ohmail 0.10.0

Your computer as the host for your other devices

• Settings → Devices turns a desktop install into the host for your other devices. Your phone's
  browser opens the same ohmail client through your own computer — the Ohbox, the Screener, reading
  and filing real mail — while that computer is awake. No cloud in the path.
• Nothing is opened to the internet. The mail engine listens on this computer only, and
  Tailscale — a private tunnel between your own devices — carries the
  connection under a real HTTPS address. The pane detects whether Tailscale is installed, running
  and signed in, and says what to do in plain words.
• Adding a device is a QR code. Scan it with the device's camera and it opens your mail and
  pairs in one step. Codes work once and expire in five minutes; paired devices are listed and
  revocable at any moment, and relaunching or updating the desktop app does not unpair anything.
• While hosting, closing the window hides the app (the tray brings it back), quitting from the
  tray really quits, and start-at-login is offered as a visible choice. With host mode off, none of
  this machinery exists — no listener, no tray, the exact lifecycle earlier releases had.
• A same-network door for apps rather than browsers can be opted into: a plain-HTTP address on
  one interface you choose, for API clients on your own network.

Your settings live in the mailbox, and move with it

• The senders you've screened in, your rules, notification rules, away reply and tag names are
  stored in the mailbox itself — a few kilobytes of versioned JSON in the hidden ohmail/_meta
  folder. Connect the same mailbox from another ohmail — a fresh desktop install, the hosted
  service, a server you run — and it finds them and asks before importing. Declining is remembered;
  found settings win only for the entries they actually name.
• The format is public: docs/organizer-profile.md.
  Natural keys only, unknown fields tolerated, never any credential. If you stop using ohmail, the
  document is still yours, in your own mailbox, readable by anything that parses JSON.

The Screener

• "Not spam" now releases the sender, not just the message. When a rule you once made held a
  sender in spam, the release buttons moved the messages but left the rule standing, so the sender's
  mail kept coming back. Releasing a sender now rewrites or removes the holding rule, moves only the
  mail that is physically present, and re-files the sender's backlog. The confirmation names the
  rule it rewrote.

Also

• A failed permission-tightening on the configuration file is now an error rather than a silent
  success — the file names your mail server and username, and is owner-only on Unix.
• This repository is AGPL-3.0 now (0.9.x shipped under GPL-3.0), and it carries the server source
  behind ohmail.app beside the desktop app. Contributions need no CLA — a DCO sign-off is enough.

---

Built by CI run 32373356302
from this repository's own tree; the run's summary prints the SHA-256 of every artifact attached
here. Full detail in the changelog.