Skip to content

Mailda v0.1.0: functional alpha

Latest
Latest

Choose a tag to compare

View all tags
@wms2537 wms2537 released this 12 Oct 08:18
v0.1.0
5a544f2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Shared inboxes that know who replied, running entirely in your own Cloudflare account.

Mailda turns an email address into governed work: assignment, collision detection, cases, approvals, an audit trail and deterministic automation. You own the domain, the messages, the encryption keys and the bill. There is no Mailda service, no licence server and no telemetry. Disconnect us and nothing stops working.

Functional alpha, not production-ready. Do not make this the only copy of mail you care about. It is good for now as a design-partner alpha, a non-critical shared mailbox, and for exercising the governance and automation model. What is still blocking is in the README's status table.

Install

curl -fsSL https://mailda.site/install.sh | bash

One command into your own Cloudflare account. It signs you in, deploys and claims the Node in the same terminal, then sets up receiving, sending and delivery outcomes. It needs Workers Paid: $5 a month, 3,000 emails included, then $0.35 per thousand. A twenty-person team sending ten thousand a month pays about $7.45, plus storage, paid to Cloudflare (receipt).

Already running a Node? Update with curl -fsSL https://mailda.site/update.sh | bash.

What's in it

  • Shared inboxes and a queue. Claim, hand over and close, with a first-response clock per mailbox. Mailda shows who is already answering a conversation before you write a word.
  • Sending you can stop. Every send is sealed to a manifest and held for fifteen seconds before it goes. Then come send policies, two-person approvals (the approver reads exactly what would leave), domain pauses, rate breakers and a suppression list.
  • Honest delivery states. handed_over is distinct from accepted, bounced, deferred and unobserved. Nothing is ever rounded to "sent".
  • Mail security. The receiving server's SPF, DKIM and DMARC verdict is kept on every message. Attachments are judged by name and magic bytes, links by where they really go, and quarantine and suppression are set per mailbox.
  • Butlers. Deterministic automations, checked when you save them, published as frozen versions, and every run recorded. A Butler uses no AI and spends no model tokens.
  • Your AI, on your terms. Agent tokens carry a ceiling and never hold more than the person they act for. An MCP server at /mcp, an Agent Skill, a typed SDK and mailda api are all generated from one route contract.
  • Governance. An audit trail nothing trims, matters and legal holds that take two people to lift, supervised reads that leave a record, and e-discovery exports that are approved before they run.
  • Running it. mailda doctor, upgrades with numbered steps, canary deploys that refuse to promote a worse version, verifiable offline backups, and a restore drilled three times.
  • English and Simplified Chinese (淼达).

Deliberate limitations

  • No Gmail or Microsoft 365 import.
  • No IMAP, JMAP or SMTP: the web app is the only way to read mail.
  • Outbound mail is limited to 5 MiB and 50 recipients.
  • Cloudflare only.
  • Not for bulk or marketing mail.
  • The composer is plain text.

The full list is in the README.

Contributing and security

See CONTRIBUTING.md for contributing. Report security problems privately through Security → Report a vulnerability (SECURITY.md).

Apache-2.0.

Assets 16
Loading