Rolino added changes

Onboarding now asks users to confirm one primary brand goal and stores it as structured brand context that can be changed later in Brand settings.

Personal Account settings now let signed-in users update their name without changing any brand or workspace name.

Users who skip publishing channels now arrive on Home with a temporary, goal-aware next action and an optional channel connection path.

Active Blog plans now show their saved cadence and let users preview and confirm weekday changes while keeping every topic, draft, scheduled date, and published date intact.

The Blog calendar now shows every topic when several topics share one editorial date, with a desktop calendar and mobile agenda.

Authorized agents can preview and apply Blog cadence changes through matching REST, OpenAPI, SDK, CLI, and MCP operations with `blog:write` and no wider credential access.

Blog image generation now accepts optional browser image direction with a 500-character count while preserving Rolino's safe base prompt and exact failed-request retries.

Rolino's public agent guides now teach the complete authorized Blog workflow, including exact approval, missing-scope stop rules, delivery verification, and reapproval after any content or image change.

Blog Settings now offers Review required, Agent approval, and Full publishing setup prompts without changing existing credentials, while article history and publication panels show safe approval provenance and recovery guidance.

The local Rolino MCP server now exposes exact Blog image, approval, schedule, and schedule-cancellation tools with shared contracts and truthful safety annotations for the independent Blog capabilities.

Hosted workspace owners now receive one on-brand reminder during the final three days of the local no-card trial, with durable delivery claiming and no repeated expiry email

Hosted platform admins can now open Better Auth's one-hour temporary session for an ordinary user from the bounded directory, see a persistent target banner throughout the app, exit back to Admin, and retain audited start and explicit-stop history without granting user-management or platform-admin impersonation permissions

Admin can now grant a prepared hosted plan to a workspace for 12 calendar months or permanently, then extend, make permanent, or revoke that access with explicit reasons, authorization checks, lifecycle-safe locking, audit history, and a destructive confirmation that preserves workspace data

Admin now has audited availability switches for every prepared billing plan, so operators can expose a replacement before hiding an older offer without editing Stripe or affecting existing subscribers; Founding automatically closes to new customers at 50 paid workspaces

Admin now includes one audited Checkout open/paused switch that stops only new subscription sessions while existing subscriptions, Stripe Portal access, and webhook processing continue normally

Hosted platform admins now have a separate, hosted-only operations console with bounded user/workspace search and read-only workspace access, usage, subscription, trial, complimentary-grant, founding, member, and audit context; self-hosted and ordinary users cannot access it

A shared catalog-driven pricing table now powers the landing page and workspace Billing settings, with monthly or annual pricing, Founding terms, self-hosting guidance, owner-only Stripe Checkout, and Stripe Portal access

Active hosted trials now show their remaining time and a direct path to workspace Billing without placing a user-wide paywall over invited workspaces

Official hosted deployments can now use owner-authorized Stripe Checkout and Stripe's default Customer Portal, with validated plan activation, permanent founding slots, replay-safe webhook reconciliation, payment recovery, and read-only refund or dispute holds; self-hosting remains Stripe-free

Stripe test mode now has immutable Founding and Starter monthly/annual prices plus plan-restricted customer portal configurations for billing validation

Hosted workspaces now have a self-hosting-first entitlement resolver plus concurrency-safe, owner-bound no-card trial claims that start with the first brand and retain lifetime eligibility history after workspace deletion

Platform-admin services can safely update bounded hosted defaults and audit trial extensions or early endings without exposing those commercial controls to self-hosted deployments

Hosted billing now has additive, versioned plan and Price records, durable trial and complimentary-grant history, founding-slot reservations, hosted configuration, and append-only administration audits

Operators can idempotently seed the draft Founding and Starter catalog and deliberately bootstrap exactly one verified hosted platform admin, while self-hosted platform-admin permissions remain disabled

Operators can generate a read-only, aggregate-only hosted workspace baseline at an explicit migration cutoff without exposing customer identifiers

An in-app notification center now surfaces publishing outcomes and connection problems, deduplicates repeated alerts, resolves recovered issues, and links directly to the affected post or connection

A top-of-app workspace switcher for every workspace an account owns or belongs to, with additional workspace creation and active workspace settings for renaming

Workspace-wide team management with secure Better Auth invitations, verified acceptance, member and admin role controls, pending-invitation recovery, and explicit confirmation before access removal

Opt-in Bluesky publishing with encrypted AT Protocol OAuth, text-only and four-image posts, accessible previews and alt text, live readiness and health, duplicate-safe retries, disconnect revocation, and matching web, API, SDK, CLI, and MCP behavior

Open-source Bluesky operations guidance, a production ES256 key generator, Docker configuration, migration readiness, and self-host diagnostics for OAuth origins, encryption, and signing keys