Secretary

Release integrity

• Rebuild the committed Control Panel assets against the secure Statamic 6.31.0 development lock.
• Restore deterministic frontend asset verification in CI.
• Includes the v0.1.11 Postmark replay protection and v0.1.12 security lock refresh.

Security maintenance

• Refresh the development dependency lock to Statamic 6.31.0, clearing the release audit for the two-factor recovery-code security advisory fixed upstream.

This release contains the complete v0.1.11 Postmark replay protection and keeps the v0.1.11 tag immutable.

Prevent old Postmark inbound messages from being replayed by the fallback poller after routine retention pruning by keeping permanent provider-message tombstones and limiting recovery searches to a configurable 48-hour window.

• Route readable @statamic.no site addresses directly through Postmark Inbound Domain forwarding, removing the shared-host forwarding delay while retaining exact installation, sender, subscription, and conversation isolation.
• Reject unknown, mismatched, mixed, or ambiguous direct recipients without falling back to sender-only routing, while preserving the legacy cPanel-forwarder path for controlled rollback.

• Keep ambiguous email requests in one language from acknowledgement through the AI-generated completion by storing the detected locale and making it authoritative during processing.
• Use the same concise, email-first product description in Composer metadata, the Statamic Control Panel, and the Marketplace listing.

• Send the first receipt acknowledgement from the hosted Relay edge immediately after routing and sender authorization, preserve the original email thread and language, and suppress duplicates across provider and site-delivery retries.
• Finish the existing secure pairing automatically after Stripe Checkout, with a prominent active-address confirmation, delayed-webhook polling, a bounded retry state, and no second one-time code.
• Link every landing-page Marketplace action directly to the Secretary product listing.

• Update the transitive nanoid dependency to 3.3.18 to address GHSA-2v37-7h3g-55p8 and restore a clean production dependency audit.