@meith/settings 0.29.0 → 0.30.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@meith/settings",
-  "version": "0.29.0",
+  "version": "0.30.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -20,7 +20,7 @@
   },
   "dependencies": {
     "zod": "^4.4.3",
-    "@meith/core": "0.29.0",
-    "@meith/i18n": "0.29.0"
+    "@meith/core": "0.30.0",
+    "@meith/i18n": "0.30.0"
   }
 }

package/src/branding.ts

@@ -4,6 +4,8 @@ export const LOGO_SCHEMES: readonly LogoScheme[] = ['light', 'dark']
 
 const LOGO_KEY = /^board\/logo-(light|dark)-[a-f0-9-]{36}\.(png|jpg|webp|svg)$/
 
+const FAVICON_KEY = /^board\/favicon-[a-f0-9-]{36}\.(png|jpg|webp|svg)$/
+
 export function isLogoScheme(value: unknown): value is LogoScheme {
   return value === 'light' || value === 'dark'
 }
@@ -12,10 +14,22 @@ export function isLogoKey(value: string): boolean {
   return LOGO_KEY.test(value)
 }
 
+export function isFaviconKey(value: string): boolean {
+  return FAVICON_KEY.test(value)
+}
+
 export function logoFormat(key: string): string | null {
   return LOGO_KEY.exec(key)?.[2] ?? null
 }
 
+export function faviconFormat(key: string): string | null {
+  return FAVICON_KEY.exec(key)?.[1] ?? null
+}
+
+export function faviconPath(key: string): string {
+  return `/brand/favicon?v=${key.slice(-16, -4)}`
+}
+
 export function logoPath(scheme: LogoScheme, key: string): string {
   return `/logo/${scheme}?v=${key.slice(-16, -4)}`
 }

package/src/definitions.ts

@@ -3,6 +3,7 @@ import { z } from 'zod'
 import { normaliseLocale, SOURCE_LOCALE } from '@meith/i18n'
 
 import { DEFAULT_PRIVACY_POLICY, DEFAULT_TERMS_OF_SERVICE } from './legal'
+import { mailEndpointProblem } from './mail'
 import { isUsableFeedUrl, isUsableIssuer, isUsableOrigin } from './origin'
 
 export type SettingGroup =
@@ -301,6 +302,19 @@ export const SETTING_DEFINITIONS = [
     invalidates: ['settings', 'layout'],
     ui: { managed: true },
   }),
+  define({
+    key: 'board.favicon',
+    group: 'board',
+    label: 'Favicon',
+    description:
+      'The icon browser tabs, bookmarks and an installed shortcut show for this board. ' +
+      'Uploaded, not typed. Left empty, an icon is generated from the board name and its ' +
+      'theme colours.',
+    schema: z.string().max(300),
+    default: '',
+    invalidates: ['settings', 'layout'],
+    ui: { managed: true },
+  }),
   define({
     key: 'board.logo_alt',
     group: 'board',
@@ -417,14 +431,16 @@ export const SETTING_DEFINITIONS = [
       'Only for the provider-API transport. The board posts Resend’s exact ' +
       'field names with a Bearer token, so this works for Resend and for ' +
       'anything that copies it — and not for Postmark or Mailgun, whose SMTP ' +
-      'hosts are the way in.',
+      'hosts are the way in. It must be an https:// address with no embedded ' +
+      'credentials, and the board refuses to reach one that resolves to a ' +
+      'private or internal address.',
     schema: z
       .string()
       .trim()
-      .refine(
-        (value) => value === '' || z.string().url().safeParse(value).success,
-        'That is not a URL.',
-      ),
+      .superRefine((value, ctx) => {
+        const problem = mailEndpointProblem(value)
+        if (problem !== null) ctx.addIssue({ code: z.ZodIssueCode.custom, message: problem })
+      }),
     default: '',
   }),
   define({

package/src/index.ts

@@ -7,6 +7,9 @@ export {
   resolveBoardUrl,
 } from './board-url'
 export {
+  faviconFormat,
+  faviconPath,
+  isFaviconKey,
   isLogoKey,
   isLogoScheme,
   LOGO_SCHEMES,
@@ -48,6 +51,7 @@ export {
   mailConfigFromEnvironment,
   mailConfigFromSettings,
   mailConfigProblems,
+  mailEndpointProblem,
   NO_MAIL,
   resolveMailConfig,
   type SmtpMailConfig,

package/src/mail.ts

@@ -175,6 +175,24 @@ function hostOf(endpoint: string): string {
   }
 }
 
+export function mailEndpointProblem(value: string): string | null {
+  const trimmed = value.trim()
+  if (trimmed === '') return null
+
+  let url: URL
+  try {
+    url = new URL(trimmed)
+  } catch {
+    return 'That is not a URL.'
+  }
+
+  if (url.protocol !== 'https:') return 'The endpoint must be an https:// URL.'
+  if (url.username !== '' || url.password !== '') {
+    return 'The endpoint must not carry a username or password.'
+  }
+  return null
+}
+
 export interface MailPreset {
   readonly id: string
   readonly label: string