github-settings-as-code 3.1.0 → 4.0.0

package/dist/github/environments/api/set-environment.mjs

@@ -0,0 +1,73 @@
+import { octokitHeaders, OWNER, REPO } from '../../constants.mjs';
+import { octokit } from '../../octokit.mjs';
+import { getDeploymentBranchPolicies } from './get-environments.mjs';
+
+
+
+
+
+
+
+export const setEnvironment = async (settings) => {
+
+    await octokit.request('PUT /repos/{owner}/{repo}/environments/{environment_name}', {
+        owner: OWNER,
+        repo: REPO,
+        environment_name: settings.name,
+        headers: octokitHeaders,
+        wait_timer: settings.wait_timer,
+        prevent_self_review: settings.prevent_self_review,
+        reviewers: settings.reviewers.map((reviewer) => ({
+            type: reviewer.type,
+            id: reviewer.id,
+        })),
+        deployment_branch_policy: settings.deployment_branch_policy === null
+            ? null
+            : {
+                protected_branches: settings.deployment_branch_policy.protected_branches,
+                custom_branch_policies: settings.deployment_branch_policy.custom_branch_policies,
+            },
+    });
+    await setDeploymentBranchPolicies(settings);
+};
+
+
+
+
+
+
+
+const keyOf = (policy) => `${policy.type}:${policy.name}`;
+const setDeploymentBranchPolicies = async (settings) => {
+    if (settings.deployment_branch_policy?.custom_branch_policies !== true) {
+
+        return;
+    }
+    const current = await getDeploymentBranchPolicies(settings.name);
+    const desiredKeys = new Set(settings.deployment_branch_policies.map(keyOf));
+    const currentKeys = new Set(current.map(keyOf));
+    const toDelete = current.filter((p) => !desiredKeys.has(keyOf(p)));
+    const toCreate = settings.deployment_branch_policies.filter((p) => !currentKeys.has(keyOf(p)));
+    for (const policy of toDelete) {
+
+        await octokit.request('DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies/{branch_policy_id}', {
+            owner: OWNER,
+            repo: REPO,
+            environment_name: settings.name,
+            branch_policy_id: policy.id,
+            headers: octokitHeaders,
+        });
+    }
+    for (const policy of toCreate) {
+
+        await octokit.request('POST /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies', {
+            owner: OWNER,
+            repo: REPO,
+            environment_name: settings.name,
+            headers: octokitHeaders,
+            name: policy.name,
+            type: policy.type,
+        });
+    }
+};
+//# sourceMappingURL=set-environment.mjs.map

package/dist/github/environments/api/set-environment.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"set-environment.mjs","sourceRoot":"","sources":["../../../../src/github/environments/api/set-environment.mts"],"names":[],"mappings":"AACA,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAAE,OAAO,EAAE,MAAM,mBAAmB,CAAC;AAE5C,OAAO,EAAE,2BAA2B,EAAE,MAAM,wBAAwB,CAAC;AAErE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,EACjC,QAA6B,EACd,EAAE;IACjB,wFAAwF;IACxF,MAAM,OAAO,CAAC,OAAO,CACnB,2DAAkF,EAClF;QACE,KAAK,EAAE,KAAK;QACZ,IAAI,EAAE,IAAI;QACV,gBAAgB,EAAE,QAAQ,CAAC,IAAI;QAC/B,OAAO,EAAE,cAAc;QACvB,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,mBAAmB,EAAE,QAAQ,CAAC,mBAAmB;QACjD,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC/C,IAAI,EAAE,QAAQ,CAAC,IAAI;YACnB,EAAE,EAAE,QAAQ,CAAC,EAAE;SAChB,CAAC,CAAC;QACH,wBAAwB,EACtB,QAAQ,CAAC,wBAAwB,KAAK,IAAI;YACxC,CAAC,CAAC,IAAI;YACN,CAAC,CAAC;gBACE,kBAAkB,EAChB,QAAQ,CAAC,wBAAwB,CAAC,kBAAkB;gBACtD,sBAAsB,EACpB,QAAQ,CAAC,wBAAwB,CAAC,sBAAsB;aAC3D;KACR,CACF,CAAC;IAEF,MAAM,2BAA2B,CAAC,QAAQ,CAAC,CAAC;AAC9C,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,KAAK,GAAG,CAAC,MAAgD,EAAU,EAAE,CACzE,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,EAAW,CAAC;AAE3C,MAAM,2BAA2B,GAAG,KAAK,EACvC,QAA6B,EACd,EAAE;IACjB,IAAI,QAAQ,CAAC,wBAAwB,EAAE,sBAAsB,KAAK,IAAI,EAAE,CAAC;QACvE,6CAA6C;QAC7C,OAAO;IACT,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,2BAA2B,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAEjE,MAAM,WAAW,GAAwB,IAAI,GAAG,CAC9C,QAAQ,CAAC,0BAA0B,CAAC,GAAG,CAAC,KAAK,CAAC,CAC/C,CAAC;IAEF,MAAM,WAAW,GAAwB,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;IAErE,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAEnE,MAAM,QAAQ,GAAG,QAAQ,CAAC,0BAA0B,CAAC,MAAM,CACzD,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAClC,CAAC;IAEF,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,6FAA6F;QAC7F,MAAM,OAAO,CAAC,OAAO,CACnB,4GAAmI,EACnI;YACE,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,IAAI;YACV,gBAAgB,EAAE,QAAQ,CAAC,IAAI;YAC/B,gBAAgB,EAAE,MAAM,CAAC,EAAE;YAC3B,OAAO,EAAE,cAAc;SACxB,CACF,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,QAAQ,EAAE,CAAC;QAC9B,6FAA6F;QAC7F,MAAM,OAAO,CAAC,OAAO,CACnB,uFAA8G,EAC9G;YACE,KAAK,EAAE,KAAK;YACZ,IAAI,EAAE,IAAI;YACV,gBAAgB,EAAE,QAAQ,CAAC,IAAI;YAC/B,OAAO,EAAE,cAAc;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;SAClB,CACF,CAAC;IACJ,CAAC;AACH,CAAC,CAAC"}

package/dist/github/environments/apply.d.mts

@@ -0,0 +1,11 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+/**
+ * `repo-settings/environments/*.json` を Settings > Environments に反映する。
+ *
+ * ruleset と同じく、宣言に無い環境は消さない。 GUI で作られたものは drift
+ * 検査が報せるのであって、 apply が黙って片付けてしまうと「いつ誰が何を
+ * 作ったか」を見る機会がなくなる。
+ */
+export declare const applyEnvironments: () => Promise<void>;
+//# sourceMappingURL=apply.d.mts.map

package/dist/github/environments/apply.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.d.mts","sourceRoot":"","sources":["../../../src/github/environments/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAUvB;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,QAAa,OAAO,CAAC,IAAI,CA4BtD,CAAC"}

package/dist/github/environments/apply.mjs

@@ -0,0 +1,63 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+import * as fs from 'node:fs/promises';
+import { Arr } from 'ts-data-forge';
+import { formatUncommittedFiles, isDirectlyExecuted } from 'ts-repo-utils';
+import { environmentsDir } from '../constants.mjs';
+import { settingsFilePath } from '../settings-file-path.mjs';
+import { getAllEnvironments, setEnvironment } from './api/index.mjs';
+import { readEnvironmentFiles } from './read-environment-contents.mjs';
+
+
+
+
+
+
+
+export const applyEnvironments = async () => {
+    const environments = await readEnvironmentFiles();
+    for (const environment of environments) {
+        assertConsistent(environment);
+    }
+    for (const environment of environments) {
+        await setEnvironment(environment);
+    }
+
+    {
+        const applied = await getAllEnvironments();
+        for (const environment of applied) {
+            const str = JSON.stringify(environment, undefined, 2);
+
+
+            await fs.writeFile(settingsFilePath(environmentsDir, environment.name), str);
+        }
+        await formatUncommittedFiles();
+    }
+};
+
+
+
+
+
+
+
+const assertConsistent = (environment) => {
+    const custom = environment.deployment_branch_policy?.custom_branch_policies === true;
+    if (!custom && Arr.isNonEmpty(environment.deployment_branch_policies)) {
+        throw new Error([
+            `環境 "${environment.name}": deployment_branch_policies が書かれていますが、`,
+            'deployment_branch_policy.custom_branch_policies が true ではありません。',
+            'pattern は "Selected branches and tags" を選んだときにしか効きません。',
+        ].join('\n'));
+    }
+
+
+
+    if (custom && environment.deployment_branch_policy.protected_branches) {
+        throw new Error(`環境 "${environment.name}": protected_branches と custom_branch_policies は同時に true にできません。`);
+    }
+};
+if (isDirectlyExecuted(import.meta.url)) {
+    await applyEnvironments();
+}
+//# sourceMappingURL=apply.mjs.map

package/dist/github/environments/apply.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"apply.mjs","sourceRoot":"","sources":["../../../src/github/environments/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAC;AAErE,OAAO,EAAE,oBAAoB,EAAE,MAAM,iCAAiC,CAAC;AAEvE;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,KAAK,IAAmB,EAAE;IACzD,MAAM,YAAY,GAAG,MAAM,oBAAoB,EAAE,CAAC;IAElD,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,gBAAgB,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,MAAM,cAAc,CAAC,WAAW,CAAC,CAAC;IACpC,CAAC;IAED,0BAA0B;IAC1B,CAAC;QACC,MAAM,OAAO,GAAG,MAAM,kBAAkB,EAAE,CAAC;QAE3C,KAAK,MAAM,WAAW,IAAI,OAAO,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;YAEtD,0DAA0D;YAC1D,mEAAmE;YACnE,MAAM,EAAE,CAAC,SAAS,CAChB,gBAAgB,CAAC,eAAe,EAAE,WAAW,CAAC,IAAI,CAAC,EACnD,GAAG,CACJ,CAAC;QACJ,CAAC;QAED,MAAM,sBAAsB,EAAE,CAAC;IACjC,CAAC;AACH,CAAC,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,CAAC,WAAgC,EAAQ,EAAE;IAClE,MAAM,MAAM,GACV,WAAW,CAAC,wBAAwB,EAAE,sBAAsB,KAAK,IAAI,CAAC;IAExE,IAAI,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,0BAA0B,CAAC,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb;YACE,OAAO,WAAW,CAAC,IAAI,0CAA0C;YACjE,iEAAiE;YACjE,wDAAwD;SACzD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,gDAAgD;IAChD,mBAAmB;IACnB,IAAI,MAAM,IAAI,WAAW,CAAC,wBAAwB,CAAC,kBAAkB,EAAE,CAAC;QACtE,MAAM,IAAI,KAAK,CACb,OAAO,WAAW,CAAC,IAAI,kEAAkE,CAC1F,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,iBAAiB,EAAE,CAAC;AAC5B,CAAC"}

package/dist/github/environments/backup.d.mts

@@ -0,0 +1,10 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+/**
+ * Settings > Environments の現在値を宣言ファイルへ撮り直す。
+ *
+ * ruleset と同じく、先に直下の `*.json` を消してから書く。理由は
+ * {@link clearJsonFilesIn} を参照。
+ */
+export declare const backupEnvironments: (fmt?: boolean) => Promise<void>;
+//# sourceMappingURL=backup.d.mts.map

package/dist/github/environments/backup.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.d.mts","sourceRoot":"","sources":["../../../src/github/environments/backup.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAQvB;;;;;GAKG;AACH,eAAO,MAAM,kBAAkB,SACxB,OAAO,KACX,OAAO,CAAC,IAAI,CAiBd,CAAC"}

package/dist/github/environments/backup.mjs

@@ -0,0 +1,30 @@
+#!/usr/bin/env node
+import 'dotenv/config';
+import * as fs from 'node:fs/promises';
+import { formatUncommittedFiles, isDirectlyExecuted } from 'ts-repo-utils';
+import { clearJsonFilesIn } from '../clear-json-files.mjs';
+import { environmentsDir } from '../constants.mjs';
+import { settingsFilePath } from '../settings-file-path.mjs';
+import { getAllEnvironments } from './api/index.mjs';
+
+
+
+
+
+
+export const backupEnvironments = async (fmt = true) => {
+    const environments = await getAllEnvironments();
+    await clearJsonFilesIn(environmentsDir);
+    for (const environment of environments) {
+
+
+        await fs.writeFile(settingsFilePath(environmentsDir, environment.name), JSON.stringify(environment, undefined, 2));
+    }
+    if (fmt) {
+        await formatUncommittedFiles();
+    }
+};
+if (isDirectlyExecuted(import.meta.url)) {
+    await backupEnvironments();
+}
+//# sourceMappingURL=backup.mjs.map

package/dist/github/environments/backup.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"backup.mjs","sourceRoot":"","sources":["../../../src/github/environments/backup.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAErD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,GAAG,GAAY,IAAI,EACJ,EAAE;IACjB,MAAM,YAAY,GAAG,MAAM,kBAAkB,EAAE,CAAC;IAEhD,MAAM,gBAAgB,CAAC,eAAe,CAAC,CAAC;IAExC,KAAK,MAAM,WAAW,IAAI,YAAY,EAAE,CAAC;QACvC,0DAA0D;QAC1D,mEAAmE;QACnE,MAAM,EAAE,CAAC,SAAS,CAChB,gBAAgB,CAAC,eAAe,EAAE,WAAW,CAAC,IAAI,CAAC,EACnD,IAAI,CAAC,SAAS,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC,CAAC,CAC1C,CAAC;IACJ,CAAC;IAED,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,sBAAsB,EAAE,CAAC;IACjC,CAAC;AACH,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,kBAAkB,EAAE,CAAC;AAC7B,CAAC"}

package/dist/github/environments/constants.d.mts

@@ -0,0 +1,354 @@
+import * as t from 'ts-fortress';
+/**
+ * `repo-settings/environments/*.json` の型。
+ *
+ * Settings > Environments の 1 件に対応する。ファイルは「その環境の望ましい
+ * 状態」を丸ごと表しており、 GitHub 側で 2 つに分かれている次の API をまとめて
+ * 1 ファイルで管理する:
+ *
+ * - `PUT /repos/{owner}/{repo}/environments/{environment_name}`
+ * - `GET|POST|DELETE /repos/{owner}/{repo}/environments/{environment_name}/deployment-branch-policies`
+ *
+ * GET が返す `protection_rules` は「有効な保護ルールだけが並ぶ配列」だが、この
+ * 型は書き込み側（ PUT の body ）に合わせた平らな形にしている。往復させる側の
+ * 形を正とするほうが、ファイルを読んで何が起きるか分かりやすいため。
+ */
+export declare const EnvironmentSettings: Readonly<{
+    typeName: string;
+    defaultValue: Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>;
+    is: (a: unknown) => a is Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>;
+    assertIs: (a: unknown) => asserts a is Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>;
+    cast: (a: unknown) => Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>;
+    fill: (a: unknown) => Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>;
+    prune: <B extends Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>>(a: B) => Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>;
+    validate: (a: unknown) => t.Result<Readonly<{
+        deployment_branch_policies: readonly Readonly<{
+            name: string;
+            type: "branch" | "tag";
+        }>[];
+        deployment_branch_policy: Readonly<{
+            custom_branch_policies: boolean;
+            protected_branches: boolean;
+        }> | null;
+        name: string;
+        prevent_self_review: boolean;
+        reviewers: readonly Readonly<{
+            id: number;
+            type: "Team" | "User";
+        }>[];
+        wait_timer: number;
+    }>, readonly Readonly<{
+        path: readonly string[];
+        actualValue: unknown;
+        expectedType: string;
+        typeName: string;
+        details?: t.ValidationErrorDetails | undefined;
+    }>[]>;
+    optional?: true;
+}> & Readonly<{
+    shape: {
+        readonly name: t.ConstrainedType<string, Readonly<{
+            readonly nonempty: undefined;
+            readonly minLength: undefined;
+            readonly maxLength: undefined;
+            readonly startsWith: undefined;
+            readonly endsWith: undefined;
+            readonly includes: undefined;
+            readonly uppercase: undefined;
+            readonly lowercase: undefined;
+            readonly regex: undefined;
+        }>>;
+        /** 「 Wait timer 」。分。 0 なら待たない。 */
+        readonly wait_timer: t.ConstrainedType<number, Readonly<{
+            readonly finite: undefined;
+            readonly int: undefined;
+            readonly safeInteger: undefined;
+            readonly nonZero: undefined;
+            readonly negative: undefined;
+            readonly nonNegative: undefined;
+            readonly positive: undefined;
+            readonly nonPositive: undefined;
+            readonly gt: undefined;
+            readonly gte: undefined;
+            readonly min: undefined;
+            readonly lt: undefined;
+            readonly lte: undefined;
+            readonly max: undefined;
+            readonly multipleOf: undefined;
+            readonly step: undefined;
+        }>>;
+        /** 「 Prevent self-review 」。 */
+        readonly prevent_self_review: Readonly<{
+            typeName: string;
+            defaultValue: boolean;
+            is: (a: unknown) => a is boolean;
+            assertIs: (a: unknown) => asserts a is boolean;
+            cast: (a: unknown) => boolean;
+            fill: (a: unknown) => boolean;
+            prune: <B extends boolean>(a: B) => boolean;
+            validate: (a: unknown) => t.Result<boolean, readonly Readonly<{
+                path: readonly string[];
+                actualValue: unknown;
+                expectedType: string;
+                typeName: string;
+                details?: t.ValidationErrorDetails | undefined;
+            }>[]>;
+            optional?: true;
+        }>;
+        /** 「 Required reviewers 」。空配列なら承認は要らない。 */
+        readonly reviewers: Readonly<{
+            typeName: string;
+            defaultValue: readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[];
+            is: (a: unknown) => a is readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[];
+            assertIs: (a: unknown) => asserts a is readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[];
+            cast: (a: unknown) => readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[];
+            fill: (a: unknown) => readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[];
+            prune: <B extends readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[]>(a: B) => readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[];
+            validate: (a: unknown) => t.Result<readonly Readonly<{
+                id: number;
+                type: "Team" | "User";
+            }>[], readonly Readonly<{
+                path: readonly string[];
+                actualValue: unknown;
+                expectedType: string;
+                typeName: string;
+                details?: t.ValidationErrorDetails | undefined;
+            }>[]>;
+            optional?: true;
+        }>;
+        /**
+         * 「 Deployment branches and tags 」の選択。
+         *
+         * - `null` … 「 No restriction 」（ どの ref からでも deploy できる ）
+         * - `protected_branches: true` … 「 Protected branches only 」
+         * - `custom_branch_policies: true` … 「 Selected branches and tags 」。
+         *   具体的な pattern は下の `deployment_branch_policies` 。
+         *
+         * 2 つを同時に `true` にはできない。
+         */
+        readonly deployment_branch_policy: Readonly<{
+            typeName: string;
+            defaultValue: Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null;
+            is: (a: unknown) => a is Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null;
+            assertIs: (a: unknown) => asserts a is Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null;
+            cast: (a: unknown) => Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null;
+            fill: (a: unknown) => Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null;
+            prune: <B extends Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null>(a: B) => Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null;
+            validate: (a: unknown) => t.Result<Readonly<{
+                custom_branch_policies: boolean;
+                protected_branches: boolean;
+            }> | null, readonly Readonly<{
+                path: readonly string[];
+                actualValue: unknown;
+                expectedType: string;
+                typeName: string;
+                details?: t.ValidationErrorDetails | undefined;
+            }>[]>;
+            optional?: true;
+        }>;
+        /**
+         * `custom_branch_policies` が `true` のときの pattern 一覧。
+         *
+         * それ以外のときは空配列でなければならない（`applyEnvironments` が拒否する）。
+         * GitHub 側は別エンドポイントだが、「どの ref から deploy できるか」を
+         * 決めているのは選択と pattern の組で、片方だけ見ても意味を成さない。
+         */
+        readonly deployment_branch_policies: Readonly<{
+            typeName: string;
+            defaultValue: readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[];
+            is: (a: unknown) => a is readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[];
+            assertIs: (a: unknown) => asserts a is readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[];
+            cast: (a: unknown) => readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[];
+            fill: (a: unknown) => readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[];
+            prune: <B extends readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[]>(a: B) => readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[];
+            validate: (a: unknown) => t.Result<readonly Readonly<{
+                name: string;
+                type: "branch" | "tag";
+            }>[], readonly Readonly<{
+                path: readonly string[];
+                actualValue: unknown;
+                expectedType: string;
+                typeName: string;
+                details?: t.ValidationErrorDetails | undefined;
+            }>[]>;
+            optional?: true;
+        }>;
+    };
+}>;
+export type EnvironmentSettings = t.TypeOf<typeof EnvironmentSettings>;
+//# sourceMappingURL=constants.d.mts.map

package/dist/github/environments/constants.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.mts","sourceRoot":"","sources":["../../../src/github/environments/constants.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAG9B,kCAAkC;;;;;;;;;;;;;;;;;;;QAGlC,+BAA+B;;;;;;;;;;;;;;;;;;QAG/B,2CAA2C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAY3C;;;;;;;;;WASG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;QAYH;;;;;;WAMG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWH,CAAC;AAEH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,mBAAmB,CAAC,CAAC"}

package/dist/github/environments/constants.mjs

@@ -0,0 +1,62 @@
+import * as t from 'ts-fortress';
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+export const EnvironmentSettings = t.record({
+    name: t.string(''),
+
+    wait_timer: t.number(0),
+
+    prevent_self_review: t.boolean(false),
+
+    reviewers: t.array(t.record({
+        type: t.enumType(['User', 'Team'], {
+            typeName: 'EnvironmentReviewerType',
+            defaultValue: 'User',
+        }),
+        id: t.number(0),
+    }), { typeName: 'EnvironmentReviewers' }),
+
+
+
+
+
+
+
+
+
+
+    deployment_branch_policy: t.union([
+        t.record({
+            protected_branches: t.boolean(false),
+            custom_branch_policies: t.boolean(true),
+        }),
+        t.nullType,
+    ], { typeName: 'DeploymentBranchPolicySelection' }),
+
+
+
+
+
+
+
+    deployment_branch_policies: t.array(t.record({
+        name: t.string(''),
+        type: t.enumType(['branch', 'tag'], {
+            typeName: 'DeploymentBranchPolicyType',
+            defaultValue: 'branch',
+        }),
+    }), { typeName: 'DeploymentBranchPolicies' }),
+});
+//# sourceMappingURL=constants.mjs.map

package/dist/github/environments/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","sourceRoot":"","sources":["../../../src/github/environments/constants.mts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC1C,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;IAElB,kCAAkC;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;IAEvB,+BAA+B;IAC/B,mBAAmB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IAErC,2CAA2C;IAC3C,SAAS,EAAE,CAAC,CAAC,KAAK,CAChB,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE;YACjC,QAAQ,EAAE,yBAAyB;YACnC,YAAY,EAAE,MAAM;SACrB,CAAC;QACF,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;KAChB,CAAC,EACF,EAAE,QAAQ,EAAE,sBAAsB,EAAE,CACrC;IAED;;;;;;;;;OASG;IACH,wBAAwB,EAAE,CAAC,CAAC,KAAK,CAC/B;QACE,CAAC,CAAC,MAAM,CAAC;YACP,kBAAkB,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;YACpC,sBAAsB,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;SACxC,CAAC;QACF,CAAC,CAAC,QAAQ;KACX,EACD,EAAE,QAAQ,EAAE,iCAAiC,EAAE,CAChD;IAED;;;;;;OAMG;IACH,0BAA0B,EAAE,CAAC,CAAC,KAAK,CACjC,CAAC,CAAC,MAAM,CAAC;QACP,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;QAClB,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,QAAQ,EAAE,KAAK,CAAC,EAAE;YAClC,QAAQ,EAAE,4BAA4B;YACtC,YAAY,EAAE,QAAQ;SACvB,CAAC;KACH,CAAC,EACF,EAAE,QAAQ,EAAE,0BAA0B,EAAE,CACzC;CACF,CAAC,CAAC"}

package/dist/github/environments/index.d.mts

@@ -0,0 +1,6 @@
+export * from './api/index.mjs';
+export * from './apply.mjs';
+export * from './backup.mjs';
+export * from './constants.mjs';
+export * from './read-environment-contents.mjs';
+//# sourceMappingURL=index.d.mts.map

package/dist/github/environments/index.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../../src/github/environments/index.mts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iCAAiC,CAAC"}

package/dist/github/environments/index.mjs

@@ -0,0 +1,6 @@
+export * from './api/index.mjs';
+export * from './apply.mjs';
+export * from './backup.mjs';
+export * from './constants.mjs';
+export * from './read-environment-contents.mjs';
+//# sourceMappingURL=index.mjs.map

package/dist/github/environments/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../src/github/environments/index.mts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC;AAChC,cAAc,iCAAiC,CAAC"}

package/dist/github/environments/read-environment-contents.d.mts

@@ -0,0 +1,3 @@
+import { EnvironmentSettings } from './constants.mjs';
+export declare const readEnvironmentFiles: () => Promise<readonly EnvironmentSettings[]>;
+//# sourceMappingURL=read-environment-contents.d.mts.map

package/dist/github/environments/read-environment-contents.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"read-environment-contents.d.mts","sourceRoot":"","sources":["../../../src/github/environments/read-environment-contents.mts"],"names":[],"mappings":"AAMA,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AAEtD,eAAO,MAAM,oBAAoB,QAAa,OAAO,CACnD,SAAS,mBAAmB,EAAE,CACC,CAAC"}