declastruct-github 1.1.1 → 1.2.0

package/dist/domain.objects/DeclaredGithubOrgVariable.d.ts

@@ -0,0 +1,54 @@
+import type { UniDateTime } from '@ehmpathy/uni-time';
+import { DomainEntity, RefByUnique } from 'domain-objects';
+import type { DeclaredGithubOrg } from './DeclaredGithubOrg';
+/**
+ * .what = a declarative structure representing a GitHub Organization variable
+ * .why = enables declarative management of org-level GitHub Actions variables
+ */
+export interface DeclaredGithubOrgVariable {
+    /**
+     * .what = reference to the organization
+     */
+    org: RefByUnique<typeof DeclaredGithubOrg>;
+    /**
+     * .what = variable name
+     * .note = must be unique per org
+     */
+    name: string;
+    /**
+     * .what = variable value
+     * .note = stored in plain text (not encrypted)
+     */
+    value: string;
+    /**
+     * .what = visibility scope for the variable
+     * .note = 'all' = all repos, 'private' = private repos only, 'selected' = specific repos
+     */
+    visibility: 'all' | 'private' | 'selected';
+    /**
+     * .what = repository names when visibility is 'selected'
+     * .note = only repo names, not full owner/repo format
+     */
+    selectedRepositoryNames?: string[];
+    /**
+     * .what = when the variable was created
+     * .note = is @metadata -> may be undefined
+     */
+    createdAt?: UniDateTime;
+    /**
+     * .what = when the variable was last updated
+     * .note = is @metadata -> may be undefined
+     */
+    updatedAt?: UniDateTime;
+}
+export declare class DeclaredGithubOrgVariable extends DomainEntity<DeclaredGithubOrgVariable> implements DeclaredGithubOrgVariable {
+    static unique: readonly ["org", "name"];
+    static readonly: readonly ["createdAt", "updatedAt"];
+    static nested: {
+        org: {
+            new (props: RefByUnique<typeof DeclaredGithubOrg, any, any, any>): RefByUnique<typeof DeclaredGithubOrg, any, any, any>;
+            build<TDobj extends import("domain-objects").Refable<TShape, TPrimary, TUnique>, TShape extends import("domain-objects/dist/reference/Refable").DomainObjectShape = any, TPrimary extends readonly string[] = any, TUnique extends readonly string[] = any>(props: RefByUnique<TDobj, TShape, TPrimary, TUnique>): RefByUnique<TDobj, TShape, TPrimary, TUnique>;
+            as<TDobj_1 extends import("domain-objects").Refable<TShape_1, TPrimary_1, TUnique_1>, TShape_1 extends import("domain-objects/dist/reference/Refable").DomainObjectShape = any, TPrimary_1 extends readonly string[] = any, TUnique_1 extends readonly string[] = any>(props: RefByUnique<TDobj_1, TShape_1, TPrimary_1, TUnique_1>): RefByUnique<TDobj_1, TShape_1, TPrimary_1, TUnique_1>;
+        };
+    };
+}

package/dist/domain.objects/DeclaredGithubOrgVariable.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.DeclaredGithubOrgVariable = void 0;
+const domain_objects_1 = require("domain-objects");
+class DeclaredGithubOrgVariable extends domain_objects_1.DomainEntity {
+}
+exports.DeclaredGithubOrgVariable = DeclaredGithubOrgVariable;
+DeclaredGithubOrgVariable.unique = ['org', 'name'];
+DeclaredGithubOrgVariable.readonly = ['createdAt', 'updatedAt'];
+DeclaredGithubOrgVariable.nested = {
+    org: (domain_objects_1.RefByUnique),
+};
+//# sourceMappingURL=DeclaredGithubOrgVariable.js.map

package/dist/domain.objects/DeclaredGithubOrgVariable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"DeclaredGithubOrgVariable.js","sourceRoot":"","sources":["../../src/domain.objects/DeclaredGithubOrgVariable.ts"],"names":[],"mappings":";;;AACA,mDAA2D;AAmD3D,MAAa,yBACX,SAAQ,6BAAuC;;AADjD,8DASC;AALe,gCAAM,GAAG,CAAC,KAAK,EAAE,MAAM,CAAU,CAAC;AAClC,kCAAQ,GAAG,CAAC,WAAW,EAAE,WAAW,CAAU,CAAC;AAC/C,gCAAM,GAAG;IACrB,GAAG,EAAE,CAAA,4BAAqC,CAAA;CAC3C,CAAC"}

package/dist/domain.objects/DeclaredGithubRepo.d.ts

@@ -55,5 +55,6 @@ export interface DeclaredGithubRepo {
     archived?: boolean;
 }
 export declare class DeclaredGithubRepo extends DomainEntity<DeclaredGithubRepo> implements DeclaredGithubRepo {
+    static primary: readonly ["id"];
     static unique: readonly ["owner", "name"];
 }

package/dist/domain.objects/DeclaredGithubRepo.js

@@ -5,5 +5,6 @@ const domain_objects_1 = require("domain-objects");
 class DeclaredGithubRepo extends domain_objects_1.DomainEntity {
 }
 exports.DeclaredGithubRepo = DeclaredGithubRepo;
+DeclaredGithubRepo.primary = ['id'];
 DeclaredGithubRepo.unique = ['owner', 'name'];
 //# sourceMappingURL=DeclaredGithubRepo.js.map

package/dist/domain.objects/DeclaredGithubRepo.js.map

@@ -1 +1 @@
-{"version":3,"file":"DeclaredGithubRepo.js","sourceRoot":"","sources":["../../src/domain.objects/DeclaredGithubRepo.ts"],"names":[],"mappings":";;;AACA,mDAA8C;AAkE9C,MAAa,kBACX,SAAQ,6BAAgC;;AAD1C,gDAKC;AADe,yBAAM,GAAG,CAAC,OAAO,EAAE,MAAM,CAAU,CAAC"}
+{"version":3,"file":"DeclaredGithubRepo.js","sourceRoot":"","sources":["../../src/domain.objects/DeclaredGithubRepo.ts"],"names":[],"mappings":";;;AACA,mDAA8C;AAkE9C,MAAa,kBACX,SAAQ,6BAAgC;;AAD1C,gDAMC;AAFe,0BAAO,GAAG,CAAC,IAAI,CAAU,CAAC;AAC1B,yBAAM,GAAG,CAAC,OAAO,EAAE,MAAM,CAAU,CAAC"}

package/dist/domain.objects/DeclastructGithubProvider.d.ts

@@ -5,6 +5,10 @@ import type { DeclaredGithubApp } from './DeclaredGithubApp';
 import type { DeclaredGithubAppInstallation } from './DeclaredGithubAppInstallation';
 import type { DeclaredGithubBranch } from './DeclaredGithubBranch';
 import type { DeclaredGithubBranchProtection } from './DeclaredGithubBranchProtection';
+import type { DeclaredGithubOrg } from './DeclaredGithubOrg';
+import type { DeclaredGithubOrgMemberPrivileges } from './DeclaredGithubOrgMemberPrivileges';
+import type { DeclaredGithubOrgSecret } from './DeclaredGithubOrgSecret';
+import type { DeclaredGithubOrgVariable } from './DeclaredGithubOrgVariable';
 import type { DeclaredGithubRepo } from './DeclaredGithubRepo';
 import type { DeclaredGithubRepoConfig } from './DeclaredGithubRepoConfig';
 /**
@@ -18,4 +22,8 @@ export type DeclastructGithubProvider = DeclastructProvider<{
     DeclaredGithubBranchProtection: DeclastructDao<typeof DeclaredGithubBranchProtection, ContextGithubApi & ContextLogTrail>;
     DeclaredGithubApp: DeclastructDao<typeof DeclaredGithubApp, ContextGithubApi & ContextLogTrail>;
     DeclaredGithubAppInstallation: DeclastructDao<typeof DeclaredGithubAppInstallation, ContextGithubApi & ContextLogTrail>;
+    DeclaredGithubOrg: DeclastructDao<typeof DeclaredGithubOrg, ContextGithubApi & ContextLogTrail>;
+    DeclaredGithubOrgMemberPrivileges: DeclastructDao<typeof DeclaredGithubOrgMemberPrivileges, ContextGithubApi & ContextLogTrail>;
+    DeclaredGithubOrgVariable: DeclastructDao<typeof DeclaredGithubOrgVariable, ContextGithubApi & ContextLogTrail>;
+    DeclaredGithubOrgSecret: DeclastructDao<typeof DeclaredGithubOrgSecret, ContextGithubApi & ContextLogTrail>;
 }, ContextGithubApi & ContextLogTrail>;

package/dist/domain.operations/app/castToDeclaredGithubApp.js

@@ -101,7 +101,8 @@ const castPermissions = (input) => {
         organization_custom_properties: 'customProperties',
         organization_user_blocking: 'userBlocking',
         organization_hooks: 'hooks',
-        organization_secrets: 'secrets',
+        organization_secrets: 'actionsSecrets',
+        organization_actions_variables: 'actionsVariables',
         organization_projects: 'projects',
         organization_self_hosted_runners: 'selfHostedRunners',
     };

package/dist/domain.operations/app/castToDeclaredGithubApp.js.map

@@ -1 +1 @@
-{"version":3,"file":"castToDeclaredGithubApp.js","sourceRoot":"","sources":["../../../src/domain.operations/app/castToDeclaredGithubApp.ts"],"names":[],"mappings":";;;AAAA,iDAAmD;AAEnD,mDAAyD;AAGzD,8EAA2E;AAC3E,oGAI2D;AAC3D,kFAA+E;AAI/E;;;GAGG;AACI,MAAM,uBAAuB,GAAG,CACrC,KAAwB,EACxB,OAAsC,EACN,EAAE;IAClC,6BAA6B;IAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,wCAAuB,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,kCAAkC;IAClC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;IAC9B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,wCAAuB,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9B,wCAAuB,CAAC,KAAK,CAC3B,4CAA4C,EAC5C;YACE,KAAK;YACL,SAAS;SACV,CACF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,yCAAmB,CAAC;QACpC,IAAI,EAAE,SAAS,CAAC,WAAW,EAA6B;QACxD,IAAI,EAAE,UAAU;KACjB,CAAC,CAAC;IAEH,0BAA0B;IAC1B,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,wCAAuB,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,sEAAsE;IACtE,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAE7D,OAAO,qCAAiB,CAAC,EAAE,CAAC;QAC1B,EAAE;QACF,IAAI;QACJ,KAAK;QACL,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC5B,CAAC,CAAC,KAAK,CAAC,WAAW;iBACd,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,yCAAyC;iBACvE,IAAI,CAAC,IAAI,CAAC;iBACV,IAAI,EAAE,CAAC,wCAAwC;YACpD,CAAC,CAAC,IAAI;QACR,MAAM,EAAE,CAAC,GAAG,EAAE;YACZ,gCAAgC;YAChC,IAAI,QAAQ,IAAI,KAAK;gBACnB,OAAO,OAAO,CAAE,KAA8B,CAAC,MAAM,CAAC,CAAC;YACzD,iCAAiC;YACjC,IAAI,OAAO,EAAE,cAAc,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,cAAc,CAAC;YACzE,4BAA4B;YAC5B,MAAM,IAAI,wCAAuB,CAC/B,4DAA4D,EAC5D,EAAE,KAAK,EAAE,CACV,CAAC;QACJ,CAAC,CAAC,EAAE;QACJ,WAAW;QACX,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;QAC1B,WAAW,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;QACvC,UAAU,EAAE,IAAI,EAAE,qCAAqC;QACvD,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,wBAAa,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;QACzE,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,wBAAa,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAmC,CAAC;AACvC,CAAC,CAAC;AAvEW,QAAA,uBAAuB,2BAuElC;AAEF;;;GAGG;AACH,MAAM,eAAe,GAAG,CACtB,KAAyC,EACX,EAAE;IAChC,8DAA8D;IAC9D,MAAM,gBAAgB,GAGlB;QACF,QAAQ,EAAE,UAAU;QACpB,aAAa,EAAE,cAAc;QAC7B,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,SAAS;QAClB,cAAc,EAAE,gBAAgB;QAChC,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,aAAa;QAC1B,MAAM,EAAE,QAAQ;QAChB,aAAa,EAAE,cAAc;QAC7B,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,WAAW;QACtB,YAAY,EAAE,cAAc;QAC5B,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,UAAU;QACpB,gBAAgB,EAAE,OAAO;KAC1B,CAAC;IAEF,gEAAgE;IAChE,MAAM,kBAAkB,GAGpB;QACF,2BAA2B,EAAE,gBAAgB;QAC7C,OAAO,EAAE,SAAS;QAClB,8BAA8B,EAAE,kBAAkB;QAClD,0BAA0B,EAAE,cAAc;QAC1C,kBAAkB,EAAE,OAAO;QAC3B,oBAAoB,EAAE,SAAS;QAC/B,qBAAqB,EAAE,UAAU;QACjC,gCAAgC,EAAE,mBAAmB;KACtD,CAAC;IAEF,0CAA0C;IAC1C,MAAM,UAAU,GAAkC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YACtB,UAAU,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,MAAM,YAAY,GAAkC,EAAE,CAAC;IACvD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YACtB,YAAY,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,2DAA4B,CAAC;QACtC,UAAU,EACR,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;YAChC,CAAC,CAAE,UAAgE;YACnE,CAAC,CAAC,IAAI;QACV,YAAY,EACV,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC;YAClC,CAAC,CAAE,YAAoE;YACvE,CAAC,CAAC,IAAI;KACX,CAAC,CAAC;AACL,CAAC,CAAC"}
+{"version":3,"file":"castToDeclaredGithubApp.js","sourceRoot":"","sources":["../../../src/domain.operations/app/castToDeclaredGithubApp.ts"],"names":[],"mappings":";;;AAAA,iDAAmD;AAEnD,mDAAyD;AAGzD,8EAA2E;AAC3E,oGAI2D;AAC3D,kFAA+E;AAI/E;;;GAGG;AACI,MAAM,uBAAuB,GAAG,CACrC,KAAwB,EACxB,OAAsC,EACN,EAAE;IAClC,6BAA6B;IAC7B,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,wCAAuB,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,kCAAkC;IAClC,MAAM,SAAS,GAAG,KAAK,CAAC,KAAK,CAAC;IAC9B,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,wCAAuB,CAAC,KAAK,CAAC,iCAAiC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,UAAU,GAAG,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IAC9D,IAAI,CAAC,UAAU,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9B,wCAAuB,CAAC,KAAK,CAC3B,4CAA4C,EAC5C;YACE,KAAK;YACL,SAAS;SACV,CACF,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,yCAAmB,CAAC;QACpC,IAAI,EAAE,SAAS,CAAC,WAAW,EAA6B;QACxD,IAAI,EAAE,UAAU;KACjB,CAAC,CAAC;IAEH,0BAA0B;IAC1B,MAAM,EAAE,GAAG,KAAK,CAAC,EAAE,CAAC;IACpB,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;IACxB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,wCAAuB,CAAC,KAAK,CAAC,gCAAgC,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7E,CAAC;IAED,sEAAsE;IACtE,MAAM,WAAW,GAAG,eAAe,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IAE7D,OAAO,qCAAiB,CAAC,EAAE,CAAC;QAC1B,EAAE;QACF,IAAI;QACJ,KAAK;QACL,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,IAAI;QACxB,WAAW,EAAE,KAAK,CAAC,WAAW;YAC5B,CAAC,CAAC,KAAK,CAAC,WAAW;iBACd,KAAK,CAAC,IAAI,CAAC;iBACX,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,yCAAyC;iBACvE,IAAI,CAAC,IAAI,CAAC;iBACV,IAAI,EAAE,CAAC,wCAAwC;YACpD,CAAC,CAAC,IAAI;QACR,MAAM,EAAE,CAAC,GAAG,EAAE;YACZ,gCAAgC;YAChC,IAAI,QAAQ,IAAI,KAAK;gBACnB,OAAO,OAAO,CAAE,KAA8B,CAAC,MAAM,CAAC,CAAC;YACzD,iCAAiC;YACjC,IAAI,OAAO,EAAE,cAAc,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,cAAc,CAAC;YACzE,4BAA4B;YAC5B,MAAM,IAAI,wCAAuB,CAC/B,4DAA4D,EAC5D,EAAE,KAAK,EAAE,CACV,CAAC;QACJ,CAAC,CAAC,EAAE;QACJ,WAAW;QACX,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;QAC1B,WAAW,EAAE,KAAK,CAAC,YAAY,IAAI,IAAI;QACvC,UAAU,EAAE,IAAI,EAAE,qCAAqC;QACvD,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,wBAAa,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;QACzE,SAAS,EAAE,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,IAAA,wBAAa,EAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS;KAC1E,CAAmC,CAAC;AACvC,CAAC,CAAC;AAvEW,QAAA,uBAAuB,2BAuElC;AAEF;;;GAGG;AACH,MAAM,eAAe,GAAG,CACtB,KAAyC,EACX,EAAE;IAChC,8DAA8D;IAC9D,MAAM,gBAAgB,GAGlB;QACF,QAAQ,EAAE,UAAU;QACpB,aAAa,EAAE,cAAc;QAC7B,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,SAAS;QAClB,cAAc,EAAE,gBAAgB;QAChC,QAAQ,EAAE,UAAU;QACpB,WAAW,EAAE,aAAa;QAC1B,MAAM,EAAE,QAAQ;QAChB,aAAa,EAAE,cAAc;QAC7B,OAAO,EAAE,SAAS;QAClB,SAAS,EAAE,WAAW;QACtB,YAAY,EAAE,cAAc;QAC5B,KAAK,EAAE,OAAO;QACd,QAAQ,EAAE,UAAU;QACpB,gBAAgB,EAAE,OAAO;KAC1B,CAAC;IAEF,gEAAgE;IAChE,MAAM,kBAAkB,GAGpB;QACF,2BAA2B,EAAE,gBAAgB;QAC7C,OAAO,EAAE,SAAS;QAClB,8BAA8B,EAAE,kBAAkB;QAClD,0BAA0B,EAAE,cAAc;QAC1C,kBAAkB,EAAE,OAAO;QAC3B,oBAAoB,EAAE,gBAAgB;QACtC,8BAA8B,EAAE,kBAAkB;QAClD,qBAAqB,EAAE,UAAU;QACjC,gCAAgC,EAAE,mBAAmB;KACtD,CAAC;IAEF,0CAA0C;IAC1C,MAAM,UAAU,GAAkC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC5C,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YACtB,UAAU,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,4CAA4C;IAC5C,MAAM,YAAY,GAAkC,EAAE,CAAC;IACvD,KAAK,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACtD,MAAM,QAAQ,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;QAC9C,IAAI,QAAQ,IAAI,KAAK,EAAE,CAAC;YACtB,YAAY,CAAC,QAAQ,CAAC,GAAG,KAAK,CAAC;QACjC,CAAC;IACH,CAAC;IAED,OAAO,IAAI,2DAA4B,CAAC;QACtC,UAAU,EACR,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,MAAM,GAAG,CAAC;YAChC,CAAC,CAAE,UAAgE;YACnE,CAAC,CAAC,IAAI;QACV,YAAY,EACV,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,MAAM,GAAG,CAAC;YAClC,CAAC,CAAE,YAAoE;YACvE,CAAC,CAAC,IAAI;KACX,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/domain.operations/org/castToDeclaredGithubOrg.d.ts

@@ -0,0 +1,12 @@
+import type { Endpoints } from '@octokit/types';
+import { type HasMetadata } from 'type-fns';
+import { DeclaredGithubOrg } from '../../domain.objects/DeclaredGithubOrg';
+type GithubOrgResponse = Endpoints['GET /orgs/{org}']['response']['data'];
+/**
+ * .what = casts GitHub API org response to DeclaredGithubOrg
+ * .why = transforms external API shape to our domain model with type safety and validation
+ */
+export declare const castToDeclaredGithubOrg: (input: {
+    data: GithubOrgResponse;
+}) => HasMetadata<DeclaredGithubOrg>;
+export {};

package/dist/domain.operations/org/castToDeclaredGithubOrg.js

@@ -0,0 +1,29 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.castToDeclaredGithubOrg = void 0;
+const uni_time_1 = require("@ehmpathy/uni-time");
+const type_fns_1 = require("type-fns");
+const DeclaredGithubOrg_1 = require("../../domain.objects/DeclaredGithubOrg");
+/**
+ * .what = casts GitHub API org response to DeclaredGithubOrg
+ * .why = transforms external API shape to our domain model with type safety and validation
+ */
+const castToDeclaredGithubOrg = (input) => {
+    return DeclaredGithubOrg_1.DeclaredGithubOrg.as({
+        id: (0, type_fns_1.assure)(input.data.id, type_fns_1.isPresent),
+        login: (0, type_fns_1.assure)(input.data.login, type_fns_1.isPresent),
+        name: input.data.name ?? null,
+        description: input.data.description ?? null,
+        billingEmail: undefined, // write-only: not read back from API
+        twoFactorRequirementEnabled: input.data.two_factor_requirement_enabled ?? undefined,
+        publicRepos: input.data.public_repos ?? undefined,
+        createdAt: input.data.created_at
+            ? (0, uni_time_1.asUniDateTime)(input.data.created_at)
+            : undefined,
+        updatedAt: input.data.updated_at
+            ? (0, uni_time_1.asUniDateTime)(input.data.updated_at)
+            : undefined,
+    });
+};
+exports.castToDeclaredGithubOrg = castToDeclaredGithubOrg;
+//# sourceMappingURL=castToDeclaredGithubOrg.js.map

package/dist/domain.operations/org/castToDeclaredGithubOrg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"castToDeclaredGithubOrg.js","sourceRoot":"","sources":["../../../src/domain.operations/org/castToDeclaredGithubOrg.ts"],"names":[],"mappings":";;;AAAA,iDAAmD;AAEnD,uCAA+D;AAE/D,8EAA2E;AAI3E;;;GAGG;AACI,MAAM,uBAAuB,GAAG,CAAC,KAEvC,EAAkC,EAAE;IACnC,OAAO,qCAAiB,CAAC,EAAE,CAAC;QAC1B,EAAE,EAAE,IAAA,iBAAM,EAAC,KAAK,CAAC,IAAI,CAAC,EAAE,EAAE,oBAAS,CAAC;QACpC,KAAK,EAAE,IAAA,iBAAM,EAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,oBAAS,CAAC;QAC1C,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI;QAC7B,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,WAAW,IAAI,IAAI;QAC3C,YAAY,EAAE,SAAS,EAAE,qCAAqC;QAC9D,2BAA2B,EACzB,KAAK,CAAC,IAAI,CAAC,8BAA8B,IAAI,SAAS;QACxD,WAAW,EAAE,KAAK,CAAC,IAAI,CAAC,YAAY,IAAI,SAAS;QACjD,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;YAC9B,CAAC,CAAC,IAAA,wBAAa,EAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;YACtC,CAAC,CAAC,SAAS;QACb,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;YAC9B,CAAC,CAAC,IAAA,wBAAa,EAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;YACtC,CAAC,CAAC,SAAS;KACd,CAAmC,CAAC;AACvC,CAAC,CAAC;AAnBW,QAAA,uBAAuB,2BAmBlC"}

package/dist/domain.operations/org/getOneOrg.d.ts

@@ -0,0 +1,14 @@
+import type { RefByUnique } from 'domain-objects';
+import type { HasMetadata, PickOne } from 'type-fns';
+import type { VisualogicContext } from 'visualogic';
+import type { ContextGithubApi } from '../../domain.objects/ContextGithubApi';
+import type { DeclaredGithubOrg } from '../../domain.objects/DeclaredGithubOrg';
+/**
+ * .what = gets a GitHub Organization's settings
+ * .why = retrieves current state of org for declarative management
+ */
+export declare const getOneOrg: (input: {
+    by: PickOne<{
+        unique: RefByUnique<typeof DeclaredGithubOrg>;
+    }>;
+}, context: ContextGithubApi & VisualogicContext) => Promise<HasMetadata<DeclaredGithubOrg> | null>;

package/dist/domain.operations/org/getOneOrg.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOneOrg = void 0;
+const as_procedure_1 = require("as-procedure");
+const helpful_errors_1 = require("helpful-errors");
+const getGithubClient_1 = require("../../access/sdks/getGithubClient");
+const castToDeclaredGithubOrg_1 = require("./castToDeclaredGithubOrg");
+/**
+ * .what = gets a GitHub Organization's settings
+ * .why = retrieves current state of org for declarative management
+ */
+exports.getOneOrg = (0, as_procedure_1.asProcedure)(async (input, context) => {
+    const github = (0, getGithubClient_1.getGithubClient)({}, context);
+    const login = (() => {
+        if (input.by.unique)
+            return input.by.unique.login;
+        helpful_errors_1.UnexpectedCodePathError.throw('not referenced by unique', { input });
+    })();
+    try {
+        const response = await github.orgs.get({ org: login });
+        return (0, castToDeclaredGithubOrg_1.castToDeclaredGithubOrg)({ data: response.data });
+    }
+    catch (error) {
+        if (!(error instanceof Error))
+            throw error;
+        if (error.message.includes('Not Found'))
+            return null;
+        throw new helpful_errors_1.HelpfulError('github.getOrg error', { cause: error });
+    }
+});
+//# sourceMappingURL=getOneOrg.js.map

package/dist/domain.operations/org/getOneOrg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getOneOrg.js","sourceRoot":"","sources":["../../../src/domain.operations/org/getOneOrg.ts"],"names":[],"mappings":";;;AAAA,+CAA2C;AAE3C,mDAAuE;AAIvE,uEAAoE;AAGpE,uEAAoE;AAEpE;;;GAGG;AACU,QAAA,SAAS,GAAG,IAAA,0BAAW,EAClC,KAAK,EACH,KAIC,EACD,OAA6C,EACG,EAAE;IAClD,MAAM,MAAM,GAAG,IAAA,iCAAe,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAE5C,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE;QAClB,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC;QAClD,wCAAuB,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC;QACvD,OAAO,IAAA,iDAAuB,EAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,IAAI,6BAAY,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/domain.operations/org/setOrg.d.ts

@@ -0,0 +1,17 @@
+import type { HasMetadata, PickOne } from 'type-fns';
+import type { VisualogicContext } from 'visualogic';
+import type { ContextGithubApi } from '../../domain.objects/ContextGithubApi';
+import type { DeclaredGithubOrg } from '../../domain.objects/DeclaredGithubOrg';
+/**
+ * .what = sets GitHub Organization profile settings
+ * .why = enables declarative management of org profile
+ *
+ * AUTOMATION BOUNDARIES:
+ * - AUTOMATED: Profile settings via PATCH /orgs/{org}
+ * - NOTE: Cannot create organizations via API (only update existing)
+ * - NOTE: Member privileges are managed via DeclaredGithubOrgMemberPrivileges
+ */
+export declare const setOrg: (input: PickOne<{
+    finsert: DeclaredGithubOrg;
+    upsert: DeclaredGithubOrg;
+}>, context: ContextGithubApi & VisualogicContext) => Promise<HasMetadata<DeclaredGithubOrg>>;

package/dist/domain.operations/org/setOrg.js

@@ -0,0 +1,50 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setOrg = void 0;
+const as_procedure_1 = require("as-procedure");
+const helpful_errors_1 = require("helpful-errors");
+const getGithubClient_1 = require("../../access/sdks/getGithubClient");
+const castToDeclaredGithubOrg_1 = require("./castToDeclaredGithubOrg");
+const getOneOrg_1 = require("./getOneOrg");
+/**
+ * .what = sets GitHub Organization profile settings
+ * .why = enables declarative management of org profile
+ *
+ * AUTOMATION BOUNDARIES:
+ * - AUTOMATED: Profile settings via PATCH /orgs/{org}
+ * - NOTE: Cannot create organizations via API (only update existing)
+ * - NOTE: Member privileges are managed via DeclaredGithubOrgMemberPrivileges
+ */
+exports.setOrg = (0, as_procedure_1.asProcedure)(async (input, context) => {
+    const desired = input.finsert ?? input.upsert;
+    const github = (0, getGithubClient_1.getGithubClient)({}, context);
+    // Check if org exists
+    const before = await (0, getOneOrg_1.getOneOrg)({ by: { unique: { login: desired.login } } }, context);
+    // Cannot create orgs via API - must exist
+    if (!before) {
+        throw new helpful_errors_1.HelpfulError('GitHub Organization does not exist and cannot be created via API.\n' +
+            'Organizations must be created manually via the GitHub UI.', {
+            createUrl: 'https://github.com/organizations/plan',
+            desiredOrg: desired,
+        });
+    }
+    // If finsert and found, return as-is (no changes)
+    if (before && input.finsert)
+        return before;
+    // Apply profile updates via PATCH
+    try {
+        const response = await github.orgs.update({
+            org: desired.login,
+            name: desired.name ?? undefined,
+            description: desired.description ?? undefined,
+            billing_email: desired.billingEmail ?? undefined,
+        });
+        return (0, castToDeclaredGithubOrg_1.castToDeclaredGithubOrg)({ data: response.data });
+    }
+    catch (error) {
+        if (!(error instanceof Error))
+            throw error;
+        throw new helpful_errors_1.HelpfulError('github.setOrg.update error', { cause: error });
+    }
+});
+//# sourceMappingURL=setOrg.js.map

package/dist/domain.operations/org/setOrg.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setOrg.js","sourceRoot":"","sources":["../../../src/domain.operations/org/setOrg.ts"],"names":[],"mappings":";;;AAAA,+CAA2C;AAC3C,mDAA8C;AAI9C,uEAAoE;AAGpE,uEAAoE;AACpE,2CAAwC;AAExC;;;;;;;;GAQG;AACU,QAAA,MAAM,GAAG,IAAA,0BAAW,EAC/B,KAAK,EACH,KAGE,EACF,OAA6C,EACJ,EAAE;IAC3C,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAA,iCAAe,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAE5C,sBAAsB;IACtB,MAAM,MAAM,GAAG,MAAM,IAAA,qBAAS,EAC5B,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,EAAE,EAAE,EAC5C,OAAO,CACR,CAAC;IAEF,0CAA0C;IAC1C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,6BAAY,CACpB,qEAAqE;YACnE,2DAA2D,EAC7D;YACE,SAAS,EAAE,uCAAuC;YAClD,UAAU,EAAE,OAAO;SACpB,CACF,CAAC;IACJ,CAAC;IAED,kDAAkD;IAClD,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAE3C,kCAAkC;IAClC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACxC,GAAG,EAAE,OAAO,CAAC,KAAK;YAClB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,SAAS;YAC/B,WAAW,EAAE,OAAO,CAAC,WAAW,IAAI,SAAS;YAC7C,aAAa,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;SACjD,CAAC,CAAC;QAEH,OAAO,IAAA,iDAAuB,EAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC;IAC1D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC3C,MAAM,IAAI,6BAAY,CAAC,4BAA4B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACzE,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/domain.operations/orgMemberPrivileges/castToDeclaredGithubOrgMemberPrivileges.d.ts

@@ -0,0 +1,15 @@
+import type { Endpoints } from '@octokit/types';
+import type { RefByUnique } from 'domain-objects';
+import type { HasMetadata } from 'type-fns';
+import type { DeclaredGithubOrg } from '../../domain.objects/DeclaredGithubOrg';
+import { DeclaredGithubOrgMemberPrivileges } from '../../domain.objects/DeclaredGithubOrgMemberPrivileges';
+type GithubOrgResponse = Endpoints['GET /orgs/{org}']['response']['data'];
+/**
+ * .what = casts GitHub API org response to DeclaredGithubOrgMemberPrivileges
+ * .why = extracts member privilege fields from org API response
+ */
+export declare const castToDeclaredGithubOrgMemberPrivileges: (input: {
+    data: GithubOrgResponse;
+    org: RefByUnique<typeof DeclaredGithubOrg>;
+}) => HasMetadata<DeclaredGithubOrgMemberPrivileges>;
+export {};

package/dist/domain.operations/orgMemberPrivileges/castToDeclaredGithubOrgMemberPrivileges.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.castToDeclaredGithubOrgMemberPrivileges = void 0;
+const uni_time_1 = require("@ehmpathy/uni-time");
+const DeclaredGithubOrgMemberPrivileges_1 = require("../../domain.objects/DeclaredGithubOrgMemberPrivileges");
+/**
+ * .what = casts GitHub API org response to DeclaredGithubOrgMemberPrivileges
+ * .why = extracts member privilege fields from org API response
+ */
+const castToDeclaredGithubOrgMemberPrivileges = (input) => {
+    return DeclaredGithubOrgMemberPrivileges_1.DeclaredGithubOrgMemberPrivileges.as({
+        org: input.org,
+        updatedAt: input.data.updated_at
+            ? (0, uni_time_1.asUniDateTime)(input.data.updated_at)
+            : undefined,
+        // Repository creation
+        membersCanCreateRepositories: input.data.members_can_create_repositories ?? true,
+        membersCanCreatePublicRepositories: input.data.members_can_create_public_repositories ?? true,
+        membersCanCreatePrivateRepositories: input.data.members_can_create_private_repositories ?? true,
+        membersCanCreateInternalRepositories: (() => {
+            // internal repos only available for enterprise orgs
+            const isEnterprise = input.data.plan?.name
+                ?.toLowerCase()
+                .includes('enterprise');
+            if (!isEnterprise)
+                return null;
+            return input.data.members_can_create_internal_repositories ?? null;
+        })(),
+        // Repository management (KEY SECURITY)
+        membersCanDeleteRepositories: 
+        // Note: GitHub API uses 'members_can_delete_repositories' field
+        input.data
+            .members_can_delete_repositories ?? true,
+        membersCanChangeRepoVisibility: input.data
+            .members_can_change_repo_visibility ?? true,
+        membersCanForkPrivateRepositories: input.data.members_can_fork_private_repositories ?? false,
+        // Collaboration
+        membersCanInviteOutsideCollaborators: true, // Not directly exposed in API
+        // GitHub Pages
+        membersCanCreatePages: input.data.members_can_create_pages ?? true,
+        membersCanCreatePublicPages: input.data.members_can_create_public_pages ?? true,
+        membersCanCreatePrivatePages: input.data.members_can_create_private_pages ?? true,
+        defaultRepositoryPermission: input.data.default_repository_permission ?? 'read',
+    });
+};
+exports.castToDeclaredGithubOrgMemberPrivileges = castToDeclaredGithubOrgMemberPrivileges;
+//# sourceMappingURL=castToDeclaredGithubOrgMemberPrivileges.js.map

package/dist/domain.operations/orgMemberPrivileges/castToDeclaredGithubOrgMemberPrivileges.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"castToDeclaredGithubOrgMemberPrivileges.js","sourceRoot":"","sources":["../../../src/domain.operations/orgMemberPrivileges/castToDeclaredGithubOrgMemberPrivileges.ts"],"names":[],"mappings":";;;AAAA,iDAAmD;AAMnD,8GAA2G;AAI3G;;;GAGG;AACI,MAAM,uCAAuC,GAAG,CAAC,KAGvD,EAAkD,EAAE;IACnD,OAAO,qEAAiC,CAAC,EAAE,CAAC;QAC1C,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;YAC9B,CAAC,CAAC,IAAA,wBAAa,EAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;YACtC,CAAC,CAAC,SAAS;QAEb,sBAAsB;QACtB,4BAA4B,EAC1B,KAAK,CAAC,IAAI,CAAC,+BAA+B,IAAI,IAAI;QACpD,kCAAkC,EAChC,KAAK,CAAC,IAAI,CAAC,sCAAsC,IAAI,IAAI;QAC3D,mCAAmC,EACjC,KAAK,CAAC,IAAI,CAAC,uCAAuC,IAAI,IAAI;QAC5D,oCAAoC,EAAE,CAAC,GAAG,EAAE;YAC1C,oDAAoD;YACpD,MAAM,YAAY,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI;gBACxC,EAAE,WAAW,EAAE;iBACd,QAAQ,CAAC,YAAY,CAAC,CAAC;YAC1B,IAAI,CAAC,YAAY;gBAAE,OAAO,IAAI,CAAC;YAC/B,OAAO,KAAK,CAAC,IAAI,CAAC,wCAAwC,IAAI,IAAI,CAAC;QACrE,CAAC,CAAC,EAAE;QAEJ,uCAAuC;QACvC,4BAA4B;QAC1B,gEAAgE;QAC9D,KAAK,CAAC,IAAgC;aACrC,+BAA2C,IAAI,IAAI;QACxD,8BAA8B,EAC1B,KAAK,CAAC,IAAgC;aACrC,kCAA8C,IAAI,IAAI;QAC3D,iCAAiC,EAC/B,KAAK,CAAC,IAAI,CAAC,qCAAqC,IAAI,KAAK;QAE3D,gBAAgB;QAChB,oCAAoC,EAAE,IAAI,EAAE,8BAA8B;QAE1E,eAAe;QACf,qBAAqB,EAAE,KAAK,CAAC,IAAI,CAAC,wBAAwB,IAAI,IAAI;QAClE,2BAA2B,EACzB,KAAK,CAAC,IAAI,CAAC,+BAA+B,IAAI,IAAI;QACpD,4BAA4B,EAC1B,KAAK,CAAC,IAAI,CAAC,gCAAgC,IAAI,IAAI;QAErD,2BAA2B,EACxB,KAAK,CAAC,IAAI,CAAC,6BAID,IAAI,MAAM;KACxB,CAAmD,CAAC;AACvD,CAAC,CAAC;AAtDW,QAAA,uCAAuC,2CAsDlD"}

package/dist/domain.operations/orgMemberPrivileges/getOneOrgMemberPrivileges.d.ts

@@ -0,0 +1,14 @@
+import type { RefByUnique } from 'domain-objects';
+import type { HasMetadata, PickOne } from 'type-fns';
+import type { VisualogicContext } from 'visualogic';
+import type { ContextGithubApi } from '../../domain.objects/ContextGithubApi';
+import type { DeclaredGithubOrgMemberPrivileges } from '../../domain.objects/DeclaredGithubOrgMemberPrivileges';
+/**
+ * .what = gets GitHub Organization member privileges
+ * .why = retrieves current security settings for declarative management
+ */
+export declare const getOneOrgMemberPrivileges: (input: {
+    by: PickOne<{
+        unique: RefByUnique<typeof DeclaredGithubOrgMemberPrivileges>;
+    }>;
+}, context: ContextGithubApi & VisualogicContext) => Promise<HasMetadata<DeclaredGithubOrgMemberPrivileges> | null>;

package/dist/domain.operations/orgMemberPrivileges/getOneOrgMemberPrivileges.js

@@ -0,0 +1,36 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getOneOrgMemberPrivileges = void 0;
+const as_procedure_1 = require("as-procedure");
+const helpful_errors_1 = require("helpful-errors");
+const getGithubClient_1 = require("../../access/sdks/getGithubClient");
+const castToDeclaredGithubOrgMemberPrivileges_1 = require("./castToDeclaredGithubOrgMemberPrivileges");
+/**
+ * .what = gets GitHub Organization member privileges
+ * .why = retrieves current security settings for declarative management
+ */
+exports.getOneOrgMemberPrivileges = (0, as_procedure_1.asProcedure)(async (input, context) => {
+    const github = (0, getGithubClient_1.getGithubClient)({}, context);
+    const org = (() => {
+        if (input.by.unique)
+            return input.by.unique.org;
+        helpful_errors_1.UnexpectedCodePathError.throw('not referenced by unique', { input });
+    })();
+    try {
+        const response = await github.orgs.get({ org: org.login });
+        return (0, castToDeclaredGithubOrgMemberPrivileges_1.castToDeclaredGithubOrgMemberPrivileges)({
+            data: response.data,
+            org,
+        });
+    }
+    catch (error) {
+        if (!(error instanceof Error))
+            throw error;
+        if (error.message.includes('Not Found'))
+            return null;
+        throw new helpful_errors_1.HelpfulError('github.getOrgMemberPrivileges error', {
+            cause: error,
+        });
+    }
+});
+//# sourceMappingURL=getOneOrgMemberPrivileges.js.map

package/dist/domain.operations/orgMemberPrivileges/getOneOrgMemberPrivileges.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getOneOrgMemberPrivileges.js","sourceRoot":"","sources":["../../../src/domain.operations/orgMemberPrivileges/getOneOrgMemberPrivileges.ts"],"names":[],"mappings":";;;AAAA,+CAA2C;AAE3C,mDAAuE;AAIvE,uEAAoE;AAGpE,uGAAoG;AAEpG;;;GAGG;AACU,QAAA,yBAAyB,GAAG,IAAA,0BAAW,EAClD,KAAK,EACH,KAIC,EACD,OAA6C,EACmB,EAAE;IAClE,MAAM,MAAM,GAAG,IAAA,iCAAe,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAE5C,MAAM,GAAG,GAAG,CAAC,GAAG,EAAE;QAChB,IAAI,KAAK,CAAC,EAAE,CAAC,MAAM;YAAE,OAAO,KAAK,CAAC,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC;QAChD,wCAAuB,CAAC,KAAK,CAAC,0BAA0B,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC,CAAC,EAAE,CAAC;IAEL,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,CAAC;QAC3D,OAAO,IAAA,iFAAuC,EAAC;YAC7C,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,GAAG;SACJ,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC3C,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;YAAE,OAAO,IAAI,CAAC;QACrD,MAAM,IAAI,6BAAY,CAAC,qCAAqC,EAAE;YAC5D,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/domain.operations/orgMemberPrivileges/setOrgMemberPrivileges.d.ts

@@ -0,0 +1,16 @@
+import type { HasMetadata, PickOne } from 'type-fns';
+import type { VisualogicContext } from 'visualogic';
+import type { ContextGithubApi } from '../../domain.objects/ContextGithubApi';
+import type { DeclaredGithubOrgMemberPrivileges } from '../../domain.objects/DeclaredGithubOrgMemberPrivileges';
+/**
+ * .what = sets GitHub Organization member privileges
+ * .why = enables declarative management of org security settings
+ *
+ * KEY SECURITY SETTINGS:
+ * - membersCanDeleteRepositories: false -> only owners can delete/transfer repos
+ * - membersCanChangeRepoVisibility: false -> only owners can change visibility
+ */
+export declare const setOrgMemberPrivileges: (input: PickOne<{
+    finsert: DeclaredGithubOrgMemberPrivileges;
+    upsert: DeclaredGithubOrgMemberPrivileges;
+}>, context: ContextGithubApi & VisualogicContext) => Promise<HasMetadata<DeclaredGithubOrgMemberPrivileges>>;

package/dist/domain.operations/orgMemberPrivileges/setOrgMemberPrivileges.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.setOrgMemberPrivileges = void 0;
+const as_procedure_1 = require("as-procedure");
+const helpful_errors_1 = require("helpful-errors");
+const getGithubClient_1 = require("../../access/sdks/getGithubClient");
+const castToDeclaredGithubOrgMemberPrivileges_1 = require("./castToDeclaredGithubOrgMemberPrivileges");
+const getOneOrgMemberPrivileges_1 = require("./getOneOrgMemberPrivileges");
+/**
+ * .what = sets GitHub Organization member privileges
+ * .why = enables declarative management of org security settings
+ *
+ * KEY SECURITY SETTINGS:
+ * - membersCanDeleteRepositories: false -> only owners can delete/transfer repos
+ * - membersCanChangeRepoVisibility: false -> only owners can change visibility
+ */
+exports.setOrgMemberPrivileges = (0, as_procedure_1.asProcedure)(async (input, context) => {
+    const desired = input.finsert ?? input.upsert;
+    const github = (0, getGithubClient_1.getGithubClient)({}, context);
+    // Check current state
+    const before = await (0, getOneOrgMemberPrivileges_1.getOneOrgMemberPrivileges)({ by: { unique: { org: desired.org } } }, context);
+    // Org must exist
+    if (!before) {
+        throw new helpful_errors_1.HelpfulError('GitHub Organization does not exist.', {
+            desiredPrivileges: desired,
+        });
+    }
+    // If finsert and found, return as-is (no changes)
+    if (before && input.finsert)
+        return before;
+    // Apply member privilege updates via PATCH
+    try {
+        const response = await github.orgs.update({
+            org: desired.org.login,
+            // Repository creation
+            members_can_create_repositories: desired.membersCanCreateRepositories,
+            members_can_create_public_repositories: desired.membersCanCreatePublicRepositories,
+            members_can_create_private_repositories: desired.membersCanCreatePrivateRepositories,
+            members_can_create_internal_repositories: desired.membersCanCreateInternalRepositories ?? undefined,
+            // KEY SECURITY SETTINGS
+            // Note: These fields may not be directly settable via the standard API
+            // They are typically org settings that require admin permissions
+            members_can_fork_private_repositories: desired.membersCanForkPrivateRepositories,
+            // GitHub Pages
+            members_can_create_pages: desired.membersCanCreatePages,
+            members_can_create_public_pages: desired.membersCanCreatePublicPages,
+            members_can_create_private_pages: desired.membersCanCreatePrivatePages,
+            // Other
+            default_repository_permission: desired.defaultRepositoryPermission,
+        });
+        return (0, castToDeclaredGithubOrgMemberPrivileges_1.castToDeclaredGithubOrgMemberPrivileges)({
+            data: response.data,
+            org: desired.org,
+        });
+    }
+    catch (error) {
+        if (!(error instanceof Error))
+            throw error;
+        throw new helpful_errors_1.HelpfulError('github.setOrgMemberPrivileges.update error', {
+            cause: error,
+        });
+    }
+});
+//# sourceMappingURL=setOrgMemberPrivileges.js.map

package/dist/domain.operations/orgMemberPrivileges/setOrgMemberPrivileges.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"setOrgMemberPrivileges.js","sourceRoot":"","sources":["../../../src/domain.operations/orgMemberPrivileges/setOrgMemberPrivileges.ts"],"names":[],"mappings":";;;AAAA,+CAA2C;AAC3C,mDAA8C;AAI9C,uEAAoE;AAGpE,uGAAoG;AACpG,2EAAwE;AAExE;;;;;;;GAOG;AACU,QAAA,sBAAsB,GAAG,IAAA,0BAAW,EAC/C,KAAK,EACH,KAGE,EACF,OAA6C,EACY,EAAE;IAC3D,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC;IAC9C,MAAM,MAAM,GAAG,IAAA,iCAAe,EAAC,EAAE,EAAE,OAAO,CAAC,CAAC;IAE5C,sBAAsB;IACtB,MAAM,MAAM,GAAG,MAAM,IAAA,qDAAyB,EAC5C,EAAE,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,EAAE,EAAE,EACxC,OAAO,CACR,CAAC;IAEF,iBAAiB;IACjB,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,6BAAY,CAAC,qCAAqC,EAAE;YAC5D,iBAAiB,EAAE,OAAO;SAC3B,CAAC,CAAC;IACL,CAAC;IAED,kDAAkD;IAClD,IAAI,MAAM,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,MAAM,CAAC;IAE3C,2CAA2C;IAC3C,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;YACxC,GAAG,EAAE,OAAO,CAAC,GAAG,CAAC,KAAK;YACtB,sBAAsB;YACtB,+BAA+B,EAAE,OAAO,CAAC,4BAA4B;YACrE,sCAAsC,EACpC,OAAO,CAAC,kCAAkC;YAC5C,uCAAuC,EACrC,OAAO,CAAC,mCAAmC;YAC7C,wCAAwC,EACtC,OAAO,CAAC,oCAAoC,IAAI,SAAS;YAC3D,wBAAwB;YACxB,uEAAuE;YACvE,iEAAiE;YACjE,qCAAqC,EACnC,OAAO,CAAC,iCAAiC;YAC3C,eAAe;YACf,wBAAwB,EAAE,OAAO,CAAC,qBAAqB;YACvD,+BAA+B,EAAE,OAAO,CAAC,2BAA2B;YACpE,gCAAgC,EAAE,OAAO,CAAC,4BAA4B;YACtE,QAAQ;YACR,6BAA6B,EAAE,OAAO,CAAC,2BAA2B;SACnE,CAAC,CAAC;QAEH,OAAO,IAAA,iFAAuC,EAAC;YAC7C,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,GAAG,EAAE,OAAO,CAAC,GAAG;SACjB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;YAAE,MAAM,KAAK,CAAC;QAC3C,MAAM,IAAI,6BAAY,CAAC,4CAA4C,EAAE;YACnE,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CACF,CAAC"}

package/dist/domain.operations/orgSecret/castToDeclaredGithubOrgSecret.d.ts

@@ -0,0 +1,17 @@
+import type { Endpoints } from '@octokit/types';
+import type { RefByUnique } from 'domain-objects';
+import type { HasMetadata } from 'type-fns';
+import type { DeclaredGithubOrg } from '../../domain.objects/DeclaredGithubOrg';
+import { DeclaredGithubOrgSecret } from '../../domain.objects/DeclaredGithubOrgSecret';
+type GithubOrgSecretResponse = Endpoints['GET /orgs/{org}/actions/secrets/{secret_name}']['response']['data'];
+type GithubOrgSecretListItem = Endpoints['GET /orgs/{org}/actions/secrets']['response']['data']['secrets'][number];
+/**
+ * .what = casts GitHub API secret response to DeclaredGithubOrgSecret
+ * .why = transforms external API shape to our domain model
+ * .note = value is NEVER returned - secrets are write-only
+ */
+export declare const castToDeclaredGithubOrgSecret: (input: {
+    data: GithubOrgSecretResponse | GithubOrgSecretListItem;
+    org: RefByUnique<typeof DeclaredGithubOrg>;
+}) => HasMetadata<DeclaredGithubOrgSecret>;
+export {};

package/dist/domain.operations/orgSecret/castToDeclaredGithubOrgSecret.js

@@ -0,0 +1,28 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.castToDeclaredGithubOrgSecret = void 0;
+const uni_time_1 = require("@ehmpathy/uni-time");
+const DeclaredGithubOrgSecret_1 = require("../../domain.objects/DeclaredGithubOrgSecret");
+/**
+ * .what = casts GitHub API secret response to DeclaredGithubOrgSecret
+ * .why = transforms external API shape to our domain model
+ * .note = value is NEVER returned - secrets are write-only
+ */
+const castToDeclaredGithubOrgSecret = (input) => {
+    return DeclaredGithubOrgSecret_1.DeclaredGithubOrgSecret.as({
+        org: input.org,
+        name: input.data.name,
+        // value is NEVER returned from API - secrets are write-only
+        value: undefined,
+        visibility: input.data.visibility,
+        // selectedRepositoryNames not set - not returned in API response
+        createdAt: input.data.created_at
+            ? (0, uni_time_1.asUniDateTime)(input.data.created_at)
+            : undefined,
+        updatedAt: input.data.updated_at
+            ? (0, uni_time_1.asUniDateTime)(input.data.updated_at)
+            : undefined,
+    });
+};
+exports.castToDeclaredGithubOrgSecret = castToDeclaredGithubOrgSecret;
+//# sourceMappingURL=castToDeclaredGithubOrgSecret.js.map

package/dist/domain.operations/orgSecret/castToDeclaredGithubOrgSecret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"castToDeclaredGithubOrgSecret.js","sourceRoot":"","sources":["../../../src/domain.operations/orgSecret/castToDeclaredGithubOrgSecret.ts"],"names":[],"mappings":";;;AAAA,iDAAmD;AAMnD,0FAAuF;AAQvF;;;;GAIG;AACI,MAAM,6BAA6B,GAAG,CAAC,KAG7C,EAAwC,EAAE;IACzC,OAAO,iDAAuB,CAAC,EAAE,CAAC;QAChC,GAAG,EAAE,KAAK,CAAC,GAAG;QACd,IAAI,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI;QACrB,4DAA4D;QAC5D,KAAK,EAAE,SAAS;QAChB,UAAU,EAAE,KAAK,CAAC,IAAI,CAAC,UAA4C;QACnE,iEAAiE;QACjE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;YAC9B,CAAC,CAAC,IAAA,wBAAa,EAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;YACtC,CAAC,CAAC,SAAS;QACb,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,UAAU;YAC9B,CAAC,CAAC,IAAA,wBAAa,EAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;YACtC,CAAC,CAAC,SAAS;KACd,CAAyC,CAAC;AAC7C,CAAC,CAAC;AAlBW,QAAA,6BAA6B,iCAkBxC"}

package/dist/domain.operations/orgSecret/delOrgSecret.d.ts

@@ -0,0 +1,11 @@
+import type { Ref } from 'domain-objects';
+import type { VisualogicContext } from 'visualogic';
+import type { ContextGithubApi } from '../../domain.objects/ContextGithubApi';
+import type { DeclaredGithubOrgSecret } from '../../domain.objects/DeclaredGithubOrgSecret';
+/**
+ * .what = deletes a GitHub Organization secret
+ * .why = enables declarative management of org-level secrets
+ */
+export declare const delOrgSecret: (input: {
+    secret: Ref<typeof DeclaredGithubOrgSecret>;
+}, context: ContextGithubApi & VisualogicContext) => Promise<void>;