Matthew Meszaros 03fd30f9bc feat: merge decoded-byte image validation with download-safe serving, own-domain form and domain redirects, TLS-only SMTP AUTH negotiation and pinned per-server certificate opt-outs, with MAIL_TLS_INSECURE honoured on self-hosted and development instances and resolved by the control plane for joining nodes

2026-10-23 16:20:30 +02:00

..

backend

feat: merge decoded-byte image validation with download-safe serving, own-domain form and domain redirects, TLS-only SMTP AUTH negotiation and pinned per-server certificate opt-outs, with MAIL_TLS_INSECURE honoured on self-hosted and development instances and resolved by the control plane for joining nodes

2026-10-23 16:20:30 +02:00

cli

feat: filter the Analytics dashboard by campaigns and campaign folders (campaign_ids/folder_ids on GET /analytics/dashboard, resolved server-side to one deduplicated org-scoped set), with a picker on web, a filter sheet on iOS, CLI flags, an AI tool argument, and API, OpenAPI and guide docs

2026-10-09 06:04:31 +02:00

consumer

feat: seal mailbox SMTP/IMAP logins and OAuth tokens under KMS-protected workspace DEKs behind MAILBOX_CREDENTIALS_SEALING, carry them sealed in ADD_EMAIL and token refreshes, reseal stored credentials in a resumable consumer job, and cache DEKs in process with singleflight in front of Redis and KMS

2026-10-22 19:11:23 +02:00

forms

feat: full PostHog coverage: identify the signed-in user and workspace in the dashboard and admin panel with autocapture, heatmaps, dead and rage clicks, web vitals, network timing, console capture and session replay masking only password fields, send server-side signup, trial and subscription events under the user id with the organization as a group, keep the marketing site and form pages cookieless while capturing everything stateless plus a form funnel, upload the form app's source maps, and add WARMBLY_POSTHOG_SESSION_REPLAY

2026-09-13 20:58:22 -07:00

migrate

feat: add Terraform AWS hosting with optional Postgres pooling and migration-gated deployments

2026-10-22 08:57:54 +02:00

sandbox

feat: run the dev seeder and the sandbox seed and simulator only when APP_ENV is explicitly dev, development or local, refusing an unset or production APP_ENV before anything is written, and document the guard on the first-run and sandbox pages

2026-10-23 15:46:52 +02:00

seed

feat: run the dev seeder and the sandbox seed and simulator only when APP_ENV is explicitly dev, development or local, refusing an unset or production APP_ENV before anything is written, and document the guard on the first-run and sandbox pages

2026-10-23 15:46:52 +02:00

updater

feat: add a one-command self-host installer at warmbly.com/install.sh with an interactive data-control wizard, give docker-compose.yml image keys and per-store volume variables, add an image-mode updater, move engagement/form/audit retention into instance settings, and add warmblyctl backup/restore

2026-09-04 05:49:54 -07:00

warmblyctl

feat: count workspace-sealed mailbox credentials separately in warmblyctl keys status and reseal, scan KeyDomainMailbox columns under the instance key, and report sealed-format values no key opens as unreadable instead of legacy plaintext

2026-10-22 19:11:23 +02:00

worker

feat: give worker SEND_EMAIL commands a 120s deadline that covers the SMTP client's 90s budget, run the worker command subscription under a 195s bus budget (NATS ack wait and Kafka handler context via eventbus.WithHandlerTimeout), and add ordered per-mailbox command lanes on NATS with in-progress heartbeats

2026-10-16 06:57:14 +02:00