Search: - Meilisearch backend (app/search/meili.py) + factory wiring; pinned SDK 2.7 - Search-as-you-type: debounced query + Postgres prefix matching, built from the DB tokenizer so full email addresses match (email stays one lexeme) - Saved searches API + sidebar virtual mailboxes; save affordance in the box Account sync windows (SPEC §12 M2): - Choose at setup: All (recent 30d first, then remainder), Last 3 months, New only - Per-account sync_window + "Sync remaining mail" from settings (idempotent re-run) - Provider windowed backfill (SINCE/BEFORE), message_count, newest_uid - migration 0012: accounts.sync_window + backfill_total/backfill_done Backfill progress UX: - Floating progress card (auto-dissolves after 10s) + spinning sidebar ring that fills with the account colour; driven by sync.progress over WS Thread list pagination: - Server-side offset + accurate grand total, with filter/order in SQL; working prev/next across all synced mail Reading panel: - "Load images" one-off now actually renders images (?images=1) without trusting the sender; envelope carries images_allowed so a trusted sender shows no prompt Threading: - Subject fallback no longer merges messages that declare an explicit (different) parent; true siblings still group via a shared-parent reference match. Fixes unrelated auto-replies with the same subject landing in one thread Backend 257 tests green, ruff + mypy --strict clean; frontend tsc/eslint/vitest clean. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01U72FZiF1W1pb8XxyWBTREA
79 lines
2.1 KiB
TOML
79 lines
2.1 KiB
TOML
[build-system]
|
|
requires = ["setuptools>=68", "wheel"]
|
|
build-backend = "setuptools.build_meta"
|
|
|
|
[project]
|
|
name = "webmail-backend"
|
|
version = "0.1.0"
|
|
description = "Webmail client backend (sync-first, see webmail-client-spec.md)"
|
|
requires-python = "==3.11.*"
|
|
# Pinned per SPEC §3. Do not swap libraries or add deps without a `# DEPENDENCY:` comment.
|
|
dependencies = [
|
|
"fastapi~=0.115",
|
|
"uvicorn[standard]~=0.30",
|
|
"sqlalchemy[asyncio]~=2.0",
|
|
"asyncpg~=0.29",
|
|
"alembic~=1.13",
|
|
"pydantic~=2.8",
|
|
"pydantic-settings~=2.4",
|
|
"arq~=0.26",
|
|
"redis~=5.0",
|
|
"aioimaplib~=1.1",
|
|
"imapclient~=3.0",
|
|
"aiosmtplib~=3.0",
|
|
"argon2-cffi~=23.1",
|
|
"pyotp~=2.9",
|
|
"dnspython~=2.6",
|
|
"httpx~=0.27",
|
|
"nh3~=0.2",
|
|
"cryptography~=43.0",
|
|
"mail-parser~=4.0",
|
|
"meilisearch-python-sdk==2.7.0", # last release that fits the pinned Meilisearch v1.8
|
|
"python-multipart~=0.0.9",
|
|
# DEPENDENCY: SPEC §6.2 mandates accounts/presets.yaml (config, not code); the
|
|
# stdlib has no YAML parser, so PyYAML is required to load it.
|
|
"pyyaml~=6.0",
|
|
# DEPENDENCY: autoconfig/ISPDB return XML from untrusted servers; defusedxml
|
|
# blocks XXE/billion-laughs that stdlib ElementTree is vulnerable to (§10 hostile input).
|
|
"defusedxml~=0.7",
|
|
]
|
|
|
|
[project.optional-dependencies]
|
|
dev = [
|
|
"ruff~=0.6",
|
|
"mypy~=1.11",
|
|
"pytest~=8.3",
|
|
"pytest-asyncio~=0.24",
|
|
"respx~=0.21",
|
|
"aiosqlite~=0.20",
|
|
]
|
|
|
|
[tool.setuptools.packages.find]
|
|
where = ["."]
|
|
include = ["app*", "workers*"]
|
|
|
|
[tool.ruff]
|
|
line-length = 100
|
|
target-version = "py311"
|
|
|
|
[tool.ruff.lint]
|
|
select = ["E", "F", "I", "UP", "B", "ASYNC", "C4", "SIM"]
|
|
ignore = ["B008"] # FastAPI Depends() in defaults is idiomatic
|
|
|
|
[tool.mypy]
|
|
python_version = "3.11"
|
|
strict = true
|
|
plugins = ["pydantic.mypy"]
|
|
mypy_path = "."
|
|
explicit_package_bases = true
|
|
namespace_packages = true
|
|
|
|
[[tool.mypy.overrides]]
|
|
module = ["aioimaplib.*", "mailparser.*", "imapclient.*", "arq.*", "yaml", "defusedxml.*"]
|
|
ignore_missing_imports = true
|
|
|
|
[tool.pytest.ini_options]
|
|
asyncio_mode = "auto"
|
|
testpaths = ["tests"]
|
|
pythonpath = ["."]
|