cloudinit-bot
ad45e7659d
---ci---
project: inboxos
phase: 1
milestone: v1.4
status: ideate
ideation:
source: user-directed operator-UX + product-grade-security ideation
total_candidates: 23
new: 20
carries: 3
deferred_to_v1_5_plus: 5
rejected: 0
ux_split:
ux: 15
security: 5
cpo_approval_required: [REQ-INB-57]
schema_impact: none
cross_project_candidates: 0
decisions:
- id: D-V1.4-01
decision: "Register 20 new v1.4 candidates (15 UX + 5 security) + 3 v1.3 carries"
rationale: "User asked for 20 ideas spanning UX + security/product-grade. v1.3 deferred items folded back in as carries."
confidence: 0.85
- id: D-V1.4-02
decision: "Mark REQ-INB-57 [CPO-APPROVAL-REQUIRED]"
rationale: "PII masking policy is CPO-owned because it can regress extraction accuracy."
confidence: 0.90
- id: D-V1.4-03
decision: "Pause before PLAN for CPO review"
rationale: "v1.1/v1.2/v1.3 cadence: candidates stay [CANDIDATE] until CPO authors docs/requirements.md entries."
confidence: 0.95
artifacts:
- .ciagent/inboxos/ideation/v1.4-candidates.md
- .ciagent/inboxos/REQUIREMENTS.md
- .ciagent/inboxos/ROADMAP.md
acceptance_gate: "23-candidate disposition preserved in audit trail"
next_stage: pause_for_cpo_review
---/ci---
InboxOS
Self-hosted personal ERP / CRM pipeline. A single Gmail inbox, polled over IMAP, archived to SeaweedFS, classified and extracted by a local LLM (Ollama), and written to NocoDB as structured records. Curated attachments are mirrored to Papra. No third-party SaaS touches PII.
Where to start
- Operations runbook —
docs/operations-runbook.md. System overview, service inventory, workflow operations, observability, failure modes, security, cost, glossary. The first thing to read on day 1 of incident response. - Extraction contract —
docs/extraction-contract.md. How a raw email becomes a NocoDB record. Source of truth for theinboxos:classify+inboxos:extract-<module>prompt family. - NocoDB schema —
docs/schemas.md. The four module tables (finance,crm,intel,promotions) and the Message-ID idempotency contract. - Gitea Actions setup —
docs/gitea-actions.md. Runner provisioning (including the second runner for live + historical parallelism), repo secrets, the Basic Auth model. - Pipelines —
pipelines/README.md. Flow diagrams, idempotency model, rollback procedure for the live and historical pipelines. - Papra write policy —
docs/papra-write-policy.md. When the pipeline writes to Papra (attachments + selected bodies), and why the first ship is dry-run.
Quick layout
inboxos/
├── README.md # this file
├── .env.example # placeholder env (no real secrets)
├── docker/
│ └── docker-compose.yml # self-hosted stack: gitea, runners, nocodb, seaweedfs, papra, ollama
├── .gitea/workflows/
│ ├── live-pipeline.yml # cron */5 * * * *, polls IMAP
│ ├── historical-pipeline.yml # workflow_dispatch, streams .mbox
│ └── ci-pr.yml # fast-tests + 100MB e2e + live Ollama smoke
├── pipelines/ # shared Python: common.py, live_pipeline.py, historical_pipeline.py, mbox_stream.py
├── .opencode/commands/ # version-controlled extraction prompts (prompt-as-code)
├── config/ # n8n config (legacy, no longer in use)
└── docs/ # this runbook + schemas + contracts + reports
Status
Phase 5 — Full Deployment. Parent goal: INB-1. Current phase issue: INB-7. The runbook in docs/operations-runbook.md is the canonical reference for ongoing operation.
Historical archive (Google Takeout .mbox)
The full Google Takeout .mbox export lives in SeaweedFS at the canonical S3 URI:
s3://inboxos/eml/historical/all-mail.mbox
That is the value to pass as the mbox_object_key workflow_dispatch input to historical-pipeline.yml. To verify it exists, run from any host with mc configured against the inboxos bucket:
mc ls --recursive inboxos/inboxos/ | grep '\.mbox$'
The historical pipeline streams this object message-by-message, UPSERTs each into NocoDB on Message-ID, and writes the raw .eml backup under s3://inboxos/eml/historical/<yyyy>/<mm>/<dd>/<Message-ID>.eml. See docs/operations-runbook.md §3.2 for the dispatch recipe and §4.4 for the full bucket layout.