AkurAI-Mail / CHANGELOG.md

Latest change 66e3647948f2e277afdd6ecd16939de8b6ad525f - Initial commit: AkurAI Mail UI (SvelteKit+Bun) by Ólafur Búi Ólafsson

# Changelog

## 0.4.1 - 2026-06-24

- Refactored webmail into a familiar mail-client layout with top search, folder column, message list, and reading pane.
- Added responsive tablet and mobile behavior with a focused message detail view and back action.
- Reworked compose into a floating draft window and settings into a right-side drawer.
- Improved message list density, attachment/spam badges, reader actions, and mobile touch targets.

## 0.4.0 - 2026-06-24

- Added dependency-free anti-spam scoring for Inbox processing with sender blocklist, allowlist, blocked domains, keywords, suspicious attachments, link-count checks, and SPF/DKIM/DMARC failure signals.
- Added automatic Spam-folder quarantine before vacation replies and user rules run.
- Added one-click spam sender learning from the webmail "Spam" action.
- Added `anti-spam-config` and `anti-spam-scan` CLI commands for one-shot policy updates and mailbox scans.
- Added admin UI controls for anti-spam status, policy tuning, list management, scan execution, and quarantine counts.
- Opened VM firewall access for IMAPS `993/tcp` and submission `587/tcp`.
- Issued a Let's Encrypt certificate for `mail.olibuijr.com` and configured Dovecot IMAPS and Postfix submission to use it.

## 0.3.1 - 2026-06-24

- Added mailbox-specific webmail login backed by Dovecot mailbox credentials.
- Scoped mailbox sessions to `/webmail` and prevented mailbox users from reading or mutating other mailboxes through the webmail API.
- Reduced mailbox-only webmail state to the signed-in mailbox and hid admin navigation for non-admin sessions.
- Added `/webmail/logout` so mailbox sessions can sign out while keeping the mailbox cookie scoped to `/webmail`.

## 0.3.0 - 2026-06-24

- Added attachment download, settings import/export, dark mode preference, message pagination, and keyboard shortcuts to webmail.
- Added automatic Inbox processing for configured filter rules and vacation replies.
- Added webmail API origin validation and per-client mutation rate limiting.
- Added admin health visibility for Postfix queue, recent delivery errors, mailbox usage, last delivery time, DNS verification, and direct webmail links.
- Expanded server CLI status with DNS, queue, log, quota, and delivery health evidence.

## 0.2.0 - 2026-06-24

- Implemented local Maildir-backed webmail state, folder counts, message search, message reading, and sanitized HTML rendering.
- Added compose, send through local Postfix, draft saving, reply, reply-all, forward, read/unread, star/unstar, archive, spam, trash, and move actions.
- Added attachment support for outgoing mail with a conservative size cap and attachment metadata display for received mail.
- Added contacts, per-mailbox signatures, vacation reply settings, mailbox preferences, and filter rules with manual rule application.
- Added `/webmail/api` as the authenticated JSON bridge between SvelteKit and the dependency-free server CLI.

## 0.1.5 - 2026-06-24

- Installed UI/UX Pro Max and Impeccable design skills for future UI work.
- Refactored admin, login, and webmail surfaces into one restrained platform UI.
- Added VM status metrics with CPU, memory, and disk trend graphs.
- Updated the server CLI to show real active Dovecot mailboxes and Postfix aliases.
- Added `backup.sh` and `rollback.sh`; deployment now creates a backup before each release.
- Added `AGENTS.md` project memory for future server-side agents.

## 0.1.4 - 2026-06-24

- Improved mobile dashboard and login layouts to prevent narrow-screen overflow.
- Activated and verified the minimal AkurAI Mail service stack: Postfix, Dovecot, OpenDKIM, and Fail2ban.
- Updated mail DNS records for the new VM, including MX, SPF, DMARC, DKIM, and common client hostnames.

## 0.1.3 - 2026-06-24

- Replaced browser Basic Auth prompt with a SvelteKit login screen and signed session cookie.
- Added logout route and deployment verification for login, redirect, and authenticated API behavior.
- Configured trusted SvelteKit form origins for the VM's Bun/Nginx deployment path while keeping HttpOnly SameSite sessions.

## 0.1.2 - 2026-06-24

- Updated AkurAI Webmail Service Basic Auth username for operator login.

## 0.1.1 - 2026-06-24

- Added `deploy.sh` as the required Bun build, restart, auth, API, and Nginx verification path.
- Moved `akurai-mail-server` into versioned repo source under `scripts/`.
- Added explicit API method guard for deployment verification.
- Cleaned git tracking to exclude generated build output and dependencies.

## 0.1.0 - 2026-06-24

- Created AkurAI Webmail Service management UI with SvelteKit 2, Svelte 5, Vite 8, and Bun.
- Added service dashboard, staged mailbox creation, staged aliases, DNS record view, and local API actions.
- Added Basic Auth, Nginx reverse proxy, and systemd service deployment.
- Added server-side `akurai-mail-server` CLI for UI-backed operations.