github-settings-as-code 3.1.0 → 3.2.0

package/dist/github/environments/constants.d.mts

@@ -0,0 +1,354 @@
+import * as t from 'ts-fortress';
+/**
+ * `repo-settings/environments/*.json` の型。
+ *
+ * Settings > Environments の 1 件に対応する。ファイルは「その環境の望ましい
+ * 状態」を丸ごと表しており、 GitHub 側で 2 つに分かれている次の API をまとめて
+ * 1 ファイルで管理する:
+ *
+ * - `PUT /repos/{owner}/{repo}/environments/{environment_name}`
+ * - `GET|POST|DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies`
+ *
+ * GET が返す `protection_rules` は「有効な保護ルールだけが並ぶ配列」だが、この
+ * 型は書き込み側（ PUT の body ）に合わせた平らな形にしている。往復させる側の
+ * 形を正とするほうが、ファイルを読んで何が起きるか分かりやすいため。
+ */
+export declare const EnvironmentSettings: Readonly<{
+    typeName: string;
+    defaultValue: Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>;
+    is: (a: unknown) => a is Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>;
+    assertIs: (a: unknown) => asserts a is Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>;
+    cast: (a: unknown) => Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>;
+    fill: (a: unknown) => Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>;
+    prune: <B extends Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>>(a: B) => Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>;
+    validate: (a: unknown) => t.Result<Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>, readonly Readonly<{
+        path: readonly string[];
+        actualValue: unknown;
+        expectedType: string;
+        typeName: string;
+        details?: t.ValidationErrorDetails | undefined;
+    }>[]>;
+    optional?: true;
+}> & Readonly<{
+    shape: {
+        readonly name: t.ConstrainedType<string, Readonly<{
+            readonly nonempty: undefined;
+            readonly minLength: undefined;
+            readonly maxLength: undefined;
+            readonly startsWith: undefined;
+            readonly endsWith: undefined;
+            readonly includes: undefined;
+            readonly uppercase: undefined;
+            readonly lowercase: undefined;
+            readonly regex: undefined;
+        }>>;
+        /** 「 Wait timer 」。分。 0 なら待たない。 */
+        readonly wait_timer: t.ConstrainedType<number, Readonly<{
+            readonly finite: undefined;
+            readonly int: undefined;
+            readonly safeInteger: undefined;
+            readonly nonZero: undefined;
+            readonly negative: undefined;
+            readonly nonNegative: undefined;
+            readonly positive: undefined;
+            readonly nonPositive: undefined;
+            readonly gt: undefined;
+            readonly gte: undefined;
+            readonly min: undefined;
+            readonly lt: undefined;
+            readonly lte: undefined;
+            readonly max: undefined;
+            readonly multipleOf: undefined;
+            readonly step: undefined;
+        }>>;
+        /** 「 Prevent self-review 」。 */
+        readonly prevent_self_review: Readonly<{
+            typeName: string;
+            defaultValue: boolean;
+            is: (a: unknown) => a is boolean;
+            assertIs: (a: unknown) => asserts a is boolean;
+            cast: (a: unknown) => boolean;
+            fill: (a: unknown) => boolean;
+            prune: <B extends boolean>(a: B) => boolean;
+            validate: (a: unknown) => t.Result<boolean, readonly Readonly<{
+                path: readonly string[];
+                actualValue: unknown;
+                expectedType: string;
+                typeName: string;
+                details?: t.ValidationErrorDetails | undefined;
+            }>[]>;
+            optional?: true;
+        }>;
+        /** 「 Required reviewers 」。空配列なら承認は要らない。 */
+        readonly reviewers: Readonly<{
+            typeName: string;
+            defaultValue: readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[];
+            is: (a: unknown) => a is readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[];
+            assertIs: (a: unknown) => asserts a is readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[];
+            cast: (a: unknown) => readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[];
+            fill: (a: unknown) => readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[];
+            prune: <B extends readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[]>(a: B) => readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[];
+            validate: (a: unknown) => t.Result<readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[], readonly Readonly<{
+                path: readonly string[];
+                actualValue: unknown;
+                expectedType: string;
+                typeName: string;
+                details?: t.ValidationErrorDetails | undefined;
+            }>[]>;
+            optional?: true;
+        }>;
+        /**
+         * 「 Deployment branches and tags 」の選択。
+         *
+         * - `null` … 「 No restriction 」（ どの ref からでも deploy できる ）
+         * - `protected_branches: true` … 「 Protected branches only 」
+         * - `custom_branch_policies: true` … 「 Selected branches and tags 」。
+         *   具体的な pattern は下の `deployment_branch_policies` 。
+         *
+         * 2 つを同時に `true` にはできない。
+         */
+        readonly deployment_branch_policy: Readonly<{
+            typeName: string;
+            defaultValue: Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null;
+            is: (a: unknown) => a is Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null;
+            assertIs: (a: unknown) => asserts a is Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null;
+            cast: (a: unknown) => Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null;
+            fill: (a: unknown) => Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null;
+            prune: <B extends Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null>(a: B) => Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null;
+            validate: (a: unknown) => t.Result<Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null, readonly Readonly<{
+                path: readonly string[];
+                actualValue: unknown;
+                expectedType: string;
+                typeName: string;
+                details?: t.ValidationErrorDetails | undefined;
+            }>[]>;
+            optional?: true;
+        }>;
+        /**
+         * `custom_branch_policies` が `true` のときの pattern 一覧。
+         *
+         * それ以外のときは空配列でなければならない ( `applyEnvironments` が拒否する )。
+         * GitHub 側は別エンドポイントだが、「どの ref から deploy できるか」を
+         * 決めているのは選択と pattern の組で、片方だけ見ても意味を成さない。
+         */
+        readonly deployment_branch_policies: Readonly<{
+            typeName: string;
+            defaultValue: readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[];
+            is: (a: unknown) => a is readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[];
+            assertIs: (a: unknown) => asserts a is readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[];
+            cast: (a: unknown) => readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[];
+            fill: (a: unknown) => readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[];
+            prune: <B extends readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[]>(a: B) => readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[];
+            validate: (a: unknown) => t.Result<readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[], readonly Readonly<{
+                path: readonly string[];
+                actualValue: unknown;
+                expectedType: string;
+                typeName: string;
+                details?: t.ValidationErrorDetails | undefined;
+            }>[]>;
+            optional?: true;
+        }>;
+    };
+}>;
+export type EnvironmentSettings = t.TypeOf<typeof EnvironmentSettings>;
+//# sourceMappingURL=constants.d.mts.map

package/dist/github/environments/constants.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.mts","sourceRoot":"","sources":["../../../src/github/environments/constants.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAG9B,kCAAkC;;;;;;;;;;;;;;;;;;;QAGlC,+BAA+B;;;;;;;;;;;;;;;;;;QAG/B,2CAA2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAY3C;;;;;;;;;WASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAYH;;;;;;WAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWH,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/github/environments/constants.mjs

@@ -0,0 +1,62 @@
+import * as t from 'ts-fortress';
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+export const EnvironmentSettings = t.record({
+    name: t.string(''),
+
+    wait_timer: t.number(0),
+
+    prevent_self_review: t.boolean(false),
+
+    reviewers: t.array(t.record({
+        type: t.enumType(['User', 'Team'], {
+            typeName: 'EnvironmentReviewerType',
+            defaultValue: 'User',
+        }),
+        id: t.number(0),
+    }), { typeName: 'EnvironmentReviewers' }),
+
+
+
+
+
+
+
+
+
+
+    deployment_branch_policy: t.union([
+        t.record({
+            protected_branches: t.boolean(false),
+            custom_branch_policies: t.boolean(true),
+        }),
+        t.nullType,
+    ], { typeName: 'DeploymentBranchPolicySelection' }),
+
+
+
+
+
+
+
+    deployment_branch_policies: t.array(t.record({
+        name: t.string(''),
+        type: t.enumType(['branch', 'tag'], {
+            typeName: 'DeploymentBranchPolicyType',
+            defaultValue: 'branch',
+        }),
+    }), { typeName: 'DeploymentBranchPolicies' }),
+});
+//# sourceMappingURL=constants.mjs.map

package/dist/github/environments/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","sourceRoot":"","sources":["../../../src/github/environments/constants.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IAElB,kCAAkC;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAEvB,+BAA+B;IAC/B,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAErC,2CAA2C;IAC3C,SAAS,EAAE,CAAC,CAAC,KAAK,CAChB,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;YACjC,QAAQ,EAAE,yBAAyB;YACnC,YAAY,EAAE,MAAM;SACrB,CAAC;QACF,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KAChB,CAAC,EACF,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CACrC;IAED;;;;;;;;;OASG;IACH,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAC/B;QACE,CAAC,CAAC,MAAM,CAAC;YACP,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;YACpC,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;SACxC,CAAC;QACF,CAAC,CAAC,QAAQ;KACX,EACD,EAAE,QAAQ,EAAE,iCAAiC,EAAE,CAChD;IAED;;;;;;OAMG;IACH,0BAA0B,EAAE,CAAC,CAAC,KAAK,CACjC,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAClB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClC,QAAQ,EAAE,4BAA4B;YACtC,YAAY,EAAE,QAAQ;SACvB,CAAC;KACH,CAAC,EACF,EAAE,QAAQ,EAAE,0BAA0B,EAAE,CACzC;CACF,CAAC,CAAC"}

package/dist/github/environments/index.d.mts

@@ -0,0 +1,6 @@
+export * from './api/index.mjs';
+export * from './apply.mjs';
+export * from './backup.mjs';
+export * from './constants.mjs';
+export * from './read-environment-contents.mjs';
+//# sourceMappingURL=index.d.mts.map

package/dist/github/environments/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../../src/github/environments/index.mts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iCAAiC,CAAC"}

package/dist/github/environments/index.mjs

@@ -0,0 +1,6 @@
+export * from './api/index.mjs';
+export * from './apply.mjs';
+export * from './backup.mjs';
+export * from './constants.mjs';
+export * from './read-environment-contents.mjs';
+//# sourceMappingURL=index.mjs.map

package/dist/github/environments/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../src/github/environments/index.mts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iCAAiC,CAAC"}

package/dist/github/environments/read-environment-contents.d.mts

@@ -0,0 +1,4 @@
+import { EnvironmentSettings } from './constants.mjs';
+export declare const readEnvironmentFiles: () => Promise<readonly EnvironmentSettings[]>;
+export declare const readEnvironmentBackupFiles: () => Promise<readonly EnvironmentSettings[]>;
+//# sourceMappingURL=read-environment-contents.d.mts.map

package/dist/github/environments/read-environment-contents.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-environment-contents.d.mts","sourceRoot":"","sources":["../../../src/github/environments/read-environment-contents.mts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,eAAO,MAAM,oBAAoB,QAAa,OAAO,CACnD,SAAS,mBAAmB,EAAE,CACC,CAAC;AAElC,eAAO,MAAM,0BAA0B,QAAa,OAAO,CACzD,SAAS,mBAAmB,EAAE,CACuB,CAAC"}

package/dist/github/environments/read-environment-contents.mjs

@@ -0,0 +1,32 @@
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+import * as t from 'ts-fortress';
+import { isDirectlyExecuted, Result } from 'ts-repo-utils';
+import { environmentsDir } from '../constants.mjs';
+import { EnvironmentSettings } from './constants.mjs';
+export const readEnvironmentFiles = async () => readFilesIn(environmentsDir);
+export const readEnvironmentBackupFiles = async () => readFilesIn(path.resolve(environmentsDir, './bk'));
+const readFilesIn = async (dir) => {
+
+    const files = await fs.readdir(dir, {
+        withFileTypes: true,
+    });
+    const fileContents = await Promise.all(files
+        .filter((d) => d.isFile())
+        .map((d) => 
+
+    fs.readFile(path.resolve(dir, d.name), { encoding: 'utf8' })));
+    const validationResults = fileContents.map((content) => EnvironmentSettings.validate(JSON.parse(content)));
+    const mut_values = [];
+    for (const r of validationResults) {
+        if (Result.isErr(r)) {
+            throw new Error(t.validationErrorsToMessages(r.value).join('\n'));
+        }
+        mut_values.push(r.value);
+    }
+    return mut_values;
+};
+if (isDirectlyExecuted(import.meta.url)) {
+    await readEnvironmentFiles();
+}
+//# sourceMappingURL=read-environment-contents.mjs.map

package/dist/github/environments/read-environment-contents.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-environment-contents.mjs","sourceRoot":"","sources":["../../../src/github/environments/read-environment-contents.mts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,eAAe,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,MAAM,CAAC,MAAM,oBAAoB,GAAG,KAAK,IAEvC,EAAE,CAAC,WAAW,CAAC,eAAe,CAAC,CAAC;AAElC,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,IAE7C,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC,CAAC;AAExD,MAAM,WAAW,GAAG,KAAK,EACvB,GAAW,EAC8B,EAAE;IAC3C,mEAAmE;IACnE,MAAM,KAAK,GAA8B,MAAM,EAAE,CAAC,OAAO,CAAC,GAAG,EAAE;QAC7D,aAAa,EAAE,IAAI;KACpB,CAAC,CAAC;IAEH,MAAM,YAAY,GAAsB,MAAM,OAAO,CAAC,GAAG,CACvD,KAAK;SACF,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;SACzB,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;IACT,mEAAmE;IACnE,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAC7D,CACJ,CAAC;IAEF,MAAM,iBAAiB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CACrD,mBAAmB,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAClD,CAAC;IAEF,MAAM,UAAU,GAA0B,EAAE,CAAC;IAE7C,KAAK,MAAM,CAAC,IAAI,iBAAiB,EAAE,CAAC;QAClC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC;IAED,OAAO,UAAU,CAAC;AACpB,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,oBAAoB,EAAE,CAAC;AAC/B,CAAC"}

package/dist/github/index.d.mts

@@ -1,8 +1,10 @@
 export * from './actions-settings/index.mjs';
 export * from './constants.mjs';
+export * from './environments/index.mjs';
 export * from './pages/index.mjs';
 export * from './repository/index.mjs';
 export * from './resolve-target-repo.mjs';
 export * from './ruleset/index.mjs';
 export * from './variables/index.mjs';
+export * from './vulnerability-alerts/index.mjs';
 //# sourceMappingURL=index.d.mts.map

package/dist/github/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../src/github/index.mts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../src/github/index.mts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kCAAkC,CAAC"}

package/dist/github/index.mjs

@@ -1,8 +1,10 @@
 export * from './actions-settings/index.mjs';
 export * from './constants.mjs';
+export * from './environments/index.mjs';
 export * from './pages/index.mjs';
 export * from './repository/index.mjs';
 export * from './resolve-target-repo.mjs';
 export * from './ruleset/index.mjs';
 export * from './variables/index.mjs';
+export * from './vulnerability-alerts/index.mjs';
 //# sourceMappingURL=index.mjs.map

package/dist/github/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../src/github/index.mts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iBAAiB,CAAC;AAChC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../src/github/index.mts"],"names":[],"mappings":"AAAA,cAAc,8BAA8B,CAAC;AAC7C,cAAc,iBAAiB,CAAC;AAChC,cAAc,0BAA0B,CAAC;AACzC,cAAc,mBAAmB,CAAC;AAClC,cAAc,wBAAwB,CAAC;AACvC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,qBAAqB,CAAC;AACpC,cAAc,uBAAuB,CAAC;AACtC,cAAc,kCAAkC,CAAC"}

package/dist/github/vulnerability-alerts/api/get-vulnerability-alerts.d.mts

@@ -0,0 +1,10 @@
+import { VulnerabilityAlertsSettings } from '../constants.mjs';
+/**
+ * Dependabot alerts が有効かどうかを取得する。
+ *
+ * このエンドポイントは body を返さない: 有効なら 204、無効なら 404。
+ * octokit は 404 を例外にするので、それを `enabled: false` として扱う。
+ * 「無効」と「読めなかった」は区別する必要があるため、 404 以外は投げ直す。
+ */
+export declare const getVulnerabilityAlerts: () => Promise<VulnerabilityAlertsSettings>;
+//# sourceMappingURL=get-vulnerability-alerts.d.mts.map

package/dist/github/vulnerability-alerts/api/get-vulnerability-alerts.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-vulnerability-alerts.d.mts","sourceRoot":"","sources":["../../../../src/github/vulnerability-alerts/api/get-vulnerability-alerts.mts"],"names":[],"mappings":"AAIA,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAE/D;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,QACvB,OAAO,CAAC,2BAA2B,CAgB5C,CAAC"}

package/dist/github/vulnerability-alerts/api/get-vulnerability-alerts.mjs

@@ -0,0 +1,25 @@
+import { hasKey, isRecord } from 'ts-data-forge';
+import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
+import { octokit } from '../../octokit.mjs';
+import { VulnerabilityAlertsSettings } from '../constants.mjs';
+
+
+
+
+
+
+
+export const getVulnerabilityAlerts = async () => {
+    try {
+
+        await octokit.request('GET /repos/{owner}/{repo}/vulnerability-alerts', { owner: OWNER, repo: REPO, headers: octokitHeaders });
+        return VulnerabilityAlertsSettings.fill({ enabled: true });
+    }
+    catch (error) {
+        if (isRecord(error) && hasKey(error, 'status') && error.status === 404) {
+            return VulnerabilityAlertsSettings.fill({ enabled: false });
+        }
+        throw error;
+    }
+};
+//# sourceMappingURL=get-vulnerability-alerts.mjs.map

package/dist/github/vulnerability-alerts/api/get-vulnerability-alerts.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-vulnerability-alerts.mjs","sourceRoot":"","sources":["../../../../src/github/vulnerability-alerts/api/get-vulnerability-alerts.mts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAC5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAE/D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GACjC,KAAK,IAA0C,EAAE;IAC/C,IAAI,CAAC;QACH,sGAAsG;QACtG,MAAM,OAAO,CAAC,OAAO,CACnB,gDAAuE,EACvE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CACtD,CAAC;QAEF,OAAO,2BAA2B,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,QAAQ,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,EAAE,QAAQ,CAAC,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvE,OAAO,2BAA2B,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC9D,CAAC;QAED,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC,CAAC"}

package/dist/github/vulnerability-alerts/api/index.d.mts

@@ -0,0 +1,3 @@
+export * from './get-vulnerability-alerts.mjs';
+export * from './set-vulnerability-alerts.mjs';
+//# sourceMappingURL=index.d.mts.map

package/dist/github/vulnerability-alerts/api/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../../../src/github/vulnerability-alerts/api/index.mts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC"}

package/dist/github/vulnerability-alerts/api/index.mjs

@@ -0,0 +1,3 @@
+export * from './get-vulnerability-alerts.mjs';
+export * from './set-vulnerability-alerts.mjs';
+//# sourceMappingURL=index.mjs.map

package/dist/github/vulnerability-alerts/api/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../../src/github/vulnerability-alerts/api/index.mts"],"names":[],"mappings":"AAAA,cAAc,gCAAgC,CAAC;AAC/C,cAAc,gCAAgC,CAAC"}

package/dist/github/vulnerability-alerts/api/set-vulnerability-alerts.d.mts

@@ -0,0 +1,10 @@
+import { type VulnerabilityAlertsSettings } from '../constants.mjs';
+/**
+ * Dependabot alerts を JSON の内容に合わせる。
+ *
+ * 有効化と無効化で別メソッドなので、書き込みは 1 回で済むように分岐する。
+ * `enabled: false` はきちんと無効化する — 宣言が現状に合わせて黙るなら、
+ * ファイルを読んでも何が有効なのか分からなくなる。
+ */
+export declare const setVulnerabilityAlerts: (settings: VulnerabilityAlertsSettings) => Promise<void>;
+//# sourceMappingURL=set-vulnerability-alerts.d.mts.map

package/dist/github/vulnerability-alerts/api/set-vulnerability-alerts.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-vulnerability-alerts.d.mts","sourceRoot":"","sources":["../../../../src/github/vulnerability-alerts/api/set-vulnerability-alerts.mts"],"names":[],"mappings":"AAGA,OAAO,EAAE,KAAK,2BAA2B,EAAE,MAAM,kBAAkB,CAAC;AAEpE;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,aACvB,2BAA2B,KACpC,OAAO,CAAC,IAAI,CAgBd,CAAC"}

package/dist/github/vulnerability-alerts/api/set-vulnerability-alerts.mjs

@@ -0,0 +1,19 @@
+import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
+import { octokit } from '../../octokit.mjs';
+
+
+
+
+
+
+
+export const setVulnerabilityAlerts = async (settings) => {
+    if (settings.enabled) {
+
+        await octokit.request('PUT /repos/{owner}/{repo}/vulnerability-alerts', { owner: OWNER, repo: REPO, headers: octokitHeaders });
+        return;
+    }
+
+    await octokit.request('DELETE /repos/{owner}/{repo}/vulnerability-alerts', { owner: OWNER, repo: REPO, headers: octokitHeaders });
+};
+//# sourceMappingURL=set-vulnerability-alerts.mjs.map

package/dist/github/vulnerability-alerts/api/set-vulnerability-alerts.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-vulnerability-alerts.mjs","sourceRoot":"","sources":["../../../../src/github/vulnerability-alerts/api/set-vulnerability-alerts.mts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAG5C;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,EACzC,QAAqC,EACtB,EAAE;IACjB,IAAI,QAAQ,CAAC,OAAO,EAAE,CAAC;QACrB,uEAAuE;QACvE,MAAM,OAAO,CAAC,OAAO,CACnB,gDAAuE,EACvE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CACtD,CAAC;QAEF,OAAO;IACT,CAAC;IAED,wEAAwE;IACxE,MAAM,OAAO,CAAC,OAAO,CACnB,mDAA0E,EAC1E,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,cAAc,EAAE,CACtD,CAAC;AACJ,CAAC,CAAC"}

package/dist/github/vulnerability-alerts/apply.d.mts

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+/**
+ * `repo-settings/vulnerability-alerts/settings.json` を Dependabot alerts に反映する。
+ *
+ * 設定ファイルを置いていない repository では何もしない。 pages と同じ理由 —
+ * この package は他の repository からも使われるので、ファイルの不在を
+ * 「無効にせよ」と読むと、宣言していない設定を勝手に落としてしまう。
+ */
+export declare const applyVulnerabilityAlerts: () => Promise<void>;
+//# sourceMappingURL=apply.d.mts.map

package/dist/github/vulnerability-alerts/apply.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.mts","sourceRoot":"","sources":["../../../src/github/vulnerability-alerts/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAiBvB;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,QAAa,OAAO,CAAC,IAAI,CA4B7D,CAAC"}