New features, behavioural changes, and fixes, in the order they reached production. No marketing language, no rewrites of older entries, no quiet deletions.
The 3 most recent merged pull requests. Each entry links straight to the PR it shipped in.
Organization data export and import for moving a workspace between instances (#132). Seal Gmail and Outlook OAuth access and refresh tokens at rest in emailaccountsoauth… (#115). Resolve campaign senders by organization, not by the campaign owner (#167) (#177). A campaign email can be sent twice when the progress…
#183ImapConn (imapconn.go) — the methods the worker drives on one IMAP connection. No call site changed; only the field type.. SyncBudget (governor.go) — Policy / SetPolicy / Admit / ObserveLive / RecordThrottledDay.. TestImapSyncStopsFetchingOnceTheLiveLaneIsDenied — 600 changed UIDs (3 batches), budget 0. Asserts…
#182Fixes #165.
#180New features, behavioural changes, and fixes, in the order they reached production. No marketing language, no quiet deletions.
Organization data export and import for moving a workspace between instances (#132). Seal Gmail and Outlook OAuth access and refresh tokens at rest in emailaccountsoauth… (#115). Resolve campaign senders by organization, not by the campaign owner (#167) (#177). A campaign email can be sent twice when the progress…
ImapConn (imapconn.go) — the methods the worker drives on one IMAP connection. No call site changed; only the field type.. SyncBudget (governor.go) — Policy / SetPolicy / Admit / ObserveLive / RecordThrottledDay.. TestImapSyncStopsFetchingOnceTheLiveLaneIsDenied — 600 changed UIDs (3 batches), budget 0. Asserts…
One source of truth for the tracking host. config.TrackingHost() reads TRACKINGDOMAIN, normalized, hydrated at boot so the AWS Parameter Store path and the env path agree. Same class of fix as AppBaseURL. No host configured means mail goes out untracked, never carrying links to another deployment.…
Repository.AccountScope is the tenant key: ea.organizationid = $1. Nil is not a wildcard, it resolves to no mailboxes rather than widening to the owner, matching how the campaign task halts an orgless campaign instead of sending it unchecked. GetByTags, GetAllActiveByUser (renamed GetAllActiveInScope) and…
Found while verifying #168 against the export/import path. Three defects, two classes, each one enough to abort a whole archive. No open issue covered them.
SequenceRepository.Create inserted a step with no organizationid at all. There is one such row in the dev database today.. /emails/onboarding/ had no workspace guard, and a session carries no organization until the client calls POST /organization/switch/:id.. Migration exercised on a cloned dev database with orphan…
FindNextRoutedPair loads waitafter/kind/action per step, computes each candidate's due time, returns the first due contact in list order, and when nothing is due returns the soonest due moment (merged with condition-window rechecks) so the scheduler defers exactly until then.. Scheduler: new-lead-cap deferral is…
Picking today's date always failed Start date must be in the future because the picker sends midnight local. Validation now accepts anything within the last 24h, so today means "start now".. The error told users to "use null", but PATCH skipped nil pointers, so "startdate": null silently did nothing (or 400'd "Not…
Cold send gates in the campaign scheduler, before the daily-count query. An all-gated pool returns ErrDomainAuthFailing rather than the existing message about sending windows and daily caps, which would have sent people to check timezones for a DNS problem.. Warmup gates in the task and demotes the mailbox to…
Thread reader loads each expanded message's real body and renders it in a sandboxed iframe. Newest message and anything unread open by default, the rest collapse to their preview.. API sanitizes bodyhtml before returning it, keeps table and inline-style layout, drops scripts and style content. A missing body blob…
Raw passthrough: warmblyctl api get|post|patch|put|delete <path> with --data taking a literal, - or @file, and --idempotency-key. Nothing the API can do is out of the CLI's reach.. Typed families: me, campaign, contact, mailbox, inbox, analytics, settings, webhook, apikey, template, crm. One spec table drives…
Gmail and Outlook imported nothing historical; IMAP imported everything in every folder, oldest first, and then tripped a flat 100-per-5-minutes limiter that deactivated the mailbox mid-walk with no resume state.. IMAP folder cursors were memory-only (the loader never passed the saved rows), so every worker restart…
Export walks every org-owned relation into a zip of newline-delimited JSON, one file per table, plus attachment bytes.. Import reads it back into a destination workspace, remapping people and clearing the fields that only meant something on the instance the archive came from.. Surfaces: Settings → Data in the…
Rebuilt the new-campaign wizard: directional step transitions, numbered stepper with filling connectors, the shared sky Toggle instead of a hand-rolled switch whose knob translated out of its own track, shared WeekdayBitmask, per-step validation that explains itself instead of a silently disabled button, no skipping…
WorkerRepository.IsWorkerLive uses the same predicate as selection: active = true AND lastseenat > now() - WorkerLivenessWindow.. ReleaseDeadWorker in the loader releases a mailbox held by a dead worker through the existing UnassignWorkerFromEmail, which also corrects that worker's accountcount and load score, then…
Emailaccounts.timezone defaults to 'UTC'. Campaigns.timezone defaults to 'Europe/London'. Gofmt -l cmd internal clean. Golangci-lint run ./internal/... clean. Go test ./internal/... passes. Migration executed against the live schema and rolled back, as above. Pnpm types:check in docs/ passes.
Docker compose -p warmbly config validates; 12 services carry the policy and seed does not. Cargo fmt --check clean. Cargo clippy --all-targets -- -D warnings clean. Pnpm types:check in docs/ passes.
Volume ownership before/after, as above. Pnpm types:check in docs/ passes.
Gofmt -l cmd internal clean. Golangci-lint run ./internal/repository/... clean. Both statements executed against the live schema, as above (test rows removed).
Gofmt -l cmd internal clean. Golangci-lint run ./internal/... clean. Go test ./internal/... passes. Pnpm types:check in docs/ passes.
Every entry links to the pull request that shipped it. Watch or star the repository to hear about the next release, and open a discussion on what we build next. No email signup, no tracking pixels.
The full record on main, in the order it reached production. Every changelog entry traces back to one of these.
Star the repository to get release notifications. Every changelog entry references a commit or migration.
Request a feature, report a bug, or open an RFC. We read every thread and respond in the open.
Encryption model, subprocessors, security posture, and SOC 2 progress. Reviewed alongside each release.
Connect a mailbox, warm it up, and put your first campaign in the next changelog entry.
