2.1.2 — security & audit hardening

Floxum audit hardening release.

Security

• The digestExtensions map (which reveals installed integrations) is now admin-only — it is no longer serialized to guests or regular members. digestAllowedFrequencies stays public (the forum JS needs it).
• The admin stats API no longer returns the raw server filesystem path as a bare value. Cron / Supervisor lines are now assembled server-side and the panel renders those ready-to-paste strings directly.

Robustness

• The giveaways digest section no longer silently swallows query failures — it logs the exception before degrading gracefully, so a broken third-party table is visible in your logs.

Code quality

• Replaced direct ConnectionInterface usage with Eloquent models where it fits (unsubscribe tokens + a new DigestSendLog model). Integration queries against third-party extension tables intentionally remain raw SQL.
• Removed copy-pasted unused imports across the query traits.
• forum/index.ts rewritten as idiomatic, typed Flarum 2 TypeScript; admin entry modernized.

No database or configuration changes are required. Upgrade with composer update ernestdefoe/digest-mail and clear caches.