CHANGELOG.md
Rama main · réplica de lectura del repositorio original.
# Changelog
All notable changes to Overseek Socials will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
## [Unreleased]
### Added
**Platform Integrations**
- [Publishing] Threads (Meta) integration — OAuth, publishing, and analytics via `threads-api.ts`
- [Publishing] Bluesky integration — AT Protocol publishing via `bluesky-api.ts`
- [Analytics] Threads and Bluesky analytics data in cross-platform dashboard
**Analytics & Intelligence**
- [Analytics] Enhanced analytics dashboard with video-specific metrics (views, watch time, skip rate)
- [Analytics] Platform breakdown visualization (per-platform engagement distribution)
- [Analytics] Reels-specific analytics integration in post detail view
- [Analytics] Top performing content section sorted by engagement rate with video views and shares
- [Analytics] Enhanced recent posts section with additional metrics
- [Trends] Google Trends integration with real-time trend discovery
- [Trends] Opportunity scoring with freshness-weighted trend detection
- [Trends] Trend freshness persistence via Redis timestamps
- [Competitors] Competitor intelligence page with side-by-side benchmarking
**AI Agents**
- [Agents] CMO agent — Weekly marketing strategy brief generation
- [Agents] Proactive crew dispatch on strategy completion
- [Agents] Competitor intelligence reactive agents
- [Agents] Auto-application of ad suggestions
- [Agents] Inline action support for Telegram notifications
- [Agents] `on_crew_completed` hook wired across crew task files
**Security & Auth**
- [Auth] Two-factor authentication (TOTP) with QR code setup
- `META_WEBHOOK_VERIFY_TOKEN` environment variable for Meta webhook verification
**Calendar & Compose**
- [Calendar] Click-to-create functionality for Day, Week, and Month views
- [Calendar] AI-recommended time slots (9 AM, 12 PM, 7:30 PM) with visual indicators
- [Calendar] Drag-and-drop rescheduling with visual feedback and transactional API
- [Compose] Scheduling modal with unified and per-platform scheduling modes
- [Compose] Inline loading spinners for Save, Schedule, and Publish buttons
- [Compose] Confetti celebration animations for milestone achievements
**UI & UX**
- [Sidebar] Collapsible navigation sections with persistent state via Zustand
- [Sidebar] Notification badges for unread items (drafts, scheduled, engagement)
- [Mobile] 4-step stepper compose workflow for mobile devices
- [Mobile] Pull-to-refresh and swipe gesture hooks
- [Settings] Redesigned two-column Settings layout
**Infrastructure & Testing**
- Initial open-source release
- PWA app icons (72–512px), shortcut icons, and store screenshots
- [Testing] Unit tests for crypto, rate-limit, and TOTP modules (47 new tests)
- [Scripts] `npm run audit` for security vulnerability scanning
- [Scripts] `npm run test:coverage` for coverage reporting
### Fixed
- [Analytics] Hydration mismatch errors (#418) — replaced locale-dependent date formatting with deterministic `date-fns` calls
- [Analytics] Deprecated API metrics causing zero-value displays
- [Analytics] Conditional rendering for metrics not tracked by specific post types/platforms
- [Compose] Image validation now correctly detects pixel dimensions during upload
- [Compose] Scheduler suggestions now rank the weekday of the selected date instead of the best weekday in the sample
- [Trends] Google Trends fetch errors now log actual error details instead of empty objects
- [Agents] CMO task prompt updated with explicit JSON output instructions to prevent unparseable prose
- [Agents] Draft type corrected from `AD_AUDIT` to `CMO_SUMMARY` for CMO briefs
- [Agents] Fallback parser added for non-JSON agent output
- Post composer media button opens upload modal and adds files to both post and media library
- Replaced deprecated `apple-mobile-web-app-capable` meta tag with `mobile-web-app-capable`
- Automatic database migration on container startup via `docker-entrypoint.sh`
- 500 error on registration API caused by missing Prisma migrations in production
- Replaced hardcoded URLs with `NEXTAUTH_URL` environment variable in webhooks, email digests, and API routes
- Replaced `console.log` with structured Pino logger in `webhooks.ts` and `email-digest.ts`
- Removed all stale imports and references to deleted `meta_ad_audit` and `inventory_check` crews
### Security
- HMAC-SHA256 signature verification for Meta, Shopify, and Stripe webhooks with timing-safe comparison
- [Headers] HTTP security headers middleware: CSP, HSTS, X-Frame-Options, X-Content-Type-Options, Permissions-Policy
- [Auth] Rate limiting on registration endpoint (10 requests/minute per IP)
- [Docker] Redis password authentication via `requirepass` in production
- [Docker] Pinned image versions: `postgres:16.2-alpine`, `redis:7.2-alpine`
- [Docker] Container resource limits for PostgreSQL (1G/1CPU) and Redis (512M/0.5CPU)
### Changed
- Migrated `middleware.ts` to `proxy.ts` for Next.js 16 compatibility
- Settings screen UI simplified — removed cost-related elements
- Codebase cleanup — removed stale references to deleted crews and deprecated modules
---
## [1.0.0] - 2026-01-30
### Added
**Core Platform**
- Multi-tenant workspace architecture with role-based access control
- Authentication via Google OAuth and email/password credentials
- Dashboard with real-time metrics, weekly heatmap, and AI suggestions
**Content Creation**
- 3-column post composer with platform-specific validation
- Trending audio import from TikTok/Instagram URLs
- AI-powered caption generation with virality scoring
- Brand Voice AI for consistent tone and style
- Media library with folder organization
**Publishing & Scheduling**
- Content calendar with drag-and-drop scheduling
- Multi-platform publishing: Instagram, TikTok, YouTube, Facebook, Pinterest, LinkedIn, Bluesky, Google Business
- Platform-specific overrides for captions and media
- AI-recommended optimal posting times
- Bulk CSV import for content migration
**Analytics & Intelligence**
- Cross-platform analytics dashboard
- E-commerce integration (Shopify, WooCommerce) for ROI tracking
- Social listening with sentiment analysis
- Competitor tracking and benchmarking
- Hashtag monitoring and trend detection
**Engagement**
- Unified engagement inbox
- AI comment responder with sentiment-aware replies
- DM automation and lead capture workflows
- UGC discovery and permission management
**Team & Collaboration**
- Team invitations with role assignment (Owner, Admin, Editor, Viewer)
- Activity logging and audit trail
- Content pillars for strategic distribution tracking
**Infrastructure**
- Docker Compose deployment
- PWA with push notifications
- WCAG 2.2 AA accessibility compliance
- Export reports (PDF/CSV)
### Security
- bcrypt password hashing
- Encrypted OAuth token storage
- Workspace isolation for multi-tenant security
---
## [0.9.0] - 2026-01-15
### Added
- Beta release for internal testing
- Core composer and calendar functionality
- Initial platform integrations (Instagram, TikTok, YouTube)
### Fixed
- OAuth token refresh handling
- Media upload validation for large files
---
[Unreleased]: https://github.com/MerlinStacks/socaliseit/compare/v1.0.0...HEAD
[1.0.0]: https://github.com/MerlinStacks/socaliseit/releases/tag/v1.0.0
[0.9.0]: https://github.com/MerlinStacks/socaliseit/releases/tag/v0.9.0