warmbly

grouph

feat: add organization audit trail

2026-06-01 04:23:00 +02:00

admin_credentials.go

ci: drop unused/unconvert/gosimple + shadow/nilness, run gofmt

2026-05-23 16:54:12 +00:00

admin_mailboxes.go

feat(admin): mailboxes admin (cross-org triage)

2026-05-28 12:38:08 +02:00

admin_organization.go

feat(admin): per-org limit overrides + product hard caps

2026-05-28 08:54:07 +02:00

admin_outreach.go

feat: expand admin management queries

2026-06-02 15:54:29 +02:00

admin_provisioning.go

feat: enforce worker pool assignment safety

2026-06-02 16:38:49 +02:00

admin_releases.go

feat(admin): audit-log every mutating worker / credentials / release action

2026-05-18 14:55:44 +00:00

admin_settings.go

admin: storage_backends registry + settings/dek/worker-config endpoints

2026-05-27 14:43:36 +00:00

admin_warmup_batch.go

feat: add warmup batch generation

2026-06-03 11:14:33 +02:00

admin_warmup_content.go

feat: add warmup content controls

2026-06-03 05:05:53 +02:00

admin_workers_ssh.go

feat: re-key dedicated_worker_assignments to organizations (migration 000055) - the assignment service has always keyed by org id but the column carried a users FK, so every runtime bind failed with an FK violation and dedicated-plan orgs could never get a worker; renames the column, remaps seed rows, and updates the repository, admin filter, and convert-to-dedicated endpoint to org semantics

2026-07-11 17:31:23 +02:00

admin.go

feat: expand admin management queries

2026-06-02 15:54:29 +02:00

advanced_outreach.go

feat: add organization audit trail

2026-06-01 04:23:00 +02:00

analytics.go

fix: scope the analytics dashboard (overall stats, recent activity, top campaigns, daily trend, account health) by organization_id instead of user_id, so every workspace member sees the org's analytics rather than an empty dashboard

2026-06-11 17:49:39 +02:00

api_key.go

feat: make public API list cursors opaque base64 tokens (internal/utils/paging) instead of raw record UUIDs, decoding on input with a 400 on a bad cursor; admin endpoints keep transparent UUID cursors

2026-06-13 07:18:23 +02:00

attachment.go

feat: rename the campaign sequences resource to steps across the API and URL (/campaigns/:id/steps), the JSON fields (target_step_id, step_id/step_name/step_index, analytics steps[], create body steps), the web client/models/route segment/labels, the audit step entity type, and the wire-contract docs; internal Go type names and the Kafka avro schema stay

2026-06-12 09:38:11 +02:00

audit.go

feat: make public API list cursors opaque base64 tokens (internal/utils/paging) instead of raw record UUIDs, decoding on input with a 400 on a bad cursor; admin endpoints keep transparent UUID cursors

2026-06-13 07:18:23 +02:00

auth_external.go

feat: add native Apple/Google sign-in to the backend - POST /auth/apple and /auth/google exchange provider-signed ID tokens for sessions, GET /auth/providers exposes configured providers for app discovery, with a JWKS-verifying idtoken package, auth config, stable error codes, and API/security docs

2026-07-07 05:56:35 +02:00

auth.go

fix: changing your password now revokes every other session (keeping the current device), matching the security promise in the sign-in alert and docs

2026-06-11 12:39:24 +02:00

avatar.go

feat: add organization audit trail

2026-06-01 04:23:00 +02:00

campaign.go

feat: add server-side status-bucket filtering to GET /campaigns (draft/active/paused/completed, paused matches every paused_* variant, invalid values 400) and a new GET /campaigns-overview endpoint returning status and per-folder counts, with the campaigns API reference and endpoint scope map updated

2026-07-07 09:40:27 +02:00

contact_detail.go

feat: resolve named sender contacts

2026-06-07 07:54:02 +02:00

contact_io.go

fix: thread organization_id through contact, CRM, and unibox reads and writes so non-owner org members see and edit their workspace data, and backfill contacts.organization_id for single-membership users (migration 000049)

2026-06-15 08:11:53 +02:00

contact.go

feat: contacts search gains an additive lead_status filter plus per-status lead_counts on the first page when exactly one campaign_id is set - the SQL predicates reproduce the read-time status derivation exactly (unsubscribed > bounced > replied > active > pending via LATERAL bool_or rollups), invalid lead_status or multi-campaign combinations return 400, and the web types/table pick up the new lead_counts shape

2026-07-11 10:11:36 +02:00

crm.go

fix: thread organization_id through contact, CRM, and unibox reads and writes so non-owner org members see and edit their workspace data, and backfill contacts.organization_id for single-membership users (migration 000049)

2026-06-15 08:11:53 +02:00

danger_zone.go

feat: add organization audit trail

2026-06-01 04:23:00 +02:00

discount.go

feat: decode the admin discount list and redemption cursors as opaque offset tokens, returning 400 on a malformed cursor instead of silently resetting to the first page

2026-06-28 05:58:25 +00:00

email_authcheck.go

feat: add mailbox deliverability checks

2026-06-03 06:26:23 +02:00

email_oauth_callback.go

feat: email OAuth callback page gains a native-app fallback - when there is no web opener to postMessage (an ASWebAuthenticationSession has no popup parent) it redirects to warmbly://email-oauth with provider/code/state/error so the iOS app can finish the connect; web popup behavior is unchanged and the docs describe both delivery paths

2026-07-11 10:13:10 +02:00

email_onboarding.go

feat: add organization audit trail

2026-06-01 04:23:00 +02:00

email_send.go

Analytics & Tracking

2026-01-29 05:59:04 +01:00

email_verification.go

feat: add deliverability controls

2026-06-03 16:47:53 +02:00

email.go

fix: scope email-account list/detail queries by organization_id instead of the logged-in user_id, so every member of a workspace sees the org's mailboxes (not just the owner who connected them)

2026-06-11 17:43:56 +02:00

generation.go

feat: add ai writing credit backend

2026-06-05 06:03:32 +02:00

handler.go

feat: add native Apple/Google sign-in to the backend - POST /auth/apple and /auth/google exchange provider-signed ID tokens for sessions, GET /auth/providers exposes configured providers for app discovery, with a JWKS-verifying idtoken package, auth config, stable error codes, and API/security docs

2026-07-07 05:56:35 +02:00

identity.go

feat: add GetIdentity handler returning user, org, auth type, and granted scopes for GET /v1/me

2026-06-28 19:09:37 +02:00

integration.go

feat: add an unaudited automation node-layout endpoint handler/service/repo backed by an atomic jsonb x/y merge that leaves edges, config, and updated_at untouched

2026-06-30 10:06:19 +02:00

internal_dek_test.go

feat: key the worker-facing internal DEK endpoint by organization

2026-06-10 17:16:07 +02:00

internal_dek.go

feat: key the worker-facing internal DEK endpoint by organization

2026-06-10 17:16:07 +02:00

internal_email_message_map.go

feat: move infrastructure state off dynamodb

2026-06-02 15:54:12 +02:00

internal_tracked_link.go

feat: replace signed click redirects with server-side link tickets (tracked_links store, internal resolver API, opaque /c/<id> URLs, layered anti-probe caches with miss budget and circuit breaker) removing TRACKING_LINK_SECRET entirely

2026-06-11 09:30:21 +02:00

internal_worker_config.go

feat: enforce worker pool assignment safety

2026-06-02 16:38:49 +02:00

lead_sync.go

feat: audit-log coverage for teams, automations (typed entity), lead-sync sources, and manual meetings so the org activity trail and its realtime spine see every mutation

2026-06-11 07:47:29 +02:00

limit_requests.go

feat: expand admin management queries

2026-06-02 15:54:29 +02:00

notification.go

feat: expose security notification APIs

2026-06-08 15:04:47 +02:00

oauth.go

feat: let OAuth apps subscribe to webhooks by declaring a url/events/secret and materializing per-org endpoints gated by each grant's scopes, with secret rotation and delivery observability (migration 000050)

2026-06-15 08:11:20 +02:00

onboarding.go

feat: add campaign workflow backend support

2026-06-06 07:49:52 +02:00

organization_roles.go

feat: fix multi-role review findings — atomic member+roles insert on invite accept (no partial-failure stranding), gate role deletion on the actor holding the role's permissions (blocks team-managers de-privileging admins), and hydrate+chip pending-invitation role sets

2026-06-11 11:32:57 +02:00

organization.go

feat: send organization member invitations through GenerateInvitationHTML so they match the rest of the transactional mail

2026-06-28 05:27:18 +00:00

passkey.go

feat: add Safari-ready passkey login

2026-06-01 03:09:17 +02:00

placement.go

feat: add deliverability controls

2026-06-03 16:47:53 +02:00

referral.go

feat: expose the JWT referral and applied-discounts endpoints with handlers and manage_billing-gated routes

2026-06-28 05:09:50 +00:00

sequence.go

feat: persist campaign sequence canvas coordinates with x/y columns (migration 000053) plus a bulk sequence-layout service/repo path that scopes by campaign owner and never bumps updated_at

2026-06-30 10:06:20 +02:00

session.go

feat: add session management

2026-06-01 05:53:49 +02:00

socket.go

feat: add warmup health tracking, migrate repos to postgres, and overhaul web UI

2026-04-03 06:08:52 +00:00

subscription.go

feat: add organization audit trail

2026-06-01 04:23:00 +02:00

team.go

feat: audit-log coverage for teams, automations (typed entity), lead-sync sources, and manual meetings so the org activity trail and its realtime spine see every mutation

2026-06-11 07:47:29 +02:00

template_score.go

feat: add campaign template scoring

2026-06-03 06:27:07 +02:00

template.go

feat: add organization audit trail

2026-06-01 04:23:00 +02:00

test_email.go

feat: rename the campaign sequences resource to steps across the API and URL (/campaigns/:id/steps), the JSON fields (target_step_id, step_id/step_name/step_index, analytics steps[], create body steps), the web client/models/route segment/labels, the audit step entity type, and the wire-contract docs; internal Go type names and the Kafka avro schema stay

2026-06-12 09:38:11 +02:00

twofa.go

feat: expose security notification APIs

2026-06-08 15:04:47 +02:00

tz.go

New Repository: Add Backend Code

2026-01-17 14:11:14 +00:00

unibox.go

feat: unibox list filters - from now matches sender addresses by case-insensitive substring as documented, and a new uncategorized=true param returns only threads with no labels, documented in the unibox API reference

2026-07-07 05:56:47 +02:00

unsubscribe.go

feat: add deliverability controls

2026-06-03 16:47:53 +02:00

warmup_appeal.go

feat: add warmup content controls

2026-06-03 05:05:53 +02:00

warmup_routing.go

feat: add organization audit trail

2026-06-01 04:23:00 +02:00

webhook_tasks_campaign.go

Realtime, Task Handler, Worker & Consumer Setup

2026-01-26 04:42:19 +01:00

webhook_tasks_email.go

Realtime, Task Handler, Worker & Consumer Setup

2026-01-26 04:42:19 +01:00

webhook_tasks_user_email.go

Analytics & Tracking

2026-01-29 05:59:04 +01:00

webhook_tasks_warmup.go

Realtime, Task Handler, Worker & Consumer Setup

2026-01-26 04:42:19 +01:00

webhook.go

feat: add a Stripe-grade webhook platform with a typed event catalog, HMAC-signed delivery, retries with backoff, endpoint ownership verification, per-endpoint throttling, an audit-spine event bridge, and firehose emit sites (migration 000048)

2026-06-15 08:11:20 +02:00

worker_enrollment.go

feat: simplify worker installer route

2026-05-30 09:37:26 +00:00