Add marketing recommendations and action commands

[gumclaw]

What

Add gumroad marketing recommend <product> and approve|schedule|cancel|status <action>, with the same commands exposed by the existing MCP registry. Every mutation previews the exact text, account and link; scripts use --yes, and approve/schedule additionally require --confirmation-token from the seller-reviewed preview. MCP does not silently inject confirmation for marketing.

Ref antiwork/gumroad-private#2721. Depends on antiwork/gumroad#7724, merged 2026-09-17: the API is on main but not yet deployed, so this CLI must not be released (tag) until that deploy lands. Merging the CLI does not release it.

Why

Keep the CLI a thin client of the existing seller marketing engine—no local scheduler or marketing state. schedule invokes the server's immediate execute operation, not a future-dated send; help and the agent skill say so explicitly.

Specs

• go test ./internal/cmd/marketing ./internal/cmd/mcp ./internal/cmd -count=1 -cover:
  • ok github.com/antiwork/gumroad-cli/internal/cmd/marketing 0.908s coverage: 100.0% of statements
  • ok github.com/antiwork/gumroad-cli/internal/cmd/mcp 1.813s coverage: 100.0% of statements
  • ok github.com/antiwork/gumroad-cli/internal/cmd 0.921s coverage: 93.9% of statements
• httptest coverage includes command paths, stable keys, preview contents, no-confirm refusal, dry-run, missing server fields, output escaping, and in-memory MCP discovery/calls. Removing confirmation fails all three mutation subtests; restoring MCP's implicit --yes fails TestMarketingToolsRequireExplicitConfirmation; removing the reviewed-token comparison fails approve/schedule's old-preview subtests. Restored focused suite is green.
• Full make test-cover was attempted twice, including serial package execution: two media upload timing tests fail. Both also fail on unchanged origin/main with S3 calls = 2, want 3: TestPutDirectUpload_TimesOutEachAttempt and TestMediaUpload_DirectStateUnknownCarriesRecovery. Not changed here; the full-suite coverage gate remains unpassed locally.
• Pinned golangci-lint with --timeout=5m, gofmt, and git diff --check pass.
• Paired Rails verification: 95 examples, 0 failures; existing Share card: Test Files 1 passed (1) / Tests 6 passed (6). Idempotency-key reuse mutation: 1 example, 1 failure, then restored Rails suite green.
• The first panel found a noninteractive preview race; now --yes cannot approve/execute a freshly substituted token. Regression and mutation tests pin the reviewed-token check.

QA

1. Enable auto_marketing for a test seller, publish a product, and open the Share tab; use the same seller's edit_emails OAuth token.
2. gumroad marketing recommend <product> --json; show the exact action text, account and link to the seller. After confirmation run gumroad marketing approve <action> --yes --confirmation-token <reviewed-token>, then gumroad marketing schedule <action> --yes --confirmation-token <reviewed-token>.
3. Repeat approve/schedule and inspect gumroad marketing status <action>: same row, no second post. Missing confirmation or a changed token refuses the write. Cancel only before the executor claims it.
4. The built CLI was exercised against the real local Rails branch/database, with only outbound X stubbed: one action and one X request after repeated approval/execution, plus flag-off denial. No real social post was sent.

Before/after

Filtered replay of the captured real CLI/Rails transcript; synthetic IDs/tokens are replaced with placeholders and timing is replayed for readability.

Review rounds

• Independent panel re-run @ b11b4f2a (gpt-6-astra + claude-fable-5-1): 0 findings, patch correct (0.86).
• API shape re-checked against the final antiwork/gumroad#7724 head (05d714de, merged 2026-09-17): GET products/:id/marketing/recommendations, GET/POST marketing_actions/:id and /:id/approve|/execute|/cancel, idempotency_key + confirmation_token sent as form params, {success, marketing_action, handle} responses with id, idempotency_key, confirmation_token, post_text, link_url, external_url, error_code, status — all match this CLI.

Premerge review: clean @ b11b4f2

---

Built with GPT-6 Astra; reviewed with the Astra + Fable panel. Prompt: implement paired marketing API/CLI drafts for Gianfranco, reuse the existing engine, confirm exact content, prove guards with mutations, and do not merge or modify Gumhead.

[tastelint]

Tastelint

Neither screenshot shows a user interface — one is a mostly blank terminal frame and the other is captured test output — so there is nothing to review here.

[tastelint]

Tastelint

Neither screenshot shows a user interface — one is an empty terminal frame and the other is captured test output, so there is nothing to review here.

[greptile-apps]

Confidence Score: 5/5

The PR appears safe to merge, with no actionable correctness, security, or repository-rule violations identified.

Summary

This PR adds marketing recommendation and action lifecycle commands to the CLI and exposes them through MCP while preserving explicit seller confirmation for marketing mutations.

• Adds recommend, status, approve, immediate schedule/execute, and cancel commands.
• Fetches and displays the exact action preview before every mutation.
• Requires an explicit reviewed confirmation token for noninteractive approval and execution.
• Prevents MCP from implicitly confirming marketing mutations.
• Documents the workflow, immediate scheduling semantics, response fields, and retry guidance.
• Adds focused CLI and MCP lifecycle, confirmation, output, dry-run, and error tests.

Diagram

sequenceDiagram
    participant Seller
    participant CLI_or_MCP as CLI / MCP client
    participant API as Gumroad marketing API

    CLI_or_MCP->>API: GET product recommendations
    API-->>CLI_or_MCP: action, handle, text, link, confirmation token
    CLI_or_MCP-->>Seller: Show exact account, text, and link
    Seller->>CLI_or_MCP: Confirm reviewed preview
    CLI_or_MCP->>API: GET current action
    API-->>CLI_or_MCP: Current preview and token
    CLI_or_MCP->>CLI_or_MCP: Verify reviewed token
    CLI_or_MCP->>API: POST approve / execute / cancel
    API-->>CLI_or_MCP: Updated action and posting status

Loading

_{Reviews (1) · Last reviewed commit: "Bind scripted marketing confirmation to ..."}