ConnectOnion 1.9.3rc19 (preview)

Stable remains 1.9.2. Python 3.11+ is required; dependency floors are unchanged.

This is a mailbox setup verification release. It retains rc18's co email domains, co email setup <alias> --domain <domain>, multiple owned addresses, explicit senders and cloud account defaults. No new purchase or sending behavior is introduced. Quota examples now use co email upgrade plus --keep-address.

Regression coverage

Added checks that signed-out setup/domain commands do not contact the cloud, that a settings authorization failure stops before purchase, and that reserved domains cannot be bought until the backend enables them. Existing coverage checks price previews without charging, duplicate ownership, conflicts, sender selection, defaults, filtering and sharing.

The follow-up run passed 114 SDK/CLI email tests and 907 backend tests (200 skipped). Eleven real PostgreSQL ownership contracts cover competing claims, debit rollback, stale grants and protected key-derived mailboxes. The new contract checks five addresses across all four hosted domains share one account inbox, including different names on one domain, and that changing the default sender does not split the inbox. The release workflow separately gates publication on its full offline matrix and installed-wheel acceptance.

Operational limit

The three branded domains are verified for sending in Resend. Cloudflare Email Routing still returns HTTP 403 with the configured token, so inbound routing and real delivery remain unaccepted. The enabled new-address domain remains mail.openonion.ai. No mailbox was bought and no live email was sent during these tests. See the current acceptance record.

Install

python -m pip install --upgrade 'connectonion==1.9.3rc19'

Operational follow-up after publication

The dedicated shell email token can read routing rules and Workers, but enabling the two remaining zones still returns 403 and needs Zone Settings Write. After the owner's explicit migration choice, trustxmail.com's existing verification-code catch-all was backed up and changed to Agent Mail. A real provider test reached the mail store, and the domain is now enabled alongside mail.openonion.ai. steadmail.com and oakinbox.com remain unavailable for new addresses until their incoming routing is accepted.

A provider self-test was received by the owner's existing primary inbox through the deployed signed-webhook worker. The owner's CLI send attempt was rejected at the monthly 100-message quota. This verifies primary incoming delivery only; no branded mailbox purchase or quota upgrade was made. The separate trustxmail.com diagnostic was addressed to an unclaimed internal test address, whose receipt was checked in the mail store, not through an owner's inbox.