@followr/mcp 0.1.0 → 0.2.0

package/dist/bin/followr-mcp.js

@@ -220,9 +220,13 @@ var FollowrClient = class {
   // Tags (CRUD complete, sessions 5 + 6 verified empirically)
   // ──────────────────────────────────────────────────────────
   async listTags(companyId, options) {
-    const result = await this.request("GET", "/api/tags", {
-      query: { "filter[company_id]": companyId, "page[size]": options?.pageSize ?? 100 }
-    });
+    const query = {
+      "filter[company_id]": companyId,
+      "page[size]": options?.pageSize ?? 100
+    };
+    if (options?.name !== void 0)
+      query["filter[name]"] = options.name;
+    const result = await this.request("GET", "/api/tags", { query });
     return result.data;
   }
   async createTag(body) {
@@ -1664,9 +1668,890 @@ function registerPostGroupTools(server2, client2, options) {
   });
 }
 
-// ../mcp-core/dist/tools/prompts.js
+// ../mcp-core/dist/tools/posts.js
 import { z as z9 } from "zod";
-var SOCIAL_NETWORK_TYPE = z9.enum([
+
+// ../mcp-core/dist/specs/runtime-context.js
+var CACHE_TTL_MS = 10 * 60 * 1e3;
+var cache = /* @__PURE__ */ new Map();
+async function gatherRuntimeContext(companyId, network, client2) {
+  if (network !== "twitter" && network !== "tiktok")
+    return {};
+  const key = `${companyId}:${network}`;
+  const cached = cache.get(key);
+  if (cached && cached.expiresAt > Date.now())
+    return cached.ctx;
+  let ctx = {};
+  try {
+    const accounts = await client2.listSocialNetworks(companyId);
+    const account = accounts.find((a) => a.type === network);
+    if (account)
+      ctx = extractContext(network, account);
+  } catch {
+    ctx = {};
+  }
+  cache.set(key, { ctx, expiresAt: Date.now() + CACHE_TTL_MS });
+  return ctx;
+}
+function extractContext(network, account) {
+  const p = account.preferences ?? {};
+  const ctx = {};
+  if (network === "twitter") {
+    if (typeof p["verified"] === "boolean")
+      ctx.twitter_verified = p["verified"];
+    return ctx;
+  }
+  if (network === "tiktok") {
+    if (typeof p["max_video_post_duration_sec"] === "number") {
+      ctx.tiktok_max_duration_seconds = p["max_video_post_duration_sec"];
+    }
+    if (Array.isArray(p["privacy_level_options"])) {
+      ctx.tiktok_privacy_level_options = p["privacy_level_options"].filter((v) => typeof v === "string");
+    }
+    if (typeof p["duet_disabled"] === "boolean")
+      ctx.tiktok_duet_disabled = p["duet_disabled"];
+    if (typeof p["stitch_disabled"] === "boolean")
+      ctx.tiktok_stitch_disabled = p["stitch_disabled"];
+    if (typeof p["comment_disabled"] === "boolean") {
+      ctx.tiktok_comment_disabled = p["comment_disabled"];
+    }
+    return ctx;
+  }
+  return ctx;
+}
+
+// ../mcp-core/dist/data/social-network-specs.json
+var social_network_specs_default = {
+  _meta: {
+    source: "Extracted from app.followr.ai frontend bundle, position 1553329-1559200",
+    verified_at: "2026-05-16",
+    extraction_method: "Chrome inspection of webpackChunkfollow main bundle",
+    structure_note: "Top-level keys are `<network>_<product_type>`. Booleans normalized from !0/!1. void 0 \u2192 null. Conditionals noted as both branches where present."
+  },
+  medium_feed: {
+    connection: {
+      required: true
+    },
+    title: {
+      max_length: 100,
+      required: true
+    },
+    description: {
+      max_length: 1024e4,
+      required: true
+    }
+  },
+  pinterest_feed: {
+    connection: {
+      required: true
+    },
+    title: {
+      max_length: 100,
+      required: true
+    },
+    board_id: {
+      required: true
+    },
+    description: {
+      max_length: 500
+    },
+    media_urls: {
+      allow_multiple_types: false,
+      max_images_length: 5,
+      max_videos_length: 1,
+      max_gifs_length: 0,
+      max_length: 5,
+      required: true,
+      image_max_size_bytes: 33554432,
+      video_max_size_bytes: 2097152e3,
+      video_min_duration_seconds: 3,
+      video_max_duration_seconds: 900,
+      same_ratio: true,
+      allow_file_cover: true,
+      allow_frame_cover: true,
+      required_cover: true
+    }
+  },
+  twitter_feed: {
+    connection: {
+      required: true
+    },
+    description: {
+      max_length: 280,
+      max_length_if_verified: 25e3,
+      _note: "Followr resolves this at runtime: 25000 if the connected Twitter account.preferences.verified is true, else 280"
+    },
+    media_urls: {
+      allow_multiple_types: false,
+      max_images_length: 4,
+      max_videos_length: 1,
+      max_gifs_length: 1,
+      max_length: 4,
+      required: false,
+      image_max_size_bytes: 5242880,
+      video_max_size_bytes: 536870912,
+      video_min_duration_seconds: 0.5,
+      video_max_duration_seconds: 140
+    }
+  },
+  facebook_feed: {
+    connection: {
+      required: true
+    },
+    description: {
+      max_length: 6e4
+    },
+    media_urls: {
+      allow_multiple_types: false,
+      max_images_length: 10,
+      max_videos_length: 1,
+      max_gifs_length: 0,
+      max_length: 10,
+      required: false,
+      image_max_size_bytes: 8388608,
+      video_max_size_bytes: 10737418240,
+      video_min_duration_seconds: 3,
+      video_max_duration_seconds: 1200,
+      allow_file_cover: false,
+      allow_frame_cover: false
+    }
+  },
+  facebook_reel: {
+    connection: {
+      required: true
+    },
+    description: {
+      max_length: 6e4
+    },
+    media_urls: {
+      allow_multiple_types: false,
+      max_images_length: 0,
+      max_videos_length: 1,
+      max_gifs_length: 0,
+      max_length: 1,
+      required: true,
+      image_max_size_bytes: 8388608,
+      video_max_size_bytes: 1073741824,
+      video_min_duration_seconds: 3,
+      video_max_duration_seconds: 90,
+      video_max_width: 1920,
+      video_min_width: 540,
+      allowed_aspect_ratios: [
+        0.5,
+        0.6
+      ],
+      allow_file_cover: false,
+      allow_frame_cover: false
+    }
+  },
+  facebook_story: {
+    connection: {
+      required: true
+    },
+    description: {
+      max_length: 0
+    },
+    media_urls: {
+      allow_multiple_types: true,
+      max_images_length: 1,
+      max_videos_length: 1,
+      max_gifs_length: 0,
+      max_length: 1,
+      required: true,
+      image_max_size_bytes: 8388608,
+      video_max_size_bytes: 104857600,
+      video_min_duration_seconds: 3,
+      video_max_duration_seconds: 60,
+      video_max_width: 1920,
+      video_min_width: 540,
+      allowed_aspect_ratios: [
+        0.5,
+        0.6
+      ]
+    }
+  },
+  instagram_feed: {
+    connection: {
+      required: true
+    },
+    description: {
+      max_length: 2200
+    },
+    media_urls: {
+      allow_multiple_types: false,
+      max_images_length: 10,
+      max_videos_length: 1,
+      max_gifs_length: 0,
+      max_length: 10,
+      required: true,
+      image_max_size_bytes: 8388608,
+      video_max_size_bytes: 10737418240,
+      video_min_duration_seconds: 3,
+      video_max_duration_seconds: 900,
+      video_max_width: 1920,
+      allowed_aspect_ratios: [
+        0.5,
+        1.91
+      ],
+      allow_file_cover: true,
+      allow_frame_cover: true
+    }
+  },
+  instagram_reel: {
+    connection: {
+      required: true
+    },
+    description: {
+      max_length: 2200
+    },
+    media_urls: {
+      allow_multiple_types: false,
+      max_images_length: 0,
+      max_videos_length: 1,
+      max_gifs_length: 0,
+      max_length: 1,
+      required: true,
+      image_max_size_bytes: null,
+      video_max_size_bytes: 1073741824,
+      video_min_duration_seconds: 3,
+      video_max_duration_seconds: 900,
+      video_max_width: 1920,
+      video_min_width: 720,
+      allowed_aspect_ratios: [
+        0.5,
+        1.91
+      ],
+      allow_file_cover: true,
+      allow_frame_cover: true
+    }
+  },
+  instagram_story: {
+    connection: {
+      required: true
+    },
+    description: {
+      max_length: 0
+    },
+    media_urls: {
+      allow_multiple_types: true,
+      max_images_length: 1,
+      max_videos_length: 1,
+      max_gifs_length: 0,
+      max_length: 1,
+      required: true,
+      image_max_size_bytes: 8388608,
+      video_max_size_bytes: 104857600,
+      video_min_duration_seconds: 3,
+      video_max_duration_seconds: 60,
+      video_max_width: 1920,
+      video_min_width: 540,
+      allowed_aspect_ratios: [
+        0.5,
+        0.6
+      ],
+      allow_file_cover: false,
+      allow_frame_cover: false
+    }
+  },
+  tiktok_feed: {
+    connection: {
+      required: true
+    },
+    description: {
+      max_length: 2200,
+      required: false
+    },
+    media_urls: {
+      allow_multiple_types: false,
+      max_images_length: 0,
+      max_videos_length: 1,
+      max_gifs_length: 0,
+      max_length: 1,
+      required: true,
+      image_max_size_bytes: null,
+      video_max_size_bytes: 4294967296,
+      video_min_duration_seconds: 3,
+      video_max_duration_seconds: 600,
+      allow_file_cover: false,
+      allow_frame_cover: true,
+      _video_max_duration_note: "Followr resolves this at runtime: if connected TikTok account.video_duration is set, uses that; otherwise falls back to 600s. Max varies per TikTok account (1-3-10-60 min tiers)"
+    },
+    privacy_level: {
+      required: true
+    }
+  },
+  linkedin_feed: {
+    connection: {
+      required: true
+    },
+    description: {
+      max_length: 3e3,
+      required: true
+    },
+    media_urls: {
+      allow_multiple_types: false,
+      max_images_length: 9,
+      max_videos_length: 1,
+      max_gifs_length: 0,
+      max_length: 9,
+      required: false,
+      image_max_size_bytes: 8388608,
+      video_max_size_bytes: 209715200,
+      video_min_duration_seconds: 3,
+      video_max_duration_seconds: 600
+    }
+  },
+  youtube_feed: {
+    connection: {
+      required: true
+    },
+    title: {
+      max_length: 100,
+      required: true
+    },
+    description: {
+      max_length: 5e3,
+      required: false
+    },
+    media_urls: {
+      allow_multiple_types: false,
+      max_images_length: 0,
+      max_videos_length: 1,
+      max_gifs_length: 0,
+      max_length: 1,
+      required: true,
+      image_max_size_bytes: null,
+      video_max_size_bytes: 137438953472,
+      video_min_duration_seconds: 1,
+      video_max_duration_seconds: 43200,
+      video_max_width: 7680,
+      video_min_width: 426,
+      allowed_aspect_ratios: [
+        0.3333,
+        2.3922
+      ],
+      allow_file_cover: true,
+      allow_frame_cover: true
+    }
+  },
+  youtube_short: {
+    connection: {
+      required: true
+    },
+    title: {
+      max_length: 100,
+      required: false
+    },
+    description: {
+      max_length: 5e3,
+      required: false
+    },
+    media_urls: {
+      allow_multiple_types: false,
+      max_images_length: 0,
+      max_videos_length: 1,
+      max_gifs_length: 0,
+      max_length: 1,
+      required: true,
+      video_max_size_bytes: 268435456,
+      video_min_duration_seconds: 1,
+      video_max_duration_seconds: 60,
+      video_max_width: 1920,
+      video_min_width: 600,
+      allowed_aspect_ratios: [
+        0.5,
+        0.625
+      ],
+      allow_file_cover: true,
+      allow_frame_cover: true
+    }
+  },
+  threads_feed: {
+    connection: {
+      required: true
+    },
+    description: {
+      max_length: 500
+    },
+    media_urls: {
+      allow_multiple_types: true,
+      max_images_length: 20,
+      max_videos_length: 20,
+      max_gifs_length: 20,
+      max_length: 20,
+      required: false,
+      image_max_size_bytes: 5242880,
+      video_max_size_bytes: 536870912,
+      video_min_duration_seconds: 0.5,
+      video_max_duration_seconds: 140
+    }
+  },
+  bluesky_feed: {
+    connection: {
+      required: true
+    },
+    description: {
+      max_length: 300
+    },
+    media_urls: {
+      allow_multiple_types: false,
+      max_images_length: 4,
+      max_videos_length: 1,
+      max_gifs_length: 0,
+      max_length: 4,
+      required: false,
+      image_max_size_bytes: 1048576,
+      video_max_size_bytes: 52428800,
+      video_min_duration_seconds: 1,
+      video_max_duration_seconds: 180
+    }
+  }
+};
+
+// ../mcp-core/dist/specs/loader.js
+var REGISTRY = social_network_specs_default;
+function getSpec(network, productType) {
+  const key = `${network}_${productType}`;
+  return REGISTRY[key] ?? null;
+}
+function getSpecsMeta() {
+  return REGISTRY._meta;
+}
+
+// ../mcp-core/dist/specs/validate.js
+function validateAgainstSpec(payload, context = {}) {
+  const spec = getSpec(payload.network, payload.product_type);
+  if (!spec)
+    return [];
+  const specKey = `${payload.network}_${payload.product_type}`;
+  const warnings = [];
+  warnings.push(...validateTitle(spec, payload, specKey));
+  warnings.push(...validateDescription(spec, payload, specKey, context));
+  warnings.push(...validateBoardId(spec, payload, specKey));
+  warnings.push(...validatePrivacyLevel(spec, payload, specKey, context));
+  warnings.push(...validateMedia(spec, payload, specKey, context));
+  return warnings;
+}
+function validateTitle(spec, payload, specKey) {
+  const rule = spec.title;
+  if (!rule)
+    return [];
+  const warnings = [];
+  const title = payload.title?.trim() ?? "";
+  if (rule.required && title.length === 0) {
+    warnings.push({
+      spec_key: specKey,
+      field: "title",
+      rule: "required",
+      current_value: payload.title ?? null,
+      expected: "non-empty string",
+      severity: "hard_fail",
+      suggestion: `Title is required for ${payload.network} ${payload.product_type}.`
+    });
+  }
+  if (rule.max_length != null && title.length > rule.max_length) {
+    warnings.push({
+      spec_key: specKey,
+      field: "title.max_length",
+      rule: "max_length_exceeded",
+      current_value: title.length,
+      expected: rule.max_length,
+      severity: "hard_fail",
+      suggestion: `Trim title to ${rule.max_length} characters or less. Currently ${title.length}.`
+    });
+  }
+  return warnings;
+}
+function validateDescription(spec, payload, specKey, context) {
+  const rule = spec.description;
+  if (!rule)
+    return [];
+  const warnings = [];
+  const description = payload.description ?? "";
+  const descTrimmed = description.trim();
+  if (rule.required && descTrimmed.length === 0) {
+    warnings.push({
+      spec_key: specKey,
+      field: "description",
+      rule: "required",
+      current_value: payload.description ?? null,
+      expected: "non-empty string",
+      severity: "hard_fail",
+      suggestion: `Description is required for ${payload.network} ${payload.product_type}.`
+    });
+  }
+  let effectiveMax = rule.max_length;
+  let bumpedByVerified = false;
+  if (payload.network === "twitter" && context.twitter_verified === true && rule.max_length_if_verified != null) {
+    effectiveMax = rule.max_length_if_verified;
+    bumpedByVerified = true;
+  }
+  if (effectiveMax == null)
+    return warnings;
+  if (effectiveMax === 0 && description.length > 0) {
+    warnings.push({
+      spec_key: specKey,
+      field: "description",
+      rule: "not_supported",
+      current_value: description.length,
+      expected: 0,
+      severity: "hard_fail",
+      suggestion: `${payload.network} ${payload.product_type} doesn't support a caption. The description field is ignored.`
+    });
+    return warnings;
+  }
+  if (description.length > effectiveMax) {
+    let verifiedNote = "";
+    if (payload.network === "twitter" && !context.twitter_verified && rule.max_length_if_verified != null) {
+      verifiedNote = ` (Twitter Premium subscribers get up to ${rule.max_length_if_verified}.)`;
+    }
+    warnings.push({
+      spec_key: specKey,
+      field: "description.max_length",
+      rule: "max_length_exceeded",
+      current_value: description.length,
+      expected: effectiveMax,
+      severity: "hard_fail",
+      suggestion: `Trim caption to ${effectiveMax} characters or less. Currently ${description.length}.${verifiedNote}`
+    });
+  }
+  if (!bumpedByVerified && payload.network === "twitter" && rule.max_length_if_verified != null && description.length > rule.max_length && description.length <= rule.max_length_if_verified) {
+  }
+  return warnings;
+}
+function validateBoardId(spec, payload, specKey) {
+  if (!spec.board_id?.required)
+    return [];
+  const boardId = payload.preferences?.["board_id"];
+  if (boardId != null && boardId !== "")
+    return [];
+  return [
+    {
+      spec_key: specKey,
+      field: "preferences.board_id",
+      rule: "required",
+      current_value: boardId ?? null,
+      expected: "Pinterest board id (number)",
+      severity: "hard_fail",
+      suggestion: "Pinterest requires a destination board. Set preferences.board_id to a valid board id."
+    }
+  ];
+}
+function validatePrivacyLevel(spec, payload, specKey, context) {
+  if (!spec.privacy_level?.required)
+    return [];
+  const warnings = [];
+  const prefs = payload.preferences;
+  const level = prefs?.["privacy_level"];
+  if (level == null || typeof level !== "string" || level === "") {
+    warnings.push({
+      spec_key: specKey,
+      field: "preferences.privacy_level",
+      rule: "required",
+      current_value: level ?? null,
+      expected: context.tiktok_privacy_level_options ?? "one of TikTok's privacy levels",
+      severity: "hard_fail",
+      suggestion: `TikTok requires preferences.privacy_level. ${context.tiktok_privacy_level_options ? `Allowed for this account: ${context.tiktok_privacy_level_options.join(", ")}.` : "Check the connected TikTok account for allowed values."}`
+    });
+    return warnings;
+  }
+  if (context.tiktok_privacy_level_options && !context.tiktok_privacy_level_options.includes(level)) {
+    warnings.push({
+      spec_key: specKey,
+      field: "preferences.privacy_level",
+      rule: "value_not_allowed",
+      current_value: level,
+      expected: context.tiktok_privacy_level_options,
+      severity: "hard_fail",
+      suggestion: `Privacy level "${level}" is not enabled for this TikTok account. Allowed: ${context.tiktok_privacy_level_options.join(", ")}.`
+    });
+  }
+  return warnings;
+}
+function validateMedia(spec, payload, specKey, context) {
+  const m = spec.media_urls;
+  if (!m)
+    return [];
+  const warnings = [];
+  const assets = payload.assets ?? [];
+  if (m.required && assets.length === 0) {
+    warnings.push({
+      spec_key: specKey,
+      field: "assets",
+      rule: "required",
+      current_value: 0,
+      expected: ">=1 asset",
+      severity: "hard_fail",
+      suggestion: `${payload.network} ${payload.product_type} requires at least one media asset.`
+    });
+    return warnings;
+  }
+  if (assets.length === 0)
+    return warnings;
+  if (m.allow_multiple_types === false) {
+    const types = new Set(assets.map((a) => a.type));
+    if (types.size > 1) {
+      warnings.push({
+        spec_key: specKey,
+        field: "assets.types",
+        rule: "no_mixed_media",
+        current_value: Array.from(types),
+        expected: "single media type",
+        severity: "hard_fail",
+        suggestion: `${payload.network} ${payload.product_type} doesn't allow mixed media types in one post. Use either all images, all videos, or all GIFs.`
+      });
+    }
+  }
+  const counts = {
+    image: assets.filter((a) => a.type === "image").length,
+    video: assets.filter((a) => a.type === "video").length,
+    gif: assets.filter((a) => a.type === "gif").length
+  };
+  if (m.max_images_length != null && counts.image > m.max_images_length) {
+    warnings.push(countWarning(specKey, payload, "images", counts.image, m.max_images_length));
+  }
+  if (m.max_videos_length != null && counts.video > m.max_videos_length) {
+    warnings.push(countWarning(specKey, payload, "videos", counts.video, m.max_videos_length));
+  }
+  if (m.max_gifs_length != null && counts.gif > m.max_gifs_length) {
+    warnings.push(countWarning(specKey, payload, "gifs", counts.gif, m.max_gifs_length));
+  }
+  if (m.max_length != null && assets.length > m.max_length) {
+    warnings.push({
+      spec_key: specKey,
+      field: "assets",
+      rule: "max_total_exceeded",
+      current_value: assets.length,
+      expected: m.max_length,
+      severity: "hard_fail",
+      suggestion: `${payload.network} ${payload.product_type} accepts up to ${m.max_length} total assets. You attached ${assets.length}.`
+    });
+  }
+  const effectiveVideoMaxDuration = resolveVideoMaxDuration(payload, context, m);
+  for (let i = 0; i < assets.length; i++) {
+    warnings.push(...validateAsset(assets[i], i, specKey, payload, m, effectiveVideoMaxDuration));
+  }
+  return warnings;
+}
+function resolveVideoMaxDuration(payload, context, m) {
+  if (payload.network === "tiktok" && context.tiktok_max_duration_seconds != null) {
+    return context.tiktok_max_duration_seconds;
+  }
+  return m.video_max_duration_seconds;
+}
+function validateAsset(asset, index, specKey, payload, m, effectiveVideoMaxDuration) {
+  const warnings = [];
+  const prefix = `assets[${index}]`;
+  if (asset.type === "image" && m.image_max_size_bytes != null && asset.size_bytes != null && asset.size_bytes > m.image_max_size_bytes) {
+    warnings.push({
+      spec_key: specKey,
+      field: `${prefix}.size_bytes`,
+      rule: "max_size_exceeded",
+      current_value: asset.size_bytes,
+      expected: m.image_max_size_bytes,
+      severity: "hard_fail",
+      suggestion: `Image at index ${index} is ${formatBytes(asset.size_bytes)}, max is ${formatBytes(m.image_max_size_bytes)} for ${payload.network} ${payload.product_type}.`
+    });
+  }
+  if (asset.type === "video" && m.video_max_size_bytes != null && asset.size_bytes != null && asset.size_bytes > m.video_max_size_bytes) {
+    warnings.push({
+      spec_key: specKey,
+      field: `${prefix}.size_bytes`,
+      rule: "max_size_exceeded",
+      current_value: asset.size_bytes,
+      expected: m.video_max_size_bytes,
+      severity: "hard_fail",
+      suggestion: `Video at index ${index} is ${formatBytes(asset.size_bytes)}, max is ${formatBytes(m.video_max_size_bytes)} for ${payload.network} ${payload.product_type}.`
+    });
+  }
+  if (asset.type === "video" && asset.duration_seconds != null) {
+    if (effectiveVideoMaxDuration != null && asset.duration_seconds > effectiveVideoMaxDuration) {
+      warnings.push({
+        spec_key: specKey,
+        field: `${prefix}.duration_seconds`,
+        rule: "video_too_long",
+        current_value: asset.duration_seconds,
+        expected: effectiveVideoMaxDuration,
+        severity: "hard_fail",
+        suggestion: `Video at index ${index} is ${asset.duration_seconds}s, max is ${effectiveVideoMaxDuration}s for ${payload.network} ${payload.product_type}.`
+      });
+    }
+    if (m.video_min_duration_seconds != null && asset.duration_seconds < m.video_min_duration_seconds) {
+      warnings.push({
+        spec_key: specKey,
+        field: `${prefix}.duration_seconds`,
+        rule: "video_too_short",
+        current_value: asset.duration_seconds,
+        expected: m.video_min_duration_seconds,
+        severity: "hard_fail",
+        suggestion: `Video at index ${index} is ${asset.duration_seconds}s, min is ${m.video_min_duration_seconds}s for ${payload.network} ${payload.product_type}.`
+      });
+    }
+  }
+  if (asset.type === "video" && asset.width != null) {
+    if (m.video_max_width != null && asset.width > m.video_max_width) {
+      warnings.push({
+        spec_key: specKey,
+        field: `${prefix}.width`,
+        rule: "video_max_width_exceeded",
+        current_value: asset.width,
+        expected: m.video_max_width,
+        severity: "hard_fail",
+        suggestion: `Video at index ${index} is ${asset.width}px wide, max is ${m.video_max_width}px.`
+      });
+    }
+    if (m.video_min_width != null && asset.width < m.video_min_width) {
+      warnings.push({
+        spec_key: specKey,
+        field: `${prefix}.width`,
+        rule: "video_min_width_below",
+        current_value: asset.width,
+        expected: m.video_min_width,
+        severity: "hard_fail",
+        suggestion: `Video at index ${index} is ${asset.width}px wide, min is ${m.video_min_width}px.`
+      });
+    }
+  }
+  if (m.allowed_aspect_ratios && asset.width != null && asset.height != null && asset.height > 0) {
+    const ratio = asset.width / asset.height;
+    const [min, max] = m.allowed_aspect_ratios;
+    if (ratio < min || ratio > max) {
+      warnings.push({
+        spec_key: specKey,
+        field: `${prefix}.aspect_ratio`,
+        rule: "aspect_ratio_out_of_range",
+        current_value: round(ratio, 3),
+        expected: m.allowed_aspect_ratios,
+        severity: "hard_fail",
+        suggestion: `Asset at index ${index} has aspect ratio ${round(ratio, 3)} (${asset.width}\xD7${asset.height}). ${payload.network} ${payload.product_type} accepts [${min}, ${max}].`
+      });
+    }
+  }
+  return warnings;
+}
+function countWarning(specKey, payload, kind, actual, max) {
+  return {
+    spec_key: specKey,
+    field: `assets.${kind}`,
+    rule: "max_count_exceeded",
+    current_value: actual,
+    expected: max,
+    severity: "hard_fail",
+    suggestion: `${payload.network} ${payload.product_type} accepts up to ${max} ${kind === "videos" && max === 1 ? "video" : kind === "images" && max === 1 ? "image" : kind === "gifs" && max === 1 ? "GIF" : kind}. You attached ${actual}.`
+  };
+}
+function formatBytes(bytes) {
+  if (bytes >= 1024 ** 3)
+    return `${(bytes / 1024 ** 3).toFixed(2)} GB`;
+  if (bytes >= 1024 ** 2)
+    return `${(bytes / 1024 ** 2).toFixed(1)} MB`;
+  if (bytes >= 1024)
+    return `${(bytes / 1024).toFixed(1)} KB`;
+  return `${bytes} B`;
+}
+function round(n, decimals) {
+  const factor = 10 ** decimals;
+  return Math.round(n * factor) / factor;
+}
+
+// ../mcp-core/dist/tools/posts.js
+var NETWORK_ENUM = [
+  "medium",
+  "pinterest",
+  "twitter",
+  "facebook",
+  "instagram",
+  "tiktok",
+  "linkedin",
+  "youtube",
+  "threads",
+  "bluesky"
+];
+var PRODUCT_TYPE_ENUM = ["feed", "reel", "story", "short"];
+var NETWORKS_NEEDING_MEDIA_PRODUCT_TYPE = /* @__PURE__ */ new Set([
+  "instagram",
+  "facebook",
+  "youtube"
+]);
+var PRODUCT_TYPE_TO_FOLLOWR = {
+  feed: "FEED",
+  reel: "REEL",
+  story: "STORY",
+  short: "SHORT"
+};
+var AssetInputSchema = z9.object({
+  id: z9.number().int().positive().describe("Followr asset id (returned by upload_image_from_url / upload_video_from_url / list_assets)."),
+  type: z9.enum(["image", "video", "gif"]).describe("Asset type. Required for spec validation."),
+  width: z9.number().positive().optional().describe("Optional. If provided, used for aspect ratio and width checks."),
+  height: z9.number().positive().optional(),
+  size_bytes: z9.number().nonnegative().optional().describe("Optional. If provided, used for file size checks."),
+  duration_seconds: z9.number().positive().optional().describe("Optional, video assets only. Used for duration checks.")
+});
+function registerPostTools(server2, client2, _options) {
+  server2.registerTool("create_post", {
+    title: "Create a Post inside a PostGroup, attaching assets and copy",
+    description: "Create a Post (per-network entry) within an existing PostGroup. This is the second step of the manual PostGroup \u2192 Post \u2192 Schedule workflow: after create_post_group, call create_post once per target social network, then update_post_group to set publish_at. Pre-validates the payload against per-network specs (caption length, asset count/type/size/aspect ratio, etc.) and returns advisory warnings alongside the created post. Warnings are informational \u2014 the post is always created. The caller (LLM or user) decides whether to act on warnings before scheduling.",
+    inputSchema: {
+      post_group_id: z9.number().int().positive().describe("Parent PostGroup id from create_post_group."),
+      company_id: z9.number().int().positive().describe("Followr workspace id. Required to resolve account-specific limits (Twitter verified, TikTok tier) for validation."),
+      social_network_type: z9.enum(NETWORK_ENUM).describe("Target social network."),
+      product_type: z9.enum(PRODUCT_TYPE_ENUM).describe("Post format. 'feed' = standard feed post. 'reel' = vertical short-form video (IG Reels, FB Reels). 'story' = ephemeral 9:16 (IG/FB Stories). 'short' = YouTube Shorts. For IG/FB/YouTube, this is auto-injected as preferences.media_product_type in the Followr API body."),
+      description: z9.string().optional().describe("Caption / body text."),
+      title: z9.string().optional().describe("Title (medium / pinterest / youtube only)."),
+      link: z9.string().optional().describe("Optional outbound link."),
+      assets: z9.array(AssetInputSchema).optional().describe("Media to attach. Asset ids are extracted into the API's assets_ids array. The full metadata (type, width, height, size, duration) is used for validation only \u2014 not sent to the API."),
+      preferences: z9.record(z9.string(), z9.unknown()).optional().describe("Network-specific extras passed through to Followr. e.g. board_id (Pinterest), privacy_level + duet_disabled (TikTok), category_id (YouTube), notify_followers (IG). media_product_type is auto-injected from product_type for IG/FB/YouTube if not already set."),
+      comments_to_create: z9.array(z9.unknown()).optional().describe("First-comment payloads (e.g., for IG hashtag dumping in the first comment).")
+    }
+  }, async (input) => {
+    const context = await gatherRuntimeContext(input.company_id, input.social_network_type, client2);
+    const mergedPreferences = { ...input.preferences ?? {} };
+    if (NETWORKS_NEEDING_MEDIA_PRODUCT_TYPE.has(input.social_network_type) && !("media_product_type" in mergedPreferences)) {
+      mergedPreferences["media_product_type"] = PRODUCT_TYPE_TO_FOLLOWR[input.product_type];
+    }
+    const warnings = validateAgainstSpec({
+      network: input.social_network_type,
+      product_type: input.product_type,
+      description: input.description,
+      title: input.title,
+      link: input.link,
+      assets: input.assets,
+      preferences: mergedPreferences
+    }, context);
+    const body = {
+      social_network_type: input.social_network_type
+    };
+    if (input.description !== void 0)
+      body.description = input.description;
+    if (input.title !== void 0)
+      body.title = input.title;
+    if (input.link !== void 0)
+      body.link = input.link;
+    if (input.assets && input.assets.length > 0) {
+      body.assets_ids = input.assets.map((a) => a.id);
+    }
+    if (Object.keys(mergedPreferences).length > 0)
+      body.preferences = mergedPreferences;
+    if (input.comments_to_create !== void 0)
+      body.comments_to_create = input.comments_to_create;
+    const post = await client2.createPost(input.post_group_id, body);
+    const response = {
+      post,
+      validation: {
+        warning_count: warnings.length,
+        warnings,
+        runtime_context: context
+      }
+    };
+    return {
+      content: [{ type: "text", text: JSON.stringify(response, null, 2) }]
+    };
+  });
+}
+
+// ../mcp-core/dist/tools/prompts.js
+import { z as z10 } from "zod";
+var SOCIAL_NETWORK_TYPE = z10.enum([
   "facebook",
   "twitter",
   "instagram",
@@ -1683,10 +2568,10 @@ function registerPromptTools(server2, client2, _options) {
     title: "List brand-voice prompts for a workspace",
     description: "List the brand-voice prompts of a workspace. These are the per-network prompt templates that Followr picks among when generating content (Post Generator, etc.). Optional filter by social network type and by `default=true`. Pass company_id=0 to see Followr's built-in defaults (where company_id is null in the API).",
     inputSchema: {
-      company_id: z9.number().int().nonnegative().describe("Workspace id. Pass 0 to query Followr's built-in defaults (the API maps 0 \u2192 null)."),
+      company_id: z10.number().int().nonnegative().describe("Workspace id. Pass 0 to query Followr's built-in defaults (the API maps 0 \u2192 null)."),
       social_network_type: SOCIAL_NETWORK_TYPE.optional().describe("Restrict to one network."),
-      only_default: z9.boolean().optional().describe("If true, only return prompts marked default."),
-      page_size: z9.number().int().positive().max(100).optional()
+      only_default: z10.boolean().optional().describe("If true, only return prompts marked default."),
+      page_size: z10.number().int().positive().max(100).optional()
     }
   }, async ({ company_id, social_network_type, only_default, page_size }) => {
     const prompts = await client2.listPrompts({
@@ -1716,7 +2601,7 @@ function registerPromptTools(server2, client2, _options) {
     title: "Get a single brand-voice prompt by id",
     description: "Fetch one brand-voice prompt by id. Useful to inspect its current text, default flag, and network assignment.",
     inputSchema: {
-      prompt_id: z9.number().int().positive()
+      prompt_id: z10.number().int().positive()
     }
   }, async ({ prompt_id }) => {
     const prompt = await client2.getPrompt(prompt_id);
@@ -1726,12 +2611,12 @@ function registerPromptTools(server2, client2, _options) {
     title: "Create a brand-voice prompt for a workspace",
     description: "Create a custom brand-voice prompt attached to a workspace and a specific social network. Followr will consider this prompt (alongside any built-in defaults and other workspace prompts) when generating content. Mark `default=true` to make it eligible for automatic selection. Multiple prompts with default=true per network are allowed; Followr picks one at generate time.",
     inputSchema: {
-      company_id: z9.number().int().positive(),
+      company_id: z10.number().int().positive(),
       social_network_type: SOCIAL_NETWORK_TYPE,
-      name: z9.string().min(1).max(80).describe("Short human-readable name shown in the Followr UI."),
-      prompt: z9.string().min(1).describe("The actual prompt text used as system instructions when generating."),
-      default: z9.boolean().optional().describe("If true, marks this prompt as eligible for automatic selection. Default false."),
-      type: z9.string().optional().describe("Resource type. Default `text` (the only verified value). Reserved for future image/video prompt types.")
+      name: z10.string().min(1).max(80).describe("Short human-readable name shown in the Followr UI."),
+      prompt: z10.string().min(1).describe("The actual prompt text used as system instructions when generating."),
+      default: z10.boolean().optional().describe("If true, marks this prompt as eligible for automatic selection. Default false."),
+      type: z10.string().optional().describe("Resource type. Default `text` (the only verified value). Reserved for future image/video prompt types.")
     }
   }, async ({ company_id, social_network_type, name, prompt, default: isDefault, type }) => {
     const created = await client2.createPrompt({
@@ -1748,11 +2633,11 @@ function registerPromptTools(server2, client2, _options) {
     title: "Update a brand-voice prompt",
     description: "Patch an existing brand-voice prompt. Use to rename, edit the prompt text, change the network assignment, or toggle the `default` flag.",
     inputSchema: {
-      prompt_id: z9.number().int().positive(),
-      name: z9.string().min(1).max(80).optional(),
-      prompt: z9.string().min(1).optional(),
+      prompt_id: z10.number().int().positive(),
+      name: z10.string().min(1).max(80).optional(),
+      prompt: z10.string().min(1).optional(),
       social_network_type: SOCIAL_NETWORK_TYPE.optional(),
-      default: z9.boolean().optional()
+      default: z10.boolean().optional()
     }
   }, async ({ prompt_id, ...patch }) => {
     const updated = await client2.updatePrompt(prompt_id, patch);
@@ -1762,7 +2647,7 @@ function registerPromptTools(server2, client2, _options) {
     title: "Delete a brand-voice prompt (destructive)",
     description: "Permanently delete a brand-voice prompt. Cannot be undone. Followr's built-in defaults (where company_id is null) cannot be deleted; only workspace-scoped prompts can.",
     inputSchema: {
-      prompt_id: z9.number().int().positive()
+      prompt_id: z10.number().int().positive()
     }
   }, async ({ prompt_id }) => {
     await client2.deletePrompt(prompt_id);
@@ -1771,14 +2656,14 @@ function registerPromptTools(server2, client2, _options) {
 }
 
 // ../mcp-core/dist/tools/rule-groups.js
-import { z as z10 } from "zod";
+import { z as z11 } from "zod";
 function registerRuleGroupTools(server2, client2, _options) {
   server2.registerTool("list_rule_groups", {
     title: "List Autopilot rule groups in a workspace",
     description: "List rule groups (Autopilot scheduling rules) in a workspace. A rule group bundles rules that auto-fill empty calendar slots from a pool of tagged PostGroups. Includes the underlying rules array by default.",
     inputSchema: {
-      company_id: z10.number().int().positive(),
-      include: z10.string().optional().describe("Override include chain. Default: rules.")
+      company_id: z11.number().int().positive(),
+      include: z11.string().optional().describe("Override include chain. Default: rules.")
     }
   }, async ({ company_id, include }) => {
     const groups = await client2.listRuleGroups(company_id, {
@@ -1805,7 +2690,7 @@ function registerRuleGroupTools(server2, client2, _options) {
     title: "Get a single rule group by id",
     description: "Fetch one Autopilot rule group's details. Path is flat (/api/ruleGroups/{id}).",
     inputSchema: {
-      rule_group_id: z10.number().int().positive()
+      rule_group_id: z11.number().int().positive()
     }
   }, async ({ rule_group_id }) => {
     const group = await client2.getRuleGroup(rule_group_id);
@@ -1815,11 +2700,11 @@ function registerRuleGroupTools(server2, client2, _options) {
     title: "Create an Autopilot rule group",
     description: "Create a new Autopilot rule group in a workspace. After creation, individual rules (days_of_week, time_slots, social_network_types, tag filters) must be added separately. random_minutes adds jitter to scheduled times to avoid bot-like patterns.",
     inputSchema: {
-      company_id: z10.number().int().positive(),
-      name: z10.string().min(1),
-      description: z10.string().optional(),
-      is_active: z10.boolean().optional().describe("If true, the rule group is active immediately. Default false."),
-      random_minutes: z10.number().int().min(0).max(120).optional().describe("Random jitter in minutes applied to scheduled times. Default 0.")
+      company_id: z11.number().int().positive(),
+      name: z11.string().min(1),
+      description: z11.string().optional(),
+      is_active: z11.boolean().optional().describe("If true, the rule group is active immediately. Default false."),
+      random_minutes: z11.number().int().min(0).max(120).optional().describe("Random jitter in minutes applied to scheduled times. Default 0.")
     }
   }, async ({ company_id, name, description, is_active, random_minutes }) => {
     const group = await client2.createRuleGroup({
@@ -1835,11 +2720,11 @@ function registerRuleGroupTools(server2, client2, _options) {
     title: "Update an Autopilot rule group",
     description: "Patch a rule group's name, description, active flag, or random jitter.",
     inputSchema: {
-      rule_group_id: z10.number().int().positive(),
-      name: z10.string().min(1).optional(),
-      description: z10.string().optional(),
-      active: z10.boolean().optional(),
-      random_minutes: z10.number().int().min(0).max(120).optional()
+      rule_group_id: z11.number().int().positive(),
+      name: z11.string().min(1).optional(),
+      description: z11.string().optional(),
+      active: z11.boolean().optional(),
+      random_minutes: z11.number().int().min(0).max(120).optional()
     }
   }, async ({ rule_group_id, ...patch }) => {
     const group = await client2.updateRuleGroup(rule_group_id, patch);
@@ -1849,7 +2734,7 @@ function registerRuleGroupTools(server2, client2, _options) {
     title: "Delete an Autopilot rule group (destructive)",
     description: "Permanently delete an Autopilot rule group. Already-scheduled posts that were filled by this group will remain on the calendar (deletion only affects future autopilot fills). Cannot be undone.",
     inputSchema: {
-      rule_group_id: z10.number().int().positive()
+      rule_group_id: z11.number().int().positive()
     }
   }, async ({ rule_group_id }) => {
     await client2.deleteRuleGroup(rule_group_id);
@@ -1858,16 +2743,16 @@ function registerRuleGroupTools(server2, client2, _options) {
 }
 
 // ../mcp-core/dist/tools/social-hub.js
-import { z as z11 } from "zod";
+import { z as z12 } from "zod";
 function registerSocialHubTools(server2, client2, _options) {
   server2.registerTool("list_conversations", {
     title: "List inbox conversations (DMs) for a workspace",
     description: "List Social Hub conversations across all connected accounts in a workspace, newest activity first. Each entry includes the external user (DM sender), last message preview, and unread count. Use this to triage the inbox or auto-reply.",
     inputSchema: {
-      company_id: z11.number().int().positive(),
-      social_network_id: z11.number().int().positive().optional().describe("Optional: limit to a specific connected account."),
-      only_unread: z11.boolean().optional().describe("If true, only return conversations with unread messages."),
-      page_size: z11.number().int().positive().max(100).optional()
+      company_id: z12.number().int().positive(),
+      social_network_id: z12.number().int().positive().optional().describe("Optional: limit to a specific connected account."),
+      only_unread: z12.boolean().optional().describe("If true, only return conversations with unread messages."),
+      page_size: z12.number().int().positive().max(100).optional()
     }
   }, async ({ company_id, social_network_id, only_unread, page_size }) => {
     const conversations = await client2.listConversations(company_id, {
@@ -1901,8 +2786,8 @@ function registerSocialHubTools(server2, client2, _options) {
     title: "Get messages in a conversation",
     description: "Return the messages within a single conversation, newest first. Use this after list_conversations to read full thread content before deciding on a reply.",
     inputSchema: {
-      conversation_id: z11.number().int().positive(),
-      page_size: z11.number().int().positive().max(100).optional()
+      conversation_id: z12.number().int().positive(),
+      page_size: z12.number().int().positive().max(100).optional()
     }
   }, async ({ conversation_id, page_size }) => {
     const messages = await client2.listMessages(conversation_id, {
@@ -1921,7 +2806,7 @@ function registerSocialHubTools(server2, client2, _options) {
     title: "Mark a conversation as read",
     description: "Mark a Social Hub conversation as read (clears the unread badge). Use this after processing messages from get_conversation_messages.",
     inputSchema: {
-      conversation_id: z11.number().int().positive()
+      conversation_id: z12.number().int().positive()
     }
   }, async ({ conversation_id }) => {
     const updated = await client2.markConversationRead(conversation_id);
@@ -1931,8 +2816,8 @@ function registerSocialHubTools(server2, client2, _options) {
     title: "List messages via the platform-native endpoint (Facebook or Instagram only)",
     description: "Read messages using Followr's platform-specific proxy to the Meta Graph API. Only supported for Facebook and Instagram conversations (other networks like LinkedIn, TikTok, X, Threads, Bluesky return 404 from this proxy and should use get_conversation_messages instead). Returns the raw Graph API shape with created_time, from, id, message, to fields.",
     inputSchema: {
-      platform: z11.enum(["facebook", "instagram"]).describe("Only facebook and instagram are supported."),
-      conversation_id: z11.number().int().positive()
+      platform: z12.enum(["facebook", "instagram"]).describe("Only facebook and instagram are supported."),
+      conversation_id: z12.number().int().positive()
     }
   }, async ({ platform, conversation_id }) => {
     const messages = await client2.listPlatformMessages(platform, conversation_id);
@@ -1942,9 +2827,9 @@ function registerSocialHubTools(server2, client2, _options) {
     title: "List external users (contacts) in a workspace",
     description: "List external users associated with a workspace. External users are DM senders, followers, or comment authors collected across all connected accounts. Use this to see who has interacted with the brand recently. Internally calls /api/externalUsers (which is the same resource the Followr UI's Contacts page reads from).",
     inputSchema: {
-      company_id: z11.number().int().positive(),
-      type: z11.string().optional().describe("Optional filter by external user type (e.g. follower, message_sender, comment_author)."),
-      page_size: z11.number().int().positive().max(100).optional()
+      company_id: z12.number().int().positive(),
+      type: z12.string().optional().describe("Optional filter by external user type (e.g. follower, message_sender, comment_author)."),
+      page_size: z12.number().int().positive().max(100).optional()
     }
   }, async ({ company_id, type, page_size }) => {
     const contacts = await client2.listExternalUsers(company_id, {
@@ -1972,10 +2857,10 @@ function registerSocialHubTools(server2, client2, _options) {
     title: "List comments on published posts in a workspace",
     description: "Return comments left on the workspace's published posts. Use this for community-moderation workflows: surface new comments, draft replies, escalate negative sentiment. Optionally narrow to a single post via post_id.",
     inputSchema: {
-      company_id: z11.number().int().positive(),
-      post_id: z11.number().int().positive().optional().describe("Optional: limit to a single post."),
-      page_size: z11.number().int().positive().max(100).optional(),
-      include: z11.string().optional().describe("Optional include chain (e.g. 'externalUser,post').")
+      company_id: z12.number().int().positive(),
+      post_id: z12.number().int().positive().optional().describe("Optional: limit to a single post."),
+      page_size: z12.number().int().positive().max(100).optional(),
+      include: z12.string().optional().describe("Optional include chain (e.g. 'externalUser,post').")
     }
   }, async ({ company_id, post_id, page_size, include }) => {
     const comments = await client2.listComments(company_id, {
@@ -2000,13 +2885,13 @@ function registerSubscriptionTools(server2, client2, _options) {
 }
 
 // ../mcp-core/dist/tools/tags.js
-import { z as z12 } from "zod";
+import { z as z13 } from "zod";
 function registerTagTools(server2, client2, _options) {
   server2.registerTool("list_tags", {
     title: "List tags in a workspace",
     description: "List all tags for a Followr workspace. Tags are scoped to a company and used for categorizing PostGroups (and as a workaround for approval status via the 'Approved' / 'Rejected' convention).",
     inputSchema: {
-      company_id: z12.number().int().positive()
+      company_id: z13.number().int().positive()
     }
   }, async ({ company_id }) => {
     const tags = await client2.listTags(company_id);
@@ -2023,9 +2908,9 @@ function registerTagTools(server2, client2, _options) {
     title: "Create a tag in a workspace",
     description: "Create a new tag in the specified workspace. Color is optional hex (e.g. #22c55e). Tags are idempotent by convention: caller should list existing first to avoid duplicates.",
     inputSchema: {
-      company_id: z12.number().int().positive(),
-      name: z12.string().min(1),
-      color: z12.string().regex(/^#[0-9a-fA-F]{6}$/).optional().describe("Hex color, e.g. #22c55e")
+      company_id: z13.number().int().positive(),
+      name: z13.string().min(1),
+      color: z13.string().regex(/^#[0-9a-fA-F]{6}$/).optional().describe("Hex color, e.g. #22c55e")
     }
   }, async ({ company_id, name, color }) => {
     const tag = await client2.createTag({ company_id, name, ...color ? { color } : {} });
@@ -2035,10 +2920,10 @@ function registerTagTools(server2, client2, _options) {
     title: "Update a tag (rename, change color or active state)",
     description: "Patch a tag's name, color, or active flag.",
     inputSchema: {
-      tag_id: z12.number().int().positive(),
-      name: z12.string().optional(),
-      color: z12.string().regex(/^#[0-9a-fA-F]{6}$/).optional(),
-      active: z12.boolean().optional()
+      tag_id: z13.number().int().positive(),
+      name: z13.string().optional(),
+      color: z13.string().regex(/^#[0-9a-fA-F]{6}$/).optional(),
+      active: z13.boolean().optional()
     }
   }, async ({ tag_id, ...patch }) => {
     const tag = await client2.updateTag(tag_id, patch);
@@ -2048,7 +2933,7 @@ function registerTagTools(server2, client2, _options) {
     title: "Delete a tag (destructive)",
     description: "Permanently delete a tag. PostGroups that referenced this tag will keep their tags_ids list with a now-broken reference. Cannot be undone.",
     inputSchema: {
-      tag_id: z12.number().int().positive()
+      tag_id: z13.number().int().positive()
     }
   }, async ({ tag_id }) => {
     await client2.deleteTag(tag_id);
@@ -2058,13 +2943,13 @@ function registerTagTools(server2, client2, _options) {
     title: "Find a tag by name or create it if it doesn't exist",
     description: "Idempotent helper. Looks up tags in the workspace by case-insensitive name match. If found, returns its id. If not, creates a new tag with the given name and color.",
     inputSchema: {
-      company_id: z12.number().int().positive(),
-      name: z12.string().min(1),
-      color: z12.string().regex(/^#[0-9a-fA-F]{6}$/).optional()
+      company_id: z13.number().int().positive(),
+      name: z13.string().min(1),
+      color: z13.string().regex(/^#[0-9a-fA-F]{6}$/).optional()
     }
   }, async ({ company_id, name, color }) => {
-    const tags = await client2.listTags(company_id);
-    const existing = tags.find((t) => t.name.toLowerCase() === name.toLowerCase());
+    const matches = await client2.listTags(company_id, { name });
+    const existing = matches.find((t) => t.name.toLowerCase() === name.toLowerCase());
     if (existing) {
       return {
         content: [{ type: "text", text: JSON.stringify({ found: true, tag: existing }, null, 2) }]
@@ -2078,7 +2963,7 @@ function registerTagTools(server2, client2, _options) {
 }
 
 // ../mcp-core/dist/tools/users.js
-import { z as z13 } from "zod";
+import { z as z14 } from "zod";
 function registerUserTools(server2, client2, _options) {
   server2.registerTool("get_current_user", {
     title: "Get the user that owns the current API token",
@@ -2102,8 +2987,8 @@ function registerUserTools(server2, client2, _options) {
     title: "List users with access to a workspace",
     description: "List Followr users that have access to a specific workspace (team members). Uses the relation filter `companies.id`. Use to map ownership, find collaborators, or check who created a draft.",
     inputSchema: {
-      company_id: z13.number().int().positive(),
-      page_size: z13.number().int().positive().max(100).optional()
+      company_id: z14.number().int().positive(),
+      page_size: z14.number().int().positive().max(100).optional()
     }
   }, async ({ company_id, page_size }) => {
     const users = await client2.listUsersInCompany(company_id, {
@@ -2126,8 +3011,72 @@ function registerUserTools(server2, client2, _options) {
   });
 }
 
+// ../mcp-core/dist/tools/validate.js
+import { z as z15 } from "zod";
+var NETWORK_ENUM2 = [
+  "medium",
+  "pinterest",
+  "twitter",
+  "facebook",
+  "instagram",
+  "tiktok",
+  "linkedin",
+  "youtube",
+  "threads",
+  "bluesky"
+];
+var PRODUCT_TYPE_ENUM2 = ["feed", "reel", "story", "short"];
+var AssetSchema = z15.object({
+  id: z15.number().int().positive().optional(),
+  type: z15.enum(["image", "video", "gif"]),
+  width: z15.number().positive().optional(),
+  height: z15.number().positive().optional(),
+  size_bytes: z15.number().nonnegative().optional(),
+  duration_seconds: z15.number().positive().optional()
+});
+function registerValidateTools(server2, client2, _options) {
+  server2.registerTool("validate_against_specs", {
+    title: "Validate a Post payload against social network specs (advisory)",
+    description: "Check if a post (caption, assets, preferences) violates any social network rules before publishing. Returns advisory warnings; does NOT block. Use BEFORE expensive operations (generate_avatar_video, image generation, etc.) to avoid wasting credits on outputs the platform will reject. Asset metadata (size_bytes, width, height, duration_seconds) is optional \u2014 provide what you have, the validator skips checks for missing fields.",
+    inputSchema: {
+      company_id: z15.number().int().positive().describe("Followr workspace id. Required to resolve account-specific limits (Twitter verified, TikTok tier)."),
+      network: z15.enum(NETWORK_ENUM2).describe("Target social network."),
+      product_type: z15.enum(PRODUCT_TYPE_ENUM2).describe("Post format. e.g. 'feed' for IG Feed, 'reel' for IG Reels, 'story' for IG Stories, 'short' for YouTube Shorts."),
+      description: z15.string().optional().describe("Post caption / body text."),
+      title: z15.string().optional().describe("Title (medium, pinterest, youtube only)."),
+      link: z15.string().optional().describe("Optional outbound link."),
+      assets: z15.array(AssetSchema).optional().describe("Media to attach. Each asset's metadata is used for size/duration/dimensions/aspect ratio checks."),
+      preferences: z15.record(z15.string(), z15.unknown()).optional().describe("Network-specific extras: board_id (Pinterest), privacy_level (TikTok), category_id (YouTube), media_product_type (FEED/REELS/STORY for IG), etc.")
+    }
+  }, async (input) => {
+    const context = await gatherRuntimeContext(input.company_id, input.network, client2);
+    const spec = getSpec(input.network, input.product_type);
+    const specKey = `${input.network}_${input.product_type}`;
+    const warnings = validateAgainstSpec({
+      network: input.network,
+      product_type: input.product_type,
+      description: input.description,
+      title: input.title,
+      link: input.link,
+      assets: input.assets,
+      preferences: input.preferences
+    }, context);
+    const response = {
+      spec_key: specKey,
+      spec_exists: spec !== null,
+      runtime_context: context,
+      warning_count: warnings.length,
+      warnings,
+      specs_verified_at: getSpecsMeta()?.verified_at ?? null
+    };
+    return {
+      content: [{ type: "text", text: JSON.stringify(response, null, 2) }]
+    };
+  });
+}
+
 // ../mcp-core/dist/tools/voices.js
-import { z as z14 } from "zod";
+import { z as z16 } from "zod";
 function sanitizeVoice(voice) {
   const v = voice;
   if (v.company) {
@@ -2141,8 +3090,8 @@ function registerVoiceTools(server2, client2, _options) {
     title: "List voices in a workspace",
     description: "List voice profiles already created in a Followr workspace. Each voice is linked to a TTS provider (typically ElevenLabs) and can be assigned to an avatar or used directly for audio generation. Use this before generate_audio or create_avatar_full_flow to discover available voices.",
     inputSchema: {
-      company_id: z14.number().int().positive(),
-      page_size: z14.number().int().positive().max(100).optional()
+      company_id: z16.number().int().positive(),
+      page_size: z16.number().int().positive().max(100).optional()
     }
   }, async ({ company_id, page_size }) => {
     const voices = await client2.listVoices(company_id, {
@@ -2169,7 +3118,7 @@ function registerVoiceTools(server2, client2, _options) {
     title: "Get a single voice with its audio sample",
     description: "Fetch one voice by id, with the audio sample hydrated. Use this to confirm a freshly created voice has its sample uploaded, or to retrieve the audio preview URL.",
     inputSchema: {
-      voice_id: z14.number().int().positive()
+      voice_id: z16.number().int().positive()
     }
   }, async ({ voice_id }) => {
     const voice = await client2.getVoice(voice_id);
@@ -2179,12 +3128,12 @@ function registerVoiceTools(server2, client2, _options) {
     title: "Browse the ElevenLabs voice catalog with optional filters",
     description: "Returns a page of voices from the ElevenLabs catalog with rich metadata (language, gender, age, accent, use_case, preview_url, social handles). Supports client-side filtering by language, gender, category, and free-text query against name and description. Use this to pick a voice_id before calling create_voice_from_elevenlabs.",
     inputSchema: {
-      page: z14.number().int().positive().optional().describe("API page number. 30 voices per page. Default 1."),
-      language: z14.string().optional().describe("Filter by ISO 639-1 code (en, es, pt, fr, etc.)."),
-      gender: z14.enum(["male", "female", "non-binary"]).optional(),
-      category: z14.string().optional().describe("e.g. professional, casual."),
-      query: z14.string().optional().describe("Substring match against name or description (case-insensitive)."),
-      featured_only: z14.boolean().optional().describe("If true, only return voices marked featured.")
+      page: z16.number().int().positive().optional().describe("API page number. 30 voices per page. Default 1."),
+      language: z16.string().optional().describe("Filter by ISO 639-1 code (en, es, pt, fr, etc.)."),
+      gender: z16.enum(["male", "female", "non-binary"]).optional(),
+      category: z16.string().optional().describe("e.g. professional, casual."),
+      query: z16.string().optional().describe("Substring match against name or description (case-insensitive)."),
+      featured_only: z16.boolean().optional().describe("If true, only return voices marked featured.")
     }
   }, async ({ page, language, gender, category, query, featured_only }) => {
     const all = await client2.listElevenlabsVoices({ ...page ? { page } : {} });
@@ -2225,12 +3174,12 @@ function registerVoiceTools(server2, client2, _options) {
     title: "Create a Followr voice linked to an ElevenLabs voice",
     description: "Create a Voice resource in the workspace that wraps an ElevenLabs voice_id. Required: name, language_code (ISO 639-1), elevenlabs_voice_id (from list_elevenlabs_voices). The voice is usable immediately for generate_audio and create_avatar_full_flow even though the optional audio sample upload is not part of this tool (voice.audio will be null until manually uploaded). Cannot be undone via the MCP (voice resource persists).",
     inputSchema: {
-      company_id: z14.number().int().positive(),
-      name: z14.string().min(1).max(50).describe("Human-readable voice name."),
-      language_code: z14.string().min(2).max(5).describe("ISO 639-1 code, e.g. en, es, pt, fr."),
-      elevenlabs_voice_id: z14.string().min(1).describe("ElevenLabs voice_id from list_elevenlabs_voices."),
-      accent: z14.string().optional(),
-      description: z14.string().optional()
+      company_id: z16.number().int().positive(),
+      name: z16.string().min(1).max(50).describe("Human-readable voice name."),
+      language_code: z16.string().min(2).max(5).describe("ISO 639-1 code, e.g. en, es, pt, fr."),
+      elevenlabs_voice_id: z16.string().min(1).describe("ElevenLabs voice_id from list_elevenlabs_voices."),
+      accent: z16.string().optional(),
+      description: z16.string().optional()
     }
   }, async ({ company_id, name, language_code, elevenlabs_voice_id, accent, description }) => {
     const voice = await client2.createVoice(company_id, {
@@ -2246,15 +3195,15 @@ function registerVoiceTools(server2, client2, _options) {
 }
 
 // ../mcp-core/dist/tools/workspace-settings.js
-import { z as z15 } from "zod";
+import { z as z17 } from "zod";
 function registerWorkspaceSettingsTools(server2, client2, _options) {
   server2.registerTool("update_webhook_url", {
     title: "Update the workspace webhook URL and secret",
     description: "Set or rotate the workspace's outbound webhook (used when a Post is published or fails). Both fields can be cleared with empty string. The secret never round-trips: stored and signed against, never echoed back; the response only confirms the URL.",
     inputSchema: {
-      company_id: z15.number().int().positive(),
-      webhook_posts_url: z15.string().describe("Destination URL for outbound events. Empty string clears."),
-      webhook_secret: z15.string().optional().describe("Shared secret used to sign payloads. Optional. Empty string clears.")
+      company_id: z17.number().int().positive(),
+      webhook_posts_url: z17.string().describe("Destination URL for outbound events. Empty string clears."),
+      webhook_secret: z17.string().optional().describe("Shared secret used to sign payloads. Optional. Empty string clears.")
     }
   }, async ({ company_id, webhook_posts_url, webhook_secret }) => {
     const updated = await client2.updateCompany(company_id, {
@@ -2278,8 +3227,8 @@ function registerWorkspaceSettingsTools(server2, client2, _options) {
     title: "Set the workspace's left-menu visibility flags",
     description: "Update which menu sections are visible in the Followr SPA for a workspace. The field `menu_visibility` is a map of section name to boolean. REPLACE semantics: the map passed becomes the new value. Useful for whitelabel installs that want to hide irrelevant sections.",
     inputSchema: {
-      company_id: z15.number().int().positive(),
-      menu_visibility: z15.record(z15.boolean()).describe("Full map of section_name -> visible. REPLACE, not merge.")
+      company_id: z17.number().int().positive(),
+      menu_visibility: z17.record(z17.boolean()).describe("Full map of section_name -> visible. REPLACE, not merge.")
     }
   }, async ({ company_id, menu_visibility }) => {
     const updated = await client2.updateCompany(company_id, {
@@ -2535,17 +3484,17 @@ function registerFollowrResources(server2, client2, _options) {
 }
 
 // ../mcp-core/dist/prompts/index.js
-import { z as z16 } from "zod";
+import { z as z18 } from "zod";
 function registerFollowrPrompts(server2, _client, _options) {
   server2.registerPrompt("followr.weekly-brief", {
     title: "Generate a week of scheduled posts from a brief",
     description: "Take a free-form weekly brief and produce a full week of scheduled posts in the workspace. Anchors to the workspace's brand voice, picks suitable networks, drafts copy + images, and schedules across the week.",
     argsSchema: {
-      company_id: z16.string().describe("Followr company id."),
-      brief: z16.string().describe("Free-form brief for the week. Topics, hooks, must-mentions, banned terms, target audience notes."),
-      networks: z16.string().optional().describe("Comma-separated network types (instagram, facebook, etc). Defaults to all connected accounts."),
-      posts_per_day: z16.string().optional().describe("Integer; default 1."),
-      starting_iso_date: z16.string().optional().describe("ISO 8601 date for day 1 of the week. Defaults to tomorrow at 10:00 in the workspace timezone.")
+      company_id: z18.string().describe("Followr company id."),
+      brief: z18.string().describe("Free-form brief for the week. Topics, hooks, must-mentions, banned terms, target audience notes."),
+      networks: z18.string().optional().describe("Comma-separated network types (instagram, facebook, etc). Defaults to all connected accounts."),
+      posts_per_day: z18.string().optional().describe("Integer; default 1."),
+      starting_iso_date: z18.string().optional().describe("ISO 8601 date for day 1 of the week. Defaults to tomorrow at 10:00 in the workspace timezone.")
     }
   }, ({ company_id, brief, networks, posts_per_day, starting_iso_date }) => ({
     messages: [
@@ -2578,14 +3527,14 @@ Procedure:
     title: "Launch a multi-network campaign end-to-end",
     description: "Spin up a full campaign in one shot: hashtag/tag taxonomy, brand-aligned hero asset, teaser + launch + follow-up posts across selected networks, scheduled around the launch date.",
     argsSchema: {
-      company_id: z16.string().describe("Followr company id."),
-      campaign_name: z16.string(),
-      launch_iso_date: z16.string().describe("ISO 8601 launch datetime in UTC."),
-      networks: z16.string().describe("Comma-separated network types."),
-      product_or_offer: z16.string().describe("What the campaign is selling or announcing."),
-      primary_cta: z16.string().describe("The single CTA (e.g. 'Sign up at acme.com/launch')."),
-      teaser_days_before: z16.string().optional().describe("How many days before launch to start teasers. Default 3."),
-      followup_days_after: z16.string().optional().describe("How many days after launch to keep follow-up posts. Default 7.")
+      company_id: z18.string().describe("Followr company id."),
+      campaign_name: z18.string(),
+      launch_iso_date: z18.string().describe("ISO 8601 launch datetime in UTC."),
+      networks: z18.string().describe("Comma-separated network types."),
+      product_or_offer: z18.string().describe("What the campaign is selling or announcing."),
+      primary_cta: z18.string().describe("The single CTA (e.g. 'Sign up at acme.com/launch')."),
+      teaser_days_before: z18.string().optional().describe("How many days before launch to start teasers. Default 3."),
+      followup_days_after: z18.string().optional().describe("How many days after launch to keep follow-up posts. Default 7.")
     }
   }, ({ company_id, campaign_name, launch_iso_date, networks, product_or_offer, primary_cta, teaser_days_before, followup_days_after }) => ({
     messages: [
@@ -2619,13 +3568,13 @@ Procedure:
     title: "Generate an avatar video series on a single topic",
     description: "Produce N short avatar videos on a topic. One script per episode, one lipsync render per episode, all scheduled across N consecutive days.",
     argsSchema: {
-      company_id: z16.string(),
-      avatar_id: z16.string().describe("Avatar to use (from list_avatars or create_avatar_full_flow)."),
-      topic: z16.string().describe("The topic / theme of the series."),
-      episode_count: z16.string().describe("Number of episodes (1-30 reasonable)."),
-      networks: z16.string().describe("Comma-separated network types. Vertical 9:16 will be used for Reels / Shorts."),
-      starting_iso_date: z16.string().describe("ISO 8601 datetime for episode 1."),
-      cadence: z16.string().optional().describe("daily | every-other-day | weekly. Default daily.")
+      company_id: z18.string(),
+      avatar_id: z18.string().describe("Avatar to use (from list_avatars or create_avatar_full_flow)."),
+      topic: z18.string().describe("The topic / theme of the series."),
+      episode_count: z18.string().describe("Number of episodes (1-30 reasonable)."),
+      networks: z18.string().describe("Comma-separated network types. Vertical 9:16 will be used for Reels / Shorts."),
+      starting_iso_date: z18.string().describe("ISO 8601 datetime for episode 1."),
+      cadence: z18.string().optional().describe("daily | every-other-day | weekly. Default daily.")
     }
   }, ({ company_id, avatar_id, topic, episode_count, networks, starting_iso_date, cadence }) => ({
     messages: [
@@ -2656,10 +3605,10 @@ Procedure:
     title: "Draft three crisis-response variants for review",
     description: "Quickly produce three differently-toned crisis-response post drafts (apology, clarification, deflection) staged as drafts (not auto-publish) so a human can approve one.",
     argsSchema: {
-      company_id: z16.string(),
-      situation: z16.string().describe("What happened, key facts, sensitivity notes."),
-      networks: z16.string().describe("Comma-separated network types."),
-      urgency_window_hours: z16.string().optional().describe("How many hours until the post should ideally go live. Default 4.")
+      company_id: z18.string(),
+      situation: z18.string().describe("What happened, key facts, sensitivity notes."),
+      networks: z18.string().describe("Comma-separated network types."),
+      urgency_window_hours: z18.string().optional().describe("How many hours until the post should ideally go live. Default 4.")
     }
   }, ({ company_id, situation, networks, urgency_window_hours }) => ({
     messages: [
@@ -2693,11 +3642,11 @@ Procedure:
     title: "Repurpose a single URL into multi-network posts",
     description: "Given a URL (blog post, news article, video), produce network-tailored versions across the requested networks, with the right format (carousel, single image, video, blog post) per network.",
     argsSchema: {
-      company_id: z16.string(),
-      source_url: z16.string().describe("The URL to repurpose (article, blog post, video)."),
-      networks: z16.string().describe("Comma-separated networks."),
-      publish_at: z16.string().optional().describe("ISO 8601 datetime. If omitted, leave as draft."),
-      include_visual: z16.string().optional().describe("If 'true', generate a fresh image per network format. Default 'true'.")
+      company_id: z18.string(),
+      source_url: z18.string().describe("The URL to repurpose (article, blog post, video)."),
+      networks: z18.string().describe("Comma-separated networks."),
+      publish_at: z18.string().optional().describe("ISO 8601 datetime. If omitted, leave as draft."),
+      include_visual: z18.string().optional().describe("If 'true', generate a fresh image per network format. Default 'true'.")
     }
   }, ({ company_id, source_url, networks, publish_at, include_visual }) => ({
     messages: [
@@ -2735,6 +3684,8 @@ Procedure:
 function registerFollowrTools(server2, client2, options = {}) {
   registerCompanyTools(server2, client2, options);
   registerPostGroupTools(server2, client2, options);
+  registerPostTools(server2, client2, options);
+  registerValidateTools(server2, client2, options);
   registerTagTools(server2, client2, options);
   registerAiResultsTools(server2, client2, options);
   registerAvatarTools(server2, client2, options);
@@ -2782,7 +3733,7 @@ var client = new FollowrClient({
 });
 var server = new McpServer({
   name: "followr",
-  version: "0.1.0"
+  version: "0.2.0"
 });
 registerFollowrTools(server, client);
 var transport = new StdioServerTransport();