Changelog

Fixed PDF attachment preview blocked by CSP frame-src

Added CloudWatch agent config for worker instance

Added CloudWatch agent configs for web and infra instances

Updated plan email limits: Free 100→200, Pro 4,000→5,000

Fixed IndexNow host normalization and sitemap parse guard

Added IndexNow, comparison tables, visible dates, and i18n fixes

Improved GEO discoverability: schema enhancements, speakable, translated meta tags

Fixed GEO/AEO audit issues: author schema, breadcrumbs, comparison table, freshness dates

Unify footer across layouts and add visible breadcrumb navigation

Resolve sitemap lastmod from DB and files

Updated author name from Nikhil Mehta to Nikhil Rao

Tighten changelog filter to exclude infrastructure commits

Fixed key-facts component alignment on competitor pages

Added citation system for AI search engine visibility

Added FAQPage schema, FAQ sections, and BraveBot crawler access

Added LLMS generation, i18n, integration steps

Removed stale statefulApi() and tighten broadcast auth tests

Fixed broadcast auth: use web+session auth instead of API+Sanctum

Fixed Echo client to connect to Reverb instead of Pusher cloud

Enabled session broadcast auth and fix listeners

Added light/dark mode toggle to email preview panel

Sync plan feature tables with billing config and fix stale marketing claims

Added developer docs, OpenAPI spec, and L5-Swagger

Fixed OOM in clearMailboxMessages by chunking attachment deletion

Added structured data (FAQPage, enhanced Organization) and fix content accuracy

Wrap broadcast() calls in try/catch to prevent blocking HTTP requests

Added webhook v2 events, stream broadcasts & APIs

Added message inspection endpoints and timeline timestamps

Allow string _id in cursor decoding

Added Search and Wait APIs with concurrency

Fixed CSP blocking Pusher WebSocket connections for real-time emails

Added cursor pagination and metadata enrichment

Added target="_top" to billing links

Use Message model for Mongo updates; add ObjectId tests

Added link check job, SafeUrlResolver and UI

Fixed API card response shape and spam card plan accuracy

Added REST API, OTP extraction, and spam analysis to marketing pages

Added test for API token modal reopen clearing token display

Clear API token display when modal is reopened

Clear stale failure flags on successful content extraction retry

Fixed ObjectId crash in content extraction for non-ObjectId message IDs

Updated rest-api-otp-extraction-checklist.md

Added OTP and magic link extraction from emails

Added REST API v1 with mailbox-scoped tokens

Mark cross-cutting concerns as done, 1 item remaining (CloudWatch)

Added REST API + OTP extraction checklist

Updated spamassassin checklist to reflect actual production state

Added inline refresh button for pending rule analysis state

Move spam analysis to dedicated tab with bar gauge and review fixes

Added UI/UX Pro Max skill for Claude Code

Fixed spamd hang: half-close write socket after sending email

Reduce spam-analysis production workers from 3 to 2 to match spamd max-children

Merge remote-tracking branch 'origin/spam-analysis'

Enabled spam rule breakdown for all paid plans, not just Pro/Max

Added SpamAssassin Phase 3: simulator, smart rules, filters, admin widget

Revert "Add SpamAssassin Phase 3: simulator, batch command, smart rules, admin widget"

Added SpamAssassin Phase 3: simulator, batch command, smart rules, admin widget

Added SpamAssassin Phase 2: REPORT rules, plan gating, full UI

Updated Fazier badge image and remove hidden class

Added SpamAssassin Phase 1: core infrastructure, score analysis, and UI

Added Fazier badge and allow Fazier images in CSP

Added SMTP and email testing blog posts

Added competitor comparison and email testing stats

Added related posts and feature cross-links

Added Bing Webmaster config and scheduler

Added Bing sitemap schedule tests and response body validation

Updated PostsTable.php

Added Save action, redirect, and record links

Added Mailosaur and Ethereal Email comparison pages and best tools blog post

Added feature pages for SMTP sandbox, team collaboration, webhooks, and email previews

Added framework integration guides and complete Phase 1 SEO roadmap

Switch schema to BlogPosting; remove SVG

Added worker-src blob: to CSP for FilePond Web Workers

Fixed CSP blocking FilePond blob: image previews in Filament admin

Expand comparison pages to 2,000+ words with unique content per competitor

Fixed CSP blocking Filament file uploads, avatars, and Cloudflare beacon

Added Mailpit comparison page, sitemap entry, and blog cover templates

Fixed CSP blocking S3 blog images and standardize OG image dimensions

Harden image proxy: DNS pinning, SSRF mitigations, IPv6, error handling

Fixed broken email images with server-side image proxy

SEO and security improvements: CSP header, title tags, logo, GTM position, font cache

Replace inline logo and remove admin greeting

SEO improvements: About page, breadcrumbs, font preload, schema fixes

Combine user listing columns and fix broken IP lookup URL

Added admin email action with audit trail and snapshot persistence

Infra: expose redis for shared haraka use

Added unified form submissions system with Filament admin panel

Fixed SEO schema gaps: shared JSON-LD partial, config-driven pricing, proxy-aware redirects

Enforce non-www canonical URLs across all SEO-facing outputs

Fixed SEO issues: hreflang, lazy images, homepage meta, edge caching

Tighten .eml raw data heuristic: skip text/plain raw when HTML exists

Fixed .eml download serving incomplete raw data instead of full HTML content

Fixed /_boost/ blocking: root-level 410 route, middleware exclusion, all bot groups

Block /_boost/ from search engines and return 410 Gone

Added .eml file download for inbox messages

Fixed SEO audit issues: theme-color, self-hosted fonts, sitemap lastmod, single-hop redirects

Fixed SEO audit issues: schemas, breadcrumbs, caching, noindex, dark mode

Fixed SEO audit issues: security headers, image CLS, sitemap, touch targets, trailing slashes

Added async attribute to Termly consent script

Removed FAQPage and HowTo JSON-LD schema from marketing and docs pages