emailengine-app 2.63.1 → 2.63.3

package/server.js

@@ -616,6 +616,8 @@ let workerAssigned = new WeakMap(); // Map of worker -> Set of accounts
 let onlineWorkers = new WeakSet(); // Set of workers that are online
 let reassignmentTimer = null; // Timer for failsafe reassignment
 let reassignmentPending = false; // Flag to track if reassignment is pending
+let assignRetryCount = 0; // Counter for safety-net retries in assignAccounts
+const MAX_ASSIGN_RETRIES = 3; // Max consecutive safety-net retries before giving up
 
 // Worker management
 let imapInitialWorkersLoaded = false; // Have all initial IMAP workers started?
@@ -1578,6 +1580,11 @@ async function assignAccounts() {
         let totalAccounts = assigned.size + unassigned.size;
         let targetPerWorker = Math.ceil(totalAccounts / availableIMAPWorkers.size);
 
+        // Collect accounts that fail assignment so we do not re-insert into
+        // the Set we are iterating (re-insertion during for..of would cause
+        // the same account to be visited again in the same pass).
+        let failedAccounts = [];
+
         // Assign each unassigned account
         for (let account of unassigned) {
             if (!availableIMAPWorkers.size) {
@@ -1636,7 +1643,14 @@ async function assignAccounts() {
                 // Roll back -- account was never actually assigned
                 workerAssigned.get(worker).delete(account);
                 assigned.delete(account);
-                unassigned.add(account);
+                // Revert load map so subsequent iterations see accurate counts
+                if (!isReassignment) {
+                    workerLoadMap.set(worker, workerLoadMap.get(worker) - 1);
+                    sortedWorkers = Array.from(workerLoadMap.entries())
+                        .sort((a, b) => a[1] - b[1])
+                        .map(entry => entry[0]);
+                }
+                failedAccounts.push(account);
                 logger.error({ msg: 'Failed to assign account to worker', account, threadId: worker.threadId, err });
                 continue;
             }
@@ -1647,6 +1661,11 @@ async function assignAccounts() {
             }
         }
 
+        // Re-add failed accounts after iteration completes
+        for (let account of failedAccounts) {
+            unassigned.add(account);
+        }
+
         // Log final distribution for monitoring
         let distribution = [];
         for (let worker of availableIMAPWorkers) {
@@ -1661,15 +1680,30 @@ async function assignAccounts() {
     } finally {
         assigning = false;
 
-        // Safety net: if accounts remain unassigned, schedule a retry
+        // Safety net: if accounts remain unassigned, schedule a retry with backoff
         if (unassigned && unassigned.size > 0 && availableIMAPWorkers.size > 0 && !isClosing) {
-            logger.warn({
-                msg: 'Accounts remain unassigned after assignment pass, scheduling retry',
-                remaining: unassigned.size
-            });
-            setTimeout(() => {
-                assignAccounts().catch(err => logger.error({ msg: 'Retry assignment failed', err }));
-            }, 5000);
+            assignRetryCount++;
+            if (assignRetryCount <= MAX_ASSIGN_RETRIES) {
+                let delay = 5000 * assignRetryCount;
+                logger.warn({
+                    msg: 'Accounts remain unassigned after assignment pass, scheduling retry',
+                    remaining: unassigned.size,
+                    retry: assignRetryCount,
+                    maxRetries: MAX_ASSIGN_RETRIES,
+                    delayMs: delay
+                });
+                setTimeout(() => {
+                    assignAccounts().catch(err => logger.error({ msg: 'Retry assignment failed', err }));
+                }, delay);
+            } else {
+                logger.error({
+                    msg: 'Max assignment retries reached, accounts remain unassigned',
+                    remaining: unassigned.size
+                });
+                assignRetryCount = 0;
+            }
+        } else {
+            assignRetryCount = 0;
         }
     }
 }

package/static/licenses.html

@@ -1,6 +1,6 @@
 <!doctype html><html><head><meta charset="utf-8"><title>EmailEngine Licenses</title><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><link rel="stylesheet" href="https://cdn.jsdelivr.net/npm/bootstrap@4.6.1/dist/css/bootstrap.min.css" integrity="sha384-zCbKRCUGaJDkqS1kPbPd7TveP5iyJE0EjAuZQTgFLD2ylzuqKfdKlfG/eSrtxUkn" crossorigin="anonymous"></head><body>
 <div class="container-fluid">
-<h1>EmailEngine v2.63.0</h1><p>EmailEngine includes code from the following software packages:</p>
+<h1>EmailEngine v2.63.2</h1><p>EmailEngine includes code from the following software packages:</p>
 <table class="table table-sm">
 <tr><thead class="thead-dark"><th>Package</th><th>Version</th><th>License</th><th>Publisher</th><th>Publisher's Email</th><th>Package URL</th></tr>
 <tbody>
@@ -216,7 +216,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/@csstools/css-syntax-patches-for-csstree">@csstools/css-syntax-patches-for-csstree</a></td>
-<td>1.0.28</td>
+<td>1.0.29</td>
 <td>MIT-0</td>
 <td></td>
 <td></td>
@@ -785,6 +785,16 @@
 </td
 </tr>
 <tr>
+<td><a href="https://npmjs.com/package/@ioredis/commands">@ioredis/commands</a></td>
+<td>1.5.1</td>
+<td>MIT</td>
+<td>Zihua Li</td>
+<td>i@zihua.li</td>
+<td>
+<a href="https://github.com/ioredis/commands">github.com/ioredis/commands</a>
+</td
+</tr>
+<tr>
 <td><a href="https://npmjs.com/package/@jsdevtools/ono">@jsdevtools/ono</a></td>
 <td>7.1.3</td>
 <td>MIT</td>
@@ -836,7 +846,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/@opentelemetry/core">@opentelemetry/core</a></td>
-<td>2.5.1</td>
+<td>2.6.0</td>
 <td>Apache-2.0</td>
 <td>OpenTelemetry Authors</td>
 <td></td>
@@ -926,7 +936,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/@postalsys/email-ai-tools">@postalsys/email-ai-tools</a></td>
-<td>1.11.3</td>
+<td>1.11.4</td>
 <td>MIT</td>
 <td>Postal Systems O&#xDC;</td>
 <td></td>
@@ -936,7 +946,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/@postalsys/email-text-tools">@postalsys/email-text-tools</a></td>
-<td>2.4.1</td>
+<td>2.4.2</td>
 <td>MIT</td>
 <td>Postal Systems O&#xDC;</td>
 <td></td>
@@ -1576,7 +1586,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/brace-expansion">brace-expansion</a></td>
-<td>5.0.3</td>
+<td>5.0.4</td>
 <td>MIT</td>
 <td></td>
 <td></td>
@@ -1606,7 +1616,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/bullmq">bullmq</a></td>
-<td>5.70.1</td>
+<td>5.70.2</td>
 <td>MIT</td>
 <td>Taskforce.sh Inc.</td>
 <td></td>
@@ -1976,7 +1986,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/css-tree">css-tree</a></td>
-<td>3.1.0</td>
+<td>3.2.1</td>
 <td>MIT</td>
 <td>Roman Dvornov</td>
 <td>rdvornov@gmail.com</td>
@@ -2216,7 +2226,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/dompurify">dompurify</a></td>
-<td>3.3.1</td>
+<td>3.3.2</td>
 <td>(MPL-2.0 OR Apache-2.0)</td>
 <td>Dr.-Ing. Mario Heiderich, Cure53</td>
 <td>mario@cure53.de</td>
@@ -2835,7 +2845,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/flatted">flatted</a></td>
-<td>3.3.3</td>
+<td>3.3.4</td>
 <td>ISC</td>
 <td>Andrea Giammarchi</td>
 <td></td>
@@ -3465,7 +3475,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/imapflow">imapflow</a></td>
-<td>1.2.10</td>
+<td>1.2.12</td>
 <td>MIT</td>
 <td>Postal Systems O&#xDC;</td>
 <td></td>
@@ -3545,6 +3555,16 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/ioredis">ioredis</a></td>
+<td>5.10.0</td>
+<td>MIT</td>
+<td>Zihua Li</td>
+<td>i@zihua.li</td>
+<td>
+<a href="https://github.com/luin/ioredis">github.com/luin/ioredis</a>
+</td
+</tr>
+<tr>
+<td><a href="https://npmjs.com/package/ioredis">ioredis</a></td>
 <td>5.3.2</td>
 <td>MIT</td>
 <td>Zihua Li</td>
@@ -3905,7 +3925,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/juice">juice</a></td>
-<td>11.1.0</td>
+<td>11.1.1</td>
 <td>MIT</td>
 <td></td>
 <td></td>
@@ -4185,7 +4205,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/mdn-data">mdn-data</a></td>
-<td>2.12.2</td>
+<td>2.27.1</td>
 <td>CC0-1.0</td>
 <td>Mozilla Developer Network</td>
 <td></td>
@@ -4485,7 +4505,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/node-html-parser">node-html-parser</a></td>
-<td>7.0.2</td>
+<td>7.1.0</td>
 <td>MIT</td>
 <td>Xiaoyi Shi</td>
 <td>ashi009@gmail.com</td>
@@ -5135,7 +5155,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/pump">pump</a></td>
-<td>3.0.3</td>
+<td>3.0.4</td>
 <td>MIT</td>
 <td>Mathias Buus Madsen</td>
 <td>mathiasbuus@gmail.com</td>
@@ -5415,7 +5435,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/sax">sax</a></td>
-<td>1.4.4</td>
+<td>1.5.0</td>
 <td>BlueOak-1.0.0</td>
 <td>Isaac Z. Schlueter</td>
 <td>i@izs.me</td>
@@ -5915,7 +5935,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/swagger-ui-dist">swagger-ui-dist</a></td>
-<td>5.31.2</td>
+<td>5.32.0</td>
 <td>Apache-2.0</td>
 <td></td>
 <td></td>
@@ -5995,7 +6015,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/tldts-core">tldts-core</a></td>
-<td>7.0.23</td>
+<td>7.0.24</td>
 <td>MIT</td>
 <td>R&#xE9;mi Berson</td>
 <td></td>
@@ -6005,7 +6025,7 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/tldts">tldts</a></td>
-<td>7.0.23</td>
+<td>7.0.24</td>
 <td>MIT</td>
 <td>R&#xE9;mi Berson</td>
 <td></td>
@@ -6175,16 +6195,6 @@
 </tr>
 <tr>
 <td><a href="https://npmjs.com/package/undici">undici</a></td>
-<td>7.19.2</td>
-<td>MIT</td>
-<td></td>
-<td></td>
-<td>
-<a href="https://github.com/nodejs/undici">github.com/nodejs/undici</a>
-</td
-</tr>
-<tr>
-<td><a href="https://npmjs.com/package/undici">undici</a></td>
 <td>7.22.0</td>
 <td>MIT</td>
 <td></td>

package/translations/messages.pot

@@ -1,7 +1,7 @@
 msgid ""
 msgstr ""
 "Content-Type: text/plain; charset=ascii\n"
-"POT-Creation-Date: 2026-02-26 12:37+0000\n"
+"POT-Creation-Date: 2026-03-05 15:45+0000\n"
 
 #: views/config/license.hbs:45
 msgid "%d day"
@@ -9,10 +9,6 @@ msgid_plural "%d days"
 msgstr[0] ""
 msgstr[1] ""
 
-#: views/redirect.hbs:1
-msgid "Click <a href=\"%s\">here</a> to continue&mldr;"
-msgstr ""
-
 #: views/unsubscribe.hbs:3
 #: views/unsubscribe.hbs:62
 #: views/unsubscribe.hbs:85
@@ -62,6 +58,10 @@ msgstr ""
 msgid "Enter your email address"
 msgstr ""
 
+#: views/redirect.hbs:1
+msgid "Click <a href=\"%s\">here</a> to continue&mldr;"
+msgstr ""
+
 #: views/accounts/register/imap.hbs:11
 msgid "Your name"
 msgstr ""
@@ -253,7 +253,7 @@ msgstr ""
 #: lib/routes-ui.js:4874
 #: lib/routes-ui.js:5121
 #: lib/routes-ui.js:5157
-#: workers/api.js:2417
+#: workers/api.js:2453
 #: lib/ui-routes/account-routes.js:549
 #: lib/ui-routes/account-routes.js:585
 #: lib/ui-routes/account-routes.js:702
@@ -338,12 +338,12 @@ msgstr ""
 msgid "Subscription Management"
 msgstr ""
 
-#: workers/api.js:6911
-#: workers/api.js:7027
+#: workers/api.js:6947
+#: workers/api.js:7063
 msgid "Requested page not found"
 msgstr ""
 
-#: workers/api.js:6912
+#: workers/api.js:6948
 msgid "Something went wrong"
 msgstr ""
 

package/workers/api.js

@@ -1492,18 +1492,55 @@ Include your token in requests using one of these methods:
         }
     });
 
+    const staticRoot = pathlib.resolve(__dirname, '..', 'static');
+    const staticRootPrefix = staticRoot + pathlib.sep;
+
     server.route({
         method: 'GET',
         path: '/static/{file*}',
         handler: {
             directory: {
-                path: pathlib.join(__dirname, '..', 'static'),
+                path: staticRoot,
                 index: false
             }
         },
         options: {
             auth: false,
-            tags: ['static']
+            tags: ['static'],
+            // Prevent EISDIR crash in pkg snapshot environments.
+            // Inert calls fs.open() on directory paths which triggers an uncaught exception
+            // in pkg's patched fs, so we intercept directory requests before they reach Inert.
+            pre: process.pkg
+                ? [
+                      {
+                          method: async request => {
+                              const filePath = request.params.file;
+                              if (!filePath) {
+                                  throw Boom.notFound();
+                              }
+
+                              const resolved = pathlib.resolve(staticRoot, filePath);
+                              if (!resolved.startsWith(staticRootPrefix)) {
+                                  throw Boom.notFound();
+                              }
+
+                              try {
+                                  const stat = await fs.promises.stat(resolved);
+                                  if (stat.isDirectory()) {
+                                      throw Boom.notFound();
+                                  }
+                              } catch (err) {
+                                  if (err.isBoom) {
+                                      throw err;
+                                  }
+                                  // stat failed (ENOENT etc.) - let Inert handle it
+                              }
+
+                              return null;
+                          }
+                      }
+                  ]
+                : undefined
         }
     });