github-settings-as-code 1.2.10 → 2.0.1

package/src/github/upgrade-stale-codec.mts

@@ -0,0 +1,29 @@
+import { type Type } from 'ts-fortress';
+import { type StrictOmit } from 'ts-type-forge';
+
+/**
+ * Restores the full ts-fortress `Type` interface for codecs imported from
+ * octokit-safe-types@1.2.19, whose declaration files were generated against
+ * ts-fortress 7 (whose `Type` lacked the `prune` member). The pnpm override in
+ * `pnpm-workspace.yaml` resolves ts-fortress >= 11 at runtime, so the codec
+ * object itself does have `prune`; only its declared type is stale. This
+ * verifies `prune` exists at runtime and rebuilds the codec with the correct
+ * type, without unsafe type assertions.
+ *
+ * TODO: Remove this helper once octokit-safe-types is rebuilt against
+ * ts-fortress >= 11.
+ */
+export const upgradeStaleCodec = <A,>(
+  codec: Readonly<{ defaultValue: A; prune?: Type<A>['prune'] }> &
+    StrictOmit<Type<A>, 'defaultValue' | 'prune'>,
+): Type<A> => {
+  const { prune } = codec;
+
+  if (prune === undefined) {
+    throw new Error(
+      `The codec "${codec.typeName}" has no prune function at runtime. octokit-safe-types is probably resolving an old ts-fortress version; check the pnpm overrides.`,
+    );
+  }
+
+  return { ...codec, prune };
+};

package/src/github/variables/apply.mts

@@ -10,16 +10,27 @@ import {
 export const applyVariables = async (): Promise<void> => {
   const variables = [
     {
-      name: 'DEPENDABOT_AUTO_MERGE_BOT_APP_ID',
-      value: '1442916',
+      // noshiro-semantic-release-bot (App ID: 1442563)
+      name: 'SEMANTIC_RELEASE_BOT_CLIENT_ID',
+      value: 'Iv23liAmv2bgTYTkv2pt',
     },
     {
-      name: 'SEMANTIC_RELEASE_GIT_PERMISSION_BOT_APP_ID',
-      value: '1442563',
+      // noshiro-changesets-release-bot (App ID: 1576218)
+      name: 'CHANGESETS_RELEASE_BOT_CLIENT_ID',
+      value: 'Iv23limuZKrTEcXmN0lp',
     },
     {
-      name: 'CHANGESETS_BOT_APP_ID',
-      value: '1576218',
+      // noshiro-repo-settings-bot (App ID: 4476573)
+      // Administration を含む強い権限を持つ。設定の backup / apply 専用。
+      name: 'REPO_SETTINGS_BOT_CLIENT_ID',
+      value: 'Iv23ctr4Lq9H3wOYRQrD',
+    },
+    {
+      // noshiro-repo-automation-bot (App ID: 4478721)
+      // Contents / Pull requests 権限のみ。PR を作る自動化（ pnpm-update /
+      // sync-agent-config ）用。
+      name: 'REPO_AUTOMATION_BOT_CLIENT_ID',
+      value: 'Iv23lilpiDh0twq2PErv',
     },
   ] as const;
 

package/dist/cmd/gh-apply-all.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gh-apply-all.d.mts","sourceRoot":"","sources":["../../src/cmd/gh-apply-all.mts"],"names":[],"mappings":";AAEA,OAAO,eAAe,CAAC"}

package/dist/cmd/gh-apply-all.mjs

@@ -1,10 +0,0 @@
-#!/usr/bin/env node
-import 'dotenv/config';
-import { applyRepositorySettings, applyRulesets, applyVariables, } from '../github/index.mjs';
-const runApplyAll = async () => {
-    await applyVariables();
-    await applyRulesets();
-    await applyRepositorySettings();
-};
-await runApplyAll();
-//# sourceMappingURL=gh-apply-all.mjs.map

package/dist/cmd/gh-apply-all.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"gh-apply-all.mjs","sourceRoot":"","sources":["../../src/cmd/gh-apply-all.mts"],"names":[],"mappings":";AAEA,OAAO,eAAe,CAAC;AACvB,OAAO,EACL,uBAAuB,EACvB,aAAa,EACb,cAAc,GACf,MAAM,qBAAqB,CAAC;AAE7B,MAAM,WAAW,GAAG,KAAK,IAAmB,EAAE;IAC5C,MAAM,cAAc,EAAE,CAAC;IAEvB,MAAM,aAAa,EAAE,CAAC;IAEtB,MAAM,uBAAuB,EAAE,CAAC;AAClC,CAAC,CAAC;AAEF,MAAM,WAAW,EAAE,CAAC"}

package/dist/cmd/gh-backup-all.d.mts

@@ -1,3 +0,0 @@
-#!/usr/bin/env node
-import 'dotenv/config';
-//# sourceMappingURL=gh-backup-all.d.mts.map

package/dist/cmd/gh-backup-all.d.mts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gh-backup-all.d.mts","sourceRoot":"","sources":["../../src/cmd/gh-backup-all.mts"],"names":[],"mappings":";AAEA,OAAO,eAAe,CAAC"}

package/dist/cmd/gh-backup-all.mjs

@@ -1,9 +0,0 @@
-#!/usr/bin/env node
-import 'dotenv/config';
-import { backupRepositorySettings, backupRulesets } from '../github/index.mjs';
-const runBackupAll = async () => {
-    await backupRulesets();
-    await backupRepositorySettings();
-};
-await runBackupAll();
-//# sourceMappingURL=gh-backup-all.mjs.map

package/dist/cmd/gh-backup-all.mjs.map

@@ -1 +0,0 @@
-{"version":3,"file":"gh-backup-all.mjs","sourceRoot":"","sources":["../../src/cmd/gh-backup-all.mts"],"names":[],"mappings":";AAEA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,wBAAwB,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAE/E,MAAM,YAAY,GAAG,KAAK,IAAmB,EAAE;IAC7C,MAAM,cAAc,EAAE,CAAC;IAEvB,MAAM,wBAAwB,EAAE,CAAC;AACnC,CAAC,CAAC;AAEF,MAAM,YAAY,EAAE,CAAC"}

package/src/cmd/gh-apply-all.mts

@@ -1,18 +0,0 @@
-#!/usr/bin/env node
-
-import 'dotenv/config';
-import {
-  applyRepositorySettings,
-  applyRulesets,
-  applyVariables,
-} from '../github/index.mjs';
-
-const runApplyAll = async (): Promise<void> => {
-  await applyVariables();
-
-  await applyRulesets();
-
-  await applyRepositorySettings();
-};
-
-await runApplyAll();

package/src/cmd/gh-backup-all.mts

@@ -1,12 +0,0 @@
-#!/usr/bin/env node
-
-import 'dotenv/config';
-import { backupRepositorySettings, backupRulesets } from '../github/index.mjs';
-
-const runBackupAll = async (): Promise<void> => {
-  await backupRulesets();
-
-  await backupRepositorySettings();
-};
-
-await runBackupAll();