15 releases 15 tags

RSS feed

• v0.7.0 cb2fb17420

  Compare

  v0.7.0 — Phase 7: Segmentation, access control & e2e tests Stable

  vmanne-poc released this 2026-10-14 22:55:35 -04:00 | 61 commits to main since this release

  Recommended upgrade: fixes a security issue present in all earlier releases (#8).

  Added

  • Segment rule engine: whitelisted JSON rules (email, names, dates, custom data.<key>; all/any groups up to 3 levels) compiled to Prisma.
  • Segments API (CRUD + preview) and builder UI with live preview.
  • Campaign targeting by segment; schedule / unschedule endpoints and UI.
  • ProjectAccessGuard on every /projects/:projectId/... route.
  • End-to-end suite against PostgreSQL with a fake mailer (22 tests); 43 unit tests.
  • docker compose run --rm --build -T backend-test (resets only postak_test).
  • POSTAK_SCHEDULER_ENABLED, POSTAK_DISABLE_REGISTRATION.
  • User guide docs/user/segments.md.

  Fixed

  • #8 Project data was readable by any signed-in user.
  • #9 A campaign with a missing segment was sent to every contact.
  • #10 Campaigns could reference another project's sender, template, or segment.
  • #11 The same campaign could be sent twice.
  • #12 Sent campaigns were editable; PATCH bodies were not validated.
  • #13 Snapshot endpoint ignored the project and accepted invalid dates.

  Changed

  • npm ci with committed lockfiles; .dockerignore files.

  Known issues

  • npm audit --omit=dev: 12 vulnerabilities (4 high) in runtime dependencies. Tracked in #14 (Phase 8).

  Milestone: Phase 7 · Summary: #7

  Downloads

  • Source code (ZIP)
    0 downloads
  • Source code (TAR.GZ)
    0 downloads