server: skip Postgres-backed tests when no database is configured

Without ARTEX_PG_DSN and without a config file, go test ./server/ failed
44 tests with "no database config found" instead of skipping them. The
tests go through NewManager and t.Fatal on its error: 35 through the
shared fixture trafficEvidenceServer (directly, or through
verificationFixture and newNotifyFixture), 2 through ingestServer, and 7
call NewManager themselves. The 7 already carry a skip on m.pg == nil,
but it sits after the t.Fatal and is never reached.

Add skipWithoutDSN, which calls db.DSN() and skips with the message the
db package and assembly_test.go already use ("no database config (%v) —
skipping"), and call it before NewManager at those 9 sites.

Nothing changes when a database is configured: db.DSN() succeeds, the
helper returns, and a NewManager error (for example an unreachable
Postgres) still fails the test.

server/cost_ledger_test.go

@@ -9,6 +9,7 @@ import (
 // The cost ledger: profile prices (EUR per 1M tokens) turn token buckets into
 // EUR on the usage aggregation; unpriced profiles stay nil.
 func TestCostLedgerEurOnUsage(t *testing.T) {
+	skipWithoutDSN(t)
 	m, err := NewManager(t.TempDir(), "")
 	if err != nil {
 		t.Fatal(err)

server/finding_traffic_test.go

@@ -22,6 +22,7 @@ import (
 
 func trafficEvidenceServer(t *testing.T) (*Server, *db.RecordedFinding, func(string, string, string) *httptest.ResponseRecorder) {
 	t.Helper()
+	skipWithoutDSN(t)
 	m, err := NewManager(t.TempDir(), "")
 	if err != nil {
 		t.Fatal(err)

server/llm_ollama_test.go

@@ -103,6 +103,7 @@ func TestOllamaProviderWiresOpenAIProtocol(t *testing.T) {
 // loadProfileConfig accepts it, the task chain validates it, the failover pool
 // includes it, and the connection test completes against a fake Ollama.
 func TestOllamaKeylessProfileLifecycle(t *testing.T) {
+	skipWithoutDSN(t)
 	m, err := NewManager(t.TempDir(), "")
 	if err != nil {
 		t.Fatal(err)
@@ -180,6 +181,7 @@ func TestOllamaKeylessProfileLifecycle(t *testing.T) {
 // Model listing for an Ollama server works without an API key and tolerates a
 // base URL with or without the /v1 suffix.
 func TestOllamaListModels(t *testing.T) {
+	skipWithoutDSN(t)
 	var calls atomic.Value // []string paths
 	fake := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
 		w.Header().Set("Content-Type", "application/json")

server/llm_test_fallback_test.go

@@ -18,6 +18,7 @@ import (
 // assigned raw, so a key saved with surrounding whitespace ran fine in
 // conversations but 401'd the connection test.
 func TestLLMTestStoredKeyFallbackIsTrimmed(t *testing.T) {
+	skipWithoutDSN(t)
 	m, err := NewManager(t.TempDir(), "")
 	if err != nil {
 		t.Fatal(err)
@@ -97,6 +98,7 @@ func TestLLMTestFallbackMatchesRuntimeNormalization(t *testing.T) {
 // (the list-view test button) fills provider/model/base_url from the row, so
 // the key lands on the configured host instead of the canonical default one.
 func TestLLMTestStoredProfileUsesProfileEndpoint(t *testing.T) {
+	skipWithoutDSN(t)
 	m, err := NewManager(t.TempDir(), "")
 	if err != nil {
 		t.Fatal(err)

server/planner_quiet_test.go

@@ -10,6 +10,7 @@ import (
 // open-goal fingerprint is unchanged since the last completed round AND active
 // work exists (open or running intents). Every other combination plans.
 func TestPlannerQuietSkipEdge(t *testing.T) {
+	skipWithoutDSN(t)
 	m, err := NewManager(t.TempDir(), "")
 	if err != nil {
 		t.Fatal(err)
@@ -78,6 +79,7 @@ func TestPlannerQuietSkipEdge(t *testing.T) {
 // The quiet-mode switch is editable mid-run (#86): PATCHing plan_quiet_mode
 // updates both the stored row and the live Task the engine reads per round.
 func TestPlannerQuietModeToggleMidRun(t *testing.T) {
+	skipWithoutDSN(t)
 	m, err := NewManager(t.TempDir(), "")
 	if err != nil {
 		t.Fatal(err)

server/testmain_test.go

@@ -32,3 +32,13 @@ func TestMain(m *testing.M) {
 	defer conn.Exec(`SELECT pg_advisory_unlock(7337741002)`) //nolint:errcheck
 	os.Exit(m.Run())
 }
+
+// skipWithoutDSN skips the test when neither ARTEX_PG_DSN nor a config file
+// supplies a database, so fixtures that t.Fatal on a NewManager error skip
+// instead of failing. A configured database that cannot be reached still fails.
+func skipWithoutDSN(t *testing.T) {
+	t.Helper()
+	if _, _, err := db.DSN(); err != nil {
+		t.Skipf("no database config (%v) — skipping", err)
+	}
+}

server/traffic_ingest_test.go

@@ -15,6 +15,7 @@ import (
 // trafficEvidenceServer but without the finding plumbing.
 func ingestServer(t *testing.T) (*Server, func(method, path, body string) *httptest.ResponseRecorder) {
 	t.Helper()
+	skipWithoutDSN(t)
 	m, err := NewManager(t.TempDir(), "")
 	if err != nil {
 		t.Fatal(err)

web/src/app/(main)/system/notify/page.tsx

@@ -32,18 +32,6 @@ import { ConfigField, FilterSummary } from "./_components/channel-form";
 import { DeliveryList } from "./_components/delivery-list";
 import { formatBacklog, StatTile } from "./_components/stat-tile";
 
-// Upper bounds of the two message render limits. They mirror the backend, which answers 400 outside [0, max].
-const SUMMARY_LIMIT_MAX = 4000;
-const ASSETS_LIMIT_MAX = 50;
-
-// limitInvalid reports whether a limit input holds anything other than a whole number in [0, max].
-// Empty is valid: it is not submitted, so the stored value stays as it is.
-function limitInvalid(raw: string, max: number): boolean {
-  if (raw.trim() === "") return false;
-  const n = Number(raw);
-  return !Number.isInteger(n) || n < 0 || n > max;
-}
-
 // This page only orchestrates: loading data, holding form state, calling the API.
 // Field definitions and parsing live in _components/channel-fields.ts, controls and the filter summary in
 // _components/channel-form.tsx, and the delivery log in _components/delivery-list.tsx —
@@ -62,8 +50,6 @@ export default function NotifyPage() {
   const [globalSaving, setGlobalSaving] = React.useState(false);
   const [baseURL, setBaseURL] = React.useState("");
   const [digestMin, setDigestMin] = React.useState("");
-  const [summaryMax, setSummaryMax] = React.useState("");
-  const [assetsMax, setAssetsMax] = React.useState("");
 
   const load = React.useCallback(() => {
     api
@@ -74,14 +60,6 @@ export default function NotifyPage() {
         setDigestMin(m.digest_interval_min);
       })
       .catch((e) => toast.error("Failed to load notification settings: " + (e as Error).message));
-    // The two render limits are not part of /notify/meta; they are only exposed through /api/settings.
-    api
-      .settings()
-      .then((s) => {
-        setSummaryMax(String(s.notify_summary_max_runes ?? ""));
-        setAssetsMax(String(s.notify_assets_max_shown ?? ""));
-      })
-      .catch((e) => toast.error(`Failed to load message limits: ${(e as Error).message}`));
     // Channel-list load failures must be reported: failing silently would render as "no channels at all",
     // and users would think their config was lost — scarier than a straight-up error.
     api
@@ -266,23 +244,11 @@ export default function NotifyPage() {
   }
 
   async function saveGlobal() {
-    // Checked before anything is sent: the backend applies the fields of one PUT in order,
-    // so a 400 on a limit would leave the URL and digest interval already saved.
-    if (limitInvalid(summaryMax, SUMMARY_LIMIT_MAX)) {
-      toast.error(`Summary length must be a whole number between 0 and ${SUMMARY_LIMIT_MAX}`);
-      return;
-    }
-    if (limitInvalid(assetsMax, ASSETS_LIMIT_MAX)) {
-      toast.error(`Assets listed must be a whole number between 0 and ${ASSETS_LIMIT_MAX}`);
-      return;
-    }
     setGlobalSaving(true);
     try {
       const patch: Record<string, unknown> = { notify_public_base_url: baseURL.trim() };
       const n = Number(digestMin);
       if (Number.isFinite(n) && n > 0) patch.notify_digest_interval_min = n;
-      if (summaryMax.trim() !== "") patch.notify_summary_max_runes = Number(summaryMax);
-      if (assetsMax.trim() !== "") patch.notify_assets_max_shown = Number(assetsMax);
       await api.setSettings(patch);
       toast.success("Saved");
       load();
@@ -365,40 +331,6 @@ export default function NotifyPage() {
             />
             <p className="text-muted-foreground text-xs">Only applies to channels in "digest" mode.</p>
           </div>
-          <div className="grid gap-2">
-            <Label htmlFor="n-summary-max">Summary length (characters)</Label>
-            <Input
-              id="n-summary-max"
-              type="number"
-              min={0}
-              max={SUMMARY_LIMIT_MAX}
-              step={1}
-              placeholder="120"
-              value={summaryMax}
-              onChange={(e) => setSummaryMax(e.target.value)}
-              aria-invalid={limitInvalid(summaryMax, SUMMARY_LIMIT_MAX)}
-            />
-            <p className="text-muted-foreground text-xs">
-              Longest finding summary shown in a message, 0–{SUMMARY_LIMIT_MAX}. 0 = no truncation.
-            </p>
-          </div>
-          <div className="grid gap-2">
-            <Label htmlFor="n-assets-max">Assets listed per finding</Label>
-            <Input
-              id="n-assets-max"
-              type="number"
-              min={0}
-              max={ASSETS_LIMIT_MAX}
-              step={1}
-              placeholder="3"
-              value={assetsMax}
-              onChange={(e) => setAssetsMax(e.target.value)}
-              aria-invalid={limitInvalid(assetsMax, ASSETS_LIMIT_MAX)}
-            />
-            <p className="text-muted-foreground text-xs">
-              Most asset names listed for a finding, 0–{ASSETS_LIMIT_MAX}. 0 = no truncation (all assets listed).
-            </p>
-          </div>
           <div className="sm:col-span-2">
             <Button onClick={saveGlobal} disabled={globalSaving}>
               Save global settings

web/src/lib/types.ts

@@ -957,9 +957,6 @@ export interface Settings {
   notify_enabled?: boolean; // master push switch, on by default; one-click kill switch for maintenance windows
   notify_public_base_url?: string; // external base URL for vulnerability detail links; empty = messages carry no link
   notify_digest_interval_min?: number; // digest mode period (minutes), default 30
-  // Render limits of IM messages; 0 = no truncation. The backend answers 400 outside the bounds.
-  notify_summary_max_runes?: number; // summary characters per finding, 0-4000, default 120
-  notify_assets_max_shown?: number; // asset names listed per finding, 0-50, default 3
 }
 
 // ---- Vulnerability IM push ----