---

✨ Features

• 📬 Real mail, real protocols — connects to any IMAP/SMTP provider via imapflow and nodemailer; nothing proprietary in the way.
• 🗂️ Nested mail resources — mail accounts → mailboxes → mails → attachments, modelled cleanly all the way down.
• 📎 Privacy-first attachments — content is never stored or cached server-side. Attachments are re-fetched from IMAP, parsed in-memory, and streamed out with Cache-Control: no-store.
• ⚡ Bulk mail actions — move, copy, delete, and flag many messages in one request.
• 🖼️ BIMI brand logos — resolves sender brand logos from DNS for use as profile pictures; only record metadata is read, the logo is never fetched or stored.
• 🔐 JWT auth + API keys — token-based sessions plus scoped API keys for programmatic access.
• 🔒 ECC crypto — mail-backend credentials protected with elliptic-curve encryption and signing.
• 📖 First-class OpenAPI — every route is documented via hono-openapi and browsable through an embedded Scalar reference.
• 🗄️ Zero-setup database — SQLite out of the box, with no separate database server to run. PostgreSQL and MySQL schemas exist and runtime support is planned (#10).
• ⏰ Scheduled tasks — background jobs via the cron package.
• ✅ Integration-tested — a mock IMAP/SMTP harness exercises the real request paths.

🧱 Tech Stack

🚀 Quick Start

Prerequisites: Bun 1.x

# 1. Install dependencies
bun install

# 2. Configure your environment
cp example.env .env
#    → set DLA_ENCRYPTION_KEY (32 characters) and review the rest

# 3. Run database migrations (SQLite by default)
bun run db:sqlite:migrate

# 4. Start the dev server
bun run dev

The API is now live at http://localhost:14123, with the interactive Scalar reference at /docs/v1 and the raw OpenAPI spec at /docs/v1/openapi (unless DLA_DISABLE_DOCS=true). The root path / redirects to the latest version's docs.

⚙️ Configuration

All configuration is environment-based (see example.env):

Create-mail requests have a total request limit of DLA_MAX_ATTACHMENT_SIZE_MB + 16 MB (41 MB by default), covering both JSON and multipart bodies (mail JSON, attachments and multipart framing). Exceeding this total returns a request-size error; exceeding the separate combined attachment limit returns an attachment-size error. Large text/HTML bodies count toward the total request limit.

The attachment limit counts the files' raw size. Base64 encoding makes the sent message about 37% larger, so 25 MB of attachments become roughly 34 MB on the wire: keep the limit below your mail provider's message size limit divided by 1.37. If the provider still rejects a message as too large, the send request returns a 400 error. Bun itself rejects request bodies over 128 MB, which caps the attachment limit at 112 MB.

🛠️ Commands

🗺️ Project Structure

src/
├── index.ts                # Entry point
├── api/
│   ├── index.ts            # API router setup
│   ├── utils/              # Response helpers, auth, OpenAPI, services
│   └── versions/v1/
│       ├── middleware/     # Auth middleware
│       ├── docs/           # OpenAPI tag definitions (Scalar UI mounted in api/index.ts)
│       └── routes/         # auth · account · mail-accounts · bimi · admin
│                           #   auth → reset-password
│                           #   account → apikeys · preferences
│                           #   mail-accounts → identities · search · mailboxes
│                           #     mailboxes → mail-bulk-actions · mails → attachments
├── db/
│   ├── index.ts            # DB connection
│   └── schema/             # Per-dialect Drizzle schema (sqlite · postgresql · mysql)
└── utils/
    ├── config.ts           # App configuration
    ├── cron.ts             # Scheduled tasks
    ├── crypto/             # ECC encryption & signing
    └── mails/              # Mail backends & parsing

Note: Drizzle schema files are dialect-specific. When adding tables or columns, mirror the change across all three files in src/db/schema/.

📦 The Delivr Project

📄 License

Licensed under the GNU AGPL-3.0.