@eduwork/dsh-mail 0.2.2 → 0.2.3

package/CHANGELOG.en.md

@@ -2,6 +2,12 @@
 
 [简体中文](CHANGELOG.md) | **English**
 
+## 0.2.3 — 2026-10-25
+
+- Update embedded Nodemailer to 10.2.1 and Mailparser to 3.12.4, fixing denial of service from crafted email addresses and address-parsing issues, including [GHSA-v53p-9fqp-m79j](https://github.com/advisories/GHSA-v53p-9fqp-m79j) and [GHSA-prgh-xp8r-p3m5](https://github.com/advisories/GHSA-prgh-xp8r-p3m5). Downstream overrides cannot replace dependencies in an old JS bundle; upgrade the plugin.
+- Ship an inventory of dependencies actually bundled into the package. Publication checks query advisories for these versions and verify every JS file's hash in the final tarball, including lazily loaded mail protocol code.
+- Add synthetic regressions for crafted addresses, ordinary MIME reading, read-only IMAP and local SMTP submission; preserve lazy loading, read/send switches and approval boundaries.
+
 ## 0.2.2 — 2026-10-24
 
 - Load mail protocol and parsing libraries on the first mail tool call, reducing module evaluation during plugin startup; concurrent calls share module loading.

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 **简体中文** | [English](CHANGELOG.en.md)
 
+## 0.2.3 — 2026-10-25
+
+- 升级内嵌 Nodemailer 至 10.2.1、Mailparser 至 3.12.4，修复特制邮件地址触发的拒绝服务及地址解析问题，包括 [GHSA-v53p-9fqp-m79j](https://github.com/advisories/GHSA-v53p-9fqp-m79j) 和 [GHSA-prgh-xp8r-p3m5](https://github.com/advisories/GHSA-prgh-xp8r-p3m5)。下游 overrides 无法替换旧 JS 中的依赖，需要升级插件。
+- 随包提供实际打包依赖清单；发布检查查询这些版本的安全公告，并核对最终 tarball 内所有 JS 文件的哈希，覆盖延迟加载的邮件协议代码。
+- 增加合成邮件回归，验证特制地址、普通 MIME 读取、只读 IMAP 和本机 SMTP 提交；保留延迟加载、收发开关与审批边界。
+
 ## 0.2.2 — 2026-10-24
 
 - 邮件协议与解析库改为首次执行邮件工具时加载，减少插件启动时的模块求值；并发调用复用模块加载。

package/THIRD_PARTY_NOTICES.en.md

@@ -14,4 +14,6 @@ The project was informed by the MIT-licensed integration approach in [`STARDUSTL
 
 Exact direct and transitive versions are recorded in `package-lock.json`. Review the lockfile, license-check output, and final npm tarball before every public release.
 
+Starting with 0.2.3, `lib/bundled-dependencies.json` in the npm package records dependencies actually included in the JS outputs (including nested versions), npm integrity, license identifiers and output SHA-256 hashes. It is generated from build sources and excludes development dependencies absent from the bundle.
+
 The development-only official DSH Host includes LibreOffice Kit (MPL-2.0) and sharp/libvips native packages (Apache-2.0 / LGPL-3.0-or-later). They are not bundled in the mail plugin archive; their license files remain with their own packages.

package/THIRD_PARTY_NOTICES.md

@@ -14,4 +14,6 @@
 
 直接和间接依赖的精确版本记录在 `package-lock.json`。每次公开发布前必须重新审查锁文件、许可证检查结果和最终 npm tarball。
 
+从 0.2.3 起，npm 包中的 `lib/bundled-dependencies.json` 记录实际进入 JS 产物的依赖（含嵌套版本）、npm integrity、许可证标识及产物 SHA-256。清单由构建来源生成，不包含仅开发使用且未打包的依赖。
+
 仅开发使用的官方 DSH Host 包含 LibreOffice Kit（MPL-2.0）与 sharp/libvips 原生包（Apache-2.0 / LGPL-3.0-or-later）。它们不打入邮件插件压缩包，许可证随各自的包保留。

package/docs/security-model.en.md

@@ -47,6 +47,12 @@ Full Access therefore has the same meaning as for other DSH write tools: the use
 - bounded connection and socket timeouts;
 - arbitrary remote errors never returned verbatim to the model.
 
+## Bundled dependency checks
+
+Mail protocol and parsing dependencies are embedded in JavaScript; downstream `npm audit` and `overrides` cannot fully inspect or replace them. The build generates `lib/bundled-dependencies.json` from every JS sourcemap, verifies installed versions against the lockfile, and records output hashes. `npm run check:security` queries npm advisories and stops on high/critical findings or lookup failure; a version floor also protects against the known address-parser regressions. Packing and publication recheck the inventory against JS bytes in the tarball to reject files replaced after scanning.
+
+This checks published advisories, not unknown parsing vulnerabilities. Security updates require rebuilding and publishing the plugin, then updating the client assembly lock.
+
 ## Remaining risk
 
 - An app password may carry broader server permissions than the local read/send switches. Those switches are plugin policy and do not reduce the credential's authority in other clients.

package/docs/security-model.md

@@ -2,6 +2,12 @@
 
 **简体中文** | [English](security-model.en.md)
 
+## 打包依赖检查
+
+邮件协议与解析依赖内嵌在 JS 中，下游 `npm audit` 和 `overrides` 无法完整检查或替换它们。构建生成 `lib/bundled-dependencies.json`，从所有 JS sourcemap 提取实际依赖，核对安装版本和锁文件，并记录产物哈希。`npm run check:security` 查询 npm 安全公告，存在高危/严重漏洞或查询失败时停止；历史地址解析修复另有最低版本检查。打包和发布阶段再次核对清单与 tarball 内 JS，防止检查后换入未扫描的文件。
+
+这项检查覆盖已公开公告，不能保证不存在未知解析漏洞。升级安全修复时必须重建并发布新插件版本，再更新客户端装配锁。
+
 ## 保护目标
 
 1. 邮箱授权码不进入普通配置、浏览器回读、工具参数、会话结果或日志。

package/lib/bundled-dependencies.json

@@ -0,0 +1,356 @@
+{
+  "schemaVersion": 1,
+  "package": {
+    "name": "@eduwork/dsh-mail",
+    "version": "0.2.3"
+  },
+  "outputs": [
+    {
+      "path": "lib/client.js",
+      "sha256": "3eae8ca0c64899877fc478cdbba6d3d628213ccc58652c7a529ec52e2dcf05d1"
+    },
+    {
+      "path": "lib/index.js",
+      "sha256": "b36c8e969e2366c6dd18924ffbc9a83febacf5e4016bd36786b7b27e484016f0"
+    },
+    {
+      "path": "lib/mail-client-B2Ts6jxs.js",
+      "sha256": "316147200e37e1c83ae4a34342f09295e17269ed7722a9a8d50832ad6a0262d3"
+    },
+    {
+      "path": "lib/sanitize-wTSdOMM5.js",
+      "sha256": "f7267e48b7bc9833d52ac412278184cb2d4b3e81358021606483019182222b44"
+    }
+  ],
+  "dependencies": [
+    {
+      "path": "node_modules/@deepseek-ai/cosmokit",
+      "name": "@deepseek-ai/cosmokit",
+      "version": "1.8.6",
+      "integrity": "sha512-ZSD/fN52L498LBIOYwjIOlaLv5veY6ZEwI2yzvZUKQtctn0QAPqu8tKdJ+OF5+Tv6NBq1U+wJWH+QI6OGy5EvQ==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/@deepseek-ai/schemastery",
+      "name": "@deepseek-ai/schemastery",
+      "version": "3.18.5",
+      "integrity": "sha512-Mnobvqf9rHsZYv4g5edj5ddxS1oF1kIdSlz0DunUgnY3LWG5F26MqvH3YOOsSaodCgyzJ16OMN9O99/s5Crtdw==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/@pinojs/redact",
+      "name": "@pinojs/redact",
+      "version": "0.4.0",
+      "integrity": "sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/@selderee/plugin-htmlparser2",
+      "name": "@selderee/plugin-htmlparser2",
+      "version": "0.12.0",
+      "integrity": "sha512-oELmoyA6ML9jDRMV3kgcMQFKxUfBU0yFVn6yTctVaLT5ygXnxH52I3TZEgV9EhXJC68/uFvE5Daj1/25c0Xa/A==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/@zone-eu/mailsplit",
+      "name": "@zone-eu/mailsplit",
+      "version": "5.4.15",
+      "integrity": "sha512-c7ZpxauvF4AEkDJlKDYO7iMUtMuqJMBnDWNff1cyx+d7zaBVR3iFEmXhNHOVoMmVyVF3pTZLsLIJsEFKDldOAA==",
+      "license": "(MIT OR EUPL-1.1+)"
+    },
+    {
+      "path": "node_modules/atomic-sleep",
+      "name": "atomic-sleep",
+      "version": "1.0.0",
+      "integrity": "sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/deepmerge-ts",
+      "name": "deepmerge-ts",
+      "version": "8.0.2",
+      "integrity": "sha512-uqbvqLUMrc6p0MO+WBRtTxY55hmyh94WRwI5a++PZe54X+bfVh59FSN7uWCBCW1CCVjzjnrwzfI8zidE2obMMw==",
+      "license": "BSD-3-Clause"
+    },
+    {
+      "path": "node_modules/dom-serializer",
+      "name": "dom-serializer",
+      "version": "2.0.0",
+      "integrity": "sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/domelementtype",
+      "name": "domelementtype",
+      "version": "2.3.0",
+      "integrity": "sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==",
+      "license": "BSD-2-Clause"
+    },
+    {
+      "path": "node_modules/domhandler",
+      "name": "domhandler",
+      "version": "5.0.3",
+      "integrity": "sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==",
+      "license": "BSD-2-Clause"
+    },
+    {
+      "path": "node_modules/encoding-japanese",
+      "name": "encoding-japanese",
+      "version": "2.2.0",
+      "integrity": "sha512-EuJWwlHPZ1LbADuKTClvHtwbaFn4rOD+dRAbWysqEOXRc2Uui0hJInNJrsdH0c+OhJA4nrCBdSkW4DD5YxAo6A==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/entities",
+      "name": "entities",
+      "version": "4.5.0",
+      "integrity": "sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==",
+      "license": "BSD-2-Clause"
+    },
+    {
+      "path": "node_modules/he",
+      "name": "he",
+      "version": "1.2.0",
+      "integrity": "sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/html-to-text",
+      "name": "html-to-text",
+      "version": "10.0.1",
+      "integrity": "sha512-GiVhRI1BatGARSCmlXWNCjDT0cWrwBWoeduLoV0WSKAgaV/wa+hUWy5LiQLUs4UwiUrE52ZCMfBGiKD87TDPrg==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/htmlparser2",
+      "name": "htmlparser2",
+      "version": "10.1.0",
+      "integrity": "sha512-VTZkM9GWRAtEpveh7MSF6SjjrpNVNNVJfFup7xTY3UpFtm67foy9HDVXneLtFVt4pMz5kZtgNcvCniNFb1hlEQ==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/htmlparser2/node_modules/entities",
+      "name": "entities",
+      "version": "7.0.1",
+      "integrity": "sha512-TWrgLOFUQTH994YUyl1yT4uyavY5nNB5muff+RtWaqNVCAK408b5ZnnbNAUEWLTCpum9w6arT70i1XdQ4UeOPA==",
+      "license": "BSD-2-Clause"
+    },
+    {
+      "path": "node_modules/iconv-lite",
+      "name": "iconv-lite",
+      "version": "0.7.3",
+      "integrity": "sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/imapflow",
+      "name": "imapflow",
+      "version": "1.7.6",
+      "integrity": "sha512-xah3HpJKHzNbO780jy+v/Gjmly9WBgPH2dl5/nNs+Q5ofjpn4bUTz0PR2kcrHGlBRsjGFOC7NTYkStakGN8Fyg==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/ip-address",
+      "name": "ip-address",
+      "version": "10.7.5",
+      "integrity": "sha512-t2v0rkILYv9WXmSL7TpAaU3HXgaFYOPUcH3QHgwQ++gpJuH3bqyMy4Fvt/DJCTKwzH3Cf+bAp5W/mFL39KPLzA==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/leac",
+      "name": "leac",
+      "version": "0.7.0",
+      "integrity": "sha512-qMrZeyEekgdRQ9o6a4NAB2EQZrv827GJdn1vnapwSJ90hWRB4TzUSunvacPkxQ2TnNqHNI1/zSt0hlo0crG8Jw==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/libbase64",
+      "name": "libbase64",
+      "version": "1.3.0",
+      "integrity": "sha512-GgOXd0Eo6phYgh0DJtjQ2tO8dc0IVINtZJeARPeiIJqge+HdsWSuaDTe8ztQ7j/cONByDZ3zeB325AHiv5O0dg==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/libmime",
+      "name": "libmime",
+      "version": "5.4.2",
+      "integrity": "sha512-+IQnCOdPiufGBkOii+Ze8F7iniyBzOwvWDbn1DyExBpc9pT2B3IEMQi7GUc/PpqhNUh/sr1SG9UXDITQoR0VIA==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/libqp",
+      "name": "libqp",
+      "version": "2.1.1",
+      "integrity": "sha512-0Wd+GPz1O134cP62YU2GTOPNA7Qgl09XwCqM5zpBv87ERCXdfDtyKXvV7c9U22yWJh44QZqBocFnXN11K96qow==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/linkify-it",
+      "name": "linkify-it",
+      "version": "5.0.2",
+      "integrity": "sha512-ONTm2jCMAVZjgQa/Fy1kScXsuOoF5NPTsoFBdE1KVIZ2vAh/r9+Bqo+0jINCBYnavTPQZz38QzFTme79ENoN3Q==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/mailparser",
+      "name": "mailparser",
+      "version": "3.12.4",
+      "integrity": "sha512-FdoMF+S89/AQaJHY7StwTfABPHZ8Vey+CDyUno5j+TO0jF0UxM+la4Pe9MeqKqBO4Y9ZMB2eomdyg5i+jzpfZw==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/mailparser/node_modules/@zone-eu/mailsplit",
+      "name": "@zone-eu/mailsplit",
+      "version": "5.4.29",
+      "integrity": "sha512-CCUNycmUjrV5M0wNf23waWAt9eOHczhjLbUQS7k0FNJvR0py9VSqHFt+tSl/D0+XI73VLG0U+PwYtq9R0zsm9Q==",
+      "license": "(MIT OR EUPL-1.1+)"
+    },
+    {
+      "path": "node_modules/mailparser/node_modules/encoding-japanese",
+      "name": "encoding-japanese",
+      "version": "2.4.0",
+      "integrity": "sha512-PE0KjlsDy9JSsoU4C2Q8NXb1kC4c+bZRac9ZvHXUE4q1Ht63gScKMdEy9jst9+Fi3M4eDkqzkEhBZvix4blP2A==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/mailparser/node_modules/libbase64",
+      "name": "libbase64",
+      "version": "1.4.1",
+      "integrity": "sha512-Nyh3H90B3gRtrcxIe56Ayy7635J0jmh6AbxbQgQae8wrSPQMH5wFqJChiMTB13yKG512L3YspbA5DzumhFTITA==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/mailparser/node_modules/libmime",
+      "name": "libmime",
+      "version": "5.6.3",
+      "integrity": "sha512-cuTUW/Jybvh5O4/U9p61gyutHOjDtZyGQYuY99+bfnaFwqcDf2Nb+R6hMHY6DDen2H9wLKQSMpofWUgn2TI5JQ==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/mailparser/node_modules/libqp",
+      "name": "libqp",
+      "version": "3.0.1",
+      "integrity": "sha512-7QZxpPX25pga1WiMueduWxmrHMVBFrZPH6ZUaozGYa/H98JH6NVBSET3qVw+4NxzoraIW7rJ81YxSU9IalvCpg==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/nodemailer",
+      "name": "nodemailer",
+      "version": "10.2.1",
+      "integrity": "sha512-ZrDNsPFoDMwefNs7sJwrYiEJ/CG4ClJWDZv05iNJsEBWa8GRDry1QJHTJxsuTAY9eDDKjX4k+q3SxslXJOao7w==",
+      "license": "MIT-0"
+    },
+    {
+      "path": "node_modules/on-exit-leak-free",
+      "name": "on-exit-leak-free",
+      "version": "2.1.2",
+      "integrity": "sha512-0eJJY6hXLGf1udHwfNftBqH+g73EU4B504nZeKpz1sYRKafAghwxEJunB2O7rDZkL4PGfsMVnTXZ2EjibbqcsA==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/parseley",
+      "name": "parseley",
+      "version": "0.13.1",
+      "integrity": "sha512-uNBJZzmb60l6p6VWLTmevizNAGnE0xoSf1n0B4q3ntegDNzcS68NRCcBDZTcyXHxt2XhBChsCuqj4M+nChvE/A==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/peberminta",
+      "name": "peberminta",
+      "version": "0.10.0",
+      "integrity": "sha512-80B2AsU+I4Qdb0ZAPSfe9UwvGzwkM37IKIFEvdS3D/3Ndgv2bsuJ0bfG1+iEYO+l7Gfd4EUJmuRyq7efLgRMzQ==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/pino",
+      "name": "pino",
+      "version": "10.3.1",
+      "integrity": "sha512-r34yH/GlQpKZbU1BvFFqOjhISRo1MNx1tWYsYvmj6KIRHSPMT2+yHOEb1SG6NMvRoHRF0a07kCOox/9yakl1vg==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/pino-std-serializers",
+      "name": "pino-std-serializers",
+      "version": "7.1.0",
+      "integrity": "sha512-BndPH67/JxGExRgiX1dX0w1FvZck5Wa4aal9198SrRhZjH3GxKQUKIBnYJTdj2HDN3UQAS06HlfcSbQj2OHmaw==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/punycode.js",
+      "name": "punycode.js",
+      "version": "2.3.1",
+      "integrity": "sha512-uxFIHU0YlHYhDQtV4R9J6a52SLx28BCjT+4ieh7IGbgwVJWO+km431c4yRlREUAsAmt/uMjQUyQHNEPf0M39CA==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/quick-format-unescaped",
+      "name": "quick-format-unescaped",
+      "version": "4.0.4",
+      "integrity": "sha512-tYC1Q1hgyRuHgloV/YXs2w15unPVh8qfu/qCTfhTYamaw7fyhumKa2yGpdSo87vY32rIclj+4fWYQXUMs9EHvg==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/safe-stable-stringify",
+      "name": "safe-stable-stringify",
+      "version": "2.5.0",
+      "integrity": "sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/safer-buffer",
+      "name": "safer-buffer",
+      "version": "2.1.2",
+      "integrity": "sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/selderee",
+      "name": "selderee",
+      "version": "0.12.0",
+      "integrity": "sha512-b1YMh3+DHZp59DLna3qVwQ5iOla/nrI6mLBNW02XxU77M3046Df6VLkoaJyFz20VsGIG5kkp+FK0kg4K4HnUFw==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/smart-buffer",
+      "name": "smart-buffer",
+      "version": "4.2.0",
+      "integrity": "sha512-94hK0Hh8rPqQl2xXc3HsaBoOXKV20MToPkcXvwbISWLEs+64sBq5kFgn2kJDHb1Pry9yrP0dxrCI9RRci7RXKg==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/socks",
+      "name": "socks",
+      "version": "2.8.9",
+      "integrity": "sha512-LJhUYUvItdQ0LkJTmPeaEObWXAqFyfmP85x0tch/ez9cahmhlBBLbIqDFnvBnUJGagb0JbIQrkBs1wJ+yRYpEw==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/sonic-boom",
+      "name": "sonic-boom",
+      "version": "4.2.1",
+      "integrity": "sha512-w6AxtubXa2wTXAUsZMMWERrsIRAdrK0Sc+FUytWvYAhBJLyuI4llrMIC1DtlNSdI99EI86KZum2MMq3EAZlF9Q==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/thread-stream",
+      "name": "thread-stream",
+      "version": "4.2.0",
+      "integrity": "sha512-e2zZ96wSChazBsbENf/Pcm/4swHt2cEKQ92rhUjkL9GCKiTDJIaTBenjE/m9DXi0QBmTMDkFDdOomUy20A1tDQ==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/tlds",
+      "name": "tlds",
+      "version": "1.261.0",
+      "integrity": "sha512-QXqwfEl9ddlGBaRFXIvNKK6OhipSiLXuRuLJX5DErz0o0Q0rYxulWLdFryTkV5PkdZct5iMInwYEGe/eR++1AA==",
+      "license": "MIT"
+    },
+    {
+      "path": "node_modules/uc.micro",
+      "name": "uc.micro",
+      "version": "2.1.0",
+      "integrity": "sha512-ARDJmphmdvUk6Glw7y9DQ2bFkKBHwQHLi2lsaH6PPmz/Ka9sFOBsBluozhDltWmnv9u/cF6Rt87znRTPV+yp/A==",
+      "license": "MIT"
+    }
+  ]
+}

package/lib/index.js

@@ -1325,7 +1325,7 @@ async function passwordFor(ctx) {
 }
 async function loadMailClient(exec) {
 	exec.signal?.throwIfAborted();
-	const client = await import("./mail-client-Ds1-sIH5.js");
+	const client = await import("./mail-client-B2Ts6jxs.js");
 	exec.signal?.throwIfAborted();
 	return client;
 }