@rolino/cli 0.4.0 → 0.5.0

package/CHANGELOG.md

@@ -1,5 +1,85 @@
 # @rolino/cli
 
+## 0.5.0
+
+### Minor Changes
+
+- 4f9e790: Add the optional `blog:manage` capability and synchronized agent-first Blog
+  setup, import, cadence planning, plan review, article creation, confirmed
+  connection provisioning, and safe verification operations.
+- 1edd1e7: Add published Blog Studio delivery contracts and the server-only Next.js 16 Blog Studio package.
+- 74a13ea: Expose immediate versus scheduled delivery and destination lifecycle stages,
+  preserve YouTube visibility for immediate publishing, and clarify remote
+  schedule confirmation across public clients.
+- 4af607d: Add independent exact-bundle Blog approval, reviewed image upload and generation,
+  confirmed publication scheduling and cancellation, and the complete authorized
+  agent workflow without widening existing credentials.
+- 4a893dd: Add provider-neutral Blog publishing destinations, safe delivery inspection,
+  and exact destination binding across public agent interfaces.
+- 843a1db: Add the exact optional `seo:read` capability and bounded read-only SEO
+  opportunity and weekly-report parity across public agent contracts, clients,
+  CLI commands, and closed-world MCP tools. SEO reads now use the version 3 task
+  contract with the exact Ready, Research, or Rejected decision, selected format,
+  complete deliverables, bounded evidence, safe URLs, limitations, and no-publish
+  rules. Public output uses readable topic names and separate topic-relevance and
+  action-readiness confidence. Research tasks compare all supported formats and
+  must validate or reject the finding before a separate draft action is allowed.
+
+### Patch Changes
+
+- Updated dependencies [4f9e790]
+- Updated dependencies [1edd1e7]
+- Updated dependencies [74a13ea]
+- Updated dependencies [4af607d]
+- Updated dependencies [4a893dd]
+- Updated dependencies [843a1db]
+  - @rolino/contracts@0.5.0
+  - @rolino/sdk@0.5.0
+  - @rolino/local-auth@0.5.0
+
+## 0.5.0-beta.0
+
+### Minor Changes
+
+- 4f9e790: Add the optional `blog:manage` capability and synchronized agent-first Blog
+  setup, import, cadence planning, plan review, article creation, confirmed
+  connection provisioning, and safe verification operations.
+- 1edd1e7: Add published Blog Studio delivery contracts and the server-only Next.js 16 Blog Studio package.
+- 74a13ea: Expose immediate versus scheduled delivery and destination lifecycle stages,
+  preserve YouTube visibility for immediate publishing, and clarify remote
+  schedule confirmation across public clients.
+- 4a893dd: Add provider-neutral Blog publishing destinations, safe delivery inspection,
+  and exact destination binding across public agent interfaces.
+- 843a1db: Add the exact optional `seo:read` capability and bounded read-only SEO
+  opportunity and weekly-report parity across public agent contracts, clients,
+  CLI commands, and closed-world MCP tools. SEO reads now use the version 3 task
+  contract with the exact Ready, Research, or Rejected decision, selected format,
+  complete deliverables, bounded evidence, safe URLs, limitations, and no-publish
+  rules. Public output uses readable topic names and separate topic-relevance and
+  action-readiness confidence. Research tasks compare all supported formats and
+  must validate or reject the finding before a separate draft action is allowed.
+
+### Patch Changes
+
+- Updated dependencies [4f9e790]
+- Updated dependencies [1edd1e7]
+- Updated dependencies [74a13ea]
+- Updated dependencies [4a893dd]
+- Updated dependencies [843a1db]
+  - @rolino/contracts@0.5.0-beta.0
+  - @rolino/sdk@0.5.0-beta.0
+  - @rolino/local-auth@0.5.0-beta.0
+
+## Unreleased
+
+### Minor Changes
+
+- Add Blog image generation, exact local-file upload, image review, confirmed
+  exact-bundle approval, future scheduling, and schedule cancellation commands
+  with deterministic agent output, stable idempotency, safe errors, and
+  independent `blog:write`, `blog:approve`, and `blog:publish` boundaries.
+- Add Blog destination discovery, delivery inspection, and exact destination selection for publication commands.
+
 ## 0.4.0
 
 ### Minor Changes

package/README.md

@@ -51,6 +51,22 @@ rolino posts publish execute POST_ID --project PROJECT_ID --expected-version VER
 rolino integrations health --project PROJECT_ID
 rolino integrations delivery-options --project PROJECT_ID --provider TIKTOK|LINKEDIN
 rolino calendar list --project PROJECT_ID [--from ISO_DATE --to ISO_DATE] [--limit 50] [--cursor CURSOR]
+rolino seo opportunities list --project PROJECT_ID [--limit 20] [--cursor CURSOR] [--kind KIND] [--impact HIGH|MEDIUM|LOW]
+rolino seo opportunities show OPPORTUNITY_ID --project PROJECT_ID
+rolino seo reports list --project PROJECT_ID [--limit 10] [--cursor CURSOR] [--status COMPLETE|PARTIAL]
+rolino seo reports show REPORT_ID --project PROJECT_ID
+rolino blog destinations providers --project PROJECT_ID
+rolino blog destinations list --project PROJECT_ID
+rolino blog destinations deliveries --project PROJECT_ID [--article ARTICLE_ID]
+rolino blog images generate ARTICLE_ID --project PROJECT_ID --revision REVISION_ID
+rolino blog images upload ARTICLE_ID FILE --project PROJECT_ID --revision REVISION_ID --alt-text TEXT
+rolino blog images review ARTICLE_ID IMAGE_ID --project PROJECT_ID --decision APPROVED|REJECTED --expected-version VERSION [--alt-text TEXT]
+rolino blog approve preview ARTICLE_ID --project PROJECT_ID --revision REVISION_ID
+rolino blog approve execute ARTICLE_ID --project PROJECT_ID --revision REVISION_ID --confirmation-token TOKEN --idempotency-key KEY --yes
+rolino blog schedule preview ARTICLE_ID --project PROJECT_ID --revision REVISION_ID --at ISO --timezone IANA [--destination ID...]
+rolino blog schedule execute ARTICLE_ID --project PROJECT_ID --revision REVISION_ID --at ISO --timezone IANA --confirmation-token TOKEN --idempotency-key KEY --yes
+rolino blog schedule cancel preview ARTICLE_ID --project PROJECT_ID
+rolino blog schedule cancel execute ARTICLE_ID --project PROJECT_ID --confirmation-token TOKEN --idempotency-key KEY --yes
 rolino doctor
 ```
 
@@ -58,9 +74,20 @@ Interactive login opens the configured Rolino instance in a browser, obtains
 explicit workspace approval, and exchanges a single-use code with PKCE S256.
 The approval screen always includes identity and workspace reads and lets the
 user independently opt into project creation, draft writing, confirmed
-scheduling, and confirmed immediate publishing. Optional permissions start off,
+scheduling, confirmed immediate publishing, and read-only SEO Intelligence.
+The SEO option explains that it permits reading opportunities, evidence,
+complete tasks, and weekly reports. It cannot run analysis or change SEO settings.
+Opportunity detail prints the exact decision, selected format, target,
+deliverables, research, safe URLs, separate topic-relevance and action-readiness
+confidence, limitations, and no-publish rules. A Ready
+task can request complete final deliverables for review. A Research task must
+select only `RESEARCH_TASK`, compare all reasonable formats without a preferred
+final format, and return `VALIDATED` with a complete next task or `REJECTED`
+with evidence. It cannot create a final draft in the same action.
+Optional permissions start off,
 and existing credentials never gain a newly selected permission. Revoke and
-reauthorize an existing connection to grant project creation. The bearer
+reauthorize an existing connection to grant project creation or `seo:read`.
+Existing credentials never receive `seo:read` automatically. The bearer
 credential never passes through a browser URL. Saved credentials are scoped by
 base URL and stored in the operating-system configuration directory;
 `ROLINO_CONFIG_DIR` overrides that location. `auth logout` revokes the calling
@@ -107,9 +134,11 @@ rolino posts create --project PROJECT_ID --caption "Launch description" --platfo
 ```
 
 Google may restrict uploads from unaudited API projects to Private. Rolino does
-not infer audit approval from configuration. A scheduled YouTube post must
-target Public; confirmed scheduling starts its private resumable upload
-immediately so processing can finish before the target time.
+not infer audit approval from configuration. `posts publish` preserves the
+chosen Public, Unlisted, or Private visibility and does not create a schedule.
+A future `posts schedule` delivery must target Public; confirmed scheduling
+starts its private resumable upload immediately so processing can finish before
+the target time.
 
 TikTok drafts require account-specific choices. Refresh them immediately before
 preparing the draft:
@@ -134,23 +163,23 @@ images. Use `--bluesky-caption` for a destination-specific override of up to
 rolino posts create --project PROJECT_ID --caption "Shared launch" --platform BLUESKY --bluesky-caption "Launch day 🦋" --yes
 ```
 
-LinkedIn drafts can be text-only, include up to ten stored JPEG/PNG images, or
-contain exactly one stored MP4 without mixing images and video. Native video
-must be 75 KB to 500 MB and 3 seconds to 30 minutes. Refresh the connected
-member and server policy before preparing the draft, and use
-`--linkedin-caption` for a destination override:
+LinkedIn drafts can be text-only, include up to ten stored JPEG/PNG images, or
+contain exactly one stored MP4 without mixing images and video. Native video
+must be 75 KB to 500 MB and 3 seconds to 30 minutes. Refresh the connected
+member and server policy before preparing the draft, and use
+`--linkedin-caption` for a destination override:
 
 ```text
-rolino integrations delivery-options --project PROJECT_ID --provider LINKEDIN
-rolino posts create --project PROJECT_ID --caption "Shared launch" --platform LINKEDIN --linkedin-caption "Launch day for our LinkedIn network" --media IMAGE_ASSET_ID --yes
-rolino posts create --project PROJECT_ID --caption "Product demo" --platform LINKEDIN --media VIDEO_ASSET_ID --yes
+rolino integrations delivery-options --project PROJECT_ID --provider LINKEDIN
+rolino posts create --project PROJECT_ID --caption "Shared launch" --platform LINKEDIN --linkedin-caption "Launch day for our LinkedIn network" --media IMAGE_ASSET_ID --yes
+rolino posts create --project PROJECT_ID --caption "Product demo" --platform LINKEDIN --media VIDEO_ASSET_ID --yes
 ```
 
-The connected OAuth member is the author; the developer app's associated
-Company Page is not a publishing target. Native video publish and schedule
-execution remains in preparation until LinkedIn confirms upload and processing.
-If final post creation has an unknown outcome, inspect that member's LinkedIn
-feed before retrying.
+The connected OAuth member is the author; the developer app's associated
+Company Page is not a publishing target. Native video publish and schedule
+execution remains in preparation until LinkedIn confirms upload and processing.
+If final post creation has an unknown outcome, inspect that member's LinkedIn
+feed before retrying.
 
 Project creation also requires interactive confirmation or `--yes`. It
 atomically saves a project and its paired brand, but does not start research,
@@ -170,8 +199,10 @@ server confirmation.
 
 When YouTube is selected, the preview states whether confirmed execution starts
 or resumes early private preparation. A schedule execution may return
-`PENDING` while YouTube confirms a remote schedule change; that result is not a
-published state, and the same idempotency key is safe to replay.
+`PENDING` with phase `REMOTE_SCHEDULE_CONFIRMATION` after the upload completes
+while YouTube acknowledges the requested Public publish time. The video remains
+private, no second publish action is required, and the same idempotency key is
+safe to replay.
 
 Immediate publishing uses the same server-enforced pattern. `posts publish
 preview` validates the current version, exact destination set, readiness, live
@@ -182,8 +213,9 @@ delivery; Rolino's worker performs provider calls and reconciles ambiguous
 network results so an unsafe retry cannot duplicate a post. Use
 `ROLINO_CONFIRMATION_TOKEN` for scripts instead of putting the token in process
 arguments. YouTube remains `PREPARING` while its resumable upload and provider
-processing are incomplete; only provider-confirmed visibility becomes
-published.
+processing are incomplete. The preview identifies the delivery as `IMMEDIATE`,
+shows the exact visibility, and confirms that no schedule will be created; only
+provider-confirmed visibility becomes published.
 
 The CLI cannot enable YouTube, Bluesky, or LinkedIn, or infer provider approval.
 Those are server-side deployment controls. Self-hosted operators should
@@ -229,3 +261,64 @@ issues through the repository's
 [security policy](https://github.com/deifos/rolino/security/policy).
 
 `@rolino/cli` is available under the MIT License.
+## Agent-first Blog Studio setup
+
+Authorize the optional `blog:manage` capability separately from Blog reading,
+draft writing, and approved-revision publishing. Existing credentials never
+gain it automatically. Start every setup with:
+
+```bash
+rolino --agent blog setup status --project PROJECT_ID
+```
+
+The `blog site`, `blog plan`, `blog article`, `blog connection`, and
+`blog destinations` command groups mirror the versioned API. Use these safe
+publishing reads before setup or publication:
+
+```bash
+rolino --agent blog destinations providers --project PROJECT_ID
+rolino --agent blog destinations list --project PROJECT_ID
+rolino --agent blog destinations deliveries --project PROJECT_ID
+rolino --agent blog destinations deliveries --project PROJECT_ID --article ARTICLE_ID
+```
+
+The provider catalog requires `blog:manage`. It returns only providers enabled
+for the workspace, safe capabilities, and official documentation. Destination
+and delivery-attempt reads require `blog:read`. They omit draft content,
+prompts, evidence, secrets, and raw provider responses. A returned remote URL
+is not proof that a queued or failed delivery is live.
+
+Mutations require a stable idempotency key.
+Connection provisioning also requires preview, explicit confirmation, and
+execute. A first successful execute can return a delivery token or webhook
+secret once; save it only in server-side environment configuration. Replays
+do not reveal it again. Blog publication remains the separate approved exact
+revision preview/execute workflow.
+
+Blog image commands require `blog:write`; they cannot approve an article or
+publish it. Image upload reads only the path in the command, accepts JPEG, PNG,
+or WebP, and keeps its signed upload URL and storage key private. Approving an
+exact revision and image bundle requires the independent `blog:approve`
+capability and cannot publish. Scheduling, rescheduling, or canceling a future
+publication requires the independent `blog:publish` capability and does not
+grant approval.
+
+Approval, schedule, and cancellation execution bind the short-lived token from
+the matching preview and a stable idempotency key. Human output requires
+`--yes`. JSON mode does not prompt, but it still requires the confirmation
+token and idempotency key. A safe replay uses the same exact input and key.
+
+Use this order for complete Blog work:
+
+1. Read setup status and current article or plan state.
+2. Ask for any missing website, cadence, destination, and access level.
+3. Import and plan through durable jobs, then poll instead of retrying blindly.
+4. Present evidence before accepting a plan item unless the user already authorized that exact bounded action.
+5. Create or update one immutable revision with catalog-backed links.
+6. Generate or upload one approved image, review it, and verify alt text.
+7. Without `blog:approve`, stop and ask the user to approve in Rolino.
+8. With `blog:approve`, preview and execute the unchanged exact bundle with confirmation and a stable idempotency key.
+9. Without `blog:publish`, stop after approval.
+10. With `blog:publish`, preview and execute unchanged immediate publication or scheduling with a stable idempotency key.
+11. Poll delivery attempts and verify the live remote URL; queued is not published.
+12. After any content or image change, restart from approval preview.