github-settings-as-code 3.2.0 → 4.0.0

package/dist/github/variables/constants.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.mjs","sourceRoot":"","sources":["../../../src/github/variables/constants.mts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,eAAe,CAAC;AACpC,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AAEjC;;;;;;;;;;;;;;GAcG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,EAAE;IAC1E,QAAQ,EAAE,qBAAqB;CAChC,CAAC,CAAC;AAIH;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CACzC,SAA8B,EACxB,EAAE;IACR,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAC7C,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,mBAAmB,CAAC,IAAI,CAAC,CACrC,CAAC;IAEF,IAAI,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb;YACE,0CAA0C,SAAS;iBAChD,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;iBACnC,IAAI,CAAC,IAAI,CAAC,GAAG;YAChB,kDAAkD;SACnD,CAAC,IAAI,CAAC,IAAI,CAAC,CACb,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,6CAA6C;AAC7C,MAAM,mBAAmB,GAAG,2BAA2B,CAAC;AAExD,MAAM,mBAAmB,GAAG,CAAC,IAAY,EAAW,EAAE,CACpD,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC"}

package/dist/github/variables/index.d.mts

@@ -1,3 +1,5 @@
 export * from './api/index.mjs';
 export * from './apply.mjs';
+export * from './backup.mjs';
+export * from './constants.mjs';
 //# sourceMappingURL=index.d.mts.map

package/dist/github/variables/index.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../../src/github/variables/index.mts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.mts","sourceRoot":"","sources":["../../../src/github/variables/index.mts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/github/variables/index.mjs

@@ -1,3 +1,5 @@
 export * from './api/index.mjs';
 export * from './apply.mjs';
+export * from './backup.mjs';
+export * from './constants.mjs';
 //# sourceMappingURL=index.mjs.map

package/dist/github/variables/index.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../src/github/variables/index.mts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.mjs","sourceRoot":"","sources":["../../../src/github/variables/index.mts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,iBAAiB,CAAC"}

package/dist/github/vulnerability-alerts/apply.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"apply.d.mts","sourceRoot":"","sources":["../../../src/github/vulnerability-alerts/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAiBvB;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,QAAa,OAAO,CAAC,IAAI,CA4B7D,CAAC"}
+{"version":3,"file":"apply.d.mts","sourceRoot":"","sources":["../../../src/github/vulnerability-alerts/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAiBvB;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,QAAa,OAAO,CAAC,IAAI,CAsB7D,CAAC"}

package/dist/github/vulnerability-alerts/apply.mjs

@@ -27,8 +27,6 @@ export const applyVulnerabilityAlerts = async () => {
         const str = JSON.stringify(applied, undefined, 2);
 
         await fs.writeFile(settingsPath, str);
-
-        await fs.writeFile(path.resolve(vulnerabilityAlertsDir, 'bk', settingsJsonName), str);
         await formatUncommittedFiles();
     }
 };

package/dist/github/vulnerability-alerts/apply.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"apply.mjs","sourceRoot":"","sources":["../../../src/github/vulnerability-alerts/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,UAAU,EACV,MAAM,GACP,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,IAAmB,EAAE;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,gBAAgB,CAAC,CAAC;IAE5E,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;IAElD,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAEvC,0BAA0B;IAC1B,CAAC;QACC,MAAM,OAAO,GAAG,MAAM,sBAAsB,EAAE,CAAC;QAE/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAElD,mEAAmE;QACnE,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAEtC,mEAAmE;QACnE,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,IAAI,EAAE,gBAAgB,CAAC,EAC5D,GAAG,CACJ,CAAC;QAEF,MAAM,sBAAsB,EAAE,CAAC;IACjC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,KAAK,EACxB,YAAoB,EACkB,EAAE;IACxC,mEAAmE;IACnE,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAE3E,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,QAAQ,CAC3D,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CACzB,CAAC;IAEF,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,CAAC,CAAC,0BAA0B,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAChE,CAAC;IACJ,CAAC;IAED,OAAO,gBAAgB,CAAC,KAAK,CAAC;AAChC,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,wBAAwB,EAAE,CAAC;AACnC,CAAC"}
+{"version":3,"file":"apply.mjs","sourceRoot":"","sources":["../../../src/github/vulnerability-alerts/apply.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,CAAC,MAAM,aAAa,CAAC;AACjC,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,UAAU,EACV,MAAM,GACP,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EACL,sBAAsB,EACtB,sBAAsB,GACvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,2BAA2B,EAAE,MAAM,iBAAiB,CAAC;AAE9D;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,KAAK,IAAmB,EAAE;IAChE,MAAM,YAAY,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,gBAAgB,CAAC,CAAC;IAE5E,IAAI,CAAC,CAAC,MAAM,UAAU,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QACtC,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,YAAY,CAAC,YAAY,CAAC,CAAC;IAElD,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAC;IAEvC,0BAA0B;IAC1B,CAAC;QACC,MAAM,OAAO,GAAG,MAAM,sBAAsB,EAAE,CAAC;QAE/C,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC;QAElD,mEAAmE;QACnE,MAAM,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,GAAG,CAAC,CAAC;QAEtC,MAAM,sBAAsB,EAAE,CAAC;IACjC,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,YAAY,GAAG,KAAK,EACxB,YAAoB,EACkB,EAAE;IACxC,mEAAmE;IACnE,MAAM,YAAY,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,YAAY,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;IAE3E,MAAM,gBAAgB,GAAG,2BAA2B,CAAC,QAAQ,CAC3D,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,CACzB,CAAC;IAEF,IAAI,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,CAAC,CAAC,0BAA0B,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAChE,CAAC;IACJ,CAAC;IAED,OAAO,gBAAgB,CAAC,KAAK,CAAC;AAChC,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,wBAAwB,EAAE,CAAC;AACnC,CAAC"}

package/dist/github/vulnerability-alerts/backup.d.mts

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
 import 'dotenv/config';
-/** Dependabot alerts の現在値を `bk/` に保存する。 */
+/** Dependabot alerts の現在値を宣言ファイルへ撮り直す。 */
 export declare const backupVulnerabilityAlerts: (fmt?: boolean) => Promise<void>;
 //# sourceMappingURL=backup.d.mts.map

package/dist/github/vulnerability-alerts/backup.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"backup.d.mts","sourceRoot":"","sources":["../../../src/github/vulnerability-alerts/backup.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAavB,2CAA2C;AAC3C,eAAO,MAAM,yBAAyB,SAC/B,OAAO,KACX,OAAO,CAAC,IAAI,CAcd,CAAC"}
+{"version":3,"file":"backup.d.mts","sourceRoot":"","sources":["../../../src/github/vulnerability-alerts/backup.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AAQvB,0CAA0C;AAC1C,eAAO,MAAM,yBAAyB,SAC/B,OAAO,KACX,OAAO,CAAC,IAAI,CAcd,CAAC"}

package/dist/github/vulnerability-alerts/backup.mjs

@@ -2,16 +2,16 @@
 import 'dotenv/config';
 import * as fs from 'node:fs/promises';
 import * as path from 'node:path';
-import { formatUncommittedFiles, isDirectlyExecuted, makeEmptyDir, } from 'ts-repo-utils';
+import { formatUncommittedFiles, isDirectlyExecuted } from 'ts-repo-utils';
+import { clearJsonFilesIn } from '../clear-json-files.mjs';
 import { settingsJsonName, vulnerabilityAlertsDir } from '../constants.mjs';
 import { getVulnerabilityAlerts } from './api/index.mjs';
-const backupDir = path.resolve(vulnerabilityAlertsDir, './bk');
 
 export const backupVulnerabilityAlerts = async (fmt = true) => {
-    await makeEmptyDir(backupDir);
     const settings = await getVulnerabilityAlerts();
+    await clearJsonFilesIn(vulnerabilityAlertsDir);
 
-    await fs.writeFile(path.resolve(backupDir, settingsJsonName), JSON.stringify(settings, undefined, 2));
+    await fs.writeFile(path.resolve(vulnerabilityAlertsDir, settingsJsonName), JSON.stringify(settings, undefined, 2));
     if (fmt) {
         await formatUncommittedFiles();
     }

package/dist/github/vulnerability-alerts/backup.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"backup.mjs","sourceRoot":"","sources":["../../../src/github/vulnerability-alerts/backup.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EACL,sBAAsB,EACtB,kBAAkB,EAClB,YAAY,GACb,MAAM,eAAe,CAAC;AACvB,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,MAAM,CAAC,CAAC;AAE/D,2CAA2C;AAC3C,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAC5C,GAAG,GAAY,IAAI,EACJ,EAAE;IACjB,MAAM,YAAY,CAAC,SAAS,CAAC,CAAC;IAE9B,MAAM,QAAQ,GAAG,MAAM,sBAAsB,EAAE,CAAC;IAEhD,mEAAmE;IACnE,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,gBAAgB,CAAC,EACzC,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CACvC,CAAC;IAEF,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,sBAAsB,EAAE,CAAC;IACjC,CAAC;AACH,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,yBAAyB,EAAE,CAAC;AACpC,CAAC"}
+{"version":3,"file":"backup.mjs","sourceRoot":"","sources":["../../../src/github/vulnerability-alerts/backup.mts"],"names":[],"mappings":";AACA,OAAO,eAAe,CAAC;AACvB,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,EAAE,sBAAsB,EAAE,kBAAkB,EAAE,MAAM,eAAe,CAAC;AAC3E,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAC;AAC5E,OAAO,EAAE,sBAAsB,EAAE,MAAM,iBAAiB,CAAC;AAEzD,0CAA0C;AAC1C,MAAM,CAAC,MAAM,yBAAyB,GAAG,KAAK,EAC5C,GAAG,GAAY,IAAI,EACJ,EAAE;IACjB,MAAM,QAAQ,GAAG,MAAM,sBAAsB,EAAE,CAAC;IAEhD,MAAM,gBAAgB,CAAC,sBAAsB,CAAC,CAAC;IAE/C,mEAAmE;IACnE,MAAM,EAAE,CAAC,SAAS,CAChB,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,gBAAgB,CAAC,EACtD,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,SAAS,EAAE,CAAC,CAAC,CACvC,CAAC;IAEF,IAAI,GAAG,EAAE,CAAC;QACR,MAAM,sBAAsB,EAAE,CAAC;IACjC,CAAC;AACH,CAAC,CAAC;AAEF,IAAI,kBAAkB,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACxC,MAAM,yBAAyB,EAAE,CAAC;AACpC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "github-settings-as-code",
-  "version": "3.2.0",
+  "version": "4.0.0",
   "private": false,
   "keywords": [
     "github",
@@ -31,19 +31,19 @@
     "octokit-safe-types": "^1.2.28",
     "ts-data-forge": "^14.7.1",
     "ts-fortress": "^12.1.3",
-    "ts-repo-utils": "^10.6.2",
+    "ts-repo-utils": "^10.7.0",
     "ts-type-forge": "^9.2.2"
   },
   "devDependencies": {
-    "@types/node": "26.5.0",
+    "@types/node": "26.5.1",
     "@vitest/coverage-v8": "5.0.0",
     "@vitest/ui": "5.0.0",
-    "cspell": "10.2.1",
-    "eslint": "10.9.1",
-    "eslint-config-typed": "5.11.7",
-    "eslint-plugin-ts-data-forge": "0.7.4",
-    "eslint-plugin-ts-fortress": "1.2.2",
-    "eslint-plugin-ts-type-forge": "0.8.3",
+    "cspell": "10.3.0",
+    "eslint": "10.10.0",
+    "eslint-config-typed": "5.11.10",
+    "eslint-plugin-ts-data-forge": "0.8.1",
+    "eslint-plugin-ts-fortress": "1.2.3",
+    "eslint-plugin-ts-type-forge": "0.8.4",
     "jiti": "2.7.0",
     "npm-run-all2": "9.0.3",
     "prettier": "3.9.6",
@@ -59,7 +59,7 @@
     "pnpm": ">=9.0.0"
   },
   "volta": {
-    "node": "26.8.1"
+    "node": "26.8.2"
   },
   "publishConfig": {
     "access": "public",
@@ -67,29 +67,30 @@
   },
   "scripts": {
     "build": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ./scripts/cmd/build.mts",
-    "build:min": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ./scripts/cmd/build.mts --skip-check",
+    "check:cspell": "cspell \"**\" --gitignore --gitignore-root ../../ --no-progress",
     "check:ext": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ./scripts/cmd/check-ext.mts",
+    "check:lint": "eslint .",
+    "check:test": "pnpm run z:vitest:node run",
+    "check:test:cov": "pnpm run z:vitest:node run --coverage",
+    "check:types": "node ../../node_modules/typescript-native/bin/tsc --noEmit",
     "check-all": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ./scripts/cmd/check-all.mts",
-    "codemod": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/ts-codemod.mts --uncommitted --transformer append-as-const --transformer convert-to-readonly '{src,scripts,samples}/**/*.mts' && pnpm run fmt",
-    "codemod:diff": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/ts-codemod.mts --diff-from origin/main --transformer append-as-const --transformer convert-to-readonly '{src,scripts,samples}/**/*.mts' && pnpm run fmt",
-    "codemod:full": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/ts-codemod.mts --transformer append-as-const --transformer convert-to-readonly '{src,scripts,samples}/**/*.mts' && pnpm run fmt",
-    "cspell": "cspell \"**\" --gitignore --gitignore-root ../../ --no-progress",
     "doc": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ./scripts/cmd/gen-docs.mts",
-    "fmt": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-repo-utils/src/cmd/format-uncommitted.mts --cwd .",
-    "fmt:diff": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-repo-utils/src/cmd/format-diff-from.mts origin/main --cwd .",
-    "fmt:full": "prettier --write .",
-    "gi": "run-s gi:src fmt",
-    "gi:src": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-repo-utils/src/cmd/gen-index-ts.mts ./src/github --index-ext .mts --export-ext .mjs --target-ext .mts --exclude cmd --exclude octokit.mts",
-    "lint": "eslint .",
-    "lint:fix": "eslint . --fix",
-    "test": "pnpm run z:vitest:node run",
-    "test:cov": "pnpm run z:vitest:node run --coverage",
+    "fix:codemod": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/ts-codemod.mts --uncommitted --transformer append-as-const --transformer convert-to-readonly '{src,scripts,samples}/**/*.mts' && pnpm run fix:fmt",
+    "fix:codemod:diff": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/ts-codemod.mts --diff-from origin/main --transformer append-as-const --transformer convert-to-readonly '{src,scripts,samples}/**/*.mts' && pnpm run fix:fmt",
+    "fix:codemod:full": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-codemod-cli/src/cmd/ts-codemod.mts --transformer append-as-const --transformer convert-to-readonly '{src,scripts,samples}/**/*.mts' && pnpm run fix:fmt",
+    "fix:fmt": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-repo-utils/src/cmd/format-uncommitted.mts --cwd .",
+    "fix:fmt:diff": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-repo-utils/src/cmd/format-diff-from.mts origin/main --cwd .",
+    "fix:fmt:full": "prettier --write .",
+    "fix:lint": "eslint . --fix",
+    "fmt": "pnpm run fix:fmt",
+    "gen": "run-s gen:index",
+    "gen:index": "run-s gen:index:src fix:fmt",
+    "gen:index:src": "tsx --tsconfig ../../tools/configs/tsconfig.tsx.json ../../libs/ts-repo-utils/src/cmd/gen-index-ts.mts ./src/github --index-ext .mts --export-ext .mjs --target-ext .mts --exclude cmd --exclude octokit.mts",
+    "test": "pnpm run check:test",
     "test:cov:ui": "vite preview --outDir ./coverage",
     "test:ui": "pnpm run z:vitest:node --ui",
-    "testw": "pnpm run z:vitest:node watch",
-    "tsc": "node ../../node_modules/typescript-native/bin/tsc --noEmit",
-    "tscw": "node ../../node_modules/typescript-native/bin/tsc --noEmit --watch -p ./tsconfig.json",
-    "type-check": "node ../../node_modules/typescript-native/bin/tsc --noEmit",
+    "watch:test": "pnpm run z:vitest:node watch",
+    "watch:types": "node ../../node_modules/typescript-native/bin/tsc --noEmit --watch -p ./tsconfig.json",
     "z:vitest": "vitest --config ./configs/vitest.config.mts",
     "z:vitest:node": "pnpm run z:vitest --project='Node.js'"
   }

package/src/cmd/repo-settings.mts

@@ -13,13 +13,13 @@ const HELP = dedent`
 
   Commands:
     apply [target]     ローカルの設定ファイルを GitHub に反映する
-    backup [target]    GitHub の現在値をローカルの bk/ に保存する
+    backup [target]    GitHub の現在値でローカルの設定ファイルを撮り直す
 
   Targets:
     all                すべて（既定）
     repository         repo-settings/repository-settings/settings.json
     rulesets           repo-settings/rulesets/*.json
-    variables          repository variables （ apply のみ ）
+    variables          repo-settings/variables/settings.json
     actions            repo-settings/actions-settings/settings.json
     pages              repo-settings/pages/settings.json
     environments       repo-settings/environments/*.json
@@ -156,9 +156,12 @@ const runners: ReadonlyRecord<
       await github.backupEnvironments();
 
       await github.backupVulnerabilityAlerts();
+
+      await github.backupVariables();
     },
     repository: github.backupRepositorySettings,
     rulesets: github.backupRulesets,
+    variables: github.backupVariables,
     actions: github.backupActionsSettings,
     pages: github.backupPagesSettings,
     environments: github.backupEnvironments,

package/src/github/actions-settings/apply.mts

@@ -10,13 +10,10 @@ import {
 } from 'ts-repo-utils';
 import { actionsSettingsDir, settingsJsonName } from '../constants.mjs';
 import { getActionsSettings, setActionsSettings } from './api/index.mjs';
-import { backupActionsSettings } from './backup.mjs';
 import { ActionsSettings } from './constants.mjs';
 
 /** `repo-settings/actions-settings/settings.json` を Settings > Actions > General に反映する。 */
 export const applyActionsSettings = async (): Promise<void> => {
-  await backupActionsSettings(false);
-
   const settings = await readSettings();
 
   await setActionsSettings(settings);
@@ -30,12 +27,6 @@ export const applyActionsSettings = async (): Promise<void> => {
     // eslint-disable-next-line security/detect-non-literal-fs-filename
     await fs.writeFile(path.resolve(actionsSettingsDir, settingsJsonName), str);
 
-    // eslint-disable-next-line security/detect-non-literal-fs-filename
-    await fs.writeFile(
-      path.resolve(actionsSettingsDir, 'bk', settingsJsonName),
-      str,
-    );
-
     await formatUncommittedFiles();
   }
 };

package/src/github/actions-settings/backup.mts

@@ -2,27 +2,22 @@
 import 'dotenv/config';
 import * as fs from 'node:fs/promises';
 import * as path from 'node:path';
-import {
-  formatUncommittedFiles,
-  isDirectlyExecuted,
-  makeEmptyDir,
-} from 'ts-repo-utils';
+import { formatUncommittedFiles, isDirectlyExecuted } from 'ts-repo-utils';
+import { clearJsonFilesIn } from '../clear-json-files.mjs';
 import { actionsSettingsDir, settingsJsonName } from '../constants.mjs';
 import { getActionsSettings } from './api/index.mjs';
 
-const backupDir = path.resolve(actionsSettingsDir, './bk');
-
-/** Settings > Actions > General の現在値を `bk/` に保存する。 */
+/** Settings > Actions > General の現在値を宣言ファイルへ撮り直す。 */
 export const backupActionsSettings = async (
   fmt: boolean = true,
 ): Promise<void> => {
-  await makeEmptyDir(backupDir);
-
   const settings = await getActionsSettings();
 
+  await clearJsonFilesIn(actionsSettingsDir);
+
   // eslint-disable-next-line security/detect-non-literal-fs-filename
   await fs.writeFile(
-    path.resolve(backupDir, settingsJsonName),
+    path.resolve(actionsSettingsDir, settingsJsonName),
     JSON.stringify(settings, undefined, 2),
   );
 

package/src/github/actions-settings/constants.mts

@@ -35,7 +35,7 @@ export const ActionsSettings = t.record({
    * `read` にできるのは、 workflow 側が全て明示的に `permissions` を宣言して
    * いる場合だけ。宣言の無い job はこの既定値をそのまま受け取るため、
    * `write` のままだと「 branch の中身が何であれ書き込めるトークン」が
-   * 渡る。 .github/workflows/type-check.yml 冒頭の注記を参照。
+   * 渡る。 .github/workflows/code-check.yml 冒頭の注記を参照。
    */
   default_workflow_permissions: t.enumType(['read', 'write'], {
     typeName: 'DefaultWorkflowPermissions',

package/src/github/clear-json-files.mts

@@ -0,0 +1,31 @@
+import * as fs from 'node:fs/promises';
+import * as path from 'node:path';
+
+/**
+ * `dir` の直下の `*.json` を消す。ディレクトリが無ければ作る。
+ *
+ * backup が書き込む前にこれを呼ぶ。撮り直したあとにそこに在るものが、そのまま
+ * 「GitHub から取れたもの」になる — 取れなかった資源は `git status` に削除と
+ * して現れる。消さずに上書きするだけだと、取れなかった資源の古いファイルが
+ * 残り、取れたのと見分けがつかない。
+ *
+ * まだ apply していない宣言も同じように削除として現れるが、それも見えた方が
+ * よい情報で、コミットしなければ失われない。
+ *
+ * `rm -rf` ではなく直下の `*.json` に限る。宣言の隣に置いてある README
+ * （`repo-settings/variables/README.md`）のような、JSON でない同居ファイルを
+ * 巻き込まないため。
+ */
+export const clearJsonFilesIn = async (dir: string): Promise<void> => {
+  // eslint-disable-next-line security/detect-non-literal-fs-filename
+  await fs.mkdir(dir, { recursive: true });
+
+  // eslint-disable-next-line security/detect-non-literal-fs-filename
+  const entries = await fs.readdir(dir, { withFileTypes: true });
+
+  for (const entry of entries) {
+    if (entry.isFile() && entry.name.endsWith('.json')) {
+      await fs.rm(path.resolve(dir, entry.name));
+    }
+  }
+};

package/src/github/clear-json-files.test.mts

@@ -0,0 +1,78 @@
+import * as fs from 'node:fs/promises';
+import * as os from 'node:os';
+import * as path from 'node:path';
+import { clearJsonFilesIn } from './clear-json-files.mjs';
+
+const makeDir = async (): Promise<string> =>
+  fs.mkdtemp(path.join(os.tmpdir(), 'clear-json-files-'));
+
+/** 途中のディレクトリごと作って書く。入れ子の fixture もこれで用意する。 */
+const write = async (filePath: string, content: string): Promise<void> => {
+  // eslint-disable-next-line security/detect-non-literal-fs-filename
+  await fs.mkdir(path.dirname(filePath), { recursive: true });
+
+  // eslint-disable-next-line security/detect-non-literal-fs-filename
+  await fs.writeFile(filePath, content);
+};
+
+const namesIn = async (dir: string): Promise<readonly string[]> =>
+  // eslint-disable-next-line security/detect-non-literal-fs-filename
+  fs.readdir(dir).then((names) => names.toSorted());
+
+describe(clearJsonFilesIn, () => {
+  test('removes the json files directly under the directory', async () => {
+    const dir = await makeDir();
+
+    await write(path.join(dir, 'main.json'), '{}');
+
+    await write(path.join(dir, 'release.json'), '{}');
+
+    await clearJsonFilesIn(dir);
+
+    assert.deepStrictEqual(await namesIn(dir), []);
+  });
+
+  test('keeps a file that is not json, so a README beside the declarations survives', async () => {
+    const dir = await makeDir();
+
+    await write(path.join(dir, 'settings.json'), '{}');
+
+    await write(path.join(dir, 'README.md'), '# notes');
+
+    await clearJsonFilesIn(dir);
+
+    assert.deepStrictEqual(await namesIn(dir), ['README.md']);
+  });
+
+  test('does not descend into a subdirectory', async () => {
+    const dir = await makeDir();
+
+    await write(path.join(dir, 'nested', 'deep.json'), '{}');
+
+    await clearJsonFilesIn(dir);
+
+    assert.deepStrictEqual(await namesIn(dir), ['nested']);
+
+    assert.deepStrictEqual(await namesIn(path.join(dir, 'nested')), [
+      'deep.json',
+    ]);
+  });
+
+  test('creates the directory when it does not exist', async () => {
+    const dir = path.join(await makeDir(), 'not-yet');
+
+    await clearJsonFilesIn(dir);
+
+    assert.deepStrictEqual(await namesIn(dir), []);
+  });
+
+  test('is a no-op on a directory holding no json', async () => {
+    const dir = await makeDir();
+
+    await write(path.join(dir, 'README.md'), '# notes');
+
+    await clearJsonFilesIn(dir);
+
+    assert.deepStrictEqual(await namesIn(dir), ['README.md']);
+  });
+});

package/src/github/constants.mts

@@ -34,6 +34,8 @@ export const vulnerabilityAlertsDir = path.resolve(
 
 export const rulesetsDir = path.resolve(settingsDir, './rulesets');
 
+export const variablesDir = path.resolve(settingsDir, './variables');
+
 export const octokitHeaders = {
   'X-GitHub-Api-Version': '2022-11-28',
 } as const;

package/src/github/environments/api/get-environments.mts

@@ -10,7 +10,7 @@ import { EnvironmentSettings } from '../constants.mjs';
  * Settings > Environments の現在値を、宣言ファイルと同じ形にして返す。
  *
  * 名前順に整える。 GitHub が返す順は作成順で、環境を 1 つ足しただけで
- * `bk/` の中身が並び替わると差分が読めなくなるため。
+ * 宣言ファイルの中身が並び替わると差分が読めなくなるため。
  */
 export const getAllEnvironments = async (): Promise<
   readonly EnvironmentSettings[]

package/src/github/environments/apply.mts

@@ -1,25 +1,22 @@
 #!/usr/bin/env node
 import 'dotenv/config';
 import * as fs from 'node:fs/promises';
-import * as path from 'node:path';
 import { Arr } from 'ts-data-forge';
-import { isDirectlyExecuted } from 'ts-repo-utils';
+import { formatUncommittedFiles, isDirectlyExecuted } from 'ts-repo-utils';
 import { environmentsDir } from '../constants.mjs';
+import { settingsFilePath } from '../settings-file-path.mjs';
 import { getAllEnvironments, setEnvironment } from './api/index.mjs';
-import { backupEnvironments } from './backup.mjs';
 import { type EnvironmentSettings } from './constants.mjs';
 import { readEnvironmentFiles } from './read-environment-contents.mjs';
 
 /**
  * `repo-settings/environments/*.json` を Settings > Environments に反映する。
  *
- * ruleset と同じく、宣言に無い環境は消さない。 GUI で作られたものが `bk/` に
- * 現れることが drift の見え方であって、 apply が黙って片付けてしまうと
- * 「いつ誰が何を作ったか」を見る機会がなくなる。
+ * ruleset と同じく、宣言に無い環境は消さない。 GUI で作られたものは drift
+ * 検査が報せるのであって、 apply が黙って片付けてしまうと「いつ誰が何を
+ * 作ったか」を見る機会がなくなる。
  */
 export const applyEnvironments = async (): Promise<void> => {
-  await backupEnvironments(false);
-
   const environments = await readEnvironmentFiles();
 
   for (const environment of environments) {
@@ -37,17 +34,15 @@ export const applyEnvironments = async (): Promise<void> => {
     for (const environment of applied) {
       const str = JSON.stringify(environment, undefined, 2);
 
+      // `settingsFilePath` が `environmentsDir` の直下であることを確かめている。
       // eslint-disable-next-line security/detect-non-literal-fs-filename
       await fs.writeFile(
-        path.resolve(environmentsDir, `${environment.name}.json`),
+        settingsFilePath(environmentsDir, environment.name),
         str,
       );
     }
 
-    // `bk/` は backup 側が makeEmptyDir から作り直す。ここで書き足すのではなく
-    // 呼び直しているのは、消えた環境のファイルが残らないようにするため。
-    // 整形もそこでまとめて走る。
-    await backupEnvironments();
+    await formatUncommittedFiles();
   }
 };
 

package/src/github/environments/backup.mts

@@ -1,29 +1,30 @@
 #!/usr/bin/env node
 import 'dotenv/config';
 import * as fs from 'node:fs/promises';
-import * as path from 'node:path';
-import {
-  formatUncommittedFiles,
-  isDirectlyExecuted,
-  makeEmptyDir,
-} from 'ts-repo-utils';
+import { formatUncommittedFiles, isDirectlyExecuted } from 'ts-repo-utils';
+import { clearJsonFilesIn } from '../clear-json-files.mjs';
 import { environmentsDir } from '../constants.mjs';
+import { settingsFilePath } from '../settings-file-path.mjs';
 import { getAllEnvironments } from './api/index.mjs';
 
-const backupDir = path.resolve(environmentsDir, './bk');
-
-/** Settings > Environments の現在値を `bk/` に保存する。 */
+/**
+ * Settings > Environments の現在値を宣言ファイルへ撮り直す。
+ *
+ * ruleset と同じく、先に直下の `*.json` を消してから書く。理由は
+ * {@link clearJsonFilesIn} を参照。
+ */
 export const backupEnvironments = async (
   fmt: boolean = true,
 ): Promise<void> => {
-  await makeEmptyDir(backupDir);
-
   const environments = await getAllEnvironments();
 
+  await clearJsonFilesIn(environmentsDir);
+
   for (const environment of environments) {
+    // `settingsFilePath` が `environmentsDir` の直下であることを確かめている。
     // eslint-disable-next-line security/detect-non-literal-fs-filename
     await fs.writeFile(
-      path.resolve(backupDir, `${environment.name}.json`),
+      settingsFilePath(environmentsDir, environment.name),
       JSON.stringify(environment, undefined, 2),
     );
   }

package/src/github/environments/constants.mts

@@ -59,7 +59,7 @@ export const EnvironmentSettings = t.record({
   /**
    * `custom_branch_policies` が `true` のときの pattern 一覧。
    *
-   * それ以外のときは空配列でなければならない ( `applyEnvironments` が拒否する )。
+   * それ以外のときは空配列でなければならない（`applyEnvironments` が拒否する）。
    * GitHub 側は別エンドポイントだが、「どの ref から deploy できるか」を
    * 決めているのは選択と pattern の組で、片方だけ見ても意味を成さない。
    */

package/src/github/environments/read-environment-contents.mts

@@ -10,10 +10,6 @@ export const readEnvironmentFiles = async (): Promise<
   readonly EnvironmentSettings[]
 > => readFilesIn(environmentsDir);
 
-export const readEnvironmentBackupFiles = async (): Promise<
-  readonly EnvironmentSettings[]
-> => readFilesIn(path.resolve(environmentsDir, './bk'));
-
 const readFilesIn = async (
   dir: string,
 ): Promise<readonly EnvironmentSettings[]> => {

package/src/github/index.mts

@@ -1,9 +1,11 @@
 export * from './actions-settings/index.mjs';
+export * from './clear-json-files.mjs';
 export * from './constants.mjs';
 export * from './environments/index.mjs';
 export * from './pages/index.mjs';
 export * from './repository/index.mjs';
 export * from './resolve-target-repo.mjs';
 export * from './ruleset/index.mjs';
+export * from './settings-file-path.mjs';
 export * from './variables/index.mjs';
 export * from './vulnerability-alerts/index.mjs';

package/src/github/pages/apply.mts

@@ -43,12 +43,6 @@ export const applyPagesSettings = async (): Promise<void> => {
     // eslint-disable-next-line security/detect-non-literal-fs-filename
     await fs.writeFile(settingsPath, str);
 
-    // eslint-disable-next-line security/detect-non-literal-fs-filename
-    await fs.writeFile(
-      path.resolve(pagesSettingsDir, 'bk', settingsJsonName),
-      str,
-    );
-
     await formatUncommittedFiles();
   }
 };

package/src/github/pages/backup.mts

@@ -2,35 +2,44 @@
 import 'dotenv/config';
 import * as fs from 'node:fs/promises';
 import * as path from 'node:path';
-import {
-  formatUncommittedFiles,
-  isDirectlyExecuted,
-  makeEmptyDir,
-} from 'ts-repo-utils';
+import { formatUncommittedFiles, isDirectlyExecuted } from 'ts-repo-utils';
+import { clearJsonFilesIn } from '../clear-json-files.mjs';
 import { pagesSettingsDir, settingsJsonName } from '../constants.mjs';
 import { getPagesSettings } from './api/index.mjs';
 
-const backupDir = path.resolve(pagesSettingsDir, './bk');
-
-/** Settings > Pages の現在値を `bk/` に保存する。 */
+/**
+ * Settings > Pages の現在値を宣言ファイルへ撮り直す。
+ *
+ * **Pages が無効なら宣言も消える。** 他のターゲットと同じ規則にしてある — 撮り
+ * 直したあとに在るものが live から取れたものそのもの、という性質を、ここだけ
+ * 崩さない。無効になったことが `git status` に削除として出る。
+ *
+ * 無効化と読み取り失敗を区別できないという弱点は残るが、`getPagesSettings` が
+ * `undefined` を返すのは 404 のときだけで、それ以外の失敗は例外になる。消えた
+ * 宣言はコミットしなければ失われない。
+ */
 export const backupPagesSettings = async (
   fmt: boolean = true,
 ): Promise<void> => {
-  await makeEmptyDir(backupDir);
-
   const settings = await getPagesSettings();
 
+  await clearJsonFilesIn(pagesSettingsDir);
+
   if (settings === undefined) {
     console.warn(
-      'GitHub Pages is not enabled for this repository; skipping backup.',
+      'GitHub Pages is not enabled for this repository; the declaration was removed.',
     );
 
+    if (fmt) {
+      await formatUncommittedFiles();
+    }
+
     return;
   }
 
   // eslint-disable-next-line security/detect-non-literal-fs-filename
   await fs.writeFile(
-    path.resolve(backupDir, settingsJsonName),
+    path.resolve(pagesSettingsDir, settingsJsonName),
     JSON.stringify(settings, undefined, 2),
   );