@rolino/mcp 0.5.0-beta.0 → 0.6.0

package/CHANGELOG.md

@@ -1,5 +1,61 @@
 # @rolino/mcp
 
+## 0.6.0
+
+### Minor Changes
+
+- d162f85: Add safe Blog editorial cadence preview and apply operations across contracts, SDK, CLI, and MCP.
+- 50cb9fc: Add Google Business Profile as a disabled-by-default standard text and single-image publishing destination across shared public clients.
+- 1ac7ed5: Add signed custom Blog webhook setup, connection testing, one-time secret rotation, and safe idempotent replay parity.
+- a56f834: Replace custom interactive CLI authorization with exact-resource OAuth, add the stateless MCP 2026-07-28 transport foundation, and provide safe connection instructions for workspace discovery and confirmed actions.
+
+### Patch Changes
+
+- Updated dependencies [d162f85]
+- Updated dependencies [50cb9fc]
+- Updated dependencies [1ac7ed5]
+- Updated dependencies [a56f834]
+  - @rolino/contracts@0.6.0
+  - @rolino/sdk@0.6.0
+  - @rolino/local-auth@0.6.0
+
+## 0.5.0
+
+### Minor Changes
+
+- 4f9e790: Add the optional `blog:manage` capability and synchronized agent-first Blog
+  setup, import, cadence planning, plan review, article creation, confirmed
+  connection provisioning, and safe verification operations.
+- 1edd1e7: Add published Blog Studio delivery contracts and the server-only Next.js 16 Blog Studio package.
+- 74a13ea: Expose immediate versus scheduled delivery and destination lifecycle stages,
+  preserve YouTube visibility for immediate publishing, and clarify remote
+  schedule confirmation across public clients.
+- 4af607d: Add independent exact-bundle Blog approval, reviewed image upload and generation,
+  confirmed publication scheduling and cancellation, and the complete authorized
+  agent workflow without widening existing credentials.
+- 4a893dd: Add provider-neutral Blog publishing destinations, safe delivery inspection,
+  and exact destination binding across public agent interfaces.
+- 843a1db: Add the exact optional `seo:read` capability and bounded read-only SEO
+  opportunity and weekly-report parity across public agent contracts, clients,
+  CLI commands, and closed-world MCP tools. SEO reads now use the version 3 task
+  contract with the exact Ready, Research, or Rejected decision, selected format,
+  complete deliverables, bounded evidence, safe URLs, limitations, and no-publish
+  rules. Public output uses readable topic names and separate topic-relevance and
+  action-readiness confidence. Research tasks compare all supported formats and
+  must validate or reject the finding before a separate draft action is allowed.
+
+### Patch Changes
+
+- Updated dependencies [4f9e790]
+- Updated dependencies [1edd1e7]
+- Updated dependencies [74a13ea]
+- Updated dependencies [4af607d]
+- Updated dependencies [4a893dd]
+- Updated dependencies [843a1db]
+  - @rolino/contracts@0.5.0
+  - @rolino/sdk@0.5.0
+  - @rolino/local-auth@0.5.0
+
 ## 0.5.0-beta.0
 
 ### Minor Changes
@@ -37,6 +93,9 @@
 
 ### Minor Changes
 
+- Add exact Blog image generation and upload, image review, confirmed
+  exact-bundle approval, scheduling, and schedule cancellation tools with
+  shared contracts, safe errors, and truthful capability and safety annotations.
 - Add safe Blog provider, destination, and delivery tools plus destination-bound publication inputs.
 
 ## 0.4.0

package/README.md

@@ -13,7 +13,7 @@ installation so CLI-only users do not receive MCP runtime dependencies:
 npm install --global @rolino/cli @rolino/mcp
 ```
 
-The CLI handles browser authorization and writes token-free Codex or Claude
+The CLI handles standard OAuth Authorization Code with PKCE and writes token-free Codex or Claude
 Code configuration that points to this package's installed stdio entry point.
 Headless operators may install only `@rolino/mcp` and provide a scoped
 `ROLINO_TOKEN` explicitly.
@@ -96,10 +96,16 @@ preparation until LinkedIn confirms upload and processing. An optional
 3,000-character LINKEDIN caption override uses the shared caption as fallback.
 The connected member is always the author; Company Page publishing is outside
 this contract.
+Google Business Profile drafts can be text-only or contain one stored JPEG or
+PNG image with a stable public URL. The optional 1,500-character
+GOOGLE_BUSINESS_PROFILE update override uses the shared caption as fallback.
+The tools use the location selected in Rolino, create only standard updates,
+and never choose or change a Business Profile location. If final creation has
+an unknown outcome, inspect the selected Business Profile before retrying.
 Integration health is cached and secret-safe, post
 readiness reuses Rolino's publishing checks, and calendar reads use bounded
 date windows with cursor pagination. After `rolino auth login`, configure `ROLINO_URL` and
-the server automatically reuses the browser-authorized credential saved for
+the server automatically obtains and refreshes the API-resource OAuth token saved for
 that exact host. `ROLINO_TOKEN` remains an explicit override for CI and other
 headless environments. `ROLINO_CONFIG_DIR` can override the portable credential
 directory, and `ROLINO_TIMEOUT` is optional. Stdout is reserved for MCP
@@ -134,12 +140,15 @@ publication is reported. The preview reports `deliveryMode: "IMMEDIATE"` and
 `createsSchedule: false`; immediate publishing never enters schedule
 confirmation.
 
-MCP tools cannot enable YouTube, Bluesky, or LinkedIn or bypass a deployment's
-provider approval boundary. Self-hosted operators should complete the
+MCP tools cannot enable YouTube, Bluesky, LinkedIn, or Google Business Profile,
+or bypass a deployment's provider approval boundary. Self-hosted operators
+should complete the
 [YouTube operations guide](https://github.com/deifos/rolino/blob/main/docs/integrations/youtube.md)
 and
-[Bluesky operations guide](https://github.com/deifos/rolino/blob/main/docs/integrations/bluesky.md), and
+[Bluesky operations guide](https://github.com/deifos/rolino/blob/main/docs/integrations/bluesky.md),
 [LinkedIn operations guide](https://github.com/deifos/rolino/blob/main/docs/integrations/linkedin.md)
+and the
+[Google Business Profile operations guide](https://github.com/deifos/rolino/blob/main/docs/integrations/google-business-profile.md)
 before live testing.
 
 ## Support, security, and license
@@ -153,29 +162,63 @@ issues through the repository's
 `@rolino/mcp` is available under the MIT License.
 ## Agent-first Blog Studio tools
 
-The local stdio server exposes Blog readiness, import, cadence planning,
-plan-item evidence and state, editable article creation, connection status,
-confirmed provisioning, signed revalidation testing, and these provider-neutral
-publishing reads:
-
-- `list_blog_publishing_providers` requires `blog:manage` and returns only
-  enabled providers, safe capabilities, and official documentation.
-- `list_blog_publishing_destinations` requires `blog:read` and returns safe
-  connection readiness without credentials or private provider data.
-- `list_blog_delivery_attempts` requires `blog:read`, accepts an optional exact
-  article ID, and returns safe delivery states, retry times, error codes, and
-  remote URLs.
-
-These three tools are closed-world reads. They do not contact a provider or
-change content. They do not return draft content, prompts, evidence, secrets,
-or raw provider responses. Setup requires the
-independent optional `blog:manage` capability; it is never inferred from
-`blog:write` or `blog:publish` and is not added to existing credentials.
+The local stdio server exposes Blog readiness, import, cadence planning,
+plan-item evidence and state, editable article creation, connection status,
+confirmed provisioning, signed revalidation testing, and these provider-neutral
+publishing reads:
+
+- `list_blog_publishing_providers` requires `blog:manage` and returns only
+  enabled providers, safe capabilities, and official documentation.
+- `list_blog_publishing_destinations` requires `blog:read` and returns safe
+  connection readiness without credentials or private provider data.
+- `list_blog_delivery_attempts` requires `blog:read`, accepts an optional exact
+  article ID, and returns safe delivery states, retry times, error codes, and
+  remote URLs.
+- `generate_blog_image`, `upload_blog_image`, and `review_blog_image` require
+  `blog:write`. They cannot approve an article or publish it. Upload reads only
+  the exact local JPEG, PNG, or WebP path supplied to the tool.
+- `preview_blog_plan_cadence` and `apply_blog_plan_cadence` require
+  `blog:write`. Preview first, show every editorial move and locked item, then
+  apply only the unchanged preview values with its confirmation and a stable
+  idempotency key.
+- These cadence tools never change `scheduledPublishAt` and never schedule,
+  publish, or unpublish an article.
+- `generate_blog_image` already accepts optional editorial direction through
+  `editorialBrief` with a 500-character limit.
+- `preview_blog_revision_approval` and `execute_blog_revision_approval` require
+  the independent `blog:approve` capability. Execution makes the confirmed
+  exact bundle eligible for a separate publication operation; it cannot
+  publish.
+- `preview_blog_schedule`, `execute_blog_schedule`,
+  `preview_blog_schedule_cancellation`, and
+  `execute_blog_schedule_cancellation` require the independent `blog:publish`
+  capability. Scheduling causes future external publication but does not grant
+  approval. Cancellation removes only the confirmed future schedule and never
+  unpublishes a live article.
+
+The three publishing-read tools are closed-world reads. They do not contact a provider or
+change content. They do not return draft content, prompts, evidence, secrets,
+or raw provider responses. Setup requires the
+independent optional `blog:manage` capability; it is never inferred from
+`blog:write` or `blog:publish` and is not added to existing credentials.
 
 Read tools are closed-world. The signed revalidation test is accurately marked
 as an open-world write. Connection execute is confirmed, destructive, and
 idempotent; its first success may return one-time values that must be written
 only to server-side environment configuration. Errors and replays never reveal
-those values. These are local stdio tools—Rolino does not expose hosted remote
-MCP. Publication still requires a user-approved exact revision and the
+those values. These tools remain available over local stdio. The remote profile
+omits both caller-local media and Blog image uploads, and the hosted route stays hidden while its
+deployment gate is off. Publication still requires a user-approved exact revision and the
 separate publish preview/execute tools.
+
+Use the Blog tools in this order: read setup and current article or plan state;
+ask for a missing website, cadence, destination, or access level; import and
+plan through polled durable jobs; present evidence before bounded plan
+acceptance; create one immutable revision with catalog-backed links; generate
+or upload and review one image with alt text; stop for user approval when
+`blog:approve` is missing; otherwise preview and execute exact-bundle approval
+with its confirmation token and a stable idempotency key; stop after approval
+when `blog:publish` is missing; otherwise preview and execute unchanged
+publication or scheduling; poll delivery and verify the live URL; and restart
+from approval preview after any content or image change. Existing credentials
+do not gain `blog:approve`, and a queued delivery is not published.