v0.0.18

   🚀 Features

• api:
  • Broadcasts can set their own pace, at most so many mails an hour, a day and a month  -  by @productdevbook and Claude Opus 5.5 (3a833)
  • Each inbox sends in its own Amazon SES tenant  -  by @productdevbook and Claude Opus 5.5 (aa777)
• web:
  • Set and change a broadcast's sending pace in the panel  -  by @productdevbook and Claude Opus 5.5 (d765f)
  • Show each inbox's Amazon SES tenant and act on its pauses  -  by @productdevbook and Claude Opus 5.5 (0d4d6)

   🐞 Bug Fixes

• api:
  • Widget realtime refuses ?token=, image quota is race-free, GeoIP refuses redirects  -  by @productdevbook and Claude Opus 5.5 (eaf22)
  • Analytics caps monthly events by default and sends CORS only to matching origins; mail headers refuse control characters  -  by @productdevbook and Claude Opus 5.5 (952b8)
  • Consent history is for managers, and e-mail image uploads are rate limited and share a decode budget  -  by @productdevbook and Claude Opus 5.5 (0d91d)
• deploy:
  • The dev compose stack binds to loopback and its known secrets refuse a public URL  -  by @productdevbook and Claude Opus 5.5 (65673)
• samples:
  • Cleartext only to the local dev host, and the CLI token file is 0600  -  by @productdevbook and Claude Opus 5.5 (84962)
• web:
  • Agents no longer request or see subscribers' consent records  -  by @productdevbook and Claude Opus 5.5 (d5b8c)

    View changes on GitHub