@storyshelf/app 0.6.1 → 0.7.0

package/dist/routers/settings-notifications.mjs

@@ -1,13 +1,14 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { credentialKeys } from "../credential-keys.mjs";
 import { getStore } from "../store.mjs";
 import { flash } from "./flash.mjs";
+import { notificationChannelModel } from "./scoped-models.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
+import { createGitChannel } from "./settings-git-channel.mjs";
 import { NotificationChannelModel, NotificationSubscriptionModel } from "@storyshelf/core/models";
 //#region src/routers/settings-notifications.ts
-/** Notifications settings (channels plus my preferences). */
+/** Notifications settings (message and git channels plus my preferences). */
 function registerNotificationSettings(app) {
 	app.get("/projects/:slug/settings/notifications", async (c) => c.html(await renderSettingsPage(c, "notifications")));
 	app.post("/projects/:slug/settings/notifications", handleCreateChannel);
@@ -28,6 +29,11 @@ function parseChecks(form, name) {
 async function handleCreateChannel(c) {
 	const project = await findProject(c.req.param("slug") ?? "");
 	const form = await c.req.formData();
+	const gitProvider = asString(form.get("gitProvider"));
+	return gitProvider ? await createGitChannel(c, project, gitProvider, form) : await createMessageChannel(c, project, form);
+}
+/** The message-channel form: a provider and a target (email address or webhook URL). */
+async function createMessageChannel(c, project, form) {
 	const provider = asString(form.get("provider"));
 	const target = asString(form.get("target"));
 	if (provider && target) return await createChannelRecord(c, project, provider, target, form);
@@ -44,11 +50,10 @@ async function targetError(c, message) {
 	return c.html(await renderSettingsPage(c, "notifications", { errors: { target: message } }) ?? "", 400);
 }
 async function createChannelRecord(c, project, provider, target, form) {
-	const descriptor = getStore().notifiers.find((candidate) => candidate.metadata.kind === provider);
-	if (!descriptor) return await providerError(c, `Unknown provider: ${provider}`);
-	const parsed = descriptor.metadata.schema.safeParse(channelConfig(provider, target, form));
-	if (!parsed.success) return await targetError(c, parsed.error.message);
-	await persistChannel(project, provider, target, parsed.data, form);
+	const config = channelConfig(provider, target, form);
+	const checked = NotificationChannelModel.validateInput(getStore().notifiers, provider, config);
+	if (!checked.ok) return checked.field === "provider" ? await providerError(c, checked.message) : await targetError(c, checked.message);
+	await persistChannel(project, provider, target, config, form);
 	flash(c, "Notification channel added");
 	return c.html(await renderSettingsPage(c, "notifications") ?? "", 201);
 }
@@ -63,7 +68,7 @@ function channelConfig(provider, target, form) {
 }
 /** Persist a validated channel (webhook URLs land in the secret column). */
 async function persistChannel(project, provider, target, config, form) {
-	await new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config)).create({
+	await notificationChannelModel().create({
 		projectId: project.id,
 		provider,
 		config,
@@ -73,11 +78,11 @@ async function persistChannel(project, provider, target, config, form) {
 }
 async function handleDeleteChannel(c) {
 	const project = await findProject(c.req.param("slug") ?? "");
-	const model = new NotificationChannelModel(getStore().db, void 0, credentialKeys(getStore().config));
+	const model = notificationChannelModel();
 	const channel = await model.get(c.req.param("channelId") ?? "");
 	if (!channel || channel.projectId !== project.id) return c.html(await renderSettingsPage(c, "notifications", { globalError: "Channel not found" }) ?? "", 404);
 	await model.remove(channel.id);
-	flash(c, "Notification channel removed");
+	flash(c, "Channel removed");
 	return c.html(await renderSettingsPage(c, "notifications") ?? "");
 }
 async function handleSaveMine(c) {

package/dist/routers/settings-notifications.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings-notifications.mjs","names":[],"sources":["../../src/routers/settings-notifications.ts"],"sourcesContent":["import { NotificationChannelModel, NotificationSubscriptionModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n\n/** Notifications settings (channels plus my preferences). */\nexport function registerNotificationSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings/notifications\", async (c) =>\n    c.html(await renderSettingsPage(c, \"notifications\")),\n  );\n  app.post(\"/projects/:slug/settings/notifications\", handleCreateChannel);\n  app.post(\"/projects/:slug/settings/notifications/:channelId/delete\", handleDeleteChannel);\n  app.post(\"/projects/:slug/settings/notifications/me\", handleSaveMine);\n}\n\n/** Parse the comma-separated events field. */\nfunction parseEvents(form: FormData): string[] | undefined {\n  const raw = asString(form.get(\"events\"));\n  if (!raw) {\n    return undefined;\n  }\n  const events = raw\n    .split(\",\")\n    .map((event) => event.trim())\n    .filter((event) => event.length > 0);\n  return events.length > 0 ? events : undefined;\n}\n\n/** Parse repeated checkbox values (topics). */\nfunction parseChecks(form: FormData, name: string): string[] {\n  return form\n    .getAll(name)\n    .filter((entry): entry is string => typeof entry === \"string\")\n    .map((entry) => entry.trim())\n    .filter((entry) => entry.length > 0);\n}\n\nasync function handleCreateChannel(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const form = await c.req.formData();\n  const provider = asString(form.get(\"provider\"));\n  const target = asString(form.get(\"target\"));\n  if (provider && target) {\n    return await createChannelRecord(c, project, provider, target, form);\n  }\n  const missing = provider ? \"target\" : \"provider\";\n  const message = provider ? \"Enter a target\" : \"Choose a provider\";\n  return c.html(\n    (await renderSettingsPage(c, \"notifications\", { errors: { [missing]: message } })) ?? \"\",\n    400,\n  );\n}\n\n/** Render the tab with a provider-field error. */\nasync function providerError(c: Context, message: string): Promise<Response> {\n  return c.html(\n    (await renderSettingsPage(c, \"notifications\", { errors: { provider: message } })) ?? \"\",\n    400,\n  );\n}\n\n/** Render the tab with a target-field error. */\nasync function targetError(c: Context, message: string): Promise<Response> {\n  return c.html(\n    (await renderSettingsPage(c, \"notifications\", { errors: { target: message } })) ?? \"\",\n    400,\n  );\n}\n\nasync function createChannelRecord(\n  c: Context,\n  project: Project,\n  provider: string,\n  target: string,\n  form: FormData,\n): Promise<Response> {\n  const descriptor = getStore().notifiers.find((candidate) => candidate.metadata.kind === provider);\n  if (!descriptor) {\n    return await providerError(c, `Unknown provider: ${provider}`);\n  }\n  const parsed = descriptor.metadata.schema.safeParse(channelConfig(provider, target, form));\n  if (!parsed.success) {\n    return await targetError(c, parsed.error.message);\n  }\n  await persistChannel(project, provider, target, parsed.data, form);\n  flash(c, \"Notification channel added\");\n  return c.html((await renderSettingsPage(c, \"notifications\")) ?? \"\", 201);\n}\n\n/** Build the provider config from the form (address vs secret per kind). */\nfunction channelConfig(provider: string, target: string, form: FormData): Record<string, unknown> {\n  const style = asString(form.get(\"style\")) ?? \"compact\";\n  if (provider === \"email\") {\n    return { to: target, style };\n  }\n  return { style };\n}\n\n/** Persist a validated channel (webhook URLs land in the secret column). */\nasync function persistChannel(\n  project: Project,\n  provider: string,\n  target: string,\n  config: unknown,\n  form: FormData,\n): Promise<void> {\n  await new NotificationChannelModel(\n    getStore().db,\n    undefined,\n    credentialKeys(getStore().config),\n  ).create({\n    projectId: project.id,\n    provider,\n    config: config as Record<string, unknown>,\n    secret: provider === \"email\" ? undefined : target,\n    events: parseEvents(form),\n  });\n}\n\nasync function handleDeleteChannel(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const model = new NotificationChannelModel(\n    getStore().db,\n    undefined,\n    credentialKeys(getStore().config),\n  );\n  const channel = await model.get(c.req.param(\"channelId\") ?? \"\");\n  if (!channel || channel.projectId !== project.id) {\n    return c.html(\n      (await renderSettingsPage(c, \"notifications\", {\n        globalError: \"Channel not found\",\n      })) ?? \"\",\n      404,\n    );\n  }\n  await model.remove(channel.id);\n  flash(c, \"Notification channel removed\");\n  return c.html((await renderSettingsPage(c, \"notifications\")) ?? \"\");\n}\n\nasync function handleSaveMine(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const user = getStore().user;\n  if (user) {\n    await saveSubscription(project, user.id, await c.req.formData());\n    flash(c, \"Notification preferences saved\");\n    return c.html((await renderSettingsPage(c, \"notifications\")) ?? \"\");\n  }\n  return c.html(\n    (await renderSettingsPage(c, \"notifications\", {\n      globalError: \"Sign in to save notification preferences\",\n    })) ?? \"\",\n    401,\n  );\n}\n\n/** Persist the viewer's own subscription (unchecked means opt out). */\nasync function saveSubscription(project: Project, userId: string, form: FormData): Promise<void> {\n  const model = new NotificationSubscriptionModel(getStore().db);\n  if (form.get(\"enabled\") === \"on\") {\n    await model.upsert(project.id, userId, { events: parseChecks(form, \"events\"), via: [\"email\"] });\n    return;\n  }\n  await model.remove(project.id, userId);\n}\n"],"mappings":";;;;;;;;;;AAUA,SAAgB,6BAA6B,KAAwB;CACnE,IAAI,IAAI,0CAA0C,OAAO,MACvD,EAAE,KAAK,MAAM,mBAAmB,GAAG,eAAe,CAAC,CACrD;CACA,IAAI,KAAK,0CAA0C,mBAAmB;CACtE,IAAI,KAAK,4DAA4D,mBAAmB;CACxF,IAAI,KAAK,6CAA6C,cAAc;AACtE;;AAGA,SAAS,YAAY,MAAsC;CACzD,MAAM,MAAM,SAAS,KAAK,IAAI,QAAQ,CAAC;CACvC,IAAI,CAAC,KACH;CAEF,MAAM,SAAS,IACZ,MAAM,GAAG,CAAC,CACV,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,QAAQ,UAAU,MAAM,SAAS,CAAC;CACrC,OAAO,OAAO,SAAS,IAAI,SAAS,KAAA;AACtC;;AAGA,SAAS,YAAY,MAAgB,MAAwB;CAC3D,OAAO,KACJ,OAAO,IAAI,CAAC,CACZ,QAAQ,UAA2B,OAAO,UAAU,QAAQ,CAAC,CAC7D,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,QAAQ,UAAU,MAAM,SAAS,CAAC;AACvC;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,WAAW,SAAS,KAAK,IAAI,UAAU,CAAC;CAC9C,MAAM,SAAS,SAAS,KAAK,IAAI,QAAQ,CAAC;CAC1C,IAAI,YAAY,QACd,OAAO,MAAM,oBAAoB,GAAG,SAAS,UAAU,QAAQ,IAAI;CAErE,MAAM,UAAU,WAAW,WAAW;CACtC,MAAM,UAAU,WAAW,mBAAmB;CAC9C,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,iBAAiB,EAAE,QAAQ,GAAG,UAAU,QAAQ,EAAE,CAAC,KAAM,IACtF,GACF;AACF;;AAGA,eAAe,cAAc,GAAY,SAAoC;CAC3E,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,iBAAiB,EAAE,QAAQ,EAAE,UAAU,QAAQ,EAAE,CAAC,KAAM,IACrF,GACF;AACF;;AAGA,eAAe,YAAY,GAAY,SAAoC;CACzE,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,QAAQ,EAAE,CAAC,KAAM,IACnF,GACF;AACF;AAEA,eAAe,oBACb,GACA,SACA,UACA,QACA,MACmB;CACnB,MAAM,aAAa,SAAS,CAAC,CAAC,UAAU,MAAM,cAAc,UAAU,SAAS,SAAS,QAAQ;CAChG,IAAI,CAAC,YACH,OAAO,MAAM,cAAc,GAAG,qBAAqB,UAAU;CAE/D,MAAM,SAAS,WAAW,SAAS,OAAO,UAAU,cAAc,UAAU,QAAQ,IAAI,CAAC;CACzF,IAAI,CAAC,OAAO,SACV,OAAO,MAAM,YAAY,GAAG,OAAO,MAAM,OAAO;CAElD,MAAM,eAAe,SAAS,UAAU,QAAQ,OAAO,MAAM,IAAI;CACjE,MAAM,GAAG,4BAA4B;CACrC,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,eAAe,KAAM,IAAI,GAAG;AACzE;;AAGA,SAAS,cAAc,UAAkB,QAAgB,MAAyC;CAChG,MAAM,QAAQ,SAAS,KAAK,IAAI,OAAO,CAAC,KAAK;CAC7C,IAAI,aAAa,SACf,OAAO;EAAE,IAAI;EAAQ;CAAM;CAE7B,OAAO,EAAE,MAAM;AACjB;;AAGA,eAAe,eACb,SACA,UACA,QACA,QACA,MACe;CACf,MAAM,IAAI,yBACR,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,OAAO;EACP,WAAW,QAAQ;EACnB;EACQ;EACR,QAAQ,aAAa,UAAU,KAAA,IAAY;EAC3C,QAAQ,YAAY,IAAI;CAC1B,CAAC;AACH;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,QAAQ,IAAI,yBAChB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC;CACA,MAAM,UAAU,MAAM,MAAM,IAAI,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE;CAC9D,IAAI,CAAC,WAAW,QAAQ,cAAc,QAAQ,IAC5C,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,iBAAiB,EAC5C,aAAa,oBACf,CAAC,KAAM,IACP,GACF;CAEF,MAAM,MAAM,OAAO,QAAQ,EAAE;CAC7B,MAAM,GAAG,8BAA8B;CACvC,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,eAAe,KAAM,EAAE;AACpE;AAEA,eAAe,eAAe,GAA+B;CAC3D,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,OAAO,SAAS,CAAC,CAAC;CACxB,IAAI,MAAM;EACR,MAAM,iBAAiB,SAAS,KAAK,IAAI,MAAM,EAAE,IAAI,SAAS,CAAC;EAC/D,MAAM,GAAG,gCAAgC;EACzC,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,eAAe,KAAM,EAAE;CACpE;CACA,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,iBAAiB,EAC5C,aAAa,2CACf,CAAC,KAAM,IACP,GACF;AACF;;AAGA,eAAe,iBAAiB,SAAkB,QAAgB,MAA+B;CAC/F,MAAM,QAAQ,IAAI,8BAA8B,SAAS,CAAC,CAAC,EAAE;CAC7D,IAAI,KAAK,IAAI,SAAS,MAAM,MAAM;EAChC,MAAM,MAAM,OAAO,QAAQ,IAAI,QAAQ;GAAE,QAAQ,YAAY,MAAM,QAAQ;GAAG,KAAK,CAAC,OAAO;EAAE,CAAC;EAC9F;CACF;CACA,MAAM,MAAM,OAAO,QAAQ,IAAI,MAAM;AACvC"}
+{"version":3,"file":"settings-notifications.mjs","names":[],"sources":["../../src/routers/settings-notifications.ts"],"sourcesContent":["import { NotificationChannelModel, NotificationSubscriptionModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { notificationChannelModel } from \"./scoped-models.ts\";\nimport { createGitChannel } from \"./settings-git-channel.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n\n/** Notifications settings (message and git channels plus my preferences). */\nexport function registerNotificationSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings/notifications\", async (c) =>\n    c.html(await renderSettingsPage(c, \"notifications\")),\n  );\n  app.post(\"/projects/:slug/settings/notifications\", handleCreateChannel);\n  app.post(\"/projects/:slug/settings/notifications/:channelId/delete\", handleDeleteChannel);\n  app.post(\"/projects/:slug/settings/notifications/me\", handleSaveMine);\n}\n\n/** Parse the comma-separated events field. */\nfunction parseEvents(form: FormData): string[] | undefined {\n  const raw = asString(form.get(\"events\"));\n  if (!raw) {\n    return undefined;\n  }\n  const events = raw\n    .split(\",\")\n    .map((event) => event.trim())\n    .filter((event) => event.length > 0);\n  return events.length > 0 ? events : undefined;\n}\n\n/** Parse repeated checkbox values (topics). */\nfunction parseChecks(form: FormData, name: string): string[] {\n  return form\n    .getAll(name)\n    .filter((entry): entry is string => typeof entry === \"string\")\n    .map((entry) => entry.trim())\n    .filter((entry) => entry.length > 0);\n}\n\nasync function handleCreateChannel(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const form = await c.req.formData();\n  const gitProvider = asString(form.get(\"gitProvider\"));\n  return gitProvider\n    ? await createGitChannel(c, project, gitProvider, form)\n    : await createMessageChannel(c, project, form);\n}\n\n/** The message-channel form: a provider and a target (email address or webhook URL). */\nasync function createMessageChannel(\n  c: Context,\n  project: Project,\n  form: FormData,\n): Promise<Response> {\n  const provider = asString(form.get(\"provider\"));\n  const target = asString(form.get(\"target\"));\n  if (provider && target) {\n    return await createChannelRecord(c, project, provider, target, form);\n  }\n  const missing = provider ? \"target\" : \"provider\";\n  const message = provider ? \"Enter a target\" : \"Choose a provider\";\n  return c.html(\n    (await renderSettingsPage(c, \"notifications\", { errors: { [missing]: message } })) ?? \"\",\n    400,\n  );\n}\n\n/** Render the tab with a provider-field error. */\nasync function providerError(c: Context, message: string): Promise<Response> {\n  return c.html(\n    (await renderSettingsPage(c, \"notifications\", { errors: { provider: message } })) ?? \"\",\n    400,\n  );\n}\n\n/** Render the tab with a target-field error. */\nasync function targetError(c: Context, message: string): Promise<Response> {\n  return c.html(\n    (await renderSettingsPage(c, \"notifications\", { errors: { target: message } })) ?? \"\",\n    400,\n  );\n}\n\nasync function createChannelRecord(\n  c: Context,\n  project: Project,\n  provider: string,\n  target: string,\n  form: FormData,\n): Promise<Response> {\n  const config = channelConfig(provider, target, form);\n  const checked = NotificationChannelModel.validateInput(getStore().notifiers, provider, config);\n  if (!checked.ok) {\n    return checked.field === \"provider\"\n      ? await providerError(c, checked.message)\n      : await targetError(c, checked.message);\n  }\n  await persistChannel(project, provider, target, config, form);\n  flash(c, \"Notification channel added\");\n  return c.html((await renderSettingsPage(c, \"notifications\")) ?? \"\", 201);\n}\n\n/** Build the provider config from the form (address vs secret per kind). */\nfunction channelConfig(provider: string, target: string, form: FormData): Record<string, unknown> {\n  const style = asString(form.get(\"style\")) ?? \"compact\";\n  if (provider === \"email\") {\n    return { to: target, style };\n  }\n  return { style };\n}\n\n/** Persist a validated channel (webhook URLs land in the secret column). */\nasync function persistChannel(\n  project: Project,\n  provider: string,\n  target: string,\n  config: unknown,\n  form: FormData,\n): Promise<void> {\n  await notificationChannelModel().create({\n    projectId: project.id,\n    provider,\n    config: config as Record<string, unknown>,\n    secret: provider === \"email\" ? undefined : target,\n    events: parseEvents(form),\n  });\n}\n\nasync function handleDeleteChannel(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const model = notificationChannelModel();\n  const channel = await model.get(c.req.param(\"channelId\") ?? \"\");\n  if (!channel || channel.projectId !== project.id) {\n    return c.html(\n      (await renderSettingsPage(c, \"notifications\", {\n        globalError: \"Channel not found\",\n      })) ?? \"\",\n      404,\n    );\n  }\n  await model.remove(channel.id);\n  flash(c, \"Channel removed\");\n  return c.html((await renderSettingsPage(c, \"notifications\")) ?? \"\");\n}\n\nasync function handleSaveMine(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const user = getStore().user;\n  if (user) {\n    await saveSubscription(project, user.id, await c.req.formData());\n    flash(c, \"Notification preferences saved\");\n    return c.html((await renderSettingsPage(c, \"notifications\")) ?? \"\");\n  }\n  return c.html(\n    (await renderSettingsPage(c, \"notifications\", {\n      globalError: \"Sign in to save notification preferences\",\n    })) ?? \"\",\n    401,\n  );\n}\n\n/** Persist the viewer's own subscription (unchecked means opt out). */\nasync function saveSubscription(project: Project, userId: string, form: FormData): Promise<void> {\n  const model = new NotificationSubscriptionModel(getStore().db);\n  if (form.get(\"enabled\") === \"on\") {\n    await model.upsert(project.id, userId, { events: parseChecks(form, \"events\"), via: [\"email\"] });\n    return;\n  }\n  await model.remove(project.id, userId);\n}\n"],"mappings":";;;;;;;;;;;AAWA,SAAgB,6BAA6B,KAAwB;CACnE,IAAI,IAAI,0CAA0C,OAAO,MACvD,EAAE,KAAK,MAAM,mBAAmB,GAAG,eAAe,CAAC,CACrD;CACA,IAAI,KAAK,0CAA0C,mBAAmB;CACtE,IAAI,KAAK,4DAA4D,mBAAmB;CACxF,IAAI,KAAK,6CAA6C,cAAc;AACtE;;AAGA,SAAS,YAAY,MAAsC;CACzD,MAAM,MAAM,SAAS,KAAK,IAAI,QAAQ,CAAC;CACvC,IAAI,CAAC,KACH;CAEF,MAAM,SAAS,IACZ,MAAM,GAAG,CAAC,CACV,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,QAAQ,UAAU,MAAM,SAAS,CAAC;CACrC,OAAO,OAAO,SAAS,IAAI,SAAS,KAAA;AACtC;;AAGA,SAAS,YAAY,MAAgB,MAAwB;CAC3D,OAAO,KACJ,OAAO,IAAI,CAAC,CACZ,QAAQ,UAA2B,OAAO,UAAU,QAAQ,CAAC,CAC7D,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,QAAQ,UAAU,MAAM,SAAS,CAAC;AACvC;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,cAAc,SAAS,KAAK,IAAI,aAAa,CAAC;CACpD,OAAO,cACH,MAAM,iBAAiB,GAAG,SAAS,aAAa,IAAI,IACpD,MAAM,qBAAqB,GAAG,SAAS,IAAI;AACjD;;AAGA,eAAe,qBACb,GACA,SACA,MACmB;CACnB,MAAM,WAAW,SAAS,KAAK,IAAI,UAAU,CAAC;CAC9C,MAAM,SAAS,SAAS,KAAK,IAAI,QAAQ,CAAC;CAC1C,IAAI,YAAY,QACd,OAAO,MAAM,oBAAoB,GAAG,SAAS,UAAU,QAAQ,IAAI;CAErE,MAAM,UAAU,WAAW,WAAW;CACtC,MAAM,UAAU,WAAW,mBAAmB;CAC9C,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,iBAAiB,EAAE,QAAQ,GAAG,UAAU,QAAQ,EAAE,CAAC,KAAM,IACtF,GACF;AACF;;AAGA,eAAe,cAAc,GAAY,SAAoC;CAC3E,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,iBAAiB,EAAE,QAAQ,EAAE,UAAU,QAAQ,EAAE,CAAC,KAAM,IACrF,GACF;AACF;;AAGA,eAAe,YAAY,GAAY,SAAoC;CACzE,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,iBAAiB,EAAE,QAAQ,EAAE,QAAQ,QAAQ,EAAE,CAAC,KAAM,IACnF,GACF;AACF;AAEA,eAAe,oBACb,GACA,SACA,UACA,QACA,MACmB;CACnB,MAAM,SAAS,cAAc,UAAU,QAAQ,IAAI;CACnD,MAAM,UAAU,yBAAyB,cAAc,SAAS,CAAC,CAAC,WAAW,UAAU,MAAM;CAC7F,IAAI,CAAC,QAAQ,IACX,OAAO,QAAQ,UAAU,aACrB,MAAM,cAAc,GAAG,QAAQ,OAAO,IACtC,MAAM,YAAY,GAAG,QAAQ,OAAO;CAE1C,MAAM,eAAe,SAAS,UAAU,QAAQ,QAAQ,IAAI;CAC5D,MAAM,GAAG,4BAA4B;CACrC,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,eAAe,KAAM,IAAI,GAAG;AACzE;;AAGA,SAAS,cAAc,UAAkB,QAAgB,MAAyC;CAChG,MAAM,QAAQ,SAAS,KAAK,IAAI,OAAO,CAAC,KAAK;CAC7C,IAAI,aAAa,SACf,OAAO;EAAE,IAAI;EAAQ;CAAM;CAE7B,OAAO,EAAE,MAAM;AACjB;;AAGA,eAAe,eACb,SACA,UACA,QACA,QACA,MACe;CACf,MAAM,yBAAyB,CAAC,CAAC,OAAO;EACtC,WAAW,QAAQ;EACnB;EACQ;EACR,QAAQ,aAAa,UAAU,KAAA,IAAY;EAC3C,QAAQ,YAAY,IAAI;CAC1B,CAAC;AACH;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,QAAQ,yBAAyB;CACvC,MAAM,UAAU,MAAM,MAAM,IAAI,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE;CAC9D,IAAI,CAAC,WAAW,QAAQ,cAAc,QAAQ,IAC5C,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,iBAAiB,EAC5C,aAAa,oBACf,CAAC,KAAM,IACP,GACF;CAEF,MAAM,MAAM,OAAO,QAAQ,EAAE;CAC7B,MAAM,GAAG,iBAAiB;CAC1B,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,eAAe,KAAM,EAAE;AACpE;AAEA,eAAe,eAAe,GAA+B;CAC3D,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,OAAO,SAAS,CAAC,CAAC;CACxB,IAAI,MAAM;EACR,MAAM,iBAAiB,SAAS,KAAK,IAAI,MAAM,EAAE,IAAI,SAAS,CAAC;EAC/D,MAAM,GAAG,gCAAgC;EACzC,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,eAAe,KAAM,EAAE;CACpE;CACA,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,iBAAiB,EAC5C,aAAa,2CACf,CAAC,KAAM,IACP,GACF;AACF;;AAGA,eAAe,iBAAiB,SAAkB,QAAgB,MAA+B;CAC/F,MAAM,QAAQ,IAAI,8BAA8B,SAAS,CAAC,CAAC,EAAE;CAC7D,IAAI,KAAK,IAAI,SAAS,MAAM,MAAM;EAChC,MAAM,MAAM,OAAO,QAAQ,IAAI,QAAQ;GAAE,QAAQ,YAAY,MAAM,QAAQ;GAAG,KAAK,CAAC,OAAO;EAAE,CAAC;EAC9F;CACF;CACA,MAAM,MAAM,OAAO,QAAQ,IAAI,MAAM;AACvC"}

package/dist/routers/settings-tokens.mjs

@@ -6,7 +6,6 @@ import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
 import { TokenModel } from "@storyshelf/core/models";
-import { randomToken } from "@storyshelf/core/utils";
 //#region src/routers/settings-tokens.ts
 /** CI token settings (create with one-time display, delete). */
 function registerTokenSettings(app) {
@@ -19,14 +18,12 @@ async function handleCreateToken(c) {
 	const form = await c.req.formData();
 	const tokenName = asString(form.get("tokenName")) ?? asString(form.get("name"));
 	if (!tokenName) return c.html(await renderSettingsPage(c, "tokens", { globalError: "Name is required" }) ?? "", 400);
-	const token = randomToken("shelf_");
-	await new TokenModel(getStore().db).create(project.id, {
+	const { value } = await new TokenModel(getStore().db).issue(project.id, {
 		name: tokenName,
-		hash: token.hash,
 		userId: getStore().user?.id ?? null
 	});
 	flash(c, "Token created — copy it now, it is shown once");
-	return c.html(await renderSettingsPage(c, "tokens", { secret: token.value }) ?? "");
+	return c.html(await renderSettingsPage(c, "tokens", { secret: value }) ?? "");
 }
 async function handleDeleteToken(c) {
 	const project = await findProject(c.req.param("slug") ?? "");

package/dist/routers/settings-tokens.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings-tokens.mjs","names":[],"sources":["../../src/routers/settings-tokens.ts"],"sourcesContent":["import { TokenModel } from \"@storyshelf/core/models\";\nimport { randomToken } from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n/** CI token settings (create with one-time display, delete). */\nexport function registerTokenSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings/tokens\", async (c) =>\n    c.html(await renderSettingsPage(c, \"tokens\")),\n  );\n  app.post(\"/projects/:slug/settings/tokens\", handleCreateToken);\n  app.post(\"/projects/:slug/settings/tokens/:tokenId/delete\", handleDeleteToken);\n}\n\nasync function handleCreateToken(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const form = await c.req.formData();\n  const tokenName = asString(form.get(\"tokenName\")) ?? asString(form.get(\"name\"));\n  if (!tokenName) {\n    return c.html(\n      (await renderSettingsPage(c, \"tokens\", { globalError: \"Name is required\" })) ?? \"\",\n      400,\n    );\n  }\n  const token = randomToken(\"shelf_\");\n  await new TokenModel(getStore().db).create(project.id, {\n    name: tokenName,\n    hash: token.hash,\n    userId: getStore().user?.id ?? null,\n  });\n  flash(c, \"Token created — copy it now, it is shown once\");\n  return c.html((await renderSettingsPage(c, \"tokens\", { secret: token.value })) ?? \"\");\n}\n\nasync function handleDeleteToken(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  await new TokenModel(getStore().db).remove(c.req.param(\"tokenId\") ?? \"\");\n  flash(c, \"Token deleted\");\n  return hxRedirect(c, `/projects/${project.slug}/settings/tokens`);\n}\n"],"mappings":";;;;;;;;;;;AASA,SAAgB,sBAAsB,KAAwB;CAC5D,IAAI,IAAI,mCAAmC,OAAO,MAChD,EAAE,KAAK,MAAM,mBAAmB,GAAG,QAAQ,CAAC,CAC9C;CACA,IAAI,KAAK,mCAAmC,iBAAiB;CAC7D,IAAI,KAAK,mDAAmD,iBAAiB;AAC/E;AAEA,eAAe,kBAAkB,GAA+B;CAC9D,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,YAAY,SAAS,KAAK,IAAI,WAAW,CAAC,KAAK,SAAS,KAAK,IAAI,MAAM,CAAC;CAC9E,IAAI,CAAC,WACH,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,mBAAmB,CAAC,KAAM,IAChF,GACF;CAEF,MAAM,QAAQ,YAAY,QAAQ;CAClC,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;EACrD,MAAM;EACN,MAAM,MAAM;EACZ,QAAQ,SAAS,CAAC,CAAC,MAAM,MAAM;CACjC,CAAC;CACD,MAAM,GAAG,+CAA+C;CACxD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,QAAQ,MAAM,MAAM,CAAC,KAAM,EAAE;AACtF;AAEA,eAAe,kBAAkB,GAA+B;CAC9D,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,MAAM,SAAS,KAAK,EAAE;CACvE,MAAM,GAAG,eAAe;CACxB,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;AAClE"}
+{"version":3,"file":"settings-tokens.mjs","names":[],"sources":["../../src/routers/settings-tokens.ts"],"sourcesContent":["import { TokenModel } from \"@storyshelf/core/models\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n/** CI token settings (create with one-time display, delete). */\nexport function registerTokenSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings/tokens\", async (c) =>\n    c.html(await renderSettingsPage(c, \"tokens\")),\n  );\n  app.post(\"/projects/:slug/settings/tokens\", handleCreateToken);\n  app.post(\"/projects/:slug/settings/tokens/:tokenId/delete\", handleDeleteToken);\n}\n\nasync function handleCreateToken(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const form = await c.req.formData();\n  const tokenName = asString(form.get(\"tokenName\")) ?? asString(form.get(\"name\"));\n  if (!tokenName) {\n    return c.html(\n      (await renderSettingsPage(c, \"tokens\", { globalError: \"Name is required\" })) ?? \"\",\n      400,\n    );\n  }\n  const { value } = await new TokenModel(getStore().db).issue(project.id, {\n    name: tokenName,\n    userId: getStore().user?.id ?? null,\n  });\n  flash(c, \"Token created — copy it now, it is shown once\");\n  return c.html((await renderSettingsPage(c, \"tokens\", { secret: value })) ?? \"\");\n}\n\nasync function handleDeleteToken(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  await new TokenModel(getStore().db).remove(c.req.param(\"tokenId\") ?? \"\");\n  flash(c, \"Token deleted\");\n  return hxRedirect(c, `/projects/${project.slug}/settings/tokens`);\n}\n"],"mappings":";;;;;;;;;;AAQA,SAAgB,sBAAsB,KAAwB;CAC5D,IAAI,IAAI,mCAAmC,OAAO,MAChD,EAAE,KAAK,MAAM,mBAAmB,GAAG,QAAQ,CAAC,CAC9C;CACA,IAAI,KAAK,mCAAmC,iBAAiB;CAC7D,IAAI,KAAK,mDAAmD,iBAAiB;AAC/E;AAEA,eAAe,kBAAkB,GAA+B;CAC9D,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,YAAY,SAAS,KAAK,IAAI,WAAW,CAAC,KAAK,SAAS,KAAK,IAAI,MAAM,CAAC;CAC9E,IAAI,CAAC,WACH,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,UAAU,EAAE,aAAa,mBAAmB,CAAC,KAAM,IAChF,GACF;CAEF,MAAM,EAAE,UAAU,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,QAAQ,IAAI;EACtE,MAAM;EACN,QAAQ,SAAS,CAAC,CAAC,MAAM,MAAM;CACjC,CAAC;CACD,MAAM,GAAG,+CAA+C;CACxD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,QAAQ,MAAM,CAAC,KAAM,EAAE;AAChF;AAEA,eAAe,kBAAkB,GAA+B;CAC9D,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,IAAI,WAAW,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,IAAI,MAAM,SAAS,KAAK,EAAE;CACvE,MAAM,GAAG,eAAe;CACxB,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,iBAAiB;AAClE"}

package/dist/routers/settings-webhooks.mjs

@@ -1,14 +1,12 @@
 import "node:path";
 import "node:url";
 import.meta.url;
-import { credentialKeys } from "../credential-keys.mjs";
-import { getStore } from "../store.mjs";
+import { notFound } from "./helpers.mjs";
 import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
-import { notFound } from "./helpers.mjs";
+import { webhookModel } from "./scoped-models.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
 import { WebhookModel } from "@storyshelf/core/models";
-import { randomToken } from "@storyshelf/core/utils";
 //#region src/routers/settings-webhooks.ts
 /** Webhook settings (create with one-time secret display, delete). */
 function registerWebhookSettings(app) {
@@ -16,18 +14,6 @@ function registerWebhookSettings(app) {
 	app.post("/projects/:slug/settings/webhooks", handleCreateWebhook);
 	app.post("/projects/:slug/settings/webhooks/:webhookId/delete", handleDeleteWebhook);
 }
-/** Validate a webhook URL, returning the error message or null when valid. */
-function webhookUrlError(url) {
-	if (!url) return "A valid URL is required";
-	let protocol;
-	try {
-		protocol = new URL(url).protocol;
-	} catch {
-		return "Enter a valid URL";
-	}
-	if (protocol !== "https:" && protocol !== "http:") return "URL must use http or https";
-	return null;
-}
 /** Parse the comma-separated events field. */
 function parseWebhookEvents(form) {
 	const eventsRaw = asString(form.get("events"));
@@ -38,26 +24,23 @@ async function handleCreateWebhook(c) {
 	const project = await findProject(c.req.param("slug") ?? "");
 	const form = await c.req.formData();
 	const url = asString(form.get("url"));
-	const urlError = webhookUrlError(url);
+	const urlError = WebhookModel.urlError(url);
 	if (urlError || !url) return c.html(await renderSettingsPage(c, "webhooks", { errors: { url: urlError ?? "Invalid URL" } }) ?? "", 400);
 	return await createWebhookRecord(c, project, url, parseWebhookEvents(form));
 }
 async function createWebhookRecord(c, project, url, events) {
-	const webhookModel = new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config));
-	const secret = randomToken("whsec_").value;
-	await webhookModel.create(project.id, {
+	const { secret } = await webhookModel().issue(project.id, {
 		url,
-		events,
-		secret
+		events
 	});
 	flash(c, "Webhook created — copy the signing secret now");
 	return c.html(await renderSettingsPage(c, "webhooks", { secret }) ?? "", 201);
 }
 async function handleDeleteWebhook(c) {
 	const project = await findProject(c.req.param("slug") ?? "");
-	const webhook = await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).get(project.id, c.req.param("webhookId") ?? "");
+	const webhook = await webhookModel().get(project.id, c.req.param("webhookId") ?? "");
 	if (!webhook) notFound("Webhook not found");
-	await new WebhookModel(getStore().db, void 0, credentialKeys(getStore().config)).remove(project.id, webhook.id);
+	await webhookModel().remove(project.id, webhook.id);
 	flash(c, "Webhook deleted");
 	return hxRedirect(c, `/projects/${project.slug}/settings/webhooks`);
 }

package/dist/routers/settings-webhooks.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings-webhooks.mjs","names":[],"sources":["../../src/routers/settings-webhooks.ts"],"sourcesContent":["import { WebhookModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport { randomToken } from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { notFound } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n/** Webhook settings (create with one-time secret display, delete). */\nexport function registerWebhookSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings/webhooks\", async (c) =>\n    c.html(await renderSettingsPage(c, \"webhooks\")),\n  );\n  app.post(\"/projects/:slug/settings/webhooks\", handleCreateWebhook);\n  app.post(\"/projects/:slug/settings/webhooks/:webhookId/delete\", handleDeleteWebhook);\n}\n\n/** Validate a webhook URL, returning the error message or null when valid. */\nfunction webhookUrlError(url: string | undefined): string | null {\n  if (!url) {\n    return \"A valid URL is required\";\n  }\n  let protocol: string;\n  try {\n    protocol = new URL(url).protocol;\n  } catch {\n    return \"Enter a valid URL\";\n  }\n  if (protocol !== \"https:\" && protocol !== \"http:\") {\n    return \"URL must use http or https\";\n  }\n  return null;\n}\n\n/** Parse the comma-separated events field. */\nfunction parseWebhookEvents(form: FormData): string[] | undefined {\n  const eventsRaw = asString(form.get(\"events\"));\n  if (!eventsRaw) {\n    return undefined;\n  }\n  return eventsRaw\n    .split(\",\")\n    .map((event) => event.trim())\n    .filter((event) => event.length > 0);\n}\n\nasync function handleCreateWebhook(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const form = await c.req.formData();\n  const url = asString(form.get(\"url\"));\n  const urlError = webhookUrlError(url);\n  if (urlError || !url) {\n    return c.html(\n      (await renderSettingsPage(c, \"webhooks\", { errors: { url: urlError ?? \"Invalid URL\" } })) ??\n        \"\",\n      400,\n    );\n  }\n  return await createWebhookRecord(c, project, url, parseWebhookEvents(form));\n}\n\nasync function createWebhookRecord(\n  c: Context,\n  project: Project,\n  url: string,\n  events: string[] | undefined,\n): Promise<Response> {\n  const webhookModel = new WebhookModel(\n    getStore().db,\n    undefined,\n    credentialKeys(getStore().config),\n  );\n  const secret = randomToken(\"whsec_\").value;\n  await webhookModel.create(project.id, { url, events, secret });\n  flash(c, \"Webhook created — copy the signing secret now\");\n  return c.html((await renderSettingsPage(c, \"webhooks\", { secret })) ?? \"\", 201);\n}\n\nasync function handleDeleteWebhook(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const webhook = await new WebhookModel(\n    getStore().db,\n    undefined,\n    credentialKeys(getStore().config),\n  ).get(project.id, c.req.param(\"webhookId\") ?? \"\");\n  if (!webhook) {\n    notFound(\"Webhook not found\");\n  }\n  await new WebhookModel(getStore().db, undefined, credentialKeys(getStore().config)).remove(\n    project.id,\n    webhook.id,\n  );\n  flash(c, \"Webhook deleted\");\n  return hxRedirect(c, `/projects/${project.slug}/settings/webhooks`);\n}\n"],"mappings":";;;;;;;;;;;;;AAYA,SAAgB,wBAAwB,KAAwB;CAC9D,IAAI,IAAI,qCAAqC,OAAO,MAClD,EAAE,KAAK,MAAM,mBAAmB,GAAG,UAAU,CAAC,CAChD;CACA,IAAI,KAAK,qCAAqC,mBAAmB;CACjE,IAAI,KAAK,uDAAuD,mBAAmB;AACrF;;AAGA,SAAS,gBAAgB,KAAwC;CAC/D,IAAI,CAAC,KACH,OAAO;CAET,IAAI;CACJ,IAAI;EACF,WAAW,IAAI,IAAI,GAAG,CAAC,CAAC;CAC1B,QAAQ;EACN,OAAO;CACT;CACA,IAAI,aAAa,YAAY,aAAa,SACxC,OAAO;CAET,OAAO;AACT;;AAGA,SAAS,mBAAmB,MAAsC;CAChE,MAAM,YAAY,SAAS,KAAK,IAAI,QAAQ,CAAC;CAC7C,IAAI,CAAC,WACH;CAEF,OAAO,UACJ,MAAM,GAAG,CAAC,CACV,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,QAAQ,UAAU,MAAM,SAAS,CAAC;AACvC;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,MAAM,SAAS,KAAK,IAAI,KAAK,CAAC;CACpC,MAAM,WAAW,gBAAgB,GAAG;CACpC,IAAI,YAAY,CAAC,KACf,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,YAAY,EAAE,QAAQ,EAAE,KAAK,YAAY,cAAc,EAAE,CAAC,KACrF,IACF,GACF;CAEF,OAAO,MAAM,oBAAoB,GAAG,SAAS,KAAK,mBAAmB,IAAI,CAAC;AAC5E;AAEA,eAAe,oBACb,GACA,SACA,KACA,QACmB;CACnB,MAAM,eAAe,IAAI,aACvB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC;CACA,MAAM,SAAS,YAAY,QAAQ,CAAC,CAAC;CACrC,MAAM,aAAa,OAAO,QAAQ,IAAI;EAAE;EAAK;EAAQ;CAAO,CAAC;CAC7D,MAAM,GAAG,+CAA+C;CACxD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,YAAY,EAAE,OAAO,CAAC,KAAM,IAAI,GAAG;AAChF;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,UAAU,MAAM,IAAI,aACxB,SAAS,CAAC,CAAC,IACX,KAAA,GACA,eAAe,SAAS,CAAC,CAAC,MAAM,CAClC,CAAC,CAAC,IAAI,QAAQ,IAAI,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE;CAChD,IAAI,CAAC,SACH,SAAS,mBAAmB;CAE9B,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,IAAI,KAAA,GAAW,eAAe,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAClF,QAAQ,IACR,QAAQ,EACV;CACA,MAAM,GAAG,iBAAiB;CAC1B,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,mBAAmB;AACpE"}
+{"version":3,"file":"settings-webhooks.mjs","names":[],"sources":["../../src/routers/settings-webhooks.ts"],"sourcesContent":["import { WebhookModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { flash } from \"./flash.ts\";\nimport { notFound } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { webhookModel } from \"./scoped-models.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n/** Webhook settings (create with one-time secret display, delete). */\nexport function registerWebhookSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings/webhooks\", async (c) =>\n    c.html(await renderSettingsPage(c, \"webhooks\")),\n  );\n  app.post(\"/projects/:slug/settings/webhooks\", handleCreateWebhook);\n  app.post(\"/projects/:slug/settings/webhooks/:webhookId/delete\", handleDeleteWebhook);\n}\n\n/** Parse the comma-separated events field. */\nfunction parseWebhookEvents(form: FormData): string[] | undefined {\n  const eventsRaw = asString(form.get(\"events\"));\n  if (!eventsRaw) {\n    return undefined;\n  }\n  return eventsRaw\n    .split(\",\")\n    .map((event) => event.trim())\n    .filter((event) => event.length > 0);\n}\n\nasync function handleCreateWebhook(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const form = await c.req.formData();\n  const url = asString(form.get(\"url\"));\n  const urlError = WebhookModel.urlError(url);\n  if (urlError || !url) {\n    return c.html(\n      (await renderSettingsPage(c, \"webhooks\", { errors: { url: urlError ?? \"Invalid URL\" } })) ??\n        \"\",\n      400,\n    );\n  }\n  return await createWebhookRecord(c, project, url, parseWebhookEvents(form));\n}\n\nasync function createWebhookRecord(\n  c: Context,\n  project: Project,\n  url: string,\n  events: string[] | undefined,\n): Promise<Response> {\n  const { secret } = await webhookModel().issue(project.id, { url, events });\n  flash(c, \"Webhook created — copy the signing secret now\");\n  return c.html((await renderSettingsPage(c, \"webhooks\", { secret })) ?? \"\", 201);\n}\n\nasync function handleDeleteWebhook(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const webhook = await webhookModel().get(project.id, c.req.param(\"webhookId\") ?? \"\");\n  if (!webhook) {\n    notFound(\"Webhook not found\");\n  }\n  await webhookModel().remove(project.id, webhook.id);\n  flash(c, \"Webhook deleted\");\n  return hxRedirect(c, `/projects/${project.slug}/settings/webhooks`);\n}\n"],"mappings":";;;;;;;;;;;AAUA,SAAgB,wBAAwB,KAAwB;CAC9D,IAAI,IAAI,qCAAqC,OAAO,MAClD,EAAE,KAAK,MAAM,mBAAmB,GAAG,UAAU,CAAC,CAChD;CACA,IAAI,KAAK,qCAAqC,mBAAmB;CACjE,IAAI,KAAK,uDAAuD,mBAAmB;AACrF;;AAGA,SAAS,mBAAmB,MAAsC;CAChE,MAAM,YAAY,SAAS,KAAK,IAAI,QAAQ,CAAC;CAC7C,IAAI,CAAC,WACH;CAEF,OAAO,UACJ,MAAM,GAAG,CAAC,CACV,KAAK,UAAU,MAAM,KAAK,CAAC,CAAC,CAC5B,QAAQ,UAAU,MAAM,SAAS,CAAC;AACvC;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,MAAM,SAAS,KAAK,IAAI,KAAK,CAAC;CACpC,MAAM,WAAW,aAAa,SAAS,GAAG;CAC1C,IAAI,YAAY,CAAC,KACf,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,YAAY,EAAE,QAAQ,EAAE,KAAK,YAAY,cAAc,EAAE,CAAC,KACrF,IACF,GACF;CAEF,OAAO,MAAM,oBAAoB,GAAG,SAAS,KAAK,mBAAmB,IAAI,CAAC;AAC5E;AAEA,eAAe,oBACb,GACA,SACA,KACA,QACmB;CACnB,MAAM,EAAE,WAAW,MAAM,aAAa,CAAC,CAAC,MAAM,QAAQ,IAAI;EAAE;EAAK;CAAO,CAAC;CACzE,MAAM,GAAG,+CAA+C;CACxD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,YAAY,EAAE,OAAO,CAAC,KAAM,IAAI,GAAG;AAChF;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,UAAU,MAAM,aAAa,CAAC,CAAC,IAAI,QAAQ,IAAI,EAAE,IAAI,MAAM,WAAW,KAAK,EAAE;CACnF,IAAI,CAAC,SACH,SAAS,mBAAmB;CAE9B,MAAM,aAAa,CAAC,CAAC,OAAO,QAAQ,IAAI,QAAQ,EAAE;CAClD,MAAM,GAAG,iBAAiB;CAC1B,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,mBAAmB;AACpE"}

package/dist/routers/settings.handlers.mjs

@@ -3,9 +3,12 @@ import "node:url";
 import.meta.url;
 import { credentialKeys } from "../credential-keys.mjs";
 import { getStore } from "../store.mjs";
+import { notificationsPaused } from "../notifications-pause.mjs";
 import { notFound } from "./helpers.mjs";
+import { runnerTargets } from "../targets.mjs";
+import { isSiteAdmin } from "./insights.handlers.mjs";
 import { renderProjectSettingsPage } from "../pages/project-settings.mjs";
-import { LabelModel, MemberModel, NotificationChannelModel, NotificationSubscriptionModel, ProjectGroupMappingModel, ProjectModel, StatusConfigModel, TokenModel, WebhookModel } from "@storyshelf/core/models";
+import { DesignCredentialModel, DesignModel, LabelModel, MemberModel, NotificationChannelModel, NotificationSubscriptionModel, PackageUsageModel, ProjectGroupMappingModel, ProjectModel, TokenModel, WebhookModel, credentialDaysLeft } from "@storyshelf/core/models";
 //#region src/routers/settings.handlers.ts
 /** Tokens without hashes for the settings UI. */
 async function loadTokenSummaries(db, projectId) {
@@ -19,17 +22,6 @@ async function loadWebhookSummaries(db, projectId) {
 		events: WebhookModel.eventsOf(webhook)
 	}));
 }
-/** Status-config summaries for the settings UI. */
-async function loadStatusConfigSummaries(db, secret, projectId) {
-	return (await new StatusConfigModel(db, void 0, secret).list(projectId)).map((row) => ({
-		id: row.id,
-		provider: row.provider,
-		config: JSON.parse(row.config),
-		hasToken: row.tokenEncrypted.length > 0,
-		createdAt: row.createdAt,
-		updatedAt: row.updatedAt
-	}));
-}
 /** True when the user may administer the project. */
 function isProjectAdmin(authEnabled, user, members) {
 	return !authEnabled || user?.role === "admin" || members.some((member) => member.userId === user?.id && member.role === "admin");
@@ -54,15 +46,22 @@ async function loadMembersSection(db, projectId) {
 async function loadGroupMappings(db, projectId) {
 	return await new ProjectGroupMappingModel(db).list(projectId);
 }
+/** Delivery kind of a stored channel's provider (unwired providers read as messages). */
+function deliveryOf(notifiers, provider) {
+	return NotificationChannelModel.isStateKind(notifiers, provider) ? "state" : "message";
+}
 /** Channel summaries for the settings UI. */
-async function loadNotificationChannels(db, secret, projectId) {
+async function loadNotificationChannels(db, secret, projectId, notifiers) {
 	return (await new NotificationChannelModel(db, void 0, secret).list(projectId)).map((row) => ({
 		id: row.id,
 		provider: row.provider,
+		delivery: deliveryOf(notifiers, row.provider),
 		config: NotificationChannelModel.configOf(row),
 		hasSecret: row.secretEncrypted !== null,
 		events: NotificationChannelModel.eventsOf(row),
-		enabled: row.enabled
+		enabled: row.enabled,
+		lastError: row.lastError,
+		lastErrorAt: row.lastErrorAt
 	}));
 }
 /** The viewer's own subscription for the settings UI (null when opted out). */
@@ -78,38 +77,106 @@ async function loadMySubscription(db, projectId, userId) {
 }
 /** Notification channels, providers, and my subscription for the UI. */
 async function loadNotificationSection(db, secret, projectId, userId, notifiers) {
-	const notificationChannels = await loadNotificationChannels(db, secret, projectId);
+	const notificationChannels = await loadNotificationChannels(db, secret, projectId, notifiers);
 	const mySubscription = await loadMySubscription(db, projectId, userId);
 	return {
 		notificationChannels,
-		notifyProviders: notifiers.map((candidate) => candidate.metadata.kind),
+		notifyProviders: notifiers.map((candidate) => ({
+			kind: candidate.metadata.kind,
+			name: candidate.metadata.name,
+			delivery: deliveryOf(notifiers, candidate.metadata.kind)
+		})),
 		mySubscription
 	};
 }
-/** Roster, tokens, webhooks, and status configs for the settings UI. */
-async function loadInventorySection(db, secret, projectId) {
+/** Roster, tokens and webhooks for the settings UI. */
+async function loadInventorySection(db, projectId) {
 	const { labelTypes, members, groupMappings } = await loadMembersSection(db, projectId);
 	return {
 		labelTypes,
 		members,
 		groupMappings,
 		tokens: await loadTokenSummaries(db, projectId),
-		webhooks: await loadWebhookSummaries(db, projectId),
-		statusConfigs: await loadStatusConfigSummaries(db, secret, projectId)
+		webhooks: await loadWebhookSummaries(db, projectId)
 	};
 }
+/** Package links plus the other projects that can be picked as upstream. */
+async function loadLinksSection(db, project) {
+	const projects = await new ProjectModel(db).list();
+	const byId = new Map(projects.map((candidate) => [candidate.id, candidate]));
+	return {
+		links: (await new PackageUsageModel(db).listLinks(project.id)).flatMap((row) => {
+			const upstream = byId.get(row.upstreamId);
+			return upstream ? [{
+				packageName: row.packageName,
+				upstreamSlug: upstream.slug,
+				upstreamName: upstream.name
+			}] : [];
+		}),
+		linkCandidates: projects.filter((candidate) => candidate.id !== project.id).map((candidate) => ({
+			slug: candidate.slug,
+			name: candidate.name
+		}))
+	};
+}
+/** Design files, component mappings and per-provider credential health for the Design tab (never a token). */
+async function loadDesignSection(db, secret, providers, projectId) {
+	const model = new DesignModel(db, providers);
+	const files = (await model.projectLinks(projectId)).map((link) => ({
+		id: link.id,
+		label: link.label ?? "Design file",
+		url: link.url
+	}));
+	const components = (await model.componentLinks(projectId)).map((link) => ({
+		id: link.id,
+		importPath: link.importPath ?? "",
+		url: link.url
+	}));
+	const credentials = new DesignCredentialModel(db, secret);
+	return {
+		files,
+		components,
+		providers: await Promise.all(providers.map(async (provider) => await providerSettings(credentials, provider, projectId)))
+	};
+}
+async function providerSettings(credentials, provider, projectId) {
+	const { metadata } = provider;
+	const maxAgeDays = metadata.credentialMaxAgeDays;
+	const row = await credentials.info(projectId, metadata.kind);
+	return {
+		kind: metadata.kind,
+		name: metadata.name,
+		credentialLabel: metadata.credentialLabel,
+		credentialHelp: metadata.credentialHelp,
+		...metadata.credentialPlaceholder ? { credentialPlaceholder: metadata.credentialPlaceholder } : {},
+		urlHint: metadata.urlHint,
+		...maxAgeDays === void 0 ? {} : { maxAgeDays },
+		credential: row ? {
+			status: credentialState(row.status),
+			daysLeft: maxAgeDays === void 0 ? null : credentialDaysLeft(row.createdAt, maxAgeDays),
+			checkedAt: row.checkedAt
+		} : null
+	};
+}
+/** The stored status column as a known state (anything unrecognized reads as unknown). */
+function credentialState(status) {
+	return status === "ok" || status === "unauthorized" || status === "forbidden" ? status : "unknown";
+}
 async function loadSettingsData(slug) {
 	const project = await new ProjectModel(getStore().db).getBySlug(slug);
 	if (!project) return null;
-	const { db, config, user, authEnabled, gitHosts, notifiers } = getStore();
-	const inventory = await loadInventorySection(db, credentialKeys(config), project.id);
+	const { db, config, user, authEnabled, design: designProviders, notifiers } = getStore();
+	const inventory = await loadInventorySection(db, project.id);
 	const notifications = await loadNotificationSection(db, credentialKeys(config), project.id, user?.id, notifiers);
 	const isAdmin = isProjectAdmin(authEnabled, user, inventory.members);
+	const linksSection = await loadLinksSection(db, project);
+	const design = await loadDesignSection(db, credentialKeys(config), designProviders, project.id);
 	return {
 		project,
 		...inventory,
 		...notifications,
-		gitHosts,
+		...linksSection,
+		design,
 		isAdmin
 	};
 }
@@ -121,6 +188,9 @@ async function renderSettingsPage(c, tab, formState) {
 		project: data.project,
 		activeTab: tab,
 		labelTypes: data.labelTypes,
+		links: data.links,
+		linkCandidates: data.linkCandidates,
+		design: data.design,
 		tokens: data.tokens,
 		members: data.members,
 		groupMappings: data.groupMappings,
@@ -128,11 +198,22 @@ async function renderSettingsPage(c, tab, formState) {
 		notificationChannels: data.notificationChannels,
 		notifyProviders: data.notifyProviders,
 		mySubscription: data.mySubscription,
-		statusConfigs: data.statusConfigs,
-		gitHosts: data.gitHosts,
-		isAdmin: data.isAdmin
+		isAdmin: data.isAdmin,
+		notificationsPaused: data.notifyProviders.length > 0 && await notificationsPaused(),
+		ai: aiSettingsData(c),
+		targets: await runnerTargets()
 	}, formState);
 }
+/** AI availability and profile choices for the settings AI tab. */
+function aiSettingsData(c) {
+	const { ai } = getStore();
+	return {
+		available: ai !== void 0,
+		profiles: ai?.profileNames() ?? [],
+		defaultProfile: ai?.defaultProfile() ?? "",
+		isSiteAdmin: isSiteAdmin(c)
+	};
+}
 /** Find a project by slug or throw 404. */
 async function findProject(slug) {
 	const project = await new ProjectModel(getStore().db).getBySlug(slug);

package/dist/routers/settings.handlers.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings.handlers.mjs","names":[],"sources":["../../src/routers/settings.handlers.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"@storyshelf/core/adapter/database\";\nimport type { GitHostProvider } from \"@storyshelf/core/adapter/git-host\";\nimport { LabelModel } from \"@storyshelf/core/models\";\nimport { MemberModel } from \"@storyshelf/core/models\";\nimport { NotificationChannelModel } from \"@storyshelf/core/models\";\nimport { NotificationSubscriptionModel } from \"@storyshelf/core/models\";\nimport { ProjectGroupMappingModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { StatusConfigModel } from \"@storyshelf/core/models\";\nimport { TokenModel } from \"@storyshelf/core/models\";\nimport { WebhookModel } from \"@storyshelf/core/models\";\nimport type { LabelType } from \"@storyshelf/core/schema\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { ProjectGroupMapping } from \"@storyshelf/core/schema\";\nimport type { Token } from \"@storyshelf/core/schema\";\nimport type { AuthUser } from \"@storyshelf/core/types\";\nimport type { SecretInput } from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport {\n  renderProjectSettingsPage,\n  type SettingsFormState,\n  type SettingsTab,\n} from \"../pages/project-settings.tsx\";\nimport type { SettingsMember } from \"../pages/settings-members.tsx\";\nimport type {\n  SettingsMySubscription,\n  SettingsNotificationChannel,\n} from \"../pages/settings-notifications.tsx\";\nimport type { SettingsStatusConfig } from \"../pages/settings-status.tsx\";\nimport type { SettingsWebhook } from \"../pages/settings-webhooks.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { notFound } from \"./helpers.ts\";\n/** Aggregated data for rendering a settings tab. */\nexport interface SettingsData {\n  project: Project;\n  labelTypes: LabelType[];\n  tokens: Omit<Token, \"hash\">[];\n  members: SettingsMember[];\n  groupMappings: ProjectGroupMapping[];\n  webhooks: SettingsWebhook[];\n  notificationChannels: SettingsNotificationChannel[];\n  notifyProviders: string[];\n  mySubscription: SettingsMySubscription | null;\n  statusConfigs: SettingsStatusConfig[];\n  gitHosts: GitHostProvider[];\n  isAdmin: boolean;\n}\n\n/** Tokens without hashes for the settings UI. */\nasync function loadTokenSummaries(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<Omit<Token, \"hash\">[]> {\n  const tokensDb = await new TokenModel(db).list(projectId);\n  return tokensDb.map(({ hash: _hash, ...rest }) => rest);\n}\n\n/** Webhook summaries for the settings UI. */\nasync function loadWebhookSummaries(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<SettingsWebhook[]> {\n  const webhooksDb = await new WebhookModel(db).list(projectId);\n  return webhooksDb.map((webhook) => ({\n    id: webhook.id,\n    url: webhook.url,\n    events: WebhookModel.eventsOf(webhook),\n  }));\n}\n\n/** Status-config summaries for the settings UI. */\nasync function loadStatusConfigSummaries(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  projectId: string,\n): Promise<SettingsStatusConfig[]> {\n  const statusConfigsDb = await new StatusConfigModel(db, undefined, secret).list(projectId);\n  return statusConfigsDb.map((row) => ({\n    id: row.id,\n    provider: row.provider,\n    config: JSON.parse(row.config) as Record<string, unknown>,\n    hasToken: row.tokenEncrypted.length > 0,\n    createdAt: row.createdAt,\n    updatedAt: row.updatedAt,\n  }));\n}\n\n/** True when the user may administer the project. */\nfunction isProjectAdmin(\n  authEnabled: boolean,\n  user: AuthUser | null,\n  members: SettingsMember[],\n): boolean {\n  return (\n    !authEnabled ||\n    user?.role === \"admin\" ||\n    members.some((member) => member.userId === user?.id && member.role === \"admin\")\n  );\n}\n\n/** Label types + member roster for the settings UI. */\nasync function loadProjectRoster(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<{ labelTypes: LabelType[]; members: SettingsMember[] }> {\n  const labelTypes = await new LabelModel(db).listTypes(projectId);\n  const members = await new MemberModel(db).list(projectId);\n  return { labelTypes, members };\n}\n\n/** Label types + member roster + group mappings for the settings UI. */\nasync function loadMembersSection(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<{\n  labelTypes: LabelType[];\n  members: SettingsMember[];\n  groupMappings: ProjectGroupMapping[];\n}> {\n  const { labelTypes, members } = await loadProjectRoster(db, projectId);\n  const groupMappings = await loadGroupMappings(db, projectId);\n  return { labelTypes, members, groupMappings };\n}\n\n/** Group mappings for the members settings tab. */\nasync function loadGroupMappings(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<ProjectGroupMapping[]> {\n  return await new ProjectGroupMappingModel(db).list(projectId);\n}\n\n/** Channel summaries for the settings UI. */\nasync function loadNotificationChannels(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  projectId: string,\n): Promise<SettingsNotificationChannel[]> {\n  const rows = await new NotificationChannelModel(db, undefined, secret).list(projectId);\n  return rows.map((row) => ({\n    id: row.id,\n    provider: row.provider,\n    config: NotificationChannelModel.configOf(row),\n    hasSecret: row.secretEncrypted !== null,\n    events: NotificationChannelModel.eventsOf(row),\n    enabled: row.enabled,\n  }));\n}\n\n/** The viewer's own subscription for the settings UI (null when opted out). */\nasync function loadMySubscription(\n  db: DatabaseAdapter,\n  projectId: string,\n  userId: string | undefined,\n): Promise<SettingsMySubscription | null> {\n  if (!userId) {\n    return null;\n  }\n  const row = await new NotificationSubscriptionModel(db).getFor(projectId, userId);\n  if (!row) {\n    return null;\n  }\n  return {\n    events: NotificationSubscriptionModel.eventsOf(row),\n    via: NotificationSubscriptionModel.viaOf(row),\n    enabled: row.enabled,\n  };\n}\n\n/** Notification channels, providers, and my subscription for the UI. */\nasync function loadNotificationSection(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  projectId: string,\n  userId: string | undefined,\n  notifiers: { metadata: { kind: string } }[],\n): Promise<{\n  notificationChannels: SettingsNotificationChannel[];\n  notifyProviders: string[];\n  mySubscription: SettingsMySubscription | null;\n}> {\n  const notificationChannels = await loadNotificationChannels(db, secret, projectId);\n  const mySubscription = await loadMySubscription(db, projectId, userId);\n  return {\n    notificationChannels,\n    notifyProviders: notifiers.map((candidate) => candidate.metadata.kind),\n    mySubscription,\n  };\n}\n\n/** Roster, tokens, webhooks, and status configs for the settings UI. */\nasync function loadInventorySection(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  projectId: string,\n): Promise<{\n  labelTypes: LabelType[];\n  members: SettingsMember[];\n  groupMappings: ProjectGroupMapping[];\n  tokens: Omit<Token, \"hash\">[];\n  webhooks: SettingsWebhook[];\n  statusConfigs: SettingsStatusConfig[];\n}> {\n  const { labelTypes, members, groupMappings } = await loadMembersSection(db, projectId);\n  const tokens = await loadTokenSummaries(db, projectId);\n  const webhooks = await loadWebhookSummaries(db, projectId);\n  const statusConfigs = await loadStatusConfigSummaries(db, secret, projectId);\n  return { labelTypes, members, groupMappings, tokens, webhooks, statusConfigs };\n}\n\nasync function loadSettingsData(slug: string): Promise<SettingsData | null> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    return null;\n  }\n  const { db, config, user, authEnabled, gitHosts, notifiers } = getStore();\n  const inventory = await loadInventorySection(db, credentialKeys(config), project.id);\n  const notifications = await loadNotificationSection(\n    db,\n    credentialKeys(config),\n    project.id,\n    user?.id,\n    notifiers,\n  );\n  const isAdmin = isProjectAdmin(authEnabled, user, inventory.members);\n  return { project, ...inventory, ...notifications, gitHosts, isAdmin };\n}\n\n/** Render the project settings page for the given tab, optionally with form state. */\nexport async function renderSettingsPage(\n  c: Context,\n  tab: SettingsTab,\n  formState?: SettingsFormState,\n): Promise<string> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const data = await loadSettingsData(slug);\n  if (!data) {\n    notFound(\"Project not found\");\n  }\n  return await renderProjectSettingsPage(\n    {\n      project: data.project,\n      activeTab: tab,\n      labelTypes: data.labelTypes,\n      tokens: data.tokens,\n      members: data.members,\n      groupMappings: data.groupMappings,\n      webhooks: data.webhooks,\n      notificationChannels: data.notificationChannels,\n      notifyProviders: data.notifyProviders,\n      mySubscription: data.mySubscription,\n      statusConfigs: data.statusConfigs,\n      gitHosts: data.gitHosts,\n      isAdmin: data.isAdmin,\n    },\n    formState,\n  );\n}\n\n/** Find a project by slug or throw 404. */\nexport async function findProject(slug: string): Promise<Project> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    notFound(\"Project not found\");\n  }\n  return project;\n}\n\n/** Trim a form value to a string, dropping files and blanks. */\nexport function asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value.trim() : undefined;\n}\n"],"mappings":";;;;;;;;;;AAkDA,eAAe,mBACb,IACA,WACgC;CAEhC,QAAO,MADgB,IAAI,WAAW,EAAE,CAAC,CAAC,KAAK,SAAS,EAAA,CACxC,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI;AACxD;;AAGA,eAAe,qBACb,IACA,WAC4B;CAE5B,QAAO,MADkB,IAAI,aAAa,EAAE,CAAC,CAAC,KAAK,SAAS,EAAA,CAC1C,KAAK,aAAa;EAClC,IAAI,QAAQ;EACZ,KAAK,QAAQ;EACb,QAAQ,aAAa,SAAS,OAAO;CACvC,EAAE;AACJ;;AAGA,eAAe,0BACb,IACA,QACA,WACiC;CAEjC,QAAO,MADuB,IAAI,kBAAkB,IAAI,KAAA,GAAW,MAAM,CAAC,CAAC,KAAK,SAAS,EAAA,CAClE,KAAK,SAAS;EACnC,IAAI,IAAI;EACR,UAAU,IAAI;EACd,QAAQ,KAAK,MAAM,IAAI,MAAM;EAC7B,UAAU,IAAI,eAAe,SAAS;EACtC,WAAW,IAAI;EACf,WAAW,IAAI;CACjB,EAAE;AACJ;;AAGA,SAAS,eACP,aACA,MACA,SACS;CACT,OACE,CAAC,eACD,MAAM,SAAS,WACf,QAAQ,MAAM,WAAW,OAAO,WAAW,MAAM,MAAM,OAAO,SAAS,OAAO;AAElF;;AAGA,eAAe,kBACb,IACA,WACiE;CAGjE,OAAO;EAAE,YAAA,MAFgB,IAAI,WAAW,EAAE,CAAC,CAAC,UAAU,SAAS;EAE1C,SAAA,MADC,IAAI,YAAY,EAAE,CAAC,CAAC,KAAK,SAAS;CAC3B;AAC/B;;AAGA,eAAe,mBACb,IACA,WAKC;CACD,MAAM,EAAE,YAAY,YAAY,MAAM,kBAAkB,IAAI,SAAS;CAErE,OAAO;EAAE;EAAY;EAAS,eAAA,MADF,kBAAkB,IAAI,SAAS;CACf;AAC9C;;AAGA,eAAe,kBACb,IACA,WACgC;CAChC,OAAO,MAAM,IAAI,yBAAyB,EAAE,CAAC,CAAC,KAAK,SAAS;AAC9D;;AAGA,eAAe,yBACb,IACA,QACA,WACwC;CAExC,QAAO,MADY,IAAI,yBAAyB,IAAI,KAAA,GAAW,MAAM,CAAC,CAAC,KAAK,SAAS,EAAA,CACzE,KAAK,SAAS;EACxB,IAAI,IAAI;EACR,UAAU,IAAI;EACd,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,WAAW,IAAI,oBAAoB;EACnC,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,SAAS,IAAI;CACf,EAAE;AACJ;;AAGA,eAAe,mBACb,IACA,WACA,QACwC;CACxC,IAAI,CAAC,QACH,OAAO;CAET,MAAM,MAAM,MAAM,IAAI,8BAA8B,EAAE,CAAC,CAAC,OAAO,WAAW,MAAM;CAChF,IAAI,CAAC,KACH,OAAO;CAET,OAAO;EACL,QAAQ,8BAA8B,SAAS,GAAG;EAClD,KAAK,8BAA8B,MAAM,GAAG;EAC5C,SAAS,IAAI;CACf;AACF;;AAGA,eAAe,wBACb,IACA,QACA,WACA,QACA,WAKC;CACD,MAAM,uBAAuB,MAAM,yBAAyB,IAAI,QAAQ,SAAS;CACjF,MAAM,iBAAiB,MAAM,mBAAmB,IAAI,WAAW,MAAM;CACrE,OAAO;EACL;EACA,iBAAiB,UAAU,KAAK,cAAc,UAAU,SAAS,IAAI;EACrE;CACF;AACF;;AAGA,eAAe,qBACb,IACA,QACA,WAQC;CACD,MAAM,EAAE,YAAY,SAAS,kBAAkB,MAAM,mBAAmB,IAAI,SAAS;CAIrF,OAAO;EAAE;EAAY;EAAS;EAAe,QAAA,MAHxB,mBAAmB,IAAI,SAAS;EAGA,UAAA,MAF9B,qBAAqB,IAAI,SAAS;EAEM,eAAA,MADnC,0BAA0B,IAAI,QAAQ,SAAS;CACE;AAC/E;AAEA,eAAe,iBAAiB,MAA4C;CAC1E,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,OAAO;CAET,MAAM,EAAE,IAAI,QAAQ,MAAM,aAAa,UAAU,cAAc,SAAS;CACxE,MAAM,YAAY,MAAM,qBAAqB,IAAI,eAAe,MAAM,GAAG,QAAQ,EAAE;CACnF,MAAM,gBAAgB,MAAM,wBAC1B,IACA,eAAe,MAAM,GACrB,QAAQ,IACR,MAAM,IACN,SACF;CACA,MAAM,UAAU,eAAe,aAAa,MAAM,UAAU,OAAO;CACnE,OAAO;EAAE;EAAS,GAAG;EAAW,GAAG;EAAe;EAAU;CAAQ;AACtE;;AAGA,eAAsB,mBACpB,GACA,KACA,WACiB;CAEjB,MAAM,OAAO,MAAM,iBADN,EAAE,IAAI,MAAM,MAAM,KAAK,EACI;CACxC,IAAI,CAAC,MACH,SAAS,mBAAmB;CAE9B,OAAO,MAAM,0BACX;EACE,SAAS,KAAK;EACd,WAAW;EACX,YAAY,KAAK;EACjB,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,eAAe,KAAK;EACpB,UAAU,KAAK;EACf,sBAAsB,KAAK;EAC3B,iBAAiB,KAAK;EACtB,gBAAgB,KAAK;EACrB,eAAe,KAAK;EACpB,UAAU,KAAK;EACf,SAAS,KAAK;CAChB,GACA,SACF;AACF;;AAGA,eAAsB,YAAY,MAAgC;CAChE,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;CAE9B,OAAO;AACT;;AAGA,SAAgB,SAAS,OAAsD;CAC7E,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,KAAA;AACpD"}
+{"version":3,"file":"settings.handlers.mjs","names":[],"sources":["../../src/routers/settings.handlers.ts"],"sourcesContent":["import type { DatabaseAdapter } from \"@storyshelf/core/adapter/database\";\nimport type { DesignProvider } from \"@storyshelf/core/adapter/design\";\nimport type { NotifierProvider } from \"@storyshelf/core/adapter/notifier\";\nimport {\n  credentialDaysLeft,\n  DesignCredentialModel,\n  DesignModel,\n  LabelModel,\n} from \"@storyshelf/core/models\";\nimport { PackageUsageModel } from \"@storyshelf/core/models\";\nimport { MemberModel } from \"@storyshelf/core/models\";\nimport { NotificationChannelModel } from \"@storyshelf/core/models\";\nimport { NotificationSubscriptionModel } from \"@storyshelf/core/models\";\nimport { ProjectGroupMappingModel } from \"@storyshelf/core/models\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport { TokenModel } from \"@storyshelf/core/models\";\nimport { WebhookModel } from \"@storyshelf/core/models\";\nimport type { LabelType } from \"@storyshelf/core/schema\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { ProjectGroupMapping } from \"@storyshelf/core/schema\";\nimport type { Token } from \"@storyshelf/core/schema\";\nimport type { AuthUser } from \"@storyshelf/core/types\";\nimport type { SecretInput } from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { notificationsPaused } from \"../notifications-pause.ts\";\nimport {\n  renderProjectSettingsPage,\n  type SettingsFormState,\n  type SettingsTab,\n} from \"../pages/project-settings.tsx\";\nimport type { SettingsAiData } from \"../pages/settings-ai.tsx\";\nimport type { DesignCredentialState } from \"../pages/settings-design-credential.tsx\";\nimport type { SettingsDesignData, SettingsDesignProvider } from \"../pages/settings-design.tsx\";\nimport type { SettingsLink, SettingsLinkCandidate } from \"../pages/settings-links.tsx\";\nimport type { SettingsMember } from \"../pages/settings-members.tsx\";\nimport type {\n  SettingsMySubscription,\n  SettingsNotificationChannel,\n  SettingsNotifyProvider,\n} from \"../pages/settings-notifications.tsx\";\nimport type { SettingsWebhook } from \"../pages/settings-webhooks.tsx\";\nimport { getStore } from \"../store.ts\";\nimport { runnerTargets } from \"../targets.ts\";\nimport { notFound } from \"./helpers.ts\";\nimport { isSiteAdmin } from \"./insights.handlers.ts\";\n/** Aggregated data for rendering a settings tab. */\nexport interface SettingsData {\n  project: Project;\n  links: SettingsLink[];\n  linkCandidates: SettingsLinkCandidate[];\n  design: SettingsDesignData;\n  labelTypes: LabelType[];\n  tokens: Omit<Token, \"hash\">[];\n  members: SettingsMember[];\n  groupMappings: ProjectGroupMapping[];\n  webhooks: SettingsWebhook[];\n  notificationChannels: SettingsNotificationChannel[];\n  notifyProviders: SettingsNotifyProvider[];\n  mySubscription: SettingsMySubscription | null;\n  isAdmin: boolean;\n}\n\n/** Tokens without hashes for the settings UI. */\nasync function loadTokenSummaries(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<Omit<Token, \"hash\">[]> {\n  const tokensDb = await new TokenModel(db).list(projectId);\n  return tokensDb.map(({ hash: _hash, ...rest }) => rest);\n}\n\n/** Webhook summaries for the settings UI. */\nasync function loadWebhookSummaries(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<SettingsWebhook[]> {\n  const webhooksDb = await new WebhookModel(db).list(projectId);\n  return webhooksDb.map((webhook) => ({\n    id: webhook.id,\n    url: webhook.url,\n    events: WebhookModel.eventsOf(webhook),\n  }));\n}\n\n/** True when the user may administer the project. */\nfunction isProjectAdmin(\n  authEnabled: boolean,\n  user: AuthUser | null,\n  members: SettingsMember[],\n): boolean {\n  return (\n    !authEnabled ||\n    user?.role === \"admin\" ||\n    members.some((member) => member.userId === user?.id && member.role === \"admin\")\n  );\n}\n\n/** Label types + member roster for the settings UI. */\nasync function loadProjectRoster(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<{ labelTypes: LabelType[]; members: SettingsMember[] }> {\n  const labelTypes = await new LabelModel(db).listTypes(projectId);\n  const members = await new MemberModel(db).list(projectId);\n  return { labelTypes, members };\n}\n\n/** Label types + member roster + group mappings for the settings UI. */\nasync function loadMembersSection(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<{\n  labelTypes: LabelType[];\n  members: SettingsMember[];\n  groupMappings: ProjectGroupMapping[];\n}> {\n  const { labelTypes, members } = await loadProjectRoster(db, projectId);\n  const groupMappings = await loadGroupMappings(db, projectId);\n  return { labelTypes, members, groupMappings };\n}\n\n/** Group mappings for the members settings tab. */\nasync function loadGroupMappings(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<ProjectGroupMapping[]> {\n  return await new ProjectGroupMappingModel(db).list(projectId);\n}\n\n/** Delivery kind of a stored channel's provider (unwired providers read as messages). */\nfunction deliveryOf(\n  notifiers: readonly NotifierProvider[],\n  provider: string,\n): SettingsNotificationChannel[\"delivery\"] {\n  return NotificationChannelModel.isStateKind(notifiers, provider) ? \"state\" : \"message\";\n}\n\n/** Channel summaries for the settings UI. */\nasync function loadNotificationChannels(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  projectId: string,\n  notifiers: readonly NotifierProvider[],\n): Promise<SettingsNotificationChannel[]> {\n  const rows = await new NotificationChannelModel(db, undefined, secret).list(projectId);\n  return rows.map((row) => ({\n    id: row.id,\n    provider: row.provider,\n    delivery: deliveryOf(notifiers, row.provider),\n    config: NotificationChannelModel.configOf(row),\n    hasSecret: row.secretEncrypted !== null,\n    events: NotificationChannelModel.eventsOf(row),\n    enabled: row.enabled,\n    lastError: row.lastError,\n    lastErrorAt: row.lastErrorAt,\n  }));\n}\n\n/** The viewer's own subscription for the settings UI (null when opted out). */\nasync function loadMySubscription(\n  db: DatabaseAdapter,\n  projectId: string,\n  userId: string | undefined,\n): Promise<SettingsMySubscription | null> {\n  if (!userId) {\n    return null;\n  }\n  const row = await new NotificationSubscriptionModel(db).getFor(projectId, userId);\n  if (!row) {\n    return null;\n  }\n  return {\n    events: NotificationSubscriptionModel.eventsOf(row),\n    via: NotificationSubscriptionModel.viaOf(row),\n    enabled: row.enabled,\n  };\n}\n\n/** Notification channels, providers, and my subscription for the UI. */\nasync function loadNotificationSection(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  projectId: string,\n  userId: string | undefined,\n  notifiers: readonly NotifierProvider[],\n): Promise<{\n  notificationChannels: SettingsNotificationChannel[];\n  notifyProviders: SettingsNotifyProvider[];\n  mySubscription: SettingsMySubscription | null;\n}> {\n  const notificationChannels = await loadNotificationChannels(db, secret, projectId, notifiers);\n  const mySubscription = await loadMySubscription(db, projectId, userId);\n  const notifyProviders = notifiers.map((candidate) => ({\n    kind: candidate.metadata.kind,\n    name: candidate.metadata.name,\n    delivery: deliveryOf(notifiers, candidate.metadata.kind),\n  }));\n  return { notificationChannels, notifyProviders, mySubscription };\n}\n\n/** Roster, tokens and webhooks for the settings UI. */\nasync function loadInventorySection(\n  db: DatabaseAdapter,\n  projectId: string,\n): Promise<{\n  labelTypes: LabelType[];\n  members: SettingsMember[];\n  groupMappings: ProjectGroupMapping[];\n  tokens: Omit<Token, \"hash\">[];\n  webhooks: SettingsWebhook[];\n}> {\n  const { labelTypes, members, groupMappings } = await loadMembersSection(db, projectId);\n  const tokens = await loadTokenSummaries(db, projectId);\n  const webhooks = await loadWebhookSummaries(db, projectId);\n  return { labelTypes, members, groupMappings, tokens, webhooks };\n}\n\n/** Package links plus the other projects that can be picked as upstream. */\nasync function loadLinksSection(\n  db: DatabaseAdapter,\n  project: Project,\n): Promise<{ links: SettingsLink[]; linkCandidates: SettingsLinkCandidate[] }> {\n  const projects = await new ProjectModel(db).list();\n  const byId = new Map(projects.map((candidate) => [candidate.id, candidate]));\n  const rows = await new PackageUsageModel(db).listLinks(project.id);\n  const links = rows.flatMap((row) => {\n    const upstream = byId.get(row.upstreamId);\n    return upstream\n      ? [{ packageName: row.packageName, upstreamSlug: upstream.slug, upstreamName: upstream.name }]\n      : [];\n  });\n  const linkCandidates = projects\n    .filter((candidate) => candidate.id !== project.id)\n    .map((candidate) => ({ slug: candidate.slug, name: candidate.name }));\n  return { links, linkCandidates };\n}\n\n/** Design files, component mappings and per-provider credential health for the Design tab (never a token). */\nasync function loadDesignSection(\n  db: DatabaseAdapter,\n  secret: SecretInput,\n  providers: DesignProvider[],\n  projectId: string,\n): Promise<SettingsDesignData> {\n  const model = new DesignModel(db, providers);\n  const files = (await model.projectLinks(projectId)).map((link) => ({\n    id: link.id,\n    label: link.label ?? \"Design file\",\n    url: link.url,\n  }));\n  const components = (await model.componentLinks(projectId)).map((link) => ({\n    id: link.id,\n    importPath: link.importPath ?? \"\",\n    url: link.url,\n  }));\n  const credentials = new DesignCredentialModel(db, secret);\n  const rows = await Promise.all(\n    providers.map(async (provider) => await providerSettings(credentials, provider, projectId)),\n  );\n  return { files, components, providers: rows };\n}\n\nasync function providerSettings(\n  credentials: DesignCredentialModel,\n  provider: DesignProvider,\n  projectId: string,\n): Promise<SettingsDesignProvider> {\n  const { metadata } = provider;\n  const maxAgeDays = metadata.credentialMaxAgeDays;\n  const row = await credentials.info(projectId, metadata.kind);\n  return {\n    kind: metadata.kind,\n    name: metadata.name,\n    credentialLabel: metadata.credentialLabel,\n    credentialHelp: metadata.credentialHelp,\n    ...(metadata.credentialPlaceholder\n      ? { credentialPlaceholder: metadata.credentialPlaceholder }\n      : {}),\n    urlHint: metadata.urlHint,\n    ...(maxAgeDays === undefined ? {} : { maxAgeDays }),\n    credential: row\n      ? {\n          status: credentialState(row.status),\n          daysLeft: maxAgeDays === undefined ? null : credentialDaysLeft(row.createdAt, maxAgeDays),\n          checkedAt: row.checkedAt,\n        }\n      : null,\n  };\n}\n\n/** The stored status column as a known state (anything unrecognized reads as unknown). */\nfunction credentialState(status: string): DesignCredentialState {\n  return status === \"ok\" || status === \"unauthorized\" || status === \"forbidden\"\n    ? status\n    : \"unknown\";\n}\n\nasync function loadSettingsData(slug: string): Promise<SettingsData | null> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    return null;\n  }\n  const { db, config, user, authEnabled, design: designProviders, notifiers } = getStore();\n  const inventory = await loadInventorySection(db, project.id);\n  const notifications = await loadNotificationSection(\n    db,\n    credentialKeys(config),\n    project.id,\n    user?.id,\n    notifiers,\n  );\n  const isAdmin = isProjectAdmin(authEnabled, user, inventory.members);\n  const linksSection = await loadLinksSection(db, project);\n  const design = await loadDesignSection(db, credentialKeys(config), designProviders, project.id);\n  return { project, ...inventory, ...notifications, ...linksSection, design, isAdmin };\n}\n\n/** Render the project settings page for the given tab, optionally with form state. */\nexport async function renderSettingsPage(\n  c: Context,\n  tab: SettingsTab,\n  formState?: SettingsFormState,\n): Promise<string> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const data = await loadSettingsData(slug);\n  if (!data) {\n    notFound(\"Project not found\");\n  }\n  return await renderProjectSettingsPage(\n    {\n      project: data.project,\n      activeTab: tab,\n      labelTypes: data.labelTypes,\n      links: data.links,\n      linkCandidates: data.linkCandidates,\n      design: data.design,\n      tokens: data.tokens,\n      members: data.members,\n      groupMappings: data.groupMappings,\n      webhooks: data.webhooks,\n      notificationChannels: data.notificationChannels,\n      notifyProviders: data.notifyProviders,\n      mySubscription: data.mySubscription,\n      isAdmin: data.isAdmin,\n      notificationsPaused: data.notifyProviders.length > 0 && (await notificationsPaused()),\n      ai: aiSettingsData(c),\n      targets: await runnerTargets(),\n    },\n    formState,\n  );\n}\n\n/** AI availability and profile choices for the settings AI tab. */\nfunction aiSettingsData(c: Context): SettingsAiData {\n  const { ai } = getStore();\n  return {\n    available: ai !== undefined,\n    profiles: ai?.profileNames() ?? [],\n    defaultProfile: ai?.defaultProfile() ?? \"\",\n    isSiteAdmin: isSiteAdmin(c),\n  };\n}\n\n/** Find a project by slug or throw 404. */\nexport async function findProject(slug: string): Promise<Project> {\n  const project = await new ProjectModel(getStore().db).getBySlug(slug);\n  if (!project) {\n    notFound(\"Project not found\");\n  }\n  return project;\n}\n\n/** Trim a form value to a string, dropping files and blanks. */\nexport function asString(value: FormDataEntryValue | null): string | undefined {\n  return typeof value === \"string\" ? value.trim() : undefined;\n}\n"],"mappings":";;;;;;;;;;;;;AAgEA,eAAe,mBACb,IACA,WACgC;CAEhC,QAAO,MADgB,IAAI,WAAW,EAAE,CAAC,CAAC,KAAK,SAAS,EAAA,CACxC,KAAK,EAAE,MAAM,OAAO,GAAG,WAAW,IAAI;AACxD;;AAGA,eAAe,qBACb,IACA,WAC4B;CAE5B,QAAO,MADkB,IAAI,aAAa,EAAE,CAAC,CAAC,KAAK,SAAS,EAAA,CAC1C,KAAK,aAAa;EAClC,IAAI,QAAQ;EACZ,KAAK,QAAQ;EACb,QAAQ,aAAa,SAAS,OAAO;CACvC,EAAE;AACJ;;AAGA,SAAS,eACP,aACA,MACA,SACS;CACT,OACE,CAAC,eACD,MAAM,SAAS,WACf,QAAQ,MAAM,WAAW,OAAO,WAAW,MAAM,MAAM,OAAO,SAAS,OAAO;AAElF;;AAGA,eAAe,kBACb,IACA,WACiE;CAGjE,OAAO;EAAE,YAAA,MAFgB,IAAI,WAAW,EAAE,CAAC,CAAC,UAAU,SAAS;EAE1C,SAAA,MADC,IAAI,YAAY,EAAE,CAAC,CAAC,KAAK,SAAS;CAC3B;AAC/B;;AAGA,eAAe,mBACb,IACA,WAKC;CACD,MAAM,EAAE,YAAY,YAAY,MAAM,kBAAkB,IAAI,SAAS;CAErE,OAAO;EAAE;EAAY;EAAS,eAAA,MADF,kBAAkB,IAAI,SAAS;CACf;AAC9C;;AAGA,eAAe,kBACb,IACA,WACgC;CAChC,OAAO,MAAM,IAAI,yBAAyB,EAAE,CAAC,CAAC,KAAK,SAAS;AAC9D;;AAGA,SAAS,WACP,WACA,UACyC;CACzC,OAAO,yBAAyB,YAAY,WAAW,QAAQ,IAAI,UAAU;AAC/E;;AAGA,eAAe,yBACb,IACA,QACA,WACA,WACwC;CAExC,QAAO,MADY,IAAI,yBAAyB,IAAI,KAAA,GAAW,MAAM,CAAC,CAAC,KAAK,SAAS,EAAA,CACzE,KAAK,SAAS;EACxB,IAAI,IAAI;EACR,UAAU,IAAI;EACd,UAAU,WAAW,WAAW,IAAI,QAAQ;EAC5C,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,WAAW,IAAI,oBAAoB;EACnC,QAAQ,yBAAyB,SAAS,GAAG;EAC7C,SAAS,IAAI;EACb,WAAW,IAAI;EACf,aAAa,IAAI;CACnB,EAAE;AACJ;;AAGA,eAAe,mBACb,IACA,WACA,QACwC;CACxC,IAAI,CAAC,QACH,OAAO;CAET,MAAM,MAAM,MAAM,IAAI,8BAA8B,EAAE,CAAC,CAAC,OAAO,WAAW,MAAM;CAChF,IAAI,CAAC,KACH,OAAO;CAET,OAAO;EACL,QAAQ,8BAA8B,SAAS,GAAG;EAClD,KAAK,8BAA8B,MAAM,GAAG;EAC5C,SAAS,IAAI;CACf;AACF;;AAGA,eAAe,wBACb,IACA,QACA,WACA,QACA,WAKC;CACD,MAAM,uBAAuB,MAAM,yBAAyB,IAAI,QAAQ,WAAW,SAAS;CAC5F,MAAM,iBAAiB,MAAM,mBAAmB,IAAI,WAAW,MAAM;CAMrE,OAAO;EAAE;EAAsB,iBALP,UAAU,KAAK,eAAe;GACpD,MAAM,UAAU,SAAS;GACzB,MAAM,UAAU,SAAS;GACzB,UAAU,WAAW,WAAW,UAAU,SAAS,IAAI;EACzD,EAC6C;EAAG;CAAe;AACjE;;AAGA,eAAe,qBACb,IACA,WAOC;CACD,MAAM,EAAE,YAAY,SAAS,kBAAkB,MAAM,mBAAmB,IAAI,SAAS;CAGrF,OAAO;EAAE;EAAY;EAAS;EAAe,QAAA,MAFxB,mBAAmB,IAAI,SAAS;EAEA,UAAA,MAD9B,qBAAqB,IAAI,SAAS;CACK;AAChE;;AAGA,eAAe,iBACb,IACA,SAC6E;CAC7E,MAAM,WAAW,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,KAAK;CACjD,MAAM,OAAO,IAAI,IAAI,SAAS,KAAK,cAAc,CAAC,UAAU,IAAI,SAAS,CAAC,CAAC;CAW3E,OAAO;EAAE,QATK,MADK,IAAI,kBAAkB,EAAE,CAAC,CAAC,UAAU,QAAQ,EAAE,EAAA,CAC9C,SAAS,QAAQ;GAClC,MAAM,WAAW,KAAK,IAAI,IAAI,UAAU;GACxC,OAAO,WACH,CAAC;IAAE,aAAa,IAAI;IAAa,cAAc,SAAS;IAAM,cAAc,SAAS;GAAK,CAAC,IAC3F,CAAC;EACP,CAIa;EAAG,gBAHO,SACpB,QAAQ,cAAc,UAAU,OAAO,QAAQ,EAAE,CAAC,CAClD,KAAK,eAAe;GAAE,MAAM,UAAU;GAAM,MAAM,UAAU;EAAK,EACvC;CAAE;AACjC;;AAGA,eAAe,kBACb,IACA,QACA,WACA,WAC6B;CAC7B,MAAM,QAAQ,IAAI,YAAY,IAAI,SAAS;CAC3C,MAAM,SAAS,MAAM,MAAM,aAAa,SAAS,EAAA,CAAG,KAAK,UAAU;EACjE,IAAI,KAAK;EACT,OAAO,KAAK,SAAS;EACrB,KAAK,KAAK;CACZ,EAAE;CACF,MAAM,cAAc,MAAM,MAAM,eAAe,SAAS,EAAA,CAAG,KAAK,UAAU;EACxE,IAAI,KAAK;EACT,YAAY,KAAK,cAAc;EAC/B,KAAK,KAAK;CACZ,EAAE;CACF,MAAM,cAAc,IAAI,sBAAsB,IAAI,MAAM;CAIxD,OAAO;EAAE;EAAO;EAAY,WAAW,MAHpB,QAAQ,IACzB,UAAU,IAAI,OAAO,aAAa,MAAM,iBAAiB,aAAa,UAAU,SAAS,CAAC,CAC5F;CAC4C;AAC9C;AAEA,eAAe,iBACb,aACA,UACA,WACiC;CACjC,MAAM,EAAE,aAAa;CACrB,MAAM,aAAa,SAAS;CAC5B,MAAM,MAAM,MAAM,YAAY,KAAK,WAAW,SAAS,IAAI;CAC3D,OAAO;EACL,MAAM,SAAS;EACf,MAAM,SAAS;EACf,iBAAiB,SAAS;EAC1B,gBAAgB,SAAS;EACzB,GAAI,SAAS,wBACT,EAAE,uBAAuB,SAAS,sBAAsB,IACxD,CAAC;EACL,SAAS,SAAS;EAClB,GAAI,eAAe,KAAA,IAAY,CAAC,IAAI,EAAE,WAAW;EACjD,YAAY,MACR;GACE,QAAQ,gBAAgB,IAAI,MAAM;GAClC,UAAU,eAAe,KAAA,IAAY,OAAO,mBAAmB,IAAI,WAAW,UAAU;GACxF,WAAW,IAAI;EACjB,IACA;CACN;AACF;;AAGA,SAAS,gBAAgB,QAAuC;CAC9D,OAAO,WAAW,QAAQ,WAAW,kBAAkB,WAAW,cAC9D,SACA;AACN;AAEA,eAAe,iBAAiB,MAA4C;CAC1E,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,OAAO;CAET,MAAM,EAAE,IAAI,QAAQ,MAAM,aAAa,QAAQ,iBAAiB,cAAc,SAAS;CACvF,MAAM,YAAY,MAAM,qBAAqB,IAAI,QAAQ,EAAE;CAC3D,MAAM,gBAAgB,MAAM,wBAC1B,IACA,eAAe,MAAM,GACrB,QAAQ,IACR,MAAM,IACN,SACF;CACA,MAAM,UAAU,eAAe,aAAa,MAAM,UAAU,OAAO;CACnE,MAAM,eAAe,MAAM,iBAAiB,IAAI,OAAO;CACvD,MAAM,SAAS,MAAM,kBAAkB,IAAI,eAAe,MAAM,GAAG,iBAAiB,QAAQ,EAAE;CAC9F,OAAO;EAAE;EAAS,GAAG;EAAW,GAAG;EAAe,GAAG;EAAc;EAAQ;CAAQ;AACrF;;AAGA,eAAsB,mBACpB,GACA,KACA,WACiB;CAEjB,MAAM,OAAO,MAAM,iBADN,EAAE,IAAI,MAAM,MAAM,KAAK,EACI;CACxC,IAAI,CAAC,MACH,SAAS,mBAAmB;CAE9B,OAAO,MAAM,0BACX;EACE,SAAS,KAAK;EACd,WAAW;EACX,YAAY,KAAK;EACjB,OAAO,KAAK;EACZ,gBAAgB,KAAK;EACrB,QAAQ,KAAK;EACb,QAAQ,KAAK;EACb,SAAS,KAAK;EACd,eAAe,KAAK;EACpB,UAAU,KAAK;EACf,sBAAsB,KAAK;EAC3B,iBAAiB,KAAK;EACtB,gBAAgB,KAAK;EACrB,SAAS,KAAK;EACd,qBAAqB,KAAK,gBAAgB,SAAS,KAAM,MAAM,oBAAoB;EACnF,IAAI,eAAe,CAAC;EACpB,SAAS,MAAM,cAAc;CAC/B,GACA,SACF;AACF;;AAGA,SAAS,eAAe,GAA4B;CAClD,MAAM,EAAE,OAAO,SAAS;CACxB,OAAO;EACL,WAAW,OAAO,KAAA;EAClB,UAAU,IAAI,aAAa,KAAK,CAAC;EACjC,gBAAgB,IAAI,eAAe,KAAK;EACxC,aAAa,YAAY,CAAC;CAC5B;AACF;;AAGA,eAAsB,YAAY,MAAgC;CAChE,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,UAAU,IAAI;CACpE,IAAI,CAAC,SACH,SAAS,mBAAmB;CAE9B,OAAO;AACT;;AAGA,SAAgB,SAAS,OAAsD;CAC7E,OAAO,OAAO,UAAU,WAAW,MAAM,KAAK,IAAI,KAAA;AACpD"}

package/dist/routers/settings.mjs

@@ -1,23 +1,35 @@
 import "node:path";
 import "node:url";
 import.meta.url;
+import { registerAiSettings } from "./settings-ai.mjs";
+import { registerCaptureSettings } from "./settings-capture.mjs";
+import { registerDesignSettings } from "./settings-design.mjs";
 import { registerGeneralSettings } from "./settings-general.mjs";
 import { registerLabelSettings } from "./settings-labels.mjs";
+import { registerLinkSettings } from "./settings-links.mjs";
 import { registerMemberSettings } from "./settings-members.mjs";
 import { registerNotificationSettings } from "./settings-notifications.mjs";
-import { registerStatusSettings } from "./settings-status.mjs";
 import { registerTokenSettings } from "./settings-tokens.mjs";
 import { registerWebhookSettings } from "./settings-webhooks.mjs";
 //#region src/routers/settings.ts
 /** Register the server-rendered project settings pages and their form handlers. */
 function registerSettingsPages(app) {
-	registerGeneralSettings(app);
-	registerLabelSettings(app);
+	registerProjectSettings(app);
+	registerCatalogSettings(app);
 	registerTokenSettings(app);
 	registerWebhookSettings(app);
 	registerNotificationSettings(app);
 	registerMemberSettings(app);
-	registerStatusSettings(app);
+	registerAiSettings(app);
+}
+function registerProjectSettings(app) {
+	registerGeneralSettings(app);
+	registerCaptureSettings(app);
+}
+function registerCatalogSettings(app) {
+	registerLabelSettings(app);
+	registerLinkSettings(app);
+	registerDesignSettings(app);
 }
 //#endregion
 export { registerSettingsPages };

package/dist/routers/settings.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings.mjs","names":[],"sources":["../../src/routers/settings.ts"],"sourcesContent":["import type { ShelfRouter } from \"../app-types.ts\";\nimport { registerGeneralSettings } from \"./settings-general.ts\";\nimport { registerLabelSettings } from \"./settings-labels.ts\";\nimport { registerMemberSettings } from \"./settings-members.ts\";\nimport { registerNotificationSettings } from \"./settings-notifications.ts\";\nimport { registerStatusSettings } from \"./settings-status.ts\";\nimport { registerTokenSettings } from \"./settings-tokens.ts\";\nimport { registerWebhookSettings } from \"./settings-webhooks.ts\";\n\n/** Register the server-rendered project settings pages and their form handlers. */\nexport function registerSettingsPages(app: ShelfRouter): void {\n  registerGeneralSettings(app);\n  registerLabelSettings(app);\n  registerTokenSettings(app);\n  registerWebhookSettings(app);\n  registerNotificationSettings(app);\n  registerMemberSettings(app);\n  registerStatusSettings(app);\n}\n"],"mappings":";;;;;;;;;;;;AAUA,SAAgB,sBAAsB,KAAwB;CAC5D,wBAAwB,GAAG;CAC3B,sBAAsB,GAAG;CACzB,sBAAsB,GAAG;CACzB,wBAAwB,GAAG;CAC3B,6BAA6B,GAAG;CAChC,uBAAuB,GAAG;CAC1B,uBAAuB,GAAG;AAC5B"}
+{"version":3,"file":"settings.mjs","names":[],"sources":["../../src/routers/settings.ts"],"sourcesContent":["import type { ShelfRouter } from \"../app-types.ts\";\nimport { registerAiSettings } from \"./settings-ai.ts\";\nimport { registerCaptureSettings } from \"./settings-capture.ts\";\nimport { registerDesignSettings } from \"./settings-design.ts\";\nimport { registerGeneralSettings } from \"./settings-general.ts\";\nimport { registerLabelSettings } from \"./settings-labels.ts\";\nimport { registerLinkSettings } from \"./settings-links.ts\";\nimport { registerMemberSettings } from \"./settings-members.ts\";\nimport { registerNotificationSettings } from \"./settings-notifications.ts\";\nimport { registerTokenSettings } from \"./settings-tokens.ts\";\nimport { registerWebhookSettings } from \"./settings-webhooks.ts\";\n\n/** Register the server-rendered project settings pages and their form handlers. */\nexport function registerSettingsPages(app: ShelfRouter): void {\n  registerProjectSettings(app);\n  registerCatalogSettings(app);\n  registerTokenSettings(app);\n  registerWebhookSettings(app);\n  registerNotificationSettings(app);\n  registerMemberSettings(app);\n  registerAiSettings(app);\n}\n\nfunction registerProjectSettings(app: ShelfRouter): void {\n  registerGeneralSettings(app);\n  registerCaptureSettings(app);\n}\n\nfunction registerCatalogSettings(app: ShelfRouter): void {\n  registerLabelSettings(app);\n  registerLinkSettings(app);\n  registerDesignSettings(app);\n}\n"],"mappings":";;;;;;;;;;;;;;;AAaA,SAAgB,sBAAsB,KAAwB;CAC5D,wBAAwB,GAAG;CAC3B,wBAAwB,GAAG;CAC3B,sBAAsB,GAAG;CACzB,wBAAwB,GAAG;CAC3B,6BAA6B,GAAG;CAChC,uBAAuB,GAAG;CAC1B,mBAAmB,GAAG;AACxB;AAEA,SAAS,wBAAwB,KAAwB;CACvD,wBAAwB,GAAG;CAC3B,wBAAwB,GAAG;AAC7B;AAEA,SAAS,wBAAwB,KAAwB;CACvD,sBAAsB,GAAG;CACzB,qBAAqB,GAAG;CACxB,uBAAuB,GAAG;AAC5B"}