@socialneuron/mcp-server 1.7.12 → 1.7.15

package/dist/index.js

@@ -1,8 +1,13 @@
 #!/usr/bin/env node
 var __defProp = Object.defineProperty;
 var __getOwnPropNames = Object.getOwnPropertyNames;
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)
@@ -14,54 +19,7 @@ var MCP_VERSION;
 var init_version = __esm({
   "src/lib/version.ts"() {
     "use strict";
-    MCP_VERSION = "1.7.7";
-  }
-});
-
-// src/lib/posthog.ts
-import { createHash } from "node:crypto";
-import { PostHog } from "posthog-node";
-function hashUserId(userId) {
-  return createHash("sha256").update(`${POSTHOG_SALT}:${userId}`).digest("hex").substring(0, 32);
-}
-function initPostHog() {
-  if (isTelemetryDisabled()) return;
-  const key = process.env.POSTHOG_KEY || process.env.VITE_POSTHOG_KEY;
-  const host = process.env.POSTHOG_HOST || process.env.VITE_POSTHOG_HOST || "https://eu.i.posthog.com";
-  if (!key) return;
-  client = new PostHog(key, { host, flushAt: 5, flushInterval: 1e4 });
-}
-async function captureToolEvent(args) {
-  if (!client) return;
-  let userId;
-  try {
-    userId = await getDefaultUserId();
-  } catch {
-    userId = "anonymous_mcp";
-  }
-  client.capture({
-    distinctId: hashUserId(userId),
-    event: `mcp_tool_${args.status}`,
-    properties: {
-      tool_name: args.toolName,
-      duration_ms: args.durationMs,
-      ...args.details
-    }
-  });
-}
-async function shutdownPostHog() {
-  if (client) {
-    await client.shutdown();
-    client = null;
-  }
-}
-var POSTHOG_SALT, client;
-var init_posthog = __esm({
-  "src/lib/posthog.ts"() {
-    "use strict";
-    init_supabase();
-    POSTHOG_SALT = "socialneuron-mcp-ph-v1";
-    client = null;
+    MCP_VERSION = "1.7.15";
   }
 });
 
@@ -70,6 +28,9 @@ import { AsyncLocalStorage } from "node:async_hooks";
 function getRequestUserId() {
   return requestContext.getStore()?.userId ?? null;
 }
+function getRequestScopes() {
+  return requestContext.getStore()?.scopes ?? null;
+}
 function getRequestToken() {
   return requestContext.getStore()?.token ?? null;
 }
@@ -298,83 +259,12 @@ var init_credentials = __esm({
   }
 });
 
-// src/lib/validation-cache.ts
-var validation_cache_exports = {};
-__export(validation_cache_exports, {
-  clearValidationCache: () => clearValidationCache,
-  keyFingerprint: () => keyFingerprint,
-  readValidationCache: () => readValidationCache,
-  writeValidationCache: () => writeValidationCache
-});
-import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2, chmodSync } from "node:fs";
-import { join as join2 } from "node:path";
-import { homedir as homedir2 } from "node:os";
-function keyFingerprint(apiKey) {
-  return apiKey.substring(0, 6) + "..." + apiKey.slice(-4);
-}
-function readValidationCache(apiKey) {
-  try {
-    const raw = readFileSync2(CACHE_FILE, "utf-8");
-    const cached = JSON.parse(raw);
-    if (cached.keyFingerprint !== keyFingerprint(apiKey)) {
-      return null;
-    }
-    if (Date.now() - cached.cachedAt > CACHE_TTL_MS) {
-      return null;
-    }
-    if (!cached.result.valid) {
-      return null;
-    }
-    if (cached.result.expiresAt) {
-      const expiresMs = new Date(cached.result.expiresAt).getTime();
-      if (expiresMs <= Date.now()) {
-        return null;
-      }
-    }
-    return cached.result;
-  } catch {
-    return null;
-  }
-}
-function writeValidationCache(apiKey, result) {
-  if (!result.valid) return;
-  try {
-    mkdirSync2(CONFIG_DIR2, { recursive: true });
-    const entry = {
-      keyFingerprint: keyFingerprint(apiKey),
-      result,
-      cachedAt: Date.now()
-    };
-    writeFileSync2(CACHE_FILE, JSON.stringify(entry, null, 2), { mode: 384 });
-    try {
-      chmodSync(CACHE_FILE, 384);
-    } catch {
-    }
-  } catch {
-  }
-}
-function clearValidationCache() {
-  try {
-    writeFileSync2(CACHE_FILE, "{}", { mode: 384 });
-  } catch {
-  }
-}
-var CONFIG_DIR2, CACHE_FILE, CACHE_TTL_MS;
-var init_validation_cache = __esm({
-  "src/lib/validation-cache.ts"() {
-    "use strict";
-    CONFIG_DIR2 = join2(homedir2(), ".config", "socialneuron");
-    CACHE_FILE = join2(CONFIG_DIR2, "validation-cache.json");
-    CACHE_TTL_MS = 5 * 60 * 1e3;
-  }
-});
-
 // src/auth/api-keys.ts
 var api_keys_exports = {};
 __export(api_keys_exports, {
   validateApiKey: () => validateApiKey
 });
-async function validateApiKey(apiKey) {
+async function validateApiKey(apiKey, _attempt = 0) {
   const supabaseUrl = getSupabaseUrl();
   try {
     const anonKey = process.env.SUPABASE_ANON_KEY || process.env.SOCIALNEURON_ANON_KEY || process.env.VITE_SUPABASE_ANON_KEY || CLOUD_SUPABASE_ANON_KEY;
@@ -391,21 +281,90 @@ async function validateApiKey(apiKey) {
     );
     if (!response.ok) {
       const text = await response.text();
-      return { valid: false, error: `Validation failed: ${text}` };
+      const retryable = response.status === 429 || response.status >= 500;
+      if (retryable && _attempt < VALIDATE_MAX_RETRIES) {
+        await sleep(300 * (_attempt + 1));
+        return validateApiKey(apiKey, _attempt + 1);
+      }
+      return {
+        valid: false,
+        retryable,
+        error: `Validation failed (HTTP ${response.status}): ${text}`
+      };
     }
-    const result = await response.json();
-    return result;
+    return await response.json();
   } catch (err) {
+    if (_attempt < VALIDATE_MAX_RETRIES) {
+      await sleep(300 * (_attempt + 1));
+      return validateApiKey(apiKey, _attempt + 1);
+    }
     return {
       valid: false,
+      retryable: true,
       error: err instanceof Error ? err.message : String(err)
     };
   }
 }
+var VALIDATE_MAX_RETRIES, sleep;
 var init_api_keys = __esm({
   "src/auth/api-keys.ts"() {
     "use strict";
     init_supabase();
+    VALIDATE_MAX_RETRIES = 2;
+    sleep = (ms) => new Promise((resolve3) => setTimeout(resolve3, ms));
+  }
+});
+
+// src/lib/posthog.ts
+var posthog_exports = {};
+__export(posthog_exports, {
+  captureToolEvent: () => captureToolEvent,
+  initPostHog: () => initPostHog,
+  shutdownPostHog: () => shutdownPostHog
+});
+import { createHash } from "node:crypto";
+import { PostHog } from "posthog-node";
+function hashUserId(userId) {
+  return createHash("sha256").update(`${POSTHOG_SALT}:${userId}`).digest("hex").substring(0, 32);
+}
+function initPostHog() {
+  if (isTelemetryDisabled()) return;
+  const key = process.env.POSTHOG_KEY || process.env.VITE_POSTHOG_KEY;
+  const host = process.env.POSTHOG_HOST || process.env.VITE_POSTHOG_HOST || "https://eu.i.posthog.com";
+  if (!key) return;
+  client = new PostHog(key, { host, flushAt: 5, flushInterval: 1e4 });
+}
+async function captureToolEvent(args) {
+  if (!client) return;
+  let userId;
+  try {
+    userId = await getDefaultUserId();
+  } catch {
+    userId = "anonymous_mcp";
+  }
+  client.capture({
+    distinctId: hashUserId(userId),
+    event: `mcp_tool_${args.status}`,
+    properties: {
+      tool_name: args.toolName,
+      duration_ms: args.durationMs,
+      ...args.details
+    }
+  });
+}
+async function shutdownPostHog() {
+  if (client) {
+    await client.shutdown();
+    client = null;
+  }
+}
+var POSTHOG_SALT, client;
+var init_posthog = __esm({
+  "src/lib/posthog.ts"() {
+    "use strict";
+    init_supabase();
+    POSTHOG_SALT = "socialneuron-mcp-ph-v1";
+    client = null;
   }
 });
 
@@ -482,7 +441,10 @@ async function getDefaultProjectId() {
   if (!userId) return null;
   try {
     const supabase = getSupabaseClient();
-    const { data } = await supabase.from("projects").select("id").eq("user_id", userId).order("created_at", { ascending: false }).limit(1).single();
+    const { data: memberships } = await supabase.from("organization_members").select("organization_id").eq("user_id", userId);
+    const orgIds = (memberships ?? []).map((m) => m.organization_id);
+    if (orgIds.length === 0) return null;
+    const { data } = await supabase.from("projects").select("id").in("organization_id", orgIds).order("created_at", { ascending: false }).limit(1).maybeSingle();
     if (data?.id) {
       projectIdCache.set(userId, data.id);
       return data.id;
@@ -496,33 +458,27 @@ async function initializeAuth() {
   const apiKey = await loadApiKey2();
   if (apiKey) {
     authenticatedApiKey = apiKey;
-    const { readValidationCache: readValidationCache2, writeValidationCache: writeValidationCache2 } = await Promise.resolve().then(() => (init_validation_cache(), validation_cache_exports));
-    const cached = readValidationCache2(apiKey);
-    let result;
-    if (cached) {
-      result = cached;
-      console.error("[MCP] Using cached validation (skip remote check)");
-    } else {
-      const { validateApiKey: validateApiKey2 } = await Promise.resolve().then(() => (init_api_keys(), api_keys_exports));
-      result = await validateApiKey2(apiKey);
-      if (result.valid) {
-        writeValidationCache2(apiKey, result);
-      }
-    }
+    const _quietAuth = !process.argv.includes("--verbose") && (process.env.SN_CLI_QUIET === "1" || ["setup", "login", "logout", "whoami", "health", "sn", "repl"].includes(
+      process.argv[2] ?? ""
+    ));
+    const { validateApiKey: validateApiKey2 } = await Promise.resolve().then(() => (init_api_keys(), api_keys_exports));
+    const result = await validateApiKey2(apiKey);
     if (result.valid && result.userId) {
       _authMode = "api-key";
       authenticatedUserId = result.userId;
       authenticatedScopes = result.scopes && result.scopes.length > 0 ? result.scopes : ["mcp:read"];
       authenticatedEmail = result.email || null;
       authenticatedExpiresAt = result.expiresAt || null;
-      console.error(
-        "[MCP] Authenticated via API key (prefix: " + apiKey.substring(0, 6) + "..." + apiKey.slice(-4) + ")"
-      );
-      console.error("[MCP] Scopes: " + authenticatedScopes.join(", "));
+      if (!_quietAuth) {
+        console.error(
+          "[MCP] Authenticated via API key (prefix: " + apiKey.substring(0, 6) + "..." + apiKey.slice(-4) + ")"
+        );
+        console.error("[MCP] Scopes: " + authenticatedScopes.join(", "));
+      }
       if (authenticatedExpiresAt) {
         const expiresMs = new Date(authenticatedExpiresAt).getTime();
         const daysLeft = Math.ceil((expiresMs - Date.now()) / (1e3 * 60 * 60 * 24));
-        console.error("[MCP] Key expires: " + authenticatedExpiresAt);
+        if (!_quietAuth) console.error("[MCP] Key expires: " + authenticatedExpiresAt);
         if (daysLeft <= 7) {
           console.error(
             `[MCP] Warning: API key expires in ${daysLeft} day(s). Run: npx @socialneuron/mcp-server login`
@@ -532,8 +488,13 @@ async function initializeAuth() {
       return;
     } else {
       authenticatedApiKey = null;
+      if (result.retryable) {
+        throw new Error(
+          "Temporary issue reaching the auth service \u2014 your session is likely still valid. Wait a moment and retry. If it persists, run `sn login`."
+        );
+      }
       throw new Error(
-        "[MCP] Fatal: API key invalid or expired. Run: npx @socialneuron/mcp-server setup"
+        "API key invalid, expired, or revoked. Run `sn login` to reconnect (or `socialneuron-mcp login`)."
       );
     }
   }
@@ -590,14 +551,13 @@ async function logMcpToolInvocation(args) {
     });
   } catch {
   }
-  captureToolEvent(args).catch(() => {
+  Promise.resolve().then(() => (init_posthog(), posthog_exports)).then(({ captureToolEvent: captureToolEvent2 }) => captureToolEvent2(args)).catch(() => {
   });
 }
 var SUPABASE_URL, SUPABASE_SERVICE_KEY, client2, _authMode, authenticatedUserId, authenticatedScopes, authenticatedEmail, authenticatedExpiresAt, authenticatedApiKey, MCP_RUN_ID, CLOUD_SUPABASE_URL, CLOUD_SUPABASE_ANON_KEY, projectIdCache;
 var init_supabase = __esm({
   "src/lib/supabase.ts"() {
     "use strict";
-    init_posthog();
     init_request_context();
     SUPABASE_URL = process.env.SOCIALNEURON_SUPABASE_URL || process.env.SUPABASE_URL || "";
     SUPABASE_SERVICE_KEY = process.env.SOCIALNEURON_SERVICE_KEY || process.env.SUPABASE_SERVICE_ROLE_KEY || "";
@@ -697,10 +657,16 @@ async function callEdgeFunction(functionName, body, options) {
       } catch {
         errorMessage = responseText || `HTTP ${response.status}`;
       }
-      if (response.status === 401 || response.status === 403) {
+      if (response.status === 401) {
+        return {
+          data: null,
+          error: `Authentication failed (HTTP 401). Run 'npx @socialneuron/mcp-server login' to re-authenticate.`
+        };
+      }
+      if (response.status === 403) {
         return {
           data: null,
-          error: `Authentication failed (HTTP ${response.status}). Run 'npx @socialneuron/mcp-server login' to re-authenticate.`
+          error: `Forbidden (HTTP 403): ${errorMessage}. This action isn't permitted for your account, plan, or scope \u2014 your connection is still valid.`
         };
       }
       if (response.status === 429) {
@@ -1073,13 +1039,15 @@ var init_tool_catalog = __esm({
         name: "capture_screenshot",
         description: "Capture a screenshot of a URL",
         module: "screenshot",
-        scope: "mcp:read"
+        scope: "mcp:read",
+        localOnly: true
       },
       {
         name: "capture_app_page",
         description: "Capture a screenshot of an app page",
         module: "screenshot",
-        scope: "mcp:read"
+        scope: "mcp:read",
+        localOnly: true
       },
       // remotion
       {
@@ -1267,7 +1235,7 @@ var init_tool_catalog = __esm({
       // niche research
       {
         name: "find_winning_content",
-        description: "Find QA-gated high-performing short-form videos in the project's niche. Returns extracted hook patterns, content structures, and pre-compiled replication prompts (backed by niche_winners view, qa_score >= 0.5).",
+        description: "Find QA-gated high-performing short-form videos in the project's niche. Returns extracted hook patterns, content structures, and pre-compiled replication prompts.",
         module: "research",
         scope: "mcp:read"
       },
@@ -1292,6 +1260,18 @@ var init_tool_catalog = __esm({
         module: "discovery",
         scope: "mcp:read"
       },
+      {
+        name: "search",
+        description: "Search public Social Neuron product, integration, developer, and MCP tool knowledge using the ChatGPT-compatible search schema.",
+        module: "discovery",
+        scope: "mcp:read"
+      },
+      {
+        name: "fetch",
+        description: "Fetch one public Social Neuron knowledge document by ID using the ChatGPT-compatible fetch schema.",
+        module: "discovery",
+        scope: "mcp:read"
+      },
       // pipeline
       {
         name: "check_pipeline_readiness",
@@ -1406,58 +1386,93 @@ var init_tool_catalog = __esm({
       // agentic-harness — learning loop write-back
       {
         name: "write_agent_reflection",
-        description: "Persist a verbal reflection for an agent loop. Provenance keys are restricted (Anti-Goodhart safety): only content_history_id, outcome_event_id, prm_score_ids, and handoff_ids are accepted.",
+        description: "Persist a verbal reflection for an agent loop. Provenance keys are restricted to an allowlist: only content_history_id, outcome_event_id, prm_score_ids, and handoff_ids are accepted.",
         module: "harness",
-        scope: "mcp:write"
+        scope: "mcp:write",
+        internal: true
       },
       {
         name: "record_outcome",
-        description: "Record an outcome for a published decision event. Idempotent on (decision_event_id, horizon). Only horizon=24h triggers a content_bandits posterior update.",
+        description: "Record an outcome for a published decision event. Idempotent on (decision_event_id, horizon). Only horizon=24h triggers a learning-loop update.",
         module: "harness",
-        scope: "mcp:write"
+        scope: "mcp:write",
+        internal: true
       },
       // agentic-harness — learning loop read-back
       {
         name: "read_agent_reflection",
         description: "Read past agent reflections for a brand. Ordered by created_at DESC, id ASC (deterministic tiebreak). Only active reflections returned (superseded_by IS NULL). Optional generated_by_agent filter.",
         module: "harness",
-        scope: "mcp:read"
+        scope: "mcp:read",
+        internal: true
       },
       // hermes — autonomous agent integration (closed-loop content)
       {
         name: "save_draft_to_library",
-        description: "Save a draft post to the SN content library with origin=hermes. Used by Hermes to persist drafts before the founder approves them.",
+        description: "Save a draft post to the SN content library for review before publishing. Drafts land in the content library pending approval.",
         module: "hermes",
-        scope: "mcp:write"
+        scope: "mcp:write",
+        internal: true
       },
       {
         name: "record_voice_lesson",
-        description: "Persist a learned voice lesson to brand_profiles.brand_context.voiceProfile.voice_lessons via atomic RPC. Used by Hermes reflection cron.",
+        description: "Persist a learned voice lesson to the brand voice profile.",
         module: "hermes",
-        scope: "mcp:write"
+        scope: "mcp:write",
+        internal: true
       },
       {
         name: "record_observation",
-        description: 'Record an agent observation (e.g. "topic X engagement up 23%") for the UnifiedAnalytics > Playbook surface.',
+        description: 'Record an agent observation (e.g. "topic X engagement up 23%") for the analytics playbook.',
         module: "hermes",
-        scope: "mcp:write"
+        scope: "mcp:write",
+        internal: true
       },
       {
         name: "record_intel_signal",
-        description: "Record a research/trend signal from Hermes watchers (news, HN, competitor, etc.) for Niche Intelligence. Dedupes by URL.",
+        description: "Record a research/trend signal (news, competitor, community sources) for niche intelligence. Dedupes by URL.",
         module: "hermes",
-        scope: "mcp:write"
+        scope: "mcp:write",
+        internal: true
       },
       {
         name: "record_campaign_spend",
-        description: "Log a campaign cost line (hermes_drafts, carousel_renders, analytics_pulls, paid_amplification, other). Ownership-checked.",
+        description: "Log a campaign cost line item. Ownership-checked.",
         module: "hermes",
-        scope: "mcp:write"
+        scope: "mcp:write",
+        internal: true
       },
       {
         name: "get_active_campaigns",
-        description: "List currently-running campaigns with thesis, budget, hero format, and current spend. Used by Hermes pitch skill to bias drafts.",
+        description: "List currently-running campaigns with thesis, budget, hero format, and current spend.",
         module: "hermes",
+        scope: "mcp:read",
+        internal: true
+      },
+      // skills (workflow skills — multi-step brand-locked content pipelines)
+      {
+        name: "list_skills",
+        description: "List Social Neuron content workflow skills available to the user. A skill is a brand-locked multi-step pipeline inspired by documented viral patterns (MrBeast 3-second hook, Hormozi pattern interrupt, etc.).",
+        module: "skills",
+        scope: "mcp:read"
+      },
+      {
+        name: "run_skill",
+        description: "Run a Social Neuron workflow skill end-to-end (brand-locked content production). Returns a structured run preview with the step plan, credit cost, and a deep-link to launch in the SN dashboard.",
+        module: "skills",
+        scope: "mcp:write"
+      },
+      // loop observability (growth-loop KPIs + content learning state)
+      {
+        name: "get_loop_pulse",
+        description: "Read dynamic loop-health KPIs for the growth loop over the last 7 days (reflection/decision coverage, visual gate pass rate, learning-update application rate, per-platform uptake, autopilot lag) \u2014 each with an ok/warn/bad status. Use to decide whether the loop is closing or where it is stuck.",
+        module: "loop",
+        scope: "mcp:read"
+      },
+      {
+        name: "get_bandit_state",
+        description: "Read the current content learning state for a project \u2014 top-K arms per (arm_type, platform) with expected performance and uncertainty. Use to reason about which hook family / format / timing slot currently performs best per platform.",
+        module: "loop",
         scope: "mcp:read"
       }
     ];
@@ -1602,7 +1617,7 @@ function classifyError(err) {
       hint: "Run: npx @socialneuron/mcp-server login \u2014 Requires a paid plan (Starter+). See https://socialneuron.com/pricing"
     };
   }
-  if (lower.includes("econnrefused") || lower.includes("etimedout") || lower.includes("fetch failed") || lower.includes("aborterror") || lower.includes("network") || lower.includes("dns")) {
+  if (lower.includes("econnrefused") || lower.includes("etimedout") || lower.includes("fetch failed") || lower.includes("aborterror") || lower.includes("network") || lower.includes("dns") || lower.includes("temporary issue")) {
     return {
       message,
       errorType: "NETWORK",
@@ -2631,6 +2646,7 @@ async function handleTools(args, asJson) {
   if (typeof module === "string") {
     tools = getToolsByModule(module);
   }
+  tools = tools.filter((t) => !t.internal);
   if (asJson) {
     emitSnResult({ ok: true, command: "tools", toolCount: tools.length, tools }, true);
     return;
@@ -2661,7 +2677,7 @@ Module: ${moduleName} (${moduleTools.length} tools)`);
 async function handleInfo(args, asJson) {
   const info = {
     version: MCP_VERSION,
-    toolCount: TOOL_CATALOG.length,
+    toolCount: TOOL_CATALOG.filter((t) => !t.internal).length,
     modules: getModules()
   };
   try {
@@ -2872,13 +2888,13 @@ __export(presets_exports, {
   handlePreset: () => handlePreset,
   resolvePreset: () => resolvePreset
 });
-import { readFileSync as readFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync3, existsSync as existsSync2 } from "node:fs";
-import { join as join3 } from "node:path";
-import { homedir as homedir3 } from "node:os";
+import { readFileSync as readFileSync2, writeFileSync as writeFileSync2, mkdirSync as mkdirSync2, existsSync as existsSync2 } from "node:fs";
+import { join as join2 } from "node:path";
+import { homedir as homedir2 } from "node:os";
 function loadUserPresets() {
   if (!existsSync2(PRESETS_FILE)) return [];
   try {
-    const raw = readFileSync3(PRESETS_FILE, "utf-8");
+    const raw = readFileSync2(PRESETS_FILE, "utf-8");
     const parsed = JSON.parse(raw);
     if (!Array.isArray(parsed)) return [];
     return parsed;
@@ -2888,9 +2904,9 @@ function loadUserPresets() {
 }
 function saveUserPresets(presets) {
   if (!existsSync2(PRESETS_DIR)) {
-    mkdirSync3(PRESETS_DIR, { recursive: true });
+    mkdirSync2(PRESETS_DIR, { recursive: true });
   }
-  writeFileSync3(PRESETS_FILE, JSON.stringify(presets, null, 2) + "\n", "utf-8");
+  writeFileSync2(PRESETS_FILE, JSON.stringify(presets, null, 2) + "\n", "utf-8");
 }
 function resolvePreset(name) {
   const lower = name.toLowerCase();
@@ -3055,8 +3071,8 @@ var init_presets = __esm({
       { name: "linkedin-post", platform: "LinkedIn", maxLength: 3e3, builtin: true },
       { name: "twitter-post", platform: "Twitter", maxLength: 280, builtin: true }
     ];
-    PRESETS_DIR = join3(homedir3(), ".config", "socialneuron");
-    PRESETS_FILE = join3(PRESETS_DIR, "presets.json");
+    PRESETS_DIR = join2(homedir2(), ".config", "socialneuron");
+    PRESETS_FILE = join2(PRESETS_DIR, "presets.json");
     USAGE = `Usage: sn preset <sub-command> [options]
 
 Sub-commands:
@@ -3259,9 +3275,9 @@ __export(setup_exports, {
 });
 import { createHash as createHash4, randomBytes, randomUUID as randomUUID4 } from "node:crypto";
 import { createServer } from "node:http";
-import { existsSync as existsSync3, mkdirSync as mkdirSync4, readFileSync as readFileSync4, writeFileSync as writeFileSync4 } from "node:fs";
-import { homedir as homedir4, platform as platform2 } from "node:os";
-import { join as join4 } from "node:path";
+import { existsSync as existsSync3, mkdirSync as mkdirSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3 } from "node:fs";
+import { homedir as homedir3, platform as platform2 } from "node:os";
+import { join as join3 } from "node:path";
 function base64url(buffer) {
   return buffer.toString("base64url");
 }
@@ -3283,8 +3299,8 @@ function getConfigPaths() {
   const os = platform2();
   if (os === "darwin") {
     paths.push({
-      path: join4(
-        homedir4(),
+      path: join3(
+        homedir3(),
         "Library",
         "Application Support",
         "Claude",
@@ -3294,15 +3310,15 @@ function getConfigPaths() {
     });
   } else if (os === "linux") {
     paths.push({
-      path: join4(homedir4(), ".config", "claude", "claude_desktop_config.json"),
+      path: join3(homedir3(), ".config", "claude", "claude_desktop_config.json"),
       name: "Claude Desktop"
     });
   }
-  const claudeCodeGlobal = join4(homedir4(), ".claude", ".mcp.json");
+  const claudeCodeGlobal = join3(homedir3(), ".claude", ".mcp.json");
   if (existsSync3(claudeCodeGlobal)) {
     paths.push({ path: claudeCodeGlobal, name: "Claude Code (global)" });
   }
-  const projectConfig = join4(process.cwd(), ".mcp.json");
+  const projectConfig = join3(process.cwd(), ".mcp.json");
   if (existsSync3(projectConfig)) {
     paths.push({ path: projectConfig, name: "Claude Code (project)" });
   }
@@ -3312,12 +3328,12 @@ function configureMcpClient(configPath) {
   try {
     let config = {};
     if (existsSync3(configPath)) {
-      const raw = readFileSync4(configPath, "utf-8");
+      const raw = readFileSync3(configPath, "utf-8");
       config = JSON.parse(raw);
     } else {
-      const dir = join4(configPath, "..");
+      const dir = join3(configPath, "..");
       if (!existsSync3(dir)) {
-        mkdirSync4(dir, { recursive: true });
+        mkdirSync3(dir, { recursive: true });
       }
     }
     if (!config.mcpServers) {
@@ -3327,7 +3343,7 @@ function configureMcpClient(configPath) {
       command: "npx",
       args: ["-y", "@socialneuron/mcp-server"]
     };
-    writeFileSync4(configPath, JSON.stringify(config, null, 2) + "\n");
+    writeFileSync3(configPath, JSON.stringify(config, null, 2) + "\n");
     return true;
   } catch {
     return false;
@@ -3504,38 +3520,110 @@ var init_setup = __esm({
   }
 });
 
-// src/cli/commands.ts
-var commands_exports = {};
-__export(commands_exports, {
-  runHealthCheck: () => runHealthCheck,
-  runLogin: () => runLogin,
-  runLogoutCommand: () => runLogoutCommand,
-  runWhoami: () => runWhoami
+// src/lib/validation-cache.ts
+var validation_cache_exports = {};
+__export(validation_cache_exports, {
+  clearValidationCache: () => clearValidationCache,
+  keyFingerprint: () => keyFingerprint,
+  readValidationCache: () => readValidationCache,
+  writeValidationCache: () => writeValidationCache
 });
-import { createInterface } from "node:readline";
-function prompt(question) {
-  const rl = createInterface({ input: process.stdin, output: process.stderr });
-  return new Promise((resolve3) => {
-    rl.question(question, (answer) => {
-      rl.close();
-      resolve3(answer.trim());
-    });
-  });
-}
-function getDefaultSupabaseUrl2() {
-  return process.env.SOCIALNEURON_SUPABASE_URL || process.env.SUPABASE_URL || CLOUD_SUPABASE_URL;
+import { createHash as createHash5 } from "node:crypto";
+import { readFileSync as readFileSync4, writeFileSync as writeFileSync4, mkdirSync as mkdirSync4, chmodSync } from "node:fs";
+import { join as join4 } from "node:path";
+import { homedir as homedir4 } from "node:os";
+function keyFingerprint(apiKey) {
+  return `sha256:${createHash5("sha256").update(apiKey, "utf8").digest("hex")}`;
 }
-async function runLogin(method) {
-  if (method === "browser") {
-    await runSetup();
-    return;
-  }
-  if (method === "paste") {
-    await runLoginPaste();
-    return;
-  }
-  if (method === "device") {
-    await runLoginDevice();
+function readValidationCache(apiKey) {
+  try {
+    const raw = readFileSync4(CACHE_FILE, "utf-8");
+    const cached = JSON.parse(raw);
+    if (cached.keyFingerprint !== keyFingerprint(apiKey)) {
+      return null;
+    }
+    if (Date.now() - cached.cachedAt > CACHE_TTL_MS) {
+      return null;
+    }
+    if (!cached.result.valid) {
+      return null;
+    }
+    if (cached.result.expiresAt) {
+      const expiresMs = new Date(cached.result.expiresAt).getTime();
+      if (expiresMs <= Date.now()) {
+        return null;
+      }
+    }
+    return cached.result;
+  } catch {
+    return null;
+  }
+}
+function writeValidationCache(apiKey, result) {
+  if (!result.valid) return;
+  try {
+    mkdirSync4(CONFIG_DIR2, { recursive: true });
+    const entry = {
+      keyFingerprint: keyFingerprint(apiKey),
+      result,
+      cachedAt: Date.now()
+    };
+    writeFileSync4(CACHE_FILE, JSON.stringify(entry, null, 2), { mode: 384 });
+    try {
+      chmodSync(CACHE_FILE, 384);
+    } catch {
+    }
+  } catch {
+  }
+}
+function clearValidationCache() {
+  try {
+    writeFileSync4(CACHE_FILE, "{}", { mode: 384 });
+  } catch {
+  }
+}
+var CONFIG_DIR2, CACHE_FILE, CACHE_TTL_MS;
+var init_validation_cache = __esm({
+  "src/lib/validation-cache.ts"() {
+    "use strict";
+    CONFIG_DIR2 = join4(homedir4(), ".config", "socialneuron");
+    CACHE_FILE = join4(CONFIG_DIR2, "validation-cache.json");
+    CACHE_TTL_MS = 5 * 60 * 1e3;
+  }
+});
+
+// src/cli/commands.ts
+var commands_exports = {};
+__export(commands_exports, {
+  runHealthCheck: () => runHealthCheck,
+  runLogin: () => runLogin,
+  runLogoutCommand: () => runLogoutCommand,
+  runWhoami: () => runWhoami
+});
+import { createInterface } from "node:readline";
+function prompt(question) {
+  const rl = createInterface({ input: process.stdin, output: process.stderr });
+  return new Promise((resolve3) => {
+    rl.question(question, (answer) => {
+      rl.close();
+      resolve3(answer.trim());
+    });
+  });
+}
+function getDefaultSupabaseUrl2() {
+  return process.env.SOCIALNEURON_SUPABASE_URL || process.env.SUPABASE_URL || CLOUD_SUPABASE_URL;
+}
+async function runLogin(method) {
+  if (method === "browser") {
+    await runSetup();
+    return;
+  }
+  if (method === "paste") {
+    await runLoginPaste();
+    return;
+  }
+  if (method === "device") {
+    await runLoginDevice();
     return;
   }
 }
@@ -3626,20 +3714,27 @@ async function runLoginDevice() {
       if (pollData.api_key) {
         try {
           await saveApiKey(pollData.api_key);
-          await saveSupabaseUrl(supabaseUrl);
         } catch (saveErr) {
           console.error("");
-          console.error("  Warning: Could not save key to keychain.");
+          console.error("  Warning: Could not save API key securely.");
           console.error(`  Error: ${saveErr instanceof Error ? saveErr.message : String(saveErr)}`);
           console.error("");
-          console.error("  Your API key (save this \u2014 it cannot be retrieved again):");
-          console.error(`  ${pollData.api_key}`);
-          console.error("");
-          console.error("  To authenticate manually, run:");
+          console.error("  For security, the API key was not printed to the terminal.");
+          console.error("  Create or copy an API key from your Social Neuron dashboard, then run:");
           console.error("  npx @socialneuron/mcp-server login --paste");
           console.error("");
-          console.error("  Or set the environment variable:");
-          console.error(`  export SOCIALNEURON_API_KEY="${pollData.api_key}"`);
+          return;
+        }
+        try {
+          await saveSupabaseUrl(supabaseUrl);
+        } catch (saveErr) {
+          console.error("");
+          console.error("  Authorized!");
+          console.error(`  Key prefix: ${pollData.api_key.substring(0, 12)}...`);
+          console.error("");
+          console.error("  Warning: API key saved, but could not save the Supabase URL.");
+          console.error(`  Error: ${saveErr instanceof Error ? saveErr.message : String(saveErr)}`);
+          console.error("  If needed, set SOCIALNEURON_SUPABASE_URL to your Supabase URL.");
           console.error("");
           return;
         }
@@ -4155,6 +4250,8 @@ var TOOL_SCOPES = {
   get_mcp_usage: "mcp:read",
   list_plan_approvals: "mcp:read",
   search_tools: "mcp:read",
+  search: "mcp:read",
+  fetch: "mcp:read",
   // mcp:read (pipeline readiness + status are read-only)
   check_pipeline_readiness: "mcp:read",
   get_pipeline_status: "mcp:read",
@@ -4182,7 +4279,13 @@ var TOOL_SCOPES = {
   record_intel_signal: "mcp:write",
   record_campaign_spend: "mcp:write",
   // mcp:read
-  get_active_campaigns: "mcp:read"
+  get_active_campaigns: "mcp:read",
+  // mcp:read / mcp:write (Skills)
+  list_skills: "mcp:read",
+  run_skill: "mcp:write",
+  // mcp:read (Loop observability — growth-loop KPIs + content learning state)
+  get_loop_pulse: "mcp:read",
+  get_bandit_state: "mcp:read"
 };
 function hasScope(userScopes, required) {
   if (userScopes.includes(required)) return true;
@@ -4282,6 +4385,10 @@ var OVERRIDES = {
   generate_performance_digest: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
   detect_anomalies: { readOnlyHint: true, destructiveHint: false, idempotentHint: true }
 };
+function buildToolSecuritySchemes(toolName) {
+  const scope = TOOL_SCOPES[toolName];
+  return scope ? [{ type: "oauth2", scopes: [scope] }] : [];
+}
 function buildAnnotationsMap() {
   const map = /* @__PURE__ */ new Map();
   for (const [toolName, scope] of Object.entries(TOOL_SCOPES)) {
@@ -4326,17 +4433,37 @@ function applyAnnotations(server2) {
           destructiveHint: ann.destructiveHint,
           idempotentHint: ann.idempotentHint,
           openWorldHint: ann.openWorldHint
-        }
+        },
+        securitySchemes: buildToolSecuritySchemes(toolName)
       });
       applied++;
     }
   }
-  console.log(`[annotations] Applied annotations to ${applied}/${entries.length} tools`);
+  console.error(`[annotations] Applied annotations to ${applied}/${entries.length} tools`);
 }
 
 // src/lib/register-tools.ts
 init_supabase();
 
+// src/lib/www-authenticate.ts
+function buildWwwAuthenticateHeader(opts) {
+  const SANITIZE_CONTROL = /[\x00-\x1f\x7f]/g;
+  const sanitize = (s) => s.replace(/[\\"]/g, "_").replace(SANITIZE_CONTROL, " ");
+  const params = ['realm="socialneuron"'];
+  if (opts.error) {
+    params.push(`error="${sanitize(opts.error)}"`);
+  }
+  if (opts.errorDescription) {
+    params.push(`error_description="${sanitize(opts.errorDescription)}"`);
+  }
+  if (opts.scope) {
+    params.push(`scope="${sanitize(opts.scope)}"`);
+  }
+  const issuer = opts.issuerUrl.replace(/\/+$/, "");
+  params.push(`resource_metadata="${issuer}/.well-known/oauth-protected-resource"`);
+  return `Bearer ${params.join(", ")}`;
+}
+
 // src/lib/agent-harness/constants.json
 var constants_default = {
   ZERO_WIDTH_CHARS: "[\\u200B\\u200C\\u200D\\u2060\\uFEFF\\u{E0020}-\\u{E007F}]",
@@ -4538,6 +4665,16 @@ function checkRateLimit(category, key) {
 
 // src/tools/ideation.ts
 init_supabase();
+init_version();
+function asEnvelope(data) {
+  return {
+    _meta: {
+      version: MCP_VERSION,
+      timestamp: (/* @__PURE__ */ new Date()).toISOString()
+    },
+    data
+  };
+}
 function registerIdeationTools(server2) {
   server2.tool(
     "generate_content",
@@ -4699,7 +4836,14 @@ Content Type: ${content_type}`;
         };
       }
       const text = data?.text ?? "(empty response)";
+      const structuredContent = asEnvelope({
+        text,
+        content_type,
+        platform: platform3 ?? null,
+        model: model ?? "gemini-2.5-flash"
+      });
       return {
+        structuredContent,
         content: [{ type: "text", text }]
       };
     }
@@ -4733,7 +4877,10 @@ Content Type: ${content_type}`;
       const { data, error } = await callEdgeFunction(
         "fetch-trends",
         {
-          source,
+          // Forward as `trend_source`: the mcp-gateway overwrites top-level `source`
+          // with 'mcp' (attribution) before reaching the EF, which collided with the
+          // routing param. The EF reads `trend_source ?? source`.
+          trend_source: source,
           category: category ?? "general",
           niche,
           url,
@@ -4902,7 +5049,14 @@ ${content}`,
       const header = `Adapted for ${target_platform}${source_platform ? ` (from ${source_platform})` : ""}:
 
 `;
+      const structuredContent = asEnvelope({
+        text,
+        source_platform: source_platform ?? null,
+        target_platform,
+        model: "gemini-2.5-flash"
+      });
       return {
+        structuredContent,
         content: [{ type: "text", text: header + text }]
       };
     }
@@ -4913,8 +5067,10 @@ ${content}`,
 init_edge_function();
 import { z as z2 } from "zod";
 init_supabase();
-init_request_context();
 init_version();
+
+// src/lib/budget.ts
+init_request_context();
 var MAX_CREDITS_PER_RUN = Math.max(0, Number(process.env.SOCIALNEURON_MAX_CREDITS_PER_RUN || 0));
 var MAX_ASSETS_PER_RUN = Math.max(0, Number(process.env.SOCIALNEURON_MAX_ASSETS_PER_RUN || 0));
 var _globalCreditsUsed = 0;
@@ -4955,7 +5111,35 @@ function getCurrentBudgetStatus() {
     remainingAssets: MAX_ASSETS_PER_RUN > 0 ? Math.max(0, MAX_ASSETS_PER_RUN - assetsGen) : null
   };
 }
-function asEnvelope(data) {
+function checkCreditBudget(estimatedCost) {
+  if (MAX_CREDITS_PER_RUN <= 0) {
+    return { ok: true };
+  }
+  const used = getCreditsUsed();
+  if (used + estimatedCost > MAX_CREDITS_PER_RUN) {
+    return {
+      ok: false,
+      message: `Credit budget exceeded for this MCP run. Used=${used}, next~=${estimatedCost}, limit=${MAX_CREDITS_PER_RUN}.`
+    };
+  }
+  return { ok: true };
+}
+function checkAssetBudget(requestedCount = 1) {
+  if (MAX_ASSETS_PER_RUN <= 0) {
+    return { ok: true };
+  }
+  const generated = getAssetsGenerated();
+  if (generated + requestedCount > MAX_ASSETS_PER_RUN) {
+    return {
+      ok: false,
+      message: `Asset budget exceeded for this MCP run. Generated=${generated}, next=${requestedCount}, limit=${MAX_ASSETS_PER_RUN}.`
+    };
+  }
+  return { ok: true };
+}
+
+// src/tools/content.ts
+function asEnvelope2(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -4982,35 +5166,9 @@ var IMAGE_CREDIT_ESTIMATES = {
   "flux-max": 50,
   "gpt4o-image": 40,
   imagen4: 35,
-  "imagen4-fast": 25,
+  "imagen4-fast": 35,
   seedream: 20
 };
-function checkCreditBudget(estimatedCost) {
-  if (MAX_CREDITS_PER_RUN <= 0) {
-    return { ok: true };
-  }
-  const used = getCreditsUsed();
-  if (used + estimatedCost > MAX_CREDITS_PER_RUN) {
-    return {
-      ok: false,
-      message: `Credit budget exceeded for this MCP run. Used=${used}, next~=${estimatedCost}, limit=${MAX_CREDITS_PER_RUN}.`
-    };
-  }
-  return { ok: true };
-}
-function checkAssetBudget() {
-  if (MAX_ASSETS_PER_RUN <= 0) {
-    return { ok: true };
-  }
-  const generated = getAssetsGenerated();
-  if (generated + 1 > MAX_ASSETS_PER_RUN) {
-    return {
-      ok: false,
-      message: `Asset budget exceeded for this MCP run. Generated=${generated}, next=1, limit=${MAX_ASSETS_PER_RUN}.`
-    };
-  }
-  return { ok: true };
-}
 function registerContentTools(server2) {
   server2.tool(
     "generate_video",
@@ -5129,7 +5287,7 @@ function registerContentTools(server2) {
             {
               type: "text",
               text: JSON.stringify(
-                asEnvelope({
+                asEnvelope2({
                   jobId,
                   taskId: data.taskId,
                   asyncJobId: data.asyncJobId,
@@ -5259,7 +5417,7 @@ function registerContentTools(server2) {
             {
               type: "text",
               text: JSON.stringify(
-                asEnvelope({
+                asEnvelope2({
                   jobId,
                   taskId: data.taskId,
                   asyncJobId: data.asyncJobId,
@@ -5362,7 +5520,7 @@ function registerContentTools(server2) {
                 {
                   type: "text",
                   text: JSON.stringify(
-                    asEnvelope({
+                    asEnvelope2({
                       jobId: job.id,
                       jobType: job.job_type,
                       model: job.model,
@@ -5423,7 +5581,7 @@ function registerContentTools(server2) {
           all_urls: allUrls ?? null
         };
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope(enriched), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope2(enriched), null, 2) }]
         };
       }
       return {
@@ -5552,7 +5710,7 @@ Return ONLY valid JSON in this exact format:
         try {
           const parsed = JSON.parse(rawContent);
           return {
-            content: [{ type: "text", text: JSON.stringify(asEnvelope(parsed), null, 2) }]
+            content: [{ type: "text", text: JSON.stringify(asEnvelope2(parsed), null, 2) }]
           };
         } catch {
           return {
@@ -5580,20 +5738,8 @@ Return ONLY valid JSON in this exact format:
     "Generate a voiceover audio file for video narration. Returns an R2-hosted audio URL. Use after create_storyboard to add narration to each scene, or standalone for podcast intros and ad reads. Costs ~2 credits per generation.",
     {
       text: z2.string().max(5e3).describe("The script/text to convert to speech."),
-      voice: z2.enum([
-        "rachel",
-        "drew",
-        "clyde",
-        "paul",
-        "domi",
-        "dave",
-        "fin",
-        "sarah",
-        "antoni",
-        "thomas",
-        "charlie"
-      ]).optional().describe(
-        "Voice selection. rachel=warm female, drew=confident male, paul=authoritative male, sarah=friendly female. Defaults to rachel."
+      voice: z2.enum(["rachel", "domi"]).optional().describe(
+        "Voice selection. rachel=warm female, domi=confident female. Defaults to rachel."
       ),
       speed: z2.number().min(0.5).max(2).optional().describe("Speech speed multiplier. 1.0 is normal. Defaults to 1.0."),
       response_format: z2.enum(["text", "json"]).optional().describe("Response format. Defaults to text.")
@@ -5621,11 +5767,15 @@ Return ONLY valid JSON in this exact format:
           isError: true
         };
       }
+      const ELEVENLABS_VOICE_IDS = {
+        rachel: "21m00Tcm4TlvDq8ikWAM",
+        domi: "AZnzlk1XvdvUeBnXmlld"
+      };
       const { data, error } = await callEdgeFunction(
         "elevenlabs-tts",
         {
           text,
-          voice: voice ?? "rachel",
+          voiceId: ELEVENLABS_VOICE_IDS[voice ?? "rachel"],
           speed: speed ?? 1
         },
         { timeoutMs: 6e4 }
@@ -5651,7 +5801,7 @@ Return ONLY valid JSON in this exact format:
             {
               type: "text",
               text: JSON.stringify(
-                asEnvelope({
+                asEnvelope2({
                   audioUrl: data.audioUrl,
                   durationSeconds: data.durationSeconds,
                   voice: voice ?? "rachel"
@@ -5800,7 +5950,7 @@ Return ONLY valid JSON in this exact format:
             {
               type: "text",
               text: JSON.stringify(
-                asEnvelope({
+                asEnvelope2({
                   carouselId: data.carousel.id,
                   templateId,
                   style: resolvedStyle,
@@ -6069,7 +6219,7 @@ var PLATFORM_CASE_MAP = {
 };
 var TIKTOK_AUDIT_APPROVED = false;
 var MCP_NOT_LIVE_FOR_POSTING = /* @__PURE__ */ new Set(["LinkedIn", "Pinterest", "Reddit"]);
-function asEnvelope2(data) {
+function asEnvelope3(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -6167,7 +6317,24 @@ function registerDistributionTools(server2) {
         linkedin: z3.object({
           article_url: z3.string().optional()
         }).optional(),
-        twitter: z3.object({}).passthrough().optional()
+        twitter: z3.object({
+          paid_partnership: z3.boolean().optional().describe(
+            "Set true for sponsored, affiliate, or branded campaign content. Forwarded to X as paid_partnership and persisted on posts.metadata.paid_partnership."
+          ),
+          disclosure: z3.union([
+            z3.string(),
+            z3.object({
+              label: z3.string().optional(),
+              text: z3.string().optional(),
+              source: z3.string().optional(),
+              required: z3.boolean().optional()
+            }).passthrough()
+          ]).optional().describe(
+            "Campaign disclosure metadata for X posts. String values become disclosure.text; object values persist to posts.metadata.disclosure."
+          ),
+          disclosure_text: z3.string().optional(),
+          disclosure_label: z3.string().optional()
+        }).passthrough().optional()
       }).optional().describe(
         'Platform-specific metadata. Example: {"tiktok":{"privacy_status":"PUBLIC_TO_EVERYONE"}, "youtube":{"title":"My Video"}}'
       ),
@@ -6211,11 +6378,11 @@ function registerDistributionTools(server2) {
       visual_gate_result: z3.object({ passed: z3.boolean() }).passthrough().optional().describe(
         "Visual QA gate verdict from the carousel/image generation pipeline. Required when mediaType is CAROUSEL_ALBUM, IMAGE, or VIDEO and VISUAL_GATE_ENFORCE is enabled on the EF. Produce with visual_quality_check tool. Must have passed=true for the gate to allow the publish."
       ),
-      origin: z3.literal("hermes").optional().describe(
-        "Mark this post as authored by an autonomous agent loop (Hermes-style). When set to 'hermes', the post is recorded with posts.origin='hermes' so the hermes_watch_results weekly review can compare engagement against your human posts. Omit (default) for posts where a human composed or approved the content. Only honoured for MCP service-role callers \u2014 JWT/frontend callers are downgraded to human."
+      origin: z3.enum(["human", "hermes", "user"]).optional().describe(
+        "Originator lineage for the post. 'hermes' marks the post as scheduled by the Hermes autonomous agent \u2014 surfaces the Hermes badge + filter in Distribution. Default 'human'. Use only when calling from an autonomous workflow (cron, Slack bot, etc.)."
       ),
       hermes_run_id: z3.string().optional().describe(
-        "Hermes cron run identifier, persisted alongside origin='hermes' for traceability (e.g. cron_<id>_<timestamp>). Ignored unless origin=hermes."
+        "Hermes cron run identifier \u2014 e.g. 'cron_<id>_<timestamp>'. Persists to posts.hermes_run_id when origin='hermes'. Use for traceability between drafts and the cron that produced them."
       )
     },
     async ({
@@ -6498,11 +6665,11 @@ Created with Social Neuron`;
           // Forward visual gate verdict + source so the EF can enforce on media posts.
           ...visual_gate_result ? { visualGateResult: visual_gate_result } : {},
           visualGateSource: "mcp",
-          // Forward autonomous-agent provenance for hermes_watch_results accounting.
-          // EF gates origin='hermes' on isServiceRoleCall && body.source==='mcp' — both true
-          // for mcp-gateway-routed calls — so JWT/frontend callers can never claim it.
+          // Originator lineage (Hermes integration, 2026-05-22). EF validates origin
+          // against the posts.origin CHECK constraint and persists hermesRunId when
+          // origin === 'hermes'.
           ...origin ? { origin } : {},
-          ...hermes_run_id ? { hermes_run_id } : {}
+          ...hermes_run_id ? { hermesRunId: hermes_run_id } : {}
         },
         { timeoutMs: 3e4 }
       );
@@ -6547,12 +6714,15 @@ Created with Social Neuron`;
         }
       }
       if (format === "json") {
+        const structuredContent = asEnvelope3(data);
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope2(data), null, 2) }],
+          structuredContent,
+          content: [{ type: "text", text: JSON.stringify(structuredContent, null, 2) }],
           isError: !data.success
         };
       }
       return {
+        structuredContent: asEnvelope3(data),
         content: [{ type: "text", text: lines.join("\n") }],
         isError: !data.success
       };
@@ -6585,7 +6755,7 @@ Created with Social Neuron`;
             content: [
               {
                 type: "text",
-                text: JSON.stringify(asEnvelope2({ accounts: [] }), null, 2)
+                text: JSON.stringify(asEnvelope3({ accounts: [] }), null, 2)
               }
             ]
           };
@@ -6608,7 +6778,7 @@ Created with Social Neuron`;
       if (format === "json") {
         return {
           content: [
-            { type: "text", text: JSON.stringify(asEnvelope2({ accounts }), null, 2) }
+            { type: "text", text: JSON.stringify(asEnvelope3({ accounts }), null, 2) }
           ]
         };
       }
@@ -6660,10 +6830,10 @@ Created with Social Neuron`;
       const rows = result.posts ?? [];
       if (rows.length === 0) {
         if (format === "json") {
+          const structuredContent2 = asEnvelope3({ posts: [] });
           return {
-            content: [
-              { type: "text", text: JSON.stringify(asEnvelope2({ posts: [] }), null, 2) }
-            ]
+            structuredContent: structuredContent2,
+            content: [{ type: "text", text: JSON.stringify(structuredContent2, null, 2) }]
           };
         }
         return {
@@ -6676,11 +6846,11 @@ Created with Social Neuron`;
         };
       }
       const posts = rows;
+      const structuredContent = asEnvelope3({ posts });
       if (format === "json") {
         return {
-          content: [
-            { type: "text", text: JSON.stringify(asEnvelope2({ posts }), null, 2) }
-          ]
+          structuredContent,
+          content: [{ type: "text", text: JSON.stringify(structuredContent, null, 2) }]
         };
       }
       const statusIcon = {
@@ -6705,6 +6875,7 @@ Created with Social Neuron`;
         lines.push(line);
       }
       return {
+        structuredContent,
         content: [{ type: "text", text: lines.join("\n") }]
       };
     }
@@ -6788,7 +6959,7 @@ Created with Social Neuron`;
               {
                 type: "text",
                 text: JSON.stringify(
-                  asEnvelope2({
+                  asEnvelope3({
                     slots,
                     total_candidates: candidates.length,
                     conflicts_avoided: conflictsAvoided
@@ -7077,7 +7248,7 @@ Created with Social Neuron`;
                 {
                   type: "text",
                   text: JSON.stringify(
-                    asEnvelope2({
+                    asEnvelope3({
                       dry_run: true,
                       plan_id: effectivePlanId,
                       approvals: approvalSummary,
@@ -7265,7 +7436,7 @@ Created with Social Neuron`;
               {
                 type: "text",
                 text: JSON.stringify(
-                  asEnvelope2({
+                  asEnvelope3({
                     plan_id: effectivePlanId,
                     approvals: approvalSummary,
                     posts: results,
@@ -7540,6 +7711,17 @@ function registerMediaTools(server2) {
           projectId: project_id
         };
       } else {
+        if (process.env.MCP_TRANSPORT !== "stdio") {
+          return {
+            content: [
+              {
+                type: "text",
+                text: `Local file paths are not accepted on the cloud MCP server. Pass the bytes via the \`file_data\` parameter (base64, up to 10MB) or supply a public URL via \`source\`.`
+              }
+            ],
+            isError: true
+          };
+        }
         let fileBuffer;
         try {
           fileBuffer = await readFile(src);
@@ -7582,7 +7764,8 @@ function registerMediaTools(server2) {
             const putResp = await fetch(putUrl, {
               method: "PUT",
               headers: { "Content-Type": ct },
-              body: fileBuffer
+              // Uint8Array: Buffer no longer satisfies BodyInit under @types/node 26 fetch types
+              body: new Uint8Array(fileBuffer)
             });
             if (!putResp.ok) {
               return {
@@ -7766,7 +7949,7 @@ init_supabase();
 init_edge_function();
 import { z as z5 } from "zod";
 init_version();
-function asEnvelope3(data) {
+function asEnvelope4(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -7819,22 +8002,20 @@ function registerAnalyticsTools(server2) {
       const rows = result?.rows ?? [];
       if (rows.length === 0) {
         if (format === "json") {
+          const structuredContent = asEnvelope4({
+            platform: platform3 ?? null,
+            days: lookbackDays,
+            totalViews: 0,
+            totalEngagement: 0,
+            postCount: 0,
+            posts: []
+          });
           return {
+            structuredContent,
             content: [
               {
                 type: "text",
-                text: JSON.stringify(
-                  asEnvelope3({
-                    platform: platform3 ?? null,
-                    days: lookbackDays,
-                    totalViews: 0,
-                    totalEngagement: 0,
-                    postCount: 0,
-                    posts: []
-                  }),
-                  null,
-                  2
-                )
+                text: JSON.stringify(structuredContent, null, 2)
               }
             ]
           };
@@ -7924,20 +8105,18 @@ function registerAnalyticsTools(server2) {
         lines.push(`  Errors: ${errored}`);
       }
       if (format === "json") {
+        const structuredContent = asEnvelope4({
+          success: true,
+          postsProcessed: result.postsProcessed,
+          queued,
+          errored
+        });
         return {
+          structuredContent,
           content: [
             {
               type: "text",
-              text: JSON.stringify(
-                asEnvelope3({
-                  success: true,
-                  postsProcessed: result.postsProcessed,
-                  queued,
-                  errored
-                }),
-                null,
-                2
-              )
+              text: JSON.stringify(structuredContent, null, 2)
             }
           ]
         };
@@ -7947,11 +8126,11 @@ function registerAnalyticsTools(server2) {
   );
 }
 function formatAnalytics(summary, days, format) {
+  const structuredContent = asEnvelope4({ ...summary, days });
   if (format === "json") {
     return {
-      content: [
-        { type: "text", text: JSON.stringify(asEnvelope3({ ...summary, days }), null, 2) }
-      ]
+      structuredContent,
+      content: [{ type: "text", text: JSON.stringify(structuredContent, null, 2) }]
     };
   }
   const lines = [
@@ -7976,6 +8155,7 @@ function formatAnalytics(summary, days, format) {
     }
   }
   return {
+    structuredContent,
     content: [{ type: "text", text: lines.join("\n") }]
   };
 }
@@ -7985,7 +8165,7 @@ init_edge_function();
 init_supabase();
 import { z as z6 } from "zod";
 init_version();
-function asEnvelope4(data) {
+function asEnvelope5(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -8040,8 +8220,10 @@ function registerBrandTools(server2) {
         };
       }
       if ((response_format || "text") === "json") {
+        const structuredContent = asEnvelope5(data);
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope4(data), null, 2) }]
+          structuredContent,
+          content: [{ type: "text", text: JSON.stringify(structuredContent, null, 2) }]
         };
       }
       const lines = [
@@ -8082,18 +8264,10 @@ function registerBrandTools(server2) {
     },
     async ({ project_id, response_format }) => {
       const projectId = project_id || await getDefaultProjectId();
-      if (!projectId) {
-        return {
-          content: [
-            {
-              type: "text",
-              text: "No project_id provided and no default project is configured."
-            }
-          ],
-          isError: true
-        };
-      }
-      const { data: result, error: efError } = await callEdgeFunction("mcp-data", { action: "brand-profile", projectId });
+      const { data: result, error: efError } = await callEdgeFunction("mcp-data", {
+        action: "brand-profile",
+        ...projectId ? { projectId } : {}
+      });
       if (efError || result && !result.success) {
         return {
           content: [
@@ -8113,20 +8287,24 @@ function registerBrandTools(server2) {
           ]
         };
       }
+      const structuredContent = asEnvelope5(data);
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope4(data), null, 2) }]
+          structuredContent,
+          content: [{ type: "text", text: JSON.stringify(structuredContent, null, 2) }]
         };
       }
+      const brandContext = data.brand_context;
       const lines = [
         `Active Brand Profile`,
-        `Project: ${projectId}`,
-        `Brand Name: ${data.brand_name || data.brand_context?.name || "N/A"}`,
+        `Project: ${data.project_id || projectId || "default"}`,
+        `Brand Name: ${data.brand_name || brandContext?.name || "N/A"}`,
         `Version: ${data.version ?? "N/A"}`,
         `Updated: ${data.updated_at || "N/A"}`,
         `Extraction Method: ${data.extraction_method || "manual"}`
       ];
       return {
+        structuredContent,
         content: [{ type: "text", text: lines.join("\n") }]
       };
     }
@@ -8201,7 +8379,7 @@ function registerBrandTools(server2) {
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope4(payload), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope5(payload), null, 2) }]
         };
       }
       return {
@@ -8291,7 +8469,7 @@ Version: ${payload.version ?? "N/A"}`
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope4(payload), null, 2) }],
+          content: [{ type: "text", text: JSON.stringify(asEnvelope5(payload), null, 2) }],
           isError: false
         };
       }
@@ -9000,7 +9178,7 @@ var PLATFORM_ENUM = [
   "bluesky"
 ];
 var DAY_NAMES = ["Sunday", "Monday", "Tuesday", "Wednesday", "Thursday", "Friday", "Saturday"];
-function asEnvelope5(data) {
+function asEnvelope6(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -9046,19 +9224,17 @@ function registerInsightsTools(server2) {
       }
       if (rows.length === 0) {
         if (format === "json") {
+          const structuredContent2 = asEnvelope6({
+            insights: [],
+            days: lookbackDays,
+            insightType: insight_type ?? null
+          });
           return {
+            structuredContent: structuredContent2,
             content: [
               {
                 type: "text",
-                text: JSON.stringify(
-                  asEnvelope5({
-                    insights: [],
-                    days: lookbackDays,
-                    insightType: insight_type ?? null
-                  }),
-                  null,
-                  2
-                )
+                text: JSON.stringify(structuredContent2, null, 2)
               }
             ]
           };
@@ -9073,20 +9249,18 @@ function registerInsightsTools(server2) {
         };
       }
       const insights = rows;
+      const structuredContent = asEnvelope6({
+        insights,
+        days: lookbackDays,
+        insightType: insight_type ?? null
+      });
       if (format === "json") {
         return {
+          structuredContent,
           content: [
             {
               type: "text",
-              text: JSON.stringify(
-                asEnvelope5({
-                  insights,
-                  days: lookbackDays,
-                  insightType: insight_type ?? null
-                }),
-                null,
-                2
-              )
+              text: JSON.stringify(structuredContent, null, 2)
             }
           ]
         };
@@ -9111,6 +9285,7 @@ function registerInsightsTools(server2) {
         lines.push(line);
       }
       return {
+        structuredContent,
         content: [{ type: "text", text: lines.join("\n") }]
       };
     }
@@ -9204,7 +9379,7 @@ function registerInsightsTools(server2) {
             {
               type: "text",
               text: JSON.stringify(
-                asEnvelope5({
+                asEnvelope6({
                   platform: platform3 ?? null,
                   days: lookbackDays,
                   recordsAnalyzed: rows.length,
@@ -9243,7 +9418,7 @@ function registerInsightsTools(server2) {
 init_edge_function();
 init_version();
 import { z as z10 } from "zod";
-function asEnvelope6(data) {
+function asEnvelope7(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -9298,7 +9473,7 @@ function registerYouTubeAnalyticsTools(server2) {
               {
                 type: "text",
                 text: JSON.stringify(
-                  asEnvelope6({ action, startDate: start_date, endDate: end_date, analytics: a }),
+                  asEnvelope7({ action, startDate: start_date, endDate: end_date, analytics: a }),
                   null,
                   2
                 )
@@ -9335,7 +9510,7 @@ function registerYouTubeAnalyticsTools(server2) {
               {
                 type: "text",
                 text: JSON.stringify(
-                  asEnvelope6({
+                  asEnvelope7({
                     action,
                     startDate: start_date,
                     endDate: end_date,
@@ -9364,7 +9539,7 @@ function registerYouTubeAnalyticsTools(server2) {
               {
                 type: "text",
                 text: JSON.stringify(
-                  asEnvelope6({
+                  asEnvelope7({
                     action,
                     videoId: video_id,
                     startDate: start_date,
@@ -9404,7 +9579,7 @@ function registerYouTubeAnalyticsTools(server2) {
               {
                 type: "text",
                 text: JSON.stringify(
-                  asEnvelope6({
+                  asEnvelope7({
                     action,
                     startDate: start_date,
                     endDate: end_date,
@@ -9430,7 +9605,7 @@ function registerYouTubeAnalyticsTools(server2) {
       }
       if (format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope6(result), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope7(result), null, 2) }]
         };
       }
       return {
@@ -9445,7 +9620,7 @@ init_edge_function();
 import { z as z11 } from "zod";
 init_supabase();
 init_version();
-function asEnvelope7(data) {
+function asEnvelope8(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -9490,7 +9665,7 @@ function registerCommentsTools(server2) {
             {
               type: "text",
               text: JSON.stringify(
-                asEnvelope7({ comments, nextPageToken: result.nextPageToken ?? null }),
+                asEnvelope8({ comments, nextPageToken: result.nextPageToken ?? null }),
                 null,
                 2
               )
@@ -9560,7 +9735,7 @@ function registerCommentsTools(server2) {
       const result = data;
       if (format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope7(result), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope8(result), null, 2) }]
         };
       }
       return {
@@ -9612,7 +9787,7 @@ function registerCommentsTools(server2) {
       const result = data;
       if (format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope7(result), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope8(result), null, 2) }]
         };
       }
       return {
@@ -9667,7 +9842,7 @@ function registerCommentsTools(server2) {
             {
               type: "text",
               text: JSON.stringify(
-                asEnvelope7({
+                asEnvelope8({
                   success: true,
                   commentId: comment_id,
                   moderationStatus: moderation_status
@@ -9726,7 +9901,7 @@ function registerCommentsTools(server2) {
           content: [
             {
               type: "text",
-              text: JSON.stringify(asEnvelope7({ success: true, commentId: comment_id }), null, 2)
+              text: JSON.stringify(asEnvelope8({ success: true, commentId: comment_id }), null, 2)
             }
           ]
         };
@@ -9743,7 +9918,7 @@ init_supabase();
 init_edge_function();
 init_version();
 import { z as z12 } from "zod";
-function asEnvelope8(data) {
+function asEnvelope9(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -9795,7 +9970,7 @@ function registerIdeationContextTools(server2) {
       const context = result.context;
       if (format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope8(context), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope9(context), null, 2) }]
         };
       }
       const lines = [
@@ -9817,7 +9992,7 @@ function registerIdeationContextTools(server2) {
 init_edge_function();
 import { z as z13 } from "zod";
 init_version();
-function asEnvelope9(data) {
+function asEnvelope10(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -9854,7 +10029,7 @@ function registerCreditsTools(server2) {
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope9(payload), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope10(payload), null, 2) }]
         };
       }
       return {
@@ -9888,7 +10063,7 @@ Monthly used: ${payload.monthlyUsed}` + (payload.monthlyLimit ? ` / ${payload.mo
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope9(payload), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope10(payload), null, 2) }]
         };
       }
       return {
@@ -9914,7 +10089,7 @@ init_supabase();
 init_edge_function();
 init_version();
 import { z as z14 } from "zod";
-function asEnvelope10(data) {
+function asEnvelope11(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -9965,7 +10140,7 @@ function registerLoopSummaryTools(server2) {
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope10(payload), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope11(payload), null, 2) }]
         };
       }
       return {
@@ -9989,7 +10164,7 @@ Next Action: ${payload.recommendedNextAction}`
 init_edge_function();
 init_version();
 import { z as z15 } from "zod";
-function asEnvelope11(data) {
+function asEnvelope12(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -10022,7 +10197,7 @@ function registerUsageTools(server2) {
           content: [
             {
               type: "text",
-              text: JSON.stringify(asEnvelope11({ tools: rows, totalCalls, totalCredits }), null, 2)
+              text: JSON.stringify(asEnvelope12({ tools: rows, totalCalls, totalCredits }), null, 2)
             }
           ]
         };
@@ -10063,7 +10238,7 @@ ${"=".repeat(40)}
 init_edge_function();
 init_version();
 import { z as z16 } from "zod";
-function asEnvelope12(data) {
+function asEnvelope13(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -10103,7 +10278,7 @@ function registerAutopilotTools(server2) {
           content: [
             {
               type: "text",
-              text: JSON.stringify(asEnvelope12(configs), null, 2)
+              text: JSON.stringify(asEnvelope13(configs), null, 2)
             }
           ]
         };
@@ -10244,7 +10419,7 @@ Schedule: ${JSON.stringify(updated.schedule_config)}`
           content: [
             {
               type: "text",
-              text: JSON.stringify(asEnvelope12(statusData), null, 2)
+              text: JSON.stringify(asEnvelope13(statusData), null, 2)
             }
           ]
         };
@@ -10328,7 +10503,7 @@ ${"=".repeat(40)}
       }
       if (format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope12(created), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope13(created), null, 2) }]
         };
       }
       return {
@@ -10351,7 +10526,7 @@ Active: ${is_active}`
 init_edge_function();
 init_version();
 import { z as z17 } from "zod";
-function asEnvelope13(data) {
+function asEnvelope14(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -10400,7 +10575,7 @@ function registerRecipeTools(server2) {
           content: [
             {
               type: "text",
-              text: JSON.stringify(asEnvelope13(recipes))
+              text: JSON.stringify(asEnvelope14(recipes))
             }
           ]
         };
@@ -10469,7 +10644,7 @@ ${lines.join("\n\n")}`
           content: [
             {
               type: "text",
-              text: JSON.stringify(asEnvelope13(recipe))
+              text: JSON.stringify(asEnvelope14(recipe))
             }
           ]
         };
@@ -10506,7 +10681,7 @@ ${lines.join("\n\n")}`
     "Execute a recipe template with the provided inputs. This creates a recipe run that processes each step sequentially. Long-running recipes will return a run_id you can check with get_recipe_run_status.",
     {
       slug: z17.string().describe('Recipe slug (e.g., "weekly-instagram-calendar")'),
-      inputs: z17.record(z17.unknown()).describe(
+      inputs: z17.record(z17.string(), z17.unknown()).describe(
         "Input values matching the recipe input schema. Use get_recipe_details to see required inputs."
       ),
       response_format: z17.enum(["text", "json"]).optional().describe("Optional response format. Defaults to text.")
@@ -10529,7 +10704,7 @@ ${lines.join("\n\n")}`
           content: [
             {
               type: "text",
-              text: JSON.stringify(asEnvelope13(result))
+              text: JSON.stringify(asEnvelope14(result))
             }
           ]
         };
@@ -10585,7 +10760,7 @@ ${result?.message || "Use get_recipe_run_status to check progress."}`
           content: [
             {
               type: "text",
-              text: JSON.stringify(asEnvelope13(run))
+              text: JSON.stringify(asEnvelope14(run))
             }
           ]
         };
@@ -10616,17 +10791,114 @@ ${JSON.stringify(run.outputs, null, 2)}
 }
 
 // src/tools/extraction.ts
-init_edge_function();
 import { z as z18 } from "zod";
 init_version();
-function asEnvelope14(data) {
-  return { _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() }, data };
-}
-function isYouTubeUrl(url) {
+
+// src/lib/urlExtraction.ts
+init_edge_function();
+function classifyYouTubeUrl(url) {
   if (/youtube\.com\/watch|youtu\.be\//.test(url)) return "video";
   if (/youtube\.com\/@/.test(url)) return "channel";
   return false;
 }
+function unwrapEf(result, label) {
+  if (result.error) return { error: result.error };
+  const env = result.data;
+  if (!env || env.success === false) {
+    return { error: env?.error ?? `No data returned from ${label}` };
+  }
+  return { payload: env.data ?? void 0 };
+}
+function segmentsToTranscript(segments) {
+  if (!Array.isArray(segments)) return "";
+  return segments.map((s) => (s?.text ?? "").trim()).filter(Boolean).join(" ");
+}
+async function extractUrlContent(url, opts = {}) {
+  const extractType = opts.extractType ?? "auto";
+  const youtubeType = classifyYouTubeUrl(url);
+  if (youtubeType === "video") {
+    const [txRes, metaRes] = await Promise.all([
+      callEdgeFunction(
+        "scrape-youtube",
+        { action: "transcript", videoUrl: url },
+        { timeoutMs: 3e4 }
+      ),
+      callEdgeFunction(
+        "scrape-youtube",
+        { action: "metadata", videoUrl: url },
+        { timeoutMs: 3e4 }
+      )
+    ]);
+    const tx = unwrapEf(txRes, "scrape-youtube transcript");
+    const meta = unwrapEf(metaRes, "scrape-youtube metadata");
+    if (tx.error && meta.error) {
+      return { error: `Failed to extract YouTube video: ${meta.error ?? tx.error}` };
+    }
+    const m = meta.payload;
+    return {
+      content: {
+        source_type: "youtube_video",
+        url,
+        title: m?.title ?? "",
+        description: m?.description ?? "",
+        transcript: segmentsToTranscript(tx.payload?.segments),
+        video_metadata: m ? {
+          views: typeof m.viewCount === "number" ? m.viewCount : 0,
+          likes: typeof m.likes === "number" ? m.likes : 0,
+          duration: typeof m.duration === "number" ? m.duration : 0,
+          tags: Array.isArray(m.tags) ? m.tags : [],
+          channel_name: m.channelName ?? ""
+        } : void 0
+      }
+    };
+  }
+  if (youtubeType === "channel") {
+    const res2 = await callEdgeFunction(
+      "scrape-youtube",
+      { action: "channel_videos", videoUrl: url },
+      { timeoutMs: 3e4 }
+    );
+    const ch = unwrapEf(res2, "scrape-youtube channel");
+    if (ch.error) return { error: `Failed to extract YouTube channel: ${ch.error}` };
+    const videos = ch.payload?.videos ?? [];
+    return {
+      content: {
+        source_type: "youtube_channel",
+        url,
+        title: url,
+        description: videos.length ? `${videos.length} recent videos:
+${videos.map((v) => `- ${v.title ?? "Untitled"}`).join("\n")}` : "No videos found for this channel."
+      }
+    };
+  }
+  const res = await callEdgeFunction(
+    "fetch-url-content",
+    { url, extractType: extractType === "auto" ? "product" : extractType },
+    { timeoutMs: 3e4 }
+  );
+  const result = unwrapEf(res, "fetch-url-content");
+  if (result.error || !result.payload) {
+    return { error: `Failed to extract URL content: ${result.error ?? "No data returned"}` };
+  }
+  const info = result.payload;
+  return {
+    content: {
+      source_type: extractType === "product" ? "product" : "article",
+      url,
+      title: info.name ?? "",
+      description: info.description ?? "",
+      features: info.features,
+      benefits: info.benefits,
+      usp: info.usp,
+      suggested_hooks: info.suggestedHookAngles
+    }
+  };
+}
+
+// src/tools/extraction.ts
+function asEnvelope15(data) {
+  return { _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() }, data };
+}
 function formatExtractedContentAsText(content) {
   const lines = [];
   lines.push(`Source: ${content.source_type} (${content.url})`);
@@ -10671,15 +10943,15 @@ ${content.suggested_hooks.map((h) => `  - ${h}`).join("\n")}`
 function registerExtractionTools(server2) {
   server2.tool(
     "extract_url_content",
-    "Extract text content from any URL \u2014 YouTube video transcripts, article text, or product page features/benefits/USP. YouTube URLs auto-route to transcript extraction with optional comments. Use before generate_content to repurpose existing content, or before plan_content_week to base a content plan on a source URL.",
+    "Extract text content from any URL \u2014 YouTube video transcript + metadata (title/views/channel), or article text, or product page features/benefits/USP. YouTube URLs auto-route to transcript+metadata extraction; channel URLs return a recent-video list. Use before generate_content to repurpose existing content, or before plan_content_week to base a content plan on a source URL.",
     {
       url: z18.string().url().describe("URL to extract content from"),
-      extract_type: z18.enum(["auto", "transcript", "article", "product"]).default("auto").describe("Type of extraction"),
-      include_comments: z18.boolean().default(false).describe("Include top comments (YouTube only)"),
-      max_results: z18.number().min(1).max(100).default(10).describe("Max comments to include"),
+      extract_type: z18.enum(["auto", "transcript", "article", "product"]).default("auto").describe(
+        "auto = product-style extraction; transcript = YouTube (auto-detected by URL); article = blog/news main text + key points; product = e-commerce features/benefits/USP."
+      ),
       response_format: z18.enum(["text", "json"]).default("text")
     },
-    async ({ url, extract_type, include_comments, max_results, response_format }) => {
+    async ({ url, extract_type, response_format }) => {
       const ssrfCheck = await validateUrlForSSRF(url);
       if (!ssrfCheck.isValid) {
         return {
@@ -10687,106 +10959,20 @@ function registerExtractionTools(server2) {
           isError: true
         };
       }
-      const youtubeType = isYouTubeUrl(url);
       try {
-        let extracted;
-        if (youtubeType === "video") {
-          const { data, error } = await callEdgeFunction(
-            "scrape-youtube",
-            {
-              url,
-              includeComments: include_comments,
-              maxComments: max_results
-            },
-            { timeoutMs: 3e4 }
-          );
-          if (error || !data) {
-            return {
-              content: [
-                {
-                  type: "text",
-                  text: `Failed to extract YouTube video: ${error ?? "No data returned"}`
-                }
-              ],
-              isError: true
-            };
-          }
-          extracted = {
-            source_type: "youtube_video",
-            url,
-            title: data.title ?? "",
-            description: data.description ?? "",
-            transcript: data.transcript,
-            video_metadata: data.metadata ? {
-              views: data.metadata.views ?? 0,
-              likes: data.metadata.likes ?? 0,
-              duration: data.metadata.duration ?? 0,
-              tags: data.metadata.tags ?? [],
-              channel_name: data.metadata.channelName ?? ""
-            } : void 0
-          };
-        } else if (youtubeType === "channel") {
-          const { data, error } = await callEdgeFunction(
-            "scrape-youtube",
-            {
-              url,
-              type: "channel"
-            },
-            { timeoutMs: 3e4 }
-          );
-          if (error || !data) {
-            return {
-              content: [
-                {
-                  type: "text",
-                  text: `Failed to extract YouTube channel: ${error ?? "No data returned"}`
-                }
-              ],
-              isError: true
-            };
-          }
-          extracted = {
-            source_type: "youtube_channel",
-            url,
-            title: data.title ?? "",
-            description: data.description ?? ""
-          };
-        } else {
-          const body = { url };
-          if (extract_type !== "auto") body.type = extract_type;
-          const { data, error } = await callEdgeFunction(
-            "fetch-url-content",
-            body,
-            { timeoutMs: 3e4 }
-          );
-          if (error || !data) {
-            return {
-              content: [
-                {
-                  type: "text",
-                  text: `Failed to extract URL content: ${error ?? "No data returned"}`
-                }
-              ],
-              isError: true
-            };
-          }
-          const sourceType = extract_type === "product" ? "product" : data.type === "product" ? "product" : "article";
-          extracted = {
-            source_type: sourceType,
-            url,
-            title: data.title ?? "",
-            description: data.description ?? "",
-            transcript: data.content,
-            features: data.features,
-            benefits: data.benefits,
-            usp: data.usp,
-            suggested_hooks: data.suggestedHooks
+        const { content: extracted, error } = await extractUrlContent(url, {
+          extractType: extract_type
+        });
+        if (error || !extracted) {
+          return {
+            content: [{ type: "text", text: error ?? "No data returned" }],
+            isError: true
           };
         }
         if (response_format === "json") {
           return {
             content: [
-              { type: "text", text: JSON.stringify(asEnvelope14(extracted), null, 2) }
+              { type: "text", text: JSON.stringify(asEnvelope15(extracted), null, 2) }
             ],
             isError: false
           };
@@ -10810,7 +10996,7 @@ function registerExtractionTools(server2) {
 init_quality();
 init_version();
 import { z as z19 } from "zod";
-function asEnvelope15(data) {
+function asEnvelope16(data) {
   return { _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() }, data };
 }
 function registerQualityTools(server2) {
@@ -10863,7 +11049,7 @@ function registerQualityTools(server2) {
       });
       if (response_format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope15(result), null, 2) }],
+          content: [{ type: "text", text: JSON.stringify(asEnvelope16(result), null, 2) }],
           isError: false
         };
       }
@@ -10938,7 +11124,7 @@ function registerQualityTools(server2) {
           content: [
             {
               type: "text",
-              text: JSON.stringify(asEnvelope15({ posts: postsWithQuality, summary }), null, 2)
+              text: JSON.stringify(asEnvelope16({ posts: postsWithQuality, summary }), null, 2)
             }
           ],
           isError: false
@@ -11273,7 +11459,7 @@ function buildCorrectiveHint(overflowIssues, spellingIssues) {
 
 // src/tools/visualQuality.ts
 init_version();
-function asEnvelope16(data) {
+function asEnvelope17(data) {
   return { _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() }, data };
 }
 var VALID_STYLES = ["dark-cinematic", "clean-editorial", "bold-authority"];
@@ -11398,7 +11584,7 @@ function registerVisualQualityTools(server2) {
             {
               type: "text",
               text: JSON.stringify(
-                asEnvelope16({ ...result, correctiveHint: hint || null }),
+                asEnvelope17({ ...result, correctiveHint: hint || null }),
                 null,
                 2
               )
@@ -11468,7 +11654,7 @@ function registerVisualQualityTools(server2) {
         return { content: [{ type: "text", text: lines.join("\n") }], isError: false };
       }
       return {
-        content: [{ type: "text", text: JSON.stringify(asEnvelope16(data), null, 2) }],
+        content: [{ type: "text", text: JSON.stringify(asEnvelope17(data), null, 2) }],
         isError: false
       };
     }
@@ -11506,7 +11692,7 @@ function extractJsonArray(text) {
 function toRecord(value) {
   return value && typeof value === "object" ? value : void 0;
 }
-function asEnvelope17(data) {
+function asEnvelope18(data) {
   return { _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() }, data };
 }
 function tomorrowIsoDate() {
@@ -11519,9 +11705,6 @@ function addDaysToIsoDate(dateStr, days) {
   d.setDate(d.getDate() + days);
   return d.toISOString().split("T")[0];
 }
-function isYouTubeUrl2(url) {
-  return /youtube\.com\/watch|youtu\.be\/|youtube\.com\/@/.test(url);
-}
 function formatPlanAsText(plan) {
   const lines = [];
   lines.push(`WEEKLY CONTENT PLAN: "${plan.topic}"`);
@@ -11619,20 +11802,22 @@ function registerPlanningTools(server2) {
         let sourceContext = "";
         if (source_url) {
           try {
-            const fnName = isYouTubeUrl2(source_url) ? "scrape-youtube" : "fetch-url-content";
-            const { data } = await callEdgeFunction(
-              fnName,
-              { url: source_url },
-              { timeoutMs: 3e4 }
-            );
-            if (data) {
-              const parts = [
-                data.title ? String(data.title) : "",
-                data.description ? String(data.description) : "",
-                data.transcript ? String(data.transcript).slice(0, 2e3) : "",
-                data.content ? String(data.content).slice(0, 2e3) : ""
-              ].filter(Boolean);
-              sourceContext = parts.join("\n\n");
+            const ssrf = await validateUrlForSSRF(source_url);
+            if (ssrf.isValid) {
+              const { content } = await extractUrlContent(source_url);
+              if (content) {
+                const parts = [
+                  content.title,
+                  content.description,
+                  content.transcript ? content.transcript.slice(0, 2e3) : "",
+                  content.features?.length ? `Features:
+${content.features.join("\n")}` : "",
+                  content.benefits?.length ? `Benefits:
+${content.benefits.join("\n")}` : "",
+                  content.usp ?? ""
+                ].filter(Boolean);
+                sourceContext = parts.join("\n\n");
+              }
             }
           } catch {
           }
@@ -11838,13 +12023,16 @@ ${rawText.slice(0, 1e3)}`
             };
           }
         }
+        const structuredContent = asEnvelope18(plan);
         if (response_format === "json") {
           return {
-            content: [{ type: "text", text: JSON.stringify(asEnvelope17(plan), null, 2) }],
+            structuredContent,
+            content: [{ type: "text", text: JSON.stringify(structuredContent, null, 2) }],
             isError: false
           };
         }
         return {
+          structuredContent,
           content: [{ type: "text", text: formatPlanAsText(plan) }],
           isError: false
         };
@@ -11915,7 +12103,7 @@ ${rawText.slice(0, 1e3)}`
         };
         if (response_format === "json") {
           return {
-            content: [{ type: "text", text: JSON.stringify(asEnvelope17(result), null, 2) }],
+            content: [{ type: "text", text: JSON.stringify(asEnvelope18(result), null, 2) }],
             isError: false
           };
         }
@@ -11974,7 +12162,7 @@ ${rawText.slice(0, 1e3)}`
       };
       if (response_format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope17(payload), null, 2) }],
+          content: [{ type: "text", text: JSON.stringify(asEnvelope18(payload), null, 2) }],
           isError: false
         };
       }
@@ -12046,7 +12234,7 @@ ${rawText.slice(0, 1e3)}`
       };
       if (response_format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope17(payload), null, 2) }],
+          content: [{ type: "text", text: JSON.stringify(asEnvelope18(payload), null, 2) }],
           isError: false
         };
       }
@@ -12099,7 +12287,7 @@ ${rawText.slice(0, 1e3)}`
       };
       if (response_format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope17(payload), null, 2) }],
+          content: [{ type: "text", text: JSON.stringify(asEnvelope18(payload), null, 2) }],
           isError: false
         };
       }
@@ -12121,7 +12309,7 @@ init_edge_function();
 init_supabase();
 init_version();
 import { z as z22 } from "zod";
-function asEnvelope18(data) {
+function asEnvelope19(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -12196,7 +12384,7 @@ function registerPlanApprovalTools(server2) {
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope18(payload), null, 2) }],
+          content: [{ type: "text", text: JSON.stringify(asEnvelope19(payload), null, 2) }],
           isError: false
         };
       }
@@ -12248,7 +12436,7 @@ function registerPlanApprovalTools(server2) {
       };
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope18(payload), null, 2) }],
+          content: [{ type: "text", text: JSON.stringify(asEnvelope19(payload), null, 2) }],
           isError: false
         };
       }
@@ -12326,7 +12514,7 @@ function registerPlanApprovalTools(server2) {
       }
       if ((response_format || "text") === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope18(data), null, 2) }],
+          content: [{ type: "text", text: JSON.stringify(asEnvelope19(data), null, 2) }],
           isError: false
         };
       }
@@ -12346,7 +12534,194 @@ function registerPlanApprovalTools(server2) {
 // src/tools/discovery.ts
 init_tool_catalog();
 import { z as z23 } from "zod";
+init_supabase();
+init_request_context();
+var KNOWLEDGE_BASE_URL = "https://socialneuron.com/for-developers";
+var KNOWLEDGE_SEARCH_LIMIT = 10;
+var SearchOutputSchema = {
+  results: z23.array(
+    z23.object({
+      id: z23.string(),
+      title: z23.string(),
+      url: z23.string().url()
+    })
+  )
+};
+var FetchOutputSchema = {
+  id: z23.string(),
+  title: z23.string(),
+  text: z23.string(),
+  url: z23.string().url(),
+  metadata: z23.record(z23.string(), z23.string()).optional()
+};
+var STATIC_KNOWLEDGE_DOCUMENTS = [
+  {
+    id: "overview",
+    title: "Social Neuron MCP Overview",
+    url: `${KNOWLEDGE_BASE_URL}#mcp`,
+    text: [
+      "Social Neuron exposes an MCP server for creating, scheduling, and optimizing social content.",
+      "Use the hosted streamable HTTP endpoint at https://mcp.socialneuron.com/mcp for ChatGPT, Claude, and other remote MCP clients.",
+      "The npm package provides stdio transport for local tools and Codex-style workflows."
+    ].join("\n"),
+    metadata: { source: "public-developer-docs", category: "overview" }
+  },
+  {
+    id: "integrations",
+    title: "Supported Social Integrations",
+    url: "https://socialneuron.com/integrations",
+    text: [
+      "Social Neuron tracks platform availability on the integrations page.",
+      "YouTube, TikTok, Instagram, LinkedIn, X, and Facebook are live for supported posting workflows.",
+      "Threads and Bluesky are supported surfaces where live availability depends on the current integration status."
+    ].join("\n"),
+    metadata: { source: "public-integrations-page", category: "integrations" }
+  },
+  {
+    id: "chatgpt-connector",
+    title: "ChatGPT Connector Setup",
+    url: `${KNOWLEDGE_BASE_URL}#chatgpt`,
+    text: [
+      "In ChatGPT Developer Mode, create an MCP app using https://mcp.socialneuron.com/mcp as the MCP URL.",
+      "The connector uses OAuth for account linking and tool scopes for read, write, distribution, analytics, comments, and autopilot access.",
+      "Publishing tools should be treated as externally visible actions and require the distribute scope."
+    ].join("\n"),
+    metadata: { source: "public-developer-docs", category: "chatgpt" }
+  },
+  {
+    id: "privacy-security",
+    title: "Connector Security and Data Minimization",
+    url: `${KNOWLEDGE_BASE_URL}#security`,
+    text: [
+      "Social Neuron MCP tools enforce OAuth or API-key scopes before tool execution.",
+      "Read-only discovery tools expose public product and tool metadata, not private account content.",
+      "User-owned content and analytics require authenticated scopes and organization or project membership checks in backend functions."
+    ].join("\n"),
+    metadata: { source: "public-developer-docs", category: "security" }
+  }
+];
+function toolKnowledgeDocument(tool) {
+  const lines = [
+    `Tool: ${tool.name}`,
+    `Description: ${tool.description}`,
+    `Module: ${tool.module}`,
+    `Required scope: ${tool.scope}`
+  ];
+  if (tool.task_intent) lines.push(`Task intent: ${tool.task_intent}`);
+  if (tool.use_when) lines.push(`Use when: ${tool.use_when}`);
+  if (tool.avoid_when) lines.push(`Avoid when: ${tool.avoid_when}`);
+  if (tool.next_tools?.length) lines.push(`Common next tools: ${tool.next_tools.join(", ")}`);
+  return {
+    id: `tool:${tool.name}`,
+    title: `MCP tool: ${tool.name}`,
+    url: `${KNOWLEDGE_BASE_URL}#tool-${tool.name}`,
+    text: lines.join("\n"),
+    metadata: {
+      source: "mcp-tool-catalog",
+      category: "tool",
+      module: tool.module,
+      scope: tool.scope
+    }
+  };
+}
+function getKnowledgeDocuments() {
+  return [
+    ...STATIC_KNOWLEDGE_DOCUMENTS,
+    ...TOOL_CATALOG.filter((t) => !t.internal).map(toolKnowledgeDocument)
+  ];
+}
+function tokenize(input) {
+  return input.toLowerCase().split(/[^a-z0-9:_-]+/).map((token) => token.trim()).filter(Boolean);
+}
+function scoreDocument(queryTokens, doc) {
+  const title = doc.title.toLowerCase();
+  const text = doc.text.toLowerCase();
+  const metadata = JSON.stringify(doc.metadata ?? {}).toLowerCase();
+  return queryTokens.reduce((score, token) => {
+    if (doc.id.toLowerCase() === token) return score + 12;
+    if (doc.id.toLowerCase().includes(token)) score += 8;
+    if (title.includes(token)) score += 5;
+    if (text.includes(token)) score += 2;
+    if (metadata.includes(token)) score += 1;
+    return score;
+  }, 0);
+}
+function searchKnowledge(query) {
+  const docs = getKnowledgeDocuments();
+  const tokens = tokenize(query);
+  if (tokens.length === 0) {
+    return docs.slice(0, KNOWLEDGE_SEARCH_LIMIT);
+  }
+  return docs.map((doc) => ({ doc, score: scoreDocument(tokens, doc) })).filter(({ score }) => score > 0).sort((a, b) => b.score - a.score || a.doc.title.localeCompare(b.doc.title)).slice(0, KNOWLEDGE_SEARCH_LIMIT).map(({ doc }) => doc);
+}
 function registerDiscoveryTools(server2) {
+  server2.registerTool(
+    "search",
+    {
+      title: "Search Social Neuron Knowledge",
+      description: "Search public Social Neuron product, integration, developer, and MCP tool knowledge. Uses the standard ChatGPT MCP search schema and never returns private account content.",
+      inputSchema: {
+        query: z23.string().describe("Search query.")
+      },
+      outputSchema: SearchOutputSchema,
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      }
+    },
+    async ({ query }) => {
+      const structuredContent = {
+        results: searchKnowledge(query).map((doc) => ({
+          id: doc.id,
+          title: doc.title,
+          url: doc.url
+        }))
+      };
+      return {
+        structuredContent,
+        content: [{ type: "text", text: JSON.stringify(structuredContent) }]
+      };
+    }
+  );
+  server2.registerTool(
+    "fetch",
+    {
+      title: "Fetch Social Neuron Knowledge",
+      description: "Fetch a public Social Neuron knowledge document by ID. Use IDs returned by the search tool.",
+      inputSchema: {
+        id: z23.string().describe("Document ID returned by search.")
+      },
+      outputSchema: FetchOutputSchema,
+      annotations: {
+        readOnlyHint: true,
+        destructiveHint: false,
+        idempotentHint: true,
+        openWorldHint: false
+      }
+    },
+    async ({ id }) => {
+      const doc = getKnowledgeDocuments().find((candidate) => candidate.id === id);
+      if (!doc) {
+        return {
+          content: [{ type: "text", text: `Document not found: ${id}` }],
+          isError: true
+        };
+      }
+      const structuredContent = {
+        id: doc.id,
+        title: doc.title,
+        text: doc.text,
+        url: doc.url,
+        ...doc.metadata ? { metadata: doc.metadata } : {}
+      };
+      return {
+        structuredContent,
+        content: [{ type: "text", text: JSON.stringify(structuredContent) }]
+      };
+    }
+  );
   server2.tool(
     "search_tools",
     'Search available tools by name, description, module, or scope. Use "name" detail (~50 tokens) for quick lookup, "summary" (~500 tokens) for descriptions, "full" for complete input schemas. Start here if unsure which tool to call \u2014 filter by module (e.g. "planning", "content", "analytics") to narrow results.',
@@ -12356,13 +12731,20 @@ function registerDiscoveryTools(server2) {
       scope: z23.string().optional().describe('Filter by required scope (e.g. "mcp:read", "mcp:write")'),
       detail: z23.enum(["name", "summary", "full"]).default("summary").describe(
         'Detail level: "name" for just tool names, "summary" for names + descriptions, "full" for complete info including scope and module'
+      ),
+      available_only: z23.boolean().default(false).describe(
+        "When true, only return tools allowed by the current API key/OAuth scopes. Use this after a permission_denied error."
       )
     },
-    async ({ query, module, scope, detail }) => {
+    async ({ query, module, scope, detail, available_only }) => {
+      const currentScopes = getRequestScopes() ?? getAuthenticatedScopes();
+      const hasKnownScopes = currentScopes.length > 0;
+      const isAvailable = (tool) => !hasKnownScopes || hasScope(currentScopes, tool.scope);
       let results = [...TOOL_CATALOG];
       if (query) {
         results = searchTools(query);
       }
+      results = results.filter((t) => !t.internal);
       if (module) {
         const moduleTools = getToolsByModule(module);
         results = results.filter((t) => moduleTools.some((mt) => mt.name === t.name));
@@ -12371,24 +12753,48 @@ function registerDiscoveryTools(server2) {
         const scopeTools = getToolsByScope(scope);
         results = results.filter((t) => scopeTools.some((st) => st.name === t.name));
       }
+      if (available_only) {
+        results = results.filter(isAvailable);
+      }
+      const unavailableCount = hasKnownScopes ? results.filter((t) => !isAvailable(t)).length : 0;
       let output;
       switch (detail) {
         case "name":
           output = results.map((t) => t.name);
           break;
         case "summary":
-          output = results.map((t) => ({ name: t.name, description: t.description }));
+          output = results.map((t) => ({
+            name: t.name,
+            description: t.description,
+            ...hasKnownScopes || scope ? { required_scope: t.scope } : {},
+            ...hasKnownScopes ? { available: isAvailable(t) } : {},
+            ...t.task_intent ? { task_intent: t.task_intent } : {},
+            ...t.use_when ? { use_when: t.use_when } : {},
+            ...t.avoid_when ? { avoid_when: t.avoid_when } : {}
+          }));
           break;
         case "full":
         default:
-          output = results;
+          output = results.map((tool) => ({
+            ...tool,
+            required_scope: tool.scope,
+            ...hasKnownScopes ? { available: isAvailable(tool) } : {}
+          }));
           break;
       }
       return {
         content: [
           {
             type: "text",
-            text: JSON.stringify({ toolCount: results.length, tools: output }, null, 2)
+            text: JSON.stringify(
+              {
+                toolCount: results.length,
+                ...hasKnownScopes ? { scopes: { available: currentScopes, unavailable_matches: unavailableCount } } : {},
+                tools: output
+              },
+              null,
+              detail === "full" ? 2 : 0
+            )
           }
         ]
       };
@@ -12403,7 +12809,7 @@ import { randomUUID as randomUUID3 } from "node:crypto";
 init_supabase();
 init_quality();
 init_version();
-function asEnvelope19(data) {
+function asEnvelope20(data) {
   return { _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() }, data };
 }
 var PLATFORM_ENUM2 = z24.enum([
@@ -12418,6 +12824,7 @@ var PLATFORM_ENUM2 = z24.enum([
 ]);
 var BASE_PLAN_CREDITS = 15;
 var SOURCE_EXTRACTION_CREDITS = 5;
+var SCHEDULE_POST_CREDITS = 1;
 function registerPipelineTools(server2) {
   server2.tool(
     "check_pipeline_readiness",
@@ -12447,6 +12854,7 @@ function registerPipelineTools(server2) {
           throw new Error(readinessError ?? "No response from mcp-data");
         }
         const credits = readiness.credits;
+        const isUnlimited = readiness.is_unlimited === true;
         const connectedPlatforms = readiness.connected_platforms;
         const missingPlatforms = readiness.missing_platforms;
         const hasBrand = readiness.has_brand;
@@ -12455,7 +12863,7 @@ function registerPipelineTools(server2) {
         const insightsFresh = readiness.insights_fresh;
         const blockers = [];
         const warnings = [];
-        if (credits < estimatedCost) {
+        if (!isUnlimited && credits < estimatedCost) {
           blockers.push(`Insufficient credits: ${credits} available, ~${estimatedCost} needed`);
         }
         if (missingPlatforms.length > 0) {
@@ -12494,7 +12902,7 @@ function registerPipelineTools(server2) {
         };
         if (format === "json") {
           return {
-            content: [{ type: "text", text: JSON.stringify(asEnvelope19(result), null, 2) }]
+            content: [{ type: "text", text: JSON.stringify(asEnvelope20(result), null, 2) }]
           };
         }
         const lines = [];
@@ -12533,7 +12941,7 @@ function registerPipelineTools(server2) {
   );
   server2.tool(
     "run_content_pipeline",
-    "Run the full content pipeline: research trends \u2192 generate plan \u2192 quality check \u2192 auto-approve \u2192 schedule posts. Chains all stages in one call for maximum efficiency. Set dry_run=true to preview the plan without publishing. Check check_pipeline_readiness first to verify credits, OAuth, and brand profile are ready.",
+    "Run the full content pipeline: research trends \u2192 generate plan \u2192 quality check \u2192 auto-approve \u2192 schedule posts. Chains all stages in one call for maximum efficiency. Set dry_run=true to preview the plan without publishing. To schedule posts, set schedule_confirmed=true after the user explicitly approves publishing. Check check_pipeline_readiness first to verify credits, OAuth, and brand profile are ready.",
     {
       project_id: z24.string().uuid().optional().describe("Project ID (auto-detected if omitted)"),
       topic: z24.string().optional().describe("Content topic (required if no source_url)"),
@@ -12549,6 +12957,9 @@ function registerPipelineTools(server2) {
       ),
       max_credits: z24.number().optional().describe("Credit budget cap"),
       dry_run: z24.boolean().default(false).describe("If true, skip scheduling and return plan only"),
+      schedule_confirmed: z24.boolean().default(false).describe(
+        "Required to schedule posts. Set true only after explicit user confirmation to publish/schedule."
+      ),
       skip_stages: z24.array(z24.enum(["research", "quality", "schedule"])).optional().describe("Stages to skip"),
       response_format: z24.enum(["text", "json"]).default("json")
     },
@@ -12563,6 +12974,7 @@ function registerPipelineTools(server2) {
       auto_approve_threshold,
       max_credits,
       dry_run,
+      schedule_confirmed,
       skip_stages,
       response_format
     }) => {
@@ -12578,6 +12990,29 @@ function registerPipelineTools(server2) {
         };
       }
       const skipSet = new Set(skip_stages ?? []);
+      const schedulingRequested = !dry_run && !skipSet.has("schedule");
+      if (schedulingRequested && !schedule_confirmed) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: 'Scheduling requires explicit confirmation. Re-run with schedule_confirmed=true after the user approves publishing, or set dry_run=true / skip_stages=["schedule"].'
+            }
+          ],
+          isError: true
+        };
+      }
+      if (schedulingRequested && skipSet.has("quality")) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: "Scheduling cannot run when the quality stage is skipped."
+            }
+          ],
+          isError: true
+        };
+      }
       try {
         const resolvedProjectId = project_id ?? await getDefaultProjectId() ?? void 0;
         const estimatedCost = BASE_PLAN_CREDITS + (source_url ? SOURCE_EXTRACTION_CREDITS : 0);
@@ -12591,8 +13026,9 @@ function registerPipelineTools(server2) {
           { timeoutMs: 1e4 }
         );
         const availableCredits = budgetData?.credits ?? 0;
+        const isUnlimited = budgetData?.is_unlimited === true;
         const creditLimit = max_credits ?? availableCredits;
-        if (availableCredits < estimatedCost) {
+        if (!isUnlimited && availableCredits < estimatedCost) {
           return {
             content: [
               {
@@ -12619,6 +13055,7 @@ function registerPipelineTools(server2) {
               approval_mode,
               auto_approve_threshold,
               dry_run,
+              schedule_confirmed,
               skip_stages: skip_stages ?? []
             },
             current_stage: "planning",
@@ -12684,7 +13121,9 @@ function registerPipelineTools(server2) {
         stagesCompleted.push("planning");
         const rawText = String(planData.text ?? planData.content ?? "");
         const postsArray = extractJsonArray(rawText);
-        const posts = (postsArray ?? []).map((p) => ({
+        const requestedPlatformSet = new Set(platforms);
+        const maxPosts = platforms.length * days * posts_per_day;
+        const parsedPosts = (postsArray ?? []).map((p) => ({
           id: String(p.id ?? randomUUID3().slice(0, 8)),
           day: Number(p.day ?? 1),
           date: String(p.date ?? ""),
@@ -12698,6 +13137,23 @@ function registerPipelineTools(server2) {
           visual_direction: p.visual_direction ? String(p.visual_direction) : void 0,
           media_type: p.media_type ? String(p.media_type) : void 0
         }));
+        const platformFilteredPosts = parsedPosts.filter(
+          (post) => requestedPlatformSet.has(post.platform)
+        );
+        const posts = platformFilteredPosts.slice(0, maxPosts);
+        if (parsedPosts.length > maxPosts) {
+          errors.push({
+            stage: "planning",
+            message: `AI returned ${parsedPosts.length} posts; truncated to ${maxPosts}.`
+          });
+        }
+        const invalidPlatformCount = parsedPosts.length - platformFilteredPosts.length;
+        if (invalidPlatformCount > 0) {
+          errors.push({
+            stage: "planning",
+            message: `Dropped ${invalidPlatformCount} post(s) with unrequested or invalid platform.`
+          });
+        }
         let postsApproved = 0;
         let postsFlagged = 0;
         if (!skipSet.has("quality")) {
@@ -12818,21 +13274,27 @@ function registerPipelineTools(server2) {
         let postsScheduled = 0;
         if (!dry_run && !skipSet.has("schedule") && postsApproved > 0) {
           const approvedPosts = posts.filter((p) => p.status === "approved");
+          const scheduleBase = /* @__PURE__ */ new Date();
+          scheduleBase.setDate(scheduleBase.getDate() + 1);
+          const scheduleBaseMs = scheduleBase.getTime();
           for (const post of approvedPosts) {
             if (creditsUsed >= creditLimit) {
               errors.push({ stage: "schedule", message: "Credit limit reached" });
               break;
             }
+            const scheduledAt = post.schedule_at ?? new Date(scheduleBaseMs + (Math.max(1, post.day) - 1) * 864e5).toISOString();
             try {
               const { error: schedError } = await callEdgeFunction(
                 "schedule-post",
                 {
-                  platform: post.platform,
+                  platforms: [post.platform],
                   caption: post.caption,
                   title: post.title,
                   hashtags: post.hashtags,
-                  media_url: post.media_url,
-                  scheduled_at: post.schedule_at,
+                  mediaUrl: post.media_url,
+                  scheduledAt,
+                  planId,
+                  idempotencyKey: `pipeline-${planId}-${post.id}`,
                   ...resolvedProjectId ? { projectId: resolvedProjectId, project_id: resolvedProjectId } : {}
                 },
                 { timeoutMs: 15e3 }
@@ -12844,6 +13306,7 @@ function registerPipelineTools(server2) {
                 });
               } else {
                 postsScheduled++;
+                creditsUsed += SCHEDULE_POST_CREDITS;
               }
             } catch (schedErr) {
               errors.push({
@@ -12898,7 +13361,7 @@ function registerPipelineTools(server2) {
         if (response_format === "json") {
           return {
             content: [
-              { type: "text", text: JSON.stringify(asEnvelope19(resultPayload), null, 2) }
+              { type: "text", text: JSON.stringify(asEnvelope20(resultPayload), null, 2) }
             ]
           };
         }
@@ -12979,7 +13442,7 @@ function registerPipelineTools(server2) {
       }
       if (format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope19(data), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope20(data), null, 2) }]
         };
       }
       const lines = [];
@@ -13113,7 +13576,7 @@ function registerPipelineTools(server2) {
         if (response_format === "json") {
           return {
             content: [
-              { type: "text", text: JSON.stringify(asEnvelope19(resultPayload), null, 2) }
+              { type: "text", text: JSON.stringify(asEnvelope20(resultPayload), null, 2) }
             ]
           };
         }
@@ -13163,7 +13626,7 @@ function buildPlanPrompt(topic, platforms, days, postsPerDay, sourceUrl) {
 init_edge_function();
 import { z as z25 } from "zod";
 init_version();
-function asEnvelope20(data) {
+function asEnvelope21(data) {
   return { _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() }, data };
 }
 function registerSuggestTools(server2) {
@@ -13271,7 +13734,7 @@ function registerSuggestTools(server2) {
         if (format === "json") {
           return {
             content: [
-              { type: "text", text: JSON.stringify(asEnvelope20(resultPayload), null, 2) }
+              { type: "text", text: JSON.stringify(asEnvelope21(resultPayload), null, 2) }
             ]
           };
         }
@@ -13408,7 +13871,7 @@ function detectAnomalies(currentData, previousData, sensitivity = "medium", aver
 
 // src/tools/digest.ts
 init_version();
-function asEnvelope21(data) {
+function asEnvelope22(data) {
   return { _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() }, data };
 }
 var PLATFORM_ENUM3 = z26.enum([
@@ -13577,7 +14040,7 @@ function registerDigestTools(server2) {
         };
         if (format === "json") {
           return {
-            content: [{ type: "text", text: JSON.stringify(asEnvelope21(digest), null, 2) }]
+            content: [{ type: "text", text: JSON.stringify(asEnvelope22(digest), null, 2) }]
           };
         }
         const lines = [];
@@ -13676,7 +14139,7 @@ Best: ${best.id.slice(0, 8)}... (${best.platform}) \u2014 ${best.views.toLocaleS
         if (format === "json") {
           return {
             content: [
-              { type: "text", text: JSON.stringify(asEnvelope21(resultPayload), null, 2) }
+              { type: "text", text: JSON.stringify(asEnvelope22(resultPayload), null, 2) }
             ]
           };
         }
@@ -13725,18 +14188,129 @@ var WEIGHTS = {
   structuralPatterns: 0.05
 };
 function norm(content) {
-  return content.toLowerCase().replace(/[^a-z0-9\s]/g, " ");
+  return content.toLowerCase().replace(/[^a-z0-9\s]/g, " ").replace(/\s+/g, " ").trim();
 }
 function findMatches(content, terms) {
   const n = norm(content);
-  return terms.filter((t) => n.includes(t.toLowerCase()));
+  return terms.filter((t) => {
+    const nt = norm(t);
+    return nt.length > 0 && n.includes(nt);
+  });
 }
 function findMissing(content, terms) {
   const n = norm(content);
-  return terms.filter((t) => !n.includes(t.toLowerCase()));
+  return terms.filter((t) => {
+    const nt = norm(t);
+    return nt.length > 0 && !n.includes(nt);
+  });
+}
+function asStringArray(v) {
+  if (Array.isArray(v)) return v.map((x) => String(x ?? "").trim()).filter(Boolean);
+  if (typeof v === "string") {
+    return v.split(/[,;\n]/).map((s) => s.trim()).filter(Boolean);
+  }
+  return [];
+}
+function extractAtomicTerms(entries) {
+  const out = [];
+  for (const raw of entries) {
+    const e = (raw || "").trim();
+    if (!e) continue;
+    const quoted = e.match(/['"“”‘’]([^'"“”‘’]{2,40})['"“”‘’]/g);
+    if (quoted) {
+      for (const q of quoted) out.push(q.replace(/['"“”‘’]/g, "").trim());
+      continue;
+    }
+    const words = e.split(/\s+/);
+    const isGuidancePhrase = words.length > 2 && /\b(tone|voice|style|approach|language)\b/i.test(e);
+    if (!e.includes("(") && words.length <= 3 && !isGuidancePhrase) out.push(e);
+  }
+  return Array.from(new Set(out.map((t) => t.trim()).filter(Boolean)));
+}
+function hasField(obj, key) {
+  return Object.prototype.hasOwnProperty.call(obj, key) && obj[key] != null;
+}
+function unionTerms(existing, incoming) {
+  const out = [];
+  const seen = /* @__PURE__ */ new Set();
+  for (const t of [...existing, ...incoming]) {
+    if (t && !seen.has(t)) {
+      seen.add(t);
+      out.push(t);
+    }
+  }
+  return out;
+}
+function mergeVoiceVocabulary(resolved, raw) {
+  const voice = raw.voice;
+  if (!voice || typeof voice !== "object") return resolved;
+  const vp = asStringArray(voice.preferredTerms);
+  const vb = asStringArray(voice.bannedTerms);
+  if (!vp.length && !vb.length) return resolved;
+  const existing = resolved.vocabularyRules ?? {};
+  return {
+    ...resolved,
+    vocabularyRules: {
+      preferredTerms: unionTerms(asStringArray(existing.preferredTerms), vp),
+      bannedTerms: unionTerms(asStringArray(existing.bannedTerms), vb)
+    }
+  };
+}
+function resolveBrandProfile(raw) {
+  if (!raw || typeof raw !== "object") return {};
+  const r = raw;
+  const name = typeof r.name === "string" ? r.name : void 0;
+  const voiceProfile = r.voiceProfile;
+  const vocabularyRules = r.vocabularyRules;
+  if (voiceProfile && vocabularyRules) {
+    return mergeVoiceVocabulary(raw, r);
+  }
+  if (voiceProfile) {
+    return mergeVoiceVocabulary(
+      {
+        name,
+        voiceProfile,
+        vocabularyRules: {
+          bannedTerms: extractAtomicTerms(asStringArray(voiceProfile.avoidPatterns)),
+          preferredTerms: asStringArray(voiceProfile.languagePatterns)
+        },
+        targetAudience: r.targetAudience,
+        writingStyleRules: r.writingStyleRules
+      },
+      r
+    );
+  }
+  const isFlat = hasField(r, "voiceTone") || hasField(r, "voiceTags") || hasField(r, "discouragedTerms") || hasField(r, "preferredTerms");
+  if (isFlat) {
+    const ta = r.targetAudience;
+    const psy = ta?.psychographics;
+    const painPoints = ta ? asStringArray(psy?.painPoints ?? ta.painPoints) : [];
+    const interests = ta ? asStringArray(psy?.interests ?? ta.interests) : [];
+    return mergeVoiceVocabulary(
+      {
+        name,
+        voiceProfile: {
+          tone: [...asStringArray(r.voiceTags), ...asStringArray(r.voiceTone)],
+          style: asStringArray(r.voiceStyle),
+          languagePatterns: [],
+          avoidPatterns: []
+        },
+        vocabularyRules: {
+          bannedTerms: asStringArray(r.discouragedTerms),
+          preferredTerms: asStringArray(r.preferredTerms)
+        },
+        targetAudience: painPoints.length || interests.length ? { psychographics: { painPoints, interests } } : void 0
+      },
+      r
+    );
+  }
+  const stub = { name };
+  if (vocabularyRules)
+    stub.vocabularyRules = vocabularyRules;
+  return mergeVoiceVocabulary(stub, r);
 }
 var FABRICATION_PATTERNS = [
-  { regex: /\b\d+[,.]?\d*\s*(%|percent)/gi, label: "unverified percentage" },
+  { regex: /\b\d+(?:[,.]\d+)?\s*(?:%|percent\b)/gi, label: "unverified percentage" },
   { regex: /\b(award[- ]?winning|best[- ]selling|#\s*1)\b/gi, label: "unverified ranking" },
   {
     regex: /\b(guaranteed|proven to|studies show|scientifically proven)\b/gi,
@@ -13952,24 +14526,25 @@ function computeBrandConsistency(content, profile, threshold = 60) {
       fabricationWarnings: []
     };
   }
+  const resolved = resolveBrandProfile(profile);
   const dimensions = {
-    toneAlignment: scoreTone(content, profile),
-    vocabularyAdherence: scoreVocab(content, profile),
-    avoidCompliance: scoreAvoid(content, profile),
-    audienceRelevance: scoreAudience(content, profile),
-    brandMentions: scoreBrand(content, profile),
-    structuralPatterns: scoreStructure(content, profile)
+    toneAlignment: scoreTone(content, resolved),
+    vocabularyAdherence: scoreVocab(content, resolved),
+    avoidCompliance: scoreAvoid(content, resolved),
+    audienceRelevance: scoreAudience(content, resolved),
+    brandMentions: scoreBrand(content, resolved),
+    structuralPatterns: scoreStructure(content, resolved)
   };
   const overall = Math.round(
     Object.values(dimensions).reduce((sum, d) => sum + d.score * d.weight, 0)
   );
   const preferred = [
-    ...profile.voiceProfile?.languagePatterns || [],
-    ...profile.vocabularyRules?.preferredTerms || []
+    ...resolved.voiceProfile?.languagePatterns || [],
+    ...resolved.vocabularyRules?.preferredTerms || []
   ];
   const banned = [
-    ...profile.voiceProfile?.avoidPatterns || [],
-    ...profile.vocabularyRules?.bannedTerms || []
+    ...resolved.voiceProfile?.avoidPatterns || [],
+    ...resolved.vocabularyRules?.bannedTerms || []
   ];
   const fabrications = detectFabricationPatterns(content);
   return {
@@ -14000,11 +14575,11 @@ function hexToLab(hex) {
   const lb = srgbToLinear(b);
   const x = lr * 0.4124564 + lg * 0.3575761 + lb * 0.1804375;
   const y = lr * 0.2126729 + lg * 0.7151522 + lb * 0.072175;
-  const z36 = lr * 0.0193339 + lg * 0.119192 + lb * 0.9503041;
+  const z39 = lr * 0.0193339 + lg * 0.119192 + lb * 0.9503041;
   const f = (t) => t > 8856e-6 ? Math.cbrt(t) : 7.787 * t + 16 / 116;
   const fx = f(x / 0.95047);
   const fy = f(y / 1);
-  const fz = f(z36 / 1.08883);
+  const fz = f(z39 / 1.08883);
   return { L: 116 * fy - 16, a: 500 * (fx - fy), b: 200 * (fy - fz) };
 }
 function deltaE2000(lab1, lab2) {
@@ -14156,7 +14731,7 @@ function exportFigma(palette, typography) {
 }
 
 // src/tools/brandRuntime.ts
-function asEnvelope22(data) {
+function asEnvelope23(data) {
   return {
     _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() },
     data
@@ -14237,8 +14812,9 @@ function registerBrandRuntimeTools(server2) {
           pagesScraped: meta.pagesScraped || 0
         }
       };
-      const envelope = asEnvelope22(runtime);
+      const envelope = asEnvelope23(runtime);
       return {
+        structuredContent: envelope,
         content: [{ type: "text", text: JSON.stringify(envelope, null, 2) }]
       };
     }
@@ -14379,7 +14955,7 @@ function registerBrandRuntimeTools(server2) {
       }
       const profile = row.profile_data;
       const checkResult = computeBrandConsistency(content, profile);
-      const envelope = asEnvelope22(checkResult);
+      const envelope = asEnvelope23(checkResult);
       return {
         content: [{ type: "text", text: JSON.stringify(envelope, null, 2) }]
       };
@@ -14413,7 +14989,7 @@ function registerBrandRuntimeTools(server2) {
         content_colors,
         threshold ?? 10
       );
-      const envelope = asEnvelope22(auditResult);
+      const envelope = asEnvelope23(auditResult);
       return {
         content: [{ type: "text", text: JSON.stringify(envelope, null, 2) }]
       };
@@ -14448,7 +15024,7 @@ function registerBrandRuntimeTools(server2) {
         row.profile_data.typography,
         format
       );
-      const envelope = asEnvelope22({ format, tokens: output });
+      const envelope = asEnvelope23({ format, tokens: output });
       return {
         content: [{ type: "text", text: JSON.stringify(envelope, null, 2) }]
       };
@@ -14460,58 +15036,7 @@ function registerBrandRuntimeTools(server2) {
 init_edge_function();
 import { z as z28 } from "zod";
 init_supabase();
-init_request_context();
 init_version();
-var MAX_CREDITS_PER_RUN2 = Math.max(0, Number(process.env.SOCIALNEURON_MAX_CREDITS_PER_RUN || 0));
-var MAX_ASSETS_PER_RUN2 = Math.max(0, Number(process.env.SOCIALNEURON_MAX_ASSETS_PER_RUN || 0));
-var _globalCreditsUsed2 = 0;
-var _globalAssetsGenerated2 = 0;
-function getCreditsUsed2() {
-  const ctx = requestContext.getStore();
-  return ctx ? ctx.creditsUsed : _globalCreditsUsed2;
-}
-function addCreditsUsed2(amount) {
-  const ctx = requestContext.getStore();
-  if (ctx) {
-    ctx.creditsUsed += amount;
-  } else {
-    _globalCreditsUsed2 += amount;
-  }
-}
-function getAssetsGenerated2() {
-  const ctx = requestContext.getStore();
-  return ctx ? ctx.assetsGenerated : _globalAssetsGenerated2;
-}
-function addAssetsGenerated2(count) {
-  const ctx = requestContext.getStore();
-  if (ctx) {
-    ctx.assetsGenerated += count;
-  } else {
-    _globalAssetsGenerated2 += count;
-  }
-}
-function checkCreditBudget2(estimatedCost) {
-  if (MAX_CREDITS_PER_RUN2 <= 0) return { ok: true };
-  const used = getCreditsUsed2();
-  if (used + estimatedCost > MAX_CREDITS_PER_RUN2) {
-    return {
-      ok: false,
-      message: `Credit budget exceeded: ${used} used + ${estimatedCost} estimated > ${MAX_CREDITS_PER_RUN2} limit. Use a smaller slide count or cheaper image model.`
-    };
-  }
-  return { ok: true };
-}
-function checkAssetBudget2() {
-  if (MAX_ASSETS_PER_RUN2 <= 0) return { ok: true };
-  const gen = getAssetsGenerated2();
-  if (gen >= MAX_ASSETS_PER_RUN2) {
-    return {
-      ok: false,
-      message: `Asset limit reached: ${gen}/${MAX_ASSETS_PER_RUN2} assets generated this run.`
-    };
-  }
-  return { ok: true };
-}
 var IMAGE_CREDIT_ESTIMATES2 = {
   midjourney: 20,
   "nano-banana": 15,
@@ -14520,7 +15045,7 @@ var IMAGE_CREDIT_ESTIMATES2 = {
   "flux-max": 50,
   "gpt4o-image": 40,
   imagen4: 35,
-  "imagen4-fast": 25,
+  "imagen4-fast": 35,
   seedream: 20
 };
 async function fetchBrandVisualContext(projectId) {
@@ -14644,14 +15169,14 @@ function registerCarouselTools(server2) {
       const carouselTextCost = 10 + slideCount * 2;
       const perImageCost = IMAGE_CREDIT_ESTIMATES2[image_model] ?? 30;
       const totalEstimatedCost = carouselTextCost + slideCount * perImageCost;
-      const budgetCheck = checkCreditBudget2(totalEstimatedCost);
+      const budgetCheck = checkCreditBudget(totalEstimatedCost);
       if (!budgetCheck.ok) {
         return {
           content: [{ type: "text", text: budgetCheck.message }],
           isError: true
         };
       }
-      const assetBudget = checkAssetBudget2();
+      const assetBudget = checkAssetBudget(slideCount);
       if (!assetBudget.ok) {
         return {
           content: [{ type: "text", text: assetBudget.message }],
@@ -14698,8 +15223,15 @@ function registerCarouselTools(server2) {
         };
       }
       const carousel = carouselData.carousel;
+      const imageAssetBudget = checkAssetBudget(carousel.slides.length);
+      if (!imageAssetBudget.ok) {
+        return {
+          content: [{ type: "text", text: imageAssetBudget.message }],
+          isError: true
+        };
+      }
       const textCredits = carousel.credits?.used ?? carouselTextCost;
-      addCreditsUsed2(textCredits);
+      addCreditsUsed(textCredits);
       const imageJobs = await Promise.all(
         carousel.slides.map(async (slide) => {
           const promptParts = [];
@@ -14729,8 +15261,8 @@ function registerCarouselTools(server2) {
             }
             const jobId = data.asyncJobId ?? data.taskId ?? null;
             if (jobId) {
-              addCreditsUsed2(perImageCost);
-              addAssetsGenerated2(1);
+              addCreditsUsed(perImageCost);
+              addAssetsGenerated(1);
             }
             return {
               slideNumber: slide.slideNumber,
@@ -14838,19 +15370,19 @@ function registerCarouselTools(server2) {
 init_edge_function();
 import { z as z29 } from "zod";
 init_version();
-function asEnvelope23(data) {
+function asEnvelope24(data) {
   return { _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() }, data };
 }
 function registerNicheResearchTools(server2) {
   server2.tool(
     "find_winning_content",
-    "Find QA-gated high-performing short-form videos in the project's niche. Returns extracted hook patterns, content structures, and pre-compiled replication prompts you can use to generate new content on a different topic. Backed by niche_winners view (qa_score >= 0.5 + replication_prompt populated).",
+    "Find QA-gated high-performing short-form videos in the project's niche. Returns extracted hook patterns, content structures, and pre-compiled replication prompts you can use to generate new content on a different topic. Only QA-gated winners with a populated replication prompt are returned.",
     {
       project_id: z29.string().uuid().optional().describe("Project ID (auto-detected if omitted)"),
       platform: z29.enum(["tiktok", "instagram", "youtube", "reddit", "twitter"]).optional().describe("Filter to one platform. Omit for all platforms."),
       days: z29.number().int().min(1).max(365).default(30).describe("Window: only return winners scanned within this many days."),
       limit: z29.number().int().min(1).max(50).default(10).describe("Number of winners to return (1-50)."),
-      min_qa_score: z29.number().min(0).max(1).default(0.5).describe("Minimum QA score (0..1). Default 0.5 matches the niche_winners view floor."),
+      min_qa_score: z29.number().min(0).max(1).default(0.5).describe("Minimum QA score (0..1). Default 0.5."),
       response_format: z29.enum(["text", "json"]).optional()
     },
     async ({ project_id, platform: platform3, days, limit, min_qa_score, response_format }) => {
@@ -14872,7 +15404,7 @@ function registerNicheResearchTools(server2) {
               {
                 type: "text",
                 text: JSON.stringify(
-                  asEnvelope23({
+                  asEnvelope24({
                     winners,
                     count: winners.length,
                     filters: result?.filters ?? {}
@@ -15171,6 +15703,16 @@ import { z as z31 } from "zod";
 import fs from "node:fs/promises";
 import path from "node:path";
 var CALENDAR_URI = "ui://content-calendar/mcp-app.html";
+var RecentPostOutputSchema = z31.object({
+  id: z31.string(),
+  platform: z31.string(),
+  status: z31.string(),
+  title: z31.string().nullable(),
+  external_post_id: z31.string().nullable(),
+  published_at: z31.string().nullable(),
+  scheduled_at: z31.string().nullable(),
+  created_at: z31.string()
+});
 function startOfCurrentWeekMonday() {
   const now = /* @__PURE__ */ new Date();
   const day = now.getDay();
@@ -15190,6 +15732,11 @@ function registerContentCalendarApp(server2) {
           "ISO date for the week start (YYYY-MM-DD); defaults to the current week's Monday."
         )
       },
+      outputSchema: {
+        start_date: z31.string(),
+        posts: z31.array(RecentPostOutputSchema),
+        scopes: z31.array(z31.string())
+      },
       _meta: {
         ui: {
           resourceUri: CALENDAR_URI,
@@ -15228,11 +15775,17 @@ function registerContentCalendarApp(server2) {
         if (!ts) return false;
         return ts.split("T")[0] >= fromDate;
       });
+      const structuredContent = {
+        start_date: fromDate,
+        posts,
+        scopes: userScopes
+      };
       return {
+        structuredContent,
         content: [
           {
             type: "text",
-            text: JSON.stringify({ posts, scopes: userScopes })
+            text: `Loaded ${posts.length} calendar post${posts.length === 1 ? "" : "s"} from ${fromDate}.`
           }
         ]
       };
@@ -15491,7 +16044,7 @@ var writeReflectionSchema = {
     prm_score_ids: z33.array(z33.string()).optional().describe("PRM score IDs that informed this reflection."),
     handoff_ids: z33.array(z33.string()).optional().describe("Handoff event IDs that triggered this reflection.")
   }).strict().describe(
-    "Source evidence for this reflection. Only these four keys are accepted (Anti-Goodhart guard \u2014 unknown keys are rejected to prevent spurious provenance claims)."
+    "Source evidence for this reflection. Only these four keys are accepted \u2014 unknown keys are rejected to prevent spurious provenance claims."
   ),
   brand_id: z33.string().describe("Brand profile UUID this reflection belongs to."),
   pipeline_id: z33.string().optional().describe("Optional: pipeline run UUID."),
@@ -15509,7 +16062,7 @@ var readReflectionSchema = {
 var recordOutcomeSchema = {
   decision_event_id: z33.string().describe("UUID of the decision_events row to record an outcome for."),
   horizon: z33.enum(["1h", "6h", "24h"]).describe(
-    "Observation horizon. Only horizon=24h with a non-null reward triggers a content_bandits posterior update; 1h/6h are stored but inert for learning."
+    "Observation horizon. Only horizon=24h with a non-null reward triggers a learning-loop update; 1h/6h are stored but inert for learning."
   ),
   reward: z33.number().min(0).max(1).describe("Normalised reward signal in [0, 1]. Higher = better outcome."),
   outcome_metrics: z33.record(z33.string(), z33.number()).optional().describe(
@@ -15519,7 +16072,7 @@ var recordOutcomeSchema = {
 function registerHarnessTools(server2, _ctx) {
   server2.tool(
     "write_agent_reflection",
-    "Persist a verbal reflection for an agent loop. Provenance keys are restricted (Anti-Goodhart safety): only content_history_id, outcome_event_id, prm_score_ids, and handoff_ids are accepted \u2014 unknown keys are rejected at the input layer. Requires mcp:write scope. Returns the created reflection UUID on success.",
+    "Persist a verbal reflection for an agent loop. Provenance keys are restricted to an allowlist: only content_history_id, outcome_event_id, prm_score_ids, and handoff_ids are accepted \u2014 unknown keys are rejected at the input layer. Requires mcp:write scope. Returns the created reflection UUID on success.",
     writeReflectionSchema,
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     async (args) => {
@@ -15547,7 +16100,7 @@ function registerHarnessTools(server2, _ctx) {
   );
   server2.tool(
     "record_outcome",
-    "Record an outcome for a published decision event. Idempotent on (decision_event_id, horizon) \u2014 safe to call multiple times. Returns idempotent:true when the row already existed (UPDATE), idempotent:false on fresh INSERT. Note: only horizon=24h with reward != null triggers a content_bandits posterior update; 1h/6h outcomes are stored but are inert for the learning loop. Requires mcp:write scope.",
+    "Record an outcome for a published decision event. Idempotent on (decision_event_id, horizon) \u2014 safe to call multiple times. Returns idempotent:true when the row already existed (UPDATE), idempotent:false on fresh INSERT. Note: only horizon=24h with reward != null triggers a learning-loop update; 1h/6h outcomes are stored but are inert for the learning loop. Requires mcp:write scope.",
     recordOutcomeSchema,
     // eslint-disable-next-line @typescript-eslint/no-explicit-any
     async (args) => {
@@ -15611,7 +16164,7 @@ function registerHarnessTools(server2, _ctx) {
 init_edge_function();
 init_version();
 import { z as z34 } from "zod";
-function asEnvelope24(data) {
+function asEnvelope25(data) {
   return {
     _meta: {
       version: MCP_VERSION,
@@ -15633,13 +16186,13 @@ var PLATFORM = z34.enum([
 function registerHermesTools(server2) {
   server2.tool(
     "save_draft_to_library",
-    "Save a draft post to the SN content library. Use when an autonomous agent (Hermes) wants to persist a draft before the founder approves it. Lands in ContentLibrary with status='draft', origin='hermes'. The draft can then be approved/edited in the SN UI.",
+    "Save a draft post to the SN content library. Use when an autonomous agent wants to persist a draft for review before publishing. Lands in the content library with status='draft'. The draft can then be approved/edited in the SN UI.",
     {
       platform: PLATFORM.describe("Target platform for the draft."),
       copy: z34.string().min(1).max(8e3).describe("The draft post body."),
       project_id: z34.string().optional().describe("SN project UUID. Optional but recommended."),
       media_url: z34.string().url().optional().describe("Optional cover/media URL (R2 signed URL)."),
-      hermes_run_id: z34.string().optional().describe("Hermes cron run id, for traceability."),
+      hermes_run_id: z34.string().optional().describe("Agent run id, for traceability."),
       source_intel_ids: z34.array(z34.string()).optional().describe("Optional list of intel_signals.id rows that informed this draft."),
       response_format: z34.enum(["text", "json"]).optional()
     },
@@ -15662,7 +16215,7 @@ function registerHermesTools(server2) {
       const payload = { content_id: data?.content_id ?? null };
       if (format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope24(payload), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope25(payload), null, 2) }]
         };
       }
       return {
@@ -15706,7 +16259,7 @@ function registerHermesTools(server2) {
       };
       if (response_format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope24(payload), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope25(payload), null, 2) }]
         };
       }
       return {
@@ -15721,11 +16274,11 @@ function registerHermesTools(server2) {
   );
   server2.tool(
     "record_observation",
-    'Record an agent observation ("Hermes noticed X this week"). Surfaces in UnifiedAnalytics > Playbook tab. Use for weekly reflection digests and mid-campaign pulse summaries.',
+    'Record an agent observation (e.g. "topic X engagement up 23% this week"). Surfaces in the analytics Playbook. Use for weekly reflection digests and mid-campaign pulse summaries.',
     {
-      summary: z34.string().min(1).max(2e3).describe("One-paragraph summary, founder-facing."),
+      summary: z34.string().min(1).max(2e3).describe("One-paragraph summary, shown to the account owner."),
       deltas: z34.record(z34.string(), z34.union([z34.number(), z34.string(), z34.boolean()])).optional().describe("Optional structured key/value payload (e.g. {topic_x_er_pct: 23})."),
-      run_id: z34.string().optional().describe("Hermes cron run id for traceability."),
+      run_id: z34.string().optional().describe("Agent run id for traceability."),
       response_format: z34.enum(["text", "json"]).optional()
     },
     async ({ summary, deltas, run_id, response_format }) => {
@@ -15736,7 +16289,7 @@ function registerHermesTools(server2) {
       const payload = { observation_id: data?.observation_id ?? null };
       if (response_format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope24(payload), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope25(payload), null, 2) }]
         };
       }
       return {
@@ -15780,7 +16333,7 @@ function registerHermesTools(server2) {
       };
       if (response_format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope24(payload), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope25(payload), null, 2) }]
         };
       }
       return {
@@ -15795,7 +16348,7 @@ function registerHermesTools(server2) {
   );
   server2.tool(
     "record_campaign_spend",
-    "Log a campaign cost line. Use when Hermes incurs spend that should be attributed to a campaign \u2014 drafts, renders, paid amp. Categories: hermes_drafts / carousel_renders / analytics_pulls / paid_amplification / other. Read aggregate via get_active_campaigns.",
+    "Log a campaign cost line. Use when an autonomous agent incurs spend that should be attributed to a campaign \u2014 drafts, renders, paid amp. Read aggregate via get_active_campaigns.",
     {
       campaign_id: z34.string().min(1).max(200).describe("Campaign identifier (slug)."),
       category: z34.enum([
@@ -15824,7 +16377,7 @@ function registerHermesTools(server2) {
       };
       if (response_format === "json") {
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope24(payload), null, 2) }]
+          content: [{ type: "text", text: JSON.stringify(asEnvelope25(payload), null, 2) }]
         };
       }
       return {
@@ -15839,7 +16392,7 @@ function registerHermesTools(server2) {
   );
   server2.tool(
     "get_active_campaigns",
-    "List currently-running campaigns with thesis, budget, hero format, and current spend. Used by Hermes pitch skill to bias drafts toward active campaign themes.",
+    "List currently-running campaigns with thesis, budget, hero format, and current spend. Use to bias drafts toward active campaign themes.",
     {
       response_format: z34.enum(["text", "json"]).optional()
     },
@@ -15854,7 +16407,7 @@ function registerHermesTools(server2) {
           content: [
             {
               type: "text",
-              text: JSON.stringify(asEnvelope24({ campaigns }), null, 2)
+              text: JSON.stringify(asEnvelope25({ campaigns }), null, 2)
             }
           ]
         };
@@ -15885,6 +16438,343 @@ ${"=".repeat(40)}
   );
 }
 
+// src/tools/skills.ts
+init_version();
+import { z as z35 } from "zod";
+
+// src/lib/skills-manifest.ts
+var SKILLS_MANIFEST = [
+  {
+    id: "skill-brand-locked-viral-hook-reel",
+    name: "Brand-locked viral hook reel",
+    studio: "video",
+    category: "hook",
+    shortDescription: "Pulls your brand voice + the hook pattern that actually worked last cycle, then renders a 12s reel with stacked camera moves and brand-cloned voice.",
+    hookFormula: "Pattern interrupt in first 0.5s + escalating stakes every 2s + brand-locked voice + cloned-from-winning-past-post structure.",
+    estimatedCredits: 580,
+    estimatedSeconds: 158,
+    featured: true,
+    stepCount: 9,
+    inspiredBy: ["MrBeast", "Alex Hormozi"]
+  }
+];
+function getSkill(id) {
+  return SKILLS_MANIFEST.find((s) => s.id === id);
+}
+function listSkills(opts) {
+  let entries = SKILLS_MANIFEST;
+  if (opts?.studio) entries = entries.filter((s) => s.studio === opts.studio);
+  if (opts?.featuredOnly) entries = entries.filter((s) => s.featured);
+  return entries;
+}
+
+// src/tools/skills.ts
+function asEnvelope26(data) {
+  return {
+    _meta: {
+      version: MCP_VERSION,
+      timestamp: (/* @__PURE__ */ new Date()).toISOString()
+    },
+    data
+  };
+}
+var STUDIO_VALUES = ["video", "avatar", "carousel", "voice", "caption", "edit"];
+function renderSkillSummary(skill) {
+  const lines = [];
+  lines.push(`${skill.name} (${skill.id})`);
+  lines.push(`  Studio: ${skill.studio} \xB7 Category: ${skill.category}`);
+  if (skill.featured) lines.push("  \u2B50 Featured");
+  lines.push(`  ${skill.shortDescription}`);
+  lines.push(`  Hook: ${skill.hookFormula}`);
+  lines.push(
+    `  Cost: ~${skill.estimatedCredits} credits \xB7 ~${skill.estimatedSeconds}s \xB7 ${skill.stepCount} steps`
+  );
+  lines.push(`  Inspired by: ${skill.inspiredBy.join(", ")}`);
+  return lines.join("\n");
+}
+function registerSkillsTools(server2) {
+  server2.tool(
+    "list_skills",
+    'List Social Neuron content workflow skills available to the authenticated user. A skill is a brand-locked multi-step pipeline (research \u2192 hook \u2192 script \u2192 visuals \u2192 voice \u2192 captions \u2192 assembly \u2192 quality gate \u2192 schedule) inspired by documented viral patterns (MrBeast 3-second hook, Hormozi pattern interrupt, etc.). Use this tool when the user asks "what can SN do", "what skills are available", "show me viral templates", or before calling run_skill so you can pick the right one.',
+    {
+      studio: z35.enum(STUDIO_VALUES).optional().describe("Filter to one studio (video, avatar, carousel, voice, caption, edit)."),
+      featured_only: z35.boolean().optional().describe("Return only featured (recommended) skills. Defaults to false."),
+      response_format: z35.enum(["text", "json"]).optional().describe("Response format. Defaults to text \u2014 human-readable summary.")
+    },
+    async ({ studio, featured_only, response_format }) => {
+      const skills = listSkills({ studio, featuredOnly: featured_only });
+      const format = response_format ?? "text";
+      if (format === "json") {
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope26({ count: skills.length, skills }), null, 2)
+            }
+          ]
+        };
+      }
+      if (skills.length === 0) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: "No skills match the filter." + (studio ? ` Studio "${studio}" has no skills yet.` : "") + "\n\nAvailable studios with skills: " + Array.from(new Set(SKILLS_MANIFEST.map((s) => s.studio))).join(", ")
+            }
+          ]
+        };
+      }
+      const blocks = skills.map(renderSkillSummary).join("\n\n");
+      const header = `${skills.length} skill${skills.length === 1 ? "" : "s"} available
+${"=".repeat(40)}`;
+      return {
+        content: [{ type: "text", text: `${header}
+
+${blocks}` }]
+      };
+    }
+  );
+  server2.tool(
+    "run_skill",
+    "Run a Social Neuron workflow skill end-to-end (brand-locked content production). Returns a structured run preview with the exact step plan, credit cost, and a deep-link to launch the run in the SN dashboard. A future release executes in-process so you can stream step-by-step progress back to the user. Call list_skills first to discover available skill ids.",
+    {
+      skill_id: z35.string().describe(
+        'The id of the skill to run (e.g. "skill-brand-locked-viral-hook-reel"). Use list_skills to discover available ids.'
+      ),
+      topic: z35.string().min(1).describe('What the content is about (e.g. "why we built Social Neuron").'),
+      audience: z35.string().optional().describe(
+        'Who the content is for (e.g. "first-time founders"). Defaults to brand persona.'
+      ),
+      hook: z35.string().optional().describe(
+        "Optional explicit hook. If omitted, the skill drafts and scores 3-5 candidates."
+      ),
+      cta: z35.string().optional().describe("Optional call-to-action override. Defaults to brand standard CTA."),
+      response_format: z35.enum(["text", "json"]).optional().describe("Response format. Defaults to text.")
+    },
+    async ({ skill_id, topic, audience, hook, cta, response_format }) => {
+      const skill = getSkill(skill_id);
+      const format = response_format ?? "text";
+      if (!skill) {
+        const knownIds = SKILLS_MANIFEST.map((s) => s.id).join(", ");
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Unknown skill_id "${skill_id}". Available skills: ${knownIds}. Call list_skills for descriptions.`
+            }
+          ],
+          isError: true
+        };
+      }
+      const runUrl = "https://socialneuron.com/dashboard/creation?skill=" + encodeURIComponent(skill.id);
+      const inputs = { topic, audience, hook, cta };
+      const previewedAt = (/* @__PURE__ */ new Date()).toISOString();
+      if (format === "json") {
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(
+                asEnvelope26({
+                  status: "preview",
+                  skill,
+                  inputs,
+                  runUrl,
+                  previewedAt,
+                  note: "This release returns a preview. A future release will execute in-process."
+                }),
+                null,
+                2
+              )
+            }
+          ]
+        };
+      }
+      const lines = [
+        `Ready to run: ${skill.name}`,
+        "=".repeat(40),
+        "",
+        skill.shortDescription,
+        "",
+        `Hook formula: ${skill.hookFormula}`,
+        `Inspired by:  ${skill.inspiredBy.join(", ")}`,
+        "",
+        "Inputs",
+        `  topic    : ${topic}`,
+        `  audience : ${audience ?? "(brand persona)"}`,
+        `  hook     : ${hook ?? "(auto-drafted from 3-5 candidates, scored)"}`,
+        `  cta      : ${cta ?? "(brand default)"}`,
+        "",
+        "Plan",
+        `  ${skill.stepCount} steps \xB7 ~${skill.estimatedCredits} credits \xB7 ~${skill.estimatedSeconds}s wall time`,
+        "",
+        `Launch in dashboard: ${runUrl}`,
+        "",
+        "\u26A0\uFE0F  Preview only. End-to-end MCP execution arrives in a future release."
+      ];
+      return {
+        content: [{ type: "text", text: lines.join("\n") }]
+      };
+    }
+  );
+}
+
+// src/tools/loopPulse.ts
+init_edge_function();
+init_version();
+import { z as z36 } from "zod";
+function asEnvelope27(data) {
+  return {
+    _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() },
+    data
+  };
+}
+function registerLoopPulseTools(server2) {
+  server2.tool(
+    "get_loop_pulse",
+    'Read the dynamic loop-health KPIs for the Social Neuron growth loop over the last 7 days. Returns reflection coverage, decision coverage, visual gate pass rate, learning-update application rate, per-platform learning uptake, autopilot lag, and pattern aggregation counts \u2014 each with a status ("ok" / "warn" / "bad") and a why-line explaining what the metric measures. Use this to decide whether the loop is closing or where it is stuck before recommending next moves.',
+    {
+      response_format: z36.enum(["text", "json"]).optional().describe("Output format. Defaults to text.")
+    },
+    async ({ response_format }) => {
+      const format = response_format ?? "text";
+      const { data, error } = await callEdgeFunction("mc-loop-pulse", {});
+      if (error || !data) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Failed to read loop pulse: ${error || "no data"}`
+            }
+          ],
+          isError: true
+        };
+      }
+      if (format === "json") {
+        return {
+          content: [{ type: "text", text: JSON.stringify(asEnvelope27(data), null, 2) }]
+        };
+      }
+      const rank = { bad: 0, warn: 1, unknown: 2, ok: 3 };
+      const sorted = [...data.kpis].sort((a, b) => rank[a.status] - rank[b.status]);
+      const lines = [
+        `LOOP PULSE \u2014 overall: ${data.overall.toUpperCase()}`,
+        "",
+        ...sorted.map((k) => {
+          const unit = k.unit ?? "";
+          const val = k.value == null ? "\u2014" : `${k.value}${unit}`;
+          return `[${k.status.toUpperCase().padEnd(4)}] ${k.label}: ${val}
+        ${k.why}`;
+        }),
+        "",
+        `Generated ${data.generated_at}`
+      ];
+      return {
+        content: [{ type: "text", text: lines.join("\n") }]
+      };
+    }
+  );
+}
+
+// src/tools/banditState.ts
+init_edge_function();
+init_supabase();
+init_version();
+import { z as z37 } from "zod";
+function asEnvelope28(data) {
+  return {
+    _meta: { version: MCP_VERSION, timestamp: (/* @__PURE__ */ new Date()).toISOString() },
+    data
+  };
+}
+function registerBanditStateTools(server2) {
+  server2.tool(
+    "get_bandit_state",
+    "Read the current content learning state for a project. Returns top-K arms per (arm_type, platform) with expected performance and uncertainty. Use this to reason about which hook family / format / timing slot currently performs best on each platform before recommending next moves. Arm types: hook_family, length_bucket (xs/s/m/l/xl by platform), posting_time_bucket (morning/midday/evening/late), content_format (video/carousel/image/caption/text/avatar/storyboard).",
+    {
+      project_id: z37.string().uuid().optional().describe("Project UUID. Defaults to the authenticated user default project."),
+      platform: z37.enum([
+        "instagram",
+        "tiktok",
+        "youtube",
+        "linkedin",
+        "twitter",
+        "facebook",
+        "threads",
+        "bluesky"
+      ]).optional().describe(
+        "Lowercase platform name. Omit to return both platform-scoped and legacy platform-agnostic arms."
+      ),
+      arm_type: z37.enum([
+        "hook_family",
+        "hook_type",
+        "format",
+        "timing_slot",
+        "topic_cluster",
+        "caption_style",
+        "platform",
+        "story_type",
+        "emoji_type",
+        "length_bucket",
+        "posting_time_bucket",
+        "content_format"
+      ]).optional().describe("Arm dimension. Omit to return all types grouped."),
+      top_k: z37.number().min(1).max(50).optional().describe("Max arms per (arm_type) group. Default 5."),
+      response_format: z37.enum(["text", "json"]).optional().describe("Output format. Defaults to text.")
+    },
+    async ({ project_id, platform: platform3, arm_type, top_k, response_format }) => {
+      const format = response_format ?? "text";
+      const projectId = project_id ?? await getDefaultProjectId();
+      if (!projectId) {
+        return {
+          content: [
+            { type: "text", text: "No project_id provided and no default project available." }
+          ],
+          isError: true
+        };
+      }
+      const { data, error } = await callEdgeFunction("mc-bandit-state", {
+        project_id: projectId,
+        platform: platform3,
+        arm_type,
+        top_k
+      });
+      if (error || !data) {
+        return {
+          content: [{ type: "text", text: `Failed to read bandit state: ${error || "no data"}` }],
+          isError: true
+        };
+      }
+      if (format === "json") {
+        return { content: [{ type: "text", text: JSON.stringify(asEnvelope28(data), null, 2) }] };
+      }
+      const lines = [
+        `BANDIT STATE \u2014 project ${data.project_id.slice(0, 8)}${data.platform_filter ? ` \xB7 ${data.platform_filter}` : ""}`,
+        `${data.total_arms} arms across ${data.groups.length} arm types`,
+        ""
+      ];
+      for (const group of data.groups) {
+        lines.push(`[${group.arm_type}] ${group.summary}`);
+        const renderArm = (a) => {
+          const conf = a.posterior_stdev < 0.05 ? "high" : a.posterior_stdev < 0.15 ? "med" : "low";
+          return `   ${a.arm_name.padEnd(18)} mean=${a.posterior_mean.toFixed(3)} \xB1${a.posterior_stdev.toFixed(3)} (${conf} conf \xB7 ${a.total_pulls} pulls)`;
+        };
+        if (group.platform_scoped.length > 0) {
+          lines.push(`  Per-platform top arms:`);
+          group.platform_scoped.forEach((a) => lines.push(renderArm(a)));
+        }
+        if (group.platform_agnostic.length > 0) {
+          lines.push(`  Platform-agnostic (legacy) top arms:`);
+          group.platform_agnostic.forEach((a) => lines.push(renderArm(a)));
+        }
+        lines.push("");
+      }
+      lines.push(`Generated ${data.generated_at}`);
+      return { content: [{ type: "text", text: lines.join("\n") }] };
+    }
+  );
+}
+
 // src/lib/register-tools.ts
 function wrapToolWithScanner(toolName, handler) {
   return async function scannerWrappedHandler(...handlerArgs) {
@@ -15937,7 +16827,8 @@ function wrapToolWithScanner(toolName, handler) {
 }
 function applyScopeEnforcement(server2, scopeResolver) {
   const originalTool = server2.tool.bind(server2);
-  server2.tool = function wrappedTool(...args) {
+  const originalRegisterTool = server2.registerTool?.bind(server2);
+  const wrapRegistration = (...args) => {
     const name = args[0];
     const requiredScope = TOOL_SCOPES[name];
     const handlerIndex = args.findIndex(
@@ -15948,27 +16839,11 @@ function applyScopeEnforcement(server2, scopeResolver) {
       const scannerWrappedHandler = wrapToolWithScanner(name, originalHandler);
       args[handlerIndex] = async function scopeEnforcedHandler(...handlerArgs) {
         if (!requiredScope) {
-          return {
-            content: [
-              {
-                type: "text",
-                text: `Permission denied: '${name}' has no scope defined. Contact support.`
-              }
-            ],
-            isError: true
-          };
+          return scopeDeniedResult(name, void 0, scopeResolver());
         }
         const userScopes = scopeResolver();
         if (!hasScope(userScopes, requiredScope)) {
-          return {
-            content: [
-              {
-                type: "text",
-                text: `Permission denied: '${name}' requires scope '${requiredScope}'. Generate a new key with the required scope at https://socialneuron.com/settings/developer`
-              }
-            ],
-            isError: true
-          };
+          return scopeDeniedResult(name, requiredScope, userScopes);
         }
         const startedAt = Date.now();
         try {
@@ -15995,9 +16870,59 @@ function applyScopeEnforcement(server2, scopeResolver) {
         }
       };
     }
-    return originalTool(...args);
+    return args;
+  };
+  server2.tool = function wrappedTool(...args) {
+    return originalTool(...wrapRegistration(...args));
+  };
+  if (originalRegisterTool) {
+    server2.registerTool = function wrappedRegisterTool(...args) {
+      return originalRegisterTool(...wrapRegistration(...args));
+    };
+  }
+}
+function scopeDeniedResult(name, requiredScope, userScopes) {
+  const error = requiredScope ? {
+    error: "permission_denied",
+    tool: name,
+    required_scope: requiredScope,
+    available_scopes: userScopes,
+    recover_with: [
+      "Call search_tools with available_only=true to find tools this key can use.",
+      "Use a read-only alternative if one is available for the task.",
+      "Regenerate the API key with the required scope or upgrade the plan tier."
+    ],
+    developer_url: "https://socialneuron.com/settings/developer"
+  } : {
+    error: "tool_scope_missing",
+    tool: name,
+    available_scopes: userScopes,
+    recover_with: ["Contact support; this tool is not mapped to a required scope."]
+  };
+  const challenge = requiredScope ? buildWwwAuthenticateHeader({
+    issuerUrl: getChallengeIssuerUrl(),
+    error: "insufficient_scope",
+    errorDescription: `Tool ${name} requires scope ${requiredScope}.`,
+    scope: requiredScope
+  }) : void 0;
+  return {
+    content: [{ type: "text", text: JSON.stringify(error, null, 2) }],
+    ...challenge ? { _meta: { "mcp/www_authenticate": [challenge] } } : {},
+    isError: true
   };
 }
+function getChallengeIssuerUrl() {
+  if (process.env.OAUTH_ISSUER_URL) return process.env.OAUTH_ISSUER_URL;
+  const mcpServerUrl = process.env.MCP_SERVER_URL;
+  if (mcpServerUrl) {
+    try {
+      const parsed = new URL(mcpServerUrl);
+      return `${parsed.protocol}//${parsed.host}`;
+    } catch {
+    }
+  }
+  return "https://mcp.socialneuron.com";
+}
 var RESPONSE_CHAR_LIMIT = 1e5;
 function truncateResponse(result) {
   if (!result?.content || !Array.isArray(result.content)) return result;
@@ -16067,6 +16992,9 @@ function registerAllTools(server2, options) {
   registerConnectionTools(server2);
   registerHarnessTools(server2, void 0);
   registerHermesTools(server2);
+  registerSkillsTools(server2);
+  registerLoopPulseTools(server2);
+  registerBanditStateTools(server2);
   if (!options?.skipApps) {
     registerContentCalendarApp(server2);
   }
@@ -16074,17 +17002,17 @@ function registerAllTools(server2, options) {
 }
 
 // src/prompts.ts
-import { z as z35 } from "zod";
+import { z as z38 } from "zod";
 function registerPrompts(server2) {
   server2.prompt(
     "create_weekly_content_plan",
     "Generate a full week of social media content (7 days, multiple platforms). Returns a structured plan with topics, formats, and posting times.",
     {
-      niche: z35.string().describe('Your content niche or industry (e.g., "fitness coaching", "SaaS marketing")'),
-      platforms: z35.string().optional().describe(
+      niche: z38.string().describe('Your content niche or industry (e.g., "fitness coaching", "SaaS marketing")'),
+      platforms: z38.string().optional().describe(
         'Comma-separated platforms to target (default: "YouTube, Instagram, TikTok, LinkedIn")'
       ),
-      tone: z35.string().optional().describe('Brand tone of voice (e.g., "professional", "casual", "bold and edgy")')
+      tone: z38.string().optional().describe('Brand tone of voice (e.g., "professional", "casual", "bold and edgy")')
     },
     ({ niche, platforms, tone }) => {
       const targetPlatforms = platforms || "YouTube, Instagram, TikTok, LinkedIn";
@@ -16126,8 +17054,8 @@ After building the plan, use \`save_content_plan\` to save it.`
     "analyze_top_content",
     "Analyze your best-performing posts to identify patterns and replicate success. Returns insights on hooks, formats, timing, and topics that resonate.",
     {
-      timeframe: z35.string().optional().describe('Analysis period (default: "30 days"). E.g., "7 days", "90 days"'),
-      platform: z35.string().optional().describe('Filter to a specific platform (e.g., "youtube", "instagram")')
+      timeframe: z38.string().optional().describe('Analysis period (default: "30 days"). E.g., "7 days", "90 days"'),
+      platform: z38.string().optional().describe('Filter to a specific platform (e.g., "youtube", "instagram")')
     },
     ({ timeframe, platform: platform3 }) => {
       const period = timeframe || "30 days";
@@ -16164,10 +17092,10 @@ Format as a clear, actionable performance report.`
     "repurpose_content",
     "Take one piece of content and transform it into 8-10 pieces across multiple platforms and formats.",
     {
-      source: z35.string().describe(
+      source: z38.string().describe(
         "The source content to repurpose \u2014 a URL, transcript, or the content text itself"
       ),
-      target_platforms: z35.string().optional().describe(
+      target_platforms: z38.string().optional().describe(
         'Comma-separated target platforms (default: "Twitter, LinkedIn, Instagram, TikTok, YouTube")'
       )
     },
@@ -16209,9 +17137,9 @@ For each piece, include the platform, format, character count, and suggested pos
     "setup_brand_voice",
     "Define or refine your brand voice profile so all generated content stays on-brand. Walks through tone, audience, values, and style.",
     {
-      brand_name: z35.string().describe("Your brand or business name"),
-      industry: z35.string().optional().describe('Your industry or niche (e.g., "B2B SaaS", "fitness coaching")'),
-      website: z35.string().optional().describe("Your website URL for context")
+      brand_name: z38.string().describe("Your brand or business name"),
+      industry: z38.string().optional().describe('Your industry or niche (e.g., "B2B SaaS", "fitness coaching")'),
+      website: z38.string().optional().describe("Your website URL for context")
     },
     ({ brand_name, industry, website }) => {
       const industryContext = industry ? ` in the ${industry} space` : "";
@@ -16454,13 +17382,13 @@ function registerResources(server2) {
           pro: {
             price: "$49/mo",
             credits: 1500,
-            mcp_access: "Read + Analytics",
+            mcp_access: "Read + Analytics + Write + Distribute",
             features: [
               "All Starter features",
               "Closed-loop optimization",
-              "5 autopilot runs / month",
+              "Full agent engine via MCP (generate, gate, publish)",
               "All 10 platforms",
-              "MCP read + analytics"
+              "MCP read + analytics + write + distribute"
             ]
           },
           team: {
@@ -16565,6 +17493,7 @@ function registerResources(server2) {
 init_posthog();
 init_supabase();
 init_sn();
+process.env.MCP_TRANSPORT ??= "stdio";
 function flushAndExit(code) {
   const done = { out: false, err: false };
   const tryExit = () => {
@@ -16726,7 +17655,7 @@ if (command === "sn") {
     process.exit(snSubcommand ? 0 : 1);
   }
   await runSnCli(process.argv.slice(3));
-  await new Promise((resolve3) => process.stdout.write("", resolve3));
+  await new Promise((resolve3) => process.stdout.write("", () => resolve3()));
   process.exit(0);
 }
 if (command && !["setup", "login", "logout", "whoami", "health", "sn", "repl"].includes(command)) {