starred/warmbly
1
0
Fork 0
mirror of https://github.com/warmbly/warmbly.git synced 2026-10-17 16:02:51 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,656 Commits 47 Branches 105 Tags
2f842cf96cca7459bd75c31f01beb7b5d2cf71e4
Commit Graph
92 Commits
Author SHA1 Message Date
devin-ai-integration[bot] 14c5ce2b1b Merge pull request #941 from warmbly/devin/1791690444-arrival-stage-diagnostics 
feat: measure arrival delivery stages without changing durable queue behavior
 2026-10-11 04:38:47 +00:00
Devin AI 4abf52067a feat: stop imported send recovery loops and preserve unknown holds without false preparation conflicts 2026-10-11 04:00:50 +00:00
Devin AI 943a61af09 feat: add bounded payload-free arrival stage timing and flush returned-pass diagnostics on shutdown 2026-10-11 03:53:54 +00:00
Devin AI 0e4078a2ea feat: run advanced bounce reconciliation rollback and replay regression explicitly in PostgreSQL CI 2026-10-11 03:25:52 +00:00
Matthew Meszaros 9d92216846 feat: retain authoritative send conflict holds and reset imported recovery provenance with migration 287 2026-10-11 03:25:52 +00:00
Matthew Meszaros 67ddf5774a Merge remote-tracking branch 'origin/main' into devin/1791675445-send-audit-parent-review 2026-10-11 03:15:45 +00:00
Matthew MeszarosandDevin AI ee00e7a5fc feat: run retired scheduled-job history and upgrade regressions in PostgreSQL CI 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-10 18:43:25 +00:00
Matthew MeszarosandDevin AI 04ae441619 feat: preserve unresolved send outcome conflicts when unstarted outbound commands cancel or defer 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-10 18:15:13 +00:00
Matthew MeszarosandDevin AI c0e721f92e feat: retain native warmup filing provider retry deadlines across workers and admission retries 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-10 16:22:04 +00:00
Devin AI 3888a2e719 feat: repair already applied warmup failure dead letters only with durable refunded charge proof without replaying callbacks or mailbox holds and cover exact task regressions in PostgreSQL CI 2026-10-10 15:16:02 +00:00
Devin AI a19106db21 feat: run exact warmup charge UTC refund and authoritative legacy result regressions in serialized PostgreSQL CI with isolated upgrade coverage 2026-10-10 15:06:48 +00:00
Matthew Meszaros 9712ea5262 Merge pull request #926 from warmbly/devin/1791630200-combined-restricted-member-security 
feat: close all restricted-member data leaks and resource-scope escapes
 2026-10-10 12:07:57 +00:00
Devin AI 9a45259527 feat: release failed filing commands only after exact backend proof of pending durable recovery while preserving acknowledgements and legacy retries 2026-10-10 11:52:47 +00:00
Devin AI 6e0218e5c1 feat: preserve private realtime audiences and contact reload context while retrying push digests after transient authorization failures 2026-10-10 11:34:43 +00:00
Devin AI 4851492d0f feat: complete restricted member security integration with mailbox sharing warning scoped API and realtime documentation and explicit PostgreSQL regression CI coverage 2026-10-10 11:00:55 +00:00
Devin AI d152c0778a feat: atomically validate same-day warmup hours and defer invalid configured windows before claiming or sending while preserving visible safety holds 2026-10-10 10:48:15 +00:00
Matthew MeszarosandDevin AI 029d3005cd feat: integrate current main send reconciliation with cursor-based worker receipt replay and renumber its unreleased index migration 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-10 04:55:19 +00:00
Devin AI d69ec96868 feat: complete invited signup in the dashboard and atomically provision accounts with workspace roles and resource grants 2026-10-10 04:11:45 +00:00
Matthew MeszarosandDevin AI d220fc4047 feat: reconcile persisted worker send receipts independently of broker replay while retaining ambiguous outcome holds 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-10 03:59:29 +00:00
Devin AI 24b0130c45 feat: reconcile mailbox sync recovery with merged worker Kafka retry and broker-confirmed delivery safeguards 2026-10-09 18:18:26 +00:00
Devin AI 1ca77a431b feat: integrate merged monitoring updates with ordered worker command recovery 2026-10-09 16:57:57 +00:00
Devin AI 4758216dbf feat: integrate current monitoring and member access changes with durable mailbox synchronization 2026-10-09 16:56:53 +00:00
Matthew Meszaros 5ab4b5e544 feat: drain Kafka worker commands through bounded ordered mailbox lanes and accelerate safe startup recovery while backing off duplicate filing retries 2026-10-09 16:35:26 +00:00
Matthew Meszaros 9a09740c84 feat: add permission-shaped operational monitoring snapshots with aggregate recovery evidence and read-only broker diagnostics 2026-10-09 15:12:54 +00:00
Devin AI 445e014b5e feat: recover mailbox synchronization across Gmail Outlook and IMAP with encrypted arrival replay and safe worker lifecycle 2026-10-09 14:24:10 +00:00
Matthew MeszarosandDevin AI ec6129c0c8 feat: preserve admin confirmed-send and deferred warmup recovery regressions when updating counter repair against main 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-09 11:46:19 +00:00
Matthew MeszarosandDevin AI a3cdf7b2fa feat: keep deferred warmup commands free of terminal send results and recover existing never-started preparation conflicts without releasing real delivery holds 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-09 11:06:49 +00:00
Matthew MeszarosandDevin AI 6c1207a48c feat: populate admin overview send counters from provider-confirmed warmup receipts and applied outbound results with UTC reporting 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-09 08:24:21 +00:00
Matthew MeszarosandDevin AI f06617afe3 feat: verify existing warmup state and new mailbox tasks survive release upgrades and gate CI on live recovery regressions 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-09 06:05:20 +00:00
Matthew Meszaros b9cc87db1a feat: enable configurable 28–32 daily mailbox sending plans with admission rechecks, clear limit controls and consistent UTC placement budgets 2026-10-09 04:18:52 +00:00
Matthew Meszaros c6c79d8dcd feat: enforce configurable per-mailbox campaign admission caps with UTC budgets, accurate diagnostics and PostgreSQL regressions 2026-10-09 04:18:52 +00:00
Matthew MeszarosandDevin AI d8d537fb9a feat: guard Kafka polling, offset storage and publication against client shutdown and preserve production diagnostics by trimming routine internal lookup access logs 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-07 07:52:15 +00:00
Matthew MeszarosandDevin AI 43d3e72e69 feat: run the Pages route regression in Web CI after its TypeScript dependency is installed 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-07 07:23:57 +00:00
Matthew MeszarosandDevin AI dfed1e1593 feat: validate API UUIDs, recover expired Gmail history and guard consumer startup and stale frontend assets 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-07 07:19:15 +00:00
Matthew MeszarosandDevin AI a865db3386 feat: deploy configurable Cloudflare Pages project lists from exact releases with isolated dashboard, admin, site and docs builds 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-05 09:48:40 +00:00
Matthew MeszarosandDevin AI 94cd8b1692 feat: reuse Cloudflare Pages production configuration for exact-release dashboard builds and cover safe runtime imports in CI 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-05 09:14:37 +00:00
Matthew MeszarosandDevin AI e7b6877ba4 feat: deploy the dashboard to the existing Cloudflare Pages production project only after stable releases with opt-in configuration and cutover docs 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-05 09:00:34 +00:00
Matthew Meszaros 38f1cdb517 Merge remote-tracking branch 'origin/main' into devin/1791174213-turnstile-trusted-device 2026-10-05 05:58:16 +00:00
Matthew MeszarosandDevin AI 55ca24e33a ci: keep a Codecov uploader crash from failing Go CI 
Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-05 05:31:39 +00:00
Matthew MeszarosandDevin AI 5301e79d84 ci: don't fail Go CI when codecov upload crashes 
codecov-action v4 can throw (e.g. TLS EPROTO fetching the CLI) before
fail_ci_if_error applies, which failed the merge-queue run for #832.

Refs WAR-10

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-05 04:22:42 +00:00
Matthew MeszarosandDevin AI 0ea856537e fix(security): drop jwt-go via first-party Apple auth, bump yoke-derive, grant checks:write to rust audit 
Refs WAR-10

Co-Authored-By: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com>
 2026-10-04 18:36:28 +00:00
Matthew Meszaros 59f6d72d3b feat: bump docs to next 16.3.8, site to patched devalue and http-cache-semantics, and realtime to mint 1.11.0, gate the security workflow on called Go vulnerabilities with a fixed version and on retired or upgradable Hex packages through scripts/govulncheck-gate.sh and scripts/hex-audit-gate.sh with a new Elixir audit job, and keep advisory ids and reachability notes out of .trivyignore, mix.exs and the site pnpm workspace 2026-10-04 02:57:17 -07:00
Matthew Meszaros efb9d0b433 feat: add the qa/ proof harness that records scripted Playwright flows as 1080p H.264 walkthroughs and stills against an isolated per-worktree stack (lite, full, sandbox) and publishes them to the PR with gh --attach, with before/after follow-up comments, a machine-wide recording lock, idle auto-stop, a qa-ci typecheck job and AGENTS.md rules for when to record 2026-10-03 09:54:59 -07:00
Matthew Meszaros ca66b25d8d feat: register the release's bus schemas from the booting backend and hold the fleet on its current release until the backend runs the new one and the schema registry accepts them, check every published schema against a recorded snapshot in CI (make schemas) so a change the registry would refuse fails before merge, pin a FORWARD or FULL registry subject to BACKWARD on refusal, bound advisor narration so the run still lands, store unlabelled 8-bit mail with its invalid UTF-8 replaced, treat a pending or credential-less passkey ceremony as a cancellation, and drop link-scanner rejections from site error tracking 2026-09-29 19:20:07 +02:00
Matthew Meszaros 6026168334 feat: stop blocking boot on the GeoIP download and swap the database in when it lands, retry a refused mirror with backoff honouring Retry-After, revalidate a database older than a week with If-Modified-Since instead of keeping the first copy forever, and add a twice-weekly job mirroring both MaxMind editions to a private bucket so the fleet stops spending a 30-a-day allowance per boot 2026-09-20 17:55:38 +02:00
Matthew Meszaros f615c3f4d5 feat: serialize release workflow runs on one concurrency group so two tags pushed close together queue instead of racing the shared buildx cache scope and failing the second build on a missing layer blob 2026-09-20 15:57:02 +02:00
Matthew Meszaros 3923b50a2b feat: raise the tracking builder to Rust 1.96 because the AWS SDK now declares rust-version 1.94.1, and pin the Rust CI job to whatever that Dockerfile says instead of stable so a dependency outgrowing the builder fails a pull request rather than a release 2026-09-19 13:49:43 +02:00
Matthew Meszaros e668a2a36b feat: complete the ADA CASA v2.1.1 AL1 control set across authentication, sessions, access control, cryptography, input validation and configuration, adding a breached-password denylist and per-account login throttling, enforced multi-factor authentication on the admin panel, step-up confirmation before an action that mints a lasting credential, purpose-scoped session tokens, single-use TOTP steps, tenant verification on every cross-referenced identifier, security headers on every surface, encrypted webhook signing secrets, per-organization idempotency, PKCE and a minimal two-scope Gmail consent on the mailbox OAuth flow, bounded spreadsheet and archive decoding, a patched Go toolchain with govulncheck in CI, and the evidence pack under compliance/casa 2026-09-19 08:18:35 +02:00
Matthew Meszaros d96e3182f8 feat: run required CI checks for merge queue groups so validated pull requests can merge through branch protection 2026-09-16 15:15:18 +02:00
Matthew Meszaros 7300b3b021 feat: full PostHog coverage: identify the signed-in user and workspace in the dashboard and admin panel with autocapture, heatmaps, dead and rage clicks, web vitals, network timing, console capture and session replay masking only password fields, send server-side signup, trial and subscription events under the user id with the organization as a group, keep the marketing site and form pages cookieless while capturing everything stateless plus a form funnel, upload the form app's source maps, and add WARMBLY_POSTHOG_SESSION_REPLAY 2026-09-13 20:58:22 -07:00