@treeseed/sdk 0.6.38 → 0.6.39

package/dist/operations/services/config-runtime.js

@@ -2001,12 +2001,14 @@ async function syncTreeseedGitHubEnvironment({
   const githubClient = createGitHubApiClient({ env: ghEnv });
   const environment = scope === "prod" ? "production" : scope;
   const deploymentBranch = scope === "prod" ? PRODUCTION_BRANCH : scope === "staging" ? STAGING_BRANCH : null;
+  const deploymentTag = scope === "prod" ? "*.*.*" : null;
   const progress = (message, stream = "stdout") => onProgress?.(message, stream);
   if (!dryRun) {
     progress(`[${scope}][github][environment] Ensuring GitHub environment ${environment} exists...`);
     await ensureGitHubActionsEnvironment(repository, environment, {
       client: githubClient,
-      branchName: deploymentBranch
+      branchName: deploymentBranch,
+      tagName: deploymentTag
     });
   }
   progress(`[${scope}][github][sync] Loading existing GitHub secrets and variables...`);

package/dist/operations/services/github-api.d.ts

@@ -97,9 +97,10 @@ export declare function listGitHubRepositoryVariableNames(repository: string | {
 export declare function ensureGitHubActionsEnvironment(repository: string | {
     owner: string;
     name: string;
-}, environmentName: string, { client, branchName, }?: {
+}, environmentName: string, { client, branchName, tagName, }?: {
     client?: GitHubApiClient;
     branchName?: string | null;
+    tagName?: string | null;
 }): Promise<{
     repository: string;
     environment: string;

package/dist/operations/services/github-api.js

@@ -223,27 +223,32 @@ async function listGitHubRepositoryVariableNames(repository, { client = createGi
 }
 async function ensureGitHubActionsEnvironment(repository, environmentName, {
   client = createGitHubApiClient(),
-  branchName
+  branchName,
+  tagName
 } = {}) {
   const { owner, name: repo } = typeof repository === "string" ? parseGitHubRepositorySlug(repository) : repository;
+  const desiredPolicies = [
+    ...branchName ? [{ name: branchName, type: "branch" }] : [],
+    ...tagName ? [{ name: tagName, type: "tag" }] : []
+  ];
   try {
     await withGitHubApiRetries(() => client.request("PUT /repos/{owner}/{repo}/environments/{environment_name}", {
       owner,
       repo,
       environment_name: environmentName,
-      ...branchName ? {
+      ...desiredPolicies.length > 0 ? {
         deployment_branch_policy: {
           protected_branches: false,
           custom_branch_policies: true
         }
       } : {}
     }));
-    if (branchName) {
-      await ensureGitHubEnvironmentBranchPolicy(client, {
+    if (desiredPolicies.length > 0) {
+      await ensureGitHubEnvironmentDeploymentPolicies(client, {
         owner,
         repo,
         environmentName,
-        branchName
+        policies: desiredPolicies
       });
     }
     return { repository: `${owner}/${repo}`, environment: environmentName };
@@ -251,11 +256,11 @@ async function ensureGitHubActionsEnvironment(repository, environmentName, {
     throw normalizeGitHubApiError(error, `Unable to ensure GitHub environment ${environmentName} for ${owner}/${repo}`);
   }
 }
-async function ensureGitHubEnvironmentBranchPolicy(client, {
+async function ensureGitHubEnvironmentDeploymentPolicies(client, {
   owner,
   repo,
   environmentName,
-  branchName
+  policies: desiredPolicies
 }) {
   const response = await withGitHubApiRetries(() => client.request(
     "GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies",
@@ -267,9 +272,10 @@ async function ensureGitHubEnvironmentBranchPolicy(client, {
     }
   ));
   const policies = Array.isArray(response.data?.branch_policies) ? response.data.branch_policies : [];
-  const desired = policies.find((policy) => policy.name === branchName && (policy.type ?? "branch") === "branch");
+  const desiredKey = (policy) => `${policy.type ?? "branch"}:${policy.name ?? ""}`;
+  const desiredKeys = new Set(desiredPolicies.map((policy) => desiredKey(policy)));
   for (const policy of policies) {
-    if (!policy.id || policy.name === branchName && (policy.type ?? "branch") === "branch") {
+    if (!policy.id || desiredKeys.has(desiredKey(policy))) {
       continue;
     }
     await withGitHubApiRetries(() => client.request(
@@ -282,25 +288,28 @@ async function ensureGitHubEnvironmentBranchPolicy(client, {
       }
     ));
   }
-  if (desired) {
-    return;
-  }
-  try {
-    await withGitHubApiRetries(() => client.request(
-      "POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies",
-      {
-        owner,
-        repo,
-        environment_name: environmentName,
-        name: branchName,
-        type: "branch"
+  const existingKeys = new Set(policies.map((policy) => desiredKey(policy)));
+  for (const policy of desiredPolicies) {
+    if (existingKeys.has(desiredKey(policy))) {
+      continue;
+    }
+    try {
+      await withGitHubApiRetries(() => client.request(
+        "POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies",
+        {
+          owner,
+          repo,
+          environment_name: environmentName,
+          name: policy.name,
+          type: policy.type
+        }
+      ));
+    } catch (error) {
+      if (error && typeof error === "object" && error.status === 303) {
+        continue;
       }
-    ));
-  } catch (error) {
-    if (error && typeof error === "object" && error.status === 303) {
-      return;
+      throw error;
     }
-    throw error;
   }
 }
 async function paginateGitHubEnvironmentNames(client, route, params) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@treeseed/sdk",
-  "version": "0.6.38",
+  "version": "0.6.39",
   "description": "Shared Treeseed SDK for content-backed and D1-backed object models.",
   "license": "AGPL-3.0-only",
   "repository": {