github-settings-as-code 1.2.9 → 2.0.0

package/README.md

@@ -1,11 +1,62 @@
 # Github Settings as Code
 
-Commands to provide:
-
-- `gh:apply-all`
-- `gh:apply-repository-settings`
-- `gh:apply-rulesets`
-- `gh:apply-variables`
-- `gh:backup-all`
-- `gh:backup-repository-settings`
-- `gh:backup-rulesets`
+GitHub の repository 設定を JSON ファイルで管理するための CLI。
+
+## Usage
+
+```sh
+repo-settings <command> [target] [options]
+```
+
+| Command  | 説明                                         |
+| -------- | -------------------------------------------- |
+| `apply`  | ローカルの設定ファイルを GitHub に反映する   |
+| `backup` | GitHub の現在値をローカルの `bk/` に保存する |
+
+| Target        | 対応するファイル                           | `apply` | `backup` |
+| ------------- | ------------------------------------------ | ------- | -------- |
+| `all`（既定） | すべて                                     | ✅      | ✅       |
+| `repository`  | `github/repository-settings/settings.json` | ✅      | ✅       |
+| `rulesets`    | `github/rulesets/*.json`                   | ✅      | ✅       |
+| `variables`   | repository variables                       | ✅      | —        |
+| `actions`     | `github/actions-settings/settings.json`    | ✅      | ✅       |
+| `pages`       | `github/pages/settings.json`               | ✅      | ✅       |
+
+```sh
+repo-settings apply
+repo-settings apply rulesets
+repo-settings backup
+repo-settings apply --owner noshiro-pf --repo ts-repo-utils
+```
+
+## 対象 repository の解決
+
+以下の順で決まる。通常は `git remote` から決まるため、どちらの指定も不要。
+
+1. コマンドライン引数 `--owner` / `--repo`
+2. 環境変数 `OWNER` / `REPO_NAME`
+3. `git remote get-url origin`
+4. `package.json` の `name`（ repository 名のみ ）
+
+## 認証
+
+以下の順で解決される。ローカルでは `gh auth login` 済みであれば設定不要。
+
+1. 環境変数 `GITHUB_APP_TOKEN` / `GH_TOKEN` / `PERSONAL_ACCESS_TOKEN`
+2. `gh auth token`（ gh CLI のログイン情報 ）
+
+CI では GitHub App の installation token を `GH_TOKEN` に渡す。 repository
+設定・ruleset の操作には **Administration** 権限が必要で、既定の `GITHUB_TOKEN`
+では権限が足りない（`permissions:` に `administration` は存在しない）。
+
+## 管理できる設定
+
+| ファイル                                   | GitHub 上の場所                         |
+| ------------------------------------------ | --------------------------------------- |
+| `github/repository-settings/settings.json` | Settings > General                      |
+| `github/rulesets/*.json`                   | Settings > Rules > Rulesets             |
+| `github/actions-settings/settings.json`    | Settings > Actions > General            |
+| `github/pages/settings.json`               | Settings > Pages > Build and deployment |
+
+`github/pages/settings.json` を置いていない repository では Pages の操作を行わない
+（ Pages を使わない repository で誤って有効化しないため ）。

package/dist/cmd/{gh-apply-all.d.mts → repo-settings.d.mts}

@@ -1,3 +1,3 @@
 #!/usr/bin/env node
 import 'dotenv/config';
-//# sourceMappingURL=gh-apply-all.d.mts.map
+//# sourceMappingURL=repo-settings.d.mts.map

package/dist/cmd/repo-settings.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-settings.d.mts","sourceRoot":"","sources":["../../src/cmd/repo-settings.mts"],"names":[],"mappings":";AAEA,OAAO,eAAe,CAAC"}

package/dist/cmd/repo-settings.mjs

@@ -0,0 +1,118 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+import * as util from 'node:util';
+const HELP = `
+Usage: repo-settings <command> [target] [options]
+
+GitHub の repository 設定を JSON ファイルで管理する。
+
+Commands:
+  apply [target]     ローカルの設定ファイルを GitHub に反映する
+  backup [target]    GitHub の現在値をローカルの bk/ に保存する
+
+Targets:
+  all                すべて（既定）
+  repository         github/repository-settings/settings.json
+  rulesets           github/rulesets/*.json
+  variables          repository variables （ apply のみ ）
+  actions            github/actions-settings/settings.json
+  pages              github/pages/settings.json
+
+Options:
+      --owner <owner>   対象の owner
+      --repo <repo>     対象の repository 名
+  -h, --help            このヘルプを表示する
+
+owner / repo は「コマンドライン引数 → 環境変数 OWNER / REPO_NAME →
+git remote origin → package.json の name 」の順で解決される。
+通常は git remote から決まるため、どちらの指定も不要。
+
+認証は「環境変数 GITHUB_APP_TOKEN / GH_TOKEN / PERSONAL_ACCESS_TOKEN →
+gh CLI （ gh auth token ）」の順で解決される。ローカルでは gh auth login
+だけで動く。
+
+Examples:
+  repo-settings apply
+  repo-settings apply rulesets
+  repo-settings backup
+  repo-settings apply --owner noshiro-pf --repo ts-repo-utils
+`.trim();
+const COMMANDS = ['apply', 'backup'];
+const TARGETS = [
+    'all',
+    'repository',
+    'rulesets',
+    'variables',
+    'actions',
+    'pages',
+];
+const COMMAND_SET = new Set(COMMANDS);
+const isCommand = (value) => COMMAND_SET.has(value);
+const TARGET_SET = new Set(TARGETS);
+const isTarget = (value) => TARGET_SET.has(value);
+// NOTE: 明示的な型注釈を変数側に付けることで、呼び出し後に制御フローが到達
+// しないことを TypeScript に認識させる（ narrowing のために必要 ）。
+const fail = (message) => {
+    console.error(`❌ ${message}`);
+    console.error('');
+    console.error(HELP);
+    process.exit(1);
+};
+const { values, positionals } = util.parseArgs({
+    args: process.argv.slice(2),
+    options: {
+        owner: { type: 'string' },
+        repo: { type: 'string' },
+        help: { type: 'boolean', short: 'h', default: false },
+    },
+    strict: false,
+    allowPositionals: true,
+});
+if (values.help === true || positionals.length === 0) {
+    console.log(HELP);
+    process.exit(positionals.length === 0 ? 1 : 0);
+}
+const [commandArg, targetArg = 'all'] = positionals;
+if (commandArg === undefined || !isCommand(commandArg)) {
+    fail(`Unknown command: "${commandArg ?? ''}"`);
+}
+if (!isTarget(targetArg)) {
+    fail(`Unknown target: "${targetArg}"`);
+}
+// NOTE: ここで初めて設定モジュールを読み込む。 owner / repo の解決は import 時に
+// 走るため、 --help や引数エラーの時点では評価させたくない。
+const github = await import('../github/index.mjs');
+const runners = {
+    apply: {
+        all: async () => {
+            await github.applyVariables();
+            await github.applyRulesets();
+            await github.applyRepositorySettings();
+            await github.applyActionsSettings();
+            await github.applyPagesSettings();
+        },
+        repository: github.applyRepositorySettings,
+        rulesets: github.applyRulesets,
+        variables: github.applyVariables,
+        actions: github.applyActionsSettings,
+        pages: github.applyPagesSettings,
+    },
+    backup: {
+        all: async () => {
+            await github.backupRulesets();
+            await github.backupRepositorySettings();
+            await github.backupActionsSettings();
+            await github.backupPagesSettings();
+        },
+        repository: github.backupRepositorySettings,
+        rulesets: github.backupRulesets,
+        actions: github.backupActionsSettings,
+        pages: github.backupPagesSettings,
+    },
+};
+const runner = runners[commandArg][targetArg];
+if (runner === undefined) {
+    fail(`"${commandArg}" does not support the target "${targetArg}"`);
+}
+await runner();
+//# sourceMappingURL=repo-settings.mjs.map

package/dist/cmd/repo-settings.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"repo-settings.mjs","sourceRoot":"","sources":["../../src/cmd/repo-settings.mts"],"names":[],"mappings":";AAEA,OAAO,eAAe,CAAC;AACvB,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAElC,MAAM,IAAI,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCZ,CAAC,IAAI,EAAE,CAAC;AAET,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAI9C,MAAM,OAAO,GAAG;IACd,KAAK;IACL,YAAY;IACZ,UAAU;IACV,WAAW;IACX,SAAS;IACT,OAAO;CACC,CAAC;AAIX,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;AAE3D,MAAM,SAAS,GAAG,CAAC,KAAa,EAAoB,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAE9E,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;AAEzD,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAmB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAE3E,0CAA0C;AAC1C,gDAAgD;AAChD,MAAM,IAAI,GAA+B,CAAC,OAAO,EAAE,EAAE;IACnD,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IAE9B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;IAC7C,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC3B,OAAO,EAAE;QACP,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;KACtD;IACD,MAAM,EAAE,KAAK;IACb,gBAAgB,EAAE,IAAI;CACvB,CAAC,CAAC;AAEH,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;IACrD,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAElB,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACjD,CAAC;AAED,MAAM,CAAC,UAAU,EAAE,SAAS,GAAG,KAAK,CAAC,GAAG,WAAW,CAAC;AAEpD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;IACvD,IAAI,CAAC,qBAAqB,UAAU,IAAI,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;IACzB,IAAI,CAAC,oBAAoB,SAAS,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,wDAAwD;AACxD,oCAAoC;AACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAEnD,MAAM,OAAO,GAET;IACF,KAAK,EAAE;QACL,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YAE9B,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;YAE7B,MAAM,MAAM,CAAC,uBAAuB,EAAE,CAAC;YAEvC,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAEpC,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACpC,CAAC;QACD,UAAU,EAAE,MAAM,CAAC,uBAAuB;QAC1C,QAAQ,EAAE,MAAM,CAAC,aAAa;QAC9B,SAAS,EAAE,MAAM,CAAC,cAAc;QAChC,OAAO,EAAE,MAAM,CAAC,oBAAoB;QACpC,KAAK,EAAE,MAAM,CAAC,kBAAkB;KACjC;IACD,MAAM,EAAE;QACN,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YAE9B,MAAM,MAAM,CAAC,wBAAwB,EAAE,CAAC;YAExC,MAAM,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAErC,MAAM,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACrC,CAAC;QACD,UAAU,EAAE,MAAM,CAAC,wBAAwB;QAC3C,QAAQ,EAAE,MAAM,CAAC,cAAc;QAC/B,OAAO,EAAE,MAAM,CAAC,qBAAqB;QACrC,KAAK,EAAE,MAAM,CAAC,mBAAmB;KAClC;CACO,CAAC;AAEX,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC;AAE9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC,IAAI,UAAU,kCAAkC,SAAS,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,MAAM,EAAE,CAAC"}

package/dist/github/actions-settings/api/get-actions-settings.d.mts

@@ -0,0 +1,8 @@
+import { ActionsSettings } from '../constants.mjs';
+/**
+ * Settings > Actions > General の現在値を取得する。
+ *
+ * 2 つのエンドポイントの結果を 1 つのオブジェクトにまとめる。
+ */
+export declare const getActionsSettings: () => Promise<ActionsSettings>;
+//# sourceMappingURL=get-actions-settings.d.mts.map

package/dist/github/actions-settings/api/get-actions-settings.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-actions-settings.d.mts","sourceRoot":"","sources":["../../../../src/github/actions-settings/api/get-actions-settings.mts"],"names":[],"mappings":"AAGA,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,QAAa,OAAO,CAAC,eAAe,CA2BlE,CAAC"}

package/dist/github/actions-settings/api/get-actions-settings.mjs

@@ -0,0 +1,25 @@
+import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
+import { octokit } from '../../octokit.mjs';
+import { ActionsSettings } from '../constants.mjs';
+/**
+ * Settings > Actions > General の現在値を取得する。
+ *
+ * 2 つのエンドポイントの結果を 1 つのオブジェクトにまとめる。
+ */
+export const getActionsSettings = async () => {
+    // https://docs.github.com/rest/actions/permissions#get-github-actions-permissions-for-a-repository
+    const permissions = await octokit.request('GET /repos/{owner}/{repo}/actions/permissions', { owner: OWNER, repo: REPO, headers: octokitHeaders });
+    // https://docs.github.com/rest/actions/permissions#get-fork-pr-contributor-approval-permissions-for-a-repository
+    const forkPrApproval = await octokit.request('GET /repos/{owner}/{repo}/actions/permissions/fork-pr-contributor-approval', { owner: OWNER, repo: REPO, headers: octokitHeaders });
+    // sha_pinning_required は @octokit/types v16 の型に無いため、レスポンスから
+    // 直接読まずに validate 側の既定値へフォールバックさせる。
+    const shaPinningRequired = permissions.data['sha_pinning_required'];
+    // eslint-disable-next-line unicorn/no-array-fill-with-reference-type
+    return ActionsSettings.fill({
+        enabled: permissions.data.enabled,
+        allowed_actions: permissions.data.allowed_actions,
+        sha_pinning_required: typeof shaPinningRequired === 'boolean' ? shaPinningRequired : undefined,
+        fork_pr_contributor_approval_policy: forkPrApproval.data.approval_policy,
+    });
+};
+//# sourceMappingURL=get-actions-settings.mjs.map

package/dist/github/actions-settings/api/get-actions-settings.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-actions-settings.mjs","sourceRoot":"","sources":["../../../../src/github/actions-settings/api/get-actions-settings.mts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD;;;;GAIG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,IAA8B,EAAE;IACrE,mGAAmG;IACnG,MAAM,WAAW,GAAG,MAAM,OAAO,CAAC,OAAO,CACvC,+CAAsE,EACtE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CACtD,CAAC;IAEF,iHAAiH;IACjH,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,OAAO,CAC1C,4EAAmG,EACnG,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CACtD,CAAC;IAEF,4DAA4D;IAC5D,oCAAoC;IACpC,MAAM,kBAAkB,GACtB,WAAW,CAAC,IACb,CAAC,sBAAsB,CAAC,CAAC;IAE1B,qEAAqE;IACrE,OAAO,eAAe,CAAC,IAAI,CAAC;QAC1B,OAAO,EAAE,WAAW,CAAC,IAAI,CAAC,OAAO;QACjC,eAAe,EAAE,WAAW,CAAC,IAAI,CAAC,eAAe;QACjD,oBAAoB,EAClB,OAAO,kBAAkB,KAAK,SAAS,CAAC,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,SAAS;QAC1E,mCAAmC,EAAE,cAAc,CAAC,IAAI,CAAC,eAAe;KACzE,CAAC,CAAC;AACL,CAAC,CAAC"}

package/dist/github/actions-settings/api/index.d.mts

@@ -0,0 +1,3 @@
+export * from './get-actions-settings.mjs';
+export * from './set-actions-settings.mjs';
+//# sourceMappingURL=index.d.mts.map

package/dist/github/actions-settings/api/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../../../src/github/actions-settings/api/index.mts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC"}

package/dist/github/actions-settings/api/index.mjs

@@ -0,0 +1,3 @@
+export * from './get-actions-settings.mjs';
+export * from './set-actions-settings.mjs';
+//# sourceMappingURL=index.mjs.map

package/dist/github/actions-settings/api/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../../src/github/actions-settings/api/index.mts"],"names":[],"mappings":"AAAA,cAAc,4BAA4B,CAAC;AAC3C,cAAc,4BAA4B,CAAC"}

package/dist/github/actions-settings/api/set-actions-settings.d.mts

@@ -0,0 +1,4 @@
+import { type ActionsSettings } from '../constants.mjs';
+/** Settings > Actions > General を JSON の内容に合わせる。 */
+export declare const setActionsSettings: (settings: ActionsSettings) => Promise<void>;
+//# sourceMappingURL=set-actions-settings.d.mts.map

package/dist/github/actions-settings/api/set-actions-settings.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-actions-settings.d.mts","sourceRoot":"","sources":["../../../../src/github/actions-settings/api/set-actions-settings.mts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAExD,oDAAoD;AACpD,eAAO,MAAM,kBAAkB,aACnB,eAAe,KACxB,OAAO,CAAC,IAAI,CA8Bd,CAAC"}

package/dist/github/actions-settings/api/set-actions-settings.mjs

@@ -0,0 +1,27 @@
+import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
+import { octokit } from '../../octokit.mjs';
+/** Settings > Actions > General を JSON の内容に合わせる。 */
+export const setActionsSettings = async (settings) => {
+    // https://docs.github.com/rest/actions/permissions#set-github-actions-permissions-for-a-repository
+    //
+    // NOTE: sha_pinning_required は @octokit/types v16 の型定義にまだ無い。 API は
+    // 受け付けるので、いったん変数に束縛して渡している（オブジェクトリテラルを直接
+    // 渡すと excess property check に引っかかるため）。型が追随したら不要になる。
+    const permissionsParams = {
+        owner: OWNER,
+        repo: REPO,
+        headers: octokitHeaders,
+        enabled: settings.enabled,
+        allowed_actions: settings.allowed_actions,
+        sha_pinning_required: settings.sha_pinning_required,
+    };
+    await octokit.request('PUT /repos/{owner}/{repo}/actions/permissions', permissionsParams);
+    // https://docs.github.com/rest/actions/permissions#set-fork-pr-contributor-approval-permissions-for-a-repository
+    await octokit.request('PUT /repos/{owner}/{repo}/actions/permissions/fork-pr-contributor-approval', {
+        owner: OWNER,
+        repo: REPO,
+        headers: octokitHeaders,
+        approval_policy: settings.fork_pr_contributor_approval_policy,
+    });
+};
+//# sourceMappingURL=set-actions-settings.mjs.map

package/dist/github/actions-settings/api/set-actions-settings.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-actions-settings.mjs","sourceRoot":"","sources":["../../../../src/github/actions-settings/api/set-actions-settings.mts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAG5C,oDAAoD;AACpD,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,QAAyB,EACV,EAAE;IACjB,mGAAmG;IACnG,EAAE;IACF,mEAAmE;IACnE,yCAAyC;IACzC,oDAAoD;IACpD,MAAM,iBAAiB,GAAG;QACxB,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,cAAc;QACvB,OAAO,EAAE,QAAQ,CAAC,OAAO;QACzB,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,oBAAoB,EAAE,QAAQ,CAAC,oBAAoB;KAC3C,CAAC;IAEX,MAAM,OAAO,CAAC,OAAO,CACnB,+CAAsE,EACtE,iBAAiB,CAClB,CAAC;IAEF,iHAAiH;IACjH,MAAM,OAAO,CAAC,OAAO,CACnB,4EAAmG,EACnG;QACE,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,cAAc;QACvB,eAAe,EAAE,QAAQ,CAAC,mCAAmC;KAC9D,CACF,CAAC;AACJ,CAAC,CAAC"}

package/dist/github/actions-settings/apply.d.mts

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+/** `github/actions-settings/settings.json` を Settings > Actions > General に反映する。 */
+export declare const applyActionsSettings: () => Promise<void>;
+//# sourceMappingURL=apply.d.mts.map

package/dist/github/actions-settings/apply.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.mts","sourceRoot":"","sources":["../../../src/github/actions-settings/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAcvB,oFAAoF;AACpF,eAAO,MAAM,oBAAoB,QAAa,OAAO,CAAC,IAAI,CAwBzD,CAAC"}

package/dist/github/actions-settings/apply.mjs

@@ -0,0 +1,39 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { validationErrorsToMessages } from 'ts-fortress';
+import { formatUncommittedFiles, isDirectlyExecuted, Result, } from 'ts-repo-utils';
+import { actionsSettingsDir, settingsJsonName } from '../constants.mjs';
+import { getActionsSettings, setActionsSettings } from './api/index.mjs';
+import { backupActionsSettings } from './backup.mjs';
+import { ActionsSettings } from './constants.mjs';
+/** `github/actions-settings/settings.json` を Settings > Actions > General に反映する。 */
+export const applyActionsSettings = async () => {
+    await backupActionsSettings(false);
+    const settings = await readSettings();
+    await setActionsSettings(settings);
+    // 反映後の実際の値でローカルのファイルを更新する
+    {
+        const applied = await getActionsSettings();
+        const str = JSON.stringify(applied, undefined, 2);
+        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        await fs.writeFile(path.resolve(actionsSettingsDir, settingsJsonName), str);
+        // eslint-disable-next-line security/detect-non-literal-fs-filename
+        await fs.writeFile(path.resolve(actionsSettingsDir, 'bk', settingsJsonName), str);
+        await formatUncommittedFiles();
+    }
+};
+const readSettings = async () => {
+    // eslint-disable-next-line security/detect-non-literal-fs-filename
+    const settingsText = await fs.readFile(path.resolve(actionsSettingsDir, settingsJsonName), { encoding: 'utf8' });
+    const validationResult = ActionsSettings.validate(JSON.parse(settingsText));
+    if (Result.isErr(validationResult)) {
+        throw new Error(validationErrorsToMessages(validationResult.value).join('\n'));
+    }
+    return validationResult.value;
+};
+if (isDirectlyExecuted(import.meta.url)) {
+    await applyActionsSettings();
+}
+//# sourceMappingURL=apply.mjs.map

package/dist/github/actions-settings/apply.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.mjs","sourceRoot":"","sources":["../../../src/github/actions-settings/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,MAAM,GACP,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AACzE,OAAO,EAAE,qBAAqB,EAAE,MAAM,cAAc,CAAC;AACrD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAElD,oFAAoF;AACpF,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,IAAmB,EAAE;IAC5D,MAAM,qBAAqB,CAAC,KAAK,CAAC,CAAC;IAEnC,MAAM,QAAQ,GAAG,MAAM,YAAY,EAAE,CAAC;IAEtC,MAAM,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IAEnC,0BAA0B;IAC1B,CAAC;QACC,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAE3C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAElD,mEAAmE;QACnE,MAAM,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,EAAE,GAAG,CAAC,CAAC;QAE5E,mEAAmE;QACnE,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,IAAI,EAAE,gBAAgB,CAAC,EACxD,GAAG,CACJ,CAAC;QAEF,MAAM,sBAAsB,EAAE,CAAC;IACjC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,KAAK,IAA8B,EAAE;IACxD,mEAAmE;IACnE,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CACpC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,gBAAgB,CAAC,EAClD,EAAE,QAAQ,EAAE,MAAM,EAAE,CACrB,CAAC;IAEF,MAAM,gBAAgB,GAAG,eAAe,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC;IAE5E,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,0BAA0B,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAC9D,CAAC;IACJ,CAAC;IAED,OAAO,gBAAgB,CAAC,KAAK,CAAC;AAChC,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,oBAAoB,EAAE,CAAC;AAC/B,CAAC"}

package/dist/github/actions-settings/backup.d.mts

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+/** Settings > Actions > General の現在値を `bk/` に保存する。 */
+export declare const backupActionsSettings: (fmt?: boolean) => Promise<void>;
+//# sourceMappingURL=backup.d.mts.map

package/dist/github/actions-settings/backup.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.mts","sourceRoot":"","sources":["../../../src/github/actions-settings/backup.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAavB,sDAAsD;AACtD,eAAO,MAAM,qBAAqB,SAC3B,OAAO,KACX,OAAO,CAAC,IAAI,CAcd,CAAC"}

package/dist/github/actions-settings/backup.mjs

@@ -0,0 +1,22 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { formatUncommittedFiles, isDirectlyExecuted, makeEmptyDir, } from 'ts-repo-utils';
+import { actionsSettingsDir, settingsJsonName } from '../constants.mjs';
+import { getActionsSettings } from './api/index.mjs';
+const backupDir = path.resolve(actionsSettingsDir, './bk');
+/** Settings > Actions > General の現在値を `bk/` に保存する。 */
+export const backupActionsSettings = async (fmt = true) => {
+    await makeEmptyDir(backupDir);
+    const settings = await getActionsSettings();
+    // eslint-disable-next-line security/detect-non-literal-fs-filename
+    await fs.writeFile(path.resolve(backupDir, settingsJsonName), JSON.stringify(settings, undefined, 2));
+    if (fmt) {
+        await formatUncommittedFiles();
+    }
+};
+if (isDirectlyExecuted(import.meta.url)) {
+    await backupActionsSettings();
+}
+//# sourceMappingURL=backup.mjs.map

package/dist/github/actions-settings/backup.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.mjs","sourceRoot":"","sources":["../../../src/github/actions-settings/backup.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,YAAY,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,CAAC;AAE3D,sDAAsD;AACtD,MAAM,CAAC,MAAM,qBAAqB,GAAG,KAAK,EACxC,GAAG,GAAY,IAAI,EACJ,EAAE;IACjB,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;IAE9B,MAAM,QAAQ,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAE5C,mEAAmE;IACnE,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,EACzC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CACvC,CAAC;IAEF,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,sBAAsB,EAAE,CAAC;IACjC,CAAC;AACH,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,qBAAqB,EAAE,CAAC;AAChC,CAAC"}

package/dist/github/actions-settings/constants.d.mts

@@ -0,0 +1,69 @@
+import * as t from 'ts-fortress';
+/**
+ * `github/actions-settings/settings.json` の型。
+ *
+ * Settings > Actions > General に対応する。 2 つの API をまとめて 1 ファイルで
+ * 管理する:
+ *
+ * - `GET|PUT /repos/{owner}/{repo}/actions/permissions`
+ * - `GET|PUT /repos/{owner}/{repo}/actions/permissions/fork-pr-contributor-approval`
+ */
+export declare const ActionsSettings: Readonly<{
+    typeName: string;
+    defaultValue: Readonly<{
+        allowed_actions: "all" | "local_only" | "selected";
+        enabled: boolean;
+        fork_pr_contributor_approval_policy: "all_external_contributors" | "first_time_contributors" | "first_time_contributors_new_to_github";
+        sha_pinning_required: boolean;
+    }>;
+    is: (a: unknown) => a is Readonly<{
+        allowed_actions: "all" | "local_only" | "selected";
+        enabled: boolean;
+        fork_pr_contributor_approval_policy: "all_external_contributors" | "first_time_contributors" | "first_time_contributors_new_to_github";
+        sha_pinning_required: boolean;
+    }>;
+    assertIs: (a: unknown) => asserts a is Readonly<{
+        allowed_actions: "all" | "local_only" | "selected";
+        enabled: boolean;
+        fork_pr_contributor_approval_policy: "all_external_contributors" | "first_time_contributors" | "first_time_contributors_new_to_github";
+        sha_pinning_required: boolean;
+    }>;
+    cast: (a: unknown) => Readonly<{
+        allowed_actions: "all" | "local_only" | "selected";
+        enabled: boolean;
+        fork_pr_contributor_approval_policy: "all_external_contributors" | "first_time_contributors" | "first_time_contributors_new_to_github";
+        sha_pinning_required: boolean;
+    }>;
+    fill: (a: unknown) => Readonly<{
+        allowed_actions: "all" | "local_only" | "selected";
+        enabled: boolean;
+        fork_pr_contributor_approval_policy: "all_external_contributors" | "first_time_contributors" | "first_time_contributors_new_to_github";
+        sha_pinning_required: boolean;
+    }>;
+    prune: <B extends Readonly<{
+        allowed_actions: "all" | "local_only" | "selected";
+        enabled: boolean;
+        fork_pr_contributor_approval_policy: "all_external_contributors" | "first_time_contributors" | "first_time_contributors_new_to_github";
+        sha_pinning_required: boolean;
+    }>>(a: B) => Readonly<{
+        allowed_actions: "all" | "local_only" | "selected";
+        enabled: boolean;
+        fork_pr_contributor_approval_policy: "all_external_contributors" | "first_time_contributors" | "first_time_contributors_new_to_github";
+        sha_pinning_required: boolean;
+    }>;
+    validate: (a: unknown) => t.Result<Readonly<{
+        allowed_actions: "all" | "local_only" | "selected";
+        enabled: boolean;
+        fork_pr_contributor_approval_policy: "all_external_contributors" | "first_time_contributors" | "first_time_contributors_new_to_github";
+        sha_pinning_required: boolean;
+    }>, readonly Readonly<{
+        path: readonly string[];
+        actualValue: unknown;
+        expectedType: string;
+        typeName: string;
+        details?: t.ValidationErrorDetails | undefined;
+    }>[]>;
+    optional?: true;
+}>;
+export type ActionsSettings = t.TypeOf<typeof ActionsSettings>;
+//# sourceMappingURL=constants.d.mts.map

package/dist/github/actions-settings/constants.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.mts","sourceRoot":"","sources":["../../../src/github/actions-settings/constants.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoC1B,CAAC;AAEH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/github/actions-settings/constants.mjs

@@ -0,0 +1,42 @@
+import * as t from 'ts-fortress';
+/**
+ * `github/actions-settings/settings.json` の型。
+ *
+ * Settings > Actions > General に対応する。 2 つの API をまとめて 1 ファイルで
+ * 管理する:
+ *
+ * - `GET|PUT /repos/{owner}/{repo}/actions/permissions`
+ * - `GET|PUT /repos/{owner}/{repo}/actions/permissions/fork-pr-contributor-approval`
+ */
+export const ActionsSettings = t.record({
+    /** Actions permissions: この repository で Actions を有効にするか。 */
+    enabled: t.boolean(true),
+    /** Actions permissions: 実行を許可する action の範囲。 */
+    allowed_actions: t.enumType(['all', 'local_only', 'selected'], {
+        typeName: 'AllowedActions',
+        defaultValue: 'all',
+    }),
+    /**
+     * 「 Require actions to be pinned to a full-length commit SHA 」。
+     *
+     * NOTE: @octokit/types v16 時点でこのフィールドは型定義に入っていないため、
+     * リクエスト時にのみ手当てしている（ set-actions-permissions.mts 参照）。
+     */
+    sha_pinning_required: t.boolean(false),
+    /**
+     * 「 Approval for running fork pull request workflows from contributors 」。
+     *
+     * - `first_time_contributors_new_to_github`: GitHub 自体に不慣れな初回貢献者のみ承認必須
+     * - `first_time_contributors`: この repository への初回貢献者のみ承認必須
+     * - `all_external_contributors`: 外部貢献者すべてに承認必須
+     */
+    fork_pr_contributor_approval_policy: t.enumType([
+        'first_time_contributors_new_to_github',
+        'first_time_contributors',
+        'all_external_contributors',
+    ], {
+        typeName: 'ForkPrContributorApprovalPolicy',
+        defaultValue: 'all_external_contributors',
+    }),
+});
+//# sourceMappingURL=constants.mjs.map

package/dist/github/actions-settings/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","sourceRoot":"","sources":["../../../src/github/actions-settings/constants.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC;;;;;;;;GAQG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,MAAM,CAAC;IACtC,4DAA4D;IAC5D,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAExB,+CAA+C;IAC/C,eAAe,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,KAAK,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE;QAC7D,QAAQ,EAAE,gBAAgB;QAC1B,YAAY,EAAE,KAAK;KACpB,CAAC;IAEF;;;;;OAKG;IACH,oBAAoB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAEtC;;;;;;OAMG;IACH,mCAAmC,EAAE,CAAC,CAAC,QAAQ,CAC7C;QACE,uCAAuC;QACvC,yBAAyB;QACzB,2BAA2B;KAC5B,EACD;QACE,QAAQ,EAAE,iCAAiC;QAC3C,YAAY,EAAE,2BAA2B;KAC1C,CACF;CACF,CAAC,CAAC"}

package/dist/github/actions-settings/index.d.mts

@@ -0,0 +1,5 @@
+export * from './api/index.mjs';
+export * from './apply.mjs';
+export * from './backup.mjs';
+export * from './constants.mjs';
+//# sourceMappingURL=index.d.mts.map

package/dist/github/actions-settings/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../../src/github/actions-settings/index.mts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/github/actions-settings/index.mjs

@@ -0,0 +1,5 @@
+export * from './api/index.mjs';
+export * from './apply.mjs';
+export * from './backup.mjs';
+export * from './constants.mjs';
+//# sourceMappingURL=index.mjs.map

package/dist/github/actions-settings/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../src/github/actions-settings/index.mts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/github/constants.d.mts

@@ -1,9 +1,11 @@
 export declare const OWNER: string;
 export declare const REPO: string;
+export declare const settingsJsonName = "settings.json";
 export declare const repositorySettingsDir: string;
-export declare const repositorySettingsJsonName = "settings.json";
+export declare const actionsSettingsDir: string;
+export declare const pagesSettingsDir: string;
 export declare const rulesetsDir: string;
 export declare const octokitHeaders: {
-    readonly 'X-GitHub-Api-Version': "2022-11-28";
+    readonly 'X-GitHub-Api-Version': '2022-11-28';
 };
 //# sourceMappingURL=constants.d.mts.map

package/dist/github/constants.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.mts","sourceRoot":"","sources":["../../src/github/constants.mts"],"names":[],"mappings":"AAWA,eAAO,MAAM,KAAK,QAAgB,CAAC;AAiCnC,eAAO,MAAM,IAAI,EAAE,MAA4B,CAAC;AAIhD,eAAO,MAAM,qBAAqB,QAGjC,CAAC;AAEF,eAAO,MAAM,0BAA0B,kBAAkB,CAAC;AAE1D,eAAO,MAAM,WAAW,QAAwC,CAAC;AAEjE,eAAO,MAAM,cAAc;;CAEjB,CAAC"}
+{"version":3,"file":"constants.d.mts","sourceRoot":"","sources":["../../src/github/constants.mts"],"names":[],"mappings":"AAKA,eAAO,MAAM,KAAK,EAAE,MAAyB,CAAC;AAE9C,eAAO,MAAM,IAAI,EAAE,MAAwB,CAAC;AAI5C,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAEhD,eAAO,MAAM,qBAAqB,QAGjC,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAAgD,CAAC;AAEhF,eAAO,MAAM,gBAAgB,QAAqC,CAAC;AAEnE,eAAO,MAAM,WAAW,QAAwC,CAAC;AAEjE,eAAO,MAAM,cAAc;aACzB,sBAAsB,EAAE,YAAY;CAC5B,CAAC"}

package/dist/github/constants.mjs

@@ -1,37 +1,13 @@
-import * as fs from 'node:fs/promises';
 import * as path from 'node:path';
-import { hasKey, isRecord, isString, Json } from 'ts-data-forge';
-import { Result } from 'ts-repo-utils';
-const ownerNullable = process.env['OWNER'];
-if (ownerNullable === undefined) {
-    throw new Error('OWNER env var is not set');
-}
-export const OWNER = ownerNullable;
-const getRepoName = async () => {
-    const repoNameEnv = process.env['REPO_NAME'];
-    if (repoNameEnv !== undefined) {
-        return repoNameEnv;
-    }
-    const packageJsonPath = path.resolve(process.cwd(), './package.json');
-    // eslint-disable-next-line security/detect-non-literal-fs-filename
-    const packageJsonStr = await fs.readFile(packageJsonPath, {
-        encoding: 'utf8',
-    });
-    const packageJson = Json.parse(packageJsonStr);
-    if (Result.isErr(packageJson)) {
-        throw new Error(packageJson.value);
-    }
-    if (!isRecord(packageJson.value) ||
-        !hasKey(packageJson.value, 'name') ||
-        !isString(packageJson.value.name)) {
-        throw new Error('package.json not parsed correctly');
-    }
-    return packageJson.value.name;
-};
-export const REPO = await getRepoName();
+import { resolveTargetRepo } from './resolve-target-repo.mjs';
+const targetRepo = await resolveTargetRepo();
+export const OWNER = targetRepo.owner;
+export const REPO = targetRepo.repo;
 const githubDir = path.resolve(process.cwd(), './github');
+export const settingsJsonName = 'settings.json';
 export const repositorySettingsDir = path.resolve(githubDir, './repository-settings');
-export const repositorySettingsJsonName = 'settings.json';
+export const actionsSettingsDir = path.resolve(githubDir, './actions-settings');
+export const pagesSettingsDir = path.resolve(githubDir, './pages');
 export const rulesetsDir = path.resolve(githubDir, './rulesets');
 export const octokitHeaders = {
     'X-GitHub-Api-Version': '2022-11-28',