1125,7 @@ This will post a public reply. Call this tool again with confirmed=true to send.
       openWorldHint: true
     },
     async (args) => {
-      if (!args.confirmed) {
+      if (args.confirmed !== true) {
         const preview = `## Review Reply Preview
 
 **Review ID:** ${args.review_id}
@@ -844,8 +1163,7 @@ function registerMediaTools(server2, client2) {
       openWorldHint: false
     },
     async (args) => {
-      const buffer = await readFile(args.file_path);
-      const base64 = buffer.toString("base64");
+      const buffer = Buffer.from(await readFile(args.file_path));
       const filename = args.file_path.split("/").pop() ?? "upload";
       const ext = filename.split(".").pop()?.toLowerCase() ?? "";
       const mimeMap = {
@@ -861,33 +1179,57 @@ function registerMediaTools(server2, client2) {
         pdf: "application/pdf"
       };
       const mimeType = mimeMap[ext] ?? "application/octet-stream";
-      const result = await client2.uploadMedia(filename, base64, mimeType);
+      const result = await client2.uploadMediaMultipart(filename, buffer, mimeType);
       return {
         content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
       };
     }
   );
   server2.tool(
-    "upload_media_base64",
-    "Upload media from base64-encoded data. Returns a CDN URL that can be used in posts.",
+    "upload_from_url",
+    "Upload media from a public URL. The server fetches the image/video and uploads it to storage. Returns a CDN URL that can be used in posts. Supports JPEG, PNG, GIF, WebP, MP4, MOV, WebM up to 25MB.",
     {
-      filename: z4.string().describe("The filename including extension"),
-      data: z4.string().describe("Base64-encoded file data"),
-      mime_type: z4.string().describe("MIME type of the file, e.g. image/jpeg, video/mp4")
+      url: z4.string().url().describe("Public URL of the image or video to upload"),
+      filename: z4.string().optional().describe("Optional filename override (including extension)"),
+      folder: z4.string().optional().describe("Optional folder path within the customer's storage")
     },
     {
-      title: "Upload Media Base64",
+      title: "Upload Media from URL",
       readOnlyHint: false,
       destructiveHint: false,
       idempotentHint: false,
       openWorldHint: false
     },
     async (args) => {
-      const result = await client2.uploadMedia(
-        args.filename,
-        args.data,
-        args.mime_type
-      );
+      const result = await client2.uploadFromUrl({
+        url: args.url,
+        filename: args.filename,
+        folder: args.folder
+      });
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "get_upload_url",
+    "Get a pre-signed URL for direct client upload to storage. The URL is valid for 5 minutes. After uploading to the URL, the file will be available at the returned CDN URL.",
+    {
+      filename: z4.string().describe("The filename including extension (e.g. photo.jpg)"),
+      content_type: z4.string().describe("MIME type of the file (e.g. image/jpeg, video/mp4)")
+    },
+    {
+      title: "Get Upload URL",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    },
+    async (args) => {
+      const result = await client2.getUploadUrl({
+        filename: args.filename,
+        content_type: args.content_type
+      });
       return {
         content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
       };
@@ -913,10 +1255,15 @@ function registerMediaTools(server2, client2) {
   );
   server2.tool(
     "delete_media",
-    "Delete a media file from your BuzzPoster media library. This cannot be undone.",
+    `Delete a media file from the customer's BuzzPoster media library. This cannot be undone.
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first
+2. Show the user which file will be deleted (filename, URL, size)
+3. Only confirm after explicit approval`,
     {
       key: z4.string().describe("The key/path of the media file to delete"),
-      confirmed: z4.boolean().optional().describe("Set to true to confirm deletion. If false or missing, returns a preview for user approval.")
+      confirmed: z4.boolean().default(false).describe("Set to true to confirm deletion. If false or missing, returns a preview for user approval.")
     },
     {
       title: "Delete Media File",
@@ -926,7 +1273,7 @@ function registerMediaTools(server2, client2) {
       openWorldHint: false
     },
     async (args) => {
-      if (!args.confirmed) {
+      if (args.confirmed !== true) {
         const preview = `## Delete Media Confirmation
 
 **File:** ${args.key}
@@ -944,7 +1291,7 @@ This will permanently delete this media file. Call this tool again with confirme
 
 // src/tools/newsletter.ts
 import { z as z5 } from "zod";
-function registerNewsletterTools(server2, client2) {
+function registerNewsletterTools(server2, client2, options = {}) {
   server2.tool(
     "list_subscribers",
     "List email subscribers from your configured email service provider (Kit, Beehiiv, or Mailchimp).",
@@ -997,7 +1344,7 @@ function registerNewsletterTools(server2, client2) {
   );
   server2.tool(
     "create_newsletter",
-    "Create a new newsletter/broadcast draft.",
+    `Push an approved newsletter draft to the user's ESP (Kit, Beehiiv, or Mailchimp) as a DRAFT. This creates a DRAFT only -- it does not send. IMPORTANT: Only call this AFTER the user has reviewed and explicitly approved an HTML artifact preview of the newsletter. If no artifact has been shown yet, do NOT call this tool -- go back and render the preview first. No third-party branding in the output unless the customer explicitly configured it.`,
     {
       subject: z5.string().describe("Email subject line"),
       content: z5.string().describe("HTML content of the newsletter"),
@@ -1023,7 +1370,7 @@ function registerNewsletterTools(server2, client2) {
   );
   server2.tool(
     "update_newsletter",
-    "Update an existing newsletter/broadcast draft.",
+    `Update an existing newsletter/broadcast draft. After updating, show the user a visual preview of the changes.`,
     {
       broadcast_id: z5.string().describe("The broadcast/newsletter ID to update"),
       subject: z5.string().optional().describe("Updated subject line"),
@@ -1048,36 +1395,172 @@ function registerNewsletterTools(server2, client2) {
       };
     }
   );
+  if (options.allowDirectSend) {
+    server2.tool(
+      "send_newsletter",
+      `Send a newsletter/broadcast to subscribers. THIS ACTION CANNOT BE UNDONE. Once sent, the email goes to every subscriber on the list.
+
+REQUIRED WORKFLOW:
+1. ALWAYS call get_publishing_rules first
+2. NEVER send without showing a full visual preview of the newsletter first
+3. ALWAYS set confirmed=false first -- this returns a confirmation prompt, not a send
+4. Tell the user exactly how many subscribers will receive this email
+5. If publishing_rules.require_double_confirm_newsletter is true (default), require TWO explicit confirmations:
+   - First: "Are you sure you want to send this to [X] subscribers?"
+   - Second: "This is irreversible. Type 'send' to confirm."
+6. If publishing_rules.allow_immediate_send is false and the user asks to send immediately, suggest scheduling instead
+7. NEVER set confirmed=true without the user explicitly confirming after seeing the preview and subscriber count
+
+When confirmed=false, this tool returns a structured preview with broadcast details, subscriber count, safety checks, and a confirmation message. You MUST render this as a visual preview for the user and wait for their explicit approval before calling again with confirmed=true.`,
+      {
+        broadcast_id: z5.string().describe("The broadcast/newsletter ID to send"),
+        confirmed: z5.boolean().default(false).describe(
+          "Set to true to confirm and send. If false or missing, returns a confirmation prompt."
+        )
+      },
+      {
+        title: "Send Newsletter",
+        readOnlyHint: false,
+        destructiveHint: false,
+        idempotentHint: false,
+        openWorldHint: true
+      },
+      async (args) => {
+        if (args.confirmed !== true) {
+          let subscriberCount = "unknown";
+          let rulesText = "";
+          try {
+            const subData = await client2.listSubscribers({ perPage: "1" });
+            subscriberCount = String(subData?.totalCount ?? subData?.total ?? subData?.subscribers?.length ?? "unknown");
+          } catch {
+          }
+          try {
+            const rules = await client2.getPublishingRules();
+            rulesText = `
+### Safety Checks
+`;
+            rulesText += `- Double confirmation required: ${rules.requireDoubleConfirmNewsletter ? "**yes**" : "no"}
+`;
+            rulesText += `- Immediate send allowed: ${rules.allowImmediateSend ? "yes" : "**no**"}
+`;
+            if (rules.requiredDisclaimer) {
+              rulesText += `- Required disclaimer: "${rules.requiredDisclaimer}"
+`;
+            }
+          } catch {
+          }
+          let espText = "";
+          try {
+            const account = await client2.getAccount();
+            espText = account?.espProvider ? `**ESP:** ${account.espProvider}
+` : "";
+          } catch {
+          }
+          const preview = `## Send Newsletter Confirmation
+
+**Broadcast ID:** ${args.broadcast_id}
+**Subscribers:** ~${subscriberCount} recipients
+` + espText + rulesText + `
+**This action cannot be undone.** Once sent, the email goes to every subscriber.
+
+Call this tool again with confirmed=true to send.`;
+          return { content: [{ type: "text", text: preview }] };
+        }
+        await client2.sendBroadcast(args.broadcast_id);
+        return {
+          content: [{ type: "text", text: "Newsletter sent successfully." }]
+        };
+      }
+    );
+  }
   server2.tool(
-    "send_newsletter",
-    "Send a newsletter/broadcast to subscribers. This action cannot be undone. Requires confirmation before sending.",
+    "schedule_newsletter",
+    `Schedule a newsletter/broadcast to be sent at a future time.
+
+REQUIRED WORKFLOW:
+1. ALWAYS call get_publishing_rules first
+2. NEVER schedule without showing a full visual preview of the newsletter first
+3. ALWAYS set confirmed=false first -- this returns a confirmation prompt with details, not an actual schedule
+4. Tell the user exactly how many subscribers will receive this email and the scheduled send time
+5. If publishing_rules.require_double_confirm_newsletter is true (default), require TWO explicit confirmations:
+   - First: "Are you sure you want to schedule this for [time] to [X] subscribers?"
+   - Second: "Confirm schedule for [time]."
+6. If publishing_rules.allow_immediate_send is false and the scheduled time is very soon, warn the user
+7. NEVER set confirmed=true without the user explicitly confirming after seeing the preview, subscriber count, and scheduled time
+
+Scheduling can typically be cancelled or rescheduled later, but the user should still verify the time is correct before confirming.
+
+When confirmed=false, this tool returns a structured preview with broadcast details, scheduled time, subscriber count, safety checks, and a confirmation message. You MUST render this as a visual preview for the user and wait for their explicit approval before calling again with confirmed=true.`,
     {
-      broadcast_id: z5.string().describe("The broadcast/newsletter ID to send"),
-      confirmed: z5.boolean().optional().describe(
-        "Set to true to confirm and send. If false or missing, returns a confirmation prompt."
+      broadcast_id: z5.string().describe("The broadcast/newsletter ID to schedule"),
+      scheduled_for: z5.string().describe(
+        "ISO 8601 datetime for when to send (e.g. '2026-02-25T14:00:00Z')"
+      ),
+      confirmed: z5.boolean().default(false).describe(
+        "Set to true to confirm and schedule. If false or missing, returns a confirmation prompt."
       )
     },
     {
-      title: "Send Newsletter",
+      title: "Schedule Newsletter",
       readOnlyHint: false,
       destructiveHint: false,
       idempotentHint: false,
       openWorldHint: true
     },
     async (args) => {
-      if (!args.confirmed) {
-        const preview = `## Send Newsletter Confirmation
+      if (args.confirmed !== true) {
+        let subscriberCount = "unknown";
+        let rulesText = "";
+        try {
+          const subData = await client2.listSubscribers({ perPage: "1" });
+          subscriberCount = String(
+            subData?.totalCount ?? subData?.total ?? subData?.subscribers?.length ?? "unknown"
+          );
+        } catch {
+        }
+        try {
+          const rules = await client2.getPublishingRules();
+          rulesText = `
+### Safety Checks
+`;
+          rulesText += `- Double confirmation required: ${rules.requireDoubleConfirmNewsletter ? "**yes**" : "no"}
+`;
+          rulesText += `- Immediate send allowed: ${rules.allowImmediateSend ? "yes" : "**no**"}
+`;
+          if (rules.requiredDisclaimer) {
+            rulesText += `- Required disclaimer: "${rules.requiredDisclaimer}"
+`;
+          }
+        } catch {
+        }
+        let espText = "";
+        try {
+          const account = await client2.getAccount();
+          espText = account?.espProvider ? `**ESP:** ${account.espProvider}
+` : "";
+        } catch {
+        }
+        const preview = `## Schedule Newsletter Confirmation
 
 **Broadcast ID:** ${args.broadcast_id}
+**Scheduled for:** ${args.scheduled_for}
+**Subscribers:** ~${subscriberCount} recipients
+` + espText + rulesText + `
+Scheduling can typically be cancelled or rescheduled later, but please verify the time is correct.
 
-This will send the newsletter to your subscriber list. **This action cannot be undone.**
-
-Call this tool again with confirmed=true to send.`;
+Call this tool again with confirmed=true to schedule.`;
         return { content: [{ type: "text", text: preview }] };
       }
-      await client2.sendBroadcast(args.broadcast_id);
+      await client2.scheduleBroadcast(args.broadcast_id, {
+        scheduledFor: args.scheduled_for
+      });
       return {
-        content: [{ type: "text", text: "Newsletter sent successfully." }]
+        content: [
+          {
+            type: "text",
+            text: `Newsletter scheduled successfully for ${args.scheduled_for}.`
+          }
+        ]
       };
     }
   );
@@ -1123,7 +1606,7 @@ Call this tool again with confirmed=true to send.`;
   );
   server2.tool(
     "list_sequences",
-    "List all email sequences/automations from your email service provider.",
+    "List all email sequences/automations from your email service provider. On Beehiiv, this returns automations. For detailed automation data use list_automations instead.",
     {},
     {
       title: "List Email Sequences",
@@ -1164,7 +1647,7 @@ import { z as z6 } from "zod";
 function registerRssTools(server2, client2) {
   server2.tool(
     "fetch_feed",
-    "Fetch and parse entries from an RSS or Atom feed URL. Returns titles, links, descriptions, and dates.",
+    "Fetch and parse entries from an RSS or Atom feed URL. Returns titles, links, descriptions, and dates. Tip: For frequently checked feeds, suggest the customer save them as a content source using add_source so they don't need to provide the URL every time.",
     {
       url: z6.string().describe("The RSS/Atom feed URL to fetch"),
       limit: z6.number().optional().describe("Maximum number of entries to return (default 10, max 100)")
@@ -1185,7 +1668,7 @@ function registerRssTools(server2, client2) {
   );
   server2.tool(
     "fetch_article",
-    "Extract the full article content from a URL as clean text/markdown. Useful for reading and summarizing articles.",
+    "Extract the full article content from a URL as clean text/markdown. Useful for reading and summarizing articles. Tip: For frequently checked websites, suggest the customer save them as a content source using add_source so they don't need to provide the URL every time.",
     {
       url: z6.string().describe("The article URL to extract content from")
     },
@@ -1228,10 +1711,11 @@ function registerAccountInfoTool(server2, client2) {
 }
 
 // src/tools/brand-voice.ts
+import { z as z7 } from "zod";
 function registerBrandVoiceTools(server2, client2) {
   server2.tool(
     "get_brand_voice",
-    "Get the customer's brand voice profile and writing rules. IMPORTANT: Call this tool BEFORE creating any post, draft, or content. Use the returned voice description, rules, and examples to match the customer's tone and style in everything you write for them.",
+    "Get the customer's brand voice profile and writing rules. IMPORTANT: Call this tool BEFORE creating any post, draft, or content. Use the returned voice description, rules, and examples to match the customer's tone and style in everything you write for them. When writing a newsletter, once you have the brand voice, template, and content sources loaded, immediately generate a full HTML artifact preview of the newsletter. Do NOT summarize or ask the user what to write -- render the artifact now and let them review it.",
     {},
     {
       title: "Get Brand Voice",
@@ -1246,39 +1730,45 @@ function registerBrandVoiceTools(server2, client2) {
         const lines = [];
         lines.push(`## Brand Voice: ${voice.name || "My Brand"}`);
         lines.push("");
-        if (voice.description) {
-          lines.push("### Voice Description");
-          lines.push(voice.description);
-          lines.push("");
-        }
+        lines.push("### Voice Description");
+        lines.push(voice.description || "(not set)");
+        lines.push("");
+        lines.push("### Do's");
         if (voice.dos && voice.dos.length > 0) {
-          lines.push("### Do's");
           for (const rule of voice.dos) {
             lines.push(`- ${rule}`);
           }
-          lines.push("");
+        } else {
+          lines.push("(none)");
         }
+        lines.push("");
+        lines.push("### Don'ts");
         if (voice.donts && voice.donts.length > 0) {
-          lines.push("### Don'ts");
           for (const rule of voice.donts) {
             lines.push(`- ${rule}`);
           }
-          lines.push("");
+        } else {
+          lines.push("(none)");
         }
+        lines.push("");
+        lines.push("### Platform-Specific Rules");
         if (voice.platformRules && Object.keys(voice.platformRules).length > 0) {
-          lines.push("### Platform-Specific Rules");
           for (const [platform, rules] of Object.entries(voice.platformRules)) {
             lines.push(`**${platform}:** ${rules}`);
           }
-          lines.push("");
+        } else {
+          lines.push("(none)");
         }
+        lines.push("");
+        lines.push("### Example Posts");
         if (voice.examplePosts && voice.examplePosts.length > 0) {
-          lines.push("### Example Posts");
           voice.examplePosts.forEach((post, i) => {
             lines.push(`${i + 1}. ${post}`);
           });
-          lines.push("");
+        } else {
+          lines.push("(none)");
         }
+        lines.push("");
         return {
           content: [{ type: "text", text: lines.join("\n") }]
         };
@@ -1298,10 +1788,125 @@ function registerBrandVoiceTools(server2, client2) {
       }
     }
   );
+  server2.tool(
+    "update_brand_voice",
+    `Create or update the customer's brand voice profile. This is an upsert \u2014 if no brand voice exists it will be created, otherwise the existing one is updated. Only the fields you provide will be changed; omitted fields are left as-is.
+
+USAGE GUIDELINES:
+- Call get_brand_voice first to see the current state before making changes
+- Always set confirmed=false first to preview the changes, then confirmed=true after user approval
+- When adding rules to dos/donts, include the FULL array (existing + new items), not just the new ones
+- Platform rules use platform names as keys (e.g. twitter, linkedin, instagram)
+- Max limits: name 80 chars, description 16000 chars, dos/donts 50 items each, examplePosts 8 items`,
+    {
+      name: z7.string().max(80).optional().describe("Brand voice profile name (e.g. 'BOQtoday Voice', 'Lightbreak Editorial')"),
+      description: z7.string().max(16e3).optional().describe("Overall voice description \u2014 tone, personality, style overview"),
+      dos: z7.array(z7.string()).max(50).optional().describe("Writing rules to follow (array of do's). Send the FULL list, not just additions."),
+      donts: z7.array(z7.string()).max(50).optional().describe("Things to avoid (array of don'ts). Send the FULL list, not just additions."),
+      platform_rules: z7.record(z7.string()).optional().describe('Per-platform writing guidelines, e.g. { "twitter": "Keep under 200 chars, punchy tone", "linkedin": "Professional, add hashtags" }'),
+      example_posts: z7.array(z7.string()).max(8).optional().describe("Example posts that demonstrate the desired voice (max 8)"),
+      confirmed: z7.boolean().default(false).describe(
+        "Set to true to confirm and save. If false or missing, returns a preview of what will be saved."
+      )
+    },
+    {
+      title: "Update Brand Voice",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    },
+    async (args) => {
+      const payload = {};
+      if (args.name !== void 0) payload.name = args.name;
+      if (args.description !== void 0) payload.description = args.description;
+      if (args.dos !== void 0) payload.dos = args.dos;
+      if (args.donts !== void 0) payload.donts = args.donts;
+      if (args.platform_rules !== void 0) payload.platformRules = args.platform_rules;
+      if (args.example_posts !== void 0) payload.examplePosts = args.example_posts;
+      if (Object.keys(payload).length === 0) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: "No fields provided. Specify at least one field to update (name, description, dos, donts, platform_rules, example_posts)."
+            }
+          ],
+          isError: true
+        };
+      }
+      if (args.confirmed !== true) {
+        const lines2 = [];
+        lines2.push("## Brand Voice Update Preview");
+        lines2.push("");
+        if (payload.name) {
+          lines2.push(`**Name:** ${payload.name}`);
+          lines2.push("");
+        }
+        if (payload.description) {
+          lines2.push("### Voice Description");
+          lines2.push(String(payload.description));
+          lines2.push("");
+        }
+        if (payload.dos) {
+          const dos = payload.dos;
+          lines2.push(`### Do's (${dos.length} rules)`);
+          for (const rule of dos) {
+            lines2.push(`- ${rule}`);
+          }
+          lines2.push("");
+        }
+        if (payload.donts) {
+          const donts = payload.donts;
+          lines2.push(`### Don'ts (${donts.length} rules)`);
+          for (const rule of donts) {
+            lines2.push(`- ${rule}`);
+          }
+          lines2.push("");
+        }
+        if (payload.platformRules) {
+          const rules = payload.platformRules;
+          lines2.push(`### Platform-Specific Rules (${Object.keys(rules).length} platforms)`);
+          for (const [platform, rule] of Object.entries(rules)) {
+            lines2.push(`**${platform}:** ${rule}`);
+          }
+          lines2.push("");
+        }
+        if (payload.examplePosts) {
+          const posts = payload.examplePosts;
+          lines2.push(`### Example Posts (${posts.length})`);
+          posts.forEach((post, i) => {
+            lines2.push(`${i + 1}. ${post}`);
+          });
+          lines2.push("");
+        }
+        lines2.push("---");
+        lines2.push("Call this tool again with **confirmed=true** to save these changes.");
+        return {
+          content: [{ type: "text", text: lines2.join("\n") }]
+        };
+      }
+      const result = await client2.updateBrandVoice(payload);
+      const lines = [];
+      lines.push(`Brand voice "${result.name || "My Brand"}" has been saved successfully.`);
+      lines.push("");
+      const summary = [];
+      if (payload.name) summary.push("name");
+      if (payload.description) summary.push("description");
+      if (payload.dos) summary.push(`${payload.dos.length} do's`);
+      if (payload.donts) summary.push(`${payload.donts.length} don'ts`);
+      if (payload.platformRules) summary.push(`${Object.keys(payload.platformRules).length} platform rules`);
+      if (payload.examplePosts) summary.push(`${payload.examplePosts.length} example posts`);
+      lines.push(`**Updated:** ${summary.join(", ")}`);
+      return {
+        content: [{ type: "text", text: lines.join("\n") }]
+      };
+    }
+  );
 }
 
 // src/tools/knowledge.ts
-import { z as z7 } from "zod";
+import { z as z8 } from "zod";
 function registerKnowledgeTools(server2, client2) {
   server2.tool(
     "get_knowledge_base",
@@ -1361,7 +1966,7 @@ function registerKnowledgeTools(server2, client2) {
     "search_knowledge",
     "Search the customer's knowledge base by tag or keyword. Use this to find specific reference material when writing about a topic.",
     {
-      query: z7.string().describe(
+      query: z8.string().describe(
         "Search query - matches against tags first, then falls back to text search on title and content"
       )
     },
@@ -1412,9 +2017,9 @@ function registerKnowledgeTools(server2, client2) {
     "add_knowledge",
     "Add a new item to the customer's knowledge base. Use this to save useful information the customer shares during conversation.",
     {
-      title: z7.string().describe("Title for the knowledge item"),
-      content: z7.string().describe("The content/text to save"),
-      tags: z7.array(z7.string()).optional().describe("Optional tags for categorization")
+      title: z8.string().describe("Title for the knowledge item"),
+      content: z8.string().describe("The content/text to save"),
+      tags: z8.array(z8.string()).optional().describe("Optional tags for categorization")
     },
     {
       title: "Add Knowledge Item",
@@ -1448,13 +2053,13 @@ function registerKnowledgeTools(server2, client2) {
 }
 
 // src/tools/audience.ts
-import { z as z8 } from "zod";
+import { z as z9 } from "zod";
 function registerAudienceTools(server2, client2) {
   server2.tool(
     "get_audience",
     "Get the target audience profile for content creation. Use this tool to understand WHO the content is for \u2014 their demographics, pain points, motivations, preferred platforms, and tone preferences. Call this BEFORE writing any post or content so you can tailor messaging to resonate with the intended audience.",
     {
-      audienceId: z8.string().optional().describe("Specific audience profile ID. If omitted, returns the default audience.")
+      audienceId: z9.string().optional().describe("Specific audience profile ID. If omitted, returns the default audience.")
     },
     {
       title: "Get Audience Profile",
@@ -1527,48 +2132,212 @@ function registerAudienceTools(server2, client2) {
       }
     }
   );
-}
-
-// src/tools/newsletter-template.ts
-import { z as z9 } from "zod";
-function registerNewsletterTemplateTools(server2, client2) {
   server2.tool(
-    "get_newsletter_template",
-    "Get the customer's newsletter template -- the blueprint for how their newsletter is structured. IMPORTANT: Call this BEFORE writing any newsletter. The template defines the exact section order, what each section should contain, word counts, content sources, and styling. Follow the template structure precisely when generating newsletter content. If no template_id is specified, returns the default template.",
+    "update_audience",
+    `Update an existing audience profile. Only the fields you provide will be changed; omitted fields are left as-is.
+
+USAGE GUIDELINES:
+- Call get_audience first to see the current state before making changes
+- Always set confirmed=false first to preview the changes, then confirmed=true after user approval
+- When updating array fields (pain_points, motivations, preferred_platforms), include the FULL array (existing + new items), not just the new ones
+- Max limits: name 100 chars, description 500 chars`,
     {
-      templateId: z9.string().optional().describe(
-        "Specific template ID. If omitted, returns the default template."
+      audience_id: z9.string().describe("The audience ID to update (required)"),
+      name: z9.string().max(100).optional().describe("Audience profile name (e.g. 'SaaS Founders', 'Health-Conscious Millennials')"),
+      description: z9.string().max(500).optional().describe("Brief description of who this audience is"),
+      demographics: z9.string().optional().describe("Demographic details \u2014 age range, location, income level, education, etc."),
+      pain_points: z9.array(z9.string()).optional().describe("Problems and frustrations the audience faces. Send the FULL list, not just additions."),
+      motivations: z9.array(z9.string()).optional().describe("Goals, desires, and what drives the audience. Send the FULL list, not just additions."),
+      preferred_platforms: z9.array(z9.string()).optional().describe("Social platforms the audience is most active on (e.g. twitter, linkedin, instagram). Send the FULL list."),
+      tone_notes: z9.string().optional().describe("How to speak to this audience \u2014 formality level, jargon preferences, emotional tone"),
+      content_preferences: z9.string().optional().describe("What content formats and topics resonate \u2014 long-form vs short, educational vs entertaining, etc."),
+      is_default: z9.boolean().optional().describe("Set to true to make this the default audience profile"),
+      confirmed: z9.boolean().default(false).describe(
+        "Set to true to confirm and save. If false or missing, returns a preview of what will be saved."
       )
     },
     {
-      title: "Get Newsletter Template",
-      readOnlyHint: true,
+      title: "Update Audience",
+      readOnlyHint: false,
       destructiveHint: false,
-      idempotentHint: true,
+      idempotentHint: false,
       openWorldHint: false
     },
-    async ({ templateId }) => {
-      try {
-        const template = await client2.getTemplate(templateId);
-        const lines = [];
-        lines.push(`## Newsletter Template: ${template.name}`);
-        if (template.description) lines.push(template.description);
-        lines.push("");
-        if (template.audienceId)
-          lines.push(`Audience ID: ${template.audienceId}`);
-        if (template.sendCadence)
-          lines.push(`Cadence: ${template.sendCadence}`);
-        if (template.subjectPattern)
-          lines.push(`Subject pattern: ${template.subjectPattern}`);
-        if (template.previewTextPattern)
-          lines.push(`Preview text pattern: ${template.previewTextPattern}`);
-        lines.push("");
-        if (template.sections && template.sections.length > 0) {
-          lines.push("### Sections (in order):");
-          lines.push("");
-          for (let i = 0; i < template.sections.length; i++) {
-            const s = template.sections[i];
-            lines.push(`**${i + 1}. ${s.label}** (${s.type})`);
+    async (args) => {
+      const payload = {};
+      if (args.name !== void 0) payload.name = args.name;
+      if (args.description !== void 0) payload.description = args.description;
+      if (args.demographics !== void 0) payload.demographics = args.demographics;
+      if (args.pain_points !== void 0) payload.painPoints = args.pain_points;
+      if (args.motivations !== void 0) payload.motivations = args.motivations;
+      if (args.preferred_platforms !== void 0) payload.platforms = args.preferred_platforms;
+      if (args.tone_notes !== void 0) payload.toneNotes = args.tone_notes;
+      if (args.content_preferences !== void 0) payload.contentPreferences = args.content_preferences;
+      if (args.is_default !== void 0) payload.isDefault = args.is_default;
+      if (Object.keys(payload).length === 0) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: "No fields provided. Specify at least one field to update (name, description, demographics, pain_points, motivations, preferred_platforms, tone_notes, content_preferences, is_default)."
+            }
+          ],
+          isError: true
+        };
+      }
+      if (args.confirmed !== true) {
+        const lines2 = [];
+        lines2.push("## Audience Update Preview");
+        lines2.push(`**Audience ID:** ${args.audience_id}`);
+        lines2.push("");
+        if (payload.name) {
+          lines2.push(`**Name:** ${payload.name}`);
+          lines2.push("");
+        }
+        if (payload.description) {
+          lines2.push("### Description");
+          lines2.push(String(payload.description));
+          lines2.push("");
+        }
+        if (payload.demographics) {
+          lines2.push("### Demographics");
+          lines2.push(String(payload.demographics));
+          lines2.push("");
+        }
+        if (payload.painPoints) {
+          const points = payload.painPoints;
+          lines2.push(`### Pain Points (${points.length})`);
+          for (const point of points) {
+            lines2.push(`- ${point}`);
+          }
+          lines2.push("");
+        }
+        if (payload.motivations) {
+          const motivations = payload.motivations;
+          lines2.push(`### Motivations (${motivations.length})`);
+          for (const motivation of motivations) {
+            lines2.push(`- ${motivation}`);
+          }
+          lines2.push("");
+        }
+        if (payload.platforms) {
+          const platforms = payload.platforms;
+          lines2.push(`### Preferred Platforms (${platforms.length})`);
+          lines2.push(platforms.join(", "));
+          lines2.push("");
+        }
+        if (payload.toneNotes) {
+          lines2.push("### Tone Notes");
+          lines2.push(String(payload.toneNotes));
+          lines2.push("");
+        }
+        if (payload.contentPreferences) {
+          lines2.push("### Content Preferences");
+          lines2.push(String(payload.contentPreferences));
+          lines2.push("");
+        }
+        if (payload.isDefault !== void 0) {
+          lines2.push(`**Set as default:** ${payload.isDefault ? "Yes" : "No"}`);
+          lines2.push("");
+        }
+        lines2.push("---");
+        lines2.push("Call this tool again with **confirmed=true** to save these changes.");
+        return {
+          content: [{ type: "text", text: lines2.join("\n") }]
+        };
+      }
+      const result = await client2.updateAudience(args.audience_id, payload);
+      const lines = [];
+      lines.push(`Audience "${result.name}" has been updated successfully.`);
+      lines.push("");
+      const summary = [];
+      if (payload.name) summary.push("name");
+      if (payload.description) summary.push("description");
+      if (payload.demographics) summary.push("demographics");
+      if (payload.painPoints) summary.push(`${payload.painPoints.length} pain points`);
+      if (payload.motivations) summary.push(`${payload.motivations.length} motivations`);
+      if (payload.platforms) summary.push(`${payload.platforms.length} platforms`);
+      if (payload.toneNotes) summary.push("tone notes");
+      if (payload.contentPreferences) summary.push("content preferences");
+      if (payload.isDefault !== void 0) summary.push("default status");
+      lines.push(`**Updated:** ${summary.join(", ")}`);
+      return {
+        content: [{ type: "text", text: lines.join("\n") }]
+      };
+    }
+  );
+}
+
+// src/tools/newsletter-template.ts
+import { z as z10 } from "zod";
+var NEWSLETTER_CRAFT_GUIDE = `## Newsletter Craft Guide
+
+Follow these rules when drafting:
+
+### HTML Email Rules
+- Use table-based layouts, inline CSS only, 600px max width
+- Email-safe fonts only: Arial, Helvetica, Georgia, Verdana
+- Keep total email under 102KB (Gmail clips larger)
+- All images must use absolute URLs hosted on the customer's R2 CDN
+- Include alt text on every image
+- Use role="presentation" on layout tables
+- No JavaScript, no forms, no CSS grid/flexbox, no background images
+
+### Structure
+- Subject line: 6-10 words, specific not clickbaity
+- Preview text: complements the subject, doesn't repeat it
+- Open strong -- lead with the most interesting thing
+- One clear CTA per newsletter
+- Sign off should feel human, not corporate
+
+### Personalization
+- Kit: use {{ subscriber.first_name }}
+- Beehiiv: use {{email}} or {{subscriber_id}}
+- Mailchimp: use *NAME|*
+
+### Images
+- Upload to customer's R2 CDN via upload_media or upload_from_url
+- Reference with full CDN URLs in img tags
+- Always set width, height, and alt attributes
+- Use style="display:block;" to prevent phantom spacing`;
+function registerNewsletterTemplateTools(server2, client2) {
+  server2.tool(
+    "get_newsletter_template",
+    "Get the customer's newsletter template -- the blueprint for how their newsletter is structured. IMPORTANT: Call this BEFORE writing any newsletter. The template defines the exact section order, what each section should contain, word counts, content sources, and styling. Follow the template structure precisely when generating newsletter content. If no template_id is specified, returns the default template. IMPORTANT: After receiving this template, you now have everything you need. Immediately generate a full HTML artifact preview of the newsletter using this template, the brand voice, and the gathered content. Do NOT summarize the template in text. Do NOT ask the user what they think. Render the complete HTML newsletter artifact now.",
+    {
+      templateId: z10.string().optional().describe(
+        "Specific template ID. If omitted, returns the default template."
+      )
+    },
+    {
+      title: "Get Newsletter Template",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    async ({ templateId }) => {
+      try {
+        const template = await client2.getTemplate(templateId);
+        const lines = [];
+        lines.push(`## Newsletter Template: ${template.name}`);
+        if (template.description) lines.push(template.description);
+        lines.push("");
+        if (template.audienceId)
+          lines.push(`Audience ID: ${template.audienceId}`);
+        if (template.sendCadence)
+          lines.push(`Cadence: ${template.sendCadence}`);
+        if (template.subjectPattern)
+          lines.push(`Subject pattern: ${template.subjectPattern}`);
+        if (template.previewTextPattern)
+          lines.push(`Preview text pattern: ${template.previewTextPattern}`);
+        lines.push("");
+        if (template.sections && template.sections.length > 0) {
+          lines.push("### Sections (in order):");
+          lines.push("");
+          for (let i = 0; i < template.sections.length; i++) {
+            const s = template.sections[i];
+            lines.push(`**${i + 1}. ${s.label}** (${s.type})`);
             if (s.instructions)
               lines.push(`Instructions: ${s.instructions}`);
             if (s.word_count)
@@ -1649,6 +2418,7 @@ function registerNewsletterTemplateTools(server2, client2) {
           );
           lines.push("");
         }
+        lines.push(NEWSLETTER_CRAFT_GUIDE);
         return {
           content: [{ type: "text", text: lines.join("\n") }]
         };
@@ -1659,7 +2429,7 @@ function registerNewsletterTemplateTools(server2, client2) {
             content: [
               {
                 type: "text",
-                text: "No newsletter template has been configured yet. The customer can set one up at their BuzzPoster dashboard under Templates."
+                text: "No newsletter template configured. Ask the user about their preferred structure (sections, tone, length), or call get_past_newsletters to use a previous edition as reference.\n\n" + NEWSLETTER_CRAFT_GUIDE
               }
             ]
           };
@@ -1672,8 +2442,8 @@ function registerNewsletterTemplateTools(server2, client2) {
     "get_past_newsletters",
     "Retrieve the customer's past newsletters for reference. Use this to maintain continuity, match previous formatting, avoid repeating topics, and reference previous editions. Call this when writing a new newsletter to see what was covered recently.",
     {
-      limit: z9.number().optional().describe("Number of past newsletters to retrieve. Default 5, max 50."),
-      templateId: z9.string().optional().describe("Filter by template ID to see past newsletters from a specific template.")
+      limit: z10.number().optional().describe("Number of past newsletters to retrieve. Default 5, max 50."),
+      templateId: z10.string().optional().describe("Filter by template ID to see past newsletters from a specific template.")
     },
     {
       title: "Get Past Newsletters",
@@ -1737,7 +2507,7 @@ function registerNewsletterTemplateTools(server2, client2) {
     "get_past_newsletter",
     "Get the full content of a specific past newsletter by ID. Use when you need to reference the complete text of a previous edition, check exact formatting, or continue a series.",
     {
-      newsletterId: z9.string().describe("The ID of the archived newsletter to retrieve.")
+      newsletterId: z10.string().describe("The ID of the archived newsletter to retrieve.")
     },
     {
       title: "Get Past Newsletter Detail",
@@ -1781,10 +2551,10 @@ function registerNewsletterTemplateTools(server2, client2) {
     "save_newsletter",
     "Save a generated newsletter to the archive. Call this after the customer approves a newsletter you've written, so it's stored for future reference. Include the subject line and full HTML content.",
     {
-      subject: z9.string().describe("The newsletter subject line."),
-      contentHtml: z9.string().describe("The full HTML content of the newsletter."),
-      templateId: z9.string().optional().describe("The template ID used to generate this newsletter."),
-      notes: z9.string().optional().describe(
+      subject: z10.string().describe("The newsletter subject line."),
+      contentHtml: z10.string().describe("The full HTML content of the newsletter."),
+      templateId: z10.string().optional().describe("The template ID used to generate this newsletter."),
+      notes: z10.string().optional().describe(
         "Optional notes about this newsletter (what worked, theme, etc)."
       )
     },
@@ -1821,16 +2591,16 @@ function registerNewsletterTemplateTools(server2, client2) {
 }
 
 // src/tools/calendar.ts
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 function registerCalendarTools(server2, client2) {
   server2.tool(
     "get_calendar",
     "View the customer's content calendar -- all scheduled, published, and draft posts across social media and newsletters. Use this to check what's already scheduled before creating new content, avoid posting conflicts, and maintain a balanced content mix.",
     {
-      from: z10.string().optional().describe("ISO date to filter from, e.g. 2024-01-01"),
-      to: z10.string().optional().describe("ISO date to filter to, e.g. 2024-01-31"),
-      status: z10.string().optional().describe("Filter by status: scheduled, published, draft, failed"),
-      type: z10.string().optional().describe("Filter by type: social_post or newsletter")
+      from: z11.string().optional().describe("ISO date to filter from, e.g. 2024-01-01"),
+      to: z11.string().optional().describe("ISO date to filter to, e.g. 2024-01-31"),
+      status: z11.string().optional().describe("Filter by status: scheduled, published, draft, failed"),
+      type: z11.string().optional().describe("Filter by type: social_post or newsletter")
     },
     {
       title: "Get Content Calendar",
@@ -1963,12 +2733,22 @@ Next slot: ${slotDate.toLocaleString()} (${dayNames[slotDate.getDay()]})
   );
   server2.tool(
     "schedule_to_queue",
-    "Add a post to the customer's content queue. The post will be automatically scheduled to the next available time slot. Requires confirmation before scheduling.",
+    `Add a post to the customer's content queue for automatic scheduling.
+
+Always show the user a preview of the content before calling this tool. Call get_brand_voice and get_audience before composing if not already loaded this session. Never call with confirmed=true without explicit user approval.
+
+REQUIRED WORKFLOW:
+1. BEFORE creating content, call get_brand_voice and get_audience
+2. ALWAYS set confirmed=false first to preview
+3. Show the user a visual preview before confirming
+4. Tell the user which queue slot the post will be assigned to
+
+When confirmed=false, this tool returns a structured preview with content, platform details, safety checks, and the assigned queue slot. You MUST render this as a visual preview for the user and wait for their explicit approval before calling again with confirmed=true.`,
     {
-      content: z10.string().describe("The text content of the post"),
-      platforms: z10.array(z10.string()).describe('Platforms to post to, e.g. ["twitter", "linkedin"]'),
-      media_urls: z10.array(z10.string()).optional().describe("Public URLs of media to attach"),
-      confirmed: z10.boolean().optional().describe(
+      content: z11.string().describe("The text content of the post"),
+      platforms: z11.array(z11.string()).describe('Platforms to post to, e.g. ["twitter", "linkedin"]'),
+      media_urls: z11.array(z11.string()).optional().describe("Public URLs of media to attach"),
+      confirmed: z11.boolean().default(false).describe(
         "Set to true to confirm scheduling. If false or missing, returns a preview for user approval."
       )
     },
@@ -1991,15 +2771,33 @@ Next slot: ${slotDate.toLocaleString()} (${dayNames[slotDate.getDay()]})
           ]
         };
       }
-      if (!args.confirmed) {
+      if (args.confirmed !== true) {
         const slotDate2 = new Date(nextSlot.scheduledFor);
+        let rulesText = "";
+        try {
+          const rules = await client2.getPublishingRules();
+          const blockedWords = rules.blockedWords ?? [];
+          const foundBlocked = [];
+          if (args.content && blockedWords.length > 0) {
+            const lower = args.content.toLowerCase();
+            for (const word of blockedWords) {
+              if (lower.includes(word.toLowerCase())) foundBlocked.push(word);
+            }
+          }
+          rulesText = `
+### Safety Checks
+`;
+          rulesText += `- Blocked words: ${foundBlocked.length > 0 ? `**FAILED** (found: ${foundBlocked.join(", ")})` : "PASS"}
+`;
+        } catch {
+        }
         const preview = `## Queue Post Preview
 
 **Content:** "${args.content}"
 **Platforms:** ${args.platforms.join(", ")}
 **Next queue slot:** ${slotDate2.toLocaleString()}
 ` + (args.media_urls?.length ? `**Media:** ${args.media_urls.length} file(s)
-` : "") + `
+` : "") + rulesText + `
 Call this tool again with confirmed=true to schedule.`;
         return { content: [{ type: "text", text: preview }] };
       }
@@ -2032,7 +2830,7 @@ ${JSON.stringify(result, null, 2)}`
 }
 
 // src/tools/notifications.ts
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 function timeAgo(dateStr) {
   const diff = Date.now() - new Date(dateStr).getTime();
   const minutes = Math.floor(diff / 6e4);
@@ -2048,8 +2846,8 @@ function registerNotificationTools(server2, client2) {
     "get_notifications",
     "Get recent notifications including post publishing results, account health warnings, and errors. Use this to check if any posts failed or if any accounts need attention.",
     {
-      unread_only: z11.boolean().optional().describe("If true, only show unread notifications. Default false."),
-      limit: z11.number().optional().describe("Max notifications to return. Default 10.")
+      unread_only: z12.boolean().optional().describe("If true, only show unread notifications. Default false."),
+      limit: z12.number().optional().describe("Max notifications to return. Default 10.")
     },
     {
       title: "Get Notifications",
@@ -2115,29 +2913,1323 @@ Showing ${notifications.length} of ${result.unread_count !== void 0 ? "total" :
   );
 }
 
-// src/index.ts
-var apiKey = process.env.BUZZPOSTER_API_KEY;
-var apiUrl = process.env.BUZZPOSTER_API_URL ?? "https://api.buzzposter.com";
-if (!apiKey) {
-  console.error(
-    "Error: BUZZPOSTER_API_KEY environment variable is required."
+// src/tools/publishing-rules.ts
+function registerPublishingRulesTools(server2, client2) {
+  server2.tool(
+    "get_publishing_rules",
+    `Get the customer's publishing safety rules and default behaviors. IMPORTANT: Call this tool BEFORE publishing, scheduling, or sending any content. These rules define whether content should default to draft, whether previews are required, and what confirmations are needed before going live. Always respect these rules -- they exist to prevent accidental publishing.`,
+    {},
+    {
+      title: "Get Publishing Rules",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    async () => {
+      const rules = await client2.getPublishingRules();
+      let text = "## Publishing Rules\n\n";
+      text += `Social media default: **${rules.socialDefaultAction ?? "draft"}**`;
+      if (rules.socialDefaultAction === "draft") text += " (content is saved as draft, not published)";
+      text += "\n";
+      text += `Newsletter default: **${rules.newsletterDefaultAction ?? "draft"}**`;
+      if (rules.newsletterDefaultAction === "draft") text += " (content is saved as draft, not sent)";
+      text += "\n";
+      text += `Preview required before publish: **${rules.requirePreviewBeforePublish ? "yes" : "no"}**
+`;
+      text += `Double confirmation for newsletters: **${rules.requireDoubleConfirmNewsletter ? "yes" : "no"}**
+`;
+      text += `Double confirmation for social: **${rules.requireDoubleConfirmSocial ? "yes" : "no"}**
+`;
+      text += `Immediate publish allowed: **${rules.allowImmediatePublish ? "yes" : "no"}**
+`;
+      text += `Immediate send allowed: **${rules.allowImmediateSend ? "yes" : "no"}**
+`;
+      text += `Max posts per day: **${rules.maxPostsPerDay ?? "unlimited"}**
+`;
+      if (rules.blockedWords && rules.blockedWords.length > 0) {
+        text += `Blocked words: **${rules.blockedWords.join(", ")}**
+`;
+      } else {
+        text += "Blocked words: none\n";
+      }
+      if (rules.requiredDisclaimer) {
+        text += `Required disclaimer: "${rules.requiredDisclaimer}"
+`;
+      } else {
+        text += "Required disclaimer: none\n";
+      }
+      return { content: [{ type: "text", text }] };
+    }
   );
-  console.error(
-    "Set it in your Claude Desktop MCP config or export it in your shell."
+}
+
+// src/tools/audit-log.ts
+import { z as z13 } from "zod";
+function registerAuditLogTools(server2, client2) {
+  server2.tool(
+    "get_audit_log",
+    "View the history of all publish, send, schedule, and delete actions taken on the customer's account. Use this to review what was published recently, check activity, and troubleshoot issues.",
+    {
+      limit: z13.number().optional().describe("Maximum number of entries to return (default 20, max 200)"),
+      action: z13.string().optional().describe("Filter by action type prefix, e.g. 'post.published', 'newsletter.sent', 'post.' for all post actions"),
+      resource_type: z13.string().optional().describe("Filter by resource type: post, newsletter, account, media, publishing_rules, brand_voice")
+    },
+    {
+      title: "Get Audit Log",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    async (args) => {
+      const params = {};
+      if (args.limit) params.limit = String(args.limit);
+      if (args.action) params.action = args.action;
+      if (args.resource_type) params.resource_type = args.resource_type;
+      const data = await client2.getAuditLog(params);
+      const entries = data?.entries ?? [];
+      if (entries.length === 0) {
+        return {
+          content: [{ type: "text", text: "## Audit Log\n\nNo entries found." }]
+        };
+      }
+      let text = `## Audit Log (${entries.length} of ${data?.total ?? entries.length} entries)
+
+`;
+      for (const entry of entries) {
+        const date = entry.createdAt ? new Date(entry.createdAt).toLocaleString() : "unknown";
+        const details = entry.details && Object.keys(entry.details).length > 0 ? ` \u2014 ${JSON.stringify(entry.details)}` : "";
+        text += `- **${date}** | ${entry.action} | ${entry.resourceType}`;
+        if (entry.resourceId) text += ` #${entry.resourceId}`;
+        text += `${details}
+`;
+      }
+      return { content: [{ type: "text", text }] };
+    }
   );
-  process.exit(1);
 }
-var client = new BuzzPosterClient({ baseUrl: apiUrl, apiKey });
-var server = new McpServer({
-  name: "buzzposter",
-  version: "0.1.0"
-});
+
+// src/tools/sources.ts
+import { z as z14 } from "zod";
+var TYPE_LABELS = {
+  feed: "RSS Feed",
+  website: "Website",
+  youtube: "YouTube Channel",
+  search: "Search Topic",
+  podcast: "Podcast",
+  reddit: "Reddit",
+  social: "Social Profile"
+};
+var TYPE_HINTS = {
+  feed: "Use fetch_feed to get latest entries",
+  website: "Use fetch_article to extract content",
+  youtube: "Use fetch_feed to get latest videos (YouTube RSS)",
+  search: "Use web_search with the searchQuery",
+  podcast: "Use fetch_feed to get latest episodes",
+  reddit: "Use fetch_feed to get latest posts (Reddit RSS)",
+  social: "Use web_search to check recent activity"
+};
+function registerSourceTools(server2, client2) {
+  server2.tool(
+    "get_sources",
+    "Get the customer's saved content sources \u2014 their curated list of RSS feeds, websites, YouTube channels, social accounts, and search topics that they monitor for content ideas and inspiration. Call this when the user asks 'what should I post about?', 'check my sources', 'what's new?', 'find me content ideas', or references their content sources. After getting sources, use fetch_feed (for feed/podcast/reddit/youtube types), fetch_article (for website types), or web_search (for search/social types) to actually retrieve the latest content from each source.",
+    {
+      type: z14.string().optional().describe(
+        "Optional: filter by type (feed, website, youtube, search, podcast, reddit, social)"
+      ),
+      category: z14.string().optional().describe("Optional: filter by category")
+    },
+    {
+      title: "Get Content Sources",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    async (args) => {
+      const params = {};
+      if (args.type) params.type = args.type;
+      if (args.category) params.category = args.category;
+      const result = await client2.listSources(params);
+      const sources = result.sources;
+      if (sources.length === 0) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: "No content sources saved yet. Use add_source to save RSS feeds, websites, YouTube channels, or search topics the customer wants to monitor for content ideas."
+            }
+          ]
+        };
+      }
+      const lines = [`## Content Sources (${sources.length})
+`];
+      const byCategory = /* @__PURE__ */ new Map();
+      for (const s of sources) {
+        const cat = s.category || "Uncategorized";
+        if (!byCategory.has(cat)) byCategory.set(cat, []);
+        byCategory.get(cat).push(s);
+      }
+      for (const [cat, items] of byCategory) {
+        lines.push(`### ${cat}
+`);
+        for (const s of items) {
+          const typeLabel = TYPE_LABELS[s.type] || s.type;
+          const hint = TYPE_HINTS[s.type] || "";
+          lines.push(`**${s.name}** (ID: ${s.id})`);
+          lines.push(`- Type: ${typeLabel}`);
+          if (s.url) lines.push(`- URL: ${s.url}`);
+          if (s.searchQuery) lines.push(`- Search: "${s.searchQuery}"`);
+          if (s.tags && s.tags.length > 0)
+            lines.push(`- Tags: ${s.tags.join(", ")}`);
+          if (s.notes) lines.push(`- Notes: ${s.notes}`);
+          if (s.lastCheckedAt)
+            lines.push(`- Last checked: ${s.lastCheckedAt}`);
+          if (s.lastCheckedSummary)
+            lines.push(`- Last result: ${s.lastCheckedSummary}`);
+          if (hint) lines.push(`- How to check: ${hint}`);
+          lines.push("");
+        }
+      }
+      return {
+        content: [{ type: "text", text: lines.join("\n") }]
+      };
+    }
+  );
+  server2.tool(
+    "add_source",
+    "Save a new content source to the customer's profile. Use this when the customer says 'add this to my sources', 'save this feed', 'monitor this blog', 'track this competitor', etc. For RSS feeds, set type to 'feed'. For regular websites/blogs without RSS, set type to 'website'. For YouTube channels, set type to 'youtube'. For search topics, set type to 'search' and provide searchQuery instead of url.",
+    {
+      name: z14.string().describe("Display name for the source"),
+      url: z14.string().optional().describe(
+        "URL of the source (RSS feed, website, YouTube channel, subreddit, or social profile URL). Not needed for 'search' type."
+      ),
+      type: z14.enum([
+        "feed",
+        "website",
+        "youtube",
+        "search",
+        "podcast",
+        "reddit",
+        "social"
+      ]).describe("Type of source. Determines how to fetch content from it."),
+      category: z14.string().optional().describe(
+        "Optional category for organization (e.g. 'competitors', 'industry', 'inspiration', 'my-content')"
+      ),
+      tags: z14.array(z14.string()).optional().describe("Optional tags for filtering"),
+      notes: z14.string().optional().describe("Optional notes about why this source matters"),
+      searchQuery: z14.string().optional().describe(
+        "For 'search' type only: the keyword or topic to search for"
+      )
+    },
+    {
+      title: "Add Content Source",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    },
+    async (args) => {
+      const data = {
+        name: args.name,
+        type: args.type
+      };
+      if (args.url) data.url = args.url;
+      if (args.category) data.category = args.category;
+      if (args.tags) data.tags = args.tags;
+      if (args.notes) data.notes = args.notes;
+      if (args.searchQuery) data.searchQuery = args.searchQuery;
+      const result = await client2.createSource(data);
+      const typeLabel = TYPE_LABELS[result.type] || result.type;
+      const lines = [
+        `## Source Added
+`,
+        `**${result.name}** (ID: ${result.id})`,
+        `- Type: ${typeLabel}`
+      ];
+      if (result.url) lines.push(`- URL: ${result.url}`);
+      if (result.searchQuery)
+        lines.push(`- Search: "${result.searchQuery}"`);
+      if (result.category) lines.push(`- Category: ${result.category}`);
+      return {
+        content: [{ type: "text", text: lines.join("\n") }]
+      };
+    }
+  );
+  server2.tool(
+    "update_source",
+    "Update a saved content source. Use when the customer wants to rename, recategorize, change the URL, add notes, or deactivate a source.",
+    {
+      source_id: z14.number().describe("The ID of the source to update"),
+      name: z14.string().optional().describe("New display name"),
+      url: z14.string().optional().describe("New URL"),
+      type: z14.enum([
+        "feed",
+        "website",
+        "youtube",
+        "search",
+        "podcast",
+        "reddit",
+        "social"
+      ]).optional().describe("New source type"),
+      category: z14.string().optional().describe("New category"),
+      tags: z14.array(z14.string()).optional().describe("New tags"),
+      notes: z14.string().optional().describe("New notes"),
+      searchQuery: z14.string().optional().describe("New search query"),
+      isActive: z14.boolean().optional().describe("Set to false to deactivate")
+    },
+    {
+      title: "Update Content Source",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    async (args) => {
+      const { source_id, ...updates } = args;
+      const data = {};
+      for (const [k, v] of Object.entries(updates)) {
+        if (v !== void 0) data[k] = v;
+      }
+      const result = await client2.updateSource(source_id, data);
+      return {
+        content: [
+          {
+            type: "text",
+            text: `Source **${result.name}** (ID: ${result.id}) updated successfully.`
+          }
+        ]
+      };
+    }
+  );
+  server2.tool(
+    "remove_source",
+    `Remove a content source from the customer's saved sources. Use when the customer says 'remove that source', 'stop tracking X', 'delete that feed', etc.
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to preview which source will be deleted
+2. Show the user the source details before confirming
+3. Only confirm after explicit user approval`,
+    {
+      source_id: z14.number().describe("The ID of the source to remove"),
+      confirmed: z14.boolean().default(false).describe("Set to true to confirm deletion. If false or missing, returns a preview for user approval.")
+    },
+    {
+      title: "Remove Content Source",
+      readOnlyHint: false,
+      destructiveHint: true,
+      idempotentHint: false,
+      openWorldHint: false
+    },
+    async (args) => {
+      if (args.confirmed !== true) {
+        const preview = `## Remove Source Confirmation
+
+**Source ID:** ${args.source_id}
+
+This will permanently remove this content source. Call this tool again with confirmed=true to proceed.`;
+        return { content: [{ type: "text", text: preview }] };
+      }
+      await client2.deleteSource(args.source_id);
+      return {
+        content: [
+          {
+            type: "text",
+            text: "Content source removed successfully."
+          }
+        ]
+      };
+    }
+  );
+}
+
+// src/tools/newsletter-advanced.ts
+import { z as z15 } from "zod";
+function registerNewsletterAdvancedTools(server2, client2) {
+  server2.tool(
+    "get_subscriber_by_email",
+    "Look up a subscriber by their email address. Returns subscriber details including tags and custom fields.",
+    {
+      email: z15.string().describe("Email address to look up")
+    },
+    {
+      title: "Get Subscriber by Email",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      const result = await client2.getSubscriberByEmail(args.email);
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "list_automations",
+    "List all email automations/workflows from your ESP. On Beehiiv these are journeys; on Kit these are sequences.",
+    {
+      page: z15.string().optional().describe("Page number for pagination")
+    },
+    {
+      title: "List Automations",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      const params = {};
+      if (args.page) params.page = args.page;
+      const result = await client2.listAutomations(params);
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "list_segments",
+    "List subscriber segments. Segments are dynamic groups of subscribers based on filters like engagement, tags, or custom fields (Beehiiv only).",
+    {
+      page: z15.string().optional().describe("Page number"),
+      type: z15.string().optional().describe("Filter by segment type"),
+      status: z15.string().optional().describe("Filter by segment status"),
+      expand: z15.string().optional().describe("Comma-separated expand fields (e.g. 'stats')")
+    },
+    {
+      title: "List Segments",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      const params = {};
+      if (args.page) params.page = args.page;
+      if (args.type) params.type = args.type;
+      if (args.status) params.status = args.status;
+      if (args.expand) params.expand = args.expand;
+      const result = await client2.listSegments(params);
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "get_segment",
+    "Get details of a specific subscriber segment by ID.",
+    {
+      segment_id: z15.string().describe("The segment ID"),
+      expand: z15.string().optional().describe("Comma-separated expand fields")
+    },
+    {
+      title: "Get Segment",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      const params = {};
+      if (args.expand) params.expand = args.expand;
+      const result = await client2.getSegment(args.segment_id, params);
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "get_segment_members",
+    "List subscribers who belong to a specific segment.",
+    {
+      segment_id: z15.string().describe("The segment ID"),
+      page: z15.string().optional().describe("Page number")
+    },
+    {
+      title: "Get Segment Members",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      const params = {};
+      if (args.page) params.page = args.page;
+      const result = await client2.getSegmentMembers(args.segment_id, params);
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "list_custom_fields",
+    "List all custom subscriber fields defined in your ESP. Custom fields can store extra data like preferences, source, or company.",
+    {},
+    {
+      title: "List Custom Fields",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async () => {
+      const result = await client2.listCustomFields();
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "get_referral_program",
+    "Get your newsletter's referral program details including milestones and rewards (Beehiiv only).",
+    {},
+    {
+      title: "Get Referral Program",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async () => {
+      const result = await client2.getReferralProgram();
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "list_tiers",
+    "List all subscription tiers (free and premium) from your ESP (Beehiiv only).",
+    {},
+    {
+      title: "List Tiers",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async () => {
+      const result = await client2.listEspTiers();
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "list_post_templates",
+    "List all post/newsletter templates available in your ESP (Beehiiv only).",
+    {},
+    {
+      title: "List Post Templates",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async () => {
+      const result = await client2.listPostTemplates();
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "get_post_aggregate_stats",
+    "Get aggregate statistics across all posts/newsletters including total clicks, impressions, and click rates (Beehiiv only).",
+    {},
+    {
+      title: "Get Post Aggregate Stats",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async () => {
+      const result = await client2.getPostAggregateStats();
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "list_esp_webhooks",
+    "List all webhooks configured in your ESP for event notifications.",
+    {},
+    {
+      title: "List ESP Webhooks",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async () => {
+      const result = await client2.listEspWebhooks();
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "tag_subscriber",
+    "Add tags to a subscriber. Tags help categorize subscribers for targeted sends and automations.",
+    {
+      subscriber_id: z15.string().describe("The subscriber/subscription ID"),
+      tags: z15.array(z15.string()).describe("Tags to add to the subscriber")
+    },
+    {
+      title: "Tag Subscriber",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      const result = await client2.tagSubscriber(args.subscriber_id, { tags: args.tags });
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "update_subscriber",
+    `Update a subscriber's details. On Beehiiv: update tier or custom fields. On Kit: update name or custom fields (tier not supported).
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to get a preview
+2. Show the user what will happen before confirming
+3. Only set confirmed=true after the user explicitly approves`,
+    {
+      subscriber_id: z15.string().describe("The subscriber/subscription ID"),
+      tier: z15.string().optional().describe("New tier for the subscriber"),
+      custom_fields: z15.record(z15.unknown()).optional().describe("Custom field values to set"),
+      confirmed: z15.boolean().default(false).describe("Set to true to confirm update")
+    },
+    {
+      title: "Update Subscriber",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      if (args.confirmed !== true) {
+        const changes = [];
+        if (args.tier) changes.push(`**Tier:** ${args.tier}`);
+        if (args.custom_fields) changes.push(`**Custom fields:** ${Object.keys(args.custom_fields).join(", ")}`);
+        return {
+          content: [{
+            type: "text",
+            text: `## Update Subscriber
+
+**Subscriber ID:** ${args.subscriber_id}
+${changes.join("\n")}
+
+Call again with confirmed=true to proceed.`
+          }]
+        };
+      }
+      const data = {};
+      if (args.tier) data.tier = args.tier;
+      if (args.custom_fields) data.customFields = args.custom_fields;
+      const result = await client2.updateSubscriber(args.subscriber_id, data);
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "create_custom_field",
+    `Create a new custom subscriber field. On Beehiiv: kind can be 'string', 'integer', 'boolean', 'date', or 'enum'. On Kit: all fields are string-typed (kind is ignored). Creates a permanent schema-level field that affects all subscribers.
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to get a preview
+2. Show the user what will happen before confirming
+3. Only set confirmed=true after the user explicitly approves`,
+    {
+      name: z15.string().describe("Field name"),
+      kind: z15.string().describe("Field type: string, integer, boolean, date, or enum"),
+      options: z15.array(z15.string()).optional().describe("Options for enum-type fields"),
+      confirmed: z15.boolean().default(false).describe("Set to true to confirm creation")
+    },
+    {
+      title: "Create Custom Field",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    async (args) => {
+      if (args.confirmed !== true) {
+        const optionsLine = args.options ? `
+**Options:** ${args.options.join(", ")}` : "";
+        return {
+          content: [{
+            type: "text",
+            text: `## Create Custom Field
+
+**Name:** ${args.name}
+**Kind:** ${args.kind}${optionsLine}
+
+This creates a permanent schema-level field visible on all subscribers. Call again with confirmed=true to proceed.`
+          }]
+        };
+      }
+      const data = { name: args.name, kind: args.kind };
+      if (args.options) data.options = args.options;
+      const result = await client2.createCustomField(data);
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "update_custom_field",
+    `Update an existing custom subscriber field's name or kind. Renaming or rekeying a field can break automations that reference it.
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to get a preview
+2. Show the user what will happen before confirming
+3. Only set confirmed=true after the user explicitly approves`,
+    {
+      field_id: z15.string().describe("The custom field ID"),
+      name: z15.string().optional().describe("New field name"),
+      kind: z15.string().optional().describe("New field type"),
+      confirmed: z15.boolean().default(false).describe("Set to true to confirm update")
+    },
+    {
+      title: "Update Custom Field",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      if (args.confirmed !== true) {
+        const changes = [];
+        if (args.name) changes.push(`**Name:** ${args.name}`);
+        if (args.kind) changes.push(`**Kind:** ${args.kind}`);
+        return {
+          content: [{
+            type: "text",
+            text: `## Update Custom Field
+
+**Field ID:** ${args.field_id}
+${changes.join("\n")}
+
+Renaming or changing the type of a field can break automations that reference it. Call again with confirmed=true to proceed.`
+          }]
+        };
+      }
+      const data = {};
+      if (args.name) data.name = args.name;
+      if (args.kind) data.kind = args.kind;
+      const result = await client2.updateCustomField(args.field_id, data);
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "recalculate_segment",
+    "Trigger a recalculation of a segment's membership. Useful after changing subscriber data or segment rules (Beehiiv only).",
+    {
+      segment_id: z15.string().describe("The segment ID to recalculate")
+    },
+    {
+      title: "Recalculate Segment",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      await client2.recalculateSegment(args.segment_id);
+      return {
+        content: [{ type: "text", text: "Segment recalculation triggered." }]
+      };
+    }
+  );
+  server2.tool(
+    "enroll_in_automation",
+    `Enroll a subscriber in an automation/journey. Provide either an email or subscription ID. On Kit, enrolls into a sequence.
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to get a preview
+2. Show the user what will happen before confirming
+3. Only set confirmed=true after the user explicitly approves`,
+    {
+      automation_id: z15.string().describe("The automation ID"),
+      email: z15.string().optional().describe("Subscriber email to enroll"),
+      subscription_id: z15.string().optional().describe("Subscription ID to enroll"),
+      confirmed: z15.boolean().default(false).describe("Set to true to confirm enrollment")
+    },
+    {
+      title: "Enroll in Automation",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    async (args) => {
+      if (args.confirmed !== true) {
+        const target = args.email ?? args.subscription_id ?? "unknown";
+        return {
+          content: [{
+            type: "text",
+            text: `## Enroll in Automation
+
+**Automation ID:** ${args.automation_id}
+**Target:** ${target}
+
+This will add the subscriber to the automation journey. Call again with confirmed=true to proceed.`
+          }]
+        };
+      }
+      const data = {};
+      if (args.email) data.email = args.email;
+      if (args.subscription_id) data.subscriptionId = args.subscription_id;
+      await client2.enrollInAutomation(args.automation_id, data);
+      return {
+        content: [{ type: "text", text: "Subscriber enrolled in automation." }]
+      };
+    }
+  );
+  server2.tool(
+    "bulk_add_subscribers",
+    `Add multiple subscribers in a single request. Maximum 1000 subscribers per call.
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to get a preview
+2. Show the user what will happen before confirming
+3. Only set confirmed=true after the user explicitly approves`,
+    {
+      subscribers: z15.array(z15.object({
+        email: z15.string().describe("Subscriber email"),
+        data: z15.record(z15.unknown()).optional().describe("Additional subscriber data")
+      })).describe("Array of subscribers to add"),
+      confirmed: z15.boolean().default(false).describe("Set to true to confirm bulk add")
+    },
+    {
+      title: "Bulk Add Subscribers",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    async (args) => {
+      if (args.confirmed !== true) {
+        return {
+          content: [{
+            type: "text",
+            text: `## Bulk Add Subscribers
+
+**Count:** ${args.subscribers.length} subscriber(s)
+**Sample:** ${args.subscribers.slice(0, 3).map((s) => s.email).join(", ")}${args.subscribers.length > 3 ? "..." : ""}
+
+Call again with confirmed=true to proceed.`
+          }]
+        };
+      }
+      const result = await client2.bulkCreateSubscribers({ subscribers: args.subscribers });
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "create_esp_webhook",
+    `Create a webhook in your ESP to receive event notifications. Note: Kit only supports one event per webhook.
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to get a preview
+2. Show the user what will happen before confirming
+3. Only set confirmed=true after the user explicitly approves`,
+    {
+      url: z15.string().describe("Webhook URL to receive events"),
+      event_types: z15.array(z15.string()).describe("Event types to subscribe to (e.g. 'subscription.created', 'post.sent')"),
+      confirmed: z15.boolean().default(false).describe("Set to true to confirm creation")
+    },
+    {
+      title: "Create ESP Webhook",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    async (args) => {
+      if (args.confirmed !== true) {
+        return {
+          content: [{
+            type: "text",
+            text: `## Create ESP Webhook
+
+**URL:** ${args.url}
+**Events:** ${args.event_types.join(", ")}
+
+Call again with confirmed=true to create.`
+          }]
+        };
+      }
+      const result = await client2.createEspWebhook({ url: args.url, eventTypes: args.event_types });
+      return {
+        content: [{ type: "text", text: JSON.stringify(result, null, 2) }]
+      };
+    }
+  );
+  server2.tool(
+    "delete_broadcast",
+    `Permanently delete a newsletter/broadcast. This action is permanent and cannot be undone.
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to get a preview
+2. Show the user what will happen before confirming
+3. Only set confirmed=true after the user explicitly approves`,
+    {
+      broadcast_id: z15.string().describe("The broadcast ID to delete"),
+      confirmed: z15.boolean().default(false).describe("Set to true to confirm deletion")
+    },
+    {
+      title: "Delete Broadcast",
+      readOnlyHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      if (args.confirmed !== true) {
+        return {
+          content: [{
+            type: "text",
+            text: `## Delete Broadcast
+
+**Broadcast ID:** ${args.broadcast_id}
+
+**This action is permanent and cannot be undone.**
+
+Call again with confirmed=true to delete.`
+          }]
+        };
+      }
+      await client2.deleteBroadcast(args.broadcast_id);
+      return {
+        content: [{ type: "text", text: "Broadcast deleted." }]
+      };
+    }
+  );
+  server2.tool(
+    "delete_subscriber",
+    `Remove a subscriber from your mailing list. On Beehiiv this permanently deletes the subscriber. On Kit this unsubscribes them (Kit has no hard delete).
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to get a preview
+2. Show the user what will happen before confirming
+3. Only set confirmed=true after the user explicitly approves`,
+    {
+      subscriber_id: z15.string().describe("The subscriber ID to delete"),
+      confirmed: z15.boolean().default(false).describe("Set to true to confirm deletion")
+    },
+    {
+      title: "Delete Subscriber",
+      readOnlyHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      if (args.confirmed !== true) {
+        return {
+          content: [{
+            type: "text",
+            text: `## Delete Subscriber
+
+**Subscriber ID:** ${args.subscriber_id}
+
+**This action is permanent and cannot be undone.** The subscriber will be removed from all segments and automations.
+
+Call again with confirmed=true to delete.`
+          }]
+        };
+      }
+      await client2.deleteSubscriber(args.subscriber_id);
+      return {
+        content: [{ type: "text", text: "Subscriber deleted." }]
+      };
+    }
+  );
+  server2.tool(
+    "delete_segment",
+    `Permanently delete a subscriber segment. This action is permanent and cannot be undone (Beehiiv only).
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to get a preview
+2. Show the user what will happen before confirming
+3. Only set confirmed=true after the user explicitly approves`,
+    {
+      segment_id: z15.string().describe("The segment ID to delete"),
+      confirmed: z15.boolean().default(false).describe("Set to true to confirm deletion")
+    },
+    {
+      title: "Delete Segment",
+      readOnlyHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      if (args.confirmed !== true) {
+        return {
+          content: [{
+            type: "text",
+            text: `## Delete Segment
+
+**Segment ID:** ${args.segment_id}
+
+**This action is permanent and cannot be undone.** Subscribers in this segment will not be deleted, but the segment grouping will be removed.
+
+Call again with confirmed=true to delete.`
+          }]
+        };
+      }
+      await client2.deleteSegment(args.segment_id);
+      return {
+        content: [{ type: "text", text: "Segment deleted." }]
+      };
+    }
+  );
+  server2.tool(
+    "delete_custom_field",
+    `Permanently delete a custom subscriber field and remove it from all subscribers. This action is permanent and cannot be undone.
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to get a preview
+2. Show the user what will happen before confirming
+3. Only set confirmed=true after the user explicitly approves`,
+    {
+      field_id: z15.string().describe("The custom field ID to delete"),
+      confirmed: z15.boolean().default(false).describe("Set to true to confirm deletion")
+    },
+    {
+      title: "Delete Custom Field",
+      readOnlyHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      if (args.confirmed !== true) {
+        return {
+          content: [{
+            type: "text",
+            text: `## Delete Custom Field
+
+**Field ID:** ${args.field_id}
+
+**This action is permanent and cannot be undone.** The field and its data will be removed from all subscribers.
+
+Call again with confirmed=true to delete.`
+          }]
+        };
+      }
+      await client2.deleteCustomField(args.field_id);
+      return {
+        content: [{ type: "text", text: "Custom field deleted." }]
+      };
+    }
+  );
+  server2.tool(
+    "delete_esp_webhook",
+    `Permanently delete a webhook from your ESP. This action is permanent and cannot be undone.
+
+REQUIRED WORKFLOW:
+1. ALWAYS set confirmed=false first to get a preview
+2. Show the user what will happen before confirming
+3. Only set confirmed=true after the user explicitly approves`,
+    {
+      webhook_id: z15.string().describe("The webhook ID to delete"),
+      confirmed: z15.boolean().default(false).describe("Set to true to confirm deletion")
+    },
+    {
+      title: "Delete ESP Webhook",
+      readOnlyHint: false,
+      destructiveHint: true,
+      idempotentHint: true,
+      openWorldHint: true
+    },
+    async (args) => {
+      if (args.confirmed !== true) {
+        return {
+          content: [{
+            type: "text",
+            text: `## Delete ESP Webhook
+
+**Webhook ID:** ${args.webhook_id}
+
+**This action is permanent and cannot be undone.** You will stop receiving event notifications at this webhook URL.
+
+Call again with confirmed=true to delete.`
+          }]
+        };
+      }
+      await client2.deleteEspWebhook(args.webhook_id);
+      return {
+        content: [{ type: "text", text: "Webhook deleted." }]
+      };
+    }
+  );
+}
+
+// src/tools/carousel.ts
+import { z as z16 } from "zod";
+function registerCarouselTools(server2, client2) {
+  server2.tool(
+    "get_carousel_template",
+    "Get the customer's carousel template configuration. Returns brand colors, logo, CTA text, and other visual settings used to generate carousels from article URLs.",
+    {},
+    {
+      title: "Get Carousel Template",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: true,
+      openWorldHint: false
+    },
+    async () => {
+      try {
+        const template = await client2.getCarouselTemplate();
+        const lines = [];
+        lines.push(`## Carousel Template: ${template.name || "Not configured"}`);
+        lines.push("");
+        if (!template.id) {
+          lines.push("No carousel template has been configured yet.");
+          lines.push("");
+          lines.push("Use `save_carousel_template` to set one up with your brand name, colors, and CTA text.");
+          return {
+            content: [{ type: "text", text: lines.join("\n") }]
+          };
+        }
+        lines.push(`**Brand Name:** ${template.brandName || "\u2014"}`);
+        if (template.logoUrl) lines.push(`**Logo:** ${template.logoUrl}`);
+        lines.push(`**Primary Color:** ${template.colorPrimary || "#1a1a2e"}`);
+        lines.push(`**Secondary Color:** ${template.colorSecondary || "#e94560"}`);
+        lines.push(`**Accent Color:** ${template.colorAccent || "#ffffff"}`);
+        lines.push(`**CTA Text:** ${template.ctaText || "Read the full story \u2192"}`);
+        lines.push(`**Logo Placement:** ${template.logoPlacement || "top-left"}`);
+        lines.push("");
+        return {
+          content: [{ type: "text", text: lines.join("\n") }]
+        };
+      } catch (error) {
+        const message = error instanceof Error ? error.message : "Unknown error";
+        if (message.includes("404")) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: "No carousel template has been configured yet. Use `save_carousel_template` to set one up."
+              }
+            ]
+          };
+        }
+        throw error;
+      }
+    }
+  );
+  server2.tool(
+    "save_carousel_template",
+    `Create or update the customer's carousel template. This configures the visual style for auto-generated carousels (brand colors, logo, CTA text).
+
+USAGE:
+- Set confirmed=false first to preview, then confirmed=true after user approval
+- brand_name is required
+- All color values should be hex codes (e.g. "#1a1a2e")
+- logo_placement: "top-left", "top-right", or "top-center"`,
+    {
+      brand_name: z16.string().max(255).describe("Brand name displayed on CTA slide"),
+      color_primary: z16.string().max(20).optional().describe('Primary background color (hex, e.g. "#1a1a2e")'),
+      color_secondary: z16.string().max(20).optional().describe('Secondary/accent color for buttons and highlights (hex, e.g. "#e94560")'),
+      color_accent: z16.string().max(20).optional().describe('Text color (hex, e.g. "#ffffff")'),
+      cta_text: z16.string().max(255).optional().describe('Call-to-action text on the final slide (e.g. "Read the full story \u2192")'),
+      logo_placement: z16.enum(["top-left", "top-right", "top-center"]).optional().describe("Where to place the logo on slides"),
+      confirmed: z16.boolean().default(false).describe("Set to true to confirm and save. If false, returns a preview.")
+    },
+    {
+      title: "Save Carousel Template",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: false
+    },
+    async (args) => {
+      const payload = {
+        brandName: args.brand_name
+      };
+      if (args.color_primary !== void 0) payload.colorPrimary = args.color_primary;
+      if (args.color_secondary !== void 0) payload.colorSecondary = args.color_secondary;
+      if (args.color_accent !== void 0) payload.colorAccent = args.color_accent;
+      if (args.cta_text !== void 0) payload.ctaText = args.cta_text;
+      if (args.logo_placement !== void 0) payload.logoPlacement = args.logo_placement;
+      if (args.confirmed !== true) {
+        const lines2 = [];
+        lines2.push("## Carousel Template Preview");
+        lines2.push("");
+        lines2.push(`**Brand Name:** ${args.brand_name}`);
+        if (args.color_primary) lines2.push(`**Primary Color:** ${args.color_primary}`);
+        if (args.color_secondary) lines2.push(`**Secondary Color:** ${args.color_secondary}`);
+        if (args.color_accent) lines2.push(`**Accent Color:** ${args.color_accent}`);
+        if (args.cta_text) lines2.push(`**CTA Text:** ${args.cta_text}`);
+        if (args.logo_placement) lines2.push(`**Logo Placement:** ${args.logo_placement}`);
+        lines2.push("");
+        lines2.push("---");
+        lines2.push("Call this tool again with **confirmed=true** to save these settings.");
+        return {
+          content: [{ type: "text", text: lines2.join("\n") }]
+        };
+      }
+      const result = await client2.updateCarouselTemplate(payload);
+      const lines = [];
+      lines.push(`Carousel template "${result.brandName || args.brand_name}" has been saved successfully.`);
+      lines.push("");
+      const updated = ["brand name"];
+      if (args.color_primary) updated.push("primary color");
+      if (args.color_secondary) updated.push("secondary color");
+      if (args.color_accent) updated.push("accent color");
+      if (args.cta_text) updated.push("CTA text");
+      if (args.logo_placement) updated.push("logo placement");
+      lines.push(`**Updated:** ${updated.join(", ")}`);
+      return {
+        content: [{ type: "text", text: lines.join("\n") }]
+      };
+    }
+  );
+  server2.tool(
+    "generate_carousel",
+    "Generate a full multi-slide carousel from an article URL. Extracts headline and key points using AI, renders branded slides (hero + key points + CTA), and uploads them to CDN. Returns an array of CDN URLs for the rendered slides. Requires a carousel template to be configured first via save_carousel_template.",
+    {
+      url: z16.string().url().describe("The article URL to generate a carousel from")
+    },
+    {
+      title: "Generate Carousel",
+      readOnlyHint: false,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    async (args) => {
+      try {
+        const result = await client2.generateCarousel({
+          url: args.url
+        });
+        const lines = [];
+        lines.push("## Carousel Generated");
+        lines.push("");
+        lines.push(`**Headline:** ${result.article.headline}`);
+        lines.push(`**Source:** ${result.article.sourceDomain}`);
+        lines.push(`**Slides:** ${result.slides.length}`);
+        lines.push("");
+        lines.push("### Key Points");
+        for (const point of result.article.keyPoints) {
+          lines.push(`- ${point}`);
+        }
+        lines.push("");
+        lines.push("### Slide URLs");
+        for (const slide of result.slides) {
+          lines.push(`${slide.slideNumber}. [${slide.type}](${slide.cdnUrl})`);
+        }
+        lines.push("");
+        lines.push("These URLs can be used as `media_urls` when creating a post.");
+        return {
+          content: [{ type: "text", text: lines.join("\n") }]
+        };
+      } catch (error) {
+        const message = error instanceof Error ? error.message : "Unknown error";
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Failed to generate carousel: ${message}`
+            }
+          ],
+          isError: true
+        };
+      }
+    }
+  );
+  server2.tool(
+    "preview_carousel",
+    "Generate a quick preview of the carousel hero slide from an article URL. Useful for checking how the template looks before generating the full carousel. Requires a carousel template to be configured first.",
+    {
+      url: z16.string().url().describe("The article URL to preview")
+    },
+    {
+      title: "Preview Carousel",
+      readOnlyHint: true,
+      destructiveHint: false,
+      idempotentHint: false,
+      openWorldHint: true
+    },
+    async (args) => {
+      try {
+        const result = await client2.previewCarousel({
+          url: args.url
+        });
+        const lines = [];
+        lines.push("## Carousel Preview");
+        lines.push("");
+        lines.push(`**Headline:** ${result.article.headline}`);
+        lines.push(`**Source:** ${result.article.sourceDomain}`);
+        lines.push("");
+        lines.push(`**Hero Slide:** ${result.cdnUrl}`);
+        lines.push("");
+        lines.push("Use `generate_carousel` to create the full carousel with all slides.");
+        return {
+          content: [{ type: "text", text: lines.join("\n") }]
+        };
+      } catch (error) {
+        const message = error instanceof Error ? error.message : "Unknown error";
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Failed to preview carousel: ${message}`
+            }
+          ],
+          isError: true
+        };
+      }
+    }
+  );
+}
+
+// src/index.ts
+var apiKey = process.env.BUZZPOSTER_API_KEY;
+var apiUrl = process.env.BUZZPOSTER_API_URL ?? "https://api.buzzposter.com";
+if (!apiKey) {
+  console.error(
+    "Error: BUZZPOSTER_API_KEY environment variable is required."
+  );
+  console.error(
+    "Set it in your Claude Desktop MCP config or export it in your shell."
+  );
+  process.exit(1);
+}
+var client = new BuzzPosterClient({ baseUrl: apiUrl, apiKey });
+var server = new McpServer({
+  name: "buzzposter",
+  version: "0.1.0"
+});
+var allowDirectSend = false;
+try {
+  const account = await client.getAccount();
+  allowDirectSend = account?.allowDirectSend === true;
+} catch {
+}
 registerPostTools(server, client);
 registerAccountTools(server, client);
 registerAnalyticsTools(server, client);
 registerInboxTools(server, client);
 registerMediaTools(server, client);
-registerNewsletterTools(server, client);
+registerNewsletterTools(server, client, { allowDirectSend });
 registerRssTools(server, client);
 registerAccountInfoTool(server, client);
 registerBrandVoiceTools(server, client);
@@ -2146,5 +4238,10 @@ registerAudienceTools(server, client);
 registerNewsletterTemplateTools(server, client);
 registerCalendarTools(server, client);
 registerNotificationTools(server, client);
+registerPublishingRulesTools(server, client);
+registerAuditLogTools(server, client);
+registerSourceTools(server, client);
+registerNewsletterAdvancedTools(server, client);
+registerCarouselTools(server, client);
 var transport = new StdioServerTransport();
 await server.connect(transport);