Rolino fixed changes

Home Open calendar now opens today in your local time zone. The cross-brand calendar shows its date and zone, keeps them during day navigation, and provides a Today action.

Calendar post details now show saved images, playable videos, and all carousel items across platforms, with the destination caption and a link to the published post. Missing older media is clearly identified.

Calendar cards now show delivery status at a glance with accessible icons and a status legend. Hover details show the scheduled time without an artificial end time.

Open calendars now update delivery status automatically, including open post details and deliveries that need attention. Checks pause while the tab is hidden or a schedule is being edited.

The schedule date/time picker now has a clear visual boundary, smooth time-column scrollbars, and a Done button that closes the picker without scheduling the post.

New Bluesky images can upload before the stored-file check. Storage errors now explain the next step, and a failed check no longer asks you to replace an image without a confirmed file problem.

Integration connection buttons now show a loading spinner immediately, block repeated requests, and become usable again after failed or cancelled navigation.

Bluesky account connections now complete the database session lock without a result-decoding error. Failed connections record safe diagnostic categories without exposing credentials.

Onboarding now keeps long step names below the progress markers on mobile, so channel choices and form controls remain fully visible. Channel tiles use two columns on tablets and four on desktop to keep their labels readable.

Release checks now cover the current landing-page audience, product previews, and keyboard-accessible FAQ. Design guidance now consistently specifies the shared decorative backgrounds.

The landing page's agent setup is now always visible. Its setup prompt, copy button, and guide link are readable in light and dark mode.

Landing page visitors can now open navigation and log in on mobile or skip to the content with a keyboard. Product previews now use consistent supported channels and clearly mark example content.

Agent recovery now reports contract version 0.20.0 and accepts ISO 8601 publication times with explicit UTC offsets.

YouTube now accepts completed public videos before changing schedules. Delivery refreshes preserve pending schedule approvals, and due checks share worker capacity across platforms. Missed private schedules require a new publication decision.

Publishing connections now replace stale health results after reconnecting and clear resolved connection errors without starting a new upload.

Manual-only delivery checks now stop after they return an unresolved result, and saved deliveries with a removed connection return a clear reconnect action.

Post destination badges now remain stable when sorting changes the card order.

Brand Studio now asks for connection attention only after an actionable provider failure or when scheduled work depends on an unavailable channel. Optional disconnected channels and normal access-token expiry with a refresh path no longer appear as broken, while expired connections without a refresh path still require attention.

The desktop month calendar now gives every week enough room for complete post cards, scrolls instead of compressing crowded months, and shows every event with its destination and scheduled time from the **+N more** list. Week view now keeps its time-grid scrollbar hidden until the user points into or focuses the scrollable area. Agenda view now fits its surface to the visible rows and contains long event titles within the available width instead of leaving a large blank area or adding a horizontal scrollbar. On small screens, Agenda now uses grouped day sections with readable times and two-line event titles instead of compressing the desktop table.

Media cleanup workers now bind every deletion to the confirmed workspace, project, asset, storage identity, and asset version. Changed files are skipped without contacting storage, and browser deletion retries now appear in pending storage without double-counting stored media.

Storage reports and cleanup previews now use consistent database snapshots, API media routes have database-backed filter and isolation coverage, packaged and remote MCP tests execute every storage-cleanup operation, and Tiptap 3.31.2 removes the reported production dependency advisory.

Agent Media Library cleanup now respects read-only workspace entitlements during preview and confirmed execution, keeps cleanup history when expired idempotency records are removed, records replay, rejection, worker, and final outcomes, and fully describes media filters and status pagination in OpenAPI.

Hosted storage now counts adjusted Instagram and LinkedIn images, keeps transformed-file bytes reserved when browser or agent post edits replace media until object deletion succeeds, and atomically rejects upload completion when its reservation expired or capacity changed. Pricing structured data now exposes monthly and annual offers together.

Workspace Billing and Media Library now show a consistent storage bar and stored usage for uncapped legacy and self-hosted workspaces instead of hiding the storage row.

Hosted storage limits now include reserved uploads during admission checks, count only stored files in customer usage, cover generated Blog images, and release Media Library capacity only after object deletion succeeds.

The preregistered CLI now keeps valid OAuth resource links for each deployment and repairs a missing link on the next authorization request, so a local process cannot break production CLI sign-in.

SEO opportunity listing and detail reads now expose only canonical public tasks, skip incompatible internal detector rows without failing the complete request, and keep pagination correct when raw findings exist.

Verified native OAuth clients can now use a temporary port with an exact `localhost` callback, so clients such as Claude Code can complete browser authentication without widening the registered scheme, host, path, or query.

Repository secret scans now exclude two exact non-secret test labels without weakening scans for other values or files.

Production dependency installs now use patched URL parsing and MySQL driver versions required transitively by the application, authentication, and database toolchain, so the high-severity package audit passes.