@storyshelf/app 0.6.1 → 0.7.0

package/dist/routers/settings-design.mjs

@@ -0,0 +1,103 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { credentialKeys } from "../credential-keys.mjs";
+import { getStore } from "../store.mjs";
+import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
+import { hxRedirect } from "./htmx.mjs";
+import { flash } from "./flash.mjs";
+import { asString, renderSettingsPage } from "./settings.handlers.mjs";
+import { DesignCredentialModel, DesignModel } from "@storyshelf/core/models";
+import { InvalidDesignUrlError } from "@storyshelf/core/adapter/design";
+//#region src/routers/settings-design.ts
+/** Design settings (project design files, component mapping, provider credentials). */
+function registerDesignSettings(app) {
+	const base = "/projects/:slug/settings/design";
+	app.get(base, async (c) => c.html(await renderSettingsPage(c, "design")));
+	app.post(`${base}/files`, handleAddFile);
+	app.post(`${base}/files/:id/delete`, handleRemoveLink);
+	app.post(`${base}/components`, handleMapComponent);
+	app.post(`${base}/components/:id/delete`, handleRemoveLink);
+	app.post(`${base}/:provider/token`, handleSetToken);
+	app.post(`${base}/:provider/token/delete`, handleRemoveToken);
+}
+/**
+* Every design-settings mutation writes credentials or mappings: require a
+* project admin server-side (the forms are only hidden from others, never trusted).
+* With auth disabled the app has no roles and everyone may administer, as elsewhere.
+*/
+async function adminProject(c) {
+	return await resolveAuthorizedProject(c, c.req.param("slug") ?? "", "admin");
+}
+function designModel() {
+	const { db, design } = getStore();
+	return new DesignModel(db, design);
+}
+function credentialModel() {
+	const { db, config } = getStore();
+	return new DesignCredentialModel(db, credentialKeys(config));
+}
+/** The configured provider addressed by `:provider`, or a 404. */
+function providerOf(c) {
+	const provider = getStore().design.find((candidate) => candidate.metadata.kind === c.req.param("provider"));
+	if (!provider) notFound("Unknown design provider");
+	return provider;
+}
+async function reject(c, errors) {
+	return c.html(await renderSettingsPage(c, "design", { errors }) ?? "", 400);
+}
+function done(c, slug, message) {
+	flash(c, message);
+	return hxRedirect(c, `/projects/${slug}/settings/design`);
+}
+async function handleAddFile(c) {
+	const project = await adminProject(c);
+	const form = await c.req.formData();
+	const label = asString(form.get("label")) ?? "";
+	try {
+		await designModel().addProjectLink(project.id, {
+			label,
+			url: asString(form.get("url")) ?? ""
+		});
+	} catch (error) {
+		if (error instanceof InvalidDesignUrlError) return await reject(c, { file: error.message });
+		throw error;
+	}
+	return done(c, project.slug, "Design file added");
+}
+async function handleMapComponent(c) {
+	const project = await adminProject(c);
+	const form = await c.req.formData();
+	const importPath = asString(form.get("importPath")) ?? "";
+	if (!importPath) return await reject(c, { component: "Enter the story file path" });
+	try {
+		await designModel().setComponentLink(project.id, importPath, asString(form.get("url")) ?? "");
+	} catch (error) {
+		if (error instanceof InvalidDesignUrlError) return await reject(c, { component: error.message });
+		throw error;
+	}
+	return done(c, project.slug, "Component mapped");
+}
+async function handleRemoveLink(c) {
+	const project = await adminProject(c);
+	await designModel().removeLink(project.id, c.req.param("id") ?? "");
+	return done(c, project.slug, "Link removed");
+}
+async function handleSetToken(c) {
+	const project = await adminProject(c);
+	const provider = providerOf(c);
+	const token = asString((await c.req.formData()).get("token"));
+	if (!token) return await reject(c, { [`token:${provider.metadata.kind}`]: "Token is required" });
+	await credentialModel().set(project.id, provider.metadata.kind, token);
+	return done(c, project.slug, `${provider.metadata.name} token saved`);
+}
+async function handleRemoveToken(c) {
+	const project = await adminProject(c);
+	const provider = providerOf(c);
+	await credentialModel().remove(project.id, provider.metadata.kind);
+	return done(c, project.slug, `${provider.metadata.name} token removed`);
+}
+//#endregion
+export { registerDesignSettings };
+
+//# sourceMappingURL=settings-design.mjs.map

package/dist/routers/settings-design.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-design.mjs","names":[],"sources":["../../src/routers/settings-design.ts"],"sourcesContent":["import { InvalidDesignUrlError, type DesignProvider } from \"@storyshelf/core/adapter/design\";\nimport { DesignCredentialModel, DesignModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { notFound, resolveAuthorizedProject } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, renderSettingsPage } from \"./settings.handlers.ts\";\n\n/** Design settings (project design files, component mapping, provider credentials). */\nexport function registerDesignSettings(app: ShelfRouter): void {\n  const base = \"/projects/:slug/settings/design\";\n  app.get(base, async (c) => c.html(await renderSettingsPage(c, \"design\")));\n  app.post(`${base}/files`, handleAddFile);\n  app.post(`${base}/files/:id/delete`, handleRemoveLink);\n  app.post(`${base}/components`, handleMapComponent);\n  app.post(`${base}/components/:id/delete`, handleRemoveLink);\n  app.post(`${base}/:provider/token`, handleSetToken);\n  app.post(`${base}/:provider/token/delete`, handleRemoveToken);\n}\n\n/**\n * Every design-settings mutation writes credentials or mappings: require a\n * project admin server-side (the forms are only hidden from others, never trusted).\n * With auth disabled the app has no roles and everyone may administer, as elsewhere.\n */\nasync function adminProject(c: Context): Promise<Project> {\n  return await resolveAuthorizedProject(c, c.req.param(\"slug\") ?? \"\", \"admin\");\n}\n\nfunction designModel(): DesignModel {\n  const { db, design } = getStore();\n  return new DesignModel(db, design);\n}\n\nfunction credentialModel(): DesignCredentialModel {\n  const { db, config } = getStore();\n  return new DesignCredentialModel(db, credentialKeys(config));\n}\n\n/** The configured provider addressed by `:provider`, or a 404. */\nfunction providerOf(c: Context): DesignProvider {\n  const provider = getStore().design.find(\n    (candidate) => candidate.metadata.kind === c.req.param(\"provider\"),\n  );\n  if (!provider) notFound(\"Unknown design provider\");\n  return provider;\n}\n\nasync function reject(c: Context, errors: Record<string, string>): Promise<Response> {\n  return c.html((await renderSettingsPage(c, \"design\", { errors })) ?? \"\", 400);\n}\n\nfunction done(c: Context, slug: string, message: string): Response {\n  flash(c, message);\n  return hxRedirect(c, `/projects/${slug}/settings/design`);\n}\n\nasync function handleAddFile(c: Context): Promise<Response> {\n  const project = await adminProject(c);\n  const form = await c.req.formData();\n  const label = asString(form.get(\"label\")) ?? \"\";\n  try {\n    await designModel().addProjectLink(project.id, { label, url: asString(form.get(\"url\")) ?? \"\" });\n  } catch (error) {\n    if (error instanceof InvalidDesignUrlError) return await reject(c, { file: error.message });\n    throw error;\n  }\n  return done(c, project.slug, \"Design file added\");\n}\n\nasync function handleMapComponent(c: Context): Promise<Response> {\n  const project = await adminProject(c);\n  const form = await c.req.formData();\n  const importPath = asString(form.get(\"importPath\")) ?? \"\";\n  if (!importPath) return await reject(c, { component: \"Enter the story file path\" });\n  try {\n    await designModel().setComponentLink(project.id, importPath, asString(form.get(\"url\")) ?? \"\");\n  } catch (error) {\n    if (error instanceof InvalidDesignUrlError) {\n      return await reject(c, { component: error.message });\n    }\n    throw error;\n  }\n  return done(c, project.slug, \"Component mapped\");\n}\n\nasync function handleRemoveLink(c: Context): Promise<Response> {\n  const project = await adminProject(c);\n  await designModel().removeLink(project.id, c.req.param(\"id\") ?? \"\");\n  return done(c, project.slug, \"Link removed\");\n}\n\nasync function handleSetToken(c: Context): Promise<Response> {\n  const project = await adminProject(c);\n  const provider = providerOf(c);\n  const token = asString((await c.req.formData()).get(\"token\"));\n  if (!token) return await reject(c, { [`token:${provider.metadata.kind}`]: \"Token is required\" });\n  await credentialModel().set(project.id, provider.metadata.kind, token);\n  return done(c, project.slug, `${provider.metadata.name} token saved`);\n}\n\nasync function handleRemoveToken(c: Context): Promise<Response> {\n  const project = await adminProject(c);\n  const provider = providerOf(c);\n  await credentialModel().remove(project.id, provider.metadata.kind);\n  return done(c, project.slug, `${provider.metadata.name} token removed`);\n}\n"],"mappings":";;;;;;;;;;;;;AAaA,SAAgB,uBAAuB,KAAwB;CAC7D,MAAM,OAAO;CACb,IAAI,IAAI,MAAM,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,GAAG,QAAQ,CAAC,CAAC;CACxE,IAAI,KAAK,GAAG,KAAK,SAAS,aAAa;CACvC,IAAI,KAAK,GAAG,KAAK,oBAAoB,gBAAgB;CACrD,IAAI,KAAK,GAAG,KAAK,cAAc,kBAAkB;CACjD,IAAI,KAAK,GAAG,KAAK,yBAAyB,gBAAgB;CAC1D,IAAI,KAAK,GAAG,KAAK,mBAAmB,cAAc;CAClD,IAAI,KAAK,GAAG,KAAK,0BAA0B,iBAAiB;AAC9D;;;;;;AAOA,eAAe,aAAa,GAA8B;CACxD,OAAO,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,KAAK,IAAI,OAAO;AAC7E;AAEA,SAAS,cAA2B;CAClC,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,OAAO,IAAI,YAAY,IAAI,MAAM;AACnC;AAEA,SAAS,kBAAyC;CAChD,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,OAAO,IAAI,sBAAsB,IAAI,eAAe,MAAM,CAAC;AAC7D;;AAGA,SAAS,WAAW,GAA4B;CAC9C,MAAM,WAAW,SAAS,CAAC,CAAC,OAAO,MAChC,cAAc,UAAU,SAAS,SAAS,EAAE,IAAI,MAAM,UAAU,CACnE;CACA,IAAI,CAAC,UAAU,SAAS,yBAAyB;CACjD,OAAO;AACT;AAEA,eAAe,OAAO,GAAY,QAAmD;CACnF,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,OAAO,CAAC,KAAM,IAAI,GAAG;AAC9E;AAEA,SAAS,KAAK,GAAY,MAAc,SAA2B;CACjE,MAAM,GAAG,OAAO;CAChB,OAAO,WAAW,GAAG,aAAa,KAAK,iBAAiB;AAC1D;AAEA,eAAe,cAAc,GAA+B;CAC1D,MAAM,UAAU,MAAM,aAAa,CAAC;CACpC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,QAAQ,SAAS,KAAK,IAAI,OAAO,CAAC,KAAK;CAC7C,IAAI;EACF,MAAM,YAAY,CAAC,CAAC,eAAe,QAAQ,IAAI;GAAE;GAAO,KAAK,SAAS,KAAK,IAAI,KAAK,CAAC,KAAK;EAAG,CAAC;CAChG,SAAS,OAAO;EACd,IAAI,iBAAiB,uBAAuB,OAAO,MAAM,OAAO,GAAG,EAAE,MAAM,MAAM,QAAQ,CAAC;EAC1F,MAAM;CACR;CACA,OAAO,KAAK,GAAG,QAAQ,MAAM,mBAAmB;AAClD;AAEA,eAAe,mBAAmB,GAA+B;CAC/D,MAAM,UAAU,MAAM,aAAa,CAAC;CACpC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,aAAa,SAAS,KAAK,IAAI,YAAY,CAAC,KAAK;CACvD,IAAI,CAAC,YAAY,OAAO,MAAM,OAAO,GAAG,EAAE,WAAW,4BAA4B,CAAC;CAClF,IAAI;EACF,MAAM,YAAY,CAAC,CAAC,iBAAiB,QAAQ,IAAI,YAAY,SAAS,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE;CAC9F,SAAS,OAAO;EACd,IAAI,iBAAiB,uBACnB,OAAO,MAAM,OAAO,GAAG,EAAE,WAAW,MAAM,QAAQ,CAAC;EAErD,MAAM;CACR;CACA,OAAO,KAAK,GAAG,QAAQ,MAAM,kBAAkB;AACjD;AAEA,eAAe,iBAAiB,GAA+B;CAC7D,MAAM,UAAU,MAAM,aAAa,CAAC;CACpC,MAAM,YAAY,CAAC,CAAC,WAAW,QAAQ,IAAI,EAAE,IAAI,MAAM,IAAI,KAAK,EAAE;CAClE,OAAO,KAAK,GAAG,QAAQ,MAAM,cAAc;AAC7C;AAEA,eAAe,eAAe,GAA+B;CAC3D,MAAM,UAAU,MAAM,aAAa,CAAC;CACpC,MAAM,WAAW,WAAW,CAAC;CAC7B,MAAM,QAAQ,UAAU,MAAM,EAAE,IAAI,SAAS,EAAA,CAAG,IAAI,OAAO,CAAC;CAC5D,IAAI,CAAC,OAAO,OAAO,MAAM,OAAO,GAAG,GAAG,SAAS,SAAS,SAAS,SAAS,oBAAoB,CAAC;CAC/F,MAAM,gBAAgB,CAAC,CAAC,IAAI,QAAQ,IAAI,SAAS,SAAS,MAAM,KAAK;CACrE,OAAO,KAAK,GAAG,QAAQ,MAAM,GAAG,SAAS,SAAS,KAAK,aAAa;AACtE;AAEA,eAAe,kBAAkB,GAA+B;CAC9D,MAAM,UAAU,MAAM,aAAa,CAAC;CACpC,MAAM,WAAW,WAAW,CAAC;CAC7B,MAAM,gBAAgB,CAAC,CAAC,OAAO,QAAQ,IAAI,SAAS,SAAS,IAAI;CACjE,OAAO,KAAK,GAAG,QAAQ,MAAM,GAAG,SAAS,SAAS,KAAK,eAAe;AACxE"}

package/dist/routers/settings-general.mjs

@@ -2,11 +2,14 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
+import { resolveAuthorizedProject } from "./helpers.mjs";
+import { assertTargetsSelectable } from "../targets.mjs";
 import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
+import { runSwitchOffPass } from "./review-switch-off.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
+import { resolveBrowsers } from "@storyshelf/core/capture";
 import { ProjectModel } from "@storyshelf/core/models";
-import { BROWSER_NAMES } from "@storyshelf/core/adapter/capture-runner";
 //#region src/routers/settings-general.ts
 /** General project settings (name, repo, thresholds) and danger-zone delete. */
 function registerGeneralSettings(app) {
@@ -14,6 +17,7 @@ function registerGeneralSettings(app) {
 	app.get("/projects/:slug/settings/tests", async (c) => c.html(await renderSettingsPage(c, "tests")));
 	app.post("/projects/:slug/settings", handleGeneralUpdate);
 	app.post("/projects/:slug/settings/tests", handleTestsUpdate);
+	app.post("/projects/:slug/settings/review", handleReviewUpdate);
 	app.post("/projects/:slug/delete", handleDeleteProject);
 }
 /** Read the general-settings form fields (name validated by the caller). */
@@ -33,15 +37,18 @@ async function handleGeneralUpdate(c) {
 	const form = await c.req.formData();
 	const name = form.get("name");
 	if (typeof name !== "string" || name.trim() === "") return c.html(await renderSettingsPage(c, "general", { errors: { name: "Name is required" } }) ?? "", 400);
-	const fields = {
+	return await persistGeneralUpdate(c, project, slug, {
 		...readGeneralFields(form),
 		name: name.trim()
-	};
-	if (fields.browser !== void 0 && !BROWSER_NAMES.includes(fields.browser)) return c.html(await renderSettingsPage(c, "general", { globalError: `Invalid browser "${fields.browser}". Choose one of: ${BROWSER_NAMES.join(", ")}.` }) ?? "", 400);
-	return await persistGeneralUpdate(c, project, slug, fields);
+	});
+}
+/** Refuse, with 400 and the reason, a browser the runner cannot render (ADR 0007, decision 7). */
+async function assertBrowserChoice(project, browser) {
+	if (browser !== void 0) await assertTargetsSelectable([browser], resolveBrowsers(project));
 }
 async function persistGeneralUpdate(c, project, slug, fields) {
 	try {
+		await assertBrowserChoice(project, fields.browser);
 		await new ProjectModel(getStore().db).update(project.id, {
 			name: fields.name,
 			gitRepository: fields.gitRepository ?? void 0,
@@ -49,7 +56,8 @@ async function persistGeneralUpdate(c, project, slug, fields) {
 			pixelThreshold: fields.pixelThreshold ? Number(fields.pixelThreshold) : void 0,
 			maxDiffRatio: fields.maxDiffRatio ? Number(fields.maxDiffRatio) : void 0,
 			publicBranchRegex: fields.publicBranchRegex === "" ? null : fields.publicBranchRegex ?? void 0,
-			browser: fields.browser ?? void 0
+			browser: fields.browser ?? void 0,
+			...fields.browser && fields.browser !== project.browser ? { browsers: null } : {}
 		});
 		flash(c, "Project settings saved");
 		return hxRedirect(c, `/projects/${slug}/settings`);
@@ -61,16 +69,22 @@ async function persistGeneralUpdate(c, project, slug, fields) {
 async function handleTestsUpdate(c) {
 	const slug = c.req.param("slug") ?? "";
 	const project = await findProject(slug);
-	const { executePlay, playTimeoutMs } = readTestsFields(await c.req.formData());
+	const { executePlay, runA11y, runTests, playTimeoutMs } = readTestsFields(await c.req.formData());
 	const rangeError = playTimeoutError(playTimeoutMs);
 	if (rangeError) return c.html(await renderSettingsPage(c, "tests", { globalError: rangeError }) ?? "", 400);
-	return await persistTestsUpdate(c, project, slug, executePlay, playTimeoutMs);
+	return await persistTestsUpdate(c, project, slug, {
+		executePlay,
+		runA11y,
+		runTests
+	}, playTimeoutMs);
 }
 /** Read the tests-tab form fields. */
 function readTestsFields(form) {
 	const playTimeoutMsRaw = asString(form.get("playTimeoutMs"));
 	return {
 		executePlay: form.get("executePlay") === "true",
+		runA11y: form.get("runA11y") === "true",
+		runTests: form.get("runTests") === "true",
 		playTimeoutMs: playTimeoutMsRaw ? Number(playTimeoutMsRaw) : void 0
 	};
 }
@@ -79,10 +93,10 @@ function playTimeoutError(playTimeoutMs) {
 	if (playTimeoutMs !== void 0 && (Number.isNaN(playTimeoutMs) || playTimeoutMs < 1e3 || playTimeoutMs > 3e4)) return "Play timeout must be between 1000 and 30000";
 	return null;
 }
-async function persistTestsUpdate(c, project, slug, executePlay, playTimeoutMs) {
+async function persistTestsUpdate(c, project, slug, switches, playTimeoutMs) {
 	try {
 		await new ProjectModel(getStore().db).update(project.id, {
-			executePlay,
+			...switches,
 			playTimeoutMs: playTimeoutMs ?? void 0
 		});
 		flash(c, "Test settings saved");
@@ -98,6 +112,37 @@ async function handleDeleteProject(c) {
 	flash(c, `Deleted ${project.name}`);
 	return hxRedirect(c, "/projects");
 }
+/** Largest approval count the form and the API accept. */
+const MAX_APPROVALS = 20;
+/**
+* Review settings (ADR 0013, decision 1): the switch and the approvals a build needs. Project
+* admins only. The route is classed `hosting`, not `review`: a review route answers 404 while
+* review is off, and this is the form that turns it back on. Turning review off accepts the
+* project's pending builds that no capture worked on, in one pass.
+*/
+async function handleReviewUpdate(c) {
+	const slug = c.req.param("slug") ?? "";
+	const project = await resolveAuthorizedProject(c, slug, "admin");
+	const form = await c.req.formData();
+	const approvals = approvalsOf(form, project);
+	if (approvals === null) return c.html(await renderSettingsPage(c, "general", { errors: { reviewApprovals: `Enter a whole number from 1 to ${MAX_APPROVALS}` } }) ?? "", 400);
+	const updated = await new ProjectModel(getStore().db).update(project.id, {
+		reviewEnabled: form.get("reviewEnabled") === "true",
+		reviewApprovals: approvals
+	});
+	const accepted = await runSwitchOffPass(project, updated);
+	flash(c, reviewSavedMessage(accepted));
+	return hxRedirect(c, `/projects/${slug}/settings`);
+}
+/** The approvals count of the form (the current one when blank); null when it is not 1 to 20. */
+function approvalsOf(form, project) {
+	const raw = asString(form.get("reviewApprovals"));
+	const approvals = raw ? Number(raw) : project.reviewApprovals ?? 1;
+	return Number.isInteger(approvals) && approvals >= 1 && approvals <= MAX_APPROVALS ? approvals : null;
+}
+function reviewSavedMessage(accepted) {
+	return accepted > 0 ? `Review settings saved; accepted ${accepted} pending build${accepted === 1 ? "" : "s"}` : "Review settings saved";
+}
 //#endregion
 export { registerGeneralSettings };
 

package/dist/routers/settings-general.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings-general.mjs","names":[],"sources":["../../src/routers/settings-general.ts"],"sourcesContent":["import { BROWSER_NAMES } from \"@storyshelf/core/adapter/capture-runner\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n/** General project settings (name, repo, thresholds) and danger-zone delete. */\nexport function registerGeneralSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings\", async (c) => c.html(await renderSettingsPage(c, \"general\")));\n  app.get(\"/projects/:slug/settings/tests\", async (c) =>\n    c.html(await renderSettingsPage(c, \"tests\")),\n  );\n  app.post(\"/projects/:slug/settings\", handleGeneralUpdate);\n  app.post(\"/projects/:slug/settings/tests\", handleTestsUpdate);\n  app.post(\"/projects/:slug/delete\", handleDeleteProject);\n}\n\ninterface GeneralFields {\n  name: string;\n  gitRepository?: string;\n  gitDefaultBranch?: string;\n  pixelThreshold?: string;\n  maxDiffRatio?: string;\n  publicBranchRegex?: string;\n  browser?: string;\n}\n\n/** Read the general-settings form fields (name validated by the caller). */\nfunction readGeneralFields(form: FormData): Omit<GeneralFields, \"name\"> {\n  return {\n    gitRepository: asString(form.get(\"gitRepository\")),\n    gitDefaultBranch: asString(form.get(\"gitDefaultBranch\")),\n    pixelThreshold: asString(form.get(\"pixelThreshold\")),\n    maxDiffRatio: asString(form.get(\"maxDiffRatio\")),\n    publicBranchRegex: asString(form.get(\"publicBranchRegex\")),\n    browser: asString(form.get(\"browser\")),\n  };\n}\n\nasync function handleGeneralUpdate(c: Context): Promise<Response> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const project = await findProject(slug);\n  const form = await c.req.formData();\n  const name = form.get(\"name\");\n  if (typeof name !== \"string\" || name.trim() === \"\") {\n    return c.html(\n      (await renderSettingsPage(c, \"general\", { errors: { name: \"Name is required\" } })) ?? \"\",\n      400,\n    );\n  }\n  const fields: GeneralFields = { ...readGeneralFields(form), name: name.trim() };\n  if (\n    fields.browser !== undefined &&\n    !(BROWSER_NAMES as readonly string[]).includes(fields.browser)\n  ) {\n    return c.html(\n      (await renderSettingsPage(c, \"general\", {\n        globalError: `Invalid browser \"${fields.browser}\". Choose one of: ${BROWSER_NAMES.join(\", \")}.`,\n      })) ?? \"\",\n      400,\n    );\n  }\n  return await persistGeneralUpdate(c, project, slug, fields);\n}\n\nasync function persistGeneralUpdate(\n  c: Context,\n  project: Project,\n  slug: string,\n  fields: GeneralFields,\n): Promise<Response> {\n  try {\n    await new ProjectModel(getStore().db).update(project.id, {\n      name: fields.name,\n      gitRepository: fields.gitRepository ?? undefined,\n      gitDefaultBranch: fields.gitDefaultBranch ?? undefined,\n      pixelThreshold: fields.pixelThreshold ? Number(fields.pixelThreshold) : undefined,\n      maxDiffRatio: fields.maxDiffRatio ? Number(fields.maxDiffRatio) : undefined,\n      publicBranchRegex:\n        fields.publicBranchRegex === \"\" ? null : (fields.publicBranchRegex ?? undefined),\n      browser: fields.browser ?? undefined,\n    });\n    flash(c, \"Project settings saved\");\n    return hxRedirect(c, `/projects/${slug}/settings`);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : \"Failed to update\";\n    return c.html((await renderSettingsPage(c, \"general\", { globalError: message })) ?? \"\", 400);\n  }\n}\n\nasync function handleTestsUpdate(c: Context): Promise<Response> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const project = await findProject(slug);\n  const form = await c.req.formData();\n  const { executePlay, playTimeoutMs } = readTestsFields(form);\n  const rangeError = playTimeoutError(playTimeoutMs);\n  if (rangeError) {\n    return c.html((await renderSettingsPage(c, \"tests\", { globalError: rangeError })) ?? \"\", 400);\n  }\n  return await persistTestsUpdate(c, project, slug, executePlay, playTimeoutMs);\n}\n\n/** Read the tests-tab form fields. */\nfunction readTestsFields(form: FormData): {\n  executePlay: boolean;\n  playTimeoutMs: number | undefined;\n} {\n  const playTimeoutMsRaw = asString(form.get(\"playTimeoutMs\"));\n  return {\n    executePlay: form.get(\"executePlay\") === \"true\",\n    playTimeoutMs: playTimeoutMsRaw ? Number(playTimeoutMsRaw) : undefined,\n  };\n}\n\n/** Range error for the play timeout, or null when valid. */\nfunction playTimeoutError(playTimeoutMs: number | undefined): string | null {\n  if (\n    playTimeoutMs !== undefined &&\n    (Number.isNaN(playTimeoutMs) || playTimeoutMs < 1000 || playTimeoutMs > 30_000)\n  ) {\n    return \"Play timeout must be between 1000 and 30000\";\n  }\n  return null;\n}\n\nasync function persistTestsUpdate(\n  c: Context,\n  project: Project,\n  slug: string,\n  executePlay: boolean,\n  playTimeoutMs: number | undefined,\n): Promise<Response> {\n  try {\n    await new ProjectModel(getStore().db).update(project.id, {\n      executePlay,\n      playTimeoutMs: playTimeoutMs ?? undefined,\n    });\n    flash(c, \"Test settings saved\");\n    return hxRedirect(c, `/projects/${slug}/settings/tests`);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : \"Failed to update\";\n    return c.html((await renderSettingsPage(c, \"tests\", { globalError: message })) ?? \"\", 400);\n  }\n}\n\nasync function handleDeleteProject(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  await new ProjectModel(getStore().db).remove(project.id);\n  flash(c, `Deleted ${project.name}`);\n  return hxRedirect(c, \"/projects\");\n}\n"],"mappings":";;;;;;;;;;;AAUA,SAAgB,wBAAwB,KAAwB;CAC9D,IAAI,IAAI,4BAA4B,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,GAAG,SAAS,CAAC,CAAC;CAC/F,IAAI,IAAI,kCAAkC,OAAO,MAC/C,EAAE,KAAK,MAAM,mBAAmB,GAAG,OAAO,CAAC,CAC7C;CACA,IAAI,KAAK,4BAA4B,mBAAmB;CACxD,IAAI,KAAK,kCAAkC,iBAAiB;CAC5D,IAAI,KAAK,0BAA0B,mBAAmB;AACxD;;AAaA,SAAS,kBAAkB,MAA6C;CACtE,OAAO;EACL,eAAe,SAAS,KAAK,IAAI,eAAe,CAAC;EACjD,kBAAkB,SAAS,KAAK,IAAI,kBAAkB,CAAC;EACvD,gBAAgB,SAAS,KAAK,IAAI,gBAAgB,CAAC;EACnD,cAAc,SAAS,KAAK,IAAI,cAAc,CAAC;EAC/C,mBAAmB,SAAS,KAAK,IAAI,mBAAmB,CAAC;EACzD,SAAS,SAAS,KAAK,IAAI,SAAS,CAAC;CACvC;AACF;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;CACpC,MAAM,UAAU,MAAM,YAAY,IAAI;CACtC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,OAAO,KAAK,IAAI,MAAM;CAC5B,IAAI,OAAO,SAAS,YAAY,KAAK,KAAK,MAAM,IAC9C,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,EAAE,CAAC,KAAM,IACtF,GACF;CAEF,MAAM,SAAwB;EAAE,GAAG,kBAAkB,IAAI;EAAG,MAAM,KAAK,KAAK;CAAE;CAC9E,IACE,OAAO,YAAY,KAAA,KACnB,CAAE,cAAoC,SAAS,OAAO,OAAO,GAE7D,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,WAAW,EACtC,aAAa,oBAAoB,OAAO,QAAQ,oBAAoB,cAAc,KAAK,IAAI,EAAE,GAC/F,CAAC,KAAM,IACP,GACF;CAEF,OAAO,MAAM,qBAAqB,GAAG,SAAS,MAAM,MAAM;AAC5D;AAEA,eAAe,qBACb,GACA,SACA,MACA,QACmB;CACnB,IAAI;EACF,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;GACvD,MAAM,OAAO;GACb,eAAe,OAAO,iBAAiB,KAAA;GACvC,kBAAkB,OAAO,oBAAoB,KAAA;GAC7C,gBAAgB,OAAO,iBAAiB,OAAO,OAAO,cAAc,IAAI,KAAA;GACxE,cAAc,OAAO,eAAe,OAAO,OAAO,YAAY,IAAI,KAAA;GAClE,mBACE,OAAO,sBAAsB,KAAK,OAAQ,OAAO,qBAAqB,KAAA;GACxE,SAAS,OAAO,WAAW,KAAA;EAC7B,CAAC;EACD,MAAM,GAAG,wBAAwB;EACjC,OAAO,WAAW,GAAG,aAAa,KAAK,UAAU;CACnD,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;EACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,WAAW,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;CAC7F;AACF;AAEA,eAAe,kBAAkB,GAA+B;CAC9D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;CACpC,MAAM,UAAU,MAAM,YAAY,IAAI;CAEtC,MAAM,EAAE,aAAa,kBAAkB,gBAAgB,MADpC,EAAE,IAAI,SAAS,CACyB;CAC3D,MAAM,aAAa,iBAAiB,aAAa;CACjD,IAAI,YACF,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,SAAS,EAAE,aAAa,WAAW,CAAC,KAAM,IAAI,GAAG;CAE9F,OAAO,MAAM,mBAAmB,GAAG,SAAS,MAAM,aAAa,aAAa;AAC9E;;AAGA,SAAS,gBAAgB,MAGvB;CACA,MAAM,mBAAmB,SAAS,KAAK,IAAI,eAAe,CAAC;CAC3D,OAAO;EACL,aAAa,KAAK,IAAI,aAAa,MAAM;EACzC,eAAe,mBAAmB,OAAO,gBAAgB,IAAI,KAAA;CAC/D;AACF;;AAGA,SAAS,iBAAiB,eAAkD;CAC1E,IACE,kBAAkB,KAAA,MACjB,OAAO,MAAM,aAAa,KAAK,gBAAgB,OAAQ,gBAAgB,MAExE,OAAO;CAET,OAAO;AACT;AAEA,eAAe,mBACb,GACA,SACA,MACA,aACA,eACmB;CACnB,IAAI;EACF,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;GACvD;GACA,eAAe,iBAAiB,KAAA;EAClC,CAAC;EACD,MAAM,GAAG,qBAAqB;EAC9B,OAAO,WAAW,GAAG,aAAa,KAAK,gBAAgB;CACzD,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;EACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,SAAS,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;CAC3F;AACF;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,EAAE;CACvD,MAAM,GAAG,WAAW,QAAQ,MAAM;CAClC,OAAO,WAAW,GAAG,WAAW;AAClC"}
+{"version":3,"file":"settings-general.mjs","names":[],"sources":["../../src/routers/settings-general.ts"],"sourcesContent":["import { resolveBrowsers } from \"@storyshelf/core/capture\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { assertTargetsSelectable } from \"../targets.ts\";\nimport { flash } from \"./flash.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { runSwitchOffPass } from \"./review-switch-off.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n/** General project settings (name, repo, thresholds) and danger-zone delete. */\nexport function registerGeneralSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings\", async (c) => c.html(await renderSettingsPage(c, \"general\")));\n  app.get(\"/projects/:slug/settings/tests\", async (c) =>\n    c.html(await renderSettingsPage(c, \"tests\")),\n  );\n  app.post(\"/projects/:slug/settings\", handleGeneralUpdate);\n  app.post(\"/projects/:slug/settings/tests\", handleTestsUpdate);\n  app.post(\"/projects/:slug/settings/review\", handleReviewUpdate);\n  app.post(\"/projects/:slug/delete\", handleDeleteProject);\n}\n\ninterface GeneralFields {\n  name: string;\n  gitRepository?: string;\n  gitDefaultBranch?: string;\n  pixelThreshold?: string;\n  maxDiffRatio?: string;\n  publicBranchRegex?: string;\n  browser?: string;\n}\n\n/** Read the general-settings form fields (name validated by the caller). */\nfunction readGeneralFields(form: FormData): Omit<GeneralFields, \"name\"> {\n  return {\n    gitRepository: asString(form.get(\"gitRepository\")),\n    gitDefaultBranch: asString(form.get(\"gitDefaultBranch\")),\n    pixelThreshold: asString(form.get(\"pixelThreshold\")),\n    maxDiffRatio: asString(form.get(\"maxDiffRatio\")),\n    publicBranchRegex: asString(form.get(\"publicBranchRegex\")),\n    browser: asString(form.get(\"browser\")),\n  };\n}\n\nasync function handleGeneralUpdate(c: Context): Promise<Response> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const project = await findProject(slug);\n  const form = await c.req.formData();\n  const name = form.get(\"name\");\n  if (typeof name !== \"string\" || name.trim() === \"\") {\n    return c.html(\n      (await renderSettingsPage(c, \"general\", { errors: { name: \"Name is required\" } })) ?? \"\",\n      400,\n    );\n  }\n  const fields: GeneralFields = { ...readGeneralFields(form), name: name.trim() };\n  return await persistGeneralUpdate(c, project, slug, fields);\n}\n\n/** Refuse, with 400 and the reason, a browser the runner cannot render (ADR 0007, decision 7). */\nasync function assertBrowserChoice(project: Project, browser: string | undefined): Promise<void> {\n  if (browser !== undefined) {\n    await assertTargetsSelectable([browser], resolveBrowsers(project));\n  }\n}\n\nasync function persistGeneralUpdate(\n  c: Context,\n  project: Project,\n  slug: string,\n  fields: GeneralFields,\n): Promise<Response> {\n  try {\n    await assertBrowserChoice(project, fields.browser);\n    await new ProjectModel(getStore().db).update(project.id, {\n      name: fields.name,\n      gitRepository: fields.gitRepository ?? undefined,\n      gitDefaultBranch: fields.gitDefaultBranch ?? undefined,\n      pixelThreshold: fields.pixelThreshold ? Number(fields.pixelThreshold) : undefined,\n      maxDiffRatio: fields.maxDiffRatio ? Number(fields.maxDiffRatio) : undefined,\n      publicBranchRegex:\n        fields.publicBranchRegex === \"\" ? null : (fields.publicBranchRegex ?? undefined),\n      browser: fields.browser ?? undefined,\n      // Picking a different single engine returns the project to one-browser capture.\n      ...(fields.browser && fields.browser !== project.browser ? { browsers: null } : {}),\n    });\n    flash(c, \"Project settings saved\");\n    return hxRedirect(c, `/projects/${slug}/settings`);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : \"Failed to update\";\n    return c.html((await renderSettingsPage(c, \"general\", { globalError: message })) ?? \"\", 400);\n  }\n}\n\nasync function handleTestsUpdate(c: Context): Promise<Response> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const project = await findProject(slug);\n  const form = await c.req.formData();\n  const { executePlay, runA11y, runTests, playTimeoutMs } = readTestsFields(form);\n  const rangeError = playTimeoutError(playTimeoutMs);\n  if (rangeError) {\n    return c.html((await renderSettingsPage(c, \"tests\", { globalError: rangeError })) ?? \"\", 400);\n  }\n  return await persistTestsUpdate(\n    c,\n    project,\n    slug,\n    { executePlay, runA11y, runTests },\n    playTimeoutMs,\n  );\n}\n\n/** Read the tests-tab form fields. */\nfunction readTestsFields(form: FormData): {\n  executePlay: boolean;\n  runA11y: boolean;\n  runTests: boolean;\n  playTimeoutMs: number | undefined;\n} {\n  const playTimeoutMsRaw = asString(form.get(\"playTimeoutMs\"));\n  return {\n    executePlay: form.get(\"executePlay\") === \"true\",\n    runA11y: form.get(\"runA11y\") === \"true\",\n    runTests: form.get(\"runTests\") === \"true\",\n    playTimeoutMs: playTimeoutMsRaw ? Number(playTimeoutMsRaw) : undefined,\n  };\n}\n\n/** Range error for the play timeout, or null when valid. */\nfunction playTimeoutError(playTimeoutMs: number | undefined): string | null {\n  if (\n    playTimeoutMs !== undefined &&\n    (Number.isNaN(playTimeoutMs) || playTimeoutMs < 1000 || playTimeoutMs > 30_000)\n  ) {\n    return \"Play timeout must be between 1000 and 30000\";\n  }\n  return null;\n}\n\nasync function persistTestsUpdate(\n  c: Context,\n  project: Project,\n  slug: string,\n  switches: { executePlay: boolean; runA11y: boolean; runTests: boolean },\n  playTimeoutMs: number | undefined,\n): Promise<Response> {\n  try {\n    await new ProjectModel(getStore().db).update(project.id, {\n      ...switches,\n      playTimeoutMs: playTimeoutMs ?? undefined,\n    });\n    flash(c, \"Test settings saved\");\n    return hxRedirect(c, `/projects/${slug}/settings/tests`);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : \"Failed to update\";\n    return c.html((await renderSettingsPage(c, \"tests\", { globalError: message })) ?? \"\", 400);\n  }\n}\n\nasync function handleDeleteProject(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  await new ProjectModel(getStore().db).remove(project.id);\n  flash(c, `Deleted ${project.name}`);\n  return hxRedirect(c, \"/projects\");\n}\n\n/** Largest approval count the form and the API accept. */\nconst MAX_APPROVALS = 20;\n\n/**\n * Review settings (ADR 0013, decision 1): the switch and the approvals a build needs. Project\n * admins only. The route is classed `hosting`, not `review`: a review route answers 404 while\n * review is off, and this is the form that turns it back on. Turning review off accepts the\n * project's pending builds that no capture worked on, in one pass.\n */\nasync function handleReviewUpdate(c: Context): Promise<Response> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const project = await resolveAuthorizedProject(c, slug, \"admin\");\n  const form = await c.req.formData();\n  const approvals = approvalsOf(form, project);\n  if (approvals === null) {\n    return c.html(\n      (await renderSettingsPage(c, \"general\", {\n        errors: { reviewApprovals: `Enter a whole number from 1 to ${MAX_APPROVALS}` },\n      })) ?? \"\",\n      400,\n    );\n  }\n  const updated = await new ProjectModel(getStore().db).update(project.id, {\n    reviewEnabled: form.get(\"reviewEnabled\") === \"true\",\n    reviewApprovals: approvals,\n  });\n  const accepted = await runSwitchOffPass(project, updated);\n  flash(c, reviewSavedMessage(accepted));\n  return hxRedirect(c, `/projects/${slug}/settings`);\n}\n\n/** The approvals count of the form (the current one when blank); null when it is not 1 to 20. */\nfunction approvalsOf(form: FormData, project: Project): number | null {\n  const raw = asString(form.get(\"reviewApprovals\"));\n  const approvals = raw ? Number(raw) : (project.reviewApprovals ?? 1);\n  return Number.isInteger(approvals) && approvals >= 1 && approvals <= MAX_APPROVALS\n    ? approvals\n    : null;\n}\n\nfunction reviewSavedMessage(accepted: number): string {\n  return accepted > 0\n    ? `Review settings saved; accepted ${accepted} pending build${accepted === 1 ? \"\" : \"s\"}`\n    : \"Review settings saved\";\n}\n"],"mappings":";;;;;;;;;;;;;;AAaA,SAAgB,wBAAwB,KAAwB;CAC9D,IAAI,IAAI,4BAA4B,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,GAAG,SAAS,CAAC,CAAC;CAC/F,IAAI,IAAI,kCAAkC,OAAO,MAC/C,EAAE,KAAK,MAAM,mBAAmB,GAAG,OAAO,CAAC,CAC7C;CACA,IAAI,KAAK,4BAA4B,mBAAmB;CACxD,IAAI,KAAK,kCAAkC,iBAAiB;CAC5D,IAAI,KAAK,mCAAmC,kBAAkB;CAC9D,IAAI,KAAK,0BAA0B,mBAAmB;AACxD;;AAaA,SAAS,kBAAkB,MAA6C;CACtE,OAAO;EACL,eAAe,SAAS,KAAK,IAAI,eAAe,CAAC;EACjD,kBAAkB,SAAS,KAAK,IAAI,kBAAkB,CAAC;EACvD,gBAAgB,SAAS,KAAK,IAAI,gBAAgB,CAAC;EACnD,cAAc,SAAS,KAAK,IAAI,cAAc,CAAC;EAC/C,mBAAmB,SAAS,KAAK,IAAI,mBAAmB,CAAC;EACzD,SAAS,SAAS,KAAK,IAAI,SAAS,CAAC;CACvC;AACF;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;CACpC,MAAM,UAAU,MAAM,YAAY,IAAI;CACtC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,OAAO,KAAK,IAAI,MAAM;CAC5B,IAAI,OAAO,SAAS,YAAY,KAAK,KAAK,MAAM,IAC9C,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,EAAE,CAAC,KAAM,IACtF,GACF;CAGF,OAAO,MAAM,qBAAqB,GAAG,SAAS,MAAM;EADpB,GAAG,kBAAkB,IAAI;EAAG,MAAM,KAAK,KAAK;CACnB,CAAC;AAC5D;;AAGA,eAAe,oBAAoB,SAAkB,SAA4C;CAC/F,IAAI,YAAY,KAAA,GACd,MAAM,wBAAwB,CAAC,OAAO,GAAG,gBAAgB,OAAO,CAAC;AAErE;AAEA,eAAe,qBACb,GACA,SACA,MACA,QACmB;CACnB,IAAI;EACF,MAAM,oBAAoB,SAAS,OAAO,OAAO;EACjD,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;GACvD,MAAM,OAAO;GACb,eAAe,OAAO,iBAAiB,KAAA;GACvC,kBAAkB,OAAO,oBAAoB,KAAA;GAC7C,gBAAgB,OAAO,iBAAiB,OAAO,OAAO,cAAc,IAAI,KAAA;GACxE,cAAc,OAAO,eAAe,OAAO,OAAO,YAAY,IAAI,KAAA;GAClE,mBACE,OAAO,sBAAsB,KAAK,OAAQ,OAAO,qBAAqB,KAAA;GACxE,SAAS,OAAO,WAAW,KAAA;GAE3B,GAAI,OAAO,WAAW,OAAO,YAAY,QAAQ,UAAU,EAAE,UAAU,KAAK,IAAI,CAAC;EACnF,CAAC;EACD,MAAM,GAAG,wBAAwB;EACjC,OAAO,WAAW,GAAG,aAAa,KAAK,UAAU;CACnD,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;EACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,WAAW,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;CAC7F;AACF;AAEA,eAAe,kBAAkB,GAA+B;CAC9D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;CACpC,MAAM,UAAU,MAAM,YAAY,IAAI;CAEtC,MAAM,EAAE,aAAa,SAAS,UAAU,kBAAkB,gBAAgB,MADvD,EAAE,IAAI,SAAS,CAC4C;CAC9E,MAAM,aAAa,iBAAiB,aAAa;CACjD,IAAI,YACF,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,SAAS,EAAE,aAAa,WAAW,CAAC,KAAM,IAAI,GAAG;CAE9F,OAAO,MAAM,mBACX,GACA,SACA,MACA;EAAE;EAAa;EAAS;CAAS,GACjC,aACF;AACF;;AAGA,SAAS,gBAAgB,MAKvB;CACA,MAAM,mBAAmB,SAAS,KAAK,IAAI,eAAe,CAAC;CAC3D,OAAO;EACL,aAAa,KAAK,IAAI,aAAa,MAAM;EACzC,SAAS,KAAK,IAAI,SAAS,MAAM;EACjC,UAAU,KAAK,IAAI,UAAU,MAAM;EACnC,eAAe,mBAAmB,OAAO,gBAAgB,IAAI,KAAA;CAC/D;AACF;;AAGA,SAAS,iBAAiB,eAAkD;CAC1E,IACE,kBAAkB,KAAA,MACjB,OAAO,MAAM,aAAa,KAAK,gBAAgB,OAAQ,gBAAgB,MAExE,OAAO;CAET,OAAO;AACT;AAEA,eAAe,mBACb,GACA,SACA,MACA,UACA,eACmB;CACnB,IAAI;EACF,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;GACvD,GAAG;GACH,eAAe,iBAAiB,KAAA;EAClC,CAAC;EACD,MAAM,GAAG,qBAAqB;EAC9B,OAAO,WAAW,GAAG,aAAa,KAAK,gBAAgB;CACzD,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;EACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,SAAS,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;CAC3F;AACF;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,EAAE;CACvD,MAAM,GAAG,WAAW,QAAQ,MAAM;CAClC,OAAO,WAAW,GAAG,WAAW;AAClC;;AAGA,MAAM,gBAAgB;;;;;;;AAQtB,eAAe,mBAAmB,GAA+B;CAC/D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;CACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,OAAO;CAC/D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,YAAY,YAAY,MAAM,OAAO;CAC3C,IAAI,cAAc,MAChB,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,WAAW,EACtC,QAAQ,EAAE,iBAAiB,kCAAkC,gBAAgB,EAC/E,CAAC,KAAM,IACP,GACF;CAEF,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;EACvE,eAAe,KAAK,IAAI,eAAe,MAAM;EAC7C,iBAAiB;CACnB,CAAC;CACD,MAAM,WAAW,MAAM,iBAAiB,SAAS,OAAO;CACxD,MAAM,GAAG,mBAAmB,QAAQ,CAAC;CACrC,OAAO,WAAW,GAAG,aAAa,KAAK,UAAU;AACnD;;AAGA,SAAS,YAAY,MAAgB,SAAiC;CACpE,MAAM,MAAM,SAAS,KAAK,IAAI,iBAAiB,CAAC;CAChD,MAAM,YAAY,MAAM,OAAO,GAAG,IAAK,QAAQ,mBAAmB;CAClE,OAAO,OAAO,UAAU,SAAS,KAAK,aAAa,KAAK,aAAa,gBACjE,YACA;AACN;AAEA,SAAS,mBAAmB,UAA0B;CACpD,OAAO,WAAW,IACd,mCAAmC,SAAS,gBAAgB,aAAa,IAAI,KAAK,QAClF;AACN"}

package/dist/routers/settings-git-channel.mjs

@@ -0,0 +1,77 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { flash } from "./flash.mjs";
+import { notificationChannelModel } from "./scoped-models.mjs";
+import { asString, renderSettingsPage } from "./settings.handlers.mjs";
+import { NotificationChannelModel } from "@storyshelf/core/models";
+//#region src/routers/settings-git-channel.ts
+/** Create a git (`state`) channel from the settings form: repository, status prefix and token. */
+const CONFIG_FIELDS = [
+	"owner",
+	"repo",
+	"host",
+	"prefix"
+];
+/** Only the GitHub provider reads these: how it shows a build and the App that posts check runs. */
+const GITHUB_FIELDS = [
+	"mode",
+	"appId",
+	"installationId"
+];
+/** The provider config from the form; blank optional fields are left out. */
+function gitConfig(provider, form) {
+	const config = {};
+	const fields = provider === "github" ? [...CONFIG_FIELDS, ...GITHUB_FIELDS] : CONFIG_FIELDS;
+	for (const field of fields) {
+		const value = asString(form.get(field));
+		if (value) config[field] = value;
+	}
+	return config;
+}
+/** Render the tab again with field errors (HTTP 400). */
+async function formError(c, errors) {
+	return c.html(await renderSettingsPage(c, "notifications", { errors }) ?? "", 400);
+}
+/** Map a failed validation to the form fields it concerns. */
+function fieldErrors(secretField, checked) {
+	if (checked.field === "secret") return { [secretField]: checked.message };
+	if (checked.field === "provider") return { gitProvider: checked.message };
+	const errors = {};
+	for (const issue of checked.issues ?? []) errors[issue.path] ??= issue.message;
+	return Object.keys(errors).length > 0 ? errors : { gitProvider: checked.message };
+}
+/** Validate and store a git channel; the token lands in the encrypted secret column. */
+async function createGitChannel(c, project, provider, form) {
+	const config = gitConfig(provider, form);
+	const checks = config["mode"] === "checks";
+	const token = asString(form.get(checks ? "privateKey" : "token"));
+	const problem = gitChannelProblem(project, provider, config, {
+		token,
+		secretField: checks ? "privateKey" : "token"
+	});
+	if (problem) return await formError(c, problem);
+	await notificationChannelModel().create({
+		projectId: project.id,
+		provider,
+		config,
+		secret: token
+	});
+	flash(c, "Git channel added");
+	return c.html(await renderSettingsPage(c, "notifications") ?? "", 201);
+}
+/** The form errors for a git channel input, or null when it is valid. */
+function gitChannelProblem(project, provider, config, secret) {
+	const { notifiers } = getStore();
+	if (!NotificationChannelModel.isStateKind(notifiers, provider)) return { gitProvider: `Unknown git provider: ${provider}` };
+	const checked = NotificationChannelModel.validateInput(notifiers, provider, config, {
+		projectId: project.id,
+		hasSecret: Boolean(secret.token)
+	});
+	return checked.ok ? null : fieldErrors(secret.secretField, checked);
+}
+//#endregion
+export { createGitChannel };
+
+//# sourceMappingURL=settings-git-channel.mjs.map

package/dist/routers/settings-git-channel.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-git-channel.mjs","names":[],"sources":["../../src/routers/settings-git-channel.ts"],"sourcesContent":["/** Create a git (`state`) channel from the settings form: repository, status prefix and token. */\nimport { NotificationChannelModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Context } from \"hono\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { notificationChannelModel } from \"./scoped-models.ts\";\nimport { asString, renderSettingsPage } from \"./settings.handlers.ts\";\n\nconst CONFIG_FIELDS = [\"owner\", \"repo\", \"host\", \"prefix\"] as const;\n/** Only the GitHub provider reads these: how it shows a build and the App that posts check runs. */\nconst GITHUB_FIELDS = [\"mode\", \"appId\", \"installationId\"] as const;\n\n/** The provider config from the form; blank optional fields are left out. */\nfunction gitConfig(provider: string, form: FormData): Record<string, string> {\n  const config: Record<string, string> = {};\n  const fields = provider === \"github\" ? [...CONFIG_FIELDS, ...GITHUB_FIELDS] : CONFIG_FIELDS;\n  for (const field of fields) {\n    const value = asString(form.get(field));\n    if (value) {\n      config[field] = value;\n    }\n  }\n  return config;\n}\n\n/** Render the tab again with field errors (HTTP 400). */\nasync function formError(c: Context, errors: Record<string, string>): Promise<Response> {\n  return c.html((await renderSettingsPage(c, \"notifications\", { errors })) ?? \"\", 400);\n}\n\n/** Map a failed validation to the form fields it concerns. */\nfunction fieldErrors(\n  secretField: \"token\" | \"privateKey\",\n  checked: Extract<ReturnType<typeof NotificationChannelModel.validateInput>, { ok: false }>,\n): Record<string, string> {\n  if (checked.field === \"secret\") {\n    return { [secretField]: checked.message };\n  }\n  if (checked.field === \"provider\") {\n    return { gitProvider: checked.message };\n  }\n  const errors: Record<string, string> = {};\n  for (const issue of checked.issues ?? []) {\n    errors[issue.path] ??= issue.message;\n  }\n  return Object.keys(errors).length > 0 ? errors : { gitProvider: checked.message };\n}\n\n/** Validate and store a git channel; the token lands in the encrypted secret column. */\nexport async function createGitChannel(\n  c: Context,\n  project: Project,\n  provider: string,\n  form: FormData,\n): Promise<Response> {\n  const config = gitConfig(provider, form);\n  // A GitHub App channel keeps its private key where other channels keep a token.\n  const checks = config[\"mode\"] === \"checks\";\n  const token = asString(form.get(checks ? \"privateKey\" : \"token\"));\n  const problem = gitChannelProblem(project, provider, config, {\n    token,\n    secretField: checks ? \"privateKey\" : \"token\",\n  });\n  if (problem) {\n    return await formError(c, problem);\n  }\n  await notificationChannelModel().create({\n    projectId: project.id,\n    provider,\n    config,\n    secret: token,\n  });\n  flash(c, \"Git channel added\");\n  return c.html((await renderSettingsPage(c, \"notifications\")) ?? \"\", 201);\n}\n\n/** The form errors for a git channel input, or null when it is valid. */\nfunction gitChannelProblem(\n  project: Project,\n  provider: string,\n  config: Record<string, string>,\n  secret: { token: string | undefined; secretField: \"token\" | \"privateKey\" },\n): Record<string, string> | null {\n  const { notifiers } = getStore();\n  if (!NotificationChannelModel.isStateKind(notifiers, provider)) {\n    return { gitProvider: `Unknown git provider: ${provider}` };\n  }\n  const checked = NotificationChannelModel.validateInput(notifiers, provider, config, {\n    projectId: project.id,\n    hasSecret: Boolean(secret.token),\n  });\n  return checked.ok ? null : fieldErrors(secret.secretField, checked);\n}\n"],"mappings":";;;;;;;;;;AASA,MAAM,gBAAgB;CAAC;CAAS;CAAQ;CAAQ;AAAQ;;AAExD,MAAM,gBAAgB;CAAC;CAAQ;CAAS;AAAgB;;AAGxD,SAAS,UAAU,UAAkB,MAAwC;CAC3E,MAAM,SAAiC,CAAC;CACxC,MAAM,SAAS,aAAa,WAAW,CAAC,GAAG,eAAe,GAAG,aAAa,IAAI;CAC9E,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,QAAQ,SAAS,KAAK,IAAI,KAAK,CAAC;EACtC,IAAI,OACF,OAAO,SAAS;CAEpB;CACA,OAAO;AACT;;AAGA,eAAe,UAAU,GAAY,QAAmD;CACtF,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,iBAAiB,EAAE,OAAO,CAAC,KAAM,IAAI,GAAG;AACrF;;AAGA,SAAS,YACP,aACA,SACwB;CACxB,IAAI,QAAQ,UAAU,UACpB,OAAO,GAAG,cAAc,QAAQ,QAAQ;CAE1C,IAAI,QAAQ,UAAU,YACpB,OAAO,EAAE,aAAa,QAAQ,QAAQ;CAExC,MAAM,SAAiC,CAAC;CACxC,KAAK,MAAM,SAAS,QAAQ,UAAU,CAAC,GACrC,OAAO,MAAM,UAAU,MAAM;CAE/B,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,SAAS,IAAI,SAAS,EAAE,aAAa,QAAQ,QAAQ;AAClF;;AAGA,eAAsB,iBACpB,GACA,SACA,UACA,MACmB;CACnB,MAAM,SAAS,UAAU,UAAU,IAAI;CAEvC,MAAM,SAAS,OAAO,YAAY;CAClC,MAAM,QAAQ,SAAS,KAAK,IAAI,SAAS,eAAe,OAAO,CAAC;CAChE,MAAM,UAAU,kBAAkB,SAAS,UAAU,QAAQ;EAC3D;EACA,aAAa,SAAS,eAAe;CACvC,CAAC;CACD,IAAI,SACF,OAAO,MAAM,UAAU,GAAG,OAAO;CAEnC,MAAM,yBAAyB,CAAC,CAAC,OAAO;EACtC,WAAW,QAAQ;EACnB;EACA;EACA,QAAQ;CACV,CAAC;CACD,MAAM,GAAG,mBAAmB;CAC5B,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,eAAe,KAAM,IAAI,GAAG;AACzE;;AAGA,SAAS,kBACP,SACA,UACA,QACA,QAC+B;CAC/B,MAAM,EAAE,cAAc,SAAS;CAC/B,IAAI,CAAC,yBAAyB,YAAY,WAAW,QAAQ,GAC3D,OAAO,EAAE,aAAa,yBAAyB,WAAW;CAE5D,MAAM,UAAU,yBAAyB,cAAc,WAAW,UAAU,QAAQ;EAClF,WAAW,QAAQ;EACnB,WAAW,QAAQ,OAAO,KAAK;CACjC,CAAC;CACD,OAAO,QAAQ,KAAK,OAAO,YAAY,OAAO,aAAa,OAAO;AACpE"}

package/dist/routers/settings-labels.mjs

@@ -9,8 +9,9 @@ import { LabelModel } from "@storyshelf/core/models";
 //#region src/routers/settings-labels.ts
 /** Label-type settings (create custom types, delete removable ones). */
 function registerLabelSettings(app) {
-	app.get("/projects/:slug/settings/labels", async (c) => c.html(await renderSettingsPage(c, "labels")));
+	app.get("/projects/:slug/settings/labels", async (c) => c.html(await renderSettingsPage(c, "labels", { editKey: c.req.query("edit") })));
 	app.post("/projects/:slug/settings/labels", handleCreateLabelType);
+	app.post("/projects/:slug/settings/labels/:key", handleUpdateLabelType);
 	app.post("/projects/:slug/settings/labels/:key/delete", handleDeleteLabelType);
 }
 async function handleCreateLabelType(c) {
@@ -36,6 +37,31 @@ async function persistLabelType(c, projectId, projectSlug, key, labelName, linkT
 		return c.html(await renderSettingsPage(c, "labels", { globalError: message }) ?? "", 400);
 	}
 }
+async function handleUpdateLabelType(c) {
+	const project = await findProject(c.req.param("slug") ?? "");
+	const key = c.req.param("key") ?? "";
+	const form = await c.req.formData();
+	const name = asString(form.get("labelName"));
+	if (!name) return c.html(await renderSettingsPage(c, "labels", {
+		globalError: "Name is required",
+		editKey: key
+	}) ?? "", 400);
+	const template = asString(form.get("linkTemplate"));
+	return await persistLabelUpdate(c, project, key, {
+		name,
+		linkTemplate: template === void 0 || template === "" ? null : template
+	});
+}
+async function persistLabelUpdate(c, project, key, input) {
+	try {
+		if (!await new LabelModel(getStore().db).updateType(project.id, key, input)) throw new Error("Label type not found");
+	} catch (error) {
+		const message = error instanceof Error ? error.message : "Failed to update label";
+		return c.html(await renderSettingsPage(c, "labels", { globalError: message }) ?? "", 400);
+	}
+	flash(c, "Label type saved");
+	return hxRedirect(c, `/projects/${project.slug}/settings/labels`);
+}
 async function handleDeleteLabelType(c) {
 	const project = await findProject(c.req.param("slug") ?? "");
 	try {

package/dist/routers/settings-labels.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings-labels.mjs","names":[],"sources":["../../src/routers/settings-labels.ts"],"sourcesContent":["import { LabelModel } from \"@storyshelf/core/models\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n/** Label-type settings (create custom types, delete removable ones). */\nexport function registerLabelSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings/labels\", async (c) =>\n    c.html(await renderSettingsPage(c, \"labels\")),\n  );\n  app.post(\"/projects/:slug/settings/labels\", handleCreateLabelType);\n  app.post(\"/projects/:slug/settings/labels/:key/delete\", handleDeleteLabelType);\n}\n\nasync function handleCreateLabelType(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const form = await c.req.formData();\n  const key = asString(form.get(\"key\"));\n  const labelName = asString(form.get(\"labelName\")) ?? asString(form.get(\"name\"));\n  const linkTemplate = asString(form.get(\"linkTemplate\"));\n  if (!key || !labelName) {\n    return c.html(\n      (await renderSettingsPage(c, \"labels\", { globalError: \"Key and name are required\" })) ?? \"\",\n      400,\n    );\n  }\n  return await persistLabelType(c, project.id, project.slug, key, labelName, linkTemplate);\n}\n\nasync function persistLabelType(\n  c: Context,\n  projectId: string,\n  projectSlug: string,\n  key: string,\n  labelName: string,\n  linkTemplate: string | undefined,\n): Promise<Response> {\n  try {\n    await new LabelModel(getStore().db).createType(projectId, {\n      key,\n      name: labelName,\n      linkTemplate,\n    });\n    flash(c, \"Label type added\");\n    return hxRedirect(c, `/projects/${projectSlug}/settings/labels`);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : \"Failed to create label\";\n    return c.html((await renderSettingsPage(c, \"labels\", { globalError: message })) ?? \"\", 400);\n  }\n}\n\nasync function handleDeleteLabelType(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  try {\n    await new LabelModel(getStore().db).removeType(project.id, c.req.param(\"key\") ?? \"\");\n  } catch {\n    return c.html(\n      (await renderSettingsPage(c, \"labels\", { globalError: \"Cannot delete built-in label\" })) ??\n        \"\",\n      400,\n    );\n  }\n  flash(c, \"Label type deleted\");\n  return hxRedirect(c, `/projects/${project.slug}/settings/labels`);\n}\n"],"mappings":";;;;;;;;;;AAQA,SAAgB,sBAAsB,KAAwB;CAC5D,IAAI,IAAI,mCAAmC,OAAO,MAChD,EAAE,KAAK,MAAM,mBAAmB,GAAG,QAAQ,CAAC,CAC9C;CACA,IAAI,KAAK,mCAAmC,qBAAqB;CACjE,IAAI,KAAK,+CAA+C,qBAAqB;AAC/E;AAEA,eAAe,sBAAsB,GAA+B;CAClE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,MAAM,SAAS,KAAK,IAAI,KAAK,CAAC;CACpC,MAAM,YAAY,SAAS,KAAK,IAAI,WAAW,CAAC,KAAK,SAAS,KAAK,IAAI,MAAM,CAAC;CAC9E,MAAM,eAAe,SAAS,KAAK,IAAI,cAAc,CAAC;CACtD,IAAI,CAAC,OAAO,CAAC,WACX,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,4BAA4B,CAAC,KAAM,IACzF,GACF;CAEF,OAAO,MAAM,iBAAiB,GAAG,QAAQ,IAAI,QAAQ,MAAM,KAAK,WAAW,YAAY;AACzF;AAEA,eAAe,iBACb,GACA,WACA,aACA,KACA,WACA,cACmB;CACnB,IAAI;EACF,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,WAAW;GACxD;GACA,MAAM;GACN;EACF,CAAC;EACD,MAAM,GAAG,kBAAkB;EAC3B,OAAO,WAAW,GAAG,aAAa,YAAY,iBAAiB;CACjE,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;EACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;CAC5F;AACF;AAEA,eAAe,sBAAsB,GAA+B;CAClE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,IAAI;EACF,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,QAAQ,IAAI,EAAE,IAAI,MAAM,KAAK,KAAK,EAAE;CACrF,QAAQ;EACN,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,+BAA+B,CAAC,KACpF,IACF,GACF;CACF;CACA,MAAM,GAAG,oBAAoB;CAC7B,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;AAClE"}
+{"version":3,"file":"settings-labels.mjs","names":[],"sources":["../../src/routers/settings-labels.ts"],"sourcesContent":["import { LabelModel } from \"@storyshelf/core/models\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n/** Label-type settings (create custom types, delete removable ones). */\nexport function registerLabelSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings/labels\", async (c) =>\n    c.html(await renderSettingsPage(c, \"labels\", { editKey: c.req.query(\"edit\") })),\n  );\n  app.post(\"/projects/:slug/settings/labels\", handleCreateLabelType);\n  app.post(\"/projects/:slug/settings/labels/:key\", handleUpdateLabelType);\n  app.post(\"/projects/:slug/settings/labels/:key/delete\", handleDeleteLabelType);\n}\n\nasync function handleCreateLabelType(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const form = await c.req.formData();\n  const key = asString(form.get(\"key\"));\n  const labelName = asString(form.get(\"labelName\")) ?? asString(form.get(\"name\"));\n  const linkTemplate = asString(form.get(\"linkTemplate\"));\n  if (!key || !labelName) {\n    return c.html(\n      (await renderSettingsPage(c, \"labels\", { globalError: \"Key and name are required\" })) ?? \"\",\n      400,\n    );\n  }\n  return await persistLabelType(c, project.id, project.slug, key, labelName, linkTemplate);\n}\n\nasync function persistLabelType(\n  c: Context,\n  projectId: string,\n  projectSlug: string,\n  key: string,\n  labelName: string,\n  linkTemplate: string | undefined,\n): Promise<Response> {\n  try {\n    await new LabelModel(getStore().db).createType(projectId, {\n      key,\n      name: labelName,\n      linkTemplate,\n    });\n    flash(c, \"Label type added\");\n    return hxRedirect(c, `/projects/${projectSlug}/settings/labels`);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : \"Failed to create label\";\n    return c.html((await renderSettingsPage(c, \"labels\", { globalError: message })) ?? \"\", 400);\n  }\n}\n\nasync function handleUpdateLabelType(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const key = c.req.param(\"key\") ?? \"\";\n  const form = await c.req.formData();\n  const name = asString(form.get(\"labelName\"));\n  if (!name) {\n    return c.html(\n      (await renderSettingsPage(c, \"labels\", { globalError: \"Name is required\", editKey: key })) ??\n        \"\",\n      400,\n    );\n  }\n  const template = asString(form.get(\"linkTemplate\"));\n  const linkTemplate = template === undefined || template === \"\" ? null : template;\n  return await persistLabelUpdate(c, project, key, { name, linkTemplate });\n}\n\nasync function persistLabelUpdate(\n  c: Context,\n  project: { id: string; slug: string },\n  key: string,\n  input: { name: string; linkTemplate: string | null },\n): Promise<Response> {\n  try {\n    const updated = await new LabelModel(getStore().db).updateType(project.id, key, input);\n    if (!updated) {\n      throw new Error(\"Label type not found\");\n    }\n  } catch (error) {\n    const message = error instanceof Error ? error.message : \"Failed to update label\";\n    return c.html((await renderSettingsPage(c, \"labels\", { globalError: message })) ?? \"\", 400);\n  }\n  flash(c, \"Label type saved\");\n  return hxRedirect(c, `/projects/${project.slug}/settings/labels`);\n}\n\nasync function handleDeleteLabelType(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  try {\n    await new LabelModel(getStore().db).removeType(project.id, c.req.param(\"key\") ?? \"\");\n  } catch {\n    return c.html(\n      (await renderSettingsPage(c, \"labels\", { globalError: \"Cannot delete built-in label\" })) ??\n        \"\",\n      400,\n    );\n  }\n  flash(c, \"Label type deleted\");\n  return hxRedirect(c, `/projects/${project.slug}/settings/labels`);\n}\n"],"mappings":";;;;;;;;;;AAQA,SAAgB,sBAAsB,KAAwB;CAC5D,IAAI,IAAI,mCAAmC,OAAO,MAChD,EAAE,KAAK,MAAM,mBAAmB,GAAG,UAAU,EAAE,SAAS,EAAE,IAAI,MAAM,MAAM,EAAE,CAAC,CAAC,CAChF;CACA,IAAI,KAAK,mCAAmC,qBAAqB;CACjE,IAAI,KAAK,wCAAwC,qBAAqB;CACtE,IAAI,KAAK,+CAA+C,qBAAqB;AAC/E;AAEA,eAAe,sBAAsB,GAA+B;CAClE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,MAAM,SAAS,KAAK,IAAI,KAAK,CAAC;CACpC,MAAM,YAAY,SAAS,KAAK,IAAI,WAAW,CAAC,KAAK,SAAS,KAAK,IAAI,MAAM,CAAC;CAC9E,MAAM,eAAe,SAAS,KAAK,IAAI,cAAc,CAAC;CACtD,IAAI,CAAC,OAAO,CAAC,WACX,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,4BAA4B,CAAC,KAAM,IACzF,GACF;CAEF,OAAO,MAAM,iBAAiB,GAAG,QAAQ,IAAI,QAAQ,MAAM,KAAK,WAAW,YAAY;AACzF;AAEA,eAAe,iBACb,GACA,WACA,aACA,KACA,WACA,cACmB;CACnB,IAAI;EACF,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,WAAW;GACxD;GACA,MAAM;GACN;EACF,CAAC;EACD,MAAM,GAAG,kBAAkB;EAC3B,OAAO,WAAW,GAAG,aAAa,YAAY,iBAAiB;CACjE,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;EACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;CAC5F;AACF;AAEA,eAAe,sBAAsB,GAA+B;CAClE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,MAAM,EAAE,IAAI,MAAM,KAAK,KAAK;CAClC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,OAAO,SAAS,KAAK,IAAI,WAAW,CAAC;CAC3C,IAAI,CAAC,MACH,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,UAAU;EAAE,aAAa;EAAoB,SAAS;CAAI,CAAC,KACtF,IACF,GACF;CAEF,MAAM,WAAW,SAAS,KAAK,IAAI,cAAc,CAAC;CAElD,OAAO,MAAM,mBAAmB,GAAG,SAAS,KAAK;EAAE;EAAM,cADpC,aAAa,KAAA,KAAa,aAAa,KAAK,OAAO;CACF,CAAC;AACzE;AAEA,eAAe,mBACb,GACA,SACA,KACA,OACmB;CACnB,IAAI;EAEF,IAAI,CAAC,MADiB,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,QAAQ,IAAI,KAAK,KAAK,GAEnF,MAAM,IAAI,MAAM,sBAAsB;CAE1C,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;EACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;CAC5F;CACA,MAAM,GAAG,kBAAkB;CAC3B,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;AAClE;AAEA,eAAe,sBAAsB,GAA+B;CAClE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,IAAI;EACF,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,WAAW,QAAQ,IAAI,EAAE,IAAI,MAAM,KAAK,KAAK,EAAE;CACrF,QAAQ;EACN,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,+BAA+B,CAAC,KACpF,IACF,GACF;CACF;CACA,MAAM,GAAG,oBAAoB;CAC7B,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;AAClE"}

package/dist/routers/settings-links.mjs

@@ -0,0 +1,63 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { hxRedirect } from "./htmx.mjs";
+import { flash } from "./flash.mjs";
+import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
+import { PackageUsageModel, ProjectModel } from "@storyshelf/core/models";
+//#region src/routers/settings-links.ts
+/** Package-link settings (link a consumed package to its upstream project, or unlink it). */
+function registerLinkSettings(app) {
+	app.get("/projects/:slug/settings/links", async (c) => c.html(await renderSettingsPage(c, "links")));
+	app.post("/projects/:slug/settings/links", handleAddLink);
+	app.post("/projects/:slug/settings/links/delete", handleRemoveLink);
+}
+async function rejectLink(c, message) {
+	return c.html(await renderSettingsPage(c, "links", { globalError: message }) ?? "", 400);
+}
+/** Replace one package's link, keeping the project's other links. */
+async function saveLink(project, packageName, upstreamId) {
+	const model = new PackageUsageModel(getStore().db);
+	const kept = (await model.listLinks(project.id)).filter((link) => link.packageName !== packageName);
+	await model.replaceLinks(project.id, [...kept.map((link) => ({
+		upstreamId: link.upstreamId,
+		packageName: link.packageName
+	})), {
+		upstreamId,
+		packageName
+	}]);
+}
+/** Read the add-link form fields. */
+async function readLinkForm(c) {
+	const form = await c.req.formData();
+	return {
+		packageName: asString(form.get("package")),
+		upstreamSlug: asString(form.get("upstreamSlug"))
+	};
+}
+async function handleAddLink(c) {
+	const project = await findProject(c.req.param("slug") ?? "");
+	const { packageName, upstreamSlug } = await readLinkForm(c);
+	const upstream = upstreamSlug ? await new ProjectModel(getStore().db).getBySlug(upstreamSlug) : null;
+	if (!packageName || !upstream || upstream.id === project.id) return await rejectLink(c, "Enter a package and choose a different, existing upstream project");
+	await saveLink(project, packageName, upstream.id);
+	flash(c, "Package linked");
+	return hxRedirect(c, `/projects/${project.slug}/settings/links`);
+}
+async function handleRemoveLink(c) {
+	const project = await findProject(c.req.param("slug") ?? "");
+	const packageName = asString((await c.req.formData()).get("package"));
+	const model = new PackageUsageModel(getStore().db);
+	const kept = (await model.listLinks(project.id)).filter((link) => link.packageName !== packageName);
+	await model.replaceLinks(project.id, kept.map((link) => ({
+		upstreamId: link.upstreamId,
+		packageName: link.packageName
+	})));
+	flash(c, "Link removed");
+	return hxRedirect(c, `/projects/${project.slug}/settings/links`);
+}
+//#endregion
+export { registerLinkSettings };
+
+//# sourceMappingURL=settings-links.mjs.map

package/dist/routers/settings-links.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-links.mjs","names":[],"sources":["../../src/routers/settings-links.ts"],"sourcesContent":["import { PackageUsageModel, ProjectModel } from \"@storyshelf/core/models\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n\n/** Package-link settings (link a consumed package to its upstream project, or unlink it). */\nexport function registerLinkSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings/links\", async (c) =>\n    c.html(await renderSettingsPage(c, \"links\")),\n  );\n  app.post(\"/projects/:slug/settings/links\", handleAddLink);\n  app.post(\"/projects/:slug/settings/links/delete\", handleRemoveLink);\n}\n\nasync function rejectLink(c: Context, message: string): Promise<Response> {\n  return c.html((await renderSettingsPage(c, \"links\", { globalError: message })) ?? \"\", 400);\n}\n\n/** Replace one package's link, keeping the project's other links. */\nasync function saveLink(\n  project: { id: string },\n  packageName: string,\n  upstreamId: string,\n): Promise<void> {\n  const model = new PackageUsageModel(getStore().db);\n  const kept = (await model.listLinks(project.id)).filter(\n    (link) => link.packageName !== packageName,\n  );\n  await model.replaceLinks(project.id, [\n    ...kept.map((link) => ({ upstreamId: link.upstreamId, packageName: link.packageName })),\n    { upstreamId, packageName },\n  ]);\n}\n\n/** Read the add-link form fields. */\nasync function readLinkForm(c: Context): Promise<{ packageName?: string; upstreamSlug?: string }> {\n  const form = await c.req.formData();\n  return {\n    packageName: asString(form.get(\"package\")),\n    upstreamSlug: asString(form.get(\"upstreamSlug\")),\n  };\n}\n\nasync function handleAddLink(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const { packageName, upstreamSlug } = await readLinkForm(c);\n  const upstream = upstreamSlug\n    ? await new ProjectModel(getStore().db).getBySlug(upstreamSlug)\n    : null;\n  if (!packageName || !upstream || upstream.id === project.id) {\n    return await rejectLink(c, \"Enter a package and choose a different, existing upstream project\");\n  }\n  await saveLink(project, packageName, upstream.id);\n  flash(c, \"Package linked\");\n  return hxRedirect(c, `/projects/${project.slug}/settings/links`);\n}\n\nasync function handleRemoveLink(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const packageName = asString((await c.req.formData()).get(\"package\"));\n  const model = new PackageUsageModel(getStore().db);\n  const kept = (await model.listLinks(project.id)).filter(\n    (link) => link.packageName !== packageName,\n  );\n  await model.replaceLinks(\n    project.id,\n    kept.map((link) => ({ upstreamId: link.upstreamId, packageName: link.packageName })),\n  );\n  flash(c, \"Link removed\");\n  return hxRedirect(c, `/projects/${project.slug}/settings/links`);\n}\n"],"mappings":";;;;;;;;;;AASA,SAAgB,qBAAqB,KAAwB;CAC3D,IAAI,IAAI,kCAAkC,OAAO,MAC/C,EAAE,KAAK,MAAM,mBAAmB,GAAG,OAAO,CAAC,CAC7C;CACA,IAAI,KAAK,kCAAkC,aAAa;CACxD,IAAI,KAAK,yCAAyC,gBAAgB;AACpE;AAEA,eAAe,WAAW,GAAY,SAAoC;CACxE,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,SAAS,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;AAC3F;;AAGA,eAAe,SACb,SACA,aACA,YACe;CACf,MAAM,QAAQ,IAAI,kBAAkB,SAAS,CAAC,CAAC,EAAE;CACjD,MAAM,QAAQ,MAAM,MAAM,UAAU,QAAQ,EAAE,EAAA,CAAG,QAC9C,SAAS,KAAK,gBAAgB,WACjC;CACA,MAAM,MAAM,aAAa,QAAQ,IAAI,CACnC,GAAG,KAAK,KAAK,UAAU;EAAE,YAAY,KAAK;EAAY,aAAa,KAAK;CAAY,EAAE,GACtF;EAAE;EAAY;CAAY,CAC5B,CAAC;AACH;;AAGA,eAAe,aAAa,GAAsE;CAChG,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,OAAO;EACL,aAAa,SAAS,KAAK,IAAI,SAAS,CAAC;EACzC,cAAc,SAAS,KAAK,IAAI,cAAc,CAAC;CACjD;AACF;AAEA,eAAe,cAAc,GAA+B;CAC1D,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,EAAE,aAAa,iBAAiB,MAAM,aAAa,CAAC;CAC1D,MAAM,WAAW,eACb,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,YAAY,IAC5D;CACJ,IAAI,CAAC,eAAe,CAAC,YAAY,SAAS,OAAO,QAAQ,IACvD,OAAO,MAAM,WAAW,GAAG,mEAAmE;CAEhG,MAAM,SAAS,SAAS,aAAa,SAAS,EAAE;CAChD,MAAM,GAAG,gBAAgB;CACzB,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,gBAAgB;AACjE;AAEA,eAAe,iBAAiB,GAA+B;CAC7D,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,cAAc,UAAU,MAAM,EAAE,IAAI,SAAS,EAAA,CAAG,IAAI,SAAS,CAAC;CACpE,MAAM,QAAQ,IAAI,kBAAkB,SAAS,CAAC,CAAC,EAAE;CACjD,MAAM,QAAQ,MAAM,MAAM,UAAU,QAAQ,EAAE,EAAA,CAAG,QAC9C,SAAS,KAAK,gBAAgB,WACjC;CACA,MAAM,MAAM,aACV,QAAQ,IACR,KAAK,KAAK,UAAU;EAAE,YAAY,KAAK;EAAY,aAAa,KAAK;CAAY,EAAE,CACrF;CACA,MAAM,GAAG,cAAc;CACvB,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,gBAAgB;AACjE"}

package/dist/routers/settings-members.mjs

@@ -6,6 +6,7 @@ import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
 import { MemberModel, ProjectGroupMappingModel } from "@storyshelf/core/models";
+import { isProjectRole } from "@storyshelf/core/types";
 //#region src/routers/settings-members.ts
 /** Project member settings (assign roles, remove members). */
 function registerMemberSettings(app) {
@@ -15,7 +16,7 @@ function registerMemberSettings(app) {
 		const form = await c.req.formData();
 		const userId = asString(form.get("userId"));
 		const role = asString(form.get("role"));
-		if (!userId || !role) return c.html(await renderSettingsPage(c, "members", { globalError: "User and role are required" }) ?? "", 400);
+		if (!userId || !isProjectRole(role)) return c.html(await renderSettingsPage(c, "members", { globalError: "User and role are required" }) ?? "", 400);
 		await new MemberModel(getStore().db).set(project.id, userId, role);
 		flash(c, "Member saved");
 		return hxRedirect(c, `/projects/${project.slug}/settings/members`);
@@ -35,12 +36,8 @@ function registerGroupMappingSettings(app) {
 		const form = await c.req.formData();
 		const groupName = asString(form.get("groupName"));
 		const role = asString(form.get("role"));
-		if (!groupName || !role || ![
-			"viewer",
-			"developer",
-			"approver",
-			"admin"
-		].includes(role)) return c.html(await renderSettingsPage(c, "members", { globalError: "Group and role are required" }) ?? "", 400);
+		const inputError = ProjectGroupMappingModel.inputError(groupName, role);
+		if (inputError || !groupName || !isProjectRole(role)) return c.html(await renderSettingsPage(c, "members", { globalError: inputError ?? "Invalid input" }) ?? "", 400);
 		await new ProjectGroupMappingModel(getStore().db).create(project.id, groupName, role);
 		flash(c, "Group mapping added");
 		return hxRedirect(c, `/projects/${project.slug}/settings/members`);

package/dist/routers/settings-members.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings-members.mjs","names":[],"sources":["../../src/routers/settings-members.ts"],"sourcesContent":["import { MemberModel, ProjectGroupMappingModel } from \"@storyshelf/core/models\";\nimport type { ProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n/** Project member settings (assign roles, remove members). */\nexport function registerMemberSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings/members\", async (c) =>\n    c.html(await renderSettingsPage(c, \"members\")),\n  );\n\n  app.post(\"/projects/:slug/settings/members\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\") ?? \"\");\n    const form = await c.req.formData();\n    const userId = asString(form.get(\"userId\"));\n    const role = asString(form.get(\"role\"));\n    if (!userId || !role) {\n      return c.html(\n        (await renderSettingsPage(c, \"members\", { globalError: \"User and role are required\" })) ??\n          \"\",\n        400,\n      );\n    }\n    await new MemberModel(getStore().db).set(project.id, userId, role as ProjectRole);\n    flash(c, \"Member saved\");\n    return hxRedirect(c, `/projects/${project.slug}/settings/members`);\n  });\n\n  app.post(\"/projects/:slug/settings/members/:userId/remove\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\") ?? \"\");\n    await new MemberModel(getStore().db).remove(project.id, c.req.param(\"userId\") ?? \"\");\n    flash(c, \"Member removed\");\n    return hxRedirect(c, `/projects/${project.slug}/settings/members`);\n  });\n\n  registerGroupMappingSettings(app);\n}\n\n/** Identity-provider group mapping settings (exact-match group to role). */\nfunction registerGroupMappingSettings(app: ShelfRouter): void {\n  app.post(\"/projects/:slug/settings/members/groups\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\") ?? \"\");\n    const form = await c.req.formData();\n    const groupName = asString(form.get(\"groupName\"));\n    const role = asString(form.get(\"role\")) as ProjectRole | undefined;\n    if (!groupName || !role || ![\"viewer\", \"developer\", \"approver\", \"admin\"].includes(role)) {\n      return c.html(\n        (await renderSettingsPage(c, \"members\", { globalError: \"Group and role are required\" })) ??\n          \"\",\n        400,\n      );\n    }\n    await new ProjectGroupMappingModel(getStore().db).create(project.id, groupName, role);\n    flash(c, \"Group mapping added\");\n    return hxRedirect(c, `/projects/${project.slug}/settings/members`);\n  });\n\n  app.post(\"/projects/:slug/settings/members/groups/:mappingId/remove\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\") ?? \"\");\n    await new ProjectGroupMappingModel(getStore().db).remove(\n      project.id,\n      c.req.param(\"mappingId\") ?? \"\",\n    );\n    flash(c, \"Group mapping removed\");\n    return hxRedirect(c, `/projects/${project.slug}/settings/members`);\n  });\n}\n"],"mappings":";;;;;;;;;;AAQA,SAAgB,uBAAuB,KAAwB;CAC7D,IAAI,IAAI,oCAAoC,OAAO,MACjD,EAAE,KAAK,MAAM,mBAAmB,GAAG,SAAS,CAAC,CAC/C;CAEA,IAAI,KAAK,oCAAoC,OAAO,MAAM;EACxD,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;EAC3D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,SAAS,SAAS,KAAK,IAAI,QAAQ,CAAC;EAC1C,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,CAAC;EACtC,IAAI,CAAC,UAAU,CAAC,MACd,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,WAAW,EAAE,aAAa,6BAA6B,CAAC,KACnF,IACF,GACF;EAEF,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,QAAQ,IAAmB;EAChF,MAAM,GAAG,cAAc;EACvB,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,kBAAkB;CACnE,CAAC;CAED,IAAI,KAAK,mDAAmD,OAAO,MAAM;EACvE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;EAC3D,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,EAAE,IAAI,MAAM,QAAQ,KAAK,EAAE;EACnF,MAAM,GAAG,gBAAgB;EACzB,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,kBAAkB;CACnE,CAAC;CAED,6BAA6B,GAAG;AAClC;;AAGA,SAAS,6BAA6B,KAAwB;CAC5D,IAAI,KAAK,2CAA2C,OAAO,MAAM;EAC/D,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;EAC3D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,YAAY,SAAS,KAAK,IAAI,WAAW,CAAC;EAChD,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,CAAC;EACtC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC;GAAC;GAAU;GAAa;GAAY;EAAO,CAAC,CAAC,SAAS,IAAI,GACpF,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,WAAW,EAAE,aAAa,8BAA8B,CAAC,KACpF,IACF,GACF;EAEF,MAAM,IAAI,yBAAyB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,WAAW,IAAI;EACpF,MAAM,GAAG,qBAAqB;EAC9B,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,kBAAkB;CACnE,CAAC;CAED,IAAI,KAAK,6DAA6D,OAAO,MAAM;EACjF,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;EAC3D,MAAM,IAAI,yBAAyB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAChD,QAAQ,IACR,EAAE,IAAI,MAAM,WAAW,KAAK,EAC9B;EACA,MAAM,GAAG,uBAAuB;EAChC,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,kBAAkB;CACnE,CAAC;AACH"}
+{"version":3,"file":"settings-members.mjs","names":[],"sources":["../../src/routers/settings-members.ts"],"sourcesContent":["import { MemberModel, ProjectGroupMappingModel } from \"@storyshelf/core/models\";\nimport { isProjectRole } from \"@storyshelf/core/types\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n/** Project member settings (assign roles, remove members). */\nexport function registerMemberSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings/members\", async (c) =>\n    c.html(await renderSettingsPage(c, \"members\")),\n  );\n\n  app.post(\"/projects/:slug/settings/members\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\") ?? \"\");\n    const form = await c.req.formData();\n    const userId = asString(form.get(\"userId\"));\n    const role = asString(form.get(\"role\"));\n    if (!userId || !isProjectRole(role)) {\n      return c.html(\n        (await renderSettingsPage(c, \"members\", { globalError: \"User and role are required\" })) ??\n          \"\",\n        400,\n      );\n    }\n    await new MemberModel(getStore().db).set(project.id, userId, role);\n    flash(c, \"Member saved\");\n    return hxRedirect(c, `/projects/${project.slug}/settings/members`);\n  });\n\n  app.post(\"/projects/:slug/settings/members/:userId/remove\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\") ?? \"\");\n    await new MemberModel(getStore().db).remove(project.id, c.req.param(\"userId\") ?? \"\");\n    flash(c, \"Member removed\");\n    return hxRedirect(c, `/projects/${project.slug}/settings/members`);\n  });\n\n  registerGroupMappingSettings(app);\n}\n\n/** Identity-provider group mapping settings (exact-match group to role). */\nfunction registerGroupMappingSettings(app: ShelfRouter): void {\n  app.post(\"/projects/:slug/settings/members/groups\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\") ?? \"\");\n    const form = await c.req.formData();\n    const groupName = asString(form.get(\"groupName\"));\n    const role = asString(form.get(\"role\"));\n    const inputError = ProjectGroupMappingModel.inputError(groupName, role);\n    if (inputError || !groupName || !isProjectRole(role)) {\n      return c.html(\n        (await renderSettingsPage(c, \"members\", { globalError: inputError ?? \"Invalid input\" })) ??\n          \"\",\n        400,\n      );\n    }\n    await new ProjectGroupMappingModel(getStore().db).create(project.id, groupName, role);\n    flash(c, \"Group mapping added\");\n    return hxRedirect(c, `/projects/${project.slug}/settings/members`);\n  });\n\n  app.post(\"/projects/:slug/settings/members/groups/:mappingId/remove\", async (c) => {\n    const project = await findProject(c.req.param(\"slug\") ?? \"\");\n    await new ProjectGroupMappingModel(getStore().db).remove(\n      project.id,\n      c.req.param(\"mappingId\") ?? \"\",\n    );\n    flash(c, \"Group mapping removed\");\n    return hxRedirect(c, `/projects/${project.slug}/settings/members`);\n  });\n}\n"],"mappings":";;;;;;;;;;;AAQA,SAAgB,uBAAuB,KAAwB;CAC7D,IAAI,IAAI,oCAAoC,OAAO,MACjD,EAAE,KAAK,MAAM,mBAAmB,GAAG,SAAS,CAAC,CAC/C;CAEA,IAAI,KAAK,oCAAoC,OAAO,MAAM;EACxD,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;EAC3D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,SAAS,SAAS,KAAK,IAAI,QAAQ,CAAC;EAC1C,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,CAAC;EACtC,IAAI,CAAC,UAAU,CAAC,cAAc,IAAI,GAChC,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,WAAW,EAAE,aAAa,6BAA6B,CAAC,KACnF,IACF,GACF;EAEF,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,QAAQ,IAAI,QAAQ,IAAI;EACjE,MAAM,GAAG,cAAc;EACvB,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,kBAAkB;CACnE,CAAC;CAED,IAAI,KAAK,mDAAmD,OAAO,MAAM;EACvE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;EAC3D,MAAM,IAAI,YAAY,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,EAAE,IAAI,MAAM,QAAQ,KAAK,EAAE;EACnF,MAAM,GAAG,gBAAgB;EACzB,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,kBAAkB;CACnE,CAAC;CAED,6BAA6B,GAAG;AAClC;;AAGA,SAAS,6BAA6B,KAAwB;CAC5D,IAAI,KAAK,2CAA2C,OAAO,MAAM;EAC/D,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;EAC3D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;EAClC,MAAM,YAAY,SAAS,KAAK,IAAI,WAAW,CAAC;EAChD,MAAM,OAAO,SAAS,KAAK,IAAI,MAAM,CAAC;EACtC,MAAM,aAAa,yBAAyB,WAAW,WAAW,IAAI;EACtE,IAAI,cAAc,CAAC,aAAa,CAAC,cAAc,IAAI,GACjD,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,WAAW,EAAE,aAAa,cAAc,gBAAgB,CAAC,KACpF,IACF,GACF;EAEF,MAAM,IAAI,yBAAyB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,WAAW,IAAI;EACpF,MAAM,GAAG,qBAAqB;EAC9B,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,kBAAkB;CACnE,CAAC;CAED,IAAI,KAAK,6DAA6D,OAAO,MAAM;EACjF,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;EAC3D,MAAM,IAAI,yBAAyB,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAChD,QAAQ,IACR,EAAE,IAAI,MAAM,WAAW,KAAK,EAC9B;EACA,MAAM,GAAG,uBAAuB;EAChC,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,kBAAkB;CACnE,CAAC;AACH"}