@goodfellow-cms/gitlab 0.8.0 → 0.9.0

package/dist/index.js

@@ -143,6 +143,11 @@ function gitlabEditors(api, project, branch, username) {
 			await gitlabRequest(api, editor.id.startsWith(INVITATION) ? `${base}/invitations/${encodeURIComponent(editor.id.slice(11))}` : `${base}/members/${editor.id.slice(7)}`, { method: "DELETE" }).catch(notAllowed$2);
 		},
 		async letEditorsPublish() {
+			const read = async () => {
+				const answer = await gitlabRequest(api, protectedPath, { allow: [404] }).catch(notAllowed$2);
+				return answer.ok ? await answer.json() : void 0;
+			};
+			const developersMay = (protection) => !protection || ["push_access_levels", "merge_access_levels"].every((kind) => (protection[kind] ?? []).some((level) => level.access_level !== null && level.access_level <= DEVELOPER));
 			const protect = (level) => gitlabRequest(api, `${base}/protected_branches`, {
 				method: "POST",
 				body: {
@@ -152,6 +157,30 @@ function gitlabEditors(api, project, branch, username) {
 					allow_force_push: false
 				}
 			});
+			const current = await read();
+			if (!current) {
+				await protect(DEVELOPER).catch(notAllowed$2);
+				return;
+			}
+			if (developersMay(current)) return;
+			const swap = (levels = []) => [{ access_level: DEVELOPER }, ...levels.flatMap((level) => level.id === void 0 ? [] : [{
+				id: level.id,
+				_destroy: true
+			}])];
+			if ((await gitlabRequest(api, protectedPath, {
+				method: "PATCH",
+				body: {
+					allow_force_push: false,
+					allowed_to_push: swap(current.push_access_levels),
+					allowed_to_merge: swap(current.merge_access_levels)
+				},
+				allow: [
+					400,
+					404,
+					405,
+					422
+				]
+			}).catch(notAllowed$2)).ok && developersMay(await read())) return;
 			await gitlabRequest(api, protectedPath, {
 				method: "DELETE",
 				allow: [404]
@@ -162,6 +191,11 @@ function gitlabEditors(api, project, branch, username) {
 				await protect(MAINTAINER).catch(() => void 0);
 				notAllowed$2(error);
 			}
+			const after = await read();
+			if (!after || !developersMay(after)) {
+				if (!after) await protect(MAINTAINER).catch(() => void 0);
+				throw new Error("GitLab didn't keep the main branch's new protection. Try again.");
+			}
 		}
 	};
 }

package/dist/testing.d.ts

@@ -50,6 +50,8 @@ export interface FakeGitLabOptions {
    * artifact, or nothing for a job that fails. Without it, task pipelines fail.
    */
   tasks?: (variables: Record<string, string>) => string | undefined | Promise<string | undefined>;
+  /** GitLab before 15.6, which can't change a protected branch's access levels, only remove and add it. */
+  noProtectionChanges?: boolean;
 }
 /** A pipeline schedule, such as the nightly one or one the admin panel adds for a scheduled change. */
 export interface FakeSchedule {
@@ -120,6 +122,7 @@ export declare function fakeGitLab(options: FakeGitLabOptions): {
     merge: number;
     forcePush: boolean;
   }>;
+  protectionChanges: string[];
   failBuild: (sha: string, failure?: {
     job?: string;
     failureReason?: string;

package/dist/testing.js

@@ -53,6 +53,8 @@ function fakeGitLab(options) {
 		merge: 40,
 		forcePush: false
 	}]]);
+	/** Each change to a protected branch, in order: `DELETE main`, `POST main`, `PATCH main`. */
+	const protectionChanges = [];
 	/** The project's members and invitations, and its protected branches. */
 	async function handleMembers(request, url, rest, accessLevel) {
 		const forbidden = () => json({ message: "403 Forbidden" }, 403);
@@ -134,20 +136,48 @@ function fakeGitLab(options) {
 			if (!found) return json({ message: "404 Not found" }, 404);
 			if (request.method === "GET") return json({
 				name,
-				push_access_levels: [{ access_level: found.push }],
-				merge_access_levels: [{ access_level: found.merge }],
+				push_access_levels: [{
+					id: 1,
+					access_level: found.push
+				}],
+				merge_access_levels: [{
+					id: 2,
+					access_level: found.merge
+				}],
 				allow_force_push: found.forcePush
 			});
 			if (request.method === "DELETE") {
 				if (accessLevel < 40) return forbidden();
 				protectedBranches.delete(name);
+				protectionChanges.push(`DELETE ${name}`);
 				return new Response(null, { status: 204 });
 			}
+			if (request.method === "PATCH" && !options.noProtectionChanges) {
+				if (accessLevel < 40) return forbidden();
+				const body = await request.json();
+				const levelFrom = (levels, id, now) => {
+					if (!levels) return now;
+					const kept = levels.some((level) => level.id === id && level._destroy) ? [] : [now];
+					const added = levels.flatMap((level) => level.access_level === void 0 ? [] : [level.access_level]);
+					return kept.length + added.length === 1 ? kept[0] ?? added[0] ?? now : void 0;
+				};
+				const push = levelFrom(body.allowed_to_push, 1, found.push);
+				const merge = levelFrom(body.allowed_to_merge, 2, found.merge);
+				if (push === void 0 || merge === void 0) return json({ message: "Only one access level allowed" }, 422);
+				protectedBranches.set(name, {
+					push,
+					merge,
+					forcePush: body.allow_force_push ?? found.forcePush
+				});
+				protectionChanges.push(`PATCH ${name}`);
+				return json({ name });
+			}
 		}
 		if (rest === "/protected_branches" && request.method === "POST") {
 			if (accessLevel < 40) return forbidden();
 			const body = await request.json();
 			if (protectedBranches.has(body.name)) return json({ message: "Protected branch already exists" }, 409);
+			protectionChanges.push(`POST ${body.name}`);
 			protectedBranches.set(body.name, {
 				push: body.push_access_level ?? 40,
 				merge: body.merge_access_level ?? 40,
@@ -898,6 +928,7 @@ function fakeGitLab(options) {
 		members,
 		invitations,
 		protectedBranches,
+		protectionChanges,
 		failBuild,
 		cancelBuild,
 		/** The project's update settings, and the pipelines the update ran in, which tests add with `addUpdateRun()`. */

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@goodfellow-cms/gitlab",
-  "version": "0.8.0",
-  "description": "Edit a Goodfellow site stored on GitLab, straight from the browser.",
+  "version": "0.9.0",
+  "description": "Edit a Goodfellow CMS site stored on GitLab, straight from the browser.",
   "keywords": [
     "goodfellow",
     "cms",
@@ -12,6 +12,10 @@
   ],
   "homepage": "https://goodfellow-cms.github.io/goodfellow-cms/docs/hosts",
   "bugs": "https://github.com/goodfellow-cms/goodfellow-cms/issues",
+  "funding": {
+    "type": "github",
+    "url": "https://github.com/sponsors/goodfellow-cms"
+  },
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -35,7 +39,7 @@
     "dist"
   ],
   "dependencies": {
-    "@goodfellow-cms/core": "0.8.0"
+    "@goodfellow-cms/core": "0.9.0"
   },
   "devDependencies": {
     "@puckeditor/core": "0.23.0"