@simplysf/simply-gitlab-core 0.2.0 → 0.4.0

package/lib/baseline-config.js

@@ -0,0 +1,342 @@
+/*
+ * Copyright (c) 2026, SimplySF.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+import { ConfigError } from './errors.js';
+import { readTextFile } from './json-input.js';
+/** The list sections, in the order `apply` reconciles them. */
+export const LIST_SECTIONS = ['protectedBranches', 'protectedTags', 'approvalRules', 'variables'];
+/** The object sections, which merge key by key rather than by entry. */
+export const OBJECT_SECTIONS = ['settings', 'approvals', 'pushRules'];
+/**
+ * What identifies an entry within its section, for merging an override onto a baseline and for
+ * matching a declared entry against one that already exists on the instance.
+ *
+ * Every section has a natural key, which is what makes a two-line override possible: restating a
+ * whole array to change one number is how these files rot.
+ */
+const SECTION_KEYS = {
+    protectedBranches: ['name'],
+    protectedTags: ['name'],
+    approvalRules: ['name'],
+    variables: ['key', 'environment_scope'],
+};
+/** GitLab treats an unset environment scope as `*`, so the merge key has to agree with it. */
+const SCOPE_DEFAULTS = { environment_scope: '*' };
+/**
+ * Renders a key field as text.
+ *
+ * Key fields come out of parsed JSON, so they are `unknown` until proven otherwise. Coercing an
+ * object with `String()` would key every such entry as `[object Object]` and silently collide
+ * entries that are not the same thing at all.
+ */
+function keyText(value) {
+    if (value === undefined || value === null)
+        return '';
+    if (typeof value === 'string')
+        return value;
+    if (typeof value === 'number' || typeof value === 'boolean')
+        return String(value);
+    return JSON.stringify(value) ?? '';
+}
+/** The identity of one entry, as a string, for keying a map. */
+export function entryKey(section, entry) {
+    return SECTION_KEYS[section].map((field) => keyText(entry[field] ?? SCOPE_DEFAULTS[field])).join(' ');
+}
+/** The human-readable identity of one entry, for plan output. */
+export function entryLabel(section, entry) {
+    return SECTION_KEYS[section]
+        .map((field) => keyText(entry[field] ?? SCOPE_DEFAULTS[field]))
+        .filter((part) => part !== '')
+        .join(' @ ');
+}
+function isPlainObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+export function normalizeSection(section) {
+    if (section === undefined)
+        return undefined;
+    if (Array.isArray(section))
+        return { prune: false, replace: false, entries: section };
+    const object = section;
+    return { prune: object.prune === true, replace: object.$replace === true, entries: object.entries };
+}
+// --- Validation ---------------------------------------------------------------------------------
+/**
+ * Validates the parsed file, reporting the JSON path of whatever is wrong.
+ *
+ * Hand-written rather than schema-driven because the error is the product: a caller who wrote
+ * `"targets": {"group": "x"}` needs to be told that the key is `groups` and that it takes an array,
+ * at that path, not that the document failed to match a schema. The published JSON Schema gives an
+ * editor completion and hover text; this is what runs.
+ */
+export function validateBaselineConfig(value, label = 'config') {
+    const problems = [];
+    const at = (path, message) => {
+        problems.push(`${path}: ${message}`);
+    };
+    if (!isPlainObject(value)) {
+        throw new ConfigError(`${label} must be a JSON object.`);
+    }
+    if (value.version !== 1) {
+        at('version', `must be 1, got ${JSON.stringify(value.version)}`);
+    }
+    const known = new Set(['$schema', 'version', 'targets', 'group', 'project', 'overrides']);
+    for (const key of Object.keys(value)) {
+        if (!known.has(key))
+            at(key, `is not a known top-level key (expected one of ${[...known].join(', ')})`);
+    }
+    if (value.targets !== undefined)
+        validateTargets(value.targets, 'targets', at);
+    if (value.group !== undefined)
+        validateGroupDesired(value.group, 'group', at);
+    if (value.project !== undefined)
+        validateProjectDesired(value.project, 'project', at);
+    if (value.overrides !== undefined) {
+        if (!isPlainObject(value.overrides)) {
+            at('overrides', 'must be an object keyed by project or group path');
+        }
+        else {
+            for (const [path, override] of Object.entries(value.overrides)) {
+                const where = `overrides["${path}"]`;
+                if (!isPlainObject(override)) {
+                    at(where, 'must be an object');
+                    continue;
+                }
+                for (const key of Object.keys(override)) {
+                    if (key !== 'project' && key !== 'group')
+                        at(`${where}.${key}`, 'must be "project" or "group"');
+                }
+                if (override.project !== undefined)
+                    validateProjectDesired(override.project, `${where}.project`, at);
+                if (override.group !== undefined)
+                    validateGroupDesired(override.group, `${where}.group`, at);
+            }
+        }
+    }
+    if (problems.length > 0) {
+        // Every problem at once. Fixing a config one error per run, fifty projects into a change, is
+        // the kind of loop that makes people stop using the tool.
+        throw new ConfigError(`${label} is not valid:\n  ${problems.join('\n  ')}`);
+    }
+    return value;
+}
+function validateStringArray(value, path, at) {
+    if (!Array.isArray(value)) {
+        at(path, 'must be an array of strings');
+        return;
+    }
+    for (const [index, item] of value.entries()) {
+        if (typeof item !== 'string' || item.trim() === '') {
+            at(`${path}[${index}]`, `must be a non-empty string, got ${JSON.stringify(item)}`);
+        }
+    }
+}
+function validateTargets(value, path, at) {
+    if (!isPlainObject(value)) {
+        at(path, 'must be an object');
+        return;
+    }
+    const known = new Set(['groups', 'projects', 'exclude']);
+    for (const key of Object.keys(value)) {
+        if (!known.has(key))
+            at(`${path}.${key}`, `is not a known key (expected ${[...known].join(', ')})`);
+    }
+    for (const key of known) {
+        if (value[key] !== undefined)
+            validateStringArray(value[key], `${path}.${key}`, at);
+    }
+    if (value.groups === undefined && value.projects === undefined) {
+        at(path, 'must name at least one of "groups" or "projects"');
+    }
+}
+function validateGroupDesired(value, path, at) {
+    if (!isPlainObject(value)) {
+        at(path, 'must be an object');
+        return;
+    }
+    for (const key of Object.keys(value)) {
+        if (key !== 'settings')
+            at(`${path}.${key}`, 'is not a known key (expected "settings")');
+    }
+    if (value.settings !== undefined && !isPlainObject(value.settings)) {
+        at(`${path}.settings`, 'must be an object of GitLab group attributes');
+    }
+}
+function validateProjectDesired(value, path, at) {
+    if (!isPlainObject(value)) {
+        at(path, 'must be an object');
+        return;
+    }
+    const known = new Set([...OBJECT_SECTIONS, ...LIST_SECTIONS]);
+    for (const key of Object.keys(value)) {
+        if (!known.has(key))
+            at(`${path}.${key}`, `is not a known section (expected ${[...known].join(', ')})`);
+    }
+    for (const section of OBJECT_SECTIONS) {
+        const entry = value[section];
+        if (entry !== undefined && !isPlainObject(entry)) {
+            at(`${path}.${section}`, 'must be an object of GitLab attributes');
+        }
+    }
+    for (const section of LIST_SECTIONS) {
+        if (value[section] !== undefined)
+            validateListSection(value[section], `${path}.${section}`, section, at);
+    }
+}
+function validateListSection(value, path, section, at) {
+    let entries;
+    if (Array.isArray(value)) {
+        entries = value;
+    }
+    else if (isPlainObject(value)) {
+        const known = new Set(['prune', '$replace', 'entries']);
+        for (const key of Object.keys(value)) {
+            if (!known.has(key))
+                at(`${path}.${key}`, `is not a known key (expected ${[...known].join(', ')})`);
+        }
+        for (const flag of ['prune', '$replace']) {
+            if (value[flag] !== undefined && typeof value[flag] !== 'boolean')
+                at(`${path}.${flag}`, 'must be a boolean');
+        }
+        if (value.entries === undefined) {
+            at(`${path}.entries`, 'is required when the section is written as an object');
+            return;
+        }
+        entries = value.entries;
+    }
+    else {
+        at(path, 'must be an array of entries, or an object with an "entries" array');
+        return;
+    }
+    if (!Array.isArray(entries)) {
+        at(Array.isArray(value) ? path : `${path}.entries`, 'must be an array');
+        return;
+    }
+    const base = Array.isArray(value) ? path : `${path}.entries`;
+    const seen = new Map();
+    for (const [index, entry] of entries.entries()) {
+        const where = `${base}[${index}]`;
+        if (!isPlainObject(entry)) {
+            at(where, 'must be an object');
+            continue;
+        }
+        for (const field of SECTION_KEYS[section]) {
+            // Only the first key field is required; `environment_scope` defaults to `*`, as GitLab does.
+            if (field !== SECTION_KEYS[section][0])
+                continue;
+            if (typeof entry[field] !== 'string' || entry[field].trim() === '') {
+                at(`${where}.${field}`, `is required and must be a non-empty string`);
+            }
+        }
+        const key = entryKey(section, entry);
+        const first = seen.get(key);
+        if (first !== undefined) {
+            // Two entries with the same identity would silently reconcile against each other.
+            at(where, `duplicates ${base}[${first}] (same ${SECTION_KEYS[section].join(' + ')})`);
+        }
+        else {
+            seen.set(key, index);
+        }
+    }
+}
+// --- Merging ------------------------------------------------------------------------------------
+/**
+ * The effective configuration for one project: the baseline with its override merged over it.
+ *
+ * Objects merge key by key. Lists merge by the section's natural key, so an override adjusts one
+ * entry rather than restating the array — unless it sets `$replace`, which swaps the list wholesale
+ * for the project that genuinely needs different rules rather than adjusted ones.
+ */
+export function mergeProjectDesired(base = {}, override = {}) {
+    const merged = {};
+    for (const section of OBJECT_SECTIONS) {
+        const value = mergeObjects(base[section], override[section]);
+        if (value !== undefined)
+            merged[section] = value;
+    }
+    for (const section of LIST_SECTIONS) {
+        const value = mergeSections(section, base[section], override[section]);
+        if (value !== undefined)
+            merged[section] = value;
+    }
+    return merged;
+}
+export function mergeGroupDesired(base = {}, override = {}) {
+    const settings = mergeObjects(base.settings, override.settings);
+    return settings === undefined ? {} : { settings };
+}
+function mergeObjects(base, override) {
+    if (base === undefined && override === undefined)
+        return undefined;
+    return { ...(base ?? {}), ...(override ?? {}) };
+}
+function mergeSections(section, base, override) {
+    const left = normalizeSection(base);
+    const right = normalizeSection(override);
+    if (left === undefined && right === undefined)
+        return undefined;
+    if (left === undefined)
+        return { prune: right.prune, entries: right.entries };
+    if (right === undefined)
+        return { prune: left.prune, entries: left.entries };
+    // Pruning is a property of the section as configured, so an override can turn it on for one
+    // project without the baseline turning it on for all fifty.
+    if (right.replace)
+        return { prune: right.prune, entries: right.entries };
+    const byKey = new Map();
+    const order = [];
+    for (const entry of left.entries) {
+        const key = entryKey(section, entry);
+        if (!byKey.has(key))
+            order.push(key);
+        byKey.set(key, entry);
+    }
+    for (const entry of right.entries) {
+        const key = entryKey(section, entry);
+        const existing = byKey.get(key);
+        if (existing === undefined)
+            order.push(key);
+        byKey.set(key, existing === undefined ? entry : { ...existing, ...entry });
+    }
+    return { prune: right.prune || left.prune, entries: order.map((key) => byKey.get(key)) };
+}
+/** The effective project configuration for one path, baseline merged with any override for it. */
+export function effectiveProject(config, path) {
+    return mergeProjectDesired(config.project, config.overrides?.[path]?.project);
+}
+/** The effective group configuration for one path. */
+export function effectiveGroup(config, path) {
+    return mergeGroupDesired(config.group, config.overrides?.[path]?.group);
+}
+/**
+ * Reads and validates a baseline config file.
+ *
+ * A parse failure reports only the position, never the parser's snippet of the content — the same
+ * rule the rest of this package follows, because a caller can name any path and the snippet would
+ * echo the first bytes of whatever file that was.
+ */
+export function loadBaselineConfig(path) {
+    const source = readTextFile(path, 'Config file');
+    let parsed;
+    try {
+        parsed = JSON.parse(source);
+    }
+    catch (error) {
+        const position = error instanceof Error ? /position \d+(?::? line \d+ column \d+)?/.exec(error.message)?.[0] : undefined;
+        throw new ConfigError(`${path} is not valid JSON${position === undefined ? '' : ` at ${position}`}.`);
+    }
+    return validateBaselineConfig(parsed, path);
+}
+//# sourceMappingURL=baseline-config.js.map

package/lib/baseline-config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline-config.js","sourceRoot":"","sources":["../src/baseline-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAC;AAuE/C,+DAA+D;AAC/D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,mBAAmB,EAAE,eAAe,EAAE,eAAe,EAAE,WAAW,CAAU,CAAC;AAG3G,wEAAwE;AACxE,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,UAAU,EAAE,WAAW,EAAE,WAAW,CAAU,CAAC;AAE/E;;;;;;GAMG;AACH,MAAM,YAAY,GAAqD;IACrE,iBAAiB,EAAE,CAAC,MAAM,CAAC;IAC3B,aAAa,EAAE,CAAC,MAAM,CAAC;IACvB,aAAa,EAAE,CAAC,MAAM,CAAC;IACvB,SAAS,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC;CACxC,CAAC;AAEF,8FAA8F;AAC9F,MAAM,cAAc,GAAqC,EAAE,iBAAiB,EAAE,GAAG,EAAE,CAAC;AAEpF;;;;;;GAMG;AACH,SAAS,OAAO,CAAC,KAAc;IAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACrD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC;IAClF,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC;AAED,gEAAgE;AAChE,MAAM,UAAU,QAAQ,CAAC,OAAoB,EAAE,KAAY;IACzD,OAAO,YAAY,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACxG,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,UAAU,CAAC,OAAoB,EAAE,KAAY;IAC3D,OAAO,YAAY,CAAC,OAAO,CAAC;SACzB,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;SAC9D,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,EAAE,CAAC;SAC7B,IAAI,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,OAA4B;IAC3D,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IACtF,MAAM,MAAM,GAAG,OAAwB,CAAC;IACxC,OAAO,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,KAAK,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,QAAQ,KAAK,IAAI,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;AACtG,CAAC;AAED,mGAAmG;AAEnG;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAc,EAAE,KAAK,GAAG,QAAQ;IACrE,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,EAAE,GAAG,CAAC,IAAY,EAAE,OAAe,EAAQ,EAAE;QACjD,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC;IACvC,CAAC,CAAC;IAEF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,IAAI,WAAW,CAAC,GAAG,KAAK,yBAAyB,CAAC,CAAC;IAC3D,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACxB,EAAE,CAAC,SAAS,EAAE,kBAAkB,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IAC1F,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,EAAE,CAAC,GAAG,EAAE,iDAAiD,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1G,CAAC;IAED,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,eAAe,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC/E,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS;QAAE,oBAAoB,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC9E,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;QAAE,sBAAsB,CAAC,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAEtF,IAAI,KAAK,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAClC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YACpC,EAAE,CAAC,WAAW,EAAE,kDAAkD,CAAC,CAAC;QACtE,CAAC;aAAM,CAAC;YACN,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;gBAC/D,MAAM,KAAK,GAAG,cAAc,IAAI,IAAI,CAAC;gBACrC,IAAI,CAAC,aAAa,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC7B,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;oBAC/B,SAAS;gBACX,CAAC;gBACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACxC,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,OAAO;wBAAE,EAAE,CAAC,GAAG,KAAK,IAAI,GAAG,EAAE,EAAE,8BAA8B,CAAC,CAAC;gBAClG,CAAC;gBACD,IAAI,QAAQ,CAAC,OAAO,KAAK,SAAS;oBAAE,sBAAsB,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,KAAK,UAAU,EAAE,EAAE,CAAC,CAAC;gBACrG,IAAI,QAAQ,CAAC,KAAK,KAAK,SAAS;oBAAE,oBAAoB,CAAC,QAAQ,CAAC,KAAK,EAAE,GAAG,KAAK,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC/F,CAAC;QACH,CAAC;IACH,CAAC;IAED,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACxB,6FAA6F;QAC7F,0DAA0D;QAC1D,MAAM,IAAI,WAAW,CAAC,GAAG,KAAK,qBAAqB,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC9E,CAAC;IAED,OAAO,KAAkC,CAAC;AAC5C,CAAC;AAID,SAAS,mBAAmB,CAAC,KAAc,EAAE,IAAY,EAAE,EAAU;IACnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,EAAE,CAAC,IAAI,EAAE,6BAA6B,CAAC,CAAC;QACxC,OAAO;IACT,CAAC;IACD,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC5C,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACnD,EAAE,CAAC,GAAG,IAAI,IAAI,KAAK,GAAG,EAAE,mCAAmC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,IAAY,EAAE,EAAU;IAC/D,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,EAAE,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;IACzD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,EAAE,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,gCAAgC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACtG,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;QACxB,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,SAAS;YAAE,mBAAmB,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC/D,EAAE,CAAC,IAAI,EAAE,kDAAkD,CAAC,CAAC;IAC/D,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc,EAAE,IAAY,EAAE,EAAU;IACpE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,EAAE,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IACD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,GAAG,KAAK,UAAU;YAAE,EAAE,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,0CAA0C,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnE,EAAE,CAAC,GAAG,IAAI,WAAW,EAAE,8CAA8C,CAAC,CAAC;IACzE,CAAC;AACH,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc,EAAE,IAAY,EAAE,EAAU;IACtE,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,EAAE,CAAC,IAAI,EAAE,mBAAmB,CAAC,CAAC;QAC9B,OAAO;IACT,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,GAAG,CAAS,CAAC,GAAG,eAAe,EAAE,GAAG,aAAa,CAAC,CAAC,CAAC;IACtE,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,EAAE,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,oCAAoC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1G,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7B,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YACjD,EAAE,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,EAAE,wCAAwC,CAAC,CAAC;QACrE,CAAC;IACH,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,SAAS;YAAE,mBAAmB,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,GAAG,IAAI,IAAI,OAAO,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,CAAC;IAC3G,CAAC;AACH,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc,EAAE,IAAY,EAAE,OAAoB,EAAE,EAAU;IACzF,IAAI,OAAgB,CAAC;IAErB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;SAAM,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;QACxD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;YACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,EAAE,CAAC,GAAG,IAAI,IAAI,GAAG,EAAE,EAAE,gCAAgC,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACtG,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,UAAU,CAAU,EAAE,CAAC;YAClD,IAAI,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS;gBAAE,EAAE,CAAC,GAAG,IAAI,IAAI,IAAI,EAAE,EAAE,mBAAmB,CAAC,CAAC;QAChH,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YAChC,EAAE,CAAC,GAAG,IAAI,UAAU,EAAE,sDAAsD,CAAC,CAAC;YAC9E,OAAO;QACT,CAAC;QACD,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;IAC1B,CAAC;SAAM,CAAC;QACN,EAAE,CAAC,IAAI,EAAE,mEAAmE,CAAC,CAAC;QAC9E,OAAO;IACT,CAAC;IAED,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,UAAU,EAAE,kBAAkB,CAAC,CAAC;QACxE,OAAO;IACT,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,UAAU,CAAC;IAC7D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IACvC,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAG,GAAG,IAAI,IAAI,KAAK,GAAG,CAAC;QAClC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,EAAE,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAC;YAC/B,SAAS;QACX,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;YAC1C,6FAA6F;YAC7F,IAAI,KAAK,KAAK,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;gBAAE,SAAS;YACjD,IAAI,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;gBACnE,EAAE,CAAC,GAAG,KAAK,IAAI,KAAK,EAAE,EAAE,4CAA4C,CAAC,CAAC;YACxE,CAAC;QACH,CAAC;QACD,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,kFAAkF;YAClF,EAAE,CAAC,KAAK,EAAE,cAAc,IAAI,IAAI,KAAK,WAAW,YAAY,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACxF,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;AACH,CAAC;AAED,mGAAmG;AAEnG;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAuB,EAAE,EAAE,WAA2B,EAAE;IAC1F,MAAM,MAAM,GAA4B,EAAE,CAAC;IAE3C,KAAK,MAAM,OAAO,IAAI,eAAe,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QAC7D,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;IACnD,CAAC;IAED,KAAK,MAAM,OAAO,IAAI,aAAa,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;QACvE,IAAI,KAAK,KAAK,SAAS;YAAE,MAAM,CAAC,OAAO,CAAC,GAAG,KAAK,CAAC;IACnD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,OAAqB,EAAE,EAAE,WAAyB,EAAE;IACpF,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,QAAQ,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAChE,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC;AACpD,CAAC;AAED,SAAS,YAAY,CACnB,IAAmD,EACnD,QAAuD;IAEvD,IAAI,IAAI,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IACnE,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,EAAE,CAAC;AAClD,CAAC;AAED,SAAS,aAAa,CAAC,OAAoB,EAAE,IAAc,EAAE,QAAkB;IAC7E,MAAM,IAAI,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,KAAK,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAChE,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,KAAM,CAAC,KAAK,EAAE,OAAO,EAAE,KAAM,CAAC,OAAO,EAAE,CAAC;IAChF,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;IAE7E,4FAA4F;IAC5F,4DAA4D;IAC5D,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAEzE,MAAM,KAAK,GAAG,IAAI,GAAG,EAAiB,CAAC;IACvC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IACxB,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,GAAG,GAAG,QAAQ,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QACrC,MAAM,QAAQ,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,QAAQ,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAC5C,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,GAAG,QAAQ,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAE,CAAC,EAAE,CAAC;AAC5F,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,gBAAgB,CAAC,MAAsB,EAAE,IAAY;IACnE,OAAO,mBAAmB,CAAC,MAAM,CAAC,OAAO,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC,CAAC;AAChF,CAAC;AAED,sDAAsD;AACtD,MAAM,UAAU,cAAc,CAAC,MAAsB,EAAE,IAAY;IACjE,OAAO,iBAAiB,CAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;AAC1E,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC7C,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IACjD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,QAAQ,GACZ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,yCAAyC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1G,MAAM,IAAI,WAAW,CAAC,GAAG,IAAI,qBAAqB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,QAAQ,EAAE,GAAG,CAAC,CAAC;IACxG,CAAC;IACD,OAAO,sBAAsB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC9C,CAAC"}

package/lib/baseline-export.d.ts

@@ -0,0 +1,21 @@
+import type { BaselineConfig, ProjectDesired } from './baseline-config.js';
+import type { GitLabClient } from './gitlab-client.js';
+/**
+ * Reads a live project and writes down what it looks like, as a config someone can edit.
+ *
+ * Writing a baseline by hand against forty attributes is miserable and the first draft would be
+ * wrong. Exporting the project that already looks right and deleting what you do not care about is
+ * how anyone actually starts, so this errs towards saying too much: deleting a line is easier than
+ * discovering that a key exists.
+ */
+/** The sections `export` can emit, in the order they appear in the file. */
+export declare const EXPORTABLE_SECTIONS: readonly ["settings", "protectedBranches", "protectedTags", "approvals", "approvalRules", "pushRules", "variables"];
+export type ExportableSection = (typeof EXPORTABLE_SECTIONS)[number];
+export interface ExportOptions {
+    /** Which sections to emit. Defaults to all of them. */
+    readonly sections?: readonly ExportableSection[];
+}
+/** Reads one project and returns the `project` block of a config describing it. */
+export declare function exportProject(client: GitLabClient, project: string, options?: ExportOptions): Promise<ProjectDesired>;
+/** A whole config file describing one project, ready to be widened to a group of them. */
+export declare function exportConfig(client: GitLabClient, project: string, options?: ExportOptions): Promise<BaselineConfig>;

package/lib/baseline-export.js

@@ -0,0 +1,245 @@
+/*
+ * Copyright (c) 2026, SimplySF.
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     http://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+/**
+ * Reads a live project and writes down what it looks like, as a config someone can edit.
+ *
+ * Writing a baseline by hand against forty attributes is miserable and the first draft would be
+ * wrong. Exporting the project that already looks right and deleting what you do not care about is
+ * how anyone actually starts, so this errs towards saying too much: deleting a line is easier than
+ * discovering that a key exists.
+ */
+/** The sections `export` can emit, in the order they appear in the file. */
+export const EXPORTABLE_SECTIONS = [
+    'settings',
+    'protectedBranches',
+    'protectedTags',
+    'approvals',
+    'approvalRules',
+    'pushRules',
+    'variables',
+];
+/**
+ * The project attributes worth putting in a baseline.
+ *
+ * A deliberate list rather than everything `GET /projects/:id` returns: that payload carries ids,
+ * timestamps, counts, and URLs, none of which can be set and all of which would look like intent
+ * once they were sitting in a config file.
+ */
+const SETTING_KEYS = [
+    // Merge request behaviour
+    'merge_method',
+    'squash_option',
+    'only_allow_merge_if_pipeline_succeeds',
+    'only_allow_merge_if_all_discussions_are_resolved',
+    'allow_merge_on_skipped_pipeline',
+    'remove_source_branch_after_merge',
+    'merge_trains_enabled',
+    'printing_merge_request_link_enabled',
+    'resolve_outdated_diff_discussions',
+    'merge_requests_template',
+    // CI/CD
+    'ci_config_path',
+    'build_timeout',
+    'auto_cancel_pending_pipelines',
+    'ci_default_git_depth',
+    'ci_forward_deployment_enabled',
+    'ci_separated_caches',
+    'ci_allow_fork_pipelines_to_run_in_parent_project',
+    'keep_latest_artifact',
+    'auto_devops_enabled',
+    'shared_runners_enabled',
+    'group_runners_enabled',
+    // Repository
+    'default_branch',
+    'issues_enabled',
+    'wiki_enabled',
+    'packages_enabled',
+];
+/** Approval settings that can be set back, as opposed to reported. */
+const APPROVAL_KEYS = [
+    'approvals_before_merge',
+    'reset_approvals_on_push',
+    'disable_overriding_approvers_per_merge_request',
+    'merge_requests_author_approval',
+    'merge_requests_disable_committers_approval',
+    'require_password_to_approve',
+];
+/** Push-rule attributes, minus the id and the project it belongs to. */
+const PUSH_RULE_KEYS = [
+    'commit_message_regex',
+    'commit_message_negative_regex',
+    'branch_name_regex',
+    'author_email_regex',
+    'file_name_regex',
+    'deny_delete_tag',
+    'member_check',
+    'prevent_secrets',
+    'max_file_size',
+    'commit_committer_check',
+    'commit_committer_name_check',
+    'reject_unsigned_commits',
+    'reject_non_dco_commits',
+];
+/** Protected-branch attributes, keeping the access arrays but dropping their server-side ids. */
+const BRANCH_KEYS = ['name', 'allow_force_push', 'code_owner_approval_required'];
+const ACCESS_ARRAYS = ['push_access_levels', 'merge_access_levels', 'unprotect_access_levels'];
+const ACCESS_TARGET = {
+    push_access_levels: 'allowed_to_push',
+    merge_access_levels: 'allowed_to_merge',
+    unprotect_access_levels: 'allowed_to_unprotect',
+};
+function asRecord(value) {
+    return (typeof value === 'object' && value !== null ? value : {});
+}
+/** Copies the named keys that are actually present, so an absent attribute stays absent. */
+function pick(source, keys) {
+    const picked = {};
+    for (const key of keys) {
+        if (source[key] !== undefined && source[key] !== null)
+            picked[key] = source[key];
+    }
+    return picked;
+}
+/**
+ * Turns an access-level array as GitLab reports it into the shape it accepts back.
+ *
+ * The read shape carries `id` and `access_level_description`, neither of which is writable, and the
+ * write shape is a different key. Exporting the raw read would produce a config that fails on its
+ * first apply.
+ */
+function accessEntries(levels) {
+    if (!Array.isArray(levels))
+        return undefined;
+    const mapped = levels.map((raw) => {
+        const level = asRecord(raw);
+        const entry = {};
+        if (typeof level.user_id === 'number')
+            entry.user_id = level.user_id;
+        else if (typeof level.group_id === 'number')
+            entry.group_id = level.group_id;
+        else if (typeof level.access_level === 'number')
+            entry.access_level = level.access_level;
+        return entry;
+    });
+    return mapped.length === 0 ? undefined : mapped;
+}
+function exportBranch(raw) {
+    const branch = asRecord(raw);
+    const entry = pick(branch, BRANCH_KEYS);
+    for (const key of ACCESS_ARRAYS) {
+        const mapped = accessEntries(branch[key]);
+        if (mapped !== undefined)
+            entry[ACCESS_TARGET[key]] = mapped;
+    }
+    return entry;
+}
+function exportTag(raw) {
+    const tag = asRecord(raw);
+    const entry = { name: tag.name };
+    const levels = Array.isArray(tag.create_access_levels) ? tag.create_access_levels.map(asRecord) : [];
+    const first = levels[0];
+    if (first !== undefined && typeof first.access_level === 'number')
+        entry.create_access_level = first.access_level;
+    return entry;
+}
+function exportRule(raw) {
+    const rule = asRecord(raw);
+    // The implicit fallback rule is not something a config declares; exporting it would invite
+    // someone to prune it and lose the project's default approval behaviour.
+    if (rule.rule_type === 'any_approver')
+        return undefined;
+    const entry = { name: rule.name, approvals_required: rule.approvals_required };
+    const usernames = (Array.isArray(rule.eligible_approvers) ? rule.eligible_approvers : [])
+        .map((user) => asRecord(user).username)
+        .filter((username) => typeof username === 'string');
+    if (usernames.length > 0)
+        entry.usernames = usernames.sort();
+    const groups = (Array.isArray(rule.groups) ? rule.groups : [])
+        .map((group) => asRecord(group).full_path)
+        .filter((path) => typeof path === 'string');
+    if (groups.length > 0)
+        entry.groups = groups.sort();
+    const branches = (Array.isArray(rule.protected_branches) ? rule.protected_branches : [])
+        .map((branch) => asRecord(branch).name)
+        .filter((name) => typeof name === 'string');
+    if (branches.length > 0)
+        entry.protectedBranches = branches.sort();
+    else if (rule.applies_to_all_protected_branches === true)
+        entry.applies_to_all_protected_branches = true;
+    return entry;
+}
+/** Variables are exported as metadata. The `value` GitLab returns is never copied into the file. */
+function exportVariable(raw) {
+    const variable = asRecord(raw);
+    return pick(variable, ['key', 'environment_scope', 'variable_type', 'protected', 'masked', 'raw']);
+}
+/** Reads a section, treating a Premium-only endpoint that refuses as simply absent. */
+async function optional(read) {
+    try {
+        return await read();
+    }
+    catch {
+        return undefined;
+    }
+}
+/** Reads one project and returns the `project` block of a config describing it. */
+export async function exportProject(client, project, options = {}) {
+    const wanted = new Set(options.sections ?? EXPORTABLE_SECTIONS);
+    const desired = {};
+    if (wanted.has('settings')) {
+        desired.settings = pick(asRecord(await client.getProject(project)), SETTING_KEYS);
+    }
+    if (wanted.has('protectedBranches')) {
+        desired.protectedBranches = (await client.listProtectedBranches(project)).items.map(exportBranch);
+    }
+    if (wanted.has('protectedTags')) {
+        desired.protectedTags = (await client.listProtectedTags(project)).items.map(exportTag);
+    }
+    if (wanted.has('approvals')) {
+        const approvals = await optional(() => client.getApprovalSettings(project));
+        if (approvals !== undefined)
+            desired.approvals = pick(asRecord(approvals), APPROVAL_KEYS);
+    }
+    if (wanted.has('approvalRules')) {
+        const rules = await optional(() => client.listApprovalRules(project));
+        if (rules !== undefined) {
+            desired.approvalRules = rules.items.map(exportRule).filter((rule) => rule !== undefined);
+        }
+    }
+    if (wanted.has('pushRules')) {
+        const pushRules = await optional(() => client.getPushRules(project));
+        if (pushRules !== undefined && pushRules !== null)
+            desired.pushRules = pick(asRecord(pushRules), PUSH_RULE_KEYS);
+    }
+    if (wanted.has('variables')) {
+        const variables = await optional(() => client.listVariables(project, 200));
+        if (variables !== undefined)
+            desired.variables = variables.items.map(exportVariable);
+    }
+    return desired;
+}
+/** A whole config file describing one project, ready to be widened to a group of them. */
+export async function exportConfig(client, project, options = {}) {
+    const desired = await exportProject(client, project, options);
+    return {
+        version: 1,
+        // Deliberately the project it came from, not a group: whoever runs this next should choose the
+        // blast radius on purpose rather than inherit one from an export.
+        targets: { projects: [project] },
+        project: desired,
+    };
+}
+//# sourceMappingURL=baseline-export.js.map

package/lib/baseline-export.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"baseline-export.js","sourceRoot":"","sources":["../src/baseline-export.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH;;;;;;;GAOG;AAEH,4EAA4E;AAC5E,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC,UAAU;IACV,mBAAmB;IACnB,eAAe;IACf,WAAW;IACX,eAAe;IACf,WAAW;IACX,WAAW;CACH,CAAC;AASX;;;;;;GAMG;AACH,MAAM,YAAY,GAAG;IACnB,0BAA0B;IAC1B,cAAc;IACd,eAAe;IACf,uCAAuC;IACvC,kDAAkD;IAClD,iCAAiC;IACjC,kCAAkC;IAClC,sBAAsB;IACtB,qCAAqC;IACrC,mCAAmC;IACnC,yBAAyB;IACzB,QAAQ;IACR,gBAAgB;IAChB,eAAe;IACf,+BAA+B;IAC/B,sBAAsB;IACtB,+BAA+B;IAC/B,qBAAqB;IACrB,kDAAkD;IAClD,sBAAsB;IACtB,qBAAqB;IACrB,wBAAwB;IACxB,uBAAuB;IACvB,aAAa;IACb,gBAAgB;IAChB,gBAAgB;IAChB,cAAc;IACd,kBAAkB;CACV,CAAC;AAEX,sEAAsE;AACtE,MAAM,aAAa,GAAG;IACpB,wBAAwB;IACxB,yBAAyB;IACzB,gDAAgD;IAChD,gCAAgC;IAChC,4CAA4C;IAC5C,6BAA6B;CACrB,CAAC;AAEX,wEAAwE;AACxE,MAAM,cAAc,GAAG;IACrB,sBAAsB;IACtB,+BAA+B;IAC/B,mBAAmB;IACnB,oBAAoB;IACpB,iBAAiB;IACjB,iBAAiB;IACjB,cAAc;IACd,iBAAiB;IACjB,eAAe;IACf,wBAAwB;IACxB,6BAA6B;IAC7B,yBAAyB;IACzB,wBAAwB;CAChB,CAAC;AAEX,iGAAiG;AACjG,MAAM,WAAW,GAAG,CAAC,MAAM,EAAE,kBAAkB,EAAE,8BAA8B,CAAU,CAAC;AAC1F,MAAM,aAAa,GAAG,CAAC,oBAAoB,EAAE,qBAAqB,EAAE,yBAAyB,CAAU,CAAC;AACxG,MAAM,aAAa,GAAqC;IACtD,kBAAkB,EAAE,iBAAiB;IACrC,mBAAmB,EAAE,kBAAkB;IACvC,uBAAuB,EAAE,sBAAsB;CAChD,CAAC;AAEF,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;AAC/F,CAAC;AAED,4FAA4F;AAC5F,SAAS,IAAI,CAAC,MAA+B,EAAE,IAAuB;IACpE,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,SAAS,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,IAAI;YAAE,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;GAMG;AACH,SAAS,aAAa,CAAC,MAAe;IACpC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QAChC,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC5B,MAAM,KAAK,GAA4B,EAAE,CAAC;QAC1C,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ;YAAE,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;aAChE,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ;YAAE,KAAK,CAAC,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;aACxE,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;YAAE,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC,YAAY,CAAC;QACzF,OAAO,KAAK,CAAC;IACf,CAAC,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;AAClD,CAAC;AAED,SAAS,YAAY,CAAC,GAAY;IAChC,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IACxC,KAAK,MAAM,GAAG,IAAI,aAAa,EAAE,CAAC;QAChC,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;QAC1C,IAAI,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,SAAS,CAAC,GAAY;IAC7B,MAAM,GAAG,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC1B,MAAM,KAAK,GAA4B,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1D,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,oBAAoB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACrG,MAAM,KAAK,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACxB,IAAI,KAAK,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ;QAAE,KAAK,CAAC,mBAAmB,GAAG,KAAK,CAAC,YAAY,CAAC;IAClH,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,UAAU,CAAC,GAAY;IAC9B,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC3B,2FAA2F;IAC3F,yEAAyE;IACzE,IAAI,IAAI,CAAC,SAAS,KAAK,cAAc;QAAE,OAAO,SAAS,CAAC;IAExD,MAAM,KAAK,GAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,kBAAkB,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC;IACxG,MAAM,SAAS,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;SACtF,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC;SACtC,MAAM,CAAC,CAAC,QAAQ,EAAsB,EAAE,CAAC,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC;IAC1E,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,SAAS,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IAE7D,MAAM,MAAM,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;SAC3D,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC;SACzC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC9D,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAEpD,MAAM,QAAQ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;SACrF,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;SACtC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC;IAC9D,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,KAAK,CAAC,iBAAiB,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;SAC9D,IAAI,IAAI,CAAC,iCAAiC,KAAK,IAAI;QAAE,KAAK,CAAC,iCAAiC,GAAG,IAAI,CAAC;IAEzG,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oGAAoG;AACpG,SAAS,cAAc,CAAC,GAAY;IAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,IAAI,CAAC,QAAQ,EAAE,CAAC,KAAK,EAAE,mBAAmB,EAAE,eAAe,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;AACrG,CAAC;AAED,uFAAuF;AACvF,KAAK,UAAU,QAAQ,CAAI,IAAsB;IAC/C,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,mFAAmF;AACnF,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAoB,EACpB,OAAe,EACf,UAAyB,EAAE;IAE3B,MAAM,MAAM,GAAG,IAAI,GAAG,CAAS,OAAO,CAAC,QAAQ,IAAI,mBAAmB,CAAC,CAAC;IACxE,MAAM,OAAO,GAA4B,EAAE,CAAC;IAE5C,IAAI,MAAM,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3B,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;IACpF,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,mBAAmB,CAAC,EAAE,CAAC;QACpC,OAAO,CAAC,iBAAiB,GAAG,CAAC,MAAM,MAAM,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,OAAO,CAAC,aAAa,GAAG,CAAC,MAAM,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IACzF,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC;QAC5E,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,aAAa,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,CAAC;QAChC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,CAAC,CAAC;QACtE,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,OAAO,CAAC,aAAa,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAiB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC;QAC1G,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,CAAC,CAAC;QACrE,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,KAAK,IAAI;YAAE,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,cAAc,CAAC,CAAC;IACnH,CAAC;IACD,IAAI,MAAM,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,CAAC;QAC5B,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,CAAC;QAC3E,IAAI,SAAS,KAAK,SAAS;YAAE,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,KAAK,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IACvF,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,0FAA0F;AAC1F,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,MAAoB,EACpB,OAAe,EACf,UAAyB,EAAE;IAE3B,MAAM,OAAO,GAAG,MAAM,aAAa,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC9D,OAAO;QACL,OAAO,EAAE,CAAC;QACV,+FAA+F;QAC/F,kEAAkE;QAClE,OAAO,EAAE,EAAE,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE;QAChC,OAAO,EAAE,OAAO;KACjB,CAAC;AACJ,CAAC"}