hermoso 0.1.189 → 0.1.192

package/README.md

@@ -5,7 +5,7 @@ scripts. Research the ads already winning in a market, generate finished image &
 composited in, copy + CTA included), publish them to your own social channels, and build & manage the ad
 campaigns behind them — all over [MCP](https://modelcontextprotocol.io) tools, a CLI, or installable Claude skills.
 
-**745 tools.** `tools/list` is always the authoritative set; `hermoso_capabilities` (free) returns the live model
+**746 tools.** `tools/list` is always the authoritative set; `hermoso_capabilities` (free) returns the live model
 catalog with exact per-render credit costs plus the full capability map.
 
 **What it connects to.** Ad platforms: Meta, Google Ads, TikTok Ads, LinkedIn Ads, Reddit Ads, X Ads,
@@ -168,7 +168,7 @@ block entirely if you signed in above; it is there for CI, where the process can
 
 Then ask your agent: *“Generate an image ad with Hermoso.”*
 
-### What the 745 tools cover
+### What the 746 tools cover
 
 **Ad spy / research** — `find_competitors`, `competitor_teardown`, `pull_competitor_ads`, `research_ads`; the
 Meta / Google / LinkedIn ad libraries (`search_meta_ads`, `search_google_ads`, `search_linkedin_ads`); organic

package/mcp/tools.mjs

@@ -1812,6 +1812,8 @@ export function parseToolScope(raw) {
   // everything on 2026-08-16, so a caller who genuinely wants all 436 tools needs a way to say so that is not
   // "list every group by name and hope none was added since".
   if (asked.includes('all')) return { groups: [...TOOL_GROUP_NAMES] };
+  if (asked.includes('directory-full')) return { groups: [...DEFAULT_TOOL_GROUPS], directory: 'full' }; // the submitted listing: everything but the billing tools — see DIRECTORY_BILLING_TOOLS
+  if (asked.includes('directory')) return { groups: [...DIRECTORY_GROUPS], directory: 'scoped' }; // the fully scoped fallback — see DIRECTORY_GROUPS
   const unknown = asked.filter((v) => !TOOL_GROUP_NAMES.includes(v));
   if (unknown.length) {
     // No tool COUNT in this message: a committed count goes stale (four different wrong numbers shipped at once
@@ -1825,6 +1827,39 @@ export function parseToolScope(raw) {
 // a HOST rule, not a capability we removed: every other surface still offers both.
 export const WITHHELD_FROM_WIDGET_HOSTS = new Set(['buy_credits', 'upgrade_plan', 'set_auto_reload']);
 
+// ── THE DIRECTORY ROSTER (2026-09-02) — `?tools=directory` ─────────────────────────────────────────────────────
+// Anthropic's Software Directory Policy prohibits "software that uses AI models to generate images, video, or
+// audio content" (design aids excepted) and software that "executes financial transactions on behalf of users".
+// Hermoso as a whole does both, so the Claude Connectors Directory listing is a SCOPED server: the `create` group
+// is out, every tool that calls a generative image/video/audio model is out wherever it lives, and the three tools
+// that move money are out (the same three ChatGPT is denied). Dave, 2026-09-02: "We're way more than ad generation,
+// we can focus on all the other huge benefits like our organic posting, ads management, analytics, dms, etc."
+// It is a CAGE, deliberately, unlike every other scope: enable_tools may not widen it into `create` or `all`,
+// because the listing's compliance acknowledgments are only honest if no path on the connection reaches a
+// generative model. Pinned by tools/directory-roster-check.mjs.
+export const DIRECTORY_GROUPS = ['research', 'channels', 'channel_admin', 'ads', 'analytics', 'files', 'workspace'];
+export const DIRECTORY_BANNED_GROUPS = ['create'];
+// Generative-media tools that live OUTSIDE `create` (post-production and variation lanes) plus the money movers.
+// Kept as an explicit set rather than a regex so a new generative tool has to be named here — a regex that
+// happened to miss it would list it in the directory.
+export const WITHHELD_FROM_DIRECTORY = new Set([
+  'buy_credits', 'upgrade_plan', 'set_auto_reload',
+  'generate_image', 'generate_video', 'generate_avatar', 'generate_voice', 'render_ad', 'plan_ad', 'plan_variations',
+  'make_thumbnail', 'make_explainer', 'product_sizzle', 'dub_video', 'change_voice', 'edit_video', 'recast_motion',
+  'upscale_video', 'reframe_video', 'multiply_ad', 'remix_static', 'stitch_video', 'fix_beat',
+]);
+// TWO DIRECTORY MODES (Dave, 2026-09-02, after the directory turned out to list Tofu Ads — an AI ad-image generator
+// — under the policy's design-asset carve-out): `directory` is the fully scoped cage above; `directory-full` keeps
+// generation (an ad-creation workflow with the brand's own product and copy, the carve-out's shape) and withholds
+// ONLY the three tools that move money, which is the listing that was actually submitted. Both are cages for what
+// they withhold: enable_tools never re-lists a billing tool on either.
+export const DIRECTORY_BILLING_TOOLS = new Set(['buy_credits', 'upgrade_plan', 'set_auto_reload']);
+export const toolHeldBackByDirectory = (name, group, ctx) => {
+  if (!ctx?.directory) return false;
+  if (ctx.directory === 'full') return DIRECTORY_BILLING_TOOLS.has(name);
+  return WITHHELD_FROM_DIRECTORY.has(name) || DIRECTORY_BANNED_GROUPS.includes(group);
+};
+
 // ── A REFERENCE LOOKUP MUST NOT BE AN APP SURFACE (2026-08-24) ─────────────────────────────────────────────────
 // MEASURED IN CHATGPT, not theorised: "make a 4 second vertical video ad for a coffee roaster" produced a
 // full-height scrolling MODEL CATALOG card ahead of the ad, and the catalog is ~70 rows, so the thing the user
@@ -1969,6 +2004,10 @@ const makeEnableToolsHandler = (ctx) => async ({ groups }) => {
   const want = (Array.isArray(groups) ? groups : []).map((g) => String(g || '').trim().toLowerCase()).filter(Boolean);
   if (!want.length) return { content: [{ type: 'text', text: "Name at least one group to turn on, e.g. groups:['ads']." }], isError: true };
   const expand = want.includes('all') ? [...TOOL_GROUP_NAMES] : want;
+  // THE DIRECTORY CAGE (2026-09-02): a connection scoped for the Claude directory may not be widened into the
+  // generative group, by name or through 'all' — see DIRECTORY_GROUPS. The way to those tools is the app or the
+  // unscoped server URL, and the refusal says so instead of silently trimming the ask.
+  if (ctx.directory === 'scoped' && (want.includes('all') || expand.some((g) => DIRECTORY_BANNED_GROUPS.includes(g)))) return { content: [{ type: 'text', text: `This connection is the Claude directory listing, which deliberately carries no image, video or audio generation tools and no billing tools. Those live in the Hermoso app (https://app.hermoso.ai) and on the unscoped server URL https://app.hermoso.ai/mcp — not on this connection. Groups you can turn on here: ${DIRECTORY_GROUPS.join(', ')}.` }], isError: true };
   const unknown = expand.filter((g) => !TOOL_GROUP_NAMES.includes(g));
   // REFUSED BY NAME, never dropped: silently ignoring a typo would report success and leave the agent looking
   // for a tool that is still disabled — the failure this whole mechanism exists to avoid.
@@ -1989,6 +2028,7 @@ const makeEnableToolsHandler = (ctx) => async ({ groups }) => {
       // says how many and why, because a group that turns on "8 tools" when the agent expected 240 with no
       // explanation is the [[prompt-rosters-go-stale]] failure — the agent concludes the capability is missing.
       if (toolHeldBackByConnectors(name, ctx.conn)) { heldBack++; continue; }
+      if (toolHeldBackByDirectory(name, grp, ctx)) continue; // the cage holds across a group flip too
       try { h.enable(); n++; } catch {}
     }
   }
@@ -2048,6 +2088,7 @@ function newToolScope(opts) {
     enabledGroups: asked, groupOf: Object.create(null), handleOf: Object.create(null),
     conn: opts.connectors || null,
     widgetHost: !!opts.widgetHost,
+    directory: opts.directory === 'full' ? 'full' : (opts.directory ? 'scoped' : false),
   };
 }
 // THE THREE REASONS A REGISTERED TOOL IS HELD BACK. Applied identically on the build path, the replay path and
@@ -2067,6 +2108,7 @@ function applyToolGates(h, name, group, ctx, opts) {
   if (!ctx.enabledGroups.has(group)) { try { h.disable(); } catch {} }
   if (WITHHELD_FROM_WIDGET_HOSTS.has(name) && opts.widgetHost) { try { h.disable(); } catch {} }
   if (toolHeldBackByConnectors(name, ctx.conn)) { try { h.disable(); } catch {} }
+  if (toolHeldBackByDirectory(name, group, ctx)) { try { h.disable(); } catch {} } // (4) the directory cage — see DIRECTORY_GROUPS
 }
 
 // Replay the cached canon onto a fresh server. This is the whole hot path for every session after the first.
@@ -15352,9 +15394,20 @@ function buildTools(rawServer, opts = {}, sink = null) {
     if (!memory.length) return ok('Memory is empty for this workspace.', { memory: [] });
     return ok(`${memory.length} memory item(s):\n` + memory.map(m => `  • [${m.category}] ${m.text}${m.id ? `  (${m.id})` : ''}`).join('\n'), { memory });
   }));
+// MEMORY HYGIENE (2026-09-02) — byte-identical copies of lib/memory-hygiene.mjs's two regexes (this file ships without
+// lib/). tools/memory-hygiene-check.mjs pins the parity. Memory holds brand facts, never product/API mechanics or PII.
+const MEMORY_MECHANICS_RE = /\b(endpoint|API\b|APIs\b|webhook|rate[ -]?limit|access token|OAuth|graph\.[a-z]+|sandbox|dev(?:elopment)? mode|HTTP \d{3}|\b4\d\d\b(?: error)?|error (?:message|text|code)|'reduce the amount of data'|not (?:yet )?supported|deprecated|verified \d{4}-\d{2}-\d{2}|on this connection|Hermoso'?s? (?:own|publish record|tool|MCP|CLI)|(?:no|missing|lacks?) '?[\w ]{0,30}'? ?endpoint|tool (?:returns?|output|call)|(?:returns?|come back|comes back) (?:null|empty|zeros?|truncated|full bodies|counts only)|omit(?:s|ted)? zero rows|permission (?:edge|rows?|list|request)|subscribed_fields|paging cursor|pagination)\b/i;
+const MEMORY_PII_RE = /(\+\d[\d\s().-]{7,}\d)|(\(?\b\d{3}\)?[\s.-]\d{3}[\s.-]\d{4}\b)|([\w.+-]+@[\w-]+\.[\w.-]+)/;
+function memoryNoteVerdict(text) {
+  const t = String(text || '').trim();
+  if (!t) return { ok: false, reason: 'empty' };
+  if (MEMORY_PII_RE.test(t)) return { ok: false, reason: 'pii', message: 'Not saved: Memory never holds a phone number or an email address.' };
+  if (MEMORY_MECHANICS_RE.test(t)) return { ok: false, reason: 'mechanics', message: 'Not saved: that is about how Hermoso or a platform API behaves, not about the brand. Memory holds brand, audience, offer, taste and working preferences only — product behaviour lives in the tools themselves.' };
+  return { ok: true };
+}
   server.registerTool('remember', {
     title: 'Remember a fact',
-    description: 'Save a durable fact or PREFERENCE about the brand, audience, or the user’s creative TASTE (e.g. “audience is first-time homebuyers”, “prefers bold lime accents”, “always captions off”) into the workspace Memory so it shapes FUTURE ads. For lasting things, not one-off requests. Merges into the existing Memory (never overwrites); de-dupes on identical text.',
+    description: 'Save a durable fact or PREFERENCE about the brand, audience, or the user’s creative TASTE (e.g. “audience is first-time homebuyers”, “prefers bold lime accents”, “always captions off”) into the workspace Memory so it shapes FUTURE ads. For lasting things, not one-off requests. Merges into the existing Memory (never overwrites); de-dupes on identical text. NEVER how Hermoso, a tool, a connector or a platform API behaves (what a call returns, errors, permissions, limits, ids) and never a phone number or email — those are refused.',
     inputSchema: {
       text: z.string().describe('the fact/preference, concise'),
       category: z.string().optional().describe('short bucket: Brand, Audience, Taste, Do, Don’t, or Preference (default General)'),
@@ -15363,6 +15416,7 @@ function buildTools(rawServer, opts = {}, sink = null) {
     annotations: { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false },
   }, wrap(async (a) => {
     const text = String(a.text || '').trim(); if (!text) return { content: [{ type: 'text', text: 'Nothing to remember — pass text.' }], isError: true };
+    { const v = memoryNoteVerdict(text); if (!v.ok) return { content: [{ type: 'text', text: v.message }], isError: true }; }
     let list = await readStore('heist.memory.v1'); if (!Array.isArray(list)) list = [];
     if (list.some(m => m && String(m.text || '').toLowerCase() === text.toLowerCase())) return ok(`Already in memory: “${text}”.`, { ok: true });
     const item = { id: newId('m'), text, category: String(a.category || 'General').trim() || 'General', source: 'mcp', createdAt: Date.now() };
@@ -15392,6 +15446,30 @@ function buildTools(rawServer, opts = {}, sink = null) {
   // died inside one conversation, while the web user's own board sat untouched beside them.
   // These are typed writers on purpose (see the store_set note above): they mint ids, de-dupe on the ad `key`, respect
   // the per-store caps and write the two-level tombstone a genuine delete needs.
+  server.registerTool('tidy_memory', {
+    title: 'Tidy the Memory list',
+    description: 'Clean up and consolidate the workspace Memory: drops entries that are about how Hermoso, a tool, a connector or a platform API behaves (product behaviour, not the brand), drops phone numbers and emails, and merges near-duplicate facts into one sentence each. Call with no argument to get the PROPOSAL (what would be removed and merged, with reasons) — nothing changes. Call again with confirm:true to apply it through the same typed writers the app uses (deletes carry tombstones so they stay deleted on every device). One small model call; a few credits.',
+    inputSchema: { confirm: z.boolean().optional().describe('true to APPLY the proposal; omit to only see it') },
+    outputSchema: { scanned: z.number().optional(), remove: z.array(z.any()).optional(), merge: z.array(z.any()).optional(), applied: z.boolean().optional() },
+    annotations: { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: false },
+  }, wrap(async (a) => {
+    let list = await readStore('heist.memory.v1'); if (!Array.isArray(list)) list = [];
+    if (!list.length) return ok('Memory is empty — nothing to tidy.', { scanned: 0, remove: [], merge: [], applied: false });
+    const r = await apiPost('/api/memory/tidy', { items: list.map(m => ({ id: m.id, text: m.text, category: m.category })) });
+    const d = r?.data || { remove: [], merge: [] };
+    const byId = new Map(list.map(m => [String(m.id), m]));
+    const lines = [];
+    for (const x of d.remove || []) lines.push(`- remove [${x.reason}]: ${String(byId.get(x.id)?.text || x.id).slice(0, 140)}`);
+    for (const m of d.merge || []) lines.push(`- merge ${m.ids.length} → “${m.text.slice(0, 140)}”`);
+    if (!lines.length) return ok(`Scanned ${list.length} memories — nothing to remove or merge.`, { scanned: list.length, remove: [], merge: [], applied: false });
+    if (!a.confirm) return ok(`Proposal over ${list.length} memories (nothing changed — call again with confirm:true to apply):\n${lines.join('\n')}`, { scanned: list.length, remove: d.remove, merge: d.merge, applied: false });
+    const gone = new Set([...(d.remove || []).map(x => String(x.id)), ...(d.merge || []).flatMap(m => m.ids.map(String))]);
+    for (const id of gone) await tombstone('heist.memory.v1', id);
+    const merged = (d.merge || []).map(m => ({ id: newId('m'), text: m.text, category: m.category || 'General', source: 'tidy', createdAt: Date.now() }));
+    await writeStore('heist.memory.v1', [...merged, ...list.filter(m => m && !gone.has(String(m.id)))].slice(0, 200));
+    return ok(`Tidied: removed ${gone.size - (d.merge || []).flatMap(m => m.ids).length}, merged ${(d.merge || []).length} group(s). ${list.length} → ${list.length - gone.size + merged.length} memories.\n${lines.join('\n')}`, { scanned: list.length, remove: d.remove, merge: d.merge, applied: true });
+  }));
+
   const SWIPE_KEY = 'adInspo.swipefile.v1';
   const swipeEmpty = () => ({ collections: [{ id: 'default', name: 'My Swipefile' }], activeId: 'default', ads: [] });
   // Mirror the webapp's Swipe.read(): anything that isn't the {collections[], ads[]} shape is treated as an empty

package/package.json

@@ -1,8 +1,8 @@
 {
   "name": "hermoso",
-  "version": "0.1.189",
+  "version": "0.1.192",
   "mcpName": "io.github.hermoso-ai/hermoso",
-  "description": "AI ad studio and marketing MCP server with 745 tools. Research the ads already running in any market, generate finished image, video and UGC avatar ads, publish and schedule them to your own channels, build and manage the ad campaigns behind them, and read what they achieved. AD PLATFORMS: Meta, Google Ads, TikTok Ads, LinkedIn Ads, Reddit Ads, X Ads, Pinterest Ads, Snapchat Ads, Microsoft Advertising, Apple Search Ads and ChatGPT Ads, plus product feeds in Google Merchant Center. PUBLISHING AND SCHEDULING: Facebook, Instagram, Threads, TikTok, YouTube, X, LinkedIn, Pinterest, Bluesky and Telegram. AD RESEARCH: the Meta, Google and LinkedIn ad libraries plus organic TikTok, Instagram, YouTube, Threads and Reddit. ANALYTICS: Google Analytics 4, Google Search Console and every connected platform's own post and campaign insights. Also brand onboarding, 50+ image and video generation models, ad scoring, competitor teardowns, Google Drive and OneDrive, a CLI and installable Claude skills.",
+  "description": "AI ad studio and marketing MCP server with 746 tools. Research the ads already running in any market, generate finished image, video and UGC avatar ads, publish and schedule them to your own channels, build and manage the ad campaigns behind them, and read what they achieved. AD PLATFORMS: Meta, Google Ads, TikTok Ads, LinkedIn Ads, Reddit Ads, X Ads, Pinterest Ads, Snapchat Ads, Microsoft Advertising, Apple Search Ads and ChatGPT Ads, plus product feeds in Google Merchant Center. PUBLISHING AND SCHEDULING: Facebook, Instagram, Threads, TikTok, YouTube, X, LinkedIn, Pinterest, Bluesky and Telegram. AD RESEARCH: the Meta, Google and LinkedIn ad libraries plus organic TikTok, Instagram, YouTube, Threads and Reddit. ANALYTICS: Google Analytics 4, Google Search Console and every connected platform's own post and campaign insights. Also brand onboarding, 50+ image and video generation models, ad scoring, competitor teardowns, Google Drive and OneDrive, a CLI and installable Claude skills.",
   "type": "module",
   "bin": {
     "hermoso": "bin/hermoso.mjs"