v0.1.0

Changelog

• 7b88110 Add List Role term and plan Phase 5: web role console (moderation + allowlist)
• b1a234d Add Phase 10 bounce management plan, ADR 0019, and corrected Disabled Subscription semantics
• 005e518 Add Phase 10 bounce management: Bounces tab, re-enable/reset, owner auto-disable notice
• 9df8d41 Add Phase 14 CSV member import/export: Members-tab import/export, CLI parity, member.import audit (ADR 0024)
• a272660 Add Phase 5 role console: web moderation and the newsletter allowlist
• 52888fd Add Phase 6 admin console: web settings, membership, and roles
• 8d9479b Add Phase 7 server administration: the Administrator role
• ea223f2 Add Phase 8 audit trail plan, ADR 0018, and Audit Event glossary term
• 762b082 Add Phase 8 audit trail: record privileged actions across email/CLI/web
• 3d4affe Add Phase 9 sender held-status view: posts awaiting approval on /me
• 1d81797 Add README with screenshots captured from a live seeded instance
• 340313c Add agent-executed frontend e2e test suite (chrome-devtools MCP)
• 0c2277f Add domain model and architectural decisions for xListman
• a539137 Add email command interface (-request) and owner forwarding
• 7d91377 Add open-source packaging: MIT license, security policy, CI, and releases
• c3bb005 Add paged/searchable members and filterable audit trails to the web consoles
• c1f7dd0 Add per-list attachment policy and MIME-aware archive rendering (Phase 15, ADRs 0025-0026)
• 41ab347 Add web access control: DB-backed login and management toggles (ADR 0020)
• 133ce0a Apply launch hygiene: gofmt alignment, SPA-build gitignore, fixture owner rename
• 99af804 Bump GitHub Actions to latest versions
• 8953a52 CLI command check
• f376b0f Commit embedded SvelteKit SPA build so go build alone yields a complete binary
• 865a8b9 Complete Phase 2: digest worker, queue max-retry bounce, expiry sweeper
• 9a638ad Complete moderation: email and CLI actions on held messages
• 6b8c86b Distinguish 401 vs 403 on the members-only archive gate
• c81d58f Embed SvelteKit SPA in the Go binary and serve it with client-route fallback
• b4dd35a Fix Bounces tab description copy
• 9f99f52 Fix magic link URL so emailed login reaches the API verify endpoint
• 38b977a Fix release: run goreleaser hooks without a shell; fetch tags in docker job
• a17806a Implement runnable daemon and complete the subscribe-confirm-post-deliver loop
• 6fd2f13 Implement web API: passwordless auth, self-service, members-only archives
• 2faf16e Implement xListman core: Go backend with GORM, LMTP, CLI, and HTTP API
• 55c85ad Move screenshots.yaml to script
• ac473e2 Move the e2e config into scripts/ so all e2e tooling lives together
• a1b6498 Re-route frontend: My lists at /admin, server admin at /server
• 5c566f6 Refresh embedded SPA build (regenerated by make build)
• 83d93e2 Remove the Makefile; goreleaser + scripts + CI cover its jobs
• 43c7b4f Restore web/build/.gitkeep so go:embed works on a fresh checkout
• 90cba33 Role-gate the My lists and Server nav items
• f8c0977 Ship CA certs in Docker image; ignore goreleaser dist output
• a8bada6 Show README screenshots as clickable thumbnails
• bac521d Stop tracking the SPA build; add responsive menus, tab reorder, multi-line instructions, and configurable notice emails
• c6024df Validate the LMTP loop against exim; add the MTA validation harness
• ef67344 Web protecting: rate limiting, public page caching, and N+1 fix (ADR 0023)
• 882234e mail: accept the null LMTP sender to close the VERP bounce loop