# Changelog

All notable changes to this project are documented in this file.

The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/), and this project
adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).

## [Unreleased]

## [0.2.0] - 2026-10-21

The first release under the GNU AGPL-3.0 with a commercial licence option — see [LICENSING.md](./LICENSING.md).

### Added

- **The agent now knows what a programme is, and cannot mark a phase done without evidence.**
  Handed a 3,450-line production specification, the Engineer wrote the whole system in one turn,
  filled the spec's phase table with "Completed — Turn 1" for every phase, cited the starter's
  `Note` tests as proof and shipped hardcoded jobs and a seeded fictional candidate
  (`docs/case-studies/001-spec-driven-production-build.md`). Three changes, one per cause. The
  system prompt gains a `<programme>` section — a specification is recognised as many turns of
  work, read whole, planned in a `PROJECT_EXECUTION.md` phase table, built foundation-up and
  decomposed by domain — plus a truthful-data rule that replaces the old "build the UI against
  clearly-marked placeholder data" licence: nothing fabricated on a production path, unconfigured
  integrations report themselves, invented data lives only in test fixtures and a flagged
  development seed. The harness reads the phase table back at the end of every turn
  (`apps/agent/src/programme.ts`) and hands back any DONE that names no existing test file or
  records no evidence — a fact the model cannot talk its way past. And a new skill,
  `spec-driven-production-build`, carries the playbook the successful rebuild followed: probe every
  external API and record real fixtures before writing a connector, exercise each layer before
  the next, tests that encode the spec's rules, drive the running app before claiming, audit for
  the class when one instance of a defect is reported. Auto Mode's ceilings scale for a programme
  (24 passes / 40M tokens / 4 h) and the six-new-files checkpoint is off for one; the
  `python-backend` guide stops steering a whole backend into `main.py` and every screen into one
  `views.tsx`.

- **The build agent can make and place video, and `/cinematic` no longer stalls.** `cinematic_pass`
  could already build a scroll-driven hero, but it stopped and asked a human for footage, because
  Zelyq could not make any — every cinematic build waited on someone finding a clip and dragging it
  in. With video generation switched on for a project the pass now produces its own footage,
  extracts the frame sequence, and carries on, saying in its review that the footage is generated
  rather than real. Four tools — `list_generated_videos`, `generate_video`, `place_video`,
  `place_video_frames` — on the same bridge pattern as images: the agent never holds the video API
  key, and each clip is recorded against the connecting user, so it appears in their own Video
  Studio library.
- **Two new slash commands, `/video` and `/cinematic`.** They exist because the two techniques are
  the ones people confuse and both directions are expensive to get wrong. `/video` puts ambient
  motion in a section — one clip, muted and looping behind the copy. `/cinematic` makes a section
  play as you scroll — a frame sequence painted onto a canvas. Each directive names the other, so
  when the agent has been asked for the wrong one it can say so. The prompt carries the full
  four-way choice: stock photography for anything real, a loop for ambient motion, a scrubbed
  sequence for motion driven by scroll position, WebGL for real-time 3D.
- Agent video is **off per project** until someone turns it on, with its own toolbar toggle and its
  own permission — the image permission does not authorise video spending, because a clip costs far
  more than a picture. Bounded by `ZELYQ_VIDEO_SESSION_LIMIT` (2 per conversation, against images'
  6) and the hourly cap already shared with Video Studio.

- **Frame export in Video Studio** — split a finished clip into a numbered image sequence, in WebP,
  JPEG, PNG or AVIF, at a chosen frame count and width. The output is deliberately the exact shape
  the bundled `cinematic-web` scroll-scrub recipe already reads: `frame_0001.webp…`, a `poster`, and
  a `manifest.json` carrying the count and dimensions, so a scroll-scrubbed hero can be built from a
  generated clip without hand-extracting anything. That recipe previously had to tell the agent to
  ask the user for a pre-extracted sequence, because no `ffmpeg` was available; `ffmpeg-static` is
  now packaged the same way `ffprobe-static` already was. Download the whole set as one ZIP, or fetch
  frames individually. Re-extracting replaces the previous set, frame bytes count against the same
  storage budget as clips, and deleting the video takes its frames with it. See
  [frame export](docs/Video-gen/frame-export.md). Packaging ffmpeg also gave every finished video a
  real **poster**, taken from the middle of the clip — a text-to-video result previously showed a
  grey film icon in the library, because the only picture it could offer was a starting image it
  never had.

- **Video Studio** — a signed-in page at `/video-studio` for generating short clips from a prompt or
  animating a still image, with Google (Veo) and xAI (Grok Imagine) adapters, each with its own key
  and model. Ratio, duration, resolution and audio are offered only where the selected model supports
  them, and rejected server-side otherwise. A starting frame can be uploaded or chosen from your
  Image Studio library, in which case it is copied into video storage so deleting the original image
  cannot break an accepted job. Video generation is long and asynchronous, so the work is built
  around that rather than around the image contract: the provider's operation handle is persisted
  before it is needed, polling resumes after a restart, leases are fenced so two workers cannot both
  commit, and a submission whose outcome cannot be established is reported as unconfirmed instead of
  being silently retried — it may already have been billed. Finished clips are saved to private
  storage and keep playing after the provider's temporary URL expires, streamed to their owner with
  HTTP range support so seeking works. Queued jobs can be cancelled; submitted ones say plainly that
  they cannot. Capacity and spending are bounded by `ZELYQ_VIDEO_CONCURRENCY` and
  `ZELYQ_VIDEO_HOURLY_LIMIT`, both separate from images so a slow clip cannot occupy an image slot.
  See [Video Studio](docs/Video-gen/README.md).

- **Image Studio** — a signed-in page at `/image-studio` for generating original images from a
  prompt, independent of any project or agent session. OpenAI (GPT Image), Google (Nano Banana) or
  xAI (Grok Imagine), each with its own key and model, configured in Settings or by environment.
  Aspect ratio and quality limited to what the chosen provider actually supports, up to three
  reference images on OpenAI and Google, a private per-user library with history and PNG downloads,
  and durable jobs that survive a refresh or a restart. Images are private authenticated assets in
  `ZELYQ_IMAGE_ASSETS_DIR`, not public static files — back that directory up with the database. See
  [Image Studio](docs/Image-gen/implementation.md).
- **The build agent can generate and place images.** Switch it on for a project (a toggle in the
  chat toolbar, persisted, **off by default**) and the agent gets `generate_image`,
  `place_generated_image` and `list_generated_images`. It never holds the image API key: the tools
  call the server over a short-lived session bridge, the same pattern the Supabase migration tools
  use. The server generates as the connecting user, so anything the agent makes appears in that
  person's own Image Studio library, labelled with the project that made it. Reuse of an image you
  generated yourself costs nothing. Spending is bounded by `ZELYQ_IMAGE_HOURLY_LIMIT` per user
  (shared with Studio) and `ZELYQ_IMAGE_SESSION_LIMIT` per conversation, so a retry loop — or an
  instruction hidden in a cloned repository — cannot drain an hour's budget in one turn. The prompt
  keeps generated artwork away from anything the copy claims is real; a generated landmark is not a
  photograph of it. See [agent integration](docs/Image-gen/agent-integration.md).

- An eval harness (`pnpm eval`) that runs the agent against a suite of realistic prompts in throwaway
  projects and scores the result on machine-checkable facts: does the typecheck pass, does the build
  pass, does the dev server serve an app whose every module compiles, and did the agent change more
  than it needed to. Two runs can be compared with `--compare`, so a change to the system prompt or a
  tool description can be defended with a number. See
  [apps/agent/evals](apps/agent/evals/README.md).

### Fixed

- **Previews now work in `ZELYQ_RUNTIME=remote` behind a reverse proxy.** `ZELYQ_PREVIEW_URL_TEMPLATE`
  has always decided the address a browser loads a preview at, and the `local` and `container`
  drivers honoured it — but the `remote` driver passed through whatever the runtime host answered,
  which is the address the *host* sees inside its own container (`http://0.0.0.0:<port>`). The
  browser was then handed a port nothing serves, and on an HTTPS instance a mixed-content URL as
  well. The one runtime that most needs a proxy in front was the one that ignored the setting.
- **A session cookie can be marked `Secure` behind a TLS-terminating proxy.** The server took
  `request.protocol` at face value, which behind a proxy is the plain-HTTP hop, so an HTTPS
  deployment quietly issued a cookie without `Secure` — one a downgraded connection would send in
  the clear. Set `ZELYQ_TRUST_PROXY` (`true`, a hop count, or a comma-separated list of proxies to
  believe) and the scheme, and the client IP in logs, come from `X-Forwarded-*`. It stays **off**
  unless configured, because a directly-exposed instance must not let a caller pick its own address
  or scheme with a header.

### Changed

- **License changed from Apache-2.0 to the GNU AGPL-3.0.** Zelyq is open source: run it, modify it,
  self-host it, fork it, with no usage restriction. If you run a *modified* Zelyq as a network
  service, the AGPL requires you to offer users your source. A **commercial license** — the same
  code without that requirement — is available for embedding Zelyq in a closed product or for
  organisations that cannot use AGPL. Features designated "Zelyq Enterprise" (`ee/` paths) are a
  separate paid subscription under the Zelyq Enterprise License. Contributions are accepted under a
  Contributor License Agreement (`CLA.md`), which the dual-license needs. Releases up to and
  including `v0.1.0` remain available under Apache-2.0. See `LICENSE`, `LICENSE_EE.md`,
  `LICENSING.md`, and [ADR 0005](docs/adr/0005-agpl-3.0-and-dual-licensing.md). (An interim move to
  the source-available Sustainable Use License, ADR 0004, was reversed before any release carried
  it.)
- The README and `SECURITY.md` now state plainly that no reference runtime host ships yet, so
  `ZELYQ_RUNTIME=remote` currently means implementing the protocol yourself, and that local mode is
  not a sandbox. The `remote` driver was always documented; the host it talks to was not, and the
  distinction matters before deploying.
- The roadmap is reordered around measurable agent quality first, then per-turn review and revert,
  then the deployment story.

## [0.1.0] - 2026-08-22

First tagged release. Everything below is new.

### Added

- Initial project structure: `web`, `server`, and `agent` applications with the `core`, `runtime`,
  `db`, and `tools` packages.
- `RuntimeDriver` interface with a local (child process) driver and a remote HTTP driver, selected
  by `ZELYQ_RUNTIME`.
- Drizzle schema and migrations for SQLite and PostgreSQL.
- Agent session loop with streaming events over Server-Sent Events, relayed to the browser over
  WebSocket.
- `ModelProvider` interface with Claude and Google Gemini implementations, selected with
  `ZELYQ_PROVIDER`; each provider carries its own default model and API key variables.
- `GET /providers` on the agent, reporting every provider and whether a usable key is present.
- A settings screen for instance administrators covering the model provider, API keys, registration,
  session length, and preview host, so an instance can be configured without editing `.env`.
  Environment variables take precedence and are shown locked; stored API keys are encrypted with
  AES-256-GCM and never returned to the browser.
- An instance-level administrator role, distinct from team roles, held by the first account. A
  backfill migration promotes the earliest account on instances that predate it.
- Accounts, sessions, and teams: registration and sign-in, an httpOnly session cookie backed by a
  hashed token, scrypt password hashing, and role-based access control (`viewer`, `editor`, `admin`,
  `owner`) enforced on every REST route and on the WebSocket handshake.
- Brand mark and favicons, with trimmed and sized derivatives generated from the source logo.
- `ZELYQ_PREVIEW_HOST`, so previews are reachable when Zelyq runs on a VM or remote host.
- Automatic `.env` loading in every process, located by walking up from the working directory. Real
  environment variables take precedence over the file.
- The session records which provider produced it, and the editor shows the answering model.
- Agent tool suite: read, write, edit, list, search, and shell execution, all scoped to a project.
- Project scaffolding from templates, live preview with dev-server management, and snapshots.
- React single-page app with project list, chat, file explorer, editor, and preview panel.

[Unreleased]: https://github.com/CrowPus/Zelyq/compare/v0.2.0...HEAD
[0.2.0]: https://github.com/CrowPus/Zelyq/releases/tag/v0.2.0
[0.1.0]: https://github.com/CrowPus/Zelyq/releases/tag/v0.1.0