# Multi-Provider Email Platform + Admin/Settings — Design

**Design + architecture phase. No implementation until approved.**

Evolves InboxIntel from a single-account Gmail tool into a **multi-provider platform**
(Gmail · Outlook/Graph · future IMAP) for a **small self-hosted team**, with settings,
feature flags, and an admin panel. Extends — does not discard — the
[discovery blueprint](../README.md).

## Locked decisions (from interview)
1. **Tenancy:** **small team, self-hosted, one org.** Roles = **Admin / Member**. Shared
   system settings + feature flags; each member's mail is private to them. No multi-tenant
   org table (one implicit org); the model stays extensible to multi-org later.
2. **App identity = provider OAuth.** The first Google/Microsoft sign-in **creates/authenticates
   the InboxIntel user**; additional mailboxes **link** to that same user. **No passwords stored.**

## How this reshapes the blueprint (the "review" deltas)
| Blueprint assumption | New reality |
|----------------------|-------------|
| Single-user, local-first | **Multi-user (small team)** with Admin/Member RBAC + admin panel |
| Gmail-centric `Email`/`Sender` | **Account-scoped, provider-normalised** model (`IEmailProvider`) |
| AI gated by `Ai:Mode` + user pref | **AI gated by system feature flag → user pref → capability** (flag wins) |
| One implicit mailbox | **N provider accounts per user** (`accounts` table + per-account sync cursors) |
| Sync = `GmailSyncWorker` | **Provider-agnostic sync orchestrator** dispatching to provider adapters |

These deltas will be back-ported into main-blueprint docs [08](../08-technical-architecture.md)
and [09](../09-roadmap.md) when this design is approved.

## Documents
| # | Doc | Covers (brief part) | Status |
|---|-----|---------------------|--------|
| 01 | [Provider Abstraction](01-provider-abstraction.md) | Part 1 | ✅ draft |
| 02 | [Auth & Sign-in](02-auth-and-signin.md) | Part 2 | ✅ draft |
| 03 | [Database Design](03-database-design.md) | Part 6 | ✅ draft |
| 04 | [Settings & Feature Flags](04-settings-and-flags.md) | Part 3 | ✅ draft |
| 05 | [Admin System](05-admin-system.md) | Part 4 | ✅ draft |
| 06 | [Security Model](06-security-model.md) | Part 5 | ✅ draft |
| 07 | [UX Flows](07-ux-flows.md) | Part 7 | ✅ draft |
| 08 | [AI Feature-Flag Integration](08-ai-feature-flags.md) | Part 8 | ✅ draft |
| 09 | [Implementation Plan](09-implementation-plan.md) | Part 9 | ✅ draft |
| 10 | [Git Workflow](10-git-workflow.md) | Part 11 | ✅ draft |
| 11 | [Risk Analysis](11-risk-analysis.md) | output | ✅ draft |
| 12 | [Migration Guide](12-migration-guide.md) | Part 10 | ✅ draft |

## Non-negotiables carried forward
Provider logic **never leaks into Domain** · search works **across all a user's accounts**
· emails stored in **one unified format** · **AI never required** for core function ·
tokens **encrypted at rest** · admin actions **audit-logged**.