@rolino/mcp 0.7.0 → 0.8.0

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @rolino/mcp
 
+## 0.8.0
+
+### Minor Changes
+
+- 4e123ef: Add exact storage usage, bounded workspace media listing with required project context, and entitlement-checked, confirmation-bound Media Library cleanup across the shared contracts, SDK, and MCP tools. Cleanup status now reports a safe changed-asset skip when the confirmed workspace, project, storage identity, or asset version no longer matches.
+
+### Patch Changes
+
+- Updated dependencies [4e123ef]
+  - @rolino/contracts@0.8.0
+  - @rolino/sdk@0.8.0
+  - @rolino/local-auth@0.8.0
+
+## 0.7.1
+
+### Patch Changes
+
+- @rolino/contracts@0.7.1
+- @rolino/sdk@0.7.1
+- @rolino/local-auth@0.7.1
+
 ## 0.7.0
 
 ### Minor Changes

package/README.md

@@ -28,8 +28,12 @@ Initial tools:
 - `list_projects`
 - `get_project`
 - `create_project`
-- `list_media_assets`
-- `upload_media_asset`
+- `list_media_assets`
+- `get_storage_usage`
+- `preview_media_cleanup`
+- `execute_media_cleanup`
+- `get_media_cleanup_status`
+- `upload_media_asset`
 - `list_posts`
 - `get_post`
 - `create_draft_post`
@@ -62,7 +66,17 @@ The media tools discover reusable project assets and stream one explicitly
 approved local JPEG, PNG, WebP, MP4, or MOV file directly to configured
 storage. Rolino derives dimensions and video duration from the stored object.
 Uploading never creates, schedules, or publishes a post; the returned
-asset ID is passed into a later draft operation.
+asset ID is passed into a later draft operation.
+
+`get_storage_usage` and `list_media_assets` are bounded closed-world reads.
+Cleanup requires the separate `media:delete` permission. Preview creates an
+exact confirmation but deletes nothing. Before execute, show the upload-age
+cutoff, candidate count, excluded in-use count, unknown-size count, and estimated
+space. A general request to free space is not execute approval. Execute queues
+only the unchanged confirmed files with an idempotency key. In-use files are
+never detached, and queued bytes remain counted until physical deletion succeeds.
+The deletion worker skips a file without contacting storage if its confirmed
+workspace, project, asset, storage identity, or version changed.
 
 The tool set includes discovery and inspection tools that are read-only.
 The four SEO tools require the exact optional `seo:read` capability. They are

package/dist/bin.cjs

@@ -52,7 +52,7 @@ var z = __toESM(require("zod/v4"), 1);
 // package.json
 var package_default = {
   name: "@rolino/mcp",
-  version: "0.7.0",
+  version: "0.8.0",
   description: "Model Context Protocol server for Rolino",
   type: "module",
   license: "MIT",
@@ -111,9 +111,9 @@ var package_default = {
   dependencies: {
     "@hono/node-server": "2.0.12",
     "@modelcontextprotocol/server": "2.0.0",
-    "@rolino/contracts": "0.7.0",
-    "@rolino/local-auth": "0.7.0",
-    "@rolino/sdk": "0.7.0",
+    "@rolino/contracts": "0.8.0",
+    "@rolino/local-auth": "0.8.0",
+    "@rolino/sdk": "0.8.0",
     zod: "^4.4.3"
   },
   devDependencies: {
@@ -252,6 +252,8 @@ var readOnlyAnnotations = {
 };
 var backlinkOpenWorldAnnotations = { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: true };
 var backlinkWriteAnnotations = { readOnlyHint: false, destructiveHint: false, idempotentHint: true, openWorldHint: false };
+var cleanupPreviewAnnotations = { readOnlyHint: false, destructiveHint: false, idempotentHint: false, openWorldHint: false };
+var cleanupExecuteAnnotations = { readOnlyHint: false, destructiveHint: true, idempotentHint: true, openWorldHint: true };
 var blogPublicationWeekdaysSchema = z.array(z.number().int().min(0).max(6)).min(1).max(7).superRefine((weekdays, context) => {
   if (new Set(weekdays).size !== weekdays.length) {
     context.addIssue({ code: "custom", message: "Weekdays must be unique." });
@@ -432,20 +434,83 @@ function createRolinoMcpServer(options = {}) {
   });
   server.registerTool("list_media_assets", {
     title: "List Rolino media assets",
-    description: "List reusable images and videos in one exact project. Use this before uploading to avoid duplicates and pass returned asset IDs when creating or updating drafts. This tool never changes Rolino data.",
+    description: "List reusable images and videos in one exact project or across the selected workspace. Filters use upload time, not last-use time. Results state whether each file is in use and can be deleted. Use this before uploading to avoid duplicates and pass returned asset IDs when creating or updating drafts. This tool never changes Rolino data.",
     inputSchema: z.object({
-      projectId: z.string().min(1).describe("Exact Rolino project ID."),
+      projectId: z.string().min(1).optional().describe("Exact Rolino project ID. Omit for the selected workspace."),
       limit: z.number().int().min(1).max(100).default(50),
       cursor: z.string().min(1).optional(),
       type: z.enum(["IMAGE", "VIDEO"]).optional(),
-      query: z.string().trim().min(1).max(100).optional()
+      query: z.string().trim().min(1).max(100).optional(),
+      createdBefore: z.string().datetime({ offset: true }).optional().describe("Return files uploaded before this absolute instant."),
+      createdAfter: z.string().datetime({ offset: true }).optional().describe("Return files uploaded after this absolute instant."),
+      unusedOnly: z.boolean().optional(),
+      order: z.enum(["OLDEST_FIRST", "NEWEST_FIRST"]).default("NEWEST_FIRST")
     }),
     outputSchema: import_contracts.MediaAssetListDataSchema,
     annotations: readOnlyAnnotations
-  }, async ({ projectId, limit, cursor, type, query }) => {
+  }, async ({ projectId, limit, cursor, type, query, createdBefore, createdAfter, unusedOnly, order }) => {
     try {
       if (!api.media) throw new TypeError("This Rolino client does not support media operations.");
-      return jsonResult(await api.media.list(projectId, { limit, cursor, type, query }));
+      const options2 = { limit, cursor, type, query, createdBefore, createdAfter, unusedOnly, order };
+      if (projectId) return jsonResult(await api.media.list(projectId, options2));
+      if (!api.media.listWorkspace) throw new TypeError("This Rolino client does not support workspace media listing.");
+      return jsonResult(await api.media.listWorkspace(options2));
+    } catch (error) {
+      return errorResult(error);
+    }
+  });
+  server.registerTool("get_storage_usage", {
+    title: "Get Rolino storage usage",
+    description: "Read exact stored bytes, active upload reservations, available upload capacity, pending deletion bytes, and the source breakdown for the selected workspace. Unlimited workspaces still report actual stored bytes. This tool never changes Rolino data.",
+    inputSchema: z.object({}),
+    outputSchema: import_contracts.StorageUsageSchema,
+    annotations: readOnlyAnnotations
+  }, async () => {
+    try {
+      if (!api.storage) throw new TypeError("This Rolino client does not support storage operations.");
+      return jsonResult(await api.storage.getUsage());
+    } catch (error) {
+      return errorResult(error);
+    }
+  });
+  server.registerTool("preview_media_cleanup", {
+    title: "Preview a Rolino media cleanup",
+    description: "Find at most 500 exact unused Media Library files and create a short-lived confirmation. The age filter means upload age. This deletes nothing. Show the cutoff, candidate count, excluded in-use count, unknown-size count, and estimated reclaimable space to the user before asking for confirmation.",
+    inputSchema: import_contracts.MediaCleanupPreviewRequestSchema,
+    outputSchema: import_contracts.MediaCleanupPreviewSchema,
+    annotations: cleanupPreviewAnnotations
+  }, async (input) => {
+    try {
+      if (!api.media?.previewCleanup) throw new TypeError("This Rolino client does not support media cleanup preview.");
+      return jsonResult(await api.media.previewCleanup(input));
+    } catch (error) {
+      return errorResult(error);
+    }
+  });
+  server.registerTool("execute_media_cleanup", {
+    title: "Execute a confirmed Rolino media cleanup",
+    description: "Permanently delete only the exact unchanged candidates from preview through Rolino's durable deletion queue. A general request such as 'free some space' is not approval. Call this only after the user explicitly confirms the shown cutoff, candidate count, excluded count, unknown-size count, and estimated space. Use one stable idempotency key for retries.",
+    inputSchema: import_contracts.MediaCleanupExecuteRequestSchema.extend({ idempotencyKey: z.string().min(1).max(200) }),
+    outputSchema: import_contracts.MediaCleanupExecuteResultSchema,
+    annotations: cleanupExecuteAnnotations
+  }, async ({ idempotencyKey, ...input }) => {
+    try {
+      if (!api.media?.executeCleanup) throw new TypeError("This Rolino client does not support media cleanup execution.");
+      return jsonResult(await api.media.executeCleanup(input, { idempotencyKey }));
+    } catch (error) {
+      return errorResult(error);
+    }
+  });
+  server.registerTool("get_media_cleanup_status", {
+    title: "Get Rolino media cleanup status",
+    description: "Read bounded progress for one cleanup. Queued and retrying bytes still count as stored until object deletion succeeds. This tool never returns storage keys or provider errors.",
+    inputSchema: import_contracts.MediaCleanupStatusQuerySchema.extend({ cleanupId: z.string().min(1).max(200) }),
+    outputSchema: import_contracts.MediaCleanupStatusSchema,
+    annotations: readOnlyAnnotations
+  }, async ({ cleanupId, ...query }) => {
+    try {
+      if (!api.media?.getCleanupStatus) throw new TypeError("This Rolino client does not support media cleanup status.");
+      return jsonResult(await api.media.getCleanupStatus(cleanupId, query));
     } catch (error) {
       return errorResult(error);
     }