domma-cms 1.8.7 → 1.8.8

package/CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## [1.8.8] - 2026-10-16
+
+- **Your emails with a contact, on their card.** With Email (Pro), the foot of a contact's card in Contacts lists your ten newest emails to or from any of the contact's addresses - Received or Sent, unread, and the mailbox when you have several - each opening the message in Email. Only your own mailboxes are searched. This release carries the engine side: a whole-address mail query (`listByAddresses`) and links that open the reader at one message (`#/plugins/<mail>?open=<uid>&account=<id>&folder=<path>`).
+- The response cache's unfinished Redis option is gone. Setting `"driver": "redis"` in `config/cache.json` loaded a file that never existed and stopped the site starting; the in-process memory cache is the one driver (`memory`, or `none`).
+
 ## [1.8.7] - 2026-10-16
 
 - **Import from WordPress brings the authors across.** The preview has a Users card listing everyone the export names as an author, with their email and what they wrote. An author whose email matches a user here (capitals do not matter) is credited with their posts and pages, and that user's account is not changed in any way. Anyone else who wrote something becomes a new account by default; anyone who wrote nothing does not, and each can be switched, or all at once. New accounts get the role you choose - only roles junior to your own are offered (and accepted), the site's least-privileged role by default - and no password: nobody can sign in to one until a password is set. A switch, off unless you turn it on, emails each new account an invitation once the import has finished - an account has been made for them, with a link to set their password that works once and lasts 7 days (ordinary password reset links keep their own, shorter, lifetime). An author with no usable email never gets an account, and two with the same email share one. Blog posts, pages and collection entries are credited to whoever their author became. Run it again and the same people are credited to the same accounts - nobody is made twice. The report and the import history keep names and ids, never the email addresses.

package/admin/js/templates/docs/usage-tools.html

@@ -65,6 +65,11 @@
                       it and Admin is given it once. Groups made before 0.93.0 have no recorded creator, so only
                       holders of the permission can change them. In Manage groups, Rename and Delete are greyed out
                       where you may not, with a note saying why.</p>
+                  <p><strong>The foot of a contact's card</strong> lists what other Tools hold about them, one
+                      section per Tool: Bookings, Calls, Events, Quotes and, with <strong>Email</strong> (Pro), your
+                      ten newest emails to or from any of the contact's addresses. Each entry opens where it lives -
+                      an email opens in Email. Only your own mailboxes are searched. A Tool that is not installed
+                      adds no section.</p>
 
                   <h3>Call someone now (Pro)</h3>
                   <p>With a Pro Tool that has calls - <strong>Booking Pro</strong>, <strong>Contacts Pro</strong> or

package/docs/DommaFeatures.md

@@ -41,7 +41,7 @@ Code was treated as the truth. Where docs disagree with it, the disagreement is
 | `data-transfer` | paid | 1.3.3 | Move collections between file and MongoDB storage, back them up and restore them (all or some, merged or replaced) - keeping every entry's id - and clone them (cloned entries get new ids, so references stay unambiguous). Every restore and transfer takes a safety snapshot first. |
 | `docs` | paid | 2.8.1 | Document editor: Home and editor screens, sharing with Viewers/Editors, public links, import/export, send to page/blog/email, edit lock, Trash, version history, templates. |
 | `docs-pro` | paid | 0.8.1 | Domma Spaces (publish a Docs folder at `/spaces` with a Kindle-style reader), Cloud copies (Google Drive, OneDrive, Dropbox, S3), Signatures (emailed signing links, typed or drawn, signed copy with a certificate page) and protected public links (expiry date, password). Adds to Docs. |
-| `email-pro` | paid | 0.5.9 | Full mail: read, write, send and search, over a synchronised store. Search, threads, rules, scheduled sends, snooze and vacation replies need MongoDB; without it, reading, filing and sending still work. |
+| `email-pro` | paid | 0.9.0 | Full mail: read, write, send and search, over a synchronised store. Search, threads, rules, scheduled sends, snooze and vacation replies need MongoDB; without it, reading, filing and sending still work. |
 | `feedback` | free | 1.1.4 | Tell Domma what is broken, missing or good - straight from your admin - and see what became of it: seen, planned, in progress, done, with Domma's reply. |
 | `garage` | paid | 1.4.3 | UK vehicle management with DVLA API lookup, save vehicles, and search history. |
 | `invoice` | paid | 1.7.1 | Invoices and quotes. Issuer profiles, receivers importable from Contacts, line items, optional VAT, payments, archiving, CSV/Excel export, and a print-ready invoice you can email or download as a PDF. Quotes with a validity date and an emailed accept link - the client accepts or declines online, and one click turns an accepted quote into a draft invoice. Self-billing too: invoices raised on a supplier's behalf, marked and numbered their own way, with agreement review reminders. |
@@ -1144,7 +1144,7 @@ The four Tools below were plugins until 0.67.0 and are now part of the CMS. They
   Since: 0.72.0.
 - **Calendar sources and related items** - Two registries let plugins build on the core Tools without core depending on them:
   - `registerCalendarSource` - Todo supplies a "To-dos" layer of your open to-dos on their due days.
-  - `registerRelatedItems` - lets a plugin such as Calendar show "Events" beside a contact or note and add "Schedule with..." and "Add to calendar..." menu items.
+  - `registerRelatedItems` - lets a plugin such as Calendar show "Events" beside a contact or note and add "Schedule with..." and "Add to calendar..." menu items. Email Pro 0.9 adds "Emails" to the contact card: the viewer's own newest messages with any of the contact's addresses, each opening in Email (engine `store.listByAddresses()`, reader links `#/plugins/<name>?open=<uid>&account=<id>&folder=<path>`; since 1.8.8).
   
   Before any provider is asked, core checks that the viewer owns the record. A provider that fails or is slow is named and left out.
   Where: `server/services/hooks.js`, `GET /api/related`, `GET /api/related/providers`, `admin/js/lib/related.js`; `contact:deleted` and `note:deleted` events - Since: 0.79.0.
@@ -1902,7 +1902,7 @@ Tier: paid (closed source) · Version: 0.8.0 · Requires: `docs` 2.6+ (2.8+ for
 
 ### Email (`email-pro`)
 
-Tier: paid (closed source) · Version: 0.5.4 · Requires: MongoDB for the message store's extras (without it reading, starring, moving, deleting, folders and sending still work; search, conversations, rules, undo send, send later, snooze and the away message need MongoDB and say so); npm `imapflow` ^2.0.5, `mailparser` ^3.9.28, `nodemailer` 8.0.5; no `minCmsVersion` declared (Contacts switch-off handling core 0.88) · Uses: `contacts` (recipient suggestions and group expansion in compose; Add sender to contacts) · Supersedes: `mail-reader`
+Tier: paid (closed source) · Version: 0.9.0 · Requires: MongoDB for the message store's extras (without it reading, starring, moving, deleting, folders and sending still work; search, conversations, rules, undo send, send later, snooze and the away message need MongoDB and say so); npm `imapflow` ^2.0.5, `mailparser` ^3.9.28, `nodemailer` 8.0.5; no `minCmsVersion` declared (Contacts switch-off handling core 0.88) · Uses: `contacts` (recipient suggestions and group expansion in compose; Add sender to contacts) · Supersedes: `mail-reader`
 
 A full email client in the admin: connect your own IMAP mailboxes, read, write, send, search and file mail. Chosen folders are mirrored (envelopes and flags, never bodies) into MongoDB so big mailboxes open instantly, and on top come identities, templates, rules, an away responder, undo send, send later, snooze, threads and one-click hand-off of messages into the CMS.
 
@@ -1921,6 +1921,7 @@ A full email client in the admin: connect your own IMAP mailboxes, read, write,
 - Away (vacation) responder with a preview that runs the real decision over the mailbox and explains each message (skips lists, bounces, repeat senders).
 - Unsubscribe: RFC 8058 one-click performed server-side; other methods handed back to open or compose.
 - Hand-off to the CMS: save an attachment to Media, turn a message into a draft page, file a message as a collection entry; Add sender to contacts.
+- Emails on a contact's card (0.9.0, engine 1.8.8+): the contact slideover in Contacts (and Contacts Pro) lists your ten newest emails to or from the contact's main, billing and additional addresses - Received/Sent, unread, and the mailbox when you have several - each opening the message in Email. Your own mailboxes and mirrored folders only; needs MongoDB, and is absent without it.
 - Keyboard shortcuts: j/k or arrows to move, Enter open, u read/unread, s star, r reply, Shift+R or a reply all, f forward, c compose, `/` search, x select, Shift+A select all, `!` spam, `#` or Delete delete, Esc, `?` help.
 - Sidebar badge (`/unread`): unread in Inbox (counted from the store).
 - Notifications to the mailbox owner only: `email-pro:mailbox` (warning after 5 failed checks in a row; resolved when a check works) and `email-pro:sending` (a scheduled/undo-send message that failed).

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "domma-cms",
-  "version": "1.8.7",
+  "version": "1.8.8",
   "description": "File-based CMS powered by Domma and Fastify. Run npx domma-cms my-site to create a new project.",
   "type": "module",
   "main": "server/server.js",

package/plugins/_lib/admin/mail/reader-view.js

@@ -6126,6 +6126,38 @@ return {
             await startNewMessage(draft);
         }
 
+        /**
+         * Another screen linked to one message - a contact's Emails list
+         * (Email Pro's related items): `#/plugins/<name>?open=<uid>&account=
+         * <id>&folder=<path>`. Opens that mailbox, that folder and the
+         * message, then takes the request off the address so a reload or Back
+         * does not open it again. A mailbox that is not the viewer's is never
+         * opened: the accounts list is theirs alone.
+         */
+        async function takeOpenRequest() {
+            const params = new URLSearchParams(location.hash.split('?')[1] ?? '');
+            if (!params.has('open')) return;
+            history.replaceState(history.state, '', `${location.pathname}${location.search}#/plugins/${pluginName}`);
+            const uid = Number(params.get('open'));
+            const path = params.get('folder');
+            const account = params.get('account');
+            if (!Number.isInteger(uid) || uid <= 0 || !path) return;
+            if (account && account !== currentAccountId) {
+                if (!mailboxes.some(b => b.id === account)) {
+                    E.toast('That message is in a mailbox that is not yours.', {type: 'warning'});
+                    return;
+                }
+                await selectAccount(account);
+                if (!here()) return;
+            }
+            const folder = folders.find(f => f.path === path);
+            if (folder && folder.path !== currentFolder) {
+                await selectFolder(folder);
+                if (!here()) return;
+            }
+            await openMessage(uid, path);
+        }
+
         if (features.send) {
             const compose = $container.find('#mail-compose-btn').get(0);
             if (compose && bannerCompose) compose.remove();
@@ -6177,6 +6209,8 @@ return {
 
         await start();
         if (!here()) return;
+        await takeOpenRequest();
+        if (!here()) return;
         await takeComposeRequest();
         // The sidebar updates independently; keep an open inbox in step with
         // the mirror without interrupting selection, search or older pages.

package/plugins/_lib/mail/store.js

@@ -147,6 +147,32 @@ export function messageId(accountId, path, uid) {
     return `${accountId}:${path}:${uid}`;
 }
 
+/**
+ * The Mongo filter for "mail to or from any of these people".
+ *
+ * Whole-address and case-insensitive: Sam@ and sam@ are one person, but
+ * sam@example.com must not match pam.sam@example.com - so each address is an
+ * anchored, escaped pattern rather than the substring the search box uses.
+ * Blank and duplicate addresses are dropped; none left = null, and the
+ * caller asks nothing.
+ *
+ * @param   {string[]} accountIds
+ * @param   {string[]} addresses
+ * @returns {object|null}
+ */
+export function addressFilter(accountIds, addresses) {
+    const ids = [...new Set((accountIds ?? []).filter(id => typeof id === 'string' && id))];
+    const wanted = [...new Set((addresses ?? [])
+        .map(a => String(a ?? '').trim().toLowerCase())
+        .filter(a => a.includes('@')))];
+    if (!ids.length || !wanted.length) return null;
+    const patterns = wanted.map(a => new RegExp(`^${a.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}$`, 'i'));
+    return {
+        accountId: {$in: ids},
+        $or: ['from', 'to', 'cc'].map(field => ({[`${field}.address`]: {$in: patterns}}))
+    };
+}
+
 /**
  * Create a store bound to one connection.
  *
@@ -800,6 +826,38 @@ export function createStore(connection) {
             .toArray();
     }
 
+    /**
+     * The newest mirrored messages to or from any of these addresses, across
+     * the given mailboxes - a contact's emails, for the card in Contacts.
+     * Headers only; never a body. The same message filed in two folders (or
+     * sent to yourself) appears once, by its Message-ID.
+     *
+     * @param   {string[]} accountIds
+     * @param   {string[]} addresses
+     * @param   {{limit?: number}} [options]
+     * @returns {Promise<{accountId: string, folder: string, uid: number, subject: string, from: object[], to: object[], date: string|null, seen: boolean}[]>}
+     */
+    async function listByAddresses(accountIds, addresses, {limit = 10} = {}) {
+        const filter = addressFilter(accountIds, addresses);
+        if (!filter) return [];
+        const database = await connect();
+        const rows = await database.collection(MESSAGES)
+            .find(filter, {projection: {_id: 0, accountId: 1, folder: 1, uid: 1, subject: 1, from: 1, to: 1, date: 1, seen: 1, messageId: 1}})
+            .sort({date: -1, uid: -1})
+            .limit(limit * 2)
+            .toArray();
+        const seen = new Set();
+        const out = [];
+        for (const row of rows) {
+            const key = row.messageId || `${row.accountId}:${row.folder}:${row.uid}`;
+            if (seen.has(key)) continue;
+            seen.add(key);
+            out.push(row);
+            if (out.length >= limit) break;
+        }
+        return out;
+    }
+
     /** Folders already backfilled in this process, so it runs at most once each. */
     const backfilled = new Set();
 
@@ -1023,7 +1081,7 @@ export function createStore(connection) {
         connect,
         getFolder, saveFolder,
         putMessages, setFlags, setMessageAction, removeMessages, clearFolder,
-        storedUids, listMessages, listThreads, searchMessages, countUnread, listUnread, forgetAccount,
+        storedUids, listMessages, listThreads, searchMessages, countUnread, listUnread, listByAddresses, forgetAccount,
         queueSend, listQueuedSends, claimDueSends, finishSend, cancelSend, getQueuedSend,
         queueSnooze, listSnoozed, claimDueSnoozes, finishSnooze, wakeSnooze,
         lastAutoReply, noteAutoReply, listAutoReplies, clearAutoReplies,