ponch-mcp-server 1.0.76 → 1.0.78

package/dist/index.js

@@ -47,14 +47,14 @@ function resolveAuth() {
     const resolvedPath = saPath.startsWith("/") ? saPath : (0, import_path.join)(process.cwd(), saPath);
     if ((0, import_fs.existsSync)(resolvedPath)) {
       return {
-        mode: "cowork",
+        canSwitchTenant: true,
+        // service account = admin del SaaS
         tenantId: null,
         brandId: null,
         brands: [],
         userId: null,
         userName: null,
         rol: "super_admin",
-        // service account = admin total
         serviceAccountPath: resolvedPath,
         credentialsPath: null
       };
@@ -65,7 +65,7 @@ function resolveAuth() {
     try {
       const creds = JSON.parse((0, import_fs.readFileSync)(CREDENTIALS_PATH, "utf-8"));
       return {
-        mode: creds.rol === "super_admin" ? "cowork" : "tenant",
+        canSwitchTenant: creds.rol === "super_admin",
         tenantId: creds.tenantId ?? null,
         brandId: creds.brands?.[0]?.id ?? null,
         brands: creds.brands ?? [],
@@ -80,7 +80,7 @@ function resolveAuth() {
     }
   }
   return {
-    mode: "tenant",
+    canSwitchTenant: false,
     tenantId: null,
     brandId: null,
     brands: [],
@@ -108,6 +108,10 @@ function readCredentials() {
 var Session = class {
   context;
   _authContext;
+  _clientIdentity = {
+    mcpClient: null,
+    mcpClientVersion: null
+  };
   constructor(auth) {
     this._authContext = auth;
     this.context = {
@@ -115,8 +119,26 @@ var Session = class {
       brandId: auth.brandId
     };
   }
-  get mode() {
-    return this._authContext.mode;
+  /**
+   * Captura identidad del cliente MCP. Llamado al recibir handshake
+   * `initialize` del SDK. Idempotente — si se llama 2 veces, segunda no
+   * sobrescribe (el cliente no cambia mid-session).
+   */
+  setMcpClientIdentity(name, version) {
+    if (this._clientIdentity.mcpClient === null) {
+      this._clientIdentity.mcpClient = name;
+      this._clientIdentity.mcpClientVersion = version;
+    }
+  }
+  get mcpClientIdentity() {
+    return this._clientIdentity;
+  }
+  /**
+   * true → super_admin del SaaS (puede cambiar tenant). false → tenant
+   * member normal. Independiente del SDK que esté corriendo el MCP.
+   */
+  get canSwitchTenant() {
+    return this._authContext.canSwitchTenant;
   }
   get tenantId() {
     return this.context.tenantId;
@@ -137,19 +159,27 @@ var Session = class {
   get userId() {
     return this._authContext.userId;
   }
-  /** Rol del usuario (admin/encargado/empleado/super_admin). 211.1 HITO 6 */
+  /** Rol del usuario (super_admin | ROL00X del tenant). */
   get rol() {
     return this._authContext.rol;
   }
   setContext(tenantId, brandId) {
-    if (this._authContext.mode !== "cowork") {
-      throw new Error("set_context solo disponible en Modo Cowork");
+    if (!this._authContext.canSwitchTenant) {
+      throw new Error("set_context solo disponible para usuarios con permiso multi-tenant (super_admin).");
     }
     this.context.tenantId = tenantId;
     this.context.brandId = brandId;
   }
   /**
-   * Actualiza el contexto despues de connect_account (Modo B)
+   * Revoca canSwitchTenant en runtime. Usado cuando el bootstrap detecta
+   * token expirado — el usuario debe re-autenticar via connect_account
+   * antes de poder cambiar de tenant.
+   */
+  revokeCrossTenant() {
+    this._authContext.canSwitchTenant = false;
+  }
+  /**
+   * Actualiza el contexto después de connect_account.
    */
   setTenantContext(tenantId, brandId, brands, userId, userName) {
     this.context.tenantId = tenantId;
@@ -160,16 +190,10 @@ var Session = class {
     this._authContext.userId = userId;
     this._authContext.userName = userName;
   }
-  /**
-   * Fuerza el modo (usado cuando credentials existen pero token expiro)
-   */
-  forceMode(newMode) {
-    this._authContext.mode = newMode;
-  }
   requireTenant() {
     if (!this.context.tenantId) {
       throw new Error(
-        this._authContext.mode === "cowork" ? "Usa set_context para seleccionar un tenant primero" : "No conectado. Usa connect_account para conectar tu cuenta de Ponch"
+        this._authContext.canSwitchTenant ? "Usa set_context para seleccionar un tenant primero." : "No conectado. Usa connect_account para conectar tu cuenta de Ponch."
       );
     }
     return this.context.tenantId;
@@ -188,11 +212,11 @@ var import_app = require("firebase/app");
 var import_lite = require("firebase/firestore/lite");
 var import_auth = require("firebase/auth");
 var import_fs2 = require("fs");
-var mode = "none";
+var sdkMode = "none";
 var adminDb;
 var clientDb;
 function initFirebaseAdmin(serviceAccountPath) {
-  if (mode !== "none") return;
+  if (sdkMode !== "none") return;
   const serviceAccount = JSON.parse(
     (0, import_fs2.readFileSync)(serviceAccountPath, "utf-8")
   );
@@ -200,10 +224,10 @@ function initFirebaseAdmin(serviceAccountPath) {
     credential: import_firebase_admin.default.credential.cert(serviceAccount)
   });
   adminDb = import_firebase_admin.default.firestore();
-  mode = "admin";
+  sdkMode = "admin";
 }
 async function initFirebaseClient() {
-  if (mode !== "none") return true;
+  if (sdkMode !== "none") return true;
   const creds = readCredentials();
   if (!creds) {
     console.error("[firestore] No hay credentials.json");
@@ -221,7 +245,7 @@ async function initFirebaseClient() {
         if (newCustomToken) {
           await (0, import_auth.signInWithCustomToken)(auth, newCustomToken);
           clientDb = (0, import_lite.getFirestore)(app);
-          mode = "client";
+          sdkMode = "client";
           saveCredentials({ ...creds, customToken: newCustomToken });
           console.error("[firestore] Firebase Client re-autenticado con refreshToken");
           return true;
@@ -241,7 +265,7 @@ async function initFirebaseClient() {
         console.error("[firestore] refreshToken guardado para futuras sesiones");
       }
       clientDb = (0, import_lite.getFirestore)(app);
-      mode = "client";
+      sdkMode = "client";
       console.error("[firestore] Firebase Client autenticado con customToken");
       return true;
     } catch (err) {
@@ -306,27 +330,27 @@ async function reauthClient(customToken) {
       console.error("[firestore] refreshToken guardado");
     }
     clientDb = (0, import_lite.getFirestore)(app);
-    mode = "client";
+    sdkMode = "client";
     return true;
   } catch (err) {
     console.error("[firestore] Error re-autenticando:", err);
     return false;
   }
 }
-function getMode() {
-  return mode;
+function getSdkMode() {
+  return sdkMode;
 }
 function getAdminDb() {
-  if (mode !== "admin") {
-    throw new Error("getAdminDb: modo admin requerido (actual: " + mode + ")");
+  if (sdkMode !== "admin") {
+    throw new Error("getAdminDb: SDK admin requerido (actual: " + sdkMode + ")");
   }
   return adminDb;
 }
 async function queryByTenant(session, collectionName, filters = [], options = {}) {
   const tenantId = session.requireTenant();
-  if (mode === "admin") {
+  if (sdkMode === "admin") {
     return queryByTenantAdmin(tenantId, collectionName, filters, options);
-  } else if (mode === "client") {
+  } else if (sdkMode === "client") {
     return queryByTenantClient(tenantId, collectionName, filters, options);
   }
   throw new Error("Firebase no inicializado");
@@ -362,11 +386,11 @@ async function queryByTenantClient(tenantId, collectionName, filters, options) {
   return snapshot.docs.map((doc) => ({ id: doc.id, ...doc.data() }));
 }
 async function readDoc(collectionName, docId) {
-  if (mode === "admin") {
+  if (sdkMode === "admin") {
     const doc = await adminDb.collection(collectionName).doc(docId).get();
     if (!doc.exists) return null;
     return { id: doc.id, ...doc.data() };
-  } else if (mode === "client") {
+  } else if (sdkMode === "client") {
     const ref = (0, import_lite.doc)(clientDb, collectionName, docId);
     const doc = await (0, import_lite.getDoc)(ref);
     if (!doc.exists()) return null;
@@ -374,10 +398,21 @@ async function readDoc(collectionName, docId) {
   }
   throw new Error("Firebase no inicializado");
 }
+async function listCollection(path) {
+  if (sdkMode === "admin") {
+    const snap = await adminDb.collection(path).get();
+    return snap.docs.map((doc) => ({ id: doc.id, ...doc.data() }));
+  } else if (sdkMode === "client") {
+    const ref = (0, import_lite.collection)(clientDb, path);
+    const snap = await (0, import_lite.getDocs)(ref);
+    return snap.docs.map((doc) => ({ id: doc.id, ...doc.data() }));
+  }
+  throw new Error("Firebase no inicializado");
+}
 async function writeDoc(collectionName, docId, data) {
-  if (mode === "admin") {
+  if (sdkMode === "admin") {
     await adminDb.collection(collectionName).doc(docId).set(data, { merge: true });
-  } else if (mode === "client") {
+  } else if (sdkMode === "client") {
     const ref = (0, import_lite.doc)(clientDb, collectionName, docId);
     await (0, import_lite.setDoc)(ref, data, { merge: true });
   } else {
@@ -385,9 +420,9 @@ async function writeDoc(collectionName, docId, data) {
   }
 }
 async function updateDoc(collectionName, docId, data) {
-  if (mode === "admin") {
+  if (sdkMode === "admin") {
     await adminDb.collection(collectionName).doc(docId).update(data);
-  } else if (mode === "client") {
+  } else if (sdkMode === "client") {
     const ref = (0, import_lite.doc)(clientDb, collectionName, docId);
     await (0, import_lite.updateDoc)(ref, data);
   } else {
@@ -395,7 +430,7 @@ async function updateDoc(collectionName, docId, data) {
   }
 }
 function serverTimestamp() {
-  if (mode === "admin") {
+  if (sdkMode === "admin") {
     return import_firebase_admin.default.firestore.FieldValue.serverTimestamp();
   } else {
     return (0, import_lite.serverTimestamp)();
@@ -407,10 +442,10 @@ var import_zod = require("zod");
 var import_functions = require("firebase/functions");
 var import_app2 = require("firebase/app");
 function registerContextTools(server, session) {
-  if (session.mode === "cowork") {
+  if (session.canSwitchTenant) {
     server.tool(
       "set_context",
-      "Establece el tenant y brand para esta sesion. Solo disponible en Modo Cowork (admin).",
+      "Establece el tenant y brand para esta sesion. Solo disponible para super_admin.",
       {
         tenantId: import_zod.z.string().describe('ID del tenant (ej: "atteyo")'),
         brandId: import_zod.z.string().describe('ID de la brand (ej: "ponch")')
@@ -418,8 +453,8 @@ function registerContextTools(server, session) {
       async ({ tenantId, brandId }) => {
         const brand = await readDoc(`tenants/${tenantId}/marketing_config`, brandId);
         if (!brand) {
-          const brandsSnap = await getAdminDb().collection("tenants").doc(tenantId).collection("marketing_config").get();
-          if (brandsSnap.empty) {
+          const brands = await listCollection(`tenants/${tenantId}/marketing_config`);
+          if (brands.length === 0) {
             return {
               content: [{ type: "text", text: JSON.stringify({ ok: false, error: `Tenant "${tenantId}" no tiene marketing_config` }) }]
             };
@@ -430,7 +465,7 @@ function registerContextTools(server, session) {
               text: JSON.stringify({
                 ok: false,
                 error: `Brand "${brandId}" no existe en tenant "${tenantId}"`,
-                brandsDisponibles: brandsSnap.docs.map((d) => d.id)
+                brandsDisponibles: brands.map((b) => b.id)
               })
             }]
           };
@@ -2120,7 +2155,7 @@ var TenantStatusFieldsSchema = import_zod14.z.object({
   cancellation: CancellationInfoSchema
 }).passthrough();
 var AuditActorSchema = import_zod15.z.object({
-  type: import_zod15.z.enum(["user", "martin", "system", "cf_scheduled", "webhook"]),
+  type: import_zod15.z.enum(["user", "martin", "mcp_client", "system", "cf_scheduled", "webhook"]),
   uid: import_zod15.z.string().nullable(),
   nombre: import_zod15.z.string(),
   metadata: import_zod15.z.record(import_zod15.z.string(), import_zod15.z.any()).optional()
@@ -2194,11 +2229,10 @@ var AddonActivoSchema = import_zod16.z.object({
   estado: import_zod16.z.enum(["active", "cancelled"])
 }).strict();
 var TipoMemoriaEnum = import_zod17.z.enum([
-  "filtro",
   "preferencia",
+  "regla",
   "patron",
-  "aprendido",
-  "delegacion"
+  "aversion"
 ]);
 var StatusMemoriaEnum = import_zod17.z.enum([
   "explicito",
@@ -2726,33 +2760,48 @@ function registerCoreTools(server, session) {
 }
 
 // src/tools/marketing.ts
-var import_zod38 = require("zod");
+var import_zod49 = require("zod");
 
 // ../packages/marketing-business-logic/dist/index.js
 var import_firebase_admin2 = require("firebase-admin");
-var import_firebase_admin3 = require("firebase-admin");
 var import_zod27 = require("zod");
 var import_zod28 = require("zod");
 var import_zod29 = require("zod");
+var import_fs3 = require("fs");
+var import_path2 = require("path");
+var import_url = require("url");
+var import_firebase_admin3 = require("firebase-admin");
+var import_zod30 = require("zod");
 var import_firebase_admin4 = require("firebase-admin");
+var import_zod31 = require("zod");
 var import_firebase_admin5 = require("firebase-admin");
+var import_zod32 = require("zod");
 var import_firebase_admin6 = require("firebase-admin");
-var import_zod30 = require("zod");
+var import_zod33 = require("zod");
 var import_firebase_admin7 = require("firebase-admin");
-var import_zod31 = require("zod");
-var import_zod32 = require("zod");
+var import_zod34 = require("zod");
+var import_zod35 = require("zod");
 var import_firebase_admin8 = require("firebase-admin");
-var import_zod33 = require("zod");
+var import_zod36 = require("zod");
+var import_zod37 = require("zod");
+var import_zod38 = require("zod");
 var import_firebase_admin9 = require("firebase-admin");
+var import_zod39 = require("zod");
 var import_firebase_admin10 = require("firebase-admin");
+var import_zod40 = require("zod");
+var import_zod41 = require("zod");
+var import_zod42 = require("zod");
+var import_zod43 = require("zod");
+var import_zod44 = require("zod");
 var import_firestore3 = require("firebase-admin/firestore");
 var import_firestore4 = require("firebase-admin/firestore");
 var import_firestore5 = require("firebase-admin/firestore");
 var import_firestore6 = require("firebase-admin/firestore");
-var import_zod34 = require("zod");
+var import_zod45 = require("zod");
 var import_firestore7 = require("firebase-admin/firestore");
-var import_zod35 = require("zod");
+var import_zod46 = require("zod");
 var import_firestore8 = require("firebase-admin/firestore");
+var import_meta = {};
 var RULE_NEGATIVES = {
   allowFaces: "no people, no faces, no hands",
   allowProductTransform: "no distorted products, no warped objects",
@@ -2895,6 +2944,7 @@ async function brandBriefWriter(input) {
     return {
       ok: false,
       error: "Brand Brief no cumple el schema esperado.",
+      code: "BRAND_BRIEF_VALIDATION_FAILED",
       detalle: validation.error,
       path: validation.path,
       recibido: validation.received,
@@ -2905,7 +2955,7 @@ async function brandBriefWriter(input) {
   const brandRef = db.collection("tenants").doc(tenantId).collection("marketing_config").doc(brandId);
   const brandSnap = await brandRef.get();
   if (!brandSnap.exists) {
-    return { ok: false, error: `Brand "${brandId}" no encontrada` };
+    return { ok: false, error: `Brand "${brandId}" no encontrada`, code: "BRAND_NOT_FOUND" };
   }
   const brief = validation.parsed;
   const briefWithMeta = {
@@ -2929,90 +2979,76 @@ async function brandBriefWriter(input) {
     mensaje: `Brand Brief guardado para "${brandId}". El tenant puede validar los campos en Config > Mi Negocio.`
   };
 }
-async function save(input) {
-  const { db, tenantId, brandId, plan } = input;
-  const brandRef = db.collection("tenants").doc(tenantId).collection("marketing_config").doc(brandId);
-  const brandSnap = await brandRef.get();
-  if (!brandSnap.exists) {
-    return { ok: false, error: `Brand "${brandId}" no encontrada` };
+var _localeCache = {};
+function _resolveLocaleFile(locale) {
+  let baseDir;
+  try {
+    baseDir = typeof __dirname !== "undefined" ? __dirname : (0, import_path2.dirname)((0, import_url.fileURLToPath)(import_meta.url));
+  } catch {
+    baseDir = process.cwd();
   }
-  const { blogStrategy, ...planSinBlogStrategy } = plan;
-  const planWithMeta = {
-    ...planSinBlogStrategy,
-    fechaCreacion: (/* @__PURE__ */ new Date()).toISOString(),
-    creadoPorId: "mcp-cowork"
-  };
-  await brandRef.set({
-    plan: planWithMeta,
-    ...blogStrategy ? { blogStrategy } : {},
-    id: brandId,
-    brandId,
-    tenantId,
-    schemaVersion: 1,
-    updatedAt: import_firebase_admin3.firestore.FieldValue.serverTimestamp()
-  }, { merge: true });
-  return {
-    ok: true,
-    mensaje: `Plan de marketing guardado para brand "${brandId}"` + (blogStrategy ? " (incluye blogStrategy)" : "")
-  };
+  const candidates = [
+    (0, import_path2.join)(baseDir, "..", "..", "..", "..", "src", "i18n", "locales", `${locale}.json`),
+    (0, import_path2.join)(baseDir, "..", "..", "..", "src", "i18n", "locales", `${locale}.json`),
+    (0, import_path2.join)(baseDir, "i18n", "locales", `${locale}.json`),
+    (0, import_path2.join)(baseDir, "..", "i18n", "locales", `${locale}.json`)
+  ];
+  for (const candidate of candidates) {
+    try {
+      (0, import_fs3.readFileSync)(candidate, "utf-8");
+      return candidate;
+    } catch {
+      continue;
+    }
+  }
+  throw new Error(
+    `getMessage: locale file '${locale}.json' not found. Tried:
+` + candidates.map((c) => `  - ${c}`).join("\n")
+  );
 }
-async function updateField(input) {
-  const { db, tenantId, brandId, field, value } = input;
-  const brandRef = db.collection("tenants").doc(tenantId).collection("marketing_config").doc(brandId);
-  const brandSnap = await brandRef.get();
-  if (!brandSnap.exists) {
-    return { ok: false, error: `Brand "${brandId}" no encontrada` };
+function _loadLocale(locale) {
+  if (_localeCache[locale]) return _localeCache[locale];
+  const path2 = _resolveLocaleFile(locale);
+  const raw = (0, import_fs3.readFileSync)(path2, "utf-8");
+  const data = JSON.parse(raw);
+  _localeCache[locale] = data;
+  return data;
+}
+function _resolvePath(obj, path2) {
+  const parts = path2.split(".");
+  let current = obj;
+  for (const part of parts) {
+    if (current === null || typeof current !== "object") return null;
+    current = current[part];
   }
-  const brandData = brandSnap.data();
-  let parsedValue = value;
-  if (typeof value === "string") {
-    const trimmed = value.trim();
-    if (trimmed.startsWith("[") && trimmed.endsWith("]") || trimmed.startsWith("{") && trimmed.endsWith("}") || trimmed.startsWith('"') && trimmed.endsWith('"')) {
-      try {
-        parsedValue = JSON.parse(trimmed);
-      } catch {
-      }
+  return typeof current === "string" ? current : null;
+}
+function _interpolate(template, vars, context) {
+  return template.replace(/\{(\w+)\}/g, (_match, key) => {
+    if (!vars || !(key in vars)) {
+      throw new Error(
+        `getMessage: variable '${key}' in template '${context.path}' (${context.locale}) not provided in vars. Pass { ${key}: '...' } when calling getMessage.`
+      );
     }
+    return vars[key];
+  });
+}
+var SUPPORTED_LOCALES = ["es", "en"];
+function getMessage(path2, locale, vars) {
+  if (!SUPPORTED_LOCALES.includes(locale)) {
+    throw new Error(
+      `getMessage: locale '${locale}' not supported. Active locales: ${SUPPORTED_LOCALES.join(", ")}.`
+    );
   }
-  const validation = validatePlanField(field, parsedValue);
-  if (!validation.ok) {
-    return {
-      ok: false,
-      error: `Campo "${field}" no cumple el schema esperado.`,
-      detalle: validation.error,
-      path: validation.path,
-      recibido: validation.received,
-      ejemplo_correcto: PLAN_FIELD_EXAMPLES[field],
-      hint: "Manda el valor como objeto/array nativo, NO como string JSON. Usa el ejemplo arriba como referencia exacta del shape esperado."
-    };
-  }
-  const updatePayload = {
-    id: brandId,
-    brandId,
-    tenantId,
-    schemaVersion: 1,
-    updatedAt: import_firebase_admin3.firestore.FieldValue.serverTimestamp()
-  };
-  if (field === "blogStrategy") {
-    updatePayload.blogStrategy = validation.parsed;
-  } else {
-    const currentPlan = brandData.plan ?? {};
-    updatePayload.plan = {
-      ...currentPlan,
-      [field]: validation.parsed,
-      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-    };
+  const data = _loadLocale(locale);
+  const template = _resolvePath(data, path2);
+  if (template === null) {
+    throw new Error(
+      `getMessage: path '${path2}' not found in locale '${locale}'. Add it to src/i18n/locales/${locale}.json.`
+    );
   }
-  await brandRef.set(updatePayload, { merge: true });
-  return {
-    ok: true,
-    mensaje: `Campo "${field}" actualizado en el plan de "${brandId}"`
-  };
+  return _interpolate(template, vars, { path: path2, locale });
 }
-var planWriter = {
-  save,
-  updateField
-};
 var DisabledReasonCodeSchema = import_zod29.z.enum([
   "paywall",
   // Acción requiere upgrade de plan
@@ -3038,44 +3074,8 @@ var DisabledOutputSchema = import_zod29.z.object({
    */
   detail: import_zod29.z.record(import_zod29.z.string(), import_zod29.z.string()).optional()
 });
-var TEMPLATES = {
-  es: {
-    paywall: "Esta acci\xF3n requiere actualizar tu plan.",
-    oauth_missing: "Necesitas conectar {service} primero.",
-    data_missing: "Falta informaci\xF3n: {detail}",
-    plan_not_includes: "Tu plan no incluye {feature}",
-    feature_disabled: "Esta funci\xF3n est\xE1 deshabilitada para tu cuenta.",
-    other: "{detail}"
-  },
-  en: {
-    paywall: "This action requires upgrading your plan.",
-    oauth_missing: "You need to connect {service} first.",
-    data_missing: "Missing information: {detail}",
-    plan_not_includes: "Your plan doesn't include {feature}",
-    feature_disabled: "This feature is disabled for your account.",
-    other: "{detail}"
-  }
-};
 function getDisabledMessage(code, locale, vars) {
-  if (!(locale in TEMPLATES)) {
-    throw new Error(
-      `Locale '${locale}' no soportado en disabledMessages. Locales activos: ${Object.keys(TEMPLATES).join(", ")}.`
-    );
-  }
-  const template = TEMPLATES[locale][code];
-  if (!template) {
-    throw new Error(
-      `Disabled code '${code}' no tiene template definido para locale '${locale}'.`
-    );
-  }
-  return template.replace(/\{(\w+)\}/g, (_match, key) => {
-    if (!vars || !(key in vars)) {
-      throw new Error(
-        `getDisabledMessage: variable '${key}' del template '${code}' (${locale}) no provista en vars. Helper debe pasar { ${key}: '...' } en detail.`
-      );
-    }
-    return vars[key];
-  });
+  return getMessage(`marketing.disabled.${code}`, locale, vars);
 }
 var SideEffectEnum = import_zod28.z.enum([
   "reads_firestore",
@@ -3107,6 +3107,10 @@ var ExtractTargetPathSchema = import_zod28.z.custom((val) => typeof val === "fun
 var ExtractChangesSchema = import_zod28.z.custom((val) => typeof val === "function", {
   message: "extractChanges debe ser funci\xF3n (input, output) => { before, after }"
 });
+var InputPredicateSchema = import_zod28.z.custom(
+  (val) => typeof val === "function",
+  { message: "predicado debe ser funci\xF3n (input) => boolean" }
+);
 var MartinContractSchema = import_zod28.z.object({
   // Schema versioning (Dim 4 backbone)
   schemaVersion: import_zod28.z.literal(1).default(1),
@@ -3122,6 +3126,16 @@ var MartinContractSchema = import_zod28.z.object({
   destructive: import_zod28.z.boolean(),
   affectsPublication: import_zod28.z.boolean(),
   affectsExternal: import_zod28.z.boolean(),
+  /**
+   * Override runtime del flag `destructive`. Si el predicado retorna
+   * true para un input específico, el wrapper trata la invocación
+   * como destructiva aun si `destructive: false`. Útil cuando una
+   * misma tool tiene 2 modos según args (ej. update con
+   * accionContenidoExistente='descartar').
+   */
+  isDestructiveForInput: InputPredicateSchema.optional(),
+  /** Mismo patrón para affectsPublication (override runtime). */
+  isPublicationForInput: InputPredicateSchema.optional(),
   // Presentación al usuario (i18n)
   martinSummaryTemplate: SummaryTemplateSchema,
   martinConfirmationTemplate: ConfirmationTemplateSchema.optional(),
@@ -3240,10 +3254,11 @@ var MartinContractSchema = import_zod28.z.object({
   }
 });
 var ParamsSchema = import_zod27.z.object({
-  tenantId: import_zod27.z.string().min(1),
-  brandId: import_zod27.z.string().min(1),
-  /** Plan completo generado por Claude. Puede incluir blogStrategy. */
-  plan: import_zod27.z.record(import_zod27.z.string(), import_zod27.z.unknown())
+  tenantId: import_zod27.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod27.z.string().min(1).describe("Brand identifier within the tenant."),
+  brandBrief: import_zod27.z.record(import_zod27.z.string(), import_zod27.z.unknown()).describe(
+    "Full Brand Brief object generated by the LLM. The helper runs full Zod validation against the canonical brandBrief schema before persisting."
+  )
 });
 var OutputSchema = import_zod27.z.discriminatedUnion("ok", [
   import_zod27.z.object({
@@ -3253,6 +3268,7 @@ var OutputSchema = import_zod27.z.discriminatedUnion("ok", [
   import_zod27.z.object({
     ok: import_zod27.z.literal(false),
     error: import_zod27.z.string(),
+    code: import_zod27.z.enum(["BRAND_BRIEF_VALIDATION_FAILED", "BRAND_NOT_FOUND"]).optional(),
     detalle: import_zod27.z.unknown().optional(),
     path: import_zod27.z.string().optional(),
     recibido: import_zod27.z.unknown().optional(),
@@ -3261,31 +3277,34 @@ var OutputSchema = import_zod27.z.discriminatedUnion("ok", [
   })
 ]);
 var rawContract = {
-  name: "save_marketing_plan",
-  description: "Guarda el plan de marketing de una brand. Si el plan incluye blogStrategy, la extrae al nivel brand (no dentro de plan).",
+  name: "save_brand_brief",
+  description: "Persist the Brand Brief generated by Claude into the brand config doc. Applies full Zod validation against the canonical Brand Brief schema; returns code=BRAND_BRIEF_VALIDATION_FAILED with detalle/path/recibido/ejemplo_correcto/hint so the LLM can self-correct on retry.",
   paramsSchema: ParamsSchema,
   outputSchema: OutputSchema,
-  // No es destructivo (sobrescribe plan completo, pero plan se regenera fácil),
-  // no afecta publicación, no llama externo.
+  // Sobrescribe brandBrief existente vía merge — reversible (regenerar el
+  // brief es barato), no afecta publicación, no llama externo.
   requiresConfirmation: false,
   destructive: false,
   affectsPublication: false,
   affectsExternal: false,
   martinSummaryTemplate: (input, output, locale) => {
     if (!output.ok) {
-      if (locale === "en") return `I couldn't save the plan: ${output.error}`;
-      return `No pude guardar el plan: ${output.error}`;
+      if (output.code) {
+        return getMessage(`marketing.errors.${output.code}`, locale);
+      }
+      return getMessage("marketing.safeError.generic", locale);
     }
-    if (locale === "en") return `I saved the marketing plan for ${input.brandId}.`;
-    return `Guard\xE9 el plan de marketing de ${input.brandId}.`;
+    if (locale === "en") {
+      return `I saved the brand brief for "${input.brandId}". You can review it in Config > My Business.`;
+    }
+    return `Guard\xE9 el brand brief de "${input.brandId}". Lo puedes revisar en Config > Mi Negocio.`;
   },
-  // Auditoría — OBLIGATORIO porque writes_firestore + updates_brand_config.
-  auditAction: "marketing.plan.guardar",
+  auditAction: "marketing.brand_brief.guardar",
   extractTargetPath: (input) => `tenants/${input.tenantId}/marketing_config/${input.brandId}`,
   extractChanges: (input, output) => ({
     before: null,
-    // El helper no lee el plan previo en save (solo merge).
-    after: output.ok ? { plan: input.plan } : null
+    // El helper no lee el brief previo (set merge).
+    after: output.ok ? { brandBrief: input.brandBrief } : null
   }),
   quotasConsumed: [],
   permissionScope: "module",
@@ -3293,97 +3312,360 @@ var rawContract = {
   permissionAction: "editar",
   sideEffects: ["writes_firestore", "updates_brand_config"]
 };
-var planWriterSaveContract = MartinContractSchema.parse(
+var brandBriefWriterContract = MartinContractSchema.parse(
   rawContract
 );
-async function collectionSuggestionsWriter(input) {
-  const { db, tenantId, brandId, suggestions } = input;
-  const validation = validateCollectionSuggestions(suggestions);
-  if (!validation.ok) {
-    return {
-      ok: false,
-      error: "Collection suggestions no cumplen el schema esperado.",
-      detalle: validation.error,
-      path: validation.path,
-      recibido: validation.received,
-      ejemplo_correcto: validation.example,
-      hint: "Revisa max chars: metaTitle <=60, metaDescription <=158, imageAlt <=125. Corrige el campo en path."
-    };
-  }
-  const validSuggestions = validation.parsed;
+async function save(input) {
+  const { db, tenantId, brandId, plan } = input;
   const brandRef = db.collection("tenants").doc(tenantId).collection("marketing_config").doc(brandId);
   const brandSnap = await brandRef.get();
   if (!brandSnap.exists) {
-    return { ok: false, error: `Brand ${brandId} no encontrada` };
-  }
-  const brandData = brandSnap.data();
-  const existing = brandData.collectionSuggestions ?? {};
-  const updated = { ...existing };
-  for (const s of validSuggestions) {
-    const id = String(s.collectionId);
-    updated[id] = {
-      suggestedTitle: s.suggestedTitle ?? null,
-      suggestedDescription: s.suggestedDescription ?? null,
-      suggestedMetaTitle: s.suggestedMetaTitle ?? null,
-      suggestedMetaDescription: s.suggestedMetaDescription ?? null,
-      suggestedHandle: s.suggestedHandle ?? null,
-      suggestedImageAlt: s.suggestedImageAlt ?? null,
-      keyword: s.keyword ?? null,
-      notas: s.notas ?? null,
-      estado: "pendiente",
-      generadoAt: import_firebase_admin4.firestore.FieldValue.serverTimestamp(),
-      generadoPor: "mcp-cowork"
-    };
+    return { ok: false, error: `Brand "${brandId}" no encontrada`, code: "BRAND_NOT_FOUND" };
   }
+  const { blogStrategy, ...planSinBlogStrategy } = plan;
+  const planWithMeta = {
+    ...planSinBlogStrategy,
+    fechaCreacion: (/* @__PURE__ */ new Date()).toISOString(),
+    creadoPorId: "mcp-cowork"
+  };
   await brandRef.set({
-    collectionSuggestions: updated,
+    plan: planWithMeta,
+    ...blogStrategy ? { blogStrategy } : {},
     id: brandId,
     brandId,
     tenantId,
     schemaVersion: 1,
-    updatedAt: import_firebase_admin4.firestore.FieldValue.serverTimestamp()
+    updatedAt: import_firebase_admin3.firestore.FieldValue.serverTimestamp()
   }, { merge: true });
   return {
     ok: true,
-    saved: validSuggestions.length,
-    message: `${validSuggestions.length} sugerencias guardadas. El tenant las ver\xE1 en Marketing > Mi Plan > Shopify.`
+    mensaje: `Plan de marketing guardado para brand "${brandId}"` + (blogStrategy ? " (incluye blogStrategy)" : "")
   };
 }
-var CAMPOS_PERMITIDOS = {
-  gbp: {
-    required: ["summary", "topicType"],
-    optional: ["callToAction", "perfilId"]
-  },
-  shopify_blog: {
-    // Sesion 188B: sincronizado con DatosBlogSchema v2 (27 campos)
-    // body es optional aqui para permitir save en 2 pasos:
-    //   1. save_generated_content con metadata (19 campos sin body)
-    //   2. update_generated_content con { body: "HTML completo..." }
-    // La CF publishToShopifyBlog valida que body exista antes de publicar.
-    required: [
-      "title",
-      "handle",
-      "metaTitle",
-      "metaDescription",
-      "summary",
-      "imageAltText",
-      "tags",
-      "quickAnswerBlock",
-      "faqItems",
-      "faqTitle",
-      "blogId",
-      "blogHandle",
-      "publishDate",
-      "languageCode",
-      "plataformaDestino"
-    ],
-    optional: [
-      "body",
-      "authorUserId",
-      "authorName",
-      "templateSuffix",
-      "isPublished",
-      "structuredData",
+async function updateField(input) {
+  const { db, tenantId, brandId, field, value } = input;
+  const brandRef = db.collection("tenants").doc(tenantId).collection("marketing_config").doc(brandId);
+  const brandSnap = await brandRef.get();
+  if (!brandSnap.exists) {
+    return { ok: false, error: `Brand "${brandId}" no encontrada`, code: "BRAND_NOT_FOUND" };
+  }
+  const brandData = brandSnap.data();
+  let parsedValue = value;
+  if (typeof value === "string") {
+    const trimmed = value.trim();
+    if (trimmed.startsWith("[") && trimmed.endsWith("]") || trimmed.startsWith("{") && trimmed.endsWith("}") || trimmed.startsWith('"') && trimmed.endsWith('"')) {
+      try {
+        parsedValue = JSON.parse(trimmed);
+      } catch {
+      }
+    }
+  }
+  const validation = validatePlanField(field, parsedValue);
+  if (!validation.ok) {
+    return {
+      ok: false,
+      error: `Campo "${field}" no cumple el schema esperado.`,
+      code: "FIELD_VALIDATION_FAILED",
+      detalle: validation.error,
+      path: validation.path,
+      recibido: validation.received,
+      ejemplo_correcto: PLAN_FIELD_EXAMPLES[field],
+      hint: "Manda el valor como objeto/array nativo, NO como string JSON. Usa el ejemplo arriba como referencia exacta del shape esperado."
+    };
+  }
+  const updatePayload = {
+    id: brandId,
+    brandId,
+    tenantId,
+    schemaVersion: 1,
+    updatedAt: import_firebase_admin3.firestore.FieldValue.serverTimestamp()
+  };
+  if (field === "blogStrategy") {
+    updatePayload.blogStrategy = validation.parsed;
+  } else {
+    const currentPlan = brandData.plan ?? {};
+    updatePayload.plan = {
+      ...currentPlan,
+      [field]: validation.parsed,
+      updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+    };
+  }
+  await brandRef.set(updatePayload, { merge: true });
+  return {
+    ok: true,
+    mensaje: `Campo "${field}" actualizado en el plan de "${brandId}"`
+  };
+}
+var planWriter = {
+  save,
+  updateField
+};
+var ParamsSchema2 = import_zod30.z.object({
+  tenantId: import_zod30.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod30.z.string().min(1).describe("Brand identifier within the tenant."),
+  plan: import_zod30.z.record(import_zod30.z.string(), import_zod30.z.unknown()).describe(
+    "Full marketing plan object generated by the LLM. May include a blogStrategy field \u2014 if present, it is extracted and stored at brand level (not nested inside plan)."
+  )
+});
+var OutputSchema2 = import_zod30.z.discriminatedUnion("ok", [
+  import_zod30.z.object({
+    ok: import_zod30.z.literal(true),
+    mensaje: import_zod30.z.string()
+  }),
+  import_zod30.z.object({
+    ok: import_zod30.z.literal(false),
+    error: import_zod30.z.string(),
+    code: import_zod30.z.enum(["BRAND_NOT_FOUND", "FIELD_VALIDATION_FAILED"]).optional(),
+    detalle: import_zod30.z.unknown().optional(),
+    path: import_zod30.z.string().optional(),
+    recibido: import_zod30.z.unknown().optional(),
+    ejemplo_correcto: import_zod30.z.unknown().optional(),
+    hint: import_zod30.z.string().optional()
+  })
+]);
+var rawContract2 = {
+  name: "save_marketing_plan",
+  description: "Save a marketing plan for a brand. If the plan object includes a blogStrategy field, it is extracted and stored at brand level (not nested inside plan).",
+  paramsSchema: ParamsSchema2,
+  outputSchema: OutputSchema2,
+  // No es destructivo (sobrescribe plan completo, pero plan se regenera fácil),
+  // no afecta publicación, no llama externo.
+  requiresConfirmation: false,
+  destructive: false,
+  affectsPublication: false,
+  affectsExternal: false,
+  martinSummaryTemplate: (input, output, locale) => {
+    if (!output.ok) {
+      if (output.code) {
+        return getMessage(`marketing.errors.${output.code}`, locale);
+      }
+      return getMessage("marketing.safeError.generic", locale);
+    }
+    if (locale === "en") return `I saved the marketing plan for ${input.brandId}.`;
+    return `Guard\xE9 el plan de marketing de ${input.brandId}.`;
+  },
+  // Auditoría — OBLIGATORIO porque writes_firestore + updates_brand_config.
+  auditAction: "marketing.plan.guardar",
+  extractTargetPath: (input) => `tenants/${input.tenantId}/marketing_config/${input.brandId}`,
+  extractChanges: (input, output) => ({
+    before: null,
+    // El helper no lee el plan previo en save (solo merge).
+    after: output.ok ? { plan: input.plan } : null
+  }),
+  quotasConsumed: [],
+  permissionScope: "module",
+  permissionKey: "marketing",
+  permissionAction: "editar",
+  sideEffects: ["writes_firestore", "updates_brand_config"]
+};
+var planWriterSaveContract = MartinContractSchema.parse(
+  rawContract2
+);
+var UpdateFieldParamsSchema = import_zod30.z.object({
+  tenantId: import_zod30.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod30.z.string().min(1).describe("Brand identifier within the tenant."),
+  field: import_zod30.z.string().min(1).describe(
+    "Plan field name to update (e.g. 'colecciones', 'temporadas', 'quickWins', 'blogStrategy'). blogStrategy is stored at brand level, NOT inside plan."
+  ),
+  value: import_zod30.z.unknown().describe(
+    "New value for the field. Send objects/arrays as native types (not JSON strings). If a JSON-shaped string arrives, the helper auto-parses it as fallback."
+  )
+});
+var rawUpdateFieldContract = {
+  name: "update_marketing_plan_field",
+  description: "Update ONE field of an existing marketing plan via partial merge \u2014 does NOT replace the whole plan. Auto-parses JSON-shaped strings into objects/arrays. Validates via validatePlanField against the canonical plan schema; on FIELD_VALIDATION_FAILED returns detalle/path/recibido/ejemplo_correcto/hint for the LLM to self-correct on retry. Note: blogStrategy is stored at the brand level, not inside plan.",
+  paramsSchema: UpdateFieldParamsSchema,
+  outputSchema: OutputSchema2,
+  // Merge parcial sobre el plan existente — reversible (regenerar/reescribir
+  // un campo es trivial). No publica nada externo.
+  requiresConfirmation: false,
+  destructive: false,
+  affectsPublication: false,
+  affectsExternal: false,
+  martinSummaryTemplate: (input, output, locale) => {
+    if (!output.ok) {
+      if (output.code) {
+        return getMessage(`marketing.errors.${output.code}`, locale);
+      }
+      return getMessage("marketing.safeError.generic", locale);
+    }
+    if (locale === "en") {
+      return `I updated the "${input.field}" field in the plan for "${input.brandId}".`;
+    }
+    return `Actualic\xE9 el campo "${input.field}" en el plan de "${input.brandId}".`;
+  },
+  auditAction: "marketing.plan.actualizar_campo",
+  extractTargetPath: (input) => `tenants/${input.tenantId}/marketing_config/${input.brandId}`,
+  extractChanges: (input, output) => ({
+    before: null,
+    // El helper no captura el valor previo del campo.
+    after: output.ok ? { field: input.field, value: input.value } : null
+  }),
+  quotasConsumed: [],
+  permissionScope: "module",
+  permissionKey: "marketing",
+  permissionAction: "editar",
+  sideEffects: ["writes_firestore", "updates_brand_config"]
+};
+var planWriterUpdateFieldContract = MartinContractSchema.parse(
+  rawUpdateFieldContract
+);
+async function collectionSuggestionsWriter(input) {
+  const { db, tenantId, brandId, suggestions } = input;
+  const validation = validateCollectionSuggestions(suggestions);
+  if (!validation.ok) {
+    return {
+      ok: false,
+      error: "Collection suggestions no cumplen el schema esperado.",
+      code: "COLLECTION_SUGGESTIONS_VALIDATION_FAILED",
+      detalle: validation.error,
+      path: validation.path,
+      recibido: validation.received,
+      ejemplo_correcto: validation.example,
+      hint: "Revisa max chars: metaTitle <=60, metaDescription <=158, imageAlt <=125. Corrige el campo en path."
+    };
+  }
+  const validSuggestions = validation.parsed;
+  const brandRef = db.collection("tenants").doc(tenantId).collection("marketing_config").doc(brandId);
+  const brandSnap = await brandRef.get();
+  if (!brandSnap.exists) {
+    return { ok: false, error: `Brand ${brandId} no encontrada`, code: "BRAND_NOT_FOUND" };
+  }
+  const brandData = brandSnap.data();
+  const existing = brandData.collectionSuggestions ?? {};
+  const updated = { ...existing };
+  for (const s of validSuggestions) {
+    const id = String(s.collectionId);
+    updated[id] = {
+      suggestedTitle: s.suggestedTitle ?? null,
+      suggestedDescription: s.suggestedDescription ?? null,
+      suggestedMetaTitle: s.suggestedMetaTitle ?? null,
+      suggestedMetaDescription: s.suggestedMetaDescription ?? null,
+      suggestedHandle: s.suggestedHandle ?? null,
+      suggestedImageAlt: s.suggestedImageAlt ?? null,
+      keyword: s.keyword ?? null,
+      notas: s.notas ?? null,
+      estado: "pendiente",
+      generadoAt: import_firebase_admin4.firestore.FieldValue.serverTimestamp(),
+      generadoPor: "mcp-cowork"
+    };
+  }
+  await brandRef.set({
+    collectionSuggestions: updated,
+    id: brandId,
+    brandId,
+    tenantId,
+    schemaVersion: 1,
+    updatedAt: import_firebase_admin4.firestore.FieldValue.serverTimestamp()
+  }, { merge: true });
+  return {
+    ok: true,
+    saved: validSuggestions.length,
+    message: `${validSuggestions.length} sugerencias guardadas. El tenant las ver\xE1 en Marketing > Mi Plan > Shopify.`
+  };
+}
+var ParamsSchema3 = import_zod31.z.object({
+  tenantId: import_zod31.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod31.z.string().min(1).describe("Brand identifier within the tenant."),
+  suggestions: import_zod31.z.array(import_zod31.z.record(import_zod31.z.string(), import_zod31.z.unknown())).describe(
+    "Array of SEO suggestions per collection. Each item must include collectionId and may include suggestedTitle, suggestedDescription, suggestedMetaTitle, suggestedMetaDescription, suggestedHandle, suggestedImageAlt, keyword, notas. Char limits: metaTitle <=60, metaDescription <=158, imageAlt <=125."
+  )
+});
+var OutputSchema3 = import_zod31.z.discriminatedUnion("ok", [
+  import_zod31.z.object({
+    ok: import_zod31.z.literal(true),
+    saved: import_zod31.z.number().int().nonnegative(),
+    message: import_zod31.z.string()
+  }),
+  import_zod31.z.object({
+    ok: import_zod31.z.literal(false),
+    error: import_zod31.z.string(),
+    code: import_zod31.z.enum(["COLLECTION_SUGGESTIONS_VALIDATION_FAILED", "BRAND_NOT_FOUND"]).optional(),
+    detalle: import_zod31.z.unknown().optional(),
+    path: import_zod31.z.string().optional(),
+    recibido: import_zod31.z.unknown().optional(),
+    ejemplo_correcto: import_zod31.z.unknown().optional(),
+    hint: import_zod31.z.string().optional()
+  })
+]);
+var rawContract3 = {
+  name: "save_collection_suggestions",
+  description: "Save SEO suggestions for Shopify collections. Merges per-collection (preserves prior suggestions for other collectionIds). Validates max chars (metaTitle 60, metaDescription 158, imageAlt 125); on COLLECTION_SUGGESTIONS_VALIDATION_FAILED returns detalle/path/recibido/ejemplo_correcto/hint so the LLM can self-correct on retry. Tenant approves them in Marketing > My Plan > Shopify.",
+  paramsSchema: ParamsSchema3,
+  outputSchema: OutputSchema3,
+  // Merge parcial sobre sugerencias previas — reversible (regenerar sugerencia
+  // es trivial). El tenant las aprueba antes de aplicarlas a Shopify, así
+  // que esta operación no publica ni afecta nada externo.
+  requiresConfirmation: false,
+  destructive: false,
+  affectsPublication: false,
+  affectsExternal: false,
+  martinSummaryTemplate: (_input, output, locale) => {
+    if (!output.ok) {
+      if (output.code) {
+        return getMessage(`marketing.errors.${output.code}`, locale);
+      }
+      return getMessage("marketing.safeError.generic", locale);
+    }
+    if (locale === "en") {
+      return `I saved ${output.saved} collection suggestion${output.saved === 1 ? "" : "s"}. The tenant can review them in Marketing > My Plan > Shopify.`;
+    }
+    return `Guard\xE9 ${output.saved} sugerencia${output.saved === 1 ? "" : "s"} de colecci\xF3n. El tenant las puede revisar en Marketing > Mi Plan > Shopify.`;
+  },
+  auditAction: "marketing.collection_suggestions.guardar",
+  extractTargetPath: (input) => `tenants/${input.tenantId}/marketing_config/${input.brandId}`,
+  extractChanges: (input, output) => ({
+    before: null,
+    // Helper hace merge sin leer estado previo.
+    after: output.ok ? {
+      saved: output.saved,
+      collectionIds: input.suggestions.map((s) => s.collectionId).filter((id) => id !== void 0)
+    } : null
+  }),
+  quotasConsumed: [],
+  permissionScope: "module",
+  permissionKey: "marketing",
+  permissionAction: "editar",
+  sideEffects: ["writes_firestore", "updates_brand_config"]
+};
+var collectionSuggestionsWriterContract = MartinContractSchema.parse(
+  rawContract3
+);
+var CAMPOS_PERMITIDOS = {
+  gbp: {
+    required: ["summary", "topicType"],
+    optional: ["callToAction", "perfilId"]
+  },
+  shopify_blog: {
+    // Sesion 188B: sincronizado con DatosBlogSchema v2 (27 campos)
+    // body es optional aqui para permitir save en 2 pasos:
+    //   1. save_generated_content con metadata (19 campos sin body)
+    //   2. update_generated_content con { body: "HTML completo..." }
+    // La CF publishToShopifyBlog valida que body exista antes de publicar.
+    required: [
+      "title",
+      "handle",
+      "metaTitle",
+      "metaDescription",
+      "summary",
+      "imageAltText",
+      "tags",
+      "quickAnswerBlock",
+      "faqItems",
+      "faqTitle",
+      "blogId",
+      "blogHandle",
+      "publishDate",
+      "languageCode",
+      "plataformaDestino"
+    ],
+    optional: [
+      "body",
+      "authorUserId",
+      "authorName",
+      "templateSuffix",
+      "isPublished",
+      "structuredData",
       "articuloNumero",
       "keywordsSecundarios",
       "productosLinkeados",
@@ -3452,11 +3734,15 @@ async function contenidoUpdater(input) {
   const docRef = db.doc(`tenants/${tenantId}/marketing_contenido/${contenidoId}`);
   const snap = await docRef.get();
   if (!snap.exists) {
-    return { ok: false, error: `Contenido ${contenidoId} no existe` };
+    return { ok: false, error: `Contenido ${contenidoId} no existe`, code: "CONTENT_NOT_FOUND" };
   }
   const existing = snap.data();
   if (existing.tenantId !== tenantId) {
-    return { ok: false, error: "Contenido no pertenece a este tenant" };
+    return {
+      ok: false,
+      error: "Contenido no pertenece a este tenant",
+      code: "CONTENT_TENANT_MISMATCH"
+    };
   }
   const plataforma = existing.plataforma;
   if (newDatos && Object.keys(newDatos).length > 0) {
@@ -3466,7 +3752,7 @@ async function contenidoUpdater(input) {
     };
     const schemaError = validateDatosSchema(plataforma, mergedDatos);
     if (schemaError) {
-      return { ok: false, error: schemaError };
+      return { ok: false, error: schemaError, code: "CONTENT_DATA_VALIDATION_FAILED" };
     }
     const zodSchemas = {
       shopify_blog: DatosBlogSchema,
@@ -3508,11 +3794,98 @@ async function contenidoUpdater(input) {
     camposActualizados: Object.keys(update).filter((k) => k !== "updatedAt")
   };
 }
+var ParamsSchema4 = import_zod32.z.object({
+  tenantId: import_zod32.z.string().min(1).describe("Tenant identifier (the business account)."),
+  contenidoId: import_zod32.z.string().min(1).describe("Document ID in marketing_contenido to update."),
+  datos: import_zod32.z.record(import_zod32.z.string(), import_zod32.z.unknown()).optional().describe(
+    "Partial datos object to merge with existing datos via dot notation. Validated against the platform schema (Blog/GBP/IG/Review). OMIT if not updating datos."
+  ),
+  fotoId: import_zod32.z.string().nullable().optional().describe(
+    "Linked photo ID. Pass null to clear the photo, OMIT to leave unchanged."
+  ),
+  keyword: import_zod32.z.string().nullable().optional().describe(
+    "Primary keyword. Pass null to clear, OMIT to leave unchanged."
+  ),
+  languageCode: import_zod32.z.string().optional().describe(
+    "Content language code (e.g. 'es', 'en'). OMIT to leave unchanged."
+  ),
+  estado: import_zod32.z.enum(["borrador", "generado", "pendiente_aprobacion", "aprobado", "rechazado"]).optional().describe(
+    "New content state. OMIT to leave unchanged. Use approve_content or reject_content tools for state transitions that require validation."
+  ),
+  calendarioItemRef: import_zod32.z.string().nullable().optional().describe(
+    'Link content to a calendar slot (format "semana:N:slot:M"). Pass null to unlink, OMIT to leave unchanged.'
+  )
+});
+var OutputSchema4 = import_zod32.z.discriminatedUnion("ok", [
+  import_zod32.z.object({
+    ok: import_zod32.z.literal(true),
+    contenidoId: import_zod32.z.string(),
+    camposActualizados: import_zod32.z.array(import_zod32.z.string())
+  }),
+  import_zod32.z.object({
+    ok: import_zod32.z.literal(false),
+    error: import_zod32.z.string(),
+    code: import_zod32.z.enum(["CONTENT_NOT_FOUND", "CONTENT_TENANT_MISMATCH", "CONTENT_DATA_VALIDATION_FAILED"]).optional()
+  })
+]);
+var rawContract4 = {
+  name: "update_generated_content",
+  description: "Update fields of an existing generated content (marketing_contenido) via partial merge. Cannot change tenantId/brandId/id (immutable). If `datos` is passed, it merges with the existing datos (does not replace whole object). Validates `datos` against the platform's schema (Blog/GBP/IG/Review) \u2014 returns CONTENT_DATA_VALIDATION_FAILED with details on mismatch.",
+  paramsSchema: ParamsSchema4,
+  outputSchema: OutputSchema4,
+  // Editar borrador es reversible (volver a llamar con valores previos).
+  // No publica nada externo — el contenido sigue siendo borrador hasta que
+  // el tenant lo apruebe y la CF de publish lo empuje.
+  requiresConfirmation: false,
+  destructive: false,
+  affectsPublication: false,
+  affectsExternal: false,
+  martinSummaryTemplate: (input, output, locale) => {
+    if (!output.ok) {
+      if (output.code) {
+        return getMessage(`marketing.errors.${output.code}`, locale);
+      }
+      return getMessage("marketing.safeError.generic", locale);
+    }
+    const count = output.camposActualizados.length;
+    if (locale === "en") {
+      return `I updated the content (${count} field${count === 1 ? "" : "s"} changed).`;
+    }
+    return `Actualic\xE9 el contenido (${count} campo${count === 1 ? "" : "s"} modificado${count === 1 ? "" : "s"}).`;
+  },
+  auditAction: "marketing.contenido.actualizar",
+  extractTargetPath: (input) => `tenants/${input.tenantId}/marketing_contenido/${input.contenidoId}`,
+  extractChanges: (input, output) => ({
+    before: null,
+    // Helper no captura snapshot previo (merge parcial).
+    after: output.ok ? {
+      camposActualizados: output.camposActualizados,
+      datosKeys: input.datos ? Object.keys(input.datos) : [],
+      fotoId: input.fotoId ?? void 0,
+      keyword: input.keyword ?? void 0,
+      languageCode: input.languageCode,
+      estado: input.estado,
+      calendarioItemRef: input.calendarioItemRef ?? void 0
+    } : null
+  }),
+  quotasConsumed: [],
+  permissionScope: "module",
+  permissionKey: "marketing",
+  permissionAction: "editar",
+  sideEffects: ["writes_firestore"]
+};
+var contenidoUpdaterContract = MartinContractSchema.parse(
+  rawContract4
+);
 async function addCalendarSlot(input) {
   const { db, tenantId, brandId, mes, semana, slot } = input;
   const calQuery = await db.collection("tenants").doc(tenantId).collection("marketing_calendario").where("brandId", "==", brandId).where("mes", "==", mes).limit(1).get();
   if (calQuery.empty) {
-    return { ok: false, error: `Calendario ${mes} no encontrado para brand ${brandId}` };
+    return {
+      ok: false,
+      error: `Calendario ${mes} no encontrado para brand ${brandId}`,
+      code: "CALENDAR_NOT_FOUND"
+    };
   }
   const calDocRef = calQuery.docs[0].ref;
   let resultSlotIndex = -1;
@@ -3542,40 +3915,47 @@ async function addCalendarSlot(input) {
   });
   return { ok: true, slotIndex: resultSlotIndex };
 }
-var SlotSchema = import_zod30.z.object({
-  dia: import_zod30.z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "Formato YYYY-MM-DD"),
-  plataforma: import_zod30.z.enum(["gbp", "shopify_blog", "instagram", "review"]),
-  tipo: import_zod30.z.enum(["post", "blog", "carousel", "reel", "story", "review_response"]),
-  keyword: import_zod30.z.string().min(1),
-  tema: import_zod30.z.string().optional(),
-  productoId: import_zod30.z.string().optional(),
-  estado: import_zod30.z.enum(["planificado", "pre_aprobado", "generado", "revisar", "aprobado", "publicado", "rechazado"]).optional(),
-  locationId: import_zod30.z.string().optional(),
-  locationNombre: import_zod30.z.string().optional()
+var SlotSchema = import_zod33.z.object({
+  dia: import_zod33.z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "Format YYYY-MM-DD").describe("Slot date in YYYY-MM-DD format. Must fall within the week range."),
+  plataforma: import_zod33.z.enum(["gbp", "shopify_blog", "instagram", "review"]).describe("Target platform for the content."),
+  tipo: import_zod33.z.enum(["post", "blog", "carousel", "reel", "story", "review_response"]).describe("Content type. Match it to the platform (e.g. blog \u2192 shopify_blog)."),
+  keyword: import_zod33.z.string().min(1).describe("Primary keyword for the content."),
+  tema: import_zod33.z.string().optional().describe("Content topic. OMIT the field if not applicable; do NOT send empty string or null."),
+  productoId: import_zod33.z.string().optional().describe("Linked product ID. OMIT the field if not applicable."),
+  estado: import_zod33.z.enum(["planificado", "pre_aprobado", "generado", "revisar", "aprobado", "publicado", "rechazado"]).optional().describe("Initial state. OMIT to default to 'planificado'."),
+  locationId: import_zod33.z.string().optional().describe("GBP location ID \u2014 only for plataforma=gbp with multi-location. OMIT otherwise."),
+  locationNombre: import_zod33.z.string().optional().describe("GBP location display name. OMIT if not applicable.")
 });
-var ParamsSchema2 = import_zod30.z.object({
-  tenantId: import_zod30.z.string().min(1),
-  brandId: import_zod30.z.string().min(1),
-  mes: import_zod30.z.string().regex(/^\d{4}-\d{2}$/, "Formato YYYY-MM"),
-  semana: import_zod30.z.number().int().min(1).max(5),
-  slot: SlotSchema
+var ParamsSchema5 = import_zod33.z.object({
+  tenantId: import_zod33.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod33.z.string().min(1).describe("Brand identifier within the tenant."),
+  mes: import_zod33.z.string().regex(/^\d{4}-\d{2}$/, "Format YYYY-MM").describe("Calendar month in YYYY-MM format."),
+  semana: import_zod33.z.number().int().min(1).max(5).describe("Week number within the month (1-5)."),
+  slot: SlotSchema.describe("New slot data to add to the calendar.")
 });
-var OutputSchema2 = import_zod30.z.discriminatedUnion("ok", [
-  import_zod30.z.object({ ok: import_zod30.z.literal(true), slotIndex: import_zod30.z.number().int() }),
-  import_zod30.z.object({ ok: import_zod30.z.literal(false), error: import_zod30.z.string() })
+var OutputSchema5 = import_zod33.z.discriminatedUnion("ok", [
+  import_zod33.z.object({ ok: import_zod33.z.literal(true), slotIndex: import_zod33.z.number().int() }),
+  import_zod33.z.object({
+    ok: import_zod33.z.literal(false),
+    error: import_zod33.z.string(),
+    code: import_zod33.z.enum(["CALENDAR_NOT_FOUND"]).optional()
+  })
 ]);
-var rawContract2 = {
+var rawContract5 = {
   name: "add_calendar_slot",
-  description: "Agrega un slot nuevo al calendario editorial. NO modifica slots existentes \u2014 para eso usa update_calendar_slot.",
-  paramsSchema: ParamsSchema2,
-  outputSchema: OutputSchema2,
+  description: "Add a new slot to the editorial calendar. Does NOT modify existing slots \u2014 use update_calendar_slot for that.",
+  paramsSchema: ParamsSchema5,
+  outputSchema: OutputSchema5,
   requiresConfirmation: false,
   destructive: false,
   affectsPublication: false,
   affectsExternal: false,
   martinSummaryTemplate: (input, output, locale) => {
     if (!output.ok) {
-      return locale === "en" ? `I couldn't add the slot: ${output.error}` : `No pude agregar el slot: ${output.error}`;
+      if (output.code) {
+        return getMessage(`marketing.errors.${output.code}`, locale);
+      }
+      return getMessage("marketing.safeError.generic", locale);
     }
     return locale === "en" ? `Added a slot in week ${input.semana} of ${input.mes}.` : `Agregu\xE9 un slot en la semana ${input.semana} de ${input.mes}.`;
   },
@@ -3595,7 +3975,7 @@ var rawContract2 = {
   sideEffects: ["writes_firestore", "updates_calendar_slot"]
 };
 var addCalendarSlotContract = MartinContractSchema.parse(
-  rawContract2
+  rawContract5
 );
 var CAMPOS_SEMANTICOS = ["keyword", "tema", "plataforma", "tipo"];
 function mapContenidoEstadoToSlotEstado(contenidoEstado) {
@@ -3636,7 +4016,7 @@ async function calendarSlotUpdater(input) {
   if (slotIndex >= items.length) {
     return {
       ok: false,
-      error: `slotIndex ${slotIndex} no existe (semana ${semana} tiene ${items.length} slots). Para agregar un slot nuevo usa add_calendar_slot.`,
+      error: `slotIndex=${slotIndex} >= items.length=${items.length} for week=${semana}`,
       code: "SLOT_NOT_FOUND"
     };
   }
@@ -3648,14 +4028,9 @@ async function calendarSlotUpdater(input) {
   if (oldContenidoRef && tocaSemantica && !accionContenidoExistente) {
     return {
       ok: false,
-      error: `El slot tiene contenidoRef previo "${oldContenidoRef}" y los cambios tocan campos semanticos (${CAMPOS_SEMANTICOS.filter((f) => f in cambios).join(", ")}). El sistema NO decide automaticamente que hacer con el contenido viejo. Pregunta al tenant y vuelve a llamar con accionContenidoExistente en una de las 4 opciones.`,
+      error: `slot has contenidoRef=${oldContenidoRef} and cambios touch semantic fields=[${CAMPOS_SEMANTICOS.filter((f) => f in cambios).join(",")}]; require accionContenidoExistente`,
       code: "ACCION_CONTENIDO_EXISTENTE_REQUIRED",
-      opciones: [
-        `'descartar'                \u2014 marcar "${oldContenidoRef}" como descartado y aplicar cambios en este slot`,
-        `'mover:semana:N:slot:M'    \u2014 mover "${oldContenidoRef}" al slot destino N/M (target debe estar vacio) y aplicar cambios aqui`,
-        `'nuevo_slot'               \u2014 NO tocar este slot ni "${oldContenidoRef}". Crear un slot nuevo el mismo dia con los cambios (util para multiples publicaciones/dia \u2014 ej: almuerzo + cena GBP)`,
-        `'mantener'                 \u2014 mantener "${oldContenidoRef}" aqui y aplicar cambios (caso typo fix, el contenido viejo sigue valido para el nuevo keyword/tema)`
-      ]
+      opciones: ["descartar", "mover", "nuevo_slot", "mantener"]
     };
   }
   let contenidosADescartar = [];
@@ -3675,7 +4050,7 @@ async function calendarSlotUpdater(input) {
     if (!m) {
       return {
         ok: false,
-        error: `accionContenidoExistente "${accionContenidoExistente}" invalido. Formato: mover:semana:N:slot:M`,
+        error: `accionContenidoExistente="${accionContenidoExistente}" invalid format (expected: mover:semana:N:slot:M)`,
         code: "MOVE_TARGET_INVALID"
       };
     }
@@ -3684,7 +4059,7 @@ async function calendarSlotUpdater(input) {
     if (targetSemanaNum === semana && targetSlotIdx === slotIndex) {
       return {
         ok: false,
-        error: "mover al mismo slot origen no tiene sentido. Usa 'mantener' si quieres conservar el contenido aqui.",
+        error: "move target same as origin (semantic noop)",
         code: "MOVE_TARGET_INVALID"
       };
     }
@@ -3692,7 +4067,7 @@ async function calendarSlotUpdater(input) {
     if (!targetSemana) {
       return {
         ok: false,
-        error: `Target semana ${targetSemanaNum} no existe en el calendario`,
+        error: `target semana=${targetSemanaNum} does not exist`,
         code: "MOVE_TARGET_INVALID"
       };
     }
@@ -3700,14 +4075,14 @@ async function calendarSlotUpdater(input) {
     if (!targetItems[targetSlotIdx]) {
       return {
         ok: false,
-        error: `Target slot ${targetSlotIdx} no existe en semana ${targetSemanaNum}`,
+        error: `target slot=${targetSlotIdx} does not exist in semana=${targetSemanaNum}`,
         code: "MOVE_TARGET_INVALID"
       };
     }
     if (targetItems[targetSlotIdx].contenidoRef) {
       return {
         ok: false,
-        error: `Target slot ya tiene contenidoRef "${targetItems[targetSlotIdx].contenidoRef}". No se sobrescribe para evitar perder contenido ajeno. Elige otro slot o usa 'descartar'.`,
+        error: `target slot already has contenidoRef=${targetItems[targetSlotIdx].contenidoRef}`,
         code: "MOVE_TARGET_OCCUPIED"
       };
     }
@@ -3863,44 +4238,55 @@ async function handleNuevoSlot(args) {
     descartados: 0
   };
 }
-var ParamsSchema3 = import_zod31.z.object({
-  tenantId: import_zod31.z.string().min(1),
-  brandId: import_zod31.z.string().min(1),
-  mes: import_zod31.z.string().regex(/^\d{4}-\d{2}$/, "Formato YYYY-MM"),
-  semana: import_zod31.z.number().int().min(1).max(5),
-  slotIndex: import_zod31.z.number().int().min(0),
-  cambios: import_zod31.z.record(import_zod31.z.string(), import_zod31.z.unknown()),
-  accionContenidoExistente: import_zod31.z.string().optional()
+var ParamsSchema6 = import_zod34.z.object({
+  tenantId: import_zod34.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod34.z.string().min(1).describe("Brand identifier within the tenant."),
+  mes: import_zod34.z.string().regex(/^\d{4}-\d{2}$/, "Format YYYY-MM").describe("Calendar month in YYYY-MM format."),
+  semana: import_zod34.z.number().int().min(1).max(5).describe("Week number within the month (1-5)."),
+  slotIndex: import_zod34.z.number().int().min(0).describe("Zero-based index of the slot within the week.items[] array."),
+  cambios: import_zod34.z.record(import_zod34.z.string(), import_zod34.z.unknown()).describe(
+    "Fields to update on the slot. Accepts: dia, plataforma, tipo, keyword, tema, productoId, estado, locationId, locationNombre, contenidoRef, fotoIdAsignada, notas. Unknown fields are rejected by the helper."
+  ),
+  accionContenidoExistente: import_zod34.z.string().optional().describe(
+    "Required when the slot already has a contenidoRef AND cambios touch semantic fields (keyword/tema/plataforma/tipo). One of: 'descartar' | 'mover:semana:N:slot:M' | 'nuevo_slot' | 'mantener'. OMIT if not applicable; do NOT send null."
+  )
 });
-var OutputSchema3 = import_zod31.z.discriminatedUnion("ok", [
-  import_zod31.z.object({
-    ok: import_zod31.z.literal(true),
-    action: import_zod31.z.enum(["updated", "nuevo_slot", "moved"]),
-    slotIndex: import_zod31.z.number().int(),
-    descartados: import_zod31.z.number().int(),
-    movedTo: import_zod31.z.string().optional()
+var OutputSchema6 = import_zod34.z.discriminatedUnion("ok", [
+  import_zod34.z.object({
+    ok: import_zod34.z.literal(true),
+    action: import_zod34.z.enum(["updated", "nuevo_slot", "moved"]),
+    slotIndex: import_zod34.z.number().int(),
+    descartados: import_zod34.z.number().int(),
+    movedTo: import_zod34.z.string().optional()
   }),
-  import_zod31.z.object({
-    ok: import_zod31.z.literal(false),
-    error: import_zod31.z.string(),
-    code: import_zod31.z.enum(["SLOT_NOT_FOUND", "ACCION_CONTENIDO_EXISTENTE_REQUIRED", "MOVE_TARGET_OCCUPIED", "MOVE_TARGET_INVALID"]).optional(),
-    opciones: import_zod31.z.array(import_zod31.z.string()).optional()
+  import_zod34.z.object({
+    ok: import_zod34.z.literal(false),
+    error: import_zod34.z.string(),
+    code: import_zod34.z.enum(["SLOT_NOT_FOUND", "ACCION_CONTENIDO_EXISTENTE_REQUIRED", "MOVE_TARGET_OCCUPIED", "MOVE_TARGET_INVALID"]).optional(),
+    opciones: import_zod34.z.array(import_zod34.z.string()).optional()
   })
 ]);
-var rawContract3 = {
+var rawContract6 = {
   name: "update_calendar_slot",
-  description: "MODIFICA un slot existente del calendario editorial. NO agrega slots nuevos \u2014 para eso usa add_calendar_slot. Si el slot ten\xEDa contenidoRef previo y los cambios tocan campos sem\xE1nticos (keyword/tema/plataforma/tipo), exige accionContenidoExistente con 4 opciones: descartar | mover:semana:N:slot:M | nuevo_slot | mantener.",
-  paramsSchema: ParamsSchema3,
-  outputSchema: OutputSchema3,
+  description: "MODIFY an existing slot in the editorial calendar. Does NOT add new slots \u2014 use add_calendar_slot for that. If the slot already had a contenidoRef and the changes touch semantic fields (keyword/tema/plataforma/tipo), requires accionContenidoExistente with 4 options: descartar | mover:semana:N:slot:M | nuevo_slot | mantener.",
+  paramsSchema: ParamsSchema6,
+  outputSchema: OutputSchema6,
+  // Por default, modificar un slot es reversible (cambias campos cosméticos).
+  // PERO si accionContenidoExistente='descartar', el helper marca el
+  // contenido vinculado como descartado — eso SÍ es destructivo. El predicado
+  // runtime `isDestructiveForInput` lo detecta y obliga al wrapper a pedir
+  // confirmación en ese caso específico.
   requiresConfirmation: false,
   destructive: false,
-  // Mutación, pero reversible (puede deshacerse cambiando el slot).
+  isDestructiveForInput: (input) => input.accionContenidoExistente === "descartar",
   affectsPublication: false,
   affectsExternal: false,
   martinSummaryTemplate: (input, output, locale) => {
     if (!output.ok) {
-      if (locale === "en") return `I couldn't update the slot: ${output.error}`;
-      return `No pude actualizar el slot: ${output.error}`;
+      if (output.code) {
+        return getMessage(`marketing.errors.${output.code}`, locale);
+      }
+      return getMessage("marketing.safeError.generic", locale);
     }
     const verb = {
       updated: locale === "en" ? "updated" : "actualic\xE9",
@@ -3912,6 +4298,15 @@ var rawContract3 = {
     }
     return `${verb[0].toUpperCase() + verb.slice(1)} el slot en la semana ${input.semana} (${input.mes}).`;
   },
+  // Confirmation message when isDestructiveForInput returns true
+  // (accionContenidoExistente === 'descartar'). Only invoked if the wrapper
+  // detects the destructive runtime case and asks the user for OK.
+  martinConfirmationTemplate: (input, locale) => {
+    if (locale === "en") {
+      return `Are you sure? This will discard the existing content linked to slot ${input.slotIndex} in week ${input.semana} (${input.mes}). The content will be marked as discarded and cannot be easily recovered.`;
+    }
+    return `\xBFConfirmas? Esto descarta el contenido existente del slot ${input.slotIndex} en la semana ${input.semana} (${input.mes}). El contenido queda marcado como descartado y no se recupera f\xE1cilmente.`;
+  },
   auditAction: "marketing.calendario.slot.actualizar",
   extractTargetPath: (input) => `tenants/${input.tenantId}/marketing_calendario/(brand=${input.brandId},mes=${input.mes}).semana=${input.semana}.slot=${input.slotIndex}`,
   extractChanges: (input, output) => ({
@@ -3932,7 +4327,7 @@ var rawContract3 = {
   sideEffects: ["writes_firestore", "updates_calendar_slot"]
 };
 var calendarSlotUpdaterContract = MartinContractSchema.parse(
-  rawContract3
+  rawContract6
 );
 async function getCalendar(input) {
   const { db, tenantId, brandId, mes } = input;
@@ -3954,23 +4349,23 @@ async function getCalendar(input) {
     calendario: { id: doc.id, ...doc.data() }
   };
 }
-var ParamsSchema4 = import_zod32.z.object({
-  tenantId: import_zod32.z.string().min(1),
-  brandId: import_zod32.z.string().min(1),
-  mes: import_zod32.z.string().regex(/^\d{4}-\d{2}$/, "Formato YYYY-MM")
+var ParamsSchema7 = import_zod35.z.object({
+  tenantId: import_zod35.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod35.z.string().min(1).describe("Brand identifier within the tenant."),
+  mes: import_zod35.z.string().regex(/^\d{4}-\d{2}$/, "Format YYYY-MM").describe("Calendar month to read in YYYY-MM format.")
 });
-var OutputSchema4 = import_zod32.z.object({
-  ok: import_zod32.z.literal(true),
-  mes: import_zod32.z.string(),
-  brandId: import_zod32.z.string(),
-  calendario: import_zod32.z.record(import_zod32.z.string(), import_zod32.z.unknown()).nullable(),
-  mensaje: import_zod32.z.string().optional()
+var OutputSchema7 = import_zod35.z.object({
+  ok: import_zod35.z.literal(true),
+  mes: import_zod35.z.string(),
+  brandId: import_zod35.z.string(),
+  calendario: import_zod35.z.record(import_zod35.z.string(), import_zod35.z.unknown()).nullable(),
+  mensaje: import_zod35.z.string().optional()
 });
-var rawContract4 = {
+var rawContract7 = {
   name: "get_calendar",
-  description: "Lee el calendario editorial del mes para una brand. Retorna semanas con items planificados por plataforma.",
-  paramsSchema: ParamsSchema4,
-  outputSchema: OutputSchema4,
+  description: "Read the editorial calendar for a given brand and month. Returns weeks with planned items per platform.",
+  paramsSchema: ParamsSchema7,
+  outputSchema: OutputSchema7,
   requiresConfirmation: false,
   destructive: false,
   affectsPublication: false,
@@ -3992,7 +4387,7 @@ var rawContract4 = {
   sideEffects: ["reads_firestore"]
 };
 var getCalendarContract = MartinContractSchema.parse(
-  rawContract4
+  rawContract7
 );
 var PLATAFORMA_A_FORMATO = {
   gbp: "gbp_4_3",
@@ -4005,21 +4400,26 @@ async function photoAssigner(input) {
   const contenidoRefDoc = db.doc(`tenants/${tenantId}/marketing_contenido/${contenidoRef}`);
   const contenidoSnap = await contenidoRefDoc.get();
   if (!contenidoSnap.exists) {
-    return { ok: false, error: `Contenido ${contenidoRef} no encontrado` };
+    return { ok: false, error: `Contenido ${contenidoRef} no encontrado`, code: "CONTENT_NOT_FOUND" };
   }
   const contenido = contenidoSnap.data();
   if (contenido.tenantId !== tenantId) {
-    return { ok: false, error: "Contenido no pertenece a este tenant" };
+    return {
+      ok: false,
+      error: "Contenido no pertenece a este tenant",
+      code: "CONTENT_TENANT_MISMATCH"
+    };
   }
   const fotoQuery = await db.collection("tenants").doc(tenantId).collection("marketing_fotos").where("id", "==", fotoId).limit(1).get();
   if (fotoQuery.empty) {
-    return { ok: false, error: `Foto ${fotoId} no encontrada` };
+    return { ok: false, error: `Foto ${fotoId} no encontrada`, code: "PHOTO_NOT_FOUND" };
   }
   const foto = fotoQuery.docs[0].data();
   if (foto.estado !== ESTADO_FOTO.EDITADA && foto.estado !== "usada") {
     return {
       ok: false,
-      error: `Foto en estado "${foto.estado}", debe ser "editada"`
+      error: `Foto en estado "${foto.estado}", debe ser "editada"`,
+      code: "PHOTO_NOT_READY"
     };
   }
   const formato = PLATAFORMA_A_FORMATO[contenido.plataforma] ?? "original";
@@ -4100,6 +4500,78 @@ async function photoAssigner(input) {
     formato
   };
 }
+var ParamsSchema8 = import_zod36.z.object({
+  tenantId: import_zod36.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod36.z.string().min(1).describe("Brand identifier within the tenant."),
+  contenidoRef: import_zod36.z.string().min(1).describe("Document ID in marketing_contenido (the post receiving the photo)."),
+  fotoId: import_zod36.z.string().min(1).describe("Photo ID in marketing_fotos. Photo must be in state='editada'."),
+  calendarioItemRef: import_zod36.z.string().regex(/^semana:\d+:slot:\d+$/).optional().describe(
+    'Calendar slot reference in format "semana:N:slot:M". Optional \u2014 if provided, syncs the slot.fotoIdAsignada UI snapshot atomically with the content update. OMIT if there is no calendar slot to sync.'
+  )
+});
+var OutputSchema8 = import_zod36.z.discriminatedUnion("ok", [
+  import_zod36.z.object({
+    ok: import_zod36.z.literal(true),
+    fotoId: import_zod36.z.string(),
+    contenidoRef: import_zod36.z.string(),
+    plataforma: import_zod36.z.string(),
+    varianteUrl: import_zod36.z.string().nullable(),
+    formato: import_zod36.z.string()
+  }),
+  import_zod36.z.object({
+    ok: import_zod36.z.literal(false),
+    error: import_zod36.z.string(),
+    code: import_zod36.z.enum(["CONTENT_NOT_FOUND", "CONTENT_TENANT_MISMATCH", "PHOTO_NOT_FOUND", "PHOTO_NOT_READY"]).optional()
+  })
+]);
+var rawContract8 = {
+  name: "assign_photo_to_content",
+  description: 'Assign an edited photo to an existing content. Writes atomically to BOTH marketing_contenido.fotoId+mediaVariante (canonical for publish) AND marketing_calendario slot.fotoIdAsignada (UI snapshot, only if calendarioItemRef provided). NEVER use update_calendar_slot for this \u2014 that one writes to the agenda, not the post. The photo must be in state="editada".',
+  paramsSchema: ParamsSchema8,
+  outputSchema: OutputSchema8,
+  // Cambia la foto vinculada al contenido — reversible (volver a llamar con
+  // otra fotoId), no publica nada externo. La foto editada queda intacta;
+  // solo se actualiza la referencia.
+  requiresConfirmation: false,
+  destructive: false,
+  affectsPublication: false,
+  affectsExternal: false,
+  martinSummaryTemplate: (input, output, locale) => {
+    if (!output.ok) {
+      if (output.code) {
+        return getMessage(`marketing.errors.${output.code}`, locale);
+      }
+      return getMessage("marketing.safeError.generic", locale);
+    }
+    if (locale === "en") {
+      return `I assigned the photo to the ${output.plataforma} content.`;
+    }
+    return `Asign\xE9 la foto al contenido de ${output.plataforma}.`;
+  },
+  auditAction: "marketing.contenido.foto_asignar",
+  extractTargetPath: (input) => `tenants/${input.tenantId}/marketing_contenido/${input.contenidoRef}`,
+  extractChanges: (input, output) => ({
+    before: null,
+    // El helper no captura fotoId previo del contenido.
+    after: output.ok ? {
+      fotoId: output.fotoId,
+      plataforma: output.plataforma,
+      formato: output.formato,
+      varianteUrl: output.varianteUrl,
+      slotSyncRef: input.calendarioItemRef ?? null
+    } : null
+  }),
+  quotasConsumed: [],
+  permissionScope: "module",
+  permissionKey: "marketing",
+  permissionAction: "editar",
+  // updates_calendar_slot porque sincroniza el snapshot fotoIdAsignada
+  // cuando viene calendarioItemRef.
+  sideEffects: ["writes_firestore", "updates_calendar_slot"]
+};
+var photoAssignerContract = MartinContractSchema.parse(
+  rawContract8
+);
 function findPageByHeuristic(pages, pattern) {
   return pages.find((p) => pattern.test(p.title || "")) || pages.find((p) => pattern.test(p.handle || "")) || null;
 }
@@ -4109,7 +4581,7 @@ async function brandBriefBuilder(input) {
   const { db, tenantId, brandId } = input;
   const configSnap = await db.collection("tenants").doc(tenantId).collection("marketing_config").doc(brandId).get();
   if (!configSnap.exists) {
-    return { ok: false, error: `Brand "${brandId}" no encontrada` };
+    return { ok: false, error: `Brand "${brandId}" no encontrada`, code: "BRAND_NOT_FOUND" };
   }
   const brand = configSnap.data();
   const [snapshotMetaSnap, productsSnap, collectionsSnap, pagesSnap, siteMetaSnap, tenantSnap] = await Promise.all([
@@ -4287,26 +4759,27 @@ var BRAND_BRIEF_SCHEMA_HINT = {
     escenas: [{ id: string, nombre: string, promptHint: string }]
   }`
 };
-var ParamsSchema5 = import_zod33.z.object({
-  tenantId: import_zod33.z.string().min(1),
-  brandId: import_zod33.z.string().min(1)
+var ParamsSchema9 = import_zod37.z.object({
+  tenantId: import_zod37.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod37.z.string().min(1).describe("Brand identifier within the tenant.")
 });
-var OutputSchema5 = import_zod33.z.discriminatedUnion("ok", [
-  import_zod33.z.object({
-    ok: import_zod33.z.literal(true),
+var OutputSchema9 = import_zod37.z.discriminatedUnion("ok", [
+  import_zod37.z.object({
+    ok: import_zod37.z.literal(true),
     /** Payload con instrucción + datos del negocio para que Claude genere el brief. */
-    payload: import_zod33.z.record(import_zod33.z.string(), import_zod33.z.unknown())
+    payload: import_zod37.z.record(import_zod37.z.string(), import_zod37.z.unknown())
   }),
-  import_zod33.z.object({
-    ok: import_zod33.z.literal(false),
-    error: import_zod33.z.string()
+  import_zod37.z.object({
+    ok: import_zod37.z.literal(false),
+    error: import_zod37.z.string(),
+    code: import_zod37.z.enum(["BRAND_NOT_FOUND"]).optional()
   })
 ]);
-var rawContract5 = {
+var rawContract9 = {
   name: "generate_brand_brief",
-  description: "Prepara los datos del negocio (Shopify, SEO, GBP, site_content scrape, brand config, ubicaciones del tenant) para que el sistema genere un Brand Brief pre-llenado. NO escribe el brief \u2014 s\xF3lo arma el payload.",
-  paramsSchema: ParamsSchema5,
-  outputSchema: OutputSchema5,
+  description: "Aggregate business data (Shopify, SEO, GBP, scraped site_content, brand config, tenant locations) into a payload to generate a pre-filled Brand Brief. Read-only \u2014 does NOT write the brief; the caller saves it via save_brand_brief.",
+  paramsSchema: ParamsSchema9,
+  outputSchema: OutputSchema9,
   // Lectura pura, sin side effects de escritura ni publicación.
   requiresConfirmation: false,
   destructive: false,
@@ -4314,8 +4787,10 @@ var rawContract5 = {
   affectsExternal: false,
   martinSummaryTemplate: (_input, output, locale) => {
     if (!output.ok) {
-      if (locale === "en") return `I couldn't gather the data: ${output.error}`;
-      return `No pude reunir los datos: ${output.error}`;
+      if (output.code) {
+        return getMessage(`marketing.errors.${output.code}`, locale);
+      }
+      return getMessage("marketing.safeError.generic", locale);
     }
     if (locale === "en") return `I gathered the data for the brief.`;
     return `Reun\xED los datos para el brief.`;
@@ -4329,7 +4804,7 @@ var rawContract5 = {
   sideEffects: ["reads_firestore"]
 };
 var brandBriefBuilderContract = MartinContractSchema.parse(
-  rawContract5
+  rawContract9
 );
 async function resolveLastImportId(db, tenantId, brandId) {
   const configSnap = await db.collection("tenants").doc(tenantId).collection("marketing_config").doc(brandId).get();
@@ -4345,13 +4820,14 @@ async function marketingPlanBuilder(input) {
   const { db, tenantId, brandId } = input;
   const configSnap = await db.collection("tenants").doc(tenantId).collection("marketing_config").doc(brandId).get();
   if (!configSnap.exists) {
-    return { ok: false, error: `Brand "${brandId}" no encontrada` };
+    return { ok: false, error: `Brand "${brandId}" no encontrada`, code: "BRAND_NOT_FOUND" };
   }
   const brand = configSnap.data();
   if (!brand.seoSnapshot) {
     return {
       ok: false,
-      error: "No hay snapshot SEO. Ejecuta marketingSeoSnapshot primero."
+      error: "No hay snapshot SEO. Ejecuta marketingSeoSnapshot primero.",
+      code: "SEO_SNAPSHOT_MISSING"
     };
   }
   const productosQ = await db.collection("productos").where("tenantId", "==", tenantId).limit(100).get();
@@ -4516,6 +4992,54 @@ var BLOG_STRATEGY_REGLAS = [
   "blogId, handle, title, ultimoPostFecha, ultimoPostKeyword, totalArticulos \u2014 copiar del shopifyBlogs (datos reales del import)",
   "defaultBlogId y defaultBlogHandle \u2014 usar el primer blog de la lista"
 ];
+var ParamsSchema10 = import_zod38.z.object({
+  tenantId: import_zod38.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod38.z.string().min(1).describe("Brand identifier within the tenant.")
+});
+var OutputSchema10 = import_zod38.z.discriminatedUnion("ok", [
+  import_zod38.z.object({
+    ok: import_zod38.z.literal(true),
+    payload: import_zod38.z.record(import_zod38.z.string(), import_zod38.z.unknown()).describe(
+      "Aggregated business data + instructions + schema hints for the LLM to generate a marketing plan. Includes seoSnapshot, productos, historialReciente, shopifyColecciones, shopifyBlogs, brandBrief, planActual, and schema/rules hints for coleccionesPriorizadas and blogStrategy."
+    )
+  }),
+  import_zod38.z.object({
+    ok: import_zod38.z.literal(false),
+    error: import_zod38.z.string(),
+    code: import_zod38.z.enum(["BRAND_NOT_FOUND", "SEO_SNAPSHOT_MISSING"]).optional()
+  })
+]);
+var rawContract10 = {
+  name: "generate_marketing_plan",
+  description: "Aggregate business data (seoSnapshot, productos, brand config, brandBrief, historial, Shopify collections + blogs) into a payload for the LLM to generate a marketing plan. Read-only \u2014 does NOT save the plan. The caller saves via save_marketing_plan or update_marketing_plan_field after generating. Requires an existing seoSnapshot on the brand (returns SEO_SNAPSHOT_MISSING otherwise).",
+  paramsSchema: ParamsSchema10,
+  outputSchema: OutputSchema10,
+  // Lectura pura, no muta nada.
+  requiresConfirmation: false,
+  destructive: false,
+  affectsPublication: false,
+  affectsExternal: false,
+  martinSummaryTemplate: (_input, output, locale) => {
+    if (!output.ok) {
+      if (output.code) {
+        return getMessage(`marketing.errors.${output.code}`, locale);
+      }
+      return getMessage("marketing.safeError.generic", locale);
+    }
+    if (locale === "en") return `I gathered the data to generate the plan.`;
+    return `Reun\xED los datos para generar el plan.`;
+  },
+  // AUDITA SIEMPRE — regla A5. Lectura no muta, changes son null/null.
+  auditAction: "marketing.plan.preparar",
+  quotasConsumed: [],
+  permissionScope: "module",
+  permissionKey: "marketing",
+  permissionAction: "ver",
+  sideEffects: ["reads_firestore"]
+};
+var marketingPlanBuilderContract = MartinContractSchema.parse(
+  rawContract10
+);
 function buildGenId() {
   return `mkt_${Date.now()}_${Math.random().toString(36).slice(2, 10)}`;
 }
@@ -4560,6 +5084,7 @@ async function contenidoWriter(input) {
     return {
       ok: false,
       error: `Limite de frecuencia alcanzado: ${activosEstaSemana.length}/${limite} ${plataforma} esta semana`,
+      code: "CONTENT_FREQUENCY_LIMIT",
       activosEstaSemana: activosEstaSemana.length,
       limite
     };
@@ -4585,7 +5110,7 @@ async function contenidoWriter(input) {
   }
   const schemaError = validateDatosSchema(plataforma, datos);
   if (schemaError) {
-    return { ok: false, error: schemaError };
+    return { ok: false, error: schemaError, code: "CONTENT_DATA_VALIDATION_FAILED" };
   }
   const zodSchemas = {
     shopify_blog: DatosBlogSchema,
@@ -4754,6 +5279,100 @@ async function contenidoWriter(input) {
     pipelineLinked
   };
 }
+var ParamsSchema11 = import_zod39.z.object({
+  tenantId: import_zod39.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod39.z.string().min(1).describe("Brand identifier within the tenant."),
+  plataforma: import_zod39.z.enum(["gbp", "shopify_blog", "instagram", "review"]).describe("Target platform for the content."),
+  tipo: import_zod39.z.string().optional().describe(
+    "Content type ('post', 'blog', 'carousel', 'reel', 'story', 'review_response'). Match to the platform."
+  ),
+  keyword: import_zod39.z.string().optional().describe("Primary keyword for the content. OMIT if not applicable."),
+  languageCode: import_zod39.z.string().optional().describe(
+    "Content language code (e.g. 'es', 'en'). For shopify_blog auto-injects to datos.languageCode if not present."
+  ),
+  fotoId: import_zod39.z.string().optional().describe("Linked photo ID. OMIT if no photo associated yet (use assign_photo_to_content later)."),
+  datos: import_zod39.z.record(import_zod39.z.string(), import_zod39.z.unknown()).describe(
+    "Platform-specific content payload. Validated against Blog/GBP/IG/Review schemas. Use buildDatosBlog/GBP/IG/Review helpers to construct safely."
+  ),
+  calendarioItemRef: import_zod39.z.string().optional().describe(
+    'Calendar slot reference (format "semana:N:slot:M"). If provided, links content to that slot AND discards prior non-discarded content of the same slot.'
+  )
+});
+var PipelineLinkResultSchema = import_zod39.z.object({
+  linked: import_zod39.z.boolean(),
+  paso: import_zod39.z.string().nullable(),
+  motivo: import_zod39.z.string().optional(),
+  code: import_zod39.z.string().optional(),
+  _instrucciones: import_zod39.z.string().optional()
+});
+var OutputSchema11 = import_zod39.z.discriminatedUnion("ok", [
+  import_zod39.z.object({
+    ok: import_zod39.z.literal(true),
+    contenidoId: import_zod39.z.string(),
+    estado: import_zod39.z.string(),
+    plataforma: import_zod39.z.enum(["gbp", "shopify_blog", "instagram", "review"]),
+    descartados: import_zod39.z.number().int().nonnegative(),
+    pipelineLinked: PipelineLinkResultSchema
+  }),
+  import_zod39.z.object({
+    ok: import_zod39.z.literal(false),
+    error: import_zod39.z.string(),
+    code: import_zod39.z.enum(["CONTENT_FREQUENCY_LIMIT", "CONTENT_DATA_VALIDATION_FAILED"]).optional(),
+    activosEstaSemana: import_zod39.z.number().int().optional(),
+    limite: import_zod39.z.number().int().optional()
+  })
+]);
+var rawContract11 = {
+  name: "save_generated_content",
+  description: "Save newly generated marketing content to marketing_contenido. The content is saved as pendiente_aprobacion \u2014 it is NOT published until the tenant approves it. Enforces weekly frequency limits per platform. If calendarioItemRef is provided, links to the slot and discards any prior content of the same slot. Validates datos against the platform schema.",
+  paramsSchema: ParamsSchema11,
+  outputSchema: OutputSchema11,
+  // Crea borrador + descarta borrador previo del mismo slot. Reversible
+  // (volver a llamar con datos corregidos crea un nuevo borrador y descarta
+  // el actual). NO publica nada externo — la CF de publish se encarga
+  // cuando el tenant aprueba.
+  requiresConfirmation: false,
+  destructive: false,
+  affectsPublication: false,
+  affectsExternal: false,
+  martinSummaryTemplate: (input, output, locale) => {
+    if (!output.ok) {
+      if (output.code) {
+        return getMessage(`marketing.errors.${output.code}`, locale);
+      }
+      return getMessage("marketing.safeError.generic", locale);
+    }
+    if (locale === "en") {
+      return `I saved a ${output.plataforma} draft. It needs your approval before publishing.`;
+    }
+    return `Guard\xE9 un borrador de ${output.plataforma}. Necesita tu aprobaci\xF3n antes de publicarse.`;
+  },
+  auditAction: "marketing.contenido.crear",
+  extractTargetPath: (input, output) => output.ok ? `tenants/${input.tenantId}/marketing_contenido/${output.contenidoId}` : `tenants/${input.tenantId}/marketing_contenido/`,
+  extractChanges: (input, output) => ({
+    before: null,
+    after: output.ok ? {
+      contenidoId: output.contenidoId,
+      plataforma: output.plataforma,
+      tipo: input.tipo,
+      keyword: input.keyword,
+      fotoId: input.fotoId,
+      calendarioItemRef: input.calendarioItemRef,
+      descartados: output.descartados,
+      pipelineLinked: output.pipelineLinked
+    } : null
+  }),
+  quotasConsumed: [],
+  permissionScope: "module",
+  permissionKey: "marketing",
+  permissionAction: "editar",
+  // updates_calendar_slot porque sincroniza contenidoRef en el slot cuando
+  // calendarioItemRef viene; sin él, solo writes_firestore.
+  sideEffects: ["writes_firestore", "updates_calendar_slot"]
+};
+var contenidoWriterContract = MartinContractSchema.parse(
+  rawContract11
+);
 function fmtDate(d) {
   const y = d.getFullYear();
   const m = String(d.getMonth() + 1).padStart(2, "0");
@@ -4794,7 +5413,7 @@ async function weeklyContentBuilder(input) {
   const targetSemana = semana ?? Math.ceil(now.getDate() / 7);
   const configSnap = await db.collection("tenants").doc(tenantId).collection("marketing_config").doc(brandId).get();
   if (!configSnap.exists) {
-    return { ok: false, error: `Brand "${brandId}" no encontrada` };
+    return { ok: false, error: `Brand "${brandId}" no encontrada`, code: "BRAND_NOT_FOUND" };
   }
   const brand = configSnap.data();
   const calQuery = await db.collection("tenants").doc(tenantId).collection("marketing_calendario").where("brandId", "==", brandId).where("mes", "==", targetMes).limit(1).get();
@@ -4858,7 +5477,8 @@ async function weeklyContentBuilder(input) {
   if (slotsExistentes.length === 0) {
     return {
       ok: false,
-      error: `La semana ${targetSemana} no tiene slots. Primero usa generate_weekly_content con modo='planificar' para proponer la distribuci\xF3n.`
+      error: `La semana ${targetSemana} no tiene slots. Primero usa generate_weekly_content con modo='planificar' para proponer la distribuci\xF3n.`,
+      code: "WEEK_HAS_NO_SLOTS"
     };
   }
   const slotsParaGenerar = slotsExistentes.filter(
@@ -5026,6 +5646,80 @@ OBLIGATORIO: calendarioItemRef con formato EXACTO "semana:N:slot:M" (ej: "semana
 OBLIGATORIO: fotoId \u2014 SIEMPRE pasa el ID de la foto que elegiste con get_photos_for_slot.
 Si el slot tiene notas[], LEERLAS y usarlas como contexto. Si estado es revisar, regenerar adaptando a las notas.
 BLOG SLOTS: Usa _blogJIT para el contexto de cada slot shopify_blog \u2014 blogTarget, tono, author, articulosExistentes para interlinking.`;
+var ParamsSchema12 = import_zod40.z.object({
+  tenantId: import_zod40.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod40.z.string().min(1).describe("Brand identifier within the tenant."),
+  semana: import_zod40.z.number().int().min(1).max(5).optional().describe(
+    "Week number within the current month (1-5). OMIT to default to the current week inferred from today."
+  ),
+  modo: import_zod40.z.enum(["planificar", "generar"]).optional().describe(
+    "Operation mode. 'planificar' (default): propose distribution platform+keyword+tipo per day. 'generar': requires slots in pre_aprobado/revisar \u2014 generate actual content. OMIT to default to 'planificar'."
+  )
+});
+var OutputSchema12 = import_zod40.z.discriminatedUnion("ok", [
+  import_zod40.z.object({
+    ok: import_zod40.z.literal(true),
+    payload: import_zod40.z.record(import_zod40.z.string(), import_zod40.z.unknown()).describe(
+      "Aggregated context for the LLM. Shape varies by modo: 'planificar' returns brand skeleton + slotsYaExistentes + historial; 'generar' returns slotsParaGenerar + fotosDisponibles + brand.blogStrategy + blogJIT (if blog slots present)."
+    )
+  }),
+  import_zod40.z.object({
+    ok: import_zod40.z.literal(false),
+    error: import_zod40.z.string(),
+    code: import_zod40.z.enum(["BRAND_NOT_FOUND", "WEEK_HAS_NO_SLOTS"]).optional()
+  })
+]);
+var rawContract12 = {
+  name: "generate_weekly_content",
+  description: "Build the week's content. Two modes: 'planificar' aggregates context for the LLM to propose distribution (LLM then uses add_calendar_slot/update_calendar_slot per day); 'generar' returns pre-approved slots + photos + blog JIT context for the LLM to generate actual content (LLM then calls save_generated_content per slot). AUTO-CREATES the monthly marketing_calendario if it does not exist. NEVER generates content directly \u2014 always returns a payload for the LLM consumer.",
+  paramsSchema: ParamsSchema12,
+  outputSchema: OutputSchema12,
+  // Auto-create de calendario es bootstrap reversible (volver a llamar usa el
+  // calendario existente). NO publica nada externo. modo='generar' tampoco
+  // publica — solo prepara contexto.
+  requiresConfirmation: false,
+  destructive: false,
+  affectsPublication: false,
+  affectsExternal: false,
+  martinSummaryTemplate: (input, output, locale) => {
+    if (!output.ok) {
+      if (output.code) {
+        return getMessage(`marketing.errors.${output.code}`, locale);
+      }
+      return getMessage("marketing.safeError.generic", locale);
+    }
+    const modo = input.modo ?? "planificar";
+    if (locale === "en") {
+      return modo === "planificar" ? `I gathered the context to propose this week's distribution.` : `I gathered the context to generate this week's content.`;
+    }
+    return modo === "planificar" ? `Reun\xED el contexto para proponer la distribuci\xF3n de la semana.` : `Reun\xED el contexto para generar el contenido de la semana.`;
+  },
+  auditAction: "marketing.weekly_content.preparar",
+  // El helper escribe el calendario solo si no existe (auto-create).
+  // El path canónico que afecta es el calendario del mes.
+  extractTargetPath: (input, _output) => {
+    const mes = (/* @__PURE__ */ new Date()).toISOString().slice(0, 7);
+    return `tenants/${input.tenantId}/marketing_calendario/${input.tenantId}_${input.brandId}_${mes}`;
+  },
+  extractChanges: (input, output) => ({
+    before: null,
+    after: output.ok ? {
+      modo: input.modo ?? "planificar",
+      semana: input.semana ?? null,
+      payloadKeys: Object.keys(output.payload)
+    } : null
+  }),
+  quotasConsumed: [],
+  permissionScope: "module",
+  permissionKey: "marketing",
+  // 'editar' porque auto-crea calendario si no existe. Si solo fuera read,
+  // sería 'ver' — pero el bootstrap del calendario requiere permiso de escritura.
+  permissionAction: "editar",
+  sideEffects: ["reads_firestore", "writes_firestore"]
+};
+var weeklyContentBuilderContract = MartinContractSchema.parse(
+  rawContract12
+);
 var DEFAULT_TEXT_THRESHOLD = 0.35;
 var DEFAULT_IMAGE_THRESHOLD = 0.08;
 var DEFAULT_CONFLICT_THRESHOLD = 0.85;
@@ -5060,7 +5754,7 @@ function diversify(items, jaccardThreshold = 0.6) {
 }
 async function contentFinder(input) {
   const { db, tenantId, brandId, contexto, fecha, include, limit, diversidad, deps } = input;
-  const mode2 = input.mode ?? "text";
+  const mode = input.mode ?? "text";
   const textThreshold = deps.thresholds?.text ?? DEFAULT_TEXT_THRESHOLD;
   const imageThreshold = deps.thresholds?.image ?? DEFAULT_IMAGE_THRESHOLD;
   const conflictThreshold = deps.thresholds?.conflictSimilarity ?? DEFAULT_CONFLICT_THRESHOLD;
@@ -5091,7 +5785,7 @@ async function contentFinder(input) {
       queryEmbedding: queryEmbedding ?? void 0,
       queryText
     };
-    if (mode2 === "text") {
+    if (mode === "text") {
       return safeSearch(true, {
         ...baseParams,
         limit: lim,
@@ -5213,6 +5907,93 @@ async function contentFinder(input) {
   }
   return result;
 }
+var IncludeSchema = import_zod41.z.object({
+  products: import_zod41.z.boolean(),
+  collections: import_zod41.z.boolean(),
+  articles: import_zod41.z.boolean(),
+  pages: import_zod41.z.boolean()
+}).describe(
+  "Toggles for which Shopify content types to search. Default truthy for products/collections/articles, false for pages. Set false to skip a category for performance."
+);
+var LimitSchema = import_zod41.z.object({
+  products: import_zod41.z.number().int().min(0).max(20),
+  collections: import_zod41.z.number().int().min(0).max(10),
+  articles: import_zod41.z.number().int().min(0).max(20),
+  pages: import_zod41.z.number().int().min(0).max(10)
+}).describe(
+  "Per-category result count caps. Defaults: products 5, collections 3, articles 5, pages 2."
+);
+var ParamsSchema13 = import_zod41.z.object({
+  tenantId: import_zod41.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod41.z.string().min(1).describe("Brand identifier within the tenant."),
+  contexto: import_zod41.z.string().min(1).describe(
+    "Search context: a paragraph, keyword, or intent string. Embedded for vector search."
+  ),
+  fecha: import_zod41.z.string().regex(/^\d{4}-\d{2}-\d{2}$/).describe(
+    "Content date in YYYY-MM-DD. Used to detect active season and prioritize matching collections."
+  ),
+  include: IncludeSchema,
+  limit: LimitSchema,
+  diversidad: import_zod41.z.boolean().describe(
+    "Whether to apply Jaccard title diversification + handle dedupe to results. Default true."
+  ),
+  mode: import_zod41.z.enum(["text", "hybrid"]).optional().describe(
+    "Search mode. 'text' (default): single query per collection against embeddingText, fast. 'hybrid': parallel text + image queries with Reciprocal Rank Fusion, 2x queries \u2014 useful when text mode returns few results or to surface visually-similar items with weak SEO."
+  )
+});
+var VectorResultSchema = import_zod41.z.object({
+  id: import_zod41.z.string(),
+  similarity: import_zod41.z.number().optional()
+}).passthrough();
+var TemporadaSchema2 = import_zod41.z.object({
+  coleccion: import_zod41.z.string().nullable(),
+  titulo: import_zod41.z.string().nullable(),
+  razon: import_zod41.z.string().nullable(),
+  fechaInicio: import_zod41.z.string().nullable(),
+  fechaFin: import_zod41.z.string().nullable()
+});
+var SuggestedActionSchema2 = import_zod41.z.record(import_zod41.z.string(), import_zod41.z.unknown());
+var DetectedConflictSchema2 = import_zod41.z.record(import_zod41.z.string(), import_zod41.z.unknown());
+var OutputSchema13 = import_zod41.z.object({
+  productos: import_zod41.z.array(VectorResultSchema),
+  colecciones: import_zod41.z.array(VectorResultSchema),
+  articles: import_zod41.z.array(VectorResultSchema),
+  pages: import_zod41.z.array(VectorResultSchema),
+  _instrucciones: import_zod41.z.string(),
+  _negativePrompt: import_zod41.z.string(),
+  _temporadaActiva: TemporadaSchema2.nullable(),
+  _detectedConflict: DetectedConflictSchema2.optional(),
+  _suggestedActions: import_zod41.z.array(SuggestedActionSchema2)
+});
+var rawContract13 = {
+  name: "find_content_for_topic",
+  description: "Find Shopify content (products, collections, articles, pages) semantically related to a context/keyword + date. Uses multimodal vector search (1408d Vertex). Mode 'text' (default) queries embeddingText (fast); 'hybrid' merges text + image results via Reciprocal Rank Fusion (rescues items with weak text SEO). Auto-injects JIT context: linking instructions, brand visual negatives, active season collection, and conflict detection (>85% similar article).",
+  paramsSchema: ParamsSchema13,
+  outputSchema: OutputSchema13,
+  // Lectura pura (vector search). Failures internas en search degradan a
+  // arrays vacíos — el helper NO falla.
+  requiresConfirmation: false,
+  destructive: false,
+  affectsPublication: false,
+  affectsExternal: false,
+  martinSummaryTemplate: (input, output, locale) => {
+    const totalResults = output.productos.length + output.colecciones.length + output.articles.length + output.pages.length;
+    if (locale === "en") {
+      return `I found ${totalResults} item${totalResults === 1 ? "" : "s"} matching "${input.contexto}".`;
+    }
+    return `Encontr\xE9 ${totalResults} resultado${totalResults === 1 ? "" : "s"} relacionado${totalResults === 1 ? "" : "s"} a "${input.contexto}".`;
+  },
+  // AUDITA SIEMPRE — regla A5. Lectura no muta, changes son null/null.
+  auditAction: "marketing.content.buscar",
+  quotasConsumed: [],
+  permissionScope: "module",
+  permissionKey: "marketing",
+  permissionAction: "ver",
+  sideEffects: ["reads_firestore"]
+};
+var contentFinderContract = MartinContractSchema.parse(
+  rawContract13
+);
 var DEFAULT_PHOTO_THRESHOLD = 0.7;
 var DEFAULT_SHOPIFY_THRESHOLD = 0.65;
 function mapPlataformaAFormato(plataforma) {
@@ -5244,7 +6025,7 @@ async function slotAssetFinder(input) {
   const shopifyThreshold = deps.thresholds?.shopify ?? DEFAULT_SHOPIFY_THRESHOLD;
   const configSnap = await db.collection("tenants").doc(tenantId).collection("marketing_config").doc(brandId).get();
   if (!configSnap.exists) {
-    return { ok: false, error: `Brand "${brandId}" no encontrada` };
+    return { ok: false, error: `Brand "${brandId}" no encontrada`, code: "BRAND_NOT_FOUND" };
   }
   const brand = configSnap.data();
   const brandBrief = brand.brandBrief ?? null;
@@ -5343,6 +6124,7 @@ async function slotAssetFinder(input) {
     temporada ? `Hay temporada activa (${temporada.coleccion.title ?? temporada.coleccion.id}). Respeta bloqueoProducto si esta activo.` : null
   ].filter(Boolean).join(" ");
   return {
+    ok: true,
     fotos,
     _instrucciones,
     _negativePrompt: negativePrompt,
@@ -5357,6 +6139,79 @@ async function slotAssetFinder(input) {
     _fuente: fuente
   };
 }
+var ParamsSchema14 = import_zod42.z.object({
+  tenantId: import_zod42.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod42.z.string().min(1).describe("Brand identifier within the tenant."),
+  keyword: import_zod42.z.string().min(1).describe(
+    "Slot keyword to search photos for. Used as embedding query for multimodal vector search."
+  ),
+  plataforma: import_zod42.z.enum(["gbp", "shopify_blog", "instagram", "review"]).describe(
+    "Target platform \u2014 determines the variant format to resolve (gbp_4_3, blog_3_2, ig_4_5, ig_1_1)."
+  ),
+  fecha: import_zod42.z.string().regex(/^\d{4}-\d{2}-\d{2}$/).describe(
+    "Slot date in YYYY-MM-DD. Used to detect active season and apply seasonal catalog overrides."
+  ),
+  limit: import_zod42.z.number().int().min(1).max(10).optional().describe("Max number of photos to return. Default 5. Max 10.")
+});
+var TemporadaSchema22 = import_zod42.z.object({
+  coleccion: import_zod42.z.string().nullable(),
+  titulo: import_zod42.z.string().nullable(),
+  razon: import_zod42.z.string().nullable(),
+  fechaInicio: import_zod42.z.string().nullable(),
+  fechaFin: import_zod42.z.string().nullable()
+});
+var OutputSchema14 = import_zod42.z.discriminatedUnion("ok", [
+  // Note: success case does not include `ok: true` literal in helper return —
+  // helper returns the success shape directly. Adapter to discriminated union
+  // happens at wrapper level if needed; here we accept both shapes.
+  import_zod42.z.object({
+    ok: import_zod42.z.literal(true),
+    fotos: import_zod42.z.array(import_zod42.z.record(import_zod42.z.string(), import_zod42.z.unknown())),
+    _instrucciones: import_zod42.z.string(),
+    _negativePrompt: import_zod42.z.string(),
+    _temporadaActiva: TemporadaSchema22.nullable(),
+    _bloqueoProducto: import_zod42.z.boolean(),
+    _fuente: import_zod42.z.enum(["tenant", "shopify_product"])
+  }),
+  import_zod42.z.object({
+    ok: import_zod42.z.literal(false),
+    error: import_zod42.z.string(),
+    code: import_zod42.z.enum(["BRAND_NOT_FOUND"]).optional()
+  })
+]);
+var rawContract14 = {
+  name: "get_photos_for_slot",
+  description: "Find tenant photos for a calendar slot (keyword + platform + date) via multimodal vector search (1408d Vertex). Resolves the platform-specific variant (gbp_4_3/blog_3_2/ig_4_5/ig_1_1). Auto-injects JIT context: how to choose, brand visual negatives, active season overrides, and source layer (tenant photos vs Shopify product fallback). If <3 photos returned, consider calling request_photo_shoot to alert the tenant.",
+  paramsSchema: ParamsSchema14,
+  outputSchema: OutputSchema14,
+  requiresConfirmation: false,
+  destructive: false,
+  affectsPublication: false,
+  affectsExternal: false,
+  martinSummaryTemplate: (input, output, locale) => {
+    if (!output.ok) {
+      if (output.code) {
+        return getMessage(`marketing.errors.${output.code}`, locale);
+      }
+      return getMessage("marketing.safeError.generic", locale);
+    }
+    const count = output.fotos.length;
+    if (locale === "en") {
+      return `I found ${count} photo${count === 1 ? "" : "s"} for "${input.keyword}".`;
+    }
+    return `Encontr\xE9 ${count} foto${count === 1 ? "" : "s"} para "${input.keyword}".`;
+  },
+  // AUDITA SIEMPRE — regla A5.
+  auditAction: "marketing.fotos.buscar_para_slot",
+  quotasConsumed: [],
+  permissionScope: "module",
+  permissionKey: "marketing",
+  permissionAction: "ver",
+  sideEffects: ["reads_firestore"]
+};
+var slotAssetFinderContract = MartinContractSchema.parse(
+  rawContract14
+);
 var DEFAULT_SIMILARITY_THRESHOLD = 0.6;
 function cosineSimilarity(a, b) {
   let dot = 0;
@@ -5432,6 +6287,72 @@ async function canvaTemplateSelector(input) {
     _instrucciones: "Plantilla Canva seleccionada. Llama a marketingDesignWithCanva({contenidoId, plantillaId, fotoVariantePath, textos}) para renderizar la pieza final."
   };
 }
+var ParamsSchema15 = import_zod43.z.object({
+  tenantId: import_zod43.z.string().min(1).describe("Tenant identifier (the business account)."),
+  brandId: import_zod43.z.string().min(1).describe("Brand identifier within the tenant."),
+  plataforma: import_zod43.z.string().min(1).describe(
+    "Target platform (e.g. 'gbp', 'shopify_blog', 'instagram'). Filters templates that declare this plataforma."
+  ),
+  tipoContenido: import_zod43.z.string().min(1).describe(
+    "Content type (e.g. 'post', 'carousel', 'story', 'blog'). Filters templates that declare this tipoContenido."
+  ),
+  keyword: import_zod43.z.string().min(1).describe("Slot keyword. Used as embedding query for cosine similarity match.")
+});
+var OutputSchema15 = import_zod43.z.union([
+  import_zod43.z.object({
+    plantillaId: import_zod43.z.string(),
+    titulo: import_zod43.z.string().nullable(),
+    thumbnailUrl: import_zod43.z.string().nullable(),
+    similarity: import_zod43.z.number(),
+    _instrucciones: import_zod43.z.string()
+  }),
+  import_zod43.z.object({
+    plantillaId: import_zod43.z.null(),
+    motivo: import_zod43.z.enum([
+      "brand_no_encontrada",
+      "no_canva",
+      "no_match_plataforma",
+      "modo_cliente_no_soportado",
+      "similarity_baja"
+    ]),
+    similarity: import_zod43.z.number().optional(),
+    _instrucciones: import_zod43.z.string().optional(),
+    _todo: import_zod43.z.string().optional()
+  })
+]);
+var rawContract15 = {
+  name: "select_canva_template",
+  description: "Select the best Canva template from the tenant for a slot. Filters templates by plataforma+tipoContenido, then cosine-similarity matches embeddings vs the keyword query. Returns plantillaId on match (similarity >= 0.60). On miss returns plantillaId=null with motivo enum (no_canva, no_match_plataforma, modo_cliente_no_soportado, similarity_baja, brand_no_encontrada). The LLM should degrade gracefully (generate without Canva template) on any miss.",
+  paramsSchema: ParamsSchema15,
+  outputSchema: OutputSchema15,
+  // Lectura pura. NO falla — todo "no encontré" es resultado válido del helper.
+  requiresConfirmation: false,
+  destructive: false,
+  affectsPublication: false,
+  affectsExternal: false,
+  martinSummaryTemplate: (_input, output, locale) => {
+    if (output.plantillaId !== null) {
+      if (locale === "en") {
+        return `I selected the Canva template "${output.titulo ?? output.plantillaId}".`;
+      }
+      return `Seleccion\xE9 la plantilla Canva "${output.titulo ?? output.plantillaId}".`;
+    }
+    if (locale === "en") {
+      return `I couldn't pick a Canva template (${output.motivo}). Generating without one.`;
+    }
+    return `No pude elegir plantilla Canva (${output.motivo}). Genero sin plantilla.`;
+  },
+  // AUDITA SIEMPRE — regla A5.
+  auditAction: "marketing.canva.seleccionar_plantilla",
+  quotasConsumed: [],
+  permissionScope: "module",
+  permissionKey: "marketing",
+  permissionAction: "ver",
+  sideEffects: ["reads_firestore"]
+};
+var canvaTemplateSelectorContract = MartinContractSchema.parse(
+  rawContract15
+);
 function buildDirectorPlanInstrucciones(catalogoVisual) {
   const etiquetas = catalogoVisual.etiquetas || {};
   return `Eres el director de arte de este negocio. Estas viendo la foto ORIGINAL sin editar que el tenant subio (comprimida para transporte, la original en calidad completa esta en archivoOriginal).
@@ -5654,6 +6575,159 @@ async function photoDirectorExecute(input) {
     _instrucciones: buildDirectorExecuteSuccessInstrucciones(result.balanceAfter)
   };
 }
+var PlanParamsSchema = import_zod44.z.object({
+  tenantId: import_zod44.z.string().min(1).describe("Tenant identifier (the business account)."),
+  fotoId: import_zod44.z.string().min(1).describe("Photo ID in marketing_fotos. The photo must have an archivoOriginal uploaded.")
+});
+var PlanContextSchema = import_zod44.z.object({
+  fotoId: import_zod44.z.string(),
+  archivoOriginal: import_zod44.z.string(),
+  estrategia: import_zod44.z.string(),
+  brandBrief: import_zod44.z.object({
+    segmento: import_zod44.z.string().nullable(),
+    personalidad: import_zod44.z.unknown().nullable()
+  }),
+  visualRules: import_zod44.z.record(import_zod44.z.string(), import_zod44.z.unknown()),
+  catalogoVisual: import_zod44.z.record(import_zod44.z.string(), import_zod44.z.unknown()),
+  estiloVisual: import_zod44.z.unknown().nullable(),
+  notaTenant: import_zod44.z.unknown().nullable(),
+  productoLinkeadoManual: import_zod44.z.unknown().nullable(),
+  _instrucciones: import_zod44.z.string()
+});
+var PlanOutputSchema = import_zod44.z.discriminatedUnion("ok", [
+  import_zod44.z.object({
+    ok: import_zod44.z.literal(true),
+    imageBase64: import_zod44.z.string().describe("Compressed photo as base64 for transport to the LLM."),
+    context: PlanContextSchema
+  }),
+  import_zod44.z.object({
+    ok: import_zod44.z.literal(false),
+    code: import_zod44.z.string(),
+    error: import_zod44.z.string(),
+    _instrucciones: import_zod44.z.string().optional(),
+    fix: import_zod44.z.string().optional(),
+    fotoId: import_zod44.z.string().optional()
+  })
+]);
+var planRawContract = {
+  name: "plan_photo_edit",
+  description: "Load the original photo (compressed) + brand context (brandBrief, visualRules, catalogoVisual, notaTenant, productoLinkeadoManual) so the LLM can act as art director and decide tags + edit prompt. Read-only. Returns code=BRAND_CATALOG_NOT_DEFINED if the brand has no catalogoVisual yet \u2014 call generate_brand_brief first.",
+  paramsSchema: PlanParamsSchema,
+  outputSchema: PlanOutputSchema,
+  requiresConfirmation: false,
+  destructive: false,
+  affectsPublication: false,
+  affectsExternal: false,
+  martinSummaryTemplate: (_input, output, locale) => {
+    if (!output.ok) {
+      return getMessage(`marketing.errors.${output.code}`, locale);
+    }
+    if (locale === "en") return `I loaded the photo and the brand context. Decide the edit.`;
+    return `Cargu\xE9 la foto y el contexto de la brand. Decide la edici\xF3n.`;
+  },
+  // AUDITA SIEMPRE — regla A5.
+  auditAction: "marketing.fotos.plan_edicion",
+  quotasConsumed: [],
+  permissionScope: "module",
+  permissionKey: "marketing",
+  permissionAction: "ver",
+  sideEffects: ["reads_firestore"]
+};
+var photoDirectorPlanContract = MartinContractSchema.parse(
+  planRawContract
+);
+var ExecuteParamsSchema = import_zod44.z.object({
+  // tenantId is injected by the wrapper from ctx (A7 module-scope pattern,
+  // even though the helper function itself derives tenantId via the foto's
+  // brandId). Needed here for extractTargetPath canonical path.
+  tenantId: import_zod44.z.string().min(1).describe("Tenant identifier (the business account)."),
+  fotoId: import_zod44.z.string().min(1).describe("Photo ID to edit (must have been planned via plan_photo_edit)."),
+  prompt: import_zod44.z.string().nullable().describe(
+    "English prompt for Gemini Image Edit when acciones includes edit_background. Pass null when strategy is 'tal_cual' (no editing \u2014 just regenerate thumbnail + embedding with new tags)."
+  ),
+  acciones: import_zod44.z.array(import_zod44.z.enum(["edit_background", "none"])).describe(
+    "Edit operations to perform. Use ['edit_background'] for AI background edit, ['none'] when strategy is 'tal_cual'."
+  ),
+  descripcion: import_zod44.z.string().describe("Semantic description in Spanish (saved as descripcionVision on the photo)."),
+  tipo: import_zod44.z.string().nullable().describe("Photo type from the brand catalogoVisual. null only if catalog has no matching type."),
+  tagsPrimarios: import_zod44.z.array(import_zod44.z.string()).describe("Primary tags from the catalogoVisual."),
+  tagsSecundarios: import_zod44.z.array(import_zod44.z.string()).describe("Secondary tags from the catalogoVisual."),
+  tagsContexto: import_zod44.z.array(import_zod44.z.string()).describe("Contextual tags (occasion, mood, style).")
+});
+var ExecuteOutputSchema = import_zod44.z.discriminatedUnion("ok", [
+  import_zod44.z.object({
+    ok: import_zod44.z.literal(true),
+    fotoId: import_zod44.z.string(),
+    archivoEditado: import_zod44.z.string().optional(),
+    thumbnailUrl: import_zod44.z.string().optional(),
+    iteracion: import_zod44.z.number().optional(),
+    editCosto: import_zod44.z.number().optional(),
+    creditsConsumed: import_zod44.z.number().optional(),
+    balanceAfter: import_zod44.z.number().optional(),
+    imageBase64: import_zod44.z.string().nullable(),
+    _instrucciones: import_zod44.z.string()
+  }),
+  import_zod44.z.object({
+    ok: import_zod44.z.literal(false),
+    error: import_zod44.z.string(),
+    code: import_zod44.z.string(),
+    details: import_zod44.z.record(import_zod44.z.string(), import_zod44.z.unknown()).optional(),
+    _instrucciones: import_zod44.z.string()
+  })
+]);
+var executeRawContract = {
+  name: "execute_photo_edit",
+  description: "Execute photo edit via Gemini Image Edit using the prompt and tags decided after viewing the photo in plan_photo_edit. Consumes credits per edit. Returns the edited photo for review; if not satisfactory, call again with adjusted prompt (max 3 iterations per photo). For 'tal_cual' strategy pass acciones=['none'] \u2014 no editing but thumbnail + embedding regenerate with the new tags.",
+  paramsSchema: ExecuteParamsSchema,
+  outputSchema: ExecuteOutputSchema,
+  // CONSUME CRÉDITOS reales y muta la foto del tenant. requiresConfirmation
+  // canónico para acciones costosas (regla decision tree del MARTIN_CONTRACT_PATTERN).
+  requiresConfirmation: true,
+  destructive: false,
+  affectsPublication: false,
+  affectsExternal: true,
+  martinConfirmationTemplate: (_input, locale) => {
+    if (locale === "en") {
+      return `Edit this photo with AI? It consumes credits from your monthly balance.`;
+    }
+    return `\xBFEdito esta foto con IA? Consume cr\xE9ditos de tu saldo mensual.`;
+  },
+  martinSummaryTemplate: (_input, output, locale) => {
+    if (!output.ok) {
+      return getMessage(`marketing.errors.${output.code}`, locale);
+    }
+    if (locale === "en") {
+      return `I edited the photo. Review the result; if it's not right, call again with an adjusted prompt.`;
+    }
+    return `Edit\xE9 la foto. Revisa el resultado; si no qued\xF3, llama de nuevo con prompt ajustado.`;
+  },
+  auditAction: "marketing.fotos.editar",
+  extractTargetPath: (input) => `tenants/${input.tenantId}/marketing_fotos/${input.fotoId}`,
+  extractChanges: (input, output) => ({
+    before: null,
+    after: output.ok ? {
+      fotoId: output.fotoId,
+      tipo: input.tipo,
+      tagsPrimarios: input.tagsPrimarios,
+      tagsSecundarios: input.tagsSecundarios,
+      tagsContexto: input.tagsContexto,
+      acciones: input.acciones,
+      archivoEditado: output.archivoEditado,
+      iteracion: output.iteracion,
+      creditsConsumed: output.creditsConsumed
+    } : null
+  }),
+  quotasConsumed: ["photoEditsPerMonth"],
+  permissionScope: "module",
+  permissionKey: "marketing",
+  permissionAction: "editar",
+  // affectsExternal=true porque llama a Gemini Image Edit + descarga thumbnail
+  // + escribe doc actualizado.
+  sideEffects: ["writes_firestore", "spends_credits", "consumes_ai_tokens"]
+};
+var photoDirectorExecuteContract = MartinContractSchema.parse(
+  executeRawContract
+);
 var PARTE_1_IDENTIDAD = `
 Eres el asistente de marketing digital de {{brand_nombre}}.
 Tu trabajo es generar contenido de alta calidad para publicar en
@@ -6320,6 +7394,90 @@ async function checkQuota(tenantId, quotaName) {
 async function getCurrentUsage(_tenantId, _quotaName) {
   return 0;
 }
+var NIVELES_CANONICOS = [
+  "ninguno",
+  "ver",
+  "editar",
+  "completo"
+];
+var CACHE_TTL_MS = 60 * 1e3;
+var _rolesCache = /* @__PURE__ */ new Map();
+var _userCache = /* @__PURE__ */ new Map();
+function _getCached(map, key) {
+  const entry = map.get(key);
+  if (!entry) return void 0;
+  if (Date.now() - entry.t > CACHE_TTL_MS) {
+    map.delete(key);
+    return void 0;
+  }
+  return entry.data;
+}
+function _setCached(map, key, data) {
+  map.set(key, { t: Date.now(), data });
+}
+async function _readRolesDoc(db, tenantId) {
+  const key = `roles:${tenantId}`;
+  const cached = _getCached(_rolesCache, key);
+  if (cached !== void 0) return cached;
+  const ref = db.collection("configuracion").doc(`${tenantId}_roles`);
+  const snap = await ref.get();
+  const data = snap.exists ? snap.data() : null;
+  _setCached(_rolesCache, key, data);
+  return data;
+}
+async function _readUserDoc(db, uid) {
+  const key = `user:${uid}`;
+  const cached = _getCached(_userCache, key);
+  if (cached !== void 0) return cached;
+  const ref = db.collection("usuarios").doc(uid);
+  const snap = await ref.get();
+  const data = snap.exists ? snap.data() : null;
+  _setCached(_userCache, key, data);
+  return data;
+}
+async function getUserContext({
+  db,
+  tenantId,
+  uid
+}) {
+  const userDoc = await _readUserDoc(db, uid);
+  if (!userDoc) {
+    throw new Error(`userContext: usuario ${uid} no encontrado.`);
+  }
+  const rolId = userDoc.rol ?? "empleado";
+  const rolNombre = rolId === "super_admin" ? "Super Admin" : await _resolveRolNombre(db, tenantId, rolId);
+  return {
+    uid,
+    nombre: userDoc.nombre ?? userDoc.email ?? "Usuario",
+    email: userDoc.email ?? null,
+    rolId,
+    rolNombre,
+    idiomaPreferido: userDoc.idiomaPreferido ?? "es"
+  };
+}
+async function _resolveRolNombre(db, tenantId, rolId) {
+  const rolesData = await _readRolesDoc(db, tenantId);
+  if (!rolesData) return null;
+  const rolData = rolesData[rolId];
+  return rolData?.nombre ?? null;
+}
+async function getUserPermissionLevel({
+  db,
+  tenantId,
+  userRol,
+  modulo
+}) {
+  if (userRol === "super_admin") return "completo";
+  if (!userRol) return "ninguno";
+  const rolesData = await _readRolesDoc(db, tenantId);
+  if (!rolesData) return "ninguno";
+  const rolData = rolesData[userRol];
+  if (!rolData || rolData.activo === false) return "ninguno";
+  const permisos = rolData.permisosPorModulo || {};
+  const nivel = permisos[modulo];
+  if (!nivel || !NIVELES_CANONICOS.includes(nivel)) return "ninguno";
+  return nivel;
+}
 async function resolveTenantIdioma(tenantId) {
   const db = (0, import_firestore5.getFirestore)();
   const tenantSnap = await db.doc(`tenants/${tenantId}`).get();
@@ -6335,72 +7493,44 @@ async function resolveTenantIdioma(tenantId) {
   }
   return idioma;
 }
-var MESSAGES = {
-  es: {
-    generic: "Tuve un problema. Intent\xE9moslo de nuevo en un momento.",
-    quota_exceeded: "Alcanzaste el l\xEDmite mensual.",
-    not_found: "No lo encontr\xE9. \xBFPodr\xEDas verificar el dato?",
-    permission: "No tengo permiso para hacer eso desde tu cuenta.",
-    timeout: "Esto est\xE1 tardando m\xE1s de lo normal. \xBFLo intento de nuevo?"
-  },
-  en: {
-    generic: "I had a problem. Let's try again in a moment.",
-    quota_exceeded: "You reached the monthly limit.",
-    not_found: "I couldn't find it. Could you verify the data?",
-    permission: "I don't have permission to do that from your account.",
-    timeout: "This is taking longer than usual. Should I try again?"
-  }
-};
 function martinSafeError(err, locale) {
-  if (!(locale in MESSAGES)) {
-    throw new Error(
-      `Locale '${locale}' no soportado en martinSafeError. Locales activos: ${Object.keys(MESSAGES).join(", ")}. Agregar traducciones antes de usar.`
-    );
-  }
-  const msgs = MESSAGES[locale];
   const e = err;
   const message = e?.message ?? "";
   const code = e?.code ?? "";
-  if (/quota|límite|limit/i.test(message)) return msgs.quota_exceeded;
-  if (/not.found|no.encontrado|no existe/i.test(message)) return msgs.not_found;
-  if (/permission|permiso/i.test(message)) return msgs.permission;
-  if (code === "deadline-exceeded" || /timeout/i.test(message)) return msgs.timeout;
-  return msgs.generic;
-}
-var MESSAGES2 = {
-  es: {
-    denied_role: "No tengo permiso para hacer eso desde tu cuenta. P\xEDdelo al encargado o admin que te autorice.",
-    input_invalido: "Falta algo o est\xE1 mal. \xBFLo intentamos de nuevo?",
-    confirm_default: "\xBFConfirmas?"
-  },
-  en: {
-    denied_role: "I don't have permission to do that from your account. Ask the manager or admin to authorize it.",
-    input_invalido: "Something is missing or off. Could you try again?",
-    confirm_default: "Are you sure?"
-  }
-};
+  let key = "generic";
+  if (/quota|límite|limit/i.test(message)) key = "quota_exceeded";
+  else if (/not.found|no.encontrado|no existe/i.test(message)) key = "not_found";
+  else if (/permission|permiso/i.test(message)) key = "permission";
+  else if (code === "deadline-exceeded" || /timeout/i.test(message)) key = "timeout";
+  return getMessage(`marketing.safeError.${key}`, locale);
+}
 function getWrapperMessage(key, locale) {
-  if (!(locale in MESSAGES2)) {
-    throw new Error(
-      `Locale '${locale}' no soportado en getWrapperMessage. Locales activos: ${Object.keys(MESSAGES2).join(", ")}. Agregar traducciones antes de usar.`
-    );
-  }
-  const msg = MESSAGES2[locale][key];
-  if (!msg) {
-    throw new Error(
-      `Mensaje '${key}' no definido en wrapperMessages para locale '${locale}'.`
-    );
-  }
-  return msg;
+  return getMessage(`marketing.wrapper.${key}`, locale);
 }
 var NIVELES_ORDER = ["ninguno", "ver", "editar", "completo"];
-function nivelAlcanza(nivel, accion) {
+function nivelAlcanza2(nivel, accion) {
   return NIVELES_ORDER.indexOf(nivel) >= NIVELES_ORDER.indexOf(accion);
 }
 function wrapWithContract(contract, helper, options = {}) {
   return async function wrappedTool(input, ctx) {
     const startMs = Date.now();
     const locale = ctx.user.idiomaPreferido;
+    const actorType = ctx.user.clientType === "martin" ? "martin" : "mcp_client";
+    const buildActor = () => {
+      const base = {
+        type: actorType,
+        uid: ctx.user.uid,
+        nombre: ctx.user.nombre
+      };
+      const cm = ctx.user.clientMetadata;
+      if (cm && (cm.mcpClient || cm.mcpClientVersion)) {
+        base.metadata = {
+          ...cm.mcpClient ? { mcpClient: cm.mcpClient } : {},
+          ...cm.mcpClientVersion ? { mcpClientVersion: cm.mcpClientVersion } : {}
+        };
+      }
+      return base;
+    };
     let accesoOk = false;
     let reqDesc = "";
     switch (contract.permissionScope) {
@@ -6425,7 +7555,7 @@ function wrapWithContract(contract, helper, options = {}) {
           userRol: ctx.user.rol,
           modulo: contract.permissionKey
         });
-        accesoOk = nivelAlcanza(nivel, contract.permissionAction);
+        accesoOk = nivelAlcanza2(nivel, contract.permissionAction);
         break;
       }
       case "self": {
@@ -6449,7 +7579,7 @@ function wrapWithContract(contract, helper, options = {}) {
       await writeAuditLog({
         tenantId: ctx.tenantId,
         brandId: ctx.brandId ?? null,
-        actor: { type: "martin", uid: ctx.user.uid, nombre: ctx.user.nombre },
+        actor: buildActor(),
         action: contract.auditAction,
         motivo: `Acceso denegado \u2014 rol '${ctx.user.rol}' sin permiso para ${reqDesc}`,
         conversacionId: ctx.conversacionId ?? null,
@@ -6481,7 +7611,7 @@ function wrapWithContract(contract, helper, options = {}) {
       await writeAuditLog({
         tenantId: ctx.tenantId,
         brandId: ctx.brandId ?? null,
-        actor: { type: "martin", uid: ctx.user.uid, nombre: ctx.user.nombre },
+        actor: buildActor(),
         action: contract.auditAction,
         motivo: "Input inv\xE1lido \u2014 Zod parse failed",
         conversacionId: ctx.conversacionId ?? null,
@@ -6497,7 +7627,10 @@ function wrapWithContract(contract, helper, options = {}) {
       };
     }
     const parsedInput = parseResult.data;
-    if (contract.requiresConfirmation && !ctx.confirmationGranted) {
+    const effectiveDestructive = contract.isDestructiveForInput?.(parsedInput) ?? contract.destructive;
+    const effectivePublication = contract.isPublicationForInput?.(parsedInput) ?? contract.affectsPublication;
+    const effectiveRequiresConfirmation = contract.requiresConfirmation || effectiveDestructive || effectivePublication;
+    if (effectiveRequiresConfirmation && !ctx.confirmationGranted) {
       const confirmMsg = contract.martinConfirmationTemplate ? contract.martinConfirmationTemplate(parsedInput, locale) : getWrapperMessage("confirm_default", locale);
       return {
         text: confirmMsg,
@@ -6522,7 +7655,7 @@ function wrapWithContract(contract, helper, options = {}) {
         await writeAuditLog({
           tenantId: ctx.tenantId,
           brandId: ctx.brandId ?? null,
-          actor: { type: "martin", uid: ctx.user.uid, nombre: ctx.user.nombre },
+          actor: buildActor(),
           action: contract.auditAction,
           motivo: `Quota excedida \u2014 ${quotaName}: ${check.current}/${check.limit}`,
           conversacionId: ctx.conversacionId ?? null,
@@ -6544,9 +7677,9 @@ function wrapWithContract(contract, helper, options = {}) {
       await writeAuditLog({
         tenantId: ctx.tenantId,
         brandId: ctx.brandId ?? null,
-        actor: { type: "martin", uid: ctx.user.uid, nombre: ctx.user.nombre },
+        actor: buildActor(),
         action: contract.auditAction,
-        motivo: "Acci\xF3n solicitada v\xEDa Martin",
+        motivo: `Acci\xF3n solicitada v\xEDa ${actorType}`,
         conversacionId: ctx.conversacionId ?? null,
         status: "error",
         errorMessage: err?.message ?? "unknown",
@@ -6573,7 +7706,7 @@ function wrapWithContract(contract, helper, options = {}) {
       await writeAuditLog({
         tenantId: ctx.tenantId,
         brandId: ctx.brandId ?? null,
-        actor: { type: "martin", uid: ctx.user.uid, nombre: ctx.user.nombre },
+        actor: buildActor(),
         action: contract.auditAction,
         motivo: `Output del helper inv\xE1lido \u2014 bug de "${contract.name}"`,
         conversacionId: ctx.conversacionId ?? null,
@@ -6606,7 +7739,7 @@ function wrapWithContract(contract, helper, options = {}) {
       await writeAuditLog({
         tenantId: ctx.tenantId,
         brandId: ctx.brandId ?? null,
-        actor: { type: "martin", uid: ctx.user.uid, nombre: ctx.user.nombre },
+        actor: buildActor(),
         action: contract.auditAction,
         motivo: `disabled \u2014 ${code}${detail ? `: ${JSON.stringify(detail)}` : ""}`,
         conversacionId: ctx.conversacionId ?? null,
@@ -6625,11 +7758,11 @@ function wrapWithContract(contract, helper, options = {}) {
     await writeAuditLog({
       tenantId: ctx.tenantId,
       brandId: ctx.brandId ?? null,
-      actor: { type: "martin", uid: ctx.user.uid, nombre: ctx.user.nombre },
+      actor: buildActor(),
       action: contract.auditAction,
       targetPath,
       changes,
-      motivo: "Acci\xF3n solicitada v\xEDa Martin",
+      motivo: `Acci\xF3n solicitada v\xEDa ${actorType}`,
       conversacionId: ctx.conversacionId ?? null,
       status: "success",
       durationMs: Date.now() - startMs
@@ -6642,100 +7775,136 @@ function wrapWithContract(contract, helper, options = {}) {
     };
   };
 }
-var RecordarMemoriaParamsSchema = import_zod34.z.object({
-  tipo: TipoMemoriaEnum,
-  categoria: CategoriaMemoriaEnum,
-  contenido: import_zod34.z.string().min(3).max(500)
+var RecordarMemoriaParamsSchema = import_zod45.z.object({
+  // tenantId + uid are injected by the wrapper from ctx (A7 self-scope pattern).
+  tenantId: import_zod45.z.string().min(1).describe("Tenant identifier (the business account)."),
+  uid: import_zod45.z.string().min(1).describe("User ID. Memories are private to this user within the tenant."),
+  tipo: TipoMemoriaEnum.describe(
+    "Memory type: 'preferencia' (personal preference), 'regla' (operational rule, e.g. 'do not alert for amounts <$500'), 'patron' (observed behavioral pattern), 'aversion' (explicit 'do not do X' rule)."
+  ),
+  categoria: CategoriaMemoriaEnum.describe(
+    "Business area this memory applies to (compras, produccion, dispatch, ventas, marketing, operacion, personal, delegacion)."
+  ),
+  contenido: import_zod45.z.string().min(3).max(500).describe("Memory content in the user's own words (3-500 chars).")
 });
-var RecordarMemoriaOutputSchema = import_zod34.z.object({
-  memoriaId: import_zod34.z.string(),
-  status: import_zod34.z.literal("creada")
+var RecordarMemoriaOutputSchema = import_zod45.z.object({
+  memoriaId: import_zod45.z.string(),
+  status: import_zod45.z.literal("creada")
 });
-var OlvidarMemoriaParamsSchema = import_zod34.z.object({
-  memoriaId: import_zod34.z.string(),
-  motivo: import_zod34.z.string().optional()
+var OlvidarMemoriaParamsSchema = import_zod45.z.object({
+  // tenantId + uid are injected by the wrapper from ctx (A7 self-scope pattern).
+  tenantId: import_zod45.z.string().min(1).describe("Tenant identifier (the business account)."),
+  uid: import_zod45.z.string().min(1).describe("User ID. Memories are private to this user within the tenant."),
+  memoriaId: import_zod45.z.string().describe("Memory document ID to archive."),
+  motivo: import_zod45.z.string().optional().describe("Optional reason for archiving (logged for audit). OMIT if not applicable.")
 });
-var OlvidarMemoriaOutputSchema = import_zod34.z.object({
-  status: import_zod34.z.literal("archivada")
+var OlvidarMemoriaOutputSchema = import_zod45.z.object({
+  status: import_zod45.z.literal("archivada")
 });
-var ConfigInputSchema = import_zod35.z.object({
-  diaSemana: import_zod35.z.number().int().min(0).max(6).nullable(),
-  diaMes: import_zod35.z.number().int().min(1).max(31).nullable(),
-  hora: import_zod35.z.string().regex(/^\d{2}:\d{2}$/),
-  // Timezone NO viene en input — hereda de tenants/{tid}.zonaHoraria (audit fix 2).
-  fechaPuntual: import_zod35.z.string().datetime({ offset: true }).nullable()
+var ConfigInputSchema = import_zod46.z.object({
+  diaSemana: import_zod46.z.number().int().min(0).max(6).nullable().describe("Day of week (0=Sunday, 6=Saturday) for weekly routines. null for daily/monthly/puntual."),
+  diaMes: import_zod46.z.number().int().min(1).max(31).nullable().describe("Day of month (1-31) for monthly routines. null for daily/weekly/puntual."),
+  hora: import_zod46.z.string().regex(/^\d{2}:\d{2}$/).describe("Execution time in HH:MM format (24h, tenant timezone)."),
+  // Timezone is NOT input — inherited from tenants/{tid}.zonaHoraria (audit fix 2).
+  fechaPuntual: import_zod46.z.string().datetime({ offset: true }).nullable().describe("ISO datetime with offset for one-time routines (frecuencia=puntual). null otherwise.")
 }).strict();
-var AccionInputSchema = import_zod35.z.object({
-  tool: import_zod35.z.string().min(1),
-  params: import_zod35.z.record(import_zod35.z.string(), import_zod35.z.unknown())
+var AccionInputSchema = import_zod46.z.object({
+  tool: import_zod46.z.string().min(1).describe("MCP tool name to invoke when the routine fires (e.g. generate_weekly_content)."),
+  params: import_zod46.z.record(import_zod46.z.string(), import_zod46.z.unknown()).describe("Parameters to pass to the tool. Schema depends on the target tool.")
 }).strict();
-var ProgramarRutinaParamsSchema = import_zod35.z.object({
-  tipo: TipoRutinaEnum,
-  frecuencia: FrecuenciaRutinaEnum,
-  config: ConfigInputSchema,
-  accion: AccionInputSchema,
-  uidDestinatario: import_zod35.z.string()
+var ProgramarRutinaParamsSchema = import_zod46.z.object({
+  // tenantId + uid are injected by the wrapper from ctx (A7 self-scope pattern).
+  tenantId: import_zod46.z.string().min(1).describe("Tenant identifier (the business account)."),
+  uid: import_zod46.z.string().min(1).describe("User ID. Routines are private to this user within the tenant."),
+  tipo: TipoRutinaEnum.describe("Routine type/category from the canonical enum."),
+  frecuencia: FrecuenciaRutinaEnum.describe(
+    "Execution cadence: 'diaria' | 'semanal' | 'mensual' | 'puntual'."
+  ),
+  config: ConfigInputSchema.describe("Schedule configuration. Match fields to the frecuencia."),
+  accion: AccionInputSchema.describe("Action to execute on each fire (tool + params)."),
+  uidDestinatario: import_zod46.z.string().describe("User ID who should receive the routine output (usually same as uid).")
 });
-var ProgramarRutinaOutputSchema = import_zod35.z.object({
-  rutinaId: import_zod35.z.string(),
-  proximaEjecucionAt: import_zod35.z.string().datetime()
+var ProgramarRutinaOutputSchema = import_zod46.z.object({
+  rutinaId: import_zod46.z.string(),
+  proximaEjecucionAt: import_zod46.z.string().datetime()
 });
-var PausarRutinaParamsSchema = import_zod35.z.object({
-  rutinaId: import_zod35.z.string(),
-  motivo: import_zod35.z.string().optional()
+var PausarRutinaParamsSchema = import_zod46.z.object({
+  // tenantId + uid are injected by the wrapper from ctx (A7 self-scope pattern).
+  tenantId: import_zod46.z.string().min(1).describe("Tenant identifier (the business account)."),
+  uid: import_zod46.z.string().min(1).describe("User ID. Routines are private to this user within the tenant."),
+  rutinaId: import_zod46.z.string().describe("Routine document ID to pause."),
+  motivo: import_zod46.z.string().optional().describe("Optional reason for pausing (logged for audit). OMIT if not applicable.")
 });
-var PausarRutinaOutputSchema = import_zod35.z.object({
-  status: import_zod35.z.literal("pausada")
+var PausarRutinaOutputSchema = import_zod46.z.object({
+  status: import_zod46.z.literal("pausada")
 });
-var ArchivarRutinaParamsSchema = import_zod35.z.object({
-  rutinaId: import_zod35.z.string(),
-  motivo: import_zod35.z.string().optional()
+var ArchivarRutinaParamsSchema = import_zod46.z.object({
+  // tenantId + uid are injected by the wrapper from ctx (A7 self-scope pattern).
+  tenantId: import_zod46.z.string().min(1).describe("Tenant identifier (the business account)."),
+  uid: import_zod46.z.string().min(1).describe("User ID. Routines are private to this user within the tenant."),
+  rutinaId: import_zod46.z.string().describe("Routine document ID to archive (will not execute again)."),
+  motivo: import_zod46.z.string().optional().describe("Optional reason for archiving (logged for audit). OMIT if not applicable.")
 });
-var ArchivarRutinaOutputSchema = import_zod35.z.object({
-  status: import_zod35.z.literal("archivada")
+var ArchivarRutinaOutputSchema = import_zod46.z.object({
+  status: import_zod46.z.literal("archivada")
 });
-var ListarRutinasParamsSchema = import_zod35.z.object({
-  uid: import_zod35.z.string().optional()
+var ListarRutinasParamsSchema = import_zod46.z.object({
+  uid: import_zod46.z.string().optional().describe(
+    "User ID to list routines for. OMIT to default to the calling user (the wrapper rejects requests for other uids unless caller is super_admin)."
+  )
 });
-var ListarRutinasOutputSchema = import_zod35.z.object({
-  rutinas: import_zod35.z.array(MartinRutinaSchema)
+var ListarRutinasOutputSchema = import_zod46.z.object({
+  rutinas: import_zod46.z.array(MartinRutinaSchema)
 });
 
-// src/tools/martinContext.ts
-function buildMartinContext(session, brandId, opts = {}) {
+// src/tools/buildContext.ts
+async function buildContext(session, brandId, opts = {}) {
+  const tenantId = session.requireTenant();
+  const ci = session.mcpClientIdentity;
+  let userCtx = null;
+  if (session.userId && getSdkMode() === "admin") {
+    try {
+      userCtx = await getUserContext({
+        db: getAdminDb(),
+        tenantId,
+        uid: session.userId
+      });
+    } catch {
+      userCtx = null;
+    }
+  }
   return {
-    tenantId: session.requireTenant(),
+    tenantId,
     brandId,
     user: {
       uid: session.userId ?? "cowork-admin",
-      nombre: session.userName ?? "Cowork Admin",
-      rol: session.rol ?? "super_admin",
-      idiomaPreferido: "es"
-      // TODO HITO 8: leer usuarios/{uid}.idiomaPreferido
+      nombre: userCtx?.nombre ?? session.userName ?? "Cowork Admin",
+      rol: userCtx?.rolId ?? session.rol ?? "super_admin",
+      rolNombre: userCtx?.rolNombre ?? null,
+      idiomaPreferido: userCtx?.idiomaPreferido ?? "es",
+      // Any caller entering through this factory is an MCP client (Claude
+      // Desktop, Cursor, custom LLM scripts), NOT the Martin product app.
+      // When Martin product app ships (211.3+), its server-side caller will
+      // override clientType to 'martin' via the same `_martinContext` channel.
+      clientType: "mcp_client",
+      clientMetadata: {
+        mcpClient: ci.mcpClient,
+        mcpClientVersion: ci.mcpClientVersion
+      }
     },
     conversacionId: opts.conversacionId ?? null,
-    confirmationGranted: opts.confirmationGranted ?? true,
+    // HITO 6 A7.8: default false — secure default para acciones destructivas.
+    // Tools sin requiresConfirmation lo ignoran; tools con
+    // requiresConfirmation: true necesitan el flag explícito para ejecutar.
+    confirmationGranted: opts.confirmationGranted ?? false,
     doubleConfirmationGranted: opts.doubleConfirmationGranted ?? false
   };
 }
 async function dispatchWithContract(args) {
   const { contract, helper, callable, input, ctx } = args;
-  if (getMode() === "admin") {
+  if (getSdkMode() === "admin") {
     const db = getAdminDb();
-    const permissionResolver = async (args2) => {
-      if (args2.userRol === "super_admin") return "completo";
-      const ref = db.collection("configuracion").doc(`${args2.tenantId}_roles`);
-      const snap = await ref.get();
-      if (!snap.exists) return "ninguno";
-      const rolesData = snap.data();
-      const rolData = rolesData[args2.userRol];
-      if (!rolData || rolData.activo === false) return "ninguno";
-      const nivel = rolData.permisosPorModulo?.[args2.modulo];
-      if (nivel === "completo" || nivel === "editar" || nivel === "ver" || nivel === "ninguno") {
-        return nivel;
-      }
-      return "ninguno";
-    };
+    const permissionResolver = (args2) => getUserPermissionLevel({ db, ...args2 });
     const wrapped = wrapWithContract(
       contract,
       async (i) => helper({ ...i, db }),
@@ -6743,15 +7912,20 @@ async function dispatchWithContract(args) {
     );
     return wrapped(input, ctx);
   }
-  return callable({
+  const result = await callable({
     ...input,
     _martinContext: {
       conversacionId: ctx.conversacionId ?? null,
       confirmationGranted: ctx.confirmationGranted === true,
       doubleConfirmationGranted: ctx.doubleConfirmationGranted === true,
-      userIdiomaPreferido: ctx.user.idiomaPreferido
+      userIdiomaPreferido: ctx.user.idiomaPreferido,
+      // HITO 6 A7.5: propagar clientType + identidad concreta para que
+      // el factory CF arme actor.type + actor.metadata en el audit log.
+      clientType: ctx.user.clientType ?? "mcp_client",
+      clientMetadata: ctx.user.clientMetadata ?? null
     }
   });
+  return result;
 }
 
 // src/services/marketingHelperCallables.ts
@@ -6828,7 +8002,7 @@ function callPhotoDirectorExecute(input) {
 }
 
 // src/tools/marketing/photos.ts
-var import_zod37 = require("zod");
+var import_zod47 = require("zod");
 
 // src/services/marketingEmbeddings.ts
 var import_google_auth_library = require("google-auth-library");
@@ -6883,7 +8057,7 @@ async function generateTextEmbedding(text, session) {
   if (!trimmed) {
     throw new Error("generateTextEmbedding: text no puede estar vacio");
   }
-  if (getMode() === "client") {
+  if (getSdkMode() === "client") {
     return null;
   }
   return callEmbeddingCF({ text: trimmed }, session);
@@ -6977,7 +8151,7 @@ async function findNearestInCollection(params) {
       `findNearestInCollection: vectorField obligatorio (embeddingText | embeddingImage), recibido ${vectorField}`
     );
   }
-  if (getMode() === "client") {
+  if (getSdkMode() === "client") {
     if (!queryText || typeof queryText !== "string") {
       throw new Error(
         "findNearestInCollection en Modo B (client) requiere queryText. El MCP cliente no puede generar embeddings localmente; la CF puente marketingVectorSearchCallable los genera server-side."
@@ -7095,202 +8269,6 @@ async function findNearestInCollectionWithOverride(params) {
   return findNearestInCollection(params);
 }
 
-// src/tools/marketing/content.ts
-var import_zod36 = require("zod");
-var _logOverride = null;
-async function logToMcpLogs(entry) {
-  if (_logOverride) return _logOverride(entry);
-  try {
-    const db = getAdminDb();
-    await db.collection("marketing_mcp_logs").add({
-      ...entry,
-      timestamp: import_firebase_admin.default.firestore.FieldValue.serverTimestamp()
-    });
-  } catch {
-  }
-}
-var IncludeSchema = import_zod36.z.object({
-  products: import_zod36.z.boolean().default(true),
-  collections: import_zod36.z.boolean().default(true),
-  articles: import_zod36.z.boolean().default(true),
-  pages: import_zod36.z.boolean().default(false)
-}).default({
-  products: true,
-  collections: true,
-  articles: true,
-  pages: false
-});
-var LimitSchema = import_zod36.z.object({
-  products: import_zod36.z.number().int().min(0).max(20).default(5),
-  collections: import_zod36.z.number().int().min(0).max(10).default(3),
-  articles: import_zod36.z.number().int().min(0).max(20).default(5),
-  pages: import_zod36.z.number().int().min(0).max(10).default(2)
-}).default({ products: 5, collections: 3, articles: 5, pages: 2 });
-async function findContentForTopicHandler(input, session) {
-  const tenantId = session.requireTenant();
-  const brandId = input.brandId;
-  const mode2 = getMode();
-  const r = mode2 === "admin" ? await contentFinder({
-    db: getAdminDb(),
-    tenantId,
-    brandId,
-    contexto: input.contexto,
-    fecha: input.fecha,
-    include: input.include,
-    limit: input.limit,
-    diversidad: input.diversidad,
-    mode: input.mode,
-    deps: {
-      generateEmbedding: (q) => generateTextEmbeddingWithOverride(q, session),
-      findNearestInCollection: (params) => findNearestInCollectionWithOverride(
-        params
-      ),
-      rrfMerge,
-      thresholds: {
-        text: MARKETING_THRESHOLDS.content.text,
-        image: MARKETING_THRESHOLDS.content.image,
-        conflictSimilarity: MARKETING_THRESHOLDS.content.conflictSimilarity
-      }
-    }
-  }) : await callContentFinder({
-    tenantId,
-    brandId,
-    contexto: input.contexto,
-    fecha: input.fecha,
-    include: input.include,
-    limit: input.limit,
-    diversidad: input.diversidad,
-    mode: input.mode
-  });
-  logToMcpLogs({
-    toolName: "find_content_for_topic",
-    tenantId,
-    brandId,
-    input: {
-      contexto: input.contexto.slice(0, 500),
-      fecha: input.fecha,
-      include: input.include,
-      diversidad: input.diversidad
-    },
-    output: {
-      productsCount: r.productos.length,
-      collectionsCount: r.colecciones.length,
-      articlesCount: r.articles.length,
-      pagesCount: r.pages.length,
-      _suggestedActionsCount: r._suggestedActions.length,
-      _hadConflict: !!r._detectedConflict,
-      conflictType: r._detectedConflict?.type || null
-    }
-  }).catch((err) => console.error("[mcp_logs] write failed:", err));
-  return r;
-}
-function registerContentTools(server, session) {
-  server.tool(
-    "find_content_for_topic",
-    `Busca contenido semanticamente relevante del negocio (productos, colecciones, articles, pages) para un contexto/keyword dado, usando vector search multimodal 1408d. Retorna 4 listas en paralelo + JIT context del brand brief y temporada activa.
-
-RETORNA:
-  - productos, colecciones, articles, pages (segun include)
-  - _instrucciones: reglas para linkear contenido
-  - _negativePrompt: negativos visuales del brand brief
-  - _temporadaActiva: si hay coleccion priorizada para la fecha
-  - _detectedConflict / _suggestedActions: si detecta article muy similar (>85%)
-
-USAR:
-  (a) cuando escribas blogs, captions o contenido que linkee material del negocio (internal linking tier 1).
-  (b) cuando el tenant te pregunte que tiene sobre un tema ("tengo algo de flores moradas?", "que productos tengo para regalo de mama?") \u2014 exploracion ad-hoc del catalogo.
-  (c) antes de proponer un tema nuevo al calendario, para validar que el catalogo lo soporte.
-
-MODOS (parametro mode):
-  - 'text' (default): busca contra embeddingText. Rapido, preciso cuando las descripciones del catalogo estan optimizadas. Un solo query por coleccion.
-  - 'hybrid': combina embeddingText + embeddingImage con Reciprocal Rank Fusion. 2x queries por coleccion. Rescata productos que tienen buen visual pero SEO debil en texto \u2014 util para descubrir items que el modo text pierde. Recomendado cuando:
-      * El modo text devuelve pocos resultados
-      * Exploraras tu catalogo y quieres cobertura maxima
-      * Vas a hacer recomendaciones de SEO (items que solo aparecen en image = se\xF1al de texto debil)
-
-Cuando uses hybrid: inspecciona el campo \`modesFound\` en los resultados. 2 = el doc aparecio en ambos modos (alta confianza). 1 = aparecio solo en text (problema visual) o solo en image (problema SEO). Esos "solo image" son candidatos perfectos para recomendar optimizacion al tenant.`,
-    {
-      brandId: import_zod36.z.string().optional().describe("ID de la brand"),
-      contexto: import_zod36.z.string().min(1).describe("Parrafo, keyword o intencion"),
-      fecha: import_zod36.z.string().describe("Fecha del contenido en ISO YYYY-MM-DD"),
-      include: IncludeSchema.optional(),
-      limit: LimitSchema.optional(),
-      diversidad: import_zod36.z.boolean().default(true),
-      mode: import_zod36.z.enum(["text", "hybrid"]).default("text").describe("Modo de busqueda: 'text' (rapido, 1 query) o 'hybrid' (text+image via RRF, 2x queries, rescata SEO debil)")
-    },
-    async ({ brandId: inputBrandId, contexto, fecha, include, limit, diversidad, mode: mode2 }) => {
-      const brandId = inputBrandId ?? session.requireBrand();
-      const resolvedInclude = include || {
-        products: true,
-        collections: true,
-        articles: true,
-        pages: false
-      };
-      const resolvedLimit = limit || {
-        products: 5,
-        collections: 3,
-        articles: 5,
-        pages: 2
-      };
-      try {
-        const result = await findContentForTopicHandler(
-          {
-            brandId,
-            contexto,
-            fecha,
-            include: resolvedInclude,
-            limit: resolvedLimit,
-            diversidad,
-            mode: mode2
-          },
-          session
-        );
-        const slimResult = (item) => ({
-          id: item.id,
-          similarity: item.similarity,
-          title: item.title ?? item.nombre ?? null,
-          handle: item.handle ?? null,
-          description: typeof item.description === "string" ? item.description.slice(0, 200) : null,
-          image: item.image ? { src: item.image.src, alt: item.image.alt } : null,
-          collectionHandles: item.collectionHandles ?? null,
-          modesFound: item.modesFound ?? null,
-          rrfScore: item.rrfScore ?? null
-        });
-        const slimmed = {
-          productos: result.productos.map(slimResult),
-          colecciones: result.colecciones.map(slimResult),
-          articles: result.articles.map(slimResult),
-          pages: result.pages.map(slimResult),
-          _instrucciones: result._instrucciones,
-          _negativePrompt: result._negativePrompt,
-          _temporadaActiva: result._temporadaActiva,
-          _suggestedActions: result._suggestedActions,
-          ...result._detectedConflict ? { _detectedConflict: result._detectedConflict } : {}
-        };
-        return {
-          content: [
-            {
-              type: "text",
-              text: JSON.stringify(slimmed, null, 2)
-            }
-          ]
-        };
-      } catch (err) {
-        return {
-          content: [
-            {
-              type: "text",
-              text: JSON.stringify({
-                error: err.message || "Error desconocido"
-              })
-            }
-          ]
-        };
-      }
-    }
-  );
-}
-
 // src/tools/marketing/photos.ts
 async function compressImageForTransport(imageUrl) {
   const sharp = (await import("sharp")).default;
@@ -7320,34 +8298,41 @@ REGLAS:
 
 USAR: antes de generar contenido de cualquier slot del calendario.`,
     {
-      brandId: import_zod37.z.string().optional().describe("ID de la brand"),
-      keyword: import_zod37.z.string().describe("Keyword del slot"),
-      plataforma: import_zod37.z.enum(["gbp", "shopify_blog", "instagram", "review"]).describe("Plataforma destino del slot"),
-      fecha: import_zod37.z.string().describe("Fecha del slot en ISO YYYY-MM-DD"),
-      limit: import_zod37.z.number().int().min(1).max(10).default(5)
+      brandId: import_zod47.z.string().optional().describe("ID de la brand"),
+      keyword: import_zod47.z.string().describe("Keyword del slot"),
+      plataforma: import_zod47.z.enum(["gbp", "shopify_blog", "instagram", "review"]).describe("Plataforma destino del slot"),
+      fecha: import_zod47.z.string().describe("Fecha del slot en ISO YYYY-MM-DD"),
+      limit: import_zod47.z.number().int().min(1).max(10).default(5)
     },
     async ({ brandId: inputBrandId, keyword, plataforma, fecha, limit }) => {
       const tenantId = session.requireTenant();
       const brandId = inputBrandId ?? session.requireBrand();
-      const result = getMode() === "admin" ? await slotAssetFinder({
-        db: getAdminDb(),
-        tenantId,
-        brandId,
-        keyword,
-        plataforma,
-        fecha,
-        limit,
-        deps: {
-          generateEmbedding: (q) => generateTextEmbeddingWithOverride(q, session),
-          findNearestPhotos: (params) => findNearestPhotosWithOverride(params),
-          findNearestInCollection: (params) => findNearestInCollectionWithOverride(params),
-          thresholds: {
-            photos: MARKETING_THRESHOLDS.fotos.capa1Tenant,
-            shopify: MARKETING_THRESHOLDS.fotos.capa2Shopify
+      const ctx = await buildContext(session, brandId);
+      const result = await dispatchWithContract({
+        contract: slotAssetFinderContract,
+        helper: (input) => slotAssetFinder({
+          ...input,
+          deps: {
+            generateEmbedding: (q) => generateTextEmbeddingWithOverride(q, session),
+            findNearestPhotos: (params) => findNearestPhotosWithOverride(params),
+            findNearestInCollection: (params) => findNearestInCollectionWithOverride(params),
+            thresholds: {
+              photos: MARKETING_THRESHOLDS.fotos.capa1Tenant,
+              shopify: MARKETING_THRESHOLDS.fotos.capa2Shopify
+            }
           }
-        }
-      }) : await callSlotAssetFinder({ tenantId, brandId, keyword, plataforma, fecha, limit });
-      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+        }),
+        callable: callSlotAssetFinder,
+        input: { tenantId, brandId, keyword, plataforma, fecha, limit },
+        ctx
+      });
+      const payload = result.state === "success" ? result.structuredOutput : {
+        ok: false,
+        state: result.state,
+        mensaje: result.text,
+        ...result.validationErrors && result.validationErrors.length > 0 ? { validationErrors: result.validationErrors } : {}
+      };
+      return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }] };
     }
   );
   server.tool(
@@ -7365,18 +8350,33 @@ DESPUES de ver la foto, decide:
 
 Luego llama execute_photo_edit con tu analisis y prompt.`,
     {
-      fotoId: import_zod37.z.string().describe("ID de la foto")
+      fotoId: import_zod47.z.string().describe("ID de la foto")
     },
     async ({ fotoId }) => {
       const tenantId = session.requireTenant();
       const lang = await resolveTenantIdioma(tenantId);
-      const result = getMode() === "admin" ? await photoDirectorPlan({
-        db: getAdminDb(),
-        tenantId,
-        fotoId,
-        deps: { compressImageForTransport },
-        lang
-      }) : await callPhotoDirectorPlan({ tenantId, fotoId });
+      const ctx = await buildContext(session, null);
+      const dispatchResult = await dispatchWithContract({
+        contract: photoDirectorPlanContract,
+        helper: (input) => photoDirectorPlan({
+          ...input,
+          deps: { compressImageForTransport },
+          lang
+        }),
+        callable: callPhotoDirectorPlan,
+        input: { tenantId, fotoId },
+        ctx
+      });
+      if (dispatchResult.state !== "success") {
+        const errPayload = {
+          ok: false,
+          state: dispatchResult.state,
+          mensaje: dispatchResult.text,
+          ...dispatchResult.validationErrors && dispatchResult.validationErrors.length > 0 ? { validationErrors: dispatchResult.validationErrors } : {}
+        };
+        return { content: [{ type: "text", text: JSON.stringify(errPayload, null, 2) }] };
+      }
+      const result = dispatchResult.structuredOutput;
       if (!result.ok) {
         return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
       }
@@ -7398,33 +8398,44 @@ Retorna la foto editada para que la revises. Si no te gusta:
 
 Si estrategia era 'tal_cual', pasa acciones=['none'] \u2014 no se edita pero si se genera thumbnail y embedding con tus tags.`,
     {
-      fotoId: import_zod37.z.string(),
-      prompt: import_zod37.z.string().nullable().describe("Prompt en ingles para Gemini Image Edit. null si tal_cual"),
-      acciones: import_zod37.z.array(import_zod37.z.enum(["edit_background", "none"])),
-      descripcion: import_zod37.z.string().describe("Descripcion semantica en espanol"),
-      tipo: import_zod37.z.string().nullable().describe("Tipo del catalogoVisual del tenant"),
-      tagsPrimarios: import_zod37.z.array(import_zod37.z.string()),
-      tagsSecundarios: import_zod37.z.array(import_zod37.z.string()),
-      tagsContexto: import_zod37.z.array(import_zod37.z.string())
+      fotoId: import_zod47.z.string(),
+      prompt: import_zod47.z.string().nullable().describe("Prompt en ingles para Gemini Image Edit. null si tal_cual"),
+      acciones: import_zod47.z.array(import_zod47.z.enum(["edit_background", "none"])),
+      descripcion: import_zod47.z.string().describe("Descripcion semantica en espanol"),
+      tipo: import_zod47.z.string().nullable().describe("Tipo del catalogoVisual del tenant"),
+      tagsPrimarios: import_zod47.z.array(import_zod47.z.string()),
+      tagsSecundarios: import_zod47.z.array(import_zod47.z.string()),
+      tagsContexto: import_zod47.z.array(import_zod47.z.string())
     },
     async ({ fotoId, prompt, acciones, descripcion, tipo, tagsPrimarios, tagsSecundarios, tagsContexto }) => {
       const tenantId = session.requireTenant();
       const lang = await resolveTenantIdioma(tenantId);
-      if (getMode() === "admin") {
-        const executePhotoEditAdapter = async (payload) => {
-          const cfUrl = process.env.MARKETING_PHOTO_EDIT_CF_URL || "https://us-central1-atteyo-ops.cloudfunctions.net/marketingExecutePhotoEdit";
-          const { GoogleAuth: GoogleAuth2 } = await import("google-auth-library");
-          const auth = new GoogleAuth2({ keyFile: session.serviceAccountPath });
-          const client = await auth.getIdTokenClient(cfUrl);
-          const response = await client.request({
-            url: cfUrl,
-            method: "POST",
-            data: payload,
-            headers: { "Content-Type": "application/json" }
-          });
-          return response.data ?? {};
-        };
-        const result2 = await photoDirectorExecute({
+      const executePhotoEditAdapter = async (payload) => {
+        const cfUrl = process.env.MARKETING_PHOTO_EDIT_CF_URL || "https://us-central1-atteyo-ops.cloudfunctions.net/marketingExecutePhotoEdit";
+        const { GoogleAuth: GoogleAuth2 } = await import("google-auth-library");
+        const auth = new GoogleAuth2({ keyFile: session.serviceAccountPath });
+        const client = await auth.getIdTokenClient(cfUrl);
+        const response = await client.request({
+          url: cfUrl,
+          method: "POST",
+          data: payload,
+          headers: { "Content-Type": "application/json" }
+        });
+        return response.data ?? {};
+      };
+      const ctx = await buildContext(session, null);
+      const dispatchResult = await dispatchWithContract({
+        contract: photoDirectorExecuteContract,
+        helper: (input) => photoDirectorExecute({
+          ...input,
+          deps: { compressImageForTransport, executePhotoEdit: executePhotoEditAdapter },
+          lang
+        }),
+        callable: callPhotoDirectorExecute,
+        // Note: tenantId en el input para que extractTargetPath pueda armar
+        // el path canónico (tenants/{tid}/marketing_fotos/{fotoId}).
+        input: {
+          tenantId,
           fotoId,
           prompt,
           acciones,
@@ -7432,32 +8443,20 @@ Si estrategia era 'tal_cual', pasa acciones=['none'] \u2014 no se edita pero si
           tipo,
           tagsPrimarios,
           tagsSecundarios,
-          tagsContexto,
-          deps: { compressImageForTransport, executePhotoEdit: executePhotoEditAdapter },
-          lang
-        });
-        if (!result2.ok) {
-          return { content: [{ type: "text", text: JSON.stringify(result2, null, 2) }] };
-        }
-        const contentArray2 = [];
-        if (result2.imageBase64) {
-          contentArray2.push({ type: "image", data: result2.imageBase64, mimeType: "image/jpeg" });
-        }
-        const { imageBase64: _unused2, ...textFields2 } = result2;
-        contentArray2.push({ type: "text", text: JSON.stringify(textFields2, null, 2) });
-        return { content: contentArray2 };
-      }
-      const result = await callPhotoDirectorExecute({
-        tenantId,
-        fotoId,
-        prompt,
-        acciones,
-        descripcion,
-        tipo,
-        tagsPrimarios,
-        tagsSecundarios,
-        tagsContexto
+          tagsContexto
+        },
+        ctx
       });
+      if (dispatchResult.state !== "success") {
+        const errPayload = {
+          ok: false,
+          state: dispatchResult.state,
+          mensaje: dispatchResult.text,
+          ...dispatchResult.validationErrors && dispatchResult.validationErrors.length > 0 ? { validationErrors: dispatchResult.validationErrors } : {}
+        };
+        return { content: [{ type: "text", text: JSON.stringify(errPayload, null, 2) }] };
+      }
+      const result = dispatchResult.structuredOutput;
       if (!result.ok) {
         return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
       }
@@ -7482,7 +8481,7 @@ Retorna:
   - creditos: { balance, planId, periodEnd, costoPhotoEdit }
   - _instrucciones: que hacer segun el estado`,
     {
-      fotoId: import_zod37.z.string().describe("ID de la foto")
+      fotoId: import_zod47.z.string().describe("ID de la foto")
     },
     async ({ fotoId }) => {
       const tenantId = session.requireTenant();
@@ -7582,19 +8581,34 @@ Retorna:
     "find_products_for_content",
     `[DEPRECATED 179.5] Wrapper interno de find_content_for_topic. Para nuevas integraciones, usa find_content_for_topic con include.products=true directamente. Este wrapper existe solo por compat hacia atras.`,
     {
-      brandId: import_zod37.z.string().optional().describe("ID de la brand"),
-      contexto: import_zod37.z.string().describe("Parrafo, keyword o intencion del contenido"),
-      fecha: import_zod37.z.string().describe("Fecha del contenido en ISO YYYY-MM-DD"),
-      limit: import_zod37.z.number().int().min(1).max(10).default(5),
-      diversidad: import_zod37.z.boolean().default(true)
+      brandId: import_zod47.z.string().optional().describe("ID de la brand"),
+      contexto: import_zod47.z.string().describe("Parrafo, keyword o intencion del contenido"),
+      fecha: import_zod47.z.string().describe("Fecha del contenido en ISO YYYY-MM-DD"),
+      limit: import_zod47.z.number().int().min(1).max(10).default(5),
+      diversidad: import_zod47.z.boolean().default(true)
     },
     async ({ brandId: inputBrandId, contexto, fecha, limit, diversidad }) => {
       console.warn(
         "[deprecated] find_products_for_content \u2192 use find_content_for_topic with include.products"
       );
+      const tenantId = session.requireTenant();
       const brandId = inputBrandId ?? session.requireBrand();
-      const newResult = await findContentForTopicHandler(
-        {
+      const ctx = await buildContext(session, brandId);
+      const dispatchResult = await dispatchWithContract({
+        contract: contentFinderContract,
+        helper: (input) => contentFinder({
+          ...input,
+          deps: {
+            generateEmbedding: (q) => generateTextEmbeddingWithOverride(q, session),
+            findNearestInCollection: (params) => findNearestInCollectionWithOverride(
+              params
+            ),
+            rrfMerge
+          }
+        }),
+        callable: callContentFinder,
+        input: {
+          tenantId,
           brandId,
           contexto,
           fecha,
@@ -7602,8 +8616,18 @@ Retorna:
           limit: { products: limit, collections: 0, articles: 0, pages: 0 },
           diversidad
         },
-        session
-      );
+        ctx
+      });
+      if (dispatchResult.state !== "success") {
+        const errPayload = {
+          productos: [],
+          error: dispatchResult.text,
+          state: dispatchResult.state,
+          ...dispatchResult.validationErrors && dispatchResult.validationErrors.length > 0 ? { validationErrors: dispatchResult.validationErrors } : {}
+        };
+        return { content: [{ type: "text", text: JSON.stringify(errPayload) }] };
+      }
+      const newResult = dispatchResult.structuredOutput;
       const productos = (newResult.productos || []).map((r) => ({
         productId: r.id,
         similarity: r.similarity,
@@ -7624,7 +8648,6 @@ Retorna:
               titulo: newResult._temporadaActiva.titulo,
               bloqueo: true
             } : null,
-            // Campo nuevo aditivo (no rompe consumers) — senaliza deprecation
             _deprecated: "Usa find_content_for_topic con include.products en su lugar"
           }, null, 2)
         }]
@@ -7639,32 +8662,47 @@ RETORNA { plantillaId, titulo, thumbnailUrl } o { plantillaId: null, motivo: 'no
 
 USAR: solo si tenant tiene Canva conectado (tenants/{tenantId}/marketing_config/{brandId}.canva.connected=true).`,
     {
-      brandId: import_zod37.z.string().optional().describe("ID de la brand"),
-      plataforma: import_zod37.z.string().describe("gbp | instagram | shopify_blog"),
-      tipoContenido: import_zod37.z.string().describe("post | carousel | story | blog"),
-      keyword: import_zod37.z.string().describe("Keyword del slot")
+      brandId: import_zod47.z.string().optional().describe("ID de la brand"),
+      plataforma: import_zod47.z.string().describe("gbp | instagram | shopify_blog"),
+      tipoContenido: import_zod47.z.string().describe("post | carousel | story | blog"),
+      keyword: import_zod47.z.string().describe("Keyword del slot")
     },
     async ({ brandId: inputBrandId, plataforma, tipoContenido, keyword }) => {
       const tenantId = session.requireTenant();
       const brandId = inputBrandId ?? session.requireBrand();
-      const result = getMode() === "admin" ? await canvaTemplateSelector({
-        db: getAdminDb(),
-        tenantId,
-        brandId,
-        plataforma,
-        tipoContenido,
-        keyword,
-        deps: {
-          generateEmbedding: (q) => generateTextEmbeddingWithOverride(q, session),
-          threshold: 0.6
-        }
-      }) : await callCanvaTemplateSelector({ tenantId, brandId, plataforma, tipoContenido, keyword });
-      return { content: [{ type: "text", text: JSON.stringify(result, null, 2) }] };
+      const ctx = await buildContext(session, brandId);
+      const dispatchResult = await dispatchWithContract({
+        contract: canvaTemplateSelectorContract,
+        helper: (input) => canvaTemplateSelector({
+          ...input,
+          deps: {
+            generateEmbedding: (q) => generateTextEmbeddingWithOverride(q, session),
+            threshold: 0.6
+          }
+        }),
+        callable: callCanvaTemplateSelector,
+        input: { tenantId, brandId, plataforma, tipoContenido, keyword },
+        ctx
+      });
+      if (dispatchResult.state !== "success") {
+        const errPayload = {
+          plantillaId: null,
+          motivo: dispatchResult.state,
+          mensaje: dispatchResult.text,
+          ...dispatchResult.validationErrors && dispatchResult.validationErrors.length > 0 ? { validationErrors: dispatchResult.validationErrors } : {}
+        };
+        return { content: [{ type: "text", text: JSON.stringify(errPayload, null, 2) }] };
+      }
+      return {
+        content: [
+          { type: "text", text: JSON.stringify(dispatchResult.structuredOutput, null, 2) }
+        ]
+      };
     }
   );
   server.tool(
     "request_photo_shoot",
-    `Agrega necesidades al FotoBriefing semanal del tenant. Lo usa Claude cuando detecta gaps fotograficos mientras planifica contenido (get_photos_for_slot retorna < 3 fotos).
+    `Agrega necesidades al FotoBriefing semanal del tenant. The LLM uses this when it detects photo gaps mientras planifica contenido (get_photos_for_slot retorna < 3 fotos).
 
 EFECTO: merge de necesidades en marketing_fotobriefings/{tenantId}_{brandId}_{semana}. Si el doc no existe, lo crea. Idempotente por tema.
 
@@ -7672,15 +8710,15 @@ USAR: cuando get_photos_for_slot retorna pocas fotos y el slot aun no esta cubie
 
 IMPORTANTE \u2014 campo 'razon': Este texto lo ve el tenant en la app. Escribe en lenguaje amigable y claro, NO tecnico. Ejemplo MALO: "get_photos_for_slot retorno 0 fotos para shopify_blog". Ejemplo BUENO: "No hay fotos de alcatraz para el blog del 8 de abril". Siempre en espanol si el tenant habla espanol.`,
     {
-      brandId: import_zod37.z.string().optional().describe("ID de la brand"),
-      semana: import_zod37.z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "semana debe ser ISO YYYY-MM-DD").describe("Semana en ISO del lunes"),
-      necesidades: import_zod37.z.array(
-        import_zod37.z.object({
-          tema: import_zod37.z.string(),
-          keyword: import_zod37.z.string(),
-          cantidadSugerida: import_zod37.z.number().int().positive(),
-          razon: import_zod37.z.string(),
-          slotsAfectados: import_zod37.z.array(import_zod37.z.string()).optional().describe('Refs de slots afectados (formato "semana:N:slot:M")')
+      brandId: import_zod47.z.string().optional().describe("ID de la brand"),
+      semana: import_zod47.z.string().regex(/^\d{4}-\d{2}-\d{2}$/, "semana debe ser ISO YYYY-MM-DD").describe("Semana en ISO del lunes"),
+      necesidades: import_zod47.z.array(
+        import_zod47.z.object({
+          tema: import_zod47.z.string(),
+          keyword: import_zod47.z.string(),
+          cantidadSugerida: import_zod47.z.number().int().positive(),
+          razon: import_zod47.z.string(),
+          slotsAfectados: import_zod47.z.array(import_zod47.z.string()).optional().describe('Refs de slots afectados (formato "semana:N:slot:M")')
         })
       ).min(1)
     },
@@ -7742,6 +8780,193 @@ IMPORTANTE \u2014 campo 'razon': Este texto lo ve el tenant en la app. Escribe e
   );
 }
 
+// src/tools/marketing/content.ts
+var import_zod48 = require("zod");
+var _logOverride = null;
+async function logToMcpLogs(entry) {
+  if (_logOverride) return _logOverride(entry);
+  try {
+    const db = getAdminDb();
+    await db.collection("marketing_mcp_logs").add({
+      ...entry,
+      timestamp: import_firebase_admin.default.firestore.FieldValue.serverTimestamp()
+    });
+  } catch {
+  }
+}
+var IncludeSchema2 = import_zod48.z.object({
+  products: import_zod48.z.boolean().default(true),
+  collections: import_zod48.z.boolean().default(true),
+  articles: import_zod48.z.boolean().default(true),
+  pages: import_zod48.z.boolean().default(false)
+}).default({
+  products: true,
+  collections: true,
+  articles: true,
+  pages: false
+});
+var LimitSchema2 = import_zod48.z.object({
+  products: import_zod48.z.number().int().min(0).max(20).default(5),
+  collections: import_zod48.z.number().int().min(0).max(10).default(3),
+  articles: import_zod48.z.number().int().min(0).max(20).default(5),
+  pages: import_zod48.z.number().int().min(0).max(10).default(2)
+}).default({ products: 5, collections: 3, articles: 5, pages: 2 });
+function registerContentTools(server, session) {
+  server.tool(
+    "find_content_for_topic",
+    `Busca contenido semanticamente relevante del negocio (productos, colecciones, articles, pages) para un contexto/keyword dado, usando vector search multimodal 1408d. Retorna 4 listas en paralelo + JIT context del brand brief y temporada activa.
+
+RETORNA:
+  - productos, colecciones, articles, pages (segun include)
+  - _instrucciones: reglas para linkear contenido
+  - _negativePrompt: negativos visuales del brand brief
+  - _temporadaActiva: si hay coleccion priorizada para la fecha
+  - _detectedConflict / _suggestedActions: si detecta article muy similar (>85%)
+
+USAR:
+  (a) cuando escribas blogs, captions o contenido que linkee material del negocio (internal linking tier 1).
+  (b) cuando el tenant te pregunte que tiene sobre un tema ("tengo algo de flores moradas?", "que productos tengo para regalo de mama?") \u2014 exploracion ad-hoc del catalogo.
+  (c) antes de proponer un tema nuevo al calendario, para validar que el catalogo lo soporte.
+
+MODOS (parametro mode):
+  - 'text' (default): busca contra embeddingText. Rapido, preciso cuando las descripciones del catalogo estan optimizadas. Un solo query por coleccion.
+  - 'hybrid': combina embeddingText + embeddingImage con Reciprocal Rank Fusion. 2x queries por coleccion. Rescata productos que tienen buen visual pero SEO debil en texto \u2014 util para descubrir items que el modo text pierde. Recomendado cuando:
+      * El modo text devuelve pocos resultados
+      * Exploraras tu catalogo y quieres cobertura maxima
+      * Vas a hacer recomendaciones de SEO (items que solo aparecen en image = se\xF1al de texto debil)
+
+Cuando uses hybrid: inspecciona el campo \`modesFound\` en los resultados. 2 = el doc aparecio en ambos modos (alta confianza). 1 = aparecio solo en text (problema visual) o solo en image (problema SEO). Esos "solo image" son candidatos perfectos para recomendar optimizacion al tenant.`,
+    {
+      brandId: import_zod48.z.string().optional().describe("ID de la brand"),
+      contexto: import_zod48.z.string().min(1).describe("Parrafo, keyword o intencion"),
+      fecha: import_zod48.z.string().describe("Fecha del contenido en ISO YYYY-MM-DD"),
+      include: IncludeSchema2.optional(),
+      limit: LimitSchema2.optional(),
+      diversidad: import_zod48.z.boolean().default(true),
+      mode: import_zod48.z.enum(["text", "hybrid"]).default("text").describe("Modo de busqueda: 'text' (rapido, 1 query) o 'hybrid' (text+image via RRF, 2x queries, rescata SEO debil)")
+    },
+    async ({ brandId: inputBrandId, contexto, fecha, include, limit, diversidad, mode }) => {
+      const tenantId = session.requireTenant();
+      const brandId = inputBrandId ?? session.requireBrand();
+      const resolvedInclude = include || {
+        products: true,
+        collections: true,
+        articles: true,
+        pages: false
+      };
+      const resolvedLimit = limit || {
+        products: 5,
+        collections: 3,
+        articles: 5,
+        pages: 2
+      };
+      try {
+        const ctx = await buildContext(session, brandId);
+        const dispatchResult = await dispatchWithContract({
+          contract: contentFinderContract,
+          helper: (input) => contentFinder({
+            ...input,
+            deps: {
+              generateEmbedding: (q) => generateTextEmbeddingWithOverride(q, session),
+              findNearestInCollection: (params) => findNearestInCollectionWithOverride(
+                params
+              ),
+              rrfMerge,
+              thresholds: {
+                text: MARKETING_THRESHOLDS.content.text,
+                image: MARKETING_THRESHOLDS.content.image,
+                conflictSimilarity: MARKETING_THRESHOLDS.content.conflictSimilarity
+              }
+            }
+          }),
+          callable: callContentFinder,
+          input: {
+            tenantId,
+            brandId,
+            contexto,
+            fecha,
+            include: resolvedInclude,
+            limit: resolvedLimit,
+            diversidad,
+            mode
+          },
+          ctx
+        });
+        if (dispatchResult.state !== "success") {
+          const errPayload = {
+            error: dispatchResult.text,
+            state: dispatchResult.state,
+            ...dispatchResult.validationErrors && dispatchResult.validationErrors.length > 0 ? { validationErrors: dispatchResult.validationErrors } : {}
+          };
+          return { content: [{ type: "text", text: JSON.stringify(errPayload) }] };
+        }
+        const result = dispatchResult.structuredOutput;
+        const slimResult = (item) => ({
+          id: item.id,
+          similarity: item.similarity,
+          title: item.title ?? item.nombre ?? null,
+          handle: item.handle ?? null,
+          description: typeof item.description === "string" ? item.description.slice(0, 200) : null,
+          image: item.image ? { src: item.image.src, alt: item.image.alt } : null,
+          collectionHandles: item.collectionHandles ?? null,
+          modesFound: item.modesFound ?? null,
+          rrfScore: item.rrfScore ?? null
+        });
+        const slimmed = {
+          productos: result.productos.map(slimResult),
+          colecciones: result.colecciones.map(slimResult),
+          articles: result.articles.map(slimResult),
+          pages: result.pages.map(slimResult),
+          _instrucciones: result._instrucciones,
+          _negativePrompt: result._negativePrompt,
+          _temporadaActiva: result._temporadaActiva,
+          _suggestedActions: result._suggestedActions,
+          ...result._detectedConflict ? { _detectedConflict: result._detectedConflict } : {}
+        };
+        logToMcpLogs({
+          toolName: "find_content_for_topic",
+          tenantId,
+          brandId,
+          input: {
+            contexto: contexto.slice(0, 500),
+            fecha,
+            include: resolvedInclude,
+            diversidad
+          },
+          output: {
+            productsCount: result.productos.length,
+            collectionsCount: result.colecciones.length,
+            articlesCount: result.articles.length,
+            pagesCount: result.pages.length,
+            _suggestedActionsCount: result._suggestedActions.length,
+            _hadConflict: !!result._detectedConflict,
+            conflictType: result._detectedConflict?.type || null
+          }
+        }).catch((err) => console.error("[mcp_logs] write failed:", err));
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify(slimmed, null, 2)
+            }
+          ]
+        };
+      } catch (err) {
+        return {
+          content: [
+            {
+              type: "text",
+              text: JSON.stringify({
+                error: err.message || "Error desconocido"
+              })
+            }
+          ]
+        };
+      }
+    }
+  );
+}
+
 // src/services/pipelineLink.ts
 var PLATAFORMA_A_PASO = {
   shopify_blog: "blog",
@@ -7826,14 +9051,14 @@ function registerMarketingTools(server, session) {
     "get_calendar",
     "Lee el calendario editorial del mes. Muestra semanas con items planificados por plataforma.",
     {
-      brandId: import_zod38.z.string().optional().describe("ID de la brand"),
-      mes: import_zod38.z.string().optional().describe("Mes en formato YYYY-MM (default: mes actual)")
+      brandId: import_zod49.z.string().optional().describe("ID de la brand"),
+      mes: import_zod49.z.string().optional().describe("Mes en formato YYYY-MM (default: mes actual)")
     },
     async ({ brandId: inputBrandId, mes }) => {
       const tenantId = session.requireTenant();
       const brandId = inputBrandId ?? session.requireBrand();
       const targetMes = mes ?? (/* @__PURE__ */ new Date()).toISOString().slice(0, 7);
-      const ctx = buildMartinContext(session, brandId);
+      const ctx = await buildContext(session, brandId);
       const result = await dispatchWithContract({
         contract: getCalendarContract,
         helper: getCalendar,
@@ -7860,7 +9085,7 @@ function registerMarketingTools(server, session) {
     "get_seo_snapshot",
     "Lee el snapshot SEO de la brand: rank, keywords, oportunidades, competidores.",
     {
-      brandId: import_zod38.z.string().optional().describe("ID de la brand")
+      brandId: import_zod49.z.string().optional().describe("ID de la brand")
     },
     async ({ brandId: inputBrandId }) => {
       const tenantId = session.requireTenant();
@@ -7879,8 +9104,8 @@ function registerMarketingTools(server, session) {
     "get_photo_gallery",
     "Fotos disponibles filtradas por estado. Muestra fotos con metadata y conteo.",
     {
-      brandId: import_zod38.z.string().optional().describe("ID de la brand"),
-      estado: import_zod38.z.string().optional().describe("Filtrar por estado (nueva, procesando, editada, usada, descartada, error)")
+      brandId: import_zod49.z.string().optional().describe("ID de la brand"),
+      estado: import_zod49.z.string().optional().describe("Filtrar por estado (nueva, procesando, editada, usada, descartada, error)")
     },
     async ({ brandId: inputBrandId, estado }) => {
       session.requireTenant();
@@ -7918,32 +9143,32 @@ function registerMarketingTools(server, session) {
   );
   server.tool(
     "generate_marketing_plan",
-    "Prepara los datos necesarios para generar un plan de marketing estrategico. Retorna snapshot SEO + productos para que Claude genere el plan con el system prompt.",
+    "Aggregate the data needed to generate a strategic marketing plan: SEO snapshot + products. The LLM uses the system prompt to generate the plan from this payload.",
     {
-      brandId: import_zod38.z.string().optional().describe("ID de la brand")
+      brandId: import_zod49.z.string().optional().describe("ID de la brand")
     },
     async ({ brandId: inputBrandId }) => {
       const tenantId = session.requireTenant();
       const brandId = inputBrandId ?? session.requireBrand();
-      const result = getMode() === "admin" ? await marketingPlanBuilder({ db: getAdminDb(), tenantId, brandId }) : await callMarketingPlanBuilder({ tenantId, brandId });
+      const result = getSdkMode() === "admin" ? await marketingPlanBuilder({ db: getAdminDb(), tenantId, brandId }) : await callMarketingPlanBuilder({ tenantId, brandId });
       const payload = result.ok ? result.payload : result;
       return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }] };
     }
   );
   server.tool(
     "save_marketing_plan",
-    "Guarda el plan de marketing generado por Claude en la configuracion de la brand. Escribe en tenants/{tenantId}/marketing_config/{brandId}.plan.",
+    "Save a marketing plan to the brand configuration. Writes to tenants/{tenantId}/marketing_config/{brandId}.plan. If the plan object includes a blogStrategy field, it is extracted and stored at brand level (not nested inside plan).",
     {
-      brandId: import_zod38.z.string().optional().describe("ID de la brand"),
-      plan: import_zod38.z.record(import_zod38.z.string(), import_zod38.z.unknown()).describe("Plan de marketing generado (keywordsPrioritarios, gapsCompetencia, temporadas, tonoMarca, quickWins, etc.)")
+      brandId: import_zod49.z.string().optional().describe("Brand ID. If omitted, uses the active brand from session context."),
+      plan: import_zod49.z.record(import_zod49.z.string(), import_zod49.z.unknown()).describe("Full marketing plan object. Common fields: keywordsPrioritarios, gapsCompetencia, temporadas, tonoMarca, quickWins, coleccionesPriorizadas, blogStrategy.")
     },
     async ({ brandId: inputBrandId, plan }) => {
       const tenantId = session.requireTenant();
       const brandId = inputBrandId ?? session.requireBrand();
-      const ctx = buildMartinContext(session, brandId);
+      const ctx = await buildContext(session, brandId);
       const result = await dispatchWithContract({
         contract: planWriterSaveContract,
-        helper: planWriter.save,
+        helper: ({ db, ...rest }) => planWriter.save({ db, ...rest }),
         callable: callPlanWriterSave,
         input: { tenantId, brandId, plan },
         ctx
@@ -7952,8 +9177,8 @@ function registerMarketingTools(server, session) {
         ok: false,
         state: result.state,
         mensaje: result.text,
-        // HITO 6 A6.7: incluir detalles Zod estructurados para que
-        // Claude (LLM) pueda auto-recuperarse en el siguiente intento.
+        // HITO 6 A6.7: include structured Zod details so
+        // the LLM can self-recover on the next attempt.
         ...result.validationErrors && result.validationErrors.length > 0 ? { validationErrors: result.validationErrors } : {}
       };
       return { content: [{ type: "text", text: JSON.stringify(payload) }] };
@@ -7963,27 +9188,27 @@ function registerMarketingTools(server, session) {
     "update_marketing_plan_field",
     "Actualiza UN campo del plan de marketing sin sobreescribir el resto. Merge parcial. Ideal para agregar coleccionesPriorizadas, actualizar quickWins, etc.",
     {
-      brandId: import_zod38.z.string().optional().describe("ID de la brand"),
-      field: import_zod38.z.string().describe('Nombre del campo a actualizar (ej: "coleccionesPriorizadas", "quickWins", "temporadas")'),
-      value: import_zod38.z.unknown().describe("Valor del campo")
+      brandId: import_zod49.z.string().optional().describe("ID de la brand"),
+      field: import_zod49.z.string().describe('Nombre del campo a actualizar (ej: "coleccionesPriorizadas", "quickWins", "temporadas")'),
+      value: import_zod49.z.unknown().describe("Valor del campo")
     },
     async ({ brandId: inputBrandId, field, value }) => {
       const tenantId = session.requireTenant();
       const brandId = inputBrandId ?? session.requireBrand();
-      const result = getMode() === "admin" ? await planWriter.updateField({ db: getAdminDb(), tenantId, brandId, field, value }) : await callPlanWriterUpdateField({ tenantId, brandId, field, value });
+      const result = getSdkMode() === "admin" ? await planWriter.updateField({ db: getAdminDb(), tenantId, brandId, field, value }) : await callPlanWriterUpdateField({ tenantId, brandId, field, value });
       return { content: [{ type: "text", text: JSON.stringify(result) }] };
     }
   );
   server.tool(
     "generate_brand_brief",
-    "Prepara todos los datos del negocio para que Claude genere un Brand Brief pre-llenado. Retorna Shopify + SEO + GBP + tenant data. Claude genera el brief, luego usa save_brand_brief para guardar.",
+    "Aggregate all business data needed to generate a Brand Brief: Shopify (products, collections, orders, shop info), SEO snapshot, GBP profiles, scraped site_content, brand config, tenant locations. Read-only \u2014 does NOT write the brief. After receiving the payload, generate the brief content and save it via save_brand_brief.",
     {
-      brandId: import_zod38.z.string().optional().describe("ID de la brand")
+      brandId: import_zod49.z.string().optional().describe("Brand ID. If omitted, uses the active brand from session context.")
     },
     async ({ brandId: inputBrandId }) => {
       const tenantId = session.requireTenant();
       const brandId = inputBrandId ?? session.requireBrand();
-      const ctx = buildMartinContext(session, brandId);
+      const ctx = await buildContext(session, brandId);
       const result = await dispatchWithContract({
         contract: brandBriefBuilderContract,
         helper: brandBriefBuilder,
@@ -8004,77 +9229,93 @@ function registerMarketingTools(server, session) {
   );
   server.tool(
     "save_brand_brief",
-    "Guarda el Brand Brief generado por Claude en tenants/{tenantId}/marketing_config/{brandId}.brandBrief. Escribe solo ese campo (merge parcial, no rebuild del doc).",
+    "Save the Brand Brief at tenants/{tenantId}/marketing_config/{brandId}.brandBrief. Partial merge \u2014 only the brandBrief field is overwritten.",
     {
-      brandId: import_zod38.z.string().optional().describe("ID de la brand"),
-      brandBrief: import_zod38.z.record(import_zod38.z.string(), import_zod38.z.unknown()).describe("Brand Brief completo generado por Claude")
+      brandId: import_zod49.z.string().optional().describe("ID de la brand"),
+      brandBrief: import_zod49.z.record(import_zod49.z.string(), import_zod49.z.unknown()).describe("Full Brand Brief object.")
     },
     async ({ brandId: inputBrandId, brandBrief }) => {
       const tenantId = session.requireTenant();
       const brandId = inputBrandId ?? session.requireBrand();
-      const result = getMode() === "admin" ? await brandBriefWriter({ db: getAdminDb(), tenantId, brandId, brandBrief }) : await callBrandBriefWriter({ tenantId, brandId, brandBrief });
-      return { content: [{ type: "text", text: JSON.stringify(result) }] };
+      const ctx = await buildContext(session, brandId);
+      const result = await dispatchWithContract({
+        contract: brandBriefWriterContract,
+        helper: brandBriefWriter,
+        callable: callBrandBriefWriter,
+        input: { tenantId, brandId, brandBrief },
+        ctx
+      });
+      const payload = result.state === "success" ? result.structuredOutput : {
+        ok: false,
+        state: result.state,
+        mensaje: result.text,
+        ...result.validationErrors && result.validationErrors.length > 0 ? { validationErrors: result.validationErrors } : {}
+      };
+      return { content: [{ type: "text", text: JSON.stringify(payload) }] };
     }
   );
   server.tool(
     "generate_weekly_content",
-    "Prepara datos del calendario + fotos + plan para generar el contenido de la semana. Claude genera con el system prompt, luego usa save_generated_content para guardar.",
+    "Aggregate calendar + photos + plan data to generate the week's content. The LLM generates with the system prompt, then uses save_generated_content to persist.",
     {
-      brandId: import_zod38.z.string().optional().describe("ID de la brand"),
-      semana: import_zod38.z.number().optional().describe("Numero de semana (1-5). Default: semana actual del mes."),
-      modo: import_zod38.z.enum(["planificar", "generar"]).optional().describe("'planificar' = proponer distribucion (plataforma+keyword por dia). 'generar' = generar contenido real para slots ya planificados. Default: 'planificar'.")
+      brandId: import_zod49.z.string().optional().describe("ID de la brand"),
+      semana: import_zod49.z.number().optional().describe("Numero de semana (1-5). Default: semana actual del mes."),
+      modo: import_zod49.z.enum(["planificar", "generar"]).optional().describe("'planificar' = proponer distribucion (plataforma+keyword por dia). 'generar' = generar contenido real para slots ya planificados. Default: 'planificar'.")
     },
     async ({ brandId: inputBrandId, semana, modo }) => {
       const tenantId = session.requireTenant();
       const brandId = inputBrandId ?? session.requireBrand();
-      const result = getMode() === "admin" ? await weeklyContentBuilder({ db: getAdminDb(), tenantId, brandId, semana, modo }) : await callWeeklyContentBuilder({ tenantId, brandId, semana, modo });
-      const payload = result.ok ? result.payload : result;
+      const ctx = await buildContext(session, brandId);
+      const result = await dispatchWithContract({
+        contract: weeklyContentBuilderContract,
+        helper: weeklyContentBuilder,
+        callable: callWeeklyContentBuilder,
+        input: { tenantId, brandId, semana, modo },
+        ctx
+      });
+      const payload = result.state === "success" ? result.structuredOutput?.payload ?? result.structuredOutput : {
+        ok: false,
+        state: result.state,
+        mensaje: result.text,
+        ...result.validationErrors && result.validationErrors.length > 0 ? { validationErrors: result.validationErrors } : {}
+      };
       return { content: [{ type: "text", text: JSON.stringify(payload, null, 2) }] };
     }
   );
   server.tool(
     "save_generated_content",
-    `Guarda contenido generado por Claude en Firestore. Usa buildContenido para validar la estructura.
+    `Save generated content to Firestore. Uses buildContenido to validate the structure.
 
-IMPORTANTE: Si seleccionaste una foto con get_photos_for_slot, SIEMPRE pasa fotoId aqu\xED. Sin fotoId el post se publica sin imagen.`,
+IMPORTANT: If you selected a photo with get_photos_for_slot, ALWAYS pass fotoId here. Without fotoId the post will be published without an image.`,
     {
-      brandId: import_zod38.z.string().optional().describe("ID de la brand"),
-      plataforma: import_zod38.z.enum(["gbp", "shopify_blog", "instagram", "review"]).describe("Plataforma destino"),
-      tipo: import_zod38.z.string().optional().describe("Tipo de contenido (post, blog, carousel, etc.)"),
-      keyword: import_zod38.z.string().optional().describe("Keyword target"),
-      languageCode: import_zod38.z.string().optional().describe("Idioma (es/en)"),
-      fotoId: import_zod38.z.string().optional().describe("ID de la foto a asociar"),
-      datos: import_zod38.z.record(import_zod38.z.string(), import_zod38.z.unknown()).describe("Datos especificos de la plataforma (output de buildDatos*)"),
-      calendarioItemRef: import_zod38.z.string().optional().describe("Referencia al item del calendario")
+      brandId: import_zod49.z.string().optional().describe("ID de la brand"),
+      plataforma: import_zod49.z.enum(["gbp", "shopify_blog", "instagram", "review"]).describe("Plataforma destino"),
+      tipo: import_zod49.z.string().optional().describe("Tipo de contenido (post, blog, carousel, etc.)"),
+      keyword: import_zod49.z.string().optional().describe("Keyword target"),
+      languageCode: import_zod49.z.string().optional().describe("Idioma (es/en)"),
+      fotoId: import_zod49.z.string().optional().describe("ID de la foto a asociar"),
+      datos: import_zod49.z.record(import_zod49.z.string(), import_zod49.z.unknown()).describe("Datos especificos de la plataforma (output de buildDatos*)"),
+      calendarioItemRef: import_zod49.z.string().optional().describe("Referencia al item del calendario")
     },
     async ({ brandId: inputBrandId, plataforma, tipo, keyword, languageCode, fotoId, datos, calendarioItemRef }) => {
       const tenantId = session.requireTenant();
       const brandId = inputBrandId ?? session.requireBrand();
       try {
-        const result = getMode() === "admin" ? await contenidoWriter({
-          db: getAdminDb(),
-          tenantId,
-          brandId,
-          plataforma,
-          tipo,
-          keyword,
-          languageCode,
-          fotoId,
-          datos,
-          calendarioItemRef,
-          linkPipeline: linkContenidoAPasoPipeline
-        }) : await callContenidoWriter({
-          tenantId,
-          brandId,
-          plataforma,
-          tipo,
-          keyword,
-          languageCode,
-          fotoId,
-          datos,
-          calendarioItemRef
+        const ctx = await buildContext(session, brandId);
+        const result = await dispatchWithContract({
+          contract: contenidoWriterContract,
+          helper: (input) => contenidoWriter({ ...input, linkPipeline: linkContenidoAPasoPipeline }),
+          callable: callContenidoWriter,
+          input: { tenantId, brandId, plataforma, tipo, keyword, languageCode, fotoId, datos, calendarioItemRef },
+          ctx
         });
-        return { content: [{ type: "text", text: JSON.stringify(result) }] };
+        const payload = result.state === "success" ? result.structuredOutput : {
+          ok: false,
+          state: result.state,
+          mensaje: result.text,
+          ...result.validationErrors && result.validationErrors.length > 0 ? { validationErrors: result.validationErrors } : {}
+        };
+        return { content: [{ type: "text", text: JSON.stringify(payload) }] };
       } catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
         console.error("[save_generated_content] UNCAUGHT ERROR:", msg);
@@ -8090,61 +9331,64 @@ Usa para: corregir body, metaTitle, tags, fotoId, o cualquier campo sin tener qu
 NO puede cambiar: tenantId, brandId, id (inmutables).
 Si pasas campos dentro de "datos", se hace merge con los datos existentes (no los reemplaza entero).`,
     {
-      contenidoId: import_zod38.z.string().describe("ID del doc en marketing_contenido"),
-      datos: import_zod38.z.record(import_zod38.z.string(), import_zod38.z.unknown()).optional().describe('Campos de datos a actualizar (merge parcial sobre datos existentes). Ej: { body: "...", metaTitle: "..." }'),
-      fotoId: import_zod38.z.string().nullable().optional().describe("Actualizar foto asociada"),
-      keyword: import_zod38.z.string().nullable().optional().describe("Actualizar keyword"),
-      languageCode: import_zod38.z.string().optional().describe("Actualizar idioma"),
-      estado: import_zod38.z.enum(["borrador", "generado", "pendiente_aprobacion", "aprobado", "rechazado"]).optional().describe("Cambiar estado manualmente"),
-      calendarioItemRef: import_zod38.z.string().nullable().optional().describe("Vincular a un slot del calendario")
+      contenidoId: import_zod49.z.string().describe("ID del doc en marketing_contenido"),
+      datos: import_zod49.z.record(import_zod49.z.string(), import_zod49.z.unknown()).optional().describe('Campos de datos a actualizar (merge parcial sobre datos existentes). Ej: { body: "...", metaTitle: "..." }'),
+      fotoId: import_zod49.z.string().nullable().optional().describe("Actualizar foto asociada"),
+      keyword: import_zod49.z.string().nullable().optional().describe("Actualizar keyword"),
+      languageCode: import_zod49.z.string().optional().describe("Actualizar idioma"),
+      estado: import_zod49.z.enum(["borrador", "generado", "pendiente_aprobacion", "aprobado", "rechazado"]).optional().describe("Cambiar estado manualmente"),
+      calendarioItemRef: import_zod49.z.string().nullable().optional().describe("Vincular a un slot del calendario")
     },
     async ({ contenidoId, datos: newDatos, fotoId, keyword, languageCode, estado, calendarioItemRef }) => {
       const tenantId = session.requireTenant();
-      const result = getMode() === "admin" ? await contenidoUpdater({
-        db: getAdminDb(),
-        tenantId,
-        contenidoId,
-        datos: newDatos,
-        fotoId,
-        keyword,
-        languageCode,
-        estado,
-        calendarioItemRef
-      }) : await callContenidoUpdater({
-        tenantId,
-        contenidoId,
-        datos: newDatos,
-        fotoId,
-        keyword,
-        languageCode,
-        estado,
-        calendarioItemRef
+      const ctx = await buildContext(session, null);
+      const result = await dispatchWithContract({
+        contract: contenidoUpdaterContract,
+        helper: contenidoUpdater,
+        callable: callContenidoUpdater,
+        input: {
+          tenantId,
+          contenidoId,
+          datos: newDatos,
+          fotoId,
+          keyword,
+          languageCode,
+          estado,
+          calendarioItemRef
+        },
+        ctx
       });
-      return { content: [{ type: "text", text: JSON.stringify(result) }] };
+      const payload = result.state === "success" ? result.structuredOutput : {
+        ok: false,
+        state: result.state,
+        mensaje: result.text,
+        ...result.validationErrors && result.validationErrors.length > 0 ? { validationErrors: result.validationErrors } : {}
+      };
+      return { content: [{ type: "text", text: JSON.stringify(payload) }] };
     }
   );
   server.tool(
     "add_calendar_slot",
-    "Agrega un slot NUEVO al calendario editorial. Para modificar un slot existente usa update_calendar_slot.",
+    "Add a NEW slot to the editorial calendar. To modify an existing slot use update_calendar_slot instead.",
     {
-      brandId: import_zod38.z.string().describe("ID de la brand"),
-      mes: import_zod38.z.string().describe("Mes del calendario en formato YYYY-MM"),
-      semana: import_zod38.z.number().describe("Numero de semana (1-5)"),
-      slot: import_zod38.z.object({
-        dia: import_zod38.z.string().describe("Fecha del slot en formato YYYY-MM-DD. Debe caer dentro del rango fechaInicio/fechaFin de la semana indicada."),
-        plataforma: import_zod38.z.enum(["gbp", "shopify_blog", "instagram", "review"]).describe("Plataforma destino"),
-        tipo: import_zod38.z.enum(["post", "blog", "carousel", "reel", "story", "review_response"]).describe("Tipo de contenido"),
-        keyword: import_zod38.z.string().describe("Keyword principal del contenido"),
-        tema: import_zod38.z.string().optional().describe("Tema del contenido. OMITE el campo si no aplica, no envies cadena vacia ni null."),
-        productoId: import_zod38.z.string().optional().describe("ID de producto vinculado. OMITE el campo si no aplica."),
-        estado: import_zod38.z.enum(["planificado", "pre_aprobado", "generado", "revisar", "aprobado", "publicado", "rechazado"]).optional().describe("Estado inicial. OMITE si quieres default 'planificado'."),
-        locationId: import_zod38.z.string().optional().describe("GBP location ID \u2014 solo si plataforma=gbp y multi-sucursal. OMITE si no aplica."),
-        locationNombre: import_zod38.z.string().optional().describe("Nombre de la sucursal GBP. OMITE si no aplica.")
-      }).describe("Datos del slot nuevo")
+      brandId: import_zod49.z.string().describe('Brand ID (e.g. "ponch", "teleglobos").'),
+      mes: import_zod49.z.string().describe('Calendar month in YYYY-MM format (e.g. "2026-05").'),
+      semana: import_zod49.z.number().describe("Week number within the month (1-5)."),
+      slot: import_zod49.z.object({
+        dia: import_zod49.z.string().describe("Slot date in YYYY-MM-DD format. Must fall within the week's fechaInicio/fechaFin range."),
+        plataforma: import_zod49.z.enum(["gbp", "shopify_blog", "instagram", "review"]).describe("Target publishing platform."),
+        tipo: import_zod49.z.enum(["post", "blog", "carousel", "reel", "story", "review_response"]).describe("Content type."),
+        keyword: import_zod49.z.string().describe("Primary keyword for the content."),
+        tema: import_zod49.z.string().optional().describe("Content topic/theme. OMIT this field if it does not apply. Do NOT send empty string or null."),
+        productoId: import_zod49.z.string().optional().describe("Linked product ID. OMIT this field if no product is linked."),
+        estado: import_zod49.z.enum(["planificado", "pre_aprobado", "generado", "revisar", "aprobado", "publicado", "rechazado"]).optional().describe('Initial status. OMIT to use default "planificado".'),
+        locationId: import_zod49.z.string().optional().describe("GBP location ID \u2014 only when plataforma=gbp AND tenant is multi-location. OMIT otherwise."),
+        locationNombre: import_zod49.z.string().optional().describe("Human-readable GBP location name. OMIT if locationId is not provided.")
+      }).describe("New slot data.")
     },
     async ({ brandId, mes, semana, slot }) => {
       const tenantId = session.requireTenant();
-      const ctx = buildMartinContext(session, brandId);
+      const ctx = await buildContext(session, brandId);
       const result = await dispatchWithContract({
         contract: addCalendarSlotContract,
         helper: addCalendarSlot,
@@ -8163,40 +9407,48 @@ Si pasas campos dentro de "datos", se hace merge con los datos existentes (no lo
   );
   server.tool(
     "update_calendar_slot",
-    "MODIFICA un slot EXISTENTE del calendario editorial. Para crear un slot nuevo usa add_calendar_slot. Si slotIndex no existe, retorna error SLOT_NOT_FOUND.",
+    "MODIFY an EXISTING slot in the editorial calendar. To create a new slot use add_calendar_slot. If slotIndex does not exist, returns error SLOT_NOT_FOUND.",
     {
-      brandId: import_zod38.z.string().optional().describe("ID de la brand"),
-      mes: import_zod38.z.string().describe("Mes del calendario (YYYY-MM)"),
-      semana: import_zod38.z.number().describe("Numero de semana (1-5)"),
-      slotIndex: import_zod38.z.number().describe("Indice del slot (0-based). Si >= items.length, agrega nuevo slot al final."),
-      cambios: import_zod38.z.object({
-        dia: import_zod38.z.string().nullable().optional(),
-        plataforma: import_zod38.z.enum(["gbp", "shopify_blog", "instagram", "review"]).nullable().optional(),
-        tipo: import_zod38.z.enum(["post", "blog", "carousel", "reel", "story", "review_response"]).nullable().optional(),
-        keyword: import_zod38.z.string().nullable().optional(),
-        tema: import_zod38.z.string().nullable().optional(),
-        productoId: import_zod38.z.string().nullable().optional(),
-        estado: import_zod38.z.enum(["planificado", "pre_aprobado", "generado", "revisar", "aprobado", "publicado", "rechazado"]).optional(),
-        contenidoRef: import_zod38.z.string().nullable().optional(),
-        fotoIdAsignada: import_zod38.z.string().nullable().optional(),
-        notas: import_zod38.z.array(NotaCalendarioSchema).optional(),
-        locationId: import_zod38.z.string().nullable().optional().describe("GBP location ID \u2014 a qu\xE9 sucursal publicar el post"),
-        locationNombre: import_zod38.z.string().nullable().optional().describe("Nombre de la sucursal GBP (para UI)")
-      }).strict().describe("Campos del slot. Solo acepta campos validos del schema. Campos no reconocidos seran rechazados."),
-      accionContenidoExistente: import_zod38.z.union([
-        import_zod38.z.enum(["descartar", "nuevo_slot", "mantener"]),
-        import_zod38.z.string().regex(/^mover:semana:\d+:slot:\d+$/, "Formato: mover:semana:N:slot:M")
+      brandId: import_zod49.z.string().optional().describe("Brand ID. If omitted, uses the active brand from session context."),
+      mes: import_zod49.z.string().describe("Calendar month in YYYY-MM format."),
+      semana: import_zod49.z.number().describe("Week number within the month (1-5)."),
+      slotIndex: import_zod49.z.number().describe("Slot index (0-based). Must point to an existing slot \u2014 to add new slots use add_calendar_slot."),
+      cambios: import_zod49.z.object({
+        dia: import_zod49.z.string().nullable().optional().describe("Slot date in YYYY-MM-DD. OMIT if not changing date. Use null to explicitly clear."),
+        plataforma: import_zod49.z.enum(["gbp", "shopify_blog", "instagram", "review"]).nullable().optional().describe("OMIT if not changing platform."),
+        tipo: import_zod49.z.enum(["post", "blog", "carousel", "reel", "story", "review_response"]).nullable().optional().describe("OMIT if not changing content type."),
+        keyword: import_zod49.z.string().nullable().optional().describe("OMIT if not changing keyword."),
+        tema: import_zod49.z.string().nullable().optional().describe("OMIT if not changing topic."),
+        productoId: import_zod49.z.string().nullable().optional().describe("OMIT if not changing linked product. Use null to unlink."),
+        estado: import_zod49.z.enum(["planificado", "pre_aprobado", "generado", "revisar", "aprobado", "publicado", "rechazado"]).optional().describe("OMIT if not changing status manually."),
+        contenidoRef: import_zod49.z.string().nullable().optional().describe("OMIT \u2014 managed by the system, not by callers."),
+        fotoIdAsignada: import_zod49.z.string().nullable().optional().describe("Use assign_photo_to_content for photos. OMIT here."),
+        notas: import_zod49.z.array(NotaCalendarioSchema).optional().describe("Append-only notes for the slot."),
+        locationId: import_zod49.z.string().nullable().optional().describe("GBP location ID \u2014 only when plataforma=gbp."),
+        locationNombre: import_zod49.z.string().nullable().optional().describe("Human-readable GBP location name (for UI).")
+      }).strict().describe("Fields to update on the slot. Only declared fields accepted; unknown fields are rejected. OMIT any field you are not changing."),
+      accionContenidoExistente: import_zod49.z.union([
+        import_zod49.z.enum(["descartar", "nuevo_slot", "mantener"]),
+        import_zod49.z.string().regex(/^mover:semana:\d+:slot:\d+$/, "Format: mover:semana:N:slot:M")
       ]).optional().describe(
-        "Decision del tenant cuando el slot ya tiene un contenidoRef existente Y los cambios tocan keyword/tema/plataforma/tipo. Requerido en ese escenario (si no se pasa, el helper retorna ACCION_CONTENIDO_EXISTENTE_REQUIRED con las 4 opciones para que preguntes al tenant). Valores: 'descartar' (marca el contenido existente como descartado y aplica cambios al slot) | 'mover:semana:N:slot:M' (mueve el contenido existente al slot destino vacio y aplica cambios al slot origen) | 'nuevo_slot' (NO toca este slot ni su contenido; crea un slot nuevo el mismo dia con los cambios \u2014 util para multiples publicaciones/dia) | 'mantener' (conserva el contenido existente aqui y aplica los cambios igualmente \u2014 caso typo fix)."
+        'Required ONLY when the slot already has a contenidoRef AND the cambios touch semantic fields (keyword/tema/plataforma/tipo). In that case, the helper returns ACCION_CONTENIDO_EXISTENTE_REQUIRED with the 4 options listed below \u2014 ask the tenant which one to apply. OMIT this field in any other case. Do NOT send null. Valid values: "descartar" (mark existing content as discarded and apply changes to this slot) | "mover:semana:N:slot:M" (move existing content to target empty slot N/M and apply changes to origin slot) | "nuevo_slot" (do NOT touch this slot or its content; create a new slot same day with the changes \u2014 useful for multiple posts per day) | "mantener" (keep existing content here and apply changes anyway \u2014 typo-fix case where old content stays valid).'
       )
     },
     async ({ brandId: inputBrandId, mes, semana, slotIndex, cambios, accionContenidoExistente }) => {
       const tenantId = session.requireTenant();
       const brandId = inputBrandId ?? session.requireBrand();
-      const ctx = buildMartinContext(session, brandId);
+      const ctx = await buildContext(session, brandId);
       const result = await dispatchWithContract({
         contract: calendarSlotUpdaterContract,
-        helper: calendarSlotUpdater,
+        // Wrap en arrow para que TS infiera el tipo del input desde el
+        // schema del contract (acepta `cambios: Record<string, unknown>`),
+        // no desde la interface estricta CalendarSlotUpdaterInput.
+        // El helper internamente acepta el shape — Zod ya valido en el wrapper.
+        helper: (input) => calendarSlotUpdater({
+          ...input,
+          cambios: input.cambios,
+          accionContenidoExistente: input.accionContenidoExistente
+        }),
         callable: callCalendarSlotUpdater,
         input: { tenantId, brandId, mes, semana, slotIndex, cambios, accionContenidoExistente },
         ctx
@@ -8205,8 +9457,8 @@ Si pasas campos dentro de "datos", se hace merge con los datos existentes (no lo
         ok: false,
         state: result.state,
         mensaje: result.text,
-        // HITO 6 A6.7: incluir detalles Zod estructurados para que
-        // Claude (LLM) pueda auto-recuperarse en el siguiente intento.
+        // HITO 6 A6.7: include structured Zod details so
+        // the LLM can self-recover on the next attempt.
         ...result.validationErrors && result.validationErrors.length > 0 ? { validationErrors: result.validationErrors } : {}
       };
       return { content: [{ type: "text", text: JSON.stringify(payload) }] };
@@ -8222,22 +9474,35 @@ ESCRIBE EN DOS LUGARES:
 
 NUNCA uses update_calendar_slot para asignar fotos \u2014 eso escribe en la agenda, no en el post.`,
     {
-      contenidoRef: import_zod38.z.string().describe("ID del doc en marketing_contenido"),
-      fotoId: import_zod38.z.string().describe("ID de la foto en marketing_fotos (estado editada)"),
-      calendarioItemRef: import_zod38.z.string().optional().describe('Ref del slot (formato "semana:N:slot:M") para actualizar fotoIdAsignada')
+      contenidoRef: import_zod49.z.string().describe("ID del doc en marketing_contenido"),
+      fotoId: import_zod49.z.string().describe("ID de la foto en marketing_fotos (estado editada)"),
+      calendarioItemRef: import_zod49.z.string().optional().describe('Ref del slot (formato "semana:N:slot:M") para actualizar fotoIdAsignada')
     },
     async ({ contenidoRef, fotoId, calendarioItemRef }) => {
       const tenantId = session.requireTenant();
       const brandId = session.requireBrand();
-      const result = getMode() === "admin" ? await photoAssigner({ db: getAdminDb(), tenantId, brandId, contenidoRef, fotoId, calendarioItemRef }) : await callPhotoAssigner({ tenantId, brandId, contenidoRef, fotoId, calendarioItemRef });
-      return { content: [{ type: "text", text: JSON.stringify(result) }] };
+      const ctx = await buildContext(session, brandId);
+      const result = await dispatchWithContract({
+        contract: photoAssignerContract,
+        helper: photoAssigner,
+        callable: callPhotoAssigner,
+        input: { tenantId, brandId, contenidoRef, fotoId, calendarioItemRef },
+        ctx
+      });
+      const payload = result.state === "success" ? result.structuredOutput : {
+        ok: false,
+        state: result.state,
+        mensaje: result.text,
+        ...result.validationErrors && result.validationErrors.length > 0 ? { validationErrors: result.validationErrors } : {}
+      };
+      return { content: [{ type: "text", text: JSON.stringify(payload) }] };
     }
   );
   server.tool(
     "approve_content",
     "Aprueba contenido para publicacion. Valida transicion de estado.",
     {
-      contenidoId: import_zod38.z.string().describe("ID del contenido a aprobar")
+      contenidoId: import_zod49.z.string().describe("ID del contenido a aprobar")
     },
     async ({ contenidoId }) => {
       session.requireTenant();
@@ -8261,8 +9526,8 @@ NUNCA uses update_calendar_slot para asignar fotos \u2014 eso escribe en la agen
     "reject_content",
     "Rechaza contenido con motivo. Valida transicion de estado.",
     {
-      contenidoId: import_zod38.z.string().describe("ID del contenido a rechazar"),
-      motivo: import_zod38.z.string().describe("Motivo del rechazo")
+      contenidoId: import_zod49.z.string().describe("ID del contenido a rechazar"),
+      motivo: import_zod49.z.string().describe("Motivo del rechazo")
     },
     async ({ contenidoId, motivo }) => {
       session.requireTenant();
@@ -8285,7 +9550,7 @@ NUNCA uses update_calendar_slot para asignar fotos \u2014 eso escribe en la agen
     "get_collections",
     "Lee todas las colecciones canonicas (Shopify/WordPress/webonly) con sus 6 campos SEO actuales. Incluye best practices 2026.",
     {
-      brandId: import_zod38.z.string().optional().describe("ID de la brand")
+      brandId: import_zod49.z.string().optional().describe("ID de la brand")
     },
     async ({ brandId: inputBrandId }) => {
       const tenantId = session.requireTenant();
@@ -8372,22 +9637,35 @@ NUNCA uses update_calendar_slot para asignar fotos \u2014 eso escribe en la agen
     "save_collection_suggestions",
     "Guarda sugerencias SEO para colecciones de Shopify. El tenant las aprueba en la UI.",
     {
-      brandId: import_zod38.z.string().optional().describe("ID de la brand"),
+      brandId: import_zod49.z.string().optional().describe("ID de la brand"),
       suggestions: CollectionSuggestionsInputArraySchema.describe("Array de sugerencias SEO. Cada una con max 60 chars en metaTitle, max 158 en metaDescription, max 125 en imageAlt")
     },
     async ({ brandId: inputBrandId, suggestions }) => {
       const tenantId = session.requireTenant();
       const brandId = inputBrandId ?? session.requireBrand();
-      const result = getMode() === "admin" ? await collectionSuggestionsWriter({ db: getAdminDb(), tenantId, brandId, suggestions }) : await callCollectionSuggestionsWriter({ tenantId, brandId, suggestions });
-      return { content: [{ type: "text", text: JSON.stringify(result) }] };
+      const ctx = await buildContext(session, brandId);
+      const result = await dispatchWithContract({
+        contract: collectionSuggestionsWriterContract,
+        helper: collectionSuggestionsWriter,
+        callable: callCollectionSuggestionsWriter,
+        input: { tenantId, brandId, suggestions },
+        ctx
+      });
+      const payload = result.state === "success" ? result.structuredOutput : {
+        ok: false,
+        state: result.state,
+        mensaje: result.text,
+        ...result.validationErrors && result.validationErrors.length > 0 ? { validationErrors: result.validationErrors } : {}
+      };
+      return { content: [{ type: "text", text: JSON.stringify(payload) }] };
     }
   );
 }
 
 // src/index.ts
 async function buildSystemPrompt2(session) {
-  const mode2 = getMode();
-  if (mode2 === "admin") {
+  const mode = getSdkMode();
+  if (mode === "admin") {
     const db = getAdminDb();
     return buildSystemPrompt({
       db,
@@ -8404,7 +9682,9 @@ async function buildSystemPrompt2(session) {
 async function main() {
   const authContext = resolveAuth();
   const session = new Session(authContext);
-  console.error(`[ponch-mcp] Modo: ${authContext.mode}`);
+  console.error(
+    `[ponch-mcp] Auth resuelto. canSwitchTenant=${authContext.canSwitchTenant} tenantId=${authContext.tenantId ?? "(none)"} rol=${authContext.rol ?? "(none)"}`
+  );
   let firebaseReady = false;
   if (authContext.serviceAccountPath) {
     initFirebaseAdmin(authContext.serviceAccountPath);
@@ -8416,7 +9696,7 @@ async function main() {
       console.error(`[ponch-mcp] Firebase Client autenticado. Tenant: ${authContext.tenantId}`);
     } else {
       console.error("[ponch-mcp] Token expirado. Usa connect_account para reconectar.");
-      session.forceMode("tenant");
+      session.revokeCrossTenant();
     }
   } else {
     console.error("[ponch-mcp] Sin conexion. Usa connect_account para conectar.");
@@ -8425,6 +9705,13 @@ async function main() {
     name: "ponch",
     version: "1.0.1"
   });
+  server.server.oninitialized = () => {
+    const ci = server.server.getClientVersion();
+    if (ci) {
+      session.setMcpClientIdentity(ci.name ?? null, ci.version ?? null);
+      console.error(`[ponch-mcp] Cliente MCP: ${ci.name ?? "(sin name)"} v${ci.version ?? "(sin version)"}`);
+    }
+  };
   server.resource(
     "system-prompt",
     "ponch://system-prompt",