reposets 0.4.2 → 0.4.3

package/cli/commands/doctor.js

@@ -6,7 +6,7 @@ import { parse } from "smol-toml";
 
 //#region src/cli/commands/doctor.ts
 const configOption = Options.file("config").pipe(Options.withDescription("Path to config directory or reposets.config.toml file"), Options.optional);
-const KNOWN_CONFIG_KEYS = new Set([
+const KNOWN_CONFIG_KEYS = /* @__PURE__ */ new Set([
 	"owner",
 	"log_level",
 	"settings",
@@ -18,7 +18,7 @@ const KNOWN_CONFIG_KEYS = new Set([
 	"code_scanning",
 	"groups"
 ]);
-const KNOWN_GROUP_KEYS = new Set([
+const KNOWN_GROUP_KEYS = /* @__PURE__ */ new Set([
 	"owner",
 	"repos",
 	"credentials",
@@ -31,19 +31,19 @@ const KNOWN_GROUP_KEYS = new Set([
 	"code_scanning",
 	"cleanup"
 ]);
-const KNOWN_CLEANUP_KEYS = new Set([
+const KNOWN_CLEANUP_KEYS = /* @__PURE__ */ new Set([
 	"secrets",
 	"variables",
 	"rulesets",
 	"environments"
 ]);
-const KNOWN_CLEANUP_SECRETS_KEYS = new Set([
+const KNOWN_CLEANUP_SECRETS_KEYS = /* @__PURE__ */ new Set([
 	"actions",
 	"dependabot",
 	"codespaces",
 	"environments"
 ]);
-const KNOWN_CLEANUP_VARIABLES_KEYS = new Set(["actions", "environments"]);
+const KNOWN_CLEANUP_VARIABLES_KEYS = /* @__PURE__ */ new Set(["actions", "environments"]);
 function findClosestMatch(key, known) {
 	let best;
 	let bestDist = Number.POSITIVE_INFINITY;

package/index.d.ts

@@ -877,18 +877,58 @@ declare function buildRulesetPayload(ruleset: Ruleset): RulesetPayload;
 declare const CONFIG_FILENAME = "reposets.config.toml";
 declare const CREDENTIALS_FILENAME = "reposets.credentials.toml";
 declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effect").ConfigFileService<{
-  readonly environments: {
+  readonly code_scanning: {
     readonly [x: string]: {
-      readonly reviewers?: readonly {
-        readonly type: "Team" | "User";
-        readonly id: number;
-      }[] | undefined;
-      readonly wait_timer?: number | undefined;
-      readonly prevent_self_review?: boolean | undefined;
-      readonly deployment_branches?: "all" | "protected" | readonly {
-        readonly name: string;
-        readonly type: "branch" | "tag";
-      }[] | undefined;
+      readonly state?: "configured" | "not-configured" | undefined;
+      readonly languages?: readonly ("actions" | "c-cpp" | "csharp" | "go" | "java-kotlin" | "javascript-typescript" | "python" | "ruby" | "swift")[] | undefined;
+      readonly query_suite?: "default" | "extended" | undefined;
+      readonly threat_model?: "remote" | "remote_and_local" | undefined;
+      readonly runner_type?: "standard" | "labeled" | undefined;
+      readonly runner_label?: string | undefined;
+    };
+  };
+  readonly owner?: string | undefined;
+  readonly log_level: "silent" | "info" | "verbose" | "debug";
+  readonly settings: {
+    readonly [x: string]: {
+      readonly [x: string]: unknown;
+      readonly allow_forking?: boolean | undefined;
+      readonly is_template?: boolean | undefined;
+      readonly has_wiki?: boolean | undefined;
+      readonly has_issues?: boolean | undefined;
+      readonly has_projects?: boolean | undefined;
+      readonly has_discussions?: boolean | undefined;
+      readonly has_sponsorships?: boolean | undefined;
+      readonly has_pull_requests?: boolean | undefined;
+      readonly allow_merge_commit?: boolean | undefined;
+      readonly allow_squash_merge?: boolean | undefined;
+      readonly allow_rebase_merge?: boolean | undefined;
+      readonly allow_auto_merge?: boolean | undefined;
+      readonly allow_update_branch?: boolean | undefined;
+      readonly squash_merge_commit_title?: "PR_TITLE" | "COMMIT_OR_PR_TITLE" | undefined;
+      readonly squash_merge_commit_message?: "PR_BODY" | "COMMIT_MESSAGES" | "BLANK" | undefined;
+      readonly merge_commit_title?: "PR_TITLE" | "MERGE_MESSAGE" | undefined;
+      readonly merge_commit_message?: "PR_TITLE" | "PR_BODY" | "BLANK" | undefined;
+      readonly delete_branch_on_merge?: boolean | undefined;
+      readonly web_commit_signoff_required?: boolean | undefined;
+      readonly security_and_analysis?: {
+        readonly advanced_security?: "disabled" | "enabled" | undefined;
+        readonly code_security?: "disabled" | "enabled" | undefined;
+        readonly secret_scanning?: "disabled" | "enabled" | undefined;
+        readonly secret_scanning_push_protection?: "disabled" | "enabled" | undefined;
+        readonly secret_scanning_ai_detection?: "disabled" | "enabled" | undefined;
+        readonly secret_scanning_non_provider_patterns?: "disabled" | "enabled" | undefined;
+        readonly secret_scanning_delegated_alert_dismissal?: "disabled" | "enabled" | undefined;
+        readonly secret_scanning_delegated_bypass?: "disabled" | "enabled" | undefined;
+        readonly delegated_bypass_reviewers?: readonly ({
+          readonly team: string;
+          readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
+        } | {
+          readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
+          readonly role: string;
+        })[] | undefined;
+        readonly dependabot_security_updates?: "disabled" | "enabled" | undefined;
+      } | undefined;
     };
   };
   readonly secrets: {
@@ -928,11 +968,6 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
   readonly rulesets: {
     readonly [x: string]: {
       readonly name: string;
-      readonly code_scanning?: readonly {
-        readonly tool: string;
-        readonly alerts: "all" | "none" | "errors" | "errors_and_warnings";
-        readonly security_alerts: "all" | "none" | "critical" | "high_or_higher" | "medium_or_higher";
-      }[] | undefined;
       readonly type: "branch";
       readonly pull_requests?: {
         readonly approvals: number;
@@ -963,6 +998,11 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
         readonly draft_prs?: boolean | undefined;
         readonly on_push?: boolean | undefined;
       } | undefined;
+      readonly code_scanning?: readonly {
+        readonly tool: string;
+        readonly alerts: "all" | "none" | "errors" | "errors_and_warnings";
+        readonly security_alerts: "all" | "none" | "critical" | "high_or_higher" | "medium_or_higher";
+      }[] | undefined;
       readonly workflows?: {
         readonly on_creation?: boolean | undefined;
         readonly required: readonly {
@@ -975,9 +1015,9 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
         }[];
       } | undefined;
       readonly branch_name?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
       readonly enforcement: "disabled" | "active" | "evaluate";
@@ -1020,21 +1060,21 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
         }[];
       } | undefined;
       readonly commit_message?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
       readonly commit_author_email?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
       readonly committer_email?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
     } | {
@@ -1080,72 +1120,43 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
         }[];
       } | undefined;
       readonly commit_message?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
       readonly commit_author_email?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
       readonly committer_email?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
       readonly tag_name?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
     };
   };
-  readonly owner?: string | undefined;
-  readonly settings: {
+  readonly environments: {
     readonly [x: string]: {
-      readonly [x: string]: unknown;
-      readonly is_template?: boolean | undefined;
-      readonly has_wiki?: boolean | undefined;
-      readonly has_issues?: boolean | undefined;
-      readonly has_projects?: boolean | undefined;
-      readonly has_discussions?: boolean | undefined;
-      readonly has_sponsorships?: boolean | undefined;
-      readonly has_pull_requests?: boolean | undefined;
-      readonly allow_forking?: boolean | undefined;
-      readonly allow_merge_commit?: boolean | undefined;
-      readonly allow_squash_merge?: boolean | undefined;
-      readonly allow_rebase_merge?: boolean | undefined;
-      readonly allow_auto_merge?: boolean | undefined;
-      readonly allow_update_branch?: boolean | undefined;
-      readonly squash_merge_commit_title?: "PR_TITLE" | "COMMIT_OR_PR_TITLE" | undefined;
-      readonly squash_merge_commit_message?: "PR_BODY" | "COMMIT_MESSAGES" | "BLANK" | undefined;
-      readonly merge_commit_title?: "PR_TITLE" | "MERGE_MESSAGE" | undefined;
-      readonly merge_commit_message?: "PR_TITLE" | "PR_BODY" | "BLANK" | undefined;
-      readonly delete_branch_on_merge?: boolean | undefined;
-      readonly web_commit_signoff_required?: boolean | undefined;
-      readonly security_and_analysis?: {
-        readonly advanced_security?: "enabled" | "disabled" | undefined;
-        readonly code_security?: "enabled" | "disabled" | undefined;
-        readonly secret_scanning?: "enabled" | "disabled" | undefined;
-        readonly secret_scanning_push_protection?: "enabled" | "disabled" | undefined;
-        readonly secret_scanning_ai_detection?: "enabled" | "disabled" | undefined;
-        readonly secret_scanning_non_provider_patterns?: "enabled" | "disabled" | undefined;
-        readonly secret_scanning_delegated_alert_dismissal?: "enabled" | "disabled" | undefined;
-        readonly secret_scanning_delegated_bypass?: "enabled" | "disabled" | undefined;
-        readonly delegated_bypass_reviewers?: readonly ({
-          readonly team: string;
-          readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
-        } | {
-          readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
-          readonly role: string;
-        })[] | undefined;
-        readonly dependabot_security_updates?: "enabled" | "disabled" | undefined;
-      } | undefined;
+      readonly reviewers?: readonly {
+        readonly type: "Team" | "User";
+        readonly id: number;
+      }[] | undefined;
+      readonly wait_timer?: number | undefined;
+      readonly prevent_self_review?: boolean | undefined;
+      readonly deployment_branches?: "all" | "protected" | readonly {
+        readonly name: string;
+        readonly type: "branch" | "tag";
+      }[] | undefined;
     };
   };
   readonly security: {
@@ -1155,46 +1166,35 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
       readonly private_vulnerability_reporting?: boolean | undefined;
     };
   };
-  readonly code_scanning: {
-    readonly [x: string]: {
-      readonly state?: "configured" | "not-configured" | undefined;
-      readonly languages?: readonly ("actions" | "c-cpp" | "csharp" | "go" | "java-kotlin" | "javascript-typescript" | "python" | "ruby" | "swift")[] | undefined;
-      readonly query_suite?: "default" | "extended" | undefined;
-      readonly threat_model?: "remote" | "remote_and_local" | undefined;
-      readonly runner_type?: "standard" | "labeled" | undefined;
-      readonly runner_label?: string | undefined;
-    };
-  };
-  readonly log_level: "silent" | "info" | "verbose" | "debug";
   readonly groups: {
     readonly [x: string]: {
-      readonly environments?: readonly string[] | undefined;
+      readonly code_scanning?: readonly string[] | undefined;
+      readonly owner?: string | undefined;
+      readonly settings?: readonly string[] | undefined;
       readonly secrets?: {
-        readonly actions?: readonly string[] | undefined;
-        readonly dependabot?: readonly string[] | undefined;
-        readonly codespaces?: readonly string[] | undefined;
         readonly environments?: {
           readonly [x: string]: readonly string[];
         } | undefined;
+        readonly actions?: readonly string[] | undefined;
+        readonly dependabot?: readonly string[] | undefined;
+        readonly codespaces?: readonly string[] | undefined;
       } | undefined;
       readonly variables?: {
-        readonly actions?: readonly string[] | undefined;
         readonly environments?: {
           readonly [x: string]: readonly string[];
         } | undefined;
+        readonly actions?: readonly string[] | undefined;
       } | undefined;
       readonly rulesets?: readonly string[] | undefined;
-      readonly owner?: string | undefined;
+      readonly environments?: readonly string[] | undefined;
+      readonly security?: readonly string[] | undefined;
       readonly repos: readonly string[];
       readonly credentials?: string | undefined;
-      readonly settings?: readonly string[] | undefined;
-      readonly security?: readonly string[] | undefined;
-      readonly code_scanning?: readonly string[] | undefined;
       readonly cleanup?: {
-        readonly environments: boolean | {
-          readonly preserve: readonly string[];
-        };
         readonly secrets: {
+          readonly environments: boolean | {
+            readonly preserve: readonly string[];
+          };
           readonly actions: boolean | {
             readonly preserve: readonly string[];
           };
@@ -1204,37 +1204,77 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
           readonly codespaces: boolean | {
             readonly preserve: readonly string[];
           };
-          readonly environments: boolean | {
-            readonly preserve: readonly string[];
-          };
         };
         readonly variables: {
-          readonly actions: boolean | {
+          readonly environments: boolean | {
             readonly preserve: readonly string[];
           };
-          readonly environments: boolean | {
+          readonly actions: boolean | {
             readonly preserve: readonly string[];
           };
         };
         readonly rulesets: boolean | {
           readonly preserve: readonly string[];
         };
+        readonly environments: boolean | {
+          readonly preserve: readonly string[];
+        };
       } | undefined;
     };
   };
 }>, import("xdg-effect").ConfigFileService<{
-  readonly environments: {
+  readonly code_scanning: {
     readonly [x: string]: {
-      readonly reviewers?: readonly {
-        readonly type: "Team" | "User";
-        readonly id: number;
-      }[] | undefined;
-      readonly wait_timer?: number | undefined;
-      readonly prevent_self_review?: boolean | undefined;
-      readonly deployment_branches?: "all" | "protected" | readonly {
-        readonly name: string;
-        readonly type: "branch" | "tag";
-      }[] | undefined;
+      readonly state?: "configured" | "not-configured" | undefined;
+      readonly languages?: readonly ("actions" | "c-cpp" | "csharp" | "go" | "java-kotlin" | "javascript-typescript" | "python" | "ruby" | "swift")[] | undefined;
+      readonly query_suite?: "default" | "extended" | undefined;
+      readonly threat_model?: "remote" | "remote_and_local" | undefined;
+      readonly runner_type?: "standard" | "labeled" | undefined;
+      readonly runner_label?: string | undefined;
+    };
+  };
+  readonly owner?: string | undefined;
+  readonly log_level: "silent" | "info" | "verbose" | "debug";
+  readonly settings: {
+    readonly [x: string]: {
+      readonly [x: string]: unknown;
+      readonly allow_forking?: boolean | undefined;
+      readonly is_template?: boolean | undefined;
+      readonly has_wiki?: boolean | undefined;
+      readonly has_issues?: boolean | undefined;
+      readonly has_projects?: boolean | undefined;
+      readonly has_discussions?: boolean | undefined;
+      readonly has_sponsorships?: boolean | undefined;
+      readonly has_pull_requests?: boolean | undefined;
+      readonly allow_merge_commit?: boolean | undefined;
+      readonly allow_squash_merge?: boolean | undefined;
+      readonly allow_rebase_merge?: boolean | undefined;
+      readonly allow_auto_merge?: boolean | undefined;
+      readonly allow_update_branch?: boolean | undefined;
+      readonly squash_merge_commit_title?: "PR_TITLE" | "COMMIT_OR_PR_TITLE" | undefined;
+      readonly squash_merge_commit_message?: "PR_BODY" | "COMMIT_MESSAGES" | "BLANK" | undefined;
+      readonly merge_commit_title?: "PR_TITLE" | "MERGE_MESSAGE" | undefined;
+      readonly merge_commit_message?: "PR_TITLE" | "PR_BODY" | "BLANK" | undefined;
+      readonly delete_branch_on_merge?: boolean | undefined;
+      readonly web_commit_signoff_required?: boolean | undefined;
+      readonly security_and_analysis?: {
+        readonly advanced_security?: "disabled" | "enabled" | undefined;
+        readonly code_security?: "disabled" | "enabled" | undefined;
+        readonly secret_scanning?: "disabled" | "enabled" | undefined;
+        readonly secret_scanning_push_protection?: "disabled" | "enabled" | undefined;
+        readonly secret_scanning_ai_detection?: "disabled" | "enabled" | undefined;
+        readonly secret_scanning_non_provider_patterns?: "disabled" | "enabled" | undefined;
+        readonly secret_scanning_delegated_alert_dismissal?: "disabled" | "enabled" | undefined;
+        readonly secret_scanning_delegated_bypass?: "disabled" | "enabled" | undefined;
+        readonly delegated_bypass_reviewers?: readonly ({
+          readonly team: string;
+          readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
+        } | {
+          readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
+          readonly role: string;
+        })[] | undefined;
+        readonly dependabot_security_updates?: "disabled" | "enabled" | undefined;
+      } | undefined;
     };
   };
   readonly secrets: {
@@ -1274,11 +1314,6 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
   readonly rulesets: {
     readonly [x: string]: {
       readonly name: string;
-      readonly code_scanning?: readonly {
-        readonly tool: string;
-        readonly alerts: "all" | "none" | "errors" | "errors_and_warnings";
-        readonly security_alerts: "all" | "none" | "critical" | "high_or_higher" | "medium_or_higher";
-      }[] | undefined;
       readonly type: "branch";
       readonly pull_requests?: {
         readonly approvals: number;
@@ -1309,6 +1344,11 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
         readonly draft_prs?: boolean | undefined;
         readonly on_push?: boolean | undefined;
       } | undefined;
+      readonly code_scanning?: readonly {
+        readonly tool: string;
+        readonly alerts: "all" | "none" | "errors" | "errors_and_warnings";
+        readonly security_alerts: "all" | "none" | "critical" | "high_or_higher" | "medium_or_higher";
+      }[] | undefined;
       readonly workflows?: {
         readonly on_creation?: boolean | undefined;
         readonly required: readonly {
@@ -1321,9 +1361,9 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
         }[];
       } | undefined;
       readonly branch_name?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
       readonly enforcement: "disabled" | "active" | "evaluate";
@@ -1366,21 +1406,21 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
         }[];
       } | undefined;
       readonly commit_message?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
       readonly commit_author_email?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
       readonly committer_email?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
     } | {
@@ -1426,72 +1466,43 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
         }[];
       } | undefined;
       readonly commit_message?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
       readonly commit_author_email?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
       readonly committer_email?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
       readonly tag_name?: readonly {
-        readonly name?: string | undefined;
         readonly operator: "starts_with" | "ends_with" | "contains" | "regex";
         readonly pattern: string;
+        readonly name?: string | undefined;
         readonly negate?: boolean | undefined;
       }[] | undefined;
     };
   };
-  readonly owner?: string | undefined;
-  readonly settings: {
+  readonly environments: {
     readonly [x: string]: {
-      readonly [x: string]: unknown;
-      readonly is_template?: boolean | undefined;
-      readonly has_wiki?: boolean | undefined;
-      readonly has_issues?: boolean | undefined;
-      readonly has_projects?: boolean | undefined;
-      readonly has_discussions?: boolean | undefined;
-      readonly has_sponsorships?: boolean | undefined;
-      readonly has_pull_requests?: boolean | undefined;
-      readonly allow_forking?: boolean | undefined;
-      readonly allow_merge_commit?: boolean | undefined;
-      readonly allow_squash_merge?: boolean | undefined;
-      readonly allow_rebase_merge?: boolean | undefined;
-      readonly allow_auto_merge?: boolean | undefined;
-      readonly allow_update_branch?: boolean | undefined;
-      readonly squash_merge_commit_title?: "PR_TITLE" | "COMMIT_OR_PR_TITLE" | undefined;
-      readonly squash_merge_commit_message?: "PR_BODY" | "COMMIT_MESSAGES" | "BLANK" | undefined;
-      readonly merge_commit_title?: "PR_TITLE" | "MERGE_MESSAGE" | undefined;
-      readonly merge_commit_message?: "PR_TITLE" | "PR_BODY" | "BLANK" | undefined;
-      readonly delete_branch_on_merge?: boolean | undefined;
-      readonly web_commit_signoff_required?: boolean | undefined;
-      readonly security_and_analysis?: {
-        readonly advanced_security?: "enabled" | "disabled" | undefined;
-        readonly code_security?: "enabled" | "disabled" | undefined;
-        readonly secret_scanning?: "enabled" | "disabled" | undefined;
-        readonly secret_scanning_push_protection?: "enabled" | "disabled" | undefined;
-        readonly secret_scanning_ai_detection?: "enabled" | "disabled" | undefined;
-        readonly secret_scanning_non_provider_patterns?: "enabled" | "disabled" | undefined;
-        readonly secret_scanning_delegated_alert_dismissal?: "enabled" | "disabled" | undefined;
-        readonly secret_scanning_delegated_bypass?: "enabled" | "disabled" | undefined;
-        readonly delegated_bypass_reviewers?: readonly ({
-          readonly team: string;
-          readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
-        } | {
-          readonly mode?: "ALWAYS" | "EXEMPT" | undefined;
-          readonly role: string;
-        })[] | undefined;
-        readonly dependabot_security_updates?: "enabled" | "disabled" | undefined;
-      } | undefined;
+      readonly reviewers?: readonly {
+        readonly type: "Team" | "User";
+        readonly id: number;
+      }[] | undefined;
+      readonly wait_timer?: number | undefined;
+      readonly prevent_self_review?: boolean | undefined;
+      readonly deployment_branches?: "all" | "protected" | readonly {
+        readonly name: string;
+        readonly type: "branch" | "tag";
+      }[] | undefined;
     };
   };
   readonly security: {
@@ -1501,46 +1512,35 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
       readonly private_vulnerability_reporting?: boolean | undefined;
     };
   };
-  readonly code_scanning: {
-    readonly [x: string]: {
-      readonly state?: "configured" | "not-configured" | undefined;
-      readonly languages?: readonly ("actions" | "c-cpp" | "csharp" | "go" | "java-kotlin" | "javascript-typescript" | "python" | "ruby" | "swift")[] | undefined;
-      readonly query_suite?: "default" | "extended" | undefined;
-      readonly threat_model?: "remote" | "remote_and_local" | undefined;
-      readonly runner_type?: "standard" | "labeled" | undefined;
-      readonly runner_label?: string | undefined;
-    };
-  };
-  readonly log_level: "silent" | "info" | "verbose" | "debug";
   readonly groups: {
     readonly [x: string]: {
-      readonly environments?: readonly string[] | undefined;
+      readonly code_scanning?: readonly string[] | undefined;
+      readonly owner?: string | undefined;
+      readonly settings?: readonly string[] | undefined;
       readonly secrets?: {
-        readonly actions?: readonly string[] | undefined;
-        readonly dependabot?: readonly string[] | undefined;
-        readonly codespaces?: readonly string[] | undefined;
         readonly environments?: {
           readonly [x: string]: readonly string[];
         } | undefined;
+        readonly actions?: readonly string[] | undefined;
+        readonly dependabot?: readonly string[] | undefined;
+        readonly codespaces?: readonly string[] | undefined;
       } | undefined;
       readonly variables?: {
-        readonly actions?: readonly string[] | undefined;
         readonly environments?: {
           readonly [x: string]: readonly string[];
         } | undefined;
+        readonly actions?: readonly string[] | undefined;
       } | undefined;
       readonly rulesets?: readonly string[] | undefined;
-      readonly owner?: string | undefined;
+      readonly environments?: readonly string[] | undefined;
+      readonly security?: readonly string[] | undefined;
       readonly repos: readonly string[];
       readonly credentials?: string | undefined;
-      readonly settings?: readonly string[] | undefined;
-      readonly security?: readonly string[] | undefined;
-      readonly code_scanning?: readonly string[] | undefined;
       readonly cleanup?: {
-        readonly environments: boolean | {
-          readonly preserve: readonly string[];
-        };
         readonly secrets: {
+          readonly environments: boolean | {
+            readonly preserve: readonly string[];
+          };
           readonly actions: boolean | {
             readonly preserve: readonly string[];
           };
@@ -1550,21 +1550,21 @@ declare const ReposetsConfigFile: import("effect/Context").Tag<import("xdg-effec
           readonly codespaces: boolean | {
             readonly preserve: readonly string[];
           };
-          readonly environments: boolean | {
-            readonly preserve: readonly string[];
-          };
         };
         readonly variables: {
-          readonly actions: boolean | {
+          readonly environments: boolean | {
             readonly preserve: readonly string[];
           };
-          readonly environments: boolean | {
+          readonly actions: boolean | {
             readonly preserve: readonly string[];
           };
         };
         readonly rulesets: boolean | {
           readonly preserve: readonly string[];
         };
+        readonly environments: boolean | {
+          readonly preserve: readonly string[];
+        };
       } | undefined;
     };
   };
@@ -1575,14 +1575,14 @@ declare const ReposetsCredentialsFile: import("effect/Context").Tag<import("xdg-
       readonly github_token: string;
       readonly op_service_account_token?: string | undefined;
       readonly resolve?: {
-        readonly file?: {
-          readonly [x: string]: string;
-        } | undefined;
         readonly value?: {
           readonly [x: string]: string | {
             readonly [x: string]: unknown;
           };
         } | undefined;
+        readonly file?: {
+          readonly [x: string]: string;
+        } | undefined;
         readonly op?: {
           readonly [x: string]: string;
         } | undefined;
@@ -1595,14 +1595,14 @@ declare const ReposetsCredentialsFile: import("effect/Context").Tag<import("xdg-
       readonly github_token: string;
       readonly op_service_account_token?: string | undefined;
       readonly resolve?: {
-        readonly file?: {
-          readonly [x: string]: string;
-        } | undefined;
         readonly value?: {
           readonly [x: string]: string | {
             readonly [x: string]: unknown;
           };
         } | undefined;
+        readonly file?: {
+          readonly [x: string]: string;
+        } | undefined;
         readonly op?: {
           readonly [x: string]: string;
         } | undefined;
@@ -1744,7 +1744,7 @@ interface SyncEngineService {
 }
 declare const SyncEngine_base: Context.TagClass<SyncEngine, "SyncEngine", SyncEngineService>;
 declare class SyncEngine extends SyncEngine_base {}
-declare const SyncEngineLive: Layer.Layer<SyncEngine, never, CredentialResolver | GitHubClient | SyncLogger>;
+declare const SyncEngineLive: Layer.Layer<SyncEngine, never, GitHubClient | SyncLogger | CredentialResolver>;
 //#endregion
 export { AppDirs, type BypassActor, BypassActorSchema, CONFIG_FILENAME, CREDENTIALS_FILENAME, type Cleanup, CleanupSchema, type CleanupScope, CleanupScopeSchema, type Config, ConfigFile, ConfigFilesLive, ConfigSchema, type CredentialProfile, CredentialProfileSchema, CredentialResolver, CredentialResolverLive, type Credentials, CredentialsSchema, GitHubApiError, GitHubClient, GitHubClientLive, GitHubClientTest, type Group, GroupSchema, type LogLevel, LogLevelSchema, OnePasswordClient, OnePasswordClientLive, OnePasswordClientTest, OnePasswordError, type RecordedCall, ReposetsConfigFile, ReposetsCredentialsFile, ResolveError, type ResolveSection, ResolveSectionSchema, type ResolvedRef, ResolvedRefSchema, type Ruleset, type RulesetPayload, RulesetSchema, type SecretGroup, SecretGroupSchema, SyncEngine, SyncEngineLive, SyncError, SyncLogger, type SyncLoggerConfig, SyncLoggerLive, type VariableGroup, VariableGroupSchema, XdgConfigError, buildRulesetPayload, encryptSecret, makeConfigFilesLive, validateConfigRefs };
 //# sourceMappingURL=index.d.ts.map

package/lib/crypto.js

@@ -12,7 +12,7 @@ function encryptSecret(publicKey, secretValue) {
 	const messageBytes = Buffer.from(secretValue);
 	const publicKeyBytes = Buffer.from(publicKey, "base64");
 	const ephemeralKeyPair = nacl.box.keyPair();
-	const nonceInput = new Uint8Array(64);
+	const nonceInput = /* @__PURE__ */ new Uint8Array(64);
 	nonceInput.set(ephemeralKeyPair.publicKey);
 	nonceInput.set(publicKeyBytes, 32);
 	const nonce = blake2b(nonceInput, void 0, 24);

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "reposets",
-	"version": "0.4.2",
+	"version": "0.4.3",
 	"private": false,
 	"description": "CLI tool to sync GitHub repo settings, secrets and rulesets across personal repositories",
 	"keywords": [
@@ -48,12 +48,12 @@
 	"dependencies": {
 		"@1password/sdk": "^0.4.0",
 		"@effect/cli": "^0.75.2",
-		"@effect/platform": "^0.96.1",
+		"@effect/platform": "^0.96.2",
 		"@effect/platform-node": "^0.107.0",
 		"@octokit/rest": "^22.0.1",
 		"blakejs": "^1.2.1",
-		"effect": "^3.21.3",
-		"smol-toml": ">=1.6.1",
+		"effect": "^3.21.4",
+		"smol-toml": ">=1.7.0",
 		"tweetnacl": "^1.0.3",
 		"xdg-effect": "^1.0.3"
 	},

package/services/GitHubClient.js

@@ -6,13 +6,13 @@ import { Octokit } from "@octokit/rest";
 //#region src/services/GitHubClient.ts
 var GitHubClient = class extends Context.Tag("GitHubClient")() {};
 /** Settings fields that are only valid for organization-owned repositories. */
-const ORG_ONLY_SETTINGS = new Set(["allow_forking"]);
+const ORG_ONLY_SETTINGS = /* @__PURE__ */ new Set(["allow_forking"]);
 /**
 * Fields in the user-facing security_and_analysis block that GitHub's API
 * accepts as `{ status: "enabled" | "disabled" }`. The value as stored in
 * config is the literal string; we wrap it before sending.
 */
-const SAA_STATUS_FIELDS = new Set([
+const SAA_STATUS_FIELDS = /* @__PURE__ */ new Set([
 	"advanced_security",
 	"code_security",
 	"secret_scanning",

package/services/SyncEngine.js

@@ -9,7 +9,7 @@ import { isAbsolute, resolve } from "node:path";
 
 //#region src/services/SyncEngine.ts
 /** Fields that GitHub only accepts on org-owned repositories. */
-const ORG_ONLY_SAA_FIELDS = new Set([
+const ORG_ONLY_SAA_FIELDS = /* @__PURE__ */ new Set([
 	"secret_scanning_delegated_alert_dismissal",
 	"secret_scanning_delegated_bypass",
 	"delegated_bypass_reviewers"
@@ -477,7 +477,7 @@ const SyncEngineLive = Layer.effect(SyncEngine, Effect.gen(function* () {
 						}
 						if (isCleanupActive(effectiveCleanup.secrets.environments)) {
 							const preserved = getPreserveList(effectiveCleanup.secrets.environments);
-							const allEnvNames = new Set([...envRefs, ...Object.keys(envSecretMapping)]);
+							const allEnvNames = /* @__PURE__ */ new Set([...envRefs, ...Object.keys(envSecretMapping)]);
 							for (const envName of allEnvNames) {
 								const configuredNames = /* @__PURE__ */ new Set();
 								for (const ref of envSecretMapping[envName] ?? []) {
@@ -514,7 +514,7 @@ const SyncEngineLive = Layer.effect(SyncEngine, Effect.gen(function* () {
 						}
 						if (isCleanupActive(effectiveCleanup.variables.environments)) {
 							const preserved = getPreserveList(effectiveCleanup.variables.environments);
-							const allEnvVarNames = new Set([...envRefs, ...Object.keys(envVariableMapping)]);
+							const allEnvVarNames = /* @__PURE__ */ new Set([...envRefs, ...Object.keys(envVariableMapping)]);
 							for (const envName of allEnvVarNames) {
 								const configuredNames = /* @__PURE__ */ new Set();
 								for (const ref of envVariableMapping[envName] ?? []) {

package/bin/reposets.d.ts

@@ -1 +0,0 @@
-export { };