Rolino fixed changes

The sign-in page now fits common laptop-height viewports with smaller typography and a more compact card, while long brand names wrap safely inside Home recovery buttons.

Brand Studio now keeps the last completed marketing trend visible during refresh failures, respects disabled data-provider previews, prioritizes the most serious recovery action, and labels each metric with its own data-through date.

Hosted deployments now process queued Search Console and Google Analytics imports every minute, so Marketing overview trends do not remain in the preparing state.

Agent-friendly 404 probing now bypasses Next.js RSC navigation, prefetch, and refresh requests, so brand selection and sign-in links keep their normal client-side navigation without writable-stream errors.

The login page now preserves the TikTok decoration's aspect ratio without a browser image-sizing warning.

The OpenAPI description now derives every success response from the same Zod contract used at runtime, giving all 65 operations exact typed output schemas for agent function calling. The published Rolino skill now also includes an explicit when-to-use section with best-fit jobs and clear non-use boundaries.

Unknown public paths now return short Markdown recovery guidance to non-browser clients while preserving the existing visual HTTP 404 for browsers. Public pages bypass the recovery probe, and the probe no longer forwards an internally decoded response with stale compression headers. The homepage raw HTML now enforces readable text and a valid heading outline.

Rolino's root OAuth discovery URL now redirects to the RFC 8414 path-derived issuer metadata, and public agent documentation now describes the deployed remote MCP and its exact OAuth discovery resources truthfully.

Remote MCP now converts Next.js request objects into plain Web requests before Better Auth verification, preventing production-only private-state failures and restoring standard OAuth challenges.

Remote MCP now passes the real Better Auth instance to its OAuth guard, so unauthenticated initialization can return the standard authorization challenge instead of an internal error.

Session requests now pass the lazy Better Auth instance through the Next.js route adapter correctly instead of failing with `auth is not a function`.

Agent draft creation now uses one shared safety path for API and MCP requests, including durable failed retries and audit records, and deployment readiness now tracks the latest required database migration.

Fresh self-hosted databases now include Better Auth's internal team counters and membership keys, so owner bootstrap and the Compose smoke test can create the default team safely.

Production and container builds no longer need a reachable database to evaluate OAuth discovery routes or render the homepage. Current pricing now loads at request time inside a compact, stable, accessible placeholder while the rest of the homepage stays in the static shell.

Remote MCP never registers media or Blog image tools that read a caller-local file path; local stdio keeps both upload workflows.

API and MCP OAuth tokens now fail closed when used for the other resource, and OAuth scope failures return standard discovery challenges without weakening workspace, confirmation, idempotency, or audit checks.

Agent API errors now keep the same structured recovery contract for delivery authentication, unknown namespace roots, unsupported HTTP methods, and production edge failures, including matching request IDs, accurate OpenAPI success statuses, and contract version 0.17.0.

Public changelog pages now preserve wrapped entry text, publish exact pagination canonicals, and expose every category page through the sitemap.

The Contact page now sends private vulnerability reports directly to Rolino's GitHub advisory form.

Unknown Rolino API v1 routes now return a real JSON 404 with a stable error code, recovery hint, and request ID, while page 404s link agents to the sitemap, llms.txt, developer index, and agent guide.

Public Organization data now includes factual support contacts and an Ontario, Canada postal region, which makes Rolino's operator and contact details easier for agents and search engines to verify.

Admin customer search results now keep person details, workspace access, status, and support controls aligned without a horizontal scrollbar.

Google Business Profile reconnect attempts now keep an existing connection active when authorization is cancelled or fails, and provider setup pages show the correct OAuth result and recovery message.

The TikTok mockup now shows the correct commercial-content label immediately when disclosure settings change.

Malformed signup-source requests are now rejected without recording a permanent survey skip.

Publishing connection setup now rejects external or cross-brand recovery addresses before OAuth starts, including provider configuration failures.

Onboarding now validates edited brand details before creation and shows save failures on the screen where they occur.

Onboarding now shows the shared yellow corner glow behind its card, matching the signed-in workspace background.

Starting onboarding under a different account or workspace now resets the wizard to the first step instead of retaining a previous completion screen.

Publishing-network authorization now preserves its safe onboarding return address, so a successful connection returns to the channel step instead of opening Integrations.