@socialneuron/mcp-server 1.3.2 → 1.4.1

package/dist/index.js

@@ -14,22 +14,30 @@ var MCP_VERSION;
 var init_version = __esm({
   "src/lib/version.ts"() {
     "use strict";
-    MCP_VERSION = "1.3.2";
+    MCP_VERSION = "1.4.1";
   }
 });
 
 // src/lib/posthog.ts
 import { createHash } from "node:crypto";
-import { PostHog } from "posthog-node";
 function hashUserId(userId) {
   return createHash("sha256").update(`${POSTHOG_SALT}:${userId}`).digest("hex").substring(0, 32);
 }
+function isTelemetryOptedIn() {
+  if (process.env.DO_NOT_TRACK === "1" || process.env.DO_NOT_TRACK === "true" || process.env.SOCIALNEURON_NO_TELEMETRY === "1") {
+    return false;
+  }
+  return process.env.SOCIALNEURON_TELEMETRY === "1";
+}
 function initPostHog() {
-  if (isTelemetryDisabled()) return;
+  if (!isTelemetryOptedIn()) return;
   const key = process.env.POSTHOG_KEY || process.env.VITE_POSTHOG_KEY;
   const host = process.env.POSTHOG_HOST || process.env.VITE_POSTHOG_HOST || "https://eu.i.posthog.com";
   if (!key) return;
-  client = new PostHog(key, { host, flushAt: 5, flushInterval: 1e4 });
+  import("posthog-node").then(({ PostHog }) => {
+    client = new PostHog(key, { host, flushAt: 5, flushInterval: 1e4 });
+  }).catch(() => {
+  });
 }
 async function captureToolEvent(args) {
   if (!client) return;
@@ -875,7 +883,7 @@ var init_tool_catalog = __esm({
         name: "check_status",
         description: "Check status of async content generation job",
         module: "content",
-        scope: "mcp:write"
+        scope: "mcp:read"
       },
       {
         name: "create_storyboard",
@@ -3738,7 +3746,7 @@ var TOOL_SCOPES = {
   adapt_content: "mcp:write",
   generate_video: "mcp:write",
   generate_image: "mcp:write",
-  check_status: "mcp:write",
+  check_status: "mcp:read",
   render_demo_video: "mcp:write",
   save_brand_profile: "mcp:write",
   update_platform_voice: "mcp:write",
@@ -3792,6 +3800,77 @@ function hasScope(userScopes, required) {
 // src/tools/ideation.ts
 init_edge_function();
 import { z } from "zod";
+
+// src/lib/rate-limit.ts
+var CATEGORY_CONFIGS = {
+  posting: { maxTokens: 30, refillRate: 30 / 60 },
+  // 30 req/min
+  screenshot: { maxTokens: 10, refillRate: 10 / 60 },
+  // 10 req/min
+  read: { maxTokens: 60, refillRate: 60 / 60 }
+  // 60 req/min
+};
+var RateLimiter = class {
+  tokens;
+  lastRefill;
+  maxTokens;
+  refillRate;
+  // tokens per second
+  constructor(config) {
+    this.maxTokens = config.maxTokens;
+    this.refillRate = config.refillRate;
+    this.tokens = config.maxTokens;
+    this.lastRefill = Date.now();
+  }
+  /**
+   * Try to consume one token. Returns true if the request is allowed,
+   * false if rate-limited.
+   */
+  consume() {
+    this.refill();
+    if (this.tokens >= 1) {
+      this.tokens -= 1;
+      return true;
+    }
+    return false;
+  }
+  /**
+   * Seconds until at least one token is available.
+   */
+  retryAfter() {
+    this.refill();
+    if (this.tokens >= 1) return 0;
+    return Math.ceil((1 - this.tokens) / this.refillRate);
+  }
+  refill() {
+    const now = Date.now();
+    const elapsed = (now - this.lastRefill) / 1e3;
+    this.tokens = Math.min(this.maxTokens, this.tokens + elapsed * this.refillRate);
+    this.lastRefill = now;
+  }
+};
+var limiters = /* @__PURE__ */ new Map();
+function getRateLimiter(category) {
+  let limiter = limiters.get(category);
+  if (!limiter) {
+    const config = CATEGORY_CONFIGS[category] ?? CATEGORY_CONFIGS.read;
+    limiter = new RateLimiter(config);
+    limiters.set(category, limiter);
+  }
+  return limiter;
+}
+function checkRateLimit(category, key) {
+  const bucketKey = key ? `${category}:${key}` : category;
+  const limiter = getRateLimiter(bucketKey);
+  const allowed = limiter.consume();
+  return {
+    allowed,
+    retryAfter: allowed ? 0 : limiter.retryAfter()
+  };
+}
+
+// src/tools/ideation.ts
+init_supabase();
 function registerIdeationTools(server2) {
   server2.tool(
     "generate_content",
@@ -3812,7 +3891,9 @@ function registerIdeationTools(server2) {
         "facebook",
         "threads",
         "bluesky"
-      ]).optional().describe("Target social media platform. Helps tailor tone, length, and format."),
+      ]).optional().describe(
+        "Target social media platform. Helps tailor tone, length, and format."
+      ),
       brand_voice: z.string().max(500).optional().describe(
         'Brand voice guidelines to follow (e.g. "professional and empathetic", "playful and Gen-Z"). Leave blank to use a neutral tone.'
       ),
@@ -3823,7 +3904,30 @@ function registerIdeationTools(server2) {
         "Project ID to auto-load brand profile and performance context for prompt enrichment."
       )
     },
-    async ({ prompt: prompt2, content_type, platform: platform3, brand_voice, model, project_id }) => {
+    async ({
+      prompt: prompt2,
+      content_type,
+      platform: platform3,
+      brand_voice,
+      model,
+      project_id
+    }) => {
+      try {
+        const userId = await getDefaultUserId();
+        const rl = checkRateLimit("posting", userId);
+        if (!rl.allowed) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: `Rate limited. Retry after ${rl.retryAfter}s.`
+              }
+            ],
+            isError: true
+          };
+        }
+      } catch {
+      }
       let enrichedPrompt = prompt2;
       if (platform3) {
         enrichedPrompt += `
@@ -3955,8 +4059,12 @@ Content Type: ${content_type}`;
       category: z.string().optional().describe(
         "Category filter (for YouTube). Examples: general, entertainment, education, tech, music, gaming, sports, news."
       ),
-      niche: z.string().optional().describe("Niche keyword filter. Only return trends matching these keywords."),
-      url: z.string().optional().describe('Required when source is "rss" or "url". The feed or page URL to fetch.'),
+      niche: z.string().optional().describe(
+        "Niche keyword filter. Only return trends matching these keywords."
+      ),
+      url: z.string().optional().describe(
+        'Required when source is "rss" or "url". The feed or page URL to fetch.'
+      ),
       force_refresh: z.boolean().optional().describe("Skip the server-side cache and fetch fresh data.")
     },
     async ({ source, category, niche, url, force_refresh }) => {
@@ -4031,7 +4139,9 @@ Content Type: ${content_type}`;
     "adapt_content",
     "Adapt existing content for a different social media platform. Rewrites content to match the target platform's norms including character limits, hashtag style, tone, and CTA conventions.",
     {
-      content: z.string().max(5e3).describe("The content to adapt. Can be a caption, script, blog excerpt, or any text."),
+      content: z.string().max(5e3).describe(
+        "The content to adapt. Can be a caption, script, blog excerpt, or any text."
+      ),
       source_platform: z.enum([
         "youtube",
         "tiktok",
@@ -4041,7 +4151,9 @@ Content Type: ${content_type}`;
         "facebook",
         "threads",
         "bluesky"
-      ]).optional().describe("The platform the content was originally written for. Helps preserve intent."),
+      ]).optional().describe(
+        "The platform the content was originally written for. Helps preserve intent."
+      ),
       target_platform: z.enum([
         "youtube",
         "tiktok",
@@ -4055,9 +4167,33 @@ Content Type: ${content_type}`;
       brand_voice: z.string().max(500).optional().describe(
         'Brand voice guidelines to maintain during adaptation (e.g. "professional", "playful").'
       ),
-      project_id: z.string().uuid().optional().describe("Optional project ID to load platform voice overrides from brand profile.")
+      project_id: z.string().uuid().optional().describe(
+        "Optional project ID to load platform voice overrides from brand profile."
+      )
     },
-    async ({ content, source_platform, target_platform, brand_voice, project_id }) => {
+    async ({
+      content,
+      source_platform,
+      target_platform,
+      brand_voice,
+      project_id
+    }) => {
+      try {
+        const userId = await getDefaultUserId();
+        const rl = checkRateLimit("posting", userId);
+        if (!rl.allowed) {
+          return {
+            content: [
+              {
+                type: "text",
+                text: `Rate limited. Retry after ${rl.retryAfter}s.`
+              }
+            ],
+            isError: true
+          };
+        }
+      } catch {
+      }
       const platformGuidelines = {
         twitter: "Max 280 characters. Concise, punchy. 1-3 hashtags max. Thread-friendly.",
         threads: "Max 500 characters. Conversational, opinion-driven. Minimal hashtags.",
@@ -4140,76 +4276,6 @@ ${content}`,
 // src/tools/content.ts
 init_edge_function();
 import { z as z2 } from "zod";
-
-// src/lib/rate-limit.ts
-var CATEGORY_CONFIGS = {
-  posting: { maxTokens: 30, refillRate: 30 / 60 },
-  // 30 req/min
-  screenshot: { maxTokens: 10, refillRate: 10 / 60 },
-  // 10 req/min
-  read: { maxTokens: 60, refillRate: 60 / 60 }
-  // 60 req/min
-};
-var RateLimiter = class {
-  tokens;
-  lastRefill;
-  maxTokens;
-  refillRate;
-  // tokens per second
-  constructor(config) {
-    this.maxTokens = config.maxTokens;
-    this.refillRate = config.refillRate;
-    this.tokens = config.maxTokens;
-    this.lastRefill = Date.now();
-  }
-  /**
-   * Try to consume one token. Returns true if the request is allowed,
-   * false if rate-limited.
-   */
-  consume() {
-    this.refill();
-    if (this.tokens >= 1) {
-      this.tokens -= 1;
-      return true;
-    }
-    return false;
-  }
-  /**
-   * Seconds until at least one token is available.
-   */
-  retryAfter() {
-    this.refill();
-    if (this.tokens >= 1) return 0;
-    return Math.ceil((1 - this.tokens) / this.refillRate);
-  }
-  refill() {
-    const now = Date.now();
-    const elapsed = (now - this.lastRefill) / 1e3;
-    this.tokens = Math.min(this.maxTokens, this.tokens + elapsed * this.refillRate);
-    this.lastRefill = now;
-  }
-};
-var limiters = /* @__PURE__ */ new Map();
-function getRateLimiter(category) {
-  let limiter = limiters.get(category);
-  if (!limiter) {
-    const config = CATEGORY_CONFIGS[category] ?? CATEGORY_CONFIGS.read;
-    limiter = new RateLimiter(config);
-    limiters.set(category, limiter);
-  }
-  return limiter;
-}
-function checkRateLimit(category, key) {
-  const bucketKey = key ? `${category}:${key}` : category;
-  const limiter = getRateLimiter(bucketKey);
-  const allowed = limiter.consume();
-  return {
-    allowed,
-    retryAfter: allowed ? 0 : limiter.retryAfter()
-  };
-}
-
-// src/tools/content.ts
 init_supabase();
 
 // src/lib/sanitize-error.ts
@@ -4263,8 +4329,15 @@ function sanitizeDbError(error) {
 
 // src/tools/content.ts
 init_request_context();
-var MAX_CREDITS_PER_RUN = Math.max(0, Number(process.env.SOCIALNEURON_MAX_CREDITS_PER_RUN || 0));
-var MAX_ASSETS_PER_RUN = Math.max(0, Number(process.env.SOCIALNEURON_MAX_ASSETS_PER_RUN || 0));
+init_version();
+var MAX_CREDITS_PER_RUN = Math.max(
+  0,
+  Number(process.env.SOCIALNEURON_MAX_CREDITS_PER_RUN || 0)
+);
+var MAX_ASSETS_PER_RUN = Math.max(
+  0,
+  Number(process.env.SOCIALNEURON_MAX_ASSETS_PER_RUN || 0)
+);
 var _globalCreditsUsed = 0;
 var _globalAssetsGenerated = 0;
 function getCreditsUsed() {
@@ -4306,7 +4379,7 @@ function getCurrentBudgetStatus() {
 function asEnvelope(data) {
   return {
     _meta: {
-      version: "0.2.0",
+      version: MCP_VERSION,
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     },
     data
@@ -4388,8 +4461,12 @@ function registerContentTools(server2) {
       enable_audio: z2.boolean().optional().describe(
         "Enable native audio generation. Kling 2.6: doubles cost. Kling 3.0: 50% more (std 30/sec, pro 40/sec). 5+ languages."
       ),
-      image_url: z2.string().optional().describe("Start frame image URL for image-to-video (Kling 3.0 frame control)."),
-      end_frame_url: z2.string().optional().describe("End frame image URL (Kling 3.0 only). Enables seamless loop transitions."),
+      image_url: z2.string().optional().describe(
+        "Start frame image URL for image-to-video (Kling 3.0 frame control)."
+      ),
+      end_frame_url: z2.string().optional().describe(
+        "End frame image URL (Kling 3.0 only). Enables seamless loop transitions."
+      ),
       response_format: z2.enum(["text", "json"]).optional().describe("Optional response format. Defaults to text.")
     },
     async ({
@@ -4827,10 +4904,13 @@ function registerContentTools(server2) {
         };
       }
       if (job.external_id && (job.status === "pending" || job.status === "processing")) {
-        const { data: liveStatus } = await callEdgeFunction("kie-task-status", {
-          taskId: job.external_id,
-          model: job.model
-        });
+        const { data: liveStatus } = await callEdgeFunction(
+          "kie-task-status",
+          {
+            taskId: job.external_id,
+            model: job.model
+          }
+        );
         if (liveStatus) {
           const lines2 = [
             `Job: ${job.id}`,
@@ -4904,7 +4984,12 @@ function registerContentTools(server2) {
       });
       if (format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope(job), null, 2) }]
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope(job), null, 2)
+            }
+          ]
         };
       }
       return {
@@ -4922,7 +5007,15 @@ function registerContentTools(server2) {
       brand_context: z2.string().max(3e3).optional().describe(
         "Brand context JSON from extract_brand. Include colors, voice tone, visual style keywords for consistent branding across frames."
       ),
-      platform: z2.enum(["tiktok", "instagram-reels", "youtube-shorts", "youtube", "general"]).describe("Target platform. Determines aspect ratio, duration, and pacing."),
+      platform: z2.enum([
+        "tiktok",
+        "instagram-reels",
+        "youtube-shorts",
+        "youtube",
+        "general"
+      ]).describe(
+        "Target platform. Determines aspect ratio, duration, and pacing."
+      ),
       target_duration: z2.number().min(5).max(120).optional().describe(
         "Target total duration in seconds. Defaults to 30s for short-form, 60s for YouTube."
       ),
@@ -4930,7 +5023,9 @@ function registerContentTools(server2) {
       style: z2.string().optional().describe(
         'Visual style direction (e.g., "cinematic", "anime", "documentary", "motion graphics").'
       ),
-      response_format: z2.enum(["text", "json"]).optional().describe("Response format. Defaults to json for structured storyboard data.")
+      response_format: z2.enum(["text", "json"]).optional().describe(
+        "Response format. Defaults to json for structured storyboard data."
+      )
     },
     async ({
       concept,
@@ -4943,7 +5038,11 @@ function registerContentTools(server2) {
     }) => {
       const format = response_format ?? "json";
       const startedAt = Date.now();
-      const isShortForm = ["tiktok", "instagram-reels", "youtube-shorts"].includes(platform3);
+      const isShortForm = [
+        "tiktok",
+        "instagram-reels",
+        "youtube-shorts"
+      ].includes(platform3);
       const duration = target_duration ?? (isShortForm ? 30 : 60);
       const scenes = num_scenes ?? (isShortForm ? 7 : 10);
       const aspectRatio = isShortForm ? "9:16" : "16:9";
@@ -5036,7 +5135,12 @@ Return ONLY valid JSON in this exact format:
           details: { error }
         });
         return {
-          content: [{ type: "text", text: `Storyboard generation failed: ${error}` }],
+          content: [
+            {
+              type: "text",
+              text: `Storyboard generation failed: ${error}`
+            }
+          ],
           isError: true
         };
       }
@@ -5052,7 +5156,12 @@ Return ONLY valid JSON in this exact format:
         try {
           const parsed = JSON.parse(rawContent);
           return {
-            content: [{ type: "text", text: JSON.stringify(asEnvelope(parsed), null, 2) }]
+            content: [
+              {
+                type: "text",
+                text: JSON.stringify(asEnvelope(parsed), null, 2)
+              }
+            ]
           };
         } catch {
           return {
@@ -5116,7 +5225,10 @@ Return ONLY valid JSON in this exact format:
           isError: true
         };
       }
-      const rateLimit = checkRateLimit("posting", `generate_voiceover:${userId}`);
+      const rateLimit = checkRateLimit(
+        "posting",
+        `generate_voiceover:${userId}`
+      );
       if (!rateLimit.allowed) {
         await logMcpToolInvocation({
           toolName: "generate_voiceover",
@@ -5151,7 +5263,12 @@ Return ONLY valid JSON in this exact format:
           details: { error }
         });
         return {
-          content: [{ type: "text", text: `Voiceover generation failed: ${error}` }],
+          content: [
+            {
+              type: "text",
+              text: `Voiceover generation failed: ${error}`
+            }
+          ],
           isError: true
         };
       }
@@ -5164,7 +5281,10 @@ Return ONLY valid JSON in this exact format:
         });
         return {
           content: [
-            { type: "text", text: "Voiceover generation failed: no audio URL returned." }
+            {
+              type: "text",
+              text: "Voiceover generation failed: no audio URL returned."
+            }
           ],
           isError: true
         };
@@ -5236,7 +5356,9 @@ Return ONLY valid JSON in this exact format:
         "Carousel template. hormozi-authority: bold typography, one idea per slide, dark backgrounds. educational-series: numbered tips. Default: hormozi-authority."
       ),
       slide_count: z2.number().min(3).max(10).optional().describe("Number of slides (3-10). Default: 7."),
-      aspect_ratio: z2.enum(["1:1", "4:5", "9:16"]).optional().describe("Aspect ratio. 1:1 square (default), 4:5 portrait, 9:16 story."),
+      aspect_ratio: z2.enum(["1:1", "4:5", "9:16"]).optional().describe(
+        "Aspect ratio. 1:1 square (default), 4:5 portrait, 9:16 story."
+      ),
       style: z2.enum(["minimal", "bold", "professional", "playful", "hormozi"]).optional().describe(
         "Visual style. hormozi: black bg, bold white text, gold accents. Default: hormozi (when using hormozi-authority template)."
       ),
@@ -5273,7 +5395,10 @@ Return ONLY valid JSON in this exact format:
         };
       }
       const userId = await getDefaultUserId();
-      const rateLimit = checkRateLimit("posting", `generate_carousel:${userId}`);
+      const rateLimit = checkRateLimit(
+        "posting",
+        `generate_carousel:${userId}`
+      );
       if (!rateLimit.allowed) {
         await logMcpToolInvocation({
           toolName: "generate_carousel",
@@ -5311,7 +5436,12 @@ Return ONLY valid JSON in this exact format:
           details: { error }
         });
         return {
-          content: [{ type: "text", text: `Carousel generation failed: ${error}` }],
+          content: [
+            {
+              type: "text",
+              text: `Carousel generation failed: ${error}`
+            }
+          ],
           isError: true
         };
       }
@@ -5323,7 +5453,12 @@ Return ONLY valid JSON in this exact format:
           details: { error: "No carousel data returned" }
         });
         return {
-          content: [{ type: "text", text: "Carousel generation returned no data." }],
+          content: [
+            {
+              type: "text",
+              text: "Carousel generation returned no data."
+            }
+          ],
           isError: true
         };
       }
@@ -5389,6 +5524,7 @@ import { z as z3 } from "zod";
 import { createHash as createHash2 } from "node:crypto";
 init_supabase();
 init_quality();
+init_version();
 var PLATFORM_CASE_MAP = {
   youtube: "YouTube",
   tiktok: "TikTok",
@@ -5402,7 +5538,7 @@ var PLATFORM_CASE_MAP = {
 function asEnvelope2(data) {
   return {
     _meta: {
-      version: "0.2.0",
+      version: MCP_VERSION,
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     },
     data
@@ -5434,15 +5570,21 @@ function registerDistributionTools(server2) {
           "threads",
           "bluesky"
         ])
-      ).min(1).describe("Target platforms to post to. Each must have an active OAuth connection."),
+      ).min(1).describe(
+        "Target platforms to post to. Each must have an active OAuth connection."
+      ),
       title: z3.string().optional().describe("Post title (used by YouTube and some other platforms)."),
-      hashtags: z3.array(z3.string()).optional().describe('Hashtags to append to the caption. Include or omit the "#" prefix.'),
+      hashtags: z3.array(z3.string()).optional().describe(
+        'Hashtags to append to the caption. Include or omit the "#" prefix.'
+      ),
       schedule_at: z3.string().optional().describe(
         'ISO 8601 datetime for scheduled posting (e.g. "2026-03-15T14:00:00Z"). Omit for immediate posting.'
       ),
       project_id: z3.string().optional().describe("Social Neuron project ID to associate this post with."),
       response_format: z3.enum(["text", "json"]).optional().describe("Optional response format. Defaults to text."),
-      attribution: z3.boolean().optional().describe('If true, appends "Created with Social Neuron" to the caption. Default: false.')
+      attribution: z3.boolean().optional().describe(
+        'If true, appends "Created with Social Neuron" to the caption. Default: false.'
+      )
     },
     async ({
       media_url,
@@ -5461,7 +5603,12 @@ function registerDistributionTools(server2) {
       const startedAt = Date.now();
       if ((!caption || caption.trim().length === 0) && (!title || title.trim().length === 0)) {
         return {
-          content: [{ type: "text", text: "Either caption or title is required." }],
+          content: [
+            {
+              type: "text",
+              text: "Either caption or title is required."
+            }
+          ],
           isError: true
         };
       }
@@ -5484,7 +5631,9 @@ function registerDistributionTools(server2) {
           isError: true
         };
       }
-      const normalizedPlatforms = platforms.map((p) => PLATFORM_CASE_MAP[p.toLowerCase()] || p);
+      const normalizedPlatforms = platforms.map(
+        (p) => PLATFORM_CASE_MAP[p.toLowerCase()] || p
+      );
       let finalCaption = caption;
       if (attribution && finalCaption) {
         finalCaption = `${finalCaption}
@@ -5548,7 +5697,9 @@ Created with Social Neuron`;
       ];
       for (const [platform3, result] of Object.entries(data.results)) {
         if (result.success) {
-          lines.push(`  ${platform3}: OK (jobId=${result.jobId}, postId=${result.postId})`);
+          lines.push(
+            `  ${platform3}: OK (jobId=${result.jobId}, postId=${result.postId})`
+          );
         } else {
           lines.push(`  ${platform3}: FAILED - ${result.error}`);
         }
@@ -5565,7 +5716,12 @@ Created with Social Neuron`;
       });
       if (format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope2(data), null, 2) }],
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope2(data), null, 2)
+            }
+          ],
           isError: !data.success
         };
       }
@@ -5621,12 +5777,17 @@ Created with Social Neuron`;
       for (const account of accounts) {
         const name = account.username || "(unnamed)";
         const platformLower = account.platform.toLowerCase();
-        lines.push(`  ${platformLower}: ${name} (connected ${account.created_at.split("T")[0]})`);
+        lines.push(
+          `  ${platformLower}: ${name} (connected ${account.created_at.split("T")[0]})`
+        );
       }
       if (format === "json") {
         return {
           content: [
-            { type: "text", text: JSON.stringify(asEnvelope2({ accounts }), null, 2) }
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope2({ accounts }), null, 2)
+            }
           ]
         };
       }
@@ -5688,7 +5849,10 @@ Created with Social Neuron`;
         if (format === "json") {
           return {
             content: [
-              { type: "text", text: JSON.stringify(asEnvelope2({ posts: [] }), null, 2) }
+              {
+                type: "text",
+                text: JSON.stringify(asEnvelope2({ posts: [] }), null, 2)
+              }
             ]
           };
         }
@@ -5705,7 +5869,10 @@ Created with Social Neuron`;
       if (format === "json") {
         return {
           content: [
-            { type: "text", text: JSON.stringify(asEnvelope2({ posts }), null, 2) }
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope2({ posts }), null, 2)
+            }
           ]
         };
       }
@@ -5766,7 +5933,13 @@ Created with Social Neuron`;
       min_gap_hours: z3.number().min(1).max(24).default(4).describe("Minimum gap between posts on same platform"),
       response_format: z3.enum(["text", "json"]).default("text")
     },
-    async ({ platforms, count, start_after, min_gap_hours, response_format }) => {
+    async ({
+      platforms,
+      count,
+      start_after,
+      min_gap_hours,
+      response_format
+    }) => {
       const startedAt = Date.now();
       try {
         const userId = await getDefaultUserId();
@@ -5777,7 +5950,9 @@ Created with Social Neuron`;
         const gapMs = min_gap_hours * 60 * 60 * 1e3;
         const candidates = [];
         for (let dayOffset = 0; dayOffset < 7; dayOffset++) {
-          const date = new Date(startDate.getTime() + dayOffset * 24 * 60 * 60 * 1e3);
+          const date = new Date(
+            startDate.getTime() + dayOffset * 24 * 60 * 60 * 1e3
+          );
           const dayOfWeek = date.getUTCDay();
           for (const platform3 of platforms) {
             const hours = PREFERRED_HOURS[platform3] ?? [12, 16];
@@ -5786,8 +5961,11 @@ Created with Social Neuron`;
               slotDate.setUTCHours(hours[hourIdx], 0, 0, 0);
               if (slotDate <= startDate) continue;
               const hasConflict = (existingPosts ?? []).some((post) => {
-                if (String(post.platform).toLowerCase() !== platform3) return false;
-                const postTime = new Date(post.scheduled_at ?? post.published_at).getTime();
+                if (String(post.platform).toLowerCase() !== platform3)
+                  return false;
+                const postTime = new Date(
+                  post.scheduled_at ?? post.published_at
+                ).getTime();
                 return Math.abs(postTime - slotDate.getTime()) < gapMs;
               });
               let engagementScore = hours.length - hourIdx;
@@ -5832,15 +6010,22 @@ Created with Social Neuron`;
           };
         }
         const lines = [];
-        lines.push(`Found ${slots.length} optimal slots (${conflictsAvoided} conflicts avoided):`);
+        lines.push(
+          `Found ${slots.length} optimal slots (${conflictsAvoided} conflicts avoided):`
+        );
         lines.push("");
         lines.push("Datetime (UTC)           | Platform   | Score");
         lines.push("-------------------------+------------+------");
         for (const s of slots) {
           const dt = s.datetime.replace("T", " ").slice(0, 19);
-          lines.push(`${dt.padEnd(25)}| ${s.platform.padEnd(11)}| ${s.engagement_score}`);
+          lines.push(
+            `${dt.padEnd(25)}| ${s.platform.padEnd(11)}| ${s.engagement_score}`
+          );
         }
-        return { content: [{ type: "text", text: lines.join("\n") }], isError: false };
+        return {
+          content: [{ type: "text", text: lines.join("\n") }],
+          isError: false
+        };
       } catch (err) {
         const durationMs = Date.now() - startedAt;
         const message = err instanceof Error ? err.message : String(err);
@@ -5851,7 +6036,9 @@ Created with Social Neuron`;
           details: { error: message }
         });
         return {
-          content: [{ type: "text", text: `Failed to find slots: ${message}` }],
+          content: [
+            { type: "text", text: `Failed to find slots: ${message}` }
+          ],
           isError: true
         };
       }
@@ -5878,8 +6065,12 @@ Created with Social Neuron`;
       auto_slot: z3.boolean().default(true).describe("Auto-assign time slots for posts without schedule_at"),
       dry_run: z3.boolean().default(false).describe("Preview without actually scheduling"),
       response_format: z3.enum(["text", "json"]).default("text"),
-      enforce_quality: z3.boolean().default(true).describe("When true, block scheduling for posts that fail quality checks."),
-      quality_threshold: z3.number().int().min(0).max(35).optional().describe("Optional quality threshold override. Defaults to project setting or 26."),
+      enforce_quality: z3.boolean().default(true).describe(
+        "When true, block scheduling for posts that fail quality checks."
+      ),
+      quality_threshold: z3.number().int().min(0).max(35).optional().describe(
+        "Optional quality threshold override. Defaults to project setting or 26."
+      ),
       batch_size: z3.number().int().min(1).max(10).default(4).describe("Concurrent schedule calls per platform batch."),
       idempotency_seed: z3.string().max(128).optional().describe("Optional stable seed used when building idempotency keys.")
     },
@@ -5918,17 +6109,25 @@ Created with Social Neuron`;
           if (!stored?.plan_payload) {
             return {
               content: [
-                { type: "text", text: `No content plan found for plan_id=${plan_id}` }
+                {
+                  type: "text",
+                  text: `No content plan found for plan_id=${plan_id}`
+                }
               ],
               isError: true
             };
           }
           const payload = stored.plan_payload;
-          const postsFromPayload = Array.isArray(payload.posts) ? payload.posts : Array.isArray(payload.data?.posts) ? payload.data.posts : null;
+          const postsFromPayload = Array.isArray(payload.posts) ? payload.posts : Array.isArray(
+            payload.data?.posts
+          ) ? payload.data.posts : null;
           if (!postsFromPayload) {
             return {
               content: [
-                { type: "text", text: `Stored plan ${plan_id} has no posts array.` }
+                {
+                  type: "text",
+                  text: `Stored plan ${plan_id} has no posts array.`
+                }
               ],
               isError: true
             };
@@ -6020,7 +6219,10 @@ Created with Social Neuron`;
             approvalSummary = {
               total: approvals.length,
               eligible: approvedPosts.length,
-              skipped: Math.max(0, workingPlan.posts.length - approvedPosts.length)
+              skipped: Math.max(
+                0,
+                workingPlan.posts.length - approvedPosts.length
+              )
             };
             workingPlan = {
               ...workingPlan,
@@ -6054,9 +6256,14 @@ Created with Social Neuron`;
           try {
             const { data: settingsData } = await supabase.from("system_settings").select("value").eq("key", "content_safety").maybeSingle();
             if (settingsData?.value?.quality_threshold !== void 0) {
-              const parsedThreshold = Number(settingsData.value.quality_threshold);
+              const parsedThreshold = Number(
+                settingsData.value.quality_threshold
+              );
               if (Number.isFinite(parsedThreshold)) {
-                effectiveQualityThreshold = Math.max(0, Math.min(35, Math.trunc(parsedThreshold)));
+                effectiveQualityThreshold = Math.max(
+                  0,
+                  Math.min(35, Math.trunc(parsedThreshold))
+                );
               }
             }
             if (Array.isArray(settingsData?.value?.custom_banned_terms)) {
@@ -6092,13 +6299,18 @@ Created with Social Neuron`;
             }
           };
         });
-        const qualityPassed = postsWithResults.filter((post) => post.quality.passed).length;
+        const qualityPassed = postsWithResults.filter(
+          (post) => post.quality.passed
+        ).length;
         const qualitySummary = {
           total_posts: postsWithResults.length,
           passed: qualityPassed,
           failed: postsWithResults.length - qualityPassed,
           avg_score: postsWithResults.length > 0 ? Number(
-            (postsWithResults.reduce((sum, post) => sum + post.quality.score, 0) / postsWithResults.length).toFixed(2)
+            (postsWithResults.reduce(
+              (sum, post) => sum + post.quality.score,
+              0
+            ) / postsWithResults.length).toFixed(2)
           ) : 0
         };
         if (dry_run) {
@@ -6168,8 +6380,13 @@ Created with Social Neuron`;
             }
           }
           lines2.push("");
-          lines2.push(`Summary: ${passed}/${workingPlan.posts.length} passed quality check`);
-          return { content: [{ type: "text", text: lines2.join("\n") }], isError: false };
+          lines2.push(
+            `Summary: ${passed}/${workingPlan.posts.length} passed quality check`
+          );
+          return {
+            content: [{ type: "text", text: lines2.join("\n") }],
+            isError: false
+          };
         }
         let scheduled = 0;
         let failed = 0;
@@ -6261,7 +6478,8 @@ Created with Social Neuron`;
         }
         const chunk = (arr, size) => {
           const out = [];
-          for (let i = 0; i < arr.length; i += size) out.push(arr.slice(i, i + size));
+          for (let i = 0; i < arr.length; i += size)
+            out.push(arr.slice(i, i + size));
           return out;
         };
         const platformBatches = Array.from(grouped.entries()).map(
@@ -6269,7 +6487,9 @@ Created with Social Neuron`;
             const platformResults = [];
             const batches = chunk(platformPosts, batch_size);
             for (const batch of batches) {
-              const settled = await Promise.allSettled(batch.map((post) => scheduleOne(post)));
+              const settled = await Promise.allSettled(
+                batch.map((post) => scheduleOne(post))
+              );
               for (const outcome of settled) {
                 if (outcome.status === "fulfilled") {
                   platformResults.push(outcome.value);
@@ -6335,7 +6555,11 @@ Created with Social Neuron`;
                     plan_id: effectivePlanId,
                     approvals: approvalSummary,
                     posts: results,
-                    summary: { total_posts: workingPlan.posts.length, scheduled, failed }
+                    summary: {
+                      total_posts: workingPlan.posts.length,
+                      scheduled,
+                      failed
+                    }
                   }),
                   null,
                   2
@@ -6373,7 +6597,12 @@ Created with Social Neuron`;
           details: { error: message }
         });
         return {
-          content: [{ type: "text", text: `Batch scheduling failed: ${message}` }],
+          content: [
+            {
+              type: "text",
+              text: `Batch scheduling failed: ${message}`
+            }
+          ],
           isError: true
         };
       }
@@ -6385,10 +6614,11 @@ Created with Social Neuron`;
 init_supabase();
 init_edge_function();
 import { z as z4 } from "zod";
+init_version();
 function asEnvelope3(data) {
   return {
     _meta: {
-      version: "0.2.0",
+      version: MCP_VERSION,
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     },
     data
@@ -6501,7 +6731,9 @@ function registerAnalyticsTools(server2) {
             ]
           };
         }
-        const { data: simpleRows, error: simpleError } = await supabase.from("post_analytics").select("id, post_id, platform, views, likes, comments, shares, captured_at").in("post_id", postIds).gte("captured_at", sinceIso).order("captured_at", { ascending: false }).limit(maxPosts);
+        const { data: simpleRows, error: simpleError } = await supabase.from("post_analytics").select(
+          "id, post_id, platform, views, likes, comments, shares, captured_at"
+        ).in("post_id", postIds).gte("captured_at", sinceIso).order("captured_at", { ascending: false }).limit(maxPosts);
         if (simpleError) {
           return {
             content: [
@@ -6513,7 +6745,12 @@ function registerAnalyticsTools(server2) {
             isError: true
           };
         }
-        return formatSimpleAnalytics(simpleRows, platform3, lookbackDays, format);
+        return formatSimpleAnalytics(
+          simpleRows,
+          platform3,
+          lookbackDays,
+          format
+        );
       }
       if (!rows || rows.length === 0) {
         if (format === "json") {
@@ -6590,7 +6827,10 @@ function registerAnalyticsTools(server2) {
       const format = response_format ?? "text";
       const startedAt = Date.now();
       const userId = await getDefaultUserId();
-      const rateLimit = checkRateLimit("posting", `refresh_platform_analytics:${userId}`);
+      const rateLimit = checkRateLimit(
+        "posting",
+        `refresh_platform_analytics:${userId}`
+      );
       if (!rateLimit.allowed) {
         await logMcpToolInvocation({
           toolName: "refresh_platform_analytics",
@@ -6608,7 +6848,9 @@ function registerAnalyticsTools(server2) {
           isError: true
         };
       }
-      const { data, error } = await callEdgeFunction("fetch-analytics", { userId });
+      const { data, error } = await callEdgeFunction("fetch-analytics", {
+        userId
+      });
       if (error) {
         await logMcpToolInvocation({
           toolName: "refresh_platform_analytics",
@@ -6617,7 +6859,12 @@ function registerAnalyticsTools(server2) {
           details: { error }
         });
         return {
-          content: [{ type: "text", text: `Error refreshing analytics: ${error}` }],
+          content: [
+            {
+              type: "text",
+              text: `Error refreshing analytics: ${error}`
+            }
+          ],
           isError: true
         };
       }
@@ -6630,12 +6877,18 @@ function registerAnalyticsTools(server2) {
           details: { error: "Edge function returned success=false" }
         });
         return {
-          content: [{ type: "text", text: "Analytics refresh failed." }],
+          content: [
+            { type: "text", text: "Analytics refresh failed." }
+          ],
           isError: true
         };
       }
-      const queued = (result.results ?? []).filter((r) => r.status === "queued").length;
-      const errored = (result.results ?? []).filter((r) => r.status === "error").length;
+      const queued = (result.results ?? []).filter(
+        (r) => r.status === "queued"
+      ).length;
+      const errored = (result.results ?? []).filter(
+        (r) => r.status === "error"
+      ).length;
       const lines = [
         `Analytics refresh triggered successfully.`,
         `  Posts processed: ${result.postsProcessed}`,
@@ -6681,7 +6934,10 @@ function formatAnalytics(summary, days, format) {
   if (format === "json") {
     return {
       content: [
-        { type: "text", text: JSON.stringify(asEnvelope3({ ...summary, days }), null, 2) }
+        {
+          type: "text",
+          text: JSON.stringify(asEnvelope3({ ...summary, days }), null, 2)
+        }
       ]
     };
   }
@@ -6799,10 +7055,160 @@ function formatSimpleAnalytics(rows, platform3, days, format) {
 init_edge_function();
 init_supabase();
 import { z as z5 } from "zod";
+
+// src/lib/ssrf.ts
+var BLOCKED_IP_PATTERNS = [
+  // IPv4 localhost/loopback
+  /^127\./,
+  /^0\./,
+  // IPv4 private ranges (RFC 1918)
+  /^10\./,
+  /^172\.(1[6-9]|2[0-9]|3[0-1])\./,
+  /^192\.168\./,
+  // IPv4 link-local
+  /^169\.254\./,
+  // Cloud metadata endpoint (AWS, GCP, Azure)
+  /^169\.254\.169\.254$/,
+  // IPv4 broadcast
+  /^255\./,
+  // Shared address space (RFC 6598)
+  /^100\.(6[4-9]|[7-9][0-9]|1[0-1][0-9]|12[0-7])\./
+];
+var BLOCKED_IPV6_PATTERNS = [
+  /^::1$/i,
+  // loopback
+  /^::$/i,
+  // unspecified
+  /^fe[89ab][0-9a-f]:/i,
+  // link-local fe80::/10
+  /^fc[0-9a-f]:/i,
+  // unique local fc00::/7
+  /^fd[0-9a-f]:/i,
+  // unique local fc00::/7
+  /^::ffff:127\./i,
+  // IPv4-mapped localhost
+  /^::ffff:(0|10|127|169\.254|172\.(1[6-9]|2[0-9]|3[0-1])|192\.168)\./i
+  // IPv4-mapped private
+];
+var BLOCKED_HOSTNAMES = [
+  "localhost",
+  "localhost.localdomain",
+  "local",
+  "127.0.0.1",
+  "0.0.0.0",
+  "[::1]",
+  "[::ffff:127.0.0.1]",
+  // Cloud metadata endpoints
+  "metadata.google.internal",
+  "metadata.goog",
+  "instance-data",
+  "instance-data.ec2.internal"
+];
+var ALLOWED_PROTOCOLS = ["http:", "https:"];
+var BLOCKED_PORTS = [22, 23, 25, 110, 143, 445, 3306, 5432, 6379, 27017, 11211];
+function isBlockedIP(ip) {
+  const normalized = ip.replace(/^\[/, "").replace(/\]$/, "");
+  if (normalized.includes(":")) {
+    return BLOCKED_IPV6_PATTERNS.some((pattern) => pattern.test(normalized));
+  }
+  return BLOCKED_IP_PATTERNS.some((pattern) => pattern.test(normalized));
+}
+function isBlockedHostname(hostname) {
+  return BLOCKED_HOSTNAMES.includes(hostname.toLowerCase());
+}
+function isIPAddress(hostname) {
+  const ipv4Pattern = /^(\d{1,3}\.){3}\d{1,3}$/;
+  const ipv6Pattern = /^\[?[a-fA-F0-9:]+\]?$/;
+  return ipv4Pattern.test(hostname) || ipv6Pattern.test(hostname);
+}
+async function validateUrlForSSRF(urlString) {
+  try {
+    const url = new URL(urlString);
+    if (!ALLOWED_PROTOCOLS.includes(url.protocol)) {
+      return {
+        isValid: false,
+        error: `Invalid protocol: ${url.protocol}. Only HTTP and HTTPS are allowed.`
+      };
+    }
+    if (url.username || url.password) {
+      return {
+        isValid: false,
+        error: "URLs with embedded credentials are not allowed."
+      };
+    }
+    const hostname = url.hostname.toLowerCase();
+    if (isBlockedHostname(hostname)) {
+      return {
+        isValid: false,
+        error: "Access to internal/localhost addresses is not allowed."
+      };
+    }
+    if (isIPAddress(hostname) && isBlockedIP(hostname)) {
+      return {
+        isValid: false,
+        error: "Access to private/internal IP addresses is not allowed."
+      };
+    }
+    const port = url.port ? parseInt(url.port, 10) : url.protocol === "https:" ? 443 : 80;
+    if (BLOCKED_PORTS.includes(port)) {
+      return {
+        isValid: false,
+        error: `Access to port ${port} is not allowed.`
+      };
+    }
+    let resolvedIP;
+    if (!isIPAddress(hostname)) {
+      try {
+        const dns = await import("node:dns");
+        const resolver = new dns.promises.Resolver();
+        const resolvedIPs = [];
+        try {
+          const aRecords = await resolver.resolve4(hostname);
+          resolvedIPs.push(...aRecords);
+        } catch {
+        }
+        try {
+          const aaaaRecords = await resolver.resolve6(hostname);
+          resolvedIPs.push(...aaaaRecords);
+        } catch {
+        }
+        if (resolvedIPs.length === 0) {
+          return {
+            isValid: false,
+            error: "DNS resolution failed: hostname did not resolve to any address."
+          };
+        }
+        for (const ip of resolvedIPs) {
+          if (isBlockedIP(ip)) {
+            return {
+              isValid: false,
+              error: "Hostname resolves to a private/internal IP address."
+            };
+          }
+        }
+        resolvedIP = resolvedIPs[0];
+      } catch {
+        return {
+          isValid: false,
+          error: "DNS resolution failed. Cannot verify hostname safety."
+        };
+      }
+    }
+    return { isValid: true, sanitizedUrl: url.toString(), resolvedIP };
+  } catch (error) {
+    return {
+      isValid: false,
+      error: `Invalid URL format: ${error instanceof Error ? error.message : "Unknown error"}`
+    };
+  }
+}
+
+// src/tools/brand.ts
+init_version();
 function asEnvelope4(data) {
   return {
     _meta: {
-      version: "0.2.0",
+      version: MCP_VERSION,
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     },
     data
@@ -6819,6 +7225,15 @@ function registerBrandTools(server2) {
       response_format: z5.enum(["text", "json"]).optional().describe("Optional response format. Defaults to text.")
     },
     async ({ url, response_format }) => {
+      const ssrfCheck = await validateUrlForSSRF(url);
+      if (!ssrfCheck.isValid) {
+        return {
+          content: [
+            { type: "text", text: `URL blocked: ${ssrfCheck.error}` }
+          ],
+          isError: true
+        };
+      }
       const { data, error } = await callEdgeFunction(
         "brand-extract",
         { url },
@@ -6848,7 +7263,12 @@ function registerBrandTools(server2) {
       }
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope4(data), null, 2) }]
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope4(data), null, 2)
+            }
+          ]
         };
       }
       const lines = [
@@ -6912,7 +7332,12 @@ function registerBrandTools(server2) {
       const { data: membership } = await supabase.from("organization_members").select("organization_id").eq("user_id", userId).eq("organization_id", project.organization_id).maybeSingle();
       if (!membership) {
         return {
-          content: [{ type: "text", text: "Project is not accessible to current user." }],
+          content: [
+            {
+              type: "text",
+              text: "Project is not accessible to current user."
+            }
+          ],
           isError: true
         };
       }
@@ -6931,13 +7356,21 @@ function registerBrandTools(server2) {
       if (!data) {
         return {
           content: [
-            { type: "text", text: "No active brand profile found for this project." }
+            {
+              type: "text",
+              text: "No active brand profile found for this project."
+            }
           ]
         };
       }
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope4(data), null, 2) }]
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope4(data), null, 2)
+            }
+          ]
         };
       }
       const lines = [
@@ -6958,11 +7391,18 @@ function registerBrandTools(server2) {
     "Persist a brand profile as the active profile for a project.",
     {
       project_id: z5.string().uuid().optional().describe("Project ID. Defaults to active project context."),
-      brand_context: z5.record(z5.string(), z5.unknown()).describe("Brand context payload to save to brand_profiles.brand_context."),
+      brand_context: z5.record(z5.string(), z5.unknown()).describe(
+        "Brand context payload to save to brand_profiles.brand_context."
+      ),
       change_summary: z5.string().max(500).optional().describe("Optional summary of changes."),
       changed_paths: z5.array(z5.string()).optional().describe("Optional changed path list."),
       source_url: z5.string().url().optional().describe("Optional source URL for provenance."),
-      extraction_method: z5.enum(["manual", "url_extract", "business_profiler", "product_showcase"]).optional().describe("Extraction method metadata."),
+      extraction_method: z5.enum([
+        "manual",
+        "url_extract",
+        "business_profiler",
+        "product_showcase"
+      ]).optional().describe("Extraction method metadata."),
       overall_confidence: z5.number().min(0).max(1).optional().describe("Optional overall confidence score in range 0..1."),
       extraction_metadata: z5.record(z5.string(), z5.unknown()).optional(),
       response_format: z5.enum(["text", "json"]).optional()
@@ -7002,20 +7442,28 @@ function registerBrandTools(server2) {
       const { data: membership } = await supabase.from("organization_members").select("organization_id").eq("user_id", userId).eq("organization_id", project.organization_id).maybeSingle();
       if (!membership) {
         return {
-          content: [{ type: "text", text: "Project is not accessible to current user." }],
+          content: [
+            {
+              type: "text",
+              text: "Project is not accessible to current user."
+            }
+          ],
           isError: true
         };
       }
-      const { data: profileId, error } = await supabase.rpc("set_active_brand_profile", {
-        p_project_id: projectId,
-        p_brand_context: brand_context,
-        p_change_summary: change_summary || null,
-        p_changed_paths: changed_paths || [],
-        p_source_url: source_url || null,
-        p_extraction_method: extraction_method || "manual",
-        p_overall_confidence: overall_confidence ?? null,
-        p_extraction_metadata: extraction_metadata || null
-      });
+      const { data: profileId, error } = await supabase.rpc(
+        "set_active_brand_profile",
+        {
+          p_project_id: projectId,
+          p_brand_context: brand_context,
+          p_change_summary: change_summary || null,
+          p_changed_paths: changed_paths || [],
+          p_source_url: source_url || null,
+          p_extraction_method: extraction_method || "manual",
+          p_overall_confidence: overall_confidence ?? null,
+          p_extraction_metadata: extraction_metadata || null
+        }
+      );
       if (error) {
         return {
           content: [
@@ -7036,7 +7484,12 @@ function registerBrandTools(server2) {
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope4(payload), null, 2) }]
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope4(payload), null, 2)
+            }
+          ]
         };
       }
       return {
@@ -7092,7 +7545,10 @@ Version: ${payload.version ?? "N/A"}`
       if (!projectId) {
         return {
           content: [
-            { type: "text", text: "No project_id provided and no default project found." }
+            {
+              type: "text",
+              text: "No project_id provided and no default project found."
+            }
           ],
           isError: true
         };
@@ -7107,7 +7563,12 @@ Version: ${payload.version ?? "N/A"}`
       const { data: membership } = await supabase.from("organization_members").select("organization_id").eq("user_id", userId).eq("organization_id", project.organization_id).maybeSingle();
       if (!membership) {
         return {
-          content: [{ type: "text", text: "Project is not accessible to current user." }],
+          content: [
+            {
+              type: "text",
+              text: "Project is not accessible to current user."
+            }
+          ],
           isError: true
         };
       }
@@ -7123,7 +7584,9 @@ Version: ${payload.version ?? "N/A"}`
           isError: true
         };
       }
-      const brandContext = { ...existingProfile.brand_context };
+      const brandContext = {
+        ...existingProfile.brand_context
+      };
       const voiceProfile = brandContext.voiceProfile ?? {};
       const platformOverrides = voiceProfile.platformOverrides ?? {};
       const existingOverride = platformOverrides[platform3] ?? {};
@@ -7147,16 +7610,19 @@ Version: ${payload.version ?? "N/A"}`
         ...brandContext,
         voiceProfile: updatedVoiceProfile
       };
-      const { data: profileId, error: saveError } = await supabase.rpc("set_active_brand_profile", {
-        p_project_id: projectId,
-        p_brand_context: updatedContext,
-        p_change_summary: `Updated platform voice override for ${platform3}`,
-        p_changed_paths: [`voiceProfile.platformOverrides.${platform3}`],
-        p_source_url: null,
-        p_extraction_method: "manual",
-        p_overall_confidence: null,
-        p_extraction_metadata: null
-      });
+      const { data: profileId, error: saveError } = await supabase.rpc(
+        "set_active_brand_profile",
+        {
+          p_project_id: projectId,
+          p_brand_context: updatedContext,
+          p_change_summary: `Updated platform voice override for ${platform3}`,
+          p_changed_paths: [`voiceProfile.platformOverrides.${platform3}`],
+          p_source_url: null,
+          p_extraction_method: "manual",
+          p_overall_confidence: null,
+          p_extraction_metadata: null
+        }
+      );
       if (saveError) {
         return {
           content: [
@@ -7177,7 +7643,12 @@ Version: ${payload.version ?? "N/A"}`
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope4(payload), null, 2) }],
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope4(payload), null, 2)
+            }
+          ],
           isError: false
         };
       }
@@ -7275,155 +7746,6 @@ async function capturePageScreenshot(page, outputPath, selector) {
 // src/tools/screenshot.ts
 import { resolve, relative } from "node:path";
 import { mkdir } from "node:fs/promises";
-
-// src/lib/ssrf.ts
-var BLOCKED_IP_PATTERNS = [
-  // IPv4 localhost/loopback
-  /^127\./,
-  /^0\./,
-  // IPv4 private ranges (RFC 1918)
-  /^10\./,
-  /^172\.(1[6-9]|2[0-9]|3[0-1])\./,
-  /^192\.168\./,
-  // IPv4 link-local
-  /^169\.254\./,
-  // Cloud metadata endpoint (AWS, GCP, Azure)
-  /^169\.254\.169\.254$/,
-  // IPv4 broadcast
-  /^255\./,
-  // Shared address space (RFC 6598)
-  /^100\.(6[4-9]|[7-9][0-9]|1[0-1][0-9]|12[0-7])\./
-];
-var BLOCKED_IPV6_PATTERNS = [
-  /^::1$/i,
-  // loopback
-  /^::$/i,
-  // unspecified
-  /^fe[89ab][0-9a-f]:/i,
-  // link-local fe80::/10
-  /^fc[0-9a-f]:/i,
-  // unique local fc00::/7
-  /^fd[0-9a-f]:/i,
-  // unique local fc00::/7
-  /^::ffff:127\./i,
-  // IPv4-mapped localhost
-  /^::ffff:(0|10|127|169\.254|172\.(1[6-9]|2[0-9]|3[0-1])|192\.168)\./i
-  // IPv4-mapped private
-];
-var BLOCKED_HOSTNAMES = [
-  "localhost",
-  "localhost.localdomain",
-  "local",
-  "127.0.0.1",
-  "0.0.0.0",
-  "[::1]",
-  "[::ffff:127.0.0.1]",
-  // Cloud metadata endpoints
-  "metadata.google.internal",
-  "metadata.goog",
-  "instance-data",
-  "instance-data.ec2.internal"
-];
-var ALLOWED_PROTOCOLS = ["http:", "https:"];
-var BLOCKED_PORTS = [22, 23, 25, 110, 143, 445, 3306, 5432, 6379, 27017, 11211];
-function isBlockedIP(ip) {
-  const normalized = ip.replace(/^\[/, "").replace(/\]$/, "");
-  if (normalized.includes(":")) {
-    return BLOCKED_IPV6_PATTERNS.some((pattern) => pattern.test(normalized));
-  }
-  return BLOCKED_IP_PATTERNS.some((pattern) => pattern.test(normalized));
-}
-function isBlockedHostname(hostname) {
-  return BLOCKED_HOSTNAMES.includes(hostname.toLowerCase());
-}
-function isIPAddress(hostname) {
-  const ipv4Pattern = /^(\d{1,3}\.){3}\d{1,3}$/;
-  const ipv6Pattern = /^\[?[a-fA-F0-9:]+\]?$/;
-  return ipv4Pattern.test(hostname) || ipv6Pattern.test(hostname);
-}
-async function validateUrlForSSRF(urlString) {
-  try {
-    const url = new URL(urlString);
-    if (!ALLOWED_PROTOCOLS.includes(url.protocol)) {
-      return {
-        isValid: false,
-        error: `Invalid protocol: ${url.protocol}. Only HTTP and HTTPS are allowed.`
-      };
-    }
-    if (url.username || url.password) {
-      return {
-        isValid: false,
-        error: "URLs with embedded credentials are not allowed."
-      };
-    }
-    const hostname = url.hostname.toLowerCase();
-    if (isBlockedHostname(hostname)) {
-      return {
-        isValid: false,
-        error: "Access to internal/localhost addresses is not allowed."
-      };
-    }
-    if (isIPAddress(hostname) && isBlockedIP(hostname)) {
-      return {
-        isValid: false,
-        error: "Access to private/internal IP addresses is not allowed."
-      };
-    }
-    const port = url.port ? parseInt(url.port, 10) : url.protocol === "https:" ? 443 : 80;
-    if (BLOCKED_PORTS.includes(port)) {
-      return {
-        isValid: false,
-        error: `Access to port ${port} is not allowed.`
-      };
-    }
-    let resolvedIP;
-    if (!isIPAddress(hostname)) {
-      try {
-        const dns = await import("node:dns");
-        const resolver = new dns.promises.Resolver();
-        const resolvedIPs = [];
-        try {
-          const aRecords = await resolver.resolve4(hostname);
-          resolvedIPs.push(...aRecords);
-        } catch {
-        }
-        try {
-          const aaaaRecords = await resolver.resolve6(hostname);
-          resolvedIPs.push(...aaaaRecords);
-        } catch {
-        }
-        if (resolvedIPs.length === 0) {
-          return {
-            isValid: false,
-            error: "DNS resolution failed: hostname did not resolve to any address."
-          };
-        }
-        for (const ip of resolvedIPs) {
-          if (isBlockedIP(ip)) {
-            return {
-              isValid: false,
-              error: "Hostname resolves to a private/internal IP address."
-            };
-          }
-        }
-        resolvedIP = resolvedIPs[0];
-      } catch {
-        return {
-          isValid: false,
-          error: "DNS resolution failed. Cannot verify hostname safety."
-        };
-      }
-    }
-    return { isValid: true, sanitizedUrl: url.toString(), resolvedIP };
-  } catch (error) {
-    return {
-      isValid: false,
-      error: `Invalid URL format: ${error instanceof Error ? error.message : "Unknown error"}`
-    };
-  }
-}
-
-// src/tools/screenshot.ts
 init_supabase();
 function registerScreenshotTools(server2) {
   server2.tool(
@@ -7999,6 +8321,8 @@ function registerRemotionTools(server2) {
 // src/tools/insights.ts
 init_supabase();
 import { z as z8 } from "zod";
+init_version();
+var MAX_INSIGHT_AGE_DAYS = 30;
 var PLATFORM_ENUM = [
   "youtube",
   "tiktok",
@@ -8009,11 +8333,19 @@ var PLATFORM_ENUM = [
   "threads",
   "bluesky"
 ];
-var DAY_NAMES = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"];
+var DAY_NAMES = [
+  "Sunday",
+  "Monday",
+  "Tuesday",
+  "Wednesday",
+  "Thursday",
+  "Friday",
+  "Saturday"
+];
 function asEnvelope5(data) {
   return {
     _meta: {
-      version: "0.2.0",
+      version: MCP_VERSION,
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     },
     data
@@ -8024,7 +8356,12 @@ function registerInsightsTools(server2) {
     "get_performance_insights",
     "Query performance insights derived from post analytics. Returns metrics like engagement rate, view velocity, and click rate aggregated over time. Use this to understand what content is performing well.",
     {
-      insight_type: z8.enum(["top_hooks", "optimal_timing", "best_models", "competitor_patterns"]).optional().describe("Filter to a specific insight type."),
+      insight_type: z8.enum([
+        "top_hooks",
+        "optimal_timing",
+        "best_models",
+        "competitor_patterns"
+      ]).optional().describe("Filter to a specific insight type."),
       days: z8.number().min(1).max(90).optional().describe("Number of days to look back. Defaults to 30. Max 90."),
       limit: z8.number().min(1).max(50).optional().describe("Maximum number of insights to return. Defaults to 10."),
       response_format: z8.enum(["text", "json"]).optional().describe("Optional response format. Defaults to text.")
@@ -8043,10 +8380,13 @@ function registerInsightsTools(server2) {
           projectIds.push(...projects.map((p) => p.id));
         }
       }
+      const effectiveDays = Math.min(lookbackDays, MAX_INSIGHT_AGE_DAYS);
       const since = /* @__PURE__ */ new Date();
-      since.setDate(since.getDate() - lookbackDays);
+      since.setDate(since.getDate() - effectiveDays);
       const sinceIso = since.toISOString();
-      let query = supabase.from("performance_insights").select("id, project_id, insight_type, insight_data, confidence_score, generated_at").gte("generated_at", sinceIso).order("generated_at", { ascending: false }).limit(maxRows);
+      let query = supabase.from("performance_insights").select(
+        "id, project_id, insight_type, insight_data, confidence_score, generated_at"
+      ).gte("generated_at", sinceIso).order("generated_at", { ascending: false }).limit(maxRows);
       if (projectIds.length > 0) {
         query = query.in("project_id", projectIds);
       } else {
@@ -8402,10 +8742,11 @@ function registerYouTubeAnalyticsTools(server2) {
 init_edge_function();
 import { z as z10 } from "zod";
 init_supabase();
+init_version();
 function asEnvelope6(data) {
   return {
     _meta: {
-      version: "0.2.0",
+      version: MCP_VERSION,
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     },
     data
@@ -8416,7 +8757,9 @@ function registerCommentsTools(server2) {
     "list_comments",
     "List YouTube comments. Without a video_id, returns recent comments across all channel videos. With a video_id, returns comments for that specific video.",
     {
-      video_id: z10.string().optional().describe("YouTube video ID. If omitted, returns comments across all channel videos."),
+      video_id: z10.string().optional().describe(
+        "YouTube video ID. If omitted, returns comments across all channel videos."
+      ),
       max_results: z10.number().min(1).max(100).optional().describe("Maximum number of comments to return. Defaults to 50."),
       page_token: z10.string().optional().describe("Pagination token from a previous list_comments call."),
       response_format: z10.enum(["text", "json"]).optional().describe("Optional response format. Defaults to text.")
@@ -8431,7 +8774,9 @@ function registerCommentsTools(server2) {
       });
       if (error) {
         return {
-          content: [{ type: "text", text: `Error listing comments: ${error}` }],
+          content: [
+            { type: "text", text: `Error listing comments: ${error}` }
+          ],
           isError: true
         };
       }
@@ -8443,7 +8788,10 @@ function registerCommentsTools(server2) {
             {
               type: "text",
               text: JSON.stringify(
-                asEnvelope6({ comments, nextPageToken: result.nextPageToken ?? null }),
+                asEnvelope6({
+                  comments,
+                  nextPageToken: result.nextPageToken ?? null
+                }),
                 null,
                 2
               )
@@ -8480,7 +8828,9 @@ function registerCommentsTools(server2) {
     "reply_to_comment",
     "Reply to a YouTube comment. Requires the parent comment ID and reply text.",
     {
-      parent_id: z10.string().describe("The ID of the parent comment to reply to (from list_comments)."),
+      parent_id: z10.string().describe(
+        "The ID of the parent comment to reply to (from list_comments)."
+      ),
       text: z10.string().min(1).describe("The reply text."),
       response_format: z10.enum(["text", "json"]).optional().describe("Optional response format. Defaults to text.")
     },
@@ -8519,7 +8869,12 @@ function registerCommentsTools(server2) {
           details: { error }
         });
         return {
-          content: [{ type: "text", text: `Error replying to comment: ${error}` }],
+          content: [
+            {
+              type: "text",
+              text: `Error replying to comment: ${error}`
+            }
+          ],
           isError: true
         };
       }
@@ -8532,7 +8887,12 @@ function registerCommentsTools(server2) {
       });
       if (format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope6(result), null, 2) }]
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope6(result), null, 2)
+            }
+          ]
         };
       }
       return {
@@ -8590,7 +8950,9 @@ function registerCommentsTools(server2) {
           details: { error }
         });
         return {
-          content: [{ type: "text", text: `Error posting comment: ${error}` }],
+          content: [
+            { type: "text", text: `Error posting comment: ${error}` }
+          ],
           isError: true
         };
       }
@@ -8603,7 +8965,12 @@ function registerCommentsTools(server2) {
       });
       if (format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope6(result), null, 2) }]
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope6(result), null, 2)
+            }
+          ]
         };
       }
       return {
@@ -8661,7 +9028,12 @@ function registerCommentsTools(server2) {
           details: { error }
         });
         return {
-          content: [{ type: "text", text: `Error moderating comment: ${error}` }],
+          content: [
+            {
+              type: "text",
+              text: `Error moderating comment: ${error}`
+            }
+          ],
           isError: true
         };
       }
@@ -8740,7 +9112,9 @@ function registerCommentsTools(server2) {
           details: { error }
         });
         return {
-          content: [{ type: "text", text: `Error deleting comment: ${error}` }],
+          content: [
+            { type: "text", text: `Error deleting comment: ${error}` }
+          ],
           isError: true
         };
       }
@@ -8755,13 +9129,22 @@ function registerCommentsTools(server2) {
           content: [
             {
               type: "text",
-              text: JSON.stringify(asEnvelope6({ success: true, commentId: comment_id }), null, 2)
+              text: JSON.stringify(
+                asEnvelope6({ success: true, commentId: comment_id }),
+                null,
+                2
+              )
             }
           ]
         };
       }
       return {
-        content: [{ type: "text", text: `Comment ${comment_id} deleted successfully.` }]
+        content: [
+          {
+            type: "text",
+            text: `Comment ${comment_id} deleted successfully.`
+          }
+        ]
       };
     }
   );
@@ -8770,6 +9153,7 @@ function registerCommentsTools(server2) {
 // src/tools/ideation-context.ts
 init_supabase();
 import { z as z11 } from "zod";
+init_version();
 function transformInsightsToPerformanceContext(projectId, insights) {
   if (!insights.length) {
     return {
@@ -8789,8 +9173,12 @@ function transformInsightsToPerformanceContext(projectId, insights) {
     };
   }
   const topHooksInsight = insights.find((i) => i.insight_type === "top_hooks");
-  const optimalTimingInsight = insights.find((i) => i.insight_type === "optimal_timing");
-  const bestModelsInsight = insights.find((i) => i.insight_type === "best_models");
+  const optimalTimingInsight = insights.find(
+    (i) => i.insight_type === "optimal_timing"
+  );
+  const bestModelsInsight = insights.find(
+    (i) => i.insight_type === "best_models"
+  );
   const topHooks = topHooksInsight?.insight_data?.hooks || [];
   const hooksSummary = topHooksInsight?.insight_data?.summary || "";
   const timingSummary = optimalTimingInsight?.insight_data?.summary || "";
@@ -8801,7 +9189,10 @@ function transformInsightsToPerformanceContext(projectId, insights) {
   if (hooksSummary) promptParts.push(hooksSummary);
   if (timingSummary) promptParts.push(timingSummary);
   if (modelSummary) promptParts.push(modelSummary);
-  if (topHooks.length) promptParts.push(`Top performing hooks: ${topHooks.slice(0, 3).join(", ")}`);
+  if (topHooks.length)
+    promptParts.push(
+      `Top performing hooks: ${topHooks.slice(0, 3).join(", ")}`
+    );
   return {
     projectId,
     hasHistoricalData: true,
@@ -8827,7 +9218,7 @@ function transformInsightsToPerformanceContext(projectId, insights) {
 function asEnvelope7(data) {
   return {
     _meta: {
-      version: "0.2.0",
+      version: MCP_VERSION,
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     },
     data
@@ -8850,7 +9241,12 @@ function registerIdeationContextTools(server2) {
       const { data: member } = await supabase.from("organization_members").select("organization_id").eq("user_id", userId).limit(1).single();
       if (!member?.organization_id) {
         return {
-          content: [{ type: "text", text: "No organization found for current user." }],
+          content: [
+            {
+              type: "text",
+              text: "No organization found for current user."
+            }
+          ],
           isError: true
         };
       }
@@ -8858,7 +9254,10 @@ function registerIdeationContextTools(server2) {
       if (projectsError) {
         return {
           content: [
-            { type: "text", text: `Failed to resolve projects: ${projectsError.message}` }
+            {
+              type: "text",
+              text: `Failed to resolve projects: ${projectsError.message}`
+            }
           ],
           isError: true
         };
@@ -8866,7 +9265,12 @@ function registerIdeationContextTools(server2) {
       const projectIds = (projects || []).map((p) => p.id);
       if (projectIds.length === 0) {
         return {
-          content: [{ type: "text", text: "No projects found for current user." }],
+          content: [
+            {
+              type: "text",
+              text: "No projects found for current user."
+            }
+          ],
           isError: true
         };
       }
@@ -8875,7 +9279,10 @@ function registerIdeationContextTools(server2) {
       if (!selectedProjectId) {
         return {
           content: [
-            { type: "text", text: "No accessible project found for current user." }
+            {
+              type: "text",
+              text: "No accessible project found for current user."
+            }
           ],
           isError: true
         };
@@ -8893,7 +9300,9 @@ function registerIdeationContextTools(server2) {
       }
       const since = /* @__PURE__ */ new Date();
       since.setDate(since.getDate() - lookbackDays);
-      const { data: insights, error } = await supabase.from("performance_insights").select("id, project_id, insight_type, insight_data, generated_at, expires_at").eq("project_id", selectedProjectId).gte("generated_at", since.toISOString()).gt("expires_at", (/* @__PURE__ */ new Date()).toISOString()).order("generated_at", { ascending: false }).limit(30);
+      const { data: insights, error } = await supabase.from("performance_insights").select(
+        "id, project_id, insight_type, insight_data, generated_at, expires_at"
+      ).eq("project_id", selectedProjectId).gte("generated_at", since.toISOString()).gt("expires_at", (/* @__PURE__ */ new Date()).toISOString()).order("generated_at", { ascending: false }).limit(30);
       if (error) {
         return {
           content: [
@@ -8911,7 +9320,12 @@ function registerIdeationContextTools(server2) {
       );
       if (format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope7(context), null, 2) }]
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope7(context), null, 2)
+            }
+          ]
         };
       }
       const lines = [
@@ -8932,10 +9346,11 @@ function registerIdeationContextTools(server2) {
 // src/tools/credits.ts
 init_supabase();
 import { z as z12 } from "zod";
+init_version();
 function asEnvelope8(data) {
   return {
     _meta: {
-      version: "0.2.0",
+      version: MCP_VERSION,
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     },
     data
@@ -8974,7 +9389,12 @@ function registerCreditsTools(server2) {
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope8(payload), null, 2) }]
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope8(payload), null, 2)
+            }
+          ]
         };
       }
       return {
@@ -9008,7 +9428,12 @@ Monthly used: ${payload.monthlyUsed}` + (payload.monthlyLimit ? ` / ${payload.mo
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope8(payload), null, 2) }]
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope8(payload), null, 2)
+            }
+          ]
         };
       }
       return {
@@ -9031,11 +9456,12 @@ Assets remaining: ${payload.remainingAssets ?? "unlimited"}`
 
 // src/tools/loop-summary.ts
 init_supabase();
+init_version();
 import { z as z13 } from "zod";
 function asEnvelope9(data) {
   return {
     _meta: {
-      version: "0.2.0",
+      version: MCP_VERSION,
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     },
     data
@@ -9074,7 +9500,12 @@ function registerLoopSummaryTools(server2) {
       const { data: membership } = await supabase.from("organization_members").select("organization_id").eq("user_id", userId).eq("organization_id", project.organization_id).maybeSingle();
       if (!membership) {
         return {
-          content: [{ type: "text", text: "Project is not accessible to current user." }],
+          content: [
+            {
+              type: "text",
+              text: "Project is not accessible to current user."
+            }
+          ],
           isError: true
         };
       }
@@ -9097,7 +9528,12 @@ function registerLoopSummaryTools(server2) {
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope9(payload), null, 2) }]
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope9(payload), null, 2)
+            }
+          ]
         };
       }
       return {
@@ -9427,8 +9863,12 @@ ${"=".repeat(40)}
 init_edge_function();
 init_supabase();
 import { z as z16 } from "zod";
+init_version();
 function asEnvelope12(data) {
-  return { _meta: { version: "0.2.0", timestamp: (/* @__PURE__ */ new Date()).toISOString() }, data };
+  return {
+    _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() },
+    data
+  };
 }
 function isYouTubeUrl(url) {
   if (/youtube\.com\/watch|youtu\.be\//.test(url)) return "video";
@@ -9459,13 +9899,17 @@ Metadata:`);
     if (m.tags?.length) lines.push(`  Tags: ${m.tags.join(", ")}`);
   }
   if (content.features?.length)
-    lines.push(`
+    lines.push(
+      `
 Features:
-${content.features.map((f) => `  - ${f}`).join("\n")}`);
+${content.features.map((f) => `  - ${f}`).join("\n")}`
+    );
   if (content.benefits?.length)
-    lines.push(`
+    lines.push(
+      `
 Benefits:
-${content.benefits.map((b) => `  - ${b}`).join("\n")}`);
+${content.benefits.map((b) => `  - ${b}`).join("\n")}`
+    );
   if (content.usp) lines.push(`
 USP: ${content.usp}`);
   if (content.suggested_hooks?.length)
@@ -9487,12 +9931,20 @@ function registerExtractionTools(server2) {
       max_results: z16.number().min(1).max(100).default(10).describe("Max comments to include"),
       response_format: z16.enum(["text", "json"]).default("text")
     },
-    async ({ url, extract_type, include_comments, max_results, response_format }) => {
+    async ({
+      url,
+      extract_type,
+      include_comments,
+      max_results,
+      response_format
+    }) => {
       const startedAt = Date.now();
       const ssrfCheck = await validateUrlForSSRF(url);
       if (!ssrfCheck.isValid) {
         return {
-          content: [{ type: "text", text: `URL blocked: ${ssrfCheck.error}` }],
+          content: [
+            { type: "text", text: `URL blocked: ${ssrfCheck.error}` }
+          ],
           isError: true
         };
       }
@@ -9620,13 +10072,21 @@ function registerExtractionTools(server2) {
         if (response_format === "json") {
           return {
             content: [
-              { type: "text", text: JSON.stringify(asEnvelope12(extracted), null, 2) }
+              {
+                type: "text",
+                text: JSON.stringify(asEnvelope12(extracted), null, 2)
+              }
             ],
             isError: false
           };
         }
         return {
-          content: [{ type: "text", text: formatExtractedContentAsText(extracted) }],
+          content: [
+            {
+              type: "text",
+              text: formatExtractedContentAsText(extracted)
+            }
+          ],
           isError: false
         };
       } catch (err) {
@@ -9639,7 +10099,9 @@ function registerExtractionTools(server2) {
           details: { url, error: message }
         });
         return {
-          content: [{ type: "text", text: `Extraction failed: ${message}` }],
+          content: [
+            { type: "text", text: `Extraction failed: ${message}` }
+          ],
           isError: true
         };
       }
@@ -9650,9 +10112,13 @@ function registerExtractionTools(server2) {
 // src/tools/quality.ts
 init_quality();
 init_supabase();
+init_version();
 import { z as z17 } from "zod";
 function asEnvelope13(data) {
-  return { _meta: { version: "0.2.0", timestamp: (/* @__PURE__ */ new Date()).toISOString() }, data };
+  return {
+    _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() },
+    data
+  };
 }
 function registerQualityTools(server2) {
   server2.tool(
@@ -9708,7 +10174,12 @@ function registerQualityTools(server2) {
       });
       if (response_format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope13(result), null, 2) }],
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope13(result), null, 2)
+            }
+          ],
           isError: false
         };
       }
@@ -9718,7 +10189,9 @@ function registerQualityTools(server2) {
       );
       lines.push("");
       for (const cat of result.categories) {
-        lines.push(`  ${cat.name}: ${cat.score}/${cat.maxScore} \u2014 ${cat.detail}`);
+        lines.push(
+          `  ${cat.name}: ${cat.score}/${cat.maxScore} \u2014 ${cat.detail}`
+        );
       }
       if (result.blockers.length > 0) {
         lines.push("");
@@ -9729,7 +10202,10 @@ function registerQualityTools(server2) {
       }
       lines.push("");
       lines.push(`Threshold: ${result.threshold}/${result.maxTotal}`);
-      return { content: [{ type: "text", text: lines.join("\n") }], isError: false };
+      return {
+        content: [{ type: "text", text: lines.join("\n") }],
+        isError: false
+      };
     }
   );
   server2.tool(
@@ -9770,7 +10246,9 @@ function registerQualityTools(server2) {
       });
       const scores = postsWithQuality.map((p) => p.quality.score);
       const passed = postsWithQuality.filter((p) => p.quality.passed).length;
-      const avgScore = scores.length > 0 ? Math.round(scores.reduce((a, b) => a + b, 0) / scores.length * 10) / 10 : 0;
+      const avgScore = scores.length > 0 ? Math.round(
+        scores.reduce((a, b) => a + b, 0) / scores.length * 10
+      ) / 10 : 0;
       const summary = {
         total_posts: plan.posts.length,
         passed,
@@ -9789,25 +10267,36 @@ function registerQualityTools(server2) {
           content: [
             {
               type: "text",
-              text: JSON.stringify(asEnvelope13({ posts: postsWithQuality, summary }), null, 2)
+              text: JSON.stringify(
+                asEnvelope13({ posts: postsWithQuality, summary }),
+                null,
+                2
+              )
             }
           ],
           isError: false
         };
       }
       const lines = [];
-      lines.push(`PLAN QUALITY: ${passed}/${plan.posts.length} passed (avg: ${avgScore}/35)`);
+      lines.push(
+        `PLAN QUALITY: ${passed}/${plan.posts.length} passed (avg: ${avgScore}/35)`
+      );
       lines.push("");
       for (const post of postsWithQuality) {
         const icon = post.quality.passed ? "[PASS]" : "[FAIL]";
-        lines.push(`${icon} ${post.id} | ${post.platform} | ${post.quality.score}/35`);
+        lines.push(
+          `${icon} ${post.id} | ${post.platform} | ${post.quality.score}/35`
+        );
         if (post.quality.blockers.length > 0) {
           for (const b of post.quality.blockers) {
             lines.push(`       - ${b}`);
           }
         }
       }
-      return { content: [{ type: "text", text: lines.join("\n") }], isError: false };
+      return {
+        content: [{ type: "text", text: lines.join("\n") }],
+        isError: false
+      };
     }
   );
 }
@@ -9817,11 +10306,15 @@ init_edge_function();
 init_supabase();
 import { z as z18 } from "zod";
 import { randomUUID as randomUUID2 } from "node:crypto";
+init_version();
 function toRecord(value) {
   return value && typeof value === "object" ? value : void 0;
 }
 function asEnvelope14(data) {
-  return { _meta: { version: "0.2.0", timestamp: (/* @__PURE__ */ new Date()).toISOString() }, data };
+  return {
+    _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() },
+    data
+  };
 }
 function tomorrowIsoDate() {
   const d = /* @__PURE__ */ new Date();
@@ -9859,7 +10352,9 @@ function formatPlanAsText(plan) {
   lines.push(`WEEKLY CONTENT PLAN: "${plan.topic}"`);
   lines.push(`Period: ${plan.start_date} to ${plan.end_date}`);
   lines.push(`Platforms: ${plan.platforms.join(", ")}`);
-  lines.push(`Posts: ${plan.posts.length} | Estimated credits: ~${plan.estimated_credits}`);
+  lines.push(
+    `Posts: ${plan.posts.length} | Estimated credits: ~${plan.estimated_credits}`
+  );
   if (plan.plan_id) lines.push(`Plan ID: ${plan.plan_id}`);
   if (plan.insights_applied?.has_historical_data) {
     lines.push("");
@@ -9874,7 +10369,9 @@ function formatPlanAsText(plan) {
         `- Best posting time: ${days[timing.dayOfWeek] ?? timing.dayOfWeek} ${timing.hourOfDay}:00`
       );
     }
-    lines.push(`- Recommended model: ${plan.insights_applied.recommended_model ?? "N/A"}`);
+    lines.push(
+      `- Recommended model: ${plan.insights_applied.recommended_model ?? "N/A"}`
+    );
     lines.push(`- Insights count: ${plan.insights_applied.insights_count}`);
   }
   lines.push("");
@@ -9895,9 +10392,11 @@ function formatPlanAsText(plan) {
         `  Caption: ${post.caption.slice(0, 200)}${post.caption.length > 200 ? "..." : ""}`
       );
       if (post.title) lines.push(`  Title: ${post.title}`);
-      if (post.visual_direction) lines.push(`  Visual: ${post.visual_direction}`);
+      if (post.visual_direction)
+        lines.push(`  Visual: ${post.visual_direction}`);
       if (post.media_type) lines.push(`  Media: ${post.media_type}`);
-      if (post.hashtags?.length) lines.push(`  Hashtags: ${post.hashtags.join(" ")}`);
+      if (post.hashtags?.length)
+        lines.push(`  Hashtags: ${post.hashtags.join(" ")}`);
       lines.push("");
     }
   }
@@ -9980,7 +10479,10 @@ function registerPlanningTools(server2) {
               "mcp-data",
               {
                 action: "brand-profile",
-                ...resolvedProjectId ? { projectId: resolvedProjectId, project_id: resolvedProjectId } : {}
+                ...resolvedProjectId ? {
+                  projectId: resolvedProjectId,
+                  project_id: resolvedProjectId
+                } : {}
               },
               { timeoutMs: 15e3 }
             );
@@ -10184,7 +10686,12 @@ ${rawText.slice(0, 1e3)}`
               details: { topic, error: `plan persistence failed: ${message}` }
             });
             return {
-              content: [{ type: "text", text: `Plan persistence failed: ${message}` }],
+              content: [
+                {
+                  type: "text",
+                  text: `Plan persistence failed: ${message}`
+                }
+              ],
               isError: true
             };
           }
@@ -10198,7 +10705,12 @@ ${rawText.slice(0, 1e3)}`
         });
         if (response_format === "json") {
           return {
-            content: [{ type: "text", text: JSON.stringify(asEnvelope14(plan), null, 2) }],
+            content: [
+              {
+                type: "text",
+                text: JSON.stringify(asEnvelope14(plan), null, 2)
+              }
+            ],
             isError: false
           };
         }
@@ -10216,7 +10728,12 @@ ${rawText.slice(0, 1e3)}`
           details: { topic, error: message }
         });
         return {
-          content: [{ type: "text", text: `Plan generation failed: ${message}` }],
+          content: [
+            {
+              type: "text",
+              text: `Plan generation failed: ${message}`
+            }
+          ],
           isError: true
         };
       }
@@ -10276,7 +10793,11 @@ ${rawText.slice(0, 1e3)}`
           toolName: "save_content_plan",
           status: "success",
           durationMs,
-          details: { plan_id: planId, project_id: resolvedProjectId, status: normalizedStatus }
+          details: {
+            plan_id: planId,
+            project_id: resolvedProjectId,
+            status: normalizedStatus
+          }
         });
         const result = {
           plan_id: planId,
@@ -10285,13 +10806,21 @@ ${rawText.slice(0, 1e3)}`
         };
         if (response_format === "json") {
           return {
-            content: [{ type: "text", text: JSON.stringify(asEnvelope14(result), null, 2) }],
+            content: [
+              {
+                type: "text",
+                text: JSON.stringify(asEnvelope14(result), null, 2)
+              }
+            ],
             isError: false
           };
         }
         return {
           content: [
-            { type: "text", text: `Saved content plan ${planId} (${normalizedStatus}).` }
+            {
+              type: "text",
+              text: `Saved content plan ${planId} (${normalizedStatus}).`
+            }
           ],
           isError: false
         };
@@ -10305,7 +10834,12 @@ ${rawText.slice(0, 1e3)}`
           details: { error: message }
         });
         return {
-          content: [{ type: "text", text: `Failed to save content plan: ${message}` }],
+          content: [
+            {
+              type: "text",
+              text: `Failed to save content plan: ${message}`
+            }
+          ],
           isError: true
         };
       }
@@ -10321,7 +10855,9 @@ ${rawText.slice(0, 1e3)}`
     async ({ plan_id, response_format }) => {
       const supabase = getSupabaseClient();
       const userId = await getDefaultUserId();
-      const { data, error } = await supabase.from("content_plans").select("id, topic, status, plan_payload, insights_applied, created_at, updated_at").eq("id", plan_id).eq("user_id", userId).maybeSingle();
+      const { data, error } = await supabase.from("content_plans").select(
+        "id, topic, status, plan_payload, insights_applied, created_at, updated_at"
+      ).eq("id", plan_id).eq("user_id", userId).maybeSingle();
       if (error) {
         return {
           content: [
@@ -10336,7 +10872,10 @@ ${rawText.slice(0, 1e3)}`
       if (!data) {
         return {
           content: [
-            { type: "text", text: `No content plan found for plan_id=${plan_id}` }
+            {
+              type: "text",
+              text: `No content plan found for plan_id=${plan_id}`
+            }
           ],
           isError: true
         };
@@ -10352,7 +10891,12 @@ ${rawText.slice(0, 1e3)}`
       };
       if (response_format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope14(payload), null, 2) }],
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope14(payload), null, 2)
+            }
+          ],
           isError: false
         };
       }
@@ -10363,7 +10907,10 @@ ${rawText.slice(0, 1e3)}`
         `Status: ${data.status}`,
         `Posts: ${Array.isArray(plan?.posts) ? plan.posts.length : 0}`
       ];
-      return { content: [{ type: "text", text: lines.join("\n") }], isError: false };
+      return {
+        content: [{ type: "text", text: lines.join("\n") }],
+        isError: false
+      };
     }
   );
   server2.tool(
@@ -10406,14 +10953,19 @@ ${rawText.slice(0, 1e3)}`
       if (!stored?.plan_payload) {
         return {
           content: [
-            { type: "text", text: `No content plan found for plan_id=${plan_id}` }
+            {
+              type: "text",
+              text: `No content plan found for plan_id=${plan_id}`
+            }
           ],
           isError: true
         };
       }
       const plan = stored.plan_payload;
       const existingPosts = Array.isArray(plan.posts) ? plan.posts : [];
-      const updatesById = new Map(post_updates.map((update) => [update.post_id, update]));
+      const updatesById = new Map(
+        post_updates.map((update) => [update.post_id, update])
+      );
       const updatedPosts = existingPosts.map((post) => {
         const update = updatesById.get(post.id);
         if (!update) return post;
@@ -10431,7 +10983,9 @@ ${rawText.slice(0, 1e3)}`
           ...update.status !== void 0 ? { status: update.status } : {}
         };
       });
-      const nextStatus = updatedPosts.length > 0 && updatedPosts.every((post) => post.status === "approved" || post.status === "edited") ? "approved" : stored.status === "scheduled" || stored.status === "completed" ? stored.status : "draft";
+      const nextStatus = updatedPosts.length > 0 && updatedPosts.every(
+        (post) => post.status === "approved" || post.status === "edited"
+      ) ? "approved" : stored.status === "scheduled" || stored.status === "completed" ? stored.status : "draft";
       const updatedPlan = {
         ...plan,
         posts: updatedPosts
@@ -10458,7 +11012,12 @@ ${rawText.slice(0, 1e3)}`
       };
       if (response_format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope14(payload), null, 2) }],
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope14(payload), null, 2)
+            }
+          ],
           isError: false
         };
       }
@@ -10498,7 +11057,10 @@ ${rawText.slice(0, 1e3)}`
       if (!stored?.plan_payload || !stored.project_id) {
         return {
           content: [
-            { type: "text", text: `No content plan found for plan_id=${plan_id}` }
+            {
+              type: "text",
+              text: `No content plan found for plan_id=${plan_id}`
+            }
           ],
           isError: true
         };
@@ -10507,7 +11069,12 @@ ${rawText.slice(0, 1e3)}`
       const posts = Array.isArray(plan.posts) ? plan.posts : [];
       if (posts.length === 0) {
         return {
-          content: [{ type: "text", text: `Plan ${plan_id} has no posts to submit.` }],
+          content: [
+            {
+              type: "text",
+              text: `Plan ${plan_id} has no posts to submit.`
+            }
+          ],
           isError: true
         };
       }
@@ -10550,7 +11117,12 @@ ${rawText.slice(0, 1e3)}`
       };
       if (response_format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope14(payload), null, 2) }],
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope14(payload), null, 2)
+            }
+          ],
           isError: false
         };
       }
@@ -10570,10 +11142,11 @@ ${rawText.slice(0, 1e3)}`
 // src/tools/plan-approvals.ts
 init_supabase();
 import { z as z19 } from "zod";
+init_version();
 function asEnvelope15(data) {
   return {
     _meta: {
-      version: "0.2.0",
+      version: MCP_VERSION,
       timestamp: (/* @__PURE__ */ new Date()).toISOString()
     },
     data
@@ -10612,14 +11185,24 @@ function registerPlanApprovalTools(server2) {
       if (!projectId) {
         return {
           content: [
-            { type: "text", text: "No project_id provided and no default project found." }
+            {
+              type: "text",
+              text: "No project_id provided and no default project found."
+            }
           ],
           isError: true
         };
       }
-      const accessError = await assertProjectAccess(supabase, userId, projectId);
+      const accessError = await assertProjectAccess(
+        supabase,
+        userId,
+        projectId
+      );
       if (accessError) {
-        return { content: [{ type: "text", text: accessError }], isError: true };
+        return {
+          content: [{ type: "text", text: accessError }],
+          isError: true
+        };
       }
       const rows = posts.map((post) => ({
         plan_id,
@@ -10648,7 +11231,12 @@ function registerPlanApprovalTools(server2) {
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope15(payload), null, 2) }],
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope15(payload), null, 2)
+            }
+          ],
           isError: false
         };
       }
@@ -10697,14 +11285,22 @@ function registerPlanApprovalTools(server2) {
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope15(payload), null, 2) }],
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope15(payload), null, 2)
+            }
+          ],
           isError: false
         };
       }
       if (!data || data.length === 0) {
         return {
           content: [
-            { type: "text", text: `No approval items found for plan ${plan_id}.` }
+            {
+              type: "text",
+              text: `No approval items found for plan ${plan_id}.`
+            }
           ],
           isError: false
         };
@@ -10717,7 +11313,10 @@ function registerPlanApprovalTools(server2) {
       }
       lines.push("");
       lines.push(`Total: ${data.length}`);
-      return { content: [{ type: "text", text: lines.join("\n") }], isError: false };
+      return {
+        content: [{ type: "text", text: lines.join("\n") }],
+        isError: false
+      };
     }
   );
   server2.tool(
@@ -10736,7 +11335,10 @@ function registerPlanApprovalTools(server2) {
       if (decision === "edited" && !edited_post) {
         return {
           content: [
-            { type: "text", text: 'edited_post is required when decision is "edited".' }
+            {
+              type: "text",
+              text: 'edited_post is required when decision is "edited".'
+            }
           ],
           isError: true
         };
@@ -10749,7 +11351,9 @@ function registerPlanApprovalTools(server2) {
       if (decision === "edited") {
         updates.edited_post = edited_post;
       }
-      const { data, error } = await supabase.from("content_plan_approvals").update(updates).eq("id", approval_id).eq("user_id", userId).eq("status", "pending").select("id, plan_id, post_id, status, reason, decided_at, original_post, edited_post").maybeSingle();
+      const { data, error } = await supabase.from("content_plan_approvals").update(updates).eq("id", approval_id).eq("user_id", userId).eq("status", "pending").select(
+        "id, plan_id, post_id, status, reason, decided_at, original_post, edited_post"
+      ).maybeSingle();
       if (error) {
         return {
           content: [
@@ -10774,7 +11378,12 @@ function registerPlanApprovalTools(server2) {
       }
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope15(data), null, 2) }],
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope15(data), null, 2)
+            }
+          ],
           isError: false
         };
       }
@@ -10914,16 +11523,40 @@ function registerAllTools(server2, options) {
 init_posthog();
 init_supabase();
 init_sn();
+function flushAndExit(code) {
+  const done = { out: false, err: false };
+  const tryExit = () => {
+    if (done.out && done.err) process.exit(code);
+  };
+  if (process.stdout.writableFinished) {
+    done.out = true;
+  } else {
+    process.stdout.end(() => {
+      done.out = true;
+      tryExit();
+    });
+  }
+  if (process.stderr.writableFinished) {
+    done.err = true;
+  } else {
+    process.stderr.end(() => {
+      done.err = true;
+      tryExit();
+    });
+  }
+  tryExit();
+  setTimeout(() => process.exit(code), 2e3).unref();
+}
 process.on("uncaughtException", (err) => {
   process.stderr.write(`MCP server error: ${err.message}
 `);
-  process.exit(1);
+  flushAndExit(1);
 });
 process.on("unhandledRejection", (reason) => {
   const message = reason instanceof Error ? reason.message : String(reason);
   process.stderr.write(`MCP server error: ${message}
 `);
-  process.exit(1);
+  flushAndExit(1);
 });
 var command = process.argv[2];
 if (command === "--version" || command === "-v") {
@@ -10932,7 +11565,11 @@ if (command === "--version" || command === "-v") {
   const { fileURLToPath } = await import("node:url");
   let version = MCP_VERSION;
   try {
-    const pkgPath = resolve3(dirname(fileURLToPath(import.meta.url)), "..", "package.json");
+    const pkgPath = resolve3(
+      dirname(fileURLToPath(import.meta.url)),
+      "..",
+      "package.json"
+    );
     const pkg = JSON.parse(readFileSync4(pkgPath, "utf-8"));
     version = pkg.version;
   } catch {
@@ -10964,7 +11601,11 @@ if (command === "--help" || command === "-h") {
           ok: true,
           command: "help",
           commands: [
-            { name: "setup", aliases: ["login"], description: "Interactive OAuth setup" },
+            {
+              name: "setup",
+              aliases: ["login"],
+              description: "Interactive OAuth setup"
+            },
             { name: "logout", description: "Remove credentials" },
             { name: "whoami", description: "Show auth info" },
             { name: "health", description: "Check connectivity" },
@@ -11053,10 +11694,14 @@ if (command === "sn") {
   await runSnCli(process.argv.slice(3));
   process.exit(0);
 }
-if (command && !["setup", "login", "logout", "whoami", "health", "sn", "repl"].includes(command)) {
-  process.stderr.write(`Unknown command: ${command}
+if (command && !["setup", "login", "logout", "whoami", "health", "sn", "repl"].includes(
+  command
+)) {
+  process.stderr.write(
+    `Unknown command: ${command}
 Run socialneuron-mcp --help for usage.
-`);
+`
+  );
   process.exit(1);
 }
 await initializeAuth();