Helios Post Changelog

Preserves Resend domain lookup failures instead of mistaking them for missing domains, adds safe stage diagnostics, and gives administrators actionable errors with a Cloudflare request reference.

Connects existing Resend domains by enabling and verifying sending and receiving, shows DNS records and live verification states, and preserves the owner-approved transfer flow.

Lets organization admins connect a domain already configured in Helios Post's Resend account, preserves provider domains when database saves fail, and retains owner-approved transfers.

Resolves organization administration from the authenticated Lucion Identity session, adds the first-run walkthrough, owner-approved domain transfers, and tenant-scoped live settings updates.

Completes the Helios Post amber and navy identity across mailbox and sign-in surfaces, adds branded footer artwork, and updates live release status while preserving lucionmail.com addresses and service endpoints.

Renames the product experience to Helios Post and applies the approved logos, amber and navy palette, and Helios Array Suite positioning while preserving production domains, Identity callbacks, and mail services.

Separates Lucion Global organization mail administration from personal settings and scopes company addresses and integration credentials to shared mailboxes.

Adds encrypted per-key webhook configuration and signed mail.send.accepted notifications for API-key sends.

Adds first-run domain verification, a Matthew-only delivery test, and organization-member mailbox provisioning through a server-side Identity roster credential.

Adds the Identity-protected /admin page and server-enforced Lucion Global organization roles for company mailbox and API access.

Records successful sign-ins and security-sensitive account changes in an account-scoped activity log.

Adds RSS and Atom release feeds and stable anchors for dated release history.

Sets a 30-day API-key default, requires confirmation for non-expiring keys, displays last-used time and IP, and corrects release history while documenting the spam/phishing filtering gap.

Adds verified employee company-address linking and organization-member shared-mailbox access, with admin-only management and company API keys bound to one mailbox.

Adds drag-and-drop attachments and broader file-type validation while retaining bounded size/count and server-side safety checks.

Adds detailed developer documentation and support for API keys without automatic expiry.

Adds personal scoped API keys, a versioned read/send API, one-time credential display, verified-email alerts, revocation, per-key limits, and the release update banner.

Adds administrator-authorized organization domain verification, per-address personal or shared-mailbox routing, and mailbox-context isolation for inboxes, drafts, sends, filing rules, and live updates. Requires the v0.3.5 database migrations and current Identity organization-admin claims.

Adds the Identity organizations scope request and accessibility refinements for keyboard and focus behavior.

Adds privacy-safe inbound webhook stage timing and retry diagnostics.

Added protected account workflows, send and mailbox timing, retry-safe live synchronization, current status checks, and security guidance.

Adds account-owned sender names, default signatures, and private profile photos, with a public audit of sending-domain authentication.

Adds live address availability, atomic Lucion address claims, and safe Lucion Identity return redirects.

Fixed UUID validation for mailbox actions, added owner-scoped updates, optimistic rollback, actionable errors, Undo, and live cross-device state sync.

Added signed inbound event timing and account-scoped WebSocket mailbox updates with automatic reconnect and reconciliation.

Made sending confirmation, draft cleanup, sent-folder refresh, and idempotent retry behavior reliable.

Moved mail, drafts, addresses, message actions, filing rules, and delivery state into account-scoped Supabase storage.

Connected Mail accounts to stable Lucion Identity subjects, added verified primary addresses and account-owned aliases, and enabled server-side sender ownership checks with RLS-protected database storage.

Replaced Cloudflare Access with Lucion Identity OAuth/OIDC sign-in using PKCE, single-use state, secure HttpOnly cookies, and account identity from the verified subject claim.

Introduced the green Lucion Mail product system, automatic inbound sync, production theme behavior, and staged Lucion Identity configuration.

Expanded Compose with rich formatting, Cc/Bcc, attachments, scheduling, priority, Reply-To, autosave, and advanced sending controls.

Moved the controlled preview session into Lucion Mail, enabled browser Compose sending, and added provider-confirmed local Sent history.

Activated the guarded preview authentication bridge and proved the first real Lucion Mail outbound message through Resend.

Added the provider-neutral transport, Resend adapter, React Email rendering foundation, and transport readiness gates.

Made drafts, contacts, mailbox state, local search, filtering, and preferences functional and persistent on the current device.

Defined the Lucion Identity authentication, PKCE/session, authorization, and auth-readiness boundary while keeping authentication disabled.

Introduced canonical mailbox data contracts, a tenant-scoped repository boundary, and a non-production PostgreSQL/Supabase schema draft.

Upgraded to Next.js 16.3.3, cleared the dependency audit, restored valid SemVer, and hardened the Cloudflare production release gate.

Introduced the first complete mail workspace preview with Inbox, Starred, Sent, Drafts, Archive, Trash, Contacts, Settings, Search, and Onboarding routes. Mail transport, authentication, and durable mailbox storage were not enabled; Compose was a non-sending preview.

Added project-local Wrangler, manual Cloudflare Pages deployment, static export, Pages Functions, and Cloudflare release engineering.

Foundation polish release with responsive navigation, public search, improved contact routing, upgraded 404 recovery, and hardened release validation.

Initial production foundation, Coming Soon experience, public route structure, environment configuration, health endpoint, and baseline security headers.