@socialneuron/mcp-server 1.7.14 → 1.7.18

package/CHANGELOG.md

@@ -2,6 +2,49 @@
 
 All notable changes to `@socialneuron/mcp-server` will be documented in this file.
 
+## [1.7.18] - 2026-07-06
+
+### Added
+
+- **REST API is real.** `POST /v1/tools/{name}`, `GET /v1/tools`, and `GET /v1/openapi.json` are now served (previously documented but 404). The REST surface is a faithful projection of the MCP engine — same auth, scopes, rate limits, credit pool, and tool handlers — not a second implementation.
+- **Generated OpenAPI 3.1 spec** at `/v1/openapi.json` (unauthenticated), built from the tool catalog + the same input schemas `tools/list` serves, so it can never drift from the tools. Import into Postman/Swagger or generate a client.
+- **`sn call <tool> [--json|--arg]`** — CLI tool invoker that mirrors the same projection, resolving the caller's scopes from their key. Four surfaces (MCP · REST · SDK · CLI), one catalog.
+
+### Fixed
+
+- Scrubbed an internal codename from `schedule_post`'s param descriptions (exposed via the new unauthenticated OpenAPI). Added a regression guard.
+
+### Changed
+
+- `docs/rest-api.md` updated to the real response shape (MCP result on success, `error_type` on error) and re-links the live OpenAPI spec.
+
+## [1.7.16] - 2026-07-06
+
+### Fixed
+
+- **Structured tool errors (audit #188).** New `toolError()` helper attaches a machine-readable `error_type` (`policy_block` / `validation_error` / `permission_denied` / `billing_error` / `rate_limited` / `not_found` / `upstream_error` / `server_error`) in `structuredContent`, mirrored to the text block — matching the 2025-11-25 spec convention (SEP-1303) so clients can programmatically distinguish a policy block from a validation, permission, or billing error. Input-safety blocks and scope denials are the first adopters.
+- **Rate-limit category bug.** `getRateLimiter` resolved its config from the full `category:key` bucket string, so every per-user/per-tool call silently fell back to the loose 60/min `read` bucket — the intended `posting` (30/min) and `screenshot` (10/min) limits never applied. Config now resolves from the bare category; added `generation` (15/min) and `upload` (20/min) categories.
+- **Capabilities pricing table drift.** The `socialneuron://docs/capabilities` resource showed the Free tier at 100 credits (canonical monthly allocation is 50; 100 is the spending cap) and omitted the 14-day Trial tier. Corrected.
+
+### Changed
+
+- Removed unused `cors` and `express-rate-limit` dependencies.
+
+## [1.7.15] - 2026-07-06
+
+### Changed
+
+- **Public tool surface tightened.** Internal service tools used by Social Neuron's own automation are still registered and scope-gated at runtime, but are no longer advertised on the hosted server card, HTTP discovery, `search_tools`, knowledge documents, or the CLI tool listing. The hosted endpoint now advertises 85 tools; the npm stdio server exposes 87 discoverable tools (including 2 local screen-capture tools).
+- **Tool descriptions cleaned up.** Internal project references and implementation jargon removed from tool descriptions across the catalog.
+- **`run_content_pipeline` scheduling guard restored.** Scheduling again requires `schedule_confirmed=true` after explicit user approval, cannot run with the quality stage skipped, caps generated posts to the requested plan size, drops posts targeting unrequested platforms, and counts scheduled posts against the credit budget. (This hardening was unintentionally dropped in the 1.7.14 source sync.)
+- **Metadata contract unified + CI-guarded.** `server.json` version/pricing/tool-count now match `package.json` and the canonical pricing (MCP requires Pro $49/mo or higher; free tier is 50 credits/mo with no MCP access). Added `mcpName` for MCP Registry ownership verification. New `npm run verify:metadata` gate (wired into CI and release) blocks stale counts, stale pricing, internal codenames, and dead endpoint links from re-entering the public surface.
+- **Docs corrected.** REST API docs (tool count, response `version` example, plan limits), troubleshooting boot log line (95/95), integration methods (stdio vs hosted tool split), and auth docs (plan-scope matrix; removed internal implementation notes). Removed links to the not-yet-deployed `/v1/openapi.json` endpoint.
+- **SDK release path hardened.** `packages/sdk` now ships a `package-lock.json`, the SDK release workflow uses `npm ci --ignore-scripts`, and Dependabot watches `/packages/sdk` and `/apps/content-calendar`.
+
+## [1.7.12–1.7.14] - 2026-06/07
+
+Released without changelog entries (see git history): OAuth connector flow + DCR, MCP Apps content calendar, trial-key scopes and post-trial degrade, funnel instrumentation, 96-tool catalog sync, dependency cooldown pins.
+
 ## [1.7.11] - 2026-05-15
 
 ### Changed

package/README.md

@@ -1,6 +1,6 @@
 # @socialneuron/mcp-server
 
-> 96 MCP tools for AI-powered social media management. Create content, schedule posts, track analytics, and optimize performance — all from Claude Code or any MCP client.
+> 85+ MCP tools for AI-powered social media management. Create content, schedule posts, track analytics, and optimize performance — all from Claude Code or any MCP client.
 
 [![npm version](https://img.shields.io/npm/v/@socialneuron/mcp-server)](https://www.npmjs.com/package/@socialneuron/mcp-server)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
@@ -92,7 +92,9 @@ Ask Claude things like:
 - "Check my analytics and suggest improvements"
 - "Set up autopilot to post 3 times per week"
 
-## Tool Categories (96 tools)
+## Tool Categories
+
+The hosted endpoint advertises **85 tools** (live count: [server card](https://mcp.socialneuron.com/.well-known/mcp/server-card.json)); the npm stdio server adds 2 local screen-capture tools (87 discoverable). A small set of internal service tools used by Social Neuron's own automation are registered but not part of the public surface.
 
 These tools are available to AI agents (Claude, Cursor, etc.) via the MCP protocol.
 
@@ -217,7 +219,7 @@ socialneuron-mcp sn loop
 socialneuron-mcp sn credits
 
 # Agent-native CLI v2
-socialneuron-mcp sn tools [--module ideation] [--scope mcp:write]  # List/filter all 96 tools
+socialneuron-mcp sn tools [--module ideation] [--scope mcp:write]  # List/filter available tools
 socialneuron-mcp sn info                                            # Version, auth, credits, tool count
 socialneuron-mcp sn plan list|view|approve                          # Content plan management
 socialneuron-mcp sn preset list|show|save|delete                    # Platform presets (6 built-in)