@storyshelf/app 0.6.2 → 0.8.0

package/dist/routers/scoped-models.mjs

@@ -0,0 +1,21 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { credentialKeys } from "../credential-keys.mjs";
+import { getStore } from "../store.mjs";
+import { NotificationChannelModel, WebhookModel } from "@storyshelf/core/models";
+// src/routers/scoped-models.ts
+/** Models that encrypt secrets at rest, bound to the current request's db and server secret. */
+/** Webhook model for the current request. */
+function webhookModel() {
+	const { db, config } = getStore();
+	return new WebhookModel(db, void 0, credentialKeys(config));
+}
+/** Notification-channel model for the current request. */
+function notificationChannelModel() {
+	const { db, config } = getStore();
+	return new NotificationChannelModel(db, void 0, credentialKeys(config));
+}
+export { notificationChannelModel, webhookModel };
+
+//# sourceMappingURL=scoped-models.mjs.map

package/dist/routers/scoped-models.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"scoped-models.mjs","names":[],"sources":["../../src/routers/scoped-models.ts"],"sourcesContent":["import { NotificationChannelModel, WebhookModel } from \"@storyshelf/core/models\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\n\n/** Models that encrypt secrets at rest, bound to the current request's db and server secret. */\n\n/** Webhook model for the current request. */\nexport function webhookModel(): WebhookModel {\n  const { db, config } = getStore();\n  return new WebhookModel(db, undefined, credentialKeys(config));\n}\n\n/** Notification-channel model for the current request. */\nexport function notificationChannelModel(): NotificationChannelModel {\n  const { db, config } = getStore();\n  return new NotificationChannelModel(db, undefined, credentialKeys(config));\n}\n"],"mappings":";;;;;;;;;AAOA,SAAgB,eAA6B;CAC3C,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,OAAO,IAAI,aAAa,IAAI,KAAA,GAAW,eAAe,MAAM,CAAC;AAC/D;;AAGA,SAAgB,2BAAqD;CACnE,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,OAAO,IAAI,yBAAyB,IAAI,KAAA,GAAW,eAAe,MAAM,CAAC;AAC3E"}

package/dist/routers/settings-ai.mjs

@@ -0,0 +1,34 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { requireSiteAdmin } from "./helpers.mjs";
+import { hxRedirect } from "./htmx.mjs";
+import { flash } from "./flash.mjs";
+import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
+import { ProjectModel } from "@storyshelf/core/models";
+// src/routers/settings-ai.ts
+/** Register the project AI settings tab (site admins set the profile gate). */
+function registerAiSettings(app) {
+	app.get("/projects/:slug/settings/ai", async (c) => c.html(await renderSettingsPage(c, "ai")));
+	app.post("/projects/:slug/settings/ai", handleAiUpdate);
+}
+/** Error text for an unusable choice, or null when it is allowed. */
+function profileError(ai, requested) {
+	if (!ai) return "AI is not configured";
+	return requested !== "" && !ai.profileNames().includes(requested) ? `Unknown profile "${requested}"` : null;
+}
+async function handleAiUpdate(c) {
+	requireSiteAdmin(c);
+	const { ai, db } = getStore();
+	const project = await findProject(c.req.param("slug") ?? "");
+	const requested = asString((await c.req.formData()).get("aiProfile")) ?? "";
+	const error = profileError(ai, requested);
+	if (error) return c.html(await renderSettingsPage(c, "ai", { globalError: error }), 400);
+	await new ProjectModel(db).update(project.id, { aiProfile: requested === "" ? null : requested });
+	flash(c, requested === "" ? "AI turned off for this project" : "AI profile saved");
+	return hxRedirect(c, `/projects/${project.slug}/settings/ai`);
+}
+export { registerAiSettings };
+
+//# sourceMappingURL=settings-ai.mjs.map

package/dist/routers/settings-ai.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-ai.mjs","names":[],"sources":["../../src/routers/settings-ai.ts"],"sourcesContent":["import type { Ai } from \"@storyshelf/core/ai\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { requireSiteAdmin } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n\n/** Register the project AI settings tab (site admins set the profile gate). */\nexport function registerAiSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings/ai\", async (c) => c.html(await renderSettingsPage(c, \"ai\")));\n  app.post(\"/projects/:slug/settings/ai\", handleAiUpdate);\n}\n\n/** Error text for an unusable choice, or null when it is allowed. */\nfunction profileError(ai: Ai | undefined, requested: string): string | null {\n  if (!ai) {\n    return \"AI is not configured\";\n  }\n  return requested !== \"\" && !ai.profileNames().includes(requested)\n    ? `Unknown profile \"${requested}\"`\n    : null;\n}\n\nasync function handleAiUpdate(c: Context): Promise<Response> {\n  requireSiteAdmin(c);\n  const { ai, db } = getStore();\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const requested = asString((await c.req.formData()).get(\"aiProfile\")) ?? \"\";\n  const error = profileError(ai, requested);\n  if (error) {\n    return c.html(await renderSettingsPage(c, \"ai\", { globalError: error }), 400);\n  }\n  await new ProjectModel(db).update(project.id, { aiProfile: requested === \"\" ? null : requested });\n  flash(c, requested === \"\" ? \"AI turned off for this project\" : \"AI profile saved\");\n  return hxRedirect(c, `/projects/${project.slug}/settings/ai`);\n}\n"],"mappings":";;;;;;;;;;;AAWA,SAAgB,mBAAmB,KAAwB;CACzD,IAAI,IAAI,+BAA+B,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,GAAG,IAAI,CAAC,CAAC;CAC7F,IAAI,KAAK,+BAA+B,cAAc;AACxD;;AAGA,SAAS,aAAa,IAAoB,WAAkC;CAC1E,IAAI,CAAC,IACH,OAAO;CAET,OAAO,cAAc,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,SAAS,SAAS,IAC5D,oBAAoB,UAAU,KAC9B;AACN;AAEA,eAAe,eAAe,GAA+B;CAC3D,iBAAiB,CAAC;CAClB,MAAM,EAAE,IAAI,OAAO,SAAS;CAC5B,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,YAAY,UAAU,MAAM,EAAE,IAAI,SAAS,EAAA,CAAG,IAAI,WAAW,CAAC,KAAK;CACzE,MAAM,QAAQ,aAAa,IAAI,SAAS;CACxC,IAAI,OACF,OAAO,EAAE,KAAK,MAAM,mBAAmB,GAAG,MAAM,EAAE,aAAa,MAAM,CAAC,GAAG,GAAG;CAE9E,MAAM,IAAI,aAAa,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,EAAE,WAAW,cAAc,KAAK,OAAO,UAAU,CAAC;CAChG,MAAM,GAAG,cAAc,KAAK,mCAAmC,kBAAkB;CACjF,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,aAAa;AAC9D"}

package/dist/routers/settings-capture.mjs

@@ -0,0 +1,76 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { assertTargetsSelectable } from "../targets.mjs";
+import { hxRedirect } from "./htmx.mjs";
+import { flash } from "./flash.mjs";
+import { toProjectPatch } from "./capture-config.mjs";
+import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
+import { storybookUrlTtlOverrideError } from "@storyshelf/core/utils";
+import { resolveBrowsers } from "@storyshelf/core/capture";
+import { ProjectModel } from "@storyshelf/core/models";
+import { HTTPException } from "hono/http-exception";
+import { isCaptureTarget } from "@storyshelf/core/adapter/capture-runner";
+// src/routers/settings-capture.ts
+/** Capture settings: browsers (primary + extras), the mode allowlist and the signed URL lifetime. */
+function registerCaptureSettings(app) {
+	app.get("/projects/:slug/settings/capture", async (c) => c.html(await renderSettingsPage(c, "capture")));
+	app.post("/projects/:slug/settings/capture", handleCaptureUpdate);
+}
+const EXTRA_PREFIX = "extra_";
+/** Primary target first, then the ticked extras; throws 400 when the form is malformed. */
+function readBrowsers(form) {
+	const primary = asString(form.get("browser")) ?? "chromium";
+	if (!isCaptureTarget(primary)) throw badBrowser(primary);
+	const extras = [...form.entries()].flatMap(([key, value]) => key.startsWith(EXTRA_PREFIX) && value === key.slice(6) ? [key.slice(6)] : []);
+	const bad = extras.find((extra) => !isCaptureTarget(extra));
+	if (bad !== void 0) throw badBrowser(bad);
+	return [.../* @__PURE__ */ new Set([primary, ...extras])];
+}
+function badBrowser(value) {
+	return new HTTPException(400, { message: `Unknown browser "${value}"` });
+}
+/** Mode names, one per line (blank lines and surrounding space ignored). */
+function readAllowlist(form) {
+	const lines = (asString(form.get("modesAllowlist")) ?? "").split("\n").map((line) => line.trim()).filter((line) => line !== "");
+	return lines.length > 0 ? lines : null;
+}
+/** Seconds of the signed Storybook URL lifetime; empty derives it from the stories (null). */
+function readUrlTtl(form) {
+	const raw = asString(form.get("storybookUrlTtlSeconds"));
+	if (!raw) return null;
+	const seconds = Number(raw);
+	const message = storybookUrlTtlOverrideError(seconds);
+	if (message !== void 0) throw new HTTPException(400, { message });
+	return seconds;
+}
+async function reject(c, message) {
+	return c.html(await renderSettingsPage(c, "capture", { globalError: message }) ?? "", 400);
+}
+async function saveCapture(project, form, browsers) {
+	const patch = toProjectPatch({
+		browsers: browsers.length > 1 ? browsers : null,
+		browser: browsers[0],
+		modesAllowlist: readAllowlist(form),
+		storybookUrlTtlSeconds: readUrlTtl(form)
+	});
+	await new ProjectModel(getStore().db).update(project.id, patch);
+}
+async function handleCaptureUpdate(c) {
+	const project = await findProject(c.req.param("slug") ?? "");
+	const form = await c.req.formData();
+	try {
+		const browsers = readBrowsers(form);
+		await assertTargetsSelectable(browsers, resolveBrowsers(project));
+		await saveCapture(project, form, browsers);
+	} catch (error) {
+		if (error instanceof HTTPException) return await reject(c, error.message);
+		throw error;
+	}
+	flash(c, "Capture settings saved");
+	return hxRedirect(c, `/projects/${project.slug}/settings/capture`);
+}
+export { registerCaptureSettings };
+
+//# sourceMappingURL=settings-capture.mjs.map

package/dist/routers/settings-capture.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-capture.mjs","names":[],"sources":["../../src/routers/settings-capture.ts"],"sourcesContent":["import { isCaptureTarget, type CaptureTarget } from \"@storyshelf/core/adapter/capture-runner\";\nimport { resolveBrowsers } from \"@storyshelf/core/capture\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport { storybookUrlTtlOverrideError } from \"@storyshelf/core/utils\";\nimport type { Context } from \"hono\";\nimport { HTTPException } from \"hono/http-exception\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { assertTargetsSelectable } from \"../targets.ts\";\nimport { toProjectPatch } from \"./capture-config.ts\";\nimport { flash } from \"./flash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n\n/** Capture settings: browsers (primary + extras), the mode allowlist and the signed URL lifetime. */\nexport function registerCaptureSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings/capture\", async (c) =>\n    c.html(await renderSettingsPage(c, \"capture\")),\n  );\n  app.post(\"/projects/:slug/settings/capture\", handleCaptureUpdate);\n}\n\nconst EXTRA_PREFIX = \"extra_\";\n\n/** Primary target first, then the ticked extras; throws 400 when the form is malformed. */\nfunction readBrowsers(form: FormData): CaptureTarget[] {\n  const primary = asString(form.get(\"browser\")) ?? \"chromium\";\n  if (!isCaptureTarget(primary)) throw badBrowser(primary);\n  const extras = [...form.entries()].flatMap(([key, value]) =>\n    key.startsWith(EXTRA_PREFIX) && value === key.slice(EXTRA_PREFIX.length)\n      ? [key.slice(EXTRA_PREFIX.length)]\n      : [],\n  );\n  const bad = extras.find((extra) => !isCaptureTarget(extra));\n  if (bad !== undefined) throw badBrowser(bad);\n  return [...new Set([primary, ...(extras as CaptureTarget[])])];\n}\n\nfunction badBrowser(value: string): HTTPException {\n  return new HTTPException(400, { message: `Unknown browser \"${value}\"` });\n}\n\n/** Mode names, one per line (blank lines and surrounding space ignored). */\nfunction readAllowlist(form: FormData): string[] | null {\n  const lines = (asString(form.get(\"modesAllowlist\")) ?? \"\")\n    .split(\"\\n\")\n    .map((line) => line.trim())\n    .filter((line) => line !== \"\");\n  return lines.length > 0 ? lines : null;\n}\n\n/** Seconds of the signed Storybook URL lifetime; empty derives it from the stories (null). */\nfunction readUrlTtl(form: FormData): number | null {\n  const raw = asString(form.get(\"storybookUrlTtlSeconds\"));\n  if (!raw) return null;\n  const seconds = Number(raw);\n  const message = storybookUrlTtlOverrideError(seconds);\n  if (message !== undefined) {\n    throw new HTTPException(400, { message });\n  }\n  return seconds;\n}\n\nasync function reject(c: Context, message: string): Promise<Response> {\n  return c.html((await renderSettingsPage(c, \"capture\", { globalError: message })) ?? \"\", 400);\n}\n\nasync function saveCapture(\n  project: Project,\n  form: FormData,\n  browsers: CaptureTarget[],\n): Promise<void> {\n  const patch = toProjectPatch({\n    browsers: browsers.length > 1 ? browsers : null,\n    browser: browsers[0],\n    modesAllowlist: readAllowlist(form),\n    storybookUrlTtlSeconds: readUrlTtl(form),\n  });\n  await new ProjectModel(getStore().db).update(project.id, patch);\n}\n\nasync function handleCaptureUpdate(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  const form = await c.req.formData();\n  try {\n    const browsers = readBrowsers(form);\n    await assertTargetsSelectable(browsers, resolveBrowsers(project));\n    await saveCapture(project, form, browsers);\n  } catch (error) {\n    if (error instanceof HTTPException) return await reject(c, error.message);\n    throw error;\n  }\n  flash(c, \"Capture settings saved\");\n  return hxRedirect(c, `/projects/${project.slug}/settings/capture`);\n}\n"],"mappings":";;;;;;;;;;;;;;;;AAgBA,SAAgB,wBAAwB,KAAwB;CAC9D,IAAI,IAAI,oCAAoC,OAAO,MACjD,EAAE,KAAK,MAAM,mBAAmB,GAAG,SAAS,CAAC,CAC/C;CACA,IAAI,KAAK,oCAAoC,mBAAmB;AAClE;AAEA,MAAM,eAAe;;AAGrB,SAAS,aAAa,MAAiC;CACrD,MAAM,UAAU,SAAS,KAAK,IAAI,SAAS,CAAC,KAAK;CACjD,IAAI,CAAC,gBAAgB,OAAO,GAAG,MAAM,WAAW,OAAO;CACvD,MAAM,SAAS,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,WAChD,IAAI,WAAW,YAAY,KAAK,UAAU,IAAI,MAAM,CAAmB,IACnE,CAAC,IAAI,MAAM,CAAmB,CAAC,IAC/B,CAAC,CACP;CACA,MAAM,MAAM,OAAO,MAAM,UAAU,CAAC,gBAAgB,KAAK,CAAC;CAC1D,IAAI,QAAQ,KAAA,GAAW,MAAM,WAAW,GAAG;CAC3C,OAAO,CAAC,mBAAG,IAAI,IAAI,CAAC,SAAS,GAAI,MAA0B,CAAC,CAAC;AAC/D;AAEA,SAAS,WAAW,OAA8B;CAChD,OAAO,IAAI,cAAc,KAAK,EAAE,SAAS,oBAAoB,MAAM,GAAG,CAAC;AACzE;;AAGA,SAAS,cAAc,MAAiC;CACtD,MAAM,SAAS,SAAS,KAAK,IAAI,gBAAgB,CAAC,KAAK,GAAA,CACpD,MAAM,IAAI,CAAC,CACX,KAAK,SAAS,KAAK,KAAK,CAAC,CAAC,CAC1B,QAAQ,SAAS,SAAS,EAAE;CAC/B,OAAO,MAAM,SAAS,IAAI,QAAQ;AACpC;;AAGA,SAAS,WAAW,MAA+B;CACjD,MAAM,MAAM,SAAS,KAAK,IAAI,wBAAwB,CAAC;CACvD,IAAI,CAAC,KAAK,OAAO;CACjB,MAAM,UAAU,OAAO,GAAG;CAC1B,MAAM,UAAU,6BAA6B,OAAO;CACpD,IAAI,YAAY,KAAA,GACd,MAAM,IAAI,cAAc,KAAK,EAAE,QAAQ,CAAC;CAE1C,OAAO;AACT;AAEA,eAAe,OAAO,GAAY,SAAoC;CACpE,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,WAAW,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;AAC7F;AAEA,eAAe,YACb,SACA,MACA,UACe;CACf,MAAM,QAAQ,eAAe;EAC3B,UAAU,SAAS,SAAS,IAAI,WAAW;EAC3C,SAAS,SAAS;EAClB,gBAAgB,cAAc,IAAI;EAClC,wBAAwB,WAAW,IAAI;CACzC,CAAC;CACD,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI,KAAK;AAChE;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,IAAI;EACF,MAAM,WAAW,aAAa,IAAI;EAClC,MAAM,wBAAwB,UAAU,gBAAgB,OAAO,CAAC;EAChE,MAAM,YAAY,SAAS,MAAM,QAAQ;CAC3C,SAAS,OAAO;EACd,IAAI,iBAAiB,eAAe,OAAO,MAAM,OAAO,GAAG,MAAM,OAAO;EACxE,MAAM;CACR;CACA,MAAM,GAAG,wBAAwB;CACjC,OAAO,WAAW,GAAG,aAAa,QAAQ,KAAK,kBAAkB;AACnE"}

package/dist/routers/settings-design.mjs

@@ -0,0 +1,102 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { credentialKeys } from "../credential-keys.mjs";
+import { getStore } from "../store.mjs";
+import { notFound, resolveAuthorizedProject } from "./helpers.mjs";
+import { hxRedirect } from "./htmx.mjs";
+import { flash } from "./flash.mjs";
+import { asString, renderSettingsPage } from "./settings.handlers.mjs";
+import { DesignCredentialModel, DesignModel } from "@storyshelf/core/models";
+import { InvalidDesignUrlError } from "@storyshelf/core/adapter/design";
+// src/routers/settings-design.ts
+/** Design settings (project design files, component mapping, provider credentials). */
+function registerDesignSettings(app) {
+	const base = "/projects/:slug/settings/design";
+	app.get(base, async (c) => c.html(await renderSettingsPage(c, "design")));
+	app.post(`${base}/files`, handleAddFile);
+	app.post(`${base}/files/:id/delete`, handleRemoveLink);
+	app.post(`${base}/components`, handleMapComponent);
+	app.post(`${base}/components/:id/delete`, handleRemoveLink);
+	app.post(`${base}/:provider/token`, handleSetToken);
+	app.post(`${base}/:provider/token/delete`, handleRemoveToken);
+}
+/**
+* Every design-settings mutation writes credentials or mappings: require a
+* project admin server-side (the forms are only hidden from others, never trusted).
+* With auth disabled the app has no roles and everyone may administer, as elsewhere.
+*/
+async function adminProject(c) {
+	return await resolveAuthorizedProject(c, c.req.param("slug") ?? "", "admin");
+}
+function designModel() {
+	const { db, design } = getStore();
+	return new DesignModel(db, design);
+}
+function credentialModel() {
+	const { db, config } = getStore();
+	return new DesignCredentialModel(db, credentialKeys(config));
+}
+/** The configured provider addressed by `:provider`, or a 404. */
+function providerOf(c) {
+	const provider = getStore().design.find((candidate) => candidate.metadata.kind === c.req.param("provider"));
+	if (!provider) notFound("Unknown design provider");
+	return provider;
+}
+async function reject(c, errors) {
+	return c.html(await renderSettingsPage(c, "design", { errors }) ?? "", 400);
+}
+function done(c, slug, message) {
+	flash(c, message);
+	return hxRedirect(c, `/projects/${slug}/settings/design`);
+}
+async function handleAddFile(c) {
+	const project = await adminProject(c);
+	const form = await c.req.formData();
+	const label = asString(form.get("label")) ?? "";
+	try {
+		await designModel().addProjectLink(project.id, {
+			label,
+			url: asString(form.get("url")) ?? ""
+		});
+	} catch (error) {
+		if (error instanceof InvalidDesignUrlError) return await reject(c, { file: error.message });
+		throw error;
+	}
+	return done(c, project.slug, "Design file added");
+}
+async function handleMapComponent(c) {
+	const project = await adminProject(c);
+	const form = await c.req.formData();
+	const importPath = asString(form.get("importPath")) ?? "";
+	if (!importPath) return await reject(c, { component: "Enter the story file path" });
+	try {
+		await designModel().setComponentLink(project.id, importPath, asString(form.get("url")) ?? "");
+	} catch (error) {
+		if (error instanceof InvalidDesignUrlError) return await reject(c, { component: error.message });
+		throw error;
+	}
+	return done(c, project.slug, "Component mapped");
+}
+async function handleRemoveLink(c) {
+	const project = await adminProject(c);
+	await designModel().removeLink(project.id, c.req.param("id") ?? "");
+	return done(c, project.slug, "Link removed");
+}
+async function handleSetToken(c) {
+	const project = await adminProject(c);
+	const provider = providerOf(c);
+	const token = asString((await c.req.formData()).get("token"));
+	if (!token) return await reject(c, { [`token:${provider.metadata.kind}`]: "Token is required" });
+	await credentialModel().set(project.id, provider.metadata.kind, token);
+	return done(c, project.slug, `${provider.metadata.name} token saved`);
+}
+async function handleRemoveToken(c) {
+	const project = await adminProject(c);
+	const provider = providerOf(c);
+	await credentialModel().remove(project.id, provider.metadata.kind);
+	return done(c, project.slug, `${provider.metadata.name} token removed`);
+}
+export { registerDesignSettings };
+
+//# sourceMappingURL=settings-design.mjs.map

package/dist/routers/settings-design.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-design.mjs","names":[],"sources":["../../src/routers/settings-design.ts"],"sourcesContent":["import { InvalidDesignUrlError, type DesignProvider } from \"@storyshelf/core/adapter/design\";\nimport { DesignCredentialModel, DesignModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { credentialKeys } from \"../credential-keys.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { notFound, resolveAuthorizedProject } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, renderSettingsPage } from \"./settings.handlers.ts\";\n\n/** Design settings (project design files, component mapping, provider credentials). */\nexport function registerDesignSettings(app: ShelfRouter): void {\n  const base = \"/projects/:slug/settings/design\";\n  app.get(base, async (c) => c.html(await renderSettingsPage(c, \"design\")));\n  app.post(`${base}/files`, handleAddFile);\n  app.post(`${base}/files/:id/delete`, handleRemoveLink);\n  app.post(`${base}/components`, handleMapComponent);\n  app.post(`${base}/components/:id/delete`, handleRemoveLink);\n  app.post(`${base}/:provider/token`, handleSetToken);\n  app.post(`${base}/:provider/token/delete`, handleRemoveToken);\n}\n\n/**\n * Every design-settings mutation writes credentials or mappings: require a\n * project admin server-side (the forms are only hidden from others, never trusted).\n * With auth disabled the app has no roles and everyone may administer, as elsewhere.\n */\nasync function adminProject(c: Context): Promise<Project> {\n  return await resolveAuthorizedProject(c, c.req.param(\"slug\") ?? \"\", \"admin\");\n}\n\nfunction designModel(): DesignModel {\n  const { db, design } = getStore();\n  return new DesignModel(db, design);\n}\n\nfunction credentialModel(): DesignCredentialModel {\n  const { db, config } = getStore();\n  return new DesignCredentialModel(db, credentialKeys(config));\n}\n\n/** The configured provider addressed by `:provider`, or a 404. */\nfunction providerOf(c: Context): DesignProvider {\n  const provider = getStore().design.find(\n    (candidate) => candidate.metadata.kind === c.req.param(\"provider\"),\n  );\n  if (!provider) notFound(\"Unknown design provider\");\n  return provider;\n}\n\nasync function reject(c: Context, errors: Record<string, string>): Promise<Response> {\n  return c.html((await renderSettingsPage(c, \"design\", { errors })) ?? \"\", 400);\n}\n\nfunction done(c: Context, slug: string, message: string): Response {\n  flash(c, message);\n  return hxRedirect(c, `/projects/${slug}/settings/design`);\n}\n\nasync function handleAddFile(c: Context): Promise<Response> {\n  const project = await adminProject(c);\n  const form = await c.req.formData();\n  const label = asString(form.get(\"label\")) ?? \"\";\n  try {\n    await designModel().addProjectLink(project.id, { label, url: asString(form.get(\"url\")) ?? \"\" });\n  } catch (error) {\n    if (error instanceof InvalidDesignUrlError) return await reject(c, { file: error.message });\n    throw error;\n  }\n  return done(c, project.slug, \"Design file added\");\n}\n\nasync function handleMapComponent(c: Context): Promise<Response> {\n  const project = await adminProject(c);\n  const form = await c.req.formData();\n  const importPath = asString(form.get(\"importPath\")) ?? \"\";\n  if (!importPath) return await reject(c, { component: \"Enter the story file path\" });\n  try {\n    await designModel().setComponentLink(project.id, importPath, asString(form.get(\"url\")) ?? \"\");\n  } catch (error) {\n    if (error instanceof InvalidDesignUrlError) {\n      return await reject(c, { component: error.message });\n    }\n    throw error;\n  }\n  return done(c, project.slug, \"Component mapped\");\n}\n\nasync function handleRemoveLink(c: Context): Promise<Response> {\n  const project = await adminProject(c);\n  await designModel().removeLink(project.id, c.req.param(\"id\") ?? \"\");\n  return done(c, project.slug, \"Link removed\");\n}\n\nasync function handleSetToken(c: Context): Promise<Response> {\n  const project = await adminProject(c);\n  const provider = providerOf(c);\n  const token = asString((await c.req.formData()).get(\"token\"));\n  if (!token) return await reject(c, { [`token:${provider.metadata.kind}`]: \"Token is required\" });\n  await credentialModel().set(project.id, provider.metadata.kind, token);\n  return done(c, project.slug, `${provider.metadata.name} token saved`);\n}\n\nasync function handleRemoveToken(c: Context): Promise<Response> {\n  const project = await adminProject(c);\n  const provider = providerOf(c);\n  await credentialModel().remove(project.id, provider.metadata.kind);\n  return done(c, project.slug, `${provider.metadata.name} token removed`);\n}\n"],"mappings":";;;;;;;;;;;;;AAaA,SAAgB,uBAAuB,KAAwB;CAC7D,MAAM,OAAO;CACb,IAAI,IAAI,MAAM,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,GAAG,QAAQ,CAAC,CAAC;CACxE,IAAI,KAAK,GAAG,KAAK,SAAS,aAAa;CACvC,IAAI,KAAK,GAAG,KAAK,oBAAoB,gBAAgB;CACrD,IAAI,KAAK,GAAG,KAAK,cAAc,kBAAkB;CACjD,IAAI,KAAK,GAAG,KAAK,yBAAyB,gBAAgB;CAC1D,IAAI,KAAK,GAAG,KAAK,mBAAmB,cAAc;CAClD,IAAI,KAAK,GAAG,KAAK,0BAA0B,iBAAiB;AAC9D;;;;;;AAOA,eAAe,aAAa,GAA8B;CACxD,OAAO,MAAM,yBAAyB,GAAG,EAAE,IAAI,MAAM,MAAM,KAAK,IAAI,OAAO;AAC7E;AAEA,SAAS,cAA2B;CAClC,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,OAAO,IAAI,YAAY,IAAI,MAAM;AACnC;AAEA,SAAS,kBAAyC;CAChD,MAAM,EAAE,IAAI,WAAW,SAAS;CAChC,OAAO,IAAI,sBAAsB,IAAI,eAAe,MAAM,CAAC;AAC7D;;AAGA,SAAS,WAAW,GAA4B;CAC9C,MAAM,WAAW,SAAS,CAAC,CAAC,OAAO,MAChC,cAAc,UAAU,SAAS,SAAS,EAAE,IAAI,MAAM,UAAU,CACnE;CACA,IAAI,CAAC,UAAU,SAAS,yBAAyB;CACjD,OAAO;AACT;AAEA,eAAe,OAAO,GAAY,QAAmD;CACnF,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,UAAU,EAAE,OAAO,CAAC,KAAM,IAAI,GAAG;AAC9E;AAEA,SAAS,KAAK,GAAY,MAAc,SAA2B;CACjE,MAAM,GAAG,OAAO;CAChB,OAAO,WAAW,GAAG,aAAa,KAAK,iBAAiB;AAC1D;AAEA,eAAe,cAAc,GAA+B;CAC1D,MAAM,UAAU,MAAM,aAAa,CAAC;CACpC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,QAAQ,SAAS,KAAK,IAAI,OAAO,CAAC,KAAK;CAC7C,IAAI;EACF,MAAM,YAAY,CAAC,CAAC,eAAe,QAAQ,IAAI;GAAE;GAAO,KAAK,SAAS,KAAK,IAAI,KAAK,CAAC,KAAK;EAAG,CAAC;CAChG,SAAS,OAAO;EACd,IAAI,iBAAiB,uBAAuB,OAAO,MAAM,OAAO,GAAG,EAAE,MAAM,MAAM,QAAQ,CAAC;EAC1F,MAAM;CACR;CACA,OAAO,KAAK,GAAG,QAAQ,MAAM,mBAAmB;AAClD;AAEA,eAAe,mBAAmB,GAA+B;CAC/D,MAAM,UAAU,MAAM,aAAa,CAAC;CACpC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,aAAa,SAAS,KAAK,IAAI,YAAY,CAAC,KAAK;CACvD,IAAI,CAAC,YAAY,OAAO,MAAM,OAAO,GAAG,EAAE,WAAW,4BAA4B,CAAC;CAClF,IAAI;EACF,MAAM,YAAY,CAAC,CAAC,iBAAiB,QAAQ,IAAI,YAAY,SAAS,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE;CAC9F,SAAS,OAAO;EACd,IAAI,iBAAiB,uBACnB,OAAO,MAAM,OAAO,GAAG,EAAE,WAAW,MAAM,QAAQ,CAAC;EAErD,MAAM;CACR;CACA,OAAO,KAAK,GAAG,QAAQ,MAAM,kBAAkB;AACjD;AAEA,eAAe,iBAAiB,GAA+B;CAC7D,MAAM,UAAU,MAAM,aAAa,CAAC;CACpC,MAAM,YAAY,CAAC,CAAC,WAAW,QAAQ,IAAI,EAAE,IAAI,MAAM,IAAI,KAAK,EAAE;CAClE,OAAO,KAAK,GAAG,QAAQ,MAAM,cAAc;AAC7C;AAEA,eAAe,eAAe,GAA+B;CAC3D,MAAM,UAAU,MAAM,aAAa,CAAC;CACpC,MAAM,WAAW,WAAW,CAAC;CAC7B,MAAM,QAAQ,UAAU,MAAM,EAAE,IAAI,SAAS,EAAA,CAAG,IAAI,OAAO,CAAC;CAC5D,IAAI,CAAC,OAAO,OAAO,MAAM,OAAO,GAAG,GAAG,SAAS,SAAS,SAAS,SAAS,oBAAoB,CAAC;CAC/F,MAAM,gBAAgB,CAAC,CAAC,IAAI,QAAQ,IAAI,SAAS,SAAS,MAAM,KAAK;CACrE,OAAO,KAAK,GAAG,QAAQ,MAAM,GAAG,SAAS,SAAS,KAAK,aAAa;AACtE;AAEA,eAAe,kBAAkB,GAA+B;CAC9D,MAAM,UAAU,MAAM,aAAa,CAAC;CACpC,MAAM,WAAW,WAAW,CAAC;CAC7B,MAAM,gBAAgB,CAAC,CAAC,OAAO,QAAQ,IAAI,SAAS,SAAS,IAAI;CACjE,OAAO,KAAK,GAAG,QAAQ,MAAM,GAAG,SAAS,SAAS,KAAK,eAAe;AACxE"}

package/dist/routers/settings-general.mjs

@@ -2,18 +2,22 @@ import "node:path";
 import "node:url";
 import.meta.url;
 import { getStore } from "../store.mjs";
+import { resolveAuthorizedProject } from "./helpers.mjs";
+import { assertTargetsSelectable } from "../targets.mjs";
 import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
+import { runSwitchOffPass } from "./review-switch-off.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
+import { resolveBrowsers } from "@storyshelf/core/capture";
 import { ProjectModel } from "@storyshelf/core/models";
-import { BROWSER_NAMES } from "@storyshelf/core/adapter/capture-runner";
-//#region src/routers/settings-general.ts
+// src/routers/settings-general.ts
 /** General project settings (name, repo, thresholds) and danger-zone delete. */
 function registerGeneralSettings(app) {
 	app.get("/projects/:slug/settings", async (c) => c.html(await renderSettingsPage(c, "general")));
 	app.get("/projects/:slug/settings/tests", async (c) => c.html(await renderSettingsPage(c, "tests")));
 	app.post("/projects/:slug/settings", handleGeneralUpdate);
 	app.post("/projects/:slug/settings/tests", handleTestsUpdate);
+	app.post("/projects/:slug/settings/review", handleReviewUpdate);
 	app.post("/projects/:slug/delete", handleDeleteProject);
 }
 /** Read the general-settings form fields (name validated by the caller). */
@@ -33,15 +37,18 @@ async function handleGeneralUpdate(c) {
 	const form = await c.req.formData();
 	const name = form.get("name");
 	if (typeof name !== "string" || name.trim() === "") return c.html(await renderSettingsPage(c, "general", { errors: { name: "Name is required" } }) ?? "", 400);
-	const fields = {
+	return await persistGeneralUpdate(c, project, slug, {
 		...readGeneralFields(form),
 		name: name.trim()
-	};
-	if (fields.browser !== void 0 && !BROWSER_NAMES.includes(fields.browser)) return c.html(await renderSettingsPage(c, "general", { globalError: `Invalid browser "${fields.browser}". Choose one of: ${BROWSER_NAMES.join(", ")}.` }) ?? "", 400);
-	return await persistGeneralUpdate(c, project, slug, fields);
+	});
+}
+/** Refuse, with 400 and the reason, a browser the runner cannot render (ADR 0007, decision 7). */
+async function assertBrowserChoice(project, browser) {
+	if (browser !== void 0) await assertTargetsSelectable([browser], resolveBrowsers(project));
 }
 async function persistGeneralUpdate(c, project, slug, fields) {
 	try {
+		await assertBrowserChoice(project, fields.browser);
 		await new ProjectModel(getStore().db).update(project.id, {
 			name: fields.name,
 			gitRepository: fields.gitRepository ?? void 0,
@@ -49,7 +56,8 @@ async function persistGeneralUpdate(c, project, slug, fields) {
 			pixelThreshold: fields.pixelThreshold ? Number(fields.pixelThreshold) : void 0,
 			maxDiffRatio: fields.maxDiffRatio ? Number(fields.maxDiffRatio) : void 0,
 			publicBranchRegex: fields.publicBranchRegex === "" ? null : fields.publicBranchRegex ?? void 0,
-			browser: fields.browser ?? void 0
+			browser: fields.browser ?? void 0,
+			...fields.browser && fields.browser !== project.browser ? { browsers: null } : {}
 		});
 		flash(c, "Project settings saved");
 		return hxRedirect(c, `/projects/${slug}/settings`);
@@ -61,16 +69,22 @@ async function persistGeneralUpdate(c, project, slug, fields) {
 async function handleTestsUpdate(c) {
 	const slug = c.req.param("slug") ?? "";
 	const project = await findProject(slug);
-	const { executePlay, playTimeoutMs } = readTestsFields(await c.req.formData());
+	const { executePlay, runA11y, runTests, playTimeoutMs } = readTestsFields(await c.req.formData());
 	const rangeError = playTimeoutError(playTimeoutMs);
 	if (rangeError) return c.html(await renderSettingsPage(c, "tests", { globalError: rangeError }) ?? "", 400);
-	return await persistTestsUpdate(c, project, slug, executePlay, playTimeoutMs);
+	return await persistTestsUpdate(c, project, slug, {
+		executePlay,
+		runA11y,
+		runTests
+	}, playTimeoutMs);
 }
 /** Read the tests-tab form fields. */
 function readTestsFields(form) {
 	const playTimeoutMsRaw = asString(form.get("playTimeoutMs"));
 	return {
 		executePlay: form.get("executePlay") === "true",
+		runA11y: form.get("runA11y") === "true",
+		runTests: form.get("runTests") === "true",
 		playTimeoutMs: playTimeoutMsRaw ? Number(playTimeoutMsRaw) : void 0
 	};
 }
@@ -79,10 +93,10 @@ function playTimeoutError(playTimeoutMs) {
 	if (playTimeoutMs !== void 0 && (Number.isNaN(playTimeoutMs) || playTimeoutMs < 1e3 || playTimeoutMs > 3e4)) return "Play timeout must be between 1000 and 30000";
 	return null;
 }
-async function persistTestsUpdate(c, project, slug, executePlay, playTimeoutMs) {
+async function persistTestsUpdate(c, project, slug, switches, playTimeoutMs) {
 	try {
 		await new ProjectModel(getStore().db).update(project.id, {
-			executePlay,
+			...switches,
 			playTimeoutMs: playTimeoutMs ?? void 0
 		});
 		flash(c, "Test settings saved");
@@ -98,7 +112,37 @@ async function handleDeleteProject(c) {
 	flash(c, `Deleted ${project.name}`);
 	return hxRedirect(c, "/projects");
 }
-//#endregion
+/** Largest approval count the form and the API accept. */
+const MAX_APPROVALS = 20;
+/**
+* Review settings (ADR 0013, decision 1): the switch and the approvals a build needs. Project
+* admins only. The route is classed `hosting`, not `review`: a review route answers 404 while
+* review is off, and this is the form that turns it back on. Turning review off accepts the
+* project's pending builds that no capture worked on, in one pass.
+*/
+async function handleReviewUpdate(c) {
+	const slug = c.req.param("slug") ?? "";
+	const project = await resolveAuthorizedProject(c, slug, "admin");
+	const form = await c.req.formData();
+	const approvals = approvalsOf(form, project);
+	if (approvals === null) return c.html(await renderSettingsPage(c, "general", { errors: { reviewApprovals: `Enter a whole number from 1 to ${MAX_APPROVALS}` } }) ?? "", 400);
+	const updated = await new ProjectModel(getStore().db).update(project.id, {
+		reviewEnabled: form.get("reviewEnabled") === "true",
+		reviewApprovals: approvals
+	});
+	const accepted = await runSwitchOffPass(project, updated);
+	flash(c, reviewSavedMessage(accepted));
+	return hxRedirect(c, `/projects/${slug}/settings`);
+}
+/** The approvals count of the form (the current one when blank); null when it is not 1 to 20. */
+function approvalsOf(form, project) {
+	const raw = asString(form.get("reviewApprovals"));
+	const approvals = raw ? Number(raw) : project.reviewApprovals ?? 1;
+	return Number.isInteger(approvals) && approvals >= 1 && approvals <= MAX_APPROVALS ? approvals : null;
+}
+function reviewSavedMessage(accepted) {
+	return accepted > 0 ? `Review settings saved; accepted ${accepted} pending build${accepted === 1 ? "" : "s"}` : "Review settings saved";
+}
 export { registerGeneralSettings };
 
 //# sourceMappingURL=settings-general.mjs.map

package/dist/routers/settings-general.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"settings-general.mjs","names":[],"sources":["../../src/routers/settings-general.ts"],"sourcesContent":["import { BROWSER_NAMES } from \"@storyshelf/core/adapter/capture-runner\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n/** General project settings (name, repo, thresholds) and danger-zone delete. */\nexport function registerGeneralSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings\", async (c) => c.html(await renderSettingsPage(c, \"general\")));\n  app.get(\"/projects/:slug/settings/tests\", async (c) =>\n    c.html(await renderSettingsPage(c, \"tests\")),\n  );\n  app.post(\"/projects/:slug/settings\", handleGeneralUpdate);\n  app.post(\"/projects/:slug/settings/tests\", handleTestsUpdate);\n  app.post(\"/projects/:slug/delete\", handleDeleteProject);\n}\n\ninterface GeneralFields {\n  name: string;\n  gitRepository?: string;\n  gitDefaultBranch?: string;\n  pixelThreshold?: string;\n  maxDiffRatio?: string;\n  publicBranchRegex?: string;\n  browser?: string;\n}\n\n/** Read the general-settings form fields (name validated by the caller). */\nfunction readGeneralFields(form: FormData): Omit<GeneralFields, \"name\"> {\n  return {\n    gitRepository: asString(form.get(\"gitRepository\")),\n    gitDefaultBranch: asString(form.get(\"gitDefaultBranch\")),\n    pixelThreshold: asString(form.get(\"pixelThreshold\")),\n    maxDiffRatio: asString(form.get(\"maxDiffRatio\")),\n    publicBranchRegex: asString(form.get(\"publicBranchRegex\")),\n    browser: asString(form.get(\"browser\")),\n  };\n}\n\nasync function handleGeneralUpdate(c: Context): Promise<Response> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const project = await findProject(slug);\n  const form = await c.req.formData();\n  const name = form.get(\"name\");\n  if (typeof name !== \"string\" || name.trim() === \"\") {\n    return c.html(\n      (await renderSettingsPage(c, \"general\", { errors: { name: \"Name is required\" } })) ?? \"\",\n      400,\n    );\n  }\n  const fields: GeneralFields = { ...readGeneralFields(form), name: name.trim() };\n  if (\n    fields.browser !== undefined &&\n    !(BROWSER_NAMES as readonly string[]).includes(fields.browser)\n  ) {\n    return c.html(\n      (await renderSettingsPage(c, \"general\", {\n        globalError: `Invalid browser \"${fields.browser}\". Choose one of: ${BROWSER_NAMES.join(\", \")}.`,\n      })) ?? \"\",\n      400,\n    );\n  }\n  return await persistGeneralUpdate(c, project, slug, fields);\n}\n\nasync function persistGeneralUpdate(\n  c: Context,\n  project: Project,\n  slug: string,\n  fields: GeneralFields,\n): Promise<Response> {\n  try {\n    await new ProjectModel(getStore().db).update(project.id, {\n      name: fields.name,\n      gitRepository: fields.gitRepository ?? undefined,\n      gitDefaultBranch: fields.gitDefaultBranch ?? undefined,\n      pixelThreshold: fields.pixelThreshold ? Number(fields.pixelThreshold) : undefined,\n      maxDiffRatio: fields.maxDiffRatio ? Number(fields.maxDiffRatio) : undefined,\n      publicBranchRegex:\n        fields.publicBranchRegex === \"\" ? null : (fields.publicBranchRegex ?? undefined),\n      browser: fields.browser ?? undefined,\n    });\n    flash(c, \"Project settings saved\");\n    return hxRedirect(c, `/projects/${slug}/settings`);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : \"Failed to update\";\n    return c.html((await renderSettingsPage(c, \"general\", { globalError: message })) ?? \"\", 400);\n  }\n}\n\nasync function handleTestsUpdate(c: Context): Promise<Response> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const project = await findProject(slug);\n  const form = await c.req.formData();\n  const { executePlay, playTimeoutMs } = readTestsFields(form);\n  const rangeError = playTimeoutError(playTimeoutMs);\n  if (rangeError) {\n    return c.html((await renderSettingsPage(c, \"tests\", { globalError: rangeError })) ?? \"\", 400);\n  }\n  return await persistTestsUpdate(c, project, slug, executePlay, playTimeoutMs);\n}\n\n/** Read the tests-tab form fields. */\nfunction readTestsFields(form: FormData): {\n  executePlay: boolean;\n  playTimeoutMs: number | undefined;\n} {\n  const playTimeoutMsRaw = asString(form.get(\"playTimeoutMs\"));\n  return {\n    executePlay: form.get(\"executePlay\") === \"true\",\n    playTimeoutMs: playTimeoutMsRaw ? Number(playTimeoutMsRaw) : undefined,\n  };\n}\n\n/** Range error for the play timeout, or null when valid. */\nfunction playTimeoutError(playTimeoutMs: number | undefined): string | null {\n  if (\n    playTimeoutMs !== undefined &&\n    (Number.isNaN(playTimeoutMs) || playTimeoutMs < 1000 || playTimeoutMs > 30_000)\n  ) {\n    return \"Play timeout must be between 1000 and 30000\";\n  }\n  return null;\n}\n\nasync function persistTestsUpdate(\n  c: Context,\n  project: Project,\n  slug: string,\n  executePlay: boolean,\n  playTimeoutMs: number | undefined,\n): Promise<Response> {\n  try {\n    await new ProjectModel(getStore().db).update(project.id, {\n      executePlay,\n      playTimeoutMs: playTimeoutMs ?? undefined,\n    });\n    flash(c, \"Test settings saved\");\n    return hxRedirect(c, `/projects/${slug}/settings/tests`);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : \"Failed to update\";\n    return c.html((await renderSettingsPage(c, \"tests\", { globalError: message })) ?? \"\", 400);\n  }\n}\n\nasync function handleDeleteProject(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  await new ProjectModel(getStore().db).remove(project.id);\n  flash(c, `Deleted ${project.name}`);\n  return hxRedirect(c, \"/projects\");\n}\n"],"mappings":";;;;;;;;;;;AAUA,SAAgB,wBAAwB,KAAwB;CAC9D,IAAI,IAAI,4BAA4B,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,GAAG,SAAS,CAAC,CAAC;CAC/F,IAAI,IAAI,kCAAkC,OAAO,MAC/C,EAAE,KAAK,MAAM,mBAAmB,GAAG,OAAO,CAAC,CAC7C;CACA,IAAI,KAAK,4BAA4B,mBAAmB;CACxD,IAAI,KAAK,kCAAkC,iBAAiB;CAC5D,IAAI,KAAK,0BAA0B,mBAAmB;AACxD;;AAaA,SAAS,kBAAkB,MAA6C;CACtE,OAAO;EACL,eAAe,SAAS,KAAK,IAAI,eAAe,CAAC;EACjD,kBAAkB,SAAS,KAAK,IAAI,kBAAkB,CAAC;EACvD,gBAAgB,SAAS,KAAK,IAAI,gBAAgB,CAAC;EACnD,cAAc,SAAS,KAAK,IAAI,cAAc,CAAC;EAC/C,mBAAmB,SAAS,KAAK,IAAI,mBAAmB,CAAC;EACzD,SAAS,SAAS,KAAK,IAAI,SAAS,CAAC;CACvC;AACF;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;CACpC,MAAM,UAAU,MAAM,YAAY,IAAI;CACtC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,OAAO,KAAK,IAAI,MAAM;CAC5B,IAAI,OAAO,SAAS,YAAY,KAAK,KAAK,MAAM,IAC9C,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,EAAE,CAAC,KAAM,IACtF,GACF;CAEF,MAAM,SAAwB;EAAE,GAAG,kBAAkB,IAAI;EAAG,MAAM,KAAK,KAAK;CAAE;CAC9E,IACE,OAAO,YAAY,KAAA,KACnB,CAAE,cAAoC,SAAS,OAAO,OAAO,GAE7D,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,WAAW,EACtC,aAAa,oBAAoB,OAAO,QAAQ,oBAAoB,cAAc,KAAK,IAAI,EAAE,GAC/F,CAAC,KAAM,IACP,GACF;CAEF,OAAO,MAAM,qBAAqB,GAAG,SAAS,MAAM,MAAM;AAC5D;AAEA,eAAe,qBACb,GACA,SACA,MACA,QACmB;CACnB,IAAI;EACF,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;GACvD,MAAM,OAAO;GACb,eAAe,OAAO,iBAAiB,KAAA;GACvC,kBAAkB,OAAO,oBAAoB,KAAA;GAC7C,gBAAgB,OAAO,iBAAiB,OAAO,OAAO,cAAc,IAAI,KAAA;GACxE,cAAc,OAAO,eAAe,OAAO,OAAO,YAAY,IAAI,KAAA;GAClE,mBACE,OAAO,sBAAsB,KAAK,OAAQ,OAAO,qBAAqB,KAAA;GACxE,SAAS,OAAO,WAAW,KAAA;EAC7B,CAAC;EACD,MAAM,GAAG,wBAAwB;EACjC,OAAO,WAAW,GAAG,aAAa,KAAK,UAAU;CACnD,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;EACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,WAAW,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;CAC7F;AACF;AAEA,eAAe,kBAAkB,GAA+B;CAC9D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;CACpC,MAAM,UAAU,MAAM,YAAY,IAAI;CAEtC,MAAM,EAAE,aAAa,kBAAkB,gBAAgB,MADpC,EAAE,IAAI,SAAS,CACyB;CAC3D,MAAM,aAAa,iBAAiB,aAAa;CACjD,IAAI,YACF,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,SAAS,EAAE,aAAa,WAAW,CAAC,KAAM,IAAI,GAAG;CAE9F,OAAO,MAAM,mBAAmB,GAAG,SAAS,MAAM,aAAa,aAAa;AAC9E;;AAGA,SAAS,gBAAgB,MAGvB;CACA,MAAM,mBAAmB,SAAS,KAAK,IAAI,eAAe,CAAC;CAC3D,OAAO;EACL,aAAa,KAAK,IAAI,aAAa,MAAM;EACzC,eAAe,mBAAmB,OAAO,gBAAgB,IAAI,KAAA;CAC/D;AACF;;AAGA,SAAS,iBAAiB,eAAkD;CAC1E,IACE,kBAAkB,KAAA,MACjB,OAAO,MAAM,aAAa,KAAK,gBAAgB,OAAQ,gBAAgB,MAExE,OAAO;CAET,OAAO;AACT;AAEA,eAAe,mBACb,GACA,SACA,MACA,aACA,eACmB;CACnB,IAAI;EACF,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;GACvD;GACA,eAAe,iBAAiB,KAAA;EAClC,CAAC;EACD,MAAM,GAAG,qBAAqB;EAC9B,OAAO,WAAW,GAAG,aAAa,KAAK,gBAAgB;CACzD,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;EACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,SAAS,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;CAC3F;AACF;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,EAAE;CACvD,MAAM,GAAG,WAAW,QAAQ,MAAM;CAClC,OAAO,WAAW,GAAG,WAAW;AAClC"}
+{"version":3,"file":"settings-general.mjs","names":[],"sources":["../../src/routers/settings-general.ts"],"sourcesContent":["import { resolveBrowsers } from \"@storyshelf/core/capture\";\nimport { ProjectModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Context } from \"hono\";\nimport type { ShelfRouter } from \"../app-types.ts\";\nimport { getStore } from \"../store.ts\";\nimport { assertTargetsSelectable } from \"../targets.ts\";\nimport { flash } from \"./flash.ts\";\nimport { resolveAuthorizedProject } from \"./helpers.ts\";\nimport { hxRedirect } from \"./htmx.ts\";\nimport { runSwitchOffPass } from \"./review-switch-off.ts\";\nimport { asString, findProject, renderSettingsPage } from \"./settings.handlers.ts\";\n/** General project settings (name, repo, thresholds) and danger-zone delete. */\nexport function registerGeneralSettings(app: ShelfRouter): void {\n  app.get(\"/projects/:slug/settings\", async (c) => c.html(await renderSettingsPage(c, \"general\")));\n  app.get(\"/projects/:slug/settings/tests\", async (c) =>\n    c.html(await renderSettingsPage(c, \"tests\")),\n  );\n  app.post(\"/projects/:slug/settings\", handleGeneralUpdate);\n  app.post(\"/projects/:slug/settings/tests\", handleTestsUpdate);\n  app.post(\"/projects/:slug/settings/review\", handleReviewUpdate);\n  app.post(\"/projects/:slug/delete\", handleDeleteProject);\n}\n\ninterface GeneralFields {\n  name: string;\n  gitRepository?: string;\n  gitDefaultBranch?: string;\n  pixelThreshold?: string;\n  maxDiffRatio?: string;\n  publicBranchRegex?: string;\n  browser?: string;\n}\n\n/** Read the general-settings form fields (name validated by the caller). */\nfunction readGeneralFields(form: FormData): Omit<GeneralFields, \"name\"> {\n  return {\n    gitRepository: asString(form.get(\"gitRepository\")),\n    gitDefaultBranch: asString(form.get(\"gitDefaultBranch\")),\n    pixelThreshold: asString(form.get(\"pixelThreshold\")),\n    maxDiffRatio: asString(form.get(\"maxDiffRatio\")),\n    publicBranchRegex: asString(form.get(\"publicBranchRegex\")),\n    browser: asString(form.get(\"browser\")),\n  };\n}\n\nasync function handleGeneralUpdate(c: Context): Promise<Response> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const project = await findProject(slug);\n  const form = await c.req.formData();\n  const name = form.get(\"name\");\n  if (typeof name !== \"string\" || name.trim() === \"\") {\n    return c.html(\n      (await renderSettingsPage(c, \"general\", { errors: { name: \"Name is required\" } })) ?? \"\",\n      400,\n    );\n  }\n  const fields: GeneralFields = { ...readGeneralFields(form), name: name.trim() };\n  return await persistGeneralUpdate(c, project, slug, fields);\n}\n\n/** Refuse, with 400 and the reason, a browser the runner cannot render (ADR 0007, decision 7). */\nasync function assertBrowserChoice(project: Project, browser: string | undefined): Promise<void> {\n  if (browser !== undefined) {\n    await assertTargetsSelectable([browser], resolveBrowsers(project));\n  }\n}\n\nasync function persistGeneralUpdate(\n  c: Context,\n  project: Project,\n  slug: string,\n  fields: GeneralFields,\n): Promise<Response> {\n  try {\n    await assertBrowserChoice(project, fields.browser);\n    await new ProjectModel(getStore().db).update(project.id, {\n      name: fields.name,\n      gitRepository: fields.gitRepository ?? undefined,\n      gitDefaultBranch: fields.gitDefaultBranch ?? undefined,\n      pixelThreshold: fields.pixelThreshold ? Number(fields.pixelThreshold) : undefined,\n      maxDiffRatio: fields.maxDiffRatio ? Number(fields.maxDiffRatio) : undefined,\n      publicBranchRegex:\n        fields.publicBranchRegex === \"\" ? null : (fields.publicBranchRegex ?? undefined),\n      browser: fields.browser ?? undefined,\n      // Picking a different single engine returns the project to one-browser capture.\n      ...(fields.browser && fields.browser !== project.browser ? { browsers: null } : {}),\n    });\n    flash(c, \"Project settings saved\");\n    return hxRedirect(c, `/projects/${slug}/settings`);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : \"Failed to update\";\n    return c.html((await renderSettingsPage(c, \"general\", { globalError: message })) ?? \"\", 400);\n  }\n}\n\nasync function handleTestsUpdate(c: Context): Promise<Response> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const project = await findProject(slug);\n  const form = await c.req.formData();\n  const { executePlay, runA11y, runTests, playTimeoutMs } = readTestsFields(form);\n  const rangeError = playTimeoutError(playTimeoutMs);\n  if (rangeError) {\n    return c.html((await renderSettingsPage(c, \"tests\", { globalError: rangeError })) ?? \"\", 400);\n  }\n  return await persistTestsUpdate(\n    c,\n    project,\n    slug,\n    { executePlay, runA11y, runTests },\n    playTimeoutMs,\n  );\n}\n\n/** Read the tests-tab form fields. */\nfunction readTestsFields(form: FormData): {\n  executePlay: boolean;\n  runA11y: boolean;\n  runTests: boolean;\n  playTimeoutMs: number | undefined;\n} {\n  const playTimeoutMsRaw = asString(form.get(\"playTimeoutMs\"));\n  return {\n    executePlay: form.get(\"executePlay\") === \"true\",\n    runA11y: form.get(\"runA11y\") === \"true\",\n    runTests: form.get(\"runTests\") === \"true\",\n    playTimeoutMs: playTimeoutMsRaw ? Number(playTimeoutMsRaw) : undefined,\n  };\n}\n\n/** Range error for the play timeout, or null when valid. */\nfunction playTimeoutError(playTimeoutMs: number | undefined): string | null {\n  if (\n    playTimeoutMs !== undefined &&\n    (Number.isNaN(playTimeoutMs) || playTimeoutMs < 1000 || playTimeoutMs > 30_000)\n  ) {\n    return \"Play timeout must be between 1000 and 30000\";\n  }\n  return null;\n}\n\nasync function persistTestsUpdate(\n  c: Context,\n  project: Project,\n  slug: string,\n  switches: { executePlay: boolean; runA11y: boolean; runTests: boolean },\n  playTimeoutMs: number | undefined,\n): Promise<Response> {\n  try {\n    await new ProjectModel(getStore().db).update(project.id, {\n      ...switches,\n      playTimeoutMs: playTimeoutMs ?? undefined,\n    });\n    flash(c, \"Test settings saved\");\n    return hxRedirect(c, `/projects/${slug}/settings/tests`);\n  } catch (error) {\n    const message = error instanceof Error ? error.message : \"Failed to update\";\n    return c.html((await renderSettingsPage(c, \"tests\", { globalError: message })) ?? \"\", 400);\n  }\n}\n\nasync function handleDeleteProject(c: Context): Promise<Response> {\n  const project = await findProject(c.req.param(\"slug\") ?? \"\");\n  await new ProjectModel(getStore().db).remove(project.id);\n  flash(c, `Deleted ${project.name}`);\n  return hxRedirect(c, \"/projects\");\n}\n\n/** Largest approval count the form and the API accept. */\nconst MAX_APPROVALS = 20;\n\n/**\n * Review settings (ADR 0013, decision 1): the switch and the approvals a build needs. Project\n * admins only. The route is classed `hosting`, not `review`: a review route answers 404 while\n * review is off, and this is the form that turns it back on. Turning review off accepts the\n * project's pending builds that no capture worked on, in one pass.\n */\nasync function handleReviewUpdate(c: Context): Promise<Response> {\n  const slug = c.req.param(\"slug\") ?? \"\";\n  const project = await resolveAuthorizedProject(c, slug, \"admin\");\n  const form = await c.req.formData();\n  const approvals = approvalsOf(form, project);\n  if (approvals === null) {\n    return c.html(\n      (await renderSettingsPage(c, \"general\", {\n        errors: { reviewApprovals: `Enter a whole number from 1 to ${MAX_APPROVALS}` },\n      })) ?? \"\",\n      400,\n    );\n  }\n  const updated = await new ProjectModel(getStore().db).update(project.id, {\n    reviewEnabled: form.get(\"reviewEnabled\") === \"true\",\n    reviewApprovals: approvals,\n  });\n  const accepted = await runSwitchOffPass(project, updated);\n  flash(c, reviewSavedMessage(accepted));\n  return hxRedirect(c, `/projects/${slug}/settings`);\n}\n\n/** The approvals count of the form (the current one when blank); null when it is not 1 to 20. */\nfunction approvalsOf(form: FormData, project: Project): number | null {\n  const raw = asString(form.get(\"reviewApprovals\"));\n  const approvals = raw ? Number(raw) : (project.reviewApprovals ?? 1);\n  return Number.isInteger(approvals) && approvals >= 1 && approvals <= MAX_APPROVALS\n    ? approvals\n    : null;\n}\n\nfunction reviewSavedMessage(accepted: number): string {\n  return accepted > 0\n    ? `Review settings saved; accepted ${accepted} pending build${accepted === 1 ? \"\" : \"s\"}`\n    : \"Review settings saved\";\n}\n"],"mappings":";;;;;;;;;;;;;;AAaA,SAAgB,wBAAwB,KAAwB;CAC9D,IAAI,IAAI,4BAA4B,OAAO,MAAM,EAAE,KAAK,MAAM,mBAAmB,GAAG,SAAS,CAAC,CAAC;CAC/F,IAAI,IAAI,kCAAkC,OAAO,MAC/C,EAAE,KAAK,MAAM,mBAAmB,GAAG,OAAO,CAAC,CAC7C;CACA,IAAI,KAAK,4BAA4B,mBAAmB;CACxD,IAAI,KAAK,kCAAkC,iBAAiB;CAC5D,IAAI,KAAK,mCAAmC,kBAAkB;CAC9D,IAAI,KAAK,0BAA0B,mBAAmB;AACxD;;AAaA,SAAS,kBAAkB,MAA6C;CACtE,OAAO;EACL,eAAe,SAAS,KAAK,IAAI,eAAe,CAAC;EACjD,kBAAkB,SAAS,KAAK,IAAI,kBAAkB,CAAC;EACvD,gBAAgB,SAAS,KAAK,IAAI,gBAAgB,CAAC;EACnD,cAAc,SAAS,KAAK,IAAI,cAAc,CAAC;EAC/C,mBAAmB,SAAS,KAAK,IAAI,mBAAmB,CAAC;EACzD,SAAS,SAAS,KAAK,IAAI,SAAS,CAAC;CACvC;AACF;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;CACpC,MAAM,UAAU,MAAM,YAAY,IAAI;CACtC,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,OAAO,KAAK,IAAI,MAAM;CAC5B,IAAI,OAAO,SAAS,YAAY,KAAK,KAAK,MAAM,IAC9C,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,WAAW,EAAE,QAAQ,EAAE,MAAM,mBAAmB,EAAE,CAAC,KAAM,IACtF,GACF;CAGF,OAAO,MAAM,qBAAqB,GAAG,SAAS,MAAM;EADpB,GAAG,kBAAkB,IAAI;EAAG,MAAM,KAAK,KAAK;CACnB,CAAC;AAC5D;;AAGA,eAAe,oBAAoB,SAAkB,SAA4C;CAC/F,IAAI,YAAY,KAAA,GACd,MAAM,wBAAwB,CAAC,OAAO,GAAG,gBAAgB,OAAO,CAAC;AAErE;AAEA,eAAe,qBACb,GACA,SACA,MACA,QACmB;CACnB,IAAI;EACF,MAAM,oBAAoB,SAAS,OAAO,OAAO;EACjD,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;GACvD,MAAM,OAAO;GACb,eAAe,OAAO,iBAAiB,KAAA;GACvC,kBAAkB,OAAO,oBAAoB,KAAA;GAC7C,gBAAgB,OAAO,iBAAiB,OAAO,OAAO,cAAc,IAAI,KAAA;GACxE,cAAc,OAAO,eAAe,OAAO,OAAO,YAAY,IAAI,KAAA;GAClE,mBACE,OAAO,sBAAsB,KAAK,OAAQ,OAAO,qBAAqB,KAAA;GACxE,SAAS,OAAO,WAAW,KAAA;GAE3B,GAAI,OAAO,WAAW,OAAO,YAAY,QAAQ,UAAU,EAAE,UAAU,KAAK,IAAI,CAAC;EACnF,CAAC;EACD,MAAM,GAAG,wBAAwB;EACjC,OAAO,WAAW,GAAG,aAAa,KAAK,UAAU;CACnD,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;EACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,WAAW,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;CAC7F;AACF;AAEA,eAAe,kBAAkB,GAA+B;CAC9D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;CACpC,MAAM,UAAU,MAAM,YAAY,IAAI;CAEtC,MAAM,EAAE,aAAa,SAAS,UAAU,kBAAkB,gBAAgB,MADvD,EAAE,IAAI,SAAS,CAC4C;CAC9E,MAAM,aAAa,iBAAiB,aAAa;CACjD,IAAI,YACF,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,SAAS,EAAE,aAAa,WAAW,CAAC,KAAM,IAAI,GAAG;CAE9F,OAAO,MAAM,mBACX,GACA,SACA,MACA;EAAE;EAAa;EAAS;CAAS,GACjC,aACF;AACF;;AAGA,SAAS,gBAAgB,MAKvB;CACA,MAAM,mBAAmB,SAAS,KAAK,IAAI,eAAe,CAAC;CAC3D,OAAO;EACL,aAAa,KAAK,IAAI,aAAa,MAAM;EACzC,SAAS,KAAK,IAAI,SAAS,MAAM;EACjC,UAAU,KAAK,IAAI,UAAU,MAAM;EACnC,eAAe,mBAAmB,OAAO,gBAAgB,IAAI,KAAA;CAC/D;AACF;;AAGA,SAAS,iBAAiB,eAAkD;CAC1E,IACE,kBAAkB,KAAA,MACjB,OAAO,MAAM,aAAa,KAAK,gBAAgB,OAAQ,gBAAgB,MAExE,OAAO;CAET,OAAO;AACT;AAEA,eAAe,mBACb,GACA,SACA,MACA,UACA,eACmB;CACnB,IAAI;EACF,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;GACvD,GAAG;GACH,eAAe,iBAAiB,KAAA;EAClC,CAAC;EACD,MAAM,GAAG,qBAAqB;EAC9B,OAAO,WAAW,GAAG,aAAa,KAAK,gBAAgB;CACzD,SAAS,OAAO;EACd,MAAM,UAAU,iBAAiB,QAAQ,MAAM,UAAU;EACzD,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,SAAS,EAAE,aAAa,QAAQ,CAAC,KAAM,IAAI,GAAG;CAC3F;AACF;AAEA,eAAe,oBAAoB,GAA+B;CAChE,MAAM,UAAU,MAAM,YAAY,EAAE,IAAI,MAAM,MAAM,KAAK,EAAE;CAC3D,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,EAAE;CACvD,MAAM,GAAG,WAAW,QAAQ,MAAM;CAClC,OAAO,WAAW,GAAG,WAAW;AAClC;;AAGA,MAAM,gBAAgB;;;;;;;AAQtB,eAAe,mBAAmB,GAA+B;CAC/D,MAAM,OAAO,EAAE,IAAI,MAAM,MAAM,KAAK;CACpC,MAAM,UAAU,MAAM,yBAAyB,GAAG,MAAM,OAAO;CAC/D,MAAM,OAAO,MAAM,EAAE,IAAI,SAAS;CAClC,MAAM,YAAY,YAAY,MAAM,OAAO;CAC3C,IAAI,cAAc,MAChB,OAAO,EAAE,KACN,MAAM,mBAAmB,GAAG,WAAW,EACtC,QAAQ,EAAE,iBAAiB,kCAAkC,gBAAgB,EAC/E,CAAC,KAAM,IACP,GACF;CAEF,MAAM,UAAU,MAAM,IAAI,aAAa,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,QAAQ,IAAI;EACvE,eAAe,KAAK,IAAI,eAAe,MAAM;EAC7C,iBAAiB;CACnB,CAAC;CACD,MAAM,WAAW,MAAM,iBAAiB,SAAS,OAAO;CACxD,MAAM,GAAG,mBAAmB,QAAQ,CAAC;CACrC,OAAO,WAAW,GAAG,aAAa,KAAK,UAAU;AACnD;;AAGA,SAAS,YAAY,MAAgB,SAAiC;CACpE,MAAM,MAAM,SAAS,KAAK,IAAI,iBAAiB,CAAC;CAChD,MAAM,YAAY,MAAM,OAAO,GAAG,IAAK,QAAQ,mBAAmB;CAClE,OAAO,OAAO,UAAU,SAAS,KAAK,aAAa,KAAK,aAAa,gBACjE,YACA;AACN;AAEA,SAAS,mBAAmB,UAA0B;CACpD,OAAO,WAAW,IACd,mCAAmC,SAAS,gBAAgB,aAAa,IAAI,KAAK,QAClF;AACN"}

package/dist/routers/settings-git-channel.mjs

@@ -0,0 +1,76 @@
+import "node:path";
+import "node:url";
+import.meta.url;
+import { getStore } from "../store.mjs";
+import { flash } from "./flash.mjs";
+import { notificationChannelModel } from "./scoped-models.mjs";
+import { asString, renderSettingsPage } from "./settings.handlers.mjs";
+import { NotificationChannelModel } from "@storyshelf/core/models";
+// src/routers/settings-git-channel.ts
+/** Create a git (`state`) channel from the settings form: repository, status prefix and token. */
+const CONFIG_FIELDS = [
+	"owner",
+	"repo",
+	"host",
+	"prefix"
+];
+/** Only the GitHub provider reads these: how it shows a build and the App that posts check runs. */
+const GITHUB_FIELDS = [
+	"mode",
+	"appId",
+	"installationId"
+];
+/** The provider config from the form; blank optional fields are left out. */
+function gitConfig(provider, form) {
+	const config = {};
+	const fields = provider === "github" ? [...CONFIG_FIELDS, ...GITHUB_FIELDS] : CONFIG_FIELDS;
+	for (const field of fields) {
+		const value = asString(form.get(field));
+		if (value) config[field] = value;
+	}
+	return config;
+}
+/** Render the tab again with field errors (HTTP 400). */
+async function formError(c, errors) {
+	return c.html(await renderSettingsPage(c, "notifications", { errors }) ?? "", 400);
+}
+/** Map a failed validation to the form fields it concerns. */
+function fieldErrors(secretField, checked) {
+	if (checked.field === "secret") return { [secretField]: checked.message };
+	if (checked.field === "provider") return { gitProvider: checked.message };
+	const errors = {};
+	for (const issue of checked.issues ?? []) errors[issue.path] ??= issue.message;
+	return Object.keys(errors).length > 0 ? errors : { gitProvider: checked.message };
+}
+/** Validate and store a git channel; the token lands in the encrypted secret column. */
+async function createGitChannel(c, project, provider, form) {
+	const config = gitConfig(provider, form);
+	const checks = config["mode"] === "checks";
+	const token = asString(form.get(checks ? "privateKey" : "token"));
+	const problem = gitChannelProblem(project, provider, config, {
+		token,
+		secretField: checks ? "privateKey" : "token"
+	});
+	if (problem) return await formError(c, problem);
+	await notificationChannelModel().create({
+		projectId: project.id,
+		provider,
+		config,
+		secret: token
+	});
+	flash(c, "Git channel added");
+	return c.html(await renderSettingsPage(c, "notifications") ?? "", 201);
+}
+/** The form errors for a git channel input, or null when it is valid. */
+function gitChannelProblem(project, provider, config, secret) {
+	const { notifiers } = getStore();
+	if (!NotificationChannelModel.isStateKind(notifiers, provider)) return { gitProvider: `Unknown git provider: ${provider}` };
+	const checked = NotificationChannelModel.validateInput(notifiers, provider, config, {
+		projectId: project.id,
+		hasSecret: Boolean(secret.token)
+	});
+	return checked.ok ? null : fieldErrors(secret.secretField, checked);
+}
+export { createGitChannel };
+
+//# sourceMappingURL=settings-git-channel.mjs.map

package/dist/routers/settings-git-channel.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings-git-channel.mjs","names":[],"sources":["../../src/routers/settings-git-channel.ts"],"sourcesContent":["/** Create a git (`state`) channel from the settings form: repository, status prefix and token. */\nimport { NotificationChannelModel } from \"@storyshelf/core/models\";\nimport type { Project } from \"@storyshelf/core/schema\";\nimport type { Context } from \"hono\";\nimport { getStore } from \"../store.ts\";\nimport { flash } from \"./flash.ts\";\nimport { notificationChannelModel } from \"./scoped-models.ts\";\nimport { asString, renderSettingsPage } from \"./settings.handlers.ts\";\n\nconst CONFIG_FIELDS = [\"owner\", \"repo\", \"host\", \"prefix\"] as const;\n/** Only the GitHub provider reads these: how it shows a build and the App that posts check runs. */\nconst GITHUB_FIELDS = [\"mode\", \"appId\", \"installationId\"] as const;\n\n/** The provider config from the form; blank optional fields are left out. */\nfunction gitConfig(provider: string, form: FormData): Record<string, string> {\n  const config: Record<string, string> = {};\n  const fields = provider === \"github\" ? [...CONFIG_FIELDS, ...GITHUB_FIELDS] : CONFIG_FIELDS;\n  for (const field of fields) {\n    const value = asString(form.get(field));\n    if (value) {\n      config[field] = value;\n    }\n  }\n  return config;\n}\n\n/** Render the tab again with field errors (HTTP 400). */\nasync function formError(c: Context, errors: Record<string, string>): Promise<Response> {\n  return c.html((await renderSettingsPage(c, \"notifications\", { errors })) ?? \"\", 400);\n}\n\n/** Map a failed validation to the form fields it concerns. */\nfunction fieldErrors(\n  secretField: \"token\" | \"privateKey\",\n  checked: Extract<ReturnType<typeof NotificationChannelModel.validateInput>, { ok: false }>,\n): Record<string, string> {\n  if (checked.field === \"secret\") {\n    return { [secretField]: checked.message };\n  }\n  if (checked.field === \"provider\") {\n    return { gitProvider: checked.message };\n  }\n  const errors: Record<string, string> = {};\n  for (const issue of checked.issues ?? []) {\n    errors[issue.path] ??= issue.message;\n  }\n  return Object.keys(errors).length > 0 ? errors : { gitProvider: checked.message };\n}\n\n/** Validate and store a git channel; the token lands in the encrypted secret column. */\nexport async function createGitChannel(\n  c: Context,\n  project: Project,\n  provider: string,\n  form: FormData,\n): Promise<Response> {\n  const config = gitConfig(provider, form);\n  // A GitHub App channel keeps its private key where other channels keep a token.\n  const checks = config[\"mode\"] === \"checks\";\n  const token = asString(form.get(checks ? \"privateKey\" : \"token\"));\n  const problem = gitChannelProblem(project, provider, config, {\n    token,\n    secretField: checks ? \"privateKey\" : \"token\",\n  });\n  if (problem) {\n    return await formError(c, problem);\n  }\n  await notificationChannelModel().create({\n    projectId: project.id,\n    provider,\n    config,\n    secret: token,\n  });\n  flash(c, \"Git channel added\");\n  return c.html((await renderSettingsPage(c, \"notifications\")) ?? \"\", 201);\n}\n\n/** The form errors for a git channel input, or null when it is valid. */\nfunction gitChannelProblem(\n  project: Project,\n  provider: string,\n  config: Record<string, string>,\n  secret: { token: string | undefined; secretField: \"token\" | \"privateKey\" },\n): Record<string, string> | null {\n  const { notifiers } = getStore();\n  if (!NotificationChannelModel.isStateKind(notifiers, provider)) {\n    return { gitProvider: `Unknown git provider: ${provider}` };\n  }\n  const checked = NotificationChannelModel.validateInput(notifiers, provider, config, {\n    projectId: project.id,\n    hasSecret: Boolean(secret.token),\n  });\n  return checked.ok ? null : fieldErrors(secret.secretField, checked);\n}\n"],"mappings":";;;;;;;;;;AASA,MAAM,gBAAgB;CAAC;CAAS;CAAQ;CAAQ;AAAQ;;AAExD,MAAM,gBAAgB;CAAC;CAAQ;CAAS;AAAgB;;AAGxD,SAAS,UAAU,UAAkB,MAAwC;CAC3E,MAAM,SAAiC,CAAC;CACxC,MAAM,SAAS,aAAa,WAAW,CAAC,GAAG,eAAe,GAAG,aAAa,IAAI;CAC9E,KAAK,MAAM,SAAS,QAAQ;EAC1B,MAAM,QAAQ,SAAS,KAAK,IAAI,KAAK,CAAC;EACtC,IAAI,OACF,OAAO,SAAS;CAEpB;CACA,OAAO;AACT;;AAGA,eAAe,UAAU,GAAY,QAAmD;CACtF,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,iBAAiB,EAAE,OAAO,CAAC,KAAM,IAAI,GAAG;AACrF;;AAGA,SAAS,YACP,aACA,SACwB;CACxB,IAAI,QAAQ,UAAU,UACpB,OAAO,GAAG,cAAc,QAAQ,QAAQ;CAE1C,IAAI,QAAQ,UAAU,YACpB,OAAO,EAAE,aAAa,QAAQ,QAAQ;CAExC,MAAM,SAAiC,CAAC;CACxC,KAAK,MAAM,SAAS,QAAQ,UAAU,CAAC,GACrC,OAAO,MAAM,UAAU,MAAM;CAE/B,OAAO,OAAO,KAAK,MAAM,CAAC,CAAC,SAAS,IAAI,SAAS,EAAE,aAAa,QAAQ,QAAQ;AAClF;;AAGA,eAAsB,iBACpB,GACA,SACA,UACA,MACmB;CACnB,MAAM,SAAS,UAAU,UAAU,IAAI;CAEvC,MAAM,SAAS,OAAO,YAAY;CAClC,MAAM,QAAQ,SAAS,KAAK,IAAI,SAAS,eAAe,OAAO,CAAC;CAChE,MAAM,UAAU,kBAAkB,SAAS,UAAU,QAAQ;EAC3D;EACA,aAAa,SAAS,eAAe;CACvC,CAAC;CACD,IAAI,SACF,OAAO,MAAM,UAAU,GAAG,OAAO;CAEnC,MAAM,yBAAyB,CAAC,CAAC,OAAO;EACtC,WAAW,QAAQ;EACnB;EACA;EACA,QAAQ;CACV,CAAC;CACD,MAAM,GAAG,mBAAmB;CAC5B,OAAO,EAAE,KAAM,MAAM,mBAAmB,GAAG,eAAe,KAAM,IAAI,GAAG;AACzE;;AAGA,SAAS,kBACP,SACA,UACA,QACA,QAC+B;CAC/B,MAAM,EAAE,cAAc,SAAS;CAC/B,IAAI,CAAC,yBAAyB,YAAY,WAAW,QAAQ,GAC3D,OAAO,EAAE,aAAa,yBAAyB,WAAW;CAE5D,MAAM,UAAU,yBAAyB,cAAc,WAAW,UAAU,QAAQ;EAClF,WAAW,QAAQ;EACnB,WAAW,QAAQ,OAAO,KAAK;CACjC,CAAC;CACD,OAAO,QAAQ,KAAK,OAAO,YAAY,OAAO,aAAa,OAAO;AACpE"}

package/dist/routers/settings-labels.mjs

@@ -6,11 +6,12 @@ import { hxRedirect } from "./htmx.mjs";
 import { flash } from "./flash.mjs";
 import { asString, findProject, renderSettingsPage } from "./settings.handlers.mjs";
 import { LabelModel } from "@storyshelf/core/models";
-//#region src/routers/settings-labels.ts
+// src/routers/settings-labels.ts
 /** Label-type settings (create custom types, delete removable ones). */
 function registerLabelSettings(app) {
-	app.get("/projects/:slug/settings/labels", async (c) => c.html(await renderSettingsPage(c, "labels")));
+	app.get("/projects/:slug/settings/labels", async (c) => c.html(await renderSettingsPage(c, "labels", { editKey: c.req.query("edit") })));
 	app.post("/projects/:slug/settings/labels", handleCreateLabelType);
+	app.post("/projects/:slug/settings/labels/:key", handleUpdateLabelType);
 	app.post("/projects/:slug/settings/labels/:key/delete", handleDeleteLabelType);
 }
 async function handleCreateLabelType(c) {
@@ -36,6 +37,31 @@ async function persistLabelType(c, projectId, projectSlug, key, labelName, linkT
 		return c.html(await renderSettingsPage(c, "labels", { globalError: message }) ?? "", 400);
 	}
 }
+async function handleUpdateLabelType(c) {
+	const project = await findProject(c.req.param("slug") ?? "");
+	const key = c.req.param("key") ?? "";
+	const form = await c.req.formData();
+	const name = asString(form.get("labelName"));
+	if (!name) return c.html(await renderSettingsPage(c, "labels", {
+		globalError: "Name is required",
+		editKey: key
+	}) ?? "", 400);
+	const template = asString(form.get("linkTemplate"));
+	return await persistLabelUpdate(c, project, key, {
+		name,
+		linkTemplate: template === void 0 || template === "" ? null : template
+	});
+}
+async function persistLabelUpdate(c, project, key, input) {
+	try {
+		if (!await new LabelModel(getStore().db).updateType(project.id, key, input)) throw new Error("Label type not found");
+	} catch (error) {
+		const message = error instanceof Error ? error.message : "Failed to update label";
+		return c.html(await renderSettingsPage(c, "labels", { globalError: message }) ?? "", 400);
+	}
+	flash(c, "Label type saved");
+	return hxRedirect(c, `/projects/${project.slug}/settings/labels`);
+}
 async function handleDeleteLabelType(c) {
 	const project = await findProject(c.req.param("slug") ?? "");
 	try {
@@ -46,7 +72,6 @@ async function handleDeleteLabelType(c) {
 	flash(c, "Label type deleted");
 	return hxRedirect(c, `/projects/${project.slug}/settings/labels`);
 }
-//#endregion
 export { registerLabelSettings };
 
 //# sourceMappingURL=settings-labels.mjs.map