github-settings-as-code 1.2.10 → 2.0.0

package/dist/github/ruleset/constants.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.mts","sourceRoot":"","sources":["../../../src/github/ruleset/constants.mts"],"names":[],"mappings":"AAMA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,eAAO,MAAM,iBAAiB,0FAQ2B,CAAC;AAQ1D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAA+C,CAAC;AAE1E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC"}
+{"version":3,"file":"constants.d.mts","sourceRoot":"","sources":["../../../src/github/ruleset/constants.mts"],"names":[],"mappings":"AAMA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAGjC,eAAO,MAAM,iBAAiB,0FAQ2B,CAAC;AAQ1D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAGzB,CAAC;AAEF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC"}

package/dist/github/ruleset/constants.mjs

@@ -1,6 +1,7 @@
 import { RepositoryRuleset, } from 'octokit-safe-types';
 import { expectType } from 'ts-data-forge';
 import * as t from 'ts-fortress';
+import { upgradeStaleCodec } from '../upgrade-stale-codec.mjs';
 export const rulesetKeysToPick = [
     'id',
     'name',
@@ -12,5 +13,5 @@ export const rulesetKeysToPick = [
 ];
 expectType('=');
 expectType('=');
-export const RulesetPicked = t.pick(RepositoryRuleset, rulesetKeysToPick);
+export const RulesetPicked = t.pick(upgradeStaleCodec(RepositoryRuleset), rulesetKeysToPick);
 //# sourceMappingURL=constants.mjs.map

package/dist/github/ruleset/constants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"constants.mjs","sourceRoot":"","sources":["../../../src/github/ruleset/constants.mts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,GAGlB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,aAAa;IACb,eAAe;IACf,YAAY;IACZ,OAAO;CACgD,CAAC;AAI1D,UAAU,CAAgD,GAAG,CAAC,CAAC;AAE/D,UAAU,CAAyD,GAAG,CAAC,CAAC;AAExE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAC"}
+{"version":3,"file":"constants.mjs","sourceRoot":"","sources":["../../../src/github/ruleset/constants.mts"],"names":[],"mappings":"AAAA,OAAO,EACL,iBAAiB,GAGlB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAC3C,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAE/D,MAAM,CAAC,MAAM,iBAAiB,GAAG;IAC/B,IAAI;IACJ,MAAM;IACN,QAAQ;IACR,aAAa;IACb,eAAe;IACf,YAAY;IACZ,OAAO;CACgD,CAAC;AAI1D,UAAU,CAAgD,GAAG,CAAC,CAAC;AAE/D,UAAU,CAAyD,GAAG,CAAC,CAAC;AAExE,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,IAAI,CACjC,iBAAiB,CAAC,iBAAiB,CAAC,EACpC,iBAAiB,CAClB,CAAC"}

package/dist/github/upgrade-stale-codec.d.mts

@@ -0,0 +1,19 @@
+import { type Type } from 'ts-fortress';
+import { type StrictOmit } from 'ts-type-forge';
+/**
+ * Restores the full ts-fortress `Type` interface for codecs imported from
+ * octokit-safe-types@1.2.19, whose declaration files were generated against
+ * ts-fortress 7 (whose `Type` lacked the `prune` member). The pnpm override in
+ * `pnpm-workspace.yaml` resolves ts-fortress >= 11 at runtime, so the codec
+ * object itself does have `prune`; only its declared type is stale. This
+ * verifies `prune` exists at runtime and rebuilds the codec with the correct
+ * type, without unsafe type assertions.
+ *
+ * TODO: Remove this helper once octokit-safe-types is rebuilt against
+ * ts-fortress >= 11.
+ */
+export declare const upgradeStaleCodec: <A>(codec: Readonly<{
+    defaultValue: A;
+    prune?: Type<A>['prune'];
+}> & StrictOmit<Type<A>, 'defaultValue' | 'prune'>) => Type<A>;
+//# sourceMappingURL=upgrade-stale-codec.d.mts.map

package/dist/github/upgrade-stale-codec.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-stale-codec.d.mts","sourceRoot":"","sources":["../../src/github/upgrade-stale-codec.mts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,IAAI,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAEhD;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,iBAAiB,GAAI,CAAC,SAC1B,QAAQ,CAAC;IAAE,YAAY,EAAE,CAAC,CAAC;IAAC,KAAK,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAA;CAAE,CAAC,GAC5D,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,KAC9C,IAAI,CAAC,CAAC,CAUR,CAAC"}

package/dist/github/upgrade-stale-codec.mjs

@@ -0,0 +1,20 @@
+/**
+ * Restores the full ts-fortress `Type` interface for codecs imported from
+ * octokit-safe-types@1.2.19, whose declaration files were generated against
+ * ts-fortress 7 (whose `Type` lacked the `prune` member). The pnpm override in
+ * `pnpm-workspace.yaml` resolves ts-fortress >= 11 at runtime, so the codec
+ * object itself does have `prune`; only its declared type is stale. This
+ * verifies `prune` exists at runtime and rebuilds the codec with the correct
+ * type, without unsafe type assertions.
+ *
+ * TODO: Remove this helper once octokit-safe-types is rebuilt against
+ * ts-fortress >= 11.
+ */
+export const upgradeStaleCodec = (codec) => {
+    const { prune } = codec;
+    if (prune === undefined) {
+        throw new Error(`The codec "${codec.typeName}" has no prune function at runtime. octokit-safe-types is probably resolving an old ts-fortress version; check the pnpm overrides.`);
+    }
+    return { ...codec, prune };
+};
+//# sourceMappingURL=upgrade-stale-codec.mjs.map

package/dist/github/upgrade-stale-codec.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"upgrade-stale-codec.mjs","sourceRoot":"","sources":["../../src/github/upgrade-stale-codec.mts"],"names":[],"mappings":"AAGA;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,KAC+C,EACtC,EAAE;IACX,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IAExB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,IAAI,KAAK,CACb,cAAc,KAAK,CAAC,QAAQ,oIAAoI,CACjK,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,CAAC;AAC7B,CAAC,CAAC"}

package/dist/github/variables/apply.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.d.mts","sourceRoot":"","sources":["../../../src/github/variables/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAQvB,eAAO,MAAM,cAAc,QAAa,OAAO,CAAC,IAAI,CA2BnD,CAAC"}
+{"version":3,"file":"apply.d.mts","sourceRoot":"","sources":["../../../src/github/variables/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAQvB,eAAO,MAAM,cAAc,QAAa,OAAO,CAAC,IAAI,CA8BnD,CAAC"}

package/dist/github/variables/apply.mjs

@@ -5,16 +5,19 @@ import { createRepoVariable, listRepoVariables, updateRepoVariable, } from './ap
 export const applyVariables = async () => {
     const variables = [
         {
-            name: 'DEPENDABOT_AUTO_MERGE_BOT_APP_ID',
-            value: '1442916',
+            // noshiro-semantic-release-bot (App ID: 1442563)
+            name: 'SEMANTIC_RELEASE_BOT_CLIENT_ID',
+            value: 'Iv23liAmv2bgTYTkv2pt',
         },
         {
-            name: 'SEMANTIC_RELEASE_GIT_PERMISSION_BOT_APP_ID',
-            value: '1442563',
+            // noshiro-changesets-release-bot (App ID: 1576218)
+            name: 'CHANGESETS_RELEASE_BOT_CLIENT_ID',
+            value: 'Iv23limuZKrTEcXmN0lp',
         },
         {
-            name: 'CHANGESETS_BOT_APP_ID',
-            value: '1576218',
+            // noshiro-repo-settings-bot (App ID: 4476573)
+            name: 'REPO_SETTINGS_BOT_CLIENT_ID',
+            value: 'Iv23ctr4Lq9H3wOYRQrD',
         },
     ];
     const variableListSaved = await listRepoVariables();

package/dist/github/variables/apply.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"apply.mjs","sourceRoot":"","sources":["../../../src/github/variables/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,IAAmB,EAAE;IACtD,MAAM,SAAS,GAAG;QAChB;YACE,IAAI,EAAE,kCAAkC;YACxC,KAAK,EAAE,SAAS;SACjB;QACD;YACE,IAAI,EAAE,4CAA4C;YAClD,KAAK,EAAE,SAAS;SACjB;QACD;YACE,IAAI,EAAE,uBAAuB;YAC7B,KAAK,EAAE,SAAS;SACjB;KACO,CAAC;IAEX,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEpD,MAAM,cAAc,GAAwB,IAAI,GAAG,CACjD,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACrC,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEhD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,cAAc,EAAE,CAAC;AACzB,CAAC"}
+{"version":3,"file":"apply.mjs","sourceRoot":"","sources":["../../../src/github/variables/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,IAAmB,EAAE;IACtD,MAAM,SAAS,GAAG;QAChB;YACE,iDAAiD;YACjD,IAAI,EAAE,gCAAgC;YACtC,KAAK,EAAE,sBAAsB;SAC9B;QACD;YACE,mDAAmD;YACnD,IAAI,EAAE,kCAAkC;YACxC,KAAK,EAAE,sBAAsB;SAC9B;QACD;YACE,8CAA8C;YAC9C,IAAI,EAAE,6BAA6B;YACnC,KAAK,EAAE,sBAAsB;SAC9B;KACO,CAAC;IAEX,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEpD,MAAM,cAAc,GAAwB,IAAI,GAAG,CACjD,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACrC,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEhD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,cAAc,EAAE,CAAC;AACzB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "github-settings-as-code",
-  "version": "1.2.10",
+  "version": "2.0.0",
   "private": false,
   "keywords": [
     "github",
@@ -15,13 +15,7 @@
   "sideEffects": false,
   "type": "module",
   "bin": {
-    "gh-apply-all": "./dist/cmd/gh-apply-all.mjs",
-    "gh-apply-repository-settings": "./dist/github/repository/apply.mjs",
-    "gh-apply-rulesets": "./dist/github/ruleset/apply.mjs",
-    "gh-apply-variables": "./dist/github/variables/apply.mjs",
-    "gh-backup-all": "./dist/cmd/gh-backup-all.mjs",
-    "gh-backup-repository-settings": "./dist/github/repository/backup.mjs",
-    "gh-backup-rulesets": "./dist/github/ruleset/backup.mjs"
+    "repo-settings": "./dist/cmd/repo-settings.mjs"
   },
   "files": [
     "src",
@@ -37,28 +31,26 @@
     "check:ext": "tsx ./scripts/cmd/check-ext.mts",
     "check-all": "tsx ./scripts/cmd/check-all.mts",
     "codemod": "run-s codemod:uncommitted:as-const fmt codemod:uncommitted:readonly fmt",
+    "codemod:diff": "run-s codemod:diff:as-const fmt codemod:diff:readonly fmt",
+    "codemod:diff:as-const": "append-as-const --diff-from origin/main '{src,scripts,samples}/**/*.mts'",
+    "codemod:diff:readonly": "convert-to-readonly --diff-from origin/main '{src,scripts,samples}/**/*.mts'",
     "codemod:full": "run-s codemod:full:as-const fmt codemod:full:readonly fmt",
-    "codemod:full:as-const": "append-as-const '{src,scripts,samples}/**/*.{mts,tsx}'",
-    "codemod:full:readonly": "convert-to-readonly '{src,scripts,samples}/**/*.{mts,tsx}'",
-    "codemod:uncommitted:as-const": "append-as-const --uncommitted '{src,scripts,samples}/**/*.{mts,tsx}'",
-    "codemod:uncommitted:readonly": "convert-to-readonly --uncommitted '{src,scripts,samples}/**/*.{mts,tsx}'",
-    "cspell": "cspell \"**\" --gitignore --gitignore-root ./ --no-progress",
+    "codemod:full:as-const": "append-as-const '{src,scripts,samples}/**/*.mts'",
+    "codemod:full:readonly": "convert-to-readonly '{src,scripts,samples}/**/*.mts'",
+    "codemod:uncommitted:as-const": "append-as-const --uncommitted '{src,scripts,samples}/**/*.mts'",
+    "codemod:uncommitted:readonly": "convert-to-readonly --uncommitted '{src,scripts,samples}/**/*.mts'",
+    "cspell": "cspell \"{**,.changeset/**/*,.github/**/*}\" --gitignore --gitignore-root ./ --no-progress",
     "doc": "tsx ./scripts/cmd/gen-docs.mts",
     "fmt": "format-uncommitted",
     "fmt:diff": "format-diff-from origin/main",
     "fmt:full": "prettier --write .",
-    "gh:apply-all": "tsx ./src/cmd/gh-apply-all.mts",
-    "gh:apply-repository-settings": "tsx ./src/github/repository/apply.mts",
-    "gh:apply-rulesets": "tsx ./src/github/ruleset/apply.mts",
-    "gh:apply-variables": "tsx ./src/github/variables/apply.mts",
-    "gh:backup-all": "tsx ./src/cmd/gh-backup-all.mts",
-    "gh:backup-repository-settings": "tsx ./src/github/repository/backup.mts",
-    "gh:backup-rulesets": "tsx ./src/github/ruleset/backup.mts",
     "gi": "run-s gi:src fmt",
     "gi:src": "gen-index-ts ./src/github --index-ext .mts --export-ext .mjs --target-ext .mts --exclude cmd --exclude octokit.mts",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "md": "markdownlint-cli2",
+    "repo-settings:apply": "tsx ./src/cmd/repo-settings.mts apply",
+    "repo-settings:backup": "tsx ./src/cmd/repo-settings.mts backup",
     "test": "pnpm run z:vitest:node run",
     "test:cov": "pnpm run z:vitest:node run --coverage",
     "test:cov:ui": "vite preview --outDir ./coverage",
@@ -67,52 +59,51 @@
     "tsc": "node ./node_modules/typescript-native/bin/tsc --noEmit",
     "tscw": "node ./node_modules/typescript-native/bin/tsc --noEmit --watch -p ./tsconfig.json",
     "type-check": "node ./node_modules/typescript-native/bin/tsc --noEmit",
-    "update-packages": "pnpm update --latest",
     "z:vitest": "vitest --config ./configs/vitest.config.mts",
     "z:vitest:node": "pnpm run z:vitest --project='Node.js'"
   },
   "dependencies": {
     "@octokit/core": "^7.0.6",
     "dotenv": "^17.4.2",
-    "octokit-safe-types": "^1.2.18",
-    "ts-data-forge": "^6.9.6",
-    "ts-fortress": "^7.0.7",
-    "ts-type-forge": "^3.0.1"
+    "octokit-safe-types": "^1.2.19",
+    "ts-data-forge": "^12.2.2",
+    "ts-fortress": "^11.2.0",
+    "ts-type-forge": "^9.1.1"
   },
   "devDependencies": {
-    "@semantic-release/changelog": "6.0.3",
+    "@semantic-release/changelog": "7.0.0",
     "@semantic-release/commit-analyzer": "13.0.1",
     "@semantic-release/exec": "7.1.0",
-    "@semantic-release/git": "10.0.1",
-    "@semantic-release/github": "12.0.6",
+    "@semantic-release/git": "11.0.1",
+    "@semantic-release/github": "12.0.9",
     "@semantic-release/npm": "13.1.5",
-    "@semantic-release/release-notes-generator": "14.1.0",
-    "@types/node": "25.6.0",
-    "@vitest/coverage-v8": "4.1.5",
-    "@vitest/ui": "4.1.5",
-    "conventional-changelog-conventionalcommits": "9.3.1",
-    "cspell": "10.0.0",
-    "eslint": "10.2.1",
-    "eslint-config-typed": "4.9.8",
-    "jiti": "2.6.1",
-    "markdownlint": "0.40.0",
-    "markdownlint-cli2": "0.22.1",
-    "npm-run-all2": "8.0.4",
-    "playwright": "1.59.1",
-    "prettier": "3.8.3",
+    "@semantic-release/release-notes-generator": "14.1.1",
+    "@types/node": "26.1.2",
+    "@vitest/coverage-v8": "4.1.10",
+    "@vitest/ui": "4.1.10",
+    "conventional-changelog-conventionalcommits": "10.2.1",
+    "cspell": "10.0.1",
+    "eslint": "10.8.0",
+    "eslint-config-typed": "5.8.2",
+    "jiti": "2.7.0",
+    "markdownlint": "0.41.1",
+    "markdownlint-cli2": "0.23.2",
+    "npm-run-all2": "9.0.2",
+    "playwright": "1.62.0",
+    "prettier": "3.9.6",
     "prettier-plugin-organize-imports": "4.3.0",
     "prettier-plugin-packagejson": "3.0.2",
-    "semantic-release": "25.0.3",
-    "ts-codemod-lib": "2.1.7",
-    "ts-repo-utils": "10.0.3",
-    "tsx": "4.21.0",
-    "typedoc": "0.28.19",
+    "semantic-release": "25.0.8",
+    "ts-codemod-lib": "2.2.3",
+    "ts-repo-utils": "10.1.6",
+    "tsx": "4.23.1",
+    "typedoc": "0.28.20",
     "typedoc-github-theme": "0.4.0",
     "typescript": "6.0.3",
-    "typescript-native": "npm:typescript@7.0.1-rc",
-    "vitest": "4.1.5"
+    "typescript-native": "npm:typescript@7.0.2",
+    "vitest": "4.1.10"
   },
-  "packageManager": "pnpm@11.15.1",
+  "packageManager": "pnpm@11.20.0",
   "engines": {
     "node": ">=22.22.2",
     "pnpm": ">=9.0.0"

package/src/cmd/repo-settings.mts

@@ -0,0 +1,153 @@
+#!/usr/bin/env node
+
+import 'dotenv/config';
+import * as util from 'node:util';
+
+const HELP = `
+Usage: repo-settings <command> [target] [options]
+
+GitHub の repository 設定を JSON ファイルで管理する。
+
+Commands:
+  apply [target]     ローカルの設定ファイルを GitHub に反映する
+  backup [target]    GitHub の現在値をローカルの bk/ に保存する
+
+Targets:
+  all                すべて（既定）
+  repository         github/repository-settings/settings.json
+  rulesets           github/rulesets/*.json
+  variables          repository variables （ apply のみ ）
+  actions            github/actions-settings/settings.json
+  pages              github/pages/settings.json
+
+Options:
+      --owner <owner>   対象の owner
+      --repo <repo>     対象の repository 名
+  -h, --help            このヘルプを表示する
+
+owner / repo は「コマンドライン引数 → 環境変数 OWNER / REPO_NAME →
+git remote origin → package.json の name 」の順で解決される。
+通常は git remote から決まるため、どちらの指定も不要。
+
+認証は「環境変数 GITHUB_APP_TOKEN / GH_TOKEN / PERSONAL_ACCESS_TOKEN →
+gh CLI （ gh auth token ）」の順で解決される。ローカルでは gh auth login
+だけで動く。
+
+Examples:
+  repo-settings apply
+  repo-settings apply rulesets
+  repo-settings backup
+  repo-settings apply --owner noshiro-pf --repo ts-repo-utils
+`.trim();
+
+const COMMANDS = ['apply', 'backup'] as const;
+
+type Command = (typeof COMMANDS)[number];
+
+const TARGETS = [
+  'all',
+  'repository',
+  'rulesets',
+  'variables',
+  'actions',
+  'pages',
+] as const;
+
+type Target = (typeof TARGETS)[number];
+
+const COMMAND_SET: ReadonlySet<string> = new Set(COMMANDS);
+
+const isCommand = (value: string): value is Command => COMMAND_SET.has(value);
+
+const TARGET_SET: ReadonlySet<string> = new Set(TARGETS);
+
+const isTarget = (value: string): value is Target => TARGET_SET.has(value);
+
+// NOTE: 明示的な型注釈を変数側に付けることで、呼び出し後に制御フローが到達
+// しないことを TypeScript に認識させる（ narrowing のために必要 ）。
+const fail: (message: string) => never = (message) => {
+  console.error(`❌ ${message}`);
+
+  console.error('');
+
+  console.error(HELP);
+
+  process.exit(1);
+};
+
+const { values, positionals } = util.parseArgs({
+  args: process.argv.slice(2),
+  options: {
+    owner: { type: 'string' },
+    repo: { type: 'string' },
+    help: { type: 'boolean', short: 'h', default: false },
+  },
+  strict: false,
+  allowPositionals: true,
+});
+
+if (values.help === true || positionals.length === 0) {
+  console.log(HELP);
+
+  process.exit(positionals.length === 0 ? 1 : 0);
+}
+
+const [commandArg, targetArg = 'all'] = positionals;
+
+if (commandArg === undefined || !isCommand(commandArg)) {
+  fail(`Unknown command: "${commandArg ?? ''}"`);
+}
+
+if (!isTarget(targetArg)) {
+  fail(`Unknown target: "${targetArg}"`);
+}
+
+// NOTE: ここで初めて設定モジュールを読み込む。 owner / repo の解決は import 時に
+// 走るため、 --help や引数エラーの時点では評価させたくない。
+const github = await import('../github/index.mjs');
+
+const runners: Readonly<
+  Record<Command, Partial<Record<Target, () => Promise<void>>>>
+> = {
+  apply: {
+    all: async () => {
+      await github.applyVariables();
+
+      await github.applyRulesets();
+
+      await github.applyRepositorySettings();
+
+      await github.applyActionsSettings();
+
+      await github.applyPagesSettings();
+    },
+    repository: github.applyRepositorySettings,
+    rulesets: github.applyRulesets,
+    variables: github.applyVariables,
+    actions: github.applyActionsSettings,
+    pages: github.applyPagesSettings,
+  },
+  backup: {
+    all: async () => {
+      await github.backupRulesets();
+
+      await github.backupRepositorySettings();
+
+      await github.backupActionsSettings();
+
+      await github.backupPagesSettings();
+    },
+    repository: github.backupRepositorySettings,
+    rulesets: github.backupRulesets,
+    actions: github.backupActionsSettings,
+    pages: github.backupPagesSettings,
+  },
+} as const;
+
+const runner = runners[commandArg][targetArg];
+
+if (runner === undefined) {
+  fail(`"${commandArg}" does not support the target "${targetArg}"`);
+}
+
+await runner();

package/src/github/actions-settings/api/get-actions-settings.mts

@@ -0,0 +1,38 @@
+import { type EndpointKeys } from 'octokit-safe-types';
+import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
+import { octokit } from '../../octokit.mjs';
+import { ActionsSettings } from '../constants.mjs';
+
+/**
+ * Settings > Actions > General の現在値を取得する。
+ *
+ * 2 つのエンドポイントの結果を 1 つのオブジェクトにまとめる。
+ */
+export const getActionsSettings = async (): Promise<ActionsSettings> => {
+  // https://docs.github.com/rest/actions/permissions#get-github-actions-permissions-for-a-repository
+  const permissions = await octokit.request(
+    'GET /repos/{owner}/{repo}/actions/permissions' satisfies EndpointKeys,
+    { owner: OWNER, repo: REPO, headers: octokitHeaders },
+  );
+
+  // https://docs.github.com/rest/actions/permissions#get-fork-pr-contributor-approval-permissions-for-a-repository
+  const forkPrApproval = await octokit.request(
+    'GET /repos/{owner}/{repo}/actions/permissions/fork-pr-contributor-approval' satisfies EndpointKeys,
+    { owner: OWNER, repo: REPO, headers: octokitHeaders },
+  );
+
+  // sha_pinning_required は @octokit/types v16 の型に無いため、レスポンスから
+  // 直接読まずに validate 側の既定値へフォールバックさせる。
+  const shaPinningRequired: unknown = (
+    permissions.data as Readonly<Record<string, unknown>>
+  )['sha_pinning_required'];
+
+  // eslint-disable-next-line unicorn/no-array-fill-with-reference-type
+  return ActionsSettings.fill({
+    enabled: permissions.data.enabled,
+    allowed_actions: permissions.data.allowed_actions,
+    sha_pinning_required:
+      typeof shaPinningRequired === 'boolean' ? shaPinningRequired : undefined,
+    fork_pr_contributor_approval_policy: forkPrApproval.data.approval_policy,
+  });
+};

package/src/github/actions-settings/api/index.mts

@@ -0,0 +1,2 @@
+export * from './get-actions-settings.mjs';
+export * from './set-actions-settings.mjs';

package/src/github/actions-settings/api/set-actions-settings.mts

@@ -0,0 +1,39 @@
+import { type EndpointKeys } from 'octokit-safe-types';
+import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
+import { octokit } from '../../octokit.mjs';
+import { type ActionsSettings } from '../constants.mjs';
+
+/** Settings > Actions > General を JSON の内容に合わせる。 */
+export const setActionsSettings = async (
+  settings: ActionsSettings,
+): Promise<void> => {
+  // https://docs.github.com/rest/actions/permissions#set-github-actions-permissions-for-a-repository
+  //
+  // NOTE: sha_pinning_required は @octokit/types v16 の型定義にまだ無い。 API は
+  // 受け付けるので、いったん変数に束縛して渡している（オブジェクトリテラルを直接
+  // 渡すと excess property check に引っかかるため）。型が追随したら不要になる。
+  const permissionsParams = {
+    owner: OWNER,
+    repo: REPO,
+    headers: octokitHeaders,
+    enabled: settings.enabled,
+    allowed_actions: settings.allowed_actions,
+    sha_pinning_required: settings.sha_pinning_required,
+  } as const;
+
+  await octokit.request(
+    'PUT /repos/{owner}/{repo}/actions/permissions' satisfies EndpointKeys,
+    permissionsParams,
+  );
+
+  // https://docs.github.com/rest/actions/permissions#set-fork-pr-contributor-approval-permissions-for-a-repository
+  await octokit.request(
+    'PUT /repos/{owner}/{repo}/actions/permissions/fork-pr-contributor-approval' satisfies EndpointKeys,
+    {
+      owner: OWNER,
+      repo: REPO,
+      headers: octokitHeaders,
+      approval_policy: settings.fork_pr_contributor_approval_policy,
+    },
+  );
+};

package/src/github/actions-settings/apply.mts

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { validationErrorsToMessages } from 'ts-fortress';
+import {
+  formatUncommittedFiles,
+  isDirectlyExecuted,
+  Result,
+} from 'ts-repo-utils';
+import { actionsSettingsDir, settingsJsonName } from '../constants.mjs';
+import { getActionsSettings, setActionsSettings } from './api/index.mjs';
+import { backupActionsSettings } from './backup.mjs';
+import { ActionsSettings } from './constants.mjs';
+
+/** `github/actions-settings/settings.json` を Settings > Actions > General に反映する。 */
+export const applyActionsSettings = async (): Promise<void> => {
+  await backupActionsSettings(false);
+
+  const settings = await readSettings();
+
+  await setActionsSettings(settings);
+
+  // 反映後の実際の値でローカルのファイルを更新する
+  {
+    const applied = await getActionsSettings();
+
+    const str = JSON.stringify(applied, undefined, 2);
+
+    // eslint-disable-next-line security/detect-non-literal-fs-filename
+    await fs.writeFile(path.resolve(actionsSettingsDir, settingsJsonName), str);
+
+    // eslint-disable-next-line security/detect-non-literal-fs-filename
+    await fs.writeFile(
+      path.resolve(actionsSettingsDir, 'bk', settingsJsonName),
+      str,
+    );
+
+    await formatUncommittedFiles();
+  }
+};
+
+const readSettings = async (): Promise<ActionsSettings> => {
+  // eslint-disable-next-line security/detect-non-literal-fs-filename
+  const settingsText = await fs.readFile(
+    path.resolve(actionsSettingsDir, settingsJsonName),
+    { encoding: 'utf8' },
+  );
+
+  const validationResult = ActionsSettings.validate(JSON.parse(settingsText));
+
+  if (Result.isErr(validationResult)) {
+    throw new Error(
+      validationErrorsToMessages(validationResult.value).join('\n'),
+    );
+  }
+
+  return validationResult.value;
+};
+
+if (isDirectlyExecuted(import.meta.url)) {
+  await applyActionsSettings();
+}

package/src/github/actions-settings/backup.mts

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import {
+  formatUncommittedFiles,
+  isDirectlyExecuted,
+  makeEmptyDir,
+} from 'ts-repo-utils';
+import { actionsSettingsDir, settingsJsonName } from '../constants.mjs';
+import { getActionsSettings } from './api/index.mjs';
+
+const backupDir = path.resolve(actionsSettingsDir, './bk');
+
+/** Settings > Actions > General の現在値を `bk/` に保存する。 */
+export const backupActionsSettings = async (
+  fmt: boolean = true,
+): Promise<void> => {
+  await makeEmptyDir(backupDir);
+
+  const settings = await getActionsSettings();
+
+  // eslint-disable-next-line security/detect-non-literal-fs-filename
+  await fs.writeFile(
+    path.resolve(backupDir, settingsJsonName),
+    JSON.stringify(settings, undefined, 2),
+  );
+
+  if (fmt) {
+    await formatUncommittedFiles();
+  }
+};
+
+if (isDirectlyExecuted(import.meta.url)) {
+  await backupActionsSettings();
+}