reposets 0.2.1 → 0.4.0

package/index.d.ts

@@ -9,11 +9,12 @@
 
 import { AppDirs } from 'xdg-effect';
 import { ConfigFile } from 'xdg-effect';
-import type { ConfigFileService } from 'xdg-effect';
+import { ConfigFileService } from 'xdg-effect';
 import { Context } from 'effect';
 import { Effect } from 'effect';
 import { FileSystem } from '@effect/platform/FileSystem';
-import { Layer } from 'effect';
+import { Layer } from 'effect/Layer';
+import { Layer as Layer_2 } from 'effect';
 import { Option } from 'effect';
 import { Ref } from 'effect';
 import { Schema } from 'effect';
@@ -110,11 +111,35 @@ export declare const CleanupScopeSchema: Schema.Union<[typeof Schema.Boolean, Sc
     preserve: Schema.Array$<typeof Schema.String>;
 }>]>;
 
+declare type CodeScanningGroup = typeof CodeScanningGroupSchema.Type;
+
+declare const CodeScanningGroupSchema: Schema.refine<{
+    readonly state?: "configured" | "not-configured" | undefined;
+    readonly languages?: readonly ("actions" | "c-cpp" | "csharp" | "go" | "java-kotlin" | "javascript-typescript" | "python" | "ruby" | "swift")[] | undefined;
+    readonly query_suite?: "default" | "extended" | undefined;
+    readonly threat_model?: "remote" | "remote_and_local" | undefined;
+    readonly runner_type?: "labeled" | "standard" | undefined;
+    readonly runner_label?: string | undefined;
+}, Schema.Struct<{
+    state: Schema.optional<Schema.Literal<["configured", "not-configured"]>>;
+    languages: Schema.optional<Schema.Array$<Schema.Literal<["actions", "c-cpp", "csharp", "go", "java-kotlin", "javascript-typescript", "python", "ruby", "swift"]>>>;
+    query_suite: Schema.optional<Schema.Literal<["default", "extended"]>>;
+    threat_model: Schema.optional<Schema.Literal<["remote", "remote_and_local"]>>;
+    runner_type: Schema.optional<Schema.Literal<["standard", "labeled"]>>;
+    runner_label: Schema.optional<Schema.SchemaClass<string, string, never>>;
+}>>;
+
 export declare type Config = typeof ConfigSchema.Type;
 
+export declare const CONFIG_FILENAME = "reposets.config.toml";
+
 export { ConfigFile }
 
-export declare const ConfigFilesLive: Layer.Layer<AppDirs | ConfigFileService<any> | XdgResolver, never, FileSystem>;
+/**
+ * Default ConfigFiles layer with no --config flag override.
+ * Used by CLI entrypoint when no flag is provided.
+ */
+export declare const ConfigFilesLive: Layer<AppDirs | ConfigFileService<any> | XdgResolver, never, FileSystem>;
 
 export declare const ConfigSchema: Schema.Struct<{
     owner: Schema.optional<Schema.SchemaClass<string, string, never>>;
@@ -141,6 +166,24 @@ export declare const ConfigSchema: Schema.Struct<{
         merge_commit_message: Schema.optional<Schema.Literal<["PR_BODY", "PR_TITLE", "BLANK"]>>;
         delete_branch_on_merge: Schema.optional<Schema.SchemaClass<boolean, boolean, never>>;
         web_commit_signoff_required: Schema.optional<Schema.SchemaClass<boolean, boolean, never>>;
+        security_and_analysis: Schema.optional<Schema.Struct<{
+            advanced_security: Schema.optional<Schema.Literal<["enabled", "disabled"]>>;
+            code_security: Schema.optional<Schema.Literal<["enabled", "disabled"]>>;
+            secret_scanning: Schema.optional<Schema.Literal<["enabled", "disabled"]>>;
+            secret_scanning_push_protection: Schema.optional<Schema.Literal<["enabled", "disabled"]>>;
+            secret_scanning_ai_detection: Schema.optional<Schema.Literal<["enabled", "disabled"]>>;
+            secret_scanning_non_provider_patterns: Schema.optional<Schema.Literal<["enabled", "disabled"]>>;
+            secret_scanning_delegated_alert_dismissal: Schema.optional<Schema.Literal<["enabled", "disabled"]>>;
+            secret_scanning_delegated_bypass: Schema.optional<Schema.Literal<["enabled", "disabled"]>>;
+            delegated_bypass_reviewers: Schema.optional<Schema.Array$<Schema.Union<[Schema.Struct<{
+                team: Schema.SchemaClass<string, string, never>;
+                mode: Schema.optional<Schema.Literal<["ALWAYS", "EXEMPT"]>>;
+            }>, Schema.Struct<{
+                role: Schema.SchemaClass<string, string, never>;
+                mode: Schema.optional<Schema.Literal<["ALWAYS", "EXEMPT"]>>;
+            }>]>>>;
+            dependabot_security_updates: Schema.optional<Schema.Literal<["enabled", "disabled"]>>;
+        }>>;
     }, readonly [{
         readonly key: typeof Schema.String;
         readonly value: Schema.SchemaClass<unknown, unknown, never>;
@@ -383,6 +426,34 @@ export declare const ConfigSchema: Schema.Struct<{
     }>>, {
         default: () => {};
     }>;
+    security: Schema.optionalWith<Schema.Record$<typeof Schema.String, Schema.refine<{
+        readonly vulnerability_alerts?: boolean | undefined;
+        readonly automated_security_fixes?: boolean | undefined;
+        readonly private_vulnerability_reporting?: boolean | undefined;
+    }, Schema.Struct<{
+        vulnerability_alerts: Schema.optional<Schema.SchemaClass<boolean, boolean, never>>;
+        automated_security_fixes: Schema.optional<Schema.SchemaClass<boolean, boolean, never>>;
+        private_vulnerability_reporting: Schema.optional<Schema.SchemaClass<boolean, boolean, never>>;
+    }>>>, {
+        default: () => {};
+    }>;
+    code_scanning: Schema.optionalWith<Schema.Record$<typeof Schema.String, Schema.refine<{
+        readonly state?: "configured" | "not-configured" | undefined;
+        readonly languages?: readonly ("actions" | "c-cpp" | "csharp" | "go" | "java-kotlin" | "javascript-typescript" | "python" | "ruby" | "swift")[] | undefined;
+        readonly query_suite?: "default" | "extended" | undefined;
+        readonly threat_model?: "remote" | "remote_and_local" | undefined;
+        readonly runner_type?: "labeled" | "standard" | undefined;
+        readonly runner_label?: string | undefined;
+    }, Schema.Struct<{
+        state: Schema.optional<Schema.Literal<["configured", "not-configured"]>>;
+        languages: Schema.optional<Schema.Array$<Schema.Literal<["actions", "c-cpp", "csharp", "go", "java-kotlin", "javascript-typescript", "python", "ruby", "swift"]>>>;
+        query_suite: Schema.optional<Schema.Literal<["default", "extended"]>>;
+        threat_model: Schema.optional<Schema.Literal<["remote", "remote_and_local"]>>;
+        runner_type: Schema.optional<Schema.Literal<["standard", "labeled"]>>;
+        runner_label: Schema.optional<Schema.SchemaClass<string, string, never>>;
+    }>>>, {
+        default: () => {};
+    }>;
     groups: Schema.Record$<typeof Schema.String, Schema.Struct<{
         owner: Schema.optional<Schema.SchemaClass<string, string, never>>;
         repos: Schema.Array$<typeof Schema.String>;
@@ -400,6 +471,8 @@ export declare const ConfigSchema: Schema.Struct<{
             environments: Schema.optional<Schema.Record$<typeof Schema.String, Schema.Array$<typeof Schema.String>>>;
         }>>;
         rulesets: Schema.optional<Schema.Array$<typeof Schema.String>>;
+        security: Schema.optional<Schema.Array$<typeof Schema.String>>;
+        code_scanning: Schema.optional<Schema.Array$<typeof Schema.String>>;
         cleanup: Schema.optional<Schema.Struct<{
             secrets: Schema.optionalWith<Schema.Struct<{
                 actions: Schema.optionalWith<Schema.Union<[typeof Schema.Boolean, Schema.Struct<{
@@ -478,7 +551,7 @@ export declare class CredentialResolver extends CredentialResolver_base {
 
 declare const CredentialResolver_base: Context.TagClass<CredentialResolver, "CredentialResolver", CredentialResolverService>;
 
-export declare const CredentialResolverLive: Layer.Layer<CredentialResolver, never, OnePasswordClient>;
+export declare const CredentialResolverLive: Layer_2.Layer<CredentialResolver, never, OnePasswordClient>;
 
 declare interface CredentialResolverService {
     readonly resolveAll: (profile: CredentialProfile, basePath: string) => Effect.Effect<Map<string, string>, ResolveError>;
@@ -486,6 +559,8 @@ declare interface CredentialResolverService {
 
 export declare type Credentials = typeof CredentialsSchema.Type;
 
+export declare const CREDENTIALS_FILENAME = "reposets.credentials.toml";
+
 export declare const CredentialsSchema: Schema.Struct<{
     profiles: Schema.optionalWith<Schema.Record$<typeof Schema.String, Schema.Struct<{
         github_token: Schema.SchemaClass<string, string, never>;
@@ -527,7 +602,7 @@ export declare class GitHubClient extends GitHubClient_base {
 
 declare const GitHubClient_base: Context.TagClass<GitHubClient, "GitHubClient", GitHubClientService>;
 
-export declare function GitHubClientLive(token: string): Layer.Layer<GitHubClient>;
+export declare function GitHubClientLive(token: string): Layer_2.Layer<GitHubClient>;
 
 declare interface GitHubClientService {
     readonly getOwnerType: (owner: string) => Effect.Effect<OwnerType, GitHubApiError>;
@@ -550,10 +625,20 @@ declare interface GitHubClientService {
     readonly deleteEnvironment: (owner: string, repo: string, name: string) => Effect.Effect<void, GitHubApiError>;
     readonly deleteEnvironmentSecret: (owner: string, repo: string, envName: string, name: string) => Effect.Effect<void, GitHubApiError>;
     readonly deleteEnvironmentVariable: (owner: string, repo: string, envName: string, name: string) => Effect.Effect<void, GitHubApiError>;
+    readonly getVulnerabilityAlerts: (owner: string, repo: string) => Effect.Effect<boolean, GitHubApiError>;
+    readonly setVulnerabilityAlerts: (owner: string, repo: string, enabled: boolean) => Effect.Effect<void, GitHubApiError>;
+    readonly getAutomatedSecurityFixes: (owner: string, repo: string) => Effect.Effect<boolean, GitHubApiError>;
+    readonly setAutomatedSecurityFixes: (owner: string, repo: string, enabled: boolean) => Effect.Effect<void, GitHubApiError>;
+    readonly getPrivateVulnerabilityReporting: (owner: string, repo: string) => Effect.Effect<boolean, GitHubApiError>;
+    readonly setPrivateVulnerabilityReporting: (owner: string, repo: string, enabled: boolean) => Effect.Effect<void, GitHubApiError>;
+    readonly updateCodeScanningDefaultSetup: (owner: string, repo: string, config: CodeScanningGroup) => Effect.Effect<void, GitHubApiError>;
+    readonly listRepoLanguages: (owner: string, repo: string) => Effect.Effect<ReadonlyArray<string>, GitHubApiError>;
+    readonly resolveTeamId: (org: string, slug: string) => Effect.Effect<number, GitHubApiError>;
+    readonly resolveRoleId: (org: string, name: string) => Effect.Effect<number, GitHubApiError>;
 }
 
 export declare function GitHubClientTest(): {
-    layer: Layer.Layer<GitHubClient>;
+    layer: Layer_2.Layer<GitHubClient>;
     calls: () => RecordedCall[];
 };
 
@@ -576,6 +661,8 @@ export declare const GroupSchema: Schema.Struct<{
         environments: Schema.optional<Schema.Record$<typeof Schema.String, Schema.Array$<typeof Schema.String>>>;
     }>>;
     rulesets: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    security: Schema.optional<Schema.Array$<typeof Schema.String>>;
+    code_scanning: Schema.optional<Schema.Array$<typeof Schema.String>>;
     cleanup: Schema.optional<Schema.Struct<{
         secrets: Schema.optionalWith<Schema.Struct<{
             actions: Schema.optionalWith<Schema.Union<[typeof Schema.Boolean, Schema.Struct<{
@@ -636,35 +723,31 @@ export declare const GroupSchema: Schema.Struct<{
     }>>;
 }>;
 
-/**
- * Load config using the ConfigFileService. When a --config flag is provided,
- * uses loadFrom with the resolved path. Otherwise uses discover to get both
- * the config value and the file path (for configDir derivation).
- *
- * Returns config and configDir where configDir is the directory containing
- * the config file.
- */
-export declare function loadConfigWithDir(configFile: ConfigFileService<Config>, configFlag: Option.Option<string>): Effect.Effect<{
-    config: Config;
-    configDir: string;
-}, XdgConfigError>;
-
 export declare type LogLevel = typeof LogLevelSchema.Type;
 
 export declare const LogLevelSchema: Schema.Literal<["silent", "info", "verbose", "debug"]>;
 
+/**
+ * Creates a live Layer providing both config and credentials file services.
+ * When configFlag is Some and points to a directory, prepends StaticDir resolver.
+ * When configFlag is Some and points to a file, prepends ExplicitPath resolver.
+ * Always includes UpwardWalk + XdgConfigResolver as fallback resolvers.
+ * Passes validateConfigRefs as the validate callback on the config spec.
+ */
+export declare function makeConfigFilesLive(configFlag: Option.Option<string>): Layer<AppDirs | ConfigFileService<any> | XdgResolver, never, FileSystem>;
+
 export declare class OnePasswordClient extends OnePasswordClient_base {
 }
 
 declare const OnePasswordClient_base: Context.TagClass<OnePasswordClient, "OnePasswordClient", OnePasswordClientService>;
 
-export declare const OnePasswordClientLive: Layer.Layer<OnePasswordClient, never, never>;
+export declare const OnePasswordClientLive: Layer_2.Layer<OnePasswordClient, never, never>;
 
 declare interface OnePasswordClientService {
     readonly resolve: (reference: string, serviceAccountToken: string) => Effect.Effect<string, OnePasswordError>;
 }
 
-export declare function OnePasswordClientTest(stubs: Record<string, string>): Layer.Layer<OnePasswordClient>;
+export declare function OnePasswordClientTest(stubs: Record<string, string>): Layer_2.Layer<OnePasswordClient>;
 
 export declare class OnePasswordError extends OnePasswordError_base<{
     readonly message: string;
@@ -682,7 +765,7 @@ export declare interface RecordedCall {
     args: Record<string, unknown>;
 }
 
-export declare const ReposetsConfigFile: Tag<ConfigFileService<{
+export declare const ReposetsConfigFile: Tag<ConfigFileService<    {
 readonly owner?: string | undefined;
 readonly log_level: "debug" | "info" | "silent" | "verbose";
 readonly settings: {
@@ -707,6 +790,24 @@ readonly merge_commit_title?: "MERGE_MESSAGE" | "PR_TITLE" | undefined;
 readonly merge_commit_message?: "BLANK" | "PR_BODY" | "PR_TITLE" | undefined;
 readonly delete_branch_on_merge?: boolean | undefined;
 readonly web_commit_signoff_required?: boolean | undefined;
+readonly security_and_analysis?: {
+readonly advanced_security?: "disabled" | "enabled" | undefined;
+readonly code_security?: "disabled" | "enabled" | undefined;
+readonly secret_scanning?: "disabled" | "enabled" | undefined;
+readonly secret_scanning_push_protection?: "disabled" | "enabled" | undefined;
+readonly secret_scanning_ai_detection?: "disabled" | "enabled" | undefined;
+readonly secret_scanning_non_provider_patterns?: "disabled" | "enabled" | undefined;
+readonly secret_scanning_delegated_alert_dismissal?: "disabled" | "enabled" | undefined;
+readonly secret_scanning_delegated_bypass?: "disabled" | "enabled" | undefined;
+readonly delegated_bypass_reviewers?: readonly ({
+readonly team: string;
+readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
+} | {
+readonly role: string;
+readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
+})[] | undefined;
+readonly dependabot_security_updates?: "disabled" | "enabled" | undefined;
+} | undefined;
 };
 };
 readonly secrets: {
@@ -937,6 +1038,23 @@ readonly type: "branch" | "tag";
 }[] | undefined;
 };
 };
+readonly security: {
+readonly [x: string]: {
+readonly vulnerability_alerts?: boolean | undefined;
+readonly automated_security_fixes?: boolean | undefined;
+readonly private_vulnerability_reporting?: boolean | undefined;
+};
+};
+readonly code_scanning: {
+readonly [x: string]: {
+readonly state?: "configured" | "not-configured" | undefined;
+readonly languages?: readonly ("actions" | "c-cpp" | "csharp" | "go" | "java-kotlin" | "javascript-typescript" | "python" | "ruby" | "swift")[] | undefined;
+readonly query_suite?: "default" | "extended" | undefined;
+readonly threat_model?: "remote" | "remote_and_local" | undefined;
+readonly runner_type?: "labeled" | "standard" | undefined;
+readonly runner_label?: string | undefined;
+};
+};
 readonly groups: {
 readonly [x: string]: {
 readonly owner?: string | undefined;
@@ -959,6 +1077,8 @@ readonly [x: string]: readonly string[];
 } | undefined;
 } | undefined;
 readonly rulesets?: readonly string[] | undefined;
+readonly security?: readonly string[] | undefined;
+readonly code_scanning?: readonly string[] | undefined;
 readonly cleanup?: {
 readonly secrets: {
 readonly actions: boolean | {
@@ -991,7 +1111,7 @@ readonly preserve: readonly string[];
 } | undefined;
 };
 };
-}>, ConfigFileService<{
+}>, ConfigFileService<    {
 readonly owner?: string | undefined;
 readonly log_level: "debug" | "info" | "silent" | "verbose";
 readonly settings: {
@@ -1016,6 +1136,24 @@ readonly merge_commit_title?: "MERGE_MESSAGE" | "PR_TITLE" | undefined;
 readonly merge_commit_message?: "BLANK" | "PR_BODY" | "PR_TITLE" | undefined;
 readonly delete_branch_on_merge?: boolean | undefined;
 readonly web_commit_signoff_required?: boolean | undefined;
+readonly security_and_analysis?: {
+readonly advanced_security?: "disabled" | "enabled" | undefined;
+readonly code_security?: "disabled" | "enabled" | undefined;
+readonly secret_scanning?: "disabled" | "enabled" | undefined;
+readonly secret_scanning_push_protection?: "disabled" | "enabled" | undefined;
+readonly secret_scanning_ai_detection?: "disabled" | "enabled" | undefined;
+readonly secret_scanning_non_provider_patterns?: "disabled" | "enabled" | undefined;
+readonly secret_scanning_delegated_alert_dismissal?: "disabled" | "enabled" | undefined;
+readonly secret_scanning_delegated_bypass?: "disabled" | "enabled" | undefined;
+readonly delegated_bypass_reviewers?: readonly ({
+readonly team: string;
+readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
+} | {
+readonly role: string;
+readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
+})[] | undefined;
+readonly dependabot_security_updates?: "disabled" | "enabled" | undefined;
+} | undefined;
 };
 };
 readonly secrets: {
@@ -1246,6 +1384,23 @@ readonly type: "branch" | "tag";
 }[] | undefined;
 };
 };
+readonly security: {
+readonly [x: string]: {
+readonly vulnerability_alerts?: boolean | undefined;
+readonly automated_security_fixes?: boolean | undefined;
+readonly private_vulnerability_reporting?: boolean | undefined;
+};
+};
+readonly code_scanning: {
+readonly [x: string]: {
+readonly state?: "configured" | "not-configured" | undefined;
+readonly languages?: readonly ("actions" | "c-cpp" | "csharp" | "go" | "java-kotlin" | "javascript-typescript" | "python" | "ruby" | "swift")[] | undefined;
+readonly query_suite?: "default" | "extended" | undefined;
+readonly threat_model?: "remote" | "remote_and_local" | undefined;
+readonly runner_type?: "labeled" | "standard" | undefined;
+readonly runner_label?: string | undefined;
+};
+};
 readonly groups: {
 readonly [x: string]: {
 readonly owner?: string | undefined;
@@ -1268,6 +1423,8 @@ readonly [x: string]: readonly string[];
 } | undefined;
 } | undefined;
 readonly rulesets?: readonly string[] | undefined;
+readonly security?: readonly string[] | undefined;
+readonly code_scanning?: readonly string[] | undefined;
 readonly cleanup?: {
 readonly secrets: {
 readonly actions: boolean | {
@@ -1302,7 +1459,7 @@ readonly preserve: readonly string[];
 };
 }>>;
 
-export declare const ReposetsCredentialsFile: Tag<ConfigFileService<{
+export declare const ReposetsCredentialsFile: Tag<ConfigFileService<    {
 readonly profiles: {
 readonly [x: string]: {
 readonly github_token: string;
@@ -1322,7 +1479,7 @@ readonly [x: string]: unknown;
 } | undefined;
 };
 };
-}>, ConfigFileService<{
+}>, ConfigFileService<    {
 readonly profiles: {
 readonly [x: string]: {
 readonly github_token: string;
@@ -1344,12 +1501,6 @@ readonly [x: string]: unknown;
 };
 }>>;
 
-/**
- * Resolves a --config flag to a file path. If the flag points to a directory,
- * appends the config filename. If omitted, returns undefined.
- */
-export declare function resolveConfigFlag(configFlag: Option.Option<string>): string | undefined;
-
 export declare type ResolvedRef = typeof ResolvedRefSchema.Type;
 
 export declare const ResolvedRefSchema: Schema.Struct<{
@@ -1613,7 +1764,7 @@ export declare class SyncEngine extends SyncEngine_base {
 
 declare const SyncEngine_base: Context.TagClass<SyncEngine, "SyncEngine", SyncEngineService>;
 
-export declare const SyncEngineLive: Layer.Layer<SyncEngine, never, CredentialResolver | GitHubClient | SyncLogger>;
+export declare const SyncEngineLive: Layer_2.Layer<SyncEngine, never, CredentialResolver | GitHubClient | SyncLogger>;
 
 declare interface SyncEngineService {
     readonly syncAll: (config: Config, credentials: Credentials, options: SyncOptions) => Effect.Effect<void, SyncError>;
@@ -1639,13 +1790,13 @@ export declare interface SyncLoggerConfig {
     readonly output?: Ref.Ref<string[]>;
 }
 
-export declare function SyncLoggerLive(config: SyncLoggerConfig): Layer.Layer<SyncLogger>;
+export declare function SyncLoggerLive(config: SyncLoggerConfig): Layer_2.Layer<SyncLogger>;
 
 declare interface SyncLoggerService {
     readonly groupStart: (name: string, repoCount: number) => Effect.Effect<void>;
     readonly repoStart: (owner: string, repo: string) => Effect.Effect<void>;
     readonly repoSkip: (owner: string, repo: string, reason: string) => Effect.Effect<void>;
-    readonly syncSummary: (resource: "secret" | "variable" | "ruleset" | "environment", count: number, detail: string) => Effect.Effect<void>;
+    readonly syncSummary: (resource: "secret" | "variable" | "ruleset" | "environment" | "security feature" | "code scanning", count: number, detail: string) => Effect.Effect<void>;
     readonly settingsApplied: () => Effect.Effect<void>;
     readonly cleanupSummary: (resource: string, count: number, names: string[]) => Effect.Effect<void>;
     readonly syncOperation: (verb: "sync" | "apply" | "delete" | "skip", resource: string, name: string, detail?: string, source?: string) => Effect.Effect<void>;
@@ -1661,6 +1812,15 @@ declare interface SyncOptions {
     readonly configDir: string;
 }
 
+/**
+ * Validates all internal cross-references in a parsed config. Checks that
+ * every group's settings, secrets, variables, rulesets, and environments
+ * references point to defined top-level sections, and that environment-scoped
+ * secret/variable groups reference defined environments. Collects ALL errors
+ * into a single ConfigError.
+ */
+export declare function validateConfigRefs(config: Config): Effect.Effect<Config, XdgConfigError>;
+
 export declare type VariableGroup = typeof VariableGroupSchema.Type;
 
 export declare const VariableGroupSchema: Schema.Union<[Schema.Struct<{

package/index.js

@@ -1,2 +1,2 @@
-export { BypassActorSchema, CleanupSchema, CleanupScopeSchema, ConfigFilesLive, ConfigSchema, CredentialProfileSchema, CredentialResolver, CredentialResolverLive, CredentialsSchema, GitHubApiError, GitHubClient, GitHubClientLive, GitHubClientTest, GroupSchema, LogLevelSchema, OnePasswordClient, OnePasswordClientLive, OnePasswordClientTest, OnePasswordError, ReposetsConfigFile, ReposetsCredentialsFile, ResolveError, ResolveSectionSchema, ResolvedRefSchema, RulesetSchema, SecretGroupSchema, SyncEngine, SyncEngineLive, SyncError, SyncLogger, SyncLoggerLive, VariableGroupSchema, buildRulesetPayload, encryptSecret, loadConfigWithDir, resolveConfigFlag } from "./500.js";
+export { BypassActorSchema, CONFIG_FILENAME, CREDENTIALS_FILENAME, CleanupSchema, CleanupScopeSchema, ConfigFilesLive, ConfigSchema, CredentialProfileSchema, CredentialResolver, CredentialResolverLive, CredentialsSchema, GitHubApiError, GitHubClient, GitHubClientLive, GitHubClientTest, GroupSchema, LogLevelSchema, OnePasswordClient, OnePasswordClientLive, OnePasswordClientTest, OnePasswordError, ReposetsConfigFile, ReposetsCredentialsFile, ResolveError, ResolveSectionSchema, ResolvedRefSchema, RulesetSchema, SecretGroupSchema, SyncEngine, SyncEngineLive, SyncError, SyncLogger, SyncLoggerLive, VariableGroupSchema, buildRulesetPayload, encryptSecret, makeConfigFilesLive, validateConfigRefs } from "./500.js";
 export { AppDirs, ConfigError as XdgConfigError, ConfigFile } from "xdg-effect";

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "reposets",
-  "version": "0.2.1",
+  "version": "0.4.0",
   "private": false,
   "description": "CLI tool to sync GitHub repo settings, secrets and rulesets across personal repositories",
   "keywords": [
@@ -47,14 +47,14 @@
   "dependencies": {
     "@1password/sdk": "^0.4.0",
     "@effect/cli": "^0.75.1",
-    "@effect/platform": "^0.96.0",
+    "@effect/platform": "^0.96.1",
     "@effect/platform-node": "^0.106.0",
     "@octokit/rest": "^22.0.1",
     "blakejs": "^1.2.1",
     "effect": "^3.21.1",
     "smol-toml": ">=1.6.1",
     "tweetnacl": "^1.0.3",
-    "xdg-effect": "^0.3.3"
+    "xdg-effect": "^1.0.0"
   },
   "engines": {
     "node": ">=20.0.0"

package/tsdoc-metadata.json

@@ -5,7 +5,7 @@
   "toolPackages": [
     {
       "packageName": "@microsoft/api-extractor",
-      "packageVersion": "7.58.5"
+      "packageVersion": "7.58.7"
     }
   ]
 }