Function requireChannelPrivacy

server/src/routes/admin/settings.ts:52–78

* Write-time privacy check wrapper for the admin-settings PUT routes. * Centralizes the "fail-closed on cannot_verify, emit a distinct * message vs wrong_privacy" shape so each endpoint can stay one line. * * Skips the check entirely when Slack isn't configured (local dev * without ADDIE_BOT_TO

(
  res: Response,
  channelId: string,
  expected: 'private' | 'public',
  contextNoun: string,
)

 * directly (and sends it) when the check fails. Caller just returns.
 */
async function requireChannelPrivacy(
  res: Response,
  channelId: string,
  expected: 'private' | 'public',
  contextNoun: string,
): Promise<Response | null> {
  if (!isSlackConfigured()) return null;
  const check: ChannelPrivacyCheckResult = await verifyChannelPrivacyForWrite(
    channelId,
    expected,
  );
  if (check.ok) return null;
  if (check.reason === 'cannot_verify') {
    return res.status(400).json({
      error: 'Could not verify channel',
      message: `Could not verify the channel for ${contextNoun}. Invite @Addie to the channel in Slack and save again. If that doesn't work, an AAO engineer may need to re-grant the bot's channel permissions.`,
    });
  }
  // wrong_privacy
  return res.status(400).json({
    error: 'Invalid channel',
    message:
      expected === 'private'
        ? `Only private channels are allowed for ${contextNoun}`
        : `Announcement channel must be public — announcements are meant for broad visibility`,
  });
}

export function createAdminSettingsRouter(): Router {
  const router = Router();