-
GO-30-CSP W2+W3: migrate all inline on* handlers to delegated dispatch
-
Frontend cold spots R4: escapeHandlerArg sweep + gate rule, email preview to Rust
-
Fix cold-spot correctness: parser UTF-8 panic, desktop blob_gc, backup collision, FE bugs, XSS sinks
-
Frontend XSS: seal the unsafe attribute escaper (CHRONIC-XSS)
-
Close blob_hash path traversal and tighten email escaping
-
fix(security): keychain email passwords, SMTP STARTTLS floor, IPC OAuth callback, CSP
-
theme: GoingsOn styles purely intent-specified (no brand aliases)
-
Fix pre-launch audit backlog (GO-5..GO-14) + broken manual time logging
-
Email setup: lead with app-password IMAP/SMTP, OAuth as alternative
-
CSS dedup + UI mode separation + ยง3 launch-readiness fixes
-
UX audit sweep: Tier 1-4 + Tier 6 + design-system charter
-
Mobile UX rework: touch-native interactions, segmented events, iOS fixes
-
UX audit remediation, error handling, day planning, draft autosave
-
Email features: signatures, drafts, labels, notifications
-
UX audit: 11 usability improvements from audit findings
-
UX: monthly review complete, IMAP auto-detect, manual time entry
-
Audit Run 14: tests, security hardening, JSDoc, date_utils extraction
-
Mobile UX improvements, monthly review, maintainability splits
-
Version bump to 0.2.1, align workspace version
-
Initial commit