@devdogsuga/devtools 0.1.9 → 0.1.11

package/dist/gh/rulesets/api.js

@@ -92,7 +92,9 @@ export async function createRuleset(r, desired) {
     return writeJson("POST", path(r), desired);
 }
 export async function updateRuleset(r, id, desired) {
-    return writeJson("PATCH", path(r, `/${id}`), desired);
+    // PUT, not PATCH: GitHub's rulesets API has no PATCH route and answers one
+    // with a 404, which reads like a missing ruleset rather than a wrong verb.
+    return writeJson("PUT", path(r, `/${id}`), desired);
 }
 export async function deleteRuleset(r, id) {
     await writeJson("DELETE", path(r, `/${id}`), {});

package/dist/gh/rulesets/diff.js

@@ -24,9 +24,22 @@
  */
 import { DELETE_RULESET_NAMES, LEGACY_NAME_ALIASES, isPerTeamRulesetName, } from "./desired.js";
 /**
- * Fills in defaults GitHub omits on the wire so an absent field and an
- * explicit default-valued one compare equal — see `UpdateRule.parameters`'s
- * doc in `types.ts`.
+ * Reduces a rule to the fields this reconciler manages, in a fixed key order,
+ * so a live rule and its desired twin compare equal whenever they protect
+ * the same way.
+ *
+ * Two ways GitHub's copy differs from what was sent, both seen live on
+ * 2026-09-27 right after creating `production`:
+ *
+ * - it omits parameters that hold their default, so `update` comes back with
+ *   no `update_allows_fetch_and_merge` (see `UpdateRule.parameters`' doc in
+ *   `types.ts`);
+ * - it adds `pull_request` parameters `desired.ts` never sets
+ *   (`dismissal_restriction`, `require_extra_approval_for_unattributed_changes`,
+ *   `required_reviewers`), in its own key order.
+ *
+ * Without this, every ruleset with a `pull_request` rule planned an update on
+ * every run, so the reconciler never settled.
  */
 function canonicalizeRule(rule) {
     if (rule.type === "update") {
@@ -37,15 +50,36 @@ function canonicalizeRule(rule) {
             },
         };
     }
-    return rule;
+    if (rule.type === "pull_request") {
+        const p = rule.parameters;
+        return {
+            type: "pull_request",
+            parameters: {
+                allowed_merge_methods: [...p.allowed_merge_methods].sort(),
+                dismiss_stale_reviews_on_push: p.dismiss_stale_reviews_on_push,
+                require_code_owner_review: p.require_code_owner_review,
+                require_last_push_approval: p.require_last_push_approval,
+                required_approving_review_count: p.required_approving_review_count,
+                required_review_thread_resolution: p.required_review_thread_resolution,
+            },
+        };
+    }
+    return { type: rule.type };
 }
 function sortRules(rules) {
     return [...rules]
         .map(canonicalizeRule)
         .sort((a, b) => a.type.localeCompare(b.type));
 }
+/** Sorted, and each actor rebuilt in a fixed key order for the same reason as `canonicalizeRule`. */
 function sortActors(actors) {
-    return [...actors].sort((a, b) => a.actor_type.localeCompare(b.actor_type) || a.actor_id - b.actor_id);
+    return [...actors]
+        .sort((a, b) => a.actor_type.localeCompare(b.actor_type) || a.actor_id - b.actor_id)
+        .map((a) => ({
+        actor_id: a.actor_id,
+        actor_type: a.actor_type,
+        bypass_mode: a.bypass_mode,
+    }));
 }
 /**
  * A canonical, order-independent string for one ruleset's PROTECTION shape —

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@devdogsuga/devtools",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "private": false,
   "type": "module",
   "description": "Contributor CLI for a DevDogsUGA checkout: database, env, images, emails, cron, deploy. Ships built JS; run via `pnpm dlx @devdogsuga/devtools` (or the `devtools`/`devtools-ci` bins once installed) from inside a DevDogsUGA clone.",
@@ -63,9 +63,9 @@
     "react": "^19.2.8",
     "vitest": "^4.1.11",
     "@devdogsuga/config": "0.1.1",
+    "@devdogsuga/brand": "0.1.1",
     "@devdogsuga/db": "0.1.1",
-    "@devdogsuga/env": "0.1.1",
-    "@devdogsuga/brand": "0.1.1"
+    "@devdogsuga/env": "0.1.1"
   },
   "scripts": {
     "build": "tsc && node scripts/write-build-info.mjs",