8 Commits

Include renames

Author	SHA1	Message	Date
Matthew Meszaros	faa9cac061	feat: release a notification for retry when only workspace questions were asked and the call failed, count an unasked notification recheck as failed, read the workspace languages when skipping empty notices, and keep a built-in label name valid only on the question that already saved it	2026-09-26 21:40:42 -07:00
Matthew Meszaros	9d0f60801c	feat: file an offline notification unasked when the action check fails, bring a reopened verdict's message back to the inbox, skip empty notices and require the built-in check on --recheck-notifications, keep workspace labels saved before a built-in took the name, keep the sender's subject out of the action-required notification and send it off the ingest path, and default omitted outreach settings fields on PATCH	2026-09-26 21:36:11 -07:00
Matthew Meszaros	6cadcc725d	feat: answer every public request-body bind failure with a 400 that names the problem (empty body, JSON syntax error with its byte offset, wrong JSON type for the body or a named field, missing or out-of-range fields by json key) instead of a blanket malformed-JSON message or a 500, accept a single contact object on POST /v1/contacts as the CLIs send it, and drop the API-key lookup cache whose 300ns TTL made it a Redis round trip that saved nothing	2026-09-22 20:21:41 -07:00
Matthew Meszaros	03f59d4d6f	docs: state the tenant and key-shape invariants in these comments as the constraints they are, rather than as an account of what each check replaced, since this repository is public and every self-hosted instance that has not updated yet reads the same text	2026-09-19 08:28:41 +02:00
Matthew Meszaros	e668a2a36b	feat: complete the ADA CASA v2.1.1 AL1 control set across authentication, sessions, access control, cryptography, input validation and configuration, adding a breached-password denylist and per-account login throttling, enforced multi-factor authentication on the admin panel, step-up confirmation before an action that mints a lasting credential, purpose-scoped session tokens, single-use TOTP steps, tenant verification on every cross-referenced identifier, security headers on every surface, encrypted webhook signing secrets, per-organization idempotency, PKCE and a minimal two-scope Gmail consent on the mailbox OAuth flow, bounded spreadsheet and archive decoding, a patched Go toolchain with govulncheck in CI, and the evidence pack under compliance/casa	2026-09-19 08:18:35 +02:00
Matthew Meszaros	e0ced97ba1	feat: add organization audit trail ... Move audit logs into org-scoped Postgres storage, wire audit events across backend handlers, and surface actor details in the dashboard activity log. Add realtime audit invalidation and retention pruning so the trail stays current and bounded.	2026-06-01 04:23:00 +02:00
Matthew Meszaros	19d20e72b4	feat: add warmup health throttled state, complaint/bounce metrics, A/B analysis, and rate limiting	2026-04-09 12:51:30 +00:00
Matthew Meszaros	21ffb6a748	feat: add advanced outreach controls with A/B testing, deliverability dashboard, and DLQ	2026-02-20 08:59:17 +00:00