@biffo/cli 0.185.2 → 0.185.4

package/dist/index.js

@@ -8567,9 +8567,9 @@ function deriveRequiredContexts(observed) {
   const required = Math.ceil(window.length * CONTEXT_CONSISTENCY_THRESHOLD);
   return [...seenOn.entries()].filter(([, shas]) => shas.size >= required).map(([name]) => name).sort();
 }
-function protectionParamsFor(contexts) {
+function protectionParamsFor(contexts, options = {}) {
   return {
-    required_status_checks: { strict: true, contexts: [...contexts].sort() },
+    required_status_checks: { strict: options.strict ?? true, contexts: [...contexts].sort() },
     enforce_admins: false,
     required_pull_request_reviews: {
       required_approving_review_count: 0,
@@ -8702,6 +8702,7 @@ async function runBranchProtectionCheck(explicitRepo, options = {}) {
   });
   const findings = [];
   const audited = [];
+  const observedStrict = /* @__PURE__ */ new Map();
   for (const branch of BRANCHES) {
     try {
       await octokit.repos.getBranch({ owner, repo, branch });
@@ -8713,6 +8714,7 @@ async function runBranchProtectionCheck(explicitRepo, options = {}) {
     try {
       const { data } = await octokit.repos.getBranchProtection({ owner, repo, branch });
       findings.push(...auditBranch(branch, data));
+      observedStrict.set(branch, data.required_status_checks?.strict ?? false);
     } catch (err) {
       if (err.status === 404) {
         findings.push(...auditBranch(branch, null));
@@ -8745,12 +8747,22 @@ async function runBranchProtectionCheck(explicitRepo, options = {}) {
 `);
     console.log(formatPlans(plans));
     let applied = 0;
+    let preserved = 0;
     for (const plan of plans.filter((p) => p.action === "apply")) {
+      const existing = observedStrict.get(plan.branch);
+      const strict = existing ?? true;
+      if (existing === false) {
+        preserved += 1;
+        console.log(
+          `  ${plan.branch}: keeping strict=false \u2014 already set on this branch, so it is a
+      decision rather than a gap. Change it deliberately with \`gh api\`, not here.`
+        );
+      }
       await octokit.repos.updateBranchProtection({
         owner,
         repo,
         branch: plan.branch,
-        ...protectionParamsFor(plan.contexts)
+        ...protectionParamsFor(plan.contexts, { strict })
       });
       applied += 1;
     }
@@ -8760,8 +8772,10 @@ async function runBranchProtectionCheck(explicitRepo, options = {}) {
       );
       process.exit(1);
     }
-    console.log(`
-\u2713 protection applied to ${applied} branch(es). Re-run without --fix to verify.`);
+    console.log(
+      `
+\u2713 protection applied to ${applied} branch(es)` + (preserved > 0 ? `, ${preserved} keeping an existing strict=false` : "") + ". Re-run without --fix to verify."
+    );
     return;
   }
   if (findings.length > 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@biffo/cli",
-  "version": "0.185.2",
+  "version": "0.185.4",
   "description": "Biffo project scaffolding CLI",
   "license": "MIT",
   "type": "module",