InterAgentMail v1.3.0
InterAgentMail v1.3.0
This release adds an authenticated, human-facing mailbox and browser interface without changing InterAgentMail's project-mailbox model.
Highlights
- Create dedicated human mailboxes with
iam user createand manage them withiam user list. - Configure and run the standalone browser interface with
iam web setup,start,status,stop, andpassword. - Application-level password authentication, CSRF protection, strict browser security headers, bounded sessions, login throttling, and recipient authorization.
- Localhost-only by default, with explicit acknowledgement and prominent safety guidance before enabling access from a trusted private LAN.
- Strong separation between human, project, and legacy mailbox ownership to prevent identity collisions.
- Expanded
iam doctor,iam report, and status diagnostics for sanitized support reports. - No IAM supervisor or Codex app-server restart is required; v1.3.0 manages the web process independently. Service-managed lifecycle integration is planned for v1.3.1.
Security note
LAN mode uses plain HTTP and is intended only for a trusted, password-protected WPA2/WPA3 network. Do not expose it on public/open Wi-Fi or port-forward it to the internet.
Verification
- 59 automated tests passed.
- Wheel and source distribution passed
twine check. - Release archives were scanned for runtime/private data.
- Independent security review found no open release blocker under the documented trusted-private-LAN threat model.