Commit Graph

10 Commits

Author SHA1 Message Date
3bca0fb279 docs: record Phase 1 deployment result (AUD-61)
Container email-agent live on .13:8790; Caddy route on .35 serves
mail.lab.audasmedia.com.au with a Let's Encrypt cert. Login + dashboard
await the board-gated EMAIL_AGENT_SESSION_SECRET.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-10-11 20:02:19 +11:00
3c0030c9a3 Phase 1.2: session login + empty HTMX dashboard
- Session login for the single user Sam: server-side session store with an
  HMAC-signed session cookie, POST /login, POST /logout, and double-submit
  CSRF on every form post. Unauthenticated requests to / and /partials/*
  redirect to /login?next=...
- Empty dashboard shell in the Family Home Lab design system: left nav
  (category and folder placeholders), centre list, right detail pane.
- Copy tokens.css and the self-hosted Inter fonts from the family-home-lab
  design system into web/static; vendor htmx 2.0.4. No cross-project imports
  at runtime.
- Dark mode via prefers-color-scheme plus a persisted toggle; phone-first
  layout with 44px touch targets, hairline borders, 8px grid, pill CTAs.
- Config: EMAIL_AGENT_PASSWORD for the login password, falling back to
  EMAIL_AGENT_SESSION_SECRET so one configured secret is enough.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-10-11 19:58:25 +11:00
1dc755a740 docs: bound and shell-safe docker run callout in AGENTS.md
Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-10-11 19:56:05 +11:00
a4c5b24f20 Add prominent Gmail build callouts to AGENTS.md
Call out two facts that already caused a confusing failure, before the
build phases begin:

1. Force IPv4 for every Gmail connection (IMAP and SMTP).
2. The source address header is X-Pm-Original-To; never use Delivered-To.

Additive only. No FR id, phase id, or other section is changed.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-10-11 19:53:02 +11:00
9efa9e9c89 Track cmd/email-agent/main.go (fix .gitignore shadowing)
The unanchored `email-agent` ignore rule matched the `cmd/email-agent/`
directory as well as the root build artifact, so the service entry point was
never committed and a fresh clone could not build. Anchor the rule to the repo
root (`/email-agent`).

This completes the Phase 1.1 tracked tree (AUD-58): entry point, config, SQLite
store, HTTP server, Dockerfile and compose.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-10-11 19:13:32 +11:00
ce2b8ac18f docs: phase 1 deploy runbook for mail.lab.audasmedia.com.au
Capture the AUD-60 deploy facts (port 8790, Caddy on .35, wildcard DNS,
reload command) as a repo runbook. Prepared for AUD-61; do not execute
until AUD-58 and AUD-59 are done.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-10-11 19:12:54 +11:00
5e89c1118f Note send-as: reported set up, confirm at Phase 5 2026-10-11 19:07:15 +11:00
fa340a6cb5 FR-2 confirmed: source address is X-Pm-Original-To (PurelyMail); forwarding verified 2026-10-11 18:57:26 +11:00
93f61d9aef Mail access: IMAP + app password (IPv4 only), not Gmail API 2026-10-11 18:40:16 +11:00
a69aaa3f80 Initial spec: AGENTS.md build spec + archived original notes 2026-10-11 17:24:15 +11:00