- internal/mailfetch: stdlib-only read-only IMAP client (LOGIN, SELECT,
UID SEARCH, UID FETCH) that always dials tcp4; IPv6 to Gmail is broken
from .13 and caused a socket EOF.
- MIME parsing to text, RFC2047 header decoding, FR-2 source address:
X-Pm-Original-To -> To -> Received 'for <addr>' -> Return-Path, never
Delivered-To. The matched header is recorded for audit.
- store: Message upsert/list/count + LogAction; schema migration v2 adds
imap_uid and imap_uidvalidity.
- server: dashboard and /partials/inbox render real mail grouped by
category with a recommended action; POST /actions/fetch runs a scan
(CSRF-checked); nav counts; 'Check mail' button.
- config: GMAIL_USER, GMAIL_APP_PASSWORD, IMAP host/port/lookback/max.
- cmd: -fetch runs one scan and exits (n8n/CLI entry point, FR-1).
- compose/.env.example expose the Gmail + IMAP settings.
- tests: FR-2 precedence, MIME bodies, IMAP literal/parser, store
upsert/migration, inbox rendering.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Login and dashboard verified over public HTTPS; record the secret path and
the Paperclip card cascade limitation that forced direct configuration.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Container email-agent live on .13:8790; Caddy route on .35 serves
mail.lab.audasmedia.com.au with a Let's Encrypt cert. Login + dashboard
await the board-gated EMAIL_AGENT_SESSION_SECRET.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
- Session login for the single user Sam: server-side session store with an
HMAC-signed session cookie, POST /login, POST /logout, and double-submit
CSRF on every form post. Unauthenticated requests to / and /partials/*
redirect to /login?next=...
- Empty dashboard shell in the Family Home Lab design system: left nav
(category and folder placeholders), centre list, right detail pane.
- Copy tokens.css and the self-hosted Inter fonts from the family-home-lab
design system into web/static; vendor htmx 2.0.4. No cross-project imports
at runtime.
- Dark mode via prefers-color-scheme plus a persisted toggle; phone-first
layout with 44px touch targets, hairline borders, 8px grid, pill CTAs.
- Config: EMAIL_AGENT_PASSWORD for the login password, falling back to
EMAIL_AGENT_SESSION_SECRET so one configured secret is enough.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Call out two facts that already caused a confusing failure, before the
build phases begin:
1. Force IPv4 for every Gmail connection (IMAP and SMTP).
2. The source address header is X-Pm-Original-To; never use Delivered-To.
Additive only. No FR id, phase id, or other section is changed.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
The unanchored `email-agent` ignore rule matched the `cmd/email-agent/`
directory as well as the root build artifact, so the service entry point was
never committed and a fresh clone could not build. Anchor the rule to the repo
root (`/email-agent`).
This completes the Phase 1.1 tracked tree (AUD-58): entry point, config, SQLite
store, HTTP server, Dockerfile and compose.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Capture the AUD-60 deploy facts (port 8790, Caddy on .35, wildcard DNS,
reload command) as a repo runbook. Prepared for AUD-61; do not execute
until AUD-58 and AUD-59 are done.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
