Changelog

Production-ready: full API docs and a security + reliability pass.

• AddedAPI Reference — a searchable, self-contained documentation page covering all 57 endpoints (auth, params, responses, errors), linked from the sidebar.
• SecurityFixed a stored-XSS vector by escaping post text at every render sink.
• SecurityOpen demo mode is now opt-in only under production; never grants anonymous access by default.
• SecurityAdded write-role gating to the AI/credit-spending endpoints so read-only members can't drain credits.
• FixedStripe checkout now reliably credits completed purchases (workspace match was rejecting valid payments).
• FixedMalformed auth tokens now return a clean 401 instead of a server error.
• ReliabilityPublish jobs orphaned by a restart are now reclaimed and retried instead of stalling.
• ReliabilityYouTube uploads stream instead of buffering, with a size cap — no more memory spikes on large videos.

Find creators, manage outreach, and grow.

• AddedInfluencer discovery — search creators (native YouTube), deep-analyze audience, engagement and authenticity, with an estimated sponsored-post rate.
• AddedOutreach CRM — saved-prospect shortlists with folders, a unified message inbox, and status pipeline.
• AddedOutreach autopilot — AI-drafts and emails a batch of prospects in one click.
• AddedCAN-SPAM / GDPR compliance footer with opt-out on outbound email.
• AddedContent search pagination, saveable categories, and post templates.

Monetization and a polished mobile experience.

• AddedBilling — plans and credit packs with Stripe and PayPal checkout, a credit ledger and idempotent fulfillment.
• AddedRich link-in-bio links with thumbnails and descriptions.
• ChangedFull mobile-responsive pass across every view.

Real accounts, safely connected.

• AddedOAuth connect for all 8 platforms with PKCE where required.
• AddedReal engagement-metric ingestion from connected accounts.
• SecurityToken-vault hardening — refuse to boot on a default VAULT_KEY; tokens stay encrypted at rest and never leave the vault.

Five growth features in one wave.

• AddedClient approval share-links — a tokenized public review page; approve or request changes.
• AddedEvergreen recycling — re-queue top performers automatically.
• AddedReference-image generation (Gemini) — new visuals guided by an uploaded image.
• AddedComment sentiment analysis and AI hashtag suggestions.
• AddedLink-in-bio studio — AI-generated page, background themes and animation.

Know what's working.

• AddedAnalytics — 30-day engagement timeseries and top posts, with winning hooks surfaced back into the composer.
• AddedA/B testing — variant groups with automatic winner selection.
• AddedCadence heatmap — best day × time-slot to post.

Publish to every major network.

• AddedReal publish adapters for X, LinkedIn, YouTube, TikTok and Pinterest (joining Instagram & Facebook) behind one unified interface.
• ChangedConsistent official platform brand glyphs throughout the UI.

Make every post look designed.

• AddedDesign studio — 50 frames and 48 template designs, a non-destructive overlay compositor, and AI generate-frame.
• AddedBrand assets — logo/watermark/thumbnail store with a 9-position watermark picker.
• AddedPer-platform aspect presets and a "use original" revert.

The machinery that runs it all.

• AddedJob queue + scheduler — retries, exponential backoff, dead-letter and self-heal.
• AddedMedia pipeline — per-platform image variants via sharp.
• AddedLive safety check — banned-phrase and PII screening as you type and before publish.

The foundation — a multi-tenant AI publishing studio.

• AddedAI Publisher — describe intent, get a drafted post with fill-in [BRACKETS], tone control, and JA⇄EN translate/improve/shorten.
• AddedMulti-tenant core — workspaces and roles (owner/editor/viewer/client) with an encrypted social-token vault.
• AddedPublishing to Instagram & Facebook, per-platform previews and character counters.
• AddedCredit meter, plan limits, activity/audit log, and demo-seeded onboarding.