Rolino fixed changes

Recovered article generation now resumes required image preparation without generating or charging for the text again.

Automatic article preparation now retries temporary conflicts and shows a clear review step when another credit needs confirmation.

Billing now shows ended subscriptions as past subscriptions, with an ended date instead of an upcoming cancellation. Current workspace access remains separate.

Billing credit and plan checks now run transaction queries in sequence to prevent the PostgreSQL overlapping-query warning.

Pricing cards now align their feature lists at the top, without a blank gap on plans that have no upcoming features.

Admin workspaces keep unlimited social account connections. Article regeneration allowances above three now save correctly, and lower allowances preserve prior usage.

A replaced Blog worker can no longer fail a newer generation. The article editor follows regeneration to the saved draft, and saves from older drafts are rejected even when their version numbers match.

Spanish notifications preserve account identity, recovery details, and the difference between TikTok inbox drafts and public posts. Failed operations keep specific recovery instructions, and command search finds translated navigation names.

Reduced database travel time by moving hosted server requests to Stockholm, near the Hetzner database. Analytics filters now show the selected value immediately and display an update indicator while results load.

TikTok inbox uploads can now be checked again after the creator publishes them. Rolino preserves every digit of TikTok's large public video IDs and can safely recheck completed receipts, so Social performance reads the exact video's statistics without guessing a match.

Temporary TikTok Sandbox review accounts no longer leave Integrations permanently blocked when TikTok cannot confirm test-token removal. Administrator Reconnect repairs an older block only for the exact disconnected account; live TikTok safety remains unchanged.

Reconnecting a disconnected publishing account now keeps it disconnected until the provider completes authorization instead of showing a premature pending state.

Integrations now keeps one active unfinished setup row per brand and platform. Restarting OAuth replaces the older callback and plan reservation, and expired setup rows return the platform to Available integrations.

TikTok Sandbox callbacks now complete through the local HTTPS tunnel without depending on cookies shared with localhost. Signed, expiring, user-bound, single-use state validation remains required.

Account release and disconnect confirmations keep long account names and action buttons within the dialog on small screens.

TikTok publishing connections no longer fail because the normal authorization request included the unapproved `video.list` analytics permission.

TikTok acceptance previews now show permission and rate-limit errors, preserve retry delays across page loads, and limit provider wait time. Preview results no longer replace saved report totals for TikTok or YouTube.

Deployment readiness now checks that the TikTok analytics migration has completed.

Brand setup now accepts lowercase voice labels from existing clients and short supported descriptions, keeps useful suggestions when AI confidence scores exceed the suggestion range, and preserves analysis failure reasons for diagnosis.

Post cards keep partial results, permission problems, and failed statistics checks visible beside saved counts. Single-post Analytics now labels all-date results correctly and applies the selected 30-day period.

Restricted reviewer authentication to sign-in and connection routes. Demo accounts cannot manage OAuth clients or change saved consent through account-management routes.

Onboarding now ignores invalid connection results and preserves setup without a website after returning to the social channel step, so the final summary shows the correct website status.

Brand creation now reuses an existing brand for the same website in a workspace, including concurrent onboarding requests. Website edits, agent-created brands, and first backlink targets cannot claim another brand's site. Brands with an unchanged legacy duplicate website can still save unrelated settings. Channel setup now keeps its saved onboarding address before leaving for authorization, so using the browser Back button cannot restart brand creation. Facebook setup now explains that users sign in with a personal account to connect a managed Page, while personal profiles cannot be publishing destinations. Facebook return results appear on the same setup step, and repeated idea-pipeline polls no longer report active insight work as failed.

Social performance keeps account failures and permission warnings visible while retaining saved metrics, including when the selected reporting window is unsupported. Analytics refreshes now reserve time to save results or record a retry before worker and lease deadlines.

Selecting a publishing account now opens its settings so required fields are visible. Accounts already selected when the editor opens also show their settings; the arrow still closes or reopens them.

Ctrl+B in the caption editor now formats selected text without also opening or closing the sidebar.

Local database tests now reject the application database before running migrations or cleanup, which protects saved settings and signing keys. CI can continue to use its disposable database.

Caption formatting now protects links with uppercase or mixed-case HTTP, HTTPS, and WWW prefixes, including when only part of a link is selected.

Brand settings links remain available in the collapsed sidebar after closing the section. The expanded sidebar keeps your section choice, and keyboard navigation skips the hidden section control.

The sign-in destination now declares its required authorization wait, and validation covers the new single-brand Home icon.