@rolino/cli 0.5.0-beta.0 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,61 @@
 # @rolino/cli
 
+## 0.6.0
+
+### Minor Changes
+
+- d162f85: Add safe Blog editorial cadence preview and apply operations across contracts, SDK, CLI, and MCP.
+- 50cb9fc: Add Google Business Profile as a disabled-by-default standard text and single-image publishing destination across shared public clients.
+- 1ac7ed5: Add signed custom Blog webhook setup, connection testing, one-time secret rotation, and safe idempotent replay parity.
+- a56f834: Replace custom interactive CLI authorization with exact-resource OAuth, add the stateless MCP 2026-07-28 transport foundation, and provide safe connection instructions for workspace discovery and confirmed actions.
+
+### Patch Changes
+
+- Updated dependencies [d162f85]
+- Updated dependencies [50cb9fc]
+- Updated dependencies [1ac7ed5]
+- Updated dependencies [a56f834]
+  - @rolino/contracts@0.6.0
+  - @rolino/sdk@0.6.0
+  - @rolino/local-auth@0.6.0
+
+## 0.5.0
+
+### Minor Changes
+
+- 4f9e790: Add the optional `blog:manage` capability and synchronized agent-first Blog
+  setup, import, cadence planning, plan review, article creation, confirmed
+  connection provisioning, and safe verification operations.
+- 1edd1e7: Add published Blog Studio delivery contracts and the server-only Next.js 16 Blog Studio package.
+- 74a13ea: Expose immediate versus scheduled delivery and destination lifecycle stages,
+  preserve YouTube visibility for immediate publishing, and clarify remote
+  schedule confirmation across public clients.
+- 4af607d: Add independent exact-bundle Blog approval, reviewed image upload and generation,
+  confirmed publication scheduling and cancellation, and the complete authorized
+  agent workflow without widening existing credentials.
+- 4a893dd: Add provider-neutral Blog publishing destinations, safe delivery inspection,
+  and exact destination binding across public agent interfaces.
+- 843a1db: Add the exact optional `seo:read` capability and bounded read-only SEO
+  opportunity and weekly-report parity across public agent contracts, clients,
+  CLI commands, and closed-world MCP tools. SEO reads now use the version 3 task
+  contract with the exact Ready, Research, or Rejected decision, selected format,
+  complete deliverables, bounded evidence, safe URLs, limitations, and no-publish
+  rules. Public output uses readable topic names and separate topic-relevance and
+  action-readiness confidence. Research tasks compare all supported formats and
+  must validate or reject the finding before a separate draft action is allowed.
+
+### Patch Changes
+
+- Updated dependencies [4f9e790]
+- Updated dependencies [1edd1e7]
+- Updated dependencies [74a13ea]
+- Updated dependencies [4af607d]
+- Updated dependencies [4a893dd]
+- Updated dependencies [843a1db]
+  - @rolino/contracts@0.5.0
+  - @rolino/sdk@0.5.0
+  - @rolino/local-auth@0.5.0
+
 ## 0.5.0-beta.0
 
 ### Minor Changes
@@ -37,6 +93,10 @@
 
 ### Minor Changes
 
+- Add Blog image generation, exact local-file upload, image review, confirmed
+  exact-bundle approval, future scheduling, and schedule cancellation commands
+  with deterministic agent output, stable idempotency, safe errors, and
+  independent `blog:write`, `blog:approve`, and `blog:publish` boundaries.
 - Add Blog destination discovery, delivery inspection, and exact destination selection for publication commands.
 
 ## 0.4.0

package/README.md

@@ -39,30 +39,41 @@ rolino projects list [--limit 50] [--cursor ID]
 rolino projects show PROJECT_ID
 rolino media list --project PROJECT_ID [--type IMAGE|VIDEO] [--query TEXT] [--limit 50] [--cursor ID]
 rolino media upload FILE_PATH --project PROJECT_ID --yes
-rolino posts create --project PROJECT_ID --caption TEXT [--platform INSTAGRAM|TIKTOK|YOUTUBE|BLUESKY|LINKEDIN] [--media ASSET_ID] --yes
-rolino posts update POST_ID --project PROJECT_ID --expected-version VERSION [--caption TEXT] [--platform INSTAGRAM|TIKTOK|YOUTUBE|BLUESKY|LINKEDIN] [--media ASSET_ID] [--clear-platforms] [--clear-media] --yes
+rolino posts create --project PROJECT_ID --caption TEXT [--platform INSTAGRAM|TIKTOK|YOUTUBE|BLUESKY|LINKEDIN|GOOGLE_BUSINESS_PROFILE] [--media ASSET_ID] --yes
+rolino posts update POST_ID --project PROJECT_ID --expected-version VERSION [--caption TEXT] [--platform INSTAGRAM|TIKTOK|YOUTUBE|BLUESKY|LINKEDIN|GOOGLE_BUSINESS_PROFILE] [--media ASSET_ID] [--clear-platforms] [--clear-media] --yes
 rolino posts list --project PROJECT_ID [--limit 50] [--cursor ID] [--status STATUS]
 rolino posts show POST_ID --project PROJECT_ID
 rolino posts readiness POST_ID --project PROJECT_ID
 rolino posts schedule preview POST_ID --project PROJECT_ID --expected-version VERSION --at ISO_DATE --timezone IANA_TIMEZONE
 rolino posts schedule execute POST_ID --project PROJECT_ID --expected-version VERSION --at ISO_DATE --timezone IANA_TIMEZONE --confirmation-token TOKEN [--idempotency-key KEY]
-rolino posts publish preview POST_ID --project PROJECT_ID --expected-version VERSION --platform INSTAGRAM|TIKTOK|YOUTUBE|BLUESKY|LINKEDIN
-rolino posts publish execute POST_ID --project PROJECT_ID --expected-version VERSION --platform INSTAGRAM|TIKTOK|YOUTUBE|BLUESKY|LINKEDIN --confirmation-token TOKEN [--idempotency-key KEY]
+rolino posts publish preview POST_ID --project PROJECT_ID --expected-version VERSION --platform INSTAGRAM|TIKTOK|YOUTUBE|BLUESKY|LINKEDIN|GOOGLE_BUSINESS_PROFILE
+rolino posts publish execute POST_ID --project PROJECT_ID --expected-version VERSION --platform INSTAGRAM|TIKTOK|YOUTUBE|BLUESKY|LINKEDIN|GOOGLE_BUSINESS_PROFILE --confirmation-token TOKEN [--idempotency-key KEY]
 rolino integrations health --project PROJECT_ID
 rolino integrations delivery-options --project PROJECT_ID --provider TIKTOK|LINKEDIN
 rolino calendar list --project PROJECT_ID [--from ISO_DATE --to ISO_DATE] [--limit 50] [--cursor CURSOR]
 rolino seo opportunities list --project PROJECT_ID [--limit 20] [--cursor CURSOR] [--kind KIND] [--impact HIGH|MEDIUM|LOW]
 rolino seo opportunities show OPPORTUNITY_ID --project PROJECT_ID
-rolino seo reports list --project PROJECT_ID [--limit 10] [--cursor CURSOR] [--status COMPLETE|PARTIAL]
-rolino seo reports show REPORT_ID --project PROJECT_ID
-rolino blog destinations providers --project PROJECT_ID
-rolino blog destinations list --project PROJECT_ID
-rolino blog destinations deliveries --project PROJECT_ID [--article ARTICLE_ID]
-rolino doctor
+rolino seo reports list --project PROJECT_ID [--limit 10] [--cursor CURSOR] [--status COMPLETE|PARTIAL]
+rolino seo reports show REPORT_ID --project PROJECT_ID
+rolino blog destinations providers --project PROJECT_ID
+rolino blog destinations list --project PROJECT_ID
+rolino blog destinations deliveries --project PROJECT_ID [--article ARTICLE_ID]
+rolino blog images generate ARTICLE_ID --project PROJECT_ID --revision REVISION_ID
+rolino blog images upload ARTICLE_ID FILE --project PROJECT_ID --revision REVISION_ID --alt-text TEXT
+rolino blog images review ARTICLE_ID IMAGE_ID --project PROJECT_ID --decision APPROVED|REJECTED --expected-version VERSION [--alt-text TEXT]
+rolino blog approve preview ARTICLE_ID --project PROJECT_ID --revision REVISION_ID
+rolino blog approve execute ARTICLE_ID --project PROJECT_ID --revision REVISION_ID --confirmation-token TOKEN --idempotency-key KEY --yes
+rolino blog schedule preview ARTICLE_ID --project PROJECT_ID --revision REVISION_ID --at ISO --timezone IANA [--destination ID...]
+rolino blog schedule execute ARTICLE_ID --project PROJECT_ID --revision REVISION_ID --at ISO --timezone IANA --confirmation-token TOKEN --idempotency-key KEY --yes
+rolino blog schedule cancel preview ARTICLE_ID --project PROJECT_ID
+rolino blog schedule cancel execute ARTICLE_ID --project PROJECT_ID --confirmation-token TOKEN --idempotency-key KEY --yes
+rolino doctor
 ```
 
-Interactive login opens the configured Rolino instance in a browser, obtains
-explicit workspace approval, and exchanges a single-use code with PKCE S256.
+Interactive login uses standard OAuth Authorization Code with PKCE S256. It
+opens the configured Rolino instance, requests the exact \`/api/v1\` resource,
+uses the fixed \`http://127.0.0.1:48391/oauth/callback\` redirect, and obtains
+explicit workspace approval.
 The approval screen always includes identity and workspace reads and lets the
 user independently opt into project creation, draft writing, confirmed
 scheduling, confirmed immediate publishing, and read-only SEO Intelligence.
@@ -78,11 +89,13 @@ with evidence. It cannot create a final draft in the same action.
 Optional permissions start off,
 and existing credentials never gain a newly selected permission. Revoke and
 reauthorize an existing connection to grant project creation or `seo:read`.
-Existing credentials never receive `seo:read` automatically. The bearer
-credential never passes through a browser URL. Saved credentials are scoped by
-base URL and stored in the operating-system configuration directory;
+Existing grants never receive `seo:read` automatically. OAuth tokens never
+pass through a browser URL. The CLI stores a short-lived access token and a
+rotating refresh token by host, issuer, client, and resource in the
+operating-system configuration directory. It does not read or migrate the old
+interactive credential, so the first use after this cutover requires sign-in;
 `ROLINO_CONFIG_DIR` overrides that location. `auth logout` revokes the calling
-credential before deleting its local copy.
+workspace grant and OAuth refresh token before deleting its local copy.
 
 The terminal waits five minutes for browser approval. If that request expires,
 close the old approval page and run `rolino auth login` again; refreshing the
@@ -172,6 +185,19 @@ execution remains in preparation until LinkedIn confirms upload and processing.
 If final post creation has an unknown outcome, inspect that member's LinkedIn
 feed before retrying.
 
+Google Business Profile drafts can be text-only or include one stored JPEG or
+PNG image with a stable public URL. Use `--google-business-profile-caption`
+for a destination override of up to 1,500 characters:
+
+```text
+rolino posts create --project PROJECT_ID --caption "Store update" --platform GOOGLE_BUSINESS_PROFILE --google-business-profile-caption "Visit us to see what is new." --media IMAGE_ASSET_ID --yes
+```
+
+Rolino owns the schedule and publishes only a standard update to the location
+selected in Integrations. The CLI cannot select a location or enable the
+provider. If a create result is unknown, inspect the selected Business Profile
+before you try again.
+
 Project creation also requires interactive confirmation or `--yes`. It
 atomically saves a project and its paired brand, but does not start research,
 connect accounts, schedule posts, or publish. A fresh CLI invocation generates
@@ -208,13 +234,16 @@ processing are incomplete. The preview identifies the delivery as `IMMEDIATE`,
 shows the exact visibility, and confirms that no schedule will be created; only
 provider-confirmed visibility becomes published.
 
-The CLI cannot enable YouTube, Bluesky, or LinkedIn, or infer provider approval.
+The CLI cannot enable YouTube, Bluesky, LinkedIn, or Google Business Profile,
+or infer provider approval.
 Those are server-side deployment controls. Self-hosted operators should
 complete the
 [YouTube operations guide](https://github.com/deifos/rolino/blob/main/docs/integrations/youtube.md)
 and
-[Bluesky operations guide](https://github.com/deifos/rolino/blob/main/docs/integrations/bluesky.md), and
+[Bluesky operations guide](https://github.com/deifos/rolino/blob/main/docs/integrations/bluesky.md),
 [LinkedIn operations guide](https://github.com/deifos/rolino/blob/main/docs/integrations/linkedin.md)
+and the
+[Google Business Profile operations guide](https://github.com/deifos/rolino/blob/main/docs/integrations/google-business-profile.md)
 before live testing.
 
 Configuration is read from `ROLINO_URL`, `ROLINO_TOKEN`, `ROLINO_CONFIG_DIR`,
@@ -262,26 +291,66 @@ gain it automatically. Start every setup with:
 rolino --agent blog setup status --project PROJECT_ID
 ```
 
-The `blog site`, `blog plan`, `blog article`, `blog connection`, and
-`blog destinations` command groups mirror the versioned API. Use these safe
-publishing reads before setup or publication:
-
-```bash
-rolino --agent blog destinations providers --project PROJECT_ID
-rolino --agent blog destinations list --project PROJECT_ID
-rolino --agent blog destinations deliveries --project PROJECT_ID
-rolino --agent blog destinations deliveries --project PROJECT_ID --article ARTICLE_ID
-```
-
-The provider catalog requires `blog:manage`. It returns only providers enabled
-for the workspace, safe capabilities, and official documentation. Destination
-and delivery-attempt reads require `blog:read`. They omit draft content,
-prompts, evidence, secrets, and raw provider responses. A returned remote URL
-is not proof that a queued or failed delivery is live.
-
-Mutations require a stable idempotency key.
-Connection provisioning also requires preview, explicit confirmation, and
-execute. A first successful execute can return a delivery token or webhook
+The `blog site`, `blog plan`, `blog article`, `blog connection`, and
+`blog destinations` command groups mirror the versioned API. Use these safe
+publishing reads before setup or publication:
+
+```bash
+rolino --agent blog destinations providers --project PROJECT_ID
+rolino --agent blog destinations list --project PROJECT_ID
+rolino --agent blog destinations deliveries --project PROJECT_ID
+rolino --agent blog destinations deliveries --project PROJECT_ID --article ARTICLE_ID
+```
+
+The provider catalog requires `blog:manage`. It returns only providers enabled
+for the workspace, safe capabilities, and official documentation. Destination
+and delivery-attempt reads require `blog:read`. They omit draft content,
+prompts, evidence, secrets, and raw provider responses. A returned remote URL
+is not proof that a queued or failed delivery is live.
+
+Mutations require a stable idempotency key.
+Connection provisioning also requires preview, explicit confirmation, and
+execute. A first successful execute can return a delivery token or webhook
 secret once; save it only in server-side environment configuration. Replays
 do not reveal it again. Blog publication remains the separate approved exact
 revision preview/execute workflow.
+
+Blog image commands require `blog:write`; they cannot approve an article or
+publish it. Image upload reads only the path in the command, accepts JPEG, PNG,
+or WebP, and keeps its signed upload URL and storage key private. Approving an
+exact revision and image bundle requires the independent `blog:approve`
+capability and cannot publish. Scheduling, rescheduling, or canceling a future
+publication requires the independent `blog:publish` capability and does not
+grant approval.
+
+Active-plan editorial calendar commands also require `blog:write`:
+
+```bash
+rolino --agent blog plan cadence preview --project PROJECT_ID --plan PLAN_ID --weekdays 1,3,5 --expected-plan-version VERSION
+rolino --agent blog plan cadence apply --project PROJECT_ID --plan PLAN_ID --weekdays 1,3,5 --expected-plan-version VERSION --expected-schedule-digest DIGEST --confirmation-token TOKEN --idempotency-key KEY --yes
+```
+
+Preview a cadence change first and show every date change and locked item. Apply only
+the unchanged preview values. These commands do not change `scheduledPublishAt` and never schedule, publish,
+or unpublish an article. Image generation already accepts optional direction
+with `blog images generate --editorial-brief TEXT` (maximum 500 characters).
+
+Approval, schedule, and cancellation execution bind the short-lived token from
+the matching preview and a stable idempotency key. Human output requires
+`--yes`. JSON mode does not prompt, but it still requires the confirmation
+token and idempotency key. A safe replay uses the same exact input and key.
+
+Use this order for complete Blog work:
+
+1. Read setup status and current article or plan state.
+2. Ask for any missing website, cadence, destination, and access level.
+3. Import and plan through durable jobs, then poll instead of retrying blindly.
+4. Present evidence before accepting a plan item unless the user already authorized that exact bounded action.
+5. Create or update one immutable revision with catalog-backed links.
+6. Generate or upload one approved image, review it, and verify alt text.
+7. Without `blog:approve`, stop and ask the user to approve in Rolino.
+8. With `blog:approve`, preview and execute the unchanged exact bundle with confirmation and a stable idempotency key.
+9. Without `blog:publish`, stop after approval.
+10. With `blog:publish`, preview and execute unchanged immediate publication or scheduling with a stable idempotency key.
+11. Poll delivery attempts and verify the live remote URL; queued is not published.
+12. After any content or image change, restart from approval preview.