@homeflare/alchemy 0.27.4 → 0.28.0

package/dist/github/index.d.ts

@@ -23,5 +23,5 @@ export { type RepoBaselineInput, PUBLIC_ONLY_UNDECLARABLE, repoBaselineRuleset,
 export { type DeclareRepoBaselineOptions, declareRepoBaseline } from './declare-repo-baseline.ts';
 export { RepositoryRuleset, RepositoryRulesetProvider, type RepositoryRulesetAttributes, type RepositoryRulesetProps, type RepositoryRulesetPullRequestRule, type RepositoryRulesetReviewerRule, type RepositoryRulesetRules, type RepositoryRulesetStatusChecksRule, } from './repository-ruleset.ts';
 export { RULE_TYPE_COVERAGE, type RepositoryRuleType } from './repository-ruleset-constraints.ts';
-export { BypassActorWidened, DuplicateRuleset, NeverReportedContext, ReadbackMismatch, RequiredChecksOmitted, RulesetConstraintRefused, UndeclaredLiveRule, type RepositoryRulesetError, } from './repository-ruleset-errors.ts';
+export { BypassActorNarrowed, BypassActorWidened, DuplicateRuleset, NeverReportedContext, ReadbackMismatch, RequiredChecksOmitted, RuleNarrowed, RulesetConstraintRefused, UndeclaredLiveRule, type RepositoryRulesetError, } from './repository-ruleset-errors.ts';
 //# sourceMappingURL=index.d.ts.map

package/dist/github/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/github/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EACL,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,4BAA4B,EACjC,UAAU,GACX,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,KAAK,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EACL,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAClG,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAC3B,KAAK,iCAAiC,GACvC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAClG,OAAO,EACL,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,wBAAwB,EACxB,kBAAkB,EAClB,KAAK,sBAAsB,GAC5B,MAAM,gCAAgC,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/github/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EACL,KAAK,UAAU,EACf,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,EACtB,KAAK,4BAA4B,EACjC,UAAU,GACX,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,KAAK,wBAAwB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACpF,OAAO,EACL,KAAK,iBAAiB,EACtB,wBAAwB,EACxB,mBAAmB,EACnB,oBAAoB,GACrB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,KAAK,0BAA0B,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAClG,OAAO,EACL,iBAAiB,EACjB,yBAAyB,EACzB,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC3B,KAAK,gCAAgC,EACrC,KAAK,6BAA6B,EAClC,KAAK,sBAAsB,EAC3B,KAAK,iCAAiC,GACvC,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,KAAK,kBAAkB,EAAE,MAAM,qCAAqC,CAAC;AAClG,OAAO,EACL,mBAAmB,EACnB,kBAAkB,EAClB,gBAAgB,EAChB,oBAAoB,EACpB,gBAAgB,EAChB,qBAAqB,EACrB,YAAY,EACZ,wBAAwB,EACxB,kBAAkB,EAClB,KAAK,sBAAsB,GAC5B,MAAM,gCAAgC,CAAC"}

package/dist/github/index.js

@@ -208,6 +208,18 @@ class BypassActorWidened extends Data.TaggedError("BypassActorWidened") {
   }
 }
 
+class BypassActorNarrowed extends Data.TaggedError("BypassActorNarrowed") {
+  get message() {
+    return `GitHub.RepositoryRuleset "${this.name}" on ${this.owner}/${this.repository}: the ` + `declaration drops a bypass actor the live ruleset has (${this.narrowed.join(", ")}), and ` + "the declaration carries no `acknowledgeBypassNarrowing`. Add one with a reason once the " + "removal is deliberate, or restore the actor to match live.";
+  }
+}
+
+class RuleNarrowed extends Data.TaggedError("RuleNarrowed") {
+  get message() {
+    return `GitHub.RepositoryRuleset "${this.name}" on ${this.owner}/${this.repository}: the ` + `declaration drops a live "${this.ruleType}" rule, and carries no ` + "`acknowledgeRuleNarrowing`. Add one with a reason once the removal is deliberate, or " + "declare the rule to match live.";
+  }
+}
+
 class UndeclaredLiveRule extends Data.TaggedError("UndeclaredLiveRule") {
   get message() {
     return `GitHub.RepositoryRuleset "${this.name}" on ${this.owner}/${this.repository}: the live ` + `ruleset has a "${this.ruleType}" rule this resource does not model. Declare it (if it is ` + "now modeled) or an explicit `false` to remove it — the PUT replaces `rules` wholesale, so " + "nothing may be dropped silently.";
@@ -587,6 +599,65 @@ var refuseUnreportedContexts = (octokit, owner, repo, contexts) => Effect3.gen(f
   }
 });
 
+// src/github/repository-ruleset-narrowing-guards.ts
+var isBypassNarrowingAcknowledged = (props) => props.acknowledgeBypassNarrowing !== undefined && props.acknowledgeBypassNarrowing.reason.trim().length > 0;
+var isRuleNarrowingAcknowledged = (props) => props.acknowledgeRuleNarrowing !== undefined && props.acknowledgeRuleNarrowing.reason.trim().length > 0;
+function bypassNarrowingRefusal(input) {
+  if (input.acknowledged)
+    return;
+  if (input.live === undefined)
+    return;
+  const liveActors = input.live.bypass_actors ?? [];
+  const declaredKeys = new Set((input.declared ?? []).map((a) => bypassKey({
+    actor_type: a.actorType,
+    actor_id: a.actorId,
+    bypass_mode: a.bypassMode ?? "always"
+  })));
+  const narrowed = liveActors.map(bypassKey).filter((k) => !declaredKeys.has(k));
+  if (narrowed.length === 0)
+    return;
+  return new BypassActorNarrowed({
+    owner: input.owner,
+    repository: input.repository,
+    name: input.name,
+    narrowed
+  });
+}
+function droppedBooleanOrPullRequestType(rules, live) {
+  const declaredFalse = [
+    [rules.creation, "creation"],
+    [rules.update, "update"],
+    [rules.deletion, "deletion"],
+    [rules.requiredLinearHistory, "required_linear_history"],
+    [rules.requiredSignatures, "required_signatures"],
+    [rules.nonFastForward, "non_fast_forward"]
+  ];
+  for (const [declared, type] of declaredFalse) {
+    if (declared === false && live.has(type))
+      return type;
+  }
+  if (rules.pullRequest === false && live.has("pull_request"))
+    return "pull_request";
+  return;
+}
+function ruleNarrowingRefusal(input) {
+  if (input.acknowledged)
+    return;
+  const rules = input.declared;
+  if (rules === undefined)
+    return;
+  const live = liveRuleTypes(input.live);
+  const ruleType = droppedBooleanOrPullRequestType(rules, live) ?? (rules.requiredStatusChecks === false && live.has("required_status_checks") ? "required_status_checks" : undefined);
+  if (ruleType === undefined)
+    return;
+  return new RuleNarrowed({
+    owner: input.owner,
+    repository: input.repository,
+    name: input.name,
+    ruleType
+  });
+}
+
 // src/github/repository-ruleset-reconcile.ts
 var guardedPullRequestFields = (rule) => {
   const params = rule?.parameters ?? {};
@@ -631,6 +702,8 @@ var reconcileRuleset = (input) => Effect4.gen(function* () {
   if (observed === undefined) {
     observed = yield* probeByName(octokit, { owner, repo, name: news.name, target });
   }
+  const bypassAcknowledged = isBypassNarrowingAcknowledged(news);
+  const ruleAcknowledged = isRuleNarrowingAcknowledged(news);
   const bypassRefusal = news.bypassActors === undefined ? undefined : bypassWideningRefusal({
     owner,
     repository: repo,
@@ -640,6 +713,16 @@ var reconcileRuleset = (input) => Effect4.gen(function* () {
   });
   if (bypassRefusal !== undefined)
     return yield* Effect4.fail(bypassRefusal);
+  const bypassNarrowRefusal = news.bypassActors === undefined ? undefined : bypassNarrowingRefusal({
+    owner,
+    repository: repo,
+    name: news.name,
+    declared: news.bypassActors,
+    live: observed,
+    acknowledged: bypassAcknowledged
+  });
+  if (bypassNarrowRefusal !== undefined)
+    return yield* Effect4.fail(bypassNarrowRefusal);
   const ruleRefusal = undeclaredLiveRuleRefusal({
     owner,
     repository: repo,
@@ -649,6 +732,16 @@ var reconcileRuleset = (input) => Effect4.gen(function* () {
   });
   if (ruleRefusal !== undefined)
     return yield* Effect4.fail(ruleRefusal);
+  const ruleNarrowRefusal = ruleNarrowingRefusal({
+    owner,
+    repository: repo,
+    name: news.name,
+    declared: news.rules,
+    live: observed,
+    acknowledged: ruleAcknowledged
+  });
+  if (ruleNarrowRefusal !== undefined)
+    return yield* Effect4.fail(ruleNarrowRefusal);
   const checksRefusal = requiredChecksOmissionRefusal({
     owner,
     repository: repo,
@@ -700,7 +793,8 @@ var attrsOf = (r) => ({
   updatedAt: r.updated_at
 });
 function constraintRefusal(props) {
-  const approvals = props.rules?.pullRequest?.requiredApprovingReviewCount;
+  const pr = props.rules?.pullRequest === false ? undefined : props.rules?.pullRequest;
+  const approvals = pr?.requiredApprovingReviewCount;
   if (approvals !== undefined) {
     const reason = approvalCountRefusal(approvals);
     if (reason !== undefined) {
@@ -710,7 +804,7 @@ function constraintRefusal(props) {
       });
     }
   }
-  const methods = props.rules?.pullRequest?.allowedMergeMethods;
+  const methods = pr?.allowedMergeMethods;
   if (methods !== undefined) {
     const reason = allowedMergeMethodsRefusal(methods);
     if (reason !== undefined) {
@@ -850,6 +944,7 @@ var declareRepoBaseline = (id, options) => Effect7.gen(function* () {
   return { repository, ruleset };
 });
 export {
+  BypassActorNarrowed,
   BypassActorWidened,
   DuplicateRuleset,
   NeverReportedContext,
@@ -859,6 +954,7 @@ export {
   RepositoryRuleset,
   RepositoryRulesetProvider,
   RequiredChecksOmitted,
+  RuleNarrowed,
   RulesetConstraintRefused,
   UndeclaredLiveRule,
   declareRepoBaseline,
@@ -868,5 +964,5 @@ export {
   repoPolicy
 };
 
-//# debugId=45989F9C0ABF077664756E2164756E21
+//# debugId=92F34291743D117E64756E2164756E21
 //# sourceMappingURL=index.js.map