settings

type Cipher struct {
	// contains filtered or unexported fields
}

type Credentials struct {
	GitHubToken     string
	GitHubUsername  string
	ForgejoURL      string
	ForgejoToken    string
	ForgejoUsername string
	// WebhookToken identifies this user in a webhook URL
	// (/api/webhooks/{provider}/{token}); WebhookSecret is what's pasted
	// into the forge's own webhook "Secret" field and never appears in
	// the URL, so a leaked log line alone can't forge a valid signature.
	// Neither is a third-party credential the way the forge tokens above
	// are, so neither is encrypted at rest — see EnsureWebhookCredentials.
	WebhookToken  string
	WebhookSecret string
	// RenovateRebaseLabel is the label Renovate's own rebase/retry
	// trigger listens for on a given repo (Renovate's own rebaseLabel
	// config option — "rebase" is Renovate's own default, but this is
	// genuinely per-repo configurable, so it's a user-set override
	// rather than a hardcoded constant). Empty means "use Renovate's own
	// default" — see renovateRebaseLabelOrDefault.
	RenovateRebaseLabel string
	// RenovateAuthors are the logins that are Renovate on the user's forges.
	// On GitHub the App's own slugs are fixed and built in; a Forgejo or
	// GitLab instance has no App, so Renovate runs as an ordinary account
	// there, named whatever the instance chose. Only the user knows it, so
	// nothing is assumed (#1062). Empty means none beyond the built-in slugs.
	RenovateAuthors []string
	// Theme is "light", "dark", or "" (system — the default, matching
	// the pre-paint theme script's cookie-unset behavior). Set only from Settings
	// (#352: no header toggle anywhere else) and read on every page load
	// via the lightweight GET /api/settings/theme, which doesn't
	// provision webhook credentials just to check one field.
	Theme string
	// Timezone is an IANA name such as "Europe/Amsterdam", or "" for the
	// browser's own zone (the default). It exists for browsers that report UTC
	// to every page, such as Firefox with fingerprint resistance (#996). Set
	// from Settings and read on every page load via GET /api/settings/timezone.
	Timezone  string
	UpdatedAt time.Time
	// GitHubAppInstallationID identifies which installation of the
	// alrayyes-automation GitHub App (#620) this user has connected — 0
	// means none. Not a secret the way GitHubToken is (it's meaningless
	// without the App's own private key, which never leaves server-wide
	// config), so it isn't run through Store's AES-256-GCM cipher and is
	// stored as a plain integer column. Wins over GitHubToken when both
	// are set and the server has an App configured — see
	// cmd/forge-dashboard's buildSourcesForUser.
	GitHubAppInstallationID int64
}

type IgnoreScope struct {
	PRs    bool
	Issues bool
}

type Store struct {
	// contains filtered or unexported fields
}