Added
- A local-first document archive in one Go binary, with an embedded web app,
SQLite storage, full-text search, metadata, versions, and filing trees. - Browser, API, watched-folder, and rules-based IMAP intake, including Microsoft
sign-in, app-password providers, and Paperless-ngx bundle import. - Ready-made filing trees, deterministic automations, optional local or hosted
classification, approvals, and permanent Archive configuration. - Source history, saved and shared views, secure email previews, document
sharing, API tokens, MCP access, and multi-user permissions.
Changed
- Fresh installations start with only System/Inbox and require an explicit
filing-tree or Blank choice; setup controls remain available afterward. - Account and archive configuration have separate workspaces, with one home for
mailbox, automation, taxonomy, and saved-view actions. - Duplicate content records each distinct source, explicit configuration stays
authoritative, and inactive interface work is deferred for faster navigation.
Fixed
- Mail intake advances ignored messages correctly, filters only ingestible
attachments, and no longer leaves attachment-only source emails in Trash. - Setup reminders retire after engagement, filing-tree selection, completion,
or 48 hours instead of blocking Archive configuration indefinitely. - Access checks now cover every document action; Confidential and Restricted
thumbnails, previews, and extracted text share the same reveal protection. - Filing-tree replacement, classification, polling, ingest jobs, taxonomy
import, and configuration reloads preserve state and recover cleanly. - Saved-view links, missing thumbnails, fast route changes, pipeline rescans,
and password-protected documents no longer produce misleading interface state.
Security
- Session and token secrets are digested; provider keys, mailbox credentials,
and saved document passwords are sealed at rest. - Setup, demo isolation, error responses, and capability removal fail closed.