added status restriction

app/Http/Controllers/ProjectBoardSettingsController.php

@@ -8,6 +8,7 @@ use App\Http\Requests\StoreBoardColumnRequest;
 use App\Http\Requests\StoreTicketStatusRequest;
 use App\Http\Requests\UpdateBoardColumnRequest;
 use App\Http\Requests\UpdateTicketStatusRequest;
+use App\Http\Requests\UpdateTicketStatusTransitionsRequest;
 use App\Models\BoardColumn;
 use App\Models\Project;
 use App\Models\TicketStatus;
@@ -42,6 +43,9 @@ class ProjectBoardSettingsController extends Controller
                 ->get(),
             'project' => $project,
             'status' => session('status'),
+            'ticketStatuses' => $project->ticketStatuses()
+                ->with(['allowedTargetStatuses.boardColumn', 'boardColumn'])
+                ->get(),
         ]);
     }
 
@@ -217,6 +221,28 @@ class ProjectBoardSettingsController extends Controller
             ->with('status', "{$deletedName} was removed from {$contextLabel}.");
     }
 
+    public function updateStatusTransitions(
+        UpdateTicketStatusTransitionsRequest $request,
+        Project $project,
+        TicketStatus $ticketStatus,
+    ): RedirectResponse {
+        abort_unless(
+            $this->permissionService->allows($request->user(), Permission::ProjectAdmin, $project),
+            403,
+        );
+        $validated = $request->validated();
+        $allowedTicketStatusIds = collect(Arr::get($validated, 'allowed_ticket_status_ids', []))
+            ->map(fn (int|string $ticketStatusId): int => (int) $ticketStatusId)
+            ->unique()
+            ->values()
+            ->all();
+
+        $ticketStatus->allowedTargetStatuses()->sync($allowedTicketStatusIds);
+
+        return to_route('projects.settings.board', $project)
+            ->with('status', "{$ticketStatus->name} move targets were updated.");
+    }
+
     private function normalizeColumnPositions(Project $project): void
     {
         $this->persistOrderedColumns(