# Changelog

All notable changes to this project will be documented in this file.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

---

## [Unreleased]

### Added
- **Installer is now git-free** — Linux/macOS/Termux installer downloads source tarballs directly (only needs curl or wget; git removed as a dependency) and `social-live update` re-runs the latest installer while preserving `data/` untouched
- **Windows one-line installer** (`install.ps1`) — PowerShell `irm | iex` on Windows 10/11: provisions portable Node.js and FFmpeg into `%USERPROFILE%\.social-live` (no admin rights), downloads/builds the app, registers a logon Scheduled Task, and installs a `social-live.cmd` control command with `update`/`-Uninstall`

## [0.3.0] - 2026-09-24

### Added
- **One-line installer** (`install.sh`) for Linux, macOS and Termux — provisions Node.js and FFmpeg (prefers user-local runtimes, minimal sudo), clones/builds SocialLive into `~/.social-live`, registers a background service (systemd user unit / launchd), and installs a `social-live` control command with `start | stop | status | doctor | update` plus `--uninstall`
- **`.env` loading** — the server now reads `KEY=VALUE` from `.env` in the working directory at startup (existing environment variables win; no dotenv dependency)
- **Shellcheck in CI** — the installer is linted on every push

## [0.2.1] - 2026-09-23

### Fixed
- **Output frame rate is now forced (default 30 FPS, `VIDEO_FPS` env)** — the encoder previously passed the source video's frame rate through, so 24 FPS videos triggered Kick's `MISCONFIGURED` session state (with a "use 30 or 60 FPS" warning) even though the stream arrived. Kick requires 30/60 FPS input; YouTube and Twitch are unaffected.
- Server `version` string now reflects the release (was stale at 0.1.0).

## [0.2.0] - 2026-09-23

### Added
- **Twitch support** — stream to Twitch via RTMPS stream key (`@social-live/twitch` adapter)
- **Kick support** — stream to Kick via RTMPS stream key with IVS contribution ingest (`@social-live/kick` adapter)
- **Multi-platform streaming** — one video can now go live to any combination of YouTube, Facebook, Twitch, and Kick simultaneously
- **Brand icons** — Twitch and Kick marks in the dashboard (colors match each platform)
- **Upgrade-path test** — automated coverage for schema migrations on existing databases

### Changed
- **License**: MIT → **AGPL-3.0-or-later**. Copyleft protects the project from closed-source hosted forks: anyone modifying SocialLive and serving it over a network must publish their changes. Self-hosting (personal or commercial) is unaffected.
- **Database schema v2** — destinations table rebuilt without the hard-coded platform `CHECK` constraint (existing destinations and encrypted keys are preserved); platform validation now lives in the zod schema + platform adapters
- **Build order** — root `npm run build` compiles `@social-live/shared` first so fresh clones build reliably on every npm version

### Fixed
- CI: install FFmpeg so the streaming E2E test runs; build before typecheck on fresh checkouts

## [0.1.0] - 2026-09-23

### Added
- **Core streaming engine**: FFmpeg process management with auto-reconnect, exponential backoff, and progress parsing
- **YouTube Live support**: Manual stream key mode with ingest URL configuration
- **Facebook Live support**: Persistent stream key mode
- **Multi-destination streaming**: Single video → multiple platforms simultaneously, independent FFmpeg processes
- **Browser dashboard**: React 19 + Material UI 7, light/dark/system theme, responsive
- **Video library**: Upload (drag & drop), validation (signature + ffprobe), thumbnails, search, rename, delete
- **Stream wizard**: 5-step guided creation (video → destinations → config → review → start)
- **Scheduled streams**: Background scheduler, works without browser open
- **Loop modes**: None / Repeat N times / Infinite
- **Real-time monitoring**: FPS, bitrate, duration, reconnect count per destination
- **Stream logs**: FFmpeg output captured and redacted (stream keys masked)
- **History page**: Filterable log of all completed/failed streams
- **Local authentication**: First-run admin setup, secure sessions, password change
- **Encryption at rest**: AES-256-GCM for destination credentials, scrypt for passwords
- **SSRF protection**: Private IP/hostname blocking, DNS resolution validation
- **Diagnostics CLI**: `social-live doctor` — checks Node, FFmpeg, DB, storage, port, encryption
- **Docker support**: Multi-stage build, docker-compose, Caddy reverse proxy config
- **Termux/Android support**: Documented setup, low-bitrate presets
- **Comprehensive test suite**: 41 tests (unit + integration) including full streaming E2E
- **Full documentation**: Installation, configuration, platform guides, usage, troubleshooting, security, developer guide

### Security
- Stream keys never logged, never in browser storage, never in API responses
- AES-256-GCM encryption at rest with master key from environment
- scrypt password hashing (N=16384)
- Rate limiting on sensitive endpoints
- Secure cookies (HttpOnly, SameSite, signed)
- Security headers (CSP, HSTS, etc.) in production

> Roadmap lives in the [README](README.md#-roadmap).