@se-studio/skills 1.9.7 → 1.9.8

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # @se-studio/skills
 
+## 1.9.8
+
+### Patch Changes
+
+- Document role-gated publish, and allow browser CORS on the OAuth token and register routes.
+
 ## 1.9.7
 
 ### Patch Changes

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@se-studio/skills",
-  "version": "1.9.7",
+  "version": "1.9.8",
   "description": "SE Studio agent skills for marketing site development with Contentful CMS",
   "repository": {
     "type": "git",

package/skills/contentful-cms-core/SKILL.md

@@ -25,12 +25,7 @@ Use this skill when you need to read or edit content in Contentful using **hoste
 
 ## Safety Rules
 
-**This tool CANNOT and WILL NOT:**
-- Publish any entry
-- Unpublish any entry
-- Archive or delete published entries
-
-All `save` operations create **draft** versions. A human must review and publish in Contentful.
+`save` writes **drafts**. Publish, unpublish, and archive use `publish plan`, then `publish apply` after an explicit yes, and only when the signed-in Contentful role allows it. AI Editor cannot. Do not publish as part of save.
 
 **Assets:** Upload **is** supported (`asset upload`). Default workflow: **search and reuse** existing assets first (`index sync` → `asset search`). Search by concept (`asset search --concept` / `--concept-all`) finds a subject and a tone, including files no page uses yet. Concepts are not blog tags. When uploading:
 - **Raster/video:** `cms_edit_request_staged_upload` → curl → `cms_edit_media` prepare → wait → catalog → import with real alt. Video, and an image master over 4MB, is a presigned direct PUT (100MB, `intake: direct`) then prepare with that URL. Smaller images still use `stagedUploadIds`. Never `asset upload --staged/--url/--base64` for jpeg/png/webp/gif/mp4. The stored asset is the processed file.
@@ -204,7 +199,7 @@ Shows a diff of all modified fields across all changed entries.
 cms-edit save
 ```
 
-Writes all changes to Contentful as **drafts**. The changes are visible in Contentful's web app but NOT live until a human publishes them.
+Writes all changes to Contentful as **drafts**. They stay drafts until `publish plan` then `publish apply`, after an explicit yes, and only if the Contentful role allows it.
 
 After saving, the session is cleared automatically if all changes were saved.