Rolino changed changes

The public landing page can now switch between general availability and prominent inline FeedbackBasket signup forms through environment configuration, with coordinated animated waitlist signals and no login detour

Refined the authentication page with higher-contrast navy and teal accents, clearer workspace-creation styling, and a cleaner form footer without the redundant home link

The official hosted application, CLI, MCP, metadata, and email defaults now use `getrolino.com` as the canonical managed-service domain

Blog Settings now generates a one-time, copy-ready Next.js environment block and confirms before replacing active delivery and revalidation values.

Clarified Rolino's single-codebase open-source SaaS model: the production web application and server now use AGPL-3.0-or-later, integration-facing packages remain MIT, managed Stripe subscriptions pay for the official hosted service, and canonical self-hosting requires neither hosted billing nor a license key

Reworked the landing-page feature section into a spacious, product-led publishing canvas with original campaign imagery, softly floating social-network marks, and visual media, caption, preview, scheduling, validation, and human-approved agent handoff stories

Prepared Rolino's source tree for its dedicated public repository with product-neutral examples, honest workflow proof instead of implied customer endorsements, and repository links that resolve to `deifos/rolino`

CLI authorization now starts with read-only access and uses accessible shadcn checkbox cards so users explicitly choose draft, scheduling, and immediate-publishing permissions; existing credentials remain unchanged

Compacted the desktop CLI authorization screen to keep approval actions in view and brought the local terminal handoff page into Rolino's visual brand

Agent contract discovery now reports version 0.7.0, advertises browser CLI authorization, and exposes separate identity, project, post-read, draft-write, confirmed-scheduling, confirmed-publishing, integration-health, and calendar capabilities

New CLI and trusted-host credentials explicitly grant confirmed scheduling and publishing while older credentials retain their original scopes until reauthorized

CLI authorization now clearly grants identity and workspace reads, draft creation and editing, confirmed scheduling, and confirmed publishing while remaining unable to delete, manage teammates, access social credentials, or bypass confirmation

Existing agent credentials retain their original scopes; users must reauthorize to add draft-write access rather than having permissions expanded silently

Agent API keys now expire after 90 days by default across every creation path, require explicit organization binding, and fail closed for stale session organizations

CLI and MCP timeout configuration now shares one parser for milliseconds and `ms`, `s`, or `m` duration values

Local stdio MCP now reuses the browser-authorized, host-scoped CLI credential through a neutral Node-only package, while keeping `ROLINO_TOKEN` as the explicit headless override

The CLI now has an exact dependency allowlist and remains Axios-free by using the SDK's native `fetch` transport

Agent access now clearly communicates its organization-wide scope and uses the available desktop width for a dedicated setup rail while preserving a stacked responsive layout

Organization-wide Agent access now lives in the global Workspace navigation instead of a brand's settings, and credential revocation validates organization membership directly

Agent setup copy controls now sit above full-width command blocks so CLI and MCP instructions remain readable without horizontal scrolling

Self-hosted agent setup now prefers the runtime canonical authentication URL, allowing one generic container image to serve different domains without a Vercel build-time setting

The portable scheduler now runs publishing and agent coordination cleanup together and reports bounded cleanup counts in its structured tick log

Post versions now advance for web edits, media changes, scheduling, publishing, and worker status aggregation so agent `If-Match` checks also detect changes made outside the public API

The Agent access screen is now focused on connections and setup, with workspace and revocation guidance above the connection list while setup remains visible in the right rail; its CLI-to-MCP showcase now appears on the public landing page

Destructive UI actions now follow a repository-wide shadcn confirmation-dialog standard, including explicit cancellation and destructive confirmation treatments

Expanded contributor and self-hosting security guidance for agent API keys, package-boundary validation, MCP stdout isolation, and the remote transport security gate

Simplified the signed-in sidebar brand header and focused Connections on launch-ready Instagram and TikTok publishing accounts while hiding unfinished providers and empty sections

Centralized Rolino's product palette across semantic UI tokens, installed-app metadata, onboarding defaults, and authentication emails so future color changes happen in one configuration

Repositioned the public landing page around open-source Instagram and TikTok publishing, with direct human-and-agent messaging, a clear upload-to-publish workflow, agent-ready automation, and a populated product calendar that hides unfinished modules

Refreshed the app-wide design tokens with Rolino's yellow primary actions, yellow-tinted hover, selection, navigation, and status states, navy-tinted neutrals, accessible focus colors, and coordinated chart and dark-mode palettes