@things-factory/notification 10.1.218 → 10.1.223

package/dist-server/service/notice-channel/notice-channel-rules.js

@@ -0,0 +1,60 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WEBHOOK_NOT_HTTPS = void 0;
+exports.secretState = secretState;
+exports.noticeChannelState = noticeChannelState;
+exports.noticeChannelWrites = noticeChannelWrites;
+/*
+ * The notice channels as the Settings screen sees them (ADR-0164): whether mail is on, and whether each Teams webhook
+ * is set. A webhook address is a secret - whoever holds it can post - so it goes in and never comes back; the screen
+ * learns only that it is set and its host.
+ */
+const shell_1 = require("@things-factory/shell");
+const notice_channels_js_1 = require("../../controllers/notice/notice-channels.js");
+/** Set or not, and the host - enough to tell which flow it is without handing out the address. */
+function secretState(value) {
+    const raw = String(value ?? '').trim();
+    if (!raw)
+        return { set: false };
+    try {
+        return { set: true, host: new URL(raw).host };
+    }
+    catch {
+        return { set: true };
+    }
+}
+function noticeChannelState(attributes) {
+    return {
+        email: String(attributes?.[notice_channels_js_1.NOTICE_EMAIL] ?? '').trim().toLowerCase() === 'on',
+        teamsChannel: secretState(attributes?.[notice_channels_js_1.NOTICE_TEAMS_CHANNEL])
+    };
+}
+exports.WEBHOOK_NOT_HTTPS = 'notice-webhook-not-https';
+/**
+ * The domain attributes a patch writes: a value to keep, or null to remove the domain's own. A webhook that is not an
+ * https address is refused by name - the channels would ignore it, and the person would think it was set.
+ */
+function noticeChannelWrites(patch) {
+    const writes = [];
+    if (typeof patch.email === 'boolean')
+        writes.push({ name: notice_channels_js_1.NOTICE_EMAIL, value: patch.email ? 'on' : 'off' });
+    for (const [field, name] of [['teamsChannelWebhook', notice_channels_js_1.NOTICE_TEAMS_CHANNEL]]) {
+        if (patch[field] === undefined)
+            continue;
+        const value = String(patch[field] ?? '').trim();
+        if (!value) {
+            writes.push({ name, value: null });
+            continue;
+        }
+        let https = false;
+        try {
+            https = new URL(value).protocol === 'https:';
+        }
+        catch { }
+        if (!https)
+            throw new shell_1.Refusal(exports.WEBHOOK_NOT_HTTPS, { field }, 'A Teams webhook address starts with https://');
+        writes.push({ name, value });
+    }
+    return writes;
+}
+//# sourceMappingURL=notice-channel-rules.js.map

package/dist-server/service/notice-channel/notice-channel-rules.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"notice-channel-rules.js","sourceRoot":"","sources":["../../../server/service/notice-channel/notice-channel-rules.ts"],"names":[],"mappings":";;;AAgBA,kCAQC;AAED,gDAKC;AAQD,kDAuBC;AA9DD;;;;GAIG;AACH,iDAA+C;AAE/C,oFAAgG;AAQhG,kGAAkG;AAClG,SAAgB,WAAW,CAAC,KAAgC;IAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;IACtC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAA;IAC/B,IAAI,CAAC;QACH,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAA;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,CAAA;IACtB,CAAC;AACH,CAAC;AAED,SAAgB,kBAAkB,CAAC,UAAiE;IAClG,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC,iCAAY,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,IAAI;QAC7E,YAAY,EAAE,WAAW,CAAC,UAAU,EAAE,CAAC,yCAAoB,CAAC,CAAC;KAC9D,CAAA;AACH,CAAC;AAEY,QAAA,iBAAiB,GAAG,0BAA0B,CAAA;AAE3D;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,KAAyB;IAC3D,MAAM,MAAM,GAA6C,EAAE,CAAA;IAE3D,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,iCAAY,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAA;IAE5G,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,CAAC,CAAC,qBAAqB,EAAE,yCAAoB,CAAC,CAAU,EAAE,CAAC;QACrF,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,SAAS;YAAE,SAAQ;QACxC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;YAClC,SAAQ;QACV,CAAC;QAED,IAAI,KAAK,GAAG,KAAK,CAAA;QACjB,IAAI,CAAC;YACH,KAAK,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,QAAQ,KAAK,QAAQ,CAAA;QAC9C,CAAC;QAAC,MAAM,CAAC,CAAA,CAAC;QACV,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,eAAO,CAAC,yBAAiB,EAAE,EAAE,KAAK,EAAE,EAAE,8CAA8C,CAAC,CAAA;QAE3G,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IAC9B,CAAC;IAED,OAAO,MAAM,CAAA;AACf,CAAC","sourcesContent":["/*\n * The notice channels as the Settings screen sees them (ADR-0164): whether mail is on, and whether each Teams webhook\n * is set. A webhook address is a secret - whoever holds it can post - so it goes in and never comes back; the screen\n * learns only that it is set and its host.\n */\nimport { Refusal } from '@things-factory/shell'\n\nimport { NOTICE_EMAIL, NOTICE_TEAMS_CHANNEL } from '../../controllers/notice/notice-channels.js'\n\nexport type SecretState = { set: boolean; host?: string }\nexport type NoticeChannelState = { email: boolean; teamsChannel: SecretState }\n\n/** What may change - a field left out stays as it is; an empty webhook clears it. */\nexport type NoticeChannelPatch = { email?: boolean | null; teamsChannelWebhook?: string | null }\n\n/** Set or not, and the host - enough to tell which flow it is without handing out the address. */\nexport function secretState(value: string | null | undefined): SecretState {\n  const raw = String(value ?? '').trim()\n  if (!raw) return { set: false }\n  try {\n    return { set: true, host: new URL(raw).host }\n  } catch {\n    return { set: true }\n  }\n}\n\nexport function noticeChannelState(attributes: Record<string, string | undefined> | null | undefined): NoticeChannelState {\n  return {\n    email: String(attributes?.[NOTICE_EMAIL] ?? '').trim().toLowerCase() === 'on',\n    teamsChannel: secretState(attributes?.[NOTICE_TEAMS_CHANNEL])\n  }\n}\n\nexport const WEBHOOK_NOT_HTTPS = 'notice-webhook-not-https'\n\n/**\n * The domain attributes a patch writes: a value to keep, or null to remove the domain's own. A webhook that is not an\n * https address is refused by name - the channels would ignore it, and the person would think it was set.\n */\nexport function noticeChannelWrites(patch: NoticeChannelPatch): { name: string; value: string | null }[] {\n  const writes: { name: string; value: string | null }[] = []\n\n  if (typeof patch.email === 'boolean') writes.push({ name: NOTICE_EMAIL, value: patch.email ? 'on' : 'off' })\n\n  for (const [field, name] of [['teamsChannelWebhook', NOTICE_TEAMS_CHANNEL]] as const) {\n    if (patch[field] === undefined) continue\n    const value = String(patch[field] ?? '').trim()\n    if (!value) {\n      writes.push({ name, value: null })\n      continue\n    }\n\n    let https = false\n    try {\n      https = new URL(value).protocol === 'https:'\n    } catch {}\n    if (!https) throw new Refusal(WEBHOOK_NOT_HTTPS, { field }, 'A Teams webhook address starts with https://')\n\n    writes.push({ name, value })\n  }\n\n  return writes\n}\n"]}