github-settings-as-code 3.0.0 → 3.0.2

package/dist/github/ruleset/api/get-ruleset.mjs

@@ -1,10 +1,10 @@
 import { GetRulesetResponse } from 'octokit-safe-types';
-import { validationErrorsToMessages } from 'ts-fortress';
+import * as t from 'ts-fortress';
 import { Result } from 'ts-repo-utils';
 import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
 import { octokit } from '../../octokit.mjs';
 export const getRuleset = async (rulesetId) => {
-    // https://docs.github.com/ja/rest/repos/rules?apiVersion=2022-11-28#get-a-repository-ruleset
+
     const getRulesetResult = await octokit.request('GET /repos/{owner}/{repo}/rulesets/{ruleset_id}', {
         owner: OWNER,
         repo: REPO,
@@ -14,7 +14,7 @@ export const getRuleset = async (rulesetId) => {
     {
         const res = GetRulesetResponse.validate(getRulesetResult.data);
         if (Result.isErr(res)) {
-            console.warn(validationErrorsToMessages(res.value));
+            console.warn(t.validationErrorsToMessages(res.value));
         }
     }
     return GetRulesetResponse.fill(getRulesetResult.data);

package/dist/github/ruleset/api/get-ruleset.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"get-ruleset.mjs","sourceRoot":"","sources":["../../../../src/github/ruleset/api/get-ruleset.mts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAqB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AACzD,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,SAAiB,EACY,EAAE;IAC/B,6FAA6F;IAC7F,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,OAAO,CAC5C,iDAAwE,EACxE;QACE,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,cAAc;KACxB,CACF,CAAC;IAEF,CAAC;QACC,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAE/D,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACtD,CAAC;IACH,CAAC;IAED,OAAO,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;AACxD,CAAC,CAAC"}
+{"version":3,"file":"get-ruleset.mjs","sourceRoot":"","sources":["../../../../src/github/ruleset/api/get-ruleset.mts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAqB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,MAAM,CAAC,MAAM,UAAU,GAAG,KAAK,EAC7B,SAAiB,EACY,EAAE;IAC/B,6FAA6F;IAC7F,MAAM,gBAAgB,GAAG,MAAM,OAAO,CAAC,OAAO,CAC5C,iDAAwE,EACxE;QACE,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,IAAI;QACV,UAAU,EAAE,SAAS;QACrB,OAAO,EAAE,cAAc;KACxB,CACF,CAAC;IAEF,CAAC;QACC,MAAM,GAAG,GAAG,kBAAkB,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAE/D,IAAI,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;YACtB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;QACxD,CAAC;IACH,CAAC;IAED,OAAO,kBAAkB,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC;AACxD,CAAC,CAAC"}

package/dist/github/ruleset/api/update-ruleset.mjs

@@ -1,10 +1,10 @@
-import { castDeepMutable } from 'ts-data-forge';
+
 import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
 import { octokit } from '../../octokit.mjs';
 export const updateRuleset = async ({ rulesetId, payload: { name, target, enforcement, bypass_actors, conditions, rules }, }) => {
-    // https://docs.github.com/ja/rest/repos/rules?apiVersion=2022-11-28#update-a-repository-ruleset
+
     await octokit.request('PUT /repos/{owner}/{repo}/rulesets/{ruleset_id}', 
-    // transformer-ignore-next-line convert-to-readonly
+
     {
         owner: OWNER,
         repo: REPO,
@@ -13,10 +13,10 @@ export const updateRuleset = async ({ rulesetId, payload: { name, target, enforc
         name,
         target,
         enforcement,
-        bypass_actors: castDeepMutable(bypass_actors),
-        conditions: castDeepMutable(conditions),
-        // eslint-disable-next-line total-functions/no-unsafe-type-assertion
-        rules: castDeepMutable(rules),
+        bypass_actors: bypass_actors,
+        conditions: conditions,
+
+        rules: rules,
     });
 };
 //# sourceMappingURL=update-ruleset.mjs.map

package/dist/github/ruleset/apply.mjs

@@ -40,15 +40,15 @@ export const applyRulesets = async () => {
             },
         });
     }
-    // update local ruleset files
+
     {
         const rulesetsResult = await getAllRulesets();
         for (const rule of rulesetsResult) {
             const content = await getRuleset(rule.id);
             const str = JSON.stringify(Obj.pick(content, rulesetKeysToPick), undefined, 2);
-            // eslint-disable-next-line security/detect-non-literal-fs-filename
+
             await fs.writeFile(path.resolve(rulesetsDir, `${rule.name}.json`), str);
-            // eslint-disable-next-line security/detect-non-literal-fs-filename
+
             await fs.writeFile(path.resolve(rulesetsDir, `./bk/${rule.name}.json`), str);
         }
         await formatUncommittedFiles();

package/dist/github/ruleset/backup.mjs

@@ -13,7 +13,7 @@ export const backupRulesets = async (fmt = true) => {
     const rulesetsResult = await getAllRulesets();
     for (const rule of rulesetsResult) {
         const content = await getRuleset(rule.id);
-        // eslint-disable-next-line security/detect-non-literal-fs-filename
+
         await fs.writeFile(path.resolve(backupDir, `${rule.name}.json`), JSON.stringify(Obj.pick(content, rulesetKeysToPick), undefined, 2));
     }
     if (fmt) {

package/dist/github/ruleset/constants.d.mts

@@ -9,7 +9,7 @@ export declare const RulesetPicked: Readonly<{
             readonly actor_id?: number | null | undefined;
             readonly bypass_mode?: "always" | "exempt" | "pull_request" | undefined;
         } & {
-            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team";
+            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team" | "User";
         }>>[] | undefined;
         readonly current_user_can_bypass?: "always" | "exempt" | "never" | "pull_requests_only" | undefined;
         readonly node_id?: string | undefined;
@@ -94,6 +94,14 @@ export declare const RulesetPicked: Readonly<{
         }>> | import("ts-type-forge").MergeIntersection<Readonly<{
             readonly parameters?: import("ts-type-forge").MergeIntersection<Readonly<{
                 readonly allowed_merge_methods?: readonly ("merge" | "rebase" | "squash")[] | undefined;
+                readonly dismissal_restriction?: import("ts-type-forge").MergeIntersection<Readonly<{
+                    readonly allowed_actors?: readonly Readonly<{
+                        id: number;
+                        type: "IntegrationInstallation" | "RepositoryRole" | "Team" | "User";
+                    }>[] | undefined;
+                } & {
+                    enabled: boolean;
+                }>> | undefined;
                 readonly required_reviewers?: readonly Readonly<{
                     file_patterns: readonly string[];
                     minimum_approvals: number;
@@ -242,6 +250,8 @@ export declare const RulesetPicked: Readonly<{
             type: "required_signatures";
         }> | Readonly<{
             type: "non_fast_forward";
+        }> | Readonly<{
+            type: "license_compliance_scanning";
         }>)[] | undefined;
         readonly created_at?: string | undefined;
         readonly updated_at?: string | undefined;
@@ -258,7 +268,7 @@ export declare const RulesetPicked: Readonly<{
             readonly actor_id?: number | null | undefined;
             readonly bypass_mode?: "always" | "exempt" | "pull_request" | undefined;
         } & {
-            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team";
+            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team" | "User";
         }>>[] | undefined;
         readonly current_user_can_bypass?: "always" | "exempt" | "never" | "pull_requests_only" | undefined;
         readonly node_id?: string | undefined;
@@ -343,6 +353,14 @@ export declare const RulesetPicked: Readonly<{
         }>> | import("ts-type-forge").MergeIntersection<Readonly<{
             readonly parameters?: import("ts-type-forge").MergeIntersection<Readonly<{
                 readonly allowed_merge_methods?: readonly ("merge" | "rebase" | "squash")[] | undefined;
+                readonly dismissal_restriction?: import("ts-type-forge").MergeIntersection<Readonly<{
+                    readonly allowed_actors?: readonly Readonly<{
+                        id: number;
+                        type: "IntegrationInstallation" | "RepositoryRole" | "Team" | "User";
+                    }>[] | undefined;
+                } & {
+                    enabled: boolean;
+                }>> | undefined;
                 readonly required_reviewers?: readonly Readonly<{
                     file_patterns: readonly string[];
                     minimum_approvals: number;
@@ -491,6 +509,8 @@ export declare const RulesetPicked: Readonly<{
             type: "required_signatures";
         }> | Readonly<{
             type: "non_fast_forward";
+        }> | Readonly<{
+            type: "license_compliance_scanning";
         }>)[] | undefined;
         readonly created_at?: string | undefined;
         readonly updated_at?: string | undefined;
@@ -507,7 +527,7 @@ export declare const RulesetPicked: Readonly<{
             readonly actor_id?: number | null | undefined;
             readonly bypass_mode?: "always" | "exempt" | "pull_request" | undefined;
         } & {
-            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team";
+            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team" | "User";
         }>>[] | undefined;
         readonly current_user_can_bypass?: "always" | "exempt" | "never" | "pull_requests_only" | undefined;
         readonly node_id?: string | undefined;
@@ -592,6 +612,14 @@ export declare const RulesetPicked: Readonly<{
         }>> | import("ts-type-forge").MergeIntersection<Readonly<{
             readonly parameters?: import("ts-type-forge").MergeIntersection<Readonly<{
                 readonly allowed_merge_methods?: readonly ("merge" | "rebase" | "squash")[] | undefined;
+                readonly dismissal_restriction?: import("ts-type-forge").MergeIntersection<Readonly<{
+                    readonly allowed_actors?: readonly Readonly<{
+                        id: number;
+                        type: "IntegrationInstallation" | "RepositoryRole" | "Team" | "User";
+                    }>[] | undefined;
+                } & {
+                    enabled: boolean;
+                }>> | undefined;
                 readonly required_reviewers?: readonly Readonly<{
                     file_patterns: readonly string[];
                     minimum_approvals: number;
@@ -740,6 +768,8 @@ export declare const RulesetPicked: Readonly<{
             type: "required_signatures";
         }> | Readonly<{
             type: "non_fast_forward";
+        }> | Readonly<{
+            type: "license_compliance_scanning";
         }>)[] | undefined;
         readonly created_at?: string | undefined;
         readonly updated_at?: string | undefined;
@@ -756,7 +786,7 @@ export declare const RulesetPicked: Readonly<{
             readonly actor_id?: number | null | undefined;
             readonly bypass_mode?: "always" | "exempt" | "pull_request" | undefined;
         } & {
-            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team";
+            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team" | "User";
         }>>[] | undefined;
         readonly current_user_can_bypass?: "always" | "exempt" | "never" | "pull_requests_only" | undefined;
         readonly node_id?: string | undefined;
@@ -841,6 +871,14 @@ export declare const RulesetPicked: Readonly<{
         }>> | import("ts-type-forge").MergeIntersection<Readonly<{
             readonly parameters?: import("ts-type-forge").MergeIntersection<Readonly<{
                 readonly allowed_merge_methods?: readonly ("merge" | "rebase" | "squash")[] | undefined;
+                readonly dismissal_restriction?: import("ts-type-forge").MergeIntersection<Readonly<{
+                    readonly allowed_actors?: readonly Readonly<{
+                        id: number;
+                        type: "IntegrationInstallation" | "RepositoryRole" | "Team" | "User";
+                    }>[] | undefined;
+                } & {
+                    enabled: boolean;
+                }>> | undefined;
                 readonly required_reviewers?: readonly Readonly<{
                     file_patterns: readonly string[];
                     minimum_approvals: number;
@@ -989,6 +1027,8 @@ export declare const RulesetPicked: Readonly<{
             type: "required_signatures";
         }> | Readonly<{
             type: "non_fast_forward";
+        }> | Readonly<{
+            type: "license_compliance_scanning";
         }>)[] | undefined;
         readonly created_at?: string | undefined;
         readonly updated_at?: string | undefined;
@@ -1005,7 +1045,7 @@ export declare const RulesetPicked: Readonly<{
             readonly actor_id?: number | null | undefined;
             readonly bypass_mode?: "always" | "exempt" | "pull_request" | undefined;
         } & {
-            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team";
+            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team" | "User";
         }>>[] | undefined;
         readonly current_user_can_bypass?: "always" | "exempt" | "never" | "pull_requests_only" | undefined;
         readonly node_id?: string | undefined;
@@ -1090,6 +1130,14 @@ export declare const RulesetPicked: Readonly<{
         }>> | import("ts-type-forge").MergeIntersection<Readonly<{
             readonly parameters?: import("ts-type-forge").MergeIntersection<Readonly<{
                 readonly allowed_merge_methods?: readonly ("merge" | "rebase" | "squash")[] | undefined;
+                readonly dismissal_restriction?: import("ts-type-forge").MergeIntersection<Readonly<{
+                    readonly allowed_actors?: readonly Readonly<{
+                        id: number;
+                        type: "IntegrationInstallation" | "RepositoryRole" | "Team" | "User";
+                    }>[] | undefined;
+                } & {
+                    enabled: boolean;
+                }>> | undefined;
                 readonly required_reviewers?: readonly Readonly<{
                     file_patterns: readonly string[];
                     minimum_approvals: number;
@@ -1238,6 +1286,8 @@ export declare const RulesetPicked: Readonly<{
             type: "required_signatures";
         }> | Readonly<{
             type: "non_fast_forward";
+        }> | Readonly<{
+            type: "license_compliance_scanning";
         }>)[] | undefined;
         readonly created_at?: string | undefined;
         readonly updated_at?: string | undefined;
@@ -1254,7 +1304,7 @@ export declare const RulesetPicked: Readonly<{
             readonly actor_id?: number | null | undefined;
             readonly bypass_mode?: "always" | "exempt" | "pull_request" | undefined;
         } & {
-            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team";
+            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team" | "User";
         }>>[] | undefined;
         readonly current_user_can_bypass?: "always" | "exempt" | "never" | "pull_requests_only" | undefined;
         readonly node_id?: string | undefined;
@@ -1339,6 +1389,14 @@ export declare const RulesetPicked: Readonly<{
         }>> | import("ts-type-forge").MergeIntersection<Readonly<{
             readonly parameters?: import("ts-type-forge").MergeIntersection<Readonly<{
                 readonly allowed_merge_methods?: readonly ("merge" | "rebase" | "squash")[] | undefined;
+                readonly dismissal_restriction?: import("ts-type-forge").MergeIntersection<Readonly<{
+                    readonly allowed_actors?: readonly Readonly<{
+                        id: number;
+                        type: "IntegrationInstallation" | "RepositoryRole" | "Team" | "User";
+                    }>[] | undefined;
+                } & {
+                    enabled: boolean;
+                }>> | undefined;
                 readonly required_reviewers?: readonly Readonly<{
                     file_patterns: readonly string[];
                     minimum_approvals: number;
@@ -1487,6 +1545,8 @@ export declare const RulesetPicked: Readonly<{
             type: "required_signatures";
         }> | Readonly<{
             type: "non_fast_forward";
+        }> | Readonly<{
+            type: "license_compliance_scanning";
         }>)[] | undefined;
         readonly created_at?: string | undefined;
         readonly updated_at?: string | undefined;
@@ -1502,7 +1562,7 @@ export declare const RulesetPicked: Readonly<{
             readonly actor_id?: number | null | undefined;
             readonly bypass_mode?: "always" | "exempt" | "pull_request" | undefined;
         } & {
-            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team";
+            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team" | "User";
         }>>[] | undefined;
         readonly current_user_can_bypass?: "always" | "exempt" | "never" | "pull_requests_only" | undefined;
         readonly node_id?: string | undefined;
@@ -1587,6 +1647,14 @@ export declare const RulesetPicked: Readonly<{
         }>> | import("ts-type-forge").MergeIntersection<Readonly<{
             readonly parameters?: import("ts-type-forge").MergeIntersection<Readonly<{
                 readonly allowed_merge_methods?: readonly ("merge" | "rebase" | "squash")[] | undefined;
+                readonly dismissal_restriction?: import("ts-type-forge").MergeIntersection<Readonly<{
+                    readonly allowed_actors?: readonly Readonly<{
+                        id: number;
+                        type: "IntegrationInstallation" | "RepositoryRole" | "Team" | "User";
+                    }>[] | undefined;
+                } & {
+                    enabled: boolean;
+                }>> | undefined;
                 readonly required_reviewers?: readonly Readonly<{
                     file_patterns: readonly string[];
                     minimum_approvals: number;
@@ -1735,6 +1803,8 @@ export declare const RulesetPicked: Readonly<{
             type: "required_signatures";
         }> | Readonly<{
             type: "non_fast_forward";
+        }> | Readonly<{
+            type: "license_compliance_scanning";
         }>)[] | undefined;
         readonly created_at?: string | undefined;
         readonly updated_at?: string | undefined;
@@ -1751,7 +1821,7 @@ export declare const RulesetPicked: Readonly<{
             readonly actor_id?: number | null | undefined;
             readonly bypass_mode?: "always" | "exempt" | "pull_request" | undefined;
         } & {
-            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team";
+            actor_type: "DeployKey" | "Integration" | "OrganizationAdmin" | "RepositoryRole" | "Team" | "User";
         }>>[] | undefined;
         readonly current_user_can_bypass?: "always" | "exempt" | "never" | "pull_requests_only" | undefined;
         readonly node_id?: string | undefined;
@@ -1836,6 +1906,14 @@ export declare const RulesetPicked: Readonly<{
         }>> | import("ts-type-forge").MergeIntersection<Readonly<{
             readonly parameters?: import("ts-type-forge").MergeIntersection<Readonly<{
                 readonly allowed_merge_methods?: readonly ("merge" | "rebase" | "squash")[] | undefined;
+                readonly dismissal_restriction?: import("ts-type-forge").MergeIntersection<Readonly<{
+                    readonly allowed_actors?: readonly Readonly<{
+                        id: number;
+                        type: "IntegrationInstallation" | "RepositoryRole" | "Team" | "User";
+                    }>[] | undefined;
+                } & {
+                    enabled: boolean;
+                }>> | undefined;
                 readonly required_reviewers?: readonly Readonly<{
                     file_patterns: readonly string[];
                     minimum_approvals: number;
@@ -1984,6 +2062,8 @@ export declare const RulesetPicked: Readonly<{
             type: "required_signatures";
         }> | Readonly<{
             type: "non_fast_forward";
+        }> | Readonly<{
+            type: "license_compliance_scanning";
         }>)[] | undefined;
         readonly created_at?: string | undefined;
         readonly updated_at?: string | undefined;

package/dist/github/ruleset/constants.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.mts","sourceRoot":"","sources":["../../../src/github/ruleset/constants.mts"],"names":[],"mappings":"AAMA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,eAAO,MAAM,iBAAiB,0FAQ2B,CAAC;AAQ1D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAA+C,CAAC;AAE1E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC"}
+{"version":3,"file":"constants.d.mts","sourceRoot":"","sources":["../../../src/github/ruleset/constants.mts"],"names":[],"mappings":"AAMA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC,eAAO,MAAM,iBAAiB,0FAQ2B,CAAC;AAQ1D,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAA+C,CAAC;AAE1E,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,aAAa,CAAC,CAAC"}

package/dist/github/ruleset/constants.mjs

@@ -1,5 +1,5 @@
 import { RepositoryRuleset, } from 'octokit-safe-types';
-import { expectType } from 'ts-data-forge';
+
 import * as t from 'ts-fortress';
 export const rulesetKeysToPick = [
     'id',
@@ -10,7 +10,7 @@ export const rulesetKeysToPick = [
     'conditions',
     'rules',
 ];
-expectType('=');
-expectType('=');
+
+
 export const RulesetPicked = t.pick(RepositoryRuleset, rulesetKeysToPick);
 //# sourceMappingURL=constants.mjs.map

package/dist/github/ruleset/read-rule-set-contents.mjs

@@ -7,14 +7,14 @@ import { RulesetPicked } from './constants.mjs';
 export const readRulesetFiles = async () => readFilesIn(rulesetsDir);
 export const readRulesetBackupFiles = async () => readFilesIn(path.resolve(rulesetsDir, './bk'));
 const readFilesIn = async (dir) => {
-    // eslint-disable-next-line security/detect-non-literal-fs-filename
+
     const files = await fs.readdir(dir, {
         withFileTypes: true,
     });
     const rulesetFileContents = await Promise.all(files
         .filter((d) => d.isFile())
         .map((d) => 
-    // eslint-disable-next-line security/detect-non-literal-fs-filename
+
     fs.readFile(path.resolve(dir, d.name), {
         encoding: 'utf8',
     })));

package/dist/github/variables/api/create-repo-variable.mjs

@@ -1,7 +1,7 @@
 import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
 import { octokit } from '../../octokit.mjs';
 export const createRepoVariable = async ({ name, value, }) => {
-    // https://docs.github.com/ja/rest/actions/variables?apiVersion=2022-11-28#create-a-repository-variable
+
     await octokit.request('POST /repos/{owner}/{repo}/actions/variables', {
         owner: OWNER,
         repo: REPO,

package/dist/github/variables/api/list-repo-variables.mjs

@@ -1,7 +1,7 @@
 import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
 import { octokit } from '../../octokit.mjs';
 export const listRepoVariables = async () => {
-    // https://docs.github.com/ja/rest/actions/variables?apiVersion=2022-11-28#list-repository-variables
+
     const result = await octokit.request('GET /repos/{owner}/{repo}/actions/variables', {
         owner: OWNER,
         repo: REPO,

package/dist/github/variables/api/update-repo-variable.mjs

@@ -1,7 +1,7 @@
 import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
 import { octokit } from '../../octokit.mjs';
 export const updateRepoVariable = async ({ name, value, }) => {
-    // https://docs.github.com/en/rest/actions/variables#update-a-repository-variable
+
     await octokit.request('PATCH /repos/{owner}/{repo}/actions/variables/{name}', {
         owner: OWNER,
         repo: REPO,

package/dist/github/variables/apply.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.d.mts","sourceRoot":"","sources":["../../../src/github/variables/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAQvB,eAAO,MAAM,cAAc,QAAa,OAAO,CAAC,IAAI,CA6BnD,CAAC"}
+{"version":3,"file":"apply.d.mts","sourceRoot":"","sources":["../../../src/github/variables/apply.mts"],"names":[],"mappings":";AAGA,OAAO,eAAe,CAAC;AAQvB,eAAO,MAAM,cAAc,QAAa,OAAO,CAAC,IAAI,CA6BnD,CAAC"}

package/dist/github/variables/apply.mjs

@@ -1,20 +1,21 @@
 #!/usr/bin/env node
+
 import 'dotenv/config';
 import { isDirectlyExecuted } from 'ts-repo-utils';
 import { createRepoVariable, listRepoVariables, updateRepoVariable, } from './api/index.mjs';
 export const applyVariables = async () => {
     const variables = [
         {
-            // noshiro-repo-settings-bot (App ID: 4476573)
-            // Administration を含む強い権限を持つ。設定の backup / apply 専用。
+
+
             name: 'REPO_SETTINGS_BOT_CLIENT_ID',
             value: 'Iv23ctr4Lq9H3wOYRQrD',
         },
         {
-            // noshiro-repo-automation-bot (App ID: 4478721)
-            // Contents / Pull requests / Issues 権限。PR を作る自動化（ pnpm-update ）と
-            // release で共用する。実際に使う権限は各ワークフローの permission-* 入力で
-            // 絞る。
+
+
+
+
             name: 'REPO_AUTOMATION_BOT_CLIENT_ID',
             value: 'Iv23lilpiDh0twq2PErv',
         },

package/dist/github/variables/apply.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"apply.mjs","sourceRoot":"","sources":["../../../src/github/variables/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,IAAmB,EAAE;IACtD,MAAM,SAAS,GAAG;QAChB;YACE,8CAA8C;YAC9C,mDAAmD;YACnD,IAAI,EAAE,6BAA6B;YACnC,KAAK,EAAE,sBAAsB;SAC9B;QACD;YACE,gDAAgD;YAChD,iEAAiE;YACjE,kDAAkD;YAClD,MAAM;YACN,IAAI,EAAE,+BAA+B;YACrC,KAAK,EAAE,sBAAsB;SAC9B;KACO,CAAC;IAEX,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEpD,MAAM,cAAc,GAAwB,IAAI,GAAG,CACjD,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACrC,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEhD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,cAAc,EAAE,CAAC;AACzB,CAAC"}
+{"version":3,"file":"apply.mjs","sourceRoot":"","sources":["../../../src/github/variables/apply.mts"],"names":[],"mappings":";AAEA,sBAAsB;AACtB,OAAO,eAAe,CAAC;AACvB,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EACL,kBAAkB,EAClB,iBAAiB,EACjB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AAEzB,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,IAAmB,EAAE;IACtD,MAAM,SAAS,GAAG;QAChB;YACE,8CAA8C;YAC9C,mDAAmD;YACnD,IAAI,EAAE,6BAA6B;YACnC,KAAK,EAAE,sBAAsB;SAC9B;QACD;YACE,gDAAgD;YAChD,iEAAiE;YACjE,kDAAkD;YAClD,MAAM;YACN,IAAI,EAAE,+BAA+B;YACrC,KAAK,EAAE,sBAAsB;SAC9B;KACO,CAAC;IAEX,MAAM,iBAAiB,GAAG,MAAM,iBAAiB,EAAE,CAAC;IAEpD,MAAM,cAAc,GAAwB,IAAI,GAAG,CACjD,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CACrC,CAAC;IAEF,KAAK,MAAM,QAAQ,IAAI,SAAS,EAAE,CAAC;QACjC,MAAM,KAAK,GAAG,cAAc,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QAEhD,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,cAAc,EAAE,CAAC;AACzB,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "github-settings-as-code",
-  "version": "3.0.0",
+  "version": "3.0.2",
   "private": false,
   "keywords": [
     "github",
@@ -25,33 +25,34 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@octokit/core": "^7.0.7",
+    "@octokit/core": "^7.0.8",
+    "dedent": "^1.7.2",
     "dotenv": "^17.4.2",
-    "octokit-safe-types": "^1.2.25",
-    "ts-data-forge": "^14.2.1",
-    "ts-repo-utils": "^10.2.0",
-    "ts-type-forge": "^9.2.1",
-    "ts-fortress": "^12.0.1"
+    "octokit-safe-types": "^1.2.28",
+    "ts-data-forge": "^14.6.3",
+    "ts-fortress": "^12.1.1",
+    "ts-repo-utils": "^10.6.0",
+    "ts-type-forge": "^9.2.2"
   },
   "devDependencies": {
-    "@types/node": "26.2.0",
-    "@vitest/coverage-v8": "4.1.10",
-    "@vitest/ui": "4.1.10",
-    "cspell": "10.0.1",
-    "eslint": "10.8.0",
+    "@types/node": "26.4.1",
+    "@vitest/coverage-v8": "4.1.11",
+    "@vitest/ui": "4.1.11",
+    "cspell": "10.1.1",
+    "eslint": "10.9.1",
+    "eslint-config-typed": "5.11.2",
+    "eslint-plugin-ts-data-forge": "0.7.0",
+    "eslint-plugin-ts-fortress": "1.2.0",
+    "eslint-plugin-ts-type-forge": "0.8.1",
     "jiti": "2.7.0",
     "npm-run-all2": "9.0.3",
     "prettier": "3.9.6",
     "prettier-plugin-organize-imports": "4.3.0",
     "prettier-plugin-packagejson": "3.0.2",
-    "tsx": "4.23.4",
+    "tsx": "4.23.12",
     "typescript": "6.0.3",
     "typescript-native": "npm:typescript@7.0.2",
-    "vitest": "4.1.10",
-    "eslint-plugin-ts-data-forge": "0.4.5",
-    "eslint-config-typed": "5.8.6",
-    "eslint-plugin-ts-fortress": "1.0.1",
-    "eslint-plugin-ts-type-forge": "0.6.3"
+    "vitest": "4.1.11"
   },
   "engines": {
     "node": ">=22.22.2",
@@ -69,15 +70,9 @@
     "build:min": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ./scripts/cmd/build.mts --skip-check",
     "check:ext": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ./scripts/cmd/check-ext.mts",
     "check-all": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ./scripts/cmd/check-all.mts",
-    "codemod": "run-s codemod:uncommitted:as-const fmt codemod:uncommitted:readonly fmt",
-    "codemod:diff": "run-s codemod:diff:as-const fmt codemod:diff:readonly fmt",
-    "codemod:diff:as-const": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/append-as-const.mts --diff-from origin/main '{src,scripts,samples}/**/*.mts'",
-    "codemod:diff:readonly": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/convert-to-readonly.mts --diff-from origin/main '{src,scripts,samples}/**/*.mts'",
-    "codemod:full": "run-s codemod:full:as-const fmt codemod:full:readonly fmt",
-    "codemod:full:as-const": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/append-as-const.mts '{src,scripts,samples}/**/*.mts'",
-    "codemod:full:readonly": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/convert-to-readonly.mts '{src,scripts,samples}/**/*.mts'",
-    "codemod:uncommitted:as-const": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/append-as-const.mts --uncommitted '{src,scripts,samples}/**/*.mts'",
-    "codemod:uncommitted:readonly": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/convert-to-readonly.mts --uncommitted '{src,scripts,samples}/**/*.mts'",
+    "codemod": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/ts-codemod.mts --uncommitted --transformer append-as-const --transformer convert-to-readonly '{src,scripts,samples}/**/*.mts' && pnpm run fmt",
+    "codemod:diff": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/ts-codemod.mts --diff-from origin/main --transformer append-as-const --transformer convert-to-readonly '{src,scripts,samples}/**/*.mts' && pnpm run fmt",
+    "codemod:full": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/ts-codemod.mts --transformer append-as-const --transformer convert-to-readonly '{src,scripts,samples}/**/*.mts' && pnpm run fmt",
     "cspell": "cspell \"**\" --gitignore --gitignore-root ../../ --no-progress",
     "doc": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ./scripts/cmd/gen-docs.mts",
     "fmt": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-repo-utils/src/cmd/format-uncommitted.mts --cwd .",