chore: align VidcastX project status and security baseline

.env.example

@@ -21,7 +21,7 @@ DATABASE_URL="postgresql://admin:password@localhost:5432/vidcastx"
 
 # Redis Connection (BullMQ)
 REDIS_HOST=localhost
-REDIS_PORT=6379
+REDIS_PORT=6380
 REDIS_PASSWORD=
 
 # Object Storage (S3 Compatible - AWS / Hetzner / MinIO)

.github/ISSUE_TEMPLATE/config.yml

@@ -1,11 +1,11 @@
 blank_issues_enabled: false
 contact_links:
   - name: 💬 Ask a question
-    url: https://github.com/devchaudhary24k/vidcastx/discussions
+    url: https://github.com/pixelactstudio/vidcastx/discussions
     about: Questions, usage help, design discussions.
   - name: 💡 Feature request / idea
-    url: https://github.com/devchaudhary24k/vidcastx/discussions/new?category=ideas
+    url: https://github.com/pixelactstudio/vidcastx/discussions/new?category=ideas
     about: Propose a new feature — goes to Discussions first; promoted to an issue once scoped.
   - name: 🔒 Report a vulnerability
-    url: https://github.com/devchaudhary24k/vidcastx/security/advisories/new
+    url: https://github.com/pixelactstudio/vidcastx/security/advisories/new
     about: Privately disclose a security issue. See SECURITY.md.

.github/SECURITY.md

@@ -10,7 +10,7 @@ VidcastX is pre-1.0. Security fixes target the `main` branch; downstream users a
 
 Preferred channel:
 
-- **GitHub Private Security Advisories:** [Submit a private report](https://github.com/devchaudhary24k/vidcastx/security/advisories/new)
+- **GitHub Private Security Advisories:** [Submit a private report](https://github.com/pixelactstudio/vidcastx/security/advisories/new)
 
 Alternative:
 

.github/workflows/ci.yml

@@ -22,11 +22,11 @@ jobs:
 
       - uses: pnpm/action-setup@v4
         with:
-          version: 10.30.3
+          version: 11.15.0
 
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           cache: pnpm
 
       - uses: oven-sh/setup-bun@v2
@@ -36,6 +36,26 @@ jobs:
       - name: Install dependencies
         run: pnpm install --frozen-lockfile
 
+  # ─── Run workspace tests ────────────────────────────
+  test:
+    name: Test
+    needs: setup
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 11.15.0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: pnpm
+      - uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm test
+
   # ─── Typecheck every workspace ──────────────────────
   check-types:
     name: Typecheck
@@ -45,10 +65,10 @@ jobs:
       - uses: actions/checkout@v4
       - uses: pnpm/action-setup@v4
         with:
-          version: 10.30.3
+          version: 11.15.0
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           cache: pnpm
       - uses: oven-sh/setup-bun@v2
         with:
@@ -65,10 +85,10 @@ jobs:
       - uses: actions/checkout@v4
       - uses: pnpm/action-setup@v4
         with:
-          version: 10.30.3
+          version: 11.15.0
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           cache: pnpm
       - uses: oven-sh/setup-bun@v2
         with:
@@ -85,10 +105,10 @@ jobs:
       - uses: actions/checkout@v4
       - uses: pnpm/action-setup@v4
         with:
-          version: 10.30.3
+          version: 11.15.0
       - uses: actions/setup-node@v4
         with:
-          node-version: 20
+          node-version: 22
           cache: pnpm
       - uses: oven-sh/setup-bun@v2
         with:

IDEA.md

@@ -1,4 +1,13 @@
-# VidcastX - Architecture & Project Scope
+# VidcastX — Product Vision and Target Architecture
+
+> [!IMPORTANT]
+> This document preserves the intended product direction. It is not a claim that every section is implemented, integrated, or production-ready. See `README.md` for the current repository reality and `TODO.md` for the grounded work queue.
+
+## Current implementation boundary
+
+The checked-in repository currently has one TanStack Start application (`apps/app`), one Elysia API (`apps/api`), shared internal packages, and one FFmpeg transcoder worker. The names and services below—such as `apps/dashboard`, `apps/marketing`, `@vidcastx/player`, the AI worker fleet, live-streaming services, billing, and webhook delivery—describe target capabilities unless the current README explicitly marks them as implemented.
+
+The remainder of this file intentionally keeps the original product and architecture ideas intact.
 
 VidcastX is an enterprise-grade, B2B video hosting, streaming, and AI-processing platform. Unlike consumer-oriented platforms, VidcastX is designed specifically for creators, businesses, and developers to host, transcode, analyze, and distribute their video content globally via embeddable players and robust APIs.
 

LICENSE

@@ -0,0 +1,22 @@
+VidcastX Proprietary Source-Available Notice
+
+Copyright (c) 2025-2026 Pixelact Studio. All rights reserved.
+
+The source code and associated documentation in this repository (the
+"Software") are proprietary to Pixelact Studio.
+
+No permission is granted to use, copy, modify, merge, publish, distribute,
+sublicense, sell, host, deploy, or create derivative works from the Software
+without prior written permission from Pixelact Studio.
+
+Viewing or forking this public repository for evaluation does not grant a
+license to the Software. No patent, trademark, or other intellectual property
+rights are granted by implication or otherwise.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE, AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+COPYRIGHT HOLDER BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY ARISING
+FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE OR ITS USE.
+
+For licensing inquiries, contact Pixelact Studio.