domma-cms 1.6.37 → 1.6.39

package/plugins/feedback/tests/api.test.js

@@ -11,6 +11,7 @@ import os from 'node:os';
 import path from 'node:path';
 import Fastify from 'fastify';
 import feedback from '../plugin.js';
+import {allReports, forget} from '../lib/receiver.js';
 import {getRoleHierarchy, getRoleLevel, load as loadRoles} from '../../../server/services/roles.js';
 
 const PLUGINS = path.resolve('config/plugins.json');
@@ -20,6 +21,8 @@ let savedPlugins;
 let manager;
 let dataDir;
 let managerUp = true;
+// The manager's settings as stored; the plugin reads them per request (1.1.7).
+const managerSettings = {perSiteMax: 6, perSiteMinutes: 10};
 const notices = [];
 const siteNotices = [];
 // Roles are data: the level-0 role and one below it, whatever this checkout calls them.
@@ -38,7 +41,7 @@ async function site({token, user}) {
     const app = Fastify();
     await app.register(feedback, {
         auth: {authenticate: async (req) => { req.user = user; }, requirePermission: () => async () => {}},
-        settings: {}, mode: 'sender', timer: false, dataDir: await fs.mkdtemp(path.join(dataDir, 'site-')),
+        settings: {}, readSettings: async () => ({}), mode: 'sender', timer: false, dataDir: await fs.mkdtemp(path.join(dataDir, 'site-')),
         env: {MANAGER_URL: 'http://127.0.0.1:8192/', FLEET_TOKEN: token, SITE_SLUG: TOKENS[token] || 'x'},
         fetch: fetchInto(manager),
         hooks: {notify: (n) => siteNotices.push(n), registerNotificationSource() {}}
@@ -66,7 +69,7 @@ before(async () => {
         auth: {authenticate: async (req) => { req.user = req.headers['x-test-user'] ? JSON.parse(req.headers['x-test-user']) : {id: 'v1', name: 'Vendor', role: TOP}; },
             requirePermission: () => async () => {}},
         prefix: '/api/plugins/feedback', dataDir: await fs.mkdtemp(path.join(dataDir, 'manager-')),
-        settings: {perSiteMax: 6, perSiteMinutes: 10}, mode: 'receiver',
+        settings: {perSiteMax: 6, perSiteMinutes: 10}, readSettings: async () => ({...managerSettings}), mode: 'receiver',
         slugFromToken: async (h) => TOKENS[String(h || '').replace(/^Bearer\s+/i, '')] || null,
         siteNames: () => ({acme: 'Acme Ltd', beta: 'Beta Co'}),
         hooks: {notify: (n) => notices.push(n), registerNotificationSource() {}}
@@ -137,6 +140,13 @@ test('the per-site throttle and the body limit', async () => {
     assert.equal((await call(manager, 'POST', '/api/plugins/feedback/fleet/submit', {title: 'x', description: 'y'}, h)).status, 429);
     assert.equal((await call(manager, 'POST', '/api/plugins/feedback/fleet/submit', {title: 'x', description: 'y'},
         {authorization: 'Bearer tok-beta'})).status, 201, 'another site is unaffected');
+    // A higher limit saved in the cog applies to the next report - no restart.
+    managerSettings.perSiteMax = 8;
+    for (let i = 0; i < 2; i++) {
+        assert.equal((await call(manager, 'POST', '/api/plugins/feedback/fleet/submit', {title: `m${i}`, description: 'y'}, h)).status, 201, 'live limit');
+    }
+    assert.equal((await call(manager, 'POST', '/api/plugins/feedback/fleet/submit', {title: 'x', description: 'y'}, h)).status, 429);
+    managerSettings.perSiteMax = 6;
     const big = await manager.inject({method: 'POST', url: '/api/plugins/feedback/fleet/submit',
         headers: {'content-type': 'application/json', authorization: 'Bearer tok-acme'},
         payload: JSON.stringify({title: 't', description: 'z'.repeat(40 * 1024)})});
@@ -240,7 +250,7 @@ test('a site the manager did not start cannot send, and says so', async () => {
     const app = Fastify();
     await app.register(feedback, {
         auth: {authenticate: async (req) => { req.user = {id: 'u', name: 'U'}; }, requirePermission: () => async () => {}},
-        settings: {}, mode: 'sender', timer: false, env: {}, dataDir: await fs.mkdtemp(path.join(dataDir, 'lone-')), hooks: {}
+        settings: {}, readSettings: async () => ({}), mode: 'sender', timer: false, env: {}, dataDir: await fs.mkdtemp(path.join(dataDir, 'lone-')), hooks: {}
     });
     assert.equal((await call(app, 'GET', '/mode')).body.connected, false);
     assert.equal((await call(app, 'POST', '/send', {title: 't', description: 'd'})).status, 409);
@@ -309,3 +319,115 @@ test('the manager\'s level-0 role files its own feedback straight into the inbox
     // No site token can speak as the manager.
     assert.equal((await call(manager, 'GET', `${P}/fleet/mine`, null, {authorization: 'Bearer _manager'})).status, 401);
 });
+
+test('the inbox memory: polls share one read, and every write is seen by the very next read', async () => {
+    const P = '/api/plugins/feedback';
+    const acme = await site({token: 'tok-acme', user: {id: 'u1', name: 'Sam', email: 'sam@acme.test', role: 'admin'}});
+    forget();
+    const first = await allReports();
+    assert.equal(await allReports(), first, 'a second read inside the window is the same read');
+    await call(manager, 'GET', `${P}/count`);
+    // A site's report arrives: the badge and the inbox show it at once, not in 30 s.
+    const sent = await call(acme, 'POST', '/send', {type: 'idea', title: 'Cache me', description: 'A fresh read, please.'});
+    assert.equal(sent.status, 201);
+    assert.notEqual(await allReports(), first, 'the write retired the memory');
+    const inbox = (await call(manager, 'GET', `${P}/reports`)).body.reports;
+    const got = inbox.find(r => r.title === 'Cache me');
+    assert.ok(got, 'the new report is in the inbox straight away');
+    assert.ok((await call(manager, 'GET', `${P}/count`)).body.details.items.some(i => i.text === 'Cache me'), 'and on the badge');
+    // The manager's own change is visible on the next list, and a delete leaves no ghost.
+    assert.equal((await call(manager, 'PUT', `${P}/reports/${got.id}`, {status: 'acknowledged'})).status, 200);
+    assert.equal((await call(manager, 'GET', `${P}/reports`)).body.reports.find(r => r.id === got.id).status, 'acknowledged');
+    assert.equal((await call(manager, 'DELETE', `${P}/reports/${got.id}`)).status, 200);
+    assert.ok(!(await call(manager, 'GET', `${P}/reports`)).body.reports.some(r => r.id === got.id), 'gone from the very next read');
+    assert.ok(!(await call(acme, 'GET', '/sent')).body.reports.some(r => r.title === 'Cache me' && !r.local), 'and from the site\'s view');
+});
+
+// ---- Attachments (1.1.6) ----
+
+import multipart from '@fastify/multipart';
+
+/** One file as a multipart form. */
+function form(name, type, content) {
+    const b = '----fb' + Math.random().toString(16).slice(2);
+    return {
+        headers: {'content-type': `multipart/form-data; boundary=${b}`},
+        payload: Buffer.concat([Buffer.from(`--${b}\r\nContent-Disposition: form-data; name="file"; filename="${name}"\r\nContent-Type: ${type}\r\n\r\n`),
+            Buffer.from(content), Buffer.from(`\r\n--${b}--\r\n`)])
+    };
+}
+
+/** A site app that can take uploads (the engine registers multipart for every plugin). */
+async function siteWithUploads(token, user) {
+    const app = Fastify();
+    await app.register(multipart, {limits: {fileSize: 10 * 1024 * 1024}});
+    await app.register(feedback, {
+        auth: {authenticate: async (req) => { req.user = user; }, requirePermission: () => async () => {}},
+        settings: {}, readSettings: async () => ({}), mode: 'sender', timer: false, dataDir: await fs.mkdtemp(path.join(dataDir, 'site-')),
+        env: {MANAGER_URL: 'http://127.0.0.1:8192/', FLEET_TOKEN: token, SITE_SLUG: TOKENS[token]},
+        fetch: fetchInto(manager), hooks: {}
+    });
+    return app;
+}
+
+test('a screenshot travels with its report: uploaded on the site, sent after it, opened in the inbox', async () => {
+    const P = '/api/plugins/feedback';
+    const acme = await siteWithUploads('tok-acme', {id: 'u1', name: 'Sam', email: 'sam@acme.test'});
+    const png = Buffer.concat([Buffer.from([0x89, 0x50, 0x4e, 0x47]), Buffer.alloc(3000, 7)]);
+    const up = await acme.inject({method: 'POST', url: '/attachments', ...form('C:\\Users\\sam\\shot.png', 'image/png', png)});
+    assert.equal(up.statusCode, 201, up.body);
+    const a = up.json();
+    assert.equal(a.name, 'shot.png', 'the last path segment only');
+    assert.equal(a.size, png.length);
+
+    // Refused: a type that can carry script, and an id this site never made.
+    assert.equal((await acme.inject({method: 'POST', url: '/attachments', ...form('x.svg', 'image/svg+xml', '<svg onload=alert(1)>')})).statusCode, 400);
+    assert.equal((await call(acme, 'POST', '/send', {title: 't', description: 'd', attachments: [{...a, id: '0f8fad5b-d9cb-469f-a165-000000000000'}]})).status, 400);
+
+    // Sent: the report says what is coming, with the size the SITE measured (not the form's).
+    const sent = await call(acme, 'POST', '/send', {type: 'bug', title: 'With a picture', description: 'See the shot.', attachments: [{...a, size: 1, type: 'text/plain'}]});
+    assert.equal(sent.status, 201, JSON.stringify(sent.body));
+    const report = (await call(manager, 'GET', `${P}/reports`)).body.reports.find(r => r.title === 'With a picture');
+    assert.deepEqual(report.attachments.map(x => [x.name, x.type, x.size, x.stored]), [['shot.png', 'image/png', png.length, true]]);
+
+    const file = await manager.inject({method: 'GET', url: `${P}/reports/${report.id}/attachments/${a.id}`});
+    assert.equal(file.statusCode, 200);
+    assert.equal(file.headers['content-type'], 'image/png');
+    assert.equal(file.headers['x-content-type-options'], 'nosniff');
+    assert.ok(Buffer.compare(file.rawPayload, png) === 0, 'the same bytes');
+    // The site sees the file in its list, and opens its own copy.
+    const mine = (await call(acme, 'GET', '/sent')).body.reports.find(r => r.title === 'With a picture');
+    assert.equal(mine.attachments[0].stored, true);
+    assert.equal((await acme.inject({method: 'GET', url: `/attachments/${a.id}`})).statusCode, 200);
+
+    // The fleet route: another site's token, an unannounced file and a wrong size are all refused.
+    const raw = (tok, att, body) => manager.inject({method: 'POST', url: `${P}/fleet/attach/${report.id}/${att}`,
+        headers: {authorization: `Bearer ${tok}`, 'content-type': 'application/octet-stream'}, payload: body});
+    assert.equal((await raw('tok-beta', a.id, png)).statusCode, 404, 'not beta\'s report');
+    assert.equal((await raw('tok-acme', '0f8fad5b-d9cb-469f-a165-000000000000', png)).statusCode, 404);
+    assert.equal((await raw('tok-acme', a.id, png)).statusCode, 200, 'already here: a retry is fine');
+
+    // Delete the report: its files go too.
+    assert.equal((await call(manager, 'DELETE', `${P}/reports/${report.id}`)).status, 200);
+    assert.equal((await manager.inject({method: 'GET', url: `${P}/reports/${report.id}/attachments/${a.id}`})).statusCode, 404);
+    await acme.close();
+});
+
+test('a file attached while the manager restarts waits with its report, then both go', async () => {
+    const P = '/api/plugins/feedback';
+    const acme = await siteWithUploads('tok-acme', {id: 'u1', name: 'Sam'});
+    const up = (await acme.inject({method: 'POST', url: '/attachments', ...form('log.txt', 'text/plain', 'line one\nline two')})).json();
+    managerUp = false;
+    try {
+        const r = await call(acme, 'POST', '/send', {type: 'bug', title: 'Offline with a log', description: 'd', attachments: [up]});
+        assert.equal(r.body.state, 'waiting');
+        const local = (await call(acme, 'GET', '/sent')).body.reports.find(x => x.title === 'Offline with a log');
+        assert.equal(local.attachments[0].name, 'log.txt');
+    } finally { managerUp = true; }
+    await call(acme, 'GET', '/sent');
+    const report = (await call(manager, 'GET', `${P}/reports`)).body.reports.find(r => r.title === 'Offline with a log');
+    assert.equal(report.attachments[0].stored, true);
+    const file = await manager.inject({method: 'GET', url: `${P}/reports/${report.id}/attachments/${up.id}`});
+    assert.equal(file.body, 'line one\nline two');
+    await acme.close();
+});

package/plugins/feedback/tests/settings.test.js

@@ -0,0 +1,59 @@
+/**
+ * The settings cog (1.1.7): each side keeps its own keys, values are whole
+ * numbers in range, and the server reads them when used - a changed
+ * per-site limit applies to the next report without a restart.
+ */
+import {test, after} from 'node:test';
+import assert from 'node:assert/strict';
+import fs from 'node:fs/promises';
+import os from 'node:os';
+import path from 'node:path';
+import Fastify from 'fastify';
+import feedback from '../plugin.js';
+import {cleanSettings} from '../lib/shape.js';
+
+const dirs = [];
+after(async () => { for (const d of dirs) await fs.rm(d, {recursive: true, force: true}); });
+const tmp = async () => { const d = await fs.mkdtemp(path.join(os.tmpdir(), 'feedback-set-')); dirs.push(d); return d; };
+
+test('cleanSettings keeps one side\'s keys, in range, else current, else default', () => {
+    assert.deepEqual(cleanSettings({syncMinutes: '30', perSiteMax: 99}, {}, 'sender'), {syncMinutes: 30});
+    assert.deepEqual(cleanSettings({syncMinutes: 2}, {syncMinutes: 90}, 'sender'), {syncMinutes: 90}, 'below 5 keeps what is there');
+    assert.deepEqual(cleanSettings({perSiteMax: 0, perSiteMinutes: 'x'}, {}, 'receiver'), {perSiteMax: 10, perSiteMinutes: 10});
+    assert.deepEqual(cleanSettings({perSiteMax: 3, perSiteMinutes: 1.5, syncMinutes: 9}, {perSiteMinutes: 20}, 'receiver'), {perSiteMax: 3, perSiteMinutes: 20});
+});
+
+async function receiver(store) {
+    const app = Fastify();
+    await app.register(feedback, {
+        auth: {authenticate: async (req) => { req.user = {id: 'v1', role: 'x'}; }, requirePermission: () => async () => {}},
+        prefix: '/api/plugins/feedback', dataDir: await tmp(), mode: 'receiver',
+        readSettings: async () => ({...store}), writeSettings: async (next) => { Object.assign(store, next); },
+        slugFromToken: async () => 'acme', siteNames: () => ({acme: 'Acme'}), hooks: {}
+    });
+    return app;
+}
+
+test('the manager\'s GET/PUT /settings show and save its own two keys', async () => {
+    const store = {syncMinutes: 15, perSiteMax: 10, perSiteMinutes: 10};
+    const app = await receiver(store);
+    const got = (await app.inject({url: '/api/plugins/feedback/settings'})).json();
+    assert.deepEqual(got, {side: 'receiver', settings: {perSiteMax: 10, perSiteMinutes: 10}});
+    const put = await app.inject({method: 'PUT', url: '/api/plugins/feedback/settings', payload: {perSiteMax: 2, syncMinutes: 999}});
+    assert.equal(put.statusCode, 200);
+    assert.equal(store.perSiteMax, 2);
+    assert.equal(store.syncMinutes, 15, 'the other side\'s key is not touched');
+    await app.close();
+});
+
+test('a site\'s settings route is for administrators', async () => {
+    const app = Fastify();
+    await app.register(feedback, {
+        auth: {authenticate: async (req) => { req.user = {id: 'u', role: 'user'}; }, requirePermission: () => async () => {},
+            requireAdmin: async (req, reply) => reply.code(403).send({error: 'Forbidden'})},
+        mode: 'sender', timer: false, env: {}, dataDir: await tmp(), readSettings: async () => ({syncMinutes: 60}), hooks: {}
+    });
+    assert.equal((await app.inject({url: '/settings'})).statusCode, 403);
+    assert.equal((await app.inject({method: 'PUT', url: '/settings', payload: {syncMinutes: 5}})).statusCode, 403);
+    await app.close();
+});

package/plugins/feedback/tests/shape.test.js

@@ -3,7 +3,7 @@ import assert from 'node:assert/strict';
 import {
     buildPayload, cleanSubmission, cleanUpdate, createThrottle, issueDescription, receivedReport, senderView, statusFromIssue
 } from '../lib/shape.js';
-import {mergeReports} from '../lib/sender.js';
+import {createOutbox as createFbOutbox, droppedByManager, mergeReports} from '../lib/sender.js';
 
 test('a submission is cleaned, and says nothing about who sent it', () => {
     assert.equal(cleanSubmission({title: '  ', description: 'x'}).error, 'Give it a short title.');
@@ -85,3 +85,89 @@ test('the list merges the manager view with what is still waiting', () => {
     assert.equal(mergeReports(outbox, remote, {e1: '2026-09-27T12:00:00Z'})[1].unread, false, 'read once seen');
     assert.equal(mergeReports(outbox, null, {}).length, 2, 'manager unreachable: the outbox copy stands in');
 });
+
+// ---- Attachments (1.1.6) ----
+
+import {ATTACHMENTS, cleanAttachment, cleanAttachments, safeFileName} from '../lib/shape.js';
+import {createStore} from '../lib/attachments.js';
+import fs from 'node:fs';
+import os from 'node:os';
+import path from 'node:path';
+
+const ID = '0f8fad5b-d9cb-469f-a165-70867728950e';
+
+test('an attachment: a known type, a server-made id, a size within the cap, a safe name', () => {
+    assert.deepEqual(cleanAttachment({id: ID, name: 'shot.png', type: 'image/png', size: 10, extra: 'x'}), {id: ID, name: 'shot.png', type: 'image/png', size: 10});
+    assert.equal(cleanAttachment({id: ID, name: 'x.svg', type: 'image/svg+xml', size: 10}), null, 'SVG can carry script');
+    assert.equal(cleanAttachment({id: ID, name: 'x.html', type: 'text/html', size: 10}), null);
+    assert.equal(cleanAttachment({id: '../../etc/passwd', name: 'x.png', type: 'image/png', size: 10}), null, 'the id becomes a file name');
+    assert.equal(cleanAttachment({id: ID, name: 'x.png', type: 'image/png', size: ATTACHMENTS.maxBytes + 1}), null);
+    assert.equal(cleanAttachment({id: ID, name: 'x.png', type: 'image/png', size: 0}), null);
+    assert.equal(cleanAttachment({id: ID, name: 'x.png', type: 'IMAGE/PNG; q=1', size: 3}).type, 'image/png');
+    assert.equal(cleanAttachment({id: ID, name: '..\\\\..\\\\evil".png', type: 'image/png', size: 3}).name, 'evil_.png', 'last segment, no quotes');
+    assert.equal(safeFileName('', 'pdf'), 'file.pdf');
+    assert.equal(safeFileName('...hidden'), 'hidden');
+});
+
+test('a report carries at most three files, each once, and the manager marks them not yet stored', () => {
+    const many = [1, 2, 3, 4].map(n => ({id: `${ID.slice(0, -1)}${n}`, name: `f${n}.png`, type: 'image/png', size: 5}));
+    assert.equal(cleanAttachments([...many, many[0]]).length, 3);
+    assert.equal(cleanAttachments([many[0], many[0]]).length, 1);
+    assert.deepEqual(cleanAttachments('nope'), []);
+    const {report} = cleanSubmission({title: 't', description: 'd', attachments: [many[0], {id: 'bad', type: 'image/png', size: 1}]});
+    assert.equal(report.attachments.length, 1);
+    const {data} = receivedReport({title: 't', description: 'd', attachments: [many[0]]}, 'acme');
+    assert.equal(data.attachments[0].stored, false);
+    const view = senderView({id: 'e1', data: {...data, attachments: [{...data.attachments[0], stored: true, secret: 'x'}]}});
+    assert.deepEqual(view.attachments, [{id: many[0].id, name: 'f1.png', type: 'image/png', size: 5, stored: true}]);
+});
+
+test('control characters are stripped, so nothing is too big to ever send', () => {
+    const {report} = cleanSubmission({title: 't\u0001', description: `${'\u0001'.repeat(8000)}real`});
+    assert.equal(report.title, 't');
+    assert.equal(report.description, 'real');
+});
+
+test('the file store: private files, read back by id, unclaimed ones tidied', () => {
+    const root = fs.mkdtempSync(path.join(os.tmpdir(), 'fb-files-'));
+    try {
+        const files = createStore(path.join(root, 'attachments'));
+        const a = files.save({id: ID, name: 'a.txt', type: 'text/plain', size: 2}, Buffer.from('hi'));
+        assert.equal(files.read(a).toString(), 'hi');
+        assert.deepEqual(files.meta(ID), a);
+        assert.equal(fs.statSync(path.join(root, 'attachments', `${ID}.txt`)).mode & 0o777, 0o600);
+        assert.equal(fs.statSync(path.join(root, 'attachments')).mode & 0o777, 0o700);
+        assert.equal(files.meta('../x'), null);
+        assert.throws(() => files.save(a, Buffer.from('x'), '../up'), /folder/);
+        // A day old and named by no report: gone. Named by one: kept.
+        const old = new Date(Date.now() - 2 * 86400_000);
+        fs.utimesSync(path.join(root, 'attachments', `${ID}.json`), old, old);
+        fs.writeFileSync(path.join(root, 'attachments', `${ID}.json`), JSON.stringify({...a, at: old.toISOString()}));
+        fs.utimesSync(path.join(root, 'attachments', `${ID}.json`), old, old);
+        assert.equal(files.prune({keep: new Set([ID])}), 0);
+        assert.equal(files.prune(), 1);
+        assert.equal(files.read(a), null);
+    } finally { fs.rmSync(root, {recursive: true, force: true}); }
+});
+
+test('a report deleted on the manager is forgotten by the site (its text, then its files)', async () => {
+    const {mkdtempSync, rmSync} = await import('node:fs');
+    const {tmpdir} = await import('node:os');
+    const {join} = await import('node:path');
+    assert.equal(droppedByManager({ref: 'a', state: 'sent'}, [{ref: 'b'}]), true);
+    assert.equal(droppedByManager({ref: 'a', state: 'sent'}, [{ref: 'a'}]), false);
+    assert.equal(droppedByManager({ref: 'a', state: 'waiting'}, []), false, 'never sent: the manager cannot have it yet');
+    assert.equal(droppedByManager({ref: 'a', state: 'sent'}, null), false, 'manager unreachable: keep everything');
+    const dir = mkdtempSync(join(tmpdir(), 'fb-outbox-'));
+    try {
+        const box = createFbOutbox(dir);
+        for (const ref of ['kept', 'gone', 'wait']) box.add({ref, attachments: [{id: `${ref}-file`}]});
+        box.mark('kept', {state: 'sent'});
+        box.mark('gone', {state: 'sent'});
+        assert.equal(box.forgetDropped(null), 0);
+        assert.equal(box.forgetDropped([{ref: 'kept'}]), 1);
+        assert.deepEqual(box.all().map(i => i.ref), ['kept', 'wait']);
+    } finally {
+        rmSync(dir, {recursive: true, force: true});
+    }
+});

package/plugins/free-tier.lock.json

@@ -1,11 +1,11 @@
 {
   "note": "Written by `make sync-free-tier` in dcms-marketplace. Do not edit these plugins here - edit them there and sync.",
-  "source": "dcms-marketplace@b1edb76",
+  "source": "dcms-marketplace@0525295",
   "plugins": {
     "blog": {
-      "version": "1.9.6",
+      "version": "1.9.7",
       "files": {
-        "CLAUDE.md": "5164b58785b979b828a707ac94088d80eb1a1655fc48a23404aeca8cef316e70",
+        "CLAUDE.md": "641e27358f95bf4415e9cfc507645d45f4c6a15f1ca9ebef753068f43ec867ff",
         "admin/css/index.css": "6142a6b756e1218157842528830b1e84f592f0b84b7d5ce6449db421b6f4b039",
         "admin/templates/blog.html": "a6054c1febe764bb1edf5c9e466d44a9080d9c83ba5486437b7a8244acf5ba54",
         "admin/templates/categories.html": "ab7d6fc2fedd48876c585bc216a1532b3bdd78c946dee976c1171bfe4664feb6",
@@ -43,15 +43,16 @@
         "config.js": "ee67396262762f5c31269d258affd75f7392a3e364f72f7792c2f1cdafd94bba",
         "docs/guide.md": "d9f70afe4612a2464fc537a0348e987873d09cc30ce44692a22cf79c40a4c0b4",
         "lib/access.js": "af47440c7233a56000641a3231d7e9ff81b12f40dfb9528aa6dd4e2dd9bca8df",
+        "lib/cache.js": "5623745e580e0d5ea4ca48ee528427a6efabafec777f8607154dcb662f9147eb",
         "lib/layouts.js": "dbb6ae9e514ccaf600a732702925b905131dea166d90fe759a62b6652e78e1de",
         "lib/nav-link.js": "6a8f9368bb8aee1c21e90fb335a691859cb9a9bc250c2b9167a33ca9189fa2ff",
         "lib/notices.js": "a9a2918ee6f5f7e0bbaeced0d3539584279bdbe68d15472a8615bdddb4ef905b",
-        "lib/page.js": "ca84803672c3815c9606402bd24e9c6bdef167f7a342eb6d3d51a8b9a9c692ba",
+        "lib/page.js": "02ef5b0e5aadfe5a8a5de4b7471518b24193b1dad2bda23bea06c6cc1e4743e7",
         "lib/render.js": "0e97c6a950bc962c8d8ea4b2f21d06cb73fbcdc738d8942d6935d01309a29b1d",
         "lib/samples.js": "e8cdb77ce22e43937707f6854d3a5cb722437dc584e22ac7b24480bef686cf85",
-        "plugin.js": "278d269eb8fb6df2f64f23ae26b5e5b5fe96e7f9d07241539d261d66d4ccd7f7",
-        "plugin.json": "ff7466d42c41dd64117861d4d88914be1d367854ade67cb4ca42d8b42068bcf4",
-        "plugin.public.js": "33387fa7636b877dec3881b0698918bc1a7379d5690d010c826aedc4091284d8",
+        "plugin.js": "4a2b1cd87a7d91889d3a7d87bc1ada2909a5127e95fc2e5448fd814b16ee83bb",
+        "plugin.json": "b5c2ab90d78c3cb8c4cfe7b72f66e3c5237fbbb48bb640b4490b3afbd1d45b10",
+        "plugin.public.js": "2aac0a56584e7aec30000f7718256d7ae4cf889b821f44d4848b435ed031bd39",
         "public/blog.css": "fd733e6b624190da1e70dc1b6613e2376efd7f7570a28fab311d81006d03d960",
         "public/blog.js": "d01c72a9834dcc7c5241923371f2b164ac30d20ac9f1a5c5dc5b71fa3cb09f08",
         "public/samples/aurora.svg": "feb29e2b46465913fc29de9eda221b00b1541f1fa3ea7120f0c1d1cd11a9a4f6",
@@ -65,6 +66,7 @@
         "templates/index.html": "3c2cf8a4ffde8599d451f6d00b736aeba42fd073b726ada3b0ffe4d56e1ef0f4",
         "templates/post.html": "28e9f06071115ecc4fbba007b35782732bf12ef72528525893d424e3c4f0313f",
         "tests/access.test.js": "65b760910117c3a44195543acdcff91074f39b4e5567911a2bd8676204152cb2",
+        "tests/cache.test.js": "f823d9ff65c5b5594a8e3d1d3b598cc3524f10885ddf34017cf0a9364878a98f",
         "tests/comment-notices.test.js": "34026cc9a2a4746cf87bc41df8be849fadaa43091a72ac2aa1d06c1f437bf618",
         "tests/layouts.test.js": "554cff8194bd650cfb5f2a83c1f51c25f427c07f7dbfdc2ad9ad69bb38fca6a0",
         "tests/nav-link.test.js": "d36e33ad7483abca27ae6e2098ad2f75bafa18d91f3beba70372ebe6b9b88994",
@@ -73,22 +75,22 @@
       }
     },
     "booking": {
-      "version": "1.6.3",
+      "version": "1.6.4",
       "files": {
-        "CLAUDE.md": "1709e58b31a3ac7c1cbadbe6d4f8b0a01cf696b72981ccfa14cd1861133fac85",
+        "CLAUDE.md": "76debc74ef2fcf4e9a78bb9256ade4ffbc179541876f6e58d00a8cc0e0e216e1",
         "admin/css/index.css": "4f7731921c0c5038cb1566a6ab2d43ffc35bf9b161e58f87a0cff423e81b47fa",
         "admin/lib/details.js": "8b37536bfa9ccfcc5265cc957ba8266d3f5f777133e7c0946ae49540f1c80e3c",
-        "admin/lib/diary-layout.js": "d818c79001fb9a9ecc15c96239ba961b0a1d98b9e8fce903eefb57d85adf2a73",
+        "admin/lib/diary-layout.js": "d0e36674ff454e5217b02c3ef3b820e4dece97a62df618a6052016dfeefab1c9",
         "admin/lib/extension-sections.js": "0588ad47660e511b0dd8077bb9c3999c775d97597333a75e87ee12d915bbf00b",
         "admin/lib/kit.js": "b69b02172d76ef80879da3f003cc1e687c6149626c9e58af51729c2e4a3ff959",
         "admin/templates/booking.html": "20b9a3bfe3e5d5bbee613f29be99551b12790fb38f80d119585360cc38e9ec57",
         "admin/views/booking.js": "4eddf6c0b60dbbba4c6e35352df247a3d34b66ee1d43c51fe2d53f894707348f",
         "admin/views/bookings.js": "bf17db82ed4d2f5c29ac924dd60dc0b84c8bd9c8ce32da6cbb011527699a56a6",
-        "admin/views/diary.js": "9e8976e67c2232d353b3d9a1ef0d0503cc4d06b710d54d0cba84fb5b796fdfe9",
+        "admin/views/diary.js": "6cdbf81106a5b8ec2ed905f2e30df8ee626db2db51241bc9b41499ea2ed6ad27",
         "admin/views/panels.js": "1d269d90553a5482fd6ebd18180cb736011770f0204d5c1306948abcb4b676b2",
-        "admin/views/people.js": "58cb9cc550b48c959a5572a4d25650ea2b32b658c9d0bf4c244e4abe0277c211",
+        "admin/views/people.js": "11e9bb811378a288bb44e879d84251b8e9aaeee68490d64f4db44d8727c38376",
         "admin/views/services.js": "122326d222ed16dc8ec903fef6f62f6a7638c31d73c4612b7a8c2ced38358068",
-        "admin/views/settings.js": "299297b47a6509986276a859807a33ea225681d28e0e9cd06cdf36b0f6ec0c11",
+        "admin/views/settings.js": "958a4f99df843fbcb884adeab4f768ebb2338fff5c361e8bbad3ddc90ef992e0",
         "collections/booking-bookables.json": "9f1f305eceac3d880413d5477a631e48c1fed7ff389c434f34651f4082ca1a1c",
         "collections/booking-bookings.json": "fa0b15cc81b4a2114734a0bc8adc4b4d25049d16cf62549b83634cdbeb543b52",
         "collections/booking-services.json": "cecb500a9215a0eba894e6b4c9ae78f5fbeb209830d07d47050c56c75143f66a",
@@ -100,7 +102,7 @@
         "lib/mail.js": "cad8f409df62d6e42f0f4024ec364bbe018a62b842fa3f7c38786fd4e7f92408",
         "lib/store.js": "7aa7967e4694e5a3b85378f60302e5a47394b1d90c7dd86e09578156f1c13e03",
         "plugin.js": "4a303855a5a7f746e07e45a937dfeac8984dc9254c2f9b1a60b6f6306912ed84",
-        "plugin.json": "d099b136335028b2bca2bd21065c6ae343099f71635f9c793c95567a6e8a63db",
+        "plugin.json": "8d90802c7c8c3681903b69200b19af88d326242bc33742bb8c61777c8b99775d",
         "plugin.public.js": "4d5b4e8ad6943182ee3b6c6e6f6762a2d3f676d8d7ee363fcb07bd47d3d6532e",
         "public/booking.css": "8b88989fdd04e50efc1688a2f32fe2e422299d7d13b81bb8fce0cc162fa99df6",
         "public/booking.js": "7dfc3d205696967013886567f67a867443c2e370bac29019d69911d695fdbade",
@@ -109,43 +111,47 @@
         "public/lib/slots.js": "6472e530f3f521e7a08625ed2ee86802a9065cbf2f97c2c7601229f5f032dc07",
         "public/lib/time.js": "48e13a23e3d7a4916e2097e8f87c03a87d37b71c4ef037a5a16143c6a4185c41",
         "templates/booking.html": "a4995de46dfdab7e692b56f21347f29c76320cf3b0477889dc3c5d14e0b6dcd7",
-        "tests/admin-diary.test.js": "4e34b447d62b41272ceec49bad9d491ae00dd04f4760d8a7a3046be1912f4abe",
+        "tests/admin-diary.test.js": "6bd117af798e748234c94e4e66339ff1ec3bba9633790a2a5fd291f64c30e484",
         "tests/api.test.js": "efb3767f7efde08c11c8edcb5753889773b421188798f725aff0e4e533860aff",
         "tests/public.test.js": "0b7b626d60df5a3d73d7c0077b73f59b62a9fded98ce84a8d93cd32cd0333159",
         "tests/pure.test.js": "8ba0c8f76b4c9efcc422f39ff29509612544d81f760025a4b9a5594af14e7bcf"
       }
     },
     "feedback": {
-      "version": "1.1.4",
+      "version": "1.1.8",
       "files": {
-        "CLAUDE.md": "af921af5c262cac7ac784fa86b780e4f31dac1baa510b4b3fd32a52521d4cccf",
-        "admin/css/index.css": "f2e934c8b94f883340148aba17945dfa725eeb2b0ddb6cabb8a8c17e2487c1de",
-        "admin/lib/kit.js": "913761a2cc19b69bed3f05267d45fdb1c08338b1edb081b9272231733d9b5790",
+        "CLAUDE.md": "8666d4ef8d8620f0fc20f544a4c1915cddc21370cbc27a7f854ebfe41f4cfe1d",
+        "admin/css/index.css": "c8f827ad62386134e87bc05bd2c8e24f41184402b0a5a17e7250d749240c34c0",
+        "admin/lib/kit.js": "502d2d090e8aaeda03034864b4e3cc0d9bbf7e8fba29b6e4916a8a758c0cd54d",
+        "admin/lib/settings.js": "6e3fe9103fcbf7acb52211698ca408fac067e061100e580a9a3011cd76bdfba3",
         "admin/templates/feedback.html": "a366dce78f6c3e84a7cb0ac63eba53e1980a4eb44154496a0536f5214c5bb36f",
-        "admin/views/feedback.js": "768d76da473dc4905e8e8e9133a715c1db8c3cb53d91756b5c7d067a92971463",
-        "admin/views/inbox.js": "649b86844230be73939d82aa7c97432252c0b119baa102ebf53808e1d5f23737",
-        "admin/views/send.js": "5868038a4020158746c5705d2a0ab5f552ac5021328a1dcf64a2def890495427",
+        "admin/views/feedback.js": "5aed85f09ef8af762d425912ca7fb4299ec129a21822863edf431af4f1a12e64",
+        "admin/views/inbox.js": "20cc1bd16df59c775f0e2d398f4179d0e30683a3a76a942e250f59f7cbdce98a",
+        "admin/views/send.js": "104290b8f58f7e8d75d86de0b3f5496bd38546b6bfb20ddff45e153e61f7d061",
         "collections/feedback-reports.json": "a072291b52463f7785a77f5f77d36b8238ba8f89cfc2672c6642eccdb3144486",
         "config.js": "29d9999d1028c2c11931f67fb9abdf35132430b7cf58c161681e734c0b45143a",
-        "docs/guide.md": "e006cc3f3c114583285964bc1b5d22b2a01285c2d2015d132434bfed363917d4",
-        "lib/receiver.js": "d77962c895617f9adf2fb16d29992fd83b75a3419a4aa71ac3e3bbe8c2089839",
-        "lib/sender.js": "037f9b4469a34ffe1d302a633e664860d625f7fb3be4dfadd01b8a3d094849b7",
-        "lib/shape.js": "67acf62f812c2c9a01b52776641ed7ae1601c59ebab8ea278a07d1087a9f299b",
-        "plugin.js": "c388bbc2a49b5902773b15a74379c40eeaea58396058136e7901e405b3a396f8",
-        "plugin.json": "612357f1b3166f5bad11a563d0e7759c262a2328eba9890c5937dc98d7752363",
-        "tests/api.test.js": "3fd27c561af593168ff0c2d717900feda89da4e306f8e0ecac0a6ad68c6d3359",
-        "tests/shape.test.js": "5133578142a79cc1a100b3215436372129f01fb0de8c757fd743ff99e1d7e37f"
+        "docs/guide.md": "a2a14f834da9fcb59222249d925ad3a387a1c7e7ec03aad84e0f512f936cc670",
+        "lib/attachments.js": "b23bda973c2e7723bc485c5f2840868363a3ac4e65c153cb5abd5a3c41dba3ad",
+        "lib/cache.js": "6db2859c21a3dddcc2ec34e8380dd672fc99a6cb0d76a2b05b68086503f4ccce",
+        "lib/receiver.js": "98aeea6712ba6aa576919520a86451f7f223e5154416a225a848e0c875923c8d",
+        "lib/sender.js": "58194d1ab562e55e7ac6a29aed6b5ec8316ec6932b40b44034bb347e8f799f79",
+        "lib/shape.js": "47ccbbb95598023f8de03dd0f557205159375fd2bb61ee799a19c186c45bc4d9",
+        "plugin.js": "dd9cf5066e8491184a782112ed9463a211b37c2dbd93caf832edd65c2bb0e2a4",
+        "plugin.json": "9712d3eba3d81a0a8f5f85dfa168ea158d14b6ef9c0de6416314938c1b41f6ed",
+        "tests/api.test.js": "67336ed4a034e21ead5876becefa1de2fa2229b06689385471516df92e198d33",
+        "tests/settings.test.js": "3a50ac89a9d114c8466fc043a66f0f1bf373e7a7ad6dba45a995468c3332b374",
+        "tests/shape.test.js": "2e2e5e17ce059fbaa4dad8170ae45382d6c7e74bacf3b301814bb81a60ba98ba"
       }
     },
     "mail-reader": {
-      "version": "1.2.7",
+      "version": "1.2.8",
       "files": {
-        "CLAUDE.md": "6c1fe7956f0d2cc637bff3441061d083e6d938ccf58045473ec49c8fb38f41c1",
+        "CLAUDE.md": "32132446515e66f6784d01b11b1ded8913b0778087472edb667bfd83cc3a871c",
         "admin/views/mail.js": "c5c6483f9618c75cac8f4be32d3aea99511db76d4b9d38b8ef43bdc1d35db3c5",
         "config.js": "6e65803ad822a9acda40c203631b8eb32a87cf9d9e5f1c7cb59d01aa406075c6",
         "docs/guide.md": "d6b5944740ea1bbd689034ef726d8bc0f9bfeb28ea62b63c258292962d45cf18",
         "plugin.js": "7f602a60c4eca7d3637659d03d5de9e242584666846b16c9e5a1b758e4856c9f",
-        "plugin.json": "05a5fa1e0ff69eb2cfe0c07a1abbe2cb4a1cd57a75511d0ae6fb1a74524a65e4"
+        "plugin.json": "e5ac7f3496d9a535fa4899d1de87a514535084d13acecd6a5897744b6174807a"
       }
     },
     "security": {
@@ -175,36 +181,37 @@
       }
     },
     "shopping-cart": {
-      "version": "1.6.1",
+      "version": "1.6.3",
       "files": {
-        "CLAUDE.md": "2759884523ebf0f9323cdefdd220fc9c0ad952f9964c065f19b97530e61f7533",
-        "admin/css/index.css": "dfe1ffc05b9161af3d8a74e82bd36c46991cb3b0409223b213eb8eca6fba9d55",
+        "CLAUDE.md": "1c881307d422beaeaef405b9d90ec4c71679fdebe0a919353fbd9c597e26b22b",
+        "admin/css/index.css": "dcb2d30126c2e049b03a2e2b615082a067ab4dc911c87bf128029c900e6691b4",
         "admin/lib/chart.js": "b01ce5cfac773c8df8efccab50b67d3dfa99fbead0037d817553db4a6688d4d6",
         "admin/lib/kit.js": "d9aa90469b3f589beaff0c3fb6ad3d983ab3fd6d94c06965be639a665bfe052f",
         "admin/templates/shop.html": "c5bb03f1f7cbabfbd8202f3533783eb1848103755b1ba25fdcf1fd8e9478cb8e",
-        "admin/views/orders.js": "97699e18f0fe4be8f3a811cd2fa7c07ad6139ac312e05b70ab5e80a21e40f09b",
+        "admin/views/orders.js": "1c5b571027c78223f98dec2a39c1af8e33e0d810a9b34e0b176ebf85c5c9f486",
         "admin/views/overview.js": "97045c069c6560b3f67e1b2230bdc9c4133ed92ec6f732886470f886f11c755a",
         "admin/views/products.js": "e109660355aaec8db07eb65fa1169e7d2ec20bc2ec45293cc20e34f7c1bd62bf",
         "admin/views/sales.js": "da71b9fbb7d39e39ecd8be35b1187e88bc4b5b28f18baaeddc6ea4cd202bb330",
         "admin/views/settings.js": "54d4b52409d0bdd1eb4c6e4d86c07a285914659eb6b7053183f77e2fb4b9feaa",
-        "admin/views/shop.js": "83d1cb3b053ff16768959c6fd243a9428b274a3f7cdfd98929a8adc51a71d03e",
+        "admin/views/shop.js": "bfc2603095cda6fd8ce3b3c10428ed55d748622d020159b07d178e6f76e3e517",
         "collections/shop-orders.json": "0bca8eef2d5f9108651f73d273480265c167dc983aa115ce59613d13015ca255",
         "collections/shop-products.json": "4d4613ecec7b8a5a0744c4f0a57b17a4429b461e060206a4bbdea5ad7c8c75dc",
         "config.js": "31b336560d21a802d799ed487d5c3116de898446ba3521068b10d192f4ebbb2d",
-        "docs/guide.md": "5b63bd03b015e273c2880ac431a9faccdcc389e8c5f367697aeb4502be8e280b",
+        "docs/guide.md": "10fc12a0af35d648f79762092643bcf38ce7ad74ff5a50ecb3b833ecd109be70",
         "inject/body.html": "7e7e5b408f47abb8650e0a7d5e277daf8a634f4c6877c5259f837b1bf3d6c8e8",
         "lib/accounts.js": "5115cec6a145da18c106dfdbf5fd0b2a1bad0c68e8fac4ef623287e85db75e5c",
         "lib/commission.js": "5b10475d98cff2aaf4c76b9950f8d698d6262e36754a8963669690a8e3e9bd52",
         "lib/extensions.js": "73d3515b52c066e3e616c425d91a7a48a6aab153e7d14ae7278b38ee32649352",
-        "lib/payments.js": "de093035ce732cd4f7f569fcd32cb5a86e68596a3ae54ec7d00e949b3024f7a7",
+        "lib/payments.js": "d2a39bf42373c78c716c1a35f606f9cce1901d0dab5f6bd00bebde9b35f0328c",
         "lib/pricing.js": "5644f2dd55fc3cfd7f40b0169dea5fb547e8b302239b8c17f23cfa177e42eab5",
+        "lib/refunds.js": "73db567d97d40f68806c0d8dcb7235a12f5f86662739febf4b2229695ace40e4",
         "lib/render.js": "2a2b9ab4a24728186e1e45e6429c7406a6d5ca3d4b43db1758bbd54405d105b7",
-        "lib/sales.js": "16804f0ba4e61e8a2887a7c4172da37533850a1cd975a177b754f3350268e946",
+        "lib/sales.js": "bc6c39d70c2ce83f4109474071e6b048dc6554c4b11ac03dbeccbdfdb5881368",
         "lib/samples.js": "912b3d5bd543dffa5f870caf3c2b873f642fd55e3ebf3f97e1b31eeaaac77d3b",
-        "lib/shop.js": "190ad53acffb88ca9462900091918ea5d3e40fb666e89b9c060832035284115c",
+        "lib/shop.js": "baa5dfc4e410210e8ba13678997ee5752eb2ebe72fc4d3e449465d29b60b458d",
         "lib/summary.js": "cdb13ce3d1799d429059fa03f179281711dc00427ccf2eb6b8f8aa52fef26295",
-        "plugin.js": "f776e6bbdd98bf0b487e8247bc7334e78a1f8601a54b26b8c30df817619c2ebc",
-        "plugin.json": "abc448993e39b008d2f8d69deb55176bd090f5272003164a0931059dca4a5fc5",
+        "plugin.js": "824dba8336846d443b2427ed9a5adeba11740570566fc6e89257f9847a488632",
+        "plugin.json": "475c64d3e5f07d0dd4f1480b65630d0e9ef362418653477de9be617aac13dc10",
         "plugin.public.js": "2f92e8340c9da653401c11dd99dab033dc6772d63fa2114489192c48e9e0be00",
         "public/account.js": "5f644016c098c7879c59948d662f5997cb61680996204ecb7897baab8945d434",
         "public/cart.js": "7338141392ec653ff616eb75688d2a2ad08cff8427d7020d381f540be0037b73",
@@ -228,33 +235,38 @@
         "roles/shop-customer.json": "3f3366c536c9fbf2b2ce146bb3090b008d5fbfe22752e764eb8e5a1de9cd611c",
         "templates/shop.html": "4649e57d23458833a157799dc80141824eb0f658d96734bd1859c68e0ba9a8b9",
         "tests/accounts.test.js": "e64adc2a855d4ca017682bba7f75b052534f826556d8d35d825fb79cbc66596a",
-        "tests/api.test.js": "8bccf43e520bca7bb73837a74b3c3cf1fdb3a8db8fb5026a27bc0e5ed9d5ca80",
-        "tests/commission.test.js": "1dfb26a90d3dfcf9f57f2174ac5d9b2310570b21f82c79bf9a2011e7f4911e85",
-        "tests/pure.test.js": "13620f708f21e2590979e8579e2e7788d6109e1682bf73d7b1eb64838da35196",
+        "tests/api.test.js": "15c71751a3d31171707cbb3119d21b85c1c59fb7a67272b318dd4655809ac8d2",
+        "tests/commission.test.js": "fbc4cf83e0ed6446a09e57e4ff37a9608c81947c633c78ac6049eb0aedf6cb58",
+        "tests/pure.test.js": "59a351c813784e8131b96a118c79de2e3858a2fba0fc5c0a6baed79e28cafda8",
+        "tests/refunds.test.js": "0ae06afca3cf9fd1fe89f1fbc63b3676216c79e174dbcb83788180c01d078366",
         "tests/sales.test.js": "9025bc608b04bcc14f5bb2c98b4f7c35de99f3ddab4ffa59772d045795bf2cb7"
       }
     },
     "support": {
-      "version": "1.1.2",
+      "version": "1.1.6",
       "files": {
-        "CLAUDE.md": "9b35a7df9335e69278c261f3e68944a4fea87c495c2ff500c14990dc8a6c7337",
-        "admin/css/index.css": "bad02a487ebb131b64ee55e2a4533c8b79d6ada80fffd34b0952bf3b68204a36",
-        "admin/lib/kit.js": "22f02768625bcad9d9c8e64bf0a8fe95f7c5ff6dcf8abb189df8203362a7a4e1",
+        "CLAUDE.md": "65845bbf6a909cd523466896874e84a2a29d239fdc5da0840df5155913cdcf23",
+        "admin/css/index.css": "6695029b1da2a2e4ff25db4abecd360895ed39e4a9bc7f0996857672faf2c426",
+        "admin/lib/kit.js": "3d5a5fb5c53f7cc9ff98664803ff58701a4d8598068e9f1a16e9db0a72109c40",
+        "admin/lib/settings.js": "3f0b7c4c5ab927b2785af2abb3872ffd9269d12b402468f79795c4198eb49ea0",
         "admin/templates/support.html": "2bb69d0443a367a402e6160fe68f4af3e8983b578cfff9575b4df9a534fcb480",
-        "admin/views/desk.js": "ac043630ad08c8f2053f3f908be18586d9a4798976d20427cf5215ee042c807c",
-        "admin/views/inbox.js": "f570595d7b2c831d151e0aaf85ff903e6e2b7066124b3f9d23c2c24f5b1734cf",
-        "admin/views/support.js": "4be6cce46067ee7af140f43253da36e060add2a9190e91f013fd1aad668fcd7b",
+        "admin/views/desk.js": "4f3cffe3603592d715c6a9b553e02dc7331a2675cabaeddff709c91436531734",
+        "admin/views/inbox.js": "8134d91e20a19eb2ca7b25edb604fa241e65b764e0d058ee5d8751f903a16c32",
+        "admin/views/support.js": "d1c72cc2e35609e54be296791cdcceb43be9be016b6c307000ddb8a226ba6d92",
         "collections/support-tickets.json": "55a0856bacd66c2e8f1e3c85bdf3638e5ff826560943cda854a8f2d336a88905",
         "config.js": "eb7ccc1169fa8b2be52a213536825492fedaec5fa73fd749cba9f498dd54b503",
-        "docs/guide.md": "d0d38dacbdf68bfaba1ed4e62c8d182372a683d255a8ff75ca57bd0be2a0b082",
+        "docs/guide.md": "bfe570f4f485f58ae3aab4f71039e5e426f85f6f348c96794dfcb2dc494fced1",
+        "lib/attachments.js": "e3479c7fe9f01e6287126279bc9d514fd14f00b64af9082ac49596bc6a543c23",
+        "lib/cache.js": "70cc826b24cc5359597a5c83a990f6da43cadebf2ac34094aee42058240fb72d",
         "lib/mail.js": "d14aae3a59aad6af61451863cdaaf94fc4a87810b16e1dcb9c655dda6c803b3b",
-        "lib/receiver.js": "64c292281bde5a942de4d04a16911d0730a4da7e80ce6d91a9da864b9f886b59",
-        "lib/sender.js": "b20aaee34ade89814a897f68467f9902693843fa6b5c8eb0090c4059193c8227",
-        "lib/shape.js": "04d840b589d20700ccb2cfa4c72072f8d9f8e03f0573e2ea1177a7a83a383bea",
-        "plugin.js": "e3c50a05fa99cb24375782bbb3ca8c58cf5ddc3036937e6115f4d963715c120e",
-        "plugin.json": "c45819016588e7e26426830ce30fd6d7561b61ffcac2a8ad48bb4c178c138188",
-        "tests/api.test.js": "1fa87f6ae12c48fc34a5fb2b5bbeed6cfaa36329610674d4fae05d64734dbb15",
-        "tests/shape.test.js": "364c6b7680699f59fcd449cd448184486488838300f155135daea4c05387cf74"
+        "lib/receiver.js": "c9401cc799e5eafd419c136c95826ca28a8455e32e99cea32f4821acc1fb6c26",
+        "lib/sender.js": "2b308422ac60a8a2801570e06319d5972797a601640c67beee95ccab9ac64092",
+        "lib/shape.js": "d60b48410aa5582ea80451c3d831686b0e29525a958733a8bc9dfaae8eca94d2",
+        "plugin.js": "91fff8d66bf5fa0fa4502bb177460ae234f0ed0494a4fbe6dd94d63e2f88b571",
+        "plugin.json": "70bf4f117c4b2f9132365f73a1b1a38c3dfd5618d5273a8c899a2393323ebf43",
+        "tests/api.test.js": "1af65f0cba8a83c080a6e3e65544abc86fc43c8e25ca05c7f3e1ab4e3f7ac5a2",
+        "tests/settings.test.js": "434acbfd940eef800b1166a9aaf36363351af5652fcfb06527b8498866b7b964",
+        "tests/shape.test.js": "7866c6c1d140716bf0817449937d6d711d7c3b97be1db1e1eb33bde341e36296"
       }
     }
   }