Repository navigation

feat(email): custom domains on the customer's own Cloudflare zone - #326

Merged

Brooooooklyn merged 148 commits into

mainfrom

feat/email-reland

Sep 18, 2026

Merged

feat(email): custom domains on the customer's own Cloudflare zone#326
Brooooooklyn merged 148 commits into
mainfrom
feat/email-reland

Commits on Aug 30, 2026
- feat(email): inbound routing, sendEmail, dev inbox and test harness
  
  Brooooooklyn
  and
  claude
  committed
  3724728
- feat(email): cf-native outbound and inbound email
  
  Brooooooklyn
  and
  claude
  committed
  3345169
Commits on Aug 31, 2026
- fix(email): dev inbox capture, harness casing, and reply-sender docs
  
  Brooooooklyn
  and
  claude
  committed
  f8d8b1c
- fix(email): RFC 2047 word splitting, harness reject parity, PARSE_FAILED
  
  Brooooooklyn
  and
  claude
  committed
  4ccb016
Commits on Sep 1, 2026
- fix(email): address preflight, docs result narrowing, and the logs --limit flag
  
  Brooooooklyn
  and
  claude
  committed
  6c5da08
Commits on Sep 2, 2026
- fix(email): client stub, header line limit, filename escaping, prompt claim
  
  Brooooooklyn
  and
  claude
  committed
  9cfd3ba
Commits on Sep 10, 2026
- fix(email): treat inbound handlers as a backend, and pin the framework boundary
  
  Brooooooklyn
  and
  claude
  committed
  89b9d47
Commits on Sep 11, 2026
- fix(email): make the default reply subject best-effort, and qualify the shipped prompts
  
  Brooooooklyn
  and
  claude
  committed
  af10ad3
- docs(email): design the lifecycle and UX across the three hosting modes
  
  Brooooooklyn
  and
  claude
  committed
  814423a
- docs(email): merge the lifecycle and UX design into 0078
  
  Brooooooklyn
  and
  claude
  committed
  62d3f38
- docs(email): bring custom domains on Cloudflare into scope
  
  Brooooooklyn
  and
  claude
  committed
  3687547
- docs(email): custom-domain token in three clicks via the dashboard template link
  
  Brooooooklyn
  and
  claude
  committed
  f1a2ee0
- docs(email): take the custom-domain token from the clipboard; no local copy
  
  Brooooooklyn
  and
  claude
  committed
  34efbdb
- docs(email): full token grant diagram with branches; token_id + expires_on on the row
  
  Brooooooklyn
  and
  claude
  committed
  e002e67
- docs(email): what a Void Cloudflare OAuth client would change, and what it costs
  
  Brooooooklyn
  and
  claude
  committed
  98c8d42
- docs(email): Mode B is one keystroke — verified flow from the deep research
  
  Brooooooklyn
  and
  claude
  committed
  6834700
- docs(email): say plainly that email is platform-only today
  
  Brooooooklyn
  and
  claude
  committed
  3b90aeb
- docs(email): carry the Mode B research into progress, operations, lessons
  
  Brooooooklyn
  and
  claude
  committed
  edd899b
- chore(deps): bump wrangler to 4.131 and @cloudflare/vite-plugin to 1.54.7
  
  Brooooooklyn
  and
  claude
  committed
  0272bb4
- feat(email): add email.from to void.json, keep send_email out of dev
  
  Brooooooklyn
  and
  claude
  committed
  3877f80
- feat(email): sendEmail / addresses / vars in ProvisionedWranglerPatch
  
  Brooooooklyn
  and
  claude
  committed
  3f31f97
- feat(email): own-account runtime — SEND_EMAIL transport, sender default, no-prefix inbound, native actions
  
  Brooooooklyn
  and
  claude
  committed
  276697e
- feat(email): Mode B module — preflight, derivation, checklist, apply, bearer bridge
  
  Brooooooklyn
  and
  claude
  committed
  12985d9
- Merge branch 'task/runtime' into feat/email-reland
  Brooooooklyn
  committed
  d0f4039
- Merge branch 'task/config' into feat/email-reland
  Brooooooklyn
  committed
  1667090
- Merge branch 'task/wrangler-patch' into feat/email-reland
  Brooooooklyn
  committed
  4289c10
- Merge branch 'task/email-cloudflare' into feat/email-reland
  Brooooooklyn
  committed
  b503001
- docs(email): describe email on the developer's own Cloudflare account
  
  Brooooooklyn
  and
  claude
  committed
  60aa301
- feat(email): void email setup / status for --backend cloudflare
  
  Brooooooklyn
  and
  claude
  committed
  4766738
- chore(deps): add ci-info to the void CLI
  
  Brooooooklyn
  and
  claude
  committed
  fec3e1f
- feat(email): wire the Mode B email step into `void deploy --backend cloudflare`
  
  Brooooooklyn
  and
  claude
  committed
  31b87f4
- Merge branch 'task/deploy' into feat/email-reland
  Brooooooklyn
  committed
  c063413
- Merge branch 'task/email-cli' into feat/email-reland
  
  Brooooooklyn
  and
  claude
  committed
  7595c56
- Merge branch 'task/docs' into feat/email-reland
  
  Brooooooklyn
  and
  claude
  committed
  fa9178d
- fix(email): review round — 17 findings
  
  Brooooooklyn
  and
  claude
  committed
  d053c8b
- Merge origin/main into feat/email-reland (platform monorepo)
  
  Brooooooklyn
  and
  claude
  committed
  f3638c4
- Merge feat/email-reland (void-platform) under platform/ — subtree
  
  Brooooooklyn
  and
  claude
  committed
  a970c38
- docs(email): monorepo paths in 0078 and the runbook Email section; two spec notes
  
  Brooooooklyn
  and
  claude
  committed
  cd35afe
- feat(email): --platform cloudflare on void email setup/status (--backend stays an alias)
  Brooooooklyn
  committed
  42d5e46
- fix(ci): import test helpers from vite-plus/test, lint the platform after its build
  
  Brooooooklyn
  and
  claude
  committed
  70f9067
- fix(ci): typecheck only the platform packages in platform-ci
  
  Brooooooklyn
  and
  claude
  committed
  75845aa
- fix(email): bound a hand-built reply at MAX_MESSAGE_BYTES
  
  Brooooooklyn
  and
  claude
  committed
  9d300cd
- fix(api): keep the email-slug backfill out of the routing-parse try block
  
  Brooooooklyn
  and
  claude
  committed
  a96eb3d
- fix(api): resend the platform confirmation link on a repeat destination add
  
  Brooooooklyn
  and
  claude
  committed
  6ee214a
Commits on Sep 13, 2026
- fix(email): export the error classes, guard type-only imports, bound the dev inbox
  
  Brooooooklyn
  and
  claude
  committed
  5e4020e
- docs(email): say plainly that `void dev` binds no send transport
  
  Brooooooklyn
  and
  claude
  committed
  b34e350
- fix(deploy): gate --require-email on real readiness, not binding presence
  
  Brooooooklyn
  and
  claude
  committed
  1090b35
- fix(proxy): cap the recipient list before it is normalized
  
  Brooooooklyn
  and
  claude
  committed
  060e28f
- fix(api): say that suspension stops mail in both directions
  
  Brooooooklyn
  and
  claude
  committed
  72ebb63
- fix(api): per-project consent, mirror repair, and the teardown race
  
  Brooooooklyn
  and
  claude
  committed
  a94e151
- fix(api): retire owner-inherited recipients when the provider email changes
  
  Brooooooklyn
  and
  claude
  committed
  dca91bf
- fix(email): do not spread a hostile header into Math.max
  
  Brooooooklyn
  and
  claude
  committed
  363d859
- fix(api): roll back the owner destination when teardown wins the race
  
  Brooooooklyn
  and
  claude
  committed
  91e29fb
- fix(email): bound the inbound action queue at the proxy, and in the handler
  
  Brooooooklyn
  and
  claude
  committed
  b4a3280
- fix(email): surface a stream read failure, and an unusable project slug
  
  Brooooooklyn
  and
  claude
  committed
  aa09501
- fix(email): bound attachments before they are buffered
  
  Brooooooklyn
  and
  claude
  committed
  fc09ca4
- Merge origin/main into feat/email-reland
  
  Brooooooklyn
  and
  claude
  committed
  5bc03c7
- fix(proxy): check the forward header shape before enumerating it
  
  Brooooooklyn
  and
  claude
  committed
  ef0bf52
- fix(proxy): build the envelope header bag with Object.fromEntries
  
  Brooooooklyn
  and
  claude
  committed
  38cac50
- fix(email): name the error when reply() gets a native EmailMessage
  
  Brooooooklyn
  and
  claude
  committed
  b3f91fe
- fix(email): bound the text and html bodies before they are encoded
  
  Brooooooklyn
  and
  claude
  committed
  004defd
- fix(email): reject an email/ directory on node, bun and deno targets
  
  Brooooooklyn
  and
  claude
  committed
  10f0939
Commits on Sep 14, 2026
- fix(proxy): refuse a non-string forward header value
  
  Brooooooklyn
  and
  claude
  committed
  bf0fb56
- fix(email): bound recipients before any address is parsed or folded
  
  Brooooooklyn
  and
  claude
  committed
  dd00bd4
- Merge origin/main into feat/email-reland
  
  Brooooooklyn
  and
  claude
  committed
  ed94185
- fix(cli): fail email setup when the inbound rows are not ready
  
  Brooooooklyn
  and
  claude
  committed
  0228266
- fix(proxy): pin the MIME From address to the envelope sender
  
  Brooooooklyn
  and
  claude
  committed
  eee1100
- fix(email): count headers in the size projection, before any header is built
  
  Brooooooklyn
  and
  claude
  committed
  df2cf2f
- fix(email): fold a header in one pass that keeps only finished lines
  
  Brooooooklyn
  and
  claude
  committed
  9a56594
- fix(email): project threading and part headers, and refuse an unfoldable quoted value early
  
  Brooooooklyn
  and
  claude
  committed
  64f2f80
- fix(email): scan a threading header without materializing its tokens
  
  Brooooooklyn
  and
  claude
  committed
  9a517aa
- Merge origin/main into feat/email-reland
  
  Brooooooklyn
  and
  claude
  committed
  ae747ba
- fix(api): commit the owner email change and the destination demotion together
  
  Brooooooklyn
  and
  claude
  committed
  e948170
- fix(api): cap a destination address before normalizing or matching it
  
  Brooooooklyn
  and
  claude
  committed
  c65eb3e
- fix(email): walk a body's lines without splitting or re-joining them
  
  Brooooooklyn
  and
  claude
  committed
  7d76da5
- fix(email): charge each attachment part's framing and filename in the projection
  
  Brooooooklyn
  and
  claude
  committed
  3c7e1eb
- fix(email): allow-list the attachment disposition at runtime
  
  Brooooooklyn
  and
  claude
  committed
  b68b770
- fix(api): re-derive the allowlist mirror after a destination row is deleted
  
  Brooooooklyn
  and
  claude
  committed
  36fd47a
- test(email): keep the ~10 MB boundary renders inside CI's clock
  
  Brooooooklyn
  and
  claude
  committed
  1c49ad9
- docs(email): pin why a deleted handler's `addresses` entry is a blocker, not `[]`
  
  Brooooooklyn
  and
  claude
  committed
  e57dc4e
- fix(proxy): bound the envelope sender before anything copies it
  
  Brooooooklyn
  and
  claude
  committed
  cbe5c57
- fix(email): remember a refused sending onboarding by the committed binding
  
  Brooooooklyn
  and
  claude
  committed
  d238217
- fix(cli): reject a missing value for `void email --project` / `--limit`
  
  Brooooooklyn
  and
  claude
  committed
  edd2022
- fix(plugin): strip only Void's own `SEND_EMAIL` entry under serve
  
  Brooooooklyn
  and
  claude
  committed
  4035761
- fix(email): say when an add mailed nothing because Cloudflare already held the address
  
  Brooooooklyn
  and
  claude
  committed
  ec394c7
- fix(proxy): bound four more tenant-sized inputs before anything allocates on them
  
  Brooooooklyn
  and
  claude
  committed
  53ed178
- fix(email): reject a second email/_default.* handler
  
  Brooooooklyn
  and
  claude
  committed
  1e0950a
- fix(email): decode Q-words into a typed array; capture one id per unique address
  
  Brooooooklyn
  and
  claude
  committed
  8f1f50e
- fix(proxy): bound the platform token, request ids, and every untrusted value a log line renders
  
  Brooooooklyn
  and
  claude
  committed
  d1a4911
- fix(api,cli): cap project slugs at 56 and tell the CLI which owner address is being registered
  
  Brooooooklyn
  and
  claude
  committed
  38365e8
- fix(dev): require the dev-trigger token on every /__void/inbox route
  
  Brooooooklyn
  and
  claude
  committed
  559a967
- fix(email): bound the inbound subject the default reply subject is built from
  
  Brooooooklyn
  and
  claude
  committed
  1b14fa7
- docs(api): name the delete-vs-register window on a shared destination tag
  
  Brooooooklyn
  and
  claude
  committed
  f1823b3
- fix(email): charge custom header names in the MIME projection, refuse a name no line can carry
  
  Brooooooklyn
  and
  claude
  committed
  6495539
- fix(api): roll the owner auto-add's Cloudflare tag back when the row read-back is empty
  
  Brooooooklyn
  and
  claude
  committed
  b9b90cf
- fix(api): promote a CF-pending destination only off the tag it registered
  
  Brooooooklyn
  and
  claude
  committed
  3e0e919
- fix(api): fail project teardown closed when the email send mirrors cannot be deleted
  
  Brooooooklyn
  and
  claude
  committed
  6c34c78
- fix(api): inherit the owner's Cloudflare consent only while the address is still the owner's
  
  Brooooooklyn
  and
  claude
  committed
  f9670ec
- fix(void): store the dev trigger token owner-only
  
  Brooooooklyn
  and
  claude
  committed
  22a0bc3
- fix(void): read a disabled routing rule as absent; validate forward header records at the call
  
  Brooooooklyn
  and
  claude
  committed
  3f17d5b
- fix(deploy-cloudflare): carry `addresses` through the trigger-config copies
  
  Brooooooklyn
  and
  claude
  committed
  b2d854d
- fix(email): cap the local part at 64 octets; bound a reply's References chain
  
  Brooooooklyn
  and
  claude
  committed
  0f55976
- fix(email): cap inbound header count; run the test harness on the production proxy; decode quoted-pairs
  
  Brooooooklyn
  and
  claude
  committed
  478dae3
- fix(email): refuse reserved email slugs on every mail path; validate forward addresses at the call
  
  Brooooooklyn
  and
  claude
  committed
  4bd437e
- fix(email): validate a hand-built reply's addresses at the call
  
  Brooooooklyn
  and
  claude
  committed
  de6791b
- fix(email): cap an address at 254 octets; document that own-account setup is per domain
  
  Brooooooklyn
  and
  claude
  committed
  c3a104d
Commits on Sep 15, 2026
- docs(email): record the RPC result materialization limit of inbound dispatch
  
  Brooooooklyn
  and
  claude
  committed
  eee1908
- fix(email): mirror the router's forward-header bounds and reject-reason normalization at record time
  
  Brooooooklyn
  and
  claude
  committed
  c1b39c3
- fix(email): refuse C0 controls and DEL in a bare address at the call
  
  Brooooooklyn
  and
  claude
  committed
  fee38c6
- fix(email): bound the attachment count before any entry is normalized
  
  Brooooooklyn
  and
  claude
  committed
  b48be39
- fix(email): refuse ':' in a bare address, and pin the framework address rule against the router's
  
  Brooooooklyn
  and
  claude
  committed
  318de55
- refactor(email): validate addresses with email-validator on both sides
  
  Brooooooklyn
  and
  claude
  committed
  6ab857e
- fix(email): refuse control characters in attachment parameters, drop them from threading ids
  
  Brooooooklyn
  and
  claude
  committed
  ed1e56d
- fix(email): size the dev inbox capture cap for the serialized capture
  
  Brooooooklyn
  and
  claude
  committed
  c4b34f0
- fix(email): mirror the router's inbound admission limits in the test harness
  
  Brooooooklyn
  and
  claude
  committed
  b11b9dd
- fix(email): validate an attachment's media type before rendering it
  
  Brooooooklyn
  and
  claude
  committed
  942689e
- fix(email): validate an attachment's Content-ID before rendering it
  
  Brooooooklyn
  and
  claude
  committed
  4ca7b1d
- fix(email): refuse a non-string workerName as corrupt routing data
  
  Brooooooklyn
  and
  claude
  committed
  760e856
- fix(email): refuse a malformed proxy delivery list instead of dropping entries
  
  Brooooooklyn
  and
  claude
  committed
  ced5f4d
- fix(email): quote a display name that contains a period
  
  Brooooooklyn
  and
  claude
  committed
  19e1be4
- fix(api): tighten the allowlist mirror inside the owner-email change transaction
  
  Brooooooklyn
  and
  claude
  committed
  b92054c
- Merge origin/main into feat/email-reland
  
  Brooooooklyn
  and
  claude
  committed
  81bcc55
- Merge remote-tracking branch 'origin/main' into feat/email-reland
  Brooooooklyn
  committed
  2b36022
- docs(email): record the RPC result materialization decision in 0078
  
  Brooooooklyn
  and
  claude
  committed
  eff0e68
- fix(email): refuse an incomplete or malformed mid-batch delivery list
  
  Brooooooklyn
  and
  claude
  committed
  cd17b77
- fix(email): route login guidance through Void, refuse a mistyped projectId, document the reply gate
  
  Brooooooklyn
  and
  claude
  committed
  8666af5
- fix(email): gate the api email routes on the platform capability, say when a first send can deliver
  
  Brooooooklyn
  and
  claude
  committed
  bb6f925
- fix(email): say when a revoked recipient is refused, pin parse-then-forward on a native message
  
  Brooooooklyn
  and
  claude
  committed
  6ef17b1
- fix(email): refuse a malformed suspension marker on send, gate the proxy email group on the capability
  
  Brooooooklyn
  and
  claude
  committed
  2be1ec2
- Merge origin/main into feat/email-mono (operator API, CLI docs rewrite)
  
  Brooooooklyn
  and
  claude
  committed
  bd07cbc
- fix(email): classify the platform send binding's error code before its message
  
  Brooooooklyn
  and
  claude
  committed
  d60939a
- docs(0078): record the Mode B setup-by-direction question as open decision #11
  
  Brooooooklyn
  and
  claude
  committed
  990d116
- Merge origin/main into feat/email-mono (Worker handoff, self-hosted cleanup)
  
  Brooooooklyn
  and
  claude
  committed
  5d8ec49
- fix(email): let an exact tag beat a captured tag, refuse a repeated or empty --project
  
  Brooooooklyn
  and
  claude
  committed
  fb1509b
- fix(prerender): open the same local D1 the dev server and migration runner use
  
  Brooooooklyn
  and
  claude
  committed
  8a243a4
Commits on Sep 17, 2026

Commits

Commits on Aug 30, 2026

Commits on Aug 31, 2026

Commits on Sep 1, 2026

Commits on Sep 2, 2026

Commits on Sep 10, 2026

Commits on Sep 11, 2026

Commits on Sep 13, 2026

Commits on Sep 14, 2026

Commits on Sep 15, 2026

Commits on Sep 17, 2026