v0.10.0

What's New

Security Hardening

• AES-256-GCM encryption at rest for email bodies in SQLite cache (key stored in OS keyring)
• Signal handling — graceful shutdown on SIGTERM/SIGINT with cleanup
• IMAP body size limit (50MB) to prevent OOM on oversized messages
• SMTP hardening — reject unknown TLS modes instead of silent plaintext fallback
• Dangerous attachment warnings — detect .exe, .bat, .docm, double-extension tricks
• Temp file cleanup on exit
• Config file permissions enforced to 0600
• TCP keepalive (30s) on IMAP and SMTP connections
• Dial timeouts (30s) on both IMAP and SMTP
• Credentials safety — String() method omits secrets from accidental logging
• govulncheck — 0 known vulnerabilities

Features

• Soft line wrapping in compose editor and horizontal scroll
• Gmail label deduplication and cross-folder cache sync

Fixes

• Show To instead of From in Sent/Drafts message list
• Preserve quoted context when AI generates reply
• Dedicated IMAP connection for body fetches, stale UID recovery