beforeLocal

2026-05-05 00:47:39 +00:00
parent fdf2cf3659
commit 70ee32efdd
31 changed files with 1169 additions and 0 deletions
--- a/.env.example
+++ b/.env.example
@@ -0,0 +1,10 @@
+# Postgres Credentials
+POSTGRES_USER=allmail
+POSTGRES_PASSWORD=my_secure_password
+POSTGRES_DB=emails_db
+
+# Gemini API Key (free tier covers embedding usage)
+GEMINI_API_KEY=your-gemini-api-key-here
+
+# Other Settings
+MAILDIR_PATH=./Maildir
--- a/.gitea/workflows/deploy.yml
+++ b/.gitea/workflows/deploy.yml
@@ -0,0 +1,54 @@
+name: Deploy to Server
+
+on:
+  push:
+    branches:
+      - main
+
+jobs:
+  deploy:
+    runs-on: ubuntu-latest
+    container:
+      image: alpine:latest # Alpine to keep CPU/memory low
+    steps:
+      - name: Install SSH and Networking Tools
+        run: apk add --no-cache openssh-client iproute2 git
+
+      - name: Configure SSH Key
+        run: |
+          mkdir -p ~/.ssh
+          echo "${{ secrets.DEPLOY_SSH_KEY }}" > ~/.ssh/id_rsa
+          chmod 600 ~/.ssh/id_rsa
+          echo "StrictHostKeyChecking no" > ~/.ssh/config
+
+      - name: Execute Remote Deployment
+        run: |
+          # 1. Find the host machine's IP via the docker bridge gateway
+          HOST_IP=$(ip route | awk '/default/ { print $3 }')
+          echo "==> Detected Host IP: $HOST_IP"
+
+          # 2. SSH into the host to execute the deployment safely
+          ssh adipu@$HOST_IP << 'EOF'
+            # Exit immediately if any command fails
+            set -e
+
+            echo "==> Navigating to project directory..."
+            cd ~/AllMail
+
+            echo "==> Pulling latest code..."
+            git pull origin main
+
+            echo "==> Running Build..."
+            # If this build fails, 'set -e' aborts the script instantly.
+            # Existing containers will NOT be touched, keeping the site up.
+            docker compose build
+
+            echo "==> Build successful! Deploying new containers..."
+            # This only runs if the build was 100% successful.
+            docker compose up -d
+
+            echo "==> Cleaning up old images to save disk space..."
+            docker image prune -f
+
+            echo "==> Deployment Complete!"
+          EOF
--- a/api/Dockerfile
+++ b/api/Dockerfile
@@ -0,0 +1,18 @@
+FROM python:3.11-slim
+
+WORKDIR /app
+
+# Install system dependencies for building psycopg2 and others
+RUN apt-get update && apt-get install -y \
+    gcc \
+    libpq-dev \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY requirements.txt .
+RUN pip install --no-cache-dir -r requirements.txt
+
+COPY . .
+
+RUN chmod +x run.sh
+
+ENTRYPOINT ["./run.sh"]
--- a/api/database.py
+++ b/api/database.py
@@ -0,0 +1,44 @@
+import os
+from sqlalchemy import create_engine, Column, Integer, String, Text, DateTime, text
+from sqlalchemy.orm import declarative_base, sessionmaker
+from pgvector.sqlalchemy import Vector
+
+POSTGRES_USER = os.environ.get("POSTGRES_USER", "allmail")
+POSTGRES_PASSWORD = os.environ.get("POSTGRES_PASSWORD", "postgres")
+POSTGRES_DB = os.environ.get("POSTGRES_DB", "emails_db")
+DB_HOST = os.environ.get("DB_HOST", "localhost")
+
+DATABASE_URL = f"postgresql://{POSTGRES_USER}:{POSTGRES_PASSWORD}@{DB_HOST}/{POSTGRES_DB}"
+
+engine = create_engine(DATABASE_URL)
+SessionLocal = sessionmaker(autocommit=False, autoflush=False, bind=engine)
+
+Base = declarative_base()
+
+# Gemini gemini-embedding-001 with output_dimensionality=768
+EMBEDDING_DIMENSIONS = 768
+
+class Email(Base):
+    __tablename__ = "emails"
+
+    id = Column(Integer, primary_key=True, index=True)
+    message_id = Column(String, unique=True, index=True)
+    subject = Column(Text)
+    sender = Column(String)
+    date = Column(DateTime)
+    content = Column(Text)
+    embedding = Column(Vector(EMBEDDING_DIMENSIONS))
+
+def init_db():
+    # Install pgvector extension if not exists
+    with engine.connect() as conn:
+        conn.execute(text("CREATE EXTENSION IF NOT EXISTS vector"))
+        conn.commit()
+    Base.metadata.create_all(bind=engine)
+
+def get_db():
+    db = SessionLocal()
+    try:
+        yield db
+    finally:
+        db.close()
--- a/api/indexer.py
+++ b/api/indexer.py
@@ -0,0 +1,149 @@
+import os
+import time
+import email
+from email.policy import default
+from bs4 import BeautifulSoup
+from watchdog.observers import Observer
+from watchdog.events import FileSystemEventHandler
+from database import SessionLocal, Email, EMBEDDING_DIMENSIONS
+from google import genai
+from google.genai import types
+from datetime import datetime
+from sqlalchemy.exc import IntegrityError
+
+MAILDIR_PATH = os.environ.get("MAILDIR_PATH", "/Maildir")
+
+# Initialize Gemini client
+gemini_client = None
+api_key = os.environ.get("GEMINI_API_KEY")
+if api_key:
+    gemini_client = genai.Client(api_key=api_key)
+    print("Gemini client initialized for indexer.")
+else:
+    print("WARNING: GEMINI_API_KEY not set. Indexer will skip embedding generation.")
+
+def extract_text_from_email(msg):
+    text_content = ""
+    if msg.is_multipart():
+        for part in msg.walk():
+            content_type = part.get_content_type()
+            if content_type == "text/plain":
+                payload = part.get_payload(decode=True)
+                if payload:
+                    text_content += payload.decode('utf-8', errors='ignore') + "\n"
+            elif content_type == "text/html":
+                payload = part.get_payload(decode=True)
+                if payload:
+                    html_content = payload.decode('utf-8', errors='ignore')
+                    soup = BeautifulSoup(html_content, 'html.parser')
+                    text_content += soup.get_text(separator=' ') + "\n"
+    else:
+        content_type = msg.get_content_type()
+        payload = msg.get_payload(decode=True)
+        if payload:
+            if content_type == "text/html":
+                html_content = payload.decode('utf-8', errors='ignore')
+                soup = BeautifulSoup(html_content, 'html.parser')
+                text_content = soup.get_text(separator=' ')
+            else:
+                text_content = payload.decode('utf-8', errors='ignore')
+    return text_content.strip()
+
+def process_email_file(filepath):
+    print(f"Processing new email file: {filepath}")
+    if not gemini_client:
+        print("Skipping embedding generation: Gemini API key is missing.")
+        return
+
+    try:
+        with open(filepath, 'rb') as f:
+            msg = email.message_from_binary_file(f, policy=default)
+
+        message_id = msg.get('Message-ID', filepath)
+        subject = msg.get('Subject', '')
+        sender = msg.get('From', '')
+        date_str = msg.get('Date')
+        
+        try:
+            email_date = email.utils.parsedate_to_datetime(date_str) if date_str else datetime.utcnow()
+        except:
+            email_date = datetime.utcnow()
+
+        content = extract_text_from_email(msg)
+
+        if not content:
+            print(f"No text content found in {filepath}. Skipping.")
+            return
+
+        # Combine subject and content for better embedding
+        text_to_embed = f"Subject: {subject}\nSender: {sender}\n\n{content}"
+        
+        # Limit text to avoid token limits (very rough truncation)
+        text_to_embed = text_to_embed[:8000]
+
+        # Get embedding via Gemini — RETRIEVAL_DOCUMENT is the correct task type
+        # for content being stored and later retrieved by a query
+        response = gemini_client.models.embed_content(
+            model="gemini-embedding-001",
+            contents=text_to_embed,
+            config=types.EmbedContentConfig(
+                task_type="RETRIEVAL_DOCUMENT",
+                output_dimensionality=EMBEDDING_DIMENSIONS,
+            ),
+        )
+        embedding = response.embeddings[0].values
+
+        # Save to DB
+        db = SessionLocal()
+        try:
+            new_email = Email(
+                message_id=message_id,
+                subject=subject,
+                sender=sender,
+                date=email_date,
+                content=content,
+                embedding=embedding
+            )
+            db.add(new_email)
+            db.commit()
+            print(f"Successfully indexed email: {subject}")
+        except IntegrityError:
+            db.rollback()
+            print(f"Email {message_id} already exists in database.")
+        except Exception as e:
+            db.rollback()
+            print(f"Database error saving email: {e}")
+        finally:
+            db.close()
+
+    except Exception as e:
+        print(f"Error processing email {filepath}: {e}")
+
+class NewEmailHandler(FileSystemEventHandler):
+    def on_created(self, event):
+        if not event.is_directory:
+            # Simple check if it's likely an email file (mbsync creates files in cur/ or new/)
+            if 'new/' in event.src_path or 'cur/' in event.src_path:
+                process_email_file(event.src_path)
+
+def start_watching():
+    print(f"Starting to watch {MAILDIR_PATH} for new emails...")
+    
+    # Optional: Do a full initial sync of existing files here.
+    # We will skip that for brevity and just watch for new ones.
+    
+    event_handler = NewEmailHandler()
+    observer = Observer()
+    observer.schedule(event_handler, MAILDIR_PATH, recursive=True)
+    observer.start()
+    try:
+        while True:
+            time.sleep(1)
+    except KeyboardInterrupt:
+        observer.stop()
+    observer.join()
+
+if __name__ == "__main__":
+    # Wait for DB to be initialized by FastAPI
+    time.sleep(5)
+    start_watching()
--- a/api/main.py
+++ b/api/main.py
@@ -0,0 +1,95 @@
+from fastapi import FastAPI, Depends, HTTPException
+from fastapi.middleware.cors import CORSMiddleware
+from sqlalchemy.orm import Session
+from sqlalchemy import text
+from database import get_db, init_db, Email, EMBEDDING_DIMENSIONS
+from pydantic import BaseModel
+from typing import List, Optional
+from google import genai
+from google.genai import types
+import os
+import time
+
+app = FastAPI(title="Unified Email Semantic Search API")
+
+# Setup CORS for the SPA
+app.add_middleware(
+    CORSMiddleware,
+    allow_origins=["*"],
+    allow_credentials=True,
+    allow_methods=["*"],
+    allow_headers=["*"],
+)
+
+# Initialize Gemini client — reads GEMINI_API_KEY from environment
+gemini_client = None
+
+class SearchQuery(BaseModel):
+    query: str
+    limit: int = 10
+
+class SearchResult(BaseModel):
+    message_id: str
+    subject: str
+    sender: str
+    date: str
+    snippet: str
+    distance: float
+
+@app.on_event("startup")
+def on_startup():
+    global gemini_client
+    print("Initializing Database...")
+    time.sleep(2) # Give postgres a moment to be fully ready
+    try:
+        init_db()
+    except Exception as e:
+        print(f"Error initializing DB: {e}")
+
+    api_key = os.environ.get("GEMINI_API_KEY")
+    if api_key:
+        gemini_client = genai.Client(api_key=api_key)
+        print("Gemini client initialized.")
+    else:
+        print("WARNING: GEMINI_API_KEY not set. Embedding features disabled.")
+
+@app.post("/search", response_model=List[SearchResult])
+def search_emails(request: SearchQuery, db: Session = Depends(get_db)):
+    if not gemini_client:
+        raise HTTPException(status_code=500, detail="Gemini API Key is not configured.")
+
+    try:
+        response = gemini_client.models.embed_content(
+            model="gemini-embedding-001",
+            contents=request.query,
+            config=types.EmbedContentConfig(
+                task_type="RETRIEVAL_QUERY",
+                output_dimensionality=EMBEDDING_DIMENSIONS,
+            ),
+        )
+        query_embedding = response.embeddings[0].values
+    except Exception as e:
+        raise HTTPException(status_code=500, detail=f"Embedding API error: {e}")
+
+    # Use pgvector's cosine distance operator via SQLAlchemy ORM
+    results = db.query(
+        Email, 
+        Email.embedding.cosine_distance(query_embedding).label('distance')
+    ).order_by(
+        Email.embedding.cosine_distance(query_embedding)
+    ).limit(request.limit).all()
+
+    response_data = []
+    for email, distance in results:
+        # Create a snippet from the content
+        snippet = email.content[:200] + "..." if email.content and len(email.content) > 200 else (email.content or "")
+        response_data.append(SearchResult(
+            message_id=email.message_id or "",
+            subject=email.subject or "",
+            sender=email.sender or "",
+            date=email.date.isoformat() if email.date else "",
+            snippet=snippet,
+            distance=distance
+        ))
+
+    return response_data
--- a/api/requirements.txt
+++ b/api/requirements.txt
@@ -0,0 +1,9 @@
+fastapi==0.111.0
+uvicorn==0.30.1
+sqlalchemy==2.0.30
+psycopg2-binary==2.9.9
+pgvector==0.2.5
+watchdog==4.0.1
+google-genai>=1.0.0
+beautifulsoup4==4.12.3
+pydantic==2.7.2
--- a/api/run.sh
+++ b/api/run.sh
@@ -0,0 +1,13 @@
+#!/bin/bash
+
+echo "Starting Uvicorn..."
+uvicorn main:app --host 0.0.0.0 --port 8000 &
+
+echo "Starting Indexer daemon..."
+python indexer.py &
+
+# Wait for any process to exit
+wait -n
+
+# Exit with status of process that exited first
+exit $?
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -0,0 +1,69 @@
+services:
+  db:
+    image: pgvector/pgvector:pg16
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER:-allmail}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_DB: ${POSTGRES_DB:-emails_db}
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    command: postgres -c shared_buffers=256MB -c max_connections=50
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U ${POSTGRES_USER:-allmail} -d ${POSTGRES_DB:-emails_db}"]
+      interval: 5s
+      timeout: 5s
+      retries: 10
+    deploy:
+      resources:
+        limits:
+          memory: 1G
+
+  mail-sync:
+    build:
+      context: ./mail-sync
+    restart: unless-stopped
+    volumes:
+      - ./Maildir:/Maildir
+    deploy:
+      resources:
+        limits:
+          memory: 256M
+
+  api:
+    build:
+      context: ./api
+    restart: unless-stopped
+    environment:
+      POSTGRES_USER: ${POSTGRES_USER:-allmail}
+      POSTGRES_PASSWORD: ${POSTGRES_PASSWORD}
+      POSTGRES_DB: ${POSTGRES_DB:-emails_db}
+      DB_HOST: db
+      GEMINI_API_KEY: ${GEMINI_API_KEY}
+      MAILDIR_PATH: /Maildir
+    volumes:
+      - ./Maildir:/Maildir:ro
+    depends_on:
+      db:
+        condition: service_healthy
+    deploy:
+      resources:
+        limits:
+          memory: 512M
+
+  webmail:
+    build:
+      context: ./webmail
+    restart: unless-stopped
+    volumes:
+      - ./Maildir:/Maildir:ro
+    # Bind only on host loopback — Cloudflare Tunnel proxies allmail.wahwa.com here.
+    ports:
+      - "127.0.0.1:8080:80"
+    deploy:
+      resources:
+        limits:
+          memory: 512M
+
+volumes:
+  postgres_data:
--- a/mail-sync/Dockerfile
+++ b/mail-sync/Dockerfile
@@ -0,0 +1,15 @@
+FROM alpine:latest
+
+RUN apk add --no-cache isync cron python3 ca-certificates bash su-exec tzdata
+
+# Copy configuration template and entrypoint
+COPY mbsyncrc.template /root/.mbsyncrc.template
+COPY entrypoint.sh /entrypoint.sh
+
+RUN chmod +x /entrypoint.sh
+
+# Create the Maildir directory
+RUN mkdir -p /Maildir
+
+ENTRYPOINT ["/entrypoint.sh"]
+CMD ["cron", "-f"]
--- a/mail-sync/entrypoint.sh
+++ b/mail-sync/entrypoint.sh
@@ -0,0 +1,29 @@
+#!/bin/bash
+set -e
+
+# Copy the template to the actual config location if it doesn't exist
+if [ ! -f /root/.mbsyncrc ]; then
+    echo "No .mbsyncrc found. Copying template. PLEASE CONFIGURE THIS FILE."
+    cp /root/.mbsyncrc.template /root/.mbsyncrc
+fi
+
+# Set up cron job if not already set
+if ! crontab -l | grep -q "mbsync -a"; then
+    echo "Setting up mbsync cron job (every 5 minutes)..."
+    (crontab -l 2>/dev/null; echo "*/5 * * * * /usr/bin/mbsync -a >> /var/log/mbsync.log 2>&1") | crontab -
+fi
+
+# Make sure log file exists
+touch /var/log/mbsync.log
+
+# Run mbsync once on startup
+echo "Running initial mbsync..."
+/usr/bin/mbsync -a || echo "Initial mbsync failed, probably needs configuration."
+
+# Execute the CMD (usually cron -f)
+if [ "$1" = "cron" ]; then
+    echo "Starting cron daemon..."
+    crond -f -l 2
+else
+    exec "$@"
+fi
--- a/mail-sync/mbsyncrc.template
+++ b/mail-sync/mbsyncrc.template
@@ -0,0 +1,20 @@
+# IMAPAccount example
+# Host imap.example.com
+# User user@example.com
+# PassCmd "echo password"
+# SSLType IMAPS
+
+# IMAPStore example-remote
+# Account example
+
+# MaildirStore example-local
+# SubFolders Verbatim
+# Path /Maildir/example/
+# Inbox /Maildir/example/Inbox
+
+# Channel example
+# Far :example-remote:
+# Near :example-local:
+# Patterns *
+# Create Both
+# SyncState *
--- a/walkthrough.md
+++ b/walkthrough.md
@@ -0,0 +1,87 @@
+# Phase 1 Implementation Walkthrough
+
+The foundational Phase 1 (Retrieval-Only Architecture) for your Unified Email Semantic Search system is now complete. The repository structure, Docker configurations, backend API, indexing daemon, and frontend have been successfully scaffolded in `/home/adipu/AllMail`.
+
+## Repository Structure Overview
+
+```mermaid
+graph TD
+    A[AllMail/] --> B(db_data/)
+    A --> C(Maildir/)
+    A --> D(mail-sync/)
+    A --> E(api/)
+    A --> F(webmail/)
+    A --> G(.gitea/)
+    A --> H(docker-compose.yml)
+    A --> I(.env.example)
+
+    D --> D1[Dockerfile]
+    D --> D2[entrypoint.sh]
+    D --> D3[mbsyncrc.template]
+
+    E --> E1[Dockerfile]
+    E --> E2[main.py]
+    E --> E3[indexer.py]
+    E --> E4[database.py]
+    E --> E5[run.sh]
+
+    F --> F1[Dockerfile]
+    F --> F2[nginx.conf]
+    F --> F3[entrypoint.sh]
+    F --> F4[spa/]
+```
+
+## Key Components Implemented
+
+### 1. Docker Infrastructure & Resource Management
+- Created `docker-compose.yml` with memory limits applied specifically to respect the 16GB total memory overhead:
+  - `db` is restricted to `1G` (and Postgres tuned via command arguments `shared_buffers=256MB`).
+  - `api` is restricted to `512M`.
+  - `mail-sync` is restricted to `256M`.
+  - `webmail` is restricted to `512M`.
+- Uses real filesystem mounts for persistent data: `./db_data` for PostgreSQL and `./Maildir` for the email files.
+
+### 2. Database & API (`api/`)
+- A Python 3.11 container running both a FastAPI server (`main.py`) and a background Watchdog daemon (`indexer.py`).
+- Integrates `pgvector` and uses SQLAlchemy to manage vector embeddings.
+- Automatically connects to OpenAI for `text-embedding-3-small` and indexes new files arriving in `./Maildir`.
+
+### 3. Synchronization (`mail-sync/`)
+- A lightweight Alpine image utilizing `isync` (mbsync).
+- Contains an entrypoint that initializes a 5-minute cron schedule.
+- A `mbsyncrc.template` was created to serve as your configuration starting point.
+
+### 4. Frontend & SnappyMail (`webmail/`)
+- A custom `php:8.2-fpm-alpine` container running Nginx.
+- Serves a React/Vite SPA on the root (`/`) for querying the Unified Search API.
+- Proxies `/mail/` to SnappyMail for standard webmail consumption.
+- The `Dockerfile` handles building the React app automatically during `docker compose build`.
+
+### 5. Deployment CI/CD (`.gitea/`)
+- A GitHub-Actions-compatible workflow is present at `.gitea/workflows/deploy.yml` which triggers on pushes to `main` and runs the requested commands (`docker compose up -d --build` & `docker image prune -f`).
+
+## Next Steps for You
+
+> [!IMPORTANT]
+> **Action Required**: The system is ready to be started, but you need to configure your secrets and accounts before running `docker compose up -d`.
+
+1. **Configure Environment Variables**:
+   Copy `.env.example` to `.env` and fill in your passwords and the OpenAI API Key.
+   ```bash
+   cp /home/adipu/AllMail/.env.example /home/adipu/AllMail/.env
+   # Edit .env
+   ```
+
+2. **Configure Mail Accounts**:
+   Copy the `mbsyncrc` template to an actual config file and configure your IMAP servers.
+   ```bash
+   cp /home/adipu/AllMail/mail-sync/mbsyncrc.template /home/adipu/AllMail/mail-sync/mbsyncrc
+   # Edit mbsyncrc
+   ```
+
+3. **Deploy Phase 1**:
+   After configuring the above files, you can start the system locally to ensure it builds correctly:
+   ```bash
+   cd /home/adipu/AllMail
+   docker compose up -d --build
+   ```
--- a/webmail/Dockerfile
+++ b/webmail/Dockerfile
@@ -0,0 +1,36 @@
+FROM node:20-alpine AS builder
+WORKDIR /app
+COPY spa/package*.json ./
+RUN npm install
+COPY spa/ .
+RUN npm run build
+
+FROM php:8.2-fpm-alpine
+
+RUN apk add --no-cache nginx wget unzip zip libzip-dev \
+    && docker-php-ext-install zip
+
+# Install SnappyMail
+WORKDIR /var/www/html/mail
+RUN wget -O snappymail.zip https://snappymail.eu/repository/latest.zip && \
+    unzip snappymail.zip && \
+    rm snappymail.zip && \
+    find . -type d -exec chmod 755 {} \; && \
+    find . -type f -exec chmod 644 {} \; && \
+    chown -R www-data:www-data /var/www/html/mail
+
+# Copy built SPA
+COPY --from=builder /app/dist /var/www/html/spa
+RUN chown -R www-data:www-data /var/www/html/spa
+
+# Copy configurations
+COPY nginx.conf /etc/nginx/nginx.conf
+COPY entrypoint.sh /entrypoint.sh
+RUN chmod +x /entrypoint.sh
+
+# Create Nginx run directory
+RUN mkdir -p /run/nginx
+
+EXPOSE 80
+
+ENTRYPOINT ["/entrypoint.sh"]
--- a/webmail/entrypoint.sh
+++ b/webmail/entrypoint.sh
@@ -0,0 +1,8 @@
+#!/bin/sh
+set -e
+
+# Start PHP-FPM in the background
+php-fpm -D
+
+# Start Nginx in the foreground
+exec nginx -g "daemon off;"
--- a/webmail/nginx.conf
+++ b/webmail/nginx.conf
@@ -0,0 +1,54 @@
+worker_processes 1;
+
+events {
+    worker_connections 1024;
+}
+
+http {
+    include       mime.types;
+    default_type  application/octet-stream;
+    sendfile        on;
+    keepalive_timeout  65;
+
+    server {
+        listen 80;
+        server_name localhost;
+
+        # Serve the React SPA on the root path
+        location / {
+            root /var/www/html/spa;
+            index index.html;
+            try_files $uri $uri/ /index.html;
+        }
+
+        # Proxy /api requests to the backend container
+        location /api/ {
+            proxy_pass http://api:8000/;
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        }
+
+        # Serve SnappyMail on /mail
+        location ^~ /mail/ {
+            alias /var/www/html/mail/;
+            index index.php index.html;
+            
+            # Need a specific regex for PHP files inside alias
+            location ~ \.php$ {
+                if (!-f $request_filename) {
+                    return 404;
+                }
+                fastcgi_pass 127.0.0.1:9000;
+                fastcgi_index index.php;
+                fastcgi_param SCRIPT_FILENAME $request_filename;
+                include fastcgi_params;
+            }
+
+            # Deny access to SnappyMail data folder
+            location ^~ /mail/data {
+                deny all;
+            }
+        }
+    }
+}
--- a/webmail/spa/.gitignore
+++ b/webmail/spa/.gitignore
@@ -0,0 +1,24 @@
+# Logs
+logs
+*.log
+npm-debug.log*
+yarn-debug.log*
+yarn-error.log*
+pnpm-debug.log*
+lerna-debug.log*
+
+node_modules
+dist
+dist-ssr
+*.local
+
+# Editor directories and files
+.vscode/*
+!.vscode/extensions.json
+.idea
+.DS_Store
+*.suo
+*.ntvs*
+*.njsproj
+*.sln
+*.sw?
--- a/webmail/spa/README.md
+++ b/webmail/spa/README.md
@@ -0,0 +1,16 @@
+# React + Vite
+
+This template provides a minimal setup to get React working in Vite with HMR and some ESLint rules.
+
+Currently, two official plugins are available:
+
+- [@vitejs/plugin-react](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react) uses [Oxc](https://oxc.rs)
+- [@vitejs/plugin-react-swc](https://github.com/vitejs/vite-plugin-react/blob/main/packages/plugin-react-swc) uses [SWC](https://swc.rs/)
+
+## React Compiler
+
+The React Compiler is not enabled on this template because of its impact on dev & build performances. To add it, see [this documentation](https://react.dev/learn/react-compiler/installation).
+
+## Expanding the ESLint configuration
+
+If you are developing a production application, we recommend using TypeScript with type-aware lint rules enabled. Check out the [TS template](https://github.com/vitejs/vite/tree/main/packages/create-vite/template-react-ts) for information on how to integrate TypeScript and [`typescript-eslint`](https://typescript-eslint.io) in your project.
--- a/webmail/spa/eslint.config.js
+++ b/webmail/spa/eslint.config.js
@@ -0,0 +1,21 @@
+import js from '@eslint/js'
+import globals from 'globals'
+import reactHooks from 'eslint-plugin-react-hooks'
+import reactRefresh from 'eslint-plugin-react-refresh'
+import { defineConfig, globalIgnores } from 'eslint/config'
+
+export default defineConfig([
+  globalIgnores(['dist']),
+  {
+    files: ['**/*.{js,jsx}'],
+    extends: [
+      js.configs.recommended,
+      reactHooks.configs.flat.recommended,
+      reactRefresh.configs.vite,
+    ],
+    languageOptions: {
+      globals: globals.browser,
+      parserOptions: { ecmaFeatures: { jsx: true } },
+    },
+  },
+])
--- a/webmail/spa/index.html
+++ b/webmail/spa/index.html
@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <link rel="icon" type="image/svg+xml" href="/favicon.svg" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>spa</title>
+  </head>
+  <body>
+    <div id="root"></div>
+    <script type="module" src="/src/main.jsx"></script>
+  </body>
+</html>
--- a/webmail/spa/package.json
+++ b/webmail/spa/package.json
@@ -0,0 +1,27 @@
+{
+  "name": "spa",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite",
+    "build": "vite build",
+    "lint": "eslint .",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "react": "^19.2.5",
+    "react-dom": "^19.2.5"
+  },
+  "devDependencies": {
+    "@eslint/js": "^10.0.1",
+    "@types/react": "^19.2.14",
+    "@types/react-dom": "^19.2.3",
+    "@vitejs/plugin-react": "^6.0.1",
+    "eslint": "^10.2.1",
+    "eslint-plugin-react-hooks": "^7.1.1",
+    "eslint-plugin-react-refresh": "^0.5.2",
+    "globals": "^17.5.0",
+    "vite": "^8.0.10"
+  }
+}
--- a/webmail/spa/public/favicon.svg
+++ b/webmail/spa/public/favicon.svg
--- a/webmail/spa/public/icons.svg
+++ b/webmail/spa/public/icons.svg
@@ -0,0 +1,24 @@
+<svg xmlns="http://www.w3.org/2000/svg">
+  <symbol id="bluesky-icon" viewBox="0 0 16 17">
+    <g clip-path="url(#bluesky-clip)"><path fill="#08060d" d="M7.75 7.735c-.693-1.348-2.58-3.86-4.334-5.097-1.68-1.187-2.32-.981-2.74-.79C.188 2.065.1 2.812.1 3.251s.241 3.602.398 4.13c.52 1.744 2.367 2.333 4.07 2.145-2.495.37-4.71 1.278-1.805 4.512 3.196 3.309 4.38-.71 4.987-2.746.608 2.036 1.307 5.91 4.93 2.746 2.72-2.746.747-4.143-1.747-4.512 1.702.189 3.55-.4 4.07-2.145.156-.528.397-3.691.397-4.13s-.088-1.186-.575-1.406c-.42-.19-1.06-.395-2.741.79-1.755 1.24-3.64 3.752-4.334 5.099"/></g>
+    <defs><clipPath id="bluesky-clip"><path fill="#fff" d="M.1.85h15.3v15.3H.1z"/></clipPath></defs>
+  </symbol>
+  <symbol id="discord-icon" viewBox="0 0 20 19">
+    <path fill="#08060d" d="M16.224 3.768a14.5 14.5 0 0 0-3.67-1.153c-.158.286-.343.67-.47.976a13.5 13.5 0 0 0-4.067 0c-.128-.306-.317-.69-.476-.976A14.4 14.4 0 0 0 3.868 3.77C1.546 7.28.916 10.703 1.231 14.077a14.7 14.7 0 0 0 4.5 2.306q.545-.748.965-1.587a9.5 9.5 0 0 1-1.518-.74q.191-.14.372-.293c2.927 1.369 6.107 1.369 8.999 0q.183.152.372.294-.723.437-1.52.74.418.838.963 1.588a14.6 14.6 0 0 0 4.504-2.308c.37-3.911-.63-7.302-2.644-10.309m-9.13 8.234c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.894 0 1.614.82 1.599 1.82.001 1-.705 1.82-1.6 1.82m5.91 0c-.878 0-1.599-.82-1.599-1.82 0-.998.705-1.82 1.6-1.82.893 0 1.614.82 1.599 1.82 0 1-.706 1.82-1.6 1.82"/>
+  </symbol>
+  <symbol id="documentation-icon" viewBox="0 0 21 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="m15.5 13.333 1.533 1.322c.645.555.967.833.967 1.178s-.322.623-.967 1.179L15.5 18.333m-3.333-5-1.534 1.322c-.644.555-.966.833-.966 1.178s.322.623.966 1.179l1.534 1.321"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M17.167 10.836v-4.32c0-1.41 0-2.117-.224-2.68-.359-.906-1.118-1.621-2.08-1.96-.599-.21-1.349-.21-2.848-.21-2.623 0-3.935 0-4.983.369-1.684.591-3.013 1.842-3.641 3.428C3 6.449 3 7.684 3 10.154v2.122c0 2.558 0 3.838.706 4.726q.306.383.713.671c.76.536 1.79.64 3.581.66"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M3 10a2.78 2.78 0 0 1 2.778-2.778c.555 0 1.209.097 1.748-.047.48-.129.854-.503.982-.982.145-.54.048-1.194.048-1.749a2.78 2.78 0 0 1 2.777-2.777"/>
+  </symbol>
+  <symbol id="github-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M9.356 1.85C5.05 1.85 1.57 5.356 1.57 9.694a7.84 7.84 0 0 0 5.324 7.44c.387.079.528-.168.528-.376 0-.182-.013-.805-.013-1.454-2.165.467-2.616-.935-2.616-.935-.349-.91-.864-1.143-.864-1.143-.71-.48.051-.48.051-.48.787.051 1.2.805 1.2.805.695 1.194 1.817.857 2.268.649.064-.507.27-.857.49-1.052-1.728-.182-3.545-.857-3.545-3.87 0-.857.31-1.558.8-2.104-.078-.195-.349-1 .077-2.078 0 0 .657-.208 2.14.805a7.5 7.5 0 0 1 1.946-.26c.657 0 1.328.092 1.946.26 1.483-1.013 2.14-.805 2.14-.805.426 1.078.155 1.883.078 2.078.502.546.799 1.247.799 2.104 0 3.013-1.818 3.675-3.558 3.87.284.247.528.714.528 1.454 0 1.052-.012 1.896-.012 2.156 0 .208.142.455.528.377a7.84 7.84 0 0 0 5.324-7.441c.013-4.338-3.48-7.844-7.773-7.844" clip-rule="evenodd"/>
+  </symbol>
+  <symbol id="social-icon" viewBox="0 0 20 20">
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M12.5 6.667a4.167 4.167 0 1 0-8.334 0 4.167 4.167 0 0 0 8.334 0"/>
+    <path fill="none" stroke="#aa3bff" stroke-linecap="round" stroke-linejoin="round" stroke-width="1.35" d="M2.5 16.667a5.833 5.833 0 0 1 8.75-5.053m3.837.474.513 1.035c.07.144.257.282.414.309l.93.155c.596.1.736.536.307.965l-.723.73a.64.64 0 0 0-.152.531l.207.903c.164.715-.213.991-.84.618l-.872-.52a.63.63 0 0 0-.577 0l-.872.52c-.624.373-1.003.094-.84-.618l.207-.903a.64.64 0 0 0-.152-.532l-.723-.729c-.426-.43-.289-.864.306-.964l.93-.156a.64.64 0 0 0 .412-.31l.513-1.034c.28-.562.735-.562 1.012 0"/>
+  </symbol>
+  <symbol id="x-icon" viewBox="0 0 19 19">
+    <path fill="#08060d" fill-rule="evenodd" d="M1.893 1.98c.052.072 1.245 1.769 2.653 3.77l2.892 4.114c.183.261.333.48.333.486s-.068.089-.152.183l-.522.593-.765.867-3.597 4.087c-.375.426-.734.834-.798.905a1 1 0 0 0-.118.148c0 .01.236.017.664.017h.663l.729-.83c.4-.457.796-.906.879-.999a692 692 0 0 0 1.794-2.038c.034-.037.301-.34.594-.675l.551-.624.345-.392a7 7 0 0 1 .34-.374c.006 0 .93 1.306 2.052 2.903l2.084 2.965.045.063h2.275c1.87 0 2.273-.003 2.266-.021-.008-.02-1.098-1.572-3.894-5.547-2.013-2.862-2.28-3.246-2.273-3.266.008-.019.282-.332 2.085-2.38l2-2.274 1.567-1.782c.022-.028-.016-.03-.65-.03h-.674l-.3.342a871 871 0 0 1-1.782 2.025c-.067.075-.405.458-.75.852a100 100 0 0 1-.803.91c-.148.172-.299.344-.99 1.127-.304.343-.32.358-.345.327-.015-.019-.904-1.282-1.976-2.808L6.365 1.85H1.8zm1.782.91 8.078 11.294c.772 1.08 1.413 1.973 1.425 1.984.016.017.241.02 1.05.017l1.03-.004-2.694-3.766L7.796 5.75 5.722 2.852l-1.039-.004-1.039-.004z" clip-rule="evenodd"/>
+  </symbol>
+</svg>
--- a/webmail/spa/src/App.css
+++ b/webmail/spa/src/App.css
@@ -0,0 +1,119 @@
+:root {
+  --primary-color: #3b82f6;
+  --bg-color: #f3f4f6;
+  --text-color: #1f2937;
+  --card-bg: #ffffff;
+}
+
+body {
+  margin: 0;
+  font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, 'Helvetica Neue', Arial, sans-serif;
+  background-color: var(--bg-color);
+  color: var(--text-color);
+}
+
+.app-container {
+  max-width: 800px;
+  margin: 0 auto;
+  padding: 2rem;
+}
+
+.header {
+  display: flex;
+  justify-content: space-between;
+  align-items: center;
+  margin-bottom: 2rem;
+}
+
+.header h1 {
+  margin: 0;
+  font-size: 1.5rem;
+}
+
+.webmail-link {
+  color: var(--primary-color);
+  text-decoration: none;
+  font-weight: 500;
+}
+
+.webmail-link:hover {
+  text-decoration: underline;
+}
+
+.search-form {
+  display: flex;
+  gap: 0.5rem;
+  margin-bottom: 2rem;
+}
+
+.search-input {
+  flex-grow: 1;
+  padding: 0.75rem 1rem;
+  font-size: 1rem;
+  border: 1px solid #d1d5db;
+  border-radius: 0.375rem;
+  outline: none;
+}
+
+.search-input:focus {
+  border-color: var(--primary-color);
+  box-shadow: 0 0 0 2px rgba(59, 130, 246, 0.2);
+}
+
+.search-button {
+  padding: 0.75rem 1.5rem;
+  font-size: 1rem;
+  background-color: var(--primary-color);
+  color: white;
+  border: none;
+  border-radius: 0.375rem;
+  cursor: pointer;
+  transition: background-color 0.2s;
+}
+
+.search-button:hover:not(:disabled) {
+  background-color: #2563eb;
+}
+
+.search-button:disabled {
+  opacity: 0.7;
+  cursor: not-allowed;
+}
+
+.error-message {
+  color: #ef4444;
+  margin-bottom: 1rem;
+}
+
+.results-container {
+  display: flex;
+  flex-direction: column;
+  gap: 1rem;
+}
+
+.result-card {
+  background-color: var(--card-bg);
+  padding: 1.5rem;
+  border-radius: 0.5rem;
+  box-shadow: 0 1px 3px rgba(0,0,0,0.1);
+}
+
+.result-card h3 {
+  margin: 0 0 0.5rem 0;
+  font-size: 1.125rem;
+}
+
+.result-meta {
+  display: flex;
+  gap: 1rem;
+  font-size: 0.875rem;
+  color: #6b7280;
+  margin-bottom: 0.75rem;
+}
+
+.result-snippet {
+  margin: 0;
+  font-size: 0.95rem;
+  line-height: 1.5;
+  white-space: pre-wrap;
+}
--- a/webmail/spa/src/App.jsx
+++ b/webmail/spa/src/App.jsx
@@ -0,0 +1,84 @@
+import { useState } from 'react'
+import './App.css'
+
+function App() {
+  const [query, setQuery] = useState('')
+  const [results, setResults] = useState([])
+  const [loading, setLoading] = useState(false)
+  const [error, setError] = useState(null)
+
+  const handleSearch = async (e) => {
+    e.preventDefault()
+    if (!query) return
+    
+    setLoading(true)
+    setError(null)
+    try {
+      const response = await fetch('/api/search', {
+        method: 'POST',
+        headers: {
+          'Content-Type': 'application/json',
+        },
+        body: JSON.stringify({ query, limit: 10 }),
+      })
+      
+      if (!response.ok) {
+        throw new Error(`HTTP error! status: ${response.status}`)
+      }
+      
+      const data = await response.json()
+      setResults(data)
+    } catch (err) {
+      console.error("Search error:", err)
+      setError("Failed to fetch search results. Check console and network.")
+    } finally {
+      setLoading(false)
+    }
+  }
+
+  return (
+    <div className="app-container">
+      <header className="header">
+        <h1>Unified Email Search</h1>
+        <a href="/mail/" className="webmail-link">Go to Webmail</a>
+      </header>
+      
+      <main>
+        <form onSubmit={handleSearch} className="search-form">
+          <input
+            type="text"
+            value={query}
+            onChange={(e) => setQuery(e.target.value)}
+            placeholder="Search emails via natural language..."
+            className="search-input"
+          />
+          <button type="submit" disabled={loading} className="search-button">
+            {loading ? 'Searching...' : 'Search'}
+          </button>
+        </form>
+
+        {error && <div className="error-message">{error}</div>}
+
+        <div className="results-container">
+          {results.length > 0 ? (
+            results.map((result, idx) => (
+              <div key={idx} className="result-card">
+                <h3>{result.subject || '(No Subject)'}</h3>
+                <div className="result-meta">
+                  <span><strong>From:</strong> {result.sender}</span>
+                  <span><strong>Date:</strong> {new Date(result.date).toLocaleString()}</span>
+                  <span><strong>Score:</strong> {(1 - result.distance).toFixed(3)}</span>
+                </div>
+                <p className="result-snippet">{result.snippet}</p>
+              </div>
+            ))
+          ) : (
+            !loading && query && !error && <p>No results found.</p>
+          )}
+        </div>
+      </main>
+    </div>
+  )
+}
+
+export default App
--- a/webmail/spa/src/assets/hero.png
+++ b/webmail/spa/src/assets/hero.png
--- a/webmail/spa/src/assets/react.svg
+++ b/webmail/spa/src/assets/react.svg
@@ -0,0 +1 @@
+<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" aria-hidden="true" role="img" class="iconify iconify--logos" width="35.93" height="32" preserveAspectRatio="xMidYMid meet" viewBox="0 0 256 228"><path fill="#00D8FF" d="M210.483 73.824a171.49 171.49 0 0 0-8.24-2.597c.465-1.9.893-3.777 1.273-5.621c6.238-30.281 2.16-54.676-11.769-62.708c-13.355-7.7-35.196.329-57.254 19.526a171.23 171.23 0 0 0-6.375 5.848a155.866 155.866 0 0 0-4.241-3.917C100.759 3.829 77.587-4.822 63.673 3.233C50.33 10.957 46.379 33.89 51.995 62.588a170.974 170.974 0 0 0 1.892 8.48c-3.28.932-6.445 1.924-9.474 2.98C17.309 83.498 0 98.307 0 113.668c0 15.865 18.582 31.778 46.812 41.427a145.52 145.52 0 0 0 6.921 2.165a167.467 167.467 0 0 0-2.01 9.138c-5.354 28.2-1.173 50.591 12.134 58.266c13.744 7.926 36.812-.22 59.273-19.855a145.567 145.567 0 0 0 5.342-4.923a168.064 168.064 0 0 0 6.92 6.314c21.758 18.722 43.246 26.282 56.54 18.586c13.731-7.949 18.194-32.003 12.4-61.268a145.016 145.016 0 0 0-1.535-6.842c1.62-.48 3.21-.974 4.76-1.488c29.348-9.723 48.443-25.443 48.443-41.52c0-15.417-17.868-30.326-45.517-39.844Zm-6.365 70.984c-1.4.463-2.836.91-4.3 1.345c-3.24-10.257-7.612-21.163-12.963-32.432c5.106-11 9.31-21.767 12.459-31.957c2.619.758 5.16 1.557 7.61 2.4c23.69 8.156 38.14 20.213 38.14 29.504c0 9.896-15.606 22.743-40.946 31.14Zm-10.514 20.834c2.562 12.94 2.927 24.64 1.23 33.787c-1.524 8.219-4.59 13.698-8.382 15.893c-8.067 4.67-25.32-1.4-43.927-17.412a156.726 156.726 0 0 1-6.437-5.87c7.214-7.889 14.423-17.06 21.459-27.246c12.376-1.098 24.068-2.894 34.671-5.345a134.17 134.17 0 0 1 1.386 6.193ZM87.276 214.515c-7.882 2.783-14.16 2.863-17.955.675c-8.075-4.657-11.432-22.636-6.853-46.752a156.923 156.923 0 0 1 1.869-8.499c10.486 2.32 22.093 3.988 34.498 4.994c7.084 9.967 14.501 19.128 21.976 27.15a134.668 134.668 0 0 1-4.877 4.492c-9.933 8.682-19.886 14.842-28.658 17.94ZM50.35 144.747c-12.483-4.267-22.792-9.812-29.858-15.863c-6.35-5.437-9.555-10.836-9.555-15.216c0-9.322 13.897-21.212 37.076-29.293c2.813-.98 5.757-1.905 8.812-2.773c3.204 10.42 7.406 21.315 12.477 32.332c-5.137 11.18-9.399 22.249-12.634 32.792a134.718 134.718 0 0 1-6.318-1.979Zm12.378-84.26c-4.811-24.587-1.616-43.134 6.425-47.789c8.564-4.958 27.502 2.111 47.463 19.835a144.318 144.318 0 0 1 3.841 3.545c-7.438 7.987-14.787 17.08-21.808 26.988c-12.04 1.116-23.565 2.908-34.161 5.309a160.342 160.342 0 0 1-1.76-7.887Zm110.427 27.268a347.8 347.8 0 0 0-7.785-12.803c8.168 1.033 15.994 2.404 23.343 4.08c-2.206 7.072-4.956 14.465-8.193 22.045a381.151 381.151 0 0 0-7.365-13.322Zm-45.032-43.861c5.044 5.465 10.096 11.566 15.065 18.186a322.04 322.04 0 0 0-30.257-.006c4.974-6.559 10.069-12.652 15.192-18.18ZM82.802 87.83a323.167 323.167 0 0 0-7.227 13.238c-3.184-7.553-5.909-14.98-8.134-22.152c7.304-1.634 15.093-2.97 23.209-3.984a321.524 321.524 0 0 0-7.848 12.897Zm8.081 65.352c-8.385-.936-16.291-2.203-23.593-3.793c2.26-7.3 5.045-14.885 8.298-22.6a321.187 321.187 0 0 0 7.257 13.246c2.594 4.48 5.28 8.868 8.038 13.147Zm37.542 31.03c-5.184-5.592-10.354-11.779-15.403-18.433c4.902.192 9.899.29 14.978.29c5.218 0 10.376-.117 15.453-.343c-4.985 6.774-10.018 12.97-15.028 18.486Zm52.198-57.817c3.422 7.8 6.306 15.345 8.596 22.52c-7.422 1.694-15.436 3.058-23.88 4.071a382.417 382.417 0 0 0 7.859-13.026a347.403 347.403 0 0 0 7.425-13.565Zm-16.898 8.101a358.557 358.557 0 0 1-12.281 19.815a329.4 329.4 0 0 1-23.444.823c-7.967 0-15.716-.248-23.178-.732a310.202 310.202 0 0 1-12.513-19.846h.001a307.41 307.41 0 0 1-10.923-20.627a310.278 310.278 0 0 1 10.89-20.637l-.001.001a307.318 307.318 0 0 1 12.413-19.761c7.613-.576 15.42-.876 23.31-.876H128c7.926 0 15.743.303 23.354.883a329.357 329.357 0 0 1 12.335 19.695a358.489 358.489 0 0 1 11.036 20.54a329.472 329.472 0 0 1-11 20.722Zm22.56-122.124c8.572 4.944 11.906 24.881 6.52 51.026c-.344 1.668-.73 3.367-1.15 5.09c-10.622-2.452-22.155-4.275-34.23-5.408c-7.034-10.017-14.323-19.124-21.64-27.008a160.789 160.789 0 0 1 5.888-5.4c18.9-16.447 36.564-22.941 44.612-18.3ZM128 90.808c12.625 0 22.86 10.235 22.86 22.86s-10.235 22.86-22.86 22.86s-22.86-10.235-22.86-22.86s10.235-22.86 22.86-22.86Z"></path></svg>
--- a/webmail/spa/src/assets/vite.svg
+++ b/webmail/spa/src/assets/vite.svg
--- a/webmail/spa/src/index.css
+++ b/webmail/spa/src/index.css
@@ -0,0 +1,111 @@
+:root {
+  --text: #6b6375;
+  --text-h: #08060d;
+  --bg: #fff;
+  --border: #e5e4e7;
+  --code-bg: #f4f3ec;
+  --accent: #aa3bff;
+  --accent-bg: rgba(170, 59, 255, 0.1);
+  --accent-border: rgba(170, 59, 255, 0.5);
+  --social-bg: rgba(244, 243, 236, 0.5);
+  --shadow:
+    rgba(0, 0, 0, 0.1) 0 10px 15px -3px, rgba(0, 0, 0, 0.05) 0 4px 6px -2px;
+
+  --sans: system-ui, 'Segoe UI', Roboto, sans-serif;
+  --heading: system-ui, 'Segoe UI', Roboto, sans-serif;
+  --mono: ui-monospace, Consolas, monospace;
+
+  font: 18px/145% var(--sans);
+  letter-spacing: 0.18px;
+  color-scheme: light dark;
+  color: var(--text);
+  background: var(--bg);
+  font-synthesis: none;
+  text-rendering: optimizeLegibility;
+  -webkit-font-smoothing: antialiased;
+  -moz-osx-font-smoothing: grayscale;
+
+  @media (max-width: 1024px) {
+    font-size: 16px;
+  }
+}
+
+@media (prefers-color-scheme: dark) {
+  :root {
+    --text: #9ca3af;
+    --text-h: #f3f4f6;
+    --bg: #16171d;
+    --border: #2e303a;
+    --code-bg: #1f2028;
+    --accent: #c084fc;
+    --accent-bg: rgba(192, 132, 252, 0.15);
+    --accent-border: rgba(192, 132, 252, 0.5);
+    --social-bg: rgba(47, 48, 58, 0.5);
+    --shadow:
+      rgba(0, 0, 0, 0.4) 0 10px 15px -3px, rgba(0, 0, 0, 0.25) 0 4px 6px -2px;
+  }
+
+  #social .button-icon {
+    filter: invert(1) brightness(2);
+  }
+}
+
+body {
+  margin: 0;
+}
+
+#root {
+  width: 1126px;
+  max-width: 100%;
+  margin: 0 auto;
+  text-align: center;
+  border-inline: 1px solid var(--border);
+  min-height: 100svh;
+  display: flex;
+  flex-direction: column;
+  box-sizing: border-box;
+}
+
+h1,
+h2 {
+  font-family: var(--heading);
+  font-weight: 500;
+  color: var(--text-h);
+}
+
+h1 {
+  font-size: 56px;
+  letter-spacing: -1.68px;
+  margin: 32px 0;
+  @media (max-width: 1024px) {
+    font-size: 36px;
+    margin: 20px 0;
+  }
+}
+h2 {
+  font-size: 24px;
+  line-height: 118%;
+  letter-spacing: -0.24px;
+  margin: 0 0 8px;
+  @media (max-width: 1024px) {
+    font-size: 20px;
+  }
+}
+p {
+  margin: 0;
+}
+
+code,
+.counter {
+  font-family: var(--mono);
+  display: inline-flex;
+  border-radius: 4px;
+  color: var(--text-h);
+}
+
+code {
+  font-size: 15px;
+  line-height: 135%;
+  padding: 4px 8px;
+  background: var(--code-bg);
+}
--- a/webmail/spa/src/main.jsx
+++ b/webmail/spa/src/main.jsx
@@ -0,0 +1,10 @@
+import { StrictMode } from 'react'
+import { createRoot } from 'react-dom/client'
+import './index.css'
+import App from './App.jsx'
+
+createRoot(document.getElementById('root')).render(
+  <StrictMode>
+    <App />
+  </StrictMode>,
+)
--- a/webmail/spa/vite.config.js
+++ b/webmail/spa/vite.config.js
@@ -0,0 +1,7 @@
+import { defineConfig } from 'vite'
+import react from '@vitejs/plugin-react'
+
+// https://vite.dev/config/
+export default defineConfig({
+  plugins: [react()],
+})
				`@@ -0,0 +1 @@`
				<svg xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" aria-hidden="true" role="img" class="iconify iconify--logos" width="35.93" height="32" preserveAspectRatio="xMidYMid meet" viewBox="0 0 256 228"><path fill="#00D8FF" d="M210.483 73.824a171.49 171.49 0 0 0-8.24-2.597c.465-1.9.893-3.777 1.273-5.621c6.238-30.281 2.16-54.676-11.769-62.708c-13.355-7.7-35.196.329-57.254 19.526a171.23 171.23 0 0 0-6.375 5.848a155.866 155.866 0 0 0-4.241-3.917C100.759 3.829 77.587-4.822 63.673 3.233C50.33 10.957 46.379 33.89 51.995 62.588a170.974 170.974 0 0 0 1.892 8.48c-3.28.932-6.445 1.924-9.474 2.98C17.309 83.498 0 98.307 0 113.668c0 15.865 18.582 31.778 46.812 41.427a145.52 145.52 0 0 0 6.921 2.165a167.467 167.467 0 0 0-2.01 9.138c-5.354 28.2-1.173 50.591 12.134 58.266c13.744 7.926 36.812-.22 59.273-19.855a145.567 145.567 0 0 0 5.342-4.923a168.064 168.064 0 0 0 6.92 6.314c21.758 18.722 43.246 26.282 56.54 18.586c13.731-7.949 18.194-32.003 12.4-61.268a145.016 145.016 0 0 0-1.535-6.842c1.62-.48 3.21-.974 4.76-1.488c29.348-9.723 48.443-25.443 48.443-41.52c0-15.417-17.868-30.326-45.517-39.844Zm-6.365 70.984c-1.4.463-2.836.91-4.3 1.345c-3.24-10.257-7.612-21.163-12.963-32.432c5.106-11 9.31-21.767 12.459-31.957c2.619.758 5.16 1.557 7.61 2.4c23.69 8.156 38.14 20.213 38.14 29.504c0 9.896-15.606 22.743-40.946 31.14Zm-10.514 20.834c2.562 12.94 2.927 24.64 1.23 33.787c-1.524 8.219-4.59 13.698-8.382 15.893c-8.067 4.67-25.32-1.4-43.927-17.412a156.726 156.726 0 0 1-6.437-5.87c7.214-7.889 14.423-17.06 21.459-27.246c12.376-1.098 24.068-2.894 34.671-5.345a134.17 134.17 0 0 1 1.386 6.193ZM87.276 214.515c-7.882 2.783-14.16 2.863-17.955.675c-8.075-4.657-11.432-22.636-6.853-46.752a156.923 156.923 0 0 1 1.869-8.499c10.486 2.32 22.093 3.988 34.498 4.994c7.084 9.967 14.501 19.128 21.976 27.15a134.668 134.668 0 0 1-4.877 4.492c-9.933 8.682-19.886 14.842-28.658 17.94ZM50.35 144.747c-12.483-4.267-22.792-9.812-29.858-15.863c-6.35-5.437-9.555-10.836-9.555-15.216c0-9.322 13.897-21.212 37.076-29.293c2.813-.98 5.757-1.905 8.812-2.773c3.204 10.42 7.406 21.315 12.477 32.332c-5.137 11.18-9.399 22.249-12.634 32.792a134.718 134.718 0 0 1-6.318-1.979Zm12.378-84.26c-4.811-24.587-1.616-43.134 6.425-47.789c8.564-4.958 27.502 2.111 47.463 19.835a144.318 144.318 0 0 1 3.841 3.545c-7.438 7.987-14.787 17.08-21.808 26.988c-12.04 1.116-23.565 2.908-34.161 5.309a160.342 160.342 0 0 1-1.76-7.887Zm110.427 27.268a347.8 347.8 0 0 0-7.785-12.803c8.168 1.033 15.994 2.404 23.343 4.08c-2.206 7.072-4.956 14.465-8.193 22.045a381.151 381.151 0 0 0-7.365-13.322Zm-45.032-43.861c5.044 5.465 10.096 11.566 15.065 18.186a322.04 322.04 0 0 0-30.257-.006c4.974-6.559 10.069-12.652 15.192-18.18ZM82.802 87.83a323.167 323.167 0 0 0-7.227 13.238c-3.184-7.553-5.909-14.98-8.134-22.152c7.304-1.634 15.093-2.97 23.209-3.984a321.524 321.524 0 0 0-7.848 12.897Zm8.081 65.352c-8.385-.936-16.291-2.203-23.593-3.793c2.26-7.3 5.045-14.885 8.298-22.6a321.187 321.187 0 0 0 7.257 13.246c2.594 4.48 5.28 8.868 8.038 13.147Zm37.542 31.03c-5.184-5.592-10.354-11.779-15.403-18.433c4.902.192 9.899.29 14.978.29c5.218 0 10.376-.117 15.453-.343c-4.985 6.774-10.018 12.97-15.028 18.486Zm52.198-57.817c3.422 7.8 6.306 15.345 8.596 22.52c-7.422 1.694-15.436 3.058-23.88 4.071a382.417 382.417 0 0 0 7.859-13.026a347.403 347.403 0 0 0 7.425-13.565Zm-16.898 8.101a358.557 358.557 0 0 1-12.281 19.815a329.4 329.4 0 0 1-23.444.823c-7.967 0-15.716-.248-23.178-.732a310.202 310.202 0 0 1-12.513-19.846h.001a307.41 307.41 0 0 1-10.923-20.627a310.278 310.278 0 0 1 10.89-20.637l-.001.001a307.318 307.318 0 0 1 12.413-19.761c7.613-.576 15.42-.876 23.31-.876H128c7.926 0 15.743.303 23.354.883a329.357 329.357 0 0 1 12.335 19.695a358.489 358.489 0 0 1 11.036 20.54a329.472 329.472 0 0 1-11 20.722Zm22.56-122.124c8.572 4.944 11.906 24.881 6.52 51.026c-.344 1.668-.73 3.367-1.15 5.09c-10.622-2.452-22.155-4.275-34.23-5.408c-7.034-10.017-14.323-19.124-21.64-27.008a160.789 160.789 0 0 1 5.888-5.4c18.9-16.447 36.564-22.941 44.612-18.3ZM128 90.808c12.625 0 22.86 10.235 22.86 22.86s-10.235 22.86-22.86 22.86s-22.86-10.235-22.86-22.86s10.235-22.86 22.86-22.86Z"></path></svg>