@aspruyt/xfg 3.9.12 → 3.9.13

package/dist/cli/settings-command.js

@@ -1,276 +1,23 @@
-import { resolve, join } from "node:path";
+import { resolve } from "node:path";
 import { existsSync } from "node:fs";
-import chalk from "chalk";
 import { loadRawConfig, normalizeConfig } from "../config/index.js";
 import { validateForSettings } from "../config/validator.js";
-import { parseGitUrl, getRepoDisplayName, isGitHubRepo, } from "../shared/repo-detector.js";
 import { hasGitHubAppCredentials, GitHubAppTokenManager, } from "../vcs/index.js";
 import { logger } from "../shared/logger.js";
-import { generateWorkspaceName } from "../shared/workspace-utils.js";
-import { buildErrorResult } from "../output/summary-utils.js";
-import { getManagedRulesets } from "../sync/manifest.js";
 import { formatSettingsReportCLI } from "../output/settings-report.js";
 import { writeUnifiedSummary } from "../output/unified-summary.js";
-import { buildSettingsReport, } from "./settings-report-builder.js";
-import { defaultProcessorFactory, defaultRulesetProcessorFactory, defaultRepoSettingsProcessorFactory, } from "./types.js";
-import { RepoLifecycleManager, runLifecycleCheck, } from "../lifecycle/index.js";
+import { buildSettingsReport } from "./settings-report-builder.js";
+import { defaultProcessorFactory, defaultRulesetProcessorFactory, defaultRepoSettingsProcessorFactory, defaultLabelsProcessorFactory, } from "./types.js";
+import { RepoLifecycleManager, } from "../lifecycle/index.js";
+import { ResultsCollector } from "./settings/results-collector.js";
+import { runLifecycleChecks } from "./settings/lifecycle-checks.js";
+import { processRulesets } from "./settings/process-rulesets.js";
+import { processRepoSettings } from "./settings/process-repo-settings.js";
+import { processLabels } from "./settings/process-labels.js";
 /**
- * Collects processing results for the SettingsReport.
- * Provides a centralized way to track results across rulesets and repo settings.
+ * Run the settings command - manages GitHub Rulesets, repo settings, and labels.
  */
-class ResultsCollector {
-    results = [];
-    getOrCreate(repoName) {
-        let result = this.results.find((r) => r.repoName === repoName);
-        if (!result) {
-            result = { repoName };
-            this.results.push(result);
-        }
-        return result;
-    }
-    appendError(repoName, error) {
-        const existing = this.getOrCreate(repoName);
-        const errorMsg = error instanceof Error ? error.message : String(error);
-        if (existing.error) {
-            existing.error += `; ${errorMsg}`;
-        }
-        else {
-            existing.error = errorMsg;
-        }
-    }
-    getAll() {
-        return this.results;
-    }
-}
-/**
- * Run lifecycle checks for all unique repos before processing.
- * Returns a Set of git URLs to skip (lifecycle errors or repos that would be created in dry-run).
- */
-async function runLifecycleChecks(allRepos, config, options, lifecycleManager, results, collector, tokenManager) {
-    const checked = new Set();
-    const skippedRepos = new Set();
-    for (let i = 0; i < allRepos.length; i++) {
-        const repoConfig = allRepos[i];
-        if (checked.has(repoConfig.git)) {
-            continue;
-        }
-        checked.add(repoConfig.git);
-        let repoInfo;
-        try {
-            repoInfo = parseGitUrl(repoConfig.git, {
-                githubHosts: config.githubHosts,
-            });
-        }
-        catch {
-            // URL parsing errors are handled in individual processors
-            continue;
-        }
-        const repoName = getRepoDisplayName(repoInfo);
-        // Resolve auth token for lifecycle gh commands
-        let lifecycleToken;
-        if (isGitHubRepo(repoInfo)) {
-            try {
-                lifecycleToken =
-                    (await tokenManager?.getTokenForRepo(repoInfo)) ??
-                        process.env.GH_TOKEN;
-            }
-            catch {
-                lifecycleToken = process.env.GH_TOKEN;
-            }
-        }
-        try {
-            const { outputLines, lifecycleResult } = await runLifecycleCheck(repoConfig, repoInfo, i, {
-                dryRun: options.dryRun ?? false,
-                workDir: options.workDir,
-                githubHosts: config.githubHosts,
-                token: lifecycleToken,
-            }, lifecycleManager, config.settings?.repo);
-            for (const line of outputLines) {
-                logger.info(line);
-            }
-            // In dry-run, skip processing repos that don't exist yet
-            if (options.dryRun && lifecycleResult.action !== "existed") {
-                skippedRepos.add(repoConfig.git);
-            }
-        }
-        catch (error) {
-            logger.error(i + 1, repoName, `Lifecycle error: ${error instanceof Error ? error.message : String(error)}`);
-            results.push(buildErrorResult(repoName, error));
-            collector.appendError(repoName, error);
-            skippedRepos.add(repoConfig.git);
-        }
-    }
-    return skippedRepos;
-}
-/**
- * Process rulesets for all configured repositories.
- */
-async function processRulesets(repos, config, options, processor, repoProcessor, results, collector, lifecycleSkipped) {
-    for (let i = 0; i < repos.length; i++) {
-        const repoConfig = repos[i];
-        if (lifecycleSkipped.has(repoConfig.git)) {
-            continue;
-        }
-        let repoInfo;
-        try {
-            repoInfo = parseGitUrl(repoConfig.git, {
-                githubHosts: config.githubHosts,
-            });
-        }
-        catch (error) {
-            logger.error(i + 1, repoConfig.git, String(error));
-            results.push(buildErrorResult(repoConfig.git, error));
-            collector.appendError(repoConfig.git, error);
-            continue;
-        }
-        const repoName = getRepoDisplayName(repoInfo);
-        if (!isGitHubRepo(repoInfo)) {
-            logger.skip(i + 1, repoName, "GitHub Rulesets only supported for GitHub repos");
-            continue;
-        }
-        const managedRulesets = getManagedRulesets(null, config.id);
-        try {
-            logger.progress(i + 1, repoName, "Processing rulesets...");
-            const result = await processor.process(repoConfig, repoInfo, {
-                configId: config.id,
-                dryRun: options.dryRun,
-                managedRulesets,
-                noDelete: options.noDelete,
-            });
-            if (result.planOutput && result.planOutput.lines.length > 0) {
-                logger.info("");
-                logger.info(chalk.bold(`${repoName} - Rulesets:`));
-                for (const line of result.planOutput.lines) {
-                    logger.info(line);
-                }
-            }
-            if (result.skipped) {
-                logger.skip(i + 1, repoName, result.message);
-            }
-            else if (result.success) {
-                logger.success(i + 1, repoName, result.message);
-                if (result.manifestUpdate &&
-                    result.manifestUpdate.rulesets.length > 0) {
-                    const workDir = resolve(join(options.workDir ?? "./tmp", generateWorkspaceName(i)));
-                    logger.progress(i + 1, repoName, "Updating manifest...");
-                    const manifestResult = await repoProcessor.updateManifestOnly(repoInfo, repoConfig, {
-                        branchName: "chore/sync-rulesets",
-                        workDir,
-                        configId: config.id,
-                        dryRun: options.dryRun,
-                        retries: options.retries,
-                    }, result.manifestUpdate);
-                    if (!manifestResult.success && !manifestResult.skipped) {
-                        logger.info(`Warning: Failed to update manifest for ${repoName}: ${manifestResult.message}`);
-                    }
-                }
-            }
-            else {
-                logger.error(i + 1, repoName, result.message);
-                collector.appendError(repoName, result.message);
-            }
-            results.push({
-                repoName,
-                status: result.skipped
-                    ? "skipped"
-                    : result.success
-                        ? "succeeded"
-                        : "failed",
-                message: result.message,
-                rulesetPlanDetails: result.planOutput?.entries,
-            });
-            if (!result.skipped) {
-                collector.getOrCreate(repoName).rulesetResult = result;
-            }
-        }
-        catch (error) {
-            logger.error(i + 1, repoName, String(error));
-            results.push(buildErrorResult(repoName, error));
-            collector.appendError(repoName, error);
-        }
-    }
-}
-/**
- * Process repo settings for all configured repositories.
- */
-async function processRepoSettings(repos, config, options, processorFactory, results, collector, lifecycleSkipped, indexOffset) {
-    if (repos.length === 0) {
-        return;
-    }
-    const processor = processorFactory();
-    console.log(`\nProcessing repo settings for ${repos.length} repositories\n`);
-    for (let i = 0; i < repos.length; i++) {
-        const repoConfig = repos[i];
-        const current = indexOffset + i + 1;
-        if (lifecycleSkipped.has(repoConfig.git)) {
-            continue;
-        }
-        let repoInfo;
-        try {
-            repoInfo = parseGitUrl(repoConfig.git, {
-                githubHosts: config.githubHosts,
-            });
-        }
-        catch (error) {
-            logger.error(current, repoConfig.git, String(error));
-            collector.appendError(repoConfig.git, error);
-            continue;
-        }
-        const repoName = getRepoDisplayName(repoInfo);
-        try {
-            const result = await processor.process(repoConfig, repoInfo, {
-                dryRun: options.dryRun,
-            });
-            if (result.planOutput && result.planOutput.lines.length > 0) {
-                logger.info("");
-                logger.info(chalk.bold(`${repoName} - Repo Settings:`));
-                for (const line of result.planOutput.lines) {
-                    logger.info(line);
-                }
-                if (result.warnings && result.warnings.length > 0) {
-                    for (const warning of result.warnings) {
-                        logger.info(chalk.yellow(`Warning: ${warning}`));
-                    }
-                }
-            }
-            if (result.skipped) {
-                // Silent skip
-            }
-            else if (result.success) {
-                logger.success(current, repoName, result.message);
-            }
-            else {
-                logger.error(current, repoName, result.message);
-                collector.appendError(repoName, result.message);
-            }
-            if (!result.skipped) {
-                const existing = results.find((r) => r.repoName === repoName);
-                if (existing) {
-                    existing.repoSettingsPlanDetails = result.planOutput?.entries;
-                }
-                else {
-                    results.push({
-                        repoName,
-                        status: result.success ? "succeeded" : "failed",
-                        message: result.message,
-                        repoSettingsPlanDetails: result.planOutput?.entries,
-                    });
-                }
-            }
-            if (!result.skipped) {
-                collector.getOrCreate(repoName).settingsResult = result;
-            }
-        }
-        catch (error) {
-            logger.error(current, repoName, String(error));
-            collector.appendError(repoName, error);
-        }
-    }
-}
-/**
- * Run the settings command - manages GitHub Rulesets and repo settings.
- */
-export async function runSettings(options, processorFactory = defaultRulesetProcessorFactory, repoProcessorFactory = defaultProcessorFactory, repoSettingsProcessorFactory = defaultRepoSettingsProcessorFactory, lifecycleManager) {
+export async function runSettings(options, processorFactory = defaultRulesetProcessorFactory, repoProcessorFactory = defaultProcessorFactory, repoSettingsProcessorFactory = defaultRepoSettingsProcessorFactory, lifecycleManager, labelsProcessorFactory = defaultLabelsProcessorFactory) {
     const configPath = resolve(options.config);
     if (!existsSync(configPath)) {
         console.error(`Config file not found: ${configPath}`);
@@ -291,8 +38,11 @@ export async function runSettings(options, processorFactory = defaultRulesetProc
     const config = normalizeConfig(rawConfig);
     const reposWithRulesets = config.repos.filter((r) => r.settings?.rulesets && Object.keys(r.settings.rulesets).length > 0);
     const reposWithRepoSettings = config.repos.filter((r) => r.settings?.repo && Object.keys(r.settings.repo).length > 0);
-    if (reposWithRulesets.length === 0 && reposWithRepoSettings.length === 0) {
-        console.log("No settings configured. Add settings.rulesets or settings.repo to your config.");
+    const reposWithLabels = config.repos.filter((r) => r.settings?.labels && Object.keys(r.settings.labels).length > 0);
+    if (reposWithRulesets.length === 0 &&
+        reposWithRepoSettings.length === 0 &&
+        reposWithLabels.length === 0) {
+        console.log("No settings configured. Add settings.rulesets, settings.repo, or settings.labels to your config.");
         return;
     }
     if (reposWithRulesets.length > 0) {
@@ -301,8 +51,13 @@ export async function runSettings(options, processorFactory = defaultRulesetProc
     if (reposWithRepoSettings.length > 0) {
         console.log(`Found ${reposWithRepoSettings.length} repositories with repo settings`);
     }
+    if (reposWithLabels.length > 0) {
+        console.log(`Found ${reposWithLabels.length} repositories with labels`);
+    }
     console.log("");
-    logger.setTotal(reposWithRulesets.length + reposWithRepoSettings.length);
+    logger.setTotal(reposWithRulesets.length +
+        reposWithRepoSettings.length +
+        reposWithLabels.length);
     const processor = processorFactory();
     const repoProcessor = repoProcessorFactory();
     const lm = lifecycleManager ?? new RepoLifecycleManager(undefined, options.retries);
@@ -312,10 +67,15 @@ export async function runSettings(options, processorFactory = defaultRulesetProc
     const results = [];
     const collector = new ResultsCollector();
     // Pre-check lifecycle for all unique repos before processing
-    const allRepos = [...reposWithRulesets, ...reposWithRepoSettings];
+    const allRepos = [
+        ...reposWithRulesets,
+        ...reposWithRepoSettings,
+        ...reposWithLabels,
+    ];
     const lifecycleSkipped = await runLifecycleChecks(allRepos, config, options, lm, results, collector, tokenManager);
     await processRulesets(reposWithRulesets, config, options, processor, repoProcessor, results, collector, lifecycleSkipped);
     await processRepoSettings(reposWithRepoSettings, config, options, repoSettingsProcessorFactory, results, collector, lifecycleSkipped, reposWithRulesets.length);
+    await processLabels(reposWithLabels, config, options, labelsProcessorFactory(), repoProcessor, results, collector, lifecycleSkipped, reposWithRulesets.length + reposWithRepoSettings.length);
     console.log("");
     const report = buildSettingsReport(collector.getAll());
     const lines = formatSettingsReportCLI(report);

package/dist/cli/settings-report-builder.d.ts

@@ -1,6 +1,7 @@
 import type { SettingsReport } from "../output/settings-report.js";
 import type { RepoSettingsPlanEntry } from "../settings/repo-settings/formatter.js";
 import type { RulesetPlanEntry } from "../settings/rulesets/formatter.js";
+import type { LabelsPlanEntry } from "../settings/labels/formatter.js";
 /**
  * Result from processing a repository's settings and rulesets.
  * Used to collect results during settings command execution.
@@ -17,6 +18,11 @@ export interface ProcessorResults {
             entries?: RulesetPlanEntry[];
         };
     };
+    labelsResult?: {
+        planOutput?: {
+            entries?: LabelsPlanEntry[];
+        };
+    };
     error?: string;
 }
 export declare function buildSettingsReport(results: ProcessorResults[]): SettingsReport;

package/dist/cli/settings-report-builder.js

@@ -3,12 +3,14 @@ export function buildSettingsReport(results) {
     const totals = {
         settings: { add: 0, change: 0 },
         rulesets: { create: 0, update: 0, delete: 0 },
+        labels: { create: 0, update: 0, delete: 0 },
     };
     for (const result of results) {
         const repoChanges = {
             repoName: result.repoName,
             settings: [],
             rulesets: [],
+            labels: [],
         };
         // Convert settings processor output
         if (result.settingsResult?.planOutput?.entries) {
@@ -55,6 +57,27 @@ export function buildSettingsReport(results) {
                 }
             }
         }
+        // Convert labels processor output
+        if (result.labelsResult?.planOutput?.entries) {
+            for (const entry of result.labelsResult.planOutput.entries) {
+                if (entry.action === "unchanged")
+                    continue;
+                const labelChange = {
+                    name: entry.name,
+                    action: entry.action,
+                    newName: entry.newName,
+                    propertyChanges: entry.propertyChanges,
+                    config: entry.config,
+                };
+                repoChanges.labels.push(labelChange);
+                if (entry.action === "create")
+                    totals.labels.create++;
+                else if (entry.action === "update")
+                    totals.labels.update++;
+                else if (entry.action === "delete")
+                    totals.labels.delete++;
+            }
+        }
         if (result.error) {
             repoChanges.error = result.error;
         }

package/dist/cli/types.d.ts

@@ -3,13 +3,15 @@ import { RepoInfo } from "../shared/repo-detector.js";
 import { type ProcessorResult, type ProcessorOptions } from "../sync/index.js";
 import { RulesetProcessorOptions, RulesetProcessorResult } from "../settings/rulesets/processor.js";
 import { type IRepoSettingsProcessor } from "../settings/repo-settings/processor.js";
+import { type ILabelsProcessor } from "../settings/labels/processor.js";
 /**
  * Processor interface for dependency injection in tests.
  */
 export interface IRepositoryProcessor {
     process(repoConfig: RepoConfig, repoInfo: RepoInfo, options: ProcessorOptions): Promise<ProcessorResult>;
     updateManifestOnly(repoInfo: RepoInfo, repoConfig: RepoConfig, options: ProcessorOptions, manifestUpdate: {
-        rulesets: string[];
+        rulesets?: string[];
+        labels?: string[];
     }): Promise<ProcessorResult>;
 }
 /**
@@ -42,4 +44,12 @@ export type RepoSettingsProcessorFactory = () => IRepoSettingsProcessor;
  * Default factory that creates a real RepoSettingsProcessor.
  */
 export declare const defaultRepoSettingsProcessorFactory: RepoSettingsProcessorFactory;
-export type { IRepoSettingsProcessor };
+/**
+ * Labels processor interface for dependency injection in tests.
+ */
+export type LabelsProcessorFactory = () => ILabelsProcessor;
+/**
+ * Default factory that creates a real LabelsProcessor.
+ */
+export declare const defaultLabelsProcessorFactory: LabelsProcessorFactory;
+export type { IRepoSettingsProcessor, ILabelsProcessor };

package/dist/cli/types.js

@@ -1,6 +1,7 @@
 import { RepositoryProcessor, } from "../sync/index.js";
 import { RulesetProcessor, } from "../settings/rulesets/processor.js";
 import { RepoSettingsProcessor, } from "../settings/repo-settings/processor.js";
+import { LabelsProcessor, } from "../settings/labels/processor.js";
 /**
  * Default factory that creates a real RepositoryProcessor.
  */
@@ -13,3 +14,7 @@ export const defaultRulesetProcessorFactory = () => new RulesetProcessor();
  * Default factory that creates a real RepoSettingsProcessor.
  */
 export const defaultRepoSettingsProcessorFactory = () => new RepoSettingsProcessor();
+/**
+ * Default factory that creates a real LabelsProcessor.
+ */
+export const defaultLabelsProcessorFactory = () => new LabelsProcessor();

package/dist/config/index.d.ts

@@ -1,4 +1,4 @@
-export type { MergeMode, MergeStrategy, PRMergeOptions, RulesetTarget, RulesetEnforcement, BypassActorType, BypassMode, PatternOperator, MergeMethod, AlertsThreshold, SecurityAlertsThreshold, BypassActor, RefNameCondition, RulesetConditions, StatusCheckConfig, RequiredReviewer, CodeScanningTool, WorkflowConfig, PullRequestRuleParameters, RequiredStatusChecksParameters, UpdateRuleParameters, RequiredDeploymentsParameters, CodeScanningParameters, CodeQualityParameters, WorkflowsParameters, PatternRuleParameters, FilePathRestrictionParameters, FileExtensionRestrictionParameters, MaxFilePathLengthParameters, MaxFileSizeParameters, PullRequestRule, RequiredStatusChecksRule, RequiredSignaturesRule, RequiredLinearHistoryRule, NonFastForwardRule, CreationRule, UpdateRule, DeletionRule, RequiredDeploymentsRule, CodeScanningRule, CodeQualityRule, WorkflowsRule, CommitAuthorEmailPatternRule, CommitMessagePatternRule, CommitterEmailPatternRule, BranchNamePatternRule, TagNamePatternRule, FilePathRestrictionRule, FileExtensionRestrictionRule, MaxFilePathLengthRule, MaxFileSizeRule, RulesetRule, Ruleset, SquashMergeCommitTitle, SquashMergeCommitMessage, MergeCommitTitle, MergeCommitMessage, RepoVisibility, GitHubRepoSettings, RepoSettings, ContentValue, RawFileConfig, RawRepoFileOverride, RawRepoSettings, RawRepoConfig, RawConfig, FileContent, RepoConfig, Config, } from "./types.js";
+export type { MergeMode, MergeStrategy, PRMergeOptions, RulesetTarget, RulesetEnforcement, BypassActorType, BypassMode, PatternOperator, MergeMethod, AlertsThreshold, SecurityAlertsThreshold, BypassActor, RefNameCondition, RulesetConditions, StatusCheckConfig, RequiredReviewer, CodeScanningTool, WorkflowConfig, PullRequestRuleParameters, RequiredStatusChecksParameters, UpdateRuleParameters, RequiredDeploymentsParameters, CodeScanningParameters, CodeQualityParameters, WorkflowsParameters, PatternRuleParameters, FilePathRestrictionParameters, FileExtensionRestrictionParameters, MaxFilePathLengthParameters, MaxFileSizeParameters, PullRequestRule, RequiredStatusChecksRule, RequiredSignaturesRule, RequiredLinearHistoryRule, NonFastForwardRule, CreationRule, UpdateRule, DeletionRule, RequiredDeploymentsRule, CodeScanningRule, CodeQualityRule, WorkflowsRule, CommitAuthorEmailPatternRule, CommitMessagePatternRule, CommitterEmailPatternRule, BranchNamePatternRule, TagNamePatternRule, FilePathRestrictionRule, FileExtensionRestrictionRule, MaxFilePathLengthRule, MaxFileSizeRule, RulesetRule, Ruleset, SquashMergeCommitTitle, SquashMergeCommitMessage, MergeCommitTitle, MergeCommitMessage, RepoVisibility, GitHubRepoSettings, Label, RepoSettings, ContentValue, RawFileConfig, RawRepoFileOverride, RawRepoSettings, RawRepoConfig, RawConfig, FileContent, RepoConfig, Config, } from "./types.js";
 export { RULESET_FIELD_MAP, RULESET_COMPARABLE_FIELDS } from "./types.js";
 export { loadRawConfig, loadConfig, normalizeConfig } from "./loader.js";
 export { convertContentToString, detectOutputFormat, type OutputFormat, type ConvertOptions, } from "./formatter.js";

package/dist/config/normalizer.d.ts

@@ -1,8 +1,4 @@
 import type { RawConfig, Config, RepoSettings, RawRepoSettings } from "./types.js";
-/**
- * Merges settings: per-repo settings deep merge with root settings.
- * Returns undefined if no settings are defined.
- */
 export declare function mergeSettings(root: RawRepoSettings | undefined, perRepo: RawRepoSettings | undefined): RepoSettings | undefined;
 /**
  * Normalizes raw config into expanded, merged config.

package/dist/config/normalizer.js

@@ -53,6 +53,42 @@ function mergeRuleset(root, perRepo) {
  * Merges settings: per-repo settings deep merge with root settings.
  * Returns undefined if no settings are defined.
  */
+/**
+ * Merges root and per-repo label configs.
+ * Per-repo labels override root labels by name.
+ * inherit: false skips all root labels.
+ * label: false opts out of a specific root label.
+ */
+function mergeLabels(rootLabels, repoLabels) {
+    if (!rootLabels && !repoLabels)
+        return undefined;
+    const root = rootLabels ?? {};
+    const repo = repoLabels ?? {};
+    const inheritLabels = repo?.inherit !== false;
+    const allLabelNames = new Set([
+        ...Object.keys(root).filter((name) => name !== "inherit"),
+        ...Object.keys(repo).filter((name) => name !== "inherit"),
+    ]);
+    if (allLabelNames.size === 0)
+        return undefined;
+    const result = {};
+    for (const name of allLabelNames) {
+        const rootLabel = root[name];
+        const repoLabel = repo[name];
+        if (repoLabel === false)
+            continue;
+        if (!inheritLabels && !repoLabel && rootLabel)
+            continue;
+        const merged = {
+            ...(rootLabel && rootLabel !== false ? rootLabel : {}),
+            ...(repoLabel && repoLabel !== false ? repoLabel : {}),
+        };
+        // Strip # from color and lowercase
+        merged.color = merged.color.replace(/^#/, "").toLowerCase();
+        result[name] = merged;
+    }
+    return Object.keys(result).length > 0 ? result : undefined;
+}
 export function mergeSettings(root, perRepo) {
     if (!root && !perRepo)
         return undefined;
@@ -106,6 +142,11 @@ export function mergeSettings(root, perRepo) {
             };
         }
     }
+    // Merge labels by name
+    const mergedLabels = mergeLabels(root?.labels, perRepo?.labels);
+    if (mergedLabels) {
+        result.labels = mergedLabels;
+    }
     return Object.keys(result).length > 0 ? result : undefined;
 }
 /**
@@ -251,6 +292,21 @@ export function normalizeConfig(raw) {
         if (raw.settings.repo) {
             normalizedRootSettings.repo = raw.settings.repo;
         }
+        if (raw.settings.labels) {
+            const filteredLabels = {};
+            for (const [name, label] of Object.entries(raw.settings.labels)) {
+                if (name === "inherit" || label === false)
+                    continue;
+                const l = label;
+                filteredLabels[name] = {
+                    ...l,
+                    color: l.color.replace(/^#/, "").toLowerCase(),
+                };
+            }
+            if (Object.keys(filteredLabels).length > 0) {
+                normalizedRootSettings.labels = filteredLabels;
+            }
+        }
         if (raw.settings.deleteOrphaned !== undefined) {
             normalizedRootSettings.deleteOrphaned = raw.settings.deleteOrphaned;
         }

package/dist/config/types.d.ts

@@ -260,11 +260,25 @@ export interface GitHubRepoSettings {
     secretScanningPushProtection?: boolean;
     privateVulnerabilityReporting?: boolean;
 }
+/**
+ * GitHub label configuration.
+ * @see https://docs.github.com/en/rest/issues/labels
+ */
+export interface Label {
+    /** Hex color code (with or without #). Stripped on normalization. */
+    color: string;
+    /** Label description (max 100 characters) */
+    description?: string;
+    /** Rename target. Maps to GitHub API's new_name field. */
+    new_name?: string;
+}
 export interface RepoSettings {
     /** GitHub rulesets keyed by name */
     rulesets?: Record<string, Ruleset>;
     /** GitHub repository settings */
     repo?: GitHubRepoSettings;
+    /** GitHub labels keyed by name */
+    labels?: Record<string, Label>;
     deleteOrphaned?: boolean;
 }
 export type ContentValue = Record<string, unknown> | string | string[];
@@ -295,6 +309,9 @@ export interface RawRepoSettings {
         inherit?: boolean;
     };
     repo?: GitHubRepoSettings | false;
+    labels?: Record<string, Label | false> & {
+        inherit?: boolean;
+    };
     deleteOrphaned?: boolean;
 }
 export interface RawRepoConfig {

package/dist/config/validator.d.ts

@@ -1,8 +1,8 @@
 import type { RawConfig, RawRepoSettings } from "./types.js";
 /**
- * Validates settings object containing rulesets.
+ * Validates settings object containing rulesets, labels, and repo settings.
  */
-export declare function validateSettings(settings: unknown, context: string, rootRulesetNames?: string[], hasRootRepoSettings?: boolean): void;
+export declare function validateSettings(settings: unknown, context: string, rootRulesetNames?: string[], hasRootRepoSettings?: boolean, rootLabelNames?: string[]): void;
 /**
  * Validates raw config structure before normalization.
  * @throws Error if validation fails
@@ -15,7 +15,6 @@ export declare function validateRawConfig(config: RawConfig): void;
 export declare function validateForSync(config: RawConfig): void;
 /**
  * Checks if settings contain actionable configuration.
- * Currently only rulesets, but extensible for future settings features.
  */
 export declare function hasActionableSettings(settings: RawRepoSettings | undefined): boolean;
 /**