@socialneuron/mcp-server 1.7.18 → 1.8.0

package/dist/sn.js

@@ -19,7 +19,7 @@ var MCP_VERSION;
 var init_version = __esm({
   "src/lib/version.ts"() {
     "use strict";
-    MCP_VERSION = "1.7.18";
+    MCP_VERSION = "1.8.0";
   }
 });
 
@@ -34,6 +34,20 @@ function getRequestScopes() {
 function getRequestToken() {
   return requestContext.getStore()?.token ?? null;
 }
+function getRequestSurface() {
+  return requestContext.getStore()?.surface ?? null;
+}
+function getRequestProjectId() {
+  return requestContext.getStore()?.projectId ?? null;
+}
+function resolveSurface() {
+  const ctx = getRequestSurface();
+  if (ctx) return ctx;
+  const transport = process.env.MCP_TRANSPORT;
+  if (transport === "stdio") return "mcp-stdio";
+  if (transport === "http") return "mcp-http";
+  return "cli";
+}
 var requestContext;
 var init_request_context = __esm({
   "src/lib/request-context.ts"() {
@@ -348,7 +362,10 @@ async function captureToolEvent(args) {
     properties: {
       tool_name: args.toolName,
       duration_ms: args.durationMs,
-      ...args.details
+      ...args.details,
+      // Which surface invoked the tool: mcp-stdio | mcp-http | rest | cli.
+      // Authoritative over any details.surface (there are no such callers today).
+      surface: resolveSurface()
     }
   });
 }
@@ -363,6 +380,7 @@ var init_posthog = __esm({
   "src/lib/posthog.ts"() {
     "use strict";
     init_supabase();
+    init_request_context();
     POSTHOG_SALT = "socialneuron-mcp-ph-v1";
     client = null;
   }
@@ -377,6 +395,7 @@ __export(supabase_exports, {
   getAuthenticatedApiKey: () => getAuthenticatedApiKey,
   getAuthenticatedEmail: () => getAuthenticatedEmail,
   getAuthenticatedExpiresAt: () => getAuthenticatedExpiresAt,
+  getAuthenticatedProjectId: () => getAuthenticatedProjectId,
   getAuthenticatedScopes: () => getAuthenticatedScopes,
   getDefaultProjectId: () => getDefaultProjectId,
   getDefaultUserId: () => getDefaultUserId,
@@ -428,6 +447,9 @@ async function getDefaultUserId() {
   throw new Error("No user ID available. Set SOCIALNEURON_USER_ID or authenticate via API key.");
 }
 async function getDefaultProjectId() {
+  const requestProjectId = getRequestProjectId();
+  if (requestProjectId) return requestProjectId;
+  if (authenticatedProjectId) return authenticatedProjectId;
   const userId = await getDefaultUserId().catch(() => null);
   if (userId) {
     const cached = projectIdCache.get(userId);
@@ -469,6 +491,7 @@ async function initializeAuth() {
       authenticatedScopes = result.scopes && result.scopes.length > 0 ? result.scopes : ["mcp:read"];
       authenticatedEmail = result.email || null;
       authenticatedExpiresAt = result.expiresAt || null;
+      authenticatedProjectId = result.projectId || null;
       if (!_quietAuth) {
         console.error(
           "[MCP] Authenticated via API key (prefix: " + apiKey.substring(0, 6) + "..." + apiKey.slice(-4) + ")"
@@ -525,6 +548,9 @@ function getAuthMode() {
 function getAuthenticatedApiKey() {
   return authenticatedApiKey;
 }
+function getAuthenticatedProjectId() {
+  return authenticatedProjectId;
+}
 function isTelemetryDisabled() {
   return process.env.DO_NOT_TRACK === "1" || process.env.DO_NOT_TRACK === "true" || process.env.SOCIALNEURON_NO_TELEMETRY === "1";
 }
@@ -554,7 +580,7 @@ async function logMcpToolInvocation(args) {
   Promise.resolve().then(() => (init_posthog(), posthog_exports)).then(({ captureToolEvent: captureToolEvent2 }) => captureToolEvent2(args)).catch(() => {
   });
 }
-var SUPABASE_URL, SUPABASE_SERVICE_KEY, client2, _authMode, authenticatedUserId, authenticatedScopes, authenticatedEmail, authenticatedExpiresAt, authenticatedApiKey, MCP_RUN_ID, CLOUD_SUPABASE_URL, CLOUD_SUPABASE_ANON_KEY, projectIdCache;
+var SUPABASE_URL, SUPABASE_SERVICE_KEY, client2, _authMode, authenticatedUserId, authenticatedScopes, authenticatedEmail, authenticatedExpiresAt, authenticatedApiKey, authenticatedProjectId, MCP_RUN_ID, CLOUD_SUPABASE_URL, CLOUD_SUPABASE_ANON_KEY, projectIdCache;
 var init_supabase = __esm({
   "src/lib/supabase.ts"() {
     "use strict";
@@ -568,6 +594,7 @@ var init_supabase = __esm({
     authenticatedEmail = null;
     authenticatedExpiresAt = null;
     authenticatedApiKey = null;
+    authenticatedProjectId = null;
     MCP_RUN_ID = randomUUID();
     CLOUD_SUPABASE_URL = "https://rhukkjscgzauutioyeei.supabase.co";
     CLOUD_SUPABASE_ANON_KEY = "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6InJodWtranNjZ3phdXV0aW95ZWVpIiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjQ4NjM4ODYsImV4cCI6MjA4MDQzOTg4Nn0.JVtrviGvN0HaSh0JFS5KNl5FAB5ffG5Y1IMZsQFUrNQ";
@@ -2618,13 +2645,15 @@ var init_tool_catalog = __esm({
         name: "get_loop_pulse",
         description: "Read dynamic loop-health KPIs for the growth loop over the last 7 days (reflection/decision coverage, visual gate pass rate, learning-update application rate, per-platform uptake, autopilot lag) \u2014 each with an ok/warn/bad status. Use to decide whether the loop is closing or where it is stuck.",
         module: "loop",
-        scope: "mcp:read"
+        scope: "mcp:read",
+        internal: true
       },
       {
         name: "get_bandit_state",
         description: "Read the current content learning state for a project \u2014 top-K arms per (arm_type, platform) with expected performance and uncertainty. Use to reason about which hook family / format / timing slot currently performs best per platform.",
         module: "loop",
-        scope: "mcp:read"
+        scope: "mcp:read",
+        internal: true
       }
     ];
   }
@@ -2980,7 +3009,9 @@ var init_tool_annotations = __esm({
       },
       "mcp:write": {
         readOnlyHint: false,
-        destructiveHint: true,
+        // Most write tools create additive drafts/assets. Per MCP semantics,
+        // destructiveHint is reserved for overwrite/delete/irreversible behavior.
+        destructiveHint: false,
         idempotentHint: false,
         openWorldHint: false
       },
@@ -2998,21 +3029,30 @@ var init_tool_annotations = __esm({
       },
       "mcp:comments": {
         readOnlyHint: false,
-        destructiveHint: true,
+        destructiveHint: false,
         idempotentHint: false,
         openWorldHint: true
       },
       "mcp:autopilot": {
         readOnlyHint: false,
-        destructiveHint: true,
+        destructiveHint: false,
         idempotentHint: false,
         openWorldHint: false
       }
     };
     OVERRIDES = {
-      // Destructive tools
+      // Destructive or overwrite tools
       delete_comment: { destructiveHint: true },
       moderate_comment: { destructiveHint: true },
+      save_brand_profile: { destructiveHint: true, idempotentHint: true },
+      update_platform_voice: { destructiveHint: true, idempotentHint: true },
+      update_content_plan: { destructiveHint: true, idempotentHint: true },
+      respond_plan_approval: { destructiveHint: true, idempotentHint: true },
+      update_autopilot_config: { destructiveHint: true, idempotentHint: true },
+      run_content_pipeline: { destructiveHint: true, openWorldHint: true },
+      auto_approve_plan: { destructiveHint: true, idempotentHint: true },
+      execute_recipe: { destructiveHint: true, openWorldHint: true },
+      run_skill: { destructiveHint: true },
       // Read-only tools in non-read scopes (must also clear destructiveHint from scope default)
       list_comments: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
       list_autopilot_configs: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
@@ -3023,14 +3063,12 @@ var init_tool_annotations = __esm({
       // Analytics tool that triggers side effects (data refresh)
       refresh_platform_analytics: { readOnlyHint: false, idempotentHint: true },
       // Write tools that are idempotent
-      save_brand_profile: { idempotentHint: true },
-      update_platform_voice: { idempotentHint: true },
-      update_autopilot_config: { idempotentHint: true },
-      update_content_plan: { idempotentHint: true },
-      respond_plan_approval: { idempotentHint: true },
       // Distribution is open-world (publishes to external platforms)
       schedule_post: { openWorldHint: true },
       schedule_content_plan: { openWorldHint: true },
+      // This only creates a short-lived OAuth deep link; it does not connect the
+      // external account until the user completes the browser flow.
+      start_platform_connection: { destructiveHint: false },
       // Extraction reads external URLs
       extract_url_content: { openWorldHint: true },
       extract_brand: { openWorldHint: true },
@@ -3038,8 +3076,6 @@ var init_tool_annotations = __esm({
       check_pipeline_readiness: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
       get_pipeline_status: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
       // Pipeline: orchestration tools (non-idempotent, may schedule externally)
-      run_content_pipeline: { openWorldHint: true },
-      auto_approve_plan: { idempotentHint: true },
       // Suggest: read-only
       suggest_next_content: { readOnlyHint: true, destructiveHint: false, idempotentHint: true },
       // Digest/Anomalies: read-only analytics
@@ -3090,9 +3126,89 @@ function toolError(code, message, opts = {}) {
     ...opts.meta ? { _meta: opts.meta } : {}
   };
 }
+function classifyToolError(result) {
+  const structured = result.structuredContent?.error?.error_type;
+  if (structured && KNOWN_ERROR_TYPES.has(structured)) return structured;
+  const text = result.content?.find((c) => c.type === "text")?.text ?? "";
+  try {
+    const parsed = JSON.parse(text);
+    if (parsed.error_type && KNOWN_ERROR_TYPES.has(parsed.error_type)) {
+      return parsed.error_type;
+    }
+  } catch {
+  }
+  if (/-32602|Input validation error|Invalid arguments/i.test(text)) {
+    return "validation_error";
+  }
+  return "server_error";
+}
+var KNOWN_ERROR_TYPES;
 var init_tool_error = __esm({
   "src/lib/tool-error.ts"() {
     "use strict";
+    KNOWN_ERROR_TYPES = /* @__PURE__ */ new Set([
+      "policy_block",
+      "validation_error",
+      "permission_denied",
+      "billing_error",
+      "rate_limited",
+      "not_found",
+      "upstream_error",
+      "server_error"
+    ]);
+  }
+});
+
+// src/lib/tool-profile.ts
+function isToolAllowedByProfile(toolName, profile) {
+  return profile === "full" || !ANTHROPIC_DIRECTORY_EXCLUDED_TOOLS.has(toolName);
+}
+function applyToolProfile(server, profile) {
+  if (profile === "full") return;
+  const currentTool = server.tool.bind(server);
+  const currentRegisterTool = server.registerTool?.bind(server);
+  server.tool = function profiledTool(...args) {
+    const name = String(args[0] ?? "");
+    if (!isToolAllowedByProfile(name, profile)) return void 0;
+    return currentTool(...args);
+  };
+  if (currentRegisterTool) {
+    server.registerTool = function profiledRegisterTool(...args) {
+      const name = String(args[0] ?? "");
+      if (!isToolAllowedByProfile(name, profile)) return void 0;
+      return currentRegisterTool(...args);
+    };
+  }
+}
+var ANTHROPIC_DIRECTORY_EXCLUDED_TOOLS;
+var init_tool_profile = __esm({
+  "src/lib/tool-profile.ts"() {
+    "use strict";
+    init_tool_catalog();
+    ANTHROPIC_DIRECTORY_EXCLUDED_TOOLS = /* @__PURE__ */ new Set([
+      "generate_video",
+      "generate_image",
+      "check_status",
+      "create_storyboard",
+      "generate_voiceover",
+      "generate_carousel",
+      "create_carousel",
+      "render_demo_video",
+      "list_compositions",
+      "render_template_video",
+      "check_pipeline_readiness",
+      "run_content_pipeline",
+      "get_pipeline_status",
+      "auto_approve_plan",
+      "list_recipes",
+      "get_recipe_details",
+      "execute_recipe",
+      "get_recipe_run_status",
+      "list_hyperframes_blocks",
+      "render_hyperframes",
+      "list_skills",
+      "run_skill"
+    ]);
   }
 });
 
@@ -3759,6 +3875,52 @@ var init_ideation = __esm({
   }
 });
 
+// src/lib/checkStatusShape.ts
+function buildCheckStatusPayload(job, liveStatus) {
+  const status = liveStatus?.status ?? job.status;
+  const progress = liveStatus?.progress ?? null;
+  const resultUrl = liveStatus?.resultUrl ?? job.result_url ?? null;
+  const r2Key = resultUrl && !resultUrl.startsWith("http") ? resultUrl : null;
+  const errorMessage = liveStatus?.error ?? job.error_message ?? null;
+  const allUrls = job.result_metadata?.all_urls ?? null;
+  const modelRequested = job.result_metadata?.model_requested ?? null;
+  const modelDelivered = job.result_metadata?.model_delivered ?? null;
+  const fallbackReason = job.result_metadata?.fallback_reason ?? null;
+  return {
+    job_id: job.id,
+    job_type: job.job_type,
+    model: job.model,
+    status,
+    progress,
+    result_url: resultUrl,
+    r2_key: r2Key,
+    all_urls: allUrls,
+    error: errorMessage,
+    credits_cost: job.credits_cost,
+    created_at: job.created_at,
+    completed_at: job.completed_at,
+    model_requested: modelRequested,
+    model_delivered: modelDelivered,
+    fallback_reason: fallbackReason,
+    id: job.id,
+    jobId: job.id,
+    jobType: job.job_type,
+    resultUrl,
+    credits: job.credits_cost,
+    error_message: errorMessage,
+    createdAt: job.created_at,
+    completedAt: job.completed_at,
+    modelRequested,
+    modelDelivered,
+    fallbackReason
+  };
+}
+var init_checkStatusShape = __esm({
+  "src/lib/checkStatusShape.ts"() {
+    "use strict";
+  }
+});
+
 // src/lib/budget.ts
 function getCreditsUsed() {
   const ctx = requestContext.getStore();
@@ -3848,34 +4010,32 @@ function asEnvelope2(data) {
 function registerContentTools(server) {
   server.tool(
     "generate_video",
-    "Start an async AI video generation job \u2014 returns a job_id immediately. Poll with check_status every 10-30s until complete. Cost varies by model: veo3-fast (~15 credits/5s), kling-3 (~30 credits/5s), sora2-pro (~60 credits/10s). Check get_credit_balance first for expensive generations.",
+    "Start an async AI video generation job \u2014 returns a job_id immediately. Poll with check_status every 10-30s until complete. Base credit costs (reference config; dynamic models scale with duration/audio/resolution): seedance-2-fast 264 (8s, best quality/credit) \xB7 kling-3 100 (5s no-audio) \xB7 grok-imagine 30 (6s, cheapest) \xB7 veo3-fast 65 (8s) \xB7 kling-3-pro 135 (5s no-audio) \xB7 seedance-2 328 (8s 720p) \xB7 veo3-quality 1000 (8s) \xB7 wan-2.6 105 (5s) \xB7 gemini-omni-video 126 (multi-reference composites) \xB7 hailuo-02-standard 180 / seedance-1.5-pro 150 / kling 170 (legacy/budget fallbacks). Costs are estimated pre-check and reconciled post-response from the actual charge. audio adds ~1.5x on kling-3/kling-3-pro and ~2.65x on kling (enable_audio defaults to FALSE). Check get_credit_balance first for expensive generations.",
     {
       prompt: z2.string().max(2500).describe(
         'Video prompt \u2014 be specific about visual style, camera movement, lighting, and mood. Example: "Aerial drone shot of coastal cliffs at golden hour, slow dolly forward, cinematic 24fps, warm color grading." Vague prompts produce generic results.'
       ),
-      model: z2.enum([
-        "veo3-fast",
-        "veo3-quality",
-        "runway-aleph",
-        "sora2",
-        "sora2-pro",
-        "kling",
-        "kling-3",
-        "kling-3-pro"
-      ]).describe(
-        "Video model. veo3-fast: fastest (~15 credits/5s, ~60s render). veo3-quality: highest quality (~20 credits/5s, ~120s). sora2-pro: OpenAI premium (~60 credits/10s). kling-3: 4K with audio (~30 credits/5s). kling-3-pro: best Kling quality (~40 credits/5s)."
+      model: z2.enum(VIDEO_MODEL_ENUM).describe(
+        "Video model, quality ladder best->worst: seedance-2-fast (264cr/8s, S-tier, native audio, top quality/credit) > kling-3 (100cr/5s no-audio, compound prompts, up to 10s) > grok-imagine (30cr/6s, cheapest real model, great image-to-video) > veo3-fast (65cr/8s, Veo 3.1 Fast, native audio) > kling-3-pro (135cr/5s no-audio, up to 15s) > seedance-2 (328cr/8s 720p, premium cinematic, native audio) > veo3-quality (1000cr/8s, Veo 3.1 Quality, hero shots) > wan-2.6 (105cr/5s, fallback) > gemini-omni-video (126cr \u2014 pick this ONLY for multi-reference composites/edits, not raw quality). hailuo-02-standard (180cr), seedance-1.5-pro (150cr), kling (170cr/10s no-audio) are legacy/budget fallbacks."
       ),
       duration: z2.number().min(3).max(30).optional().describe(
-        "Video duration in seconds. kling: 5-30s, kling-3/kling-3-pro: 3-15s, sora2: 10-15s. Defaults to 5 seconds."
+        "Video duration in seconds. kling: 5 or 10s \xB7 kling-3: 5 or 10s \xB7 kling-3-pro: 5/10/15s \xB7 grok-imagine/hailuo: 6 or 10s \xB7 wan-2.6: 5/10/15s \xB7 seedance family: 4-15s \xB7 veo3-fast/veo3-quality: fixed 8s (duration ignored). Out-of-range values are clamped server-side, never rejected. Defaults to 5 seconds."
       ),
       aspect_ratio: z2.enum(["16:9", "9:16", "1:1"]).optional().describe(
         "Video aspect ratio. 16:9 for YouTube/landscape, 9:16 for TikTok/Reels/Shorts, 1:1 for Instagram feed/square. Defaults to 16:9."
       ),
       enable_audio: z2.boolean().optional().describe(
-        "Enable native audio generation. Kling 2.6: doubles cost. Kling 3.0: 50% more (std 30/sec, pro 40/sec). 5+ languages."
+        "Enable native audio generation. DEFAULTS TO FALSE (cost control). Cost multiplier when true: kling 2.6 ~2.65x (17->45 cr/sec), kling-3 1.5x (20->30 cr/sec), kling-3-pro ~1.5x (27->40 cr/sec). seedance-2/-fast generate audio natively regardless. 5+ languages."
+      ),
+      image_url: z2.string().optional().describe(
+        "Start frame image URL for image-to-video (Kling 3.0 frame control)."
+      ),
+      end_frame_url: z2.string().optional().describe(
+        "End frame image URL (Kling 3.0 only). Enables seamless loop transitions."
+      ),
+      project_id: z2.string().optional().describe(
+        "Project ID to associate the video with (brand context is auto-injected from the project brand profile). Omit to generate without a project association."
       ),
-      image_url: z2.string().optional().describe("Start frame image URL for image-to-video (Kling 3.0 frame control)."),
-      end_frame_url: z2.string().optional().describe("End frame image URL (Kling 3.0 only). Enables seamless loop transitions."),
       response_format: z2.enum(["text", "json"]).optional().describe("Optional response format. Defaults to text.")
     },
     async ({
@@ -3886,6 +4046,7 @@ function registerContentTools(server) {
       enable_audio,
       image_url,
       end_frame_url,
+      project_id,
       response_format
     }) => {
       const format = response_format ?? "text";
@@ -3924,9 +4085,14 @@ function registerContentTools(server) {
           model,
           duration: duration ?? 5,
           aspectRatio: aspect_ratio ?? "16:9",
-          enableAudio: enable_audio ?? true,
+          // Default FALSE (2026-07-13): the old `?? true` default silently multiplied
+          // kling-family costs (2.65x on kling 2.6) for callers that never asked for audio.
+          enableAudio: enable_audio ?? false,
           ...image_url && { imageUrl: image_url },
-          ...end_frame_url && { endFrameUrl: end_frame_url }
+          ...end_frame_url && { endFrameUrl: end_frame_url },
+          // The server reads projectId and enforces
+          // ownership via resolveProjectAndContent (index.ts:416-423).
+          ...project_id && { projectId: project_id }
         },
         { timeoutMs: 3e4 }
       );
@@ -4124,7 +4290,7 @@ function registerContentTools(server) {
   );
   server.tool(
     "check_status",
-    'Poll an async job started by generate_video or generate_image. Returns status (queued/processing/completed/failed), progress %, and result URL on completion. Poll every 10-30s for video, 5-15s for images. On "failed" status, the error field explains why \u2014 check credits or try a different model.',
+    'Poll an async job started by generate_video or generate_image. Returns status (queued/processing/completed/failed), progress %, and result URL on completion. Poll every 10-30s for video, 5-15s for images. On "failed" status, the error field explains why \u2014 check credits or try a different model. JSON shape (response_format=json) is stable across the whole poll lifecycle \u2014 canonical fields job_id, status, progress, result_url, r2_key, all_urls, error, credits_cost, created_at, completed_at are always present (never only camelCase or only snake_case); legacy aliases jobId/resultUrl/credits/createdAt/completedAt/error_message are also always populated for backward compatibility.',
     {
       job_id: z2.string().describe(
         "The job ID returned by generate_video or generate_image. This is the asyncJobId or taskId value."
@@ -4170,10 +4336,13 @@ function registerContentTools(server) {
         };
       }
       if (job.external_id && (job.status === "pending" || job.status === "processing")) {
-        const { data: liveStatus } = await callEdgeFunction("kie-task-status", {
-          taskId: job.external_id,
-          model: job.model
-        });
+        const { data: liveStatus } = await callEdgeFunction(
+          "kie-task-status",
+          {
+            taskId: job.external_id,
+            model: job.model
+          }
+        );
         if (liveStatus) {
           const lines2 = [
             `Job: ${job.id}`,
@@ -4196,13 +4365,17 @@ function registerContentTools(server) {
                 {
                   type: "text",
                   text: JSON.stringify(
+                    // v1.8.0: spread legacy live-branch fields first for
+                    // backward compatibility, then overlay
+                    // buildCheckStatusPayload's canonical snake_case fields +
+                    // both-alias set so a consumer never sees a different
+                    // field name depending on which branch served the poll.
+                    // lib/checkStatusShape.ts is the single stable shape —
+                    // it derives jobId/jobType/model/credits/createdAt from
+                    // `job` + `liveStatus`; do not duplicate them here.
                     asEnvelope2({
-                      jobId: job.id,
-                      jobType: job.job_type,
-                      model: job.model,
                       ...liveStatus,
-                      credits: job.credits_cost,
-                      createdAt: job.created_at
+                      ...buildCheckStatusPayload(job, liveStatus)
                     }),
                     null,
                     2
@@ -4229,7 +4402,7 @@ function registerContentTools(server) {
           const filename = segments[segments.length - 1] || "media";
           lines.push(`Media ready: ${filename}`);
           lines.push(
-            "(Pass job_id directly to schedule_post, or use get_media_url with job_id for a download link)"
+            "(Pass job_id directly to schedule_post, or pass response_format=json's r2_key to get_media_url for a download link)"
           );
         } else {
           lines.push(`Result URL: ${job.result_url}`);
@@ -4253,11 +4426,15 @@ function registerContentTools(server) {
       if (format === "json") {
         const enriched = {
           ...job,
-          r2_key: job.result_url && !job.result_url.startsWith("http") ? job.result_url : null,
-          all_urls: allUrls ?? null
+          ...buildCheckStatusPayload(job)
         };
         return {
-          content: [{ type: "text", text: JSON.stringify(asEnvelope2(enriched), null, 2) }]
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(asEnvelope2(enriched), null, 2)
+            }
+          ]
         };
       }
       return {
@@ -4275,7 +4452,15 @@ function registerContentTools(server) {
       brand_context: z2.string().max(3e3).optional().describe(
         "Brand context JSON from extract_brand. Include colors, voice tone, visual style keywords for consistent branding across frames."
       ),
-      platform: z2.enum(["tiktok", "instagram-reels", "youtube-shorts", "youtube", "general"]).describe("Target platform. Determines aspect ratio, duration, and pacing."),
+      platform: z2.enum([
+        "tiktok",
+        "instagram-reels",
+        "youtube-shorts",
+        "youtube",
+        "general"
+      ]).describe(
+        "Target platform. Determines aspect ratio, duration, and pacing."
+      ),
       target_duration: z2.number().min(5).max(120).optional().describe(
         "Target total duration in seconds. Defaults to 30s for short-form, 60s for YouTube."
       ),
@@ -4283,7 +4468,9 @@ function registerContentTools(server) {
       style: z2.string().optional().describe(
         'Visual style direction (e.g., "cinematic", "anime", "documentary", "motion graphics").'
       ),
-      response_format: z2.enum(["text", "json"]).optional().describe("Response format. Defaults to json for structured storyboard data.")
+      response_format: z2.enum(["text", "json"]).optional().describe(
+        "Response format. Defaults to json for structured storyboard data."
+      )
     },
     async ({
       concept,
@@ -4295,7 +4482,11 @@ function registerContentTools(server) {
       response_format
     }) => {
       const format = response_format ?? "json";
-      const isShortForm = ["tiktok", "instagram-reels", "youtube-shorts"].includes(platform3);
+      const isShortForm = [
+        "tiktok",
+        "instagram-reels",
+        "youtube-shorts"
+      ].includes(platform3);
       const duration = target_duration ?? (isShortForm ? 30 : 60);
       const scenes = num_scenes ?? (isShortForm ? 7 : 10);
       const aspectRatio = isShortForm ? "9:16" : "16:9";
@@ -4376,7 +4567,12 @@ Return ONLY valid JSON in this exact format:
       );
       if (error) {
         return {
-          content: [{ type: "text", text: `Storyboard generation failed: ${error}` }],
+          content: [
+            {
+              type: "text",
+              text: `Storyboard generation failed: ${error}`
+            }
+          ],
           isError: true
         };
       }
@@ -4386,7 +4582,12 @@ Return ONLY valid JSON in this exact format:
         try {
           const parsed = JSON.parse(rawContent);
           return {
-            content: [{ type: "text", text: JSON.stringify(asEnvelope2(parsed), null, 2) }]
+            content: [
+              {
+                type: "text",
+                text: JSON.stringify(asEnvelope2(parsed), null, 2)
+              }
+            ]
           };
         } catch {
           return {
@@ -4431,7 +4632,10 @@ Return ONLY valid JSON in this exact format:
           isError: true
         };
       }
-      const rateLimit = checkRateLimit("posting", `generate_voiceover:${userId}`);
+      const rateLimit = checkRateLimit(
+        "posting",
+        `generate_voiceover:${userId}`
+      );
       if (!rateLimit.allowed) {
         return {
           content: [
@@ -4458,14 +4662,22 @@ Return ONLY valid JSON in this exact format:
       );
       if (error) {
         return {
-          content: [{ type: "text", text: `Voiceover generation failed: ${error}` }],
+          content: [
+            {
+              type: "text",
+              text: `Voiceover generation failed: ${error}`
+            }
+          ],
           isError: true
         };
       }
       if (!data?.audioUrl) {
         return {
           content: [
-            { type: "text", text: "Voiceover generation failed: no audio URL returned." }
+            {
+              type: "text",
+              text: "Voiceover generation failed: no audio URL returned."
+            }
           ],
           isError: true
         };
@@ -4527,20 +4739,30 @@ Return ONLY valid JSON in this exact format:
         "Carousel template. hormozi-authority: bold typography, one idea per slide, dark backgrounds. educational-series: numbered tips. Default: hormozi-authority."
       ),
       slide_count: z2.number().min(3).max(10).optional().describe("Number of slides (3-10). Default: 7."),
-      aspect_ratio: z2.enum(["1:1", "4:5", "9:16"]).optional().describe("Aspect ratio. 1:1 square (default), 4:5 portrait, 9:16 story."),
+      aspect_ratio: z2.enum(["1:1", "4:5", "9:16"]).optional().describe(
+        "Aspect ratio. 1:1 square (default), 4:5 portrait, 9:16 story."
+      ),
       style: z2.enum(["minimal", "bold", "professional", "playful", "hormozi"]).optional().describe(
         "Visual style. hormozi: black bg, bold white text, gold accents. Default: hormozi (when using hormozi-authority template)."
       ),
       hook: z2.string().max(300).optional().describe(
         "Explicit hook/opener for slide 1. Overrides any hook derived from topic. Keep under 15 words."
       ),
-      hook_family: z2.enum(["curiosity", "authority", "pain_point", "contrarian", "data_driven"]).optional().describe(
-        "Hook family tag. Persisted with the carousel so bandit learners can attribute engagement to hook pattern."
+      hook_family: z2.enum([
+        "curiosity",
+        "authority",
+        "pain_point",
+        "contrarian",
+        "data_driven"
+      ]).optional().describe(
+        "Hook family tag. Persisted with the carousel so downstream analytics can attribute engagement to hook pattern."
       ),
       cta_text: z2.string().max(200).optional().describe("Explicit CTA copy for the final slide."),
       cta_url: z2.string().url().optional().describe("URL promoted on the CTA slide."),
       tone: z2.string().max(200).optional().describe("Voice/tone override. Composes with brand profile voice."),
-      constraints: z2.string().max(500).optional().describe('Content constraints. Example: "No fabricated statistics. Sentence case only."'),
+      constraints: z2.string().max(500).optional().describe(
+        'Content constraints. Example: "No fabricated statistics. Sentence case only."'
+      ),
       platform: z2.enum(["linkedin", "instagram", "tiktok", "x"]).optional().describe("Target platform. Affects tone and format guardrails."),
       project_id: z2.string().optional().describe("Project ID to associate the carousel with."),
       response_format: z2.enum(["text", "json"]).optional().describe("Response format. Defaults to json.")
@@ -4575,7 +4797,10 @@ Return ONLY valid JSON in this exact format:
         };
       }
       const userId = await getDefaultUserId();
-      const rateLimit = checkRateLimit("posting", `generate_carousel:${userId}`);
+      const rateLimit = checkRateLimit(
+        "posting",
+        `generate_carousel:${userId}`
+      );
       if (!rateLimit.allowed) {
         return {
           content: [
@@ -4608,13 +4833,23 @@ Return ONLY valid JSON in this exact format:
       );
       if (error) {
         return {
-          content: [{ type: "text", text: `Carousel generation failed: ${error}` }],
+          content: [
+            {
+              type: "text",
+              text: `Carousel generation failed: ${error}`
+            }
+          ],
           isError: true
         };
       }
       if (!data?.carousel) {
         return {
-          content: [{ type: "text", text: "Carousel generation returned no data." }],
+          content: [
+            {
+              type: "text",
+              text: "Carousel generation returned no data."
+            }
+          ],
           isError: true
         };
       }
@@ -4662,7 +4897,7 @@ Return ONLY valid JSON in this exact format:
     }
   );
 }
-var VIDEO_CREDIT_ESTIMATES, IMAGE_CREDIT_ESTIMATES;
+var VIDEO_CREDIT_ESTIMATES, VIDEO_MODEL_ENUM, IMAGE_CREDIT_ESTIMATES;
 var init_content2 = __esm({
   "src/tools/content.ts"() {
     "use strict";
@@ -4670,17 +4905,36 @@ var init_content2 = __esm({
     init_rate_limit();
     init_supabase();
     init_version();
+    init_checkStatusShape();
     init_budget();
     VIDEO_CREDIT_ESTIMATES = {
-      "veo3-fast": 200,
-      "veo3-quality": 1e3,
-      "runway-aleph": 340,
-      sora2: 500,
-      "sora2-pro": 1500,
-      kling: 170,
+      "seedance-2-fast": 264,
       "kling-3": 100,
-      "kling-3-pro": 135
+      "grok-imagine": 30,
+      "veo3-fast": 65,
+      "kling-3-pro": 135,
+      "seedance-2": 328,
+      "veo3-quality": 1e3,
+      "wan-2.6": 105,
+      "gemini-omni-video": 126,
+      "hailuo-02-standard": 180,
+      "seedance-1.5-pro": 150,
+      kling: 170
     };
+    VIDEO_MODEL_ENUM = [
+      "seedance-2-fast",
+      "kling-3",
+      "grok-imagine",
+      "veo3-fast",
+      "kling-3-pro",
+      "seedance-2",
+      "veo3-quality",
+      "wan-2.6",
+      "gemini-omni-video",
+      "hailuo-02-standard",
+      "seedance-1.5-pro",
+      "kling"
+    ];
     IMAGE_CREDIT_ESTIMATES = {
       midjourney: 20,
       "nano-banana": 15,
@@ -4750,6 +5004,7 @@ var init_sanitize_error = __esm({
 });
 
 // src/lib/ssrf.ts
+import { promises as dnsPromises } from "node:dns";
 function isBlockedIP(ip) {
   const normalized = ip.replace(/^\[/, "").replace(/\]$/, "");
   if (normalized.includes(":")) {
@@ -4803,8 +5058,7 @@ async function validateUrlForSSRF(urlString) {
     let resolvedIP;
     if (!isIPAddress(hostname)) {
       try {
-        const dns = await import("node:dns");
-        const resolver = new dns.promises.Resolver();
+        const resolver = new dnsPromises.Resolver();
         const resolvedIPs = [];
         try {
           const aRecords = await resolver.resolve4(hostname);
@@ -4930,6 +5184,24 @@ function asEnvelope3(data) {
     data
   };
 }
+function accountEffectiveStatus(account) {
+  return account.effective_status || account.status;
+}
+function isUsableAccount(account) {
+  const status = accountEffectiveStatus(account);
+  return status === "active" || status === "expires_soon";
+}
+function formatAccountChoice(account) {
+  const name = account.username ? `@${account.username}` : "unnamed";
+  const project = account.project_id ? `project_id=${account.project_id}` : "project_id=unassigned";
+  const refresh = account.has_refresh_token ? "OAuth 2.0 refresh" : "no refresh token";
+  return `${account.id} (${name}, ${project}, ${accountEffectiveStatus(account)}, ${refresh})`;
+}
+function requestedAccountIdForPlatform(accountId, accountIds, platform3) {
+  if (accountId) return accountId;
+  if (!accountIds) return void 0;
+  return accountIds[platform3] || accountIds[platform3.toLowerCase()];
+}
 function isAlreadyR2Signed(url) {
   try {
     const u = new URL(url);
@@ -5073,16 +5345,18 @@ function registerDistributionTools(server) {
       schedule_at: z3.string().optional().describe(
         'ISO 8601 UTC datetime for scheduled posting (e.g. "2026-03-20T14:00:00Z"). Omit to post immediately. Must be in the future.'
       ),
-      project_id: z3.string().optional().describe("Social Neuron project ID to associate this post with."),
+      project_id: z3.string().optional().describe(
+        "Social Neuron brand/project ID to associate this post with. Provide this when the account has multiple brands so brand voice and connected account routing stay scoped to the right brand."
+      ),
       response_format: z3.enum(["text", "json"]).optional().describe("Optional response format. Defaults to text."),
       attribution: z3.boolean().optional().describe(
         'If true, appends "Created with Social Neuron" to the caption. Default: false.'
       ),
       account_id: z3.string().optional().describe(
-        "Connected account ID to post from. Use list_connected_accounts to find the right ID. Required when multiple accounts exist for the same platform."
+        "Connected account ID to post from. Use list_connected_accounts to find the right ID. Required when multiple accounts exist for the same platform. If project_id is provided, the account must belong to that project or be unassigned."
       ),
       account_ids: z3.record(z3.string(), z3.string()).optional().describe(
-        'Per-platform account IDs when posting to multiple platforms. Example: {"twitter": "abc123", "instagram": "def456"}. Use list_connected_accounts to find IDs.'
+        'Per-platform account IDs when posting to multiple platforms. Example: {"twitter": "abc123", "instagram": "def456"}. Use list_connected_accounts with the same project_id to find IDs.'
       ),
       auto_rehost: z3.boolean().optional().describe(
         "Whether to persist non-R2 media_url/media_urls into R2 before posting. Default: true. Set to false only if you know the source URL will outlive the scheduling window and every target platform supports URL ingest."
@@ -5292,22 +5566,53 @@ function registerDistributionTools(server) {
           isError: true
         };
       }
-      const { data: accountsData } = await callEdgeFunction("mcp-data", { action: "connected-accounts" }, { timeoutMs: 1e4 });
+      const { data: accountsData } = await callEdgeFunction(
+        "mcp-data",
+        {
+          action: "connected-accounts",
+          ...project_id ? { projectId: project_id, project_id } : {}
+        },
+        { timeoutMs: 1e4 }
+      );
       if (accountsData?.accounts) {
         const accounts = accountsData.accounts;
         const issues = [];
         for (const platform3 of normalizedPlatforms) {
           const platformAccounts = accounts.filter(
-            (a) => a.platform.toLowerCase() === platform3.toLowerCase() && a.status === "active"
+            (a) => a.platform.toLowerCase() === platform3.toLowerCase() && isUsableAccount(a)
+          );
+          const requestedAccountId = requestedAccountIdForPlatform(
+            account_id,
+            account_ids,
+            platform3
           );
+          if (requestedAccountId) {
+            const selected = accounts.find((a) => a.id === requestedAccountId);
+            if (!selected) {
+              issues.push(
+                `${platform3}: Account "${requestedAccountId}" is not available${project_id ? ` for project_id ${project_id}` : ""}. Call \`list_connected_accounts\`${project_id ? " with the same project_id" : ""} and choose one of the returned IDs.`
+              );
+            } else if (selected.platform.toLowerCase() !== platform3.toLowerCase()) {
+              issues.push(
+                `${platform3}: Account "${requestedAccountId}" belongs to ${selected.platform}, not ${platform3}.`
+              );
+            } else if (!isUsableAccount(selected)) {
+              issues.push(
+                `${platform3}: Account "${selected.username || selected.id}" is ${accountEffectiveStatus(selected)}. Reconnect at socialneuron.com/settings/connections.`
+              );
+            } else if (project_id && selected.project_id && selected.project_id !== project_id) {
+              issues.push(
+                `${platform3}: Account "${selected.username || selected.id}" is bound to project_id ${selected.project_id}, not ${project_id}. Use the selected brand's account or reconnect/assign it in Settings > Integrations.`
+              );
+            }
+            continue;
+          }
           if (platformAccounts.length === 0) {
             issues.push(
-              `${platform3}: not connected yet. This is a one-time browser setup on socialneuron.com \u2014 NOT another OAuth in Claude. Call \`start_platform_connection\` with platform="${platform3.toLowerCase()}" to get a deep link, ask the user to open it in their browser and approve on the platform, then call \`wait_for_connection\` before retrying schedule_post.`
+              `${platform3}: not connected yet. This is a one-time browser setup on socialneuron.com \u2014 NOT another OAuth in Claude. Call \`start_platform_connection\` with platform="${platform3.toLowerCase()}"${project_id ? ` and project_id="${project_id}"` : ""} to get a deep link, ask the user to open it in their browser and approve on the platform, then call \`wait_for_connection\` before retrying schedule_post.`
             );
-          } else if (platformAccounts.length > 1 && !account_id && !account_ids?.[platform3.toLowerCase()]) {
-            const accountList = platformAccounts.map(
-              (a) => `  - ${a.id} (${a.username || "unnamed"}${a.has_refresh_token ? ", OAuth 2.0" : ", no refresh token"})`
-            ).join("\n");
+          } else if (platformAccounts.length > 1) {
+            const accountList = platformAccounts.map((a) => `  - ${formatAccountChoice(a)}`).join("\n");
             issues.push(
               `${platform3}: Multiple accounts found. Specify account_id or account_ids to choose:
 ${accountList}`
@@ -5462,13 +5767,21 @@ Created with Social Neuron`;
   );
   server.tool(
     "list_connected_accounts",
-    "Check which social platforms have active OAuth connections for posting. Call this before schedule_post to verify credentials. If a platform is missing or expired, the user needs to reconnect at socialneuron.com/settings/connections.",
+    "Check which social platforms have active OAuth connections for posting. Call this before schedule_post to verify credentials. Pass project_id to list the accounts for a specific brand/project, then pass the returned account id as account_id/account_ids when posting. If a platform is missing or expired, the user needs to reconnect at socialneuron.com/settings/connections.",
     {
+      project_id: z3.string().optional().describe(
+        "Brand/project ID to scope connected accounts. Use the same project_id when calling schedule_post."
+      ),
+      include_all: z3.boolean().optional().describe("If true, include expired or inactive accounts as well as usable accounts."),
       response_format: z3.enum(["text", "json"]).optional().describe("Optional response format. Defaults to text.")
     },
-    async ({ response_format }) => {
+    async ({ project_id, include_all, response_format }) => {
       const format = response_format ?? "text";
-      const { data: result, error: efError } = await callEdgeFunction("mcp-data", { action: "connected-accounts" });
+      const { data: result, error: efError } = await callEdgeFunction("mcp-data", {
+        action: "connected-accounts",
+        ...project_id ? { projectId: project_id, project_id } : {},
+        ...include_all ? { includeAll: true } : {}
+      });
       if (efError || !result?.success) {
         return {
           content: [
@@ -5501,12 +5814,17 @@ Created with Social Neuron`;
           ]
         };
       }
-      const lines = [`${accounts.length} connected account(s):`, ""];
+      const lines = [
+        `${accounts.length} connected account(s)${project_id ? ` for project ${project_id}` : ""}:`,
+        ""
+      ];
       for (const account of accounts) {
         const name = account.username || "(unnamed)";
         const platformLower = account.platform.toLowerCase();
+        const project = account.project_id ? `project_id=${account.project_id}` : "project_id=unassigned";
+        const status = accountEffectiveStatus(account);
         lines.push(
-          `  ${platformLower}: ${name} (connected ${account.created_at.split("T")[0]})`
+          `  ${platformLower}: ${name} | id=${account.id} | ${project} | status=${status} (connected ${account.created_at.split("T")[0]})`
         );
       }
       if (format === "json") {
@@ -6714,7 +7032,8 @@ function registerMediaTools(server) {
     },
     async ({ r2_key, response_format }) => {
       const format = response_format ?? "text";
-      const { data, error } = await callEdgeFunction("get-signed-url", { r2Key: r2_key, operation: "get" }, { timeoutMs: 1e4 });
+      const normalizedR2Key = r2_key.startsWith("r2://") ? r2_key.slice("r2://".length) : r2_key;
+      const { data, error } = await callEdgeFunction("get-signed-url", { r2Key: normalizedR2Key, operation: "get" }, { timeoutMs: 1e4 });
       const signedDownloadUrl = data?.url ?? data?.signedUrl;
       if (error) {
         return {
@@ -14122,7 +14441,7 @@ function registerCarouselTools(server) {
         "Explicit hook/opener for slide 1. Overrides any hook derived from topic. Keep under 15 words for strongest scroll-stop."
       ),
       hook_family: z28.enum(["curiosity", "authority", "pain_point", "contrarian", "data_driven"]).optional().describe(
-        "Hook family tag. Recorded on the carousel so downstream analytics + bandit learners can attribute engagement to hook pattern."
+        "Hook family tag. Recorded on the carousel so downstream analytics can attribute engagement to hook pattern."
       ),
       cta_text: z28.string().max(200).optional().describe("Explicit CTA copy for the final slide. If omitted, derived from topic."),
       cta_url: z28.string().url().optional().describe("URL promoted on the CTA slide. Defaults to the project landing page."),
@@ -14869,7 +15188,10 @@ var init_content_calendar = __esm({
 import { z as z32 } from "zod";
 function findActiveAccount(accounts, platform3) {
   const target = platform3.toLowerCase();
-  return accounts.find((a) => a.platform.toLowerCase() === target && a.status === "active") ?? null;
+  return accounts.find((a) => {
+    const effectiveStatus = a.effective_status || a.status;
+    return a.platform.toLowerCase() === target && (effectiveStatus === "active" || effectiveStatus === "expires_soon");
+  }) ?? null;
 }
 function registerConnectionTools(server) {
   server.tool(
@@ -14877,11 +15199,15 @@ function registerConnectionTools(server) {
     "Begin connecting a social platform (Instagram, TikTok, YouTube, etc.). Returns a single-use deep link the user opens in a browser to complete the one-time OAuth handshake on socialneuron.com. This is NOT another OAuth in Claude \u2014 platform connections require a browser session because the social platforms (Meta, Google, TikTok) only accept callbacks on socialneuron.com. After the user clicks the link and approves on the platform, call `wait_for_connection` to detect completion. Link expires in 2 minutes; mint a new one if needed. Use `list_connected_accounts` first to check whether the platform is already connected before calling this.",
     {
       platform: z32.enum(PLATFORM_ENUM4).describe("Platform to connect. Lower-case: instagram, tiktok, youtube, etc."),
+      project_id: z32.string().optional().describe(
+        "Brand/project ID to bind the new social account to. Use this when connecting a brand-specific account."
+      ),
       response_format: z32.enum(["text", "json"]).optional().describe("Response format. Default: text.")
     },
-    async ({ platform: platform3, response_format }) => {
+    async ({ platform: platform3, project_id, response_format }) => {
       const format = response_format ?? "text";
-      const rl = checkRateLimit("read", `start_platform_connection:${platform3}`);
+      const userId = await getDefaultUserId();
+      const rl = checkRateLimit("read", `start_platform_connection:${userId}`);
       if (!rl.allowed) {
         return {
           content: [
@@ -14893,7 +15219,15 @@ function registerConnectionTools(server) {
           isError: true
         };
       }
-      const { data, error } = await callEdgeFunction("mcp-data", { action: "mint-connection-nonce", platform: platform3 }, { timeoutMs: 1e4 });
+      const { data, error } = await callEdgeFunction(
+        "mcp-data",
+        {
+          action: "mint-connection-nonce",
+          platform: platform3,
+          ...project_id ? { projectId: project_id, project_id } : {}
+        },
+        { timeoutMs: 1e4 }
+      );
       if (error || !data?.success || !data.deep_link) {
         const errMsg = error ?? data?.error ?? "Unknown error";
         return {
@@ -14914,6 +15248,7 @@ function registerConnectionTools(server) {
               text: JSON.stringify(
                 {
                   platform: data.platform,
+                  project_id: project_id ?? null,
                   deep_link: data.deep_link,
                   expires_at: data.expires_at,
                   next_step: "Open deep_link in a browser, approve on the platform, then call wait_for_connection."
@@ -14932,6 +15267,7 @@ function registerConnectionTools(server) {
             type: "text",
             text: [
               `${data.platform} connection ready.`,
+              ...project_id ? [`Brand/project: ${project_id}`] : [],
               "",
               'Ask the user to open this link in a browser and click "Connect" on the platform:',
               `  ${data.deep_link}`,
@@ -14952,17 +15288,21 @@ function registerConnectionTools(server) {
     "Poll until a platform connection becomes active. Use after `start_platform_connection` while the user completes the browser OAuth flow. Returns when the account row appears with status=active, or when the timeout elapses. Default timeout 120s, max 600s.",
     {
       platform: z32.enum(PLATFORM_ENUM4).describe("Platform to wait for."),
+      project_id: z32.string().optional().describe(
+        "Brand/project ID to scope the connection poll. Use the same project_id passed to start_platform_connection."
+      ),
       timeout_s: z32.number().min(5).max(600).optional().describe("How long to wait, in seconds. Default 120."),
       poll_interval_s: z32.number().min(2).max(30).optional().describe("Poll interval in seconds. Default 5."),
       response_format: z32.enum(["text", "json"]).optional().describe("Response format. Default: text.")
     },
-    async ({ platform: platform3, timeout_s, poll_interval_s, response_format }) => {
+    async ({ platform: platform3, project_id, timeout_s, poll_interval_s, response_format }) => {
       const format = response_format ?? "text";
       const startedAt = Date.now();
       const timeoutMs = (timeout_s ?? 120) * 1e3;
       const intervalMs = (poll_interval_s ?? 5) * 1e3;
       const deadline = startedAt + timeoutMs;
-      const rl = checkRateLimit("read", `wait_for_connection:${platform3}`);
+      const userId = await getDefaultUserId();
+      const rl = checkRateLimit("read", `wait_for_connection:${userId}`);
       if (!rl.allowed) {
         return {
           content: [
@@ -14974,90 +15314,123 @@ function registerConnectionTools(server) {
           isError: true
         };
       }
-      let attempts = 0;
-      while (Date.now() < deadline) {
-        attempts++;
-        const { data, error } = await callEdgeFunction("mcp-data", { action: "connected-accounts" }, { timeoutMs: 1e4 });
-        if (!error && data?.success) {
-          const found = findActiveAccount(data.accounts ?? [], platform3);
-          if (found) {
-            if (format === "json") {
+      const activeWaits = inFlightWaitsByUser.get(userId) ?? 0;
+      if (activeWaits >= MAX_CONCURRENT_WAITS_PER_USER) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: `Too many concurrent \`wait_for_connection\` calls (max ${MAX_CONCURRENT_WAITS_PER_USER}). Let an existing wait finish, or poll \`list_connected_accounts\` instead.`
+            }
+          ],
+          isError: true
+        };
+      }
+      inFlightWaitsByUser.set(userId, activeWaits + 1);
+      try {
+        let attempts = 0;
+        while (Date.now() < deadline) {
+          attempts++;
+          const { data, error } = await callEdgeFunction(
+            "mcp-data",
+            {
+              action: "connected-accounts",
+              ...project_id ? { projectId: project_id, project_id } : {}
+            },
+            { timeoutMs: 1e4 }
+          );
+          if (!error && data?.success) {
+            const found = findActiveAccount(data.accounts ?? [], platform3);
+            if (found) {
+              if (format === "json") {
+                return {
+                  content: [
+                    {
+                      type: "text",
+                      text: JSON.stringify(
+                        {
+                          connected: true,
+                          platform: found.platform,
+                          project_id: found.project_id ?? project_id ?? null,
+                          account_id: found.id,
+                          username: found.username,
+                          connected_at: found.created_at,
+                          attempts
+                        },
+                        null,
+                        2
+                      )
+                    }
+                  ],
+                  isError: false
+                };
+              }
               return {
                 content: [
                   {
                     type: "text",
-                    text: JSON.stringify(
-                      {
-                        connected: true,
-                        platform: found.platform,
-                        account_id: found.id,
-                        username: found.username,
-                        connected_at: found.created_at,
-                        attempts
-                      },
-                      null,
-                      2
-                    )
+                    text: [
+                      `${found.platform} is connected.`,
+                      ...found.project_id || project_id ? [`Brand/project: ${found.project_id ?? project_id}`] : [],
+                      `Account: ${found.username || "(unnamed)"} (id=${found.id})`,
+                      `Detected after ${attempts} poll(s) in ${((Date.now() - startedAt) / 1e3).toFixed(1)}s.`,
+                      "Ready to call `schedule_post`."
+                    ].join("\n")
                   }
                 ],
                 isError: false
               };
             }
-            return {
-              content: [
-                {
-                  type: "text",
-                  text: [
-                    `${found.platform} is connected.`,
-                    `Account: ${found.username || "(unnamed)"} (id=${found.id})`,
-                    `Detected after ${attempts} poll(s) in ${((Date.now() - startedAt) / 1e3).toFixed(1)}s.`,
-                    "Ready to call `schedule_post`."
-                  ].join("\n")
-                }
-              ],
-              isError: false
-            };
           }
+          const remaining = deadline - Date.now();
+          if (remaining <= 0) break;
+          await new Promise((resolve3) => setTimeout(resolve3, Math.min(intervalMs, remaining)));
+        }
+        const message = `${platform3} did not connect within ${timeout_s ?? 120}s (${attempts} polls). The user may not have completed the browser OAuth yet, or the link expired. Mint a new link with \`start_platform_connection\` and try again, or have the user go directly to socialneuron.com/settings/connections.`;
+        if (format === "json") {
+          return {
+            content: [
+              {
+                type: "text",
+                text: JSON.stringify(
+                  {
+                    connected: false,
+                    platform: platform3,
+                    project_id: project_id ?? null,
+                    attempts,
+                    timed_out: true,
+                    message
+                  },
+                  null,
+                  2
+                )
+              }
+            ],
+            isError: true
+          };
         }
-        const remaining = deadline - Date.now();
-        if (remaining <= 0) break;
-        await new Promise((resolve3) => setTimeout(resolve3, Math.min(intervalMs, remaining)));
-      }
-      const message = `${platform3} did not connect within ${timeout_s ?? 120}s (${attempts} polls). The user may not have completed the browser OAuth yet, or the link expired. Mint a new link with \`start_platform_connection\` and try again, or have the user go directly to socialneuron.com/settings/connections.`;
-      if (format === "json") {
         return {
-          content: [
-            {
-              type: "text",
-              text: JSON.stringify(
-                {
-                  connected: false,
-                  platform: platform3,
-                  attempts,
-                  timed_out: true,
-                  message
-                },
-                null,
-                2
-              )
-            }
-          ],
+          content: [{ type: "text", text: message }],
           isError: true
         };
+      } finally {
+        const remainingWaits = (inFlightWaitsByUser.get(userId) ?? 1) - 1;
+        if (remainingWaits <= 0) {
+          inFlightWaitsByUser.delete(userId);
+        } else {
+          inFlightWaitsByUser.set(userId, remainingWaits);
+        }
       }
-      return {
-        content: [{ type: "text", text: message }],
-        isError: true
-      };
     }
   );
 }
-var PLATFORM_ENUM4;
+var PLATFORM_ENUM4, MAX_CONCURRENT_WAITS_PER_USER, inFlightWaitsByUser;
 var init_connections = __esm({
   "src/tools/connections.ts"() {
     "use strict";
     init_edge_function();
     init_rate_limit();
+    init_supabase();
     PLATFORM_ENUM4 = [
       "youtube",
       "tiktok",
@@ -15070,6 +15443,8 @@ var init_connections = __esm({
       "shopify",
       "etsy"
     ];
+    MAX_CONCURRENT_WAITS_PER_USER = 3;
+    inFlightWaitsByUser = /* @__PURE__ */ new Map();
   }
 });
 
@@ -15934,7 +16309,12 @@ function applyScopeEnforcement(server, scopeResolver) {
             toolName: name,
             status,
             durationMs: Date.now() - startedAt,
-            details: { source: "wrapper" }
+            details: {
+              source: "wrapper",
+              // Classify failures so the tool-error rate is diagnosable
+              // (validation vs permission vs billing vs upstream vs server).
+              ...status === "error" ? { error_type: classifyToolError(result) } : {}
+            }
           });
           return truncateResponse(result);
         } catch (err) {
@@ -15944,6 +16324,8 @@ function applyScopeEnforcement(server, scopeResolver) {
             durationMs: Date.now() - startedAt,
             details: {
               source: "wrapper",
+              // A thrown exception escaped the handler — an unclassified fault.
+              error_type: "server_error",
               exception: err instanceof Error ? err.message.slice(0, 200) : "unknown"
             }
           });
@@ -16037,6 +16419,7 @@ function truncateResponse(result) {
   return { ...result, content: truncated };
 }
 function registerAllTools(server, options) {
+  applyToolProfile(server, options?.toolProfile ?? "full");
   registerIdeationTools(server);
   registerContentTools(server);
   registerDistributionTools(server);
@@ -16089,6 +16472,7 @@ var init_register_tools = __esm({
     init_supabase();
     init_www_authenticate();
     init_tool_error();
+    init_tool_profile();
     init_scanner();
     init_ideation();
     init_content2();
@@ -16173,13 +16557,13 @@ async function invokeToolRest(name, args) {
 }
 function extractRestError(result) {
   const sc = result.structuredContent?.error;
-  if (sc?.error_type && KNOWN_ERROR_TYPES.has(sc.error_type)) {
+  if (sc?.error_type && KNOWN_ERROR_TYPES2.has(sc.error_type)) {
     return { error_type: sc.error_type, message: sc.message ?? "Tool error." };
   }
   const text = result.content?.find((c) => c.type === "text")?.text ?? "";
   try {
     const parsed = JSON.parse(text);
-    if (parsed.error_type && KNOWN_ERROR_TYPES.has(parsed.error_type)) {
+    if (parsed.error_type && KNOWN_ERROR_TYPES2.has(parsed.error_type)) {
       return { error_type: parsed.error_type, message: parsed.message ?? text };
     }
   } catch {
@@ -16189,7 +16573,7 @@ function extractRestError(result) {
   }
   return { error_type: "server_error", message: text || "Tool error." };
 }
-var cachedCallHandler, KNOWN_ERROR_TYPES;
+var cachedCallHandler, KNOWN_ERROR_TYPES2;
 var init_rest_invoke = __esm({
   "src/lib/rest-invoke.ts"() {
     "use strict";
@@ -16197,7 +16581,7 @@ var init_rest_invoke = __esm({
     init_request_context();
     init_version();
     init_tool_catalog();
-    KNOWN_ERROR_TYPES = /* @__PURE__ */ new Set([
+    KNOWN_ERROR_TYPES2 = /* @__PURE__ */ new Set([
       "policy_block",
       "validation_error",
       "permission_denied",
@@ -16274,7 +16658,9 @@ async function handleCall(args, asJson) {
       scopes: auth.scopes ?? [],
       token: apiKey,
       creditsUsed: 0,
-      assetsGenerated: 0
+      assetsGenerated: 0,
+      surface: "cli",
+      projectId: auth.projectId ?? null
     },
     () => invokeToolRest(toolName, toolArgs)
   );