Product Backlog

Initialize the Next.js 16 project with TypeScript, Supabase integration, Tailwind CSS v4, and development tooling.

Implement passwordless authentication using Supabase magic links. Protect all routes behind authentication middleware.

Implement admin/user role system with route protection and an admin panel for user management.

Build the main application layout with header navigation, account tabs, and sub-navigation for per-account views.

Establish reusable UI components used across multiple features: modals, rich text editor, confirm dialogs.

Implement encryption for stored credentials, authentication guards, Row Level Security, CSRF protection, and input validation across all routes.

Enable users to register multiple IMAP/SMTP email accounts, test connections, and view storage quotas.

Discover IMAP folders, create/rename/delete folders, manage folder exclusions, and handle system folder protection.

Synchronize emails from IMAP to the database incrementally, handle edge cases, and support body text backfill.

Full-featured rule engine with 10 rule types, hard/soft match modes, priority ordering, expiry, hit tracking, health checks, and retroactive apply.

Multi-stage email classification: rule-based fast path, vector embedding similarity, and LLM fallback. Batch processing, reclassification, and auto-sort.

AI-powered analysis of inbox emails to propose an optimal folder hierarchy and sorting rules.

AI-generated email digest with action detection, configurable prompt, save/load history, done tracking, and task export.

View email body/attachments, move/delete emails, compose reply/forward with AI drafts, and contact autocomplete.

Central dashboard with briefing, pipeline controls, classification table, bulk operations, search, and statistics.

Full email client experience: browse any folder’s contents with sort/search/pagination, read/unread management, bulk actions, live folder counts, and unread counts.

Drag emails from the classification table or folder email list and drop them onto sidebar folders for instant organizing, with undo support.

Separate junk management with blocklist/allowlist rules, auto-junk engine integrated into sync pipeline, dedicated junk page with stats, and not-spam recovery.

UID-based email identity system, IMAP-to-DB reconciliation, multi-phase repair engine, and dedicated repair page with health scanning and SSE repair log.

Account-scoped reusable reply templates with category grouping, compose toolbar picker, AI-powered template adaptation, and a management page with stats.

Componentize email row actions for reuse across briefing, folder list, and classification table. Add account color coding, clickable links in emails, full-height modal, table layout fixes, and German date format.

Vercel deployment fixes, OTP authentication via Resend, public landing page, auto-sync on dashboard load, and API timeout configuration.

Prevent database state from diverging from IMAP reality through server-side sync locking, eliminating DB-only moves, atomic UIDVALIDITY resets, and safe cross-folder reconciliation.

Full-codebase robustness sprint: centralized IMAP connection lifecycle with timeouts and guarded teardown, token-owned sync locking across all mutating routes, DB/IMAP divergence fixes, scheduled account health monitoring with a dashboard badge, API route hardening, first automated test suite, and shared UI components extracted from duplicated code.

Full rebuild of the sending/drafting/searching workflow: file attachments and BCC in compose/reply, persistent drafts, a streaming AI drafting panel, combined full-text + semantic search, and editor paste hardening.

Approval-based bulk deletion: senders grouped and ranked by a deletability score (volume, automation, templatedness via pgvector centroids, staleness, engagement), LLM category labels, hard protections, undoable Trash moves, rule suggestions with apply-to-existing, and consolidation of scattered senders.

Make the dashboard 'do the job' end to end: honest IMAP moves with a terminal kept status, auto-classification after every sync, apply/sync race elimination, the convergence invariant (no approval without a verified IMAP action), delete progress feedback, and trash retention that keeps the DB clean.