github-settings-as-code 3.1.0 → 3.2.0

package/README.md

@@ -1,12 +1,19 @@
-# Github Settings as Code
+# GitHub Settings as Code
 
-GitHub の repository 設定を JSON ファイルで管理するための CLI。
+A CLI for managing a GitHub repository's settings as JSON files.
 
-設定ファイルは repository root の `repo-settings/` から読む。
+The settings files are read from `repo-settings/` at the repository root.
 
-> **v3.0.0 での破壊的変更**: 読み込み元が `github/` から `repo-settings/` に
-> 変わった。`git mv github repo-settings` で移行する。旧名は `.github/` の
-> 別名に見えて、workflow もここにあると誤解させるものだった。
+> **Breaking change in v3.0.0**: the settings directory moved from `github/` to
+> `repo-settings/`. Migrate with `git mv github repo-settings`. The old name
+> looked like an alias of `.github/` and suggested that workflows lived there
+> too.
+
+## Installation
+
+```sh
+npm install -D github-settings-as-code
+```
 
 ## Usage
 
@@ -14,19 +21,19 @@ GitHub の repository 設定を JSON ファイルで管理するための CLI。
 repo-settings <command> [target] [options]
 ```
 
-| Command  | 説明                                         |
-| -------- | -------------------------------------------- |
-| `apply`  | ローカルの設定ファイルを GitHub に反映する   |
-| `backup` | GitHub の現在値をローカルの `bk/` に保存する |
+| Command  | Description                                                      |
+| -------- | ---------------------------------------------------------------- |
+| `apply`  | Apply the local settings files to GitHub                         |
+| `backup` | Save the current values on GitHub to the local `bk/` directories |
 
-| Target        | 対応するファイル                                  | `apply` | `backup` |
-| ------------- | ------------------------------------------------- | ------- | -------- |
-| `all`（既定） | すべて                                            | ✅      | ✅       |
-| `repository`  | `repo-settings/repository-settings/settings.json` | ✅      | ✅       |
-| `rulesets`    | `repo-settings/rulesets/*.json`                   | ✅      | ✅       |
-| `variables`   | repository variables                              | ✅      | —        |
-| `actions`     | `repo-settings/actions-settings/settings.json`    | ✅      | ✅       |
-| `pages`       | `repo-settings/pages/settings.json`               | ✅      | ✅       |
+| Target          | Files                                             | `apply` | `backup` |
+| --------------- | ------------------------------------------------- | ------- | -------- |
+| `all` (default) | All of the below                                  | ✅      | ✅       |
+| `repository`    | `repo-settings/repository-settings/settings.json` | ✅      | ✅       |
+| `rulesets`      | `repo-settings/rulesets/*.json`                   | ✅      | ✅       |
+| `variables`     | Repository variables                              | ✅      | —        |
+| `actions`       | `repo-settings/actions-settings/settings.json`    | ✅      | ✅       |
+| `pages`         | `repo-settings/pages/settings.json`               | ✅      | ✅       |
 
 ```sh
 repo-settings apply
@@ -35,34 +42,47 @@ repo-settings backup
 repo-settings apply --owner noshiro-pf --repo ts-repo-utils
 ```
 
-## 対象 repository の解決
+Each `backup` is written to a `bk/` directory next to the settings file it
+mirrors (for example `repo-settings/rulesets/bk/`). `apply` reads the values
+back from GitHub afterwards and rewrites the local files with what was actually
+applied.
+
+## Resolving the target repository
 
-以下の順で決まる。通常は `git remote` から決まるため、どちらの指定も不要。
+The target is resolved in the following order. It is normally derived from
+`git remote`, so neither option is usually needed.
 
-1. コマンドライン引数 `--owner` / `--repo`
-2. 環境変数 `OWNER` / `REPO_NAME`
+1. The command-line options `--owner` / `--repo`
+2. The environment variables `OWNER` / `REPO_NAME`
 3. `git remote get-url origin`
-4. `package.json` の `name`（ repository 名のみ ）
+4. The `name` field of `package.json` (repository name only)
+
+## Authentication
 
-## 認証
+The token is resolved in the following order. Locally, nothing needs to be
+configured once you have run `gh auth login`.
 
-以下の順で解決される。ローカルでは `gh auth login` 済みであれば設定不要。
+1. The environment variables `GITHUB_APP_TOKEN` / `GH_TOKEN` /
+   `PERSONAL_ACCESS_TOKEN`
+2. `gh auth token` (the gh CLI's login)
 
-1. 環境変数 `GITHUB_APP_TOKEN` / `GH_TOKEN` / `PERSONAL_ACCESS_TOKEN`
-2. `gh auth token`（ gh CLI のログイン情報 ）
+`GITHUB_TOKEN` is deliberately not read. In GitHub Actions it may hold the
+default token, which lacks the Administration permission.
 
-CI では GitHub App の installation token を `GH_TOKEN` に渡す。 repository
-設定・ruleset の操作には **Administration** 権限が必要で、既定の `GITHUB_TOKEN`
-では権限が足りない（`permissions:` に `administration` は存在しない）。
+In CI, pass a GitHub App installation token as `GH_TOKEN`. Changing repository
+settings and rulesets requires the **Administration** permission, which the
+default `GITHUB_TOKEN` cannot be granted (`administration` is not a valid key
+under `permissions:`).
 
-## 管理できる設定
+## Managed settings
 
-| ファイル                                          | GitHub 上の場所                         |
+| File                                              | Location on GitHub                      |
 | ------------------------------------------------- | --------------------------------------- |
 | `repo-settings/repository-settings/settings.json` | Settings > General                      |
 | `repo-settings/rulesets/*.json`                   | Settings > Rules > Rulesets             |
 | `repo-settings/actions-settings/settings.json`    | Settings > Actions > General            |
 | `repo-settings/pages/settings.json`               | Settings > Pages > Build and deployment |
 
-`repo-settings/pages/settings.json` を置いていない repository では Pages の操作を行わない
-（ Pages を使わない repository で誤って有効化しないため ）。
+In a repository without `repo-settings/pages/settings.json`, Pages is left
+untouched, so that a repository that does not use Pages never has it enabled by
+mistake.

package/dist/cmd/repo-settings.mjs

@@ -19,6 +19,9 @@ const HELP = dedent `
     variables          repository variables （ apply のみ ）
     actions            repo-settings/actions-settings/settings.json
     pages              repo-settings/pages/settings.json
+    environments       repo-settings/environments/*.json
+    vulnerability-alerts
+                       repo-settings/vulnerability-alerts/settings.json
 
   Options:
         --owner <owner>   対象の owner
@@ -47,6 +50,8 @@ const TARGETS = [
     'variables',
     'actions',
     'pages',
+    'environments',
+    'vulnerability-alerts',
 ];
 const COMMAND_SET = new Set(COMMANDS);
 const isCommand = (value) => COMMAND_SET.has(value);
@@ -93,12 +98,16 @@ const runners = {
             await github.applyRepositorySettings();
             await github.applyActionsSettings();
             await github.applyPagesSettings();
+            await github.applyEnvironments();
+            await github.applyVulnerabilityAlerts();
         },
         repository: github.applyRepositorySettings,
         rulesets: github.applyRulesets,
         variables: github.applyVariables,
         actions: github.applyActionsSettings,
         pages: github.applyPagesSettings,
+        environments: github.applyEnvironments,
+        'vulnerability-alerts': github.applyVulnerabilityAlerts,
     },
     backup: {
         all: async () => {
@@ -106,11 +115,15 @@ const runners = {
             await github.backupRepositorySettings();
             await github.backupActionsSettings();
             await github.backupPagesSettings();
+            await github.backupEnvironments();
+            await github.backupVulnerabilityAlerts();
         },
         repository: github.backupRepositorySettings,
         rulesets: github.backupRulesets,
         actions: github.backupActionsSettings,
         pages: github.backupPagesSettings,
+        environments: github.backupEnvironments,
+        'vulnerability-alerts': github.backupVulnerabilityAlerts,
     },
 };
 const runner = runners[commandArg][targetArg];

package/dist/cmd/repo-settings.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"repo-settings.mjs","sourceRoot":"","sources":["../../src/cmd/repo-settings.mts"],"names":[],"mappings":";AAEA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,eAAe,CAAC;AACvB,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAGpC,MAAM,IAAI,GAAG,MAAM,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmClB,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAI9C,MAAM,OAAO,GAAG;IACd,KAAK;IACL,YAAY;IACZ,UAAU;IACV,WAAW;IACX,SAAS;IACT,OAAO;CACC,CAAC;AAIX,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;AAE3D,MAAM,SAAS,GAAG,CAAC,KAAa,EAAoB,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAE9E,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;AAEzD,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAmB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAE3E,0CAA0C;AAC1C,gDAAgD;AAChD,MAAM,IAAI,GAA+B,CAAC,OAAO,EAAE,EAAE;IACnD,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IAE9B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;IAC7C,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/B,OAAO,EAAE;QACP,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;KACtD;IACD,MAAM,EAAE,KAAK;IACb,gBAAgB,EAAE,IAAI;CACvB,CAAC,CAAC;AAEH,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEnB,0EAA0E;IAC1E,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,UAAU,EAAE,SAAS,GAAG,KAAK,CAAC,GAAG,WAAW,CAAC;AAEpD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;IACvD,IAAI,CAAC,qBAAqB,UAAU,IAAI,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;IACzB,IAAI,CAAC,oBAAoB,SAAS,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,wDAAwD;AACxD,oCAAoC;AACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAEnD,MAAM,OAAO,GAGT;IACF,KAAK,EAAE;QACL,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YAE9B,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;YAE7B,MAAM,MAAM,CAAC,uBAAuB,EAAE,CAAC;YAEvC,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAEpC,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC;QACpC,CAAC;QACD,UAAU,EAAE,MAAM,CAAC,uBAAuB;QAC1C,QAAQ,EAAE,MAAM,CAAC,aAAa;QAC9B,SAAS,EAAE,MAAM,CAAC,cAAc;QAChC,OAAO,EAAE,MAAM,CAAC,oBAAoB;QACpC,KAAK,EAAE,MAAM,CAAC,kBAAkB;KACjC;IACD,MAAM,EAAE;QACN,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YAE9B,MAAM,MAAM,CAAC,wBAAwB,EAAE,CAAC;YAExC,MAAM,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAErC,MAAM,MAAM,CAAC,mBAAmB,EAAE,CAAC;QACrC,CAAC;QACD,UAAU,EAAE,MAAM,CAAC,wBAAwB;QAC3C,QAAQ,EAAE,MAAM,CAAC,cAAc;QAC/B,OAAO,EAAE,MAAM,CAAC,qBAAqB;QACrC,KAAK,EAAE,MAAM,CAAC,mBAAmB;KAClC;CACO,CAAC;AAEX,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC;AAE9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC,IAAI,UAAU,kCAAkC,SAAS,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,MAAM,EAAE,CAAC"}
+{"version":3,"file":"repo-settings.mjs","sourceRoot":"","sources":["../../src/cmd/repo-settings.mts"],"names":[],"mappings":";AAEA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAC5B,OAAO,eAAe,CAAC;AACvB,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AAGpC,MAAM,IAAI,GAAG,MAAM,CAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAsClB,CAAC;AAEF,MAAM,QAAQ,GAAG,CAAC,OAAO,EAAE,QAAQ,CAAU,CAAC;AAI9C,MAAM,OAAO,GAAG;IACd,KAAK;IACL,YAAY;IACZ,UAAU;IACV,WAAW;IACX,SAAS;IACT,OAAO;IACP,cAAc;IACd,sBAAsB;CACd,CAAC;AAIX,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAC;AAE3D,MAAM,SAAS,GAAG,CAAC,KAAa,EAAoB,EAAE,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAE9E,MAAM,UAAU,GAAwB,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;AAEzD,MAAM,QAAQ,GAAG,CAAC,KAAa,EAAmB,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;AAE3E,0CAA0C;AAC1C,gDAAgD;AAChD,MAAM,IAAI,GAA+B,CAAC,OAAO,EAAE,EAAE;IACnD,OAAO,CAAC,KAAK,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC;IAE9B,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAElB,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAEpB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC;AAEF,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC;IAC7C,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/B,OAAO,EAAE;QACP,KAAK,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACzB,IAAI,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE;QACxB,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE;KACtD;IACD,MAAM,EAAE,KAAK;IACb,gBAAgB,EAAE,IAAI;CACvB,CAAC,CAAC;AAEH,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,GAAG,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;IACrD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAEnB,0EAA0E;IAC1E,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,MAAM,CAAC,UAAU,EAAE,SAAS,GAAG,KAAK,CAAC,GAAG,WAAW,CAAC;AAEpD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;IACvD,IAAI,CAAC,qBAAqB,UAAU,IAAI,EAAE,GAAG,CAAC,CAAC;AACjD,CAAC;AAED,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;IACzB,IAAI,CAAC,oBAAoB,SAAS,GAAG,CAAC,CAAC;AACzC,CAAC;AAED,wDAAwD;AACxD,oCAAoC;AACpC,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;AAEnD,MAAM,OAAO,GAGT;IACF,KAAK,EAAE;QACL,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YAE9B,MAAM,MAAM,CAAC,aAAa,EAAE,CAAC;YAE7B,MAAM,MAAM,CAAC,uBAAuB,EAAE,CAAC;YAEvC,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAC;YAEpC,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAElC,MAAM,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAEjC,MAAM,MAAM,CAAC,wBAAwB,EAAE,CAAC;QAC1C,CAAC;QACD,UAAU,EAAE,MAAM,CAAC,uBAAuB;QAC1C,QAAQ,EAAE,MAAM,CAAC,aAAa;QAC9B,SAAS,EAAE,MAAM,CAAC,cAAc;QAChC,OAAO,EAAE,MAAM,CAAC,oBAAoB;QACpC,KAAK,EAAE,MAAM,CAAC,kBAAkB;QAChC,YAAY,EAAE,MAAM,CAAC,iBAAiB;QACtC,sBAAsB,EAAE,MAAM,CAAC,wBAAwB;KACxD;IACD,MAAM,EAAE;QACN,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;YAE9B,MAAM,MAAM,CAAC,wBAAwB,EAAE,CAAC;YAExC,MAAM,MAAM,CAAC,qBAAqB,EAAE,CAAC;YAErC,MAAM,MAAM,CAAC,mBAAmB,EAAE,CAAC;YAEnC,MAAM,MAAM,CAAC,kBAAkB,EAAE,CAAC;YAElC,MAAM,MAAM,CAAC,yBAAyB,EAAE,CAAC;QAC3C,CAAC;QACD,UAAU,EAAE,MAAM,CAAC,wBAAwB;QAC3C,QAAQ,EAAE,MAAM,CAAC,cAAc;QAC/B,OAAO,EAAE,MAAM,CAAC,qBAAqB;QACrC,KAAK,EAAE,MAAM,CAAC,mBAAmB;QACjC,YAAY,EAAE,MAAM,CAAC,kBAAkB;QACvC,sBAAsB,EAAE,MAAM,CAAC,yBAAyB;KACzD;CACO,CAAC;AAEX,MAAM,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC,SAAS,CAAC,CAAC;AAE9C,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;IACzB,IAAI,CAAC,IAAI,UAAU,kCAAkC,SAAS,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,MAAM,EAAE,CAAC"}

package/dist/github/constants.d.mts

@@ -4,6 +4,8 @@ export declare const settingsJsonName = "settings.json";
 export declare const repositorySettingsDir: string;
 export declare const actionsSettingsDir: string;
 export declare const pagesSettingsDir: string;
+export declare const environmentsDir: string;
+export declare const vulnerabilityAlertsDir: string;
 export declare const rulesetsDir: string;
 export declare const octokitHeaders: {
     readonly 'X-GitHub-Api-Version': '2022-11-28';

package/dist/github/constants.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"constants.d.mts","sourceRoot":"","sources":["../../src/github/constants.mts"],"names":[],"mappings":"AAKA,eAAO,MAAM,KAAK,EAAE,MAAyB,CAAC;AAE9C,eAAO,MAAM,IAAI,EAAE,MAAwB,CAAC;AAM5C,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAEhD,eAAO,MAAM,qBAAqB,QAGjC,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAG9B,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAuC,CAAC;AAErE,eAAO,MAAM,WAAW,QAA0C,CAAC;AAEnE,eAAO,MAAM,cAAc;aACzB,sBAAsB,EAAE,YAAY;CAC5B,CAAC"}
+{"version":3,"file":"constants.d.mts","sourceRoot":"","sources":["../../src/github/constants.mts"],"names":[],"mappings":"AAKA,eAAO,MAAM,KAAK,EAAE,MAAyB,CAAC;AAE9C,eAAO,MAAM,IAAI,EAAE,MAAwB,CAAC;AAM5C,eAAO,MAAM,gBAAgB,kBAAkB,CAAC;AAEhD,eAAO,MAAM,qBAAqB,QAGjC,CAAC;AAEF,eAAO,MAAM,kBAAkB,QAG9B,CAAC;AAEF,eAAO,MAAM,gBAAgB,QAAuC,CAAC;AAErE,eAAO,MAAM,eAAe,QAA8C,CAAC;AAE3E,eAAO,MAAM,sBAAsB,QAGlC,CAAC;AAEF,eAAO,MAAM,WAAW,QAA0C,CAAC;AAEnE,eAAO,MAAM,cAAc;aACzB,sBAAsB,EAAE,YAAY;CAC5B,CAAC"}

package/dist/github/constants.mjs

@@ -10,6 +10,8 @@ export const settingsJsonName = 'settings.json';
 export const repositorySettingsDir = path.resolve(settingsDir, './repository-settings');
 export const actionsSettingsDir = path.resolve(settingsDir, './actions-settings');
 export const pagesSettingsDir = path.resolve(settingsDir, './pages');
+export const environmentsDir = path.resolve(settingsDir, './environments');
+export const vulnerabilityAlertsDir = path.resolve(settingsDir, './vulnerability-alerts');
 export const rulesetsDir = path.resolve(settingsDir, './rulesets');
 export const octokitHeaders = {
     'X-GitHub-Api-Version': '2022-11-28',

package/dist/github/constants.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"constants.mjs","sourceRoot":"","sources":["../../src/github/constants.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,MAAM,UAAU,GAAG,MAAM,iBAAiB,EAAE,CAAC;AAE7C,MAAM,CAAC,MAAM,KAAK,GAAW,UAAU,CAAC,KAAK,CAAC;AAE9C,MAAM,CAAC,MAAM,IAAI,GAAW,UAAU,CAAC,IAAI,CAAC;AAE5C,yEAAyE;AACzE,iEAAiE;AACjE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAEhD,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,CAC/C,WAAW,EACX,uBAAuB,CACxB,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAC5C,WAAW,EACX,oBAAoB,CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,sBAAsB,EAAE,YAAY;CAC5B,CAAC"}
+{"version":3,"file":"constants.mjs","sourceRoot":"","sources":["../../src/github/constants.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAE9D,MAAM,UAAU,GAAG,MAAM,iBAAiB,EAAE,CAAC;AAE7C,MAAM,CAAC,MAAM,KAAK,GAAW,UAAU,CAAC,KAAK,CAAC;AAE9C,MAAM,CAAC,MAAM,IAAI,GAAW,UAAU,CAAC,IAAI,CAAC;AAE5C,yEAAyE;AACzE,iEAAiE;AACjE,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,gBAAgB,GAAG,eAAe,CAAC;AAEhD,MAAM,CAAC,MAAM,qBAAqB,GAAG,IAAI,CAAC,OAAO,CAC/C,WAAW,EACX,uBAAuB,CACxB,CAAC;AAEF,MAAM,CAAC,MAAM,kBAAkB,GAAG,IAAI,CAAC,OAAO,CAC5C,WAAW,EACX,oBAAoB,CACrB,CAAC;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC;AAErE,MAAM,CAAC,MAAM,eAAe,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,sBAAsB,GAAG,IAAI,CAAC,OAAO,CAChD,WAAW,EACX,wBAAwB,CACzB,CAAC;AAEF,MAAM,CAAC,MAAM,WAAW,GAAG,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AAEnE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,sBAAsB,EAAE,YAAY;CAC5B,CAAC"}

package/dist/github/environments/api/get-environments.d.mts

@@ -0,0 +1,16 @@
+import { EnvironmentSettings } from '../constants.mjs';
+/**
+ * Settings > Environments の現在値を、宣言ファイルと同じ形にして返す。
+ *
+ * 名前順に整える。 GitHub が返す順は作成順で、環境を 1 つ足しただけで
+ * `bk/` の中身が並び替わると差分が読めなくなるため。
+ */
+export declare const getAllEnvironments: () => Promise<readonly EnvironmentSettings[]>;
+/** 「 Selected branches and tags 」に登録されている pattern を列挙する。 */
+export declare const getDeploymentBranchPolicies: (environmentName: string) => Promise<readonly DeploymentBranchPolicy[]>;
+export type DeploymentBranchPolicy = Readonly<{
+    id: number;
+    name: string;
+    type: 'branch' | 'tag';
+}>;
+//# sourceMappingURL=get-environments.d.mts.map

package/dist/github/environments/api/get-environments.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-environments.d.mts","sourceRoot":"","sources":["../../../../src/github/environments/api/get-environments.mts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,QAAa,OAAO,CACjD,SAAS,mBAAmB,EAAE,CAoC/B,CAAC;AAWF,4DAA4D;AAC5D,eAAO,MAAM,2BAA2B,oBACrB,MAAM,KACtB,OAAO,CAAC,SAAS,sBAAsB,EAAE,CAkB3C,CAAC;AAEF,MAAM,MAAM,sBAAsB,GAAG,QAAQ,CAAC;IAC5C,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,QAAQ,GAAG,KAAK,CAAC;CACxB,CAAC,CAAC"}

package/dist/github/environments/api/get-environments.mjs

@@ -0,0 +1,98 @@
+import { Arr } from 'ts-data-forge';
+import * as t from 'ts-fortress';
+import { Result } from 'ts-repo-utils';
+import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
+import { octokit } from '../../octokit.mjs';
+import { EnvironmentSettings } from '../constants.mjs';
+
+
+
+
+
+
+export const getAllEnvironments = async () => {
+
+
+
+
+    const response = await octokit.request('GET /repos/{owner}/{repo}/environments', { owner: OWNER, repo: REPO, headers: octokitHeaders, per_page: 100 });
+    const environments = response.data.environments ?? [];
+    const settings = await Promise.all(environments.map(async (environment) => {
+        const policy = environment.deployment_branch_policy ?? undefined;
+        return EnvironmentSettings.fill({
+            name: environment.name,
+            ...parseProtectionRules(environment.protection_rules),
+            deployment_branch_policy: policy === undefined
+                ? null
+                : {
+                    protected_branches: policy.protected_branches,
+                    custom_branch_policies: policy.custom_branch_policies,
+                },
+            deployment_branch_policies: policy?.custom_branch_policies === true
+                ? await getDeploymentBranchPolicyNames(environment.name)
+                : [],
+        });
+    }));
+    return settings.toSorted((a, b) => a.name.localeCompare(b.name));
+};
+
+const getDeploymentBranchPolicyNames = async (environmentName) => {
+    const policies = await getDeploymentBranchPolicies(environmentName);
+    return policies.map(({ name, type }) => ({ name, type }));
+};
+
+export const getDeploymentBranchPolicies = async (environmentName) => {
+
+    const response = await octokit.request('GET /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies', {
+        owner: OWNER,
+        repo: REPO,
+        environment_name: environmentName,
+        headers: octokitHeaders,
+        per_page: 100,
+    });
+    return response.data.branch_policies.map((policy) => ({
+        id: policy.id ?? 0,
+        name: policy.name ?? '',
+        type: policy.type === 'tag' ? 'tag' : 'branch',
+    }));
+};
+
+
+
+
+
+
+
+
+const parseProtectionRules = (protectionRules) => {
+    const validationResult = ProtectionRules.validate(protectionRules ?? []);
+    if (Result.isErr(validationResult)) {
+        throw new Error(Arr.toUnshifted('GitHub が返した environment の protection_rules を読めませんでした。')(t.validationErrorsToMessages(validationResult.value)).join('\n'));
+    }
+    const rules = validationResult.value;
+    const waitTimer = rules.find((rule) => rule.type === 'wait_timer');
+    const requiredReviewers = rules.find((rule) => rule.type === 'required_reviewers');
+    return {
+        wait_timer: waitTimer?.wait_timer ?? 0,
+        prevent_self_review: requiredReviewers?.prevent_self_review ?? false,
+        reviewers: (requiredReviewers?.reviewers ?? []).map((entry) => ({
+            type: entry.type,
+            id: entry.reviewer.id,
+        })),
+    };
+};
+const ProtectionRules = t.array(t.record({
+    type: t.string(''),
+    wait_timer: t.optional(t.number(0)),
+    prevent_self_review: t.optional(t.boolean(false)),
+    reviewers: t.optional(t.array(t.record({
+        type: t.enumType(['User', 'Team'], {
+            typeName: 'EnvironmentReviewerType',
+            defaultValue: 'User',
+        }),
+
+
+        reviewer: t.record({ id: t.number(0) }),
+    }))),
+}), { typeName: 'EnvironmentProtectionRules' });
+//# sourceMappingURL=get-environments.mjs.map

package/dist/github/environments/api/get-environments.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-environments.mjs","sourceRoot":"","sources":["../../../../src/github/environments/api/get-environments.mts"],"names":[],"mappings":"AACA,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACpC,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AACvC,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,IAErC,EAAE;IACF,0EAA0E;IAC1E,EAAE;IACF,uCAAuC;IACvC,wCAAwC;IACxC,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CACpC,wCAA+D,EAC/D,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,GAAG,EAAE,CACrE,CAAC;IAEF,MAAM,YAAY,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,IAAI,EAAE,CAAC;IAEtD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,GAAG,CAChC,YAAY,CAAC,GAAG,CAAC,KAAK,EAAE,WAAW,EAAE,EAAE;QACrC,MAAM,MAAM,GAAG,WAAW,CAAC,wBAAwB,IAAI,SAAS,CAAC;QAEjE,OAAO,mBAAmB,CAAC,IAAI,CAAC;YAC9B,IAAI,EAAE,WAAW,CAAC,IAAI;YACtB,GAAG,oBAAoB,CAAC,WAAW,CAAC,gBAAgB,CAAC;YACrD,wBAAwB,EACtB,MAAM,KAAK,SAAS;gBAClB,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC;oBACE,kBAAkB,EAAE,MAAM,CAAC,kBAAkB;oBAC7C,sBAAsB,EAAE,MAAM,CAAC,sBAAsB;iBACtD;YACP,0BAA0B,EACxB,MAAM,EAAE,sBAAsB,KAAK,IAAI;gBACrC,CAAC,CAAC,MAAM,8BAA8B,CAAC,WAAW,CAAC,IAAI,CAAC;gBACxD,CAAC,CAAC,EAAE;SACT,CAAC,CAAC;IACL,CAAC,CAAC,CACH,CAAC;IAEF,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AACnE,CAAC,CAAC;AAEF,4CAA4C;AAC5C,MAAM,8BAA8B,GAAG,KAAK,EAC1C,eAAuB,EACiD,EAAE;IAC1E,MAAM,QAAQ,GAAG,MAAM,2BAA2B,CAAC,eAAe,CAAC,CAAC;IAEpE,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AAC5D,CAAC,CAAC;AAEF,4DAA4D;AAC5D,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,EAC9C,eAAuB,EACqB,EAAE;IAC9C,2FAA2F;IAC3F,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,OAAO,CACpC,sFAA6G,EAC7G;QACE,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,IAAI;QACV,gBAAgB,EAAE,eAAe;QACjC,OAAO,EAAE,cAAc;QACvB,QAAQ,EAAE,GAAG;KACd,CACF,CAAC;IAEF,OAAO,QAAQ,CAAC,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;QACpD,EAAE,EAAE,MAAM,CAAC,EAAE,IAAI,CAAC;QAClB,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;QACvB,IAAI,EAAE,MAAM,CAAC,IAAI,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,QAAQ;KAC/C,CAAC,CAAC,CAAC;AACN,CAAC,CAAC;AAQF;;;;;;;GAOG;AACH,MAAM,oBAAoB,GAAG,CAC3B,eAAwB,EAKvB,EAAE;IACH,MAAM,gBAAgB,GAAG,eAAe,CAAC,QAAQ,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IAEzE,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,GAAG,CAAC,WAAW,CACb,uDAAuD,CACxD,CAAC,CAAC,CAAC,0BAA0B,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CACnE,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,CAAC;IAErC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;IAEnE,MAAM,iBAAiB,GAAG,KAAK,CAAC,IAAI,CAClC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,oBAAoB,CAC7C,CAAC;IAEF,OAAO;QACL,UAAU,EAAE,SAAS,EAAE,UAAU,IAAI,CAAC;QACtC,mBAAmB,EAAE,iBAAiB,EAAE,mBAAmB,IAAI,KAAK;QACpE,SAAS,EAAE,CAAC,iBAAiB,EAAE,SAAS,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAC9D,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,EAAE,EAAE,KAAK,CAAC,QAAQ,CAAC,EAAE;SACtB,CAAC,CAAC;KACJ,CAAC;AACJ,CAAC,CAAC;AAEF,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAC7B,CAAC,CAAC,MAAM,CAAC;IACP,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IAClB,UAAU,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACnC,mBAAmB,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjD,SAAS,EAAE,CAAC,CAAC,QAAQ,CACnB,CAAC,CAAC,KAAK,CACL,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;YACjC,QAAQ,EAAE,yBAAyB;YACnC,YAAY,EAAE,MAAM;SACrB,CAAC;QACF,iDAAiD;QACjD,yCAAyC;QACzC,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC,CACH,CACF;CACF,CAAC,EACF,EAAE,QAAQ,EAAE,4BAA4B,EAAE,CAC3C,CAAC"}

package/dist/github/environments/api/index.d.mts

@@ -0,0 +1,3 @@
+export * from './get-environments.mjs';
+export * from './set-environment.mjs';
+//# sourceMappingURL=index.d.mts.map

package/dist/github/environments/api/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../../../src/github/environments/api/index.mts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC"}

package/dist/github/environments/api/index.mjs

@@ -0,0 +1,3 @@
+export * from './get-environments.mjs';
+export * from './set-environment.mjs';
+//# sourceMappingURL=index.mjs.map

package/dist/github/environments/api/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../../src/github/environments/api/index.mts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC"}

package/dist/github/environments/api/set-environment.d.mts

@@ -0,0 +1,10 @@
+import { type EnvironmentSettings } from '../constants.mjs';
+/**
+ * 環境を JSON の内容に合わせる。無ければ作られる。
+ *
+ * `PUT` は保護ルールを丸ごと置き換えるので、省いたキーは「変更しない」ではなく
+ * 「無効にする」になる。宣言ファイルをそのまま渡しているのはそのため —
+ * 部分更新にすると、ファイルから消した設定が GitHub 側に残る。
+ */
+export declare const setEnvironment: (settings: EnvironmentSettings) => Promise<void>;
+//# sourceMappingURL=set-environment.d.mts.map

package/dist/github/environments/api/set-environment.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-environment.d.mts","sourceRoot":"","sources":["../../../../src/github/environments/api/set-environment.mts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAG5D;;;;;;GAMG;AACH,eAAO,MAAM,cAAc,aACf,mBAAmB,KAC5B,OAAO,CAAC,IAAI,CA4Bd,CAAC"}

package/dist/github/environments/api/set-environment.mjs

@@ -0,0 +1,73 @@
+import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
+import { octokit } from '../../octokit.mjs';
+import { getDeploymentBranchPolicies } from './get-environments.mjs';
+
+
+
+
+
+
+
+export const setEnvironment = async (settings) => {
+
+    await octokit.request('PUT /repos/{owner}/{repo}/environments/{environment_name}', {
+        owner: OWNER,
+        repo: REPO,
+        environment_name: settings.name,
+        headers: octokitHeaders,
+        wait_timer: settings.wait_timer,
+        prevent_self_review: settings.prevent_self_review,
+        reviewers: settings.reviewers.map((reviewer) => ({
+            type: reviewer.type,
+            id: reviewer.id,
+        })),
+        deployment_branch_policy: settings.deployment_branch_policy === null
+            ? null
+            : {
+                protected_branches: settings.deployment_branch_policy.protected_branches,
+                custom_branch_policies: settings.deployment_branch_policy.custom_branch_policies,
+            },
+    });
+    await setDeploymentBranchPolicies(settings);
+};
+
+
+
+
+
+
+
+const keyOf = (policy) => `${policy.type}:${policy.name}`;
+const setDeploymentBranchPolicies = async (settings) => {
+    if (settings.deployment_branch_policy?.custom_branch_policies !== true) {
+
+        return;
+    }
+    const current = await getDeploymentBranchPolicies(settings.name);
+    const desiredKeys = new Set(settings.deployment_branch_policies.map(keyOf));
+    const currentKeys = new Set(current.map(keyOf));
+    const toDelete = current.filter((p) => !desiredKeys.has(keyOf(p)));
+    const toCreate = settings.deployment_branch_policies.filter((p) => !currentKeys.has(keyOf(p)));
+    for (const policy of toDelete) {
+
+        await octokit.request('DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}', {
+            owner: OWNER,
+            repo: REPO,
+            environment_name: settings.name,
+            branch_policy_id: policy.id,
+            headers: octokitHeaders,
+        });
+    }
+    for (const policy of toCreate) {
+
+        await octokit.request('POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies', {
+            owner: OWNER,
+            repo: REPO,
+            environment_name: settings.name,
+            headers: octokitHeaders,
+            name: policy.name,
+            type: policy.type,
+        });
+    }
+};
+//# sourceMappingURL=set-environment.mjs.map

package/dist/github/environments/api/set-environment.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-environment.mjs","sourceRoot":"","sources":["../../../../src/github/environments/api/set-environment.mts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,QAA6B,EACd,EAAE;IACjB,wFAAwF;IACxF,MAAM,OAAO,CAAC,OAAO,CACnB,2DAAkF,EAClF;QACE,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,IAAI;QACV,gBAAgB,EAAE,QAAQ,CAAC,IAAI;QAC/B,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,EAAE,EAAE,QAAQ,CAAC,EAAE;SAChB,CAAC,CAAC;QACH,wBAAwB,EACtB,QAAQ,CAAC,wBAAwB,KAAK,IAAI;YACxC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC;gBACE,kBAAkB,EAChB,QAAQ,CAAC,wBAAwB,CAAC,kBAAkB;gBACtD,sBAAsB,EACpB,QAAQ,CAAC,wBAAwB,CAAC,sBAAsB;aAC3D;KACR,CACF,CAAC;IAEF,MAAM,2BAA2B,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,KAAK,GAAG,CAAC,MAAgD,EAAU,EAAE,CACzE,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAW,CAAC;AAE3C,MAAM,2BAA2B,GAAG,KAAK,EACvC,QAA6B,EACd,EAAE;IACjB,IAAI,QAAQ,CAAC,wBAAwB,EAAE,sBAAsB,KAAK,IAAI,EAAE,CAAC;QACvE,6CAA6C;QAC7C,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEjE,MAAM,WAAW,GAAwB,IAAI,GAAG,CAC9C,QAAQ,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,CAC/C,CAAC;IAEF,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAErE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,0BAA0B,CAAC,MAAM,CACzD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAClC,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,6FAA6F;QAC7F,MAAM,OAAO,CAAC,OAAO,CACnB,4GAAmI,EACnI;YACE,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,IAAI;YACV,gBAAgB,EAAE,QAAQ,CAAC,IAAI;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,OAAO,EAAE,cAAc;SACxB,CACF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,6FAA6F;QAC7F,MAAM,OAAO,CAAC,OAAO,CACnB,uFAA8G,EAC9G;YACE,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,IAAI;YACV,gBAAgB,EAAE,QAAQ,CAAC,IAAI;YAC/B,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CACF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC"}

package/dist/github/environments/apply.d.mts

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+/**
+ * `repo-settings/environments/*.json` を Settings > Environments に反映する。
+ *
+ * ruleset と同じく、宣言に無い環境は消さない。 GUI で作られたものが `bk/` に
+ * 現れることが drift の見え方であって、 apply が黙って片付けてしまうと
+ * 「いつ誰が何を作ったか」を見る機会がなくなる。
+ */
+export declare const applyEnvironments: () => Promise<void>;
+//# sourceMappingURL=apply.d.mts.map

package/dist/github/environments/apply.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.mts","sourceRoot":"","sources":["../../../src/github/environments/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAWvB;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,QAAa,OAAO,CAAC,IAAI,CAgCtD,CAAC"}

package/dist/github/environments/apply.mjs

@@ -0,0 +1,67 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { Arr } from 'ts-data-forge';
+import { isDirectlyExecuted } from 'ts-repo-utils';
+import { environmentsDir } from '../constants.mjs';
+import { getAllEnvironments, setEnvironment } from './api/index.mjs';
+import { backupEnvironments } from './backup.mjs';
+import { readEnvironmentFiles } from './read-environment-contents.mjs';
+
+
+
+
+
+
+
+export const applyEnvironments = async () => {
+    await backupEnvironments(false);
+    const environments = await readEnvironmentFiles();
+    for (const environment of environments) {
+        assertConsistent(environment);
+    }
+    for (const environment of environments) {
+        await setEnvironment(environment);
+    }
+
+    {
+        const applied = await getAllEnvironments();
+        for (const environment of applied) {
+            const str = JSON.stringify(environment, undefined, 2);
+
+            await fs.writeFile(path.resolve(environmentsDir, `${environment.name}.json`), str);
+        }
+
+
+
+        await backupEnvironments();
+    }
+};
+
+
+
+
+
+
+
+const assertConsistent = (environment) => {
+    const custom = environment.deployment_branch_policy?.custom_branch_policies === true;
+    if (!custom && Arr.isNonEmpty(environment.deployment_branch_policies)) {
+        throw new Error([
+            `環境 "${environment.name}": deployment_branch_policies が書かれていますが、`,
+            'deployment_branch_policy.custom_branch_policies が true ではありません。',
+            'pattern は "Selected branches and tags" を選んだときにしか効きません。',
+        ].join('\n'));
+    }
+
+
+
+    if (custom && environment.deployment_branch_policy.protected_branches) {
+        throw new Error(`環境 "${environment.name}": protected_branches と custom_branch_policies は同時に true にできません。`);
+    }
+};
+if (isDirectlyExecuted(import.meta.url)) {
+    await applyEnvironments();
+}
+//# sourceMappingURL=apply.mjs.map

package/dist/github/environments/apply.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.mjs","sourceRoot":"","sources":["../../../src/github/environments/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACpC,OAAO,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AACnD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AACrE,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAC;AAElD,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,IAAmB,EAAE;IACzD,MAAM,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAEhC,MAAM,YAAY,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAElD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAED,0BAA0B;IAC1B,CAAC;QACC,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAE3C,KAAK,MAAM,WAAW,IAAI,OAAO,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAEtD,mEAAmE;YACnE,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,WAAW,CAAC,IAAI,OAAO,CAAC,EACzD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,qDAAqD;QACrD,oCAAoC;QACpC,gBAAgB;QAChB,MAAM,kBAAkB,EAAE,CAAC;IAC7B,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,CAAC,WAAgC,EAAQ,EAAE;IAClE,MAAM,MAAM,GACV,WAAW,CAAC,wBAAwB,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAExE,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,0BAA0B,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb;YACE,OAAO,WAAW,CAAC,IAAI,0CAA0C;YACjE,iEAAiE;YACjE,wDAAwD;SACzD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,gDAAgD;IAChD,mBAAmB;IACnB,IAAI,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,kBAAkB,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,OAAO,WAAW,CAAC,IAAI,kEAAkE,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,iBAAiB,EAAE,CAAC;AAC5B,CAAC"}

package/dist/github/environments/backup.d.mts

@@ -0,0 +1,5 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+/** Settings > Environments の現在値を `bk/` に保存する。 */
+export declare const backupEnvironments: (fmt?: boolean) => Promise<void>;
+//# sourceMappingURL=backup.d.mts.map

package/dist/github/environments/backup.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.mts","sourceRoot":"","sources":["../../../src/github/environments/backup.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAavB,iDAAiD;AACjD,eAAO,MAAM,kBAAkB,SACxB,OAAO,KACX,OAAO,CAAC,IAAI,CAgBd,CAAC"}

package/dist/github/environments/backup.mjs

@@ -0,0 +1,24 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import { formatUncommittedFiles, isDirectlyExecuted, makeEmptyDir, } from 'ts-repo-utils';
+import { environmentsDir } from '../constants.mjs';
+import { getAllEnvironments } from './api/index.mjs';
+const backupDir = path.resolve(environmentsDir, './bk');
+
+export const backupEnvironments = async (fmt = true) => {
+    await makeEmptyDir(backupDir);
+    const environments = await getAllEnvironments();
+    for (const environment of environments) {
+
+        await fs.writeFile(path.resolve(backupDir, `${environment.name}.json`), JSON.stringify(environment, undefined, 2));
+    }
+    if (fmt) {
+        await formatUncommittedFiles();
+    }
+};
+if (isDirectlyExecuted(import.meta.url)) {
+    await backupEnvironments();
+}
+//# sourceMappingURL=backup.mjs.map

package/dist/github/environments/backup.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.mjs","sourceRoot":"","sources":["../../../src/github/environments/backup.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,YAAY,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;AAExD,iDAAiD;AACjD,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,GAAG,GAAY,IAAI,EACJ,EAAE;IACjB,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;IAE9B,MAAM,YAAY,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAEhD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,mEAAmE;QACnE,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,WAAW,CAAC,IAAI,OAAO,CAAC,EACnD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAC1C,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,sBAAsB,EAAE,CAAC;IACjC,CAAC;AACH,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,kBAAkB,EAAE,CAAC;AAC7B,CAAC"}