# VidFlow AI Changelog

All notable changes to the free plugin are recorded here.

Add every completed user-facing feature, behavior change, bug fix, and security fix to Unreleased.

## Unreleased

### Added
- Nothing yet.

### Changed
- Reduced WordPress.org download size by excluding development-only frontend source and Node build files from release packages.
- Updated release verification references to track WordPress 7.0.2 while keeping WordPress.org metadata at `Tested up to: 7.0`.

### Fixed
- Kept Publishing Activity source labels and open-action wording accurate when the original source record is no longer available.
- Stopped retrying rejected YouTube credentials, failed overdue background jobs, and added a safe way to stop queued retries so videos no longer remain locked in Publishing.
- Reported and retried publishing-summary persistence failures instead of confirming recovery while the source could remain locked in Publishing.

### Security
- Nothing yet.

## 1.1.0 - 2026-08-02

### Added
- Added Kling API 2.0 support using one API key for connection tests, Kling 3.0 and 2.6 generations, retries, and polling; tests validate account access without generating a video, and legacy jobs keep polling while AK/SK users migrate.
- Added free YouTube publishing with Google OAuth, resumable background uploads, destination defaults, retry controls, publishing history, and stored public links.
- Added published-destination playback and browser thumbnails from Start Frames or proxied provider video frames.

### Changed
- Kept completed videos provider-hosted by default, with optional protected Media Library copies and short-lived signed local playback URLs.
- Refreshed Create Video, Video Library, Publishing Activity, Settings, preview, and publishing interfaces with clearer titles, filters, status, pagination, and accessible dialogs.
- Updated Hailuo models and generation defaults.

### Fixed
- Improved generation, retry, and polling reliability so invalid requests stop before an unintended provider request.
- Improved YouTube queue state, resumable uploads, connection handling, and retry behavior.
- Improved provider-hosted playback, downloads, thumbnails, and optional local imports.

### Security
- Preserved valid provider credential characters, masked saved secrets, bounded provider polling, and redacted secret-bearing provider data from diagnostic logs.
- Prevented protected embeds from exposing provider URLs and hardened proxied downloads with WordPress safe HTTP requests.

## 1.0.0

### Added
- Initial release with bundled BYOK provider support, protected local playback, Video Library, and Create Video page.
