Matthew Meszaros 7f425c1624 feat: dashboard-wide AI assistant with streamed tool-use runs, per-action approvals, and per-iteration credits - agent_sessions/agent_messages/ai_tool_policies migration, aiagent service runs the M2 registry through the provider loop over a resumable jsonb transcript, streams text/tool-step/approval/done events over SSE, gates write tools behind approve/deny/always-allow (send always per-action) and charges 1 credit per iteration (budget 20, refund on provider failure, out-of-credits 402 insufficient_credits, cap 429 usage_cap_exceeded) with a resume-safe idempotency namespace, provider PreIteration budget hook, /ai/sessions endpoints (cursor list + two SSE runs) gated by membership with tools bound to the member's org-permission bits, APIPermAIAgent bit 22, ai_session audit entity + spine, and a right-side resizable panel (Cmd+I / sparkle button) with streamed text, collapsible tool steps, inline approval and draft-artifact deep-link cards, stop, new chat, and a credits/budget meter; tenancy enforced at the SQL layer and docs for the assistant, endpoints, permissions, and error codes

2026-07-13 18:46:43 +02:00

..

argon2

Fix: Go Tests

2026-01-29 09:23:46 +01:00

captcha

feat: add warmup health tracking, migrate repos to postgres, and overhaul web UI

2026-04-03 06:08:52 +00:00

climit

New Repository: Add Backend Code

2026-01-17 14:11:14 +00:00

crypt

Update auth and onboarding flow

2026-02-14 05:38:27 +01:00

dnsauth

feat: add mailbox deliverability checks

2026-06-03 06:26:23 +02:00

dsn

feat: add a conservative DSN bounce parser that extracts permanence, failed recipient, and original message id from delivery-status reports, treating only 5.x.x/failed as permanent so transient 4.x.x failures never over-suppress

2026-07-04 11:36:47 +02:00

emailverify

feat: add deliverability controls

2026-06-03 16:47:53 +02:00

emsg

feat: send campaign email attachments

2026-06-05 06:03:21 +02:00

encrypt

feat: seal SMTP/IMAP credentials at rest with a CREDENTIALS_ENCRYPTION_KEY-backed encrypter - the email repository Encrypt field was never wired anywhere, so smtp_imap accounts could never load onto workers (plaintext rows failed decode; hex-looking rows would nil-panic); adds encrypt.FromEnv and nil-guards that fail with a captured error instead

2026-07-11 17:30:49 +02:00

generation

feat: dashboard-wide AI assistant with streamed tool-use runs, per-action approvals, and per-iteration credits - agent_sessions/agent_messages/ai_tool_policies migration, aiagent service runs the M2 registry through the provider loop over a resumable jsonb transcript, streams text/tool-step/approval/done events over SSE, gates write tools behind approve/deny/always-allow (send always per-action) and charges 1 credit per iteration (budget 20, refund on provider failure, out-of-credits 402 insufficient_credits, cap 429 usage_cap_exceeded) with a resume-safe idempotency namespace, provider PreIteration budget hook, /ai/sessions endpoints (cursor list + two SSE runs) gated by membership with tools bound to the member's org-permission bits, APIPermAIAgent bit 22, ai_session audit entity + spine, and a right-side resizable panel (Cmd+I / sparkle button) with streamed text, collapsible tool steps, inline approval and draft-artifact deep-link cards, stop, new chat, and a credits/budget meter; tenancy enforced at the SQL layer and docs for the assistant, endpoints, permissions, and error codes

2026-07-13 18:46:43 +02:00

geo

feat: move infrastructure state off dynamodb

2026-06-02 15:54:12 +02:00

humanlint

feat: improve warmup content safeguards

2026-06-03 11:32:19 +02:00

idtoken

feat: add native Apple/Google sign-in to the backend - POST /auth/apple and /auth/google exchange provider-signed ID tokens for sessions, GET /auth/providers exposes configured providers for app discovery, with a JWKS-verifying idtoken package, auth config, stable error codes, and API/security docs

2026-07-07 05:56:35 +02:00

safehttp

feat: add safehttp dial-time SSRF guards and the whdomain subdomain-aware allowlist matcher used to harden outbound webhook delivery

2026-06-15 08:11:20 +02:00

stoken

New Repository: Add Backend Code

2026-01-17 14:11:14 +00:00

tmplfuncs

feat: preview campaign templates

2026-06-08 15:04:53 +02:00

warmlint

feat: add campaign template scoring

2026-06-03 06:27:07 +02:00

warmpersona

feat: add warmup content controls

2026-06-03 05:05:53 +02:00

whdomain

feat: add safehttp dial-time SSRF guards and the whdomain subdomain-aware allowlist matcher used to harden outbound webhook delivery

2026-06-15 08:11:20 +02:00