@socialneuron/mcp-server 1.7.1 → 1.7.3

package/dist/http.js

@@ -1375,7 +1375,7 @@ init_supabase();
 init_request_context();
 
 // src/lib/version.ts
-var MCP_VERSION = "1.7.0";
+var MCP_VERSION = "1.7.2";
 
 // src/tools/content.ts
 var MAX_CREDITS_PER_RUN = Math.max(0, Number(process.env.SOCIALNEURON_MAX_CREDITS_PER_RUN || 0));
@@ -1985,7 +1985,24 @@ function registerContentTools(server) {
         `Status: ${job.status}`
       ];
       if (job.result_url) {
-        lines.push(`Result URL: ${job.result_url}`);
+        const isR2Key = !job.result_url.startsWith("http");
+        if (isR2Key) {
+          const segments = job.result_url.split("/");
+          const filename = segments[segments.length - 1] || "media";
+          lines.push(`Media ready: ${filename}`);
+          lines.push(
+            "(Pass job_id directly to schedule_post, or use get_media_url with job_id for a download link)"
+          );
+        } else {
+          lines.push(`Result URL: ${job.result_url}`);
+        }
+      }
+      const allUrls = job.result_metadata?.all_urls;
+      if (allUrls && allUrls.length > 1) {
+        lines.push(`Media files: ${allUrls.length} outputs available`);
+        lines.push(
+          "(Use job_id with schedule_post for carousel, or response_format=json for programmatic access)"
+        );
       }
       if (job.error_message) {
         lines.push(`Error: ${job.error_message}`);
@@ -2002,8 +2019,13 @@ function registerContentTools(server) {
         details: { status: job.status, jobId: job.id }
       });
       if (format === "json") {
+        const enriched = {
+          ...job,
+          r2_key: job.result_url && !job.result_url.startsWith("http") ? job.result_url : null,
+          all_urls: allUrls ?? null
+        };
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope(job), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope(enriched), null, 2) }]
         };
       }
       return {
@@ -2485,6 +2507,56 @@ Return ONLY valid JSON in this exact format:
 // src/tools/distribution.ts
 import { z as z3 } from "zod";
 import { createHash as createHash2 } from "node:crypto";
+
+// src/lib/sanitize-error.ts
+var ERROR_PATTERNS = [
+  // Postgres / PostgREST
+  [/PGRST301|permission denied/i, "Access denied. Check your account permissions."],
+  [/42P01|does not exist/i, "Service temporarily unavailable. Please try again."],
+  [/23505|unique.*constraint|duplicate key/i, "A duplicate record already exists."],
+  [/23503|foreign key/i, "Referenced record not found."],
+  // Gemini / Google AI
+  [/google.*api.*key|googleapis\.com.*40[13]/i, "Content generation failed. Please try again."],
+  [
+    /RESOURCE_EXHAUSTED|quota.*exceeded|429.*google/i,
+    "AI service rate limit reached. Please wait and retry."
+  ],
+  [
+    /SAFETY|prompt.*blocked|content.*filter/i,
+    "Content was blocked by the AI safety filter. Try rephrasing."
+  ],
+  [/gemini.*error|generativelanguage/i, "Content generation failed. Please try again."],
+  // Kie.ai
+  [/kie\.ai|kieai|kie_api/i, "Media generation failed. Please try again."],
+  // Stripe
+  [/stripe.*api|sk_live_|sk_test_/i, "Payment processing error. Please try again."],
+  // Network / fetch
+  [
+    /ECONNREFUSED|ENOTFOUND|ETIMEDOUT|ECONNRESET/i,
+    "External service unavailable. Please try again."
+  ],
+  [/fetch failed|network error|abort.*timeout/i, "Network request failed. Please try again."],
+  [/CERT_|certificate|SSL|TLS/i, "Secure connection failed. Please try again."],
+  // Supabase Edge Function internals
+  [/FunctionsHttpError|non-2xx status/i, "Backend service error. Please try again."],
+  [/JWT|token.*expired|token.*invalid/i, "Authentication expired. Please re-authenticate."],
+  // Generic sensitive patterns (API keys, URLs with secrets)
+  [/[a-z0-9]{32,}.*key|Bearer [a-zA-Z0-9._-]+/i, "An internal error occurred. Please try again."]
+];
+function sanitizeError2(error) {
+  const msg = error instanceof Error ? error.message : typeof error === "string" ? error : "Unknown error";
+  if (process.env.NODE_ENV !== "production") {
+    console.error("[Error]", msg);
+  }
+  for (const [pattern, userMessage] of ERROR_PATTERNS) {
+    if (pattern.test(msg)) {
+      return userMessage;
+    }
+  }
+  return "An unexpected error occurred. Please try again.";
+}
+
+// src/tools/distribution.ts
 init_supabase();
 
 // src/lib/quality.ts
@@ -2610,6 +2682,22 @@ function evaluateQuality(input) {
 }
 
 // src/tools/distribution.ts
+function snakeToCamel(obj) {
+  const result = {};
+  for (const [key, value] of Object.entries(obj)) {
+    const camelKey = key.replace(/_([a-z])/g, (_, c) => c.toUpperCase());
+    result[camelKey] = value;
+  }
+  return result;
+}
+function convertPlatformMetadata(meta) {
+  if (!meta) return void 0;
+  const converted = {};
+  for (const [platform2, fields] of Object.entries(meta)) {
+    converted[platform2] = snakeToCamel(fields);
+  }
+  return converted;
+}
 var PLATFORM_CASE_MAP = {
   youtube: "YouTube",
   tiktok: "TikTok",
@@ -2652,8 +2740,53 @@ function registerDistributionTools(server) {
       job_ids: z3.array(z3.string()).optional().describe(
         "Array of async job IDs for carousel posts. Each resolved to its R2 key. Alternative to media_urls/r2_keys."
       ),
-      platform_metadata: z3.record(z3.string(), z3.record(z3.string(), z3.unknown())).optional().describe(
-        'Platform-specific metadata. Keys: tiktok (privacy_status), youtube (title, description, privacy), facebook (page_id), threads, bluesky. Example: {"tiktok":{"privacy_status":"PUBLIC_TO_ALL"}}'
+      platform_metadata: z3.object({
+        tiktok: z3.object({
+          privacy_status: z3.enum([
+            "PUBLIC_TO_EVERYONE",
+            "MUTUAL_FOLLOW_FRIENDS",
+            "FOLLOWER_OF_CREATOR",
+            "SELF_ONLY"
+          ]).optional().describe("Required unless useInbox=true. Who can view the video."),
+          enable_duet: z3.boolean().optional(),
+          enable_comment: z3.boolean().optional(),
+          enable_stitch: z3.boolean().optional(),
+          is_ai_generated: z3.boolean().optional(),
+          brand_content: z3.boolean().optional(),
+          brand_organic: z3.boolean().optional(),
+          use_inbox: z3.boolean().optional().describe("Post to TikTok inbox/draft instead of direct publish.")
+        }).optional(),
+        youtube: z3.object({
+          title: z3.string().optional().describe("Video title (required for YouTube)."),
+          description: z3.string().optional(),
+          privacy_status: z3.enum(["public", "unlisted", "private"]).optional(),
+          category_id: z3.string().optional(),
+          tags: z3.array(z3.string()).optional(),
+          made_for_kids: z3.boolean().optional(),
+          notify_subscribers: z3.boolean().optional()
+        }).optional(),
+        facebook: z3.object({
+          page_id: z3.string().optional().describe("Facebook Page ID to post to."),
+          audience: z3.string().optional()
+        }).optional(),
+        instagram: z3.object({
+          location: z3.string().optional(),
+          collaborators: z3.array(z3.string()).optional(),
+          cover_timestamp: z3.number().optional(),
+          share_to_feed: z3.boolean().optional(),
+          first_comment: z3.string().optional(),
+          is_ai_generated: z3.boolean().optional()
+        }).optional(),
+        threads: z3.object({}).passthrough().optional(),
+        bluesky: z3.object({
+          content_labels: z3.array(z3.string()).optional()
+        }).optional(),
+        linkedin: z3.object({
+          article_url: z3.string().optional()
+        }).optional(),
+        twitter: z3.object({}).passthrough().optional()
+      }).optional().describe(
+        'Platform-specific metadata. Example: {"tiktok":{"privacy_status":"PUBLIC_TO_EVERYONE"}, "youtube":{"title":"My Video"}}'
       ),
       media_type: z3.enum(["IMAGE", "VIDEO", "CAROUSEL_ALBUM"]).optional().describe(
         "Media type. Set to CAROUSEL_ALBUM with media_urls for Instagram carousels. Default: auto-detected from media_url."
@@ -2751,7 +2884,12 @@ function registerDistributionTools(server) {
           const signed = await signR2Key(r2_key);
           if (!signed) {
             return {
-              content: [{ type: "text", text: `Failed to sign R2 key: ${r2_key}` }],
+              content: [
+                {
+                  type: "text",
+                  text: `Failed to sign media key. Verify the key exists and you have access.`
+                }
+              ],
               isError: true
             };
           }
@@ -2779,7 +2917,7 @@ function registerDistributionTools(server) {
               content: [
                 {
                   type: "text",
-                  text: `Failed to sign R2 key at index ${failIdx}: ${r2_keys[failIdx]}`
+                  text: `Failed to sign media key at index ${failIdx}. Verify the key exists and you have access.`
                 }
               ],
               isError: true
@@ -2807,7 +2945,7 @@ function registerDistributionTools(server) {
           content: [
             {
               type: "text",
-              text: `Failed to resolve media: ${resolveErr instanceof Error ? resolveErr.message : String(resolveErr)}`
+              text: `Failed to resolve media: ${sanitizeError2(resolveErr)}`
             }
           ],
           isError: true
@@ -2832,7 +2970,11 @@ Created with Social Neuron`;
           hashtags,
           scheduledAt: schedule_at,
           projectId: project_id,
-          ...platform_metadata ? { platformMetadata: platform_metadata } : {}
+          ...platform_metadata ? {
+            platformMetadata: convertPlatformMetadata(
+              platform_metadata
+            )
+          } : {}
         },
         { timeoutMs: 3e4 }
       );
@@ -3168,7 +3310,7 @@ Created with Social Neuron`;
         return { content: [{ type: "text", text: lines.join("\n") }], isError: false };
       } catch (err) {
         const durationMs = Date.now() - startedAt;
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         logMcpToolInvocation({
           toolName: "find_next_slots",
           status: "error",
@@ -3688,7 +3830,7 @@ Created with Social Neuron`;
         };
       } catch (err) {
         const durationMs = Date.now() - startedAt;
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         logMcpToolInvocation({
           toolName: "schedule_content_plan",
           status: "error",
@@ -3710,6 +3852,10 @@ import { readFile } from "node:fs/promises";
 import { basename, extname } from "node:path";
 init_supabase();
 var MAX_BASE64_SIZE = 10 * 1024 * 1024;
+function maskR2Key(key) {
+  const segments = key.split("/");
+  return segments.length >= 3 ? `\u2026/${segments.slice(-2).join("/")}` : key;
+}
 function inferContentType(filePath) {
   const ext = extname(filePath).toLowerCase();
   const map = {
@@ -3794,18 +3940,111 @@ function registerMediaTools(server) {
             isError: true
           };
         }
+        const ct = content_type || inferContentType(source);
         if (fileBuffer.length > MAX_BASE64_SIZE) {
+          const { data: putData, error: putError } = await callEdgeFunction(
+            "get-signed-url",
+            {
+              operation: "put",
+              contentType: ct,
+              filename: basename(source),
+              projectId: project_id
+            },
+            { timeoutMs: 1e4 }
+          );
+          if (putError || !putData?.signedUrl) {
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: `Failed to get presigned upload URL: ${putError || "No URL returned"}`
+                }
+              ],
+              isError: true
+            };
+          }
+          try {
+            const putResp = await fetch(putData.signedUrl, {
+              method: "PUT",
+              headers: { "Content-Type": ct },
+              body: fileBuffer
+            });
+            if (!putResp.ok) {
+              return {
+                content: [
+                  {
+                    type: "text",
+                    text: `R2 upload failed (HTTP ${putResp.status}): ${await putResp.text().catch(() => "Unknown error")}`
+                  }
+                ],
+                isError: true
+              };
+            }
+          } catch (uploadErr) {
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: `R2 upload failed: ${sanitizeError(uploadErr)}`
+                }
+              ],
+              isError: true
+            };
+          }
+          const { data: signData } = await callEdgeFunction(
+            "get-signed-url",
+            { key: putData.key, operation: "get" },
+            { timeoutMs: 1e4 }
+          );
+          await logMcpToolInvocation({
+            toolName: "upload_media",
+            status: "success",
+            durationMs: Date.now() - startedAt,
+            details: {
+              source: "local-presigned-put",
+              r2Key: putData.key,
+              size: fileBuffer.length,
+              contentType: ct
+            }
+          });
+          if (format === "json") {
+            return {
+              content: [
+                {
+                  type: "text",
+                  text: JSON.stringify(
+                    {
+                      r2_key: putData.key,
+                      signed_url: signData?.signedUrl ?? null,
+                      size: fileBuffer.length,
+                      content_type: ct
+                    },
+                    null,
+                    2
+                  )
+                }
+              ],
+              isError: false
+            };
+          }
           return {
             content: [
               {
                 type: "text",
-                text: `File too large for base64 upload (${(fileBuffer.length / 1024 / 1024).toFixed(1)}MB, max ${MAX_BASE64_SIZE / 1024 / 1024}MB). For large videos, host the file at a public URL first and pass the URL as source.`
+                text: [
+                  "Media uploaded successfully (presigned PUT).",
+                  `Media key: ${maskR2Key(putData.key)}`,
+                  signData?.signedUrl ? `Signed URL: ${signData.signedUrl}` : "",
+                  `Size: ${(fileBuffer.length / 1024 / 1024).toFixed(1)}MB`,
+                  `Type: ${ct}`,
+                  "",
+                  "Use job_id or response_format=json with schedule_post to post to any platform."
+                ].filter(Boolean).join("\n")
               }
             ],
-            isError: true
+            isError: false
           };
         }
-        const ct = content_type || inferContentType(source);
         const base64 = `data:${ct};base64,${fileBuffer.toString("base64")}`;
         uploadBody = {
           fileData: base64,
@@ -3870,12 +4109,12 @@ function registerMediaTools(server) {
             type: "text",
             text: [
               "Media uploaded successfully.",
-              `R2 Key: ${data.key}`,
+              `Media key: ${maskR2Key(data.key)}`,
               `Signed URL: ${data.url}`,
               `Size: ${(data.size / 1024).toFixed(0)}KB`,
               `Type: ${data.contentType}`,
               "",
-              "Use this r2_key with schedule_post to post to any platform."
+              "Use job_id or response_format=json with schedule_post to post to any platform."
             ].join("\n")
           }
         ],
@@ -3939,7 +4178,7 @@ function registerMediaTools(server) {
             type: "text",
             text: [
               `Signed URL: ${data.signedUrl}`,
-              `R2 Key: ${r2_key}`,
+              `Media key: ${maskR2Key(r2_key)}`,
               `Expires in: ${data.expiresIn ?? 3600}s`
             ].join("\n")
           }
@@ -4870,7 +5109,7 @@ function registerScreenshotTools(server) {
         };
       } catch (err) {
         await closeBrowser();
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         await logMcpToolInvocation({
           toolName: "capture_app_page",
           status: "error",
@@ -5026,7 +5265,7 @@ function registerScreenshotTools(server) {
         };
       } catch (err) {
         await closeBrowser();
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         await logMcpToolInvocation({
           toolName: "capture_screenshot",
           status: "error",
@@ -5319,7 +5558,7 @@ function registerRemotionTools(server) {
           ]
         };
       } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         await logMcpToolInvocation({
           toolName: "render_demo_video",
           status: "error",
@@ -5447,7 +5686,7 @@ function registerRemotionTools(server) {
           ]
         };
       } catch (err) {
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         await logMcpToolInvocation({
           toolName: "render_template_video",
           status: "error",
@@ -7098,7 +7337,7 @@ function registerExtractionTools(server) {
         };
       } catch (err) {
         const durationMs = Date.now() - startedAt;
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         logMcpToolInvocation({
           toolName: "extract_url_content",
           status: "error",
@@ -7654,7 +7893,7 @@ ${rawText.slice(0, 1e3)}`
             }
           } catch (persistErr) {
             const durationMs2 = Date.now() - startedAt;
-            const message = persistErr instanceof Error ? persistErr.message : String(persistErr);
+            const message = sanitizeError2(persistErr);
             logMcpToolInvocation({
               toolName: "plan_content_week",
               status: "error",
@@ -7686,7 +7925,7 @@ ${rawText.slice(0, 1e3)}`
         };
       } catch (err) {
         const durationMs = Date.now() - startedAt;
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         logMcpToolInvocation({
           toolName: "plan_content_week",
           status: "error",
@@ -7778,7 +8017,7 @@ ${rawText.slice(0, 1e3)}`
         };
       } catch (err) {
         const durationMs = Date.now() - startedAt;
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         logMcpToolInvocation({
           toolName: "save_content_plan",
           status: "error",
@@ -8823,7 +9062,7 @@ function registerPipelineTools(server) {
         return { content: [{ type: "text", text: lines.join("\n") }] };
       } catch (err) {
         const durationMs = Date.now() - startedAt;
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         logMcpToolInvocation({
           toolName: "check_pipeline_readiness",
           status: "error",
@@ -8984,7 +9223,7 @@ function registerPipelineTools(server) {
           } catch (deductErr) {
             errors.push({
               stage: "planning",
-              message: `Credit deduction failed: ${deductErr instanceof Error ? deductErr.message : String(deductErr)}`
+              message: `Credit deduction failed: ${sanitizeError2(deductErr)}`
             });
           }
         }
@@ -9155,7 +9394,7 @@ function registerPipelineTools(server) {
             } catch (schedErr) {
               errors.push({
                 stage: "schedule",
-                message: `Failed to schedule ${post.id}: ${schedErr instanceof Error ? schedErr.message : String(schedErr)}`
+                message: `Failed to schedule ${post.id}: ${sanitizeError2(schedErr)}`
               });
             }
           }
@@ -9244,7 +9483,7 @@ function registerPipelineTools(server) {
         return { content: [{ type: "text", text: lines.join("\n") }] };
       } catch (err) {
         const durationMs = Date.now() - startedAt;
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         logMcpToolInvocation({
           toolName: "run_content_pipeline",
           status: "error",
@@ -9468,7 +9707,7 @@ function registerPipelineTools(server) {
         return { content: [{ type: "text", text: lines.join("\n") }] };
       } catch (err) {
         const durationMs = Date.now() - startedAt;
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         logMcpToolInvocation({
           toolName: "auto_approve_plan",
           status: "error",
@@ -9646,7 +9885,7 @@ ${i + 1}. ${s.topic}`);
         return { content: [{ type: "text", text: lines.join("\n") }] };
       } catch (err) {
         const durationMs = Date.now() - startedAt;
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         logMcpToolInvocation({
           toolName: "suggest_next_content",
           status: "error",
@@ -9985,7 +10224,7 @@ Best: ${best.id.slice(0, 8)}... (${best.platform}) \u2014 ${best.views.toLocaleS
         return { content: [{ type: "text", text: lines.join("\n") }] };
       } catch (err) {
         const durationMs = Date.now() - startedAt;
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         logMcpToolInvocation({
           toolName: "generate_performance_digest",
           status: "error",
@@ -10082,7 +10321,7 @@ Best: ${best.id.slice(0, 8)}... (${best.platform}) \u2014 ${best.views.toLocaleS
         return { content: [{ type: "text", text: lines.join("\n") }] };
       } catch (err) {
         const durationMs = Date.now() - startedAt;
-        const message = err instanceof Error ? err.message : String(err);
+        const message = sanitizeError2(err);
         logMcpToolInvocation({
           toolName: "detect_anomalies",
           status: "error",
@@ -10101,6 +10340,275 @@ Best: ${best.id.slice(0, 8)}... (${best.platform}) \u2014 ${best.views.toLocaleS
 // src/tools/brandRuntime.ts
 import { z as z25 } from "zod";
 init_supabase();
+
+// src/lib/brandScoring.ts
+var WEIGHTS = {
+  toneAlignment: 0.3,
+  vocabularyAdherence: 0.25,
+  avoidCompliance: 0.2,
+  audienceRelevance: 0.15,
+  brandMentions: 0.05,
+  structuralPatterns: 0.05
+};
+function norm(content) {
+  return content.toLowerCase().replace(/[^a-z0-9\s]/g, " ");
+}
+function findMatches(content, terms) {
+  const n = norm(content);
+  return terms.filter((t) => n.includes(t.toLowerCase()));
+}
+function findMissing(content, terms) {
+  const n = norm(content);
+  return terms.filter((t) => !n.includes(t.toLowerCase()));
+}
+var FABRICATION_PATTERNS = [
+  { regex: /\b\d+[,.]?\d*\s*(%|percent)/gi, label: "unverified percentage" },
+  { regex: /\b(award[- ]?winning|best[- ]selling|#\s*1)\b/gi, label: "unverified ranking" },
+  {
+    regex: /\b(guaranteed|proven to|studies show|scientifically proven)\b/gi,
+    label: "unverified claim"
+  },
+  {
+    regex: /\b(always works|100% effective|risk[- ]?free|no risk)\b/gi,
+    label: "absolute claim"
+  }
+];
+function detectFabricationPatterns(content) {
+  const matches = [];
+  for (const { regex, label } of FABRICATION_PATTERNS) {
+    const re = new RegExp(regex.source, regex.flags);
+    let m;
+    while ((m = re.exec(content)) !== null) {
+      matches.push({ label, match: m[0] });
+    }
+  }
+  return matches;
+}
+function scoreTone(content, profile) {
+  const terms = profile.voiceProfile?.tone || [];
+  if (!terms.length)
+    return {
+      score: 50,
+      weight: WEIGHTS.toneAlignment,
+      issues: [],
+      suggestions: ["Define brand tone words for better consistency measurement"]
+    };
+  const matched = findMatches(content, terms);
+  const missing = findMissing(content, terms);
+  const score = Math.min(100, Math.round(matched.length / terms.length * 100));
+  const issues = [];
+  const suggestions = [];
+  if (missing.length > 0) {
+    issues.push(`Missing tone signals: ${missing.join(", ")}`);
+    suggestions.push(`Try incorporating tone words: ${missing.slice(0, 3).join(", ")}`);
+  }
+  return { score, weight: WEIGHTS.toneAlignment, issues, suggestions };
+}
+function scoreVocab(content, profile) {
+  const preferred = [
+    ...profile.voiceProfile?.languagePatterns || [],
+    ...profile.vocabularyRules?.preferredTerms || []
+  ];
+  if (!preferred.length)
+    return {
+      score: 50,
+      weight: WEIGHTS.vocabularyAdherence,
+      issues: [],
+      suggestions: ["Add preferred terms to improve vocabulary scoring"]
+    };
+  const matched = findMatches(content, preferred);
+  const missing = findMissing(content, preferred);
+  const score = Math.min(100, Math.round(matched.length / preferred.length * 100));
+  const issues = [];
+  const suggestions = [];
+  if (missing.length > 0 && score < 60) {
+    issues.push(`Low preferred term usage (${matched.length}/${preferred.length})`);
+    suggestions.push(`Consider using: ${missing.slice(0, 3).join(", ")}`);
+  }
+  return { score, weight: WEIGHTS.vocabularyAdherence, issues, suggestions };
+}
+function scoreAvoid(content, profile) {
+  const banned = [
+    ...profile.voiceProfile?.avoidPatterns || [],
+    ...profile.vocabularyRules?.bannedTerms || []
+  ];
+  if (!banned.length)
+    return {
+      score: 100,
+      weight: WEIGHTS.avoidCompliance,
+      issues: [],
+      suggestions: []
+    };
+  const violations = findMatches(content, banned);
+  const score = violations.length === 0 ? 100 : Math.max(0, 100 - violations.length * 25);
+  const issues = [];
+  const suggestions = [];
+  if (violations.length > 0) {
+    issues.push(`Banned/avoided terms found: ${violations.join(", ")}`);
+    suggestions.push(`Remove or replace: ${violations.join(", ")}`);
+  }
+  return { score, weight: WEIGHTS.avoidCompliance, issues, suggestions };
+}
+function scoreAudience(content, profile) {
+  const terms = [];
+  const d = profile.targetAudience?.demographics;
+  const p = profile.targetAudience?.psychographics;
+  if (d?.ageRange) terms.push(d.ageRange);
+  if (d?.location) terms.push(d.location);
+  if (p?.interests) terms.push(...p.interests);
+  if (p?.painPoints) terms.push(...p.painPoints);
+  if (p?.aspirations) terms.push(...p.aspirations);
+  const valid = terms.filter(Boolean);
+  if (!valid.length)
+    return {
+      score: 50,
+      weight: WEIGHTS.audienceRelevance,
+      issues: [],
+      suggestions: ["Define target audience details for relevance scoring"]
+    };
+  const matched = findMatches(content, valid);
+  const score = Math.min(100, Math.round(matched.length / valid.length * 100));
+  const issues = [];
+  const suggestions = [];
+  if (score < 40) {
+    issues.push("Content has low audience relevance");
+    suggestions.push(
+      `Reference audience pain points or interests: ${valid.slice(0, 3).join(", ")}`
+    );
+  }
+  return { score, weight: WEIGHTS.audienceRelevance, issues, suggestions };
+}
+function scoreBrand(content, profile) {
+  const name = profile.name?.toLowerCase();
+  if (!name)
+    return {
+      score: 50,
+      weight: WEIGHTS.brandMentions,
+      issues: [],
+      suggestions: []
+    };
+  const mentioned = norm(content).includes(name);
+  const issues = [];
+  const suggestions = [];
+  if (!mentioned) {
+    issues.push("Brand name not mentioned");
+    suggestions.push(`Include "${profile.name}" in the content`);
+  }
+  return {
+    score: mentioned ? 100 : 0,
+    weight: WEIGHTS.brandMentions,
+    issues,
+    suggestions
+  };
+}
+function scoreStructure(content, profile) {
+  const rules = profile.writingStyleRules;
+  if (!rules)
+    return {
+      score: 50,
+      weight: WEIGHTS.structuralPatterns,
+      issues: [],
+      suggestions: []
+    };
+  let score = 100;
+  const issues = [];
+  const suggestions = [];
+  if (rules.perspective) {
+    const markers = {
+      "first-singular": [/\bI\b/g, /\bmy\b/gi],
+      "first-plural": [/\bwe\b/gi, /\bour\b/gi],
+      second: [/\byou\b/gi, /\byour\b/gi],
+      third: [/\bthey\b/gi, /\btheir\b/gi]
+    };
+    const expected = markers[rules.perspective];
+    if (expected && !expected.some((r) => r.test(content))) {
+      score -= 30;
+      issues.push(`Expected ${rules.perspective} perspective not detected`);
+      suggestions.push(`Use ${rules.perspective} perspective pronouns`);
+    }
+  }
+  if (rules.useContractions === false) {
+    const found = content.match(
+      /\b(don't|won't|can't|isn't|aren't|wasn't|weren't|hasn't|haven't|doesn't|didn't|wouldn't|couldn't|shouldn't|it's|that's|there's|here's|what's|who's|let's|we're|they're|you're|I'm|he's|she's)\b/gi
+    );
+    if (found && found.length > 0) {
+      score -= Math.min(40, found.length * 10);
+      issues.push(`Contractions found (${found.length}): ${found.slice(0, 3).join(", ")}`);
+      suggestions.push("Expand contractions to full forms");
+    }
+  }
+  if (rules.emojiPolicy === "none") {
+    const emojis = content.match(
+      /[\u{1F600}-\u{1F64F}\u{1F300}-\u{1F5FF}\u{1F680}-\u{1F6FF}\u{1F1E0}-\u{1F1FF}\u{2600}-\u{26FF}\u{2700}-\u{27BF}]/gu
+    );
+    if (emojis && emojis.length > 0) {
+      score -= 20;
+      issues.push('Emojis found but emoji policy is "none"');
+      suggestions.push("Remove emojis from content");
+    }
+  }
+  return {
+    score: Math.max(0, score),
+    weight: WEIGHTS.structuralPatterns,
+    issues,
+    suggestions
+  };
+}
+function computeBrandConsistency(content, profile, threshold = 60) {
+  if (!content || !profile) {
+    const neutral = {
+      score: 50,
+      weight: 0,
+      issues: [],
+      suggestions: []
+    };
+    return {
+      overall: 50,
+      passed: false,
+      dimensions: {
+        toneAlignment: { ...neutral, weight: WEIGHTS.toneAlignment },
+        vocabularyAdherence: { ...neutral, weight: WEIGHTS.vocabularyAdherence },
+        avoidCompliance: { ...neutral, weight: WEIGHTS.avoidCompliance },
+        audienceRelevance: { ...neutral, weight: WEIGHTS.audienceRelevance },
+        brandMentions: { ...neutral, weight: WEIGHTS.brandMentions },
+        structuralPatterns: { ...neutral, weight: WEIGHTS.structuralPatterns }
+      },
+      preferredTermsUsed: [],
+      bannedTermsFound: [],
+      fabricationWarnings: []
+    };
+  }
+  const dimensions = {
+    toneAlignment: scoreTone(content, profile),
+    vocabularyAdherence: scoreVocab(content, profile),
+    avoidCompliance: scoreAvoid(content, profile),
+    audienceRelevance: scoreAudience(content, profile),
+    brandMentions: scoreBrand(content, profile),
+    structuralPatterns: scoreStructure(content, profile)
+  };
+  const overall = Math.round(
+    Object.values(dimensions).reduce((sum, d) => sum + d.score * d.weight, 0)
+  );
+  const preferred = [
+    ...profile.voiceProfile?.languagePatterns || [],
+    ...profile.vocabularyRules?.preferredTerms || []
+  ];
+  const banned = [
+    ...profile.voiceProfile?.avoidPatterns || [],
+    ...profile.vocabularyRules?.bannedTerms || []
+  ];
+  const fabrications = detectFabricationPatterns(content);
+  return {
+    overall: Math.max(0, Math.min(100, overall)),
+    passed: overall >= threshold,
+    dimensions,
+    preferredTermsUsed: findMatches(content, preferred),
+    bannedTermsFound: findMatches(content, banned),
+    fabricationWarnings: fabrications.map((f) => `${f.label}: "${f.match}"`)
+  };
+}
+
+// src/tools/brandRuntime.ts
 function asEnvelope20(data) {
   return {
     _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() },
@@ -10313,44 +10821,7 @@ function registerBrandRuntimeTools(server) {
         };
       }
       const profile = row.profile_data;
-      const contentLower = content.toLowerCase();
-      const issues = [];
-      let score = 70;
-      const banned = profile.vocabularyRules?.bannedTerms || [];
-      const bannedFound = banned.filter((t) => contentLower.includes(t.toLowerCase()));
-      if (bannedFound.length > 0) {
-        score -= bannedFound.length * 15;
-        issues.push(`Banned terms found: ${bannedFound.join(", ")}`);
-      }
-      const avoid = profile.voiceProfile?.avoidPatterns || [];
-      const avoidFound = avoid.filter((p) => contentLower.includes(p.toLowerCase()));
-      if (avoidFound.length > 0) {
-        score -= avoidFound.length * 10;
-        issues.push(`Avoid patterns found: ${avoidFound.join(", ")}`);
-      }
-      const preferred = profile.vocabularyRules?.preferredTerms || [];
-      const prefUsed = preferred.filter((t) => contentLower.includes(t.toLowerCase()));
-      score += Math.min(15, prefUsed.length * 5);
-      const fabPatterns = [
-        { regex: /\b\d+[,.]?\d*\s*(%|percent)/gi, label: "unverified percentage" },
-        { regex: /\b(award[- ]?winning|best[- ]selling|#\s*1)\b/gi, label: "unverified ranking" },
-        { regex: /\b(guaranteed|proven to|studies show)\b/gi, label: "unverified claim" }
-      ];
-      for (const { regex, label } of fabPatterns) {
-        regex.lastIndex = 0;
-        if (regex.test(content)) {
-          score -= 10;
-          issues.push(`Potential ${label} detected`);
-        }
-      }
-      score = Math.max(0, Math.min(100, score));
-      const checkResult = {
-        score,
-        passed: score >= 60,
-        issues,
-        preferredTermsUsed: prefUsed,
-        bannedTermsFound: bannedFound
-      };
+      const checkResult = computeBrandConsistency(content, profile);
       const envelope = asEnvelope20(checkResult);
       return {
         content: [{ type: "text", text: JSON.stringify(envelope, null, 2) }]
@@ -11202,56 +11673,6 @@ function createOAuthProvider(options) {
 
 // src/http.ts
 init_posthog();
-
-// src/lib/sanitize-error.ts
-var ERROR_PATTERNS = [
-  // Postgres / PostgREST
-  [/PGRST301|permission denied/i, "Access denied. Check your account permissions."],
-  [/42P01|does not exist/i, "Service temporarily unavailable. Please try again."],
-  [/23505|unique.*constraint|duplicate key/i, "A duplicate record already exists."],
-  [/23503|foreign key/i, "Referenced record not found."],
-  // Gemini / Google AI
-  [/google.*api.*key|googleapis\.com.*40[13]/i, "Content generation failed. Please try again."],
-  [
-    /RESOURCE_EXHAUSTED|quota.*exceeded|429.*google/i,
-    "AI service rate limit reached. Please wait and retry."
-  ],
-  [
-    /SAFETY|prompt.*blocked|content.*filter/i,
-    "Content was blocked by the AI safety filter. Try rephrasing."
-  ],
-  [/gemini.*error|generativelanguage/i, "Content generation failed. Please try again."],
-  // Kie.ai
-  [/kie\.ai|kieai|kie_api/i, "Media generation failed. Please try again."],
-  // Stripe
-  [/stripe.*api|sk_live_|sk_test_/i, "Payment processing error. Please try again."],
-  // Network / fetch
-  [
-    /ECONNREFUSED|ENOTFOUND|ETIMEDOUT|ECONNRESET/i,
-    "External service unavailable. Please try again."
-  ],
-  [/fetch failed|network error|abort.*timeout/i, "Network request failed. Please try again."],
-  [/CERT_|certificate|SSL|TLS/i, "Secure connection failed. Please try again."],
-  // Supabase Edge Function internals
-  [/FunctionsHttpError|non-2xx status/i, "Backend service error. Please try again."],
-  [/JWT|token.*expired|token.*invalid/i, "Authentication expired. Please re-authenticate."],
-  // Generic sensitive patterns (API keys, URLs with secrets)
-  [/[a-z0-9]{32,}.*key|Bearer [a-zA-Z0-9._-]+/i, "An internal error occurred. Please try again."]
-];
-function sanitizeError(error) {
-  const msg = error instanceof Error ? error.message : typeof error === "string" ? error : "Unknown error";
-  if (process.env.NODE_ENV !== "production") {
-    console.error("[Error]", msg);
-  }
-  for (const [pattern, userMessage] of ERROR_PATTERNS) {
-    if (pattern.test(msg)) {
-      return userMessage;
-    }
-  }
-  return "An unexpected error occurred. Please try again.";
-}
-
-// src/http.ts
 var PORT = parseInt(process.env.PORT ?? "8080", 10);
 var SUPABASE_URL2 = process.env.SUPABASE_URL ?? "";
 var SUPABASE_ANON_KEY = process.env.SUPABASE_ANON_KEY ?? "";
@@ -11719,7 +12140,7 @@ app.post("/mcp", authenticateRequest, async (req, res) => {
     const rawMessage = err instanceof Error ? err.message : "Internal server error";
     console.error(`[MCP HTTP] POST /mcp error: ${rawMessage}`);
     if (!res.headersSent) {
-      res.status(500).json({ jsonrpc: "2.0", error: { code: -32603, message: sanitizeError(err) } });
+      res.status(500).json({ jsonrpc: "2.0", error: { code: -32603, message: sanitizeError2(err) } });
     }
   }
 });
@@ -11761,7 +12182,7 @@ app.delete("/mcp", authenticateRequest, async (req, res) => {
 app.use((err, _req, res, _next) => {
   console.error("[MCP HTTP] Unhandled Express error:", err.stack || err.message || err);
   if (!res.headersSent) {
-    res.status(500).json({ error: "internal_error", error_description: err.message });
+    res.status(500).json({ error: "internal_error", error_description: sanitizeError2(err) });
   }
 });
 var httpServer = app.listen(PORT, "0.0.0.0", () => {