action.yml

# SPDX-FileCopyrightText: 2026 LibreCode coop and contributors
# SPDX-License-Identifier: AGPL-3.0-or-later

name: Reconcile repository rulesets
description: Plan or apply repository rulesets with the shared LibreCode governance engine

inputs:
  token:
    description: Repository-scoped GitHub token with administration permission
    required: true
  repository:
    description: Repository in OWNER/REPO form
    required: true
  config:
    description: Path to caller governance config
    required: true
  apply:
    description: Apply changes instead of dry-running
    required: false
    default: 'false'

runs:
  using: composite
  steps:
    - name: Set up Node.js
      uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
      with:
        node-version: 24
        package-manager-cache: false


    - name: Reconcile rulesets
      shell: bash
      env:
        GITHUB_TOKEN: ${{ inputs.token }}
        TARGET_REPOSITORY: ${{ inputs.repository }}
        CONFIG_PATH: ${{ inputs.config }}
        APPLY: ${{ inputs.apply }}
      working-directory: ${{ github.action_path }}
      run: |
        args=(
          --repo "$TARGET_REPOSITORY"
          --config "$CONFIG_PATH"
        )

        if [[ "$APPLY" == "true" ]]; then
          args+=(--apply)
        fi

        node src/cli.ts "${args[@]}"