@rolino/cli 0.7.0 → 0.7.1

package/CHANGELOG.md

@@ -1,5 +1,14 @@
 # @rolino/cli
 
+## 0.7.1
+
+### Patch Changes
+
+- c340405: Request the complete opt-in capability set during browser authorization so users can grant draft and scheduling access to local agents. Remote MCP setup now uses host-native configuration and standard OAuth client discovery instead of a fixed Rolino-managed client.
+  - @rolino/contracts@0.7.1
+  - @rolino/sdk@0.7.1
+  - @rolino/local-auth@0.7.1
+
 ## 0.7.0
 
 ### Minor Changes

package/README.md

@@ -116,8 +116,10 @@ page cannot restart the closed loopback listener.
 
 `setup mcp` checks `/api/v1/meta` and prefers hosted Streamable HTTP when it is
 available. Remote setup writes the `/mcp` URL and OAuth mode, does not start a
-local MCP process, and does not reuse `rolino auth login`. Run
-`codex mcp login rolino` after remote Codex setup. Use `--transport http` to
+local MCP process, and does not reuse `rolino auth login`. For Codex, it leaves
+OAuth client registration and the loopback callback to Codex so Codex can use
+Rolino's advertised Client ID Metadata Document support. Run `codex mcp login
+rolino` after remote Codex setup. Use `--transport http` to
 require remote MCP or `--transport stdio` to require the local package and its
 shared CLI OAuth session. The command previews the exact token-free
 configuration and asks before changing anything. User scope is the default.
@@ -125,8 +127,10 @@ Codex configuration is written to `CODEX_HOME/config.toml` or
 `~/.codex/config.toml`; Claude Code user scope is applied through its official
 CLI. Project scope writes `.codex/config.toml` or `.mcp.json` in the current
 directory. Existing file-backed configuration is backed up with a
-`.rolino-backup` suffix. Use `--dry-run` to preview in scripts and `--yes` to
-provide explicit non-interactive consent; `--agent` never implies consent.
+`.rolino-backup` suffix. Use `--dry-run` to preview in scripts and `--yes` to
+provide explicit non-interactive consent; `--agent` never implies consent.
+An orphan Rolino-managed marker left by an earlier removal is repaired without
+changing unrelated Codex settings.
 
 Draft creation and update never schedule or publish. Updates change only the
 fields supplied; omitted media, destinations, captions, and provider settings

package/dist/bin.cjs

@@ -34,7 +34,7 @@ var import_commander = require("commander");
 // package.json
 var package_default = {
   name: "@rolino/cli",
-  version: "0.7.0",
+  version: "0.7.1",
   description: "Agent-friendly command-line interface for Rolino",
   type: "module",
   license: "MIT",
@@ -91,9 +91,9 @@ var package_default = {
     dev: "tsx src/bin.ts"
   },
   dependencies: {
-    "@rolino/contracts": "0.7.0",
-    "@rolino/local-auth": "0.7.0",
-    "@rolino/sdk": "0.7.0",
+    "@rolino/contracts": "0.7.1",
+    "@rolino/local-auth": "0.7.1",
+    "@rolino/sdk": "0.7.1",
     commander: "^15.0.0",
     open: "^11.0.0"
   },
@@ -106,24 +106,21 @@ var package_default = {
 };
 
 // src/cli.ts
-var import_contracts = require("@rolino/contracts");
+var import_contracts2 = require("@rolino/contracts");
 var import_sdk = require("@rolino/sdk");
 
 // src/browser-login.ts
 var import_node_crypto = require("crypto");
 var import_node_http = require("http");
+var import_contracts = require("@rolino/contracts");
 var import_local_auth = require("@rolino/local-auth");
 var import_open = __toESM(require("open"), 1);
 var OAUTH_CALLBACK_PORT = 48391;
 var OAUTH_CALLBACK_PATH = "/oauth/callback";
 var OAUTH_TIMEOUT_MS = 5 * 60 * 1e3;
-var DEFAULT_SCOPES = [
+var AUTHORIZATION_REQUEST_SCOPES = [
   "offline_access",
-  "identity:read",
-  "projects:read",
-  "posts:read",
-  "integrations:read",
-  "calendar:read"
+  ...import_contracts.AGENT_CAPABILITIES
 ];
 function escapeHtml(value) {
   return value.replace(/[&<>"']/g, (character) => ({
@@ -163,7 +160,7 @@ function createBrowserAuthorizationRequest(baseUrl) {
   url.searchParams.set("response_type", "code");
   url.searchParams.set("client_id", configuration.clientId);
   url.searchParams.set("redirect_uri", redirectUri);
-  url.searchParams.set("scope", DEFAULT_SCOPES.join(" "));
+  url.searchParams.set("scope", AUTHORIZATION_REQUEST_SCOPES.join(" "));
   url.searchParams.set("resource", configuration.resource);
   url.searchParams.set("state", state);
   url.searchParams.set("code_challenge", codeChallenge);
@@ -202,7 +199,7 @@ async function exchangeAuthorizationCode(options) {
     accessTokenExpiresAt: new Date(Date.now() + expiresIn * 1e3).toISOString(),
     refreshToken: payload.refresh_token,
     refreshTokenExpiresAt: new Date(Date.now() + 30 * 24 * 60 * 60 * 1e3).toISOString(),
-    scopes: typeof payload.scope === "string" ? payload.scope.split(/\s+/).filter(Boolean) : [...DEFAULT_SCOPES]
+    scopes: typeof payload.scope === "string" ? payload.scope.split(/\s+/).filter(Boolean) : [...AUTHORIZATION_REQUEST_SCOPES]
   };
 }
 async function loginWithBrowser(options) {
@@ -669,13 +666,12 @@ function updateCodexConfig(source, server) {
   const block = codexBlock(server, newline);
   const begin = source.indexOf(CODEX_BEGIN);
   const end = source.indexOf(CODEX_END);
-  if (begin === -1 !== (end === -1) || begin !== -1 && end < begin) {
-    throw new TypeError("Codex config contains an incomplete Rolino-managed block.");
-  }
   let unmanagedSource = source;
-  if (begin !== -1) {
+  if (begin !== -1 && end !== -1 && end > begin) {
     const after = end + CODEX_END.length;
     unmanagedSource = `${source.slice(0, begin)}${source.slice(after)}`;
+  } else if (begin !== -1 || end !== -1) {
+    unmanagedSource = source.split(/\r?\n/).filter((line) => line.trim() !== CODEX_BEGIN && line.trim() !== CODEX_END).join(newline);
   }
   const withoutRolino = removeExistingCodexEntry(unmanagedSource, newline);
   return `${withoutRolino ? `${withoutRolino}${newline}${newline}` : ""}${block}${newline}`;
@@ -881,40 +877,40 @@ function outputFormat(value) {
   throw new import_commander.InvalidArgumentError("Output must be human, json, or jsonl.");
 }
 function postStatus(value) {
-  const parsed = import_contracts.PostStatusSchema.safeParse(value.toUpperCase());
+  const parsed = import_contracts2.PostStatusSchema.safeParse(value.toUpperCase());
   if (parsed.success) return parsed.data;
   throw new import_commander.InvalidArgumentError(
-    `Status must be one of ${import_contracts.PostStatusSchema.options.join(", ")}.`
+    `Status must be one of ${import_contracts2.PostStatusSchema.options.join(", ")}.`
   );
 }
 function seoOpportunityKind(value) {
-  const parsed = import_contracts.SeoOpportunityKindSchema.safeParse(value.toUpperCase());
+  const parsed = import_contracts2.SeoOpportunityKindSchema.safeParse(value.toUpperCase());
   if (parsed.success) return parsed.data;
-  throw new import_commander.InvalidArgumentError(`SEO kind must be one of ${import_contracts.SeoOpportunityKindSchema.options.join(", ")}.`);
+  throw new import_commander.InvalidArgumentError(`SEO kind must be one of ${import_contracts2.SeoOpportunityKindSchema.options.join(", ")}.`);
 }
 function seoExpectedImpact(value) {
-  const parsed = import_contracts.SeoExpectedImpactSchema.safeParse(value.toUpperCase());
+  const parsed = import_contracts2.SeoExpectedImpactSchema.safeParse(value.toUpperCase());
   if (parsed.success) return parsed.data;
   throw new import_commander.InvalidArgumentError("SEO impact must be HIGH, MEDIUM, or LOW.");
 }
 function seoReportCompleteness(value) {
-  const parsed = import_contracts.SeoReportCompletenessSchema.safeParse(value.toUpperCase());
+  const parsed = import_contracts2.SeoReportCompletenessSchema.safeParse(value.toUpperCase());
   if (parsed.success) return parsed.data;
   throw new import_commander.InvalidArgumentError("Report status must be COMPLETE or PARTIAL.");
 }
 function projectType(value) {
-  const parsed = import_contracts.ProjectTypeSchema.safeParse(value.toUpperCase());
+  const parsed = import_contracts2.ProjectTypeSchema.safeParse(value.toUpperCase());
   if (parsed.success) return parsed.data;
   throw new import_commander.InvalidArgumentError(
-    `Type must be one of ${import_contracts.ProjectTypeSchema.options.join(", ")}.`
+    `Type must be one of ${import_contracts2.ProjectTypeSchema.options.join(", ")}.`
   );
 }
 function publishingProvider(value) {
   const normalized = value.toUpperCase();
-  const parsed = import_contracts.PublishingProviderSchema.safeParse(normalized);
+  const parsed = import_contracts2.PublishingProviderSchema.safeParse(normalized);
   if (parsed.success) return parsed.data;
   throw new import_commander.InvalidArgumentError(
-    `Platform must be one of ${import_contracts.PublishingProviderSchema.options.join(", ")}.`
+    `Platform must be one of ${import_contracts2.PublishingProviderSchema.options.join(", ")}.`
   );
 }
 function collectPublishingProvider(value, previous) {
@@ -925,10 +921,10 @@ function collectString(value, previous) {
 }
 function deliveryOptionsProvider(value) {
   const normalized = value.toUpperCase();
-  const parsed = import_contracts.ProviderDeliveryOptionsProviderSchema.safeParse(normalized);
+  const parsed = import_contracts2.ProviderDeliveryOptionsProviderSchema.safeParse(normalized);
   if (parsed.success) return parsed.data;
   throw new import_commander.InvalidArgumentError(
-    `Provider must be one of ${import_contracts.ProviderDeliveryOptionsProviderSchema.options.join(", ")}.`
+    `Provider must be one of ${import_contracts2.ProviderDeliveryOptionsProviderSchema.options.join(", ")}.`
   );
 }
 function tiktokPostMode(value) {
@@ -966,7 +962,7 @@ function yesOrNo(value) {
 function youtubeSettings(options) {
   const hasYouTubeOptions = options.youtubeTitle !== void 0 || options.youtubeCategoryId !== void 0 || options.youtubePrivacy !== void 0 || options.youtubeMadeForKids !== void 0 || options.youtubeSyntheticMedia === true || options.youtubeNotifySubscribers === false || (options.youtubeTag?.length ?? 0) > 0;
   if (!hasYouTubeOptions) return null;
-  return import_contracts.YouTubePostSettingsSchema.parse({
+  return import_contracts2.YouTubePostSettingsSchema.parse({
     title: options.youtubeTitle,
     categoryId: options.youtubeCategoryId,
     privacyStatus: options.youtubePrivacy,
@@ -1155,7 +1151,7 @@ function errorForOutput(error) {
 function tiktokSettings(options) {
   const hasTikTokOptions = options.tiktokMode !== void 0 || options.tiktokVisibility !== void 0 || options.tiktokComments !== void 0 || options.tiktokDuet !== void 0 || options.tiktokStitch !== void 0 || options.tiktokCommercialContent !== void 0 || options.tiktokPromotesOwnBrand !== void 0 || options.tiktokPromotesThirdParty !== void 0 || options.tiktokAiGenerated !== void 0 || options.tiktokCoverTimestampMs !== void 0 || options.tiktokSettingsReviewed === true;
   if (!hasTikTokOptions) return void 0;
-  return import_contracts.TikTokDraftSettingsSchema.parse({
+  return import_contracts2.TikTokDraftSettingsSchema.parse({
     postMode: options.tiktokMode,
     privacyLevel: options.tiktokVisibility,
     allowComment: options.tiktokComments,
@@ -1299,7 +1295,7 @@ async function runCli(argv = process.argv, overrides = {}) {
       global,
       runtime,
       async action(context, client) {
-        const parsed = import_contracts.ProjectCreateInputSchema.safeParse({
+        const parsed = import_contracts2.ProjectCreateInputSchema.safeParse({
           name: local.name,
           type: local.type,
           websiteUrl: local.website,
@@ -2175,7 +2171,7 @@ This moves eligible editorial dates only. It does not schedule, publish, or unpu
   blogArticles.command("update").argument("<article-id>").requiredOption("--project <project-id>", "exact Rolino project ID").requiredOption("--input <json-file>", "complete Blog draft JSON file").option("--yes", "confirm the draft save").action(async (articleId, local) => {
     const global = program.opts();
     commandExitCode = await execute({ command: "blog articles update", global, runtime, async action(context, client) {
-      const draft = import_contracts.AgentBlogDraftUpdateSchema.parse(JSON.parse(await (0, import_promises2.readFile)((0, import_node_path2.resolve)(runtime.cwd, local.input), "utf8")));
+      const draft = import_contracts2.AgentBlogDraftUpdateSchema.parse(JSON.parse(await (0, import_promises2.readFile)((0, import_node_path2.resolve)(runtime.cwd, local.input), "utf8")));
       await requireWriteConsent({ yes: local.yes, global, runtime, preview: `Save a new immutable Blog draft revision?
 Project: ${local.project}
 Article: ${articleId}
@@ -2352,7 +2348,7 @@ Revision: ${local.revision}` });
   backlinkProspects.command("list").requiredOption("--project <project-id>").option("--stage <stage>").action(async (local) => {
     const global = program.opts();
     commandExitCode = await execute({ command: "backlinks prospects list", global, runtime, async action(context, client) {
-      const stage = local.stage ? import_contracts.BacklinkProspectStageSchema.parse(local.stage.toUpperCase()) : void 0;
+      const stage = local.stage ? import_contracts2.BacklinkProspectStageSchema.parse(local.stage.toUpperCase()) : void 0;
       const data = await client.backlinks.prospects.list(local.project, { stage }, { requestId: context.requestId });
       writeSuccess(context, data, JSON.stringify(data, null, 2));
     } });