v0.5.1

What's Changed

• fix(npm): harden the publish path (publishConfig, exports, CI auto-publish) by @jeremylongshore in #89
• fix(deps): clear all npm audit / Dependabot advisories (8 → 0) by @jeremylongshore in #91
• fix: eliminate import-time DB side-effect (lazy/guarded bootstrap) by @jeremylongshore in #90

Full Changelog: v0.5.0...v0.5.1

v0.5.0

First release since the platform build landed — multi-surface email triage (MCP server, Ink TUI, web dashboard) for Gmail + Outlook.

Added

• Multi-account sync orchestration — bounded-concurrency rate limiting + active-account prioritization (most recently active mailboxes sync first).
• L5 security CI — gitleaks secret scan + OSV dependency scan.
• L3 mutation testing (Stryker, report-only baseline), rules-engine E2E suite, and a gated Gmail/Outlook integration harness.
• build:web gated in CI; governance scaffolding (CoC, CONTRIBUTING, SECURITY, SUPPORT, Dependabot, …).

Changed

• React 19 + Ink 7 across the TUI and web app.
• Dependency modernization — better-sqlite3 12, openai 6, googleapis 173, @anthropic-ai/sdk, @inquirer/prompts 8, conf 15, dotenv 17, commander 15, +types, +CI actions.
• Web app is now the decoupled DailyReview surface on /api (legacy browser-OAuth views removed).
• Lint rules no-case-declarations + no-var-requires promoted to errors.

Fixed

• Sync daemon now refreshes and persists Gmail OAuth tokens (token drift) + guards overlapping poll cycles.
• OSV scan no longer shows a phantom red check on every PR.

Removed

• Dead @anthropic-ai/claude-agent-sdk; obsolete GCP deploy machinery (Cloud Run + Terraform); dead deps (marked, md-to-pdf, Playwright).

Full changelog: https://github.com/jeremylongshore/intent-mail/blob/v0.5.0/CHANGELOG.md

v0.4.1 - Security Patches & CI Fixes

What's Changed

Security

• fix(security): Patch high-severity qs vulnerability (CVE-2025-15284) via npm override
• fix(security): Update @modelcontextprotocol/sdk to ^1.25.1
• fix(security): Update vitest to ^4.0.16
• fix(security): Add js-yaml override (>=4.1.1) for remaining vulnerability
• All npm audit vulnerabilities resolved (0 vulnerabilities)

CI/CD

• fix(docker): Add build dependencies for native modules (python3, make, g++, libsecret-dev)
• fix(gmail): Resolve googleapis type conflicts by using type alias
• fix(deploy): Skip Cloud Run deploy step (MCP uses stdio transport, not HTTP)
• fix(test): Add vitest.config.ts for proper test file discovery
• fix(build): Add type declarations for Node.js globals in adapters

Tests

• All 23 tests passing in CI

Full Changelog: v0.4.0...v0.4.1

v0.4.0 - Complete All Epics

Features

E2: Discord Integration

• Discord bot with slash commands (/inbox, /read, /compose, /search)
• AI-powered draft generation in compose
• DM notification system with quiet hours and filters

E4: Web Dashboard

• React/Vite web application with TypeScript
• Google OAuth authentication
• Responsive inbox, email detail, compose, search components
• PWA support with service worker and dark mode

E5: Team Collaboration

• Shared inbox channels with role-based access
• Email assignment with priorities and SLA tracking
• Thread comments with @mentions and reactions
• Team analytics with metrics, trends, and CSV export

What's Changed

• feat: complete all epics (E2, E4, E5) - Discord, Web Dashboard, Team Collaboration by @jeremylongshore in #22

Full Changelog: v0.3.0...v0.4.0